last executing test programs: 10m36.567461332s ago: executing program 3 (id=28): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) mkdirat(0xffffffffffffff9c, &(0x7f0000000800)='./file1\x00', 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x2505000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2) r4 = memfd_create(&(0x7f0000000140)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xcda\x9b\x11X\x0e\xa1\xcf\x1a\x98S7\xc9\x00'/47, 0x2) r5 = ioctl$UDMABUF_CREATE(r3, 0x40187542, &(0x7f0000000000)={r4, 0x0, 0x0, 0x8000}) ioctl$DMA_BUF_IOCTL_SYNC(r5, 0x40086200, 0x0) ioctl$DMA_BUF_IOCTL_SYNC(r5, 0x40086200, &(0x7f00000000c0)=0x7) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r6, &(0x7f0000000080)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write(r6, &(0x7f0000000040)="2e000000010002", 0x7) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000100)='autofs\x00', 0x0, &(0x7f0000000400)) r7 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x0, 0x111) ioctl$AUTOFS_DEV_IOCTL_VERSION(r7, 0x9361, 0x0) 10m35.139083422s ago: executing program 3 (id=31): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004"], 0x48) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000140), 0x4000000004002, 0x0) r1 = dup(r0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x13, r1, 0x2000) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) r2 = openat$tun(0xffffffffffffff9c, 0x0, 0x40e41, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) dup(r3) socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'lo\x00'}) write$tun(r2, 0x0, 0xffe) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f0000000040), 0x0, 0x0) read$msr(r4, &(0x7f0000019300)=""/102392, 0x18ff8) ftruncate(0xffffffffffffffff, 0xffff) fcntl$addseals(0xffffffffffffffff, 0x409, 0x7) ioctl$UDMABUF_CREATE(0xffffffffffffffff, 0x40187542, &(0x7f0000000000)={0xffffffffffffffff, 0x0, 0x0, 0x8000}) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='attr/fscreate\x00') write$binfmt_script(r5, &(0x7f0000007c40)={'#! ', './cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0xff1) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0) 10m31.956677208s ago: executing program 3 (id=36): r0 = socket(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'bridge0\x00', 0x0}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) r6 = socket$inet6_icmp(0xa, 0x2, 0x3a) bind$inet6(r6, &(0x7f0000000240)={0xa, 0x2, 0x1000, @empty}, 0x1c) syz_emit_ethernet(0x42, &(0x7f0000000040)=ANY=[@ANYBLOB="ffffffffffff0180c200000086dd"], 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x12}}, 0x10) sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0x240080e4) syz_open_procfs$pagemap(0x0, 0x0) syz_open_dev$usbfs(&(0x7f00000000c0), 0x204, 0x2) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=@newlink={0x3c, 0x10, 0x44b, 0x0, 0x25dfdbfc, {0x7a, 0x0, 0x0, r2}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_AGEING_TIME={0x8, 0x8, 0xffffa888}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4040840}, 0x0) socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r0, 0x84, 0x15, &(0x7f0000000100)={0xce}, 0x1) socket$inet6_sctp(0xa, 0x1, 0x84) r7 = syz_open_procfs$userns(0x0, &(0x7f0000000080)) ioctl$NS_GET_OWNER_UID(r7, 0xb704, &(0x7f0000000140)) 10m29.996300969s ago: executing program 3 (id=39): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x1, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xfff2}, {0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x44}, 0x0) shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffd000/0x3000)=nil) bpf$MAP_CREATE(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000380)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) setgroups(0x0, 0x0) sendmsg(0xffffffffffffffff, 0x0, 0x4048000) shmctl$SHM_INFO(0x0, 0xe, 0x0) sendmsg$BATADV_CMD_SET_MESH(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000023c0)={0x1c, 0x0, 0x1, 0x4070bd28, 0x1, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8}]}, 0x1c}}, 0x18) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000500)=0x4) ioctl$TCSETSW2(0xffffffffffffffff, 0x402c542c, &(0x7f0000000180)={0xfffff3d4, 0x200ffffd, 0x7, 0xfffffff2, 0x0, "4d6b5ccb8600", 0x8}) readv(0xffffffffffffffff, &(0x7f0000003a00)=[{&(0x7f0000003840)=""/150, 0x96}], 0x1) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0xcfa42, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) 10m27.11766428s ago: executing program 3 (id=43): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="020b0700fc670000e4", 0x9}], 0x1}, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r3, &(0x7f0000001400)=[{&(0x7f0000000280)="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", 0xfe7}, {&(0x7f0000001280)="fa", 0x1}], 0x2, 0x1) r4 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r4, &(0x7f0000000140)={0x2, 0x0, @local}, 0x10) splice(r2, 0x0, r4, 0x0, 0x2000000002ffff, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_xfrm(0x10, 0x3, 0x6) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_usb_connect(0x0, 0x2d, &(0x7f0000000180)=ANY=[@ANYBLOB="1201fb0019030320d812010079de01ec020109021b0001000003000904000001785ecc00090585020004"], 0x0) r6 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_X86_SETUP_MCE(r6, 0x4008ae9c, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) r7 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000000)) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000000)={0x0, 0x0}, 0x8) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) read$char_usb(r7, &(0x7f00000002c0)=""/151, 0x97) close_range(r5, 0xffffffffffffffff, 0x0) 10m22.693925341s ago: executing program 3 (id=46): syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r0 = io_uring_setup(0x937, &(0x7f0000000140)={0x0, 0x32b3, 0x80, 0x0, 0x360}) getsockopt$inet_sctp_SCTP_ADAPTATION_LAYER(0xffffffffffffffff, 0x84, 0x7, 0x0, &(0x7f0000000040)) syz_emit_vhci(&(0x7f00000002c0)=@HCI_EVENT_PKT={0x4, @hci_ev_link_key_notify={{}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, "2d1cc967f6f6661360e795c004488acf", 0x2}}}, 0xfa) syz_emit_vhci(0x0, 0x0) openat$cuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) setsockopt$inet_buf(0xffffffffffffffff, 0x0, 0x8008000000010, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xe4b, 0x11e41e7a, 0x20000000, 0x3, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x34) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) syz_open_dev$ndb(&(0x7f0000000080), 0x0, 0xc0200) syz_emit_ethernet(0x4a, &(0x7f00000010c0)={@local, @empty, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x3, 0x3c, 0x0, 0x0, 0x0, 0x1, 0x0, @private=0xa010102, @local}, @redirect={0x5, 0x0, 0x0, @multicast2, {0x8, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, 0x0, @loopback, @local, {[@timestamp_addr={0x44, 0xc, 0x0, 0x1, 0x0, [{@rand_addr, 0x4e210000}]}]}}}}}}}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) r4 = socket$kcm(0x21, 0x2, 0xa) sendmsg$kcm(r4, &(0x7f0000000080)={&(0x7f0000000100)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e20, @empty}}, 0x80, 0x0, 0x0, &(0x7f0000001240)=[{0x10, 0x110, 0x1, "dc"}], 0x10}, 0x40) openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000ac0), 0x0, 0x0) io_setup(0xa, &(0x7f0000000140)) close_range(r0, 0xffffffffffffffff, 0x0) 10m7.516517777s ago: executing program 32 (id=46): syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r0 = io_uring_setup(0x937, &(0x7f0000000140)={0x0, 0x32b3, 0x80, 0x0, 0x360}) getsockopt$inet_sctp_SCTP_ADAPTATION_LAYER(0xffffffffffffffff, 0x84, 0x7, 0x0, &(0x7f0000000040)) syz_emit_vhci(&(0x7f00000002c0)=@HCI_EVENT_PKT={0x4, @hci_ev_link_key_notify={{}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, "2d1cc967f6f6661360e795c004488acf", 0x2}}}, 0xfa) syz_emit_vhci(0x0, 0x0) openat$cuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) setsockopt$inet_buf(0xffffffffffffffff, 0x0, 0x8008000000010, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xe4b, 0x11e41e7a, 0x20000000, 0x3, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x34) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) syz_open_dev$ndb(&(0x7f0000000080), 0x0, 0xc0200) syz_emit_ethernet(0x4a, &(0x7f00000010c0)={@local, @empty, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x3, 0x3c, 0x0, 0x0, 0x0, 0x1, 0x0, @private=0xa010102, @local}, @redirect={0x5, 0x0, 0x0, @multicast2, {0x8, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, 0x0, @loopback, @local, {[@timestamp_addr={0x44, 0xc, 0x0, 0x1, 0x0, [{@rand_addr, 0x4e210000}]}]}}}}}}}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) r4 = socket$kcm(0x21, 0x2, 0xa) sendmsg$kcm(r4, &(0x7f0000000080)={&(0x7f0000000100)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e20, @empty}}, 0x80, 0x0, 0x0, &(0x7f0000001240)=[{0x10, 0x110, 0x1, "dc"}], 0x10}, 0x40) openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000ac0), 0x0, 0x0) io_setup(0xa, &(0x7f0000000140)) close_range(r0, 0xffffffffffffffff, 0x0) 8m49.686358955s ago: executing program 4 (id=155): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) fsconfig$FSCONFIG_SET_BINARY(0xffffffffffffffff, 0x2, 0x0, 0x0, 0x0) ioctl$XFS_IOC_PATH_TO_FSHANDLE(0xffffffffffffffff, 0xc0385868, 0x0) r0 = syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000280)='mnt\x00', 0x4, &(0x7f0000000000), 0x0, 0x236, &(0x7f0000000300)="$eJzs3TFoM2UcBvDnLomf/b4gVRdBUEFEtFDqJrjURaEgpYgIKlREXJRWqC1urZOLg84qnVyKuFkdpUtxUQSnqh3qImhxsDjoELlcK9VGFFNz8t3vB5fcJe97//e4e95kOS5Aa00nmU/SSTKTpJekON/grnqZPt3cntpfTgaDx38shu3q7dpZv2tJtpI8mGSvLPJiN9nYffro54NH731jvXfPe7tPTU30IE8dHx0+dvLu4usfLjyw8fmX3y8WmU//D8d1+YoRn3WL5Jb/otj/RNFtegT8E0uvfvBVlftbk9w9zH8vZeqT9+baDXu93P/OX/V964cvbp/kWIHLNxj0qt/ArQHQOmWSfopyNkm9Xpazs/V/+K87V8uXVtdemXlhdX3l+aZnKuCy9JPDRz6+8tG1P+X/u06df+D6VeX/iaWdb6r1k07TowEmqcr/zLOb90X+oXXkH9pL/qG95B/aS/6hveQf2kv+ob3kH9pL/qG95B/a63z+AYB2GVxp+g5koClNzz8AAAAAAAAAAAAAAAAAAMBF21P7y2fLpGp++nZy/HCS7qj6neHziJMbh69XfyqqZr8r6m5jeebOMXcwpvcbvvv6pm+brf/ZHc3W31xJtl5LMtftXrz+itPr79+7+W++7z03ZoExPfRks/V/3Wm2/sJB8kk1/8yNmn/K3DZ8Hz3/9KvzN2b9l38ZcwcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABMzG8BAAD//8n0bSk=") ioctl$FS_IOC_ADD_ENCRYPTION_KEY(r0, 0xc0506617, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000640)='mnt/encrypted_dir\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) io_uring_enter(0xffffffffffffffff, 0x2000, 0xfffffffd, 0x9, 0x0, 0x0) socket(0x2, 0x80805, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) r4 = openat(0xffffffffffffff9c, &(0x7f0000000680)='mnt/encrypted_dir\x00', 0x800, 0x0) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r4, 0x800c6613, &(0x7f0000000040)=@v1={0x0, @adiantum, 0x4, @desc3}) openat$cgroup_ro(r4, &(0x7f00000000c0)='memory.numa_stat\x00', 0x275a, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r2, 0x8983, &(0x7f0000000080)={0x0, 'macsec0\x00', {0x1}, 0x9}) r5 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) r6 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/stat\x00', 0x0, 0x0) sendfile(r5, r6, 0x0, 0x20000023896) 8m48.324827333s ago: executing program 4 (id=156): r0 = syz_open_dev$dvb_frontend(&(0x7f0000000080), 0x0, 0x20000) r1 = accept4$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @multicast2}, 0x0, 0x80000) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000000c0)={'wlan1\x00'}) epoll_create(0x8) bind$netlink(0xffffffffffffffff, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r2 = getpgrp(0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x2, 0x0) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r4 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r4, 0x1, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) kcmp(r3, r4, 0x6, 0xffffffffffffffff, 0xffffffffffffffff) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) r6 = socket$inet6(0xa, 0x1, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x50) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0x10, &(0x7f0000000380)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x1}, {}, {}, [@kfunc={0x85, 0x0, 0x2, 0x0, 0x5}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x10, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000)={r7}, 0xc) setsockopt$inet6_int(r6, 0x29, 0x1000000000021, 0x0, 0x0) connect$inet6(r6, &(0x7f0000000000)={0xa, 0x0, 0x380000, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, 0x1c) ioctl$FE_GET_PROPERTY(r0, 0x80106f53, &(0x7f0000000240)={0x80004, &(0x7f0000000880)=[{0x8, '\x00', @st={0x4, [{0x1, @uvalue=0x40}, {0x1, @svalue=0x3d}, {0x0, @uvalue=0x8}, {0x2, @uvalue=0xfffffffffffffff9}]}, 0x2}, {0x16, '\x00', @st={0x4, [{0x1, @uvalue=0x2000000}, {0x2, @svalue=0x8}, {0x3, @svalue=0x4000000000000}, {0x3, @svalue=0x100}]}, 0x131}, {0x2a, '\x00', @data=0xd, 0x1000}, {0x2c, '\x00', @st={0x4, [{0x3, @svalue=0x3}, {0x3, @svalue=0x3}, {0x0, @uvalue=0x3}, {0x2, @uvalue=0xffffffffffffffff}]}, 0x10000}]}) 8m41.686967831s ago: executing program 4 (id=163): r0 = socket$pptp(0x18, 0x1, 0x2) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/net/ipv4/vs/drop_entry\x00', 0x2, 0x0) syz_open_dev$sg(0x0, 0x0, 0x1a3c82) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) ioctl$SNDRV_PCM_IOCTL_HW_REFINE(r1, 0xc2604110, 0x0) connect$pptp(r0, &(0x7f0000000080)={0x18, 0x2, {0x2, @broadcast}}, 0x1e) sched_setscheduler(0x0, 0x2, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r3 = syz_io_uring_setup(0xefe, &(0x7f0000000080)={0x0, 0x0, 0x1, 0x83, 0x3af}, &(0x7f0000000100)=0x0, &(0x7f0000000440)=0x0, &(0x7f0000000180)) syz_io_uring_modify_offsets$generic(r4, r5, 0x2c, 0x10000) io_uring_enter(r3, 0x2883, 0xf1bd, 0x0, 0x0, 0x0) timerfd_create(0x0, 0x0) io_uring_enter(r3, 0x788, 0x6a29, 0x1, 0x0, 0xfffffffffffffd04) r6 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r6, 0x0, 0x40, &(0x7f0000000340)=@filter={'filter\x00', 0x42, 0x4, 0x318, 0xffffffff, 0x1e8, 0x0, 0x0, 0xffffffff, 0xffffffff, 0x280, 0x280, 0x280, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0xd0, 0xf8, 0x0, {0x100000000000000}, [@common=@inet=@l2tp={{0x30}, {0x0, 0x0, 0x3, 0x0, 0x17}}, @common=@unspec=@connmark={{0x30}}]}, @REJECT={0x28}}, {{@uncond, 0x0, 0xc8, 0xf0, 0x0, {}, [@common=@ah={{0x30}, {[0x8001, 0x1ff], 0x1}}, @common=@icmp={{0x28}, {0xb, "b22f"}}]}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x7}}}, {{@ip={@empty, @loopback, 0x0, 0x0, 'vlan1\x00', 'dvmrp0\x00', {}, {}, 0x24, 0x0, 0x4}, 0x0, 0x70, 0x98}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x2}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x378) r7 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r7, &(0x7f0000000040), 0x6) ioctl$sock_bt_hci(r7, 0x400448e6, &(0x7f0000000080)='|') ioctl$sock_bt_hci(r7, 0x400448e7, &(0x7f0000000080)) syz_mount_image$jfs(&(0x7f0000000040), &(0x7f0000000380)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x8, &(0x7f0000002740)=ANY=[], 0x1, 0x6001, &(0x7f0000006400)="$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") openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) mkdir(0x0, 0x0) 8m38.121782315s ago: executing program 4 (id=166): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0xffffffffffffffff}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = semget$private(0x0, 0x6, 0x0) semop(r3, &(0x7f0000000000)=[{0x2, 0x0, 0x2000}, {0x3, 0x1, 0x1000}], 0x2) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r4 = socket$inet_tcp(0x2, 0x1, 0x0) r5 = syz_init_net_socket$x25(0x9, 0x5, 0x0) sendmmsg$inet(r5, &(0x7f0000005d00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)=ANY=[], 0x18}}], 0x1, 0x40008000) bind$inet(r4, &(0x7f0000000200)={0x2, 0x4e20, @empty}, 0x10) fcntl$setstatus(r4, 0x4, 0x40800) setsockopt$inet_mtu(r4, 0x0, 0xa, &(0x7f0000000180)=0x4, 0x4) setsockopt$SO_BINDTODEVICE(r4, 0x1, 0x19, &(0x7f0000000040)='sit0\x00', 0x10) r6 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r6, 0x0, 0x482, &(0x7f0000000040)={0x84, @multicast2, 0x15, 0x3, 'sh\x00', 0x1, 0x4, 0x6d}, 0x2c) socket$inet(0x2, 0x800, 0x40000000) setsockopt$IP_VS_SO_SET_FLUSH(r6, 0x0, 0x485, 0x0, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) write$P9_RUNLINKAT(r7, 0x0, 0x0) ftruncate(r7, 0x2000009) sendfile(r4, r7, 0x0, 0x7ffff004) 8m36.207329535s ago: executing program 4 (id=167): r0 = accept4$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @multicast2}, 0x0, 0x80000) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00'}) epoll_create(0x8) bind$netlink(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x2000800001000088}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) kcmp(r2, r3, 0x6, 0xffffffffffffffff, 0xffffffffffffffff) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) r5 = socket$inet6(0xa, 0x1, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x50) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0x10, &(0x7f0000000380)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x1}, {}, {}, [@kfunc={0x85, 0x0, 0x2, 0x0, 0x5}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x10, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000)={r6}, 0xc) setsockopt$inet6_int(r5, 0x29, 0x1000000000021, 0x0, 0x0) connect$inet6(r5, &(0x7f0000000000)={0xa, 0x0, 0x380000, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, 0x1c) ioctl$FE_GET_PROPERTY(0xffffffffffffffff, 0x80106f53, &(0x7f0000000240)={0x80004, &(0x7f0000000880)=[{0x8, '\x00', @st={0x4, [{0x1, @uvalue=0x40}, {0x1, @svalue=0x3d}, {0x0, @uvalue=0x8}, {0x2, @uvalue=0xfffffffffffffff9}]}, 0x2}, {0x16, '\x00', @st={0x4, [{0x1, @uvalue=0x2000000}, {0x2, @svalue=0x8}, {0x3, @svalue=0x4000000000000}, {0x3, @svalue=0x100}]}, 0x131}, {0x2a, '\x00', @data=0xd, 0x1000}, {0x2c, '\x00', @st={0x4, [{0x3, @svalue=0x3}, {0x3, @svalue=0x3}, {0x0, @uvalue=0x3}, {0x2, @uvalue=0xffffffffffffffff}]}, 0x10000}]}) 8m34.671211017s ago: executing program 4 (id=169): socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) syz_emit_ethernet(0x56, 0x0, 0x0) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) r0 = socket(0x10, 0x803, 0x0) syz_emit_ethernet(0x76, &(0x7f0000000480)=ANY=[@ANYBLOB="0180c200000023c10000000086dd6001000000403a00fc0200"/35], 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100000008e}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) ioctl$int_in(r4, 0x5421, &(0x7f0000000440)=0x6) connect$bt_rfcomm(r4, &(0x7f00000001c0)={0x1f, @any, 0x6}, 0xa) close(r4) socket$nl_xfrm(0x10, 0x3, 0x6) socket$inet6(0xa, 0x80003, 0x6) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000040)={'veth0_to_team\x00', 0x800}) 8m19.15631673s ago: executing program 33 (id=169): socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) syz_emit_ethernet(0x56, 0x0, 0x0) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) r0 = socket(0x10, 0x803, 0x0) syz_emit_ethernet(0x76, &(0x7f0000000480)=ANY=[@ANYBLOB="0180c200000023c10000000086dd6001000000403a00fc0200"/35], 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100000008e}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) ioctl$int_in(r4, 0x5421, &(0x7f0000000440)=0x6) connect$bt_rfcomm(r4, &(0x7f00000001c0)={0x1f, @any, 0x6}, 0xa) close(r4) socket$nl_xfrm(0x10, 0x3, 0x6) socket$inet6(0xa, 0x80003, 0x6) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000040)={'veth0_to_team\x00', 0x800}) 6m24.034612099s ago: executing program 6 (id=331): socket$packet(0x11, 0x3, 0x300) r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000240)={'syz_tun\x00'}) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = msgget$private(0x0, 0x60) msgsnd(r1, &(0x7f0000000b00)={0x3}, 0x8, 0x0) msgrcv(r1, 0x0, 0x0, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, 0x0, 0x80) socket(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) signalfd(0xffffffffffffffff, 0x0, 0x0) openat$vcs(0xffffffffffffff9c, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=@encrypted_new={'new ', 'default', 0x20, 'user:', 'syz', 0x20, 0xffd}, 0x2a, 0x0) r4 = add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe) add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0x5ba8, 0xfffffffffffffffd) keyctl$read(0xb, r4, &(0x7f0000000240)=""/112, 0x349b7f55) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'lo\x00'}) 6m20.829877996s ago: executing program 6 (id=336): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x2042, 0x19d) r3 = openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) r4 = fanotify_init(0xf00, 0x1000) fanotify_mark(r4, 0x105, 0x10000839, r3, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./bus\x00', 0x42, 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000480)='./bus\x00', 0xffffffffffffff9c, &(0x7f00000004c0)='./file0\x00', 0x2) readv(r4, &(0x7f0000000c40)=[{&(0x7f0000000500)=""/169, 0xffffffa0}], 0x1) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r5, 0x6) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) r6 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$FUSE_OPEN(r6, &(0x7f0000000080)={0x20, 0x8000000000000009, 0x0, {0x0, 0x8}}, 0x20) setsockopt$bt_BT_DEFER_SETUP(0xffffffffffffffff, 0x112, 0x7, &(0x7f0000004e40), 0x4) syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) get_mempolicy(0x0, 0x0, 0x0, &(0x7f0000001000/0x4000)=nil, 0x3) 6m19.093836332s ago: executing program 6 (id=339): mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x188) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000380)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x33, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x10162, 0x0) syz_genetlink_get_family_id$smc(0x0, 0xffffffffffffffff) connect$inet6(0xffffffffffffffff, 0x0, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_emit_ethernet(0x42, &(0x7f0000000300)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, @remote, @void, {@arp={0x806, @ether_ipv6={0x1, 0x86dd, 0x6, 0x10, 0x2, @empty, @empty, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x33}, @dev={0xfe, 0x80, '\x00', 0x3c}}}}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl(r4, 0x8b2c, &(0x7f0000000040)) syz_mount_image$ext4(&(0x7f0000000200)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x2a0471a, &(0x7f00000000c0)={[{@bh}]}, 0x82, 0x4a8, &(0x7f0000000300)="$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") r5 = openat(0xffffffffffffff9c, 0x0, 0x101041, 0x15) pwrite64(r5, 0x0, 0x0, 0xe7c) chroot(0x0) 6m17.010951315s ago: executing program 6 (id=340): r0 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r0, &(0x7f0000000340)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r0, 0x1, 0x8, 0x0, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) openat$audio(0xffffffffffffff9c, 0x0, 0xa001, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r2 = syz_open_dev$sndpcmp(&(0x7f0000000000), 0x1, 0xa0181) writev(r2, 0x0, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x8081) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x20}, 0x1, 0x0, 0x0, 0x8000}, 0x4000000) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x9, 0xffffffffffffffff, 0x0, 0xfffffffffffffffd, 0x1000001000, 0x46}, 0x0, &(0x7f0000000000)={0x3ff, 0x7, 0xff00, 0x9, 0x0, 0xf, 0x7ffffffe}, 0x0, 0x0) sendmsg$kcm(r1, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000a80)=[{&(0x7f00000003c0)="2e00000010008188040f80ec59acbc0413a1f848110000004e140602000000000e000a000f00000002800000121f1e753475fdf08f585bda67439d77ba13c33667c653ebe90fbdd861284dbe8afa5e6dcbc08b050d16d55d30a0918f091e854c12ef7a36a763ef5a6baee15a2541f64bbb010000", 0x74}, {&(0x7f0000000540)="be5b94c50ca49cb1b4a7458f86762fbf27c101d6aae58e56800fff97484fa6619d1f529460b5c3315f35bdf719722158f7f54c42ae9a0e258d913a8fb5101a25114ef298913998fb5451cc82ff159b90be19a3ac0017293e36dd77127c49c52568963276f3539e4dbff3d957339ce587a929f8ab2d122d1c0930f7beb5f7ac9d6202e045c347f1a9c937ed8cd58dea51aa463959f0b5981395b2b84afb0587204fef4a1b9dd65e001921f2aed3a3774d21f9", 0xb2}, {&(0x7f0000000640)="5a843a5e9f2c76f6137e37781e71355179cb4f7371f10335668f1193e39c767fa0a2d2a6240b0da9faa22c0bfb570f9ed199628d32dcff2934dd438492c3af0b900b8576b8da987abc19cfd4a49758e2b5449ce9036d929fc14fe8e7d66a4ac5679a39a30c957c72cbd7e6e63cec99cce5cfe36a2c02e2b9", 0x78}, {&(0x7f0000000740)="78d2b8f05d879fd2921dc8272761bf9e1ee79b1012e301e76796753d87b52899438291fdbe8e71075e9d83bdc3f882ebbf20571b0f2eff3292182c267d4177fc3e78deebb967577d65aa7bfcbfe60832ad5bfdeee5327f92dc333c85d479120d8724269969ae16f0aa11e598f375e50ee55ee4b274325ee408b8794d0f9c58", 0x7f}, {&(0x7f0000000880)="b7c56f6ad762de38cc71b30a7566f98e930453f64309f96000ff355d7056801cd0258e834705343a5be02ee9651ef4ed4db102a871c20ae0c3299efbe9744b4ff08cee41a332ff780b51d47e47e48778fccb72aaf3f415becaf9b4a4812b18a9db9bed82", 0x64}, {&(0x7f0000000980)="15a68aa8742efe4c6b26509c907c2c4d69c8821ae96d403582574fe7e7dbc26f77ec54efcdaf3f2a65a3eec46f690c036dd990dc1084a3d8f32b6a922e88d4878d8c24b00bc569f6cc38f7689f4a9d16d9d8d2b3c3e42d0208f75ae051c3f85aa9e14b0eee0595221758e46cfeba198a183c64a51dba4d2a4fb37bdf8500af88099a933dbae6666867eb59aae70c2237208a813e1df4e8b032bc70a8ae6a29744dc8afb3e85c096618f669a0eeb1fca48b810ef43bc7c3d6cefead7014763b1fd1022166398ea6", 0xc7}], 0x6}, 0x8084) r4 = syz_open_dev$sg(&(0x7f0000000140), 0x6f5e, 0x2) ioctl$FIBMAP(r4, 0x5380, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r5, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_ULP(r5, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r5, 0x11a, 0x1, &(0x7f0000000540)=@gcm_128={{0x303}, "12000000f7ffffe2", "8e083700daf38a6d69e9b5e9c2f133d7", "6a3a05b9"}, 0x28) shutdown(r5, 0x1) sendfile(r5, 0xffffffffffffffff, 0x0, 0xffffffff004) unshare(0x2a020480) 6m14.916681008s ago: executing program 6 (id=343): syz_open_dev$dvb_frontend(&(0x7f0000000080), 0x0, 0x20000) accept4$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @multicast2}, 0x0, 0x80000) epoll_create(0x8) bind$netlink(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x2000800001000088}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) kcmp(r1, r2, 0x6, 0xffffffffffffffff, 0xffffffffffffffff) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) r4 = socket$inet6(0xa, 0x1, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0x10, &(0x7f0000000380)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x1}, {}, {}, [@kfunc={0x85, 0x0, 0x2, 0x0, 0x5}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x10, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000)={r5}, 0xc) setsockopt$inet6_int(r4, 0x29, 0x1000000000021, 0x0, 0x0) connect$inet6(r4, &(0x7f0000000000)={0xa, 0x0, 0x380000, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, 0x1c) 6m13.319679652s ago: executing program 6 (id=345): socket$packet(0x11, 0x3, 0x300) r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000240)={'syz_tun\x00'}) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = msgget$private(0x0, 0x60) msgsnd(r1, &(0x7f0000000b00)={0x3}, 0x8, 0x0) msgrcv(r1, 0x0, 0x0, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, 0x0, 0x80) socket(0x10, 0x3, 0x0) bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x4) signalfd(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe) add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0x5ba8, 0xfffffffffffffffd) keyctl$read(0xb, r4, &(0x7f0000000240)=""/112, 0x349b7f55) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'lo\x00'}) 6m2.577051315s ago: executing program 5 (id=363): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x104}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$kcm(0x29, 0x2, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001000)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00'}, 0x48) r5 = socket$kcm(0x2, 0x1, 0x0) sendmsg$inet(r5, &(0x7f0000000fc0)={&(0x7f0000000000)={0x2, 0x4001, @remote}, 0x10, 0x0}, 0x20000811) ioctl$sock_kcm_SIOCKCMATTACH(r3, 0x89e0, &(0x7f00000001c0)={r5, r4}) r6 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r6, 0x29, 0x20, 0x0, 0x0) sendmsg$kcm(r3, &(0x7f0000002080)={0x0, 0x0, &(0x7f0000002000)}, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, 0x0) r8 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000), 0x8502, 0x0) write$sndseq(r8, &(0x7f0000001380)=[{0x6, 0x0, 0x0, 0x0, @tick, {0x4}, {}, @ext={0x0, 0x0}}, {0x0, 0x3, 0x0, 0x0, @tick=0x9, {}, {0x2}, @connect={{0x2, 0x3}, {0x1}}}, {0x0, 0x0, 0x0, 0x0, @time={0x2, 0xffffffff}, {0x0, 0x8}, {}, @connect={{0xa}, {0x9, 0x9}}}, {0x0, 0x0, 0x1, 0x0, @time={0x1}, {0xd0}, {0x3}, @raw8={"33f9dc44d4e775c85a555d8d"}}], 0x70) ptrace$setopts(0x4200, r0, 0x8000000000000001, 0xc93168559fb45e18) sendmsg$NL80211_CMD_FRAME(r7, 0x0, 0x28004800) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) mount$afs(0x0, &(0x7f00000000c0)='.\x00', 0x0, 0x4, &(0x7f0000000040)) 6m0.533622857s ago: executing program 5 (id=364): r0 = syz_open_dev$dvb_frontend(&(0x7f0000000080), 0x0, 0x20000) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) epoll_create(0x8) bind$netlink(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x2000800001000088}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) kcmp(r2, r3, 0x6, 0xffffffffffffffff, 0xffffffffffffffff) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) r5 = socket$inet6(0xa, 0x1, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x50) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0x10, &(0x7f0000000380)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x1}, {}, {}, [@kfunc={0x85, 0x0, 0x2, 0x0, 0x5}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x10, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000)={r6}, 0xc) setsockopt$inet6_int(r5, 0x29, 0x1000000000021, 0x0, 0x0) connect$inet6(r5, &(0x7f0000000000)={0xa, 0x0, 0x380000, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, 0x1c) ioctl$FE_GET_PROPERTY(r0, 0x80106f53, &(0x7f0000000240)={0x80004, &(0x7f0000000880)=[{0x8, '\x00', @st={0x4, [{0x1, @uvalue=0x40}, {0x1, @svalue=0x3d}, {0x0, @uvalue=0x8}, {0x2, @uvalue=0xfffffffffffffff9}]}, 0x2}, {0x16, '\x00', @st={0x4, [{0x1, @uvalue=0x2000000}, {0x2, @svalue=0x8}, {0x3, @svalue=0x4000000000000}, {0x3, @svalue=0x100}]}, 0x131}, {0x2a, '\x00', @data=0xd, 0x1000}, {0x2c, '\x00', @st={0x4, [{0x3, @svalue=0x3}, {0x3, @svalue=0x3}, {0x0, @uvalue=0x3}, {0x2, @uvalue=0xffffffffffffffff}]}, 0x10000}]}) 5m56.807708725s ago: executing program 34 (id=345): socket$packet(0x11, 0x3, 0x300) r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000240)={'syz_tun\x00'}) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = msgget$private(0x0, 0x60) msgsnd(r1, &(0x7f0000000b00)={0x3}, 0x8, 0x0) msgrcv(r1, 0x0, 0x0, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, 0x0, 0x80) socket(0x10, 0x3, 0x0) bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x4) signalfd(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe) add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0x5ba8, 0xfffffffffffffffd) keyctl$read(0xb, r4, &(0x7f0000000240)=""/112, 0x349b7f55) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'lo\x00'}) 5m56.790885275s ago: executing program 5 (id=369): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xe, 0x8031, 0xffffffffffffffff, 0x3000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mincore(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r3, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x47) setsockopt$inet_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f00000001c0)='westwood', 0x8) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r3, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x28, 0x1, 0x4, 0x3, 0x0, 0x0, {0x7, 0x0, 0x8}, [@NFULA_CFG_MODE={0xa, 0x2, {0x40}}, @NFULA_CFG_CMD={0x5, 0x1, 0x1}]}, 0x28}}, 0x4000) connect$inet(r3, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r3, 0x6, 0x16, &(0x7f00000002c0)=[@sack_perm, @timestamp, @window={0x3, 0x0, 0x5}, @timestamp, @window={0x3, 0x8, 0x7}, @timestamp, @sack_perm, @window={0x3, 0x0, 0x8}, @mss={0x2, 0x401}], 0x9) sendto$inet(r3, &(0x7f0000000500)="ad", 0x1, 0x0, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f0000000000), 0x4) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e99925bd70000000001dfc00"/29], 0xb8}}, 0x40004) r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r6, &(0x7f00000003c0)={0x1f, 0x0, @any, 0xfffa}, 0xe) setsockopt$bt_BT_SECURITY(r6, 0x112, 0x4, &(0x7f0000000280)={0x3, 0x7}, 0x2) connect$bt_l2cap(r6, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) 5m47.186890694s ago: executing program 5 (id=382): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="020000000400000008"], 0x48) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000140), 0x4000000004002, 0x0) r1 = dup(r0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x13, r1, 0x2000) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) r2 = openat$tun(0xffffffffffffff9c, 0x0, 0x40e41, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) dup(r3) socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'lo\x00'}) write$tun(r2, 0x0, 0xffe) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f0000000040), 0x0, 0x0) read$msr(r4, &(0x7f0000019300)=""/102392, 0x18ff8) ftruncate(0xffffffffffffffff, 0xffff) fcntl$addseals(0xffffffffffffffff, 0x409, 0x7) ioctl$UDMABUF_CREATE(0xffffffffffffffff, 0x40187542, &(0x7f0000000000)={0xffffffffffffffff, 0x0, 0x0, 0x8000}) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0) r5 = syz_open_procfs(0xffffffffffffffff, 0x0) write$binfmt_script(r5, &(0x7f0000007c40)={'#! ', './cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0xff1) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0) 5m45.354790412s ago: executing program 5 (id=385): socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) syz_emit_ethernet(0x56, 0x0, 0x0) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) r0 = socket(0x10, 0x803, 0x0) syz_emit_ethernet(0x76, &(0x7f0000000480)=ANY=[@ANYBLOB="0180c200000023c10000000086dd6001000000403a00fc0200"/35], 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100000008e}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, 0x0, 0x0, 0x2, 0x0) r4 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) ioctl$int_in(r4, 0x5421, &(0x7f0000000440)=0x6) connect$bt_rfcomm(r4, &(0x7f00000001c0)={0x1f, @any, 0x6}, 0xa) close(r4) socket$nl_xfrm(0x10, 0x3, 0x6) socket$inet6(0xa, 0x80003, 0x6) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000040)={'veth0_to_team\x00', 0x800}) 5m41.487439433s ago: executing program 5 (id=393): socket$packet(0x11, 0x3, 0x300) r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000240)={'syz_tun\x00'}) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = msgget$private(0x0, 0x60) msgsnd(r1, &(0x7f0000000b00)={0x3}, 0x8, 0x0) msgrcv(r1, 0x0, 0x0, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, 0x0, 0x80) socket(0x10, 0x3, 0x0) bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x4) signalfd(0xffffffffffffffff, 0x0, 0x0) openat$vcs(0xffffffffffffff9c, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=@encrypted_new={'new ', 'default', 0x20, 'user:', 'syz', 0x20, 0xffd}, 0x2a, 0x0) r4 = add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe) add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0x5ba8, 0xfffffffffffffffd) keyctl$read(0xb, r4, &(0x7f0000000240)=""/112, 0x349b7f55) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'lo\x00'}) 5m25.948835245s ago: executing program 35 (id=393): socket$packet(0x11, 0x3, 0x300) r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000240)={'syz_tun\x00'}) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = msgget$private(0x0, 0x60) msgsnd(r1, &(0x7f0000000b00)={0x3}, 0x8, 0x0) msgrcv(r1, 0x0, 0x0, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, 0x0, 0x80) socket(0x10, 0x3, 0x0) bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x4) signalfd(0xffffffffffffffff, 0x0, 0x0) openat$vcs(0xffffffffffffff9c, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=@encrypted_new={'new ', 'default', 0x20, 'user:', 'syz', 0x20, 0xffd}, 0x2a, 0x0) r4 = add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe) add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0x5ba8, 0xfffffffffffffffd) keyctl$read(0xb, r4, &(0x7f0000000240)=""/112, 0x349b7f55) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'lo\x00'}) 2m45.481641906s ago: executing program 8 (id=592): r0 = syz_open_dev$dvb_frontend(&(0x7f0000000080), 0x0, 0x20000) r1 = accept4$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @multicast2}, 0x0, 0x80000) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000000c0)={'wlan1\x00'}) epoll_create(0x8) bind$netlink(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x2000800001000088}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r2 = getpgrp(0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x2, 0x0) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r4 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r4, 0x1, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) kcmp(r3, r4, 0x6, 0xffffffffffffffff, 0xffffffffffffffff) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) r6 = socket$inet6(0xa, 0x1, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x50) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0x10, &(0x7f0000000380)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x1}, {}, {}, [@kfunc={0x85, 0x0, 0x2, 0x0, 0x5}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x10, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000)={r7}, 0xc) setsockopt$inet6_int(r6, 0x29, 0x1000000000021, 0x0, 0x0) connect$inet6(r6, &(0x7f0000000000)={0xa, 0x0, 0x380000, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, 0x1c) ioctl$FE_GET_PROPERTY(r0, 0x80106f53, &(0x7f0000000240)={0x80004, &(0x7f0000000880)=[{0x8, '\x00', @st={0x4, [{0x1, @uvalue=0x40}, {0x1, @svalue=0x3d}, {0x0, @uvalue=0x8}, {0x2, @uvalue=0xfffffffffffffff9}]}, 0x2}, {0x16, '\x00', @st={0x4, [{0x1, @uvalue=0x2000000}, {0x2, @svalue=0x8}, {0x3, @svalue=0x4000000000000}, {0x3, @svalue=0x100}]}, 0x131}, {0x2a, '\x00', @data=0xd, 0x1000}, {0x2c, '\x00', @st={0x4, [{0x3, @svalue=0x3}, {0x3, @svalue=0x3}, {0x0, @uvalue=0x3}, {0x2, @uvalue=0xffffffffffffffff}]}, 0x10000}]}) 2m43.506743167s ago: executing program 8 (id=594): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x1, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xfff2}, {0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x44}, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffd000/0x3000)=nil) bpf$MAP_CREATE(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000380)=0x7) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) setgroups(0x0, 0x0) sendmsg(0xffffffffffffffff, 0x0, 0x4048000) shmctl$SHM_INFO(0x0, 0xe, 0x0) shmctl$IPC_RMID(r1, 0x0) sendmsg$BATADV_CMD_SET_MESH(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000023c0)={0x1c, 0x0, 0x1, 0x4070bd28, 0x1, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8}]}, 0x1c}}, 0x18) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCSTI(r5, 0x5412, &(0x7f0000000500)=0x4) ioctl$TCSETSW2(r0, 0x402c542c, &(0x7f0000000180)={0xfffff3d4, 0x200ffffd, 0x7, 0xfffffff2, 0x0, "4d6b5ccb8600", 0x8}) readv(r0, &(0x7f0000003a00)=[{&(0x7f0000003840)=""/150, 0x96}], 0x1) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0xcfa42, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) 2m28.855533821s ago: executing program 8 (id=612): socket$nl_route(0x10, 0x3, 0x0) syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000000)='./file1\x00', 0x4000, &(0x7f0000000140)=ANY=[@ANYBLOB="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"], 0x6, 0x2b7, &(0x7f0000000a40)="$eJzs3b2LY1UUAPDzZvKlFklhJYIP3MLGZWdbmwyShWAqJYVa6OLugkyCsAsDfmDcytbG0r9AEOz8J2ws7AVbwc4FF568r0myvmQ3g5lR9/crZu7ce8675965M8MUuXn/xfnJrTTu3P/sl+j1kjgYxjAeJDGIg6h9EWuGXwUA8F/2IMvi96y0PpJszctHe/stDQDYk81//zf4fu8lAQB79tbb77xxPJmM3kzTXtyYf3k6zf+zzz+X48d34sOYxe24Fv14GJGdKds3sixbtNLcIK7MF6fTPHP+3o/V849/iyjyj6Ifg6JrPX88GR2lpZX8RV7Hs9X8wzz/evTj+Yb5x5PR9Yb8mHbilZdX6r8a/fjpg/goZnGrKKLIf/XP8WT0+VGavp59/cen7+bl5fnJ4nTaLeKWssML/tYAAAAAAAAAAAAAAAAAAAAAAPA/djVNu5EWHwZxZZ53VffvHD7Mv2hHWhus389T5p/dEvzI/UCLLL6p7+e5lqZpVgUu81vxQital7NqAAAAAAAAAAAAAAAAAAAA+He59/EnJzdns9t3/5FGfRtA/bL+8z5nuNLzUjTEDOKsp7uc8qCadsuT47COSSK2lpE/cafi24+ffUPjmU1Z336369b1Hh/TPkeFOzbq03VyM2new27UPb36kPywGtOJJ5yrs2ko2+n4dRqH+juvvfNc0VhsiYlkW2Gv/VruXNWTPLqKTrGrjentqlH+LDSdjZ3O899/VyRu6wAAAAAAAAAAAAAAAAAAgL1avui3YfD+hqSfx+Wb/Mdgz9UBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwMVYvv//Do1FlfwEwZ24e++SlwgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMBT4K8AAAD//y8+YYw=") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r3) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r3, &(0x7f0000000040)={0xa, 0x4e22, 0x77c, @empty, 0x1}, 0x1c) listen(r4, 0x0) r5 = socket$inet_mptcp(0x2, 0x1, 0x106) ioctl$TCSETSF(0xffffffffffffffff, 0x5404, &(0x7f00000000c0)={0x7fffffff, 0x6, 0x2, 0x7c1e92a2, 0x13, "26df5592186bff9dd233efecf528ffc2a6e099"}) setsockopt$sock_int(r5, 0x1, 0x8, &(0x7f0000000700)=0x8, 0x4) connect$inet(r5, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0xff, 0xffffffffffffffff, 0x4}, 0x38) r6 = accept(r3, 0x0, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[], 0xfffffdef}}, 0x1) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/pm_trace', 0x0, 0x0) syz_open_dev$loop(0x0, 0xf01c, 0x0) recvfrom(r5, &(0x7f0000000180)=""/60, 0xfffffffffffffecb, 0x4100, 0x0, 0x0) r7 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') read$FUSE(r7, &(0x7f0000002140)={0x2020}, 0x2020) 2m19.845137307s ago: executing program 8 (id=620): r0 = socket(0x2, 0x805, 0x0) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000100)=[@in={0x2, 0x4e20, @rand_addr=0x64010102}]}, &(0x7f00000007c0)=0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) msgctl$MSG_INFO(0x0, 0xc, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x3, 0x0, 0x0, 0x0, 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x6}, 0x94) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r0, 0x84, 0x6c, &(0x7f0000000180)={r4, 0x10, "c7dff70e4f853f3a4c1240f0f02fd60d"}, &(0x7f0000000200)=0x18) getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r0, 0x84, 0x18, &(0x7f00000000c0)={r5, 0x7}, &(0x7f0000000140)=0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000c80), &(0x7f00000000c0)='./file0\x00', 0x401, &(0x7f00000002c0)=ANY=[@ANYRES16=0x0], 0xfd, 0x2ce, &(0x7f0000000980)="$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") r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, 0x0, 0x0) syz_emit_vhci(&(0x7f0000000140)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x3, 0x0, 0xc}, @l2cap_cid_signaling={{0x8}, [@l2cap_conn_req={{0x2, 0x6, 0x4}, {0x3}}]}}, 0x11) pselect6(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r7 = syz_clone(0x20a04000, 0x0, 0x0, 0x0, 0x0, 0x0) write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000000)=r7, 0x12) ioctl$FE_SET_PROPERTY(0xffffffffffffffff, 0x40106f52, &(0x7f0000000040)={0x11}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0xc0185879, 0xfffffffffffffffe) 2m16.172099554s ago: executing program 8 (id=626): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = fsopen(0x0, 0x1) fsmount(r3, 0x0, 0xb) r4 = openat(0xffffffffffffff9c, 0x0, 0x101042, 0x15) r5 = openat(0xffffffffffffff9c, 0x0, 0x14b302, 0x8c) pwritev2(r5, &(0x7f0000000100)=[{&(0x7f0000000080)}], 0x1, 0x5412, 0x0, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000000)={0x0, 0x0, 0x0, &(0x7f0000010040), 0xfffffffd, 0xffffffffffffffff, 0x4}, 0x38) bpf$TOKEN_CREATE(0x24, &(0x7f0000000080), 0x8) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000940)='hugetlb.2MB.usage_in_bytes\x00', 0x26e1, 0x0) mq_notify(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x23, 0x4, @thr={0x0, &(0x7f0000000300)}}) r7 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x22902, 0x0) ioctl$FBIO_WAITFORVSYNC(r7, 0x40044620, 0x0) sendfile(0xffffffffffffffff, r7, &(0x7f00000000c0)=0x4, 0x3) close(r6) socket$nl_sock_diag(0x10, 0x3, 0x4) ioctl$SIOCSIFHWADDR(r6, 0x8b34, &(0x7f0000000000)={'wlan1\x00', @random="000500000020"}) sendfile(r3, r4, 0x0, 0x6fec91) 2m1.891274811s ago: executing program 8 (id=643): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$sock_linger(r0, 0x1, 0xd, &(0x7f0000000100)={0x1, 0x80000001}, 0x8) connect$inet(r0, &(0x7f0000000480)={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) 2m1.126636486s ago: executing program 36 (id=643): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$sock_linger(r0, 0x1, 0xd, &(0x7f0000000100)={0x1, 0x80000001}, 0x8) connect$inet(r0, &(0x7f0000000480)={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) 40.280397874s ago: executing program 9 (id=725): r0 = socket(0x10, 0x803, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'team_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0xfff7e002, {0x0, 0x0, 0x0, r2, {0x0, 0xa}, {0xffff, 0x3}, {0x6, 0xfff3}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000041}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000840)=@newtfilter={0x5c, 0x2c, 0xd2b, 0x70bd26, 0x25dfdbfb, {0x0, 0x0, 0x0, r2, {0x3, 0x9}, {}, {0x4, 0xfff3}}, [@filter_kind_options=@f_u32={{0x8}, {0x30, 0x2, [@TCA_U32_CLASSID={0x8, 0x1, {0x8, 0xe}}, @TCA_U32_SEL={0x24, 0x5, {0xc, 0x6, 0x1, 0x3d3f, 0x0, 0xfff, 0x3, 0x58f, [{0xebd, 0x1, 0x40020000, 0x7}]}}]}}]}, 0x5c}}, 0x24040084) readv(r0, &(0x7f00000023c0)=[{0x0}, {&(0x7f0000000380)=""/101, 0x65}, {0x0}, {&(0x7f00000020c0)=""/254, 0xfe}, {0x0}, {&(0x7f0000002240)=""/7, 0x7}, {&(0x7f0000002280)=""/139, 0x8b}, {&(0x7f0000002340)=""/85, 0x55}], 0x8) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) ioctl$TCSETS(0xffffffffffffffff, 0x5402, &(0x7f0000000040)={0xfff, 0x4d4a, 0x8, 0x5, 0xd, "2ab76ecca931142653228cba5c0e5c3fe430f1"}) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) unshare(0x2c020400) r7 = msgget$private(0x0, 0x0) msgsnd(r7, &(0x7f0000000180)=ANY=[@ANYRESOCT], 0x2000, 0x0) msgrcv(r7, 0x0, 0x0, 0x2, 0x3000) connect$bt_l2cap(r3, &(0x7f0000000000)={0x1f, 0x8ef, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe) syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4) r8 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) write$binfmt_script(r8, &(0x7f0000019380)={'#! ', './file0', [{0x20, '\x15\xe6\x8e\\\xfe\x15^\xca\xbb\x88B\xeb\x90FAv\xdc\xbc\x1eiU\b\xc2D\xdb\xca\x9d\xb4oL\xe92\x7f+\f\x0e\xfd\xceTC\x1f;u\x84E\x04\xe3B19xO\xc2\xd4.Mp\xf4\x80{e\x87\xc4V\xe0\x99\x99\x8b\x93I\x8a\xb3\xce*\x9b\xd0X\aA0S\x02k\xdb\x12\v\x9c\x10nY\x85\x92\xf6\x93\xc4%\x0f\x80.\x8d\x9b\x15\x8e\xf4LWr\x14\x9eKh\x97L\xb4\x03\xe9=\x8e\xff\xf0\xb1al\xb6\xc9\xa1/L\x8c7\xa0\x8eD\x1f,\x93`\xc0h\xacjGx\xb8\x9cv\x99bA\xc5]\b\xf8\xa5\x9b\x1c\xeeKB\xdd\xe8\xbboT\x90\x84k\xae\xb5\xfa\xd9\x0f\xd4T<\x0f\xdb\xec\x05HcN\xae;\x87\x00\x00\x00\x00\b\x92\xa7\xdf\x1dS\x00\x8b\x81\xf4\x84X*\xa6e\x922|FO\v\xa6\x17jG\xe3]'}]}, 0xe4) close(r8) execve(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) 38.0378952s ago: executing program 9 (id=730): r0 = syz_open_dev$dvb_frontend(&(0x7f0000000080), 0x0, 0x20000) r1 = accept4$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @multicast2}, 0x0, 0x80000) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000000c0)={'wlan1\x00'}) epoll_create(0x8) bind$netlink(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x2000800001000088}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r2 = getpgrp(0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x2, 0x0) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r4 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r4, 0x1, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) kcmp(r3, r4, 0x6, 0xffffffffffffffff, 0xffffffffffffffff) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) r6 = socket$inet6(0xa, 0x1, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x50) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0x10, &(0x7f0000000380)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x1}, {}, {}, [@kfunc={0x85, 0x0, 0x2, 0x0, 0x5}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x10, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000)={r7}, 0xc) setsockopt$inet6_int(r6, 0x29, 0x1000000000021, 0x0, 0x0) connect$inet6(r6, &(0x7f0000000000)={0xa, 0x0, 0x380000, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, 0x1c) ioctl$FE_GET_PROPERTY(r0, 0x80106f53, 0x0) 34.184276811s ago: executing program 9 (id=734): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) syz_open_dev$media(0x0, 0x103, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x2000c090) socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket(0x10, 0x3, 0x0) setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, 0x0, 0x0) sendto$inet6(r4, &(0x7f0000000100)="c10e000018001f06b9409b0dffff110d0207be040205060506100a044300040018000000fac8", 0x26, 0x0, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r5 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$cgroup_subtree(r5, 0x0, 0x32600) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001b80), r6) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000001bc0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r6, &(0x7f0000001d00)={0x0, 0x0, &(0x7f0000001cc0)={&(0x7f00000000c0)={0x30, r7, 0x1, 0x70bd2a, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0x14, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_HOLDING_TIMEOUT={0x6, 0x3, 0xbb}, @NL80211_MESHCONF_CONNECTED_TO_AS={0x5, 0x1f, 0x1}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x44}, 0x0) openat$vsock(0xffffffffffffff9c, &(0x7f0000000040), 0x610000, 0x0) ioctl$VHOST_SET_VRING_CALL(r5, 0x4008af21, 0x0) ioctl$KDSKBENT(r0, 0x4b47, &(0x7f0000000000)={0x0, 0x38, 0x213}) 31.543641515s ago: executing program 9 (id=738): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setparam(r0, &(0x7f00000006c0)=0x4) r3 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r3, 0x10f, 0x87, &(0x7f0000000040)=@req={0x3fc, 0x0, 0x0, 0xffffffff}, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_NODE_ADDR(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x24, r5, 0x201, 0x400000, 0x0, {{}, {}, {0x8, 0x11, 0x4}}}, 0x24}}, 0x0) sendmmsg(r3, &(0x7f0000003240), 0x4000000000000e4, 0x0) r6 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$UI_SET_EVBIT(r6, 0x40045564, 0x12) ioctl$UI_DEV_SETUP(r6, 0x405c5503, &(0x7f0000000100)={{0xfffc, 0x100, 0xee}, 'syz0\x00', 0xa}) socket(0x2, 0xa, 0x300) r7 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) bind$802154_raw(r7, &(0x7f0000000640)={0x24, @long={0x3, 0x3, {0xaaaaaaaaaaaa0102}}}, 0x14) r8 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000b00)={0x6, 0x3, &(0x7f00000004c0)=ANY=[@ANYRESHEX], &(0x7f00000002c0)='syzkaller\x00'}, 0x94) move_mount(r6, &(0x7f0000000400)='./file0\x00', 0xffffffffffffffff, &(0x7f0000000440)='./file0\x00', 0x40) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={r8, 0x5, 0xe, 0x0, &(0x7f0000000000)="259a53f271a76d2673004c6588ca", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x3}, 0x50) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000200)={&(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, 0x0, 0x0, r6}, 0x68) ioctl$UI_SET_EVBIT(r6, 0x40045564, 0x11) ioctl$UI_DEV_CREATE(r6, 0x5501) 28.657695626s ago: executing program 9 (id=741): sendmsg$IPCTNL_MSG_CT_GET(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x4) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0x4, 0x13, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020786c0000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000006000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001700000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, 0x0) r3 = getpgrp(0x0) sched_setaffinity(r3, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) mq_timedsend(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000180)={0x0, 0x3938700}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r5 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r5, 0x1, 0x0) r6 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r6, &(0x7f0000019680)=""/102392, 0x18ff8) getdents64(0xffffffffffffffff, &(0x7f0000001f40)=""/4123, 0x101b) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) sendmsg$NL80211_CMD_SET_CHANNEL(r1, 0x0, 0x8000) mkdir(0x0, 0x8e) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) waitid(0x2, 0xffffffffffffffff, 0x0, 0x8, 0x0) prlimit64(0x0, 0x7, &(0x7f0000000140)={0x4, 0x88}, 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x1f, 0x0, &(0x7f0000001400)) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r0, 0x0, 0x10, 0x10, &(0x7f00000002c0)="0000000212000000", &(0x7f0000000300)=""/8, 0xd00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) 26.803742544s ago: executing program 9 (id=742): r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) io_setup(0x0, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x300000a, 0x4031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) io_setup(0x7, &(0x7f0000000280)) r1 = openat(0xffffffffffffffff, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x4a102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) mremap(&(0x7f000054e000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f000022c000/0x3000)=nil) ioctl$SNDRV_TIMER_IOCTL_STOP(r1, 0x54a1) r3 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r3, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) setsockopt$inet_int(r3, 0x0, 0x7, &(0x7f0000000080)=0xcd, 0x4) connect$inet(r3, &(0x7f0000000480)={0x2, 0x4e21, @multicast1}, 0x10) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000300)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_MIGRATE_ID(0xffffffffffffffff, &(0x7f0000000040)={0x12, 0x10, 0xfa00, {&(0x7f0000000000), r4}}, 0x18) sendmmsg(r3, &(0x7f0000007fc0), 0x800001d, 0x0) syz_open_dev$usbfs(&(0x7f0000000240), 0x75, 0x109301) mount$9p_fd(0x0, 0x0, &(0x7f0000000240), 0x8080, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000040)='smaps_rollup\x00') lseek(r5, 0x2000, 0x0) ioctl$VIDIOC_ENUMSTD(r0, 0xc0485619, &(0x7f0000000500)={0x80000000, 0x3200e0, "3d9f3f931497dd9772e0bcbffd83b749067cf1598b58a271", {0x7, 0x88}, 0x2}) 26.563411609s ago: executing program 7 (id=745): r0 = syz_open_dev$dvb_frontend(&(0x7f0000000080), 0x0, 0x20000) r1 = accept4$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @multicast2}, 0x0, 0x80000) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000000c0)={'wlan1\x00'}) epoll_create(0x8) bind$netlink(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x2000800001000088}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r2 = getpgrp(0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x2, 0x0) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r4 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r4, 0x1, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) kcmp(r3, r4, 0x6, 0xffffffffffffffff, 0xffffffffffffffff) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) r6 = socket$inet6(0xa, 0x1, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x50) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0x10, &(0x7f0000000380)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x1}, {}, {}, [@kfunc={0x85, 0x0, 0x2, 0x0, 0x5}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x10, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000)={r7}, 0xc) setsockopt$inet6_int(r6, 0x29, 0x1000000000021, 0x0, 0x0) connect$inet6(r6, &(0x7f0000000000)={0xa, 0x0, 0x380000, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, 0x1c) ioctl$FE_GET_PROPERTY(r0, 0x80106f53, 0x0) 22.822369397s ago: executing program 7 (id=747): r0 = socket$pppoe(0x18, 0x1, 0x0) r1 = socket$pppoe(0x18, 0x1, 0x0) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) r3 = syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2) ioctl$VIDIOC_S_CTRL(r3, 0xc008561c, &(0x7f0000000080)={0xf0f03c, 0x1}) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000000)={r2}, 0x4) r4 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r5 = dup(r4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x13, r5, 0x2000) write$binfmt_aout(r5, 0x0, 0xffffffdb) ioctl$HIDIOCGCOLLECTIONINDEX(r5, 0x40184810, &(0x7f0000000040)={0x3, 0x2, 0x8, 0x9, 0xffffff81, 0x7}) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0x11, &(0x7f0000000140)=@framed={{0x18, 0x2, 0x0, 0x0, 0x1}, [@call={0x85, 0x0, 0x0, 0x20}, @snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r2}}]}, &(0x7f0000000080)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r6, 0x0, 0xe, 0x0, &(0x7f0000000040)="40d174b2a3f781c274386d178550", 0x0, 0x1200801, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x47) connect$pppoe(r1, &(0x7f0000000040)={0x18, 0x0, {0x1, @empty, 'ip_vti0\x00'}}, 0x1e) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000d40)={&(0x7f00000003c0)=@newtaction={0x1b0, 0x30, 0xffff, 0xfffffffe, 0x0, {}, [{0x19c, 0x1, [@m_nat={0x140, 0x1b, 0x0, 0x0, {{0x8}, {0xf4, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{0x7, 0x0, 0x1, 0xb38, 0xe}, @dev={0xac, 0x14, 0x14, 0x2a}, @multicast2}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x8, 0x5, 0x1, 0xd}, @multicast2, @local, 0xffffffff, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0xf, 0x6, 0x6, 0x0, 0x1}, @broadcast, @multicast1, 0xff}}, @TCA_NAT_PARMS={0x28, 0x1, {{0xffffff47, 0x5, 0x5, 0x2, 0x2}, @loopback, @dev={0xac, 0x14, 0x14, 0x31}}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x1, 0x0, 0x10000000, 0x49, 0xc}, @empty, @multicast2, 0xffffff00}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x6, 0x5, 0x7, 0xffff}, @initdev={0xac, 0x1e, 0x1, 0x0}, @dev={0xac, 0x14, 0x14, 0x2b}, 0xff000000}}]}, {0x25, 0x6, "1a98ee263f539524341fbe5305bfb4b027ce8e0e7a16ba2cac544469a09399152a"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x3, 0x1}}}}, @m_sample={0x58, 0x1, 0x0, 0x0, {{0xb}, {0x2c, 0x2, 0x0, 0x1, [@TCA_SAMPLE_PARMS={0x18, 0x2, {0x64, 0x5f, 0x0, 0x101, 0x8cb8}}, @TCA_SAMPLE_PSAMPLE_GROUP={0x8}, @TCA_SAMPLE_RATE={0x8, 0x3, 0x3}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x3}}}}]}]}, 0x1b0}}, 0x0) connect$pppoe(r0, &(0x7f0000000080)={0x18, 0x0, {0x1, @multicast, 'ip6tnl0\x00'}}, 0x1e) ioctl$FICLONE(0xffffffffffffffff, 0x40049409, r1) ioctl$UBLK_U_CMD_END_USER_RECOVERY(0xffffffffffffffff, 0xc0207511, &(0x7f0000000200)={0x0, 0xffff, 0x0, 0x0, 0xffffffffffffffff}) syz_open_procfs$namespace(r8, &(0x7f0000000280)='ns/mnt\x00') r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r9, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)={0x14, 0x32, 0x301, 0x70bd25, 0xfffffffc, {0x4}}, 0x14}, 0x1, 0x0, 0x0, 0x404c8d3}, 0x0) connect$pppoe(0xffffffffffffffff, &(0x7f0000000080)={0x18, 0x0, {0x1, @empty, 'ip_vti0\x00'}}, 0x1e) prctl$PR_GET_TSC(0x19, &(0x7f00000000c0)) r10 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff8000}]}) close_range(r10, 0xffffffffffffffff, 0x0) 19.141824163s ago: executing program 2 (id=751): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = fsopen(0x0, 0x1) fsmount(r3, 0x0, 0xb) r4 = openat(0xffffffffffffff9c, 0x0, 0x14b302, 0x8c) futex(0x0, 0x7, 0x0, 0x0, 0x0, 0x0) pwritev2(r4, &(0x7f0000000100)=[{&(0x7f0000000080)}], 0x1, 0x5412, 0x0, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000000)={0x0, 0x0, 0x0, &(0x7f0000010040), 0xfffffffd, 0xffffffffffffffff, 0x4}, 0x38) bpf$TOKEN_CREATE(0x24, &(0x7f0000000080), 0x8) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000940)='hugetlb.2MB.usage_in_bytes\x00', 0x26e1, 0x0) mq_notify(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x23, 0x4, @thr={0x0, &(0x7f0000000300)}}) r6 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x22902, 0x0) ioctl$FBIO_WAITFORVSYNC(r6, 0x40044620, 0x0) sendfile(0xffffffffffffffff, r6, &(0x7f00000000c0)=0x4, 0x3) close(r5) socket$nl_sock_diag(0x10, 0x3, 0x4) ioctl$SIOCSIFHWADDR(r5, 0x8b34, &(0x7f0000000000)={'wlan1\x00', @random="000500000020"}) sendfile(r3, 0xffffffffffffffff, 0x0, 0x6fec91) 18.883428898s ago: executing program 0 (id=752): r0 = socket$pppoe(0x18, 0x1, 0x0) r1 = socket$pppoe(0x18, 0x1, 0x0) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) r3 = syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2) ioctl$VIDIOC_S_CTRL(r3, 0xc008561c, &(0x7f0000000080)={0xf0f03c, 0x1}) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000000)={r2}, 0x4) r4 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r5 = dup(r4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x13, r5, 0x2000) write$binfmt_aout(r5, 0x0, 0xffffffdb) ioctl$HIDIOCGCOLLECTIONINDEX(r5, 0x40184810, &(0x7f0000000040)={0x3, 0x2, 0x8, 0x9, 0xffffff81, 0x7}) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0x11, &(0x7f0000000140)=@framed={{0x18, 0x2, 0x0, 0x0, 0x1}, [@call={0x85, 0x0, 0x0, 0x20}, @snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r2}}]}, &(0x7f0000000080)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r6, 0x0, 0xe, 0x0, &(0x7f0000000040)="40d174b2a3f781c274386d178550", 0x0, 0x1200801, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x47) connect$pppoe(r1, &(0x7f0000000040)={0x18, 0x0, {0x1, @empty, 'ip_vti0\x00'}}, 0x1e) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000d40)={&(0x7f00000003c0)=@newtaction={0x1b0, 0x30, 0xffff, 0xfffffffe, 0x0, {}, [{0x19c, 0x1, [@m_nat={0x140, 0x1b, 0x0, 0x0, {{0x8}, {0xf4, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{0x7, 0x0, 0x1, 0xb38, 0xe}, @dev={0xac, 0x14, 0x14, 0x2a}, @multicast2}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x8, 0x5, 0x1, 0xd}, @multicast2, @local, 0xffffffff, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0xf, 0x6, 0x6, 0x0, 0x1}, @broadcast, @multicast1, 0xff}}, @TCA_NAT_PARMS={0x28, 0x1, {{0xffffff47, 0x5, 0x5, 0x2, 0x2}, @loopback, @dev={0xac, 0x14, 0x14, 0x31}}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x1, 0x0, 0x10000000, 0x49, 0xc}, @empty, @multicast2, 0xffffff00}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x6, 0x5, 0x7, 0xffff}, @initdev={0xac, 0x1e, 0x1, 0x0}, @dev={0xac, 0x14, 0x14, 0x2b}, 0xff000000}}]}, {0x25, 0x6, "1a98ee263f539524341fbe5305bfb4b027ce8e0e7a16ba2cac544469a09399152a"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x3, 0x1}}}}, @m_sample={0x58, 0x1, 0x0, 0x0, {{0xb}, {0x2c, 0x2, 0x0, 0x1, [@TCA_SAMPLE_PARMS={0x18, 0x2, {0x64, 0x5f, 0x0, 0x101, 0x8cb8}}, @TCA_SAMPLE_PSAMPLE_GROUP={0x8}, @TCA_SAMPLE_RATE={0x8, 0x3, 0x3}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x3}}}}]}]}, 0x1b0}}, 0x0) connect$pppoe(r0, &(0x7f0000000080)={0x18, 0x0, {0x1, @multicast, 'ip6tnl0\x00'}}, 0x1e) r7 = socket$pppoe(0x18, 0x1, 0x0) ioctl$FICLONE(r7, 0x40049409, r1) ioctl$UBLK_U_CMD_END_USER_RECOVERY(0xffffffffffffffff, 0xc0207511, &(0x7f0000000200)={0x0, 0xffff, 0x0, 0x0, 0xffffffffffffffff}) syz_open_procfs$namespace(r8, &(0x7f0000000280)='ns/mnt\x00') r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r9, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)={0x14, 0x32, 0x301, 0x70bd25, 0xfffffffc, {0x4}}, 0x14}, 0x1, 0x0, 0x0, 0x404c8d3}, 0x0) connect$pppoe(r7, &(0x7f0000000080)={0x18, 0x0, {0x1, @empty, 'ip_vti0\x00'}}, 0x1e) prctl$PR_GET_TSC(0x19, &(0x7f00000000c0)) r10 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff8000}]}) close_range(r10, 0xffffffffffffffff, 0x0) 18.132300404s ago: executing program 2 (id=754): socket$packet(0x11, 0x2, 0x300) openat(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup.net/devices.allow\x00', 0x2, 0x48) socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) inotify_init1(0x0) 17.678420063s ago: executing program 2 (id=756): r0 = socket$pppoe(0x18, 0x1, 0x0) r1 = socket$pppoe(0x18, 0x1, 0x0) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) r3 = syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2) ioctl$VIDIOC_S_CTRL(r3, 0xc008561c, &(0x7f0000000080)={0xf0f03c, 0x1}) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000000)={r2}, 0x4) r4 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r5 = dup(r4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x13, r5, 0x2000) write$binfmt_aout(r5, 0x0, 0xffffffdb) ioctl$HIDIOCGCOLLECTIONINDEX(r5, 0x40184810, &(0x7f0000000040)={0x3, 0x2, 0x8, 0x9, 0xffffff81, 0x7}) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0x11, &(0x7f0000000140)=@framed={{0x18, 0x2, 0x0, 0x0, 0x1}, [@call={0x85, 0x0, 0x0, 0x20}, @snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r2}}]}, &(0x7f0000000080)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r6, 0x0, 0xe, 0x0, &(0x7f0000000040)="40d174b2a3f781c274386d178550", 0x0, 0x1200801, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x47) connect$pppoe(r1, &(0x7f0000000040)={0x18, 0x0, {0x1, @empty, 'ip_vti0\x00'}}, 0x1e) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000d40)={&(0x7f00000003c0)=@newtaction={0x1b0, 0x30, 0xffff, 0xfffffffe, 0x0, {}, [{0x19c, 0x1, [@m_nat={0x140, 0x1b, 0x0, 0x0, {{0x8}, {0xf4, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{0x7, 0x0, 0x1, 0xb38, 0xe}, @dev={0xac, 0x14, 0x14, 0x2a}, @multicast2}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x8, 0x5, 0x1, 0xd}, @multicast2, @local, 0xffffffff, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0xf, 0x6, 0x6, 0x0, 0x1}, @broadcast, @multicast1, 0xff}}, @TCA_NAT_PARMS={0x28, 0x1, {{0xffffff47, 0x5, 0x5, 0x2, 0x2}, @loopback, @dev={0xac, 0x14, 0x14, 0x31}}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x1, 0x0, 0x10000000, 0x49, 0xc}, @empty, @multicast2, 0xffffff00}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x6, 0x5, 0x7, 0xffff}, @initdev={0xac, 0x1e, 0x1, 0x0}, @dev={0xac, 0x14, 0x14, 0x2b}, 0xff000000}}]}, {0x25, 0x6, "1a98ee263f539524341fbe5305bfb4b027ce8e0e7a16ba2cac544469a09399152a"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x3, 0x1}}}}, @m_sample={0x58, 0x1, 0x0, 0x0, {{0xb}, {0x2c, 0x2, 0x0, 0x1, [@TCA_SAMPLE_PARMS={0x18, 0x2, {0x64, 0x5f, 0x0, 0x101, 0x8cb8}}, @TCA_SAMPLE_PSAMPLE_GROUP={0x8}, @TCA_SAMPLE_RATE={0x8, 0x3, 0x3}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x3}}}}]}]}, 0x1b0}}, 0x0) connect$pppoe(r0, &(0x7f0000000080)={0x18, 0x0, {0x1, @multicast, 'ip6tnl0\x00'}}, 0x1e) ioctl$FICLONE(0xffffffffffffffff, 0x40049409, r1) ioctl$UBLK_U_CMD_END_USER_RECOVERY(0xffffffffffffffff, 0xc0207511, &(0x7f0000000200)={0x0, 0xffff, 0x0, 0x0, 0xffffffffffffffff}) syz_open_procfs$namespace(r8, &(0x7f0000000280)='ns/mnt\x00') r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r9, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)={0x14, 0x32, 0x301, 0x70bd25, 0xfffffffc, {0x4}}, 0x14}, 0x1, 0x0, 0x0, 0x404c8d3}, 0x0) connect$pppoe(0xffffffffffffffff, &(0x7f0000000080)={0x18, 0x0, {0x1, @empty, 'ip_vti0\x00'}}, 0x1e) prctl$PR_GET_TSC(0x19, &(0x7f00000000c0)) r10 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff8000}]}) close_range(r10, 0xffffffffffffffff, 0x0) 15.025133698s ago: executing program 7 (id=758): r0 = syz_open_dev$dvb_frontend(&(0x7f0000000080), 0x0, 0x20000) r1 = accept4$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @multicast2}, 0x0, 0x80000) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000000c0)={'wlan1\x00'}) epoll_create(0x8) bind$netlink(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x2000800001000088}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r2 = getpgrp(0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x2, 0x0) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r4 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r4, 0x1, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) kcmp(r3, r4, 0x6, 0xffffffffffffffff, 0xffffffffffffffff) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) r6 = socket$inet6(0xa, 0x1, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x50) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0x10, &(0x7f0000000380)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x1}, {}, {}, [@kfunc={0x85, 0x0, 0x2, 0x0, 0x5}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x10, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000)={r7}, 0xc) setsockopt$inet6_int(r6, 0x29, 0x1000000000021, 0x0, 0x0) connect$inet6(r6, &(0x7f0000000000)={0xa, 0x0, 0x380000, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, 0x1c) ioctl$FE_GET_PROPERTY(r0, 0x80106f53, 0x0) 14.992224239s ago: executing program 0 (id=759): socket$packet(0x11, 0x2, 0x300) r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup.net/devices.allow\x00', 0x2, 0x48) socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = inotify_init1(0x0) r5 = dup(r4) inotify_rm_watch(r5, 0x0) r6 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_VIF(r6, 0x0, 0xca, 0x0, 0x0) syz_emit_ethernet(0x66, &(0x7f0000000340)=ANY=[], 0x0) write(0xffffffffffffffff, &(0x7f0000000040)="1c0000001a009b8a140000003b9b301f0000", 0x12) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x20, 0x3, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @netfilter=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x20, &(0x7f0000000000), 0x4) write$UHID_INPUT(r0, &(0x7f0000000300)={0x8, {"8a06909e53a68ff638012c54d5d61860f50e12e65c0536a66870ab42a3ec902e6c2dab39e8c027a80b76e4597e519f401a7ce9579ffb9a6d6336ff52e62e4dec870edb55ef33c09058e825db815461dd7896a8bf15481be170b4a228ac71e2f832a5edfc274790d83e983ec121dd8477f3e6e4abda966a8fc3a06a9974432d9aee50b962855f070d39961416f8d1b11692547a3640e04e9cbd63408380c9c5dae323059d0d703996f2268458a8de94bef3b419759ef6eb413ea721eef410150e0adbe2be0f75747da27899d3f5e55738bb8ad9fc94d686f892b337ec8d38bdb1eba852e1253bbfd93e98aec8f4afc8fff9a851a0ecce9c4f7137a0a1943be21e12922736903e9ee1b65dcf205ee2e6c43358da163308eb099cdde08508546823c37ae6509aaf4b6bed29119e1c800ad6a9a73d6898004eca6595aa343b75f9fd24084985345fa876942af6aa27ccde435927e4ffe33c527fbcd40cb196462001764c25eb4ffc9494b48e3b66f489d7e45944f50ad648351050ce5a691df6d1d4b3db570c2dcc855330e32661d2ffbc3d5dfe26f8f32e895ffbe90179775c9fced1001f5bd75c548050d4e00d0bba352edc35be7853cc053fffeac6abab92caa486e9c2ada24015da97e007841885ad84316bd34ce94e98f1e0aba045812525aaa0898ece525f85ffa2993ad381d2fec007c7d243936cbe6629f01d4c20ccba59b9137666957f54582c10b15a8145cdd16f1a7800eb6689119a2d933de2dc058652995b14ab4d31d489c1292e9f0f73e75edff45a28f770b8716969cb02e4a4fb169eaf2b88e428cc86af276151ae757ac3f15d07acab49c3eb19d2e76ae6ed684aeac537a673338a80e829e287afa6150f893381f185a3fc0460d0de5385b84412047ddecbfef041863528d9bbbd36eb519c32f607c73ae88a30350c9020ec444c3854162bb3bfe24720c583cdd83a176479c034a3f23dc434f3fc8c7eeeb267d4c931e5bfe4a443d83eace8892f0abd8b6a959c440cd0d87a017a7cc8461f9cd5eacd58acf15bd287f4c29916333cb7ff1bbfcfaea1fc4363e31cba9d46ade1e30d64e0b4cd03b08cae49c52bb48aad0ed388145c81c192ff4dfea56b9753d7ac52d9877660e42b8a340188233a14c0102b95f0ea3145c487c1aeb7665dc05f90b0c11996e8d0af501f325e7bcae39da4673e9cf924339a032751bc9c33cd870cea28ed454a8c0021ba3a31ca50ab21c12401f940917cd068606e3137f0d36990f5d9cd313df1902516ffed5f5e5c61eb4f6d15df19c956d6316a634fb4bb5af49a226756af3ece1380da5dd86e64466b303738537e337bb754d25bc9eed9b06489650f313786f2536f59f11555d20cabc9d4082df5f4f51132a7cadf5b04bd98e276c269c95f01bca0634c7b84837c9afce3c187365057bb896e39f6b5010db81e76972b03214d1843f12875d2758916a186b8acb90c039b535af457f5591096d1812a55715b587207d2162a181b85427f9fc2d60e51c4d72a7982ae49e5b44a9ffae74f7031e85dc2942f89651ec82662f45486544efaa06e6c522b35249db11aced41b4e7d60aab482d2016a053ca284eb1354cf5c272db4f81c0dcfd7fdba1d38ad4672650692928f0e41aad73249855001c4a2f562fa8fe202d1035a72009b7bf5fa07e55005fe92bb11c42f7e4c51a2ce13a07329e8e6684443c6d7ae303068deab8609b364e0365a0b7004e93a970b5795d4348b53234ead76cd9ae41129a79f071e367b2a390c63871547565acbd97e8aa4b2e931f1adf46d67c9cfb4ef120f7447189778800c3b1130cd668778531a8969c8564014d06f16283949534886459c51fce441473be42462b3e47b2b6ec536254ad65aed839a5d4ab4f17010d84bb432e0d9b999c490b6ea01e4cf0a6ea9894bb495cc7a7c3176374701d58a43a8218a04dba8e9339807b6e23371392e2a55dde07caea95aed695541b18e7b0c617339fbe65b2e3d1c562190e7294f0d23df8c37edc74049f66c010967e30a9fe6e9955146822ced5dcdb5a1feda3e37751a2da2e97757ba2fefdf4c3b69743fe719a0a094e422183295eee898d2322aa96f28577214d3126d4adeda94df14643c9486645aa25211ae0bd22f85347e3f86b9d0740cac949d5b1842703bf17c322f2ec872c66a0b4f8563d1ae3400ec27668da7c2cfec4adcd629ebe131efed888452105b1bc69a05e6c5e834e5132751b43b91470e17e9121a3f291f4cc7f2eed78f96260676be39ff1fe0c64fed53d1608105899c6227d2ba45b8f8b90346a19aacab98cdd9bda2f203ebc15ea35b42f0612e8da02e02de8b8e61c67804f264849bb136538480c0850585db84312d3ee270c4fdd211d4b1ec653bd6da8723375c94107595af5c70d35b8ac930cad75f253b388ff2b4ef7f1993f1525219a81253c3978e4c9df929bc99f41ceec0558793b775c7ce48dc3f25026ceca2b50bdf701bd42ee904a3e2531821112419301529de8ae85fe98454e2b165442f21af74398e9e207a0a3f50af2047c1bc8c934b46d0a1f25aacd350924c3a80de6568cad2ec975b27af23a4e8462dd51bc9fb451d59869cae3f14477cb45fcd460ebbc758d3710c7148244c9930867f7918a171787c428058f823b2a767e8b07b3e006246a79a9d011d6f63e4ea131e803257612b037401d9e2a92db91a3c3515a72aa1df425d13cee86ae603ed424542a472b79ba9e6879140071b1dcfba764b950a79f214509db76cd56568d66720a6e4f5cdc1a849a5420f2b8de70aa38b9fbb0d7f80b0401338dce88786cf7525c38c48d26830a4143cf5f8e69311dba6ab69ccb7fbccb25c23fd86f89547925415f2c22fbefd52c1f6294e994e542289f42eb816ffbf30d06a8bd7e2219753641f6e58248f67308797d1c46e3f8e6c832b31cb7b64e67035d67dc405e68134d253118f113afb430970fac291eec721c2b42f2e37d9a3bde13e0150c3534ee4e502c44d428028487db906e57f64dca0c270f64ad1a041ee08eb6347a91579151cb0686566f0ed6a69894bf9458dd0cb450e6ebadcb33b5e90c773e790f3a24f22483df8dedc70896c2ab7fa85262c0d8e0d35934a4732d0ecfe507a073bfd960a649e666bfbf79dec00df3f8faa20cf2124ed868f796c41177effb21d91d3cc022ffafefee1ae3ee0423bba7415e795ee29b6f0cc6e1a67f798bdb57dec18ec60d8d9a7af27bfca846df7ae725ed11e6cdb392a1fc4cf72e770529921f5d81e5253cb8ede52384f2285590bf07513eaa57dc781ace826f57d2591fb810834aa5a4381b95f32daad3e7eb2bcea07526dd7885ff1ff2d0e2a2c0e13dc15a910d845dce4455816638c1dcbc3553274b8931407b13886d01f49c388f85694a0ac9e5d4f034191a1423449b5beb4daf650f9f4811933385387499119acf0e28cbba5e70e09b3d7353ad80dcfdcbb6444536f9530030451b24d7dfbb44f0494b5adab87a6afa60cc689b228e42202216e23ae12496501ac1395949f0a6f422379be3e50537c4eb192ee6d1bf9282d6b38cd08e1a9599cdd403fc20cc9ac22be61582dd8939c6e8b7554a2f838a0d9d24da78f38f5e3529ac3785d82f0425c1749c6f1c451d106ebc80e75b4f79cdf812c9964bd0d614b0e8f924b87fe6ee191bfeb38ae31c59aeadd8c3b31731e788e92e3da55c41038b42ce436d03b05ab523299a783c94b8eaffc80d020565cad2a6acc9acc7495fb45174634f7a8a2a677cac71cb28360d6c8ed01a7e0954d6796230c2fc98f1a7ea67711780ac779c39a5b2b234d05112b6d349790b98cdb3ddfa9ad7d59173d418c7bf31b170f1f9f0eb22939715a7e458579facb360199cf6970566f1b7df180474eb5919d8c2ccc189b83405e7baeccf19a7dff1eeb03b5d0f445034dbe0e5801edf17e358ee1b9210e87f0501ea238784dc9abedc4c43148ea6fe73b0d26e7b5be4641a048b2a714d0e4b2f4d65c4e4d9261655d6130d1073719e716b1d86180570a25f3b4aaba7054f89b93b80b5f2cbdcd738dc2b9e2f77955d96264229108044484d3ef299c64a77f43b22e6cbf6074f668a4c8ea770a23500683bcf36b537f6f684173f07da303881eed9702734d7d6669ba51b3931b8bb46d9979040cbfefe37fcc7290ce6fcacd67734b487ab0812450f6bd8364cbedc902abacf610587c5ec49ecd68f1e7ef81f3593e5d9557f00710e7da645214c6463d4023930416a4c3be532f582e6f150fb3be1ebf82228982fe475c4106c2699577c278aee71f78e40f18cadbe6418b992d125671e68e3cc5ff4d124945fe747d1d205423f3eac6cbc45f3cc958e7f695f68eeab432ad3f706e26c34bd415387ef7fb59d70862e226006fcda4544bc676693b92ff89f46fc5251f1ce116f33e5cda45ed54e9a06c7fda3c3ae477444fa72e6cffd2ae065da63dbc73c8fce90c36b73996810683d9d27959e72501c1d014155854c3df3362f4235fde5371aa3c67462c4fe31102e0c9ed672832455306c4629f5f14eee94b2a15f3ebea1f6152a5232b8383fca694b8f58cfb69d69665954cccf73ba60dd94d7e1afb7b935bb3894d67ee39a3ac9d25ffb98a81dc1cdce3f8c0a0fa5bf2184ba453a197ef517b44d942d99c66fa34018dc6c020db61ee8ce27dd3a31c1bb6099d9cf407ba8fef08f3454f97fe618258dd0e6db157f827adef779e99a86de59202c6f90b32c93d65b074806bfc8063d10efb528f64709978dd72aa25c8a3e0e145eb7382744891c9c32749eb0177e5edfbb300d503247b2eadf8e725cd3769176d9e006c2d62b336e23c92e6886c4c9f46866f1bddcccebe2a8e95e5ce98e43e2fda8ab92d39dab82bc630b544373e88e8d70a98c3c5a3d8fbff38af0fced05357b0210a29bea9e027c7c1f01cf22ecffe041c874fc6e09658529743e4719dfd5cbd767374f9e76b1809bf628e257c418ef20b781e97e4d177e56a6287201307df506d1d9c67d0497d72c5adb94ad6971816e46f06b91fe2b7248b544de71e84f84b4925ebc92bf0388e74e4fc98797aa86a05e5efaa10e26231a2e4efee69933fb773bfc61e3e65ee130aa3af4c30a3e5321f287a48d8f124cf33028e850261186a3c5852ce05103b552191454187f0fa0fc759c3ffe2bfdc1a992f793d3de53b0dfd45d377a2984f011bdb1094022e77a968585323f7a9c4cdf0c594c7ddbbc50ad24430154bc5ba83669e47b1bfe4aefd7ede04f3b043f3bdc6baa9b3fc63a704b9208c02227d1de853214f7c4eaa8f9195994f7965d74d269a6ff77a996c8c72cd18715bfc98d0eed39ec6bd43165743e37834450efcc46dcd9f96f119a0a16d457d235afe2afec6c87b6567e9016f0882b371a32b33e8dc86b4970575eb8a030003d0595e430e3ba888fae29f1411f4b41fbc505e78bc2fc91af2d5e6f895a3e59841a2345e4a516b46918d14684cc93850dca20137268e0e6696c798d4f787c90e7af68cb134fe6c9afdc2879028d98b18b9405ae78e0ef93dadfb4a258cef1782e9b308d5042bb29791fc951af4a9be543efb259210ee9ac349f52605f571b49a229189a81e4438ed45f798ebb7179937b4c98e293864a92e42289204d0227ff22696bd746b3ca8c8318fa1f817a7dabc440731cf76040d2159b994bb4990fdc2fb02b04813e00d22dc4419dff3fb8dabe53f1a262665d3a137aafc73f1e1fc10b20ffd39c2f52311d6d4790178ab060942c632fa293676d84a35ba41b19012ac711a8452fbaacc", 0x1000}}, 0x1006) r7 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r7, &(0x7f0000000480)={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000dc0)={0x20, 0x16, 0x107, 0x70bd2c, 0x25dfdbfe, {0x1c, 0x7c}, [@nested={0xc, 0x1, 0x0, 0x1, [@typed={0x8, 0x1, 0x0, 0x0, @fd}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x4048011}, 0x2000c010) 14.867137142s ago: executing program 2 (id=761): socket$packet(0x11, 0x3, 0x300) r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000240)={'syz_tun\x00'}) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = msgget$private(0x0, 0x60) msgsnd(r1, 0x0, 0x0, 0x0) msgrcv(r1, 0x0, 0x0, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, 0x0, 0x80) socket(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x4) signalfd(0xffffffffffffffff, 0x0, 0x0) openat$vcs(0xffffffffffffff9c, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=@encrypted_new={'new ', 'default', 0x20, 'user:', 'syz', 0x20, 0xffd}, 0x2a, 0x0) r4 = add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe) add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0x5ba8, 0xfffffffffffffffd) keyctl$read(0xb, r4, &(0x7f0000000240)=""/112, 0x349b7f55) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'lo\x00'}) 11.222195097s ago: executing program 37 (id=742): r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) io_setup(0x0, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x300000a, 0x4031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) io_setup(0x7, &(0x7f0000000280)) r1 = openat(0xffffffffffffffff, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x4a102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) mremap(&(0x7f000054e000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f000022c000/0x3000)=nil) ioctl$SNDRV_TIMER_IOCTL_STOP(r1, 0x54a1) r3 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r3, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) setsockopt$inet_int(r3, 0x0, 0x7, &(0x7f0000000080)=0xcd, 0x4) connect$inet(r3, &(0x7f0000000480)={0x2, 0x4e21, @multicast1}, 0x10) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000300)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_MIGRATE_ID(0xffffffffffffffff, &(0x7f0000000040)={0x12, 0x10, 0xfa00, {&(0x7f0000000000), r4}}, 0x18) sendmmsg(r3, &(0x7f0000007fc0), 0x800001d, 0x0) syz_open_dev$usbfs(&(0x7f0000000240), 0x75, 0x109301) mount$9p_fd(0x0, 0x0, &(0x7f0000000240), 0x8080, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000040)='smaps_rollup\x00') lseek(r5, 0x2000, 0x0) ioctl$VIDIOC_ENUMSTD(r0, 0xc0485619, &(0x7f0000000500)={0x80000000, 0x3200e0, "3d9f3f931497dd9772e0bcbffd83b749067cf1598b58a271", {0x7, 0x88}, 0x2}) 11.179044748s ago: executing program 7 (id=763): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000002180)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) futimesat(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), 0xffffffffffffffff) r0 = socket$netlink(0x10, 0x3, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/custom0\x00', 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000600)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(blowfish)\x00'}, 0x58) r3 = accept4(r2, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000140)="1fe1bc7f", 0x4) sendmmsg$unix(r3, &(0x7f0000003dc0)=[{{&(0x7f0000000000)=@file={0x0, './file0\x00'}, 0x6e, 0x0}}, {{&(0x7f0000000280)=@file={0x0, './file0\x00'}, 0x6e, 0x0}}], 0x299, 0x0) sendmsg$netlink(r0, 0x0, 0x0) socket$packet(0x11, 0x2, 0x300) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f0000000880)=@raw={'raw\x00', 0x9, 0x3, 0x1f8, 0x0, 0xffffffff, 0xffffffff, 0xd0, 0xffffffff, 0x188, 0xffffffff, 0xffffffff, 0x188, 0xffffffff, 0x3, &(0x7f00000000c0), {[{{@ip={@multicast2, @remote, 0x0, 0xffffff00, 'pim6reg0\x00', 'veth0\x00', {0xff}, {}, 0x8, 0x2, 0x9}, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x1, [0x4, 0x0, 0x1, 0x4, 0x1, 0x1], 0x2, 0x7}, {0xffffffffffffffff, [0x0, 0x1, 0x3, 0x0, 0x3], 0x1}}}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2, 0xff000000, 0xff, 'veth1_virt_wifi\x00', 'sit0\x00', {0xff}, {0xff}, 0x1, 0x2, 0x2}, 0x0, 0x70, 0x94}, @common=@unspec=@NFQUEUE1={0x24, 'NFQUEUE\x00', 0x1, {0x5, 0x8000}}}], {{'\x00', 0x0, 0x70, 0x94}, {0x24}}}}, 0x254) syz_emit_ethernet(0x0, 0x0, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000140)={0xa, 0x4e20, 0xa86c, @dev={0xfe, 0x80, '\x00', 0x1a}, 0x8}, 0x1c) r4 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r4, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r4, 0xc04064a0, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r4, 0xc05064a7, &(0x7f0000000540)={&(0x7f0000000140), &(0x7f00000001c0), 0x0, &(0x7f0000000100)=[0x0]}) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r5, 0x8933, &(0x7f0000000ec0)={'wpan0\x00'}) 11.160372219s ago: executing program 1 (id=764): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = fsopen(0x0, 0x1) fsmount(r3, 0x0, 0xb) r4 = openat(0xffffffffffffff9c, 0x0, 0x14b302, 0x8c) futex(0x0, 0x7, 0x0, 0x0, 0x0, 0x0) pwritev2(r4, &(0x7f0000000100)=[{&(0x7f0000000080)}], 0x1, 0x5412, 0x0, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000000)={0x0, 0x0, 0x0, &(0x7f0000010040), 0xfffffffd, 0xffffffffffffffff, 0x4}, 0x38) bpf$TOKEN_CREATE(0x24, &(0x7f0000000080), 0x8) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000940)='hugetlb.2MB.usage_in_bytes\x00', 0x26e1, 0x0) mq_notify(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x23, 0x4, @thr={0x0, &(0x7f0000000300)}}) r6 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x22902, 0x0) ioctl$FBIO_WAITFORVSYNC(r6, 0x40044620, 0x0) sendfile(0xffffffffffffffff, r6, &(0x7f00000000c0)=0x4, 0x3) close(r5) socket$nl_sock_diag(0x10, 0x3, 0x4) ioctl$SIOCSIFHWADDR(r5, 0x8b34, &(0x7f0000000000)={'wlan1\x00', @random="000500000020"}) sendfile(r3, 0xffffffffffffffff, 0x0, 0x6fec91) 10.082438521s ago: executing program 1 (id=765): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) pipe2$watch_queue(&(0x7f0000001180)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() socket$can_bcm(0x1d, 0x2, 0x2) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r3, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r5, 0x8983, 0x0) socket$packet(0x11, 0x3, 0x300) r6 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x60240) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r6, 0xc0a85320, &(0x7f0000001400)={{0x80}, 'port1\x00', 0xa3, 0x1b1c07, 0x0, 0x0, 0x1000}) readv(r6, 0x0, 0x0) close_range(r6, r6, 0x0) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x1c, 0x0, 0x0) bind$netlink(0xffffffffffffffff, &(0x7f0000177ff4)={0x10, 0x0, 0x1}, 0xc) r7 = add_key(&(0x7f0000000000)='id_resolver\x00', &(0x7f0000000040)={'syz', 0x3}, &(0x7f0000000080)="f8", 0x1, 0xfffffffffffffffe) keyctl$KEYCTL_WATCH_KEY(0x20, r7, r1, 0x36) keyctl$KEYCTL_WATCH_KEY(0x20, r7, r2, 0xffffffffffffffff) sendmsg$IPCTNL_MSG_CT_DELETE(r0, 0x0, 0x20004000) 8.145680711s ago: executing program 0 (id=766): socket$packet(0x11, 0x2, 0x300) openat(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup.net/devices.allow\x00', 0x2, 0x48) socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) inotify_init1(0x0) 7.967072355s ago: executing program 1 (id=767): syz_open_dev$ttys(0xc, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000005c0), 0x400, 0x0) ioctl$SNDCTL_TMR_TIMEBASE(r0, 0xc0045401, &(0x7f0000000600)=0x17f) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r1, &(0x7f0000001b40), 0x0) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x1) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) read$FUSE(r2, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r2, &(0x7f0000000040)={0x50, 0x0, r3, {0x7, 0x1f, 0x0, 0x10400, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x4}}, 0x50) r4 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x1c3902, 0x0) sendfile(r4, r4, 0x0, 0x200000) r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0xa4242, 0x0) fsetxattr$security_capability(0xffffffffffffffff, &(0x7f0000000100), &(0x7f00000001c0)=@v3={0x3000000, [{0x5, 0x5}, {0x7ff, 0x6b}]}, 0x18, 0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000007, 0x38011, r5, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000ac0)=@base={0x6, 0x4, 0x1010, 0x89}, 0x50) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000380), &(0x7f0000000000), 0x80, r6, 0x0, 0x7}, 0x38) sendfile(r5, r5, 0x0, 0x1002000ff) syz_fuse_handle_req(r2, &(0x7f0000008380)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)={0x20, 0x0, 0x88}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r2, &(0x7f0000004200)="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", 0x2000, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x78, 0xfffffffffffffffe, 0x4, {0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0xa, 0x0, 0x3, 0x0, 0x0, 0x200000, 0x8000, 0x0, 0x0, 0x0, 0xfffffffd}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x101001, 0x0) umount2(&(0x7f0000000380)='./file0\x00', 0x1) mlock(&(0x7f0000ffc000/0x1000)=nil, 0x1000) socket$inet6(0xa, 0x800000000000002, 0x0) 7.941602476s ago: executing program 2 (id=768): bind$alg(0xffffffffffffffff, &(0x7f0000000200)={0x26, 'hash\x00', 0x0, 0x0, 'hmac(sha256)\x00'}, 0x58) syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000680)={0x0, &(0x7f0000000500)=[@nested_amd_clgi={0x17f, 0x10}, @nested_load_syzos={0x136, 0xa8, {0x3, 0x401, [@nested_create_vm={0x12d, 0x18, 0x2}, @wrmsr={0x65, 0x20, {0xa81, 0x3}}, @nested_vmlaunch={0x12f, 0x18, 0x1}, @nested_amd_vmcb_write_mask={0x17c, 0x38, {0x0, @control_area=0x1e, 0xa0, 0x6b1ac6f2, 0xda}}]}}], 0xb8}) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) io_uring_setup(0x7ec2, &(0x7f0000000340)={0x0, 0xa08, 0x400, 0x0, 0x20002f7}) socket$netlink(0x10, 0x3, 0x4) r0 = socket$inet6(0xa, 0x800000000000002, 0x0) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r2, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1b}, 0xd}, 0x1c) write$binfmt_script(r2, &(0x7f0000000200), 0xfffffd9d) sendto$inet6(r0, 0x0, 0x0, 0xc880, &(0x7f0000000040)={0xa, 0x4e20, 0x6, @ipv4={'\x00', '\xff\xff', @empty}, 0x400}, 0x1c) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000900)=ANY=[@ANYBLOB="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"], 0x128}, 0x1, 0x0, 0x0, 0x42804}, 0x50) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, 0x0, 0x0) r4 = io_uring_setup(0x2c3e, &(0x7f0000000040)={0x0, 0x6df4, 0xc000, 0x0, 0x202}) r5 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r5, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200), 0x0, 0x0, 0x0, 0x2c}, 0x4000845) getsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x2, &(0x7f0000000140), &(0x7f00000001c0)=0x4) io_uring_enter(r4, 0x2219, 0x7721, 0x16, 0x0, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000000)={'wlan1\x00', 0x0}) 7.851964127s ago: executing program 0 (id=769): socket$pppoe(0x18, 0x1, 0x0) r0 = socket$pppoe(0x18, 0x1, 0x0) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) r2 = syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2) ioctl$VIDIOC_S_CTRL(r2, 0xc008561c, &(0x7f0000000080)={0xf0f03c, 0x1}) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000000)={r1}, 0x4) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r4 = dup(r3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x13, r4, 0x2000) write$binfmt_aout(r4, 0x0, 0xffffffdb) ioctl$HIDIOCGCOLLECTIONINDEX(r4, 0x40184810, &(0x7f0000000040)={0x3, 0x2, 0x8, 0x9, 0xffffff81, 0x7}) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0x11, &(0x7f0000000140)=@framed={{0x18, 0x2, 0x0, 0x0, 0x1}, [@call={0x85, 0x0, 0x0, 0x20}, @snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r1}}]}, &(0x7f0000000080)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r5, 0x0, 0xe, 0x0, &(0x7f0000000040)="40d174b2a3f781c274386d178550", 0x0, 0x1200801, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x47) connect$pppoe(r0, &(0x7f0000000040)={0x18, 0x0, {0x1, @empty, 'ip_vti0\x00'}}, 0x1e) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000d40)={&(0x7f00000003c0)=@newtaction={0x1b0, 0x30, 0xffff, 0xfffffffe, 0x0, {}, [{0x19c, 0x1, [@m_nat={0x140, 0x1b, 0x0, 0x0, {{0x8}, {0xf4, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{0x7, 0x0, 0x1, 0xb38, 0xe}, @dev={0xac, 0x14, 0x14, 0x2a}, @multicast2}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x8, 0x5, 0x1, 0xd}, @multicast2, @local, 0xffffffff, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0xf, 0x6, 0x6, 0x0, 0x1}, @broadcast, @multicast1, 0xff}}, @TCA_NAT_PARMS={0x28, 0x1, {{0xffffff47, 0x5, 0x5, 0x2, 0x2}, @loopback, @dev={0xac, 0x14, 0x14, 0x31}}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x1, 0x0, 0x10000000, 0x49, 0xc}, @empty, @multicast2, 0xffffff00}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x6, 0x5, 0x7, 0xffff}, @initdev={0xac, 0x1e, 0x1, 0x0}, @dev={0xac, 0x14, 0x14, 0x2b}, 0xff000000}}]}, {0x25, 0x6, "1a98ee263f539524341fbe5305bfb4b027ce8e0e7a16ba2cac544469a09399152a"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x3, 0x1}}}}, @m_sample={0x58, 0x1, 0x0, 0x0, {{0xb}, {0x2c, 0x2, 0x0, 0x1, [@TCA_SAMPLE_PARMS={0x18, 0x2, {0x64, 0x5f, 0x0, 0x101, 0x8cb8}}, @TCA_SAMPLE_PSAMPLE_GROUP={0x8}, @TCA_SAMPLE_RATE={0x8, 0x3, 0x3}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x3}}}}]}]}, 0x1b0}}, 0x0) r7 = socket$pppoe(0x18, 0x1, 0x0) ioctl$FICLONE(r7, 0x40049409, r0) ioctl$UBLK_U_CMD_END_USER_RECOVERY(0xffffffffffffffff, 0xc0207511, &(0x7f0000000200)={0x0, 0xffff, 0x0, 0x0, 0xffffffffffffffff}) syz_open_procfs$namespace(r8, &(0x7f0000000280)='ns/mnt\x00') r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r9, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)={0x14, 0x32, 0x301, 0x70bd25, 0xfffffffc, {0x4}}, 0x14}, 0x1, 0x0, 0x0, 0x404c8d3}, 0x0) connect$pppoe(r7, &(0x7f0000000080)={0x18, 0x0, {0x1, @empty, 'ip_vti0\x00'}}, 0x1e) prctl$PR_GET_TSC(0x19, &(0x7f00000000c0)) r10 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff8000}]}) close_range(r10, 0xffffffffffffffff, 0x0) 6.335736919s ago: executing program 1 (id=770): r0 = socket$pppoe(0x18, 0x1, 0x0) r1 = socket$pppoe(0x18, 0x1, 0x0) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) r3 = syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2) ioctl$VIDIOC_S_CTRL(r3, 0xc008561c, &(0x7f0000000080)={0xf0f03c, 0x1}) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000000)={r2}, 0x4) r4 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r5 = dup(r4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x13, r5, 0x2000) write$binfmt_aout(r5, 0x0, 0xffffffdb) ioctl$HIDIOCGCOLLECTIONINDEX(r5, 0x40184810, &(0x7f0000000040)={0x3, 0x2, 0x8, 0x9, 0xffffff81, 0x7}) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0x11, &(0x7f0000000140)=@framed={{0x18, 0x2, 0x0, 0x0, 0x1}, [@call={0x85, 0x0, 0x0, 0x20}, @snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r2}}]}, &(0x7f0000000080)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r6, 0x0, 0xe, 0x0, &(0x7f0000000040)="40d174b2a3f781c274386d178550", 0x0, 0x1200801, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x47) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000d40)={&(0x7f00000003c0)=@newtaction={0x1b0, 0x30, 0xffff, 0xfffffffe, 0x0, {}, [{0x19c, 0x1, [@m_nat={0x140, 0x1b, 0x0, 0x0, {{0x8}, {0xf4, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{0x7, 0x0, 0x1, 0xb38, 0xe}, @dev={0xac, 0x14, 0x14, 0x2a}, @multicast2}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x8, 0x5, 0x1, 0xd}, @multicast2, @local, 0xffffffff, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0xf, 0x6, 0x6, 0x0, 0x1}, @broadcast, @multicast1, 0xff}}, @TCA_NAT_PARMS={0x28, 0x1, {{0xffffff47, 0x5, 0x5, 0x2, 0x2}, @loopback, @dev={0xac, 0x14, 0x14, 0x31}}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x1, 0x0, 0x10000000, 0x49, 0xc}, @empty, @multicast2, 0xffffff00}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x6, 0x5, 0x7, 0xffff}, @initdev={0xac, 0x1e, 0x1, 0x0}, @dev={0xac, 0x14, 0x14, 0x2b}, 0xff000000}}]}, {0x25, 0x6, "1a98ee263f539524341fbe5305bfb4b027ce8e0e7a16ba2cac544469a09399152a"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x3, 0x1}}}}, @m_sample={0x58, 0x1, 0x0, 0x0, {{0xb}, {0x2c, 0x2, 0x0, 0x1, [@TCA_SAMPLE_PARMS={0x18, 0x2, {0x64, 0x5f, 0x0, 0x101, 0x8cb8}}, @TCA_SAMPLE_PSAMPLE_GROUP={0x8}, @TCA_SAMPLE_RATE={0x8, 0x3, 0x3}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x3}}}}]}]}, 0x1b0}}, 0x0) connect$pppoe(r0, &(0x7f0000000080)={0x18, 0x0, {0x1, @multicast, 'ip6tnl0\x00'}}, 0x1e) r8 = socket$pppoe(0x18, 0x1, 0x0) ioctl$FICLONE(r8, 0x40049409, r1) ioctl$UBLK_U_CMD_END_USER_RECOVERY(0xffffffffffffffff, 0xc0207511, &(0x7f0000000200)={0x0, 0xffff, 0x0, 0x0, 0xffffffffffffffff}) syz_open_procfs$namespace(r9, &(0x7f0000000280)='ns/mnt\x00') r10 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r10, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)={0x14, 0x32, 0x301, 0x70bd25, 0xfffffffc, {0x4}}, 0x14}, 0x1, 0x0, 0x0, 0x404c8d3}, 0x0) connect$pppoe(r8, &(0x7f0000000080)={0x18, 0x0, {0x1, @empty, 'ip_vti0\x00'}}, 0x1e) prctl$PR_GET_TSC(0x19, &(0x7f00000000c0)) r11 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff8000}]}) close_range(r11, 0xffffffffffffffff, 0x0) 6.102835423s ago: executing program 0 (id=771): syz_open_dev$tty1(0xc, 0x4, 0x1) r0 = socket(0x10, 0x803, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r5 = socket(0x40000000015, 0x805, 0x0) getsockopt(r5, 0x114, 0x271d, 0x0, &(0x7f0000000000)) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'team_slave_1\x00'}) sendmsg$nl_route_sched(r0, 0x0, 0x8000) sendmsg$nl_route_sched(r0, 0x0, 0x24040084) socket$nl_netfilter(0x10, 0x3, 0xc) r6 = fsopen(&(0x7f0000000100)='devtmpfs\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r6, 0x6, 0x0, 0x0, 0x0) fsmount(r6, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)) fanotify_init(0x1a, 0x1) syz_io_uring_setup(0x7db6, &(0x7f0000000380)={0x0, 0xe4a6, 0x2, 0x2, 0x1af}, 0x0, 0x0, 0x0) socket$packet(0x11, 0x2, 0x300) r7 = socket$kcm(0x29, 0x2, 0x0) read(r7, &(0x7f00000004c0)=""/59, 0x3b) 2.778317213s ago: executing program 2 (id=772): r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f00000005c0)='\x00', 0x18100) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000002600)={'wg1\x00', &(0x7f0000002640)=@ethtool_stats}) prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) ioctl$VIDIOC_S_SELECTION(0xffffffffffffffff, 0xc040565f, &(0x7f0000000940)={0xa, 0x100, 0x3, {0x8000, 0xffffffff, 0x4, 0x2}}) socket$inet6(0xa, 0x800000000000002, 0x0) r6 = socket$inet6(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r6, 0x29, 0x40, &(0x7f0000002400)=@raw={'raw\x00', 0x3c1, 0x3, 0x460, 0x1b8, 0x12, 0x600, 0x3b8, 0x202, 0x3b8, 0x2e8, 0x2e8, 0x3b8, 0x2c0, 0x4, 0x0, {[{{@uncond, 0x0, 0x168, 0x190, 0x0, {}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'fsm\x00', "0000000000000019b5115c2aee68d23a465cd431e150c3234e082555f67222476147864fa03182f5cf11d8c348cbd06dc8de1dcbde7d4e252c3394fed47bf78c70f607b0178fa5ea335019ac07a602061c96baeb8989f1f34a214e6726401fe4b124e0f7323a587d2a1fcf07000000eca0a7b66c60c527bac2b500", 0x8}}]}, @common=@unspec=@AUDIT={0x28, 'AUDIT\x00', 0x0, {0x1}}}, {{@uncond, 0x0, 0xd8, 0x200, 0x0, {}, [@common=@ah={{0x30}, {[0x4d3, 0x4d3], 0xc9, 0x11, 0x3}}]}, @common=@unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0x1, 0x7ff, 'system_u:object_r:crond_initrc_exec_t:s0\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4c0) socket$unix(0x1, 0x5, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) write$FUSE_OPEN(r1, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x20000000) socket(0x400000000010, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x8010) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000100)=0x80000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000000140)={@host}) ioctl$IOCTL_VMCI_CTX_ADD_NOTIFICATION(r0, 0x7af, &(0x7f0000000040)={@my=0x1, 0x54f}) 1.820627662s ago: executing program 0 (id=773): socket$inet_smc(0x2b, 0x1, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x82, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000280), 0x80, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) accept4(r1, 0x0, 0x0, 0x800) openat$nullb(0xffffffffffffff9c, &(0x7f00000000c0), 0x185042, 0x0) r2 = syz_open_dev$loop(&(0x7f0000000240), 0x47dfffa, 0x1e0b82) syz_open_dev$dvb_frontend(&(0x7f0000000080), 0x0, 0x2) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) socket$inet6_udp(0xa, 0x2, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) dup(r2) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_xfrm(0x10, 0x3, 0x6) syz_open_dev$video(&(0x7f0000000100), 0x1, 0x800) socket$inet_tcp(0x2, 0x1, 0x0) socket$netlink(0x10, 0x3, 0x10) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$sock_inet_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000000)={0x4000000, {0x2, 0x4e21, @loopback}, {0x2, 0x4e24, @empty}, {0x2, 0x4e23, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x1f7, 0x0, 0x0, 0x0, 0xff79, 0x0, 0x4, 0x6, 0x7ff}) sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYRES32, @ANYRES16=0x0, @ANYRES8=r3], 0x1c}}, 0x24018807) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1400000007"], 0x50) pwrite64(0xffffffffffffffff, &(0x7f0000000000)='L', 0x1, 0x7ffffffe) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r4, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r4, &(0x7f0000000000), 0xd) 1.747758554s ago: executing program 1 (id=774): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = fsopen(0x0, 0x1) r4 = openat(0xffffffffffffff9c, 0x0, 0x101042, 0x15) r5 = openat(0xffffffffffffff9c, 0x0, 0x14b302, 0x8c) futex(0x0, 0x7, 0x0, 0x0, 0x0, 0x0) pwritev2(r5, &(0x7f0000000100)=[{&(0x7f0000000080)}], 0x1, 0x5412, 0x0, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000000)={0x0, 0x0, 0x0, &(0x7f0000010040), 0xfffffffd, 0xffffffffffffffff, 0x4}, 0x38) bpf$TOKEN_CREATE(0x24, &(0x7f0000000080), 0x8) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000940)='hugetlb.2MB.usage_in_bytes\x00', 0x26e1, 0x0) mq_notify(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x23, 0x4, @thr={0x0, &(0x7f0000000300)}}) r7 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x22902, 0x0) ioctl$FBIO_WAITFORVSYNC(r7, 0x40044620, 0x0) sendfile(0xffffffffffffffff, r7, &(0x7f00000000c0)=0x4, 0x3) close(r6) socket$nl_sock_diag(0x10, 0x3, 0x4) ioctl$SIOCSIFHWADDR(r6, 0x8b34, &(0x7f0000000000)={'wlan1\x00', @random="000500000020"}) sendfile(r3, r4, 0x0, 0x6fec91) 1.738423624s ago: executing program 7 (id=775): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x1, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xfff2}, {0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x44}, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffd000/0x3000)=nil) bpf$MAP_CREATE(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000380)=0x7) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) setgroups(0x0, 0x0) sendmsg(0xffffffffffffffff, 0x0, 0x4048000) shmctl$SHM_INFO(0x0, 0xe, 0x0) shmctl$IPC_RMID(r1, 0x0) sendmsg$BATADV_CMD_SET_MESH(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000023c0)={0x1c, 0x0, 0x1, 0x4070bd28, 0x1, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8}]}, 0x1c}}, 0x18) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCSTI(r5, 0x5412, &(0x7f0000000500)=0x4) ioctl$TCSETSW2(r0, 0x402c542c, &(0x7f0000000180)={0xfffff3d4, 0x200ffffd, 0x7, 0xfffffff2, 0x0, "4d6b5ccb8600", 0x8}) readv(r0, &(0x7f0000003a00)=[{&(0x7f0000003840)=""/150, 0x96}], 0x1) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0xcfa42, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) 87.160908ms ago: executing program 7 (id=776): openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$nl_rdma(0x10, 0x3, 0x14) openat$audio(0xffffff9c, 0x0, 0x48100, 0x0) r1 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r2 = openat$vnet(0xffffff9c, &(0x7f00000000c0), 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000021c0)='./file0\x00', 0x3a) mount$tmpfs(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000280), 0x800004, 0x0) mount$tmpfs(0x0, &(0x7f0000000340)='./file0\x00', 0x0, 0x2ac0b2, &(0x7f0000001080)=ANY=[@ANYBLOB="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"]) ioctl$VHOST_SET_VRING_ADDR(r2, 0x4028af11, &(0x7f0000000680)={0x1, 0x1, &(0x7f0000000180)=""/102, &(0x7f0000000500)=""/143, &(0x7f00000005c0)=""/182, 0x5000}) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x121a03, 0x0) ioctl$TIOCSETD(r3, 0x5423, 0x0) ioctl$TIOCSTI(r3, 0x5412, &(0x7f0000000180)=0x93) ioctl$TIOCSTI(r3, 0x5412, &(0x7f0000000040)=0x7e) r4 = syz_open_dev$cec(&(0x7f0000000080), 0x0, 0xe8c00) epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r4, &(0x7f0000000000)={0x200c}) ioctl$IOC_PR_PREEMPT(r4, 0x40046109, &(0x7f0000000040)={0xd0, 0xfffffffffffffffe, 0x1000000}) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) r5 = socket$kcm(0x29, 0x2, 0x0) write$cgroup_pressure(r5, &(0x7f0000000140)={'full'}, 0xfffffdef) 0s ago: executing program 1 (id=777): socket$packet(0x11, 0x3, 0x300) r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000240)={'syz_tun\x00'}) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = msgget$private(0x0, 0x60) msgsnd(r1, 0x0, 0x0, 0x0) msgrcv(r1, 0x0, 0x0, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, 0x0, 0x80) socket(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x4) signalfd(0xffffffffffffffff, 0x0, 0x0) openat$vcs(0xffffffffffffff9c, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=@encrypted_new={'new ', 'default', 0x20, 'user:', 'syz', 0x20, 0xffd}, 0x2a, 0x0) r4 = add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe) add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0x5ba8, 0xfffffffffffffffd) keyctl$read(0xb, r4, &(0x7f0000000240)=""/112, 0x349b7f55) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'lo\x00'}) kernel console output (not intermixed with test programs): 2][ T5998] BTRFS info (device loop0): use zlib compression, level 3 [ 334.883268][ T5998] BTRFS info (device loop0): turning on sync discard [ 334.890041][ T5998] BTRFS info (device loop0): using free space tree [ 336.630111][ T6021] netlink: 12 bytes leftover after parsing attributes in process `syz.1.296'. [ 336.725927][ T5998] BTRFS info (device loop0): enabling ssd optimizations [ 337.112144][ T26] audit: type=1800 audit(1782751596.371:53): pid=6031 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.280" name="file1" dev="loop0" ino=260 res=0 errno=0 [ 337.167197][ T6032] netlink: 16 bytes leftover after parsing attributes in process `syz.0.280'. [ 338.022144][ T4290] BTRFS info (device loop0): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 338.284355][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 338.304182][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 338.403816][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 338.439949][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 338.470652][ T5791] device veth0_vlan entered promiscuous mode [ 338.545123][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 338.589898][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 338.657940][ T5791] device veth1_vlan entered promiscuous mode [ 338.825777][ T5153] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 338.871397][ T5153] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 339.147652][ T5153] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 339.668245][ T5153] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 339.743981][ T5791] device veth0_macvtap entered promiscuous mode [ 339.791078][ T5791] device veth1_macvtap entered promiscuous mode [ 339.902606][ T26] audit: type=1800 audit(1782751599.151:54): pid=6056 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.291" name="/" dev="fuse" ino=4 res=0 errno=0 [ 340.044931][ T5791] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 340.100550][ T5791] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 340.138130][ T5791] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 340.552950][ T6074] loop5: detected capacity change from 0 to 512 [ 340.574601][ T6074] EXT4-fs: Ignoring removed bh option [ 340.940805][ T6074] EXT4-fs (loop5): warning: mounting unchecked fs, running e2fsck is recommended [ 340.959066][ T6074] EXT4-fs (loop5): 1 truncate cleaned up [ 340.965057][ T6074] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 341.146213][ T5791] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 341.179548][ T5791] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 342.608527][ T6077] EXT4-fs error (device loop5): ext4_validate_block_bitmap:438: comm ext4lazyinit: bg 0: block 465: padding at end of block bitmap is not set [ 342.692465][ T5791] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 342.781295][ T5791] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 342.852577][ T5791] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 343.051331][ T5791] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 343.457064][ T5791] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 343.648651][ T5791] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 343.732956][ T5791] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 343.782530][ T5791] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 343.825775][ T5791] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 343.960009][ T5791] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 344.009054][ T5791] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 344.097876][ T5791] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 344.124099][ T5791] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 344.194754][ T5791] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 344.238456][ T5791] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 344.287297][ T5791] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 344.332405][ T5791] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 344.412488][ T5150] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 344.432785][ T5150] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 344.483169][ T5150] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 344.523390][ T5150] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 345.503222][ T5476] EXT4-fs (loop5): unmounting filesystem. [ 345.984287][ T26] audit: type=1400 audit(1782751605.271:55): apparmor="DENIED" operation="setprocattr" info="fscreate" error=-22 profile="unconfined" pid=6109 comm="syz.0.305" [ 347.397643][ T5160] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 347.478149][ T5160] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 347.543964][ T5153] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 347.857306][ T26] audit: type=1400 audit(1782751607.131:56): apparmor="DENIED" operation="setprocattr" info="fscreate" error=-22 profile="unconfined" pid=6135 comm="syz.2.312" [ 348.282769][ T5153] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 348.282793][ T5153] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 348.283999][ T5150] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 349.059531][ T6148] ICMPv6: Received fragmented ndisc packet. Carefully consider disabling suppress_frag_ndisc. [ 351.580145][ T6152] block device autoloading is deprecated and will be removed. [ 354.359549][ T6171] loop0: detected capacity change from 0 to 512 [ 354.370776][ T6171] EXT4-fs: Ignoring removed bh option [ 354.420613][ T6171] EXT4-fs (loop0): warning: mounting unchecked fs, running e2fsck is recommended [ 354.656553][ T6171] EXT4-fs (loop0): 1 truncate cleaned up [ 354.662428][ T6171] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 354.974539][ T4290] EXT4-fs (loop0): unmounting filesystem. [ 358.746904][ T26] audit: type=1400 audit(1782751618.031:57): apparmor="DENIED" operation="setprocattr" info="fscreate" error=-22 profile="unconfined" pid=6193 comm="syz.2.325" [ 359.443825][ T6210] loop5: detected capacity change from 0 to 512 [ 359.454187][ T6210] EXT4-fs: Ignoring removed bh option [ 360.110060][ T6210] EXT4-fs (loop5): warning: mounting unchecked fs, running e2fsck is recommended [ 360.131461][ T6210] EXT4-fs (loop5): 1 truncate cleaned up [ 360.137300][ T6210] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 360.424261][ T5476] EXT4-fs (loop5): unmounting filesystem. [ 362.774102][ T4284] Bluetooth: hci1: command 0x0411 tx timeout [ 363.790955][ T5150] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 364.428572][ T6231] overlayfs: failed to clone upperpath [ 365.298364][ T6239] ALSA: mixer_oss: invalid OSS volume 'u' [ 367.244516][ T6266] loop6: detected capacity change from 0 to 512 [ 367.255203][ T6266] EXT4-fs: Ignoring removed bh option [ 367.904297][ T6266] EXT4-fs (loop6): warning: mounting unchecked fs, running e2fsck is recommended [ 367.949906][ T6266] EXT4-fs (loop6): 1 truncate cleaned up [ 367.955705][ T6266] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none. [ 367.975963][ T26] audit: type=1400 audit(1782751627.261:58): apparmor="DENIED" operation="setprocattr" info="fscreate" error=-22 profile="unconfined" pid=6259 comm="syz.0.338" [ 368.184542][ T5791] EXT4-fs (loop6): unmounting filesystem. [ 369.295433][ T6277] netlink: 'syz.6.340': attribute type 10 has an invalid length. [ 369.614344][ T6277] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 370.053585][ T6281] netlink: 4 bytes leftover after parsing attributes in process `syz.1.342'. [ 370.246675][ T6281] netlink: 'syz.1.342': attribute type 7 has an invalid length. [ 370.270953][ T6281] netlink: 'syz.1.342': attribute type 7 has an invalid length. [ 375.277349][ T4549] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 377.116339][ T4549] usb 3-1: device descriptor read/all, error -71 [ 377.280144][ T48] Bluetooth: hci2: unexpected event 0x2f length: 509 > 260 [ 378.213382][ T6345] trusted_key: encrypted_key: insufficient parameters specified [ 382.183130][ T6361] netlink: 8 bytes leftover after parsing attributes in process `syz.2.360'. [ 383.287618][ T6377] dlm: no local IP address has been set [ 383.293403][ T6377] dlm: cannot start dlm midcomms -107 [ 384.610065][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 384.616448][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 391.753371][ T4284] Bluetooth: hci2: command 0x0406 tx timeout [ 394.522887][ T6429] netlink: 'syz.1.377': attribute type 5 has an invalid length. [ 394.530683][ T6429] netlink: 16 bytes leftover after parsing attributes in process `syz.1.377'. [ 395.754946][ T48] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 395.767081][ T48] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 395.782269][ T48] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 395.790554][ T48] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 395.798324][ T48] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 395.806202][ T48] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 396.913851][ T4635] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 397.892447][ T48] Bluetooth: hci5: command 0x0409 tx timeout [ 399.282220][ T6458] netlink: 27 bytes leftover after parsing attributes in process `syz.1.383'. [ 399.755600][ T4424] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 400.001402][ T4424] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 400.012591][ T48] Bluetooth: hci5: command 0x041b tx timeout [ 400.286349][ T4424] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 401.831151][ T4424] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 402.077729][ T6433] chnl_net:caif_netlink_parms(): no params data found [ 402.085545][ T48] Bluetooth: hci5: command 0x040f tx timeout [ 403.752878][ T6433] bridge0: port 1(bridge_slave_0) entered blocking state [ 403.760319][ T6433] bridge0: port 1(bridge_slave_0) entered disabled state [ 403.832178][ T6433] device bridge_slave_0 entered promiscuous mode [ 403.866254][ T6433] bridge0: port 2(bridge_slave_1) entered blocking state [ 403.903458][ T6433] bridge0: port 2(bridge_slave_1) entered disabled state [ 403.962279][ T6433] device bridge_slave_1 entered promiscuous mode [ 403.988346][ T6433] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 404.001263][ T6433] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 404.162735][ T48] Bluetooth: hci5: command 0x0419 tx timeout [ 405.088734][ T6433] team0: Port device team_slave_0 added [ 405.763066][ T6433] team0: Port device team_slave_1 added [ 406.161605][ T26] audit: type=1400 audit(1782751665.321:59): apparmor="DENIED" operation="setprocattr" info="fscreate" error=-22 profile="unconfined" pid=6511 comm="syz.2.395" [ 406.243544][ T4284] Bluetooth: hci5: command 0x0411 tx timeout [ 407.543006][ T6433] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 407.562631][ T6433] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 408.742227][ T6433] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 408.874597][ T6433] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 408.950597][ T6433] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 409.221266][ T6433] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 409.724968][ T6433] device hsr_slave_0 entered promiscuous mode [ 409.779246][ T6433] device hsr_slave_1 entered promiscuous mode [ 409.819442][ T6433] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 409.860040][ T6433] Cannot create hsr debugfs directory [ 410.333001][ T6546] loop0: detected capacity change from 0 to 512 [ 410.352632][ T6546] EXT4-fs: Ignoring removed bh option [ 411.586333][ T6546] EXT4-fs (loop0): warning: mounting unchecked fs, running e2fsck is recommended [ 411.618375][ T6546] EXT4-fs (loop0): 1 truncate cleaned up [ 411.624263][ T6546] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 411.911071][ T4290] EXT4-fs (loop0): unmounting filesystem. [ 413.641607][ T6433] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 413.939521][ T6574] xt_l2tp: unknown flags: 17 [ 414.673502][ T26] audit: type=1400 audit(1782751673.961:60): apparmor="DENIED" operation="setprocattr" info="fscreate" error=-22 profile="unconfined" pid=6580 comm="syz.2.406" [ 415.787334][ T6588] netlink: 96 bytes leftover after parsing attributes in process `syz.1.407'. [ 416.896335][ T6433] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 416.919112][ T6433] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 416.978910][ T6433] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 417.740789][ T6433] 8021q: adding VLAN 0 to HW filter on device bond0 [ 417.789834][ T5149] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 418.034573][ T5149] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 418.076663][ T6433] 8021q: adding VLAN 0 to HW filter on device team0 [ 418.133509][ T5149] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 418.159896][ T5149] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 418.179082][ T5149] bridge0: port 1(bridge_slave_0) entered blocking state [ 418.186349][ T5149] bridge0: port 1(bridge_slave_0) entered forwarding state [ 418.267812][ T5149] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 418.286630][ T5149] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 418.316987][ T5149] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 418.340306][ T5149] bridge0: port 2(bridge_slave_1) entered blocking state [ 418.347562][ T5149] bridge0: port 2(bridge_slave_1) entered forwarding state [ 418.393945][ T5149] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 418.450201][ T5149] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 418.478900][ T5149] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 418.497745][ T5149] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 418.509430][ T5149] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 418.526228][ T5149] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 418.570403][ T5149] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 418.594186][ T5149] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 418.609407][ T5149] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 418.618582][ T5149] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 418.634917][ T5149] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 418.652999][ T6433] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 419.606216][ T4424] device hsr_slave_0 left promiscuous mode [ 419.622865][ T4424] device hsr_slave_1 left promiscuous mode [ 421.415905][ T4424] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 421.435876][ T4424] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 421.475749][ T4424] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 421.884504][ T4424] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 422.558700][ T4424] device bridge_slave_1 left promiscuous mode [ 422.596956][ T4424] bridge0: port 2(bridge_slave_1) entered disabled state [ 422.655518][ T4424] device bridge_slave_0 left promiscuous mode [ 422.661782][ T4424] bridge0: port 1(bridge_slave_0) entered disabled state [ 422.840431][ T48] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 422.851099][ T48] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 422.860848][ T48] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 422.870604][ T48] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 422.879879][ T4279] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 422.887602][ T4279] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 422.930758][ T4424] device veth1_macvtap left promiscuous mode [ 422.937080][ T4424] device veth0_macvtap left promiscuous mode [ 422.943432][ T4424] device veth1_vlan left promiscuous mode [ 422.949322][ T4424] device veth0_vlan left promiscuous mode [ 423.568141][ T4424] team0 (unregistering): Port device team_slave_1 removed [ 423.618606][ T4424] team0 (unregistering): Port device team_slave_0 removed [ 423.665917][ T4424] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 423.716406][ T4424] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 424.033061][ T4424] bond0 (unregistering): (slave dummy0): Releasing backup interface [ 424.089238][ T4424] bond0 (unregistering): Released all slaves [ 424.327541][ T6623] netlink: 'syz.2.423': attribute type 10 has an invalid length. [ 424.555128][ T6623] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 425.233665][ T4284] Bluetooth: hci1: command 0x0409 tx timeout [ 425.443485][ T6636] lo speed is unknown, defaulting to 1000 [ 425.449794][ T6636] lo speed is unknown, defaulting to 1000 [ 425.458144][ T6636] lo speed is unknown, defaulting to 1000 [ 425.469904][ T6636] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 425.484619][ T6636] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 425.513998][ T6636] lo speed is unknown, defaulting to 1000 [ 425.523648][ T6636] lo speed is unknown, defaulting to 1000 [ 425.532121][ T6636] lo speed is unknown, defaulting to 1000 [ 425.539258][ T6636] lo speed is unknown, defaulting to 1000 [ 425.546198][ T6636] lo speed is unknown, defaulting to 1000 [ 425.605200][ T6625] lo speed is unknown, defaulting to 1000 [ 425.822492][ T26] audit: type=1400 audit(1782751685.091:61): apparmor="DENIED" operation="setprocattr" info="fscreate" error=-22 profile="unconfined" pid=6640 comm="syz.0.418" [ 426.982050][ T6652] loop2: detected capacity change from 0 to 512 [ 426.992885][ T6652] EXT4-fs: Ignoring removed bh option [ 427.171773][ T5150] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 427.200524][ T6652] EXT4-fs (loop2): warning: mounting unchecked fs, running e2fsck is recommended [ 427.201409][ T5150] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 427.229367][ T6652] EXT4-fs (loop2): 1 truncate cleaned up [ 427.235210][ T6652] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 427.275372][ T6433] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 427.292550][ T4279] Bluetooth: hci1: command 0x041b tx timeout [ 427.626206][ T4286] EXT4-fs (loop2): unmounting filesystem. [ 429.112525][ T5150] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 429.412509][ T4279] Bluetooth: hci1: command 0x040f tx timeout [ 429.472693][ T6625] chnl_net:caif_netlink_parms(): no params data found [ 431.442889][ T4279] Bluetooth: hci1: command 0x0419 tx timeout [ 431.675302][ T6681] loop2: detected capacity change from 0 to 32768 [ 431.687452][ T6681] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop2 scanned by syz.2.428 (6681) [ 431.703732][ T6681] BTRFS info (device loop2): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 431.714225][ T6681] BTRFS info (device loop2): using sha256 (sha256-avx2) checksum algorithm [ 431.723177][ T6681] BTRFS info (device loop2): use zlib compression, level 3 [ 431.730458][ T6681] BTRFS info (device loop2): turning on sync discard [ 431.737331][ T6681] BTRFS info (device loop2): using free space tree [ 432.038138][ T6681] BTRFS info (device loop2): enabling ssd optimizations [ 432.808461][ T4284] Bluetooth: hci0: unexpected event 0x2f length: 509 > 260 [ 432.835551][ T4424] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 432.968150][ T26] audit: type=1800 audit(1782751692.241:62): pid=6710 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.428" name="file1" dev="loop2" ino=260 res=0 errno=0 [ 433.028398][ T6711] netlink: 16 bytes leftover after parsing attributes in process `syz.2.428'. [ 433.605977][ T6698] netlink: 'syz.0.429': attribute type 10 has an invalid length. [ 433.686592][ T6698] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 434.629197][ T4286] BTRFS info (device loop2): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 434.730241][ T4424] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 436.111981][ T4424] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 436.345629][ T6625] bridge0: port 1(bridge_slave_0) entered blocking state [ 436.355948][ T6625] bridge0: port 1(bridge_slave_0) entered disabled state [ 437.195079][ T6625] device bridge_slave_0 entered promiscuous mode [ 437.258340][ T6741] trusted_key: encrypted_key: key user:syz not found [ 437.691804][ T4424] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 437.874718][ T6625] bridge0: port 2(bridge_slave_1) entered blocking state [ 437.887549][ T6625] bridge0: port 2(bridge_slave_1) entered disabled state [ 437.915314][ T6625] device bridge_slave_1 entered promiscuous mode [ 437.930523][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 437.940222][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 439.491591][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 439.506798][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 439.586155][ T6433] device veth0_vlan entered promiscuous mode [ 439.616697][ T6625] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 439.659574][ T4635] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 439.677632][ T4635] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 439.858051][ T6625] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 440.755614][ T6433] device veth1_vlan entered promiscuous mode [ 441.043856][ T6754] netlink: 27 bytes leftover after parsing attributes in process `syz.0.438'. [ 441.057778][ T5158] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 441.174808][ T6765] netlink: 'syz.2.440': attribute type 5 has an invalid length. [ 441.183084][ T6765] netlink: 16 bytes leftover after parsing attributes in process `syz.2.440'. [ 441.761150][ T6625] team0: Port device team_slave_0 added [ 441.797384][ T6765] debugfs: Directory ' j¦!ÐÕ(á=|èl'rŒý00000000000000000003' with parent 'ieee80211' already present! [ 441.814594][ T6625] team0: Port device team_slave_1 added [ 442.223244][ T6625] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 442.230275][ T6625] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 442.880317][ T6625] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 443.122241][ T6625] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 443.134489][ T6625] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 443.303781][ T6625] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 444.081637][ T5154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 444.097960][ T5154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 444.224828][ T6433] device veth0_macvtap entered promiscuous mode [ 445.302726][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 445.309155][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 445.406643][ T6625] device hsr_slave_0 entered promiscuous mode [ 446.499064][ T6625] device hsr_slave_1 entered promiscuous mode [ 446.578565][ T5154] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 448.448155][ T6433] device veth1_macvtap entered promiscuous mode [ 450.325756][ T4279] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 450.338134][ T4279] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 450.351189][ T4279] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 450.359396][ T4279] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 450.369193][ T4279] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 450.376752][ T4279] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 451.740573][ T6829] lo speed is unknown, defaulting to 1000 [ 452.030163][ T6625] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 452.574675][ T6625] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 454.448966][ T4284] Bluetooth: hci2: command 0x0409 tx timeout [ 454.551187][ T6625] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 454.591815][ T6625] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 455.851536][ T6829] chnl_net:caif_netlink_parms(): no params data found [ 455.948538][ T6625] 8021q: adding VLAN 0 to HW filter on device bond0 [ 456.067796][ T6865] loop2: detected capacity change from 0 to 128 [ 456.122152][ T6865] FAT-fs (loop2): Directory bread(block 414) failed [ 456.239861][ T6865] FAT-fs (loop2): Directory bread(block 415) failed [ 456.287386][ T5149] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 456.309786][ T5149] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 456.327977][ T6865] FAT-fs (loop2): Directory bread(block 416) failed [ 456.355482][ T6625] 8021q: adding VLAN 0 to HW filter on device team0 [ 456.376514][ T6865] FAT-fs (loop2): Directory bread(block 417) failed [ 456.426435][ T6865] FAT-fs (loop2): Directory bread(block 418) failed [ 456.448603][ T6865] FAT-fs (loop2): Directory bread(block 419) failed [ 456.456606][ T6865] FAT-fs (loop2): Directory bread(block 420) failed [ 456.483000][ T4284] Bluetooth: hci2: command 0x041b tx timeout [ 456.563437][ T6865] FAT-fs (loop2): Directory bread(block 421) failed [ 457.236491][ T6873] FAT-fs (loop2): Directory bread(block 414) failed [ 457.244438][ T6873] FAT-fs (loop2): Directory bread(block 415) failed [ 458.263686][ T4326] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 458.300567][ T4326] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 458.330300][ T4326] bridge0: port 1(bridge_slave_0) entered blocking state [ 458.337525][ T4326] bridge0: port 1(bridge_slave_0) entered forwarding state [ 458.379624][ T4326] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 458.509592][ T4326] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 458.549952][ T4326] bridge0: port 2(bridge_slave_1) entered blocking state [ 458.557207][ T4326] bridge0: port 2(bridge_slave_1) entered forwarding state [ 458.565668][ T4284] Bluetooth: hci2: command 0x040f tx timeout [ 459.707674][ T4326] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 459.728810][ T4326] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 459.760556][ T4326] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 459.780625][ T4326] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 459.948201][ T4326] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 459.970725][ T4326] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 461.063700][ T4284] Bluetooth: hci2: command 0x0419 tx timeout [ 461.160376][ T4326] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 461.169739][ T4326] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 461.664207][ T4326] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 461.677674][ T4326] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 463.196020][ T5154] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 463.234282][ T6905] input: syz1 as /devices/virtual/input/input6 [ 463.342465][ T4424] device hsr_slave_0 left promiscuous mode [ 463.544580][ T4424] device hsr_slave_1 left promiscuous mode [ 463.675127][ T4424] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 464.302936][ T4424] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 464.353208][ T4424] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 464.360723][ T4424] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 464.407687][ T4424] device bridge_slave_1 left promiscuous mode [ 464.434025][ T4424] bridge0: port 2(bridge_slave_1) entered disabled state [ 464.463084][ T4424] device bridge_slave_0 left promiscuous mode [ 464.469413][ T4424] bridge0: port 1(bridge_slave_0) entered disabled state [ 464.604517][ T4424] device veth1_macvtap left promiscuous mode [ 464.610654][ T4424] device veth0_macvtap left promiscuous mode [ 464.643396][ T4424] device veth1_vlan left promiscuous mode [ 464.662524][ T4424] device veth0_vlan left promiscuous mode [ 467.342964][ T126] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 468.748770][ T6935] xt_TCPMSS: Only works on TCP SYN packets [ 468.904417][ T126] usb 3-1: Using ep0 maxpacket: 16 [ 469.089721][ T126] usb 3-1: device descriptor read/all, error -71 [ 471.680385][ T4424] team0 (unregistering): Port device team_slave_1 removed [ 471.793372][ T4424] team0 (unregistering): Port device team_slave_0 removed [ 471.953474][ T4424] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 472.045513][ T4424] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 472.154258][ T6961] 9pnet_virtio: no channels available for device [ 472.984368][ T4424] bond0 (unregistering): Released all slaves [ 473.089854][ T6625] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 473.101698][ T6625] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 473.110974][ T5150] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 473.120404][ T5150] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 473.202970][ T6942] netlink: 60 bytes leftover after parsing attributes in process `syz.0.471'. [ 473.228195][ T6942] bridge0: port 3(syz_tun) entered disabled state [ 473.236127][ T6942] bridge0: port 2(bridge_slave_1) entered disabled state [ 473.243518][ T6942] bridge0: port 1(bridge_slave_0) entered disabled state [ 473.283028][ T6829] bridge0: port 1(bridge_slave_0) entered blocking state [ 473.472542][ T6829] bridge0: port 1(bridge_slave_0) entered disabled state [ 473.501543][ T6829] device bridge_slave_0 entered promiscuous mode [ 475.123026][ T6829] bridge0: port 2(bridge_slave_1) entered blocking state [ 475.130327][ T6829] bridge0: port 2(bridge_slave_1) entered disabled state [ 475.540894][ T6829] device bridge_slave_1 entered promiscuous mode [ 477.265467][ T6829] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 477.347975][ T6984] loop2: detected capacity change from 0 to 512 [ 477.358254][ T6984] EXT4-fs: Ignoring removed bh option [ 477.426314][ T6829] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 477.686996][ T6829] team0: Port device team_slave_0 added [ 477.750676][ T6829] team0: Port device team_slave_1 added [ 477.978988][ T6829] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 478.022460][ T6829] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 478.049869][ T6984] EXT4-fs (loop2): warning: mounting unchecked fs, running e2fsck is recommended [ 478.101017][ T6984] EXT4-fs (loop2): 1 truncate cleaned up [ 478.106810][ T6984] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 478.203031][ T6829] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 478.368744][ T4286] EXT4-fs (loop2): unmounting filesystem. [ 478.514526][ T6829] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 478.532350][ T6829] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 478.558721][ T6829] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 479.526565][ T6829] device hsr_slave_0 entered promiscuous mode [ 479.575167][ T6829] device hsr_slave_1 entered promiscuous mode [ 479.611364][ T6829] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 479.651297][ T6829] Cannot create hsr debugfs directory [ 481.208690][ T7006] bridge0: port 3(syz_tun) entered blocking state [ 481.234224][ T7006] bridge0: port 3(syz_tun) entered disabled state [ 481.273713][ T7006] device syz_tun entered promiscuous mode [ 481.384312][ T7006] bridge0: port 3(syz_tun) entered blocking state [ 481.391060][ T7006] bridge0: port 3(syz_tun) entered forwarding state [ 481.483282][ T26] audit: type=1326 audit(1782751740.771:63): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7015 comm="syz.0.483" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe558f9ce59 code=0x7ffc0000 [ 482.518508][ T26] audit: type=1326 audit(1782751740.841:64): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7015 comm="syz.0.483" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fe558f9ce59 code=0x7ffc0000 [ 482.628241][ T4279] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 482.672394][ T26] audit: type=1326 audit(1782751740.841:65): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7015 comm="syz.0.483" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe558f9ce59 code=0x7ffc0000 [ 482.696767][ T26] audit: type=1326 audit(1782751740.861:66): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7015 comm="syz.0.483" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=302 compat=0 ip=0x7fe558f9ce59 code=0x7ffc0000 [ 482.725469][ T26] audit: type=1326 audit(1782751740.861:67): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7015 comm="syz.0.483" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe558f9ce59 code=0x7ffc0000 [ 482.869434][ T4279] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 482.881604][ T4279] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 482.891046][ T4279] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 484.154653][ T48] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 484.162093][ T48] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 484.282638][ T26] audit: type=1326 audit(1782751740.861:68): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7015 comm="syz.0.483" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe558f9ce59 code=0x7ffc0000 [ 484.419929][ T26] audit: type=1326 audit(1782751740.861:69): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7015 comm="syz.0.483" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=144 compat=0 ip=0x7fe558f9ce59 code=0x7ffc0000 [ 484.452540][ T26] audit: type=1326 audit(1782751740.861:70): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7015 comm="syz.0.483" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe558f9ce59 code=0x7ffc0000 [ 484.692167][ T26] audit: type=1326 audit(1782751740.861:71): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7015 comm="syz.0.483" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe558f9ce59 code=0x7ffc0000 [ 484.821128][ T26] audit: type=1326 audit(1782751740.871:72): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7015 comm="syz.0.483" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fe558f9ce59 code=0x7ffc0000 [ 486.592921][ T4279] Bluetooth: hci1: command 0x0409 tx timeout [ 487.934041][ T7021] lo speed is unknown, defaulting to 1000 [ 488.642511][ T4279] Bluetooth: hci1: command 0x041b tx timeout [ 488.814566][ T6829] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 488.897828][ T6829] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 489.013317][ T6829] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 489.040193][ T6829] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 491.664625][ T4279] Bluetooth: hci1: command 0x040f tx timeout [ 491.970336][ T7021] chnl_net:caif_netlink_parms(): no params data found [ 492.080747][ T4424] device hsr_slave_0 left promiscuous mode [ 492.105727][ T4424] device hsr_slave_1 left promiscuous mode [ 492.202861][ T4424] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 492.223266][ T4424] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 492.243298][ T4424] device bridge_slave_1 left promiscuous mode [ 492.249675][ T4424] bridge0: port 2(bridge_slave_1) entered disabled state [ 492.339501][ T4424] device bridge_slave_0 left promiscuous mode [ 492.362644][ T4424] bridge0: port 1(bridge_slave_0) entered disabled state [ 492.456072][ T4424] device veth1_macvtap left promiscuous mode [ 492.504848][ T4424] device veth0_macvtap left promiscuous mode [ 492.511057][ T4424] device veth1_vlan left promiscuous mode [ 492.550851][ T4424] device veth0_vlan left promiscuous mode [ 493.764044][ T4279] Bluetooth: hci1: command 0x0419 tx timeout [ 495.661506][ T57] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 497.081262][ T4424] team0 (unregistering): Port device team_slave_1 removed [ 497.133798][ T7117] loop2: detected capacity change from 0 to 16 [ 497.159564][ T7117] erofs: (device loop2): mounted with root inode @ nid 36. [ 498.171953][ T4424] team0 (unregistering): Port device team_slave_0 removed [ 499.713565][ T4424] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 499.775760][ T4424] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 500.322689][ T4424] bond0 (unregistering): Released all slaves [ 500.558698][ T7092] bridge0: port 3(syz_tun) entered blocking state [ 500.565408][ T7092] bridge0: port 3(syz_tun) entered disabled state [ 500.572948][ T7092] device syz_tun entered promiscuous mode [ 500.579417][ T7092] bridge0: port 3(syz_tun) entered blocking state [ 500.585950][ T7092] bridge0: port 3(syz_tun) entered forwarding state [ 503.449689][ T6829] 8021q: adding VLAN 0 to HW filter on device bond0 [ 503.466532][ T7021] bridge0: port 1(bridge_slave_0) entered blocking state [ 503.482516][ T7021] bridge0: port 1(bridge_slave_0) entered disabled state [ 503.518579][ T7021] device bridge_slave_0 entered promiscuous mode [ 503.573974][ T5160] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 503.610285][ T5160] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 503.629586][ T7021] bridge0: port 2(bridge_slave_1) entered blocking state [ 503.662565][ T7021] bridge0: port 2(bridge_slave_1) entered disabled state [ 503.670953][ T7021] device bridge_slave_1 entered promiscuous mode [ 503.736538][ T6829] 8021q: adding VLAN 0 to HW filter on device team0 [ 503.814611][ T5160] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 503.836064][ T5160] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 503.856547][ T5160] bridge0: port 1(bridge_slave_0) entered blocking state [ 503.863782][ T5160] bridge0: port 1(bridge_slave_0) entered forwarding state [ 503.891799][ T5160] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 503.907396][ T5160] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 503.942999][ T5160] bridge0: port 2(bridge_slave_1) entered blocking state [ 503.950169][ T5160] bridge0: port 2(bridge_slave_1) entered forwarding state [ 504.015285][ T7021] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 504.039010][ T5160] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 504.048560][ T5160] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 504.096237][ T7021] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 504.179691][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 504.205667][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 504.244575][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 504.369988][ T7021] team0: Port device team_slave_0 added [ 504.407472][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 504.425372][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 504.446086][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 504.476886][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 504.506630][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 504.526836][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 504.557502][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 504.586484][ T6829] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 504.611580][ T7021] team0: Port device team_slave_1 added [ 504.730086][ T7021] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 504.757710][ T7021] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 504.837017][ T7021] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 504.904064][ T7021] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 504.911082][ T7021] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 505.132575][ T7021] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 505.938385][ T7021] device hsr_slave_0 entered promiscuous mode [ 505.952708][ T7021] device hsr_slave_1 entered promiscuous mode [ 506.033239][ T7021] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 506.040906][ T7021] Cannot create hsr debugfs directory [ 506.783182][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 506.790349][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 508.685022][ T5162] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 508.714581][ T5162] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 509.690877][ T4279] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 509.702887][ T4279] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 509.712133][ T48] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 509.721792][ T4279] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 509.730467][ T4279] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 509.738390][ T4279] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 511.762806][ T4284] Bluetooth: hci5: command 0x0409 tx timeout [ 511.894190][ T7199] lo speed is unknown, defaulting to 1000 [ 513.842509][ T4284] Bluetooth: hci5: command 0x041b tx timeout [ 516.849069][ T4279] Bluetooth: hci5: command 0x040f tx timeout [ 517.156602][ T7021] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 517.285438][ T7229] overlayfs: failed to clone upperpath [ 517.318320][ T7229] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 517.463253][ T7021] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 517.796714][ T4302] device hsr_slave_0 left promiscuous mode [ 518.111033][ T4302] device hsr_slave_1 left promiscuous mode [ 518.266937][ T4302] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 518.443088][ T4302] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 518.483069][ T4302] device bridge_slave_1 left promiscuous mode [ 518.489420][ T4302] bridge0: port 2(bridge_slave_1) entered disabled state [ 518.639661][ T4302] device bridge_slave_0 left promiscuous mode [ 518.649414][ T4302] bridge0: port 1(bridge_slave_0) entered disabled state [ 518.882918][ T4279] Bluetooth: hci5: command 0x0419 tx timeout [ 523.734654][ T4302] team0 (unregistering): Port device team_slave_1 removed [ 525.373122][ T4302] team0 (unregistering): Port device team_slave_0 removed [ 525.548136][ T4302] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 525.687909][ T4302] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 526.388260][ T7288] loop0: detected capacity change from 0 to 512 [ 526.395396][ T7288] EXT4-fs: Ignoring removed bh option [ 527.024057][ T7288] EXT4-fs (loop0): warning: mounting unchecked fs, running e2fsck is recommended [ 527.042627][ T7288] EXT4-fs (loop0): 1 truncate cleaned up [ 527.048371][ T7288] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 527.242784][ T4302] bond0 (unregistering): Released all slaves [ 528.114431][ T5158] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 528.180981][ T7021] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 528.331708][ T7021] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 528.364446][ T4290] EXT4-fs (loop0): unmounting filesystem. [ 528.851779][ T7300] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 528.861206][ T7300] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 530.194299][ T7199] chnl_net:caif_netlink_parms(): no params data found [ 530.558016][ T7021] 8021q: adding VLAN 0 to HW filter on device bond0 [ 530.614541][ T4326] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 530.624894][ T4326] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 530.645973][ T7021] 8021q: adding VLAN 0 to HW filter on device team0 [ 530.653718][ T7199] bridge0: port 1(bridge_slave_0) entered blocking state [ 530.660860][ T7199] bridge0: port 1(bridge_slave_0) entered disabled state [ 530.670681][ T7199] device bridge_slave_0 entered promiscuous mode [ 530.699198][ T5150] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 530.716444][ T5150] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 530.747361][ T5150] bridge0: port 1(bridge_slave_0) entered blocking state [ 530.754591][ T5150] bridge0: port 1(bridge_slave_0) entered forwarding state [ 530.778763][ T5150] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 530.819423][ T5150] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 530.837769][ T5150] bridge0: port 2(bridge_slave_1) entered blocking state [ 530.845016][ T5150] bridge0: port 2(bridge_slave_1) entered forwarding state [ 530.873149][ T5150] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 530.883554][ T5150] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 530.943879][ T5150] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 531.022648][ T7199] bridge0: port 2(bridge_slave_1) entered blocking state [ 531.029830][ T7199] bridge0: port 2(bridge_slave_1) entered disabled state [ 531.046575][ T7199] device bridge_slave_1 entered promiscuous mode [ 531.067812][ T5154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 531.085642][ T5154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 531.165994][ T5154] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 531.182861][ T5154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 531.221618][ T5154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 531.272154][ T7199] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 531.291404][ T5154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 531.323315][ T5154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 531.339413][ T5154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 531.373250][ T5154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 531.390888][ T7021] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 531.434724][ T7199] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 531.637398][ T7199] team0: Port device team_slave_0 added [ 531.680635][ T7199] team0: Port device team_slave_1 added [ 531.820330][ T7199] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 531.834455][ T7199] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 531.902474][ T7199] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 531.928341][ T7199] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 531.953014][ T7199] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 531.997957][ T7199] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 532.082818][ T7199] device hsr_slave_0 entered promiscuous mode [ 532.089764][ T7199] device hsr_slave_1 entered promiscuous mode [ 532.307192][ T5158] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 532.324198][ T5158] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 532.339354][ T7021] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 533.058785][ T5158] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 533.075198][ T5158] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 533.131675][ T4326] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 533.151670][ T4326] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 533.243702][ T7021] device veth0_vlan entered promiscuous mode [ 533.251113][ T4326] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 533.260832][ T4326] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 533.291210][ T7021] device veth1_vlan entered promiscuous mode [ 533.392168][ T4603] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 533.400797][ T4603] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 533.409503][ T4603] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 533.419277][ T4603] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 533.449917][ T7021] device veth0_macvtap entered promiscuous mode [ 533.462121][ T7021] device veth1_macvtap entered promiscuous mode [ 533.485960][ T5150] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 533.495895][ T5150] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 533.508819][ T4302] device hsr_slave_0 left promiscuous mode [ 533.515908][ T4302] device hsr_slave_1 left promiscuous mode [ 533.524437][ T4302] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 533.532152][ T4302] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 533.540768][ T4302] device bridge_slave_1 left promiscuous mode [ 533.547585][ T4302] bridge0: port 2(bridge_slave_1) entered disabled state [ 533.556801][ T4302] device bridge_slave_0 left promiscuous mode [ 533.563661][ T4302] bridge0: port 1(bridge_slave_0) entered disabled state [ 533.831875][ T4302] team0 (unregistering): Port device team_slave_1 removed [ 533.888890][ T4302] team0 (unregistering): Port device team_slave_0 removed [ 533.937589][ T4302] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 533.985829][ T4302] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 534.321162][ T4302] bond0 (unregistering): Released all slaves [ 534.418518][ T7021] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 534.432437][ T7021] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 534.442747][ T7021] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 534.454345][ T7021] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 534.465693][ T7021] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 534.477301][ T7021] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 534.489925][ T7021] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 534.522907][ T5154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 534.534256][ T5154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 534.545420][ T7021] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 534.556751][ T7021] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 534.566939][ T7021] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 534.582394][ T7021] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 534.592289][ T7021] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 534.603163][ T7021] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 534.616997][ T7021] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 534.628842][ T7021] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 534.637939][ T7021] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 534.651968][ T7021] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 534.660987][ T7021] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 534.706150][ T4603] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 534.715459][ T4603] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 534.825369][ T7199] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 534.873780][ T7199] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 534.924070][ T4326] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 534.931962][ T4326] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 534.945574][ T7199] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 534.974203][ T7199] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 534.987831][ T5158] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 535.030499][ T5150] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 535.053874][ T5150] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 535.061506][ T5158] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 535.293706][ T7199] 8021q: adding VLAN 0 to HW filter on device bond0 [ 539.084346][ T4326] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 539.095563][ T4326] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 539.171840][ T7199] 8021q: adding VLAN 0 to HW filter on device team0 [ 539.542859][ T5153] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 540.583113][ T5153] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 540.594846][ T5153] bridge0: port 1(bridge_slave_0) entered blocking state [ 540.602021][ T5153] bridge0: port 1(bridge_slave_0) entered forwarding state [ 540.819038][ T26] kauditd_printk_skb: 12 callbacks suppressed [ 540.819116][ T26] audit: type=1326 audit(540.757:85): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7400 comm="syz.0.535" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe558f9ce59 code=0x7ffc0000 [ 541.683544][ T5153] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 541.774452][ T26] audit: type=1326 audit(540.757:86): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7400 comm="syz.0.535" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe558f9ce59 code=0x7ffc0000 [ 541.800738][ T26] audit: type=1326 audit(540.757:87): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7400 comm="syz.0.535" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe558f9ce59 code=0x7ffc0000 [ 541.840422][ T5153] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 541.856828][ T5153] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 541.865560][ T26] audit: type=1326 audit(540.757:88): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7400 comm="syz.0.535" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe558f9ce59 code=0x7ffc0000 [ 541.896541][ T5153] bridge0: port 2(bridge_slave_1) entered blocking state [ 541.903789][ T5153] bridge0: port 2(bridge_slave_1) entered forwarding state [ 541.917939][ T5153] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 541.926537][ T26] audit: type=1326 audit(541.587:89): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7400 comm="syz.0.535" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=426 compat=0 ip=0x7fe558f9ce59 code=0x7ffc0000 [ 541.956679][ T26] audit: type=1326 audit(541.587:90): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7400 comm="syz.0.535" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe558f9ce59 code=0x7ffc0000 [ 542.070017][ T26] audit: type=1326 audit(541.587:91): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7400 comm="syz.0.535" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe558f9ce59 code=0x7ffc0000 [ 542.095967][ T26] audit: type=1326 audit(541.607:92): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7400 comm="syz.0.535" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe558f9ce59 code=0x7ffc0000 [ 542.120112][ T26] audit: type=1326 audit(541.607:93): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7400 comm="syz.0.535" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fe558f9cbc2 code=0x7ffc0000 [ 542.150344][ T26] audit: type=1326 audit(541.607:94): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7400 comm="syz.0.535" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=10 compat=0 ip=0x7fe558f9cc57 code=0x7ffc0000 [ 544.031970][ T4326] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 544.119714][ T4326] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 544.154740][ T4326] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 544.192912][ T4326] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 544.255126][ T4326] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 544.285870][ T4326] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 544.310673][ T4326] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 544.348136][ T4326] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 544.539504][ T7199] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 544.619266][ T7199] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 544.702925][ T7422] netlink: 4 bytes leftover after parsing attributes in process `syz.0.541'. [ 544.714914][ T5151] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 544.783994][ T5151] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 544.868428][ T7428] netlink: 'syz.0.541': attribute type 7 has an invalid length. [ 545.239950][ T7422] netlink: 'syz.0.541': attribute type 7 has an invalid length. [ 545.377123][ T7431] loop2: detected capacity change from 0 to 1024 [ 546.698477][ T7448] loop0: detected capacity change from 0 to 128 [ 546.759080][ T7448] FAT-fs (loop0): Directory bread(block 414) failed [ 546.765997][ T7448] FAT-fs (loop0): Directory bread(block 415) failed [ 546.773070][ T7448] FAT-fs (loop0): Directory bread(block 416) failed [ 546.779929][ T7448] FAT-fs (loop0): Directory bread(block 417) failed [ 546.786824][ T7448] FAT-fs (loop0): Directory bread(block 418) failed [ 546.793613][ T7448] FAT-fs (loop0): Directory bread(block 419) failed [ 546.800374][ T7448] FAT-fs (loop0): Directory bread(block 420) failed [ 546.807251][ T7448] FAT-fs (loop0): Directory bread(block 421) failed [ 547.381209][ T5160] hfsplus: b-tree write err: -5, ino 25 [ 547.566785][ T5160] hfsplus: b-tree write err: -5, ino 4 [ 547.669655][ T7458] netlink: 4 bytes leftover after parsing attributes in process `syz.0.550'. [ 547.678966][ T7458] device syz_tun left promiscuous mode [ 547.685578][ T7458] bridge0: port 3(syz_tun) entered disabled state [ 547.795920][ T5160] hfsplus: b-tree write err: -5, ino 2 [ 548.351512][ T7458] device bridge_slave_1 left promiscuous mode [ 548.359696][ T7458] bridge0: port 2(bridge_slave_1) entered disabled state [ 549.420529][ T7458] device bridge_slave_0 left promiscuous mode [ 549.426924][ T7458] bridge0: port 1(bridge_slave_0) entered disabled state [ 551.583221][ T5153] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 551.602595][ T5153] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 551.636577][ T7199] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 553.603324][ T7497] netlink: 4 bytes leftover after parsing attributes in process `syz.2.566'. [ 553.842021][ T7497] netlink: 'syz.2.566': attribute type 7 has an invalid length. [ 553.970732][ T7500] netlink: 'syz.2.566': attribute type 7 has an invalid length. [ 554.755223][ T7483] loop0: detected capacity change from 0 to 512 [ 554.773047][ T7483] EXT4-fs: Ignoring removed bh option [ 555.774702][ T7483] EXT4-fs (loop0): warning: mounting unchecked fs, running e2fsck is recommended [ 555.874075][ T7519] tmpfs: Unknown parameter 'qsr¬Æfú¶æÒèü³’H{"' [ 557.080700][ T7483] EXT4-fs: error -4 creating inode table initialization thread [ 557.089088][ T7483] EXT4-fs (loop0): mount failed [ 559.926643][ T4552] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 560.230933][ T5153] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 560.240723][ T5153] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 560.300225][ T4552] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 560.314767][ T4552] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 560.336591][ T7199] device veth0_vlan entered promiscuous mode [ 560.352017][ T4552] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 560.376995][ T4552] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 560.419470][ T7199] device veth1_vlan entered promiscuous mode [ 560.472480][ T4552] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 560.483880][ T4552] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 560.496290][ T4552] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 560.514462][ T4552] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 560.563883][ T7199] device veth0_macvtap entered promiscuous mode [ 560.610059][ T7199] device veth1_macvtap entered promiscuous mode [ 560.756160][ T7199] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 560.822108][ T7199] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 561.344301][ T7199] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 561.364040][ T7199] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 561.400125][ T7199] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 561.421583][ T7199] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 561.522722][ T7199] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 561.557698][ T7199] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 561.605709][ T7199] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 561.683598][ T5153] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 561.713588][ T5153] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 561.738793][ T5153] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 561.793316][ T5153] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 561.835026][ T7199] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 561.861534][ T7199] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 561.922480][ T7199] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 561.962869][ T7199] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 562.017414][ T7199] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 562.072440][ T7199] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 562.145868][ T7199] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 562.185631][ T7199] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 562.251151][ T7199] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 562.287050][ T5153] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 562.419218][ T5153] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 562.682102][ T7199] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 562.750902][ T7199] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 562.799279][ T7199] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 562.836377][ T7199] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 563.862574][ T7581] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 565.545302][ T7566] sctp: failed to load transform for md5: -2 [ 565.902605][ T5158] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 565.956529][ T5158] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 566.627370][ T7593] loop8: detected capacity change from 0 to 512 [ 566.634634][ T7593] EXT4-fs: Ignoring removed bh option [ 567.577515][ T7593] EXT4-fs (loop8): warning: mounting unchecked fs, running e2fsck is recommended [ 567.614229][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 567.643578][ T7593] EXT4-fs (loop8): 1 truncate cleaned up [ 567.649743][ T7593] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: none. [ 567.915341][ T5154] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 567.919759][ T7021] EXT4-fs (loop8): unmounting filesystem. [ 567.990159][ T5154] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 568.016371][ T5154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 570.292607][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 570.328068][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 574.142782][ T4284] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 574.162747][ T48] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 574.171614][ T48] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 574.180043][ T4284] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 574.190083][ T4284] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 574.208427][ T4284] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 575.518550][ T26] kauditd_printk_skb: 69 callbacks suppressed [ 575.518568][ T26] audit: type=1326 audit(575.457:164): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7655 comm="syz.2.582" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1e3db9ce59 code=0x7ffc0000 [ 576.423033][ T26] audit: type=1326 audit(575.457:165): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7655 comm="syz.2.582" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f1e3db9ce59 code=0x7ffc0000 [ 576.446812][ T4279] Bluetooth: hci2: command 0x0409 tx timeout [ 576.483776][ T26] audit: type=1326 audit(575.457:166): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7655 comm="syz.2.582" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1e3db9ce59 code=0x7ffc0000 [ 576.516745][ T4635] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 576.687341][ T7639] lo speed is unknown, defaulting to 1000 [ 576.778909][ T26] audit: type=1326 audit(575.457:167): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7655 comm="syz.2.582" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=302 compat=0 ip=0x7f1e3db9ce59 code=0x7ffc0000 [ 576.805079][ T26] audit: type=1326 audit(575.457:168): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7655 comm="syz.2.582" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1e3db9ce59 code=0x7ffc0000 [ 576.828533][ T26] audit: type=1326 audit(575.467:169): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7655 comm="syz.2.582" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=144 compat=0 ip=0x7f1e3db9ce59 code=0x7ffc0000 [ 576.889308][ T26] audit: type=1326 audit(575.467:170): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7655 comm="syz.2.582" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1e3db9ce59 code=0x7ffc0000 [ 577.223849][ T26] audit: type=1326 audit(575.467:171): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7655 comm="syz.2.582" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1e3db9ce59 code=0x7ffc0000 [ 577.737476][ T26] audit: type=1326 audit(575.467:172): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7655 comm="syz.2.582" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f1e3db9ce59 code=0x7ffc0000 [ 577.772167][ T26] audit: type=1326 audit(575.467:173): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7655 comm="syz.2.582" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1e3db9ce59 code=0x7ffc0000 [ 577.840918][ T4635] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 578.801580][ T4279] Bluetooth: hci2: command 0x041b tx timeout [ 579.834144][ T4635] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 579.974616][ T7639] chnl_net:caif_netlink_parms(): no params data found [ 580.700903][ T7708] loop0: detected capacity change from 0 to 1024 [ 581.187282][ T48] Bluetooth: hci2: command 0x040f tx timeout [ 581.217849][ T7708] hfsplus: Filesystem was not cleanly unmounted, running fsck.hfsplus is recommended. mounting read-only. [ 581.518834][ T4635] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 582.984052][ T7639] bridge0: port 1(bridge_slave_0) entered blocking state [ 582.991538][ T7639] bridge0: port 1(bridge_slave_0) entered disabled state [ 583.013883][ T7639] device bridge_slave_0 entered promiscuous mode [ 583.202077][ T7639] bridge0: port 2(bridge_slave_1) entered blocking state [ 583.202622][ T48] Bluetooth: hci2: command 0x0419 tx timeout [ 583.210207][ T7639] bridge0: port 2(bridge_slave_1) entered disabled state [ 583.293931][ T7639] device bridge_slave_1 entered promiscuous mode [ 584.220408][ T7639] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 584.477079][ T7639] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 586.357320][ T7639] team0: Port device team_slave_0 added [ 586.381780][ T7639] team0: Port device team_slave_1 added [ 586.933316][ T7639] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 587.087622][ T7639] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 587.312400][ T7639] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 587.347616][ T7639] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 587.375230][ T7639] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 587.472296][ T7639] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 588.827351][ T26] kauditd_printk_skb: 16 callbacks suppressed [ 588.827367][ T26] audit: type=1326 audit(588.762:190): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7752 comm="syz.1.601" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6f0979ce59 code=0x7ffc0000 [ 588.865741][ T7639] device hsr_slave_0 entered promiscuous mode [ 588.880668][ T7639] device hsr_slave_1 entered promiscuous mode [ 588.953226][ T7639] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 588.961485][ T7639] Cannot create hsr debugfs directory [ 589.010520][ T26] audit: type=1326 audit(588.762:191): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7752 comm="syz.1.601" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6f0979ce59 code=0x7ffc0000 [ 589.122354][ T26] audit: type=1326 audit(588.812:192): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7752 comm="syz.1.601" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6f0979ce59 code=0x7ffc0000 [ 589.377527][ T26] audit: type=1326 audit(588.812:193): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7752 comm="syz.1.601" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6f0979ce59 code=0x7ffc0000 [ 590.144750][ T26] audit: type=1326 audit(588.812:194): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7752 comm="syz.1.601" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=426 compat=0 ip=0x7f6f0979ce59 code=0x7ffc0000 [ 590.454430][ T7764] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 590.977633][ T26] audit: type=1326 audit(588.812:195): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7752 comm="syz.1.601" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6f0979ce59 code=0x7ffc0000 [ 591.062697][ T26] audit: type=1326 audit(588.812:196): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7752 comm="syz.1.601" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6f0979ce59 code=0x7ffc0000 [ 591.183364][ T26] audit: type=1326 audit(588.812:197): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7752 comm="syz.1.601" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6f0979ce59 code=0x7ffc0000 [ 591.298372][ T26] audit: type=1326 audit(588.812:198): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7752 comm="syz.1.601" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6f0979ce59 code=0x7ffc0000 [ 593.150067][ T9] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 593.255703][ T26] audit: type=1326 audit(588.812:199): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7752 comm="syz.1.601" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f6f0975d68e code=0x7ffc0000 [ 597.547764][ T7810] loop8: detected capacity change from 0 to 256 [ 605.449996][ T4635] device hsr_slave_0 left promiscuous mode [ 605.479573][ T4635] device hsr_slave_1 left promiscuous mode [ 605.493078][ T4635] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 605.561437][ T4635] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 605.906783][ T4635] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 606.702733][ T4635] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 606.734943][ T7859] loop8: detected capacity change from 0 to 128 [ 606.744933][ T7859] FAT-fs (loop8): Directory bread(block 414) failed [ 606.751617][ T7859] FAT-fs (loop8): Directory bread(block 415) failed [ 606.758353][ T7859] FAT-fs (loop8): Directory bread(block 416) failed [ 606.765501][ T7859] FAT-fs (loop8): Directory bread(block 417) failed [ 606.772155][ T7859] FAT-fs (loop8): Directory bread(block 418) failed [ 606.779145][ T7859] FAT-fs (loop8): Directory bread(block 419) failed [ 606.785968][ T7859] FAT-fs (loop8): Directory bread(block 420) failed [ 606.792713][ T7859] FAT-fs (loop8): Directory bread(block 421) failed [ 606.855314][ T4635] device bridge_slave_1 left promiscuous mode [ 606.861653][ T4635] bridge0: port 2(bridge_slave_1) entered disabled state [ 606.885795][ T4635] device bridge_slave_0 left promiscuous mode [ 606.892155][ T4635] bridge0: port 1(bridge_slave_0) entered disabled state [ 607.876423][ T4635] device veth1_macvtap left promiscuous mode [ 607.935335][ T4635] device veth0_macvtap left promiscuous mode [ 607.941564][ T4635] device veth1_vlan left promiscuous mode [ 608.259028][ T4635] device veth0_vlan left promiscuous mode [ 609.041301][ T7021] FAT-fs (loop8): Directory bread(block 414) failed [ 609.232474][ T7021] FAT-fs (loop8): Directory bread(block 415) failed [ 611.202580][ T48] Bluetooth: hci1: command 0x0406 tx timeout [ 614.207609][ T4635] team0 (unregistering): Port device team_slave_1 removed [ 614.325514][ T4635] team0 (unregistering): Port device team_slave_0 removed [ 614.441078][ T4635] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 614.659773][ T4635] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 615.573764][ T4635] bond0 (unregistering): Released all slaves [ 615.941441][ T26] kauditd_printk_skb: 39 callbacks suppressed [ 615.941459][ T26] audit: type=1326 audit(615.872:239): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7903 comm="syz.1.631" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6f0979ce59 code=0x7ffc0000 [ 615.949248][ T7639] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 616.885913][ T26] audit: type=1326 audit(615.912:240): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7903 comm="syz.1.631" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f6f0979ce59 code=0x7ffc0000 [ 616.999305][ T7639] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 617.049728][ T26] audit: type=1326 audit(615.912:241): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7903 comm="syz.1.631" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6f0979ce59 code=0x7ffc0000 [ 617.091809][ T7639] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 617.257386][ T26] audit: type=1326 audit(615.912:242): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7903 comm="syz.1.631" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6f0979ce59 code=0x7ffc0000 [ 617.284451][ T26] audit: type=1326 audit(615.912:243): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7903 comm="syz.1.631" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=302 compat=0 ip=0x7f6f0979ce59 code=0x7ffc0000 [ 619.519540][ T7639] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 619.526760][ T26] audit: type=1326 audit(615.912:244): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7903 comm="syz.1.631" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6f0979ce59 code=0x7ffc0000 [ 619.550505][ T26] audit: type=1326 audit(615.912:245): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7903 comm="syz.1.631" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6f0979ce59 code=0x7ffc0000 [ 619.582866][ T26] audit: type=1326 audit(615.932:246): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7903 comm="syz.1.631" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=144 compat=0 ip=0x7f6f0979ce59 code=0x7ffc0000 [ 620.192680][ T26] audit: type=1326 audit(615.932:247): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7903 comm="syz.1.631" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6f0979ce59 code=0x7ffc0000 [ 620.521166][ T26] audit: type=1326 audit(615.932:248): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7903 comm="syz.1.631" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6f0979ce59 code=0x7ffc0000 [ 621.619058][ T7639] 8021q: adding VLAN 0 to HW filter on device bond0 [ 621.722397][ T4424] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 621.993787][ T4424] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 622.046080][ T7639] 8021q: adding VLAN 0 to HW filter on device team0 [ 622.142436][ T4424] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 622.710806][ T7946] syz.1.640 sent an empty control message without MSG_MORE. [ 622.720011][ T4424] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 622.755992][ T4424] bridge0: port 1(bridge_slave_0) entered blocking state [ 622.763173][ T4424] bridge0: port 1(bridge_slave_0) entered forwarding state [ 622.883473][ T4424] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 622.929582][ T4424] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 622.984263][ T4424] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 623.030788][ T4424] bridge0: port 2(bridge_slave_1) entered blocking state [ 623.038023][ T4424] bridge0: port 2(bridge_slave_1) entered forwarding state [ 623.076594][ T4424] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 623.111339][ T4424] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 623.150732][ T4424] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 623.215604][ T4424] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 623.268819][ T4424] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 623.305141][ T4424] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 623.343632][ T4424] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 623.375173][ T4424] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 623.403038][ T4424] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 623.577052][ T4424] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 623.608314][ T4424] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 623.642055][ T7639] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 624.324878][ T5158] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 625.867224][ T4635] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 626.051534][ T4635] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 626.280648][ T4635] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 626.425120][ T4635] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 626.715727][ T48] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 626.727789][ T48] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 626.737411][ T48] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 626.747325][ T48] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 626.769577][ T48] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 626.777433][ T48] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 626.932729][ T7976] lo speed is unknown, defaulting to 1000 [ 627.140699][ T7639] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 627.189212][ T5152] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 627.212556][ T5152] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 627.710670][ T7976] chnl_net:caif_netlink_parms(): no params data found [ 628.422724][ T7976] bridge0: port 1(bridge_slave_0) entered blocking state [ 628.429940][ T7976] bridge0: port 1(bridge_slave_0) entered disabled state [ 628.465924][ T7976] device bridge_slave_0 entered promiscuous mode [ 628.569780][ T7976] bridge0: port 2(bridge_slave_1) entered blocking state [ 628.602776][ T7976] bridge0: port 2(bridge_slave_1) entered disabled state [ 628.611186][ T7976] device bridge_slave_1 entered promiscuous mode [ 628.737655][ T7976] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 628.762156][ T7976] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 628.802589][ T4279] Bluetooth: hci1: command 0x0409 tx timeout [ 629.031021][ T4302] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 629.041061][ T4302] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 629.128983][ T7976] team0: Port device team_slave_0 added [ 629.223301][ T7976] team0: Port device team_slave_1 added [ 629.241084][ T5152] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 629.252180][ T5152] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 629.296296][ T7639] device veth0_vlan entered promiscuous mode [ 629.313307][ T5152] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 629.333101][ T5152] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 629.365414][ T4635] device hsr_slave_0 left promiscuous mode [ 629.373746][ T4635] device hsr_slave_1 left promiscuous mode [ 629.380411][ T4635] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 629.388690][ T4635] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 629.403508][ T4635] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 629.411002][ T4635] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 629.419608][ T4635] device bridge_slave_1 left promiscuous mode [ 629.426289][ T4635] bridge0: port 2(bridge_slave_1) entered disabled state [ 629.443773][ T4635] device bridge_slave_0 left promiscuous mode [ 629.450118][ T4635] bridge0: port 1(bridge_slave_0) entered disabled state [ 629.499886][ T4635] device veth1_macvtap left promiscuous mode [ 629.508741][ T4635] device veth0_macvtap left promiscuous mode [ 629.520113][ T4635] device veth1_vlan left promiscuous mode [ 629.528496][ T4635] device veth0_vlan left promiscuous mode [ 629.607412][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 629.613824][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 630.267576][ T4635] team0 (unregistering): Port device team_slave_1 removed [ 630.327561][ T4635] team0 (unregistering): Port device team_slave_0 removed [ 630.380601][ T4635] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 630.437737][ T4635] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 630.860111][ T4635] bond0 (unregistering): Released all slaves [ 630.886728][ T4279] Bluetooth: hci1: command 0x041b tx timeout [ 631.015387][ T7976] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 631.032361][ T7976] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 631.102418][ T7976] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 631.127451][ T7976] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 631.142462][ T7976] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 631.202437][ T7976] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 631.312073][ T7976] device hsr_slave_0 entered promiscuous mode [ 631.354572][ T7976] device hsr_slave_1 entered promiscuous mode [ 631.633442][ T48] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 631.643997][ T48] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 631.658456][ T48] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 631.669512][ T48] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 631.687459][ T48] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 631.695214][ T48] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 631.880323][ T8021] lo speed is unknown, defaulting to 1000 [ 631.889096][ T7976] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 631.901618][ T7976] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 631.933922][ T7976] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 631.949039][ T7976] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 632.199550][ T7976] 8021q: adding VLAN 0 to HW filter on device bond0 [ 632.220914][ T4424] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 632.237426][ T4424] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 632.254873][ T7976] 8021q: adding VLAN 0 to HW filter on device team0 [ 632.353237][ T5152] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 632.370230][ T5152] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 632.380118][ T5152] bridge0: port 1(bridge_slave_0) entered blocking state [ 632.387529][ T5152] bridge0: port 1(bridge_slave_0) entered forwarding state [ 632.405241][ T8021] chnl_net:caif_netlink_parms(): no params data found [ 632.423439][ T5152] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 632.434013][ T5152] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 632.443861][ T5152] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 632.453923][ T5152] bridge0: port 2(bridge_slave_1) entered blocking state [ 632.461101][ T5152] bridge0: port 2(bridge_slave_1) entered forwarding state [ 632.470842][ T5152] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 632.609578][ T4424] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 632.634890][ T4424] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 632.654914][ T4424] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 632.666864][ T4424] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 632.677495][ T4424] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 632.768529][ T4424] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 632.782043][ T4424] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 632.800101][ T4424] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 632.835710][ T7976] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 632.848868][ T7976] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 632.887609][ T4424] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 632.897445][ T4424] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 632.963014][ T4284] Bluetooth: hci1: command 0x040f tx timeout [ 632.974786][ T8021] bridge0: port 1(bridge_slave_0) entered blocking state [ 632.999342][ T8021] bridge0: port 1(bridge_slave_0) entered disabled state [ 633.016130][ T8021] device bridge_slave_0 entered promiscuous mode [ 633.025678][ T8021] bridge0: port 2(bridge_slave_1) entered blocking state [ 633.032989][ T8021] bridge0: port 2(bridge_slave_1) entered disabled state [ 633.041500][ T8021] device bridge_slave_1 entered promiscuous mode [ 633.158535][ T8021] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 633.221754][ T8021] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 633.300808][ T8021] team0: Port device team_slave_0 added [ 633.351842][ T8021] team0: Port device team_slave_1 added [ 633.377843][ T8021] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 633.385835][ T8021] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 633.418155][ T8021] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 633.510337][ T8021] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 633.517850][ T8021] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 633.564035][ T8021] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 633.682139][ T4302] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 633.698900][ T4302] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 633.746754][ T8021] device hsr_slave_0 entered promiscuous mode [ 633.754108][ T8021] device hsr_slave_1 entered promiscuous mode [ 633.761024][ T8021] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 633.771369][ T8021] Cannot create hsr debugfs directory [ 633.777093][ T4284] Bluetooth: hci5: command 0x0409 tx timeout [ 633.788668][ T7976] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 634.468795][ T4635] device hsr_slave_0 left promiscuous mode [ 634.485301][ T4635] device hsr_slave_1 left promiscuous mode [ 634.491883][ T4635] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 634.504062][ T4635] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 634.511884][ T4635] device bridge_slave_1 left promiscuous mode [ 634.518936][ T4635] bridge0: port 2(bridge_slave_1) entered disabled state [ 634.528485][ T4635] device bridge_slave_0 left promiscuous mode [ 634.536994][ T4635] bridge0: port 1(bridge_slave_0) entered disabled state [ 634.564438][ T4635] device veth0_vlan left promiscuous mode [ 635.001136][ T4635] team0 (unregistering): Port device team_slave_1 removed [ 635.052575][ T4284] Bluetooth: hci1: command 0x0419 tx timeout [ 635.061679][ T4635] team0 (unregistering): Port device team_slave_0 removed [ 635.117723][ T4635] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 635.179685][ T4635] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 635.546282][ T4635] bond0 (unregistering): Released all slaves [ 635.676633][ T4424] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 635.687453][ T4424] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 635.734585][ T4424] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 635.744944][ T4424] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 635.755373][ T4424] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 635.763906][ T4424] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 635.814151][ T7976] device veth0_vlan entered promiscuous mode [ 635.829395][ T7976] device veth1_vlan entered promiscuous mode [ 635.842688][ T4284] Bluetooth: hci5: command 0x041b tx timeout [ 635.893567][ T8021] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 635.918392][ T8021] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 635.939719][ T4424] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 635.951601][ T4424] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 635.962689][ T4424] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 635.978402][ T4424] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 636.001643][ T8021] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 636.014090][ T8021] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 636.037473][ T7976] device veth0_macvtap entered promiscuous mode [ 636.080157][ T7976] device veth1_macvtap entered promiscuous mode [ 636.139210][ T7976] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 636.151190][ T7976] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 636.162186][ T7976] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 636.173560][ T7976] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 636.183586][ T7976] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 636.194298][ T7976] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 636.205968][ T7976] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 636.230760][ T5152] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 636.243423][ T5152] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 636.258713][ T5152] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 636.267909][ T5152] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 636.279372][ T7976] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 636.290606][ T7976] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 636.300963][ T7976] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 636.311907][ T7976] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 636.321938][ T7976] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 636.335490][ T7976] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 636.347247][ T7976] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 636.360580][ T4302] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 636.371878][ T4302] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 636.397438][ T7976] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 636.412997][ T7976] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 636.421792][ T7976] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 636.438533][ T7976] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 636.490888][ T8021] 8021q: adding VLAN 0 to HW filter on device bond0 [ 636.537216][ T4635] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 636.545558][ T4635] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 636.565327][ T8021] 8021q: adding VLAN 0 to HW filter on device team0 [ 636.593513][ T4302] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 636.607035][ T4302] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 636.616280][ T4302] bridge0: port 1(bridge_slave_0) entered blocking state [ 636.623484][ T4302] bridge0: port 1(bridge_slave_0) entered forwarding state [ 636.644802][ T5152] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 636.656388][ T5152] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 636.678399][ T4302] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 636.688872][ T4302] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 636.698349][ T4302] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 636.707444][ T4302] bridge0: port 2(bridge_slave_1) entered blocking state [ 636.714654][ T4302] bridge0: port 2(bridge_slave_1) entered forwarding state [ 636.723884][ T4302] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 636.745242][ T4302] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 636.758933][ T4302] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 636.769207][ T4302] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 636.785060][ T4302] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 636.795898][ T5152] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 636.815390][ T5152] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 636.828868][ T4302] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 636.838683][ T4302] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 636.847574][ T4302] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 636.858504][ T4302] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 636.867719][ T4302] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 636.877140][ T4302] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 636.886811][ T4302] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 636.895981][ T4302] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 636.907419][ T8021] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 637.204646][ T8079] binder: 8073:8079 ioctl c0306201 0 returned -14 [ 637.739891][ T8083] loop2: detected capacity change from 0 to 4096 [ 638.817409][ T4284] Bluetooth: hci5: command 0x040f tx timeout [ 639.961039][ T26] kauditd_printk_skb: 15 callbacks suppressed [ 639.961057][ T26] audit: type=1326 audit(639.899:264): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8092 comm="syz.9.645" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f565699ce59 code=0x7ffc0000 [ 640.630026][ T26] audit: type=1326 audit(639.949:265): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8092 comm="syz.9.645" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f565699ce59 code=0x7ffc0000 [ 640.653522][ C1] vkms_vblank_simulate: vblank timer overrun [ 640.817427][ T26] audit: type=1326 audit(639.949:266): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8092 comm="syz.9.645" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f565699ce59 code=0x7ffc0000 [ 640.883124][ T4284] Bluetooth: hci5: command 0x0419 tx timeout [ 640.902626][ T26] audit: type=1326 audit(639.949:267): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8092 comm="syz.9.645" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f565699ce59 code=0x7ffc0000 [ 641.883778][ T26] audit: type=1326 audit(639.949:268): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8092 comm="syz.9.645" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f565699ce59 code=0x7ffc0000 [ 642.028339][ T26] audit: type=1326 audit(639.959:269): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8092 comm="syz.9.645" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=302 compat=0 ip=0x7f565699ce59 code=0x7ffc0000 [ 642.051739][ C1] vkms_vblank_simulate: vblank timer overrun [ 642.213121][ T26] audit: type=1326 audit(639.959:270): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8092 comm="syz.9.645" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f565699ce59 code=0x7ffc0000 [ 642.718377][ T8115] loop9: detected capacity change from 0 to 128 [ 643.045645][ T8115] FAT-fs (loop9): Directory bread(block 414) failed [ 643.052687][ T8115] FAT-fs (loop9): Directory bread(block 415) failed [ 643.059632][ T8115] FAT-fs (loop9): Directory bread(block 416) failed [ 643.066618][ T8115] FAT-fs (loop9): Directory bread(block 417) failed [ 643.073553][ T8115] FAT-fs (loop9): Directory bread(block 418) failed [ 643.080449][ T8115] FAT-fs (loop9): Directory bread(block 419) failed [ 643.087419][ T8115] FAT-fs (loop9): Directory bread(block 420) failed [ 643.094362][ T8115] FAT-fs (loop9): Directory bread(block 421) failed [ 643.298401][ T26] audit: type=1326 audit(639.959:271): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8092 comm="syz.9.645" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f565699ce59 code=0x7ffc0000 [ 643.335132][ T26] audit: type=1326 audit(639.959:272): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8092 comm="syz.9.645" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=144 compat=0 ip=0x7f565699ce59 code=0x7ffc0000 [ 643.372521][ T26] audit: type=1326 audit(639.959:273): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8092 comm="syz.9.645" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f565699ce59 code=0x7ffc0000 [ 644.744647][ T8021] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 646.234987][ T5158] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 646.252522][ T5158] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 648.166552][ T8156] binder: 8154:8156 ioctl c0306201 0 returned -14 [ 651.363944][ T4302] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 651.384044][ T4302] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 651.446485][ T8021] device veth0_vlan entered promiscuous mode [ 651.470367][ T4326] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 651.492726][ T4326] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 651.525494][ T8021] device veth1_vlan entered promiscuous mode [ 651.549375][ T4326] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 651.558945][ T4326] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 651.593563][ T4326] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 651.662050][ T4326] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 651.672670][ T4326] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 651.720440][ T4326] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 651.743353][ T8021] device veth0_macvtap entered promiscuous mode [ 651.763314][ T8021] device veth1_macvtap entered promiscuous mode [ 651.789430][ T8021] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 651.811273][ T8021] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 651.823622][ T8021] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 651.837755][ T8021] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 651.849219][ T8021] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 651.861075][ T8021] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 651.871218][ T8021] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 651.882103][ T8021] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 651.893716][ T8021] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 651.901628][ T4302] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 651.917143][ T4302] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 651.938512][ T4302] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 651.948421][ T4302] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 651.965902][ T8021] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 651.992398][ T8021] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 652.003344][ T8021] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 652.014162][ T8021] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 652.025355][ T8021] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 652.036677][ T8021] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 652.051849][ T8021] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 652.062456][ T8021] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 652.074239][ T8021] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 652.083636][ T4552] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 652.095743][ T4552] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 652.108537][ T8021] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 652.118292][ T8021] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 652.129796][ T8021] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 652.139225][ T8021] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 652.244325][ T4326] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 652.259509][ T4326] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 652.278237][ T4552] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 652.298772][ T4552] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 652.310426][ T4552] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 652.320513][ T4326] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 652.876435][ T8188] loop2: detected capacity change from 0 to 512 [ 652.894022][ T8188] EXT4-fs: Ignoring removed bh option [ 654.213042][ T8188] EXT4-fs (loop2): warning: mounting unchecked fs, running e2fsck is recommended [ 654.247293][ T8188] EXT4-fs (loop2): 1 truncate cleaned up [ 654.254410][ T8188] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 654.305300][ T26] kauditd_printk_skb: 19 callbacks suppressed [ 654.305317][ T26] audit: type=1400 audit(654.246:293): apparmor="DENIED" operation="setprocattr" info="fscreate" error=-22 profile="unconfined" pid=8182 comm="syz.7.366" [ 654.474249][ T4286] EXT4-fs (loop2): unmounting filesystem. [ 656.632060][ T5158] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 657.507685][ T26] audit: type=1326 audit(657.446:294): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8211 comm="syz.7.662" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa78779ce59 code=0x7ffc0000 [ 658.113980][ T8207] i2c i2c-0: dvb_frontend_start: failed to start kthread (-4) [ 658.958863][ T26] audit: type=1326 audit(657.486:295): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8211 comm="syz.7.662" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa78779ce59 code=0x7ffc0000 [ 659.477859][ T26] audit: type=1326 audit(658.616:296): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8211 comm="syz.7.662" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fa78779ce59 code=0x7ffc0000 [ 660.062830][ T26] audit: type=1326 audit(658.616:297): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8211 comm="syz.7.662" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa78779ce59 code=0x7ffc0000 [ 661.112373][ T26] audit: type=1326 audit(658.616:298): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8211 comm="syz.7.662" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa78779ce59 code=0x7ffc0000 [ 663.722287][ T26] audit: type=1326 audit(658.616:299): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8211 comm="syz.7.662" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=302 compat=0 ip=0x7fa78779ce59 code=0x7ffc0000 [ 664.223428][ T26] audit: type=1326 audit(658.616:300): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8211 comm="syz.7.662" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa78779ce59 code=0x7ffc0000 [ 665.614913][ T8275] syz.9.676 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 666.396053][ T26] audit: type=1326 audit(658.626:301): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8211 comm="syz.7.662" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa78779ce59 code=0x7ffc0000 [ 666.497708][ T26] audit: type=1326 audit(658.626:302): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8211 comm="syz.7.662" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=144 compat=0 ip=0x7fa78779ce59 code=0x7ffc0000 [ 666.521139][ C1] vkms_vblank_simulate: vblank timer overrun [ 666.652687][ T26] audit: type=1326 audit(658.626:303): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8211 comm="syz.7.662" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa78779ce59 code=0x7ffc0000 [ 666.676022][ C1] vkms_vblank_simulate: vblank timer overrun [ 666.783633][ T26] audit: type=1326 audit(658.626:304): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8211 comm="syz.7.662" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa78779ce59 code=0x7ffc0000 [ 666.806975][ C1] vkms_vblank_simulate: vblank timer overrun [ 666.972587][ T26] audit: type=1326 audit(658.626:305): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8211 comm="syz.7.662" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fa78779ce59 code=0x7ffc0000 [ 667.278232][ T26] audit: type=1326 audit(658.626:306): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8211 comm="syz.7.662" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa78779ce59 code=0x7ffc0000 [ 669.316655][ T26] audit: type=1326 audit(658.626:307): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8211 comm="syz.7.662" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa78779ce59 code=0x7ffc0000 [ 669.670031][ T26] audit: type=1326 audit(658.636:308): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8211 comm="syz.7.662" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=144 compat=0 ip=0x7fa78779ce59 code=0x7ffc0000 [ 670.778080][ T8301] loop2: detected capacity change from 0 to 128 [ 670.963866][ T8301] FAT-fs (loop2): Directory bread(block 414) failed [ 670.970886][ T8301] FAT-fs (loop2): Directory bread(block 415) failed [ 670.978250][ T8301] FAT-fs (loop2): Directory bread(block 416) failed [ 670.985012][ T8301] FAT-fs (loop2): Directory bread(block 417) failed [ 670.991627][ T8301] FAT-fs (loop2): Directory bread(block 418) failed [ 670.998336][ T8301] FAT-fs (loop2): Directory bread(block 419) failed [ 671.005173][ T8301] FAT-fs (loop2): Directory bread(block 420) failed [ 671.011797][ T8301] FAT-fs (loop2): Directory bread(block 421) failed [ 671.174121][ T26] audit: type=1326 audit(658.636:309): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8211 comm="syz.7.662" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa78779ce59 code=0x7ffc0000 [ 671.204987][ T26] audit: type=1326 audit(658.636:310): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8211 comm="syz.7.662" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa78779ce59 code=0x7ffc0000 [ 673.639979][ T8316] loop2: detected capacity change from 0 to 4096 [ 674.186008][ T8316] __ntfs_error: 16 callbacks suppressed [ 674.186095][ T8316] ntfs: (device loop2): check_mft_mirror(): $MFT and $MFTMirr (record 1) do not match. Run ntfsfix or chkdsk. [ 674.203678][ T8316] ntfs: (device loop2): load_system_files(): $MFTMirr does not match $MFT. Mounting read-only. Run ntfsfix and/or chkdsk. [ 674.217716][ T8316] ntfs: (device loop2): ntfs_read_locked_inode(): First extent of $DATA attribute has non zero lowest_vcn. [ 674.229253][ T8316] ntfs: (device loop2): ntfs_read_locked_inode(): Failed with error code -5. Marking corrupt inode 0xa as bad. Run chkdsk. [ 674.242584][ T8316] ntfs: (device loop2): load_and_init_upcase(): Failed to load $UpCase from the volume. Using default. [ 674.256300][ T8316] ntfs: volume version 3.1. [ 674.263175][ T8316] ntfs: (device loop2): ntfs_check_logfile(): Did not find any restart pages in $LogFile and it was not empty. [ 674.275272][ T8316] ntfs: (device loop2): load_system_files(): Failed to load $LogFile. Will not be able to remount read-write. Mount in Windows. [ 674.290897][ T8316] ntfs: (device loop2): ntfs_lookup_inode_by_name(): Index entry out of bounds in directory inode 0x5. [ 674.302110][ T8316] ntfs: (device loop2): check_windows_hibernation_status(): Failed to find inode number for hiberfil.sys. [ 674.313524][ T8316] ntfs: (device loop2): load_system_files(): Failed to determine if Windows is hibernated. Will not be able to remount read-write. Run chkdsk. [ 678.038048][ T8342] loop9: detected capacity change from 0 to 1024 [ 678.069979][ T8342] hfsplus: Filesystem was not cleanly unmounted, running fsck.hfsplus is recommended. mounting read-only. [ 689.524344][ T4552] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 689.610337][ T26] kauditd_printk_skb: 6 callbacks suppressed [ 689.610355][ T26] audit: type=1400 audit(689.540:327): apparmor="DENIED" operation="setprocattr" info="fscreate" error=-22 profile="unconfined" pid=8404 comm="syz.7.703" [ 690.413651][ T8425] loop0: detected capacity change from 0 to 512 [ 690.420904][ T8425] EXT4-fs: Ignoring removed bh option [ 690.440503][ T8426] futex_wake_op: syz.9.706 tries to shift op by 144; fix this program [ 691.054816][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 691.061268][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 691.102964][ T4284] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci0/hci0:201' [ 691.113139][ T4284] CPU: 0 PID: 4284 Comm: kworker/u5:4 Not tainted syzkaller #0 [ 691.120760][ T4284] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 691.130864][ T4284] Workqueue: hci0 hci_rx_work [ 691.135684][ T4284] Call Trace: [ 691.139058][ T4284] [ 691.142055][ T4284] dump_stack_lvl+0x188/0x24e [ 691.146831][ T4284] ? show_regs_print_info+0x12/0x12 [ 691.152095][ T4284] ? load_image+0x410/0x410 [ 691.156656][ T4284] sysfs_create_dir_ns+0x26a/0x290 [ 691.161854][ T4284] ? __lock_acquire+0x7bd0/0x7bd0 [ 691.166967][ T4284] ? sysfs_warn_dup+0xa0/0xa0 [ 691.171673][ T4284] ? do_raw_spin_unlock+0x11d/0x230 [ 691.176895][ T4284] kobject_add_internal+0x617/0xca0 [ 691.182147][ T4284] kobject_add+0x160/0x230 [ 691.186615][ T4284] ? kobject_init+0x1c0/0x1c0 [ 691.191314][ T4284] ? __raw_spin_lock_init+0x41/0x100 [ 691.196822][ T4284] ? klist_children_get+0x50/0x50 [ 691.201928][ T4284] ? get_device_parent+0x121/0x3e0 [ 691.207059][ T4284] device_add+0x470/0x1050 [ 691.211526][ T4284] hci_conn_add_sysfs+0xd1/0x1e0 [ 691.216548][ T4284] le_conn_complete_evt+0xf69/0x1560 [ 691.221909][ T4284] ? hci_le_big_info_adv_report_evt+0x300/0x300 [ 691.228189][ T4284] ? __mutex_unlock_slowpath+0x1b0/0x6c0 [ 691.233924][ T4284] ? mutex_unlock+0x10/0x10 [ 691.238501][ T4284] ? skb_pull_data+0xec/0x1f0 [ 691.243234][ T4284] hci_le_conn_complete_evt+0x183/0x440 [ 691.249187][ T4284] ? hci_remote_host_features_evt+0x230/0x230 [ 691.255307][ T4284] hci_event_packet+0x7b3/0x1290 [ 691.260367][ T4284] ? __lock_acquire+0x7bd0/0x7bd0 [ 691.265435][ T4284] ? bis_list+0x280/0x280 [ 691.269787][ T4284] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 691.275711][ T4284] ? kcov_remote_start+0x4b0/0x7e0 [ 691.280938][ T4284] ? nf_ct_resolve_clash+0x572/0x68f [ 691.286248][ T4284] ? hci_send_to_monitor+0x9c/0x4a0 [ 691.291483][ T4284] hci_rx_work+0x3eb/0xd40 [ 691.295943][ T4284] ? _raw_spin_unlock+0x40/0x40 [ 691.300822][ T4284] ? process_one_work+0x7b4/0x1160 [ 691.306030][ T4284] process_one_work+0x8ab/0x1160 [ 691.311032][ T4284] ? worker_detach_from_pool+0x240/0x240 [ 691.316691][ T4284] ? _raw_spin_lock_irq+0xb7/0xf0 [ 691.321743][ T4284] ? _raw_spin_lock_irqsave+0x100/0x100 [ 691.327320][ T4284] ? wq_worker_running+0x97/0x190 [ 691.332371][ T4284] worker_thread+0xaf5/0x12a0 [ 691.337080][ T4284] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 691.343016][ T4284] kthread+0x29d/0x330 [ 691.347159][ T4284] ? worker_clr_flags+0x1a0/0x1a0 [ 691.352264][ T4284] ? kthread_blkcg+0xd0/0xd0 [ 691.356994][ T4284] ret_from_fork+0x1f/0x30 [ 691.361576][ T4284] [ 691.364701][ C0] vkms_vblank_simulate: vblank timer overrun [ 691.371524][ T4284] kobject_add_internal failed for hci0:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 691.384839][ T4284] Bluetooth: hci0: failed to register connection device [ 691.516546][ T8425] EXT4-fs: failed to create workqueue [ 691.522069][ T8425] EXT4-fs (loop0): mount failed [ 694.593780][ T8460] netlink: 16 bytes leftover after parsing attributes in process `syz.1.714'. [ 694.715937][ T8462] loop2: detected capacity change from 0 to 8 [ 699.209930][ T8488] netlink: 28 bytes leftover after parsing attributes in process `syz.9.719'. [ 702.121721][ T8504] loop0: detected capacity change from 0 to 512 [ 702.129580][ T8504] EXT4-fs: Ignoring removed bh option [ 702.178897][ T8504] EXT4-fs (loop0): warning: mounting unchecked fs, running e2fsck is recommended [ 702.204077][ T8504] EXT4-fs (loop0): 1 truncate cleaned up [ 702.210244][ T8504] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 704.197934][ T4290] EXT4-fs (loop0): unmounting filesystem. [ 707.124801][ T8529] netlink: 16 bytes leftover after parsing attributes in process `syz.0.729'. [ 713.570189][ T6045] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 713.782396][ T6045] usb 3-1: Using ep0 maxpacket: 8 [ 713.816203][ T6045] usb 3-1: config 0 has an invalid interface number: 31 but max is 0 [ 714.102508][ T6045] usb 3-1: config 0 has no interface number 0 [ 714.223658][ T6045] usb 3-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16 [ 714.328169][ T6045] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 714.389811][ T8585] tipc: Started in network mode [ 714.395138][ T8585] tipc: Node identity 4, cluster identity 4711 [ 714.401382][ T8585] tipc: Node number set to 4 [ 714.418059][ T8585] syz.9.738 uses obsolete (PF_INET,SOCK_PACKET) [ 714.446677][ T8585] input: syz0 as /devices/virtual/input/input7 [ 714.454658][ T8585] input: failed to attach handler leds to device input7, error: -6 [ 715.181901][ T6045] usb 3-1: Product: syz [ 715.247148][ T6045] usb 3-1: Manufacturer: syz [ 715.251838][ T6045] usb 3-1: SerialNumber: syz [ 715.298698][ T6045] usb 3-1: config 0 descriptor?? [ 715.427695][ T8589] Bluetooth: MGMT ver 1.22 [ 716.067885][ T6045] usb 3-1: can't set config #0, error -71 [ 716.115588][ T6045] usb 3-1: USB disconnect, device number 6 [ 722.272985][ T4302] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 722.546098][ T8624] netlink: 84 bytes leftover after parsing attributes in process `syz.2.746'. [ 723.006461][ T8628] tmpfs: Unknown parameter 'qsr¬Æfú¶æÒèü³’H{"' [ 727.576010][ T8651] fuse: Unknown parameter '0x000000000000000800000000000000000000' [ 737.651491][ T8716] netlink: 16 bytes leftover after parsing attributes in process `syz.2.768'. [ 738.614999][ T4279] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 738.625200][ T4279] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 738.634330][ T4279] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 738.644116][ T4279] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 738.651730][ T4279] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 738.706465][ T4279] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 738.781182][ T8717] lo speed is unknown, defaulting to 1000 [ 740.802339][ T4279] Bluetooth: hci2: command 0x0409 tx timeout [ 742.892678][ T4279] Bluetooth: hci2: command 0x041b tx timeout [ 744.513874][ T8750] i2c i2c-0: dvb_frontend_start: failed to start kthread (-4) [ 744.979358][ T4279] Bluetooth: hci2: command 0x040f tx timeout [ 745.057239][ T8717] chnl_net:caif_netlink_parms(): no params data found [ 745.175973][ T8551] ================================================================== [ 745.184166][ T8551] BUG: KASAN: use-after-free in dvb_frontend_release+0x3f5/0x490 [ 745.192004][ T8551] Read of size 4 at addr ffff8880291c783c by task syz.9.730/8551 [ 745.199757][ T8551] [ 745.202155][ T8551] CPU: 0 PID: 8551 Comm: syz.9.730 Not tainted syzkaller #0 [ 745.209557][ T8551] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 745.219639][ T8551] Call Trace: [ 745.222938][ T8551] [ 745.225913][ T8551] dump_stack_lvl+0x188/0x24e [ 745.230615][ T8551] ? __lock_acquire+0x7bd0/0x7bd0 [ 745.235675][ T8551] ? show_regs_print_info+0x12/0x12 [ 745.240904][ T8551] ? load_image+0x410/0x410 [ 745.245466][ T8551] ? _raw_spin_lock_irqsave+0xbc/0x100 [ 745.250967][ T8551] ? __virt_addr_valid+0x188/0x540 [ 745.256201][ T8551] ? __virt_addr_valid+0x467/0x540 [ 745.261342][ T8551] ? dvb_frontend_release+0x3f5/0x490 [ 745.266731][ T8551] print_report+0xa8/0x210 [ 745.271177][ T8551] kasan_report+0x10b/0x140 [ 745.275813][ T8551] ? dvb_frontend_release+0x3f5/0x490 [ 745.281211][ T8551] dvb_frontend_release+0x3f5/0x490 [ 745.286502][ T8551] ? dvb_frontend_open+0x12d0/0x12d0 [ 745.291815][ T8551] __fput+0x20a/0x8b0 [ 745.295912][ T8551] task_work_run+0x1d0/0x260 [ 745.300527][ T8551] ? task_work_cancel+0x220/0x220 [ 745.305579][ T8551] ? do_exit+0x9d0/0x2570 [ 745.310050][ T8551] ? kmem_cache_free+0xf7/0x2a0 [ 745.314960][ T8551] do_exit+0x9d5/0x2570 [ 745.319164][ T8551] ? nfs_stat_to_errno+0x170/0x170 [ 745.324376][ T8551] ? put_task_struct+0x80/0x80 [ 745.329185][ T8551] ? lock_chain_count+0x20/0x20 [ 745.334061][ T8551] do_group_exit+0x229/0x2e0 [ 745.338767][ T8551] ? lockdep_hardirqs_on+0x94/0x140 [ 745.343984][ T8551] get_signal+0x1259/0x1340 [ 745.348609][ T8551] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 745.354636][ T8551] arch_do_signal_or_restart+0xc4/0x1310 [ 745.360489][ T8551] ? __send_signal_locked+0xb38/0xde0 [ 745.365887][ T8551] ? get_sigframe_size+0x10/0x10 [ 745.370891][ T8551] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 745.376912][ T8551] ? exit_to_user_mode_loop+0x3b/0x110 [ 745.382546][ T8551] exit_to_user_mode_loop+0x70/0x110 [ 745.387883][ T8551] exit_to_user_mode_prepare+0xee/0x180 [ 745.393473][ T8551] irqentry_exit_to_user_mode+0x5/0x30 [ 745.398959][ T8551] exc_page_fault+0x88/0x100 [ 745.403604][ T8551] asm_exc_page_fault+0x22/0x30 [ 745.408543][ T8551] RIP: 0033:0x7f565699ce61 [ 745.412994][ T8551] Code: Unable to access opcode bytes at 0x7f565699ce37. [ 745.420091][ T8551] RSP: 002b:fffffffffffffe70 EFLAGS: 00010217 [ 745.426222][ T8551] RAX: 0000000000000000 RBX: 00007f5656c16090 RCX: 00007f565699ce59 [ 745.434239][ T8551] RDX: 0000000000000000 RSI: fffffffffffffe70 RDI: 0000000000008000 [ 745.442586][ T8551] RBP: 00007f5656a32e6f R08: 0000000000000000 R09: 0000000000000000 [ 745.450614][ T8551] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 745.458606][ T8551] R13: 00007f5656c16128 R14: 00007f5656c16090 R15: 00007ffc68ba5738 [ 745.466611][ T8551] [ 745.469642][ T8551] [ 745.471974][ T8551] Allocated by task 1: [ 745.476075][ T8551] kasan_set_track+0x4b/0x70 [ 745.480686][ T8551] __kasan_kmalloc+0x8e/0xa0 [ 745.485305][ T8551] dvb_register_device+0x305/0x1dc0 [ 745.490523][ T8551] dvb_register_frontend+0x629/0x900 [ 745.495927][ T8551] vidtv_bridge_probe+0x9cf/0xf50 [ 745.501032][ T8551] platform_probe+0x137/0x1c0 [ 745.505757][ T8551] really_probe+0x24a/0xb40 [ 745.510294][ T8551] __driver_probe_device+0x1f5/0x390 [ 745.515686][ T8551] driver_probe_device+0x4f/0x420 [ 745.520728][ T8551] __driver_attach+0x43d/0x6c0 [ 745.525609][ T8551] bus_for_each_dev+0x182/0x1f0 [ 745.530512][ T8551] bus_add_driver+0x324/0x5d0 [ 745.535753][ T8551] driver_register+0x32d/0x430 [ 745.540562][ T8551] vidtv_bridge_init+0x39/0x67 [ 745.545447][ T8551] do_one_initcall+0x257/0x800 [ 745.550407][ T8551] do_initcall_level+0x13d/0x1ed [ 745.555387][ T8551] do_initcalls+0x4b/0x8a [ 745.559860][ T8551] kernel_init_freeable+0x401/0x5ab [ 745.565161][ T8551] kernel_init+0x19/0x1b0 [ 745.569517][ T8551] ret_from_fork+0x1f/0x30 [ 745.573959][ T8551] [ 745.576603][ T8551] Freed by task 8551: [ 745.580781][ T8551] kasan_set_track+0x4b/0x70 [ 745.585413][ T8551] kasan_save_free_info+0x27/0x40 [ 745.590566][ T8551] ____kasan_slab_free+0x126/0x1f0 [ 745.595919][ T8551] slab_free_freelist_hook+0x133/0x1b0 [ 745.601405][ T8551] __kmem_cache_free+0xb6/0x200 [ 745.606274][ T8551] dvb_generic_release+0x11c/0x1b0 [ 745.611483][ T8551] dvb_frontend_release+0x131/0x490 [ 745.617498][ T8551] __fput+0x20a/0x8b0 [ 745.621527][ T8551] task_work_run+0x1d0/0x260 [ 745.626149][ T8551] do_exit+0x9d5/0x2570 [ 745.630359][ T8551] do_group_exit+0x229/0x2e0 [ 745.634983][ T8551] get_signal+0x1259/0x1340 [ 745.639525][ T8551] arch_do_signal_or_restart+0xc4/0x1310 [ 745.645357][ T8551] exit_to_user_mode_loop+0x70/0x110 [ 745.650667][ T8551] exit_to_user_mode_prepare+0xee/0x180 [ 745.656271][ T8551] irqentry_exit_to_user_mode+0x5/0x30 [ 745.661751][ T8551] exc_page_fault+0x88/0x100 [ 745.666374][ T8551] asm_exc_page_fault+0x22/0x30 [ 745.671268][ T8551] [ 745.673606][ T8551] The buggy address belongs to the object at ffff8880291c7800 [ 745.673606][ T8551] which belongs to the cache kmalloc-256 of size 256 [ 745.688037][ T8551] The buggy address is located 60 bytes inside of [ 745.688037][ T8551] 256-byte region [ffff8880291c7800, ffff8880291c7900) [ 745.701263][ T8551] [ 745.703601][ T8551] The buggy address belongs to the physical page: [ 745.710084][ T8551] page:ffffea0000a47180 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x291c6 [ 745.720264][ T8551] head:ffffea0000a47180 order:1 compound_mapcount:0 compound_pincount:0 [ 745.728622][ T8551] flags: 0xfff00000010200(slab|head|node=0|zone=1|lastcpupid=0x7ff) [ 745.736718][ T8551] raw: 00fff00000010200 0000000000000000 dead000000000122 ffff888017441b40 [ 745.745328][ T8551] raw: 0000000000000000 0000000000100010 00000001ffffffff 0000000000000000 [ 745.754025][ T8551] page dumped because: kasan: bad access detected [ 745.760465][ T8551] page_owner tracks the page as allocated [ 745.766290][ T8551] page last allocated via order 1, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 1, tgid 1 (swapper/0), ts 19588490447, free_ts 0 [ 745.786135][ T8551] post_alloc_hook+0x173/0x1a0 [ 745.791001][ T8551] get_page_from_freelist+0x206b/0x2180 [ 745.796692][ T8551] __alloc_pages+0x1ec/0x4f0 [ 745.801356][ T8551] alloc_page_interleave+0x24/0x1e0 [ 745.806601][ T8551] alloc_slab_page+0x5d/0x180 [ 745.811401][ T8551] new_slab+0x87/0x2d0 [ 745.815508][ T8551] ___slab_alloc+0xbc5/0x1240 [ 745.820254][ T8551] __kmem_cache_alloc_node+0x126/0x270 [ 745.825746][ T8551] kmalloc_trace+0x26/0xe0 [ 745.830250][ T8551] bus_add_driver+0xdc/0x5d0 [ 745.834860][ T8551] driver_register+0x32d/0x430 [ 745.839644][ T8551] usb_register_driver+0x201/0x3c0 [ 745.844839][ T8551] do_one_initcall+0x257/0x800 [ 745.849706][ T8551] do_initcall_level+0x13d/0x1ed [ 745.854650][ T8551] do_initcalls+0x4b/0x8a [ 745.859017][ T8551] kernel_init_freeable+0x401/0x5ab [ 745.864246][ T8551] page_owner free stack trace missing [ 745.869638][ T8551] [ 745.872069][ T8551] Memory state around the buggy address: [ 745.878178][ T8551] ffff8880291c7700: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 745.886270][ T8551] ffff8880291c7780: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 745.894962][ T8551] >ffff8880291c7800: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 745.903041][ T8551] ^ [ 745.908944][ T8551] ffff8880291c7880: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 745.917024][ T8551] ffff8880291c7900: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 745.926916][ T8551] ================================================================== [ 746.029097][ T8763] tmpfs: Unknown parameter 'qsr¬Æfú¶æÒèü³’H{"' [ 746.101013][ T8551] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 746.108297][ T8551] CPU: 1 PID: 8551 Comm: syz.9.730 Not tainted syzkaller #0 [ 746.115616][ T8551] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 746.125699][ T8551] Call Trace: [ 746.129007][ T8551] [ 746.131987][ T8551] dump_stack_lvl+0x188/0x24e [ 746.136879][ T8551] ? memcpy+0x3c/0x60 [ 746.140928][ T8551] ? show_regs_print_info+0x12/0x12 [ 746.146206][ T8551] ? load_image+0x410/0x410 [ 746.150797][ T8551] panic+0x2d3/0x710 [ 746.154770][ T8551] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 746.161006][ T8551] ? bpf_jit_dump+0xd0/0xd0 [ 746.165586][ T8551] ? _raw_spin_unlock_irqrestore+0x10d/0x120 [ 746.171614][ T8551] ? _raw_spin_unlock+0x40/0x40 [ 746.176536][ T8551] check_panic_on_warn+0x80/0xa0 [ 746.181523][ T8551] ? dvb_frontend_release+0x3f5/0x490 [ 746.186935][ T8551] end_report+0x66/0x110 [ 746.191226][ T8551] kasan_report+0x118/0x140 [ 746.195788][ T8551] ? dvb_frontend_release+0x3f5/0x490 [ 746.201229][ T8551] dvb_frontend_release+0x3f5/0x490 [ 746.206475][ T8551] ? dvb_frontend_open+0x12d0/0x12d0 [ 746.211802][ T8551] __fput+0x20a/0x8b0 [ 746.215814][ T8551] task_work_run+0x1d0/0x260 [ 746.220445][ T8551] ? task_work_cancel+0x220/0x220 [ 746.225588][ T8551] ? do_exit+0x9d0/0x2570 [ 746.230043][ T8551] ? kmem_cache_free+0xf7/0x2a0 [ 746.234938][ T8551] do_exit+0x9d5/0x2570 [ 746.239131][ T8551] ? nfs_stat_to_errno+0x170/0x170 [ 746.244288][ T8551] ? put_task_struct+0x80/0x80 [ 746.249124][ T8551] ? lock_chain_count+0x20/0x20 [ 746.254193][ T8551] do_group_exit+0x229/0x2e0 [ 746.258827][ T8551] ? lockdep_hardirqs_on+0x94/0x140 [ 746.264413][ T8551] get_signal+0x1259/0x1340 [ 746.269083][ T8551] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 746.275098][ T8551] arch_do_signal_or_restart+0xc4/0x1310 [ 746.280856][ T8551] ? __send_signal_locked+0xb38/0xde0 [ 746.286350][ T8551] ? get_sigframe_size+0x10/0x10 [ 746.291351][ T8551] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 746.297373][ T8551] ? exit_to_user_mode_loop+0x3b/0x110 [ 746.302973][ T8551] exit_to_user_mode_loop+0x70/0x110 [ 746.308291][ T8551] exit_to_user_mode_prepare+0xee/0x180 [ 746.313871][ T8551] irqentry_exit_to_user_mode+0x5/0x30 [ 746.319362][ T8551] exc_page_fault+0x88/0x100 [ 746.323992][ T8551] asm_exc_page_fault+0x22/0x30 [ 746.328921][ T8551] RIP: 0033:0x7f565699ce61 [ 746.333372][ T8551] Code: Unable to access opcode bytes at 0x7f565699ce37. [ 746.340446][ T8551] RSP: 002b:fffffffffffffe70 EFLAGS: 00010217 [ 746.346680][ T8551] RAX: 0000000000000000 RBX: 00007f5656c16090 RCX: 00007f565699ce59 [ 746.354693][ T8551] RDX: 0000000000000000 RSI: fffffffffffffe70 RDI: 0000000000008000 [ 746.362699][ T8551] RBP: 00007f5656a32e6f R08: 0000000000000000 R09: 0000000000000000 [ 746.370695][ T8551] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 746.378694][ T8551] R13: 00007f5656c16128 R14: 00007f5656c16090 R15: 00007ffc68ba5738 [ 746.386701][ T8551] [ 746.390432][ T8551] Kernel Offset: disabled [ 746.394776][ T8551] Rebooting in 86400 seconds..