last executing test programs: 10m58.601349194s ago: executing program 32 (id=109): bind$inet(0xffffffffffffffff, 0x0, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) ioprio_set$pid(0x2, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000300)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x3, 0x0, 0x1, 0x0, 0xb47, 0x9, 0x0, 0x80000001, 0x3}, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000140), 0x8417f, 0x3f00) io_uring_setup(0x707b, &(0x7f00000004c0)={0x0, 0xe58e, 0x8000, 0x2, 0x3e2}) r3 = syz_create_resource$binfmt(&(0x7f0000000040)='./file1\x00') r4 = openat$binfmt(0xffffffffffffff9c, r3, 0x42, 0x1ff) close(r4) r5 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000000), 0x20000, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_TRANSFER(r5, 0xc02064cc, &(0x7f00000001c0)={0x0, 0x0, 0xd, 0xc812, 0x5}) execveat$binfmt(0xffffffffffffff9c, r3, 0x0, 0x0, 0x0) keyctl$update(0x2, 0x0, 0x0, 0x0) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) r6 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0), 0xa0602, 0x0) writev(r6, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0, 0xff2b}], 0x2) 10m23.72181372s ago: executing program 33 (id=154): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet6_IPV6_RTHDR(r0, 0x29, 0x39, &(0x7f0000000080)=ANY=[@ANYBLOB="00020201"], 0x18) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r1, &(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8822d55593a2179}, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000000000002}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="3c010000190001000000000000000000e0000001000000000000000000000000fe8000000000000000000000000000aa4e220000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000104000000000000feffffffffffffff030000000000000000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001000000000000008400050020010000000000000000000000000000000000002b00000000000000000000000000000000000000000500000000000002000700000000000000000000000000e00000020000000000000000000000004000000033"], 0x13c}, 0x1, 0x0, 0x0, 0x20000000}, 0x20040880) sendmmsg$inet6(r0, &(0x7f0000000a80)=[{{&(0x7f0000000200)={0xa, 0x4e20, 0x4d7, @private2={0xfc, 0x2, '\x00', 0x1}, 0x3}, 0x1c, &(0x7f0000000900)=[{&(0x7f0000000400)="fc", 0x1}], 0x1}}], 0x1, 0x4c040) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0xe8001, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x2}) 9m14.83394339s ago: executing program 0 (id=259): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000214000000110001"], 0x7c}}, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x8000}, 0x4) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_STATION(r2, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0xa0000001}, 0xc, &(0x7f0000000180)={&(0x7f0000000340)=ANY=[@ANYBLOB="5400000028e4e9b3fad175fae224b706a0e258c370b6073cdc57c8f85838fbf160e51cd7eeeedb7af23a7756077dde22c4cfb14c908994792e0b4f855ce7f9f2c982eb8471e02ef5145789f39e608808242328ca96d44891ede2765ff37d04b43810301c68009ffdbb003b423573527c3afedae6e59657451b667fa6a7953e27279f40c9a8fa67da9f43ddc3ca346e0fd3ce991178f5e4d152ea626081667238266c36ef95478b6e66f7086e1e3fe21fffa5d74df7e676f9cf5012fae1e0439e04b59d0e0888b3103c5cc8014713fedb8f7592f5", @ANYRES16=0x0, @ANYBLOB="00032abd7000ffdbdf251100000005001301020000001d0013008c8192846c24966cc803968136e0968b989889b648ec0ba4b000000005001900"], 0x54}, 0x1, 0x0, 0x0, 0x10}, 0x4004004) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x201) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000), 0x20902, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000006c0)=ANY=[@ANYBLOB="800000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c000280050001000000000008000740000000011c00108008000140000000000800024000000000"], 0x80}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x38}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000003c0)={{0x14}, [@NFT_MSG_NEWRULE={0x70, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2, 0x0, 0x8}, [@NFTA_RULE_EXPRESSIONS={0x44, 0x4, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @numgen={{0xb}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_NG_DREG={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_NG_MODULUS={0x8, 0x2, 0x1, 0x0, 0x50}, @NFTA_NG_TYPE={0x8}]}}}, {0x14, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x4}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0x98}, 0x1, 0x0, 0x0, 0x850}, 0x4040080) 9m11.877867583s ago: executing program 0 (id=263): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) close(0x3) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc08000340"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={0x0}, 0x1, 0x0, 0x0, 0x4000854}, 0x40) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = socket(0x2, 0x80805, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="50000000020601080000000000000000000000000c00078008000640000000200500010006000000050005000a00000005000400000000000900020073797a31000000000c000300686173683a6970"], 0x50}}, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=ANY=[@ANYBLOB="8c0000000906010200000000000000000200ffff08000940000000390900020073797a310000000005000100070000005c0008801c0007801800018014000240", @ANYBLOB="01"], 0x8c}, 0x1, 0x0, 0x0, 0x10}, 0x20000084) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000200), r2) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0xc, &(0x7f0000000040)=@assoc_value={0x0}, &(0x7f0000000100)=0x8) setsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r3, 0x84, 0x22, &(0x7f0000000000)={0x6, 0x2, 0x4, 0x5d8f, r6}, 0x10) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f00000002c0)={'wpan1\x00'}) sendmsg$NL802154_CMD_DEL_SEC_LEVEL(r7, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={0x0, 0x40}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r8, 0x8933, &(0x7f00000001c0)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_KEY(r8, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000002c0)={0x60, r9, 0x5eae78d9c54e9d3f, 0x0, 0x25dfdbfe, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r10}, @NL802154_ATTR_SEC_KEY={0x44, 0x30, 0x0, 0x1, [@NL802154_KEY_ATTR_BYTES={0x14, 0x4, "403a050c5baee2004ef2b6d713459a7a"}, @NL802154_KEY_ATTR_ID={0x24, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_MODE={0x8}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x18, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0xffff}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0002}}]}]}, @NL802154_KEY_ATTR_USAGE_FRAMES={0x5, 0x2, 0x8}]}]}, 0x60}}, 0x0) sendmsg$NL802154_CMD_DEL_SEC_KEY(0xffffffffffffffff, &(0x7f00000006c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000680)={0x0, 0x2b8}, 0x1, 0x0, 0x0, 0x4000080}, 0x24008001) 9m10.78294851s ago: executing program 0 (id=267): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000000700)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7) r1 = getpgrp(0x0) r2 = inotify_init() ioctl$BTRFS_IOC_START_SYNC(r2, 0x80089418, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r4 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r4, 0x1, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(r4, 0x0, 0x0) r6 = socket$vsock_stream(0x28, 0x1, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(r6, 0x28, 0x0, 0x0, 0x0) symlink(&(0x7f00000000c0)='./file0/file0/..\x00', &(0x7f0000000000)='./file0\x00') execve(&(0x7f0000000040)='./file0/file0/..\x00', 0x0, 0x0) 9m7.459299471s ago: executing program 0 (id=269): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0xa, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x8) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, &(0x7f0000000280)=@IORING_OP_TIMEOUT_REMOVE={0xc, 0x0, 0x0, 0x0, 0x0, 0x23456, 0x0, 0x12, 0x1}) eventfd2(0x5, 0x1) ioperm(0x9, 0xa1d7, 0x80000004) ptrace(0x10, r2) ptrace$ARCH_MAP_VDSO_64(0x1e, r2, 0x2, 0x2003) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) io_uring_setup(0x258d, &(0x7f0000000640)={0x0, 0x4008272, 0x20000, 0x1, 0x288}) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000006c0)=ANY=[], 0x30}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) syz_clone3(&(0x7f0000000000)={0x285002400, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x46) socket$nl_generic(0x10, 0x3, 0x10) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000340)={0x400000100002f}) write$uinput_user_dev(r0, &(0x7f0000000800)={'syz1\x00', {0x0, 0x10, 0x2, 0x9}, 0xffffffff, [0x0, 0x0, 0x0, 0x40000, 0x8, 0x2, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x4000, 0x20, 0x400, 0x6, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x8, 0x0, 0x0, 0x2, 0x0, 0x0, 0x7, 0x0, 0x0, 0x9, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x296, 0x100, 0x0, 0x0, 0x0, 0x800, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x6, 0x5f1, 0x6], [0x0, 0x0, 0x8, 0x0, 0x0, 0x5, 0x0, 0x80, 0x0, 0x2, 0x0, 0x0, 0x10000000, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x7, 0xfffffffc, 0x768, 0x0, 0x7, 0x2, 0xfffffffc, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0xfffffffe, 0x400, 0x3, 0x200, 0x0, 0x0, 0xfffffffe, 0x4, 0x5, 0x0, 0x81, 0xfffffffd, 0x800, 0x32, 0x0, 0xfffffffe, 0x80000, 0x85, 0xfffffffd, 0x0, 0x9, 0x0, 0x8, 0x10, 0x0, 0x0, 0x0, 0xffff], [0x4, 0xfc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x409, 0x1, 0x0, 0x0, 0x0, 0x4, 0x1000, 0x80, 0x0, 0x4, 0x3, 0xffffffff, 0x0, 0xfffffffc, 0x0, 0x1, 0xffffffff, 0x0, 0x0, 0x9fa, 0x1, 0x0, 0x0, 0x4, 0x0, 0x0, 0x925, 0x0, 0x0, 0x3, 0x0, 0x5, 0x0, 0x0, 0xbda6, 0x0, 0xa3, 0x0, 0x0, 0x2, 0x0, 0x800, 0xfffeffe4, 0x4, 0x0, 0x4, 0x0, 0x0, 0x0, 0xfff, 0x6, 0x0, 0x0, 0x0, 0x0, 0x8], [0x5, 0x0, 0x635, 0x0, 0x8000000, 0x3, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x40, 0x9, 0x4, 0xbd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x200000, 0xfffffffd, 0x6, 0x9, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x8000, 0x0, 0x101, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xcaa, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x4]}, 0x45c) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) ioctl$UI_DEV_CREATE(r0, 0x5501) 9m3.396293601s ago: executing program 0 (id=284): socket$igmp(0x2, 0x3, 0x2) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x6, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40}, 0x90) socket$nl_route(0x10, 0x3, 0x0) r0 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/mm/ksm/run\x00', 0x1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) r4 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r4) ptrace$setregs(0xf, r4, 0x0, &(0x7f00000003c0)) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, &(0x7f0000000ec0)=@raw={'raw\x00', 0x8, 0x3, 0x538, 0x358, 0xffffffff, 0xffffffff, 0x358, 0xffffffff, 0x618, 0xffffffff, 0xffffffff, 0x618, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0x2d8, 0x300, 0x0, {}, [@common=@unspec=@bpf1={{0x230}, @pinned={0x1, 0x0, 0x0, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa', {0x6}}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00'}, 0x0, 0x100, 0x168, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0xc4, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x8000, 0x16a, 0x1, 'syz1\x00', 'syz0\x00', {0x80000001}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x598) syz_clone3(&(0x7f0000000740)={0x8180080, 0x0, 0x0, 0x0, {0x39}, 0x0, 0x0, 0x0, &(0x7f00000005c0)=[0xffffffffffffffff], 0x1}, 0x58) write$sysctl(r0, &(0x7f0000000000)='2\x00', 0x2) 9m1.918541198s ago: executing program 0 (id=276): bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="190000000400000008000000"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x6, 0xd, &(0x7f0000000200)=ANY=[@ANYBLOB, @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb7"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) socket$nl_netfilter(0x10, 0x3, 0xc) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f00000018c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@bridge_delneigh={0x1c, 0x1e, 0x1, 0x0, 0x0, {0x7, 0x0, 0x0, 0x0, 0x0, 0x20}}, 0x1c}}, 0x0) sendto$packet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0x3100, 0x0, &(0x7f0000000000), 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r7 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r7, 0x4601, &(0x7f0000000380)={0x3c0, 0x78, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x1, 0x4, 0x8, 0x3, 0x1ff, 0x3d, 0x5, 0x3, 0x53, 0x202, 0x1, 0xc}) 8m45.877227991s ago: executing program 34 (id=276): bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="190000000400000008000000"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x6, 0xd, &(0x7f0000000200)=ANY=[@ANYBLOB, @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb7"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) socket$nl_netfilter(0x10, 0x3, 0xc) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f00000018c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@bridge_delneigh={0x1c, 0x1e, 0x1, 0x0, 0x0, {0x7, 0x0, 0x0, 0x0, 0x0, 0x20}}, 0x1c}}, 0x0) sendto$packet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0x3100, 0x0, &(0x7f0000000000), 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r7 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r7, 0x4601, &(0x7f0000000380)={0x3c0, 0x78, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x1, 0x4, 0x8, 0x3, 0x1ff, 0x3d, 0x5, 0x3, 0x53, 0x202, 0x1, 0xc}) 7m57.682119574s ago: executing program 5 (id=353): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000380)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) r5 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) connect$can_bcm(r5, &(0x7f00000000c0)={0x1d, r6}, 0x10) sendmsg$can_bcm(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="0100000003ece1e40ad8871461ab0800", @ANYRES64=0x0, @ANYRESDEC, @ANYRES64=0x0, @ANYRES64=r4], 0x20000600}, 0x1, 0x0, 0x0, 0x40000}, 0x1) ioctl$TIOCSETD(r3, 0x5423, &(0x7f00000001c0)=0xf) r7 = fcntl$dupfd(r3, 0x0, r3) ioctl$TCFLSH(r3, 0x400455c8, 0x1) ioctl$TIOCSETD(r7, 0x5412, &(0x7f0000000140)=0xffffffc0) r8 = socket$inet6_sctp(0xa, 0x801, 0x84) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r8, 0x84, 0x72, &(0x7f0000001100)={0x0, 0x5}, &(0x7f0000001140)=0xc) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000400)=@bpf_lsm={0x6, 0x5, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) syz_mount_image$ext4(&(0x7f00000005c0)='ext4\x00', &(0x7f0000000600)='./file0\x00', 0x0, &(0x7f0000000640), 0x1, 0x5a8, &(0x7f0000000680)="$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") 7m54.720914967s ago: executing program 5 (id=357): r0 = socket$nl_generic(0x10, 0x3, 0x10) openat$ppp(0xffffff9c, &(0x7f0000000300), 0x400c01, 0x0) socket$unix(0x1, 0x5, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000001c0)={'wlan0\x00'}) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000040)={0xffffffffffffffff}, 0x2, 0x3}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r2, &(0x7f00000002c0)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f0000000280)=0x1, r3, 0x0, 0x1, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r2, &(0x7f0000000180)={0x3, 0x40, 0xfa00, {{0xa, 0x4e23, 0xe, @empty, 0x2}, {0xa, 0x4e23, 0x7, @remote, 0x3}, r3, 0x7}}, 0x48) r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x3, &(0x7f00000000c0)={0xffffffffffffffff}, 0x2, 0x9}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r4, &(0x7f0000000540)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f0000000100)=0x1, r5, 0x0, 0x1, 0x4}}, 0x20) r6 = socket$alg(0x26, 0x5, 0x0) setsockopt$ALG_SET_KEY(r6, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef", 0x11) write$RDMA_USER_CM_CMD_BIND_IP(r4, &(0x7f0000000140)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e23, 0x6, @loopback, 0x3}, r5}}, 0x30) write$RDMA_USER_CM_CMD_LISTEN(r4, &(0x7f0000000240)={0x7, 0x8, 0xfa00, {r5, 0x7}}, 0x10) r7 = openat$sequencer(0xffffffffffffff9c, 0x0, 0x60042, 0x0) write$binfmt_elf64(r7, &(0x7f0000000180)=ANY=[@ANYBLOB="7f454c460e02f9b7ff7f00000000000002000300fffeffffdf02000000000000400000000000000003030000000000000000000008003a00011d040004000d0003000000008000000000000000000000070000000000000008000000000000000500000000000000020400"], 0x78) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)={0x60, 0x2, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_TYPENAME={0x10, 0x3, 'bitmap:port\x00'}, @IPSET_ATTR_DATA={0x24, 0x7, 0x0, 0x1, [@IPSET_ATTR_PORT_TO={0x6}, @IPSET_ATTR_PORT={0x6}, @IPSET_ATTR_CADT_FLAGS={0x8}, @IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x3ff}]}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}]}, 0x60}}, 0x0) rt_sigtimedwait(&(0x7f0000000100)={[0x3ff]}, 0x0, 0x0, 0x8) ioctl$SNDCTL_SEQ_SYNC(r7, 0x5101) sendmsg$NL80211_CMD_SET_INTERFACE(r0, 0x0, 0x42004) 7m52.911203451s ago: executing program 5 (id=361): syz_open_dev$media(&(0x7f0000000380), 0x10, 0x101000) syz_open_dev$media(&(0x7f0000000300), 0x0, 0x0) openat$sysfs(0xffffff9c, &(0x7f0000000100)='/sys/kernel/notes', 0x0, 0x15) socket$inet_icmp_raw(0x2, 0x3, 0x1) socket$nl_netfilter(0x10, 0x3, 0xc) syz_open_dev$vim2m(&(0x7f0000000200), 0x315, 0x2) syz_open_dev$radio(0x0, 0xffffffffffffffff, 0x2) r0 = socket$nl_generic(0x10, 0x3, 0x10) ftruncate(0xffffffffffffffff, 0xffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x103}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) setsockopt$inet6_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x29, 0x6, 0x0, 0x0) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x6) socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_PORT_GET(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000080)={0x3c, r4, 0x1, 0x70bd25, 0x25dfdbfe, {0x39}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x73, 0x1}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x80}, 0x4004810) 7m51.793278058s ago: executing program 5 (id=362): syz_open_dev$video(0x0, 0x8, 0x0) sendmsg$AUDIT_DEL_RULE(0xffffffffffffffff, 0x0, 0x20008080) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x90) getdents64(r3, 0x0, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x8002, 0x0) io_setup(0x4, &(0x7f00000003c0)) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct]}}, 0x0, 0x26}, 0x20) r4 = socket$inet6(0xa, 0x80002, 0x0) getpid() syz_emit_ethernet(0x95, &(0x7f00000003c0)=ANY=[], 0x0) setsockopt$SO_TIMESTAMPING(r4, 0x1, 0x25, &(0x7f0000000000)=0x6d93, 0x4) sendmsg$sock(r4, &(0x7f0000000780)={&(0x7f0000000040)=@in6={0xa, 0x4e28, 0x401, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x41}}, 0xb}, 0x80, 0x0}, 0x0) fsopen(0x0, 0x0) 7m50.327019574s ago: executing program 5 (id=366): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000000700)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7) r1 = getpgrp(0x0) r2 = inotify_init() ioctl$BTRFS_IOC_START_SYNC(r2, 0x80089418, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r4 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r4, 0x1, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(r4, 0x0, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(0xffffffffffffffff, 0x28, 0x0, 0x0, 0x0) ioprio_set$pid(0x2, 0x0, 0x2000) symlink(&(0x7f00000000c0)='./file0/file0/..\x00', &(0x7f0000000000)='./file0\x00') execve(&(0x7f0000000040)='./file0/file0/..\x00', 0x0, 0x0) 7m48.787034902s ago: executing program 5 (id=367): r0 = syz_open_dev$vim2m(&(0x7f0000000080), 0x1, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f00000000c0)={0x1, @pix={0x0, 0xcf8, 0x34424752, 0x9, 0x0, 0x0, 0x0, 0xfffffffd}}) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000040)={0x80000001, 0x1, 0x4}) bpf$PROG_LOAD(0x5, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x2) read$msr(0xffffffffffffffff, 0x0, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) openat$binderfs(0xffffffffffffff9c, 0x0, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000008c80)=ANY=[@ANYBLOB="2c00000026000506"], 0x2c}}, 0x800) recvmmsg(r2, &(0x7f0000007700), 0x318, 0xfc0, 0x0) ioctl$vim2m_VIDIOC_STREAMOFF(r0, 0x40045612, &(0x7f0000000240)=0x1) write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(0xffffffffffffffff, &(0x7f0000000100)={0x10, 0x30, 0xfa00, {0x0, 0x3, {0xa, 0x4e22, 0xffff, @local, 0x9}}}, 0x38) 7m33.401464449s ago: executing program 35 (id=367): r0 = syz_open_dev$vim2m(&(0x7f0000000080), 0x1, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f00000000c0)={0x1, @pix={0x0, 0xcf8, 0x34424752, 0x9, 0x0, 0x0, 0x0, 0xfffffffd}}) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000040)={0x80000001, 0x1, 0x4}) bpf$PROG_LOAD(0x5, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x2) read$msr(0xffffffffffffffff, 0x0, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) openat$binderfs(0xffffffffffffff9c, 0x0, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000008c80)=ANY=[@ANYBLOB="2c00000026000506"], 0x2c}}, 0x800) recvmmsg(r2, &(0x7f0000007700), 0x318, 0xfc0, 0x0) ioctl$vim2m_VIDIOC_STREAMOFF(r0, 0x40045612, &(0x7f0000000240)=0x1) write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(0xffffffffffffffff, &(0x7f0000000100)={0x10, 0x30, 0xfa00, {0x0, 0x3, {0xa, 0x4e22, 0xffff, @local, 0x9}}}, 0x38) 4m52.594633496s ago: executing program 8 (id=556): r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_SET_TSC_KHZ_vm(r0, 0xaea2, 0x4000009) ioctl$KVM_SET_LAPIC(0xffffffffffffffff, 0x4400ae8f, &(0x7f00000001c0)={"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"}) socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, 0x0, 0x0) listen(0xffffffffffffffff, 0xc) listen(0xffffffffffffffff, 0x2) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000001900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x41, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3d}, 0x94) sendmsg$RDMA_NLDEV_CMD_SYS_SET(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000480)=ANY=[@ANYBLOB="1800000007140100000032c83a1100"], 0x18}}, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r2 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_SYS_SET(r2, &(0x7f0000000440)={0x0, 0x0, 0x0}, 0x20040894) syz_usb_connect(0x2, 0x2d, 0x0, 0x0) 4m50.927450637s ago: executing program 8 (id=561): sendmsg$inet(0xffffffffffffffff, &(0x7f0000003c00)={0x0, 0x0, &(0x7f00000039c0)=[{&(0x7f0000000600)="447df50ce4033a7b5ad00b83244c00b711803e7cca2504a2600da98efff9e7d67f87b17ffd582b04d632ebd866f28678899ae0d6306cd39420b7b7f78deaaf2908c2a5726f2c50", 0x47}, {&(0x7f00000006c0)="080c0434", 0x4}, {&(0x7f0000000780)="4274aa814c8f6ea8d8db43178dd2f41ef596a3ca465412910e05cba0f5d97e67886d55be18cac95a1aa093479596c3613670aaf2a3b1edc465bedfdb5156035719c0baa8bb8bf2a825ec04f424dda801fea000f41edc43511e9c8bf89656071e91ae4c356d6a9ca608af6b83cc9f3d9ae37c2bfab2e5708062c659e44272215dba2195d826f9fd3b46efe6524229e48a311e4aab2a2e", 0x96}, {&(0x7f0000000880)="a1755527af3bc7c4671ac86bf0a2338efb5db19ac572af50", 0x18}], 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="ac1414bb0000000000000000140000000000000000000000020000000600000000000000d8000000000000000000000007000000072b52000000000a0101020a010100ac14141b640101020a010102ac1414bbac14143ee000000200000000071731ac14143cac1e0101e0000002ac1414aaffffffff442cdf11ac1e010100000005ffffffff00000002ac"], 0x1a0}, 0x41) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x82, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) syz_emit_vhci(&(0x7f0000000340)=ANY=[], 0xd) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r3 = accept4(r2, 0x0, 0x0, 0x800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="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", 0xf91}], 0x1, 0x1, 0x2) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 4m45.141389488s ago: executing program 8 (id=568): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0xa, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x8) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, &(0x7f0000000280)=@IORING_OP_TIMEOUT_REMOVE={0xc, 0x0, 0x0, 0x0, 0x0, 0x23456, 0x0, 0x12, 0x1}) eventfd2(0x5, 0x1) ioperm(0x9, 0xa1d7, 0x80000004) ptrace(0x10, r2) ptrace$ARCH_MAP_VDSO_64(0x1e, r2, 0x2, 0x2003) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) io_uring_setup(0x258d, &(0x7f0000000640)={0x0, 0x4008272, 0x20000, 0x1, 0x288}) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000006c0)=ANY=[], 0x30}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) socket$nl_generic(0x10, 0x3, 0x10) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000340)={0x400000100002f}) write$uinput_user_dev(r0, &(0x7f0000000800)={'syz1\x00', {0x0, 0x10, 0x2, 0x9}, 0xffffffff, [0x0, 0x0, 0x0, 0x40000, 0x8, 0x2, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x4000, 0x20, 0x400, 0x6, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x8, 0x0, 0x0, 0x2, 0x0, 0x0, 0x7, 0x0, 0x0, 0x9, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x296, 0x100, 0x0, 0x0, 0x0, 0x800, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x6, 0x5f1, 0x6], [0x0, 0x0, 0x8, 0x0, 0x0, 0x5, 0x0, 0x80, 0x0, 0x2, 0x0, 0x0, 0x10000000, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x7, 0xfffffffc, 0x768, 0x0, 0x7, 0x2, 0xfffffffc, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0xfffffffe, 0x400, 0x3, 0x200, 0x0, 0x0, 0xfffffffe, 0x4, 0x5, 0x0, 0x81, 0xfffffffd, 0x800, 0x32, 0x0, 0xfffffffe, 0x80000, 0x85, 0xfffffffd, 0x0, 0x9, 0x0, 0x8, 0x10, 0x0, 0x0, 0x0, 0xffff], [0x4, 0xfc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x409, 0x1, 0x0, 0x0, 0x0, 0x4, 0x1000, 0x80, 0x0, 0x4, 0x3, 0xffffffff, 0x0, 0xfffffffc, 0x0, 0x1, 0xffffffff, 0x0, 0x0, 0x9fa, 0x1, 0x0, 0x0, 0x4, 0x0, 0x0, 0x925, 0x0, 0x0, 0x3, 0x0, 0x5, 0x0, 0x0, 0xbda6, 0x0, 0xa3, 0x0, 0x0, 0x2, 0x0, 0x800, 0xfffeffe4, 0x4, 0x0, 0x4, 0x0, 0x0, 0x0, 0xfff, 0x6, 0x0, 0x0, 0x0, 0x0, 0x8], [0x5, 0x0, 0x635, 0x0, 0x8000000, 0x3, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x40, 0x9, 0x4, 0xbd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x200000, 0xfffffffd, 0x6, 0x9, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x8000, 0x0, 0x101, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xcaa, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x4]}, 0x45c) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) ioctl$UI_DEV_CREATE(r0, 0x5501) 4m43.188824626s ago: executing program 8 (id=570): r0 = creat(0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x20000008, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) syz_clone(0x600, 0x0, 0x33, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000032680)=""/102400, 0x19000) socket$nl_route(0x10, 0x3, 0x0) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) r4 = syz_open_dev$dri(&(0x7f0000000000), 0x1ff, 0x0) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000000)=[{0x6, 0x6, 0xfe, 0x7fff0006}]}) r6 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000240), 0xa8203, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r6, 0xc0184800, &(0x7f0000000080)={0x20004, r5, 0x2}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r4, 0xc00c642e, &(0x7f0000000440)={0x0, 0x0, r7}) ioctl$DMA_BUF_IOCTL_SYNC(r7, 0x40086200, &(0x7f0000000100)=0x2) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r3, 0x84, 0x76, 0x0, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, 0x0, 0x0) ioctl$XFS_IOC_ATTRLIST_BY_HANDLE(r0, 0x4058587a, &(0x7f0000000480)={{r0, &(0x7f0000000000)='/dev/cpu/#/msr\x00', 0x200000, 0x0, 0x6, &(0x7f0000000340), &(0x7f0000000380)=0x4}, {[0x6, 0x7, 0x4, 0x9]}, 0xd57, 0x80, &(0x7f0000000400)=""/128}) r8 = socket$alg(0x26, 0x5, 0x0) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, 0x0) r9 = accept4(r8, 0x0, 0x0, 0x0) sendto$l2tp6(r9, &(0x7f0000000540)="d4fa31268bc8cc9901bbf4b0131693ed63029176f795e3cb6c941daf97260ba42bfcfeb9bcd1d6ab0cfab396f4fa86afd5fb685b5de04369ecb83a5e6655f3cf0f7fe71129283a114061057aff030000de3060e404bc6e1b883c6e424d833b6a394fff94a77d8500", 0x68, 0x10, 0x0, 0x0) 4m40.822382085s ago: executing program 8 (id=573): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000000700)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7) r1 = getpgrp(0x0) r2 = inotify_init() ioctl$BTRFS_IOC_START_SYNC(r2, 0x80089418, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r4 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(r4, 0x0, 0x0) r6 = socket$vsock_stream(0x28, 0x1, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(r6, 0x28, 0x0, 0x0, 0x0) ioprio_set$pid(0x2, 0x0, 0x2000) symlink(&(0x7f00000000c0)='./file0/file0/..\x00', &(0x7f0000000000)='./file0\x00') execve(&(0x7f0000000040)='./file0/file0/..\x00', 0x0, 0x0) 4m36.051386292s ago: executing program 8 (id=579): socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) ioctl$SNDRV_SEQ_IOCTL_GET_PORT_INFO(0xffffffffffffffff, 0xc0a85322, 0x0) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f00000000c0)=0x10000000005) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(r2, 0x0, 0x0) flock(0xffffffffffffffff, 0x1) openat$tun(0xffffffffffffff9c, 0x0, 0x480100, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f00000060c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=[{0x18, 0x29, 0x3, 'L~'}], 0x18}}], 0x1, 0x0) r4 = socket$inet6_udplite(0xa, 0x2, 0x88) connect$inet6(r4, &(0x7f00000000c0)={0xa, 0x4e21, 0x679, @dev={0xfe, 0x80, '\x00', 0x3a}, 0x1}, 0x1c) sendmmsg$inet6(r4, &(0x7f0000005400)=[{{&(0x7f0000000040)={0xa, 0x4e27, 0xfff, @remote, 0x2}, 0x1c, 0x0}}], 0x40000000000016d, 0x1000) 4m19.957450146s ago: executing program 36 (id=579): socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) ioctl$SNDRV_SEQ_IOCTL_GET_PORT_INFO(0xffffffffffffffff, 0xc0a85322, 0x0) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f00000000c0)=0x10000000005) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(r2, 0x0, 0x0) flock(0xffffffffffffffff, 0x1) openat$tun(0xffffffffffffff9c, 0x0, 0x480100, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f00000060c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=[{0x18, 0x29, 0x3, 'L~'}], 0x18}}], 0x1, 0x0) r4 = socket$inet6_udplite(0xa, 0x2, 0x88) connect$inet6(r4, &(0x7f00000000c0)={0xa, 0x4e21, 0x679, @dev={0xfe, 0x80, '\x00', 0x3a}, 0x1}, 0x1c) sendmmsg$inet6(r4, &(0x7f0000005400)=[{{&(0x7f0000000040)={0xa, 0x4e27, 0xfff, @remote, 0x2}, 0x1c, 0x0}}], 0x40000000000016d, 0x1000) 3m41.842065313s ago: executing program 1 (id=650): syz_open_dev$video(0x0, 0x8, 0x0) sendmsg$AUDIT_DEL_RULE(0xffffffffffffffff, 0x0, 0x20008080) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x90) getdents64(r3, 0x0, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x8002, 0x0) io_setup(0x4, &(0x7f00000003c0)) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct]}}, 0x0, 0x26}, 0x20) r4 = socket$inet6(0xa, 0x80002, 0x0) getpid() syz_emit_ethernet(0x95, &(0x7f00000003c0)=ANY=[], 0x0) setsockopt$SO_TIMESTAMPING(r4, 0x1, 0x25, &(0x7f0000000000)=0x6d93, 0x4) sendmsg$sock(r4, &(0x7f0000000780)={&(0x7f0000000040)=@in6={0xa, 0x4e28, 0x401, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x41}}, 0xb}, 0x80, 0x0}, 0x0) fsopen(0x0, 0x0) 3m38.430279106s ago: executing program 1 (id=640): r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x80, 0x0, 0x3}, 0x10) sendmsg$nl_route(r0, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000940)={&(0x7f0000000140)=ANY=[@ANYBLOB, @ANYRES32=0x0, @ANYBLOB="1400060003f5ffff01"], 0x2c}, 0x1, 0x0, 0x0, 0x40000}, 0x20000000) openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x4900, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setaffinity(0x0, 0x0, 0x0) mmap(&(0x7f00004d1000/0x3000)=nil, 0x3000, 0xb635773f06ebbee7, 0x10, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x1, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x400000000000041, 0x0) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_ro(r1, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) write$cgroup_int(r2, &(0x7f0000000200)=0x1, 0x12) mkdir(&(0x7f0000000000)='./cgroup/../file0/file0\x00', 0x0) mkdir(&(0x7f00000001c0)='./cgroup/../file0/file0/file0\x00', 0x0) rmdir(&(0x7f00000000c0)='./cgroup/../file0/file0/file0\x00') r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = openat$cgroup_ro(r3, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) write$cgroup_int(r4, &(0x7f0000000100)=0x1, 0x12) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x80000000000002) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) syz_emit_ethernet(0x3e, &(0x7f0000000100)=ANY=[@ANYBLOB], 0x0) 3m36.320887968s ago: executing program 2 (id=646): syz_mount_image$fuse(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$fuse(0x0, 0x0, 0x3000009, 0x0, 0x1, 0x0, 0x0) prctl$PR_SET_SECUREBITS(0x1c, 0x2c) r0 = fsopen(&(0x7f0000000040)='cgroup2\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x82) fchdir(r1) socket(0x10, 0x3, 0x0) syz_mount_image$exfat(&(0x7f0000000040), &(0x7f0000000000)='./bus\x00', 0x10000, &(0x7f0000000100)={[{@iocharset={'iocharset', 0x3d, 'cp869'}}, {@errors_continue}, {@utf8}], [{@flag='sync'}]}, 0x1, 0x1535, &(0x7f00000001c0)="$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") sched_setscheduler(0x0, 0x2, 0x0) getpid() close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) pselect6(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x0, 0x0) r2 = socket(0x10, 0x803, 0x2) arch_prctl$ARCH_SHSTK_LOCK(0x5003, 0x0) syz_genetlink_get_family_id$mptcp(0x0, r2) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) fchown(r3, 0x0, 0xee01) fchmodat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0xfffffffb) setuid(0xee01) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x14e174135c0b87af) 3m36.117888623s ago: executing program 1 (id=647): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) write$FUSE_CREATE_OPEN(0xffffffffffffffff, &(0x7f0000002bc0)={0xa0, 0x0, 0x0, {{0xffffffffffffffff, 0x0, 0x5, 0x6, 0x8ca9, 0x4, {0x3, 0x6, 0x5, 0x2, 0xa065, 0xfffffffffffffffa, 0x519e, 0x7ff, 0xfffffffd, 0x4000, 0x80, 0xee00, 0xffffffffffffffff, 0x0, 0xf35a}}, {0x0, 0x1}}}, 0xa0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, 0x0, 0x0) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc", 0x8) r2 = accept4(r1, 0x0, 0x0, 0x80000) sendmmsg$alg(r2, &(0x7f0000000180)=[{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f00000015c0)="c295c5ab29caa299583d", 0xa}], 0x1, 0x0, 0x0, 0xc0}], 0x1, 0x0) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r3 = fsopen(0x0, 0x0) sendmsg$NFNL_MSG_CTHELPER_NEW(r2, &(0x7f00000006c0)={0x0, 0x0, 0x0}, 0x24044004) fsconfig$FSCONFIG_SET_STRING(r3, 0x1, &(0x7f0000000b40)='source', &(0x7f0000000040)='c:::\x00', 0x0) ioctl$UI_SET_EVBIT(0xffffffffffffffff, 0x40045564, 0x3) r4 = gettid() fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) tkill(r4, 0xb) sendmsg$IPCTNL_MSG_CT_GET_STATS_CPU(0xffffffffffffffff, 0x0, 0x10) 3m34.399197724s ago: executing program 1 (id=655): r0 = syz_open_dev$vim2m(&(0x7f0000000080), 0x1, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f00000000c0)={0x1, @pix={0x0, 0xcf8, 0x34424752, 0x9, 0x0, 0x0, 0x0, 0xfffffffd}}) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000040)={0x80000001, 0x1, 0x4}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x2) read$msr(0xffffffffffffffff, 0x0, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) openat$binderfs(0xffffffffffffff9c, 0x0, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000008c80)=ANY=[@ANYBLOB="2c00000026000506"], 0x2c}}, 0x800) recvmmsg(r2, &(0x7f0000007700), 0x318, 0xfc0, 0x0) ioctl$vim2m_VIDIOC_STREAMOFF(r0, 0x40045612, &(0x7f0000000240)=0x1) write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(0xffffffffffffffff, &(0x7f0000000100)={0x10, 0x30, 0xfa00, {0x0, 0x3, {0xa, 0x4e22, 0xffff, @local, 0x9}}}, 0x38) 3m32.015284762s ago: executing program 1 (id=657): syz_mount_image$vfat(&(0x7f0000000240), &(0x7f0000000280)='./file0\x00', 0x8000, &(0x7f0000000740)=ANY=[@ANYBLOB="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", @ANYBLOB="5490f41e89db5c6987bb89944e3ce8a9d74aa557beeb12bf7bf4a19bec956b719f048f1e043475577b7adb3114dbb00a614a03808dfe14f5f5c2dd1b71c4d5a6a09435057b932b0b", @ANYRESHEX], 0x3, 0x240, &(0x7f0000000500)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) ptrace(0x10, 0x1) r3 = syz_open_dev$sndpcmc(&(0x7f0000000140), 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_DRAIN(r3, 0x4144, 0x0) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/asound/timers\x00', 0x0, 0x0) read$FUSE(r4, &(0x7f0000000480)={0x2020}, 0x2020) lseek(r4, 0xfffffffffffffff5, 0x1) inotify_init() mknod$loop(&(0x7f0000001b80)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x1) syz_emit_vhci(&(0x7f0000000040)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x0, 0x0, 0x18}, @l2cap_cid_le_signaling={{0x14}, @l2cap_ecred_reconf_req={{0x19, 0x3, 0x10}, {0xffbd, 0xff46, [0x0, 0xd, 0x8e, 0x9, 0x4, 0x5]}}}}, 0x1d) syz_emit_ethernet(0x6a, &(0x7f0000000000)={@local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x5c, 0x65, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e22, 0x48, 0x0, @wg=@cookie={0x3, 0x1, "22995ac113fd02e7f376e7d6b2456c7ba350649f5116310d", "968826ce34c5f5d2a37b95275369010d2b4caf20b4ebfdfb61c7b8249315089f"}}}}}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x10) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="f001000000010104200000000000000002000000240001801400018008000100e000000108000200000000000c0002800500010000000000240002800c00028005000100000000001400018008000100e000000108000200ac1e000108000740000000000800084000"], 0x1f0}}, 0x0) 3m31.003513487s ago: executing program 2 (id=659): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x8000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) mount(0x0, 0x0, &(0x7f0000000070)='sysfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x1, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./config\x00', 0x1ed) mount(0x0, &(0x7f0000000500)='./config\x00', &(0x7f0000000600)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000700)='./config/usb_gadget/g1\x00', 0x1ed) r2 = openat(0xffffffffffffff9c, &(0x7f0000000800)='./config/usb_gadget/g1/idVendor\x00', 0x1, 0x0) close(r2) r3 = openat(0xffffffffffffff9c, &(0x7f0000000a00)='./config/usb_gadget/g1/idProduct\x00', 0x1, 0x0) write(r3, &(0x7f0000000b00), 0x0) close(r2) mkdirat(0xffffffffffffff9c, &(0x7f0000000c00)='./config/usb_gadget/g1/functions/uvc.usb0\x00', 0x1ed) mkdirat(0xffffffffffffff9c, &(0x7f0000000d00)='./config/usb_gadget/g1/functions/uvc.usb0/control/header/h\x00', 0x1ed) symlinkat(&(0x7f0000000e00)='./config/usb_gadget/g1/functions/uvc.usb0/control/header/h\x00', 0xffffffffffffff9c, &(0x7f0000000f00)='./config/usb_gadget/g1/functions/uvc.usb0/control/class/fs/h\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000001200)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/header/h\x00', 0x1ed) mkdirat(0xffffffffffffff9c, 0x0, 0x1ed) mkdirat(0xffffffffffffff9c, &(0x7f0000001400)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/uncompressed/u/360p\x00', 0x1ed) symlinkat(&(0x7f0000001700)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/header/h\x00', 0xffffffffffffff9c, &(0x7f0000001800)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/class/fs/h\x00') symlinkat(0x0, 0xffffffffffffff9c, 0x0) symlinkat(&(0x7f0000001b00)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/header/h\x00', 0xffffffffffffff9c, &(0x7f0000001c00)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/class/ss/h\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000001d00)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ed) symlinkat(&(0x7f0000001e00)='./config/usb_gadget/g1/functions/uvc.usb0\x00', 0xffffffffffffff9c, &(0x7f0000001f00)='./config/usb_gadget/g1/configs/c.1/uvc.usb0\x00') 3m30.86457133s ago: executing program 1 (id=660): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) r1 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x1) r2 = fsmount(r1, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r3 = getpid() sched_setscheduler(r3, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbee7, 0x8031, 0xffffffffffffffff, 0x84c18000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) setsockopt$MRT_INIT(0xffffffffffffffff, 0x0, 0xc8, &(0x7f0000000180), 0x4) setsockopt$MRT_ADD_MFC_PROXY(0xffffffffffffffff, 0x0, 0xd2, &(0x7f0000000040)={@broadcast, @multicast1, 0x1, "0d5011f02b7fab96e0aa834d3a9e7cfc12178ac0ab1e6227c2b6ddaa5effda90", 0x5, 0x16, 0xfffffffe, 0x1}, 0x3c) r6 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$FBIOPUT_CON2FBMAP(r6, 0x4605, &(0x7f0000000040)) r7 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_MFC_PROXY(r7, 0x0, 0xd2, &(0x7f0000000000)={@broadcast, @multicast1, 0x0, "12ceaac82ab7d944e84b6fbd6178697e3b10c9b81bede26c85ee73daab4158e8", 0x2, 0x6, 0x4, 0x4}, 0x3c) setsockopt$MRT_FLUSH(r7, 0x0, 0xd4, &(0x7f0000000100)=0xe, 0x4) r8 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r9 = openat$cgroup(r2, 0x0, 0x200002, 0x0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000400)={r8, r9, 0x15, 0x0, @void}, 0x32) getsockopt$inet_mptcp_buf(r0, 0x29, 0x4, 0x0, 0x0) 3m28.610236665s ago: executing program 2 (id=664): sendmsg$nl_crypto(0xffffffffffffffff, 0x0, 0x4040) r0 = socket$nl_crypto(0x10, 0x3, 0x15) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) write$cgroup_devices(0xffffffffffffffff, 0x0, 0xa) r3 = socket$vsock_stream(0x28, 0x1, 0x0) r4 = syz_open_dev$vbi(&(0x7f0000000040), 0x0, 0x2) ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(r4, 0xc0845657, &(0x7f00000007c0)={0x0, @bt={0xa8c, 0x870, 0x1, 0xdf9e32a0640bc3f8, 0xd59f82, 0x19f5, 0xacc, 0xb, 0x0, 0x8, 0x27fd, 0x7fff, 0x440, 0x3, 0xd, 0x22, {0x45, 0x80}, 0xcd, 0x3}}) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r5 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r5, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) getpgid(0xffffffffffffffff) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r6, 0x84, 0x15, 0x0, 0x0) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000005440)={&(0x7f0000000340)=@kern={0x10, 0x0, 0x0, 0x10000}, 0xc, 0x0, 0x0, &(0x7f0000005380)=[@rights={{0x10}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, r3, r2]}}], 0x70, 0xc000}, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r6, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x401, @loopback}], 0x1c) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1000005, 0x100013, 0xffffffffffffffff, 0x7f571000) ioctl$KDFONTOP_SET(r1, 0x4b72, &(0x7f0000000180)={0x0, 0x1, 0x12, 0x6, 0x200, &(0x7f0000000880)="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"}) sendmsg$nl_crypto(r0, &(0x7f00000001c0)={0x0, 0x2, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="f0000000120003"], 0xf0}}, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) 3m25.51585991s ago: executing program 2 (id=676): open(&(0x7f00000000c0)='./bus\x00', 0x18d03e, 0x0) open(&(0x7f00000004c0)='./bus\x00', 0xc2802, 0x181) quotactl_fd$Q_SETINFO(0xffffffffffffffff, 0xffffffff80000600, 0x0, 0x0) socket$nl_generic(0x11, 0x3, 0x10) syz_emit_ethernet(0x2a, &(0x7f0000000280)=ANY=[@ANYBLOB="0180c200000000000000000008004500001c0000000010029078ac1e0001e000000111009078e0000001144a1ba2"], 0x0) prlimit64(0x0, 0xc, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$packet(0x11, 0x3, 0x300) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) connect$packet(r1, &(0x7f0000000200)={0x1f, 0xf8, 0x0, 0x1, 0x2}, 0x14) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, 0x0) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x3) syz_genetlink_get_family_id$smc(&(0x7f0000000000), 0xffffffffffffffff) r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$SMC_PNETID_DEL(r2, 0x0, 0x4000) 3m23.382299722s ago: executing program 2 (id=668): r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x101000, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(cipher_null)\x00'}, 0x58) r6 = accept$alg(r5, 0x0, 0x0) r7 = fcntl$dupfd(r6, 0x406, r6) read$FUSE(r7, &(0x7f00000040c0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x29bb9) write$FUSE_ATTR(r7, &(0x7f0000000280)={0x78, 0xfffffffffffffff5, 0x0, {0x2, 0x3, 0x0, {0x0, 0x6, 0x400000000000000b, 0x0, 0x7ff, 0x2, 0x2, 0xd, 0x5, 0xa000, 0xa40, 0x0, r8, 0x3001, 0x2}}}, 0xffffff03) r9 = socket(0x28, 0x5, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r9, 0x29, 0x22, 0x0, 0x0) read$FUSE(r7, &(0x7f0000006100)={0x2020}, 0x2020) sched_setaffinity(r3, 0x2, &(0x7f0000000000)=0x80000000000003) unlinkat(r0, &(0x7f00000000c0)='./file1\x00', 0x0) 3m21.738630012s ago: executing program 2 (id=669): syz_mount_image$ext4(&(0x7f0000000200)='ext4\x00', &(0x7f0000000740)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xc000, &(0x7f00000006c0), 0x2, 0x246, &(0x7f0000000ac0)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) syz_emit_vhci(0x0, 0x7) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) openat$rfkill(0xffffffffffffff9c, 0x0, 0x40e02, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) setreuid(0x0, 0xee00) r4 = socket$inet(0x2, 0x4000000000000001, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r5, &(0x7f0000000040)={0xa, 0x4e24, 0x8}, 0x1c) listen(r5, 0x0) sendto$inet(r4, 0x0, 0x0, 0x2000073d, &(0x7f0000e68000)={0x2, 0x4e24, @empty}, 0x10) r6 = socket$inet6(0x10, 0x2, 0x4) sendto$inet6(r6, &(0x7f0000000080)="4c00000012001f15b9409b8400feffffffffffff000000000017030038c88cc055c5ac27a6c5b068d0bf46d323452536005ad94acc000000000000000000000051d1ec0cffc8792cd8000080", 0x4c, 0x0, 0x0, 0x0) pwrite64(r3, &(0x7f00000000c0)='a', 0x200000c1, 0x9000) 3m14.85099994s ago: executing program 37 (id=660): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) r1 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x1) r2 = fsmount(r1, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r3 = getpid() sched_setscheduler(r3, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbee7, 0x8031, 0xffffffffffffffff, 0x84c18000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) setsockopt$MRT_INIT(0xffffffffffffffff, 0x0, 0xc8, &(0x7f0000000180), 0x4) setsockopt$MRT_ADD_MFC_PROXY(0xffffffffffffffff, 0x0, 0xd2, &(0x7f0000000040)={@broadcast, @multicast1, 0x1, "0d5011f02b7fab96e0aa834d3a9e7cfc12178ac0ab1e6227c2b6ddaa5effda90", 0x5, 0x16, 0xfffffffe, 0x1}, 0x3c) r6 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$FBIOPUT_CON2FBMAP(r6, 0x4605, &(0x7f0000000040)) r7 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_MFC_PROXY(r7, 0x0, 0xd2, &(0x7f0000000000)={@broadcast, @multicast1, 0x0, "12ceaac82ab7d944e84b6fbd6178697e3b10c9b81bede26c85ee73daab4158e8", 0x2, 0x6, 0x4, 0x4}, 0x3c) setsockopt$MRT_FLUSH(r7, 0x0, 0xd4, &(0x7f0000000100)=0xe, 0x4) r8 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r9 = openat$cgroup(r2, 0x0, 0x200002, 0x0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000400)={r8, r9, 0x15, 0x0, @void}, 0x32) getsockopt$inet_mptcp_buf(r0, 0x29, 0x4, 0x0, 0x0) 3m5.830149869s ago: executing program 38 (id=669): syz_mount_image$ext4(&(0x7f0000000200)='ext4\x00', &(0x7f0000000740)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xc000, &(0x7f00000006c0), 0x2, 0x246, &(0x7f0000000ac0)="$eJzs3T9oM2UcB/DvXRJf+75BXnURxD8gIloor5vg8rooFKQUEUGFioiL0gq1xa1xcnHQWaWTSxE3q6N0KS6K4FS1Q10ELQ4WBx0iybVS24ja1Jz0Ph+43l3vee73HLnvkyyXBGisq0muJ2klmU7SSVIcb3B3tVw93F2f2l5I+v0nfiqG7ar9ylG/K0l6SR5KslUWeamdrG4+s/fLzmP3vbnSuff9zaenJnqRh/b3dh8/eG/ujY9mH1z94qsf5opcT/dP13X+ihH/axfJLf9Fsf+Jol33CPgn5l/78OtB7m9Ncs8w/52UqV68t5Zv2OrkgXf/qu/bP355+yTHCpy/fr8zeA/s9YHGKZN0U5QzSartspyZqT7Df9O6XL68tPzq9ItLK4sv1D1TAeelm+w++smlj6+cyP/3rSr/wMU1yP+T8xvfDrYPWnWPBpiIO6rVIP/Tz63dH/mHxpF/aC75h+aSf2gu+Yfmkn9oLvmHC6xztNEbeVj+obnkH5pL/qG5jucfAGiW/qW6n0AG6lL3/AMAAAAAAAAAAAAAAAAAAJy2PrW9cLRMquZn7yT7jyRpj6rfGv4ecXLj8O/ln4tBsz8UVbexPHvXmCcY0wc1P31903f11v/8znrrry0mvdeTXGu3T99/xeH9d3Y3/83xzvNjFviXihP7Dz812fon/bZRb/3ZneTTwfxzbdT8U+a24Xr0/NM9/hXLZ/TKr2OeAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgIn5PQAA//8PK23M") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) syz_emit_vhci(0x0, 0x7) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) openat$rfkill(0xffffffffffffff9c, 0x0, 0x40e02, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) setreuid(0x0, 0xee00) r4 = socket$inet(0x2, 0x4000000000000001, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r5, &(0x7f0000000040)={0xa, 0x4e24, 0x8}, 0x1c) listen(r5, 0x0) sendto$inet(r4, 0x0, 0x0, 0x2000073d, &(0x7f0000e68000)={0x2, 0x4e24, @empty}, 0x10) r6 = socket$inet6(0x10, 0x2, 0x4) sendto$inet6(r6, &(0x7f0000000080)="4c00000012001f15b9409b8400feffffffffffff000000000017030038c88cc055c5ac27a6c5b068d0bf46d323452536005ad94acc000000000000000000000051d1ec0cffc8792cd8000080", 0x4c, 0x0, 0x0, 0x0) pwrite64(r3, &(0x7f00000000c0)='a', 0x200000c1, 0x9000) 35.830646158s ago: executing program 6 (id=859): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, 0x0, &(0x7f0000000080)) r1 = socket$netlink(0x10, 0x3, 0xe) r2 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r2, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000580)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000540)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB, @ANYRES32=0x0, @ANYRES32=r3], 0x3c}}, 0x8000) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[@ANYBLOB="8c0000001000010400"/20, @ANYRES32=r3], 0x8c}}, 0x0) lseek(0xffffffffffffffff, 0xfffffffffffffffd, 0x1) fcntl$lock(0xffffffffffffffff, 0x5, &(0x7f0000003980)={0x0, 0x1, 0x9, 0x4}) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000240)={0x0, 0x0, 0x20}, 0xc) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e23, 0x6, @loopback, 0x3}, 0x1c) sendto$inet6(r0, &(0x7f0000000180)="1a", 0x34000, 0x0, &(0x7f0000000480)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) ioctl$NILFS_IOCTL_CLEAN_SEGMENTS(0xffffffffffffffff, 0x40786e88, &(0x7f00000006c0)={{&(0x7f00000000c0), 0x0, 0x40, 0x8, 0x7ff}, {&(0x7f0000000100), 0x0, 0x10, 0xc, 0xfffffffffffffff9}, {0x0, 0x0, 0x8, 0x1, 0x6}, {&(0x7f0000000280), 0x0, 0x28, 0xf7cf, 0x3}, {&(0x7f0000000440)=[0x3, 0x0, 0x4, 0xb], 0x4, 0x8, 0x8, 0x7fff}}) ioctl$DRM_IOCTL_SYNCOBJ_DESTROY(0xffffffffffffffff, 0xc00864c0, &(0x7f0000000140)) r6 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r6, 0xc04064a0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000380)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r6, 0xc05064a7, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r7}) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_FD(r6, 0xc01864c2, &(0x7f0000000200)) close(0x3) 24.535567723s ago: executing program 3 (id=680): r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x40, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_REG(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)={0x14, r5, 0x701, 0x70bd2c, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x8000}, 0x8814) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r6 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r7 = socket$nl_rdma(0x10, 0x3, 0x14) r8 = syz_open_dev$tty1(0xc, 0x4, 0x4) write$UHID_INPUT(r8, &(0x7f0000001040)={0x9, {"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", 0x35e}}, 0x1006) sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r7, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000100)=ANY=[], 0x2c}, 0x1, 0x0, 0x0, 0x4040041}, 0x0) mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x4, 0x11, r6, 0x100000000) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r6, 0xc00464b4, &(0x7f0000000080)) syz_mount_image$hfs(&(0x7f0000000080), &(0x7f0000000240)='./file0\x00', 0x200000, &(0x7f0000000140)={[{@umask={'umask', 0x3d, 0x80}}, {@part={'part', 0x3d, 0x9}}, {@codepage={'codepage', 0x3d, 'cp855'}}, {@type={'type', 0x3d, "9d4b9598"}}, {@type}, {@umask={'umask', 0x3d, 0x100}}, {@gid}, {@file_umask={'file_umask', 0x3d, 0x3}}]}, 0x4, 0x34a, &(0x7f0000000c40)="$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") 24.520354753s ago: executing program 6 (id=872): semget$private(0x0, 0x4000000009, 0x668) futex(&(0x7f000000cffc), 0x80000000000b, 0x0, 0x0, &(0x7f0000048000), 0x0) futex(&(0x7f000000cffc)=0xfffffffe, 0x5, 0x1, 0x0, &(0x7f0000001600)=0x1000, 0x43000001) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x18, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000000c0)={{0x1}, 0x0, 0x0}, 0x20) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write$FUSE_INIT(r0, &(0x7f0000000140)={0x50, 0x0, 0x0, {0x7, 0x2b, 0x7d4, 0x48000, 0x6, 0xf, 0x1, 0x16d1, 0x0, 0x0, 0x2a, 0x3}}, 0x50) mount$fuse(0x0, 0x0, &(0x7f0000000300), 0xb4800, &(0x7f0000000340)=ANY=[@ANYRESOCT, @ANYRESHEX, @ANYRES8, @ANYRES64, @ANYRESHEX=0x0, @ANYRES8=0x0]) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r1 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) gettid() r2 = syz_open_dev$dvb_demux(&(0x7f0000000080), 0x0, 0x20000) ioctl$DVB_DEMUX_DMX_SET_PES_FILTER(r2, 0x40146f2c, &(0x7f0000000000)={0x0, 0x0, 0x3, 0xe, 0x4}) ioctl$DVB_DEMUX_DMX_ADD_PID(r2, 0x40026f33, &(0x7f00000000c0)=0x7) ioctl$DVB_DEMUX_DMX_START(r2, 0x6f29) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x29, &(0x7f0000000280)=0x5, 0x4) connect$inet6(r3, &(0x7f0000000100)={0xa, 0x0, 0x80007, @ipv4={'\x00', '\xff\xff', @remote}, 0x1}, 0x1c) 22.625223389s ago: executing program 3 (id=863): r0 = openat$sndseq(0xffffffffffffff9c, 0x0, 0x202) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(r0, 0x40bc5311, 0x0) write$sndseq(r0, 0x0, 0x0) creat(0x0, 0x2) socketpair$unix(0x1, 0x3, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x6) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='children\x00') lseek(r3, 0x100000008, 0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r4 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r4, 0x1, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x3) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x12, 0x4, &(0x7f0000000000)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0xe, '\x00', 0x0, @cgroup_sock_addr=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) 22.60226662s ago: executing program 9 (id=875): openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/meminfo\x00', 0x0, 0x0) symlink(&(0x7f0000000080)='.\x00', 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) syz_emit_ethernet(0xfdef, &(0x7f00000004c0)=ANY=[@ANYRES8=r0], 0x0) memfd_create(0x0, 0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x2400c110, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x6, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x6) socket$unix(0x1, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x32, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000002340), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x2, 0x0, 0x106, 0x3}}, 0x20) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r3 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r4, {0x0, 0xfff3}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x4c840) sendmsg$nl_route_sched(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000c40)=@newtfilter={0x38, 0x2c, 0xf3f, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0x2, 0xfff3}, {0x0, 0xfff3}, {0xb, 0x10}}, [@filter_kind_options=@f_fw={{0x7}, {0xc, 0x2, [@TCA_FW_CLASSID={0x8, 0x1, {0x7, 0x6}}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x24041091}, 0x0) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r6 = openat$cgroup_devices(r5, &(0x7f0000000240)='devices.allow\x00', 0x2, 0x0) write$cgroup_devices(0xffffffffffffffff, &(0x7f00000000c0)={'c', ' *:* ', 'rw\x00'}, 0x9) write$cgroup_devices(r6, &(0x7f0000000280)={'b', ' *:* ', 'rm\x00'}, 0x9) 20.421853493s ago: executing program 3 (id=864): r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b40000000000000079104800000000006104000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x94) close(r0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x7, 0xe, &(0x7f0000000640)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x6}, 0x94) r1 = socket$inet6_sctp(0xa, 0x801, 0x84) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000280)={0x0, @in6={{0xa, 0x4e20, 0x8, @empty, 0x3a}}, 0xb, 0x3, 0xcc3, 0x9, 0x50, 0x5, 0x8}, &(0x7f0000000080)=0x9c) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_mgmt(0x0, r5) sendmsg$NLBL_MGMT_C_ADDDEF(r5, &(0x7f0000002780)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40802}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$inet6_tcp(0xa, 0x1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x9, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000071"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0xc}, 0x94) r6 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r6, 0x29, 0x2a, &(0x7f0000fca000)={0x100000001, {{0xa, 0x4e20, 0x0, @mcast1}}}, 0x88) setsockopt$inet6_MCAST_MSFILTER(r6, 0x29, 0x30, &(0x7f0000000240)=ANY=[@ANYBLOB="01000000000000000a0000000000ff00ff010000000000000000000000000001000001000000000000000000e0ff00000000000000bd000000000000"], 0x310) 19.699790681s ago: executing program 6 (id=866): syz_usb_connect(0x6, 0x371, &(0x7f0000000280)=ANY=[@ANYBLOB="1201000057ec0020c215dcff30bd0102030109025f03019b000000090400000b403b4e"], 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) socket$netlink(0x10, 0x3, 0x8000000004) mkdir(&(0x7f0000000140)='./sys/bus/pci/rescan\x00', 0x8) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000400)=ANY=[@ANYBLOB="3c000000000801030000000000000000050000010600024088f80000050003002f0000000900010073797a31000000000c0004800800014000000007d09709d7dd7812d2c2325cc4f905223e26b6402c9dee3a51af339e77b2fcc89e7c1481ddd5fc2ac8032f8343b8afa58d4d291b403f3af54000025e96960cc98a7031151629fa4ee55db4b151906ac722"], 0x3c}, 0x1, 0x0, 0x0, 0x4}, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) sendmsg$IPCTNL_MSG_TIMEOUT_GET(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x20, 0x1, 0x8, 0x101, 0x0, 0x0, {0x7, 0x0, 0x8}, [@CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x800}, 0x480c4) ioctl$KVM_SET_REGS(r4, 0x4090ae82, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) syz_open_dev$sndctrl(&(0x7f0000000100), 0x0, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000a40)=ANY=[@ANYBLOB="02000000040000"], 0x50) r5 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000)={r5}, 0xc) 19.506466455s ago: executing program 9 (id=867): socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) sendmmsg(r0, &(0x7f0000000180), 0x4000190, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$unix(0x1, 0x2, 0x0) openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) r1 = fsopen(&(0x7f0000000240)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x1, 0x0) fchdir(r2) bind$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x4, @dev={0xac, 0x14, 0x14, 0x12}}, 0x10) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r3, &(0x7f0000000240), 0x0, 0x51, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r4 = syz_open_dev$MSR(&(0x7f0000000100), 0xdc, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) setsockopt$inet6_opts(r3, 0x29, 0x3b, 0x0, 0x8) accept4(r3, 0x0, 0x0, 0x80800) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, &(0x7f0000000180)=0xf) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, &(0x7f0000000080)=0x3) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_ACCT_GET_CTRZERO(r5, &(0x7f0000002700)={&(0x7f0000002600)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000026c0)={&(0x7f0000002640)={0x28, 0x2, 0x7, 0x201, 0x0, 0x0, {0xa, 0x0, 0xa}, [@NFACCT_FILTER={0x14, 0x7, 0x0, 0x1, [@NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x2}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x4}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x4000011}, 0x0) 15.982237601s ago: executing program 4 (id=693): getsockopt$EBT_SO_GET_INIT_INFO(0xffffffffffffffff, 0x0, 0x82, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000300), r0) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB='(', @ANYRES16=r1, @ANYBLOB="010000000000fcdbdf2503000000140001800d0001006574683a6772653000000000f6c94d75fe8775ae3d4f743785d429492200525363d6e0a5cbe34135fac2e8c29539740f8f4662a40a4c7029dce81d26d73b8213eff1a27f2935d72965bcbf217ce8f8c2002168a00a8308c534024c47157190dc7d7292617a0abf3be09f6b2a6f858d20bdb02b4478bad3b404fab78daa1ca74a926742cbc3d9ec5efabdd1c06e91298374"], 0x28}, 0x1, 0x0, 0x0, 0x20000004}, 0x0) openat$vicodec0(0xffffffffffffff9c, 0x0, 0x2, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) r2 = socket$inet6(0xa, 0x6, 0x7) connect$inet6(r2, 0x0, 0x0) openat(0xffffffffffffffff, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x4) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r3 = syz_open_dev$sndmidi(&(0x7f0000000780), 0x2, 0x143102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r4 = bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r4, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94) r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$binfmt_misc(r6, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(0xffffffffffffffff, 0x4c0a, &(0x7f00000002c0)={r6, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0xb, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "f4bd000000801900", [0x0, 0x2000000000001]}}) connect$bt_l2cap(r5, &(0x7f0000000040)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0xb}, 0xe) sendmmsg$sock(r5, &(0x7f0000004100)=[{{0x0, 0x0, 0x0}}], 0xffffff80, 0x0) 15.903217513s ago: executing program 7 (id=868): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) socket(0x10, 0x80002, 0x4) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=@newlink={0x20, 0x10, 0x437, 0x70bd26, 0x0, {0x0, 0x0, 0x0, 0x0, 0x40489}}, 0x20}, 0x1, 0x0, 0x0, 0x4c001}, 0x0) r3 = fcntl$dupfd(0xffffffffffffffff, 0x406, 0xffffffffffffffff) ioctl$USBDEVFS_SUBMITURB(r3, 0x8038550a, 0x0) socket(0x1e, 0x4, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) openat(0xffffffffffffff9c, &(0x7f00000013c0)='./file0/file0\x00', 0x404c2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x1d7) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./file1/file0\x00', 0x0) mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000080)='./file1/file0\x00', 0x0, 0x1085408, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f00000003c0), 0x40, &(0x7f00000004c0)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file1/file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) umount2(&(0x7f0000000380)='./file1/file0\x00', 0x0) chdir(&(0x7f00000001c0)='./bus\x00') unlinkat(0xffffffffffffff9c, &(0x7f0000000180)='./file0/file0\x00', 0x0) 15.19006066s ago: executing program 9 (id=869): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='sys_mnt\x00', 0x1ff) socket$inet6_sctp(0xa, 0x1, 0x84) socket$inet_mptcp(0x2, 0x1, 0x106) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_open_dev$sg(&(0x7f00000001c0), 0x508d48d4, 0x40902) read$FUSE(r0, &(0x7f0000002740)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) r3 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f0000000000), 0x3) ptrace$ARCH_SHSTK_UNLOCK(0x1e, r2, 0x0, 0x5004) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, 0x0) syz_emit_vhci(0x0, 0x7) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x480c5) pselect6(0x40, &(0x7f0000000240)={0x0, 0x0, 0xd0, 0x7d, 0x0, 0x8000, 0x4, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff, 0x6, 0xffffffffffffffff, 0x9, 0x0, 0xa, 0x80000006, 0x400}, 0x0, 0x0) sendmmsg$sock(0xffffffffffffffff, 0x0, 0x0, 0x20008845) mount(0x0, &(0x7f00000000c0)='sys_mnt\x00', 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f00000003c0)='sys_mnt/block/zram0/disksize\x00', 0x1, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) mount(0x0, 0x0, 0x0, 0x0, 0x0) 15.18993772s ago: executing program 6 (id=870): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000000700)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7) getpgrp(0x0) r1 = inotify_init() ioctl$BTRFS_IOC_START_SYNC(r1, 0x80089418, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(r3, 0x0, 0x0) r5 = socket$vsock_stream(0x28, 0x1, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(r5, 0x28, 0x0, 0x0, 0x0) ioprio_set$pid(0x2, 0x0, 0x2000) symlink(&(0x7f00000000c0)='./file0/file0/..\x00', &(0x7f0000000000)='./file0\x00') execve(&(0x7f0000000040)='./file0/file0/..\x00', 0x0, 0x0) 12.72787236s ago: executing program 6 (id=874): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xa, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mount$cgroup2(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f00000002c0), 0x2000000, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000180), 0x888, &(0x7f00000001c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000000c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0, 0xd5) mkdirat(0xffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) r1 = openat(0xffffff9c, &(0x7f0000000080)='./sys/module/zswap/parameters/compressor\x00', 0x2, 0x24) write(r1, &(0x7f0000000100)='zstd\x00', 0x4) r2 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) read(r2, &(0x7f0000000000), 0x10000) r3 = eventfd(0x11223344) read(r3, &(0x7f0000000008), 0x8) r4 = eventfd(0x11223340) read(r4, &(0x7f0000000010), 0x8) socketpair$nbd(0x1, 0x1, 0x0, 0x0) fcntl$setownex(0xffffffffffffffff, 0xf, &(0x7f0000000100)={0x2}) setresuid(0x0, 0xee00, 0x0) r5 = openat$cgroup_ro(r0, &(0x7f0000000040)='cpu.stat\x00', 0x0, 0x0) unshare(0x22020600) r6 = ioctl$KVM_GET_STATS_FD_cpu(0xffffffffffffffff, 0xaece) syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), r6) openat(r5, &(0x7f0000000200)='./sys/class/infiniband_srp/srp-syz0-1/add_target\x00', 0x1, 0x50) 12.691077451s ago: executing program 4 (id=876): r0 = syz_open_dev$vim2m(&(0x7f0000000080), 0x1, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f00000000c0)={0x1, @pix={0x0, 0xcf8, 0x34424752, 0x9, 0x0, 0x0, 0x0, 0xfffffffd}}) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000040)={0x80000001, 0x1, 0x4}) bpf$PROG_LOAD(0x5, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x2) read$msr(0xffffffffffffffff, 0x0, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) openat$binderfs(0xffffffffffffff9c, 0x0, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(0x0, 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000008c80)=ANY=[@ANYBLOB="2c00000026000506"], 0x2c}}, 0x800) recvmmsg(r2, &(0x7f0000007700), 0x318, 0xfc0, 0x0) ioctl$vim2m_VIDIOC_STREAMOFF(r0, 0x40045612, &(0x7f0000000240)=0x1) write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(0xffffffffffffffff, &(0x7f0000000100)={0x10, 0x30, 0xfa00, {0x0, 0x3, {0xa, 0x4e22, 0xffff, @local, 0x9}}}, 0x38) 11.242112836s ago: executing program 9 (id=877): execveat(0xffffffffffffff9c, &(0x7f0000000280)='./file2\x00', 0x0, 0x0, 0x0) mknod$loop(&(0x7f0000000300)='./file0\x00', 0x6000, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000002c0)) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x48001}, 0x4044050) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x82, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000007640)=[{0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000740)="bd9c629b909dddebc0508bf412865663aded7919352b141faa7dc00680ce5a44ff1ed1c813c6c1e58e28c509cd269d0e79fff4d2ea4c1da69fa672c4f5eb15788aa929e9f5c94e443cf68a1759ee805958a7c76c8c7f11a39ea32c019c2f2c8cce48d92d659f623081974c0135dc1fe2a057f725a843c083e0620ffa607d3b9570a5b4094fca255491844b3d5cb63bab3d76ad07f9503d1450f1fb860b18ac983285f983e51262c539312073482f1538d9588323b836e6e2b7704dff3cbf89c2b828c7613310eafd664c946b1a6728154b1877257a8abe3d983344da083b86aee35e6b9b", 0xe4}], 0x1, &(0x7f00000008c0)=ANY=[@ANYBLOB="b8000000000000001701000002000000a0000000bd19a432ebf20eb0a0ee39d005e869fe74b9842d9c92be0054aa20f9dbfeb8e59fa49c486a1a51c45c98c886185e506d1cf900000080c79d6b6d1d4301678807c5ab4264c8ba94065d11d8ee27dd16f4a0342bed8a3c79acd4bb1f9f06ef28a63b329e09a86c62f907539c9af6f1b0bc00510c3b27f64245b6f4f80e00bca3c91538839a52c3c393aadb6ed6155fad3c98896658e106d043cc8652373dd8e2a7"], 0xb8, 0x40800}, {0x0, 0x0, &(0x7f0000003900)=[{&(0x7f00000009c0)="c2debd9e2d4617d17e01e704d3576f8b26b757ffa164a105efcaa28e5d52d4383258c148e95e4ee927dab4ba9cdbf4dbf6b0e19f8b7e9a95211ec6aedfd78a09200b7076afabdae9c87c6837e202845b6cf3ac6b728856d66eef2860", 0x5c}, {&(0x7f0000000b40)="86545d2157646172b815818bfd0e1457556266898579380233e0e3853e4a118a5a2bcc52eeea6b2dc4fc32c3f81f9b1d06cd", 0x32}], 0x2, 0x0, 0x0, 0xc0}], 0x2, 0x48040) r2 = socket$alg(0x26, 0x5, 0x0) ioctl$LOOP_CONFIGURE(0xffffffffffffffff, 0x4c0a, &(0x7f0000000080)={0xffffffffffffffff, 0x0, {0x0, 0x0, 0x0, 0x6, 0x1000, 0x0, 0x1, 0x19, 0xc, "faf98317e5a114998a1a8dbe43ea6acc96e3a2503dc3bd3fe37d58128bbad0099cebdc25f5ab60c9e6d680f985881a7beda9d69098c8b534464c516bdd8a0f35", "32d8cc26f7061a74df2cfc06c89f3d9e234b30c50997d3bef409ff2176ff7bfe55cd4a5d83cd4a524bd3ffe70c7f3f800b2f7b6aa54cc50a1fcaed1e831fa79a", "67523760fd40f78d2cfc03d81a8ca55ba139c01802c4dae4162e43ac61b7ad33", [0x5, 0x7]}}) ioctl$XFS_IOC_OPEN_BY_HANDLE(r1, 0xc038586b, &(0x7f0000000ac0)={0xffffffffffffffff, &(0x7f00000006c0)='\x00', 0x81, &(0x7f0000000700)={@_ha_fsid={[0x2, 0xfff]}, {0x1ff, 0x2, 0x6, 0x6}}, 0x3, &(0x7f0000000980), &(0x7f0000000a80)=0x9}) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000340)={'wlan0\x00'}) bind$alg(r2, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="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", 0xf91}], 0x1, 0x1, 0x2) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 11.227071737s ago: executing program 4 (id=878): bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x10, 0x8, &(0x7f0000000000)=ANY=[], 0x0, 0x8341, 0x0, 0x0, 0x0, 0x69, '\x00', 0x0, @fallback=0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94) r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x2c8, 0x0, 0x12, 0x308, 0x128, 0x206, 0x1f8, 0x2e8, 0x2e8, 0x1f8, 0x2e8, 0x4, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth1_to_bond\x00', 'caif0\x00'}, 0x0, 0x100, 0x128, 0x0, {}, [@common=@unspec=@connlabel={{0x28}}, @common=@srh={{0x30}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xff3f, 0x7f00}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@rand_addr=' \x01\x00', @remote, [], [], 'geneve0\x00', 'gretap0\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE3={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x328) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x7f, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=@base={0x9, 0x1, 0x8, 0x40, 0x42, 0x1}, 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x6, 0x0, 0x0, &(0x7f0000000240)='GPL\x00', 0x2, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240"], 0x7c}}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r4, 0x2000000, 0xd, 0x0, &(0x7f00000004c0)="630b008646dc3f0adf33c9f7b9", 0x0, 0x81ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x2}, 0x50) syz_genetlink_get_family_id$smc(&(0x7f0000000040), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SMC_PNETID_DEL(r5, 0x0, 0x80) r6 = syz_open_procfs(0x0, &(0x7f00000000c0)='oom_score\x00') pread64(r6, &(0x7f0000000f80)=""/212, 0xd4, 0xffffffff) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='memory.current\x00', 0x26e1, 0x0) syz_usb_connect(0x3, 0x4a, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@newlink={0x48, 0x10, 0x403, 0x70bd26, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, 0x88a8ffad, 0x5e801}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @wireguard={{0xe}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r7}, @IFLA_NUM_TX_QUEUES={0x8, 0x1f, 0x5}]}, 0x48}}, 0x440088c4) pidfd_send_signal(0xffffffffffffffff, 0x0, 0x0, 0x4) 11.159128278s ago: executing program 7 (id=879): r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r1, 0x29, 0x2e, &(0x7f0000000200)={0x5, {{0xa, 0x4e20, 0x0, @mcast1={0xff, 0x7}, 0x9}}, {{0xa, 0x3, 0x0, @mcast2}}}, 0x108) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f05ebbeee, 0x8031, 0xffffffffffffffff, 0xffffc000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) close_range(r0, 0xffffffffffffffff, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000500)=ANY=[@ANYBLOB="bc000000000105060100000000000000020000003400018014000180080001007f000001080002007f0000011c000280050001000600000006000200303900000600030006bb00003400028014000180080001007f000001080002007f0000011c00028005000100060000000600020006bb00000600030030390000080003000000000e08000700000000780d0005800900010070707470"], 0xbc}}, 0x0) r6 = socket$inet_tcp(0x2, 0x1, 0x6) bind$inet(r6, &(0x7f0000000600)={0x2, 0x6bb, @loopback}, 0x10) listen(r6, 0x1) r7 = socket$inet_tcp(0x2, 0x1, 0x6) bind$inet(r7, &(0x7f0000000700)={0x2, 0x3039, @loopback}, 0x10) connect$inet(r7, &(0x7f0000000800)={0x2, 0x6bb, @loopback}, 0x10) r8 = accept$inet(r6, 0x0, 0x0) write(r8, &(0x7f0000000c00)="002000011a2b3c4d0005000000", 0xd) 9.907811309s ago: executing program 7 (id=880): r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSCTTY(r0, 0x540e, 0xac) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x1, &(0x7f0000000480)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r2 = syz_open_dev$I2C(&(0x7f0000000040), 0x0, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl802154(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_SEC_LEVEL(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000080)={0x14, r4, 0x701, 0x70bd2b, 0x0, {0x5}}, 0x14}, 0x1, 0x0, 0x0, 0x20004074}, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000180)={'bridge_slave_1\x00', 0x10}) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000001300)=@newqdisc={0x434, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r8, {0x10}, {}, {0x2, 0x10}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x408, 0x2, [@TCA_TBF_RTAB={0x404, 0x2, [0x1, 0x1, 0x0, 0x8000, 0x3, 0x5, 0x5, 0xb762, 0x6, 0x7, 0x8, 0xf, 0x2, 0x80000003, 0x400, 0x800, 0xfffffffe, 0x6, 0x401, 0x9, 0xb89, 0xffffe4f5, 0x7, 0x4, 0x9, 0x7, 0x0, 0x2, 0x10000101, 0x1, 0x9, 0x4, 0x1, 0x1, 0x9, 0xc, 0x1000, 0x1, 0x2, 0x7, 0x4, 0x99, 0x9, 0x5, 0x6, 0x7, 0x0, 0x1, 0x2, 0x5, 0x9, 0x44, 0x8, 0x8, 0x1, 0x4, 0x7ff, 0x80000008, 0x7, 0x80000001, 0x7, 0x8, 0xfffffa72, 0x4003, 0xffffff80, 0x80000000, 0xc, 0x4, 0x65, 0x91, 0x659, 0x9, 0xf, 0x7, 0xc68, 0x9, 0x7, 0x3, 0x9, 0x3, 0x2, 0xfffffffa, 0x5, 0x2008000, 0x3, 0xffffffff, 0x4, 0x5, 0x8, 0x7, 0x1, 0x1, 0x1, 0x7, 0x7fffffff, 0x7, 0xe, 0x8000, 0xfffffffe, 0x45c, 0x80, 0x3, 0x9, 0xff, 0xdef0ff4, 0xa7, 0xf, 0x2, 0xfffffffd, 0x3, 0x1000, 0x672, 0x401, 0xf8a, 0x80000000, 0xffff, 0x6, 0x5, 0x4, 0x2, 0x80000000, 0x1966f9ab, 0x5, 0x20200, 0xed5, 0xafab, 0x4000006, 0x4, 0x8, 0x485e, 0xa89, 0x0, 0x2, 0x7, 0x7, 0x101, 0x2d5421e5, 0x7, 0x10000, 0xffffffff, 0x400000ed, 0x32, 0xf04, 0x0, 0x2, 0x5, 0xfffffc00, 0x4, 0x8d, 0x1, 0x401, 0x4, 0x9, 0x3, 0xfffffffb, 0x1, 0x0, 0xffffffff, 0xfffffffe, 0x5, 0x8, 0x3, 0x4, 0x800, 0x2, 0x8, 0x7ff, 0x1, 0x9, 0x6, 0x5, 0x5, 0x4d15, 0xffff0327, 0xfffff060, 0x3, 0x469, 0x3, 0x0, 0x200, 0x5, 0x8, 0x1, 0x8, 0x42ba, 0x4, 0x9, 0x3, 0x8, 0x8, 0x57, 0x6, 0x8, 0x400, 0x8000, 0x0, 0x2c310b17, 0xfff, 0xcc3f, 0x3, 0xcd34, 0x7, 0x8001, 0xdf3, 0x2, 0x7, 0x8, 0x20000401, 0x1ff, 0x8000, 0x3, 0x4, 0x3, 0x9, 0x9a6, 0xe4cb, 0x402, 0x1, 0x1ff, 0x3e, 0x9b4, 0x1, 0x8, 0x0, 0x8, 0x0, 0x9, 0x0, 0x4, 0x10, 0x143, 0x5, 0x2, 0x7b, 0x6, 0x2, 0x6, 0xc, 0x1000, 0x9, 0xb, 0xe6, 0xab, 0x1, 0x7fffffff, 0xed, 0x7ff, 0xd83, 0x68, 0x1, 0x4, 0x1, 0x6, 0x200, 0x2]}]}}]}, 0x434}, 0x1, 0x0, 0x0, 0x40098}, 0x0) syz_genetlink_get_family_id$nl802154(&(0x7f0000000100), r3) ioctl$I2C_SMBUS(r2, 0x720, &(0x7f0000000080)={0x1, 0x0, 0x6, &(0x7f0000000000)={0xfc, "e922fe53e14fcad1ebe6ff00000000008100"}}) ioctl$PIO_UNIMAP(r0, 0x4b67, &(0x7f0000000000)={0x3fffffffffffff69, &(0x7f0000001ac0)=[{0x0, 0x1000}]}) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r9, &(0x7f0000000240)={0xa, 0x4e24, 0x5, @local, 0x4}, 0x1c) r10 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r10, 0x7a7, &(0x7f0000000040)=0x90000) ioctl$IOCTL_VMCI_QUEUEPAIR_SETPF(r10, 0x7a9, 0x0) ioctl$sock_inet6_tcp_SIOCOUTQ(r9, 0x5411, &(0x7f0000000000)) getsockopt$sock_timeval(r6, 0x1, 0x15, &(0x7f00000000c0), &(0x7f0000000140)=0x8) 7.032329889s ago: executing program 9 (id=881): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_FIOGETOWN(r0, 0x8903, 0x0) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee7, 0x8031, 0xffffffffffffffff, 0x3000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000001c0)=@newlink={0x50, 0x10, 0x1, 0x70bd25, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0x42100, 0x2280}, [@IFLA_IFNAME={0x14, 0x3, 'batadv0\x00'}, @IFLA_MTU={0x8, 0x4, 0xd7}, @IFLA_VFINFO_LIST={0x14, 0x16, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, [@IFLA_VF_TRUST={0xc, 0x9, {0x7f, 0xb}}]}]}]}, 0x50}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) r6 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r6, 0x4000000000000, 0x40, &(0x7f0000000780)=@raw={'raw\x00', 0x4001, 0x3, 0x330, 0x1e8, 0xb, 0x148, 0x0, 0x148, 0x2e8, 0x240, 0x240, 0x2e8, 0x215, 0x3, 0x0, {[{{@ip={@remote, @local, 0x0, 0x0, 'ip6gretap0\x00', 'veth0\x00', {}, {}, 0x11}, 0x2e8, 0x130, 0x198, 0x0, {0xff0f000000000000}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'bm\x00', "d40b98e613e5c0d53fa5668bfbd8659b9ba9affcbed065733d0012e401764f592fc2c2bfb0e657e39980dd3655cfdfebceab664ab18605949120401237b982613cbdde69fbfbd40e9505ea3909a03f93f0be8cd9870b50e1d8a655f0a2cc7dba129d9af19184e11feeab1ddd11aa07abfef2f0ace242261fac91893e25989bb2", 0x4, 0x8a119efdab096be9}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'syz0\x00', 'syz1\x00'}}}, {{@ip={@broadcast, @broadcast, 0x0, 0x0, 'team0\x00', 'netpci0\x00'}, 0xec010000, 0x98, 0x100, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x3, 0x8, 0x1, '\x00', 'syz0\x00', {0x8}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x390) r7 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x180300, 0x0) ioctl$FBIOPUT_VSCREENINFO(r7, 0x4601, &(0x7f0000000040)={0x191, 0x258, 0x300, 0x3f, 0x32, 0x1, 0x0, 0x0, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe07, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x3}) syz_emit_ethernet(0x4a, &(0x7f00000000c0)=ANY=[@ANYBLOB, @ANYRES32=0x41424344, @ANYRES32=0x41424344], 0x0) sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x4c}, 0x1, 0x0, 0x0, 0x10000050}, 0xc800) r8 = openat$binfmt_register(0xffffffffffffff9c, 0x0, 0x1, 0x0) write$binfmt_register(r8, 0x0, 0x0) 6.727658086s ago: executing program 3 (id=882): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0xa, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x8) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, &(0x7f0000000280)=@IORING_OP_TIMEOUT_REMOVE={0xc, 0x0, 0x0, 0x0, 0x0, 0x23456, 0x0, 0x12, 0x1}) eventfd2(0x5, 0x1) ioperm(0x9, 0xa1d7, 0x80000004) ptrace(0x10, r2) ptrace$ARCH_MAP_VDSO_64(0x1e, r2, 0x2, 0x2003) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) io_uring_setup(0x258d, &(0x7f0000000640)={0x0, 0x4008272, 0x20000, 0x1, 0x288}) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000006c0)=ANY=[], 0x30}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) syz_clone3(&(0x7f0000000000)={0x285002400, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x46) socket$nl_generic(0x10, 0x3, 0x10) write$uinput_user_dev(r0, &(0x7f0000000800)={'syz1\x00', {0x0, 0x10, 0x2, 0x9}, 0xffffffff, [0x0, 0x0, 0x0, 0x40000, 0x8, 0x2, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x4000, 0x20, 0x400, 0x6, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x8, 0x0, 0x0, 0x2, 0x0, 0x0, 0x7, 0x0, 0x0, 0x9, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x296, 0x100, 0x0, 0x0, 0x0, 0x800, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x6, 0x5f1, 0x6], [0x0, 0x0, 0x8, 0x0, 0x0, 0x5, 0x0, 0x80, 0x0, 0x2, 0x0, 0x0, 0x10000000, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x7, 0xfffffffc, 0x768, 0x0, 0x7, 0x2, 0xfffffffc, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0xfffffffe, 0x400, 0x3, 0x200, 0x0, 0x0, 0xfffffffe, 0x4, 0x5, 0x0, 0x81, 0xfffffffd, 0x800, 0x32, 0x0, 0xfffffffe, 0x80000, 0x85, 0xfffffffd, 0x0, 0x9, 0x0, 0x8, 0x10, 0x0, 0x0, 0x0, 0xffff], [0x4, 0xfc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x409, 0x1, 0x0, 0x0, 0x0, 0x4, 0x1000, 0x80, 0x0, 0x4, 0x3, 0xffffffff, 0x0, 0xfffffffc, 0x0, 0x1, 0xffffffff, 0x0, 0x0, 0x9fa, 0x1, 0x0, 0x0, 0x4, 0x0, 0x0, 0x925, 0x0, 0x0, 0x3, 0x0, 0x5, 0x0, 0x0, 0xbda6, 0x0, 0xa3, 0x0, 0x0, 0x2, 0x0, 0x800, 0xfffeffe4, 0x4, 0x0, 0x4, 0x0, 0x0, 0x0, 0xfff, 0x6, 0x0, 0x0, 0x0, 0x0, 0x8], [0x5, 0x0, 0x635, 0x0, 0x8000000, 0x3, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x40, 0x9, 0x4, 0xbd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x200000, 0xfffffffd, 0x6, 0x9, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x8000, 0x0, 0x101, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xcaa, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x4]}, 0x45c) 6.454457543s ago: executing program 7 (id=883): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x2, 0x202, @loopback, 0x7}, 0x1c) bpf$BPF_PROG_DETACH(0x9, 0x0, 0x10) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x1) socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$EBT_SO_GET_INFO(0xffffffffffffffff, 0x0, 0x80, 0x0, &(0x7f0000000000)) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/mdstat\x00', 0x0, 0x0) socket(0xa, 0x3, 0x3a) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./proc_mnt\x00', 0x1ff) mount(0x0, &(0x7f0000000180)='./proc_mnt\x00', &(0x7f00000001c0)='proc\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./proc_mnt/sys/net/ipv4/conf/all/forwarding\x00', 0x1, 0x0) write$sysctl(r2, &(0x7f0000000280)='1\x00', 0x1) r3 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./proc_mnt/sys/net/ipv4/conf/lo/forwarding\x00', 0x1, 0x0) write$sysctl(r3, &(0x7f0000000300)='1\x00', 0x1) r4 = socket(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFADDR(r4, 0x8916, &(0x7f0000000100)={'lo\x00', {0x2, 0x0, @rand_addr=0x100000a}}) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x2, 0xc3072, 0xffffffffffffffff, 0x200000) socket$xdp(0x2c, 0x3, 0x0) shutdown(r0, 0x1) 5.587892684s ago: executing program 9 (id=884): syz_mount_image$hfsplus(&(0x7f00000000c0), &(0x7f00000001c0)='./file1\x00', 0x11c9014, &(0x7f0000000000)=ANY=[@ANYRESOCT, @ANYRESDEC, @ANYRESOCT=0x0], 0x1, 0x6c6, &(0x7f00000003c0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='.\x00', 0x0, 0x0) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r0, 0xc0185879, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'batadv_slave_0\x00', 0x0}) r2 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000002c0)=0xffffffffffffffff, 0x4) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000b80)={0x1b, 0x0, 0x0, 0x7f, 0x0, r0, 0x5, '\x00', r1, r2, 0x3, 0x3}, 0x50) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$IP6T_SO_GET_ENTRIES(r3, 0x29, 0x41, 0x0, 0x0) unlinkat(0xffffffffffffff9c, &(0x7f0000000380)='./file1\x00', 0x0) r4 = syz_open_dev$loop(&(0x7f0000000240), 0x7, 0x10c062) openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0xf7) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x85, 0x7, 0x7ffc0001}]}) rseq(&(0x7f0000000300), 0x20, 0x0, 0x0) r5 = timerfd_create(0x0, 0x0) ppoll(&(0x7f0000000140)=[{r5, 0x1}], 0x1, 0x0, 0x0, 0x0) timerfd_settime(r5, 0x3, &(0x7f0000000380)={{0x0, 0x989680}}, 0x0) r6 = syz_clone(0x24180080, 0x0, 0x0, 0x0, 0x0, 0x0) tkill(r6, 0x12) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r0, 0xc1105517, &(0x7f0000000dc0)={{0x9, 0x1, 0x1, 0x0, 'syz0\x00', 0x81}, 0x5, 0x400, 0xffff, r6, 0x3, 0xfffeffff, 'syz0\x00', &(0x7f0000000340)=['batadv_slave_0\x00', 'ext4\x00', '/dev/loop#\x00'], 0x1f}) clock_adjtime(0x0, &(0x7f0000000000)={0x3ff, 0xf6d, 0x0, 0xd, 0x7fffffff, 0x0, 0x4, 0x200000000000000, 0x0, 0x100, 0x0, 0x702b, 0x6, 0x3, 0x0, 0xfffffffffffffff9, 0x0, 0x0, 0x1000, 0x2000000000008, 0x9, 0x3, 0x8000000000005a, 0x3}) ioctl$LOOP_CONFIGURE(r4, 0x4c0a, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x3000000, &(0x7f0000000600)={[{@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}]}, 0x4, 0x521, &(0x7f0000000640)="$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") sendfile(r4, r4, 0x0, 0x2000000000409) link(&(0x7f0000000d80)='./file1\x00', &(0x7f0000000c80)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') 4.641721027s ago: executing program 3 (id=885): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000000700)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7) r1 = getpgrp(0x0) inotify_init() sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(r3, 0x0, 0x0) r5 = socket$vsock_stream(0x28, 0x1, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(r5, 0x28, 0x0, 0x0, 0x0) ioprio_set$pid(0x2, 0x0, 0x2000) symlink(&(0x7f00000000c0)='./file0/file0/..\x00', &(0x7f0000000000)='./file0\x00') execve(&(0x7f0000000040)='./file0/file0/..\x00', 0x0, 0x0) 4.479252841s ago: executing program 4 (id=886): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x4, 0x0, @loopback, 0x4}, 0x1c) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$PPPIOCNEWUNIT(0xffffffffffffffff, 0xc004743e, 0x0) setsockopt$inet_sctp6_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000100)={0x50, 0x2, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x16, 0x3, 'hash:net,port,net\x00'}]}, 0x50}}, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000780)=ANY=[@ANYBLOB="74000000090601020000000000000000030000000900020073797a310000000005000100070000004c0007801800018014000240fe8000000000000000000000000000aa1800148014000240fc000000000000000000000000000000060004404e1f00000500070084000000060005"], 0x74}, 0x1, 0x0, 0x0, 0x10040003}, 0x0) sendmsg$IPSET_CMD_TEST(0xffffffffffffffff, 0x0, 0x4800) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000080)=0x2, 0x4) ioctl$sock_inet6_tcp_SIOCINQ(r0, 0x541b, &(0x7f0000000140)) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000040), 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f00000000c0)=@gcm_128={{0x304}, "0000000400", "6abc00000000000000000000001000", "f0630400"}, 0x28) sendto$inet6(r0, &(0x7f0000000240)="c62ee5d6a89f2387cb4093532f7c0a22ce", 0xffffffffffffff69, 0x8040, 0x0, 0x0) 2.804409802s ago: executing program 3 (id=887): syz_open_procfs(0xffffffffffffffff, &(0x7f0000000440)='loginuid\x00') r0 = socket$inet_sctp(0x2, 0x5, 0x84) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x7) openat$sw_sync(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$SYNC_IOC_FILE_INFO(0xffffffffffffffff, 0x40103e05, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000b, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = syz_open_dev$sg(&(0x7f0000000380), 0x0, 0x20402) read(r4, 0x0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000001440)='./file0\x00', 0x80040, 0x54) sendto$unix(0xffffffffffffffff, 0x0, 0x0, 0x11, 0x0, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000780)=@newsa={0x138, 0x10, 0x1, 0xfffffffe, 0x100, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x1, 0x714, 0x4e23, 0x5, 0x0, 0x0, 0x0, 0x3a}, {@in6=@mcast2, 0x4d4, 0x6c}, @in=@loopback, {0x0, 0x192, 0x6, 0xffff, 0x8251c, 0x2, 0xfffffffffffffff8}, {0xffffffffffffffff, 0x0, 0x1f, 0xfffffffffffffffe}, {0x2, 0xfffffffc}, 0x70bd2a, 0x3505, 0x2, 0x1, 0x0, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x0) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000480)=ANY=[@ANYBLOB="3c000000120001000000000000000000e0000002000004000000000000000000000004d50200040014000d"], 0x3c}}, 0x0) fsetxattr$system_posix_acl(r5, &(0x7f00000001c0)='system.posix_acl_access\x00', &(0x7f0000000100)=ANY=[@ANYBLOB="36f83f020200000001000000000000", @ANYBLOB="040000000000000010000300"], 0x2c, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./bus\x00', 0x289c2, 0x1) fremovexattr(r7, &(0x7f0000000040)=@known='system.posix_acl_default\x00') sendmmsg$inet_sctp(r0, &(0x7f00000064c0)=[{&(0x7f0000000000)=@in={0x2, 0x0, @local}, 0x10, &(0x7f0000000200)=[{&(0x7f0000000040)="cd", 0x1}], 0x1, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000008400000000000000ac1414aa00000000"], 0x18}], 0x1, 0x0) 1.722527168s ago: executing program 4 (id=888): r0 = syz_open_dev$vim2m(&(0x7f0000000080), 0x1, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f00000000c0)={0x1, @pix={0x0, 0xcf8, 0x34424752, 0x9, 0x0, 0x0, 0x0, 0xfffffffd}}) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000040)={0x80000001, 0x1, 0x4}) bpf$PROG_LOAD(0x5, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x2) read$msr(0xffffffffffffffff, 0x0, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) openat$binderfs(0xffffffffffffff9c, 0x0, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, 0x0, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000008c80)=ANY=[@ANYBLOB="2c00000026000506"], 0x2c}}, 0x800) recvmmsg(r2, &(0x7f0000007700), 0x318, 0xfc0, 0x0) ioctl$vim2m_VIDIOC_STREAMOFF(r0, 0x40045612, &(0x7f0000000240)=0x1) write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(0xffffffffffffffff, &(0x7f0000000100)={0x10, 0x30, 0xfa00, {0x0, 0x3, {0xa, 0x4e22, 0xffff, @local, 0x9}}}, 0x38) 1.721060548s ago: executing program 6 (id=898): syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x10000, &(0x7f0000000080), 0x1, 0x50a, &(0x7f0000001f40)="$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") openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={0x0, 0x0, 0x52}, 0x28) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x1, 0x11) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) mmap(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x40010, r3, 0xd6fff000) r4 = syz_open_dev$dvb_demux(&(0x7f0000000080), 0x0, 0x41) r5 = syz_open_dev$dvb_demux(&(0x7f0000001e00), 0x0, 0x2000) ioctl$DVB_DEMUX_DMX_SET_FILTER(r5, 0x403c6f2b, &(0x7f0000001e40)={0x6, {"4772ffacff04856ec9e8776f8ee906be", "2dfad343e15ead11f40c897700", "0000b3f88813da82b4cf00"}, 0x3eaf, 0x4}) ioctl$DVB_DEMUX_DMX_SET_FILTER(r4, 0x403c6f2b, &(0x7f0000000000)={0x6, {"771c2e01f8ffffffffffee00", "000900000000000200"}, 0x7, 0x4}) ioctl$DVB_DEMUX_DMX_SET_PES_FILTER(r5, 0x40146f2c, &(0x7f0000000040)={0x80, 0x0, 0x0, 0x5}) openat$zero(0xffffffffffffff9c, &(0x7f00000000c0), 0x42200, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x4, 0x3, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x3, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3}}, &(0x7f0000000080)='syzkaller\x00', 0x8, 0x0, 0x0, 0x41000}, 0x94) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cpuset.effective_mems\x00', 0x275a, 0x0) write$binfmt_script(r6, 0x0, 0x0) 1.555563302s ago: executing program 7 (id=889): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='sys_mnt\x00', 0x1ff) socket$inet6_sctp(0xa, 0x1, 0x84) socket$inet_mptcp(0x2, 0x1, 0x106) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_open_dev$sg(&(0x7f00000001c0), 0x508d48d4, 0x40902) read$FUSE(r0, &(0x7f0000002740)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) r3 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f0000000000), 0x3) ptrace$ARCH_SHSTK_UNLOCK(0x1e, r2, 0x0, 0x5004) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, 0x0) syz_emit_vhci(0x0, 0x7) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x480c5) pselect6(0x40, &(0x7f0000000240)={0x0, 0x0, 0xd0, 0x7d, 0x0, 0x8000, 0x4, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff, 0x6, 0xffffffffffffffff, 0x9, 0x0, 0xa, 0x80000006, 0x400}, 0x0, 0x0) sendmmsg$sock(0xffffffffffffffff, 0x0, 0x0, 0x20008845) mount(0x0, &(0x7f00000000c0)='sys_mnt\x00', 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f00000003c0)='sys_mnt/block/zram0/disksize\x00', 0x1, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) mount(0x0, 0x0, 0x0, 0x0, 0x0) 164.493656ms ago: executing program 4 (id=890): openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(&(0x7f00000000c0)=@filename='configfs\x00', &(0x7f0000000000)='./config\x00', &(0x7f0000000040)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./config/usb_gadget/g1\x00', 0x1ff) syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="02c9200a00f000f6ffffffffffffffe068166d781b4ca6f8fa32b8c727d808ebc16125d5f50e3875b306"], 0xf) ioctl$SNDRV_PCM_IOCTL_STATUS32(0xffffffffffffffff, 0x806c4120, 0x0) accept4$inet6(0xffffffffffffffff, &(0x7f0000000140)={0xa, 0x0, 0x0, @private2}, 0x0, 0x80000) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./config/usb_gadget/g1/functions/rndis.usb0\x00', 0x1ff) symlinkat(&(0x7f0000000180)='./config/usb_gadget/g1/functions/rndis.usb0\x00', 0xffffffffffffff9c, &(0x7f00000001c0)='./config/usb_gadget/g1/configs/c.1/rndis.usb0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./config/usb_gadget/g1/UDC\x00', 0x2, 0x0) write(r0, &(0x7f0000000240)='dummy_udc.0\n', 0xc) syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) madvise(&(0x7f0000bdd000/0x3000)=nil, 0x3000, 0x10) ioctl$KVM_TDX_INIT_MEM_REGION(0xffffffffffffffff, 0xc008aeba, &(0x7f0000000040)={0x3, 0x1, 0x0}) r1 = socket(0x21, 0x2, 0x10000000000002) sendmmsg(r1, &(0x7f0000000180), 0x0, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = syz_open_dev$I2C(&(0x7f0000000040), 0x1, 0x0) ioctl$I2C_SMBUS(r3, 0x720, &(0x7f0000000000)={0x0, 0x2, 0x3, &(0x7f0000000080)={0xfd, "90f541a5e64f61ff9103f1fbbc2bd3c9f144d76e44c7b2986eb5e52829e7cb8393"}}) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) recvmmsg(r1, &(0x7f0000002940)=[{{0x0, 0xffffffffffffff0a, 0x0}, 0x2}], 0xf000, 0x10002, 0x0) 0s ago: executing program 7 (id=891): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) r1 = openat(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0x2c41, 0x100) flock(r1, 0x2) r2 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) r3 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x60500, 0x0) flock(r3, 0x2) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) flock(r2, 0x1) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r4, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) flock(r3, 0x1) syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000002c0)={'wlan0\x00'}) sendmsg$NL80211_CMD_NEW_KEY(r5, &(0x7f00000006c0)={0x0, 0x0, 0x0}, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_BIND_MAP(0xa, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) mremap(&(0x7f0000003000/0x1000)=nil, 0x1000, 0x2000, 0x3, &(0x7f0000ffa000/0x2000)=nil) kernel console output (not intermixed with test programs): _slave_0 left promiscuous mode [ 473.570354][ T9] bridge0: port 1(bridge_slave_0) entered disabled state [ 473.596860][ T9] device hsr_slave_0 left promiscuous mode [ 473.604180][ T9] device hsr_slave_1 left promiscuous mode [ 473.611076][ T9] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 473.620073][ T9] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 473.629036][ T9] device bridge_slave_1 left promiscuous mode [ 473.635905][ T9] bridge0: port 2(bridge_slave_1) entered disabled state [ 473.647939][ T9] device bridge_slave_0 left promiscuous mode [ 473.666183][ T9] bridge0: port 1(bridge_slave_0) entered disabled state [ 474.636788][ T5762] libceph: connect (1)[c::]:6789 error -101 [ 474.647626][ T5762] libceph: mon0 (1)[c::]:6789 connect error [ 474.670868][ T6863] ceph: No mds server is up or the cluster is laggy [ 476.063179][ T9] team0 (unregistering): Port device team_slave_1 removed [ 476.117934][ T9] team0 (unregistering): Port device team_slave_0 removed [ 476.169242][ T9] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 476.221577][ T9] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 476.576817][ T9] bond0 (unregistering): Released all slaves [ 478.060124][ T9] team0 (unregistering): Port device team_slave_1 removed [ 478.149209][ T9] team0 (unregistering): Port device team_slave_0 removed [ 478.216469][ T9] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 478.535967][ T9] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 479.197464][ T9] bond0 (unregistering): Released all slaves [ 479.321307][ T6860] netlink: 8 bytes leftover after parsing attributes in process `syz.6.477'. [ 479.338427][ T6869] netlink: 8 bytes leftover after parsing attributes in process `syz.1.481'. [ 479.363140][ T6885] netlink: 8 bytes leftover after parsing attributes in process `syz.2.486'. [ 480.362239][ T6622] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 480.406115][ T6622] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 480.455831][ T6622] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 480.473206][ T6622] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 480.495734][ T6889] netlink: 8 bytes leftover after parsing attributes in process `syz.6.487'. [ 481.353206][ T6894] ceph: No mds server is up or the cluster is laggy [ 481.360314][ T4314] libceph: connect (1)[c::]:6789 error -101 [ 481.367028][ T4314] libceph: mon0 (1)[c::]:6789 connect error [ 481.509522][ T6686] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 481.760588][ T6686] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 482.068202][ T6686] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 482.614246][ T4283] Bluetooth: hci4: command 0x0405 tx timeout [ 483.260439][ T6686] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 484.382188][ T6622] 8021q: adding VLAN 0 to HW filter on device bond0 [ 484.460496][ T4481] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 484.470836][ T4481] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 484.517747][ T6622] 8021q: adding VLAN 0 to HW filter on device team0 [ 484.577854][ T4481] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 484.607117][ T4481] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 484.627491][ T4481] bridge0: port 1(bridge_slave_0) entered blocking state [ 484.634819][ T4481] bridge0: port 1(bridge_slave_0) entered forwarding state [ 484.730722][ T4481] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 484.749285][ T4481] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 484.769806][ T4481] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 484.791398][ T4481] bridge0: port 2(bridge_slave_1) entered blocking state [ 484.798747][ T4481] bridge0: port 2(bridge_slave_1) entered forwarding state [ 484.853922][ T4481] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 484.948072][ T4481] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 485.134346][ T6920] netlink: 8 bytes leftover after parsing attributes in process `syz.2.495'. [ 485.246533][ T4481] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 485.370659][ T4481] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 485.679522][ T4481] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 485.721639][ T4481] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 485.778122][ T4481] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 486.648771][ T6686] 8021q: adding VLAN 0 to HW filter on device bond0 [ 486.718268][ T4401] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 486.803358][ T4401] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 487.122684][ T6926] netlink: 8 bytes leftover after parsing attributes in process `syz.2.497'. [ 487.212793][ T6928] netlink: 8 bytes leftover after parsing attributes in process `syz.6.496'. [ 487.267187][ T6622] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 487.307386][ T6622] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 488.224116][ T4485] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 488.263409][ T4485] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 488.313452][ T4485] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 488.331109][ T4485] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 488.347701][ T6932] netlink: 8 bytes leftover after parsing attributes in process `syz.2.498'. [ 488.366681][ T6686] 8021q: adding VLAN 0 to HW filter on device team0 [ 488.458626][ T4397] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 488.508129][ T4397] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 488.559098][ T34] libceph: connect (1)[c::]:6789 error -101 [ 488.565826][ T4397] bridge0: port 1(bridge_slave_0) entered blocking state [ 488.573153][ T4397] bridge0: port 1(bridge_slave_0) entered forwarding state [ 488.582366][ T6935] ceph: No mds server is up or the cluster is laggy [ 488.596924][ T34] libceph: mon0 (1)[c::]:6789 connect error [ 489.705110][ T4315] libceph: connect (1)[c::]:6789 error -101 [ 489.711360][ T4315] libceph: mon0 (1)[c::]:6789 connect error [ 490.528816][ T4397] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 490.573351][ T4397] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 491.635462][ T4397] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 491.665656][ T4397] bridge0: port 2(bridge_slave_1) entered blocking state [ 491.673082][ T4397] bridge0: port 2(bridge_slave_1) entered forwarding state [ 491.738128][ T4397] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 491.817670][ T4401] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 491.843395][ T4326] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 491.897765][ T4326] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 491.917325][ T4326] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 491.950343][ T4490] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 491.979854][ T4490] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 492.007602][ T6686] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 492.042696][ T6686] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 492.076376][ T4490] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 492.094353][ T4490] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 492.124195][ T4490] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 492.153984][ T4490] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 492.183174][ T4490] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 492.305572][ T4490] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 492.333175][ T4490] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 492.347092][ T6622] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 492.642696][ T6963] netlink: 8 bytes leftover after parsing attributes in process `syz.2.505'. [ 492.657915][ T6963] netlink: 8 bytes leftover after parsing attributes in process `syz.2.505'. [ 492.668025][ T6963] netlink: 8 bytes leftover after parsing attributes in process `syz.2.505'. [ 492.677964][ T6963] netlink: 8 bytes leftover after parsing attributes in process `syz.2.505'. [ 492.687294][ T6963] netlink: 8 bytes leftover after parsing attributes in process `syz.2.505'. [ 494.598179][ T6974] netlink: 8 bytes leftover after parsing attributes in process `syz.2.506'. [ 494.609596][ T6974] netlink: 8 bytes leftover after parsing attributes in process `syz.2.506'. [ 494.620111][ T6974] netlink: 8 bytes leftover after parsing attributes in process `syz.2.506'. [ 494.630274][ T6974] netlink: 8 bytes leftover after parsing attributes in process `syz.2.506'. [ 494.639973][ T6974] netlink: 8 bytes leftover after parsing attributes in process `syz.2.506'. [ 497.014208][ T4566] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 497.021909][ T4566] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 497.119857][ T6686] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 497.372279][ T34] libceph: connect (1)[c::]:6789 error -101 [ 497.390808][ T34] libceph: mon0 (1)[c::]:6789 connect error [ 497.410741][ T6997] ceph: No mds server is up or the cluster is laggy [ 497.543776][ T4280] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 497.554190][ T4280] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 497.573958][ T4280] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 497.593027][ T4280] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 497.601963][ T4280] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 497.611164][ T4280] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 497.872260][ T7012] input input20: cannot allocate more than FF_MAX_EFFECTS effects [ 499.653032][ T4280] Bluetooth: hci0: command 0x0409 tx timeout [ 501.496198][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.502829][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 501.732608][ T4280] Bluetooth: hci0: command 0x041b tx timeout [ 502.049136][ T7025] __nla_validate_parse: 10 callbacks suppressed [ 502.049171][ T7025] netlink: 8 bytes leftover after parsing attributes in process `syz.2.516'. [ 502.384994][ T7030] netlink: 8 bytes leftover after parsing attributes in process `syz.2.517'. [ 502.397815][ T7030] netlink: 8 bytes leftover after parsing attributes in process `syz.2.517'. [ 502.407934][ T7030] netlink: 8 bytes leftover after parsing attributes in process `syz.2.517'. [ 502.420611][ T7030] netlink: 8 bytes leftover after parsing attributes in process `syz.2.517'. [ 502.430521][ T7030] netlink: 8 bytes leftover after parsing attributes in process `syz.2.517'. [ 503.337151][ T7036] netlink: 8 bytes leftover after parsing attributes in process `syz.1.518'. [ 503.350260][ T7036] netlink: 8 bytes leftover after parsing attributes in process `syz.1.518'. [ 503.360356][ T7036] netlink: 8 bytes leftover after parsing attributes in process `syz.1.518'. [ 503.370670][ T7036] netlink: 8 bytes leftover after parsing attributes in process `syz.1.518'. [ 503.812677][ T4280] Bluetooth: hci0: command 0x040f tx timeout [ 504.116560][ T4312] libceph: connect (1)[c::]:6789 error -101 [ 504.125934][ T7044] ceph: No mds server is up or the cluster is laggy [ 504.133039][ T4312] libceph: mon0 (1)[c::]:6789 connect error [ 504.307130][ T7003] chnl_net:caif_netlink_parms(): no params data found [ 505.892693][ T4280] Bluetooth: hci0: command 0x0419 tx timeout [ 506.643612][ T4283] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 506.658965][ T4283] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 506.668785][ T4283] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 506.685102][ T4283] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 506.693192][ T4283] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 506.700689][ T4283] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 507.868848][ T7072] input input21: cannot allocate more than FF_MAX_EFFECTS effects [ 507.970432][ T7070] __nla_validate_parse: 2 callbacks suppressed [ 507.970452][ T7070] netlink: 8 bytes leftover after parsing attributes in process `syz.6.525'. [ 508.045219][ T7003] bridge0: port 1(bridge_slave_0) entered blocking state [ 508.059703][ T7003] bridge0: port 1(bridge_slave_0) entered disabled state [ 508.068218][ T7003] device bridge_slave_0 entered promiscuous mode [ 508.150436][ T7003] bridge0: port 2(bridge_slave_1) entered blocking state [ 508.158933][ T7003] bridge0: port 2(bridge_slave_1) entered disabled state [ 508.168821][ T7003] device bridge_slave_1 entered promiscuous mode [ 508.393188][ T7003] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 508.769745][ T7003] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 508.782845][ T4280] Bluetooth: hci3: command 0x0409 tx timeout [ 509.163385][ T7003] team0: Port device team_slave_0 added [ 509.223928][ T7003] team0: Port device team_slave_1 added [ 509.301663][ T7003] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 509.311366][ T7003] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 509.339647][ T7003] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 509.362200][ T7082] netlink: 8 bytes leftover after parsing attributes in process `syz.2.523'. [ 509.377291][ T4401] device hsr_slave_0 left promiscuous mode [ 509.385504][ T4401] device hsr_slave_1 left promiscuous mode [ 509.393589][ T4401] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 509.401505][ T4401] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 509.409796][ T4401] device bridge_slave_1 left promiscuous mode [ 509.417031][ T4401] bridge0: port 2(bridge_slave_1) entered disabled state [ 509.426335][ T4401] device bridge_slave_0 left promiscuous mode [ 509.433176][ T4401] bridge0: port 1(bridge_slave_0) entered disabled state [ 509.723746][ T4401] team0 (unregistering): Port device team_slave_1 removed [ 509.778048][ T4401] team0 (unregistering): Port device team_slave_0 removed [ 509.831440][ T4401] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 509.887612][ T4401] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 510.248638][ T4401] bond0 (unregistering): Released all slaves [ 510.363780][ T7003] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 510.370925][ T7003] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 510.397923][ T7003] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 510.532735][ T7003] device hsr_slave_0 entered promiscuous mode [ 510.567426][ T7003] device hsr_slave_1 entered promiscuous mode [ 510.578674][ T7003] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 510.592009][ T7003] Cannot create hsr debugfs directory [ 510.601942][ T7063] chnl_net:caif_netlink_parms(): no params data found [ 510.852777][ T4280] Bluetooth: hci3: command 0x041b tx timeout [ 510.855234][ T7063] bridge0: port 1(bridge_slave_0) entered blocking state [ 510.866189][ T7063] bridge0: port 1(bridge_slave_0) entered disabled state [ 510.875202][ T7063] device bridge_slave_0 entered promiscuous mode [ 510.884468][ T7063] bridge0: port 2(bridge_slave_1) entered blocking state [ 510.891704][ T7063] bridge0: port 2(bridge_slave_1) entered disabled state [ 510.900693][ T7063] device bridge_slave_1 entered promiscuous mode [ 511.005079][ T7063] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 511.048597][ T7063] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 511.118950][ T7063] team0: Port device team_slave_0 added [ 511.140951][ T7063] team0: Port device team_slave_1 added [ 511.234254][ T7063] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 511.241417][ T7063] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 511.268892][ T7063] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 511.297528][ T7063] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 511.310195][ T7063] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 511.337385][ T7063] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 511.492067][ T7063] device hsr_slave_0 entered promiscuous mode [ 511.500370][ T7063] device hsr_slave_1 entered promiscuous mode [ 511.508311][ T7063] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 511.517336][ T7063] Cannot create hsr debugfs directory [ 511.710404][ T7003] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 511.747098][ T7003] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 511.784292][ T7003] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 511.832418][ T7003] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 512.154845][ T7003] 8021q: adding VLAN 0 to HW filter on device bond0 [ 512.200270][ T7003] 8021q: adding VLAN 0 to HW filter on device team0 [ 512.241427][ T4623] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 512.260762][ T4623] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 512.328347][ T4623] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 512.338620][ T4623] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 512.347335][ T4623] bridge0: port 1(bridge_slave_0) entered blocking state [ 512.354518][ T4623] bridge0: port 1(bridge_slave_0) entered forwarding state [ 512.364892][ T4623] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 512.375051][ T4623] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 512.384183][ T4623] bridge0: port 2(bridge_slave_1) entered blocking state [ 512.391347][ T4623] bridge0: port 2(bridge_slave_1) entered forwarding state [ 512.402152][ T4623] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 512.412862][ T4623] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 512.422085][ T4623] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 512.488914][ T4480] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 512.505094][ T4480] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 512.524169][ T4480] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 512.600487][ T4480] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 512.610474][ T4480] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 512.625982][ T4323] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 512.641305][ T4323] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 512.655919][ T4480] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 512.674475][ T4480] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 512.720054][ T7003] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 512.932768][ T4280] Bluetooth: hci3: command 0x040f tx timeout [ 513.056813][ T4401] device hsr_slave_0 left promiscuous mode [ 513.077719][ T4401] device hsr_slave_1 left promiscuous mode [ 513.094521][ T4401] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 513.113644][ T4401] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 513.124126][ T4401] device bridge_slave_1 left promiscuous mode [ 513.130484][ T4401] bridge0: port 2(bridge_slave_1) entered disabled state [ 513.164229][ T4401] device bridge_slave_0 left promiscuous mode [ 513.170541][ T4401] bridge0: port 1(bridge_slave_0) entered disabled state [ 513.491629][ T4401] team0 (unregistering): Port device team_slave_1 removed [ 513.552356][ T4401] team0 (unregistering): Port device team_slave_0 removed [ 513.609344][ T4401] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 513.669247][ T4401] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 514.022127][ T4401] bond0 (unregistering): Released all slaves [ 514.224880][ T4323] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 514.251283][ T4323] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 514.299062][ T7003] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 514.344529][ T7063] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 514.362158][ T7063] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 514.385332][ T7063] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 514.453271][ T7063] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 514.649706][ T7063] 8021q: adding VLAN 0 to HW filter on device bond0 [ 514.673667][ T4480] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 514.682325][ T4480] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 514.695652][ T7063] 8021q: adding VLAN 0 to HW filter on device team0 [ 514.707751][ T4480] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 514.720320][ T4480] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 514.729813][ T4480] bridge0: port 1(bridge_slave_0) entered blocking state [ 514.737065][ T4480] bridge0: port 1(bridge_slave_0) entered forwarding state [ 514.798256][ T4480] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 514.807178][ T4480] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 514.818829][ T4480] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 514.828807][ T4480] bridge0: port 2(bridge_slave_1) entered blocking state [ 514.836016][ T4480] bridge0: port 2(bridge_slave_1) entered forwarding state [ 514.846880][ T4480] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 514.856712][ T4480] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 514.866396][ T4480] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 514.878091][ T4480] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 514.929274][ T4480] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 514.961733][ T4480] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 514.979192][ T4480] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 514.989446][ T4480] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 515.005518][ T4480] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 515.014150][ T4280] Bluetooth: hci3: command 0x0419 tx timeout [ 515.032203][ T7063] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 515.050262][ T7063] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 515.075696][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 515.085027][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 515.340759][ T4480] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 515.368705][ T4480] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 515.411158][ T4480] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 515.435424][ T4480] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 515.470091][ T4480] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 515.494465][ T4480] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 515.504964][ T7003] device veth0_vlan entered promiscuous mode [ 515.551929][ T7003] device veth1_vlan entered promiscuous mode [ 515.611762][ T4401] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 515.630296][ T4401] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 515.640229][ T4401] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 515.650521][ T4401] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 515.663895][ T7003] device veth0_macvtap entered promiscuous mode [ 515.686791][ T7003] device veth1_macvtap entered promiscuous mode [ 515.711686][ T4623] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 515.722015][ T4623] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 515.730785][ T4623] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 515.740550][ T4623] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 515.759200][ T7063] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 515.780032][ T7003] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 515.792947][ T7003] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 515.811065][ T7003] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 515.828811][ T7003] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 515.841271][ T7003] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 515.859074][ T7003] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 515.871448][ T7003] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 515.884130][ T4490] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 515.895027][ T4490] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 515.918630][ T7003] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 515.946948][ T7003] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 515.981196][ T7003] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 516.002590][ T7003] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 516.022861][ T7003] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 516.037162][ T7003] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 516.049958][ T7003] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 516.066115][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 516.076256][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 516.088427][ T7003] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 516.097804][ T7003] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 516.112957][ T7003] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 516.121749][ T7003] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 516.277174][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 516.300600][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 516.336937][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 516.357550][ T4490] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 516.377867][ T4490] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 516.392391][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 516.747766][ T7167] input input22: cannot allocate more than FF_MAX_EFFECTS effects [ 517.092674][ T4280] Bluetooth: hci3: command 0x0405 tx timeout [ 518.743039][ T7174] input input23: cannot allocate more than FF_MAX_EFFECTS effects [ 520.912080][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 520.937178][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 521.002400][ T4623] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 521.028901][ T4623] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 521.503907][ T7184] netlink: 8 bytes leftover after parsing attributes in process `syz.7.296'. [ 521.518725][ T7063] device veth0_vlan entered promiscuous mode [ 522.017777][ T4623] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 522.043592][ T4623] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 522.170540][ T7063] device veth1_vlan entered promiscuous mode [ 524.518608][ T4623] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 524.528882][ T4623] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 524.554326][ T7063] device veth0_macvtap entered promiscuous mode [ 524.584100][ T7063] device veth1_macvtap entered promiscuous mode [ 524.777741][ T7198] netlink: 8 bytes leftover after parsing attributes in process `syz.1.539'. [ 524.856249][ T7198] netlink: 8 bytes leftover after parsing attributes in process `syz.1.539'. [ 524.865835][ T7198] netlink: 8 bytes leftover after parsing attributes in process `syz.1.539'. [ 524.874980][ T7198] netlink: 8 bytes leftover after parsing attributes in process `syz.1.539'. [ 524.884423][ T7198] netlink: 8 bytes leftover after parsing attributes in process `syz.1.539'. [ 524.969851][ T7063] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 525.080578][ T7063] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 525.130996][ T7063] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 525.188554][ T7063] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 525.228146][ T7063] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 525.273570][ T7063] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 525.329538][ T7063] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 525.381578][ T7063] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 525.440280][ T7063] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 525.489394][ T4913] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 525.547225][ T4913] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 525.723282][ T4913] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 525.917413][ T7063] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 526.053747][ T7063] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 526.302438][ T7063] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 526.401895][ T7063] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 526.412063][ T7063] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 526.422794][ T7063] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 526.432874][ T7063] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 526.443622][ T7063] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 526.456505][ T7063] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 526.467697][ T7217] netlink: 8 bytes leftover after parsing attributes in process `syz.1.533'. [ 526.510193][ T4490] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 526.531529][ T4490] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 526.762391][ T7063] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 528.497452][ T7063] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 529.437346][ T7063] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 529.552140][ T7063] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 530.961834][ T7236] input input25: cannot allocate more than FF_MAX_EFFECTS effects [ 532.869755][ T7242] netlink: 8 bytes leftover after parsing attributes in process `syz.2.545'. [ 532.929094][ T4401] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 532.966230][ T4401] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 534.589124][ T4361] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 534.721007][ T7248] hub 8-0:1.0: USB hub found [ 534.732058][ T7248] hub 8-0:1.0: 1 port detected [ 535.066778][ T4490] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 535.113591][ T4490] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 535.141517][ T4490] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 535.373013][ T7262] netlink: 8 bytes leftover after parsing attributes in process `syz.2.546'. [ 535.384878][ T7262] netlink: 8 bytes leftover after parsing attributes in process `syz.2.546'. [ 535.397334][ T7262] netlink: 8 bytes leftover after parsing attributes in process `syz.2.546'. [ 535.408387][ T7262] netlink: 8 bytes leftover after parsing attributes in process `syz.2.546'. [ 535.418167][ T7262] netlink: 8 bytes leftover after parsing attributes in process `syz.2.546'. [ 537.925693][ T7278] netlink: 8 bytes leftover after parsing attributes in process `syz.2.550'. [ 537.938902][ T7278] netlink: 8 bytes leftover after parsing attributes in process `syz.2.550'. [ 537.949516][ T7278] netlink: 8 bytes leftover after parsing attributes in process `syz.2.550'. [ 537.960030][ T7278] netlink: 8 bytes leftover after parsing attributes in process `syz.2.550'. [ 537.969627][ T7278] netlink: 8 bytes leftover after parsing attributes in process `syz.2.550'. [ 541.566039][ T7292] input input26: cannot allocate more than FF_MAX_EFFECTS effects [ 541.753741][ T7297] loop1: detected capacity change from 0 to 128 [ 542.202131][ T7303] ptrace attach of "ci2-linux-6-1-kasan/syz-executor exec"[4272] was attempted by "ci2-linux-6-1-kasan/syz-executor exec"[7303] [ 542.238965][ T7303] netlink: 260 bytes leftover after parsing attributes in process `syz.1.554'. [ 542.248637][ T7303] netlink: 104 bytes leftover after parsing attributes in process `syz.1.554'. [ 542.258258][ T7303] netlink: 8 bytes leftover after parsing attributes in process `syz.1.554'. [ 542.273135][ T4280] Bluetooth: Wrong link type (-22) [ 542.684722][ T7305] netlink: 8 bytes leftover after parsing attributes in process `syz.8.556'. [ 544.907656][ T7318] sctp: failed to load transform for md5: -2 [ 544.907687][ T7320] sctp: failed to load transform for md5: -2 [ 550.841073][ T7369] input input27: cannot allocate more than FF_MAX_EFFECTS effects [ 552.600070][ T7382] netlink: 8 bytes leftover after parsing attributes in process `syz.1.571'. [ 554.167160][ T7396] netlink: 8 bytes leftover after parsing attributes in process `syz.6.574'. [ 554.178510][ T7396] netlink: 8 bytes leftover after parsing attributes in process `syz.6.574'. [ 554.188790][ T7396] netlink: 8 bytes leftover after parsing attributes in process `syz.6.574'. [ 554.200254][ T7396] netlink: 8 bytes leftover after parsing attributes in process `syz.6.574'. [ 554.211662][ T7396] netlink: 8 bytes leftover after parsing attributes in process `syz.6.574'. [ 556.246155][ T7399] netlink: 8 bytes leftover after parsing attributes in process `syz.2.563'. [ 556.474153][ T7404] netlink: 8 bytes leftover after parsing attributes in process `syz.2.563'. [ 556.559766][ T7404] netlink: 8 bytes leftover after parsing attributes in process `syz.2.563'. [ 556.619249][ T7404] netlink: 8 bytes leftover after parsing attributes in process `syz.2.563'. [ 559.020932][ T7428] input input29: cannot allocate more than FF_MAX_EFFECTS effects [ 559.148958][ T7430] loop1: detected capacity change from 0 to 8192 [ 563.042191][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 563.049133][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 564.733143][ T7447] __nla_validate_parse: 1 callbacks suppressed [ 564.733165][ T7447] netlink: 8 bytes leftover after parsing attributes in process `syz.6.586'. [ 566.859456][ T7462] genirq: Flags mismatch irq 7. 00000000 (ttyS3) vs. 00000000 (pcl818) [ 567.445989][ T7461] netlink: 8 bytes leftover after parsing attributes in process `syz.1.588'. [ 567.457551][ T7461] netlink: 8 bytes leftover after parsing attributes in process `syz.1.588'. [ 567.467941][ T7461] netlink: 8 bytes leftover after parsing attributes in process `syz.1.588'. [ 567.478165][ T7461] netlink: 8 bytes leftover after parsing attributes in process `syz.1.588'. [ 567.487866][ T7461] netlink: 8 bytes leftover after parsing attributes in process `syz.1.588'. [ 572.328900][ T7491] 9pnet_fd: p9_fd_create_tcp (7491): problem connecting socket to 127.0.0.1 [ 574.967986][ T7499] input input31: cannot allocate more than FF_MAX_EFFECTS effects [ 575.888637][ T7504] netlink: 8 bytes leftover after parsing attributes in process `syz.2.587'. [ 575.900755][ T7504] netlink: 8 bytes leftover after parsing attributes in process `syz.2.587'. [ 575.911271][ T7504] netlink: 8 bytes leftover after parsing attributes in process `syz.2.587'. [ 575.926144][ T7504] netlink: 8 bytes leftover after parsing attributes in process `syz.2.587'. [ 575.936120][ T7504] netlink: 8 bytes leftover after parsing attributes in process `syz.2.587'. [ 576.974003][ T22] libceph: connect (1)[c::]:6789 error -101 [ 577.004990][ T7507] ceph: No mds server is up or the cluster is laggy [ 577.016886][ T22] libceph: mon0 (1)[c::]:6789 connect error [ 578.383529][ T4277] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 578.396669][ T4277] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 578.405596][ T4277] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 578.414597][ T4277] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 578.422621][ T4277] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 578.431576][ T4277] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 580.452603][ T4280] Bluetooth: hci4: command 0x0409 tx timeout [ 580.644449][ T7546] netlink: 8 bytes leftover after parsing attributes in process `syz.6.602'. [ 580.656795][ T7546] netlink: 8 bytes leftover after parsing attributes in process `syz.6.602'. [ 580.667547][ T7546] netlink: 8 bytes leftover after parsing attributes in process `syz.6.602'. [ 580.677411][ T7546] netlink: 8 bytes leftover after parsing attributes in process `syz.6.602'. [ 580.688647][ T7546] netlink: 8 bytes leftover after parsing attributes in process `syz.6.602'. [ 582.532644][ T4283] Bluetooth: hci4: command 0x041b tx timeout [ 582.977513][ T7521] chnl_net:caif_netlink_parms(): no params data found [ 583.878066][ T5038] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 583.906474][ T7574] netlink: 8 bytes leftover after parsing attributes in process `syz.1.608'. [ 584.115489][ T5038] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 584.245482][ T4373] libceph: connect (1)[c::]:6789 error -101 [ 584.262102][ T4373] libceph: mon0 (1)[c::]:6789 connect error [ 584.274493][ T7580] ceph: No mds server is up or the cluster is laggy [ 584.557242][ T4312] libceph: connect (1)[c::]:6789 error -101 [ 584.622643][ T4283] Bluetooth: hci4: command 0x040f tx timeout [ 585.196289][ T4312] libceph: mon0 (1)[c::]:6789 connect error [ 585.574139][ T5038] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 585.951576][ T5038] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 586.020741][ T7521] bridge0: port 1(bridge_slave_0) entered blocking state [ 586.032681][ T7521] bridge0: port 1(bridge_slave_0) entered disabled state [ 586.089635][ T7521] device bridge_slave_0 entered promiscuous mode [ 586.139387][ T7521] bridge0: port 2(bridge_slave_1) entered blocking state [ 586.692721][ T4283] Bluetooth: hci4: command 0x0419 tx timeout [ 586.933655][ T7602] loop7: detected capacity change from 0 to 4096 [ 586.954200][ T7521] bridge0: port 2(bridge_slave_1) entered disabled state [ 586.962801][ T7521] device bridge_slave_1 entered promiscuous mode [ 586.999171][ T7521] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 587.013084][ T7521] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 587.058557][ T7521] team0: Port device team_slave_0 added [ 587.067664][ T7521] team0: Port device team_slave_1 added [ 587.084988][ T7618] netlink: 8 bytes leftover after parsing attributes in process `syz.2.615'. [ 588.859060][ T7521] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 588.898807][ T7521] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 589.347895][ T7521] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 590.843782][ T7521] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 590.851396][ T7521] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 590.894281][ T7521] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 590.931189][ T7636] netlink: 8 bytes leftover after parsing attributes in process `syz.6.619'. [ 591.179109][ T7521] device hsr_slave_0 entered promiscuous mode [ 591.231801][ T7521] device hsr_slave_1 entered promiscuous mode [ 591.284423][ T7521] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 591.292250][ T7521] Cannot create hsr debugfs directory [ 592.157128][ T7521] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 592.203201][ T7521] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 592.229941][ T7521] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 592.271849][ T7521] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 593.266187][ T7676] loop2: detected capacity change from 0 to 256 [ 593.312102][ T4312] libceph: connect (1)[c::]:6789 error -101 [ 593.331054][ T4312] libceph: mon0 (1)[c::]:6789 connect error [ 593.340992][ T7675] ceph: No mds server is up or the cluster is laggy [ 593.429853][ T7677] bridge0: port 3(syz_tun) entered disabled state [ 594.525724][ T7691] x_tables: ip_tables: TCPMSS.0 target: invalid size 8 (kernel) != (user) 16 [ 594.962539][ T4315] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 595.232725][ T4315] usb 3-1: Using ep0 maxpacket: 8 [ 595.256576][ T4315] usb 3-1: New USB device found, idVendor=2833, idProduct=0201, bcdDevice=2a.d5 [ 595.273191][ T4315] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 595.407805][ T4315] usb 3-1: config 0 descriptor?? [ 596.120183][ T7677] device syz_tun left promiscuous mode [ 596.181144][ T7677] bridge0: port 3(syz_tun) entered disabled state [ 596.360717][ T7687] bridge0: port 3(syz_tun) entered blocking state [ 596.374973][ T7687] bridge0: port 3(syz_tun) entered disabled state [ 596.412174][ T7687] device syz_tun entered promiscuous mode [ 596.423185][ T7687] bridge0: port 3(syz_tun) entered blocking state [ 596.429867][ T7687] bridge0: port 3(syz_tun) entered forwarding state [ 596.800633][ T4315] usb 3-1: string descriptor 0 read error: -71 [ 596.872890][ T7705] tmpfs: Unknown parameter 'quota' [ 597.572657][ T4315] uvcvideo 3-1:0.0: Found multiple Units with ID 1 [ 597.579498][ T4315] usb 3-1: Found UVC 0.00 device (2833:0201) [ 597.586757][ T4315] usb 3-1: No valid video chain found. [ 597.615031][ T4315] usb 3-1: USB disconnect, device number 2 [ 597.640358][ T7521] 8021q: adding VLAN 0 to HW filter on device bond0 [ 598.062906][ T4361] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 598.079688][ T4361] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 598.109963][ T7521] 8021q: adding VLAN 0 to HW filter on device team0 [ 598.172321][ T4566] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 598.197788][ T4566] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 598.228427][ T4566] bridge0: port 1(bridge_slave_0) entered blocking state [ 598.235691][ T4566] bridge0: port 1(bridge_slave_0) entered forwarding state [ 598.289038][ T4566] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 599.000646][ T7730] loop6: detected capacity change from 0 to 1024 [ 599.233455][ T7730] EXT4-fs: Invalid want_extra_isize 7 [ 599.350247][ T5965] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 599.386420][ T6607] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 599.395459][ T5965] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 599.423963][ T5965] bridge0: port 2(bridge_slave_1) entered blocking state [ 599.431283][ T5965] bridge0: port 2(bridge_slave_1) entered forwarding state [ 600.284811][ T7751] random: crng reseeded on system resumption [ 601.171358][ T5038] device hsr_slave_0 left promiscuous mode [ 601.581559][ T5038] device hsr_slave_1 left promiscuous mode [ 601.591322][ T7749] ceph: No mds server is up or the cluster is laggy [ 601.599010][ T4315] libceph: connect (1)[c::]:6789 error -101 [ 601.611151][ T4315] libceph: mon0 (1)[c::]:6789 connect error [ 601.637241][ T5038] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 601.680582][ T5038] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 601.817257][ T5038] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 601.882837][ T5038] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 602.753158][ T5038] device bridge_slave_1 left promiscuous mode [ 602.759531][ T5038] bridge0: port 2(bridge_slave_1) entered disabled state [ 603.011223][ T5038] device bridge_slave_0 left promiscuous mode [ 603.030549][ T5038] bridge0: port 1(bridge_slave_0) entered disabled state [ 603.603996][ T5038] device veth1_macvtap left promiscuous mode [ 603.610229][ T5038] device veth0_macvtap left promiscuous mode [ 603.658836][ T5038] device veth1_vlan left promiscuous mode [ 603.686003][ T5038] device veth0_vlan left promiscuous mode [ 608.778052][ T4280] Bluetooth: hci4: command 0x0405 tx timeout [ 609.864927][ T5038] team0 (unregistering): Port device team_slave_1 removed [ 609.922949][ T5038] team0 (unregistering): Port device team_slave_0 removed [ 609.979616][ T5038] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 610.035025][ T5038] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 610.484078][ T5038] bond0 (unregistering): Released all slaves [ 610.638958][ T4397] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 610.648934][ T4397] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 610.674849][ T4397] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 610.693780][ T4397] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 610.710187][ T4397] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 610.719567][ T4397] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 610.772285][ T7777] netlink: 8 bytes leftover after parsing attributes in process `syz.2.637'. [ 610.841287][ T4397] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 610.865520][ T4397] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 610.890873][ T4397] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 610.910580][ T7521] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 610.936342][ T7521] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 610.946164][ T29] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 610.956384][ T29] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 611.416562][ T5038] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 611.425097][ T5038] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 611.445818][ T7521] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 611.999527][ T29] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 612.016435][ T29] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 612.055227][ T29] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 612.074632][ T29] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 612.091023][ T29] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 612.101360][ T29] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 612.119418][ T7521] device veth0_vlan entered promiscuous mode [ 612.140312][ T7521] device veth1_vlan entered promiscuous mode [ 612.173142][ T4566] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 612.193079][ T4566] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 612.204801][ T4566] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 612.214529][ T4566] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 612.229303][ T7521] device veth0_macvtap entered promiscuous mode [ 612.247364][ T7521] device veth1_macvtap entered promiscuous mode [ 612.272795][ T7521] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 612.288164][ T7521] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 612.303487][ T7521] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 612.314888][ T7521] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 612.325736][ T7521] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 612.336562][ T7521] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 612.346947][ T7521] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 612.358281][ T7521] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 612.371086][ T7521] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 612.394815][ T5038] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 612.409483][ T5038] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 612.420468][ T5038] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 612.431093][ T5038] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 612.443884][ T7521] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 612.455282][ T7521] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 612.466144][ T7521] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 612.477697][ T7521] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 612.489057][ T7521] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 612.502327][ T7521] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 612.514645][ T7521] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 612.525628][ T7521] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 612.539192][ T7521] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 612.550476][ T4397] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 612.560650][ T4397] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 612.573688][ T7521] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 612.587257][ T7521] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 612.598741][ T7521] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 612.608459][ T7521] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 612.729925][ T29] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 612.742798][ T29] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 612.755229][ T4566] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 612.792819][ T5038] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 612.800910][ T5038] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 612.815292][ T4566] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 614.878846][ T7858] genirq: Flags mismatch irq 7. 00000000 (ttyS3) vs. 00000000 (pcl818) [ 615.168390][ T7861] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 615.179686][ T7861] F2FS-fs (loop2): Unable to read 1th superblock [ 615.188702][ T7861] I/O error, dev loop2, sector 8 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 615.199768][ T7861] F2FS-fs (loop2): Unable to read 2th superblock [ 617.742863][ T7885] netlink: 16 bytes leftover after parsing attributes in process `syz.6.643'. [ 619.446333][ T7892] loop2: detected capacity change from 0 to 256 [ 620.333168][ T7892] exfat: Deprecated parameter 'utf8' [ 620.417085][ T7892] exFAT-fs (loop2): failed to load upcase table (idx : 0x0001fe89, chksum : 0xbf24f927, utbl_chksum : 0xe619d30d) [ 621.286103][ T4280] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0 [ 621.295125][ T4280] Bluetooth: hci2: Injecting HCI hardware error event [ 621.322309][ T4283] Bluetooth: hci2: hardware error 0x00 [ 621.665432][ T4280] Bluetooth: hci0: command 0x0406 tx timeout [ 621.864152][ T7914] netlink: 8 bytes leftover after parsing attributes in process `syz.1.655'. [ 621.876176][ T7914] netlink: 8 bytes leftover after parsing attributes in process `syz.1.655'. [ 621.886493][ T7914] netlink: 8 bytes leftover after parsing attributes in process `syz.1.655'. [ 621.896535][ T7914] netlink: 8 bytes leftover after parsing attributes in process `syz.1.655'. [ 621.906391][ T7914] netlink: 8 bytes leftover after parsing attributes in process `syz.1.655'. [ 622.779116][ T7919] loop1: detected capacity change from 0 to 128 [ 623.094525][ T7922] ptrace attach of "ci2-linux-6-1-kasan/syz-executor exec"[4272] was attempted by "ci2-linux-6-1-kasan/syz-executor exec"[7922] [ 623.124777][ T7922] netlink: 388 bytes leftover after parsing attributes in process `syz.1.657'. [ 623.136079][ T4280] Bluetooth: Wrong link type (-22) [ 623.248765][ T7921] loop7: detected capacity change from 0 to 512 [ 623.261312][ T7921] EXT4-fs: inline encryption not supported [ 623.550464][ T7921] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 623.933281][ T4283] Bluetooth: hci2: Opcode 0x0c03 failed: -110 [ 624.079684][ T7936] genirq: Flags mismatch irq 7. 00000000 (ttyS3) vs. 00000000 (pcl818) [ 624.582670][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.589169][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 624.613660][ T7921] EXT4-fs (loop7): 1 truncate cleaned up [ 624.626802][ T7921] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: writeback. [ 624.691995][ T7943] bridge0: port 3(syz_tun) entered blocking state [ 624.699227][ T7943] bridge0: port 3(syz_tun) entered disabled state [ 624.711684][ T7943] device syz_tun entered promiscuous mode [ 624.731595][ T7943] bridge0: port 3(syz_tun) entered blocking state [ 624.738354][ T7943] bridge0: port 3(syz_tun) entered forwarding state [ 624.839061][ T7944] x_tables: ip_tables: TCPMSS.0 target: invalid size 8 (kernel) != (user) 16 [ 626.106685][ T7003] EXT4-fs (loop7): unmounting filesystem. [ 628.741064][ T7959] netlink: 16 bytes leftover after parsing attributes in process `syz.2.664'. [ 630.053011][ T4283] Bluetooth: hci5: Controller not accepting commands anymore: ncmd = 0 [ 630.063605][ T4283] Bluetooth: hci5: Injecting HCI hardware error event [ 630.073152][ T4277] Bluetooth: hci5: hardware error 0x00 [ 630.193760][ T7966] db_root: cannot open: ./m [ 630.218347][ T7966] netlink: 8 bytes leftover after parsing attributes in process `syz.7.662'. [ 631.117755][ T7982] netlink: 8 bytes leftover after parsing attributes in process `syz.9.667'. [ 631.130403][ T7982] netlink: 8 bytes leftover after parsing attributes in process `syz.9.667'. [ 631.141761][ T7982] netlink: 8 bytes leftover after parsing attributes in process `syz.9.667'. [ 631.153828][ T7982] netlink: 8 bytes leftover after parsing attributes in process `syz.9.667'. [ 631.165624][ T7982] netlink: 8 bytes leftover after parsing attributes in process `syz.9.667'. [ 632.990061][ T4277] Bluetooth: hci5: Opcode 0x0c03 failed: -110 [ 634.415321][ T8006] gfs2: not a GFS2 filesystem [ 634.446032][ T8006] hpfs: Bad magic ... probably not HPFS [ 635.160616][ T8012] loop6: detected capacity change from 0 to 512 [ 635.168390][ T8012] EXT4-fs: inline encryption not supported [ 635.185464][ T8012] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 635.304645][ T8012] EXT4-fs (loop6): 1 truncate cleaned up [ 635.327445][ T8018] x_tables: ip_tables: TCPMSS.0 target: invalid size 8 (kernel) != (user) 16 [ 635.509273][ T8012] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 637.241495][ T5181] EXT4-fs (loop6): unmounting filesystem. [ 637.411214][ T8031] ceph: No mds server is up or the cluster is laggy [ 637.426137][ T4313] libceph: connect (1)[c::]:6789 error -101 [ 637.468523][ T4313] libceph: mon0 (1)[c::]:6789 connect error [ 640.290616][ T8043] input input33: cannot allocate more than FF_MAX_EFFECTS effects [ 640.694069][ T4277] Bluetooth: hci0: Controller not accepting commands anymore: ncmd = 0 [ 640.703582][ T4277] Bluetooth: hci0: Injecting HCI hardware error event [ 640.721984][ T4283] Bluetooth: hci0: hardware error 0x00 [ 641.232069][ T8053] netlink: 8 bytes leftover after parsing attributes in process `syz.6.683'. [ 641.247154][ T8053] netlink: 8 bytes leftover after parsing attributes in process `syz.6.683'. [ 641.258116][ T8053] netlink: 8 bytes leftover after parsing attributes in process `syz.6.683'. [ 641.269478][ T8053] netlink: 8 bytes leftover after parsing attributes in process `syz.6.683'. [ 641.280787][ T8053] netlink: 8 bytes leftover after parsing attributes in process `syz.6.683'. [ 642.602989][ T8062] Cannot find set identified by id 0 to match [ 643.972647][ T4283] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 646.231256][ T8077] loop2: detected capacity change from 0 to 128 [ 646.485404][ T8081] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 [ 647.204218][ T8084] netlink: 8 bytes leftover after parsing attributes in process `syz.6.688'. [ 647.215626][ T8084] netlink: 8 bytes leftover after parsing attributes in process `syz.6.688'. [ 647.226645][ T8084] netlink: 8 bytes leftover after parsing attributes in process `syz.6.688'. [ 647.236722][ T8084] netlink: 8 bytes leftover after parsing attributes in process `syz.6.688'. [ 647.246656][ T8084] netlink: 8 bytes leftover after parsing attributes in process `syz.6.688'. [ 647.515215][ T8082] netlink: 8 bytes leftover after parsing attributes in process `syz.7.689'. [ 647.531774][ T8082] netlink: 8 bytes leftover after parsing attributes in process `syz.7.689'. [ 647.541915][ T8082] netlink: 8 bytes leftover after parsing attributes in process `syz.7.689'. [ 647.554168][ T8082] netlink: 8 bytes leftover after parsing attributes in process `syz.7.689'. [ 647.565130][ T8082] netlink: 8 bytes leftover after parsing attributes in process `syz.7.689'. [ 647.773675][ T8077] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 647.833242][ T8077] ext4 filesystem being mounted at /184/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 649.681339][ T4277] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 649.692291][ T4277] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 649.701396][ T4280] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 649.721370][ T4280] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 649.730863][ T4280] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 649.749249][ T4280] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 650.871136][ T8097] EXT4-fs (loop2): unmounting filesystem. [ 651.485812][ T8124] input input34: cannot allocate more than FF_MAX_EFFECTS effects [ 651.812612][ T4280] Bluetooth: hci3: command 0x0409 tx timeout [ 652.108413][ T4283] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 652.126038][ T4283] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 652.135859][ T4283] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 652.626705][ T4283] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 652.837609][ T4277] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 652.845358][ T4283] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 654.649774][ T4280] Bluetooth: hci3: command 0x041b tx timeout [ 654.932688][ T4280] Bluetooth: hci6: command 0x0409 tx timeout [ 655.412104][ T7074] bridge0: port 3(syz_tun) entered disabled state [ 655.518955][ T7074] device syz_tun left promiscuous mode [ 655.528226][ T7074] bridge0: port 3(syz_tun) entered disabled state [ 655.828399][ T8097] bridge0: port 3(syz_tun) entered disabled state [ 656.125956][ T8097] device syz_tun left promiscuous mode [ 656.205670][ T8097] bridge0: port 3(syz_tun) entered disabled state [ 656.692659][ T4280] Bluetooth: hci3: command 0x040f tx timeout [ 656.808549][ T4313] libceph: connect (1)[c::]:6789 error -101 [ 656.830626][ T4313] libceph: mon0 (1)[c::]:6789 connect error [ 656.841305][ T8150] ceph: No mds server is up or the cluster is laggy [ 657.022837][ T4280] Bluetooth: hci6: command 0x041b tx timeout [ 657.138397][ T8146] __nla_validate_parse: 1 callbacks suppressed [ 657.138413][ T8146] netlink: 8 bytes leftover after parsing attributes in process `syz.7.701'. [ 657.247612][ T8106] chnl_net:caif_netlink_parms(): no params data found [ 657.815498][ T7852] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 658.436743][ T7852] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 658.503963][ T8129] chnl_net:caif_netlink_parms(): no params data found [ 658.772944][ T4280] Bluetooth: hci3: command 0x0419 tx timeout [ 659.092655][ T4280] Bluetooth: hci6: command 0x040f tx timeout [ 659.516847][ T8171] netlink: 8 bytes leftover after parsing attributes in process `syz.7.705'. [ 661.172607][ T4280] Bluetooth: hci6: command 0x0419 tx timeout [ 661.187578][ T7852] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 661.270861][ T8106] bridge0: port 1(bridge_slave_0) entered blocking state [ 661.298960][ T8106] bridge0: port 1(bridge_slave_0) entered disabled state [ 661.321913][ T8106] device bridge_slave_0 entered promiscuous mode [ 661.467769][ T8193] input input35: cannot allocate more than FF_MAX_EFFECTS effects [ 662.185344][ T8106] bridge0: port 2(bridge_slave_1) entered blocking state [ 662.204914][ T8106] bridge0: port 2(bridge_slave_1) entered disabled state [ 662.371828][ T8106] device bridge_slave_1 entered promiscuous mode [ 662.530009][ T8196] netlink: 8 bytes leftover after parsing attributes in process `syz.9.700'. [ 662.812850][ T7852] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 663.621793][ T8207] zram: Cannot change disksize for initialized device [ 663.853305][ T8106] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 664.091853][ T8106] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 664.186491][ T8129] bridge0: port 1(bridge_slave_0) entered blocking state [ 664.204389][ T8129] bridge0: port 1(bridge_slave_0) entered disabled state [ 665.242209][ T8129] device bridge_slave_0 entered promiscuous mode [ 665.251070][ T8129] bridge0: port 2(bridge_slave_1) entered blocking state [ 665.260668][ T8129] bridge0: port 2(bridge_slave_1) entered disabled state [ 665.269436][ T8129] device bridge_slave_1 entered promiscuous mode [ 665.300501][ T8106] team0: Port device team_slave_0 added [ 665.309583][ T8106] team0: Port device team_slave_1 added [ 665.334502][ T8106] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 665.341559][ T8106] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 665.692666][ T8106] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 667.525682][ T8106] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 667.552542][ T8106] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 667.744398][ T8106] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 668.926362][ T8242] x_tables: ip_tables: TCPMSS.0 target: invalid size 8 (kernel) != (user) 16 [ 668.959343][ T8129] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 669.083190][ T8237] netlink: 8 bytes leftover after parsing attributes in process `syz.6.714'. [ 670.579897][ T8129] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 670.649829][ T8245] netlink: 8 bytes leftover after parsing attributes in process `syz.7.717'. [ 670.853604][ T8106] device hsr_slave_0 entered promiscuous mode [ 671.020384][ T8106] device hsr_slave_1 entered promiscuous mode [ 671.033312][ T8106] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 671.060307][ T8106] Cannot create hsr debugfs directory [ 671.111554][ T8129] team0: Port device team_slave_0 added [ 672.863628][ T8129] team0: Port device team_slave_1 added [ 673.673603][ T8129] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 674.177802][ T8129] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 674.344315][ T8273] Bluetooth: MGMT ver 1.22 [ 674.408348][ T8129] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 674.528353][ T8129] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 674.554642][ T8129] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 674.693712][ T8129] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 676.477023][ T8285] netlink: 8 bytes leftover after parsing attributes in process `syz.6.726'. [ 677.645979][ T8298] input input36: cannot allocate more than FF_MAX_EFFECTS effects [ 677.671491][ T8293] netlink: 8 bytes leftover after parsing attributes in process `syz.7.727'. [ 678.524604][ T8129] device hsr_slave_0 entered promiscuous mode [ 678.719225][ T8129] device hsr_slave_1 entered promiscuous mode [ 678.729392][ T8129] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 678.749319][ T8129] Cannot create hsr debugfs directory [ 684.254059][ T8332] input input37: cannot allocate more than FF_MAX_EFFECTS effects [ 685.580025][ T8341] loop7: detected capacity change from 0 to 8192 [ 685.873679][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 685.886598][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 687.518946][ T8350] netlink: 8 bytes leftover after parsing attributes in process `syz.7.737'. [ 688.705338][ T8362] input input38: cannot allocate more than FF_MAX_EFFECTS effects [ 690.508338][ T8371] gfs2: not a GFS2 filesystem [ 690.514881][ T8371] hpfs: Bad magic ... probably not HPFS [ 690.947636][ T7852] device hsr_slave_0 left promiscuous mode [ 691.039750][ T7852] device hsr_slave_1 left promiscuous mode [ 691.063583][ T7852] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 691.138497][ T7852] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 691.164386][ T7852] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 691.171903][ T7852] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 691.223057][ T7852] device bridge_slave_1 left promiscuous mode [ 691.231664][ T7852] bridge0: port 2(bridge_slave_1) entered disabled state [ 691.249310][ T7852] device bridge_slave_0 left promiscuous mode [ 691.258956][ T7852] bridge0: port 1(bridge_slave_0) entered disabled state [ 692.916569][ T8385] input input39: cannot allocate more than FF_MAX_EFFECTS effects [ 694.914644][ T7852] device veth1_macvtap left promiscuous mode [ 694.920938][ T7852] device veth0_macvtap left promiscuous mode [ 694.950166][ T7852] device veth1_vlan left promiscuous mode [ 694.993032][ T7852] device veth0_vlan left promiscuous mode [ 698.459968][ T8418] input input40: cannot allocate more than FF_MAX_EFFECTS effects [ 702.520630][ T4277] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 702.531542][ T4277] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 702.541382][ T4277] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 702.557527][ T4277] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 702.569315][ T4277] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 702.583072][ T4277] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 704.693982][ T4280] Bluetooth: hci1: command 0x0409 tx timeout [ 705.006230][ T7852] team0 (unregistering): Port device team_slave_1 removed [ 705.638476][ T7852] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 705.704530][ T7852] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 706.170254][ T7852] bond0 (unregistering): Released all slaves [ 706.419091][ T8412] netlink: 8 bytes leftover after parsing attributes in process `syz.9.749'. [ 706.754678][ T8442] input: syz1 as /devices/virtual/input/input41 [ 706.907687][ T8443] loop6: detected capacity change from 0 to 4096 [ 706.915410][ T8443] EXT4-fs: inline encryption not supported [ 706.941509][ T4277] Bluetooth: hci1: command 0x041b tx timeout [ 707.091170][ T8443] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 707.100347][ T8443] EXT4-fs (loop6): Test dummy encryption mode enabled [ 707.850190][ T8443] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=280ec1a8, mo2=0003] [ 707.858588][ T8443] System zones: 0-5 [ 707.869813][ T8443] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 708.316599][ T5181] EXT4-fs (loop6): unmounting filesystem. [ 708.372615][ T4280] Bluetooth: hci4: command 0x0406 tx timeout [ 708.381218][ T8445] netlink: 8 bytes leftover after parsing attributes in process `syz.7.760'. [ 709.012971][ T4280] Bluetooth: hci1: command 0x040f tx timeout [ 709.226282][ T8457] input input42: cannot allocate more than FF_MAX_EFFECTS effects [ 711.434806][ T4280] Bluetooth: hci1: command 0x0419 tx timeout [ 711.637817][ T5966] libceph: connect (1)[c::]:6789 error -101 [ 711.681153][ T5966] libceph: mon0 (1)[c::]:6789 connect error [ 711.777522][ T8472] ceph: No mds server is up or the cluster is laggy [ 711.799969][ T4312] libceph: connect (1)[c::]:6789 error -101 [ 711.843860][ T4312] libceph: mon0 (1)[c::]:6789 connect error [ 713.865996][ T8490] input input43: cannot allocate more than FF_MAX_EFFECTS effects [ 715.005975][ T8429] chnl_net:caif_netlink_parms(): no params data found [ 715.228097][ T4277] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 716.154302][ T4283] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 716.165744][ T4283] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 716.181407][ T4283] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 716.194160][ T4283] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 716.205328][ T4283] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 718.008763][ T8514] loop6: detected capacity change from 0 to 128 [ 718.023580][ T8514] EXT4-fs: Ignoring removed orlov option [ 718.043504][ T8514] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none. [ 718.128255][ T7852] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 718.146879][ T8514] ext4 filesystem being mounted at /147/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 718.301523][ T4280] Bluetooth: hci2: command 0x0409 tx timeout [ 718.787255][ T8529] input input44: cannot allocate more than FF_MAX_EFFECTS effects [ 719.456734][ T5181] EXT4-fs (loop6): unmounting filesystem. [ 719.609566][ T7852] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 719.973402][ T8552] loop6: detected capacity change from 0 to 8 [ 720.372512][ T4280] Bluetooth: hci2: command 0x041b tx timeout [ 720.686670][ T8554] input input45: cannot allocate more than FF_MAX_EFFECTS effects [ 720.906489][ T7852] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 720.949045][ T8429] bridge0: port 1(bridge_slave_0) entered blocking state [ 720.957242][ T8429] bridge0: port 1(bridge_slave_0) entered disabled state [ 721.094011][ T8429] device bridge_slave_0 entered promiscuous mode [ 721.152862][ T8429] bridge0: port 2(bridge_slave_1) entered blocking state [ 721.160138][ T8429] bridge0: port 2(bridge_slave_1) entered disabled state [ 721.210209][ T8429] device bridge_slave_1 entered promiscuous mode [ 722.801793][ T4283] Bluetooth: hci2: command 0x040f tx timeout [ 724.127356][ T7852] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 724.853309][ T4283] Bluetooth: hci2: command 0x0419 tx timeout [ 725.065557][ T8429] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 725.179009][ T8429] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 725.263551][ T8429] team0: Port device team_slave_0 added [ 725.274647][ T8429] team0: Port device team_slave_1 added [ 725.437044][ T8578] input input46: cannot allocate more than FF_MAX_EFFECTS effects [ 727.805274][ T8429] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 727.813129][ T8429] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 727.875189][ T8429] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 727.917468][ T8429] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 727.932601][ T8429] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 727.992750][ T8429] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 728.594765][ T8502] chnl_net:caif_netlink_parms(): no params data found [ 728.939049][ T8429] device hsr_slave_0 entered promiscuous mode [ 729.203333][ T8429] device hsr_slave_1 entered promiscuous mode [ 730.062245][ T8597] netlink: 8 bytes leftover after parsing attributes in process `syz.6.775'. [ 731.081562][ T8610] input: syz1 as /devices/virtual/input/input47 [ 731.155974][ T8610] loop9: detected capacity change from 0 to 4096 [ 731.163556][ T8610] EXT4-fs: inline encryption not supported [ 731.640718][ T8610] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 731.649922][ T8610] EXT4-fs (loop9): Test dummy encryption mode enabled [ 731.703445][ T8610] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=280ec1a8, mo2=0003] [ 731.712089][ T8610] System zones: 0-5 [ 731.741720][ T8610] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: writeback. [ 732.135669][ T8623] loop7: detected capacity change from 0 to 8 [ 732.637625][ T7521] EXT4-fs (loop9): unmounting filesystem. [ 732.953251][ T8625] input input48: cannot allocate more than FF_MAX_EFFECTS effects [ 733.261126][ T8502] bridge0: port 1(bridge_slave_0) entered blocking state [ 733.269146][ T8502] bridge0: port 1(bridge_slave_0) entered disabled state [ 733.278214][ T8502] device bridge_slave_0 entered promiscuous mode [ 733.287950][ T8502] bridge0: port 2(bridge_slave_1) entered blocking state [ 733.295677][ T8502] bridge0: port 2(bridge_slave_1) entered disabled state [ 733.564974][ T8502] device bridge_slave_1 entered promiscuous mode [ 735.700997][ T8502] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 737.524499][ T8502] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 737.713534][ T8658] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 [ 738.754206][ T8502] team0: Port device team_slave_0 added [ 738.853082][ T8502] team0: Port device team_slave_1 added [ 739.137949][ T8502] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 739.150361][ T8502] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 739.179411][ T8502] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 739.251813][ T8502] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 739.265414][ T8502] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 739.295920][ T8502] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 739.679052][ T7852] device hsr_slave_0 left promiscuous mode [ 739.700156][ T7852] device hsr_slave_1 left promiscuous mode [ 739.723476][ T7852] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 739.777089][ T7852] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 739.832596][ T7852] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 739.840146][ T7852] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 739.878296][ T7852] device bridge_slave_1 left promiscuous mode [ 739.893180][ T7852] bridge0: port 2(bridge_slave_1) entered disabled state [ 739.913301][ T7852] device bridge_slave_0 left promiscuous mode [ 739.939199][ T7852] bridge0: port 1(bridge_slave_0) entered disabled state [ 740.046993][ T7852] device veth1_macvtap left promiscuous mode [ 740.062849][ T7852] device veth0_macvtap left promiscuous mode [ 740.069071][ T7852] device veth1_vlan left promiscuous mode [ 740.104911][ T7852] device veth0_vlan left promiscuous mode [ 740.392177][ T8667] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 740.401822][ T8667] F2FS-fs (loop7): Unable to read 1th superblock [ 740.409377][ T8667] I/O error, dev loop7, sector 8 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 740.418932][ T8667] F2FS-fs (loop7): Unable to read 2th superblock [ 741.000520][ T8670] input input49: cannot allocate more than FF_MAX_EFFECTS effects [ 741.022683][ T4283] Bluetooth: hci2: command 0x0405 tx timeout [ 744.157597][ T7852] team0 (unregistering): Port device team_slave_1 removed [ 744.220416][ T7852] team0 (unregistering): Port device team_slave_0 removed [ 744.281781][ T7852] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 744.343170][ T7852] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 744.799233][ T7852] bond0 (unregistering): Released all slaves [ 744.924499][ T8502] device hsr_slave_0 entered promiscuous mode [ 744.931602][ T8502] device hsr_slave_1 entered promiscuous mode [ 744.939670][ T8502] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 744.947815][ T8502] Cannot create hsr debugfs directory [ 744.956258][ T8674] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 744.964148][ T8674] IPv6: NLM_F_CREATE should be set when creating new route [ 744.971451][ T8674] IPv6: NLM_F_CREATE should be set when creating new route [ 744.978771][ T8674] IPv6: NLM_F_CREATE should be set when creating new route [ 744.997491][ T8681] netlink: 8 bytes leftover after parsing attributes in process `syz.6.788'. [ 745.065924][ T8429] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 745.189544][ T8429] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 745.226950][ T8429] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 746.727725][ T8689] netlink: 'syz.9.792': attribute type 2 has an invalid length. [ 746.735658][ T8689] netlink: 199836 bytes leftover after parsing attributes in process `syz.9.792'. [ 747.177203][ T8429] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 747.257731][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 747.264170][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 747.704511][ T8429] 8021q: adding VLAN 0 to HW filter on device bond0 [ 748.396338][ T7590] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 748.610162][ T7590] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 748.636358][ T8429] 8021q: adding VLAN 0 to HW filter on device team0 [ 748.793356][ T8717] input input50: cannot allocate more than FF_MAX_EFFECTS effects [ 749.523691][ T4566] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 749.577235][ T4566] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 749.596537][ T8720] input: syz1 as /devices/virtual/input/input51 [ 749.631430][ T4566] bridge0: port 1(bridge_slave_0) entered blocking state [ 749.638687][ T4566] bridge0: port 1(bridge_slave_0) entered forwarding state [ 749.717897][ T4566] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 749.965431][ T94] block nbd9: Attempted send on invalid socket [ 749.972436][ T94] I/O error, dev nbd9, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 750.031886][ T4566] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 750.139216][ T4566] bridge0: port 2(bridge_slave_1) entered blocking state [ 750.146511][ T4566] bridge0: port 2(bridge_slave_1) entered forwarding state [ 750.397391][ T4566] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 750.725504][ T94] block nbd9: Attempted send on invalid socket [ 750.731901][ T94] I/O error, dev nbd9, sector 120 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 750.744095][ T8729] Mount JFS Failure: -5 [ 750.820777][ T4481] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 751.059909][ T4481] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 751.236573][ T8502] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 751.298523][ T4481] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 751.330425][ T4481] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 751.348856][ T4481] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 751.385000][ T4481] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 751.408778][ T4481] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 751.439641][ T4481] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 751.481576][ T8502] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 753.662206][ T8502] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 754.380871][ T8502] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 754.491110][ T8429] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 754.605823][ T8429] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 754.663307][ T4481] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 754.676972][ T4481] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 754.693248][ T4481] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 756.569097][ T8502] 8021q: adding VLAN 0 to HW filter on device bond0 [ 758.338231][ T8502] 8021q: adding VLAN 0 to HW filter on device team0 [ 758.366826][ T4401] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 758.385440][ T4401] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 758.451523][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 758.470376][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 758.499179][ T46] bridge0: port 1(bridge_slave_0) entered blocking state [ 758.506447][ T46] bridge0: port 1(bridge_slave_0) entered forwarding state [ 758.540702][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 758.568768][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 758.595413][ T46] bridge0: port 2(bridge_slave_1) entered blocking state [ 758.602792][ T46] bridge0: port 2(bridge_slave_1) entered forwarding state [ 758.639877][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 758.666718][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 758.707061][ T5038] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 758.744694][ T4566] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 758.761531][ T4566] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 758.858187][ T4566] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 758.874257][ T4566] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 758.904238][ T4566] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 758.933886][ T4566] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 758.953249][ T4566] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 758.989055][ T8502] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 759.023595][ T8502] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 759.235283][ T4566] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 759.270145][ T4566] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 759.413727][ T8429] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 759.421488][ T4401] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 759.441381][ T4401] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 759.554648][ T4401] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 759.573572][ T4401] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 760.493665][ T8429] device veth0_vlan entered promiscuous mode [ 760.535686][ T8429] device veth1_vlan entered promiscuous mode [ 760.700206][ T8429] device veth0_macvtap entered promiscuous mode [ 760.749946][ T8429] device veth1_macvtap entered promiscuous mode [ 761.593326][ T8792] hub 8-0:1.0: USB hub found [ 761.598237][ T8792] hub 8-0:1.0: 1 port detected [ 761.616914][ T4401] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 761.709870][ T4401] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 761.720132][ T4401] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 761.729287][ T4401] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 761.829798][ T4401] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 761.956095][ T4401] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 762.153873][ T4401] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 762.634642][ T4401] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 762.646453][ T4401] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 764.451186][ T4401] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 765.103537][ T8826] x_tables: ip_tables: TCPMSS.0 target: invalid size 8 (kernel) != (user) 16 [ 767.940770][ T8836] netlink: 'syz.6.816': attribute type 2 has an invalid length. [ 767.948797][ T8836] netlink: 199836 bytes leftover after parsing attributes in process `syz.6.816'. [ 768.498412][ T7852] device hsr_slave_0 left promiscuous mode [ 768.530432][ T7852] device hsr_slave_1 left promiscuous mode [ 768.561848][ T7852] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 768.633702][ T7852] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 768.651233][ T7852] device bridge_slave_1 left promiscuous mode [ 768.658669][ T4280] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 768.669464][ T4280] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 768.704115][ T7852] bridge0: port 2(bridge_slave_1) entered disabled state [ 768.714029][ T4280] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 768.721940][ T7852] device bridge_slave_0 left promiscuous mode [ 768.729004][ T7852] bridge0: port 1(bridge_slave_0) entered disabled state [ 768.736751][ T4280] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 768.747114][ T4280] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 768.756451][ T4280] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 768.812538][ T7852] device hsr_slave_0 left promiscuous mode [ 768.873951][ T7852] device hsr_slave_1 left promiscuous mode [ 768.904462][ T7852] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 768.932019][ T7852] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 769.001475][ T7852] device bridge_slave_1 left promiscuous mode [ 769.033233][ T7852] bridge0: port 2(bridge_slave_1) entered disabled state [ 769.058778][ T7852] device bridge_slave_0 left promiscuous mode [ 769.067431][ T7852] bridge0: port 1(bridge_slave_0) entered disabled state [ 769.328938][ T8852] loop6: detected capacity change from 0 to 8192 [ 769.828475][ T5995] libceph: connect (1)[c::]:6789 error -101 [ 769.839983][ T5995] libceph: mon0 (1)[c::]:6789 connect error [ 769.854033][ T8853] ceph: No mds server is up or the cluster is laggy [ 770.265673][ T8861] input input52: cannot allocate more than FF_MAX_EFFECTS effects [ 770.550794][ T7852] team0 (unregistering): Port device team_slave_1 removed [ 770.772640][ T4280] Bluetooth: hci1: command 0x0409 tx timeout [ 771.312572][ T8866] x_tables: ip_tables: TCPMSS.0 target: invalid size 8 (kernel) != (user) 16 [ 771.684994][ T7852] team0 (unregistering): Port device team_slave_0 removed [ 772.019047][ T7852] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 772.238539][ T7852] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 772.755104][ T4283] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 772.768123][ T4283] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 772.777478][ T4283] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 772.788172][ T4283] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 772.798710][ T4283] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 772.808383][ T4283] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 772.854693][ T4280] Bluetooth: hci1: command 0x041b tx timeout [ 772.862077][ T7852] bond0 (unregistering): Released all slaves [ 773.586850][ T7852] team0 (unregistering): Port device team_slave_1 removed [ 773.803930][ T7852] team0 (unregistering): Port device team_slave_0 removed [ 774.042311][ T7852] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 774.151144][ T7852] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 774.271701][ T7852] bond0 (unregistering): Released all slaves [ 774.852581][ T4283] Bluetooth: hci3: command 0x0409 tx timeout [ 774.932500][ T4283] Bluetooth: hci1: command 0x040f tx timeout [ 776.237043][ T8871] chnl_net:caif_netlink_parms(): no params data found [ 776.424090][ T5995] libceph: connect (1)[c::]:6789 error -101 [ 776.431725][ T5995] libceph: mon0 (1)[c::]:6789 connect error [ 776.459353][ T8897] netlink: 8 bytes leftover after parsing attributes in process `syz.9.831'. [ 776.483310][ T8900] ceph: No mds server is up or the cluster is laggy [ 776.744687][ T8871] bridge0: port 1(bridge_slave_0) entered blocking state [ 776.752873][ T8871] bridge0: port 1(bridge_slave_0) entered disabled state [ 776.761925][ T8871] device bridge_slave_0 entered promiscuous mode [ 776.788422][ T8871] bridge0: port 2(bridge_slave_1) entered blocking state [ 776.799573][ T5762] libceph: connect (1)[c::]:6789 error -101 [ 776.807370][ T5762] libceph: mon0 (1)[c::]:6789 connect error [ 776.988156][ T4283] Bluetooth: hci3: command 0x041b tx timeout [ 777.016292][ T4283] Bluetooth: hci1: command 0x0419 tx timeout [ 777.100756][ T8871] bridge0: port 2(bridge_slave_1) entered disabled state [ 777.347778][ T8871] device bridge_slave_1 entered promiscuous mode [ 777.857912][ T8840] chnl_net:caif_netlink_parms(): no params data found [ 778.862911][ T8919] netlink: 20 bytes leftover after parsing attributes in process `syz.9.834'. [ 779.034243][ T4283] Bluetooth: hci3: command 0x040f tx timeout [ 780.873328][ T8871] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 780.955199][ T8871] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 781.162998][ T4283] Bluetooth: hci3: command 0x0419 tx timeout [ 782.082172][ T8871] team0: Port device team_slave_0 added [ 782.333262][ T8943] netlink: 8 bytes leftover after parsing attributes in process `syz.6.838'. [ 782.573459][ T8871] team0: Port device team_slave_1 added [ 782.667368][ T8953] gfs2: not a GFS2 filesystem [ 782.680121][ T8953] hpfs: Bad magic ... probably not HPFS [ 783.466365][ T8840] bridge0: port 1(bridge_slave_0) entered blocking state [ 783.494811][ T8840] bridge0: port 1(bridge_slave_0) entered disabled state [ 783.514056][ T8840] device bridge_slave_0 entered promiscuous mode [ 783.575363][ T8871] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 783.592580][ T8871] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 783.655444][ T8871] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 783.668619][ T8840] bridge0: port 2(bridge_slave_1) entered blocking state [ 783.687467][ T8840] bridge0: port 2(bridge_slave_1) entered disabled state [ 783.720183][ T8840] device bridge_slave_1 entered promiscuous mode [ 783.763723][ T8871] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 783.780044][ T8871] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 785.952413][ T8871] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 786.038947][ T8840] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 786.175272][ T8840] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 786.288993][ T8871] device hsr_slave_0 entered promiscuous mode [ 786.335866][ T8871] device hsr_slave_1 entered promiscuous mode [ 786.423406][ T8871] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 786.431417][ T8871] Cannot create hsr debugfs directory [ 786.466422][ T8840] team0: Port device team_slave_0 added [ 786.514707][ T8840] team0: Port device team_slave_1 added [ 786.676295][ T8980] use of bytesused == 0 is deprecated and will be removed in the future, [ 786.685582][ T8980] use the actual size instead. [ 786.882018][ T8980] loop7: detected capacity change from 0 to 4096 [ 786.893201][ T8980] ntfs3: Unknown parameter 'windows_names' [ 787.509821][ T8840] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 787.540206][ T8840] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 787.583213][ T8840] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 787.729856][ T8840] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 787.738483][ T8840] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 787.867312][ T8840] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 789.674940][ T8998] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 790.027524][ T8995] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 790.046046][ T8840] device hsr_slave_0 entered promiscuous mode [ 790.083097][ T8840] device hsr_slave_1 entered promiscuous mode [ 790.107806][ T8840] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 790.126542][ T8840] Cannot create hsr debugfs directory [ 790.282721][ T9001] netlink: 8 bytes leftover after parsing attributes in process `syz.6.842'. [ 790.303047][ T9001] netlink: 8 bytes leftover after parsing attributes in process `syz.6.842'. [ 790.312254][ T9001] netlink: 8 bytes leftover after parsing attributes in process `syz.6.842'. [ 790.321423][ T9001] netlink: 8 bytes leftover after parsing attributes in process `syz.6.842'. [ 790.330580][ T9001] netlink: 8 bytes leftover after parsing attributes in process `syz.6.842'. [ 791.052282][ T9005] netlink: 8 bytes leftover after parsing attributes in process `syz.9.849'. [ 792.203866][ T26] kauditd_printk_skb: 27 callbacks suppressed [ 792.203884][ T26] audit: type=1800 audit(1786468766.880:120): pid=9023 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.7.847" name="device_path" dev="configfs" ino=55606 res=0 errno=0 [ 792.260786][ T26] audit: type=1800 audit(1786468766.890:121): pid=9023 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.7.847" name="buffered_io" dev="configfs" ino=55607 res=0 errno=0 [ 792.296330][ T26] audit: type=1800 audit(1786468766.900:122): pid=9023 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.7.847" name="enable" dev="configfs" ino=55608 res=0 errno=0 [ 792.346235][ T5966] libceph: connect (1)[c::]:6789 error -101 [ 792.354131][ T5966] libceph: mon0 (1)[c::]:6789 connect error [ 792.401280][ T9021] ceph: No mds server is up or the cluster is laggy [ 792.426489][ T26] audit: type=1800 audit(1786468766.910:123): pid=9023 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.7.847" name="addr_trtype" dev="configfs" ino=55609 res=0 errno=0 [ 793.873076][ T8743] libceph: connect (1)[c::]:6789 error -101 [ 793.879215][ T8743] libceph: mon0 (1)[c::]:6789 connect error [ 793.968525][ T9036] tmpfs: Unknown parameter 'quota' [ 799.032122][ T9057] netlink: 8 bytes leftover after parsing attributes in process `syz.9.858'. [ 801.739478][ T9079] netlink: 108 bytes leftover after parsing attributes in process `syz.6.859'. [ 803.003416][ T8871] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 803.427222][ T8871] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 803.527048][ T9104] netlink: 'syz.7.857': attribute type 2 has an invalid length. [ 803.593297][ T8871] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 803.612664][ T9104] netlink: 199836 bytes leftover after parsing attributes in process `syz.7.857'. [ 803.892725][ T8871] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 803.978542][ T46] device hsr_slave_0 left promiscuous mode [ 804.003413][ T46] device hsr_slave_1 left promiscuous mode [ 804.019533][ T46] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 804.037354][ T46] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 804.049263][ T46] device bridge_slave_1 left promiscuous mode [ 804.066139][ T46] bridge0: port 2(bridge_slave_1) entered disabled state [ 804.096654][ T46] device bridge_slave_0 left promiscuous mode [ 804.112130][ T46] bridge0: port 1(bridge_slave_0) entered disabled state [ 804.153504][ T46] device hsr_slave_0 left promiscuous mode [ 804.160218][ T46] device hsr_slave_1 left promiscuous mode [ 804.175008][ T46] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 804.188849][ T46] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 804.201219][ T46] device bridge_slave_1 left promiscuous mode [ 804.223098][ T46] bridge0: port 2(bridge_slave_1) entered disabled state [ 804.241095][ T46] device bridge_slave_0 left promiscuous mode [ 804.247596][ T46] bridge0: port 1(bridge_slave_0) entered disabled state [ 804.318004][ T46] device veth1_macvtap left promiscuous mode [ 804.324355][ T46] device veth0_macvtap left promiscuous mode [ 804.331414][ T46] device veth1_vlan left promiscuous mode [ 804.338048][ T46] device veth0_vlan left promiscuous mode [ 804.796227][ T46] team0 (unregistering): Port device team_slave_1 removed [ 804.860021][ T46] team0 (unregistering): Port device team_slave_0 removed [ 804.918856][ T46] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 804.982547][ T46] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 805.296281][ T46] bond0 (unregistering): Released all slaves [ 805.939434][ T46] team0 (unregistering): Port device team_slave_1 removed [ 805.999079][ T46] team0 (unregistering): Port device team_slave_0 removed [ 806.066804][ T46] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 806.131263][ T46] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 806.518353][ T46] bond0 (unregistering): Released all slaves [ 806.694343][ T8840] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 806.749816][ T8840] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 806.837188][ T8840] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 806.847918][ T8840] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 807.005267][ T8871] 8021q: adding VLAN 0 to HW filter on device bond0 [ 807.094815][ T4480] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 807.113301][ T4480] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 807.144480][ T8871] 8021q: adding VLAN 0 to HW filter on device team0 [ 807.201590][ T8840] 8021q: adding VLAN 0 to HW filter on device bond0 [ 807.218757][ T8173] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 807.230168][ T8173] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 807.247964][ T8173] bridge0: port 1(bridge_slave_0) entered blocking state [ 807.255216][ T8173] bridge0: port 1(bridge_slave_0) entered forwarding state [ 807.272115][ T8173] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 807.299895][ T7852] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 807.319863][ T7852] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 807.328987][ T7852] bridge0: port 2(bridge_slave_1) entered blocking state [ 807.336219][ T7852] bridge0: port 2(bridge_slave_1) entered forwarding state [ 807.372846][ T7852] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 807.382121][ T7852] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 807.404308][ T7852] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 807.421140][ T7852] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 807.457986][ T8840] 8021q: adding VLAN 0 to HW filter on device team0 [ 807.498596][ T7852] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 807.518083][ T7852] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 807.536449][ T7852] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 807.550861][ T7852] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 807.589170][ T7852] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 807.599480][ T7852] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 807.610285][ T7852] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 807.624805][ T7852] bridge0: port 1(bridge_slave_0) entered blocking state [ 807.632003][ T7852] bridge0: port 1(bridge_slave_0) entered forwarding state [ 807.640908][ T7852] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 807.659515][ T7852] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 807.668945][ T7852] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 807.686204][ T7852] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 807.724369][ T8871] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 807.738681][ T7852] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 807.761610][ T7852] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 807.778524][ T7852] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 807.800942][ T7852] bridge0: port 2(bridge_slave_1) entered blocking state [ 807.808163][ T7852] bridge0: port 2(bridge_slave_1) entered forwarding state [ 807.819795][ T7852] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 807.829808][ T7852] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 807.863263][ T7852] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 807.888518][ T7852] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 807.913590][ T7852] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 807.943057][ T7852] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 807.961350][ T7852] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 807.989615][ T7852] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 808.010650][ T7852] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 808.020767][ T7852] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 808.036961][ T8840] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 808.066591][ T7852] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 808.370143][ T4481] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 808.393004][ T4481] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 808.420047][ T8871] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 808.696680][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 808.705278][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 808.717142][ T4481] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 808.734165][ T4481] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 808.746597][ T8840] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 808.782225][ T4481] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 808.798203][ T4481] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 808.855569][ T4401] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 808.866018][ T4401] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 808.894797][ T4401] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 808.903261][ T4401] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 808.917608][ T8840] device veth0_vlan entered promiscuous mode [ 808.954984][ T8840] device veth1_vlan entered promiscuous mode [ 809.026287][ T8173] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 809.050778][ T8173] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 809.077418][ T8173] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 809.094213][ T8173] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 809.117672][ T8840] device veth0_macvtap entered promiscuous mode [ 809.143811][ T8840] device veth1_macvtap entered promiscuous mode [ 809.179743][ T8840] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 809.212409][ T8840] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 809.226005][ T8840] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 809.237435][ T8840] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 809.252945][ T8840] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 809.272438][ T8840] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 809.305616][ T8840] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 809.317584][ T4401] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 809.334488][ T4401] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 809.368555][ T4401] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 809.379327][ T4401] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 809.400038][ T8840] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 809.411602][ T8840] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 809.422212][ T8840] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 809.435456][ T8840] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 809.446544][ T8840] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 809.457142][ T8840] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 809.468677][ T8840] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 809.488797][ T4401] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 809.498615][ T4401] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 809.508496][ T4401] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 809.518283][ T4401] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 809.531917][ T8840] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 809.541229][ T8840] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 809.552795][ T8840] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 809.561623][ T8840] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 809.601250][ T8173] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 809.614018][ T8173] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 809.624474][ T8173] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 809.634606][ T8173] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 809.655246][ T8871] device veth0_vlan entered promiscuous mode [ 809.716679][ T8871] device veth1_vlan entered promiscuous mode [ 809.744229][ T8173] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 809.796467][ T46] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 809.817267][ T46] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 809.836379][ T4401] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 809.856264][ T4401] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 809.877366][ T4401] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 809.894622][ T8871] device veth0_macvtap entered promiscuous mode [ 809.928775][ T4481] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 809.940783][ T8871] device veth1_macvtap entered promiscuous mode [ 809.948851][ T4481] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 809.961970][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 809.978907][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 809.987979][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 810.033428][ T8871] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 810.046043][ T8871] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 810.058839][ T8871] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 810.076752][ T8871] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 810.089499][ T8871] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 810.107470][ T8871] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 810.119025][ T8871] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 810.138260][ T8871] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 810.216166][ T8871] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 810.268054][ T8871] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 810.307148][ T9170] loop7: detected capacity change from 0 to 16 [ 810.330846][ T8871] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 810.558182][ T9170] erofs: (device loop7): mounted with root inode @ nid 36. [ 810.572438][ T8871] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 811.064135][ T9171] loop3: detected capacity change from 0 to 64 [ 811.071595][ T9171] hfs: unable to parse mount options [ 811.160169][ T8871] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 811.295796][ T9170] erofs: (device loop7): z_erofs_fill_inode_lazy: invalid tail-packing pclustersize 65535 [ 811.321501][ T9170] erofs: (device loop7): z_erofs_fill_inode_lazy: invalid tail-packing pclustersize 65535 [ 811.435893][ T9179] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 811.447802][ T8871] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 811.471678][ T8871] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 811.482464][ T9170] erofs: (device loop7): z_erofs_read_folio: failed to read, err [-117] [ 811.502590][ T8871] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 811.515007][ T8871] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 811.560967][ T8871] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 811.658372][ T4401] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 811.663668][ T9180] erofs: (device loop7): z_erofs_fill_inode_lazy: invalid tail-packing pclustersize 65535 [ 811.698432][ T9180] erofs: (device loop7): z_erofs_fill_inode_lazy: invalid tail-packing pclustersize 65535 [ 811.705402][ T4401] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 811.720608][ T9180] erofs: (device loop7): z_erofs_read_folio: failed to read, err [-117] [ 811.749790][ T8573] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 811.781719][ T4401] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 811.820401][ T4401] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 811.971023][ T9181] genirq: Flags mismatch irq 7. 00000000 (ttyS3) vs. 00000000 (pcl818) [ 812.052673][ T9183] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 812.323341][ T9170] erofs: (device loop7): z_erofs_fill_inode_lazy: invalid tail-packing pclustersize 65535 [ 812.334255][ T9170] erofs: (device loop7): z_erofs_fill_inode_lazy: invalid tail-packing pclustersize 65535 [ 812.344535][ T9170] erofs: (device loop7): z_erofs_read_folio: failed to read, err [-117] [ 812.356317][ T9170] erofs: (device loop7): z_erofs_fill_inode_lazy: invalid tail-packing pclustersize 65535 [ 812.367524][ T8871] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 812.367634][ T8871] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 812.367665][ T8871] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 812.376663][ T9170] erofs: (device loop7): z_erofs_fill_inode_lazy: invalid tail-packing pclustersize 65535 [ 812.376729][ T9170] erofs: (device loop7): z_erofs_read_folio: failed to read, err [-117] [ 814.552502][ T8871] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 815.173840][ T8173] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 815.184756][ T8173] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 815.255995][ T4913] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 816.042938][ T5965] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 816.074759][ T5965] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 816.171847][ T7852] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 819.605233][ T4283] Bluetooth: hci3: link tx timeout [ 819.613585][ T4283] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 819.625152][ T4283] Bluetooth: hci3: link tx timeout [ 819.630518][ T4283] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 819.640190][ T4283] Bluetooth: hci3: link tx timeout [ 819.645680][ T4283] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 819.655544][ T4283] Bluetooth: hci3: link tx timeout [ 819.661128][ T4283] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 819.670217][ T4283] Bluetooth: hci3: link tx timeout [ 819.676078][ T4283] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 819.685617][ T4283] Bluetooth: hci3: link tx timeout [ 819.691060][ T4283] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 819.701569][ T4283] Bluetooth: hci3: link tx timeout [ 819.707752][ T4283] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 819.716030][ T4283] Bluetooth: hci3: link tx timeout [ 819.721678][ T4283] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 819.730378][ T4283] Bluetooth: hci3: link tx timeout [ 819.736506][ T4283] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 819.745900][ T4283] Bluetooth: hci3: link tx timeout [ 819.751897][ T4283] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 819.760815][ T4283] Bluetooth: hci3: link tx timeout [ 819.766951][ T4283] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 819.775811][ T4283] Bluetooth: hci3: link tx timeout [ 819.781664][ T4283] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 819.791232][ T4283] Bluetooth: hci3: link tx timeout [ 819.797280][ T4283] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 819.806786][ T4283] Bluetooth: hci3: link tx timeout [ 819.813023][ T4283] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 819.822132][ T4283] Bluetooth: hci3: link tx timeout [ 819.831817][ T4283] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 819.840905][ T4283] Bluetooth: hci3: link tx timeout [ 819.846636][ T4283] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 819.856702][ T4283] Bluetooth: hci3: link tx timeout [ 819.862618][ T4283] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 819.872182][ T4283] Bluetooth: hci3: link tx timeout [ 819.878068][ T4283] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 819.887587][ T4283] Bluetooth: hci3: link tx timeout [ 819.895709][ T4283] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 819.904645][ T4283] Bluetooth: hci3: link tx timeout [ 819.910450][ T4283] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 819.919606][ T4283] Bluetooth: hci3: link tx timeout [ 819.926574][ T4283] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 819.936387][ T4283] Bluetooth: hci3: link tx timeout [ 819.942132][ T4283] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 819.951397][ T4283] Bluetooth: hci3: link tx timeout [ 819.957234][ T4283] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 819.966240][ T4283] Bluetooth: hci3: link tx timeout [ 819.972482][ T4283] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 819.981586][ T4283] Bluetooth: hci3: link tx timeout [ 819.987686][ T4283] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 819.996983][ T4283] Bluetooth: hci3: link tx timeout [ 820.002625][ T4283] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 820.010957][ T4283] Bluetooth: hci3: link tx timeout [ 820.017269][ T4283] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 820.025843][ T4283] Bluetooth: hci3: link tx timeout [ 820.031540][ T4283] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 820.040582][ T4283] Bluetooth: hci3: link tx timeout [ 820.046950][ T4283] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 820.060692][ T4283] Bluetooth: hci3: link tx timeout [ 820.066729][ T4283] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 820.076311][ T4283] Bluetooth: hci3: link tx timeout [ 820.083582][ T4283] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 820.092281][ T4283] Bluetooth: hci3: link tx timeout [ 820.102184][ T4283] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 820.111619][ T4283] Bluetooth: hci3: link tx timeout [ 820.117683][ T4283] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 821.962907][ T4283] Bluetooth: hci3: command 0x0406 tx timeout [ 823.317035][ T9233] netlink: 8 bytes leftover after parsing attributes in process `syz.4.876'. [ 823.329751][ T9233] netlink: 8 bytes leftover after parsing attributes in process `syz.4.876'. [ 823.339051][ T9233] netlink: 8 bytes leftover after parsing attributes in process `syz.4.876'. [ 823.349156][ T9233] netlink: 8 bytes leftover after parsing attributes in process `syz.4.876'. [ 823.359185][ T9233] netlink: 8 bytes leftover after parsing attributes in process `syz.4.876'. [ 823.748035][ T9242] ip6t_srh: unknown srh match flags FF3F [ 824.095664][ T9249] netlink: 32 bytes leftover after parsing attributes in process `syz.7.879'. [ 828.294548][ T9276] IPv6: ADDRCONF(NETDEV_CHANGE): batadv0: link becomes ready [ 828.302469][ T9276] A link change request failed with some changes committed already. Interface batadv0 may have been left with an inconsistent configuration, please check. [ 830.043826][ T9284] loop9: detected capacity change from 0 to 1024 [ 830.175009][ T26] audit: type=1326 audit(1786468804.850:124): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9283 comm="syz.9.884" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5958f9e0d9 code=0x7ffc0000 [ 830.199005][ C1] vkms_vblank_simulate: vblank timer overrun [ 831.995622][ T26] audit: type=1326 audit(1786468804.850:125): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9283 comm="syz.9.884" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5958f9e0d9 code=0x7ffc0000 [ 832.221274][ T26] audit: type=1326 audit(1786468804.850:126): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9283 comm="syz.9.884" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5958f9e0d9 code=0x7ffc0000 [ 832.245385][ C1] vkms_vblank_simulate: vblank timer overrun [ 832.964243][ T9284] loop9: detected capacity change from 0 to 512 [ 833.194167][ T9284] EXT4-fs warning (device loop9): ext4_multi_mount_protect:404: Unable to create kmmpd thread for loop9. [ 833.237503][ T26] audit: type=1326 audit(1786468804.850:127): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9283 comm="syz.9.884" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7f5958f9e0d9 code=0x7ffc0000 [ 833.261585][ C1] vkms_vblank_simulate: vblank timer overrun [ 833.281773][ T9309] netlink: 8 bytes leftover after parsing attributes in process `syz.4.888'. [ 833.291815][ T9309] netlink: 8 bytes leftover after parsing attributes in process `syz.4.888'. [ 833.301169][ T9309] netlink: 8 bytes leftover after parsing attributes in process `syz.4.888'. [ 833.310820][ T9309] netlink: 8 bytes leftover after parsing attributes in process `syz.4.888'. [ 833.319958][ T9309] netlink: 8 bytes leftover after parsing attributes in process `syz.4.888'. [ 833.399513][ T26] audit: type=1326 audit(1786468804.850:128): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9283 comm="syz.9.884" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5958f9e0d9 code=0x7ffc0000 [ 834.598653][ T9318] loop6: detected capacity change from 0 to 512 [ 834.623786][ T26] audit: type=1326 audit(1786468804.930:129): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9283 comm="syz.9.884" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5958f9e0d9 code=0x7ffc0000 [ 834.734795][ T26] audit: type=1326 audit(1786468804.930:130): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9283 comm="syz.9.884" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5958f9e0d9 code=0x7ffc0000 [ 834.762124][ T9318] EXT4-fs error (device loop6): ext4_orphan_get:1405: inode #15: comm syz.6.898: iget: bad i_size value: 38620345925642 [ 834.776152][ T26] audit: type=1326 audit(1786468804.930:131): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9283 comm="syz.9.884" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=283 compat=0 ip=0x7f5958f9e0d9 code=0x7ffc0000 [ 834.783049][ T9318] EXT4-fs error (device loop6): ext4_orphan_get:1410: comm syz.6.898: couldn't read orphan inode 15 (err -117) [ 834.804639][ T26] audit: type=1326 audit(1786468804.930:132): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9283 comm="syz.9.884" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5958f9e0d9 code=0x7ffc0000 [ 834.838017][ T26] audit: type=1326 audit(1786468804.930:133): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9283 comm="syz.9.884" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5958f9e0d9 code=0x7ffc0000 [ 834.916746][ T9323] using random self ethernet address [ 834.922479][ T9323] using random host ethernet address [ 834.943923][ T9323] general protection fault, probably for non-canonical address 0xdffffc0000000000: 0000 [#1] PREEMPT SMP KASAN [ 834.955723][ T9323] KASAN: null-ptr-deref in range [0x0000000000000000-0x0000000000000007] SYZFAIL: failed to send rpc fd=3 want=56 sent=0 n=-1 (errno 32: Broken pipe) [ 834.964195][ T9323] CPU: 1 PID: 9323 Comm: syz.4.890 Not tainted syzkaller #0 [ 834.971531][ T9323] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 834.981690][ T9323] RIP: 0010:dummy_set_selfpowered+0xb7/0x150 [ 834.987744][ T9323] Code: 94 c0 4d 8d b4 c6 38 06 00 00 4c 89 f0 48 c1 e8 03 42 80 3c 20 00 74 08 4c 89 f7 e8 03 b2 53 fb 4d 8b 3e 4c 89 f8 48 c1 e8 03 <42> 80 3c 20 00 74 08 4c 89 ff e8 ea b1 53 fb 41 be 30 12 00 00 4d [ 835.007401][ T9323] RSP: 0018:ffffc900039bf7e0 EFLAGS: 00010246 [ 835.013515][ T9323] RAX: 0000000000000000 RBX: 0000000000000001 RCX: 0000000000000002 [ 835.019146][ T9318] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 835.021506][ T9323] RDX: ffff88802d888000 RSI: 0000000000000003 RDI: 0000000000000005 [ 835.021525][ T9323] RBP: 0000000000000003 R08: ffff8880174734df R09: 1ffff11002e8e69b [ 835.021540][ T9323] R10: dffffc0000000000 R11: ffffed1002e8e69c R12: dffffc0000000000 [ 835.021556][ T9323] R13: ffff8880745344a8 R14: ffff888027bc1238 R15: 0000000000000000 [ 835.021570][ T9323] FS: 00007fb69650a6c0(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000 [ 835.021589][ T9323] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 835.021603][ T9323] CR2: 0000001b2eb17ff8 CR3: 000000005c5a2000 CR4: 00000000003506e0 [ 835.021622][ T9323] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 835.021635][ T9323] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 835.021647][ T9323] Call Trace: [ 835.021653][ T9323] [ 835.021659][ T9323] ? dummy_wakeup+0x260/0x260 [ 835.021697][ T9323] usb_gadget_set_selfpowered+0x6a/0x2b0 [ 835.118716][ T9323] composite_dev_prepare+0x2f3/0x310 [ 835.124058][ T9323] configfs_composite_bind+0xa1/0xf60 [ 835.129493][ T9323] ? kernfs_put+0x442/0x480 [ 835.134041][ T9323] ? os_desc_qw_sign_store+0x100/0x100 [ 835.139548][ T9323] gadget_bind_driver+0x2af/0x760 [ 835.144720][ T9323] ? gadget_match_driver+0x130/0x130 [ 835.150072][ T9323] really_probe+0x24a/0xb40 [ 835.154630][ T9323] ? pm_runtime_barrier+0x147/0x1c0 [ 835.159914][ T9323] __driver_probe_device+0x1f5/0x390 [ 835.165252][ T9323] driver_probe_device+0x4f/0x420 [ 835.170354][ T9323] __driver_attach+0x43d/0x6c0 [ 835.175164][ T9323] ? driver_attach+0x40/0x40 [ 835.179805][ T9323] bus_for_each_dev+0x182/0x1f0 [ 835.184701][ T9323] ? __lock_acquire+0x7c40/0x7c40 [ 835.189789][ T9323] ? bus_remove_file+0xd0/0xd0 [ 835.194602][ T9323] ? do_raw_spin_unlock+0x11d/0x230 [ 835.199875][ T9323] bus_add_driver+0x324/0x5d0 [ 835.204649][ T9323] driver_register+0x32d/0x430 [ 835.209467][ T9323] usb_gadget_register_driver_owner+0xf5/0x260 [ 835.215679][ T9323] gadget_dev_desc_UDC_store+0x1c3/0x2e0 [ 835.221358][ T9323] configfs_write_iter+0x30b/0x400 [ 835.226514][ T9323] ? gadget_dev_desc_UDC_show+0x80/0x80 [ 835.232107][ T9323] vfs_write+0x482/0x9a0 [ 835.236413][ T9323] ? file_end_write+0x250/0x250 [ 835.241324][ T9323] ? __fget_files+0x3fc/0x460 [ 835.246079][ T9323] ? __fdget_pos+0x2ae/0x360 [ 835.250727][ T9323] ? ksys_write+0x70/0x260 [ 835.255202][ T9323] ksys_write+0x14d/0x260 [ 835.259583][ T9323] ? __ia32_sys_read+0x80/0x80 [ 835.264399][ T9323] ? lockdep_hardirqs_on+0x94/0x140 [ 835.269643][ T9323] do_syscall_64+0x4c/0xa0 [ 835.274105][ T9323] ? clear_bhb_loop+0x60/0xb0 [ 835.278840][ T9323] ? clear_bhb_loop+0x60/0xb0 [ 835.283574][ T9323] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 835.289515][ T9323] RIP: 0033:0x7fb69559e0d9 [ 835.293987][ T9323] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 835.313658][ T9323] RSP: 002b:00007fb69650a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 835.322125][ T9323] RAX: ffffffffffffffda RBX: 00007fb695825fa0 RCX: 00007fb69559e0d9 [ 835.330144][ T9323] RDX: 000000000000000c RSI: 0000200000000240 RDI: 0000000000000004 [ 835.338158][ T9323] RBP: 00007fb695635024 R08: 0000000000000000 R09: 0000000000000000 [ 835.346194][ T9323] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 835.354205][ T9323] R13: 00007fb695826038 R14: 00007fb695825fa0 R15: 00007ffd3c086d78 [ 835.362230][ T9323] [ 835.365301][ T9323] Modules linked in: [ 835.373324][ T9323] ---[ end trace 0000000000000000 ]--- [ 835.382438][ T9323] RIP: 0010:dummy_set_selfpowered+0xb7/0x150 [ 835.388558][ T9323] Code: 94 c0 4d 8d b4 c6 38 06 00 00 4c 89 f0 48 c1 e8 03 42 80 3c 20 00 74 08 4c 89 f7 e8 03 b2 53 fb 4d 8b 3e 4c 89 f8 48 c1 e8 03 <42> 80 3c 20 00 74 08 4c 89 ff e8 ea b1 53 fb 41 be 30 12 00 00 4d [ 835.408417][ T9323] RSP: 0018:ffffc900039bf7e0 EFLAGS: 00010246 [ 835.414788][ T9323] RAX: 0000000000000000 RBX: 0000000000000001 RCX: 0000000000000002 [ 835.422882][ T9323] RDX: ffff88802d888000 RSI: 0000000000000003 RDI: 0000000000000005 [ 835.430969][ T9323] RBP: 0000000000000003 R08: ffff8880174734df R09: 1ffff11002e8e69b [ 835.439100][ T9323] R10: dffffc0000000000 R11: ffffed1002e8e69c R12: dffffc0000000000 [ 835.447206][ T9323] R13: ffff8880745344a8 R14: ffff888027bc1238 R15: 0000000000000000 [ 835.455310][ T9323] FS: 00007fb69650a6c0(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000 [ 835.464382][ T9323] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 835.471097][ T9323] CR2: 0000001b2eb17ff8 CR3: 000000005c5a2000 CR4: 00000000003506e0 [ 835.479221][ T9323] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 835.487341][ T9323] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 835.495489][ T9323] Kernel panic - not syncing: Fatal exception [ 835.502207][ T9323] Kernel Offset: disabled [ 835.506546][ T9323] Rebooting in 86400 seconds..