last executing test programs: 23.313874114s ago: executing program 2 (id=28): r0 = socket$nl_route(0x10, 0x3, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) r2 = openat(0xffffffffffffff9c, 0x0, 0x8040, 0x20) ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(r2, 0x40081271, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) fsopen(&(0x7f0000000280)='ntfs\x00', 0x0) r5 = gettid() r6 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$inet6_int(r2, 0x29, 0x18, &(0x7f0000000100)=0x7, 0x4) sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000001800010029270ad56f8c8b53bd7000fddbdf251d0104002dc2b6467309d26a558e4c044f16bed367c4da670e564ed2ddbb069b9800d525f37bf22aecfe2299052612984134e54d810ab38048ada35aea6ff4ed71e97d74f02057a22adcc3e81673d99f4cedccace4da9aa5ab88645a7b6cb1c88929a8e6a950cd83a4a72f5958cbbd"], 0x14}}, 0x4c0c8) tkill(r5, 0xb) r7 = openat$vcsu(0xffffffffffffff9c, &(0x7f00000001c0), 0x2000, 0x0) r8 = epoll_create(0x2) epoll_ctl$EPOLL_CTL_ADD(r8, 0x1, r7, &(0x7f0000009b80)={0x40000012}) read$FUSE(r7, &(0x7f0000000500)={0x2020}, 0x2020) epoll_pwait(r8, 0x0, 0x0, 0x2, 0x0, 0x0) r9 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r9, 0x560a, &(0x7f00000006c0)={0x4, 0x0, 0x0, 0x0, 0x132, 0x3}) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3c81968a19c5f20e62120d022001000000000700", @ANYRES32=0x0, @ANYBLOB="312400000000000014002b8030001b0000000000"], 0x3c}, 0x1, 0x0, 0x0, 0x20048054}, 0x0) socket$nl_route(0x10, 0x3, 0x0) 20.180633051s ago: executing program 2 (id=31): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x101}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = landlock_create_ruleset(0x0, 0x0, 0x0) landlock_restrict_self(r3, 0x1) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r4, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_ULP(r4, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r4, 0x11a, 0x2, &(0x7f0000000000)=@ccm_128={{0x303}, "0e57b3d487e2db32", "a9df7ccf060089d5de4d4f2c3e000009", "3e360600"}, 0x28) setsockopt$inet6_tcp_TLS_TX(r4, 0x11a, 0x1, &(0x7f0000000080)=@ccm_128={{0x303}, "f64e40992f79ecf0", "53c272d8b763f690b35605dff8a4a8d2", "021000", "72392a24199b5903"}, 0x28) r5 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000340), 0x802, 0x0) ioctl$UI_DEV_SETUP(r5, 0x405c5503, &(0x7f00000001c0)={{0x1000, 0x0, 0xffed, 0xa001}, 'syz1\x00'}) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r7 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a40)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff5653f, 0x70ad2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r8, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x81}, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000001c0)=@newtfilter={0x44, 0x2c, 0xd3f, 0x70bd26, 0x25dfdbfb, {0x0, 0x0, 0x0, r8, {0x2, 0x4}, {0x0, 0x9}, {0xf, 0x9}}, [@filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x8847}, @TCA_FLOWER_KEY_MPLS_OPTS={0x8, 0x63, 0x0, 0x1, @TCA_FLOWER_KEY_MPLS_OPTS_LSE={0x4}}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x1}, 0x20040054) 12.645240969s ago: executing program 3 (id=44): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x8e40, 0x0) close(r1) socket$netlink(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x8, 0x4}}]}}]}, 0x48}}, 0x20040084) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000003c0)=@newqdisc={0x8c, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r5, {0xffff}, {0xffff, 0xffff}, {0x2, 0x1}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x9, [0x10, 0xf, 0x6, 0xe, 0x5, 0x10, 0x9, 0xf, 0x6, 0xd, 0x3, 0x8, 0x0, 0xc, 0x5, 0x2], 0x0, [0xd883, 0xd01d, 0x7, 0x9, 0x3f, 0x6, 0x40, 0x8000, 0x4, 0x2, 0x4, 0x4, 0x2, 0x1, 0x9, 0xfffd], [0x5, 0xfeff, 0xfc01, 0x10, 0x9, 0x5, 0x3, 0x200, 0x4, 0xb6, 0xfffb, 0x80, 0x38fb, 0x3, 0x8, 0x1]}}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x400dc}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x810}, 0x0) r9 = socket$packet(0x11, 0x2, 0x300) sendto$packet(r9, 0x0, 0x0, 0x48040, &(0x7f00000001c0)={0x11, 0x7, r8, 0x1, 0x6, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}, 0x14) r10 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r12 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r12, &(0x7f0000000640)="000a18000000604000eb55000000", 0xe, 0x4000000, &(0x7f0000000380)={0x11, 0xe56930649afa540, r11, 0x1, 0xd8, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0x14) 11.548916409s ago: executing program 3 (id=47): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000480)='/dev/comedi2\x00', 0x1, 0x0) syz_open_dev$vim2m(&(0x7f0000000140), 0x200000001003, 0x2) openat$vim2m(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f0000000040)={0x0, 0x80000, 0xffffffffffffffff}) r3 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000180), 0x40c140, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r2, 0xc00c642e, &(0x7f00000001c0)={0x0, 0x0, r3}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x6, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x101000, 0x0) r4 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r4, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000280)) openat$binder_debug(0xffffffffffffff9c, 0x0, 0x0, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000480)='net/fib_triestat\x00') pread64(r5, &(0x7f000004b680)=""/102363, 0x18fdb, 0x2) pselect6(0x40, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x1ff, 0x7a, 0x0, 0x8000, 0x6, 0x3}, 0x0, &(0x7f0000000080)={0x3ff, 0x6, 0xffffffffffffffff, 0x9, 0x0, 0x12, 0x80000003}, 0x0, 0x0) ioctl$TIOCL_PASTESEL(0xffffffffffffffff, 0x541c, &(0x7f0000000000)) ioctl$COMEDI_DEVCONFIG(r1, 0x40946400, &(0x7f00000000c0)={'das16m1\x00', [0x140, 0x4, 0x7, 0x2, 0x10000007, 0x7, 0x8002, 0x7fff, 0x7, 0xffffffff, 0x1ff, 0x7, 0x3, 0xa, 0x29, 0x72ef, 0x101, 0x5, 0xffffffff, 0xfffffffa, 0x4, 0x6, 0xa2d8, 0x5, 0x1000, 0x8, 0x471, 0x7, 0x384, 0x8001, 0x4]}) sendmsg$nl_generic(r0, 0x0, 0x4000) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f00000003c0)={0x0}, &(0x7f0000000400)=0xc) ptrace$peekuser(0x3, r6, 0x45d5) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(0xffffffffffffffff, 0x84, 0x7c, &(0x7f0000000000)={0x0, 0x442, 0x7}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(0xffffffffffffffff, 0x84, 0x75, &(0x7f00000000c0)={r7, 0xc5}, &(0x7f0000000100)=0x8) r8 = socket(0x10, 0x3, 0x0) write(r8, &(0x7f0000000080)="3300000058001f000307f4f9002304000a04f55f0800010002010002170003800500000099db973b91aa057972513500b04067", 0x33) 10.528779628s ago: executing program 2 (id=49): open(&(0x7f00000004c0)='./bus\x00', 0xc2802, 0x181) quotactl_fd$Q_SETINFO(0xffffffffffffffff, 0xffffffff80000600, 0x0, 0x0) socket$nl_generic(0x11, 0x3, 0x10) syz_emit_ethernet(0x2a, &(0x7f0000000280)=ANY=[], 0x0) prlimit64(0x0, 0xc, 0x0, 0x0) socket$qrtr(0x2a, 0x2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) connect$packet(r1, &(0x7f0000000200)={0x1f, 0xf8, 0x0, 0x1, 0x2}, 0x14) shutdown(r1, 0x1) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x3) r2 = syz_genetlink_get_family_id$smc(&(0x7f0000000000), 0xffffffffffffffff) r3 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r4 = openat$qrtrtun(0xffffff9c, &(0x7f0000000040), 0x14801) signalfd(r4, &(0x7f00000000c0)={[0x2]}, 0x8) sendmsg$SMC_PNETID_DEL(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=ANY=[@ANYBLOB="14000000", @ANYRES16=r2, @ANYBLOB="270e28bd70000000000004"], 0x14}, 0x1, 0x40030000000000}, 0x4000) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) 10.468585059s ago: executing program 0 (id=50): openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, 0x0) sendmsg$key(0xffffffffffffffff, 0x0, 0x0) r1 = syz_open_dev$sndctrl(0x0, 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r1, 0xc1105517, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) setrlimit(0x1, &(0x7f0000000240)={0x0, 0xb2}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys\x00', 0x6c8183, 0x0) write(r2, &(0x7f00000000c0)='1\x00', 0x1) r3 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/bus/pci/rescan\x00', 0x1, 0x0) ioctl$DVB_DVR_DMX_DQBUF(r2, 0xc0186f40, &(0x7f0000000280)={0x9d5, 0x4, 0x4, 0x0, 0xe}) write(r3, &(0x7f00000001c0)='1', 0x1) recvmsg(0xffffffffffffffff, &(0x7f0000001480)={0x0, 0x0, &(0x7f0000000580)=[{0x0}], 0x1}, 0x123) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f0000000000)={'netdevsim0\x00', &(0x7f0000000340)=@ethtool_ringparam={0x11, 0x1, 0x80000001, 0x1, 0x7, 0x5, 0x1, 0xf, 0x5}}) mknod(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) mount(&(0x7f0000000140)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000100)='./file0\x00', &(0x7f0000000000)='btrfs\x00', 0x0, &(0x7f0000000980)='norecovery') syz_open_dev$sg(&(0x7f00000002c0), 0x0, 0x9840) ioctl$PTP_SYS_OFFSET_PRECISE(0xffffffffffffffff, 0xc0403d08, 0x0) 10.44192555s ago: executing program 3 (id=51): socket$nl_netfilter(0x10, 0x3, 0xc) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) socket$kcm(0x1e, 0x1, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) openat$sequencer(0xffffff9c, &(0x7f0000001bc0), 0x88302, 0x0) keyctl$dh_compute(0x17, &(0x7f0000000000), 0x0, 0x0, 0x0) lsetxattr$security_ima(&(0x7f0000000280)='./bus\x00', &(0x7f0000000080), &(0x7f0000000180)=ANY=[@ANYBLOB="030213"], 0xd, 0x1) pselect6(0x40, &(0x7f0000000240)={0x3, 0x0, 0x202, 0x7d, 0x10000, 0x8000, 0x4, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff, 0x6, 0xffffffffffffffff, 0x9, 0x0, 0xf, 0x80000006, 0xb06c}, 0x0, 0x0) 8.535430463s ago: executing program 2 (id=53): openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) syz_open_dev$radio(&(0x7f0000000340), 0x2, 0x2) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)}, {0x0}], 0x2) socket$inet6_tcp(0xa, 0x1, 0x0) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x1000, 0x1) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r1, &(0x7f0000003840)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r1, &(0x7f0000000040)={0x50, 0x0, r2, {0x7, 0x1f, 0x6, 0xa68d7c51df802ff5, 0xffbc, 0x6, 0x1d46, 0x0, 0x0, 0x0, 0x40}}, 0x50) r3 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x101001, 0x0) writev(r3, &(0x7f0000001500)=[{&(0x7f00000021c0)="bcc8", 0x2}], 0x1) close(r1) 8.480684134s ago: executing program 3 (id=54): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./config\x00', &(0x7f00000000c0)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config/usb_gadget/g1\x00', 0x1ff) openat(0xffffffffffffff9c, &(0x7f0000000140)='./config/usb_gadget/g1/idVendor\x00', 0x2, 0x0) openat(0xffffffffffffff9c, &(0x7f00000001c0)='./config/usb_gadget/g1/idProduct\x00', 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./config/usb_gadget/g1/strings/0x409\x00', 0x1ff) r0 = openat(0xffffffffffffff9c, 0x0, 0x2, 0x0) write(r0, &(0x7f00000002c0), 0x0) openat(0xffffffffffffff9c, &(0x7f0000000300)='./config/usb_gadget/g1/strings/0x409/manufacturer\x00', 0x2, 0x0) write(0xffffffffffffffff, &(0x7f00000003c0)='Test Gadget\x00', 0xc) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./config/usb_gadget/g1/functions/midi.usb0\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000480)='./config/usb_gadget/g1/configs/c.1/strings/0x409\x00', 0x1ff) r1 = openat(0xffffffffffffff9c, &(0x7f00000004c0)='./config/usb_gadget/g1/configs/c.1/strings/0x409/configuration\x00', 0x2, 0x0) write(r1, &(0x7f0000000500)='Conf 1\x00', 0x7) r2 = openat(0xffffffffffffff9c, &(0x7f0000000540)='./config/usb_gadget/g1/configs/c.1\x00', 0x0, 0x0) symlinkat(0x0, r2, &(0x7f00000005c0)='midi.usb0\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000600)='./config/usb_gadget/g1/configs/c.2\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000640)='./config/usb_gadget/g1/configs/c.2/strings/0x409\x00', 0x1ff) openat(0xffffffffffffff9c, &(0x7f0000000680)='./config/usb_gadget/g1/configs/c.2/strings/0x409/configuration\x00', 0x2, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000700)='./config/usb_gadget/g1/configs/c.2\x00', 0x0, 0x0) symlinkat(&(0x7f0000000580)='./config/usb_gadget/g1/functions/midi.usb0\x00', r3, &(0x7f0000000740)='midi.usb0\x00') r4 = openat(0xffffffffffffff9c, &(0x7f0000000780)='./config/usb_gadget/g1/UDC\x00', 0x2, 0x0) write(r4, &(0x7f00000007c0)='dummy_udc.0\x00', 0xb) nanosleep(&(0x7f0000000800)={0x0, 0x1dcd6500}, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000840)='./sys/bus/usb/devices/2-1/bConfigurationValue\x00', 0x2, 0x0) write(r5, &(0x7f00000008c0)='2\x00', 0x2) write(r4, &(0x7f0000000920)='\n\x00', 0x1) 8.216113872s ago: executing program 1 (id=55): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x101}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, 0x0, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = landlock_create_ruleset(0x0, 0x0, 0x0) landlock_restrict_self(r3, 0x1) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x11a, 0x2, &(0x7f0000000000)=@ccm_128={{0x303}, "0e57b3d487e2db32", "a9df7ccf060089d5de4d4f2c3e000009", "3e360600"}, 0x28) setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x11a, 0x1, &(0x7f0000000080)=@ccm_128={{0x303}, "f64e40992f79ecf0", "53c272d8b763f690b35605dff8a4a8d2", "021000", "72392a24199b5903"}, 0x28) ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x405c5503, &(0x7f00000001c0)={{0x1000, 0x0, 0xffed, 0xa001}, 'syz1\x00'}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r5 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a40)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff5653f, 0x70ad2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r6, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x81}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000001c0)=@newtfilter={0x44, 0x2c, 0xd3f, 0x70bd26, 0x25dfdbfb, {0x0, 0x0, 0x0, r6, {0x2, 0x4}, {0x0, 0x9}, {0xf, 0x9}}, [@filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x8847}, @TCA_FLOWER_KEY_MPLS_OPTS={0x8, 0x63, 0x0, 0x1, @TCA_FLOWER_KEY_MPLS_OPTS_LSE={0x4}}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x1}, 0x20040054) 8.034949207s ago: executing program 0 (id=56): openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, 0x0) sendmsg$key(0xffffffffffffffff, 0x0, 0x0) syz_open_dev$sndctrl(0x0, 0x0, 0x0) getpid() mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) setrlimit(0x1, &(0x7f0000000240)={0x0, 0xb2}) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys\x00', 0x6c8183, 0x0) write(r1, &(0x7f00000000c0)='1\x00', 0x1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/bus/pci/rescan\x00', 0x1, 0x0) ioctl$DVB_DVR_DMX_DQBUF(r1, 0xc0186f40, &(0x7f0000000280)={0x9d5, 0x4, 0x4, 0x0, 0xe}) write(r2, &(0x7f00000001c0)='1', 0x1) recvmsg(0xffffffffffffffff, &(0x7f0000001480)={0x0, 0x0, &(0x7f0000000580)=[{0x0}], 0x1}, 0x123) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f0000000000)={'netdevsim0\x00', &(0x7f0000000340)=@ethtool_ringparam={0x11, 0x1, 0x80000001, 0x1, 0x7, 0x5, 0x1, 0xf, 0x5}}) mknod(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) mount(&(0x7f0000000140)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000100)='./file0\x00', &(0x7f0000000000)='btrfs\x00', 0x0, &(0x7f0000000980)='norecovery') syz_open_dev$sg(&(0x7f00000002c0), 0x0, 0x9840) ioctl$PTP_SYS_OFFSET_PRECISE(0xffffffffffffffff, 0xc0403d08, 0x0) 6.908140278s ago: executing program 1 (id=57): prlimit64(0x0, 0xe, &(0x7f0000000100)={0x7, 0x80000001}, 0x0) fcntl$setsig(0xffffffffffffffff, 0xa, 0x11) fcntl$setlease(0xffffffffffffffff, 0x400, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x408e, &(0x7f0000000240)={[{@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x2e}}, {@min_batch_time={'min_batch_time', 0x3d, 0xfff}}, {@jqfmt_vfsv0}, {@stripe={'stripe', 0x3d, 0x4000}}, {@errors_remount}, {@data_err_abort}]}, 0x3, 0x44b, &(0x7f0000000900)="$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") r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000140), 0x311380) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TIMER(r3, 0xc0605345, &(0x7f0000000180)={0x8, 0x2, {0x0, 0x2, 0xfffffffe, 0x0, 0x5}, 0x8}) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) syz_emit_vhci(0x0, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)=0x0) signalfd4(0xffffffffffffffff, &(0x7f00000008c0)={[0x8000000008]}, 0x8, 0x800) signalfd4(0xffffffffffffffff, &(0x7f0000000080)={[0x2]}, 0x8, 0x80000) lchown(0x0, 0x0, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r4, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) r5 = inotify_init1(0x80800) inotify_add_watch(r5, &(0x7f0000000640)='.\x00', 0x80000001) r6 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x40) fallocate(r6, 0x0, 0x8e14, 0x8ffff) copy_file_range(r6, 0x0, r6, &(0x7f0000000500)=0xffff, 0x9, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42795000) syz_mount_image$udf(&(0x7f0000000000), &(0x7f0000000500)='./file1\x00', 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="00089aafc727346c3e0d8728525a2641b3b31621730c58dcf8e0ca2e6767a45a978776e9d2c689feab83a160d00a77ae5112cd4e7141cad333d7cbb69dc6b314609d3827059c11066ba0b4b95c12d2d9ff9c8896d9e247bd55f9ff578a14e0e9d0ca07693396b00d2ef44adb4858475a07d5e8fa3ef5b306fe8a5d1cd2d8e06e7f88226ece092c6aabf8870e140124d5a48670513e0c419c99b7c5105959e7a535f12694634cf272490e0000"], 0x81, 0x4ac, &(0x7f00000011c0)="$eJzs20tsG1UXwPFzPLbruPk+3Adpi6piCSRCS9skLmmrIKE8iEBqG0gaEBUPhdgJJk4cxSkkVUu7BHYsumTJlgUrxBZVYolYoCDUXemGjVeUHeiO52XXSewm8TT1/1e1dx7H7r33zMy914kFAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACIDL022NOrYdcCAAC00qWJ8Z4M4z8AAG3lMut/AACAdqJiyR+icnKurBft/YrEhfzC1ZXJkdH6L+tQUYmIZcebv4nevsyZl/vPnnPLjV+/3Y7I2MTlwfRwcX5xKVcq5bLpyYX8dDGba/gdtvr6WsftDkjPz13NzsyU0n2nMlWnV1L39+ztSg30vz8cd2MnR0ZHJwIx0dgj/+8PWW+GHxdLXhSVT374Ti+JSES23hebXDs7rcNuxHG7EZMjo3ZDCvmphWVzUiNOVKS6T+JuH7UgF1sSETH10vj2rNliYsmPojJ0uqxjImK5/XDC/mC4ofqEIWqWriLSLbsgZ4+xPWLJh6Jy53RK3nT61c5/XOR62JXDjos6939Ry/qW/Tww95N5bF54O/3GwkwxEKsR545qZnyocw+GPj600mP+bEqIJWP2HV/W8bArg5brEEvmRSX+9af2vELseelTA2ePPXs+OMM4tMn7mNhTzs3VyJgcc6YOGjF/HqHa2BYJteRPUXnwe8Le73Zyw08E2oRaUhCVf26UVWvWpVZgfe/Z7WvDna1/R2K4uLi6lJ/9eLnu+WRi8KPS8tLUdP3TlbWrFTyy2Tq2VqS5JVlSKyu+Lz4re69z1gD/q+z5tfn2un8tdNeUruD108h2w8+ZJuZRpk6qltwTlZkPDlfGGUk23TftwOR/VFRK5V/UzbST/2hlL5D/V/z+S2h16bFz+//K51ruXOLIlYPrHd+J/Js6mfy/KypDfx92PtOo5N+qiTVxXaLy3u2jTlwkbuKibnMq7ziTL+R6TOy/orL/ZzdW7NikE3vAj+01sSVR+fJOdexeJ/agH9tnYtdE5e5v9WOf9mMzJnbV5Otu2o1NmthjTmyXH3tquljIbtatJv99ovLOzdfVbfO6+Q/c/7dqSs9DOd94e7vynwocu+Xk9YqT/+gm+f9KVFb/Ouq22+5797LaZ//r59/Mlb+/XR3rTkb3+7G9jTYrbCb/+0Tl/qtrXpudtjm7foaC+X8mWl16/RpS/vcFjqWcesWb7It2VFq9NjdVKOSW2GCDDTa8jbCfTGgFM/6Pm1G931J3HuOM/52VPX/G9OBzf/wfqCk9IY3/+wPHBpxZSywqklieX4wdEkmUVq+dzM9PzeZmcwuZM/09fefP9GTOxeLu5M7farjvngQm/ydE5cZPv3rrmOr5X/35f7Km9ISU/wPBNlXNaxruirZk8t8pKv331rz15kbzf3f93/1cdendfyHl/2DgWMqpV2eTfQEAAAAAAAAAAAAAAAAAu0lSLXleVFbGX1L3O0SN/P5ftqb0hPT7X12BY9nt/16D+9WoqlONVh0AAAAAAAAAAKCVImLJN6LygpT1pjnQKXIxWOKJ9l8AAAD//16uQhc=") openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x8042, 0x60) 6.864925819s ago: executing program 4 (id=58): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x8e40, 0x0) close(r1) socket$netlink(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x8, 0x4}}]}}]}, 0x48}}, 0x20040084) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000003c0)=@newqdisc={0x8c, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r5, {0xffff}, {0xffff, 0xffff}, {0x2, 0x1}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x9, [0x10, 0xf, 0x6, 0xe, 0x5, 0x10, 0x9, 0xf, 0x6, 0xd, 0x3, 0x8, 0x0, 0xc, 0x5, 0x2], 0x0, [0xd883, 0xd01d, 0x7, 0x9, 0x3f, 0x6, 0x40, 0x8000, 0x4, 0x2, 0x4, 0x4, 0x2, 0x1, 0x9, 0xfffd], [0x5, 0xfeff, 0xfc01, 0x10, 0x9, 0x5, 0x3, 0x200, 0x4, 0xb6, 0xfffb, 0x80, 0x38fb, 0x3, 0x8, 0x1]}}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x400dc}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x810}, 0x0) r9 = socket$packet(0x11, 0x2, 0x300) sendto$packet(r9, 0x0, 0x0, 0x48040, &(0x7f00000001c0)={0x11, 0x7, r8, 0x1, 0x6, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}, 0x14) r10 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r12 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r12, &(0x7f0000000640)="000a18000000604000eb55000000", 0xe, 0x4000000, &(0x7f0000000380)={0x11, 0xe56930649afa540, r11, 0x1, 0xd8, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0x14) 6.85516133s ago: executing program 2 (id=59): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x101}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = landlock_create_ruleset(0x0, 0x0, 0x0) landlock_restrict_self(r3, 0x1) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r4, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_ULP(r4, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r4, 0x11a, 0x2, &(0x7f0000000000)=@ccm_128={{0x303}, "0e57b3d487e2db32", "a9df7ccf060089d5de4d4f2c3e000009", "3e360600"}, 0x28) setsockopt$inet6_tcp_TLS_TX(r4, 0x11a, 0x1, &(0x7f0000000080)=@ccm_128={{0x303}, "f64e40992f79ecf0", "53c272d8b763f690b35605dff8a4a8d2", "021000", "72392a24199b5903"}, 0x28) r5 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000340), 0x802, 0x0) ioctl$UI_DEV_SETUP(r5, 0x405c5503, &(0x7f00000001c0)={{0x1000, 0x0, 0xffed, 0xa001}, 'syz1\x00'}) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r7 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a40)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff5653f, 0x70ad2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r8, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x81}, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000001c0)=@newtfilter={0x44, 0x2c, 0xd3f, 0x70bd26, 0x25dfdbfb, {0x0, 0x0, 0x0, r8, {0x2, 0x4}, {0x0, 0x9}, {0xf, 0x9}}, [@filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x8847}, @TCA_FLOWER_KEY_MPLS_OPTS={0x8, 0x63, 0x0, 0x1, @TCA_FLOWER_KEY_MPLS_OPTS_LSE={0x4}}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x1}, 0x20040054) 6.85094816s ago: executing program 0 (id=60): openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) syz_open_dev$radio(&(0x7f0000000340), 0x2, 0x2) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$inet6_tcp(0xa, 0x1, 0x0) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x1000, 0x1) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r1, &(0x7f0000003840)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r1, &(0x7f0000000040)={0x50, 0x0, r2, {0x7, 0x1f, 0x6, 0xa68d7c51df802ff5, 0xffbc, 0x6, 0x1d46, 0x0, 0x0, 0x0, 0x40}}, 0x50) syz_fuse_handle_req(r1, &(0x7f0000008380)="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006340)={0x20, 0x0, 0x68cc, {0x0, 0x14}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r3 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x101001, 0x0) writev(r3, &(0x7f0000001500)=[{&(0x7f00000021c0)="bcc8", 0x2}], 0x1) close(r1) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = getpid() sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, r4, 0x93bdb000) kcmp$KCMP_EPOLL_TFD(r5, r5, 0x7, 0xffffffffffffffff, &(0x7f0000000280)={0xffffffffffffffff, r4, 0xfffffb6e}) prlimit64(r5, 0x0, &(0x7f0000000000)={0x4ffb, 0x3}, &(0x7f0000000080)) openat$procfs(0xffffffffffffff9c, &(0x7f0000004240)='/proc/cgroups\x00', 0x0, 0x0) pselect6(0x40, &(0x7f0000000240)={0x3, 0x0, 0x202, 0x5, 0x10000, 0x8000, 0x4, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff, 0x6, 0xffffffffffffffff, 0x9, 0x0, 0xf, 0x80000006, 0xb06c}, 0x0, 0x0) 6.531572578s ago: executing program 3 (id=61): syz_mount_image$ext4(&(0x7f0000000b80)='ext4\x00', &(0x7f0000000bc0)='./file0\x00', 0x0, &(0x7f0000000c00), 0x1, 0xb7e, &(0x7f0000000c40)="$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") syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) syz_open_dev$vim2m(&(0x7f0000000080), 0x2, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) timer_create(0x0, 0x0, 0x0) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f0000000040)={'netdevsim0\x00', &(0x7f00000001c0)=@ethtool_sset_info={0x37, 0x6, 0x7, [0x1, 0xffffffff, 0x400, 0x0]}}) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) pipe2(&(0x7f0000000000), 0x0) ioctl$XFS_IOC_FSGEOMETRY(0xffffffffffffffff, 0x8100587e, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_ublk_setup_io_uring(0x20, &(0x7f0000000340)={0x0, 0x1000000, 0x3900, 0xfffffffe, 0x1e5}, &(0x7f0000000100), &(0x7f0000000080), &(0x7f0000000000)) ioctl$EXT4_IOC_GETFSUUID(0xffffffffffffffff, 0x8008662c, &(0x7f0000000000)) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_DELETE(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="1400000002020108000000000000085cea5b8fdff64d6813d1a574bb81245a714b792ef47fe709acdc62"], 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x8000) connect$bt_l2cap(r4, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) 5.823981778s ago: executing program 4 (id=62): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000)={0x0, 0xb007}, 0x4) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, 0x0, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) unshare(0x28000600) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x3, 0x4, &(0x7f0000000040)=ANY=[], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94) epoll_pwait2(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000140), 0x0, 0x0) bpf$OBJ_PIN_PROG(0x6, 0x0, 0x0) fcntl$getflags(r0, 0x3) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r4, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) r5 = socket(0x2, 0x80805, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r5, 0x84, 0x84, 0x0, 0x0) r6 = syz_open_dev$loop(&(0x7f0000000180), 0x7, 0x103482) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='freezer.state\x00', 0x275a, 0x0) ioctl$LOOP_CONFIGURE(r6, 0x4c0a, &(0x7f00000002c0)={r7, 0x0, {0x2a00, 0x80010000, 0x0, 0x69a3b0a0, 0x0, 0x0, 0x0, 0x0, 0x5, "fee8a2ab78fc179fd1f8a0e91ddaaca7bd64c6a4b4e00d9683dda1af1ea89de2b7fb0a0100000000000000000300", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "90be8b1c551265406c7f306003d8a0f4bd00000014000800000000000000007f"}}) sendto$inet6(r5, &(0x7f0000000040)='D', 0x1, 0x28004044, &(0x7f0000000140)={0xa, 0x4e23, 0xfffc, @local, 0xfffffffd}, 0x1c) 5.821794848s ago: executing program 1 (id=63): socket$inet_tcp(0x2, 0x1, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETFLOWTABLE(r0, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000340)={{0x1, 0x1, 0x18, r1, {0xfffff5d4}}, './file0\x00'}) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) ioctl$PAGEMAP_SCAN(0xffffffffffffffff, 0xc0606610, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)={{0x14}, [@NFT_MSG_NEWCHAIN={0x20, 0x3, 0xa, 0x101, 0x0, 0x0, {0x5}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x14, 0x6, 0xa, 0x401, 0x0, 0x0, {0x5}}], {0x14}}, 0x5c}}, 0x0) syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) socket$inet6_tcp(0xa, 0x1, 0x0) r4 = fsopen(0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) r5 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r5, 0xc02064b2, &(0x7f0000000000)={0x7, 0x7, 0xd8f9}) clock_gettime(0x0, &(0x7f0000000180)={0x0, 0x0}) pselect6(0x40, &(0x7f0000000080)={0x5, 0x3, 0x248, 0x5d92, 0xcb3c, 0x1ce, 0x7fff, 0x2}, &(0x7f00000000c0)={0x6, 0x1, 0x6, 0x2, 0xcf69, 0x5, 0x6, 0x1}, &(0x7f0000000140)={0x3ff, 0x80, 0x5, 0x0, 0x101, 0xafc2, 0x5, 0x1}, &(0x7f00000001c0)={r6, r7+60000000}, &(0x7f0000000280)={&(0x7f0000000240)={[0x1000]}, 0x8}) r8 = fsopen(&(0x7f0000000040)='rpc_pipefs\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r8, 0x6, 0x0, 0x0, 0x0) 5.320760092s ago: executing program 0 (id=64): open(0x0, 0x18d03e, 0x0) open(&(0x7f00000004c0)='./bus\x00', 0xc2802, 0x181) quotactl_fd$Q_SETINFO(0xffffffffffffffff, 0xffffffff80000600, 0x0, 0x0) socket$nl_generic(0x11, 0x3, 0x10) syz_emit_ethernet(0x2a, &(0x7f0000000280)=ANY=[], 0x0) prlimit64(0x0, 0xc, 0x0, 0x0) socket$qrtr(0x2a, 0x2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) connect$packet(r1, &(0x7f0000000200)={0x1f, 0xf8, 0x0, 0x1, 0x2}, 0x14) shutdown(r1, 0x1) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x3) r2 = syz_genetlink_get_family_id$smc(&(0x7f0000000000), 0xffffffffffffffff) r3 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r4 = openat$qrtrtun(0xffffff9c, &(0x7f0000000040), 0x14801) signalfd(r4, &(0x7f00000000c0)={[0x2]}, 0x8) sendmsg$SMC_PNETID_DEL(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=ANY=[@ANYBLOB="14000000", @ANYRES16=r2, @ANYBLOB="270e28bd70000000000004"], 0x14}, 0x1, 0x40030000000000}, 0x4000) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) 5.052790429s ago: executing program 1 (id=65): socket$nl_generic(0x10, 0x3, 0x10) openat$comedi(0xffffffffffffff9c, &(0x7f0000000480)='/dev/comedi2\x00', 0x1, 0x0) syz_open_dev$vim2m(&(0x7f0000000140), 0x200000001003, 0x2) openat$vim2m(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f0000000040)={0x0, 0x80000, 0xffffffffffffffff}) r1 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000180), 0x40c140, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f00000001c0)={0x0, 0x0, r1}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x6, 0x100008b}, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000280)) r3 = syz_open_procfs(0x0, &(0x7f0000000480)='net/fib_triestat\x00') pread64(r3, &(0x7f000004b680)=""/102363, 0x18fdb, 0x2) 4.892337624s ago: executing program 1 (id=66): openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, 0x0) sendmsg$key(0xffffffffffffffff, 0x0, 0x0) r1 = syz_open_dev$sndctrl(0x0, 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r1, 0xc1105517, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) setrlimit(0x1, &(0x7f0000000240)={0x0, 0xb2}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys\x00', 0x6c8183, 0x0) write(r2, &(0x7f00000000c0)='1\x00', 0x1) r3 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/bus/pci/rescan\x00', 0x1, 0x0) ioctl$DVB_DVR_DMX_DQBUF(r2, 0xc0186f40, &(0x7f0000000280)={0x9d5, 0x4, 0x4, 0x0, 0xe}) write(r3, &(0x7f00000001c0)='1', 0x1) recvmsg(0xffffffffffffffff, &(0x7f0000001480)={0x0, 0x0, &(0x7f0000000580)=[{0x0}], 0x1}, 0x123) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f0000000000)={'netdevsim0\x00', &(0x7f0000000340)=@ethtool_ringparam={0x11, 0x1, 0x80000001, 0x1, 0x7, 0x5, 0x1, 0xf, 0x5}}) mknod(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) mount(&(0x7f0000000140)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000100)='./file0\x00', &(0x7f0000000000)='btrfs\x00', 0x0, &(0x7f0000000980)='norecovery') syz_open_dev$sg(&(0x7f00000002c0), 0x0, 0x9840) ioctl$PTP_SYS_OFFSET_PRECISE(0xffffffffffffffff, 0xc0403d08, 0x0) 4.819998846s ago: executing program 4 (id=67): open(&(0x7f00000004c0)='./bus\x00', 0xc2802, 0x181) quotactl_fd$Q_SETINFO(0xffffffffffffffff, 0xffffffff80000600, 0x0, 0x0) socket$nl_generic(0x11, 0x3, 0x10) syz_emit_ethernet(0x2a, &(0x7f0000000280)=ANY=[], 0x0) prlimit64(0x0, 0xc, 0x0, 0x0) socket$qrtr(0x2a, 0x2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) connect$packet(r1, &(0x7f0000000200)={0x1f, 0xf8, 0x0, 0x1, 0x2}, 0x14) shutdown(r1, 0x1) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x3) r2 = syz_genetlink_get_family_id$smc(&(0x7f0000000000), 0xffffffffffffffff) r3 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r4 = openat$qrtrtun(0xffffff9c, &(0x7f0000000040), 0x14801) signalfd(r4, &(0x7f00000000c0)={[0x2]}, 0x8) sendmsg$SMC_PNETID_DEL(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=ANY=[@ANYBLOB="14000000", @ANYRES16=r2, @ANYBLOB="270e28bd70000000000004"], 0x14}, 0x1, 0x40030000000000}, 0x4000) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) 3.557494431s ago: executing program 0 (id=68): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x101}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, 0x0, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = landlock_create_ruleset(0x0, 0x0, 0x0) landlock_restrict_self(r3, 0x1) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x11a, 0x2, &(0x7f0000000000)=@ccm_128={{0x303}, "0e57b3d487e2db32", "a9df7ccf060089d5de4d4f2c3e000009", "3e360600"}, 0x28) setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x11a, 0x1, &(0x7f0000000080)=@ccm_128={{0x303}, "f64e40992f79ecf0", "53c272d8b763f690b35605dff8a4a8d2", "021000", "72392a24199b5903"}, 0x28) ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x405c5503, &(0x7f00000001c0)={{0x1000, 0x0, 0xffed, 0xa001}, 'syz1\x00'}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r5 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a40)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff5653f, 0x70ad2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r6, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x81}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000001c0)=@newtfilter={0x44, 0x2c, 0xd3f, 0x70bd26, 0x25dfdbfb, {0x0, 0x0, 0x0, r6, {0x2, 0x4}, {0x0, 0x9}, {0xf, 0x9}}, [@filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x8847}, @TCA_FLOWER_KEY_MPLS_OPTS={0x8, 0x63, 0x0, 0x1, @TCA_FLOWER_KEY_MPLS_OPTS_LSE={0x4}}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x1}, 0x20040054) 3.555297611s ago: executing program 1 (id=69): openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) syz_open_dev$radio(&(0x7f0000000340), 0x2, 0x2) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$inet6_tcp(0xa, 0x1, 0x0) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x1000, 0x1) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r1, &(0x7f0000003840)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r1, &(0x7f0000000040)={0x50, 0x0, r2, {0x7, 0x1f, 0x6, 0xa68d7c51df802ff5, 0xffbc, 0x6, 0x1d46, 0x0, 0x0, 0x0, 0x40}}, 0x50) syz_fuse_handle_req(r1, &(0x7f0000008380)="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006340)={0x20, 0x0, 0x68cc, {0x0, 0x14}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r3 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x101001, 0x0) writev(r3, &(0x7f0000001500)=[{&(0x7f00000021c0)="bcc8", 0x2}], 0x1) close(r1) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = getpid() sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, r4, 0x93bdb000) kcmp$KCMP_EPOLL_TFD(r5, r5, 0x7, 0xffffffffffffffff, &(0x7f0000000280)={0xffffffffffffffff, r4, 0xfffffb6e}) prlimit64(r5, 0x0, &(0x7f0000000000)={0x4ffb, 0x3}, &(0x7f0000000080)) openat$procfs(0xffffffffffffff9c, &(0x7f0000004240)='/proc/cgroups\x00', 0x0, 0x0) pselect6(0x40, &(0x7f0000000240)={0x3, 0x0, 0x202, 0x5, 0x10000, 0x8000, 0x4, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff, 0x6, 0xffffffffffffffff, 0x9, 0x0, 0xf, 0x80000006, 0xb06c}, 0x0, 0x0) 3.482116123s ago: executing program 4 (id=70): openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) syz_open_dev$radio(&(0x7f0000000340), 0x2, 0x2) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$inet6_tcp(0xa, 0x1, 0x0) mknodat$loop(0xffffffffffffff9c, 0x0, 0x1000, 0x1) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r1, &(0x7f0000003840)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r1, &(0x7f0000000040)={0x50, 0x0, r2, {0x7, 0x1f, 0x6, 0xa68d7c51df802ff5, 0xffbc, 0x6, 0x1d46, 0x0, 0x0, 0x0, 0x40}}, 0x50) r3 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x101001, 0x0) writev(r3, &(0x7f0000001500)=[{&(0x7f00000021c0)="bcc8", 0x2}], 0x1) close(r1) 2.432971372s ago: executing program 3 (id=71): openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, 0x0) sendmsg$key(0xffffffffffffffff, 0x0, 0x0) syz_open_dev$sndctrl(0x0, 0x0, 0x0) getpid() mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) setrlimit(0x1, &(0x7f0000000240)={0x0, 0xb2}) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys\x00', 0x6c8183, 0x0) write(r1, &(0x7f00000000c0)='1\x00', 0x1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/bus/pci/rescan\x00', 0x1, 0x0) ioctl$DVB_DVR_DMX_DQBUF(r1, 0xc0186f40, &(0x7f0000000280)={0x9d5, 0x4, 0x4, 0x0, 0xe}) write(r2, &(0x7f00000001c0)='1', 0x1) recvmsg(0xffffffffffffffff, &(0x7f0000001480)={0x0, 0x0, &(0x7f0000000580)=[{0x0}], 0x1}, 0x123) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f0000000000)={'netdevsim0\x00', &(0x7f0000000340)=@ethtool_ringparam={0x11, 0x1, 0x80000001, 0x1, 0x7, 0x5, 0x1, 0xf, 0x5}}) mknod(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) mount(&(0x7f0000000140)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000100)='./file0\x00', &(0x7f0000000000)='btrfs\x00', 0x0, &(0x7f0000000980)='norecovery') syz_open_dev$sg(&(0x7f00000002c0), 0x0, 0x9840) ioctl$PTP_SYS_OFFSET_PRECISE(0xffffffffffffffff, 0xc0403d08, 0x0) 1.755887051s ago: executing program 4 (id=72): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x8e40, 0x0) close(r1) socket$netlink(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x8, 0x4}}]}}]}, 0x48}}, 0x20040084) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000003c0)=@newqdisc={0x8c, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r5, {0xffff}, {0xffff, 0xffff}, {0x2, 0x1}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x9, [0x10, 0xf, 0x6, 0xe, 0x5, 0x10, 0x9, 0xf, 0x6, 0xd, 0x3, 0x8, 0x0, 0xc, 0x5, 0x2], 0x0, [0xd883, 0xd01d, 0x7, 0x9, 0x3f, 0x6, 0x40, 0x8000, 0x4, 0x2, 0x4, 0x4, 0x2, 0x1, 0x9, 0xfffd], [0x5, 0xfeff, 0xfc01, 0x10, 0x9, 0x5, 0x3, 0x200, 0x4, 0xb6, 0xfffb, 0x80, 0x38fb, 0x3, 0x8, 0x1]}}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x400dc}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x810}, 0x0) r9 = socket$packet(0x11, 0x2, 0x300) sendto$packet(r9, 0x0, 0x0, 0x48040, &(0x7f00000001c0)={0x11, 0x7, r8, 0x1, 0x6, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}, 0x14) r10 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r12 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r12, &(0x7f0000000640)="000a18000000604000eb55000000", 0xe, 0x4000000, &(0x7f0000000380)={0x11, 0xe56930649afa540, r11, 0x1, 0xd8, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0x14) 1.559629636s ago: executing program 4 (id=73): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./config\x00', &(0x7f00000000c0)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config/usb_gadget/g1\x00', 0x1ff) openat(0xffffffffffffff9c, &(0x7f0000000140)='./config/usb_gadget/g1/idVendor\x00', 0x2, 0x0) openat(0xffffffffffffff9c, &(0x7f00000001c0)='./config/usb_gadget/g1/idProduct\x00', 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./config/usb_gadget/g1/strings/0x409\x00', 0x1ff) r0 = openat(0xffffffffffffff9c, 0x0, 0x2, 0x0) write(r0, &(0x7f00000002c0), 0x0) openat(0xffffffffffffff9c, &(0x7f0000000300)='./config/usb_gadget/g1/strings/0x409/manufacturer\x00', 0x2, 0x0) write(0xffffffffffffffff, &(0x7f00000003c0)='Test Gadget\x00', 0xc) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./config/usb_gadget/g1/functions/midi.usb0\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000480)='./config/usb_gadget/g1/configs/c.1/strings/0x409\x00', 0x1ff) r1 = openat(0xffffffffffffff9c, &(0x7f00000004c0)='./config/usb_gadget/g1/configs/c.1/strings/0x409/configuration\x00', 0x2, 0x0) write(r1, &(0x7f0000000500)='Conf 1\x00', 0x7) r2 = openat(0xffffffffffffff9c, &(0x7f0000000540)='./config/usb_gadget/g1/configs/c.1\x00', 0x0, 0x0) symlinkat(0x0, r2, &(0x7f00000005c0)='midi.usb0\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000600)='./config/usb_gadget/g1/configs/c.2\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000640)='./config/usb_gadget/g1/configs/c.2/strings/0x409\x00', 0x1ff) openat(0xffffffffffffff9c, &(0x7f0000000680)='./config/usb_gadget/g1/configs/c.2/strings/0x409/configuration\x00', 0x2, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000700)='./config/usb_gadget/g1/configs/c.2\x00', 0x0, 0x0) symlinkat(&(0x7f0000000580)='./config/usb_gadget/g1/functions/midi.usb0\x00', r3, &(0x7f0000000740)='midi.usb0\x00') r4 = openat(0xffffffffffffff9c, &(0x7f0000000780)='./config/usb_gadget/g1/UDC\x00', 0x2, 0x0) write(r4, &(0x7f00000007c0)='dummy_udc.0\x00', 0xb) nanosleep(&(0x7f0000000800)={0x0, 0x1dcd6500}, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000840)='./sys/bus/usb/devices/2-1/bConfigurationValue\x00', 0x2, 0x0) write(r5, &(0x7f00000008c0)='2\x00', 0x2) write(r4, &(0x7f0000000920)='\n\x00', 0x1) 1.558075846s ago: executing program 0 (id=83): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x101}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, 0x0) r3 = landlock_create_ruleset(0x0, 0x0, 0x0) landlock_restrict_self(r3, 0x1) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x11a, 0x2, &(0x7f0000000000)=@ccm_128={{0x303}, "0e57b3d487e2db32", "a9df7ccf060089d5de4d4f2c3e000009", "3e360600"}, 0x28) setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x11a, 0x1, &(0x7f0000000080)=@ccm_128={{0x303}, "f64e40992f79ecf0", "53c272d8b763f690b35605dff8a4a8d2", "021000", "72392a24199b5903"}, 0x28) ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x405c5503, &(0x7f00000001c0)={{0x1000, 0x0, 0xffed, 0xa001}, 'syz1\x00'}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r5 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a40)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff5653f, 0x70ad2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r6, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x81}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000001c0)=@newtfilter={0x44, 0x2c, 0xd3f, 0x70bd26, 0x25dfdbfb, {0x0, 0x0, 0x0, r6, {0x2, 0x4}, {0x0, 0x9}, {0xf, 0x9}}, [@filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x8847}, @TCA_FLOWER_KEY_MPLS_OPTS={0x8, 0x63, 0x0, 0x1, @TCA_FLOWER_KEY_MPLS_OPTS_LSE={0x4}}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x1}, 0x20040054) 0s ago: executing program 2 (id=74): prlimit64(0x0, 0xe, &(0x7f0000000100)={0x7, 0x80000001}, 0x0) fcntl$setsig(0xffffffffffffffff, 0xa, 0x11) fcntl$setlease(0xffffffffffffffff, 0x400, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x408e, &(0x7f0000000240)={[{@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x2e}}, {@min_batch_time={'min_batch_time', 0x3d, 0xfff}}, {@jqfmt_vfsv0}, {@stripe={'stripe', 0x3d, 0x4000}}, {@errors_remount}, {@data_err_abort}]}, 0x3, 0x44b, &(0x7f0000000900)="$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") r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000140), 0x311380) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TIMER(r3, 0xc0605345, &(0x7f0000000180)={0x8, 0x2, {0x0, 0x2, 0xfffffffe, 0x0, 0x5}, 0x8}) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) syz_emit_vhci(0x0, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)=0x0) signalfd4(0xffffffffffffffff, &(0x7f00000008c0)={[0x8000000008]}, 0x8, 0x800) signalfd4(0xffffffffffffffff, &(0x7f0000000080)={[0x2]}, 0x8, 0x80000) lchown(0x0, 0x0, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r4, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) r5 = inotify_init1(0x80800) inotify_add_watch(r5, &(0x7f0000000640)='.\x00', 0x80000001) r6 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x40) fallocate(r6, 0x0, 0x8e14, 0x8ffff) copy_file_range(r6, 0x0, r6, &(0x7f0000000500)=0xffff, 0x9, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42795000) syz_mount_image$udf(&(0x7f0000000000), &(0x7f0000000500)='./file1\x00', 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="00089aafc727346c3e0d8728525a2641b3b31621730c58dcf8e0ca2e6767a45a978776e9d2c689feab83a160d00a77ae5112cd4e7141cad333d7cbb69dc6b314609d3827059c11066ba0b4b95c12d2d9ff9c8896d9e247bd55f9ff578a14e0e9d0ca07693396b00d2ef44adb4858475a07d5e8fa3ef5b306fe8a5d1cd2d8e06e7f88226ece092c6aabf8870e140124d5a48670513e0c419c99b7c5105959e7a535f12694634cf272490e0000"], 0x81, 0x4ac, &(0x7f00000011c0)="$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") openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x8042, 0x60) kernel console output (not intermixed with test programs): no interfaces have a carrier [ 43.653554][ T3852] 8021q: adding VLAN 0 to HW filter on device bond0 [ 43.663282][ T3852] eql: remember to turn off Van-Jacobson compression on your slave devices Starting crond: OK Starting sshd: OK syzkaller Warning: Permanently added '10.128.0.224' (ED25519) to the list of known hosts. syzkaller login: [ 62.476651][ T4174] cgroup: Unknown subsys name 'net' [ 62.579760][ T4174] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 64.127367][ T4174] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k FS [ 65.597409][ T4200] chnl_net:caif_netlink_parms(): no params data found [ 65.693361][ T4196] chnl_net:caif_netlink_parms(): no params data found [ 65.723020][ T4186] chnl_net:caif_netlink_parms(): no params data found [ 65.750767][ T4187] chnl_net:caif_netlink_parms(): no params data found [ 65.776208][ T4200] bridge0: port 1(bridge_slave_0) entered blocking state [ 65.785604][ T4200] bridge0: port 1(bridge_slave_0) entered disabled state [ 65.796810][ T4200] device bridge_slave_0 entered promiscuous mode [ 65.839736][ T4200] bridge0: port 2(bridge_slave_1) entered blocking state [ 65.846843][ T4200] bridge0: port 2(bridge_slave_1) entered disabled state [ 65.855113][ T4200] device bridge_slave_1 entered promiscuous mode [ 65.874163][ T4188] chnl_net:caif_netlink_parms(): no params data found [ 65.933516][ T4200] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 65.970568][ T4200] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 65.997782][ T4196] bridge0: port 1(bridge_slave_0) entered blocking state [ 66.005427][ T4196] bridge0: port 1(bridge_slave_0) entered disabled state [ 66.013637][ T4196] device bridge_slave_0 entered promiscuous mode [ 66.021524][ T4187] bridge0: port 1(bridge_slave_0) entered blocking state [ 66.028606][ T4187] bridge0: port 1(bridge_slave_0) entered disabled state [ 66.036758][ T4187] device bridge_slave_0 entered promiscuous mode [ 66.062242][ T4196] bridge0: port 2(bridge_slave_1) entered blocking state [ 66.069554][ T4196] bridge0: port 2(bridge_slave_1) entered disabled state [ 66.077347][ T4196] device bridge_slave_1 entered promiscuous mode [ 66.084978][ T4187] bridge0: port 2(bridge_slave_1) entered blocking state [ 66.092277][ T4187] bridge0: port 2(bridge_slave_1) entered disabled state [ 66.100452][ T4187] device bridge_slave_1 entered promiscuous mode [ 66.113864][ T4186] bridge0: port 1(bridge_slave_0) entered blocking state [ 66.121113][ T4186] bridge0: port 1(bridge_slave_0) entered disabled state [ 66.129144][ T4186] device bridge_slave_0 entered promiscuous mode [ 66.164507][ T4200] team0: Port device team_slave_0 added [ 66.171108][ T4186] bridge0: port 2(bridge_slave_1) entered blocking state [ 66.178225][ T4186] bridge0: port 2(bridge_slave_1) entered disabled state [ 66.186980][ T4186] device bridge_slave_1 entered promiscuous mode [ 66.225534][ T4200] team0: Port device team_slave_1 added [ 66.241763][ T4196] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 66.259843][ T4188] bridge0: port 1(bridge_slave_0) entered blocking state [ 66.267077][ T4188] bridge0: port 1(bridge_slave_0) entered disabled state [ 66.275934][ T4188] device bridge_slave_0 entered promiscuous mode [ 66.286031][ T4187] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 66.304526][ T4196] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 66.316115][ T4186] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 66.325834][ T4188] bridge0: port 2(bridge_slave_1) entered blocking state [ 66.333596][ T4188] bridge0: port 2(bridge_slave_1) entered disabled state [ 66.342177][ T4188] device bridge_slave_1 entered promiscuous mode [ 66.351351][ T4187] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 66.361432][ T4200] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 66.368410][ T4200] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 66.394604][ T4200] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 66.416796][ T4186] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 66.441627][ T4200] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 66.448622][ T4200] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 66.475030][ T4200] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 66.504284][ T4196] team0: Port device team_slave_0 added [ 66.533951][ T4188] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 66.555043][ T4196] team0: Port device team_slave_1 added [ 66.578590][ T4187] team0: Port device team_slave_0 added [ 66.588508][ T4187] team0: Port device team_slave_1 added [ 66.596603][ T4188] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 66.639594][ T4186] team0: Port device team_slave_0 added [ 66.658645][ T4200] device hsr_slave_0 entered promiscuous mode [ 66.666055][ T4200] device hsr_slave_1 entered promiscuous mode [ 66.684348][ T4188] team0: Port device team_slave_0 added [ 66.690878][ T4196] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 66.697892][ T4196] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 66.724524][ T4196] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 66.737285][ T4186] team0: Port device team_slave_1 added [ 66.754830][ T4188] team0: Port device team_slave_1 added [ 66.764360][ T4196] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 66.771851][ T4196] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 66.798155][ T4196] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 66.825188][ T4187] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 66.832751][ T4187] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 66.858781][ T4187] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 66.878213][ T4187] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 66.885366][ T4187] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 66.911398][ T4187] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 66.934923][ T4186] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 66.942166][ T4186] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 66.968668][ T4186] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 66.989691][ T4186] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 66.996693][ T4186] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 67.023296][ T4186] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 67.049024][ T4188] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 67.056199][ T4188] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 67.082608][ T4188] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 67.095549][ T4188] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 67.102792][ T4188] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 67.129296][ T4188] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 67.184892][ T4187] device hsr_slave_0 entered promiscuous mode [ 67.192032][ T4187] device hsr_slave_1 entered promiscuous mode [ 67.199012][ T4187] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 67.207099][ T4187] Cannot create hsr debugfs directory [ 67.241919][ T4196] device hsr_slave_0 entered promiscuous mode [ 67.249691][ T4196] device hsr_slave_1 entered promiscuous mode [ 67.256246][ T4196] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 67.263929][ T4196] Cannot create hsr debugfs directory [ 67.273517][ T4186] device hsr_slave_0 entered promiscuous mode [ 67.280686][ T23] Bluetooth: hci3: command 0x0409 tx timeout [ 67.287400][ T13] Bluetooth: hci0: command 0x0409 tx timeout [ 67.294162][ T13] Bluetooth: hci1: command 0x0409 tx timeout [ 67.301377][ T13] Bluetooth: hci2: command 0x0409 tx timeout [ 67.305107][ T4186] device hsr_slave_1 entered promiscuous mode [ 67.315062][ T4186] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 67.322859][ T4186] Cannot create hsr debugfs directory [ 67.359332][ T23] Bluetooth: hci4: command 0x0409 tx timeout [ 67.371191][ T4188] device hsr_slave_0 entered promiscuous mode [ 67.378180][ T4188] device hsr_slave_1 entered promiscuous mode [ 67.385012][ T4188] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 67.392670][ T4188] Cannot create hsr debugfs directory [ 67.718701][ T4187] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 67.736356][ T4187] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 67.745375][ T4187] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 67.754758][ T4187] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 67.798239][ T4200] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 67.816046][ T4200] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 67.829117][ T4200] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 67.838241][ T4200] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 67.901529][ T4188] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 67.932783][ T4188] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 67.962689][ T4188] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 67.974685][ T4188] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 68.022969][ T4200] 8021q: adding VLAN 0 to HW filter on device bond0 [ 68.046197][ T4187] 8021q: adding VLAN 0 to HW filter on device bond0 [ 68.055151][ T4186] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 68.082850][ T4186] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 68.098917][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 68.110745][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 68.121843][ T4200] 8021q: adding VLAN 0 to HW filter on device team0 [ 68.128817][ T4186] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 68.140583][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 68.150122][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 68.173284][ T4187] 8021q: adding VLAN 0 to HW filter on device team0 [ 68.181924][ T4186] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 68.203471][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 68.212684][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 68.223254][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 68.230586][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 68.241327][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 68.253221][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 68.262377][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 68.269631][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 68.277617][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 68.307705][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 68.317094][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 68.327219][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 68.336514][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 68.346813][ T155] bridge0: port 1(bridge_slave_0) entered blocking state [ 68.354018][ T155] bridge0: port 1(bridge_slave_0) entered forwarding state [ 68.363698][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 68.372641][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 68.384552][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 68.392878][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 68.416734][ T4196] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 68.433169][ T4196] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 68.443947][ T4196] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 68.454759][ T4196] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 68.464950][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 68.476580][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 68.486651][ T155] bridge0: port 2(bridge_slave_1) entered blocking state [ 68.493786][ T155] bridge0: port 2(bridge_slave_1) entered forwarding state [ 68.502086][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 68.511203][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 68.520489][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 68.528918][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 68.550215][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 68.558854][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 68.582430][ T4188] 8021q: adding VLAN 0 to HW filter on device bond0 [ 68.593335][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 68.605568][ T4200] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 68.626999][ T4188] 8021q: adding VLAN 0 to HW filter on device team0 [ 68.673437][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 68.688724][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 68.698488][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 68.707718][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 68.717063][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 68.727874][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 68.747173][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 68.756120][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 68.765406][ T155] bridge0: port 1(bridge_slave_0) entered blocking state [ 68.772676][ T155] bridge0: port 1(bridge_slave_0) entered forwarding state [ 68.783050][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 68.793499][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 68.804158][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 68.827773][ T4187] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 68.844825][ T4187] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 68.870474][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 68.879024][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 68.897960][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 68.912425][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 68.924588][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 68.936479][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 68.952553][ T155] bridge0: port 2(bridge_slave_1) entered blocking state [ 68.959684][ T155] bridge0: port 2(bridge_slave_1) entered forwarding state [ 68.972150][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 69.005219][ T4186] 8021q: adding VLAN 0 to HW filter on device bond0 [ 69.034013][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 69.044562][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 69.054752][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 69.065348][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 69.077533][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 69.087040][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 69.109050][ T4188] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 69.121927][ T4188] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 69.148813][ T4186] 8021q: adding VLAN 0 to HW filter on device team0 [ 69.165197][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 69.176368][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 69.188913][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 69.197726][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 69.206533][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 69.215178][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 69.223328][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 69.231206][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 69.239056][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 69.257274][ T4200] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 69.271789][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 69.288267][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 69.316606][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 69.331294][ T155] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.338505][ T155] bridge0: port 1(bridge_slave_0) entered forwarding state [ 69.353940][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 69.362051][ T4236] Bluetooth: hci2: command 0x041b tx timeout [ 69.368121][ T4236] Bluetooth: hci1: command 0x041b tx timeout [ 69.368964][ T4189] Bluetooth: hci3: command 0x041b tx timeout [ 69.385382][ T4236] Bluetooth: hci0: command 0x041b tx timeout [ 69.395601][ T4196] 8021q: adding VLAN 0 to HW filter on device bond0 [ 69.429337][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 69.438294][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 69.447188][ T4189] Bluetooth: hci4: command 0x041b tx timeout [ 69.456194][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.463349][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 69.473265][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 69.480921][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 69.488399][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 69.497421][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 69.515724][ T4187] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 69.537493][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 69.554606][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 69.567234][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 69.578293][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 69.588632][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 69.611903][ T4200] device veth0_vlan entered promiscuous mode [ 69.635352][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 69.645226][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 69.661418][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 69.672010][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 69.681347][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 69.690451][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 69.699080][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 69.708968][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 69.717967][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 69.726535][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 69.736769][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 69.746025][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 69.764554][ T4200] device veth1_vlan entered promiscuous mode [ 69.783543][ T4196] 8021q: adding VLAN 0 to HW filter on device team0 [ 69.817565][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 69.826725][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 69.837179][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 69.845694][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 69.858268][ T4186] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 69.886982][ T4188] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 69.906744][ T4187] device veth0_vlan entered promiscuous mode [ 69.916273][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 69.926819][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 69.935876][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 69.957460][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 69.968078][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.975266][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 69.988258][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 69.997144][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 70.006277][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.013444][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 70.023976][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 70.033096][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 70.041163][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 70.058442][ T4200] device veth0_macvtap entered promiscuous mode [ 70.076822][ T4187] device veth1_vlan entered promiscuous mode [ 70.094958][ T4245] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 70.104642][ T4245] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 70.123063][ T4245] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 70.138990][ T4245] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 70.149091][ T4245] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 70.166272][ T4245] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 70.179054][ T4200] device veth1_macvtap entered promiscuous mode [ 70.209504][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 70.217722][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 70.228732][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 70.237182][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 70.261386][ T4200] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 70.273333][ T4200] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 70.287697][ T4186] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 70.308422][ T4245] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 70.318776][ T4245] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 70.330004][ T4245] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 70.338833][ T4245] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 70.348195][ T4245] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 70.357422][ T4245] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 70.367825][ T4245] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 70.376727][ T4245] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 70.385937][ T4245] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 70.396945][ T4245] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 70.405979][ T4245] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 70.419724][ T4200] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.428662][ T4200] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.437621][ T4200] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.446866][ T4200] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.468099][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 70.477714][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 70.488328][ T4187] device veth0_macvtap entered promiscuous mode [ 70.510568][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 70.519635][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 70.527446][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 70.538000][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 70.547732][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 70.556489][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 70.566928][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 70.585049][ T4188] device veth0_vlan entered promiscuous mode [ 70.602045][ T4187] device veth1_macvtap entered promiscuous mode [ 70.626039][ T4188] device veth1_vlan entered promiscuous mode [ 70.642107][ T4245] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 70.651656][ T4245] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 70.661667][ T4245] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 70.670890][ T4245] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 70.679639][ T4245] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 70.688243][ T4245] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 70.713654][ T4186] device veth0_vlan entered promiscuous mode [ 70.743454][ T4196] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 70.755420][ T4187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 70.766326][ T4187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.778837][ T4187] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 70.786837][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 70.796338][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 70.806435][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 70.815957][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 70.825046][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 70.834336][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 70.842791][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 70.859265][ T4186] device veth1_vlan entered promiscuous mode [ 70.891585][ T4187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 70.903828][ T4187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.916036][ T4187] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 70.938615][ T4245] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 70.951880][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 70.973019][ T4245] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 70.984030][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 70.997886][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 71.022747][ T4188] device veth0_macvtap entered promiscuous mode [ 71.048283][ T4187] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.068646][ T4187] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.085363][ T4187] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.095342][ T4187] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.106585][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 71.116301][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 71.133931][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 71.144734][ T4188] device veth1_macvtap entered promiscuous mode [ 71.157469][ T4186] device veth0_macvtap entered promiscuous mode [ 71.179116][ T4245] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 71.189012][ T4245] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 71.207301][ T4245] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 71.218139][ T4245] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 71.232012][ T4186] device veth1_macvtap entered promiscuous mode [ 71.240760][ T155] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 71.264505][ T155] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 71.274292][ T4245] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 71.288927][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.297102][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.310556][ T4245] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 71.358646][ T4188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 71.373919][ T4188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.384478][ T4188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 71.395233][ T4188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.413920][ T4188] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 71.427305][ T4188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 71.439561][ T4230] Bluetooth: hci3: command 0x040f tx timeout [ 71.445745][ T4230] Bluetooth: hci0: command 0x040f tx timeout [ 71.448049][ T4188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.468362][ T4188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 71.470398][ T4230] Bluetooth: hci1: command 0x040f tx timeout [ 71.481892][ T4188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.500311][ T4230] Bluetooth: hci2: command 0x040f tx timeout [ 71.507787][ T4188] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 71.521752][ T4230] Bluetooth: hci4: command 0x040f tx timeout [ 71.528222][ T4186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 71.540481][ T4186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.551865][ T4186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 71.563734][ T4186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.574198][ T4186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 71.584973][ T4186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.596701][ T4186] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 71.608804][ T4245] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 71.618529][ T4245] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 71.630916][ T4245] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 71.640502][ T4245] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 71.649741][ T4245] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 71.658633][ T4245] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 71.668962][ T4245] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 71.677299][ T4245] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 71.708112][ T4188] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.748114][ T4188] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.757336][ T26] audit: type=1800 audit(1785515412.506:2): pid=4260 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.1" name="idVendor" dev="configfs" ino=31352 res=0 errno=0 [ 71.778850][ T4188] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.778921][ T4188] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.793443][ T4186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 71.809163][ T4186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.819396][ T26] audit: type=1800 audit(1785515412.576:3): pid=4261 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.1" name="idProduct" dev="configfs" ino=32374 res=0 errno=0 [ 71.830370][ T4186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 71.854728][ T26] audit: type=1800 audit(1785515412.616:4): pid=4260 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.1" name="manufacturer" dev="configfs" ino=32375 res=0 errno=0 [ 71.862669][ T4186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.887324][ T4186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 71.898013][ T26] audit: type=1800 audit(1785515412.656:5): pid=4260 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.1" name="configuration" dev="configfs" ino=32380 res=0 errno=0 [ 71.917638][ T4186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.933185][ T4260] Config c/1 of g1 needs at least one function. [ 71.942222][ T4186] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 71.945129][ T26] audit: type=1800 audit(1785515412.666:6): pid=4260 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.1" name="configuration" dev="configfs" ino=32384 res=0 errno=0 [ 71.955334][ T4260] udc dummy_udc.0: failed to start g1: -22 [ 71.985814][ T4196] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 72.014608][ T1491] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 72.024880][ T1491] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 72.052531][ T4186] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.061868][ T26] audit: type=1800 audit(1785515412.696:7): pid=4260 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.1" name="UDC" dev="configfs" ino=32386 res=0 errno=0 [ 72.088248][ T4186] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.097979][ T4186] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.114710][ T4186] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.195356][ T1491] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 72.205476][ T1491] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 72.234712][ T4255] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 72.325973][ T155] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 72.350771][ T155] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 72.358970][ T4255] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 72.373629][ T4255] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 72.383247][ T4245] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 72.395571][ T4245] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 72.471509][ T154] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 72.490157][ T154] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 72.514377][ T4255] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 72.581663][ T4272] loop2: detected capacity change from 0 to 512 [ 72.591142][ T4255] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 72.600428][ T4255] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 72.611475][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 72.618862][ T1491] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 72.634111][ T1491] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 72.642822][ T1491] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 72.666757][ T4245] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 72.686609][ T4245] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 72.702636][ T4272] EXT4-fs (loop2): ea_inode feature is not supported for Hurd [ 72.936738][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 72.959023][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 72.974597][ T4196] device veth0_vlan entered promiscuous mode [ 73.496208][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 73.542862][ T4233] Bluetooth: hci1: command 0x0419 tx timeout [ 73.717378][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 73.759780][ T4233] Bluetooth: hci0: command 0x0419 tx timeout [ 73.765967][ T4233] Bluetooth: hci3: command 0x0419 tx timeout [ 73.773383][ T4230] Bluetooth: hci4: command 0x0419 tx timeout [ 73.779712][ T4230] Bluetooth: hci2: command 0x0419 tx timeout [ 73.859262][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #108!!! [ 74.152609][ T4196] device veth1_vlan entered promiscuous mode [ 74.679267][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #18a!!! [ 74.831127][ T4294] loop3: detected capacity change from 0 to 512 [ 74.855734][ T4294] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 74.869611][ T4294] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 75.341378][ T4297] loop0: detected capacity change from 0 to 256 [ 75.595248][ T4297] exfat: Deprecated parameter 'utf8' [ 75.657559][ T4297] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x265d2142, utbl_chksum : 0xe619d30d) [ 75.710489][ T4294] EXT4-fs (loop3): 1 truncate cleaned up [ 75.716200][ T4294] EXT4-fs (loop3): mounted filesystem without journal. Opts: debug_want_extra_isize=0x000000000000002e,min_batch_time=0x0000000000000fff,jqfmt=vfsv0,stripe=0x0000000000004000,errors=remount-ro,data_err=abort,. Quota mode: none. [ 76.001924][ T4295] loop2: detected capacity change from 0 to 4096 [ 76.218813][ T4290] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 76.333923][ T4301] loop1: detected capacity change from 0 to 4096 [ 76.346171][ T4295] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 76.358258][ T4290] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 76.471970][ T4301] ntfs3: loop1: Different NTFS' sector size (4096) and media sector size (512) [ 76.632719][ T4196] device veth0_macvtap entered promiscuous mode [ 76.686035][ T4196] device veth1_macvtap entered promiscuous mode [ 76.740347][ T4313] loop0: detected capacity change from 0 to 8 [ 76.835454][ T4313] SQUASHFS error: Unable to read inode 0x2000 [ 76.845432][ T4196] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 76.875973][ T4196] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.902364][ T4196] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 76.916797][ T4196] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.955903][ T4196] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 76.988332][ T4196] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.004952][ T4196] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 77.015888][ T4196] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.049561][ T4196] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 77.067684][ T4308] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 77.078953][ T4308] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 77.141671][ T4308] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 77.428860][ T4196] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 77.775134][ T4196] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.935561][ T4196] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 78.124574][ T4196] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 78.281433][ T4196] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 78.295409][ T4196] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 78.307671][ T4196] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 78.331558][ T4323] configfs-gadget gadget: uvc: uvc_function_bind() [ 78.338331][ T4196] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 78.363769][ T4196] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 78.547141][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 78.562237][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 78.600147][ T4196] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.691649][ T4196] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.700464][ T4196] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.709197][ T4196] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.040029][ T4267] Bluetooth: hci4: command 0x0405 tx timeout [ 82.169297][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #208!!! [ 83.674786][ T155] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 83.705655][ T155] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 84.879946][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 84.902578][ T4280] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 84.970926][ T4280] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 84.987039][ T4364] loop0: detected capacity change from 0 to 4096 [ 84.995619][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 86.120375][ T4364] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 86.662109][ T1108] cfg80211: failed to load regulatory.db [ 87.443376][ T4392] loop0: detected capacity change from 0 to 128 [ 88.149260][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #08!!! [ 88.159276][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #0a!!! [ 88.169271][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #8a!!! [ 88.179272][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #8a!!! [ 88.199278][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #18a!!! [ 88.209267][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #18a!!! [ 88.219263][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #18a!!! [ 88.700927][ T4393] sched: RT throttling activated [ 89.711615][ T4395] loop4: detected capacity change from 0 to 2048 [ 89.755731][ T4392] FAT-fs (loop0): Directory bread(block 414) failed [ 89.762905][ T4392] FAT-fs (loop0): Directory bread(block 415) failed [ 89.769601][ T4392] FAT-fs (loop0): Directory bread(block 416) failed [ 89.776259][ T4392] FAT-fs (loop0): Directory bread(block 417) failed [ 89.782956][ T4392] FAT-fs (loop0): Directory bread(block 418) failed [ 89.789661][ T4392] FAT-fs (loop0): Directory bread(block 419) failed [ 89.796330][ T4392] FAT-fs (loop0): Directory bread(block 420) failed [ 89.803084][ T4392] FAT-fs (loop0): Directory bread(block 421) failed [ 90.280762][ T4395] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 90.354563][ T4403] fuse: Bad value for 'fd' [ 90.458054][ T26] audit: type=1800 audit(1785515431.216:8): pid=4388 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.5" name="file1" dev="loop4" ino=1415 res=0 errno=0 [ 90.583897][ T4407] genirq: Flags mismatch irq 4. 00000000 (das16m1) vs. 00000000 (ttyS0) [ 90.598398][ T4407] netlink: 'syz.0.30': attribute type 3 has an invalid length. [ 97.777979][ T4445] device syzkaller0 entered promiscuous mode [ 99.719170][ T4462] netlink: 'syz.3.47': attribute type 3 has an invalid length. [ 102.438889][ T26] audit: type=1800 audit(1785515443.196:9): pid=4479 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.54" name="idVendor" dev="configfs" ino=33152 res=0 errno=0 [ 102.495727][ T26] audit: type=1800 audit(1785515443.226:10): pid=4479 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.54" name="idProduct" dev="configfs" ino=33153 res=0 errno=0 [ 102.579449][ T4482] configfs-gadget gadget: uvc: uvc_function_unbind() [ 103.372006][ T26] audit: type=1800 audit(1785515443.226:11): pid=4479 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.54" name="manufacturer" dev="configfs" ino=33154 res=0 errno=0 [ 103.576516][ T26] audit: type=1800 audit(1785515443.236:12): pid=4479 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.54" name="configuration" dev="configfs" ino=33155 res=0 errno=0 [ 103.605839][ T4494] loop1: detected capacity change from 0 to 512 [ 103.677812][ T4495] device syzkaller0 entered promiscuous mode [ 103.757200][ T26] audit: type=1800 audit(1785515443.236:13): pid=4479 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.54" name="configuration" dev="configfs" ino=33156 res=0 errno=0 [ 103.774908][ T4494] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 103.778623][ T26] audit: type=1800 audit(1785515443.246:14): pid=4479 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.54" name="UDC" dev="configfs" ino=33157 res=0 errno=0 [ 103.854058][ T4494] EXT4-fs (loop1): 1 truncate cleaned up [ 103.861341][ T4494] EXT4-fs (loop1): mounted filesystem without journal. Opts: debug_want_extra_isize=0x000000000000002e,min_batch_time=0x0000000000000fff,jqfmt=vfsv0,stripe=0x0000000000004000,errors=remount-ro,data_err=abort,. Quota mode: none. [ 104.623547][ T4505] loop3: detected capacity change from 0 to 4096 [ 104.732801][ T4505] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 108.649570][ T4550] device syzkaller0 entered promiscuous mode [ 110.321043][ T26] audit: type=1800 audit(1785515451.086:15): pid=4560 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.73" name="idVendor" dev="configfs" ino=33291 res=0 errno=0 [ 110.355465][ T4560] configfs-gadget gadget: uvc: uvc_function_bind() [ 110.362366][ T4560] configfs-gadget gadget: uvc: Unable to allocate streaming EP [ 110.370569][ T4560] ================================================================== [ 110.378969][ T4560] BUG: KASAN: slab-out-of-bounds in dummy_free_request+0x3b/0x70 [ 110.386771][ T4560] Read of size 8 at addr ffff88802bc8c2f0 by task syz.4.73/4560 [ 110.394444][ T4560] [ 110.396814][ T4560] CPU: 0 PID: 4560 Comm: syz.4.73 Not tainted syzkaller #0 [ 110.404050][ T4560] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 110.414169][ T4560] Call Trace: [ 110.415221][ T26] audit: type=1800 audit(1785515451.106:16): pid=4560 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.73" name="idProduct" dev="configfs" ino=33292 res=0 errno=0 [ 110.417488][ T4560] [ 110.417535][ T4560] dump_stack_lvl+0x188/0x250 [ 110.417575][ T4560] ? show_regs_print_info+0x20/0x20 [ 110.450609][ T4560] ? _printk+0xda/0x130 [ 110.454815][ T4560] ? dummy_free_request+0x3b/0x70 [ 110.459899][ T4560] ? load_image+0x410/0x410 [ 110.464455][ T4560] ? _dev_info+0x11b/0x170 [ 110.468914][ T4560] ? __mutex_unlock_slowpath+0x1b0/0x6c0 [ 110.474597][ T4560] print_address_description+0x60/0x2d0 [ 110.480193][ T4560] ? dummy_free_request+0x3b/0x70 [ 110.485305][ T4560] kasan_report+0xdf/0x130 [ 110.489787][ T4560] ? dummy_free_request+0x3b/0x70 [ 110.494857][ T4560] ? rcu_is_watching+0x11/0xa0 [ 110.499667][ T4560] dummy_free_request+0x3b/0x70 [ 110.504565][ T4560] uvc_function_bind+0xe24/0x12d0 [ 110.509692][ T4560] usb_add_function+0x2d9/0x980 [ 110.514593][ T4560] configfs_composite_bind+0xa02/0xf60 [ 110.520106][ T4560] ? os_desc_qw_sign_store+0x130/0x130 [ 110.525618][ T4560] udc_bind_to_driver+0x203/0x5f0 [ 110.530702][ T4560] usb_gadget_probe_driver+0x1fb/0x380 [ 110.536226][ T4560] gadget_dev_desc_UDC_store+0x1ba/0x2e0 [ 110.541936][ T4560] configfs_write_iter+0x30b/0x400 [ 110.547112][ T4560] ? gadget_dev_desc_UDC_show+0x80/0x80 [ 110.552753][ T4560] vfs_write+0x748/0xd70 [ 110.557189][ T4560] ? file_end_write+0x250/0x250 [ 110.562327][ T4560] ? mutex_lock_nested+0x17/0x20 [ 110.567320][ T4560] ? __fdget_pos+0x2bf/0x370 [ 110.571995][ T4560] ? ksys_write+0x70/0x260 [ 110.576496][ T4560] ksys_write+0x153/0x260 [ 110.580882][ T4560] ? __ia32_sys_read+0x80/0x80 [ 110.585783][ T4560] ? lockdep_hardirqs_on+0x94/0x140 [ 110.591030][ T4560] do_syscall_64+0x4c/0xa0 [ 110.595488][ T4560] ? clear_bhb_loop+0x30/0x80 [ 110.599172][ T26] audit: type=1800 audit(1785515451.106:17): pid=4560 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.73" name="manufacturer" dev="configfs" ino=33293 res=0 errno=0 [ 110.620648][ T4560] ? clear_bhb_loop+0x30/0x80 [ 110.620687][ T4560] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 110.620730][ T4560] RIP: 0033:0x7ff253e44019 [ 110.620754][ T4560] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 110.620774][ T4560] RSP: 002b:00007ff25209c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 110.620802][ T4560] RAX: ffffffffffffffda RBX: 00007ff2540cbfa0 RCX: 00007ff253e44019 [ 110.620819][ T4560] RDX: 000000000000000b RSI: 00002000000007c0 RDI: 000000000000000a [ 110.620834][ T4560] RBP: 00007ff253edb00c R08: 0000000000000000 R09: 0000000000000000 [ 110.620850][ T4560] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 110.620864][ T4560] R13: 00007ff2540cc038 R14: 00007ff2540cbfa0 R15: 00007ffe3445fdf8 [ 110.620899][ T4560] [ 110.620908][ T4560] [ 110.620913][ T4560] Allocated by task 4323: [ 110.620924][ T4560] __kasan_kmalloc+0xaf/0xe0 [ 110.620948][ T4560] usb_gstrings_attach+0xe4/0xd80 [ 110.620971][ T4560] uvc_function_bind+0x5ba/0x12d0 [ 110.621002][ T4560] usb_add_function+0x2d9/0x980 [ 110.621024][ T4560] configfs_composite_bind+0xa02/0xf60 [ 110.621044][ T4560] udc_bind_to_driver+0x203/0x5f0 [ 110.621065][ T4560] usb_gadget_probe_driver+0x1fb/0x380 [ 110.621087][ T4560] gadget_dev_desc_UDC_store+0x1ba/0x2e0 [ 110.621107][ T4560] configfs_write_iter+0x30b/0x400 [ 110.621127][ T4560] vfs_write+0x748/0xd70 [ 110.621146][ T4560] ksys_write+0x153/0x260 [ 110.621165][ T4560] do_syscall_64+0x4c/0xa0 [ 110.621183][ T4560] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 110.621205][ T4560] [ 110.621210][ T4560] Freed by task 4482: [ 110.621220][ T4560] kasan_set_track+0x4b/0x70 [ 110.621247][ T4560] kasan_set_free_info+0x1f/0x40 [ 110.621271][ T4560] ____kasan_slab_free+0xd5/0x110 [ 110.621293][ T4560] slab_free_freelist_hook+0xec/0x170 [ 110.621314][ T4560] kfree+0xef/0x2a0 [ 110.621332][ T4560] composite_dev_cleanup+0x156/0x6c0 [ 110.621356][ T4560] configfs_composite_unbind+0xa8/0x1c0 [ 110.621377][ T4560] usb_gadget_remove_driver+0x15c/0x350 [ 110.621399][ T4560] usb_gadget_unregister_driver+0x15d/0x4c0 [ 110.831768][ T4560] gadget_dev_desc_UDC_store+0x174/0x2e0 [ 110.837411][ T4560] configfs_write_iter+0x30b/0x400 [ 110.842562][ T4560] vfs_write+0x748/0xd70 [ 110.846819][ T4560] ksys_write+0x153/0x260 [ 110.851159][ T4560] do_syscall_64+0x4c/0xa0 [ 110.855610][ T4560] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 110.861533][ T4560] [ 110.863872][ T4560] The buggy address belongs to the object at ffff88802bc8c200 [ 110.863872][ T4560] which belongs to the cache kmalloc-128 of size 128 [ 110.877961][ T4560] The buggy address is located 112 bytes to the right of [ 110.877961][ T4560] 128-byte region [ffff88802bc8c200, ffff88802bc8c280) [ 110.891889][ T4560] The buggy address belongs to the page: [ 110.897704][ T4560] page:ffffea0000af2300 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x2bc8c [ 110.907860][ T4560] flags: 0xfff00000000200(slab|node=0|zone=1|lastcpupid=0x7ff) [ 110.915465][ T4560] raw: 00fff00000000200 ffffea00017f1040 0000000400000004 ffff888016c418c0 [ 110.924100][ T4560] raw: 0000000000000000 0000000000100010 00000001ffffffff 0000000000000000 [ 110.932712][ T4560] page dumped because: kasan: bad access detected [ 110.939606][ T4560] page_owner tracks the page as allocated [ 110.945329][ T4560] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x112cc0(GFP_USER|__GFP_NOWARN|__GFP_NORETRY), pid 4333, ts 78322404481, free_ts 78274218728 [ 110.961308][ T4560] get_page_from_freelist+0x24f6/0x2670 [ 110.967080][ T4560] __alloc_pages+0x1ee/0x480 [ 110.971687][ T4560] new_slab+0xb6/0x4b0 [ 110.975789][ T4560] ___slab_alloc+0x807/0xdd0 [ 110.980386][ T4560] __kmalloc_node+0x142/0x3a0 [ 110.985075][ T4560] memcg_alloc_page_obj_cgroups+0x7d/0x120 [ 110.990990][ T4560] slab_post_alloc_hook+0xba/0x380 [ 110.996112][ T4560] kmem_cache_alloc_trace+0x165/0x290 [ 111.001513][ T4560] fuse_file_alloc+0x52/0x250 [ 111.006210][ T4560] fuse_file_open+0x16e/0x8d0 [ 111.010890][ T4560] fuse_open_common+0x33a/0x700 [ 111.015763][ T4560] do_dentry_open+0x7f7/0xf90 [ 111.020488][ T4560] path_openat+0x2718/0x2fb0 [ 111.025122][ T4560] do_filp_open+0x1df/0x400 [ 111.029637][ T4560] do_sys_openat2+0x14b/0x500 [ 111.034339][ T4560] __x64_sys_openat+0x135/0x160 [ 111.039218][ T4560] page last free stack trace: [ 111.043918][ T4560] free_unref_page_prepare+0x637/0x6c0 [ 111.049389][ T4560] free_unref_page+0x8f/0x2a0 [ 111.054080][ T4560] qlist_free_all+0x35/0x90 [ 111.058583][ T4560] kasan_quarantine_reduce+0x150/0x160 [ 111.064044][ T4560] __kasan_slab_alloc+0x2f/0xc0 [ 111.068917][ T4560] slab_post_alloc_hook+0x4c/0x380 [ 111.074038][ T4560] __kmalloc+0x189/0x340 [ 111.078303][ T4560] load_elf_binary+0x2b9/0x2910 [ 111.083179][ T4560] bprm_execve+0xa8d/0x1740 [ 111.087695][ T4560] kernel_execve+0x808/0x8e0 [ 111.092307][ T4560] call_usermodehelper_exec_async+0x207/0x350 [ 111.098394][ T4560] ret_from_fork+0x1f/0x30 [ 111.102945][ T4560] [ 111.105416][ T4560] Memory state around the buggy address: [ 111.111055][ T4560] ffff88802bc8c180: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 111.119124][ T4560] ffff88802bc8c200: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 111.127191][ T4560] >ffff88802bc8c280: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 111.135293][ T4560] ^ [ 111.143012][ T4560] ffff88802bc8c300: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 111.151074][ T4560] ffff88802bc8c380: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 111.159316][ T4560] ================================================================== [ 111.167409][ T4560] Disabling lock debugging due to kernel taint [ 111.247673][ T4560] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 111.252881][ T4562] loop2: detected capacity change from 0 to 512 [ 111.255007][ T4560] CPU: 1 PID: 4560 Comm: syz.4.73 Tainted: G B syzkaller #0 [ 111.255031][ T4560] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 111.277380][ T4562] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 111.279931][ T4560] Call Trace: [ 111.279940][ T4560] [ 111.279948][ T4560] dump_stack_lvl+0x188/0x250 [ 111.300777][ T4560] ? show_regs_print_info+0x20/0x20 [ 111.306017][ T4560] ? load_image+0x410/0x410 [ 111.307310][ T26] audit: type=1800 audit(1785515451.116:18): pid=4560 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.73" name="configuration" dev="configfs" ino=33294 res=0 errno=0 [ 111.310562][ T4560] panic+0x2f8/0x850 [ 111.310590][ T4560] ? bpf_jit_dump+0xd0/0xd0 [ 111.339511][ T4560] ? _raw_spin_unlock_irqrestore+0x10d/0x120 [ 111.345535][ T4560] ? _raw_spin_unlock+0x40/0x40 [ 111.350429][ T4560] ? print_memory_metadata+0x314/0x400 [ 111.355937][ T4560] ? dummy_free_request+0x3b/0x70 [ 111.361006][ T4560] check_panic_on_warn+0x80/0xa0 [ 111.365975][ T4560] ? dummy_free_request+0x3b/0x70 [ 111.371039][ T4560] end_report+0x6d/0xf0 [ 111.375227][ T4560] kasan_report+0x102/0x130 [ 111.379772][ T4560] ? dummy_free_request+0x3b/0x70 [ 111.384834][ T4560] ? rcu_is_watching+0x11/0xa0 [ 111.389629][ T4560] dummy_free_request+0x3b/0x70 [ 111.394550][ T4560] uvc_function_bind+0xe24/0x12d0 [ 111.399624][ T4560] usb_add_function+0x2d9/0x980 [ 111.404544][ T4560] configfs_composite_bind+0xa02/0xf60 [ 111.410041][ T4560] ? os_desc_qw_sign_store+0x130/0x130 [ 111.415625][ T4560] udc_bind_to_driver+0x203/0x5f0 [ 111.420682][ T4560] usb_gadget_probe_driver+0x1fb/0x380 [ 111.426185][ T4560] gadget_dev_desc_UDC_store+0x1ba/0x2e0 [ 111.431856][ T4560] configfs_write_iter+0x30b/0x400 [ 111.437003][ T4560] ? gadget_dev_desc_UDC_show+0x80/0x80 [ 111.443120][ T4560] vfs_write+0x748/0xd70 [ 111.445761][ T26] audit: type=1800 audit(1785515451.116:19): pid=4560 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.73" name="configuration" dev="configfs" ino=33295 res=0 errno=0 [ 111.447402][ T4560] ? file_end_write+0x250/0x250 [ 111.472912][ T4560] ? mutex_lock_nested+0x17/0x20 [ 111.477885][ T4560] ? __fdget_pos+0x2bf/0x370 [ 111.482516][ T4560] ? ksys_write+0x70/0x260 [ 111.486970][ T4560] ksys_write+0x153/0x260 [ 111.491344][ T4560] ? __ia32_sys_read+0x80/0x80 [ 111.496174][ T4560] ? lockdep_hardirqs_on+0x94/0x140 [ 111.501416][ T4560] do_syscall_64+0x4c/0xa0 [ 111.505883][ T4560] ? clear_bhb_loop+0x30/0x80 [ 111.510595][ T4560] ? clear_bhb_loop+0x30/0x80 [ 111.515319][ T4560] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 111.521252][ T4560] RIP: 0033:0x7ff253e44019 [ 111.525700][ T4560] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 111.541204][ T26] audit: type=1800 audit(1785515451.116:20): pid=4560 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.73" name="UDC" dev="configfs" ino=33296 res=0 errno=0 [ 111.545332][ T4560] RSP: 002b:00007ff25209c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 111.573493][ T4560] RAX: ffffffffffffffda RBX: 00007ff2540cbfa0 RCX: 00007ff253e44019 [ 111.581501][ T4560] RDX: 000000000000000b RSI: 00002000000007c0 RDI: 000000000000000a [ 111.589511][ T4560] RBP: 00007ff253edb00c R08: 0000000000000000 R09: 0000000000000000 [ 111.597511][ T4560] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 111.605555][ T4560] R13: 00007ff2540cc038 R14: 00007ff2540cbfa0 R15: 00007ffe3445fdf8 [ 111.613567][ T4560] [ 111.616860][ T4560] Kernel Offset: disabled [ 111.621221][ T4560] Rebooting in 86400 seconds..