last executing test programs: 28m22.221608565s ago: executing program 32 (id=143): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r3}, 0x10) socket$inet(0x2, 0x3, 0x5) socket(0x10, 0x803, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) r4 = syz_open_dev$I2C(&(0x7f0000000000), 0x0, 0x0) ioctl$I2C_SLAVE(r4, 0x703, 0x1c4) r5 = socket$pppl2tp(0x18, 0x1, 0x1) socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r5, 0x0, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_GET(r6, 0x0, 0x8000) creat(&(0x7f0000000240)='./file0/bus\x00', 0x0) 27m54.94961184s ago: executing program 33 (id=183): r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f0000000000)={0x18, 0x0, {0x7, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x35}, 'macvlan1\x00'}}, 0x1e) sendmmsg(r0, &(0x7f00000006c0)=[{{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000380)='>', 0x1}], 0x1, &(0x7f00000011c0)=ANY=[], 0x210}}], 0x1, 0x40884) recvmmsg(r0, &(0x7f0000000900)=[{{0x0, 0xfffffffffffffe1f, 0x0}, 0x1}], 0x3fffffffffffd3c, 0x40018003, 0x0) 26m8.207033971s ago: executing program 34 (id=394): socket$nl_crypto(0x10, 0x3, 0x15) bpf$PROG_LOAD(0x5, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000002000)=""/102400, 0x19000) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0) r1 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r1, &(0x7f0000000400)={0x18, 0x0, {0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xa}, 'lo\x00'}}, 0x1e) ioctl$PPPIOCGCHAN(r1, 0x80047437, &(0x7f0000000080)) sendmmsg(r1, &(0x7f0000001640)=[{{0x0, 0x0, 0x0}}], 0x34000, 0x0) 25m29.801333619s ago: executing program 35 (id=468): r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r2, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000240)=ANY=[@ANYBLOB="380000001000390400"/20, @ANYRES32=r3, @ANYBLOB="059900f3ffffff111800128008000100677470000c000280050005"], 0x38}, 0x1, 0x0, 0x0, 0x80}, 0x8000) sendto$packet(r0, &(0x7f0000000540)='O[S', 0x3, 0x4c0c0, &(0x7f0000000200)={0x11, 0x86dd, r3}, 0x14) 23m10.601925091s ago: executing program 36 (id=773): socket(0x10, 0x3, 0x0) unshare(0x6a040000) connect$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x4e20, @remote}, 0x10) sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0x0) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x17, &(0x7f0000000140)=0xec62, 0x4) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4000840) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) syz_genetlink_get_family_id$l2tp(0x0, 0xffffffffffffffff) modify_ldt$write(0x1, &(0x7f0000000000)={0xfff}, 0x10) modify_ldt$write(0x1, &(0x7f0000000000)={0x80, 0x0, 0x400}, 0x10) sendmsg$L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, 0x0, 0x0) openat$sw_sync(0xffffff9c, &(0x7f0000000040), 0x80, 0x0) syz_emit_ethernet(0x46, &(0x7f0000002e80)=ANY=[@ANYBLOB="bbbbbbbbbbbbaaaaaaaaaabb86dd60122d9200103afffe8000000000000000000000000000b3ff0200"/53], 0x0) openat$vicodec0(0xffffff9c, 0x0, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000040)=ANY=[@ANYRES16], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x100}, 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 20m41.426051743s ago: executing program 1 (id=1146): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000ff2000/0xe000)=nil, 0xe000}, 0x1}) r4 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'veth1_to_bridge\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000000c0)=@newqdisc={0x48, 0x24, 0xf0b, 0x8070bd2a, 0x0, {0x60, 0x0, 0x0, r6, {0x0, 0xc}, {0xffff, 0xffff}, {0x0, 0xb}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x18, 0x2, [@TCA_CAKE_BASE_RATE64={0xc, 0x2, 0x3b9aca00}, @TCA_CAKE_DIFFSERV_MODE={0x8, 0x3, 0x4}]}}]}, 0x48}}, 0x0) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) r7 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) syz_open_pts(r7, 0x141601) socket$nl_netfilter(0x10, 0x3, 0xc) shmget(0x3, 0x3000, 0x78001622, &(0x7f0000ffb000/0x3000)=nil) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xd, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() 20m39.861859257s ago: executing program 1 (id=1149): ioperm(0x0, 0xf1, 0x7) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000009c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r4, 0x7a7, &(0x7f0000000080)=0xa0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r4, 0x7a0, &(0x7f0000000000)={@my=0x0}) ioctl$IOCTL_VMCI_DATAGRAM_SEND(r4, 0x7ab, &(0x7f0000000280)={&(0x7f0000000780)={{@my=0x0}, {@my=0x0, 0x800000}, 0x400, "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"}, 0x418}) ioctl$IOCTL_VMCI_NOTIFICATIONS_RECEIVE(r4, 0x7a6, &(0x7f0000000040)={0x1, 0xc8a3, 0x4, 0xf, 0x30000, 0xdb3}) bind$inet(0xffffffffffffffff, 0x0, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) 20m38.148975973s ago: executing program 1 (id=1152): socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_route(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) creat(&(0x7f0000000340)='./file1\x00', 0x2) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) syz_open_dev$tty20(0xc, 0x4, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) socket$inet(0x2, 0x801, 0x0) pipe2(&(0x7f0000000080), 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) socket$nl_netfilter(0x10, 0x3, 0xc) socket$rxrpc(0x21, 0x2, 0x2) socket$rxrpc(0x21, 0x2, 0x2) timerfd_create(0x9, 0x800) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000001500)) socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000100)) ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x1, &(0x7f0000000200)=ANY=[@ANYRES32=r0, @ANYRES32=r0, @ANYRES16=r0]) 20m35.199004067s ago: executing program 1 (id=1155): accept$netrom(0xffffffffffffffff, 0x0, &(0x7f0000000580)) r0 = socket$inet6(0xa, 0x6, 0x0) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(0xffffffffffffffff, 0x0, 0x8000) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20}, 0x1c) listen(r0, 0x80080400) r1 = socket$inet_dccp(0x2, 0x6, 0x0) iopl(0x4) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1, 0xe, &(0x7f00000002c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r3, 0x0, 0x0) r4 = socket$inet6(0xa, 0x3, 0x7) connect$inet6(r4, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmmsg(r4, &(0x7f0000000480), 0x2e9, 0x0) connect$inet(r1, &(0x7f0000e5c000)={0x2, 0x4e20, @remote}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) r5 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r5, &(0x7f0000000140)={0x28, 0x0, 0x0, @host}, 0x10) 20m33.598551451s ago: executing program 1 (id=1161): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f00000003c0)="d800000018007b18e00212ba0d8105040a0a1100fe0f040b067c55a1bc0009001e0006990300000015000500fe801100000000000300014002000c0901ac04000bd67f6f94007100a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4b01602b2a10c11ce1b14d6d930dfe1d9d322fe04fb95cae8c9010000730d7a5025ccca262f3d40fad95667e04adcdf634c1f215ce3bb9ad8ffd5e1cace81ed0b7fece0b42a9ecbee5de6cc", 0xb8}, {&(0x7f00000004c0)="f80ec2e2badd", 0x6}], 0x2, 0x0, 0x0, 0x2663}, 0x0) 20m33.345599695s ago: executing program 1 (id=1163): openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x2}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_io_uring_setup(0x8d2, &(0x7f00000000c0)={0x0, 0x5c5d, 0x3010}, &(0x7f0000000040)=0x0, &(0x7f0000000080)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) io_uring_enter(r2, 0x47ba, 0x3e80, 0x0, 0x0, 0x0) 20m30.238071032s ago: executing program 37 (id=1135): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000009c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r4, 0x7a7, &(0x7f0000000080)=0xa0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r4, 0x7a0, &(0x7f0000000000)={@my=0x0}) ioctl$IOCTL_VMCI_DATAGRAM_SEND(r4, 0x7ab, &(0x7f0000000280)={&(0x7f0000000780)={{@my=0x0}, {@my=0x0, 0x800000}, 0x400, "884fbe2726aa0a32f3e65f909acda971a093228292456e0332e6c11577b514f0bb8db731789d860e9589c4cbdd60b7a851a8a3c55ada2f90c51a69bf4a5c3e32296535dc838ef00dc18a32a79118dc858628f741f107552021e5a81d38e4374a8a717a7ca9015083cfff5d16156ef9cabf4f60c0da46870a10bf520cc5abcf9e3a437761ea75776763139fadd55c46daf5338870951822f6a803ccfbab9c3f507672d7c39ea9ccf81d9bc2b4649e7b44ed9fd7cb9bd389240cd41c415113d1caac4536f05c07e596d6addad2a4d27ba21a3b655753c508caedcc812ca235a7cd1686426b208bdecf8a4265ba8f6824aa60306e2d623481eed301b6dc21041fa8b6592be00bb74de1989a45a5aa32c189e9f5a5bb878281d0129afcfb8410cd1fa5acd080993d2d084213130a9b8d517d13251e6605a03d9b8faf507e820205a1f471af7b261419e79e09c547f7c10fd3f1ad876f59fdcc5e07d0ff4dee6ea2e3856616a352d648b9b5261b6263020fc3ae8eb404bc25703b3d3b83172d07ff22907d6631d226c8247c92c1826ff814590dfe8c7fc54dfb265e906f756846546316b20e0105e2a5355a210b2b7f5db61d8f90bb783b41ce368233bd08044e9283531fffe49e3d305ecfb16075a047557f57bb7baf8babfc02975ad0d60ed8de9cb8adc9f667bc6826cbea8e260e4bff28a5ec19d38d1fc019db3cfaf310e764d78619cb27fb17af05a0e8ae831ce8413721e71138e62cc4ad8e7974d1506b4fb581c549a3dd7b7ef44ac37201aa3bce6f37f648d781bcb4f329fd45ffa640f1b04efb38a36e0ed0e2abcb07e4ad88ae3edfb6d840d75340204243d0e1c1c3139823b0d5ad196430bf4566619a1a97df4376a7e9a9e9c1d97b9f773c921778f2cb5165c02da1423305c502076177e4af50cb3343c10b01b78e3fe5520bdfae2b3dbe42db0f0eb55bbcb19038018d45ccdb8b0df400085a02c61b033f430fb6a7408e090c65798bc49d35e049d276fd1952d2b3dfd92a2548411e21be26216fe68fc3cf1c6625031260153708a53255b3d3d0411d5f0e8ab2102a97e539c34e9c769a7dafb87c5918deb59ef05e928c2c52775de467fa843cbcdabc290097eeb2ee7c58d86e3fccc39a5b694c18a4cc0d6af1e61d9c69e6466bc0cbef15365109e4f67a6268625f8c3f358fb7d567cbea52e1bc289bd8effda4e362a729e8cd3064970b97e3f72535d9ba88e97a14834cfd8dc86b5d2f9b35425a4162e6abe8b785ef462883e716c91b8eb281d81f68f606f16fcbc5cddfdec3b515818a647d86a4c17bae6ad525e95598052c49cdee821ceb45b2350dda13628db0dd266f30285241a2b147d65113b8ed3665a3451f7a56cf430ec98aeac702d9b9f776d97520a9d039e5b2fff34ac4d4e0a32e1f35c8f38e4f4fe1b3212a70f185ad71ec86b8c9"}, 0x418}) 20m17.649119391s ago: executing program 38 (id=1163): openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x2}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_io_uring_setup(0x8d2, &(0x7f00000000c0)={0x0, 0x5c5d, 0x3010}, &(0x7f0000000040)=0x0, &(0x7f0000000080)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) io_uring_enter(r2, 0x47ba, 0x3e80, 0x0, 0x0, 0x0) 18m33.3223805s ago: executing program 7 (id=1358): mbind(&(0x7f0000bdc000/0x3000)=nil, 0x3000, 0x1, &(0x7f0000000140)=0x3ff, 0x3, 0x0) r0 = socket(0x40000000015, 0x5, 0x0) bind$inet6(r0, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000680)=[{&(0x7f00000000c0)}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) fcntl$notify(0xffffffffffffffff, 0x402, 0x8000003d) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x9, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r3 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(r3, 0xc0145608, &(0x7f0000000140)={0x0, 0x1, 0x2, 0x0, 0x10}) syz_io_uring_setup(0x112, 0x0, 0x0, &(0x7f0000000040)=0x0) socket$key(0xf, 0x3, 0x2) syz_emit_vhci(&(0x7f0000000500)=ANY=[], 0x20) socket$packet(0x11, 0x2, 0x300) clock_settime(0x0, &(0x7f0000000540)) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000340)={0x0}, 0x1, 0x0, 0x0, 0x20000084}, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, 0x0, 0x0, 0x4) syz_io_uring_submit(0x0, r4, 0x0) r5 = syz_open_dev$vim2m(0x0, 0x100000000005, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r5, 0xc0145608, 0x0) ioctl$vim2m_VIDIOC_QBUF(r5, 0xc058560f, &(0x7f0000000580)=@fd={0x7, 0x1, 0x4, 0x100000, 0x3, {}, {0x1, 0xc, 0x9, 0x99, 0x3, 0x7f, "e2c8d814"}, 0x8000000, 0x4, {}, 0x3}) fcntl$setlease(0xffffffffffffffff, 0x400, 0x0) 18m32.059985049s ago: executing program 7 (id=1361): socket(0x10, 0x2, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000180)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000001400000008000a00fc00000018000180140002006e657464657673696d300000000000000800050000fcffff08000900fc000000080011000700000008000e00800000000800", @ANYRES64=r0], 0x5c}, 0x1, 0x0, 0x0, 0x800}, 0x0) 18m31.180172612s ago: executing program 7 (id=1362): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00'}, 0x10) r0 = socket$kcm(0x2b, 0x1, 0x0) sendmsg$kcm(r0, &(0x7f0000001b00)={0x0, 0x0, 0x0}, 0x24000000) ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x890c, &(0x7f0000000100)) 18m30.844479487s ago: executing program 7 (id=1364): syz_usb_connect$hid(0x2, 0x0, 0x0, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x48241, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000001340)=ANY=[], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r0}, 0x10) syz_usb_connect$cdc_ncm(0x4, 0x72, &(0x7f0000001200)={{0x12, 0x1, 0x210, 0x2, 0x0, 0x0, 0x10, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x60, 0x2, 0x1, 0x72, 0x0, 0x4, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x9, 0x24, 0x6, 0x0, 0x1, "ed447b9d"}, {0x5, 0x24, 0x0, 0xe2}, {0xd, 0x24, 0xf, 0x1, 0x6, 0x33e1, 0xe3, 0x3}, {0x6, 0x24, 0x1a, 0x3, 0x2}}, {{0x9, 0x5, 0x81, 0x3, 0x40, 0x2, 0xeb, 0x40}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x400, 0xf9, 0x3, 0xc}}, {{0x9, 0x5, 0x3, 0x2, 0x400, 0x5, 0x1, 0x81}}}}}}}]}}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0xb6d17000) connect$unix(0xffffffffffffffff, &(0x7f0000000340)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0xd, 0x4, &(0x7f0000000000)=@framed={{}, [@call={0x61, 0x11, 0x84}]}, &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f0000000200)=""/4096, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) 18m28.719762019s ago: executing program 7 (id=1369): r0 = creat(0x0, 0xd931d3864d39dcca) inotify_add_watch(0xffffffffffffffff, &(0x7f0000000240)='./file0\x00', 0x8c5) read$hiddev(r0, &(0x7f0000000340)=""/137, 0x89) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000040)={0x8604}, 0x10) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r4, 0x0, 0x40, &(0x7f0000000a80)=@raw={'raw\x00', 0x8, 0x3, 0x4d8, 0x340, 0x11, 0x148, 0x340, 0x0, 0x440, 0x2a8, 0x2a8, 0x440, 0x2a8, 0x3, 0x0, {[{{@uncond, 0x0, 0x2f8, 0x340, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'ip_vti0\x00', {0x0, 0x0, 0x3f, 0x0, 0x20000000, 0x3, 0x7}}}, @common=@unspec=@bpf1={{0x230}, @pinned={0x1, 0x0, 0x0, './file0\x00'}}]}, @unspec=@CT0={0x48}}, {{@ip={@multicast2, @empty, 0x0, 0x0, 'vlan0\x00', 'netdevsim0\x00'}, 0x0, 0xd0, 0x100, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@unspec=@quota={{0x38}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x538) 18m27.249950691s ago: executing program 7 (id=1371): pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = syz_io_uring_setup(0xd2, &(0x7f0000000480), &(0x7f0000000040)=0x0, &(0x7f0000000080)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f0000000200)=@IORING_OP_WRITEV={0x2, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0}) io_uring_enter(r3, 0x47ba, 0x20, 0x0, 0x0, 0x0) write$binfmt_misc(r1, &(0x7f0000000000), 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x4ffe6, 0x0) 18m11.956273701s ago: executing program 39 (id=1371): pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = syz_io_uring_setup(0xd2, &(0x7f0000000480), &(0x7f0000000040)=0x0, &(0x7f0000000080)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f0000000200)=@IORING_OP_WRITEV={0x2, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0}) io_uring_enter(r3, 0x47ba, 0x20, 0x0, 0x0, 0x0) write$binfmt_misc(r1, &(0x7f0000000000), 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x4ffe6, 0x0) 17m5.544346709s ago: executing program 40 (id=1478): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) r2 = socket$can_bcm(0x1d, 0x2, 0x2) sendmsg$can_bcm(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000040)=ANY=[@ANYBLOB="0500"], 0x48}}, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0xff, 0x0, 0x4, 0x0, 0x1, 0x0, 0xfffffffe}, 0x0) syz_usb_connect(0x0, 0x5f, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000b1f203401e0903003bd7010203010902"], 0x0) lstat(0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000380)=ANY=[@ANYBLOB="b700000012edfffebfa30000000000000703000028feffff7a0af0fff8ffffff61a4f0ff000000001f040000000000003f000000000000005504020001ed0a0025000000170000000f030000000000007b0a00fe000000006e04000000000000c6000000000000009500000000000000023bc065b7a379d17cf9333379fc9e84af69912435f1b6a693002e7f3be3619184a0b139d8d4209c8ef1e50b91f32050e436fe275daf51efd601b6482a0800000098efd2a102ee010400006e7a1de4a21f379dbf01de00b1b564fef3bef70548aed0d600c095199fe3ff3128e599b0eaebbdbd7359a48f5b0afc532ef58de3c1b7646cb7798b3e6440c2fbdb00a3e35208b0bbf12cd8dff095edc710e4000000000000009fbe4b61a615c6c57a2b649dc74a1a610643b08d9ec21ead2ed51b104d4d91af25b8123deda8a3658d42ecbf28bf6d8e8afcb913466aaa7f6df70252e79166d8582755a314d31a76e42f2460d0b11008e59a5923906f88b53987ad1714e72ba7a54f0800000000000000d5f728d236619074d6ebdf098bc908f50ae728a40f9411fe7226a4040b96e37c4f46010400000000c3da29faf75ddd1aa96960bca97af133824b881cc1f62c0f8f8f0e8d76b86f9c45636614786f5a2cb77230a874640dcbe0b20bb77c022d4cab080078fce8c5c8216feb1a69005bbe781aaa6e2957d7e39cc1baddcb7ec6667e699f24e41697ee7ea23e4b29a8b6cc9a1f5a7b3caae05f13792292cb949b3aab06b1e042ff2164d80c605532b18ab1c156b97e5889685a96949e4cb40df77b8bb84b0e733a63784ccc214d930cbb7e090df9a2867b3acec439c163fc8706869ada11390d4dbcf840fa68e7d7071b53ac29df826f8ae6d6e18c1eacf5bf870768d5217e9bb5a05d9e224e67f1231bd236ed200073824d93c4e1a0f50a74bb4850486727d970acc546087acbf30f2f8165b47ba56dfadd14b306e98931485747292c6fe6e188750cf4f87cce2aa7d67c7133a9f05954cde298a35ea6d715ba80aee63300000000000000000000000000000000000040000000000000000386000000b854adb4f8080064e8407c6bdb37114c80fbaa4a0ec5aaf4b0ac6f2128668279eb6fc144344e2d461c9a1be8fa0061ea9d55ee4716bea8e1cebf9ed39325ab4c5530dd6ee9fffc00000000000000d7c5af73c683625aaad5eda5004a76c9f8975ed4c5e4eb3e77e9885f69754932609f19e2f615a01cb6d17fbf5cb539403cb0572534f054d5514ad8264f7b029b2bdf2ca4958a62a6e744f9a4c1e646e1dd2ca19583f0f8b0dc53debd7d44f334e6ed7445a9580f970e483b307c4b3c018bc194b23d37e6a2e52d8288e5aab6fec586d52386e8c07a88c88e8faec5f1b16b2014f6952ce7d6be12c6bdb9651ca6fc907061be311d1354e6295698594a73136237bee068d3819400e43544830a3f74b7942f22336953978a5b2032da4238cc61162c04c1297395b73e18c9387615a2bc87d9e2445f3d323d3fac347926a4bac694c55fe9d145906d410f58f1951405d10504efe402cae085afef5dbd617e87ddbd239e4a50d7eb8e327fb5db12cbd6a9efe8e671c4f251cafffe3400a670d14b9b3cd8d86e492997a0168c022ef3536bd1dc731f4f9f8cb6c3857fb8aaaa95024f8da775f72950212b84fc6133ae14d1429cd4905dabb52e43af7e65acf97b4951fa1e967d16a5ed642efc855a4a46b85cd079934ad3188276efae9387eaa232697526e24b5d4fded86c3811ccd00520150b16000080122965558074956da5e4c3bbefcb64aa8be4456ed2caf0f467b6bbf3aa4371f5e76ab3f60afea80bb066aafb7517f787b090f419a20278a3c779e03afd9a6af6fd518e5dce030f88ec5a5cb7601a161da0f80893220800c523040d13e1f1300c2c6555bce60d95dd3288e53435713f03add23f14c8db5555c62de4f626483632a2ab547f88dd6efec73a0271a19ca3aa860aa4dcaeeb9bd91a0cb429efae2a5fcc08b3a572969bbe917d1767e38ba49e3e57fafea83e495a6a1d1a4ebf83434986091dd66ffe3ffed0c39552a312e2db596d9c827e02f6fc13c8ddbb50bfd7dd8aa2f35f259fc83e007fe79d2d25e30830b92fca00a292dd3b856faa4b7e66e1b64505f65900839df71a97d4d07d37f7ecf8ed9a22da26ae674bba16c204f6b2f8f74fc56b7126d7c11ece6e88ec41192aaee75415c58d264a2b6adae02c821b62428902aad499825ab85a348638384cd12e61dbde5c47056f0a20b4e2a2328d5db5cfe56557a129e6be231acf5f57995c60d9fca5f63a0dfd18054717120bda466d04774b53208ad8b022719ca77a4e0a66b4708f791d849a5e2aaa0074a9560ede2600df5a5c41392fe9460080fcb1e65233fb8dbeec4c86dbcf6a0673e38d2d3615e5bfbde44afe0fa7564231fff7e7f1f3ad68492dd2ccb1decb15b5d7d3e37e8b7d28921c4b9280979521173f322df408d9818b6cc400098abb869921911480a876fbba698801937e8b4264eb6f5137bdaa075f1488d22230592a79000000000000000000000000000000000000000000110000000000000000000000000000000000000000000000000000000000000000002f316aa0886c174b73decb46c1c85edf50d8fcbac5ff76b365611666da86a8e65b308706bd7c000000000000003f7cd4d5cb9076b81b7741ec03877afb5237ea1694addebc14c3ae49f88c462ea2050acf2d9a97d3be29a5614d1eba2c98cf0236401e02d7c445e50f76419ab4f78f67a09e63dd4faa2e7b59399f055f2fa278783f26d0a52aefb0a5ef0b41e14a6fe6ba306206670b84894e901a523fcbadfeff535f2514bc834e876810d9a6a78e70a9e22860c36a724770b4185de44db6bf21fef32a8d5b36d9014f38fee012365f963b2a85e7d8075c333475b9f0284405e3127dde7e41285fbe0bdd370c06c6a41744c3d24eab511317f97b7b4a1c2ec33fedc46e9bf0fa640eebd3d58f0ebdb7cb8ccffd6d6ab7e0e843591d2618e2d2cdc7081c8fafffe9c3500800000087de4ee7aac6478d99de7dd82bef044a6d33c789d566c90c46ad581aa22f910547a77d55e26bf19f1d4661550b177ef53933a305e69b8a95119dcf5bda599d625054776151b2cd1fcde238bdc527594a6c17aa9728af24e2bb7a3830e7092b01b119ea4e7e7f0e21527d622cc29c9f0c8720195368f8374337ab4d130619d93c5ef37e7ddd0b2da147e6e513455b88753452de959a6cbfa1ffbc7ad5d8c3b48017fd31dcf72f337b639253f44cb27a12174bc4c191e21015d0c431a71906eb9c6a14c8a060459ef26787ce3d1cbfd5cc459f0048b5d06f6cbd3e9b34c89f3fb2f951ae81d7fcc8bc0000000000000000000000000000000000000000009231feef3117197c796369f776c8b2ea3970f358107945d9e74e9bdfa58e68b65a9201bc4b73b431df5aa29f363917f90e3fa1eaf553db1c761dd9b634a9c4d7c21d24fe6d953ed9438cad0f8dfe03e5e2f73019352f1fb682a5a6ebbf24ebc49e3d7058e696eb3f4b642f36c9006c0067e24a64aa8c53dd824a4ee271e35ed90000800847683c08bfda74a143c855030ae004ac797c575c202d8091eb77565212548ead770d680000000000"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) r3 = gettid() r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000140)={'veth1_to_team\x00', 0x0}) setsockopt$packet_add_memb(r5, 0x107, 0x1, &(0x7f00000006c0)={r6, 0x3, 0x6, @local}, 0x10) sendmsg$nl_route(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="2000000011000100"/20, @ANYRES32=r6], 0x20}}, 0x0) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @thr={&(0x7f0000000dc0)="388ba770da93fd1a3ee15ea38a0697d02259057b8d2dac7e26b78fa9a3916297f8313f09bcd7061d32fd51e6261e2512ea759f45755ec05df8a5dfb62ec2f15bd719c17da4628b1b2f2dee7cb2e089f9ebb19bfa282765eb4f06a5be3d4cbcee3dd7e50ef31f4bd7cb7c8c9797c3810e7d6f2af380622795817d0938d68025979d0267fdb5ce13c5b52f4a2ccdbd815d6c3f32d383e2326835d7bbba1fceebbc33c4527f007732ec2bbf0947452ec138dac5c4", &(0x7f0000000ec0)="7a1b44af124c37685c7a780930efb403eb940d9074"}}, &(0x7f00000002c0)) fstat(r1, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0}) statx(0xffffffffffffffff, &(0x7f00000000c0)='./file0\x00', 0x400, 0x7ff, &(0x7f0000000f00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000140)={r3, r7, r8}, 0xc) syz_pidfd_open(0x0, 0x0) sched_setattr(0x0, 0x0, 0x0) setrlimit(0xf, &(0x7f0000000000)={0x1, 0x3}) prlimit64(0x0, 0x7, 0x0, 0x0) gettid() ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0}) 17m1.386653812s ago: executing program 6 (id=1518): syz_open_dev$swradio(&(0x7f0000000080), 0x0, 0x2) socket$igmp6(0xa, 0x3, 0x2) prctl$PR_SET_SYSCALL_USER_DISPATCH_OFF(0x3b, 0x0) openat$dsp(0xffffffffffffff9c, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$unix(0x1, 0x2, 0x0) bind$unix(r3, &(0x7f0000000100)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) fcntl$lock(0xffffffffffffffff, 0x26, &(0x7f0000000380)={0x1, 0x0, 0x7}) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$lock(r5, 0x7, &(0x7f0000000180)={0x1, 0x0, 0x78, 0x10}) close_range(r4, 0xffffffffffffffff, 0x0) r6 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') mount$9p_fd(0x0, &(0x7f0000000580)='.\x00', &(0x7f0000000040), 0x0, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r6}, 0x2c, {'wfdno', 0x3d, r6}}) 16m59.863340195s ago: executing program 6 (id=1522): ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000400)={0x1fd, 0x1, 0x0, 0x2000, &(0x7f0000bd3000/0x2000)=nil}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket(0x10, 0x3, 0x0) sendto$inet6(r3, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_GET(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r5, @ANYBLOB], 0x34}}, 0x0) 16m58.738504292s ago: executing program 6 (id=1524): bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) prlimit64(0x0, 0xd, 0x0, 0x0) syz_clone(0x0, 0x0, 0xfffffe11, 0x0, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) r0 = syz_open_dev$dmmidi(&(0x7f0000000300), 0x2, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_PVERSION(r0, 0x40045702, &(0x7f0000000000)) ioctl$SNDRV_RAWMIDI_IOCTL_PARAMS(r0, 0xc0305710, &(0x7f0000000140)={0x1, 0xfd, 0x0, 0x1, 0x4}) 16m58.259581429s ago: executing program 6 (id=1527): rt_sigprocmask(0x0, &(0x7f0000000000)={[0xffffffff7ffffffd]}, 0x0, 0x8) r0 = gettid() timer_create(0x3, &(0x7f000049efa0)={0x0, 0x14, 0x4, @tid=r0}, &(0x7f0000044000)) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) timer_settime(0x0, 0x236bd4336e4642df, &(0x7f0000000300)={{0x0, 0x1}, {0x0, 0xe4c}}, 0x0) r2 = gettid() socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r3, 0x5452, &(0x7f0000b28000)=0x3) fcntl$setsig(r3, 0xa, 0x12) poll(&(0x7f0000b2c000)=[{r4}], 0x2c, 0xffffffffffbffff8) dup2(r3, r4) fcntl$setown(r3, 0x8, r2) tkill(r2, 0x13) 16m57.350042003s ago: executing program 6 (id=1528): setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f00000001c0)=[@in={0x2, 0x4e1f, @loopback}, @in={0x2, 0x0, @remote}, @in6={0xa, 0x0, 0xd7d9, @private0={0xfc, 0x0, '\x00', 0x1}, 0x5}], 0x3c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f00000001c0)={0x0, @in={{0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x14}}}, 0x5, 0x12}, 0x9c) r0 = syz_io_uring_setup(0x61bc, &(0x7f0000000840)={0x0, 0xf48d, 0x10100, 0x0, 0x10000004}, &(0x7f0000000900)=0x0, &(0x7f0000000140)=0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r3, &(0x7f00000001c0)=ANY=[@ANYBLOB='3'], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RENAMEAT={0x23, 0x51, 0x0, 0xffffffffffffff9c, 0x0, 0x0, r3, 0x0, 0x1}) io_uring_enter(r0, 0x2d3e, 0x0, 0x0, 0x0, 0x0) 16m56.913019999s ago: executing program 6 (id=1529): r0 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$inet6_mreq(r0, 0x29, 0x1b, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffff}, 0x0) syz_usb_connect(0x0, 0x5f, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000b1f203401e0903003bd7010203010902"], 0x0) bind$unix(r1, 0x0, 0x0) openat$tcp_mem(0xffffffffffffff9c, 0x0, 0x1, 0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000040)=0xd) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x11c, 0x0, 0x0, 0x4) ioctl$TCFLSH(r3, 0x540b, 0x2) 16m41.702504098s ago: executing program 41 (id=1529): r0 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$inet6_mreq(r0, 0x29, 0x1b, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffff}, 0x0) syz_usb_connect(0x0, 0x5f, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000b1f203401e0903003bd7010203010902"], 0x0) bind$unix(r1, 0x0, 0x0) openat$tcp_mem(0xffffffffffffff9c, 0x0, 0x1, 0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000040)=0xd) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x11c, 0x0, 0x0, 0x4) ioctl$TCFLSH(r3, 0x540b, 0x2) 11m3.246283836s ago: executing program 5 (id=2276): r0 = openat$vnet(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) r1 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x80042, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='devices.list\x00', 0x275a, 0x0) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f0000000740)={0x30, 0x5, 0x0, {0x0, 0xffffffffffffffff, 0x3, 0xfffffffc}}, 0x30) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r2, 0x0) ioctl$PTP_PEROUT_REQUEST2(r1, 0x40383d0c, &(0x7f0000000040)={{0x2, 0x6}, {0x3, 0x1003ff}, 0x0, 0x4}) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00304, 0x15) write$vhost_msg_v2(r0, 0x0, 0x0) 11m2.94728875s ago: executing program 5 (id=2279): rename(&(0x7f0000000080)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000000)='./file0\x00') bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xb, &(0x7f0000000f80)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00080000bfa1000000000000070100000000b70300000000020000000000000000009500000000000000"], &(0x7f0000001000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) quotactl$Q_SETINFO(0xffffffff80000601, &(0x7f0000000000)=@loop={'/dev/loop', 0x0}, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000040)) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = socket$inet6(0x10, 0x3, 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000002c0)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x7, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="440000001100a7cc5a8100ae541d002007000000", @ANYRES32=r4, @ANYBLOB="00000a00100000801c001a80080002802d03fa0408000200f47b0c0d"], 0x44}, 0x1, 0x10000000}, 0x0) sendto$inet6(r2, &(0x7f0000000000)='s', 0x10a73, 0x800, 0x0, 0x4b6ae4f95a5de35b) 10m59.730552419s ago: executing program 5 (id=2284): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18060000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000003000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sendmsg$TIPC_CMD_SHOW_LINK_STATS(0xffffffffffffffff, 0x0, 0x10) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000100)=0xcf5) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000dc0)={0x0, 0x2400000, 0x0, 0x0, 0x10, "00f8fffffffffffffff7ffffff00"}) r4 = syz_open_pts(r0, 0x121500) ioctl$TIOCSTI(r4, 0x5412, &(0x7f0000000280)=0x3) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r5}, &(0x7f00000006c0), 0x0}, 0x20) recvmsg$unix(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f00000009c0)=""/181, 0xb5}], 0x1, 0x0, 0x0, 0x1000000}, 0x0) shutdown(0xffffffffffffffff, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) syz_clone(0xa1304000, 0x0, 0x0, 0x0, 0x0, 0x0) 10m58.32473789s ago: executing program 5 (id=2286): openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000480), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000700)={0x0, 0x18, 0xfa00, {0x4000000000000, &(0x7f00000006c0), 0x13f}}, 0x20) ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f0000000040)={0x401, 0x2, {0xffffffffffffffff}, {0xee00}, 0x9, 0x9f4}) prlimit64(r1, 0x3, &(0x7f00000000c0)={0x1ff, 0x8000000000000000}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000040)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setresuid(0x0, 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000680)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000400), 0x106}}, 0x20) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000003c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000900), 0x13f}}, 0x20) r5 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000440), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r5, &(0x7f0000000700)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000006c0), 0x2}}, 0x20) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000100), 0x111}}, 0x20) writev(r5, &(0x7f0000000000)=[{&(0x7f0000000080)}, {&(0x7f0000000100)="06010000246837f73199aee6fdb9291b3091ec1a2d41d2271b00d8ec030f5919f397867997f9c0efa9c9092a31cdbb98ea272787afda0af59a320709c3a59ef05c6f40ceafec53f48d6186e7d8409e35306221caf67b370d875eff3191932728e5ab6c9a3acf6ccee3e352c898f5744abaedfb53f92c37acb126bd143f3e9cdf", 0x80}, {&(0x7f0000001480)="d1ffacd516de50ac9d15bc75316da4defa1e72f65a65cdd26dcc389aacf7856da9aecf3765d4c032e1960faf25bad906b7d3440b6e71a82f1d8f8b8db35b6091f3af94c6b46b9ab10fe3923f268771078d2668be7bd3eb941d4bb5baa8547e36283a065ce5766cbff3a8fc37fc4507643d3786bbf231d3ed88cb8b01eab14e4372cf4f89bd1b853caa5d9f07f523b9dfa8cc09053ff36fde08e96fb6b3acc196b1bd1e2d3a6c65f585df7e2b8b17439a7ab29a7dfe642c2f0ac7a81eca8073b559663f2daf7a0832b2b09557794a21bf114831f8e6db3922d0cd169e5a8b4adc95d7322ee75944de15f57780b88fef7f3d9b256705ccfa2125b43ce8e3aacaead963cdd7f792f14c9b24493f9f830f6de8da93bbd4357095631adec14224dd9bb049e826f3a49624393e6a031103faff0902ba88ae30af4a61caa77ff956214196fcf3c5536d823284306f367afcb46fb43231911cc53091671e7d853ebf015241b18e9fb6ac6d9a7a1b05dfd6d9e56a51567cd8837dd045abf6b85550f0dd8dded43147ab9bfadc18b9984699d5d875cb21a95a7f584d8c466d033df75193f9ae58b85cfacc54f6c6e12a0debe40ee361a839563bc2cb64271672a55370c2b035b482074ce2487ef8a3bc1c68856e6e09539276d961a0c647f1ee3237496fc99623e8fd33faf7797d86a88dcee152d15e10739bcbbd6077b76867e291f350d999024c12faf81f83792f48f7f6dd66aa6854e460ef7f8c755f3a6dd76509ea0d2db39057a5129185b2fb11546cd5d6cc59f640e9028ae6c7075fba5e5b5593d7f79ec387833f465d09bde464112821eaec5e6e8f2aee8d7358f9c14afe2018856f610848706c71cda62493aef2e39efb71b4a8e804847eda66b2b5b1d75b478f19208ee1ac43afb2dbbba5dd0f29f6946022e09fb853cb176ca3474ba2fa67cb245fe85ec61a095d6fd9ac2ac5685920201617342fe56072427b9bd3626a1a371e67041fcda781be0c234d6feb5ad500e8bc7074381fd0d04983a4a6cdb6c8e03d59dc50925e9e4b24e6f8e455f02818959f2927f0a2d9ff62ec3c5c399077048f7d3dad0830b2e6563693f2f9d48eca8c34804a7626282a4a214d13786993c011a88194dbf7b23e25f592e62186c9fb565fac7632de356153c89a6be0b6b26ba48c2427424769fcbd7ee072ed4bd4d0731d06c8537d616b1145a6c70edb13fb4dba3565221b3a2897a23861cd0e8e0060021cdd7de002d5e785e5d6d3d07f4e445ada9c8d9ba8b819d0b5c7b5d15a5192d3a83c125c8e117c823a9e33316b8c9154e7330d3a865048dbd9c14757691bfe56f10423f6ab717bec5eebeac6ba9ad1aeb6cde09d7fda8e475a71ac48d46b8d9a40879c9dec2db5c4799e5fc8e8b3d419031c1033fce88ae2c93d7ca62c9302e6b45ca8dfebe5b92724f035e8e9d7704efb23f445999fe08cfa28404874d8acc8d37870d394d9fcc8dbe763bc85c37f0f3bcc2cbea420cd073db598e7d89c14a31e5bf57cbefa301427c93091505f1f3e5cdf712958b2e8fc56684d3388107c1728f0e5a3be2164246071653e256ed3bf3000c17301da9a5a3d9ca475867c4f311a24e5ae909a62047a9e6bb71cbcb4f159c2ef0f66b4d0f9da51aba99cd9448443dd277362af18d32f111c48a952ef555b2c7c58b997ce61e74cc7551b57eaffe411219baddf490926d8e260dcd87c069e617195c352950f9b51ce88c12c4f7997ba515f77e68d44f831cdf4d7ee8b1b7cedcb4c4fc7e85ba288c8555d49d5b4b9bb70dc4b688bd12e6b38e37150f3ea457a76b23d5abe6551ea598e090aed87822b0954b8db1a7c605c925b7f9240b0e7a020f292a1fd4a37c74139bc6e7ff08373ebfc8feea371ae0b6c61c715f6f1f4b0b994c7e2e129f87db959aae6ff48664d824b29ba9f255890f9c537178db9c5302097891557f8175a46f308b1a2530aa726ea9d4cfce76db50637369724d0c5f51c97edb58ff5eb9b2434b3721b61688ba12471b97c6a65ba085e15406568ac852590701f2ef8451c5cf1191d70f51eaea9ddc4cbdd7428f627db5069111f65062d5cc34581826af3e670613dda99e31c42736aabd87be56e214ed606862a152455f91891b7430bae03284569c234588f495a5ecc4a23fad6ba34e2ee9ebde8c7f5f62c9344659375c2a1fe6fa6e4ef68712223b9471c513bb11429dbb8a45463c8882f462275ee0da567c60c2d8038843e0c20486676e9978f2aec9187820c94a6e7e519d06daf2ab198f5cafcab4d9c90a479800906192d66a3301a34fa6c5a931cea0a479a4d98d86d9de3e061323504b57186dd33df7a16ccb688c0de203666cb0a6b543a9d069dded44a3b432cbb71da921dcab6be1c2d7494d3b07841d9b4f9d659b5d3d3b2ed916f91588d589128e4b2d4448e6aab5a8160eddca0f6e022abb85e251a11cd6bae57a09b2c434ab5bdf6264afb20d5ab022d152e345bd32ba9283aa5b3cd9118bd271a8ac9083c98b8a83064e65428f7ad7b35bf1d60d4e703f22d2d316fc12bd68bcced82cf0962a3d5769c6a3d75d59f7a7b76454661fd3574b8c8e26d20c372407854505ea6c2406fbd8a1ba7bb017c565228aa6d03d18ed309a308ffb1ecec73c246413e7c70f25070eafed9e70d22e9e8b44125c44eceff37e65bf073bc6fad1ea2b72675af4bf70586a8f7e0f35700de94c802522897576ed115fa21b3d23a367844520b33f5b9aedc0245096765f4cb3b2ff4e54f39bd7346c2347875d75a931b17c6c424ddb4767e0e63cc7725a8fc4b1dbe7929b2f909cc5be8b09e63330341e6471dcac0f8b44693d01805a1467b71612260e2a273861b3697440a5f75497796bffcf79d62a4a50a6ed5ef2efe8c83374f2ecd08d8d628aa03b01a11caeb2bdecc0ab2abcecfa15627979d7c3f9dec5389fc6625e957f8075e23e636dd5514596189d568e14d33ae518e6e9978c6a36a74b49fdbd1260095c9abe447e618878039b75e305b1d2c9ddeb9e5cedb11802e0833739d8595d57d749c890c9290cca4aa96e6718747543796a187e54a66c2f71beefddf911a7a74b59c48ba642d5ecd4d415f48dfbde5baac8a4ba063c1b985d9f9f3180e8a1c8b2cf6a25c2ff17688cc858ac8b9c67960f09a1ca5f28f8e877159e00fe7fb10cca73b391508895e7e52c22f9b38d73dabd6ff7c55ebf4e1611daee8d52b4ceee49a6df7daeb81bf9d1c943a74c03d3dda52c5b99f3225c1b87074f5cef6187878bc5b665ec0561adcc9781280dd1c6592555d327afea78b21beeeb66a0af3eab3249245f41cdbca309d3fba5d4b345319dd0a26134c0c896f2c8d32fda28600013f6a4c95b4038faba70d6c480b360c55bdc0595f7ca636e85521ba505d894f9c5f0a90719bc9944f386ad7491422ff12f34a3c048708d51305a8cc5b2a502ac1575a14c75e9fb7219ede2f6d9c1b362230b6189e0d8cd8ccd11fd0325182c6e46c9977bf63aa02f7024aeb4389f989f5733a198b45e4329c4c1a538a009f216ad3ac09cac39547b4fd21a5d7146ea307ad9b9339f39d5161d17b59860a0aed38cd89d1b68c6438346d51a3a283074e34ee01d2eca527b1b3836ccdf7e807007152c79d14324e3d887c9551a9447527db4434810f5b0b73d855f32a0c89aa784e43f4c1657d408dd33f88aeae1e5186bbcc2a348b708e3cec9080e12ee3676beb5ee86a9b5cc4a3496c242b95a248906ed62f984b22373bdfd97515441f34e01006d8d1244aa88403f207cd8820ffe07634fc86d00f871c1e4c9e8fc1a00d295e36d98119599b62379cda10ada85efe7b50c5f38d8d010a2cd53db900939db1ffce14feffb7940d12842f4f2b507e1fa49e526752d1e3d80a0c2a75e870d85f77fd91fc46ac1b1288dd33338cdad154d6b80b5a925431868d62a3fb0036f28fe259a3f555f767526a9ea230c33843efc49ac3182a357845ea122d606ab22c9f937b2b905e02dd1cb07d380e3486be6167f00b6e6d90a3c1d6aee15da439a55542ce177e498998ba8ac69a848e63e4c7564e4dc04aad595fa1ab81275edafa0d352029c304200d2f2c5881cbf5a26b2141bdb117879cc11e7c13bd62f221ae1ac04dca3d8d58a13c130557ecf5f36184c7366d3852d0cbd6ca42f2a971d87c0bb204097af1a3abdab7b95d07fcdbf5f42607695dedcd26e30b8fc5cfd7b333a95f3ee69d5ba7911dadb1394285c437a0f26fc027737ba5ee7d63333f80acb59f1a7faf2ec3031c6533107502bffc92d8726a48ce00cdb5f1258d85ff8eb72bfb162e122022f1f3e8a72b41d2689d5228b1130fbc946384401f3bbe726314bb09d430333ad78de07b3cec5c18a4f4abb69507b6451ca4e610b8fc988c983426e0cc3b9d15393026eb75d3d08634b8a7495cef69aab83d27ea1b5b41f40b996dd10023d81f77d61192930ffc25cae1e149412322fcb0aa47bee3afc44ec3dda96c9294854e2cbaebfea6f9a90f0b3797d5f505824b4de964151569f881f87f9dd9d30a2a2f9ed01059a909cba157902903c77f2f3d056231e7c7483a3f35e04360e084f0d3f94a92c92c77b3f06479fbc417366d7fe87ddfcdfd86274f87a5f817b0f947924cbe2329f16f6b00c8a0ab96164f7b35fed38a388380af05c3600abc37a944c9e75a691728c26896ac3615297766f406aeb0f2fd147d68fad3fb3b032880280ebb4bf89252a36b0d9eb393daae72829b8da870b886676244897d5322b32703fcf138b66eedeb3024666a88fd99d8962f696ab7b34e19ced1bd27488aa2ffe5bfa11f8f9289bd8c052d4e88316cc33b0255ef1bfca4c17067d7f78175c56db481fe8dc6f73b1cbdf9d5823f115c9e03f2dfd07bc1ad88564d48b18cd9a30d83cbd5e6a3eedcb0ee86e5dd47f32820cb74dcf730b2052b31297b529e5e24f042335d13915e4048132fe1a101841e919c7870bb680eddead9a6111394bc12e274fbd88abaf2d254721c42e82abf4d1e319a631794ed6ce319ddd844ac5e9b1fc96dd9aaad42f2e087abe1b85430c4a00631970e3e74a6ed923f49e0df75685e044fae3fcea0af4dbfeebe0a9c2e73e8a89b89603a75f585e3ebba5453ae595da1469ea90ea3c9fb6a22411c56c58dfbf504caa629dbfc73ebbedc91669f2babf8b8215c525edf8feb366f104ffa9eb2bb79232660aece4730ef1ae8585c629ffe1390356a58e900da145b83ad177c7bb2d125e59d7ff4d3a8562efc620b4cf9b33c2305bbf1957e0f8b06f0fbe9c80db73b08fdd0be4a1ea4f91f52af47160040424aed8ac3c10251fb0b5d9be08247edf3dda5d1750d0597d60c8a0d9418a4e0c9325bb90f0886f9e5dda9e88ac1942ec1e53da0cf5ccad66b9cdfc2fdca784dd06a73713ef73785706d024873ddca5ccfcf0b91748a2c1fbd8c241934b5b473007b29d76aec5addf7b945a5f7abd6ddeccc8d0ccb26d69d4793b7224c27ba7bf45aac8a2be56086ab8c65ea69fdd593a01a29e2912378002d824bd98e6ed1c5dd5f33be529e640997f5f1bbde051fb2a669145966db4889bf32aa13777ac6c077c51bb8b2523954cea3adc307cfe53b8cbb00edf0c04c456392aea6613e8078a309dc538a6a24f80fc1b7f9fce3e3291ca6dab8090a634fcdb24e7a9de8aecd595b988f597cd623d148a8841b0a5203953166ea2e85316928f28dd2604d37c9ec80a49c0d91cbfe6d584b9b6a321b97bf99ae1d67985fd441976a828c97456003a7892c7c7f4a51bb49e3d3ea1e95ec29c89a2676", 0x1001}], 0x3) 10m57.092564489s ago: executing program 5 (id=2289): mknod(0x0, 0x8001420, 0x0) open$dir(0x0, 0x0, 0x0) r0 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) fcntl$notify(r0, 0x402, 0x4) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0xa0541, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(cast5)\x00'}, 0x58) socket$inet6_tcp(0xa, 0x1, 0x0) ppoll(0x0, 0x0, 0x0, &(0x7f00000012c0)={[0x401]}, 0x8) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000340), 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000400)={0xfffffffd, 0x5, 0x0, 'queue0\x00', 0x8}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r2, 0x404c534a, &(0x7f0000000380)) syz_open_dev$cec(0x0, 0x0, 0x2) r3 = syz_io_uring_setup(0x1e1e, &(0x7f0000000200)={0x0, 0xc4bc, 0x10100, 0x0, 0xbe}, &(0x7f0000002000), &(0x7f0000000000)) io_uring_enter(r3, 0x48eb, 0x1158, 0x2, 0x0, 0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) r4 = accept4(r1, 0x0, 0x0, 0x0) sendmsg$nl_route_sched_retired(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}, 0x1, 0x0, 0x0, 0x4000070}, 0x0) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000900)={0x1, &(0x7f00000008c0)=[{0x6, 0xfe}]}) bpf$MAP_CREATE(0x0, 0x0, 0x48) close_range(r5, 0xffffffffffffffff, 0x0) 10m56.014814665s ago: executing program 5 (id=2291): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0) syz_usb_connect(0x0, 0x5f, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000b1f203401e0903003bd7010203010902"], 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x8, 0x0) r2 = getpid() r3 = openat$loop_ctrl(0xffffff9c, &(0x7f0000000280), 0x40a00, 0x0) ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, 0x0) r4 = syz_pidfd_open(r2, 0x0) r5 = socket$inet_mptcp(0x2, 0x1, 0x106) ioctl$sock_SIOCETHTOOL(r5, 0x89f1, &(0x7f00000002c0)={'ip6tnl0\x00', &(0x7f0000000000)=@ethtool_modinfo={0x42, 0x8000, 0x1}}) setns(r4, 0x24020000) syz_clone(0xfdba2180, 0x0, 0x0, 0x0, 0x0, 0x0) syz_emit_ethernet(0x2a, &(0x7f00000002c0)={@broadcast, @broadcast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x2b, 0x0, @remote, @dev={0xac, 0x14, 0x14, 0xff}}, @echo={0x8, 0x0, 0x0, 0x6}}}}}, 0x0) 10m40.803080153s ago: executing program 42 (id=2291): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0) syz_usb_connect(0x0, 0x5f, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000b1f203401e0903003bd7010203010902"], 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x8, 0x0) r2 = getpid() r3 = openat$loop_ctrl(0xffffff9c, &(0x7f0000000280), 0x40a00, 0x0) ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, 0x0) r4 = syz_pidfd_open(r2, 0x0) r5 = socket$inet_mptcp(0x2, 0x1, 0x106) ioctl$sock_SIOCETHTOOL(r5, 0x89f1, &(0x7f00000002c0)={'ip6tnl0\x00', &(0x7f0000000000)=@ethtool_modinfo={0x42, 0x8000, 0x1}}) setns(r4, 0x24020000) syz_clone(0xfdba2180, 0x0, 0x0, 0x0, 0x0, 0x0) syz_emit_ethernet(0x2a, &(0x7f00000002c0)={@broadcast, @broadcast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x2b, 0x0, @remote, @dev={0xac, 0x14, 0x14, 0xff}}, @echo={0x8, 0x0, 0x0, 0x6}}}}}, 0x0) 2m55.115709104s ago: executing program 4 (id=3516): r0 = socket$phonet_pipe(0x23, 0x5, 0x2) bind$phonet(r0, &(0x7f0000000000)={0x23, 0x4, 0x2}, 0x10) close(r0) 2m52.515800585s ago: executing program 4 (id=3518): mknod$loop(0x0, 0x2000, 0x1) openat$ptp0(0xffffffffffffff9c, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6770c000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) unshare(0x22020400) r3 = syz_io_uring_setup(0x117, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x3a6}, &(0x7f0000000000)=0x0, &(0x7f0000000200)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffc00, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0xc, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="180000000000000001000000"], 0x18}, 0x0, 0x0, 0x1}) io_uring_enter(r3, 0x57b6, 0x810003, 0x2, 0x0, 0x0) 2m50.99739216s ago: executing program 4 (id=3521): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0100000007000000060000000c000000000000", @ANYRES32, @ANYBLOB="000000000000000000ecf3ff127775bb8e9b103a355df15424ffffffff9d014db4a600e8ff00", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs={0x0, 0x0, 0x10000000}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000440)='host1x_cdma_push\x00', r4, 0x0, 0xfffffffffffffffd}, 0x18) r5 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r5, &(0x7f0000000180)=[{&(0x7f00000001c0)="580000001500add427323b472545b45602117fffffff81000e22d991000000000000a80013007b00090080007f000001e809000000ff0000f03ac7100003ffffffff", 0x42}], 0x1) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, 0x0, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) msgctl$IPC_INFO(0x0, 0x3, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r8 = getpid() r9 = syz_pidfd_open(r8, 0x0) open_by_handle_at(r9, &(0x7f0000000180)=ANY=[@ANYBLOB], 0x1) openat$cgroup_ro(r7, &(0x7f0000000380)='devices.list\x00', 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000480)='jbd2_shrink_scan_exit\x00', r6}, 0x18) r10 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_GET(r10, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[@ANYBLOB="180000000914010000007c0000000000080001"], 0x18}}, 0x0) 2m48.242853713s ago: executing program 4 (id=3525): socket$igmp6(0xa, 0x3, 0x2) socket$inet_tcp(0x2, 0x1, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(r0, 0x10e, 0xc, &(0x7f0000000040)=0x7f, 0x4) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="240000001a0001000000ff7f000000008000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\b\x00', @ANYRES32=r0], 0x24}}, 0x0) 2m47.920952079s ago: executing program 4 (id=3528): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f00000001c0), r0) prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x3) r2 = syz_clone(0x0, 0x0, 0xfffffe11, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r3 = syz_open_dev$MSR(&(0x7f0000000140), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) mknod$loop(&(0x7f0000000180)='./file0\x00', 0x6000, 0x0) r4 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) r5 = dup2(r4, r4) ioctl$BLKTRACESETUP(r5, 0x1276, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={r2, 0xffffffffffffffff, 0x0, 0x0, 0x0}, 0x30) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r7 = creat(0x0, 0x8) close(r7) r8 = syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0) read(r8, &(0x7f0000000040)=""/44, 0x2c) ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x8000, &(0x7f00000007c0)=ANY=[]) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r7, 0x10, 0x0, 0x0) write$binfmt_misc(r6, &(0x7f0000001280), 0x6) sendmsg$IEEE802154_ADD_IFACE(r0, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x0) 2m46.366046673s ago: executing program 4 (id=3530): sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000004bc311ec8500000075000000a70000000800000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000000c0)='percpu_alloc_percpu\x00', r3}, 0x10) syz_io_uring_setup(0x111, &(0x7f0000000340)={0x0, 0x0, 0x2, 0x4}, 0x0, 0x0) 2m36.474018811s ago: executing program 0 (id=3547): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f00000002c0)='contention_end\x00'}, 0x10) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x30, 0x4, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @target={{0xb}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_TARGET_INFO={0x4}, @NFTA_TARGET_NAME={0x9, 0x1, 'SNAT\x00'}, @NFTA_TARGET_REV={0x8, 0x2, 0x1, 0x0, 0x2}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xcc}, 0x1, 0x0, 0x0, 0x4}, 0x0) 2m35.194909092s ago: executing program 0 (id=3551): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000140)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x9, [@struct={0x8, 0x0, 0x0, 0xf}]}, {0x0, [0x0, 0x5f, 0x0, 0x0, 0x0, 0x0, 0x2e]}}, &(0x7f0000000040)=""/249, 0x2d, 0xf9, 0x6, 0x0, 0x0, @void, @value}, 0x28) socket(0x10, 0x3, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r0 = open(&(0x7f0000000040)='./bus\x00', 0x80242, 0x0) ftruncate(r0, 0x2007ffc) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$inet6_sctp(0xa, 0x5, 0x84) sendfile(r0, r0, 0x0, 0x800000009) lseek(r0, 0x8, 0x4) open_tree(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x89901) r2 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r2, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x41, 0x3, 0x380, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2e8, 0x1f0, 0x1f0, 0x2e8, 0x1f0, 0x3, 0x0, {[{{@uncond, 0x0, 0x1f8, 0x218, 0x0, {0x0, 0xffffffffa0028000}, [@common=@unspec=@quota={{0x38}}, @common=@inet=@hashlimit2={{0x150}, {'nicvf0\x00', {0xffffffff, 0x0, 0x20, 0x0, 0x0, 0x3, 0x7bfd, 0x18}}}]}, @unspec=@NOTRACK={0x20}}, {{@uncond, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x3]}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x3e0) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TLS_TX(r4, 0x6, 0x1, 0x0, 0x0) syz_usb_connect$uac1(0x0, 0xa4, &(0x7f0000000080)=ANY=[@ANYBLOB="2a01000020000040b708000000000000030109029200030172e5000904000000010100000a24010000", @ANYRES8=r3, @ANYBLOB="05"], 0x0) 2m30.623380995s ago: executing program 43 (id=3530): sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000004bc311ec8500000075000000a70000000800000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000000c0)='percpu_alloc_percpu\x00', r3}, 0x10) syz_io_uring_setup(0x111, &(0x7f0000000340)={0x0, 0x0, 0x2, 0x4}, 0x0, 0x0) 2m28.868102693s ago: executing program 0 (id=3556): syz_open_dev$sndpcmp(&(0x7f0000000b00), 0x0, 0x0) syz_open_dev$usbfs(0x0, 0x1ff, 0x2) r0 = memfd_create(0x0, 0xb) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='sys_enter\x00'}, 0x10) write$binfmt_elf64(r0, 0x0, 0x0) fcntl$addseals(r0, 0x409, 0xf) ftruncate(r0, 0x0) ioctl$USBDEVFS_REAPURB(0xffffffffffffffff, 0x4008550c, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./bus\x00', 0x4006, &(0x7f0000002240)={[{@jqfmt_vfsv1}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x4}}, {@grpid}, {@oldalloc}]}, 0x1, 0x45e, &(0x7f00000022c0)="$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") bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={0x0, &(0x7f0000000040)=""/155, 0x1000000, 0x9b, 0x1, 0x0, 0x0, @void, @value}, 0x20) socket$nl_route(0x10, 0x3, 0x0) setsockopt$MRT_ADD_MFC(0xffffffffffffffff, 0x0, 0xcc, 0x0, 0x0) setsockopt$MRT_ADD_MFC(0xffffffffffffffff, 0x0, 0xcc, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0xa) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuset.effective_cpus\x00', 0x275a, 0x0) creat(0x0, 0x10) r2 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$apparmor_current(r2, &(0x7f0000000c80)=ANY=[@ANYBLOB='permprofile &'], 0xe) setsockopt$MRT_ADD_VIF(0xffffffffffffffff, 0x0, 0xca, &(0x7f0000000740)={0x1, 0x4, 0x0, 0x5, @vifc_lcl_addr=@initdev={0xac, 0x1e, 0x3, 0x0}, @broadcast}, 0x10) 2m24.350536742s ago: executing program 0 (id=3567): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x2b38094, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) ppoll(&(0x7f0000000080)=[{r1}], 0x1, 0x0, 0x0, 0x0) ioctl$TIOCPKT(r1, 0x5420, &(0x7f0000000100)=0xcf5) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x3, &(0x7f0000000880)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='contention_end\x00', r3}, 0x10) r4 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000002b40), 0x82, 0x0) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r5, 0x84, 0x81, &(0x7f00000002c0)="1a00000002000000", 0x8) setsockopt$inet_sctp6_SCTP_HMAC_IDENT(r5, 0x84, 0x16, &(0x7f0000000040)={0x1, [0x1]}, 0x6) getsockopt$inet_sctp6_SCTP_HMAC_IDENT(r5, 0x84, 0x16, &(0x7f0000000000)={0x2, [0x0, 0x0]}, &(0x7f0000000040)=0x8) write$RDMA_USER_CM_CMD_CREATE_ID(r4, 0x0, 0x0) setpgid(0x0, r2) statx(r4, 0x0, 0x1000, 0x67, &(0x7f0000000280)) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000440)={{{@in6=@private2, @in6=@private0}}, {{@in=@loopback}, 0x0, @in=@multicast1}}, &(0x7f00000001c0)=0xe8) lsetxattr$trusted_overlay_upper(0x0, 0x0, &(0x7f0000000200)={0x0, 0xfb, 0x4b, 0x0, 0x80, "79cff086f8eb867eb83c0f2e8c36d00a", "267cc02b248d4237ff30b74c24d237e4848405681d9aa55c0849d47b100502f8de172d633a2765986835761eb4b99d047f981add6e97"}, 0x4b, 0x2) mount$cgroup2(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x141010, 0x0) 2m19.659290857s ago: executing program 0 (id=3571): socket$inet6_sctp(0xa, 0x5, 0x84) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r3, 0x7a7, &(0x7f0000000080)=0xa0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r3, 0x7a0, &(0x7f0000000000)={@my=0x0}) ioctl$IOCTL_VMCI_DATAGRAM_SEND(r3, 0x7ab, 0x0) ioctl$IOCTL_VMCI_NOTIFICATIONS_RECEIVE(r3, 0x7a6, 0x0) r4 = socket$inet(0x2, 0x1, 0x100) syz_open_dev$vim2m(&(0x7f0000000000), 0x20000000206, 0x2) r5 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r5, &(0x7f0000000080)={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) sendto$inet(r4, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) 2m17.765995897s ago: executing program 0 (id=3576): socket$kcm(0x11, 0x3, 0x0) r0 = socket$kcm(0x10, 0x2, 0x4) socket$packet(0x11, 0x2, 0x300) recvmsg(r0, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x3000) sendmsg$kcm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000580)="39000000140081ae50003c00fbff008311001f9f660fcf065c05acb612f691f3bd3508abca1be6eeb89c44ebb37358582bb8b7d553b4e92155", 0x39}], 0x1}, 0x0) 2m16.482109407s ago: executing program 44 (id=3576): socket$kcm(0x11, 0x3, 0x0) r0 = socket$kcm(0x10, 0x2, 0x4) socket$packet(0x11, 0x2, 0x300) recvmsg(r0, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x3000) sendmsg$kcm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000580)="39000000140081ae50003c00fbff008311001f9f660fcf065c05acb612f691f3bd3508abca1be6eeb89c44ebb37358582bb8b7d553b4e92155", 0x39}], 0x1}, 0x0) 1m41.607871345s ago: executing program 8 (id=3643): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000000000000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f00000002c0)='contention_end\x00', r0}, 0x10) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x30, 0x4, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @target={{0xb}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_TARGET_INFO={0x4}, @NFTA_TARGET_NAME={0x9, 0x1, 'SNAT\x00'}, @NFTA_TARGET_REV={0x8, 0x2, 0x1, 0x0, 0x2}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xcc}, 0x1, 0x0, 0x0, 0x4}, 0x0) 1m38.585746323s ago: executing program 8 (id=3646): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0100000007000000060000000c000000000000", @ANYRES32, @ANYBLOB="000000000000000000ecf3ff127775bb8e9b103a355df15424ffffffff9d014db4a600e8ff00", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs={0x0, 0x0, 0x10000000}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000440)='host1x_cdma_push\x00', r4, 0x0, 0xfffffffffffffffd}, 0x18) r5 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r5, &(0x7f0000000180)=[{&(0x7f00000001c0)="580000001500add427323b472545b45602117fffffff81000e22d991000000000000a80013007b00090080007f000001e809000000ff0000f03ac7100003ffffffff", 0x42}], 0x1) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, 0x0, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) msgctl$IPC_INFO(0x0, 0x3, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r8 = getpid() r9 = syz_pidfd_open(r8, 0x0) open_by_handle_at(r9, &(0x7f0000000180)=ANY=[@ANYBLOB], 0x1) openat$cgroup_ro(r7, 0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000480)='jbd2_shrink_scan_exit\x00', r6}, 0x18) r10 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_GET(r10, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) 1m36.776563582s ago: executing program 8 (id=3647): r0 = socket$phonet_pipe(0x23, 0x5, 0x2) bind$phonet(r0, 0x0, 0x0) r1 = socket$phonet_pipe(0x23, 0x5, 0x2) bind$phonet(r1, &(0x7f0000000040)={0x23, 0x4}, 0x10) bind$phonet(0xffffffffffffffff, &(0x7f0000000000)={0x23, 0x4, 0x2}, 0x10) close(0xffffffffffffffff) 1m36.453979598s ago: executing program 8 (id=3649): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_opts(r0, 0x29, 0x4d, 0x0, 0x8) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) connect$inet6(r1, &(0x7f0000000100)={0xa, 0xffff, 0x0, @mcast2, 0x9}, 0x1c) sendto$inet6(r1, &(0x7f0000000300), 0x5aa, 0x0, 0x0, 0xfffffffffffffdfd) recvmmsg(r0, &(0x7f0000005480)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000005180)=""/5, 0x5}}], 0x1, 0x10060, 0x0) 1m36.265845291s ago: executing program 8 (id=3651): bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) sched_setscheduler(0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SET_IO_FLUSHER(0x43, 0x1) prctl$PR_SET_IO_FLUSHER(0x43, 0x1) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r3, &(0x7f0000000280)={0xa, 0x0, 0x0, @dev, 0x1}, 0x1c) sendmmsg$inet6(r3, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4000000) openat$cgroup_subtree(0xffffffffffffffff, 0x0, 0x2, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) 1m34.550190418s ago: executing program 8 (id=3653): r0 = socket(0x2, 0x80805, 0x0) getsockopt$ARPT_SO_GET_ENTRIES(r0, 0x0, 0x61, &(0x7f00000001c0), &(0x7f00000000c0)=0x24) r1 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000002280)=ANY=[@ANYBLOB='fd=', @ANYRESHEX, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB="2c67726f75705f6964cc", @ANYRESDEC=0x0, @ANYBLOB=',\x00'], 0x0, 0x0, 0x0) r2 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) ioctl$FS_IOC_FSGETXATTR(r2, 0x801c581f, 0x0) open(&(0x7f0000000200)='./file0\x00', 0x40, 0x0) mlock2(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000006340)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000002200)={0x50, 0x0, r3, {0x7, 0x27, 0x2, 0x4a1d98c1, 0xfffe, 0x6, 0x4, 0x0, 0x0, 0x0, 0x7e}}, 0x50) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r5 = socket(0x400000000010, 0x3, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) r7 = syz_open_dev$video(&(0x7f0000000040), 0x15, 0x0) ioctl$VIDIOC_PREPARE_BUF(r7, 0xc058565d, &(0x7f0000000740)=@multiplanar_userptr={0xa, 0x9, 0x4, 0x0, 0x401, {0x0, 0xea60}, {0x6, 0x8, 0x1, 0x9, 0x1, 0x10, "b94971bf"}, 0x6, 0x2, {0x0}}) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r8, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="200000001d000900000000000000000001"], 0x20}}, 0x0) sendmsg$IPSET_CMD_CREATE(r9, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="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"], 0x58}, 0x1, 0x0, 0x0, 0x8045}, 0x0) r10 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r10, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r10, 0x107, 0x16, &(0x7f00000000c0)={0x2, &(0x7f0000000140)=[{0x28, 0x6, 0xff, 0x8001}, {0x6, 0x0, 0x0, 0x8000000}]}, 0x8) sendmsg$nl_route_sched(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)=@newtfilter={0x10b4, 0x2c, 0xd27, 0x70bd28, 0x0, {0x0, 0x0, 0x0, r8, {0x0, 0x7}, {}, {0x7, 0xe}}, [@filter_kind_options=@f_basic={{0xa}, {0x107c, 0x2, [@TCA_BASIC_ACT={0xd44, 0x3, [@m_police={0xcd8, 0xc, 0x0, 0x0, {{0xb}, {0xc30, 0x2, 0x0, 0x1, [[@TCA_POLICE_AVRATE={0x8, 0x4, 0x100}, @TCA_POLICE_RATE={0x404, 0x2, [0xb, 0x1, 0x5, 0x400, 0x3ff, 0x1, 0x7, 0x6, 0x9, 0xfffffffe, 0x6, 0x200, 0x4, 0x7ff, 0x120424fa, 0x5, 0xd71858c, 0x5, 0x0, 0x2, 0x4c, 0x9, 0xc, 0x7, 0x10001, 0x9, 0x42, 0x5, 0x8001, 0x9, 0x8, 0xffffffff, 0x4, 0x2, 0x0, 0x2, 0x4, 0x2, 0x400, 0x3, 0x200, 0x4, 0x3c, 0x2, 0x5, 0x80000000, 0x0, 0x40, 0x3ee, 0x1, 0x0, 0x6, 0x7, 0x8, 0x4, 0x3, 0xff, 0x5, 0x5, 0x1, 0x3, 0x20000, 0x5f6e, 0x2, 0xfffffffe, 0x401, 0x8, 0x5, 0x2, 0x101, 0x3, 0x9, 0x6, 0x7, 0x5, 0x3, 0x0, 0x5, 0x1fd, 0x4, 0x1400000, 0x7, 0x8, 0x3, 0x2, 0xfffffff1, 0x1, 0x9, 0x0, 0x7, 0x5, 0xfffffff1, 0xfffffffc, 0x2, 0x493fff03, 0xa3f, 0x3, 0x8, 0x273, 0x7, 0x8, 0x8001, 0x2, 0x6, 0xe2, 0x1, 0x250, 0x45, 0x4, 0x6, 0x0, 0x9, 0x9, 0x80000000, 0x101, 0x4, 0x7fffffff, 0x4, 0x432845b8, 0x8, 0x40000000, 0xa4, 0x1000, 0x800, 0x101, 0x9, 0x1, 0x2, 0x4, 0x7, 0x0, 0x0, 0x5, 0x7ff, 0x1, 0x80, 0x1, 0x3, 0x9, 0xfffffffd, 0x2, 0x10d8e5e2, 0x3, 0xde, 0x6, 0x2, 0xd27, 0x4, 0x2, 0x1, 0x6, 0x4, 0xa, 0x2e30, 0x80000000, 0x6, 0xfffffffc, 0xfffffffe, 0x4, 0x8, 0x27c, 0x4, 0x2, 0x5, 0x48000, 0x53, 0x4, 0x5fb, 0x6, 0x7, 0xfffffff7, 0x11, 0x8, 0x6, 0xffffff80, 0x10000, 0x3, 0x3, 0xa1ad, 0x6, 0x100, 0x0, 0x7ff, 0x5, 0x9, 0x401, 0x46, 0xfffffffa, 0x10001, 0x80000000, 0x9, 0xc4, 0x443, 0x1ff, 0x10, 0xd708, 0x7fffffff, 0x8, 0x5, 0x966, 0xfffffe01, 0x2, 0x5, 0x9, 0x8, 0xfffffffc, 0x6, 0x9e2, 0x3, 0xd, 0x1, 0x10, 0x0, 0x4000067f, 0xa, 0x2, 0x3, 0x4, 0x1, 0x2, 0xa, 0x8000, 0x8, 0x7, 0x4, 0x0, 0x3, 0xe, 0x81, 0xfffffffc, 0xe, 0x6, 0x7fffffff, 0xffffffff, 0x3, 0x8, 0x9, 0xc, 0xfffffffd, 0x8, 0x1e, 0x33, 0x4, 0xd4, 0x4, 0x4, 0x6, 0x27f9e4bf, 0xe3, 0x9, 0x9, 0x7fffffff, 0xff, 0x5, 0xbe, 0x4]}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x3}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x5ad6, 0x7, 0x9, 0x9, 0x6, 0x7, 0x1ff, 0x6, 0x8, 0x2, 0x2, 0x7, 0x3, 0x3ff, 0x2, 0x8c5, 0xf32, 0x0, 0x6, 0x8001, 0x0, 0x8, 0xffff8001, 0x3, 0x9, 0xfffffffe, 0xd, 0x6, 0x7, 0x2, 0x9, 0x4, 0xffff, 0x6, 0x2024, 0x5, 0x9, 0x200, 0xffff, 0xffffffff, 0x0, 0x1, 0xd9, 0x7fff, 0xa334, 0x10000, 0x8, 0x1, 0xfffffffe, 0x9, 0x3, 0x7, 0x0, 0x5, 0xff, 0x4, 0x80000001, 0xfffffffd, 0x9, 0x9, 0xfffffc01, 0x7, 0x8, 0x5, 0x800, 0x85c, 0x7, 0x6, 0x2, 0x0, 0x495f267e, 0x10000, 0x4, 0x7, 0x81, 0x2a, 0x5, 0x3, 0x3, 0x8, 0x6, 0xd, 0xc, 0x4, 0x0, 0x7f, 0x4, 0x4, 0x5, 0x8000, 0xad, 0x4603, 0x7fffffff, 0x1, 0x784, 0xa9, 0x1ff, 0x4, 0xab2, 0xffffffff, 0x5, 0x1, 0x3, 0x9, 0x8, 0x4512, 0x0, 0x3, 0x9, 0xd, 0x3, 0xffffffff, 0xa5, 0xff, 0x4, 0x7fff, 0xfffffff7, 0x3, 0x3, 0x7, 0x80000001, 0xfff, 0x10001, 0xa2, 0x7, 0x0, 0x42, 0x80, 0x1000000, 0x2, 0x8, 0x0, 0x7, 0xffffffff, 0xffffff2c, 0xffffff0f, 0x5, 0x8, 0x6, 0x9b, 0x200, 0x4, 0x7f, 0x7, 0x1000, 0x1800, 0x1, 0x3, 0x7, 0x100, 0x80000000, 0x6, 0x4, 0x4, 0x3, 0x81, 0x2, 0x7, 0x6, 0x6, 0x3ff, 0x8, 0xe18, 0x6, 0x3, 0x1, 0xb, 0x1, 0x9, 0x8, 0x4, 0x1, 0x8, 0x6, 0x0, 0x8, 0x4, 0x4, 0x7, 0x0, 0x2, 0x6, 0x4, 0x5, 0x36c, 0x400, 0xfffffffd, 0xadcd, 0x5, 0xfff, 0x3, 0x5, 0x5, 0x1ff, 0x101, 0x2, 0x5, 0x8b, 0xaa65, 0x5, 0x0, 0xeb, 0xc, 0x5, 0x7, 0x2, 0x3, 0x1, 0x1, 0x58f69f97, 0x7, 0x5db7, 0x10000, 0xfffff778, 0x1, 0xffff3750, 0x4, 0x1008, 0xffffffff, 0x400, 0x5, 0xf, 0x33e1, 0x401, 0x1, 0xfffffffd, 0xfa, 0xffff, 0x4efa, 0x5681, 0x100, 0xa4, 0x6, 0x6, 0x5, 0x7, 0x9dc, 0x6, 0x6f, 0xb9, 0x9, 0xfffffff8, 0x296fb8e5, 0x8, 0x2, 0x8001, 0x7f1, 0x40009, 0x5000, 0x7, 0x10, 0xffffffff, 0x0, 0x5, 0x5, 0xd]}, @TCA_POLICE_RATE={0x404, 0x2, [0xcb, 0x8, 0x0, 0x7, 0x5, 0x5, 0x1, 0x9, 0x5, 0xf, 0x3fe00000, 0x0, 0x2, 0x8, 0x5, 0xfff, 0x7, 0xb2, 0x8, 0x7fff, 0x7, 0x8, 0x0, 0x52b, 0x5c9d, 0x8, 0x1, 0x10000, 0x9, 0x6, 0x0, 0x7, 0x7, 0xff, 0x8d11, 0x1, 0xa, 0xd, 0x8, 0x2, 0x6, 0x6, 0x9, 0xf2a9, 0x100, 0x0, 0x51, 0x4, 0x3, 0x3, 0x3, 0x6, 0xf01, 0x80000000, 0x7fffffff, 0x10000, 0x3ff, 0x3, 0x9, 0x7, 0x7, 0x5, 0xd, 0x8, 0x6, 0x0, 0x7, 0x0, 0x5, 0x8, 0x97, 0x6, 0xfffffffd, 0x401, 0x4, 0x9, 0xfffffff9, 0x5d2, 0xc, 0x6, 0x2, 0x7, 0x5, 0x2, 0x1, 0x0, 0x2, 0x10001, 0x9, 0x6651, 0xfeb, 0x6677f80e, 0x1, 0x3, 0x5990, 0x7, 0x374b, 0x2, 0x5, 0x1, 0x81, 0x8000, 0x1, 0x6, 0x8, 0x6, 0x4ead, 0x8, 0xd742, 0x1, 0x3, 0x40, 0x9, 0x1, 0x5fc, 0x3, 0xf, 0xe, 0xffffffdb, 0x6, 0x8, 0x2c, 0xba0, 0x9, 0x4, 0xd, 0x3ff, 0x1f29, 0x9, 0x1, 0x8, 0x6, 0x80000000, 0x3, 0xffff, 0x8, 0xffeffffd, 0x200, 0xf, 0xb90, 0x0, 0xfffffff9, 0x1, 0x3, 0x80000000, 0x0, 0x2, 0x10001, 0x6, 0x5, 0x7, 0x5, 0x80, 0xffffc336, 0xffffffff, 0x8, 0xa87, 0x6, 0x10001, 0x81, 0x84, 0x3, 0xffffff18, 0x4, 0x4, 0x1, 0xd, 0x80000001, 0x8, 0xfffffff9, 0xf7db, 0xfffffffc, 0x3, 0xfffffffb, 0xab1, 0x4c, 0x20, 0x200, 0x8000, 0x5, 0x6, 0x7, 0xfffffffd, 0x200, 0x0, 0xffffffff, 0x6b, 0xab, 0x9, 0x9a, 0x4, 0x5, 0x3, 0x80000001, 0xf5, 0xb, 0x5, 0x3, 0x6, 0x7fffffff, 0x800, 0x1, 0x8, 0xfff, 0x80000001, 0x2cf2, 0x3, 0x8, 0xfd82, 0x365, 0x101, 0x7, 0xffffffe2, 0x3d0f, 0x8, 0x51c, 0x101, 0x5, 0x1ff, 0x0, 0x4db, 0x3ff, 0x66dc, 0x7ff, 0x7, 0xa13d, 0x5, 0x7, 0x124, 0xffffffff, 0x5, 0x54, 0x7f, 0x8000, 0x1, 0x1, 0xfffff000, 0x80000000, 0x1f, 0x2, 0x8001, 0x5, 0x9, 0x0, 0x3, 0x7, 0x10001, 0x7fffffff, 0x6, 0x7, 0x7, 0xf6c, 0x6, 0x200, 0x8001, 0x8001]}], [@TCA_POLICE_RATE64={0xc, 0x8, 0xe89f}]]}, {0x7e, 0x6, "d6d1fc4c553423c26cd4a66b9bf60fbacc9289c78836c2266997924985a3ea8a74dd2aadafd5a275c17be19abdf55d167c0b15a718ac05f9c2b2a6d1be6480ee159c45a31fdde6d79b54315fb342ec4b57308cec6bc6a5d396a3f2507b4e7fa10fc7d9b6735ba69fc4ee7dd9f162bc186d6dca413d114dc4ccc6"}, {0xc, 0x7, {0xd72d03d6105f067a, 0x1}}, {0xc, 0x8, {0x1, 0x2}}}}, @m_bpf={0x68, 0x1a, 0x0, 0x0, {{0x8}, {0x24, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_PARMS={0x18, 0x2, {0x6, 0xf, 0x7, 0x8, 0x80000001}}, @TCA_ACT_BPF_FD={0x8, 0x5, r4}]}, {0x20, 0x6, "ddb29acb14097fe79758c90e8f1a12986bd7ef9a2d7de7f41002b1f8"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x0, 0x1}}}}]}, @TCA_BASIC_EMATCHES={0x334, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8}, @TCA_EMATCH_TREE_LIST={0x1c, 0x2, 0x0, 0x1, [@TCF_EM_CMP={0x18, 0x2, 0x0, 0x0, {{0x9}, {0x75, 0x5, 0x2, 0x2, 0xf, 0x1}}}]}, @TCA_EMATCH_TREE_LIST={0x38, 0x2, 0x0, 0x1, [@TCF_EM_IPSET={0x10, 0x1, 0x0, 0x0, {{0xe}, {0xffffffffffffffff, 0x4, 0x5}}}, @TCF_EM_IPT={0x24, 0x2, 0x0, 0x0, {{0xee7}, [@TCA_EM_IPT_MATCH_REVISION={0x5, 0x3, 0x5}, @TCA_EM_IPT_MATCH_NAME={0xb}, @TCA_EM_IPT_MATCH_DATA={0x4}]}}]}, @TCA_EMATCH_TREE_LIST={0x34, 0x2, 0x0, 0x1, [@TCF_EM_CMP={0x18, 0x1, 0x0, 0x0, {{0x0, 0x1, 0x5}, {0xe, 0x6, 0x2644, 0x4, 0x6, 0x2, 0x1}}}, @TCF_EM_CMP={0x18, 0x3, 0x0, 0x0, {{0xfff, 0x1, 0x3}, {0x8, 0x5, 0x5, 0x4, 0x1, 0x1}}}]}, @TCA_EMATCH_TREE_LIST={0x4}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x7}}, @TCA_EMATCH_TREE_LIST={0x58, 0x2, 0x0, 0x1, [@TCF_EM_U32={0x1c, 0x2, 0x0, 0x0, {{0x7, 0x3, 0xbb3}, {0x7, 0x9, 0x3, 0x2}}}, @TCF_EM_IPT={0x1c, 0x2, 0x0, 0x0, {{0x10, 0x9, 0xaf90}, [@TCA_EM_IPT_MATCH_REVISION={0x5, 0x3, 0x9e}, @TCA_EM_IPT_NFPROTO={0x5, 0x4, 0x6}]}}, @TCF_EM_NBYTE={0x1c, 0x1, 0x0, 0x0, {{0x17, 0x2, 0xff}, {0x6, 0xa, 0x2, "f704000000bf8eb5d0e4"}}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x3}}, @TCA_EMATCH_TREE_LIST={0x234, 0x2, 0x0, 0x1, [@TCF_EM_CONTAINER={0xc, 0x1, 0x0, 0x0, {{0x800, 0x0, 0x4}}}, @TCF_EM_U32={0x1c, 0x2, 0x0, 0x0, {{0x8}, {0x3, 0x4, 0xd, 0x1}}}, @TCF_EM_META={0x88, 0x1, 0x0, 0x0, {{0x3, 0x4, 0x5}, [@TCA_EM_META_HDR={0xc, 0x1, {{0x1, 0x4c, 0x2}, {0xe, 0x6, 0x2}}}, @TCA_EM_META_HDR={0xc, 0x1, {{0xde, 0x1}, {0x58, 0x5, 0x1}}}, @TCA_EM_META_RVALUE={0x26, 0x3, [@TCF_META_TYPE_INT=0x2, @TCF_META_TYPE_VAR="e2b7b69007ff8b0be684", @TCF_META_TYPE_INT=0x3, @TCF_META_TYPE_INT=0x8, @TCF_META_TYPE_INT=0x1, @TCF_META_TYPE_VAR="a425a57fefdb9168"]}, @TCA_EM_META_RVALUE={0x8, 0x3, [@TCF_META_TYPE_INT=0x7]}, @TCA_EM_META_HDR={0xc, 0x1, {{0x8, 0x53, 0x3}, {0x2, 0x8, 0x1}}}, @TCA_EM_META_RVALUE={0x15, 0x3, [@TCF_META_TYPE_VAR="cbc69de15ebfdff1cd45", @TCF_META_TYPE_VAR="9cb2232a929395"]}, @TCA_EM_META_RVALUE={0xe, 0x3, [@TCF_META_TYPE_INT=0x8, @TCF_META_TYPE_VAR='R&', @TCF_META_TYPE_INT=0x8]}]}}, @TCF_EM_IPT={0x124, 0x1, 0x0, 0x0, {{0x0, 0x9, 0x8}, [@TCA_EM_IPT_MATCH_REVISION={0x5, 0x3, 0x3}, @TCA_EM_IPT_MATCH_NAME={0xb}, @TCA_EM_IPT_MATCH_NAME={0xb}, @TCA_EM_IPT_HOOK={0x8, 0x1, 0x4}, @TCA_EM_IPT_MATCH_DATA={0xd8, 0x5, "4aa32798886fd6f1d0e2f18d72fec79365f6981f70aa6bd989ad8dd8376da1f18fa70bd2fed6fde4b198b56d31e9e0b894a266ba5699b8144e7d4811426fa27cb0bf18b9477b00dd13128d1f8ae6a4dfda2cd5d096eb776fb106c39074e2f66cedd0977fb209e7987eec248531443b56ac0f588096899ccd7c8b96e63d5fe327ed24543e078d2d9e06ed0613937a3fd1aaae7a069e14f7b129639e1cb072948a6bfee6b6cdfdcc38ee4d89fc06156a4e8bafd91b8615cf65d23370f1cac57c0bc1a12303264358fde40f3f6028e0712a04265423"}, @TCA_EM_IPT_HOOK={0x8, 0x1, 0x2}, @TCA_EM_IPT_NFPROTO={0x5, 0x4, 0x4}, @TCA_EM_IPT_MATCH_REVISION={0x5, 0x3, 0x2}]}}, @TCF_EM_IPSET={0x10, 0x2, 0x0, 0x0, {{0xa70, 0x8, 0x5}, {0x0, 0x1, 0x2}}}, @TCF_EM_META={0x18, 0x1, 0x0, 0x0, {{0x2}, [@TCA_EM_META_HDR={0xc, 0x1, {{0xc9a8, 0xe, 0x1}, {0x8}}}]}}, @TCF_EM_U32={0x1c, 0x2, 0x0, 0x0, {{0x9, 0x3, 0x800}, {0x6, 0x1, 0x2, 0x5}}}, @TCF_EM_CMP={0x18, 0x3, 0x0, 0x0, {{0xd76d, 0x1, 0xcc}, {0x0, 0x10, 0x25, 0x7, 0x5, 0x0, 0x1}}}]}]}]}}, @TCA_RATE={0x6, 0x5, {0x6, 0x8}}]}, 0x10b4}, 0x1, 0x0, 0x0, 0x80}, 0x20000800) ioctl$FBIOBLANK(r1, 0x4611, 0x1) 1m17.56069181s ago: executing program 45 (id=3653): r0 = socket(0x2, 0x80805, 0x0) getsockopt$ARPT_SO_GET_ENTRIES(r0, 0x0, 0x61, &(0x7f00000001c0), &(0x7f00000000c0)=0x24) r1 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000002280)=ANY=[@ANYBLOB='fd=', @ANYRESHEX, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB="2c67726f75705f6964cc", @ANYRESDEC=0x0, @ANYBLOB=',\x00'], 0x0, 0x0, 0x0) r2 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) ioctl$FS_IOC_FSGETXATTR(r2, 0x801c581f, 0x0) open(&(0x7f0000000200)='./file0\x00', 0x40, 0x0) mlock2(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000006340)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000002200)={0x50, 0x0, r3, {0x7, 0x27, 0x2, 0x4a1d98c1, 0xfffe, 0x6, 0x4, 0x0, 0x0, 0x0, 0x7e}}, 0x50) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r5 = socket(0x400000000010, 0x3, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) r7 = syz_open_dev$video(&(0x7f0000000040), 0x15, 0x0) ioctl$VIDIOC_PREPARE_BUF(r7, 0xc058565d, &(0x7f0000000740)=@multiplanar_userptr={0xa, 0x9, 0x4, 0x0, 0x401, {0x0, 0xea60}, {0x6, 0x8, 0x1, 0x9, 0x1, 0x10, "b94971bf"}, 0x6, 0x2, {0x0}}) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r8, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="200000001d000900000000000000000001"], 0x20}}, 0x0) sendmsg$IPSET_CMD_CREATE(r9, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="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"], 0x58}, 0x1, 0x0, 0x0, 0x8045}, 0x0) r10 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r10, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r10, 0x107, 0x16, &(0x7f00000000c0)={0x2, &(0x7f0000000140)=[{0x28, 0x6, 0xff, 0x8001}, {0x6, 0x0, 0x0, 0x8000000}]}, 0x8) sendmsg$nl_route_sched(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)=@newtfilter={0x10b4, 0x2c, 0xd27, 0x70bd28, 0x0, {0x0, 0x0, 0x0, r8, {0x0, 0x7}, {}, {0x7, 0xe}}, [@filter_kind_options=@f_basic={{0xa}, {0x107c, 0x2, [@TCA_BASIC_ACT={0xd44, 0x3, [@m_police={0xcd8, 0xc, 0x0, 0x0, {{0xb}, {0xc30, 0x2, 0x0, 0x1, [[@TCA_POLICE_AVRATE={0x8, 0x4, 0x100}, @TCA_POLICE_RATE={0x404, 0x2, [0xb, 0x1, 0x5, 0x400, 0x3ff, 0x1, 0x7, 0x6, 0x9, 0xfffffffe, 0x6, 0x200, 0x4, 0x7ff, 0x120424fa, 0x5, 0xd71858c, 0x5, 0x0, 0x2, 0x4c, 0x9, 0xc, 0x7, 0x10001, 0x9, 0x42, 0x5, 0x8001, 0x9, 0x8, 0xffffffff, 0x4, 0x2, 0x0, 0x2, 0x4, 0x2, 0x400, 0x3, 0x200, 0x4, 0x3c, 0x2, 0x5, 0x80000000, 0x0, 0x40, 0x3ee, 0x1, 0x0, 0x6, 0x7, 0x8, 0x4, 0x3, 0xff, 0x5, 0x5, 0x1, 0x3, 0x20000, 0x5f6e, 0x2, 0xfffffffe, 0x401, 0x8, 0x5, 0x2, 0x101, 0x3, 0x9, 0x6, 0x7, 0x5, 0x3, 0x0, 0x5, 0x1fd, 0x4, 0x1400000, 0x7, 0x8, 0x3, 0x2, 0xfffffff1, 0x1, 0x9, 0x0, 0x7, 0x5, 0xfffffff1, 0xfffffffc, 0x2, 0x493fff03, 0xa3f, 0x3, 0x8, 0x273, 0x7, 0x8, 0x8001, 0x2, 0x6, 0xe2, 0x1, 0x250, 0x45, 0x4, 0x6, 0x0, 0x9, 0x9, 0x80000000, 0x101, 0x4, 0x7fffffff, 0x4, 0x432845b8, 0x8, 0x40000000, 0xa4, 0x1000, 0x800, 0x101, 0x9, 0x1, 0x2, 0x4, 0x7, 0x0, 0x0, 0x5, 0x7ff, 0x1, 0x80, 0x1, 0x3, 0x9, 0xfffffffd, 0x2, 0x10d8e5e2, 0x3, 0xde, 0x6, 0x2, 0xd27, 0x4, 0x2, 0x1, 0x6, 0x4, 0xa, 0x2e30, 0x80000000, 0x6, 0xfffffffc, 0xfffffffe, 0x4, 0x8, 0x27c, 0x4, 0x2, 0x5, 0x48000, 0x53, 0x4, 0x5fb, 0x6, 0x7, 0xfffffff7, 0x11, 0x8, 0x6, 0xffffff80, 0x10000, 0x3, 0x3, 0xa1ad, 0x6, 0x100, 0x0, 0x7ff, 0x5, 0x9, 0x401, 0x46, 0xfffffffa, 0x10001, 0x80000000, 0x9, 0xc4, 0x443, 0x1ff, 0x10, 0xd708, 0x7fffffff, 0x8, 0x5, 0x966, 0xfffffe01, 0x2, 0x5, 0x9, 0x8, 0xfffffffc, 0x6, 0x9e2, 0x3, 0xd, 0x1, 0x10, 0x0, 0x4000067f, 0xa, 0x2, 0x3, 0x4, 0x1, 0x2, 0xa, 0x8000, 0x8, 0x7, 0x4, 0x0, 0x3, 0xe, 0x81, 0xfffffffc, 0xe, 0x6, 0x7fffffff, 0xffffffff, 0x3, 0x8, 0x9, 0xc, 0xfffffffd, 0x8, 0x1e, 0x33, 0x4, 0xd4, 0x4, 0x4, 0x6, 0x27f9e4bf, 0xe3, 0x9, 0x9, 0x7fffffff, 0xff, 0x5, 0xbe, 0x4]}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x3}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x5ad6, 0x7, 0x9, 0x9, 0x6, 0x7, 0x1ff, 0x6, 0x8, 0x2, 0x2, 0x7, 0x3, 0x3ff, 0x2, 0x8c5, 0xf32, 0x0, 0x6, 0x8001, 0x0, 0x8, 0xffff8001, 0x3, 0x9, 0xfffffffe, 0xd, 0x6, 0x7, 0x2, 0x9, 0x4, 0xffff, 0x6, 0x2024, 0x5, 0x9, 0x200, 0xffff, 0xffffffff, 0x0, 0x1, 0xd9, 0x7fff, 0xa334, 0x10000, 0x8, 0x1, 0xfffffffe, 0x9, 0x3, 0x7, 0x0, 0x5, 0xff, 0x4, 0x80000001, 0xfffffffd, 0x9, 0x9, 0xfffffc01, 0x7, 0x8, 0x5, 0x800, 0x85c, 0x7, 0x6, 0x2, 0x0, 0x495f267e, 0x10000, 0x4, 0x7, 0x81, 0x2a, 0x5, 0x3, 0x3, 0x8, 0x6, 0xd, 0xc, 0x4, 0x0, 0x7f, 0x4, 0x4, 0x5, 0x8000, 0xad, 0x4603, 0x7fffffff, 0x1, 0x784, 0xa9, 0x1ff, 0x4, 0xab2, 0xffffffff, 0x5, 0x1, 0x3, 0x9, 0x8, 0x4512, 0x0, 0x3, 0x9, 0xd, 0x3, 0xffffffff, 0xa5, 0xff, 0x4, 0x7fff, 0xfffffff7, 0x3, 0x3, 0x7, 0x80000001, 0xfff, 0x10001, 0xa2, 0x7, 0x0, 0x42, 0x80, 0x1000000, 0x2, 0x8, 0x0, 0x7, 0xffffffff, 0xffffff2c, 0xffffff0f, 0x5, 0x8, 0x6, 0x9b, 0x200, 0x4, 0x7f, 0x7, 0x1000, 0x1800, 0x1, 0x3, 0x7, 0x100, 0x80000000, 0x6, 0x4, 0x4, 0x3, 0x81, 0x2, 0x7, 0x6, 0x6, 0x3ff, 0x8, 0xe18, 0x6, 0x3, 0x1, 0xb, 0x1, 0x9, 0x8, 0x4, 0x1, 0x8, 0x6, 0x0, 0x8, 0x4, 0x4, 0x7, 0x0, 0x2, 0x6, 0x4, 0x5, 0x36c, 0x400, 0xfffffffd, 0xadcd, 0x5, 0xfff, 0x3, 0x5, 0x5, 0x1ff, 0x101, 0x2, 0x5, 0x8b, 0xaa65, 0x5, 0x0, 0xeb, 0xc, 0x5, 0x7, 0x2, 0x3, 0x1, 0x1, 0x58f69f97, 0x7, 0x5db7, 0x10000, 0xfffff778, 0x1, 0xffff3750, 0x4, 0x1008, 0xffffffff, 0x400, 0x5, 0xf, 0x33e1, 0x401, 0x1, 0xfffffffd, 0xfa, 0xffff, 0x4efa, 0x5681, 0x100, 0xa4, 0x6, 0x6, 0x5, 0x7, 0x9dc, 0x6, 0x6f, 0xb9, 0x9, 0xfffffff8, 0x296fb8e5, 0x8, 0x2, 0x8001, 0x7f1, 0x40009, 0x5000, 0x7, 0x10, 0xffffffff, 0x0, 0x5, 0x5, 0xd]}, @TCA_POLICE_RATE={0x404, 0x2, [0xcb, 0x8, 0x0, 0x7, 0x5, 0x5, 0x1, 0x9, 0x5, 0xf, 0x3fe00000, 0x0, 0x2, 0x8, 0x5, 0xfff, 0x7, 0xb2, 0x8, 0x7fff, 0x7, 0x8, 0x0, 0x52b, 0x5c9d, 0x8, 0x1, 0x10000, 0x9, 0x6, 0x0, 0x7, 0x7, 0xff, 0x8d11, 0x1, 0xa, 0xd, 0x8, 0x2, 0x6, 0x6, 0x9, 0xf2a9, 0x100, 0x0, 0x51, 0x4, 0x3, 0x3, 0x3, 0x6, 0xf01, 0x80000000, 0x7fffffff, 0x10000, 0x3ff, 0x3, 0x9, 0x7, 0x7, 0x5, 0xd, 0x8, 0x6, 0x0, 0x7, 0x0, 0x5, 0x8, 0x97, 0x6, 0xfffffffd, 0x401, 0x4, 0x9, 0xfffffff9, 0x5d2, 0xc, 0x6, 0x2, 0x7, 0x5, 0x2, 0x1, 0x0, 0x2, 0x10001, 0x9, 0x6651, 0xfeb, 0x6677f80e, 0x1, 0x3, 0x5990, 0x7, 0x374b, 0x2, 0x5, 0x1, 0x81, 0x8000, 0x1, 0x6, 0x8, 0x6, 0x4ead, 0x8, 0xd742, 0x1, 0x3, 0x40, 0x9, 0x1, 0x5fc, 0x3, 0xf, 0xe, 0xffffffdb, 0x6, 0x8, 0x2c, 0xba0, 0x9, 0x4, 0xd, 0x3ff, 0x1f29, 0x9, 0x1, 0x8, 0x6, 0x80000000, 0x3, 0xffff, 0x8, 0xffeffffd, 0x200, 0xf, 0xb90, 0x0, 0xfffffff9, 0x1, 0x3, 0x80000000, 0x0, 0x2, 0x10001, 0x6, 0x5, 0x7, 0x5, 0x80, 0xffffc336, 0xffffffff, 0x8, 0xa87, 0x6, 0x10001, 0x81, 0x84, 0x3, 0xffffff18, 0x4, 0x4, 0x1, 0xd, 0x80000001, 0x8, 0xfffffff9, 0xf7db, 0xfffffffc, 0x3, 0xfffffffb, 0xab1, 0x4c, 0x20, 0x200, 0x8000, 0x5, 0x6, 0x7, 0xfffffffd, 0x200, 0x0, 0xffffffff, 0x6b, 0xab, 0x9, 0x9a, 0x4, 0x5, 0x3, 0x80000001, 0xf5, 0xb, 0x5, 0x3, 0x6, 0x7fffffff, 0x800, 0x1, 0x8, 0xfff, 0x80000001, 0x2cf2, 0x3, 0x8, 0xfd82, 0x365, 0x101, 0x7, 0xffffffe2, 0x3d0f, 0x8, 0x51c, 0x101, 0x5, 0x1ff, 0x0, 0x4db, 0x3ff, 0x66dc, 0x7ff, 0x7, 0xa13d, 0x5, 0x7, 0x124, 0xffffffff, 0x5, 0x54, 0x7f, 0x8000, 0x1, 0x1, 0xfffff000, 0x80000000, 0x1f, 0x2, 0x8001, 0x5, 0x9, 0x0, 0x3, 0x7, 0x10001, 0x7fffffff, 0x6, 0x7, 0x7, 0xf6c, 0x6, 0x200, 0x8001, 0x8001]}], [@TCA_POLICE_RATE64={0xc, 0x8, 0xe89f}]]}, {0x7e, 0x6, "d6d1fc4c553423c26cd4a66b9bf60fbacc9289c78836c2266997924985a3ea8a74dd2aadafd5a275c17be19abdf55d167c0b15a718ac05f9c2b2a6d1be6480ee159c45a31fdde6d79b54315fb342ec4b57308cec6bc6a5d396a3f2507b4e7fa10fc7d9b6735ba69fc4ee7dd9f162bc186d6dca413d114dc4ccc6"}, {0xc, 0x7, {0xd72d03d6105f067a, 0x1}}, {0xc, 0x8, {0x1, 0x2}}}}, @m_bpf={0x68, 0x1a, 0x0, 0x0, {{0x8}, {0x24, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_PARMS={0x18, 0x2, {0x6, 0xf, 0x7, 0x8, 0x80000001}}, @TCA_ACT_BPF_FD={0x8, 0x5, r4}]}, {0x20, 0x6, "ddb29acb14097fe79758c90e8f1a12986bd7ef9a2d7de7f41002b1f8"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x0, 0x1}}}}]}, @TCA_BASIC_EMATCHES={0x334, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8}, @TCA_EMATCH_TREE_LIST={0x1c, 0x2, 0x0, 0x1, [@TCF_EM_CMP={0x18, 0x2, 0x0, 0x0, {{0x9}, {0x75, 0x5, 0x2, 0x2, 0xf, 0x1}}}]}, @TCA_EMATCH_TREE_LIST={0x38, 0x2, 0x0, 0x1, [@TCF_EM_IPSET={0x10, 0x1, 0x0, 0x0, {{0xe}, {0xffffffffffffffff, 0x4, 0x5}}}, @TCF_EM_IPT={0x24, 0x2, 0x0, 0x0, {{0xee7}, [@TCA_EM_IPT_MATCH_REVISION={0x5, 0x3, 0x5}, @TCA_EM_IPT_MATCH_NAME={0xb}, @TCA_EM_IPT_MATCH_DATA={0x4}]}}]}, @TCA_EMATCH_TREE_LIST={0x34, 0x2, 0x0, 0x1, [@TCF_EM_CMP={0x18, 0x1, 0x0, 0x0, {{0x0, 0x1, 0x5}, {0xe, 0x6, 0x2644, 0x4, 0x6, 0x2, 0x1}}}, @TCF_EM_CMP={0x18, 0x3, 0x0, 0x0, {{0xfff, 0x1, 0x3}, {0x8, 0x5, 0x5, 0x4, 0x1, 0x1}}}]}, @TCA_EMATCH_TREE_LIST={0x4}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x7}}, @TCA_EMATCH_TREE_LIST={0x58, 0x2, 0x0, 0x1, [@TCF_EM_U32={0x1c, 0x2, 0x0, 0x0, {{0x7, 0x3, 0xbb3}, {0x7, 0x9, 0x3, 0x2}}}, @TCF_EM_IPT={0x1c, 0x2, 0x0, 0x0, {{0x10, 0x9, 0xaf90}, [@TCA_EM_IPT_MATCH_REVISION={0x5, 0x3, 0x9e}, @TCA_EM_IPT_NFPROTO={0x5, 0x4, 0x6}]}}, @TCF_EM_NBYTE={0x1c, 0x1, 0x0, 0x0, {{0x17, 0x2, 0xff}, {0x6, 0xa, 0x2, "f704000000bf8eb5d0e4"}}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x3}}, @TCA_EMATCH_TREE_LIST={0x234, 0x2, 0x0, 0x1, [@TCF_EM_CONTAINER={0xc, 0x1, 0x0, 0x0, {{0x800, 0x0, 0x4}}}, @TCF_EM_U32={0x1c, 0x2, 0x0, 0x0, {{0x8}, {0x3, 0x4, 0xd, 0x1}}}, @TCF_EM_META={0x88, 0x1, 0x0, 0x0, {{0x3, 0x4, 0x5}, [@TCA_EM_META_HDR={0xc, 0x1, {{0x1, 0x4c, 0x2}, {0xe, 0x6, 0x2}}}, @TCA_EM_META_HDR={0xc, 0x1, {{0xde, 0x1}, {0x58, 0x5, 0x1}}}, @TCA_EM_META_RVALUE={0x26, 0x3, [@TCF_META_TYPE_INT=0x2, @TCF_META_TYPE_VAR="e2b7b69007ff8b0be684", @TCF_META_TYPE_INT=0x3, @TCF_META_TYPE_INT=0x8, @TCF_META_TYPE_INT=0x1, @TCF_META_TYPE_VAR="a425a57fefdb9168"]}, @TCA_EM_META_RVALUE={0x8, 0x3, [@TCF_META_TYPE_INT=0x7]}, @TCA_EM_META_HDR={0xc, 0x1, {{0x8, 0x53, 0x3}, {0x2, 0x8, 0x1}}}, @TCA_EM_META_RVALUE={0x15, 0x3, [@TCF_META_TYPE_VAR="cbc69de15ebfdff1cd45", @TCF_META_TYPE_VAR="9cb2232a929395"]}, @TCA_EM_META_RVALUE={0xe, 0x3, [@TCF_META_TYPE_INT=0x8, @TCF_META_TYPE_VAR='R&', @TCF_META_TYPE_INT=0x8]}]}}, @TCF_EM_IPT={0x124, 0x1, 0x0, 0x0, {{0x0, 0x9, 0x8}, [@TCA_EM_IPT_MATCH_REVISION={0x5, 0x3, 0x3}, @TCA_EM_IPT_MATCH_NAME={0xb}, @TCA_EM_IPT_MATCH_NAME={0xb}, @TCA_EM_IPT_HOOK={0x8, 0x1, 0x4}, @TCA_EM_IPT_MATCH_DATA={0xd8, 0x5, "4aa32798886fd6f1d0e2f18d72fec79365f6981f70aa6bd989ad8dd8376da1f18fa70bd2fed6fde4b198b56d31e9e0b894a266ba5699b8144e7d4811426fa27cb0bf18b9477b00dd13128d1f8ae6a4dfda2cd5d096eb776fb106c39074e2f66cedd0977fb209e7987eec248531443b56ac0f588096899ccd7c8b96e63d5fe327ed24543e078d2d9e06ed0613937a3fd1aaae7a069e14f7b129639e1cb072948a6bfee6b6cdfdcc38ee4d89fc06156a4e8bafd91b8615cf65d23370f1cac57c0bc1a12303264358fde40f3f6028e0712a04265423"}, @TCA_EM_IPT_HOOK={0x8, 0x1, 0x2}, @TCA_EM_IPT_NFPROTO={0x5, 0x4, 0x4}, @TCA_EM_IPT_MATCH_REVISION={0x5, 0x3, 0x2}]}}, @TCF_EM_IPSET={0x10, 0x2, 0x0, 0x0, {{0xa70, 0x8, 0x5}, {0x0, 0x1, 0x2}}}, @TCF_EM_META={0x18, 0x1, 0x0, 0x0, {{0x2}, [@TCA_EM_META_HDR={0xc, 0x1, {{0xc9a8, 0xe, 0x1}, {0x8}}}]}}, @TCF_EM_U32={0x1c, 0x2, 0x0, 0x0, {{0x9, 0x3, 0x800}, {0x6, 0x1, 0x2, 0x5}}}, @TCF_EM_CMP={0x18, 0x3, 0x0, 0x0, {{0xd76d, 0x1, 0xcc}, {0x0, 0x10, 0x25, 0x7, 0x5, 0x0, 0x1}}}]}]}]}}, @TCA_RATE={0x6, 0x5, {0x6, 0x8}}]}, 0x10b4}, 0x1, 0x0, 0x0, 0x80}, 0x20000800) ioctl$FBIOBLANK(r1, 0x4611, 0x1) 15.336049825s ago: executing program 3 (id=3769): syz_mount_image$hfs(&(0x7f0000000000), &(0x7f0000000240)='./file0\x00', 0x200000, &(0x7f0000000040)=ANY=[@ANYBLOB='quiet,dir_umask=00000000000000000000007,iocharset=koi8-ru,codepage=koi8-ru,quiet,uid=', @ANYRESHEX=0x0, @ANYBLOB="2c66696c655f756d61736b3d30303030300030303030303030303030303030313236342c63726561746f723d8c10b0812c00"], 0x2, 0x36b, &(0x7f0000000d80)="$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") r0 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) getdents(r0, &(0x7f0000000500)=""/173, 0xad) 13.634110362s ago: executing program 3 (id=3775): socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000600)={0x1, &(0x7f00000005c0)=[{0x94, 0x4, 0x3, 0x5}]}, 0x10) 13.350044107s ago: executing program 3 (id=3777): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000140)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x9, [@struct={0x8, 0x0, 0x0, 0xf}]}, {0x0, [0x0, 0x5f, 0x0, 0x0, 0x0, 0x0, 0x2e]}}, &(0x7f0000000040)=""/249, 0x2d, 0xf9, 0x6, 0x0, 0x0, @void, @value}, 0x28) socket(0x10, 0x3, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r0 = open(&(0x7f0000000040)='./bus\x00', 0x80242, 0x0) ftruncate(r0, 0x2007ffc) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$inet6_sctp(0xa, 0x5, 0x84) sendfile(r0, r0, 0x0, 0x800000009) lseek(r0, 0x8, 0x4) open_tree(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x89901) r2 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r2, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x41, 0x3, 0x380, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2e8, 0x1f0, 0x1f0, 0x2e8, 0x1f0, 0x3, 0x0, {[{{@uncond, 0x0, 0x1f8, 0x218, 0x0, {0x0, 0xffffffffa0028000}, [@common=@unspec=@quota={{0x38}}, @common=@inet=@hashlimit2={{0x150}, {'nicvf0\x00', {0xffffffff, 0x0, 0x20, 0x0, 0x0, 0x3, 0x7bfd, 0x18}}}]}, @unspec=@NOTRACK={0x20}}, {{@uncond, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x3]}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x3e0) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TLS_TX(r4, 0x6, 0x1, 0x0, 0x0) syz_usb_connect$uac1(0x0, 0xa4, &(0x7f0000000080)=ANY=[@ANYBLOB="2a01000020000040b708000000000000030109029200030172e5000904000000010100000a240100", @ANYRES8=r3, @ANYBLOB="05"], 0x0) 13.16806355s ago: executing program 9 (id=3779): r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f0000000300)={{{@in6=@mcast1, @in6=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6}, 0x0, @in6=@initdev}}, &(0x7f0000000180)=0xe8) syz_mount_image$exfat(&(0x7f00000000c0), &(0x7f0000000000)='./file0\x00', 0x8000, &(0x7f0000000b00)=ANY=[@ANYBLOB='gid=', @ANYRESHEX=0x0, @ANYBLOB=',dmask=00000000000000000000006,gid=', @ANYRESHEX=0x0, @ANYBLOB="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", @ANYRESHEX=r1, @ANYBLOB=',iocharset=iso8859-6,dmask=00000000000040000000000,\x00'], 0x29, 0x1506, &(0x7f0000002840)="$eJzs3AuYjVX7MPD7Xms9Y0zSbpLDsNa6H3ZyWCZJckiSQ5IkSZJTQtIkSUJiyClpSEJyGJLDEJLDxKRxPh9yTpKkSZKcckrWdyk+b2+9X//+/76/93rn/l3Xc+117+e5176ffe/D2s/FfNd5SI1GNas2ICL4H8Ffb5IBIBYABgDANQAQAEDZ+LLxF/bnlJj8P3sQ9vd6KO1KV8CuJO5/9sb9z964/9kb9z974/5nb9z/7I37n71x/xnLzjZNK3Atb9l34+v/2Rl///8HySo15qs1pa7v8hdSuP/ZG/f/P1bwXzmI+5+9cf+zN+5/9sb9zw5y/Ms93P/sjfvPWHZ2pa8/83Zltyv9+mOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxlj2c9pcpALg0vtJ1McYYY4wxxhhj7O/jc1zpChhjjDHGGGOMMfb/H4IACQoCiIEcEAs5IQ4EAFwNueEaiMC1EA/XQR64HvJCPsgPBSABCkIh0GDAAkEIhaEIROEGKAo3QjEoDiWgJDgoBYlwE5SGm6EM3AJl4VYoB7dBeagAFaES3A6V4Q6oAndCVbgLqkF1qAE14W6oBfdAbbgX6sB9UBfuh3rwANSHB6EBPAQN4WFoBI9AY3gUmkBTaAbNocV/K/9F6A4vQQ/oCcnQC3rDy9AH+kI/6A8D4BUYCK/CIHgNUmAwDIHXYSi8AcPgTRgOI2AkvAWj4G0YDWNgLIyDVBgPE+AdmAjvwiSYDFNgKqTBNJgO78EMmAmz4H2YDR/AHJgL82A+pMOHsAAWQgZ8BIvgY8iExbAElsIyWA4rYCWsgtWwBtbCOlgPG2AjbIJPYDNsga2wDbbDDtgJn8Iu+Ax2w+ewB774i/mn/im/CwICChSoUGEMxmAsxmIcxmEuzIW5MTdGMILxGI95MA/mxbyYH/NjAiZgISyEBg0SEhbGwhjFKBbFolgMi2EJLIEOHSZiIpbGm7EMlsGyWBbLYTksjxWwAlbCSlgZK2MVrIJVsSpWw2pYA2vg3Xg39sLaWBvrYB2si3UvXZ7CBtgAG2JDbISNsDE2xibYBJthM2yBLbAltsRW2ArbYBtsi22xHbbDJEzC9tgeO2AH7IgdsRN2ws7YGbtgV+yKL+YAfAlfwp5YTfTC3tgb+2Af7If9sT++ggPxVXwVX8MUHIxD8HV8Hd/AYXgSh+MIHIkjsbJ4G0fjGCQxDlMxFSfgBJyIE3ESTsbJOBXTcBpOx+k4A2fiTHwfZ+MH+AHOxbk4H9MxHRfgQszADFyEpzATF+MSXIrLcDkuw5W4ClfiGlyLa3A9rseNuBE/wU9wC27BbbgNd6ACwE/xM/wMU3AP7sG9uBf34T7cj/sxC7PwAB7Ag3gQD+EhPIyH8QgexWN4FE/gCTyJp/A0nsazeBbP4fMJ3zTcUXx1CogLlFAiRsSIWBEr4kScyCVyidwit4iIiIgX8SKPyCPyirwiv8gvEkSCKCQKCSOMIBHGAICIiqgoKoqKYqKYKCFKCCecSBSJorQoLcqIMqKsuFWUE7eJ8qKCaO0qiUqismjjqog7RVVRVVQT1UUNUVPUFLVELVFb1BZ1RB1RV9QV9cQDor7ohf3wIXGhM43EYGwshmAT0VTIi59gLcUwbCVaizbiCTECh2M70dIliadFezEaO4hnxRh8TnQS47CzeEF0EV1FN/Gi6C5auR6ip5iEvURvMRX7iL6in+gvZmB1caFjNcRrIkUMFkPE62I+viGGiTfFcDFCjBRviVHibTFajBFjxTiRKsaLCeIdMVG8KyaJyWKKmCrSxDQxXbwnZoiZYpZ4X8wWH4g5Yq6YJ+aLdPGhWCAWigzxkVgkPhaZYrFYIpaKZWK5WCFWilVitVgj1op1Yr3YIDaKTeITsVlsEVvFNrFd7BA7xadil/hM7Bafiz3iC7FXfCn2ia/EfvG1yBLfiAPiW3FQfCcOie/FYfGDOCKOimPiuDghfhQnxSlxWpwRZ8VP4pz4WZwXXoBEKaSUSgYyRuaQsTKnjJNXyVwyuPjsXivj5XUyj7xe5pX5ZH5ZQCbIgrKQ1NJIK0mGsrAsIqPyBllU3iiLyeKyhCwpnSwlE+VNsrS8WZaRt8iy8lZZTt4my8sKsqKsJG+XleUdsoq8U1aVd8lqsrqsIWvKu2UteY+sLe+VdeR9sq68X9aTD8j68kHZQD4kG8qHZSP5iGwsH5VNZFPZTDaXLeRjsqV8XLaSrWUb+YRsK5+U7eRTMkk+LdvLZ2QH+azsKJ+TneTzsrN8QXaRXWU3+bM8L73sIXvKZNlL9pYvyz6yr+wn+8sB8hU5UL4qB8nXZIocLIfI1+VQ+YYcJt+Uw+UIOVK+JUfJt+VoOUaOleNkqhwvJ8h35ET5rpwkJ8spcqpMk9Nkv4szzZLyT/Pf+YP8Qb88+ka5SX4iN8stcqvcJrfLHXKn3Cl3yV1yt9wt98g9cq/cK/fJfXK/3C+zZJY8IA/Ig/KgPCQPycPysDwij8oz8rg8IX+UJ+UpeUqekWflWXnu4nMACpVQUikVqBiVQ8WqnCpOXaVyqatVbnWNiqhrVby6TuVR16u8Kp/KrwqoBFVQFVJaGWUVqVAVVkVUVN2AF18wqoQqqZwqpRLVTX8lXxVVN6piqvhv8v+svhaqhWqpWqpWqpVqo9qotqqtaqfaqSSVpNqr9qqD6qA6qo6qk+qkOqvOqovqorqpbqq76q56qB4qWSWr3upl1Uf1Vf1UfzVAvaIGqoFqkBqkUlSKGqKGqKFqqBqmhqnhargaqUaqUWqUGq1Gq7FqrEpVqWqCmqAmqolqkpqkpqgpKk2lqelqupqhZqhZapaarWarOWqOmqfmqXSVrhaoBSpDZahFapHKVIvVYrVULVXL1XK1Uq1Uq9VqtVatVevVepWpNqlNarParLaqrWq72q52qp1ql9qldqvdao/ao/aqvWqf2qf2q/0qS2WpA+qAOqgOqkPqkDqsDqsj6og6po6pE+qEOqlOqtPqtDqrzqpz6pw6r85fWPYFIhCBClQQE8QEsUFsEBfEBbmCXEHuIHcQCSJBfBAf5AmuD/IG+YL8QYEgISgYFAp0YAIbiItNjwY3BEWDG4NiQfGgRFAycEGpIDG4KSgd3ByUCW4Jyga3BuWC24LyQYWgYlApuD2oHNwRVAnuDKoGdwXVgupBjaBmcHdQK7gnqB3cG9QJ7gvqBvcH9YIHgvrBg0GD4KGgYfBw0Ch4JGgcPBo0CZoGzYLmQYu/dX7vT+Z73PXQPXWy7qV765d1H91X99P99QD9ih6oX9WD9Gs6RQ/WQ/Treqh+Qw/Tb+rheoQeqd/So/TberQeo8fqcTpVj9cT9Dt6on5XT9KT9RQ9VafpaXq6fk/P0DP1LP2+nq0/0HP0XD1Pz9fp+kO9QC/UGfojvUh/rDP1Yr1EL9XL9HK9Qq/Uq/RqvUav1ev0er1Bb9Sb9Cd6s96it+pterveoXfqT/Uu/ZnerT/Xe/QXeq/+Uu/TX+n9+mudpb/RB/S3+qD+Th/S3+vD+gd9RB/Vx/RxfUL/qE/qU/q0PqPP6p/0Of2zPq/9hcX9ha93o4wyMSbGxJpYE2fiTC6Ty+Q2uU3EREy8iTd5TB6T1+Q1+U1+k2ASTCFTyFxAhkxhU9hETdQUNUVNMVPMlDAljDPOJJpEU9qUNmVMGVPWlDXlTDlT3pQ3FU1Fc7u53dxh7jB3mjvNXeYuU91UNzVNTVPL1DK1TW1Tx9QxdU1dU8/UM/VNfdPANDANTUPTyDQyjU1j08Q0Mc1MM9PCtDAtTUvTyrQybUwb09a0Ne1MO5Nkkkx70950MB1MR9PRdDKdTGfT2XQxXUw30810N91ND9PDJJtk09v0Nn1MH9PP9DMDzAAz0Aw0g8wgk2JSzBAzxAw1Q80wM8wMNyPMSPOWGWXeNqPNGDPWjDOpJtVMMBPMRDPRTDKTzBQzxaSZNDPdTDczzAwzy8wys81sM8fMMfPMPJNu0s0Cs8BkmAyzyCwymSbTLDFLzDKzzKwwK8wqs8qsMWvMOlhnNpgNZpPZZDabzWar2Wq2m+1mp9lpdpldZrfZbfaYPWav2Wv2mX1mv9lvskyWOWAOmIPmoDlkDpnD5rA5Yo6YY+aYOWFOmJPmpDltTpuzJt/FJZU3sTanjbNX2Vz2apvbXmP/Oc5vC9gEW9AWstrmtfl+ExtrbTFb3JawJa2zpWyivel3cXlbwVa0lezttrK9w1b5XVzL3mNr23ttHXufrWnv/k1c195v69lHbH1EANvUNrTNbSP7iG1sH7VNbFPbzDa3be2Ttp19yibZp217+8zv4gV2oV1lV9s1dq3dZT+zp+0Ze9B+Z8/an2wP29MOsK/YgfZVO8i+ZlPs4N/FI+1bdpR92462Y+xYO+538RQ71abZaXa6fc/OsDN/F6fbD+1sm2Hn2Ll2np3/S3yhpgz7kV1kP7aZdrFdYpfaZXa5XWFX/t9al9r1doPdaHfaT+1mu8Vutdvsdrvjl/jCeey2n9s99gt7wH5r99mv7H57yGbZb36JL5zfIfu9PWx/sEfsUXvMHrcn7I/2pD31y/lfOPfj9md73noLhCRIkqKAYigHxVJOiqOrKBddTbnpGorQtRRP11Eeup7yUj7KTwUogQpSIdJkyBJRSIWpCEXpBrq0Ti9BJclRKUqkm6g03Uxl6BYqS7dSObqNylMFqkiV6HaqTHdQFbqTqtJdVI2qUw2qSXdTLbqHatO9VIfuo7p0P9WjB6g+PUgN6CFqSA9TI3qEGtOj1ISaUjNqTi3oMWpJj1Mrak1t6AlqS09SO3qKkuhpak/PUAd6ljrSc9SJnqfO9AJ1oa7UjV6k7vQS9aCelEy9qDe9TH2oL/Wj/jSAXqGB9CoNotcohQbTEHqdhtIbNIzepOE0gkbSWzSK3qbRNIbG0jhKpfE0gd6hifQuTaLJNIWmUhpNo+n0Hs2gmTSL3qfZ9AHNobk0j+ZTOn1IC2ghZdBHtIg+pkxaTEtoKS2j5bSCVtIqWk1raC2to/W0gTbSJvqENtMW2krbaDvtoJ30Ke2iz2g3fU576AvaS1/SPvqK9tPXlEXf0AH6lg7Sd3SIvvc96Qc6QkfpGB2nE/QjnaRTdJrO0Fn6ic7Rz3SePEGIoQhlqMIgjAlzhLFhzjAuvCrMFV4d5g6vCSPhtWF8eF2YJ7w+zBvmC/OHBcKEsGBYKNShCW1IYRgWDouE0fCGsGh4Y1gsLB6WCEuGLiwVJoY3haXDm8My4S1h2fDWsFx4W1g+rBA+cl+l8PawcnhHWCW8M6wa3hVWC6uHNcKa4d1hrfCesHZ4b1gnvC8sE94f1gsfCOuHD4YNwofChuHDYaPwkbBx+GjYJGwaNgubhy3Cx8KW4eNhq7B12CZ8ImwbPhm2C58Kk8Knw/bhM3+6PznsFfYOXw5fDr2/V86Lzo+mRz+MLogujGZEP4ouin4czYwuji6JLo0uiy6ProiujK6Kro6uia6Nrouuj26Ibox6XzMHOHTCSadc4GJcDhfrcro4d5XL5a52ud01LuKudfHuOpfHXe/yunwuvyvgElxBV8hpZ5x15EJX2BVxUXeDK+pudMVccVfClXTOlXKJrrlr4Vq4lu5x18q1dm3cE+4J96R70j3lnnJPu/buGdfBPes6uudcJ/e8e9694Lq4rq6be9F1d+Nz//qeTHa9XW/Xx/Vx/Vw/N8ANcAPdQDfIDXIpLsUNcUPcUDfUDXPD3HA33I10I90oN8qNdqPdWDfWpbpUN8FNcBPdRDfJTXJT3BSX5tLcdDfdzXAzXOWZvz7KHDfHzXPzXLpLdwvchTVjhlvkFrlMl+mWuCVumVvmVrgVbpVb5da4NW6dW+c2uA1uk9vkNrvNbqvb6ra77W6n2+l2+Wt+ndTtcXvdXrfP7XP73dcuy33jDrhv3UH3nTvkvneH3Q/uiDvqjrnj7oT70Z10p9xpd8addT+5c+5nd955lxoZH5kQeScyMfJuZFJkcmRKZGokLTItMj3yXmRGZGZkVuT9yOzIB5E5kbmReZH5kfTIh5EFkYWRjMhHkUWRjyOZkcWRJZGlkWWR5RHvC24OfWFfxEf9Db6ov9EX88V9CV/SO1/KJ/qbfGl/sy/jb/Fl/a2+nL/Nl/cVfEX/qG/im/pmvrlv4R/zLf3jvpVv7dv4J3xb/6Rv55/ySf5p394/4zv4Z31H/5zv5J/3nf0Lvovv6rv5F313/5Lv4Xv6ZN/L9/Yv+z6+r+/n+/sB/hU/0L/qB/nXfIof7If41/1Q/4Yf5t/0w/0IPzLmLT/KX/p0HudT/Xg/wb/jJ/p3/SQ/2U/xU32an+an+/f8DD/Tz/Lv+9n+Az/Hz/Xz/Hyf7j/0C/xCn+E/8ov8xz7TL750Udmv8Cv9Kr/ar/Fr/Tq/3m/wG/0m/4nf7Lf4rX6b3+53+J3+U7/Lf+Z3+8/9Hv+F3+u/9Pv8V36//9pn+W/8Af+tP+i/84f89/6w/8Ef8Uf9MX/cn/A/+pP+lD/tz/iz/id/zv/sz/P/WWOMMcYY+y8Zf3ko/mh/rz+4T/zDwb0B4OotBbL+cf+FFeW6vL+O+4qEthEAeLpn54cubdWqJScnXzw2U0JQZC4ARC7nx8DleDG0gSchCVpD6T+sv6/oepb+ZP7orQBx/5ATC5fjy/N/+S/mf+yJkQvKhafj/x/zzwUoVuRyTk64HC+GNurCbWso8y/mz9fyT+rP+VUqQKt/yMkFl+PL9SfC4/AMJP3mSMYYY4wxxhhj7Fd9RcWOl35/XvoXn3/0+zxBXc7JAZfjP/t9zhhjjDHGGGOMsSvvua7dnnosKal1x78+qPLfyuLBv+vAe4BL9ygAuNL1/LsOUi6+df5517IzPoB/iwr/lsEV/mBijDHGGGOM/e0uL/p/e7+6UgUxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGPZ0P/GnxO70ufIGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMXWn/JwAA//9cqxFN") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x0, &(0x7f0000000040)}) syz_emit_vhci(0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = socket$inet_smc(0x2b, 0x1, 0x0) connect$inet(r5, &(0x7f0000000000)={0x2, 0x4001, @remote}, 0x10) setsockopt$SO_BINDTODEVICE_wg(r5, 0x1, 0x19, &(0x7f0000000080)='wg1\x00', 0x4) sendto$inet(r5, &(0x7f0000000040)="e5", 0xffffffe4, 0x0, 0x0, 0x0) connect(r5, &(0x7f0000000080)=@un=@abs, 0x80) socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) recvmmsg(r3, &(0x7f0000000a80)=[{{&(0x7f0000000580)=@nfc, 0x80, &(0x7f0000000280)=[{&(0x7f0000000600)=""/146, 0x92}, {&(0x7f00000006c0)=""/142, 0x8e}, {&(0x7f00000001c0)=""/2, 0x2}], 0x3, &(0x7f0000000780)=""/226, 0xe2}, 0x353e}, {{&(0x7f0000000880)=@pppoe={0x18, 0x0, {0x0, @local}}, 0x80, &(0x7f0000000400)=[{&(0x7f0000000900)=""/140, 0x8c}], 0x1, &(0x7f00000009c0)=""/151, 0x97}, 0x5}], 0x2, 0x40012040, 0x0) open(&(0x7f0000000100)='./file0\x00', 0xe6840, 0x82) 11.009392355s ago: executing program 9 (id=3780): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000820004000000000000000c00850000000f00000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) syz_open_procfs(0x0, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) pipe(&(0x7f00000002c0)={0xffffffffffffffff}) vmsplice(r2, &(0x7f00000014c0)=[{&(0x7f0000000000)='|', 0xfd}], 0xf, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x4000) timer_delete(0x0) 8.225890989s ago: executing program 9 (id=3782): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000200)='sched_switch\x00', r0}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x2000000}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)={0x2, 0x12, 0x0, 0x0, 0x2}, 0x10}}, 0x0) 6.415398318s ago: executing program 3 (id=3785): setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000600)={0x1, &(0x7f00000005c0)=[{0x94, 0x4, 0x3, 0x5}]}, 0x10) 6.349918739s ago: executing program 9 (id=3786): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6770c000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000440)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-cipher_null\x00'}, 0x58) r4 = accept$alg(r3, 0x0, 0x0) r5 = dup(r4) r6 = open(&(0x7f00000000c0)='./file0\x00', 0x1099c2, 0x2a) ftruncate(r6, 0x200004) sendfile(r5, r6, 0x0, 0x80001d00c0d1) 6.30206113s ago: executing program 2 (id=3787): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_opts(r0, 0x29, 0x4d, &(0x7f0000000140)=ANY=[@ANYRESDEC], 0x8) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) connect$inet6(r1, &(0x7f0000000100)={0xa, 0xffff, 0x0, @mcast2, 0x9}, 0x1c) sendto$inet6(r1, 0x0, 0x0, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f0000005480)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000005180)=""/5, 0x5}}], 0x1, 0x10060, 0x0) 5.921795746s ago: executing program 2 (id=3788): ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) r0 = socket(0x400000000010, 0x3, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r2, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)=@newtfilter={0xf84, 0x2c, 0xd27, 0x70bd28, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0x7}, {}, {0x7, 0xe}}, [@filter_kind_options=@f_basic={{0xa}, {0xf54, 0x2, [@TCA_BASIC_ACT={0xd44, 0x3, [@m_police={0xcd8, 0xc, 0x0, 0x0, {{0xb}, {0xc30, 0x2, 0x0, 0x1, [[@TCA_POLICE_AVRATE={0x8, 0x4, 0x100}, @TCA_POLICE_RATE={0x404, 0x2, [0xb, 0x1, 0x5, 0x400, 0x3ff, 0x1, 0x7, 0x6, 0x9, 0xfffffffe, 0x6, 0x200, 0x4, 0x7ff, 0x120424fa, 0x5, 0xd71858c, 0x5, 0x0, 0x2, 0x4c, 0x9, 0xc, 0x7, 0x10001, 0x9, 0x42, 0x5, 0x8001, 0x9, 0x8, 0xffffffff, 0x4, 0x2, 0x0, 0x2, 0x4, 0x2, 0x400, 0x3, 0x200, 0x4, 0x3c, 0x2, 0x5, 0x80000000, 0x0, 0x40, 0x3ee, 0x1, 0x0, 0x6, 0x7, 0x8, 0x4, 0x3, 0xff, 0x5, 0x5, 0x1, 0x3, 0x20000, 0x5f6e, 0x2, 0xfffffffe, 0x401, 0x8, 0x5, 0x2, 0x101, 0x3, 0x9, 0x6, 0x7, 0x5, 0x3, 0x0, 0x5, 0x1fd, 0x4, 0x1400000, 0x7, 0x8, 0x3, 0x2, 0xfffffff1, 0x1, 0x9, 0x0, 0x7, 0x5, 0xfffffff1, 0xfffffffc, 0x2, 0x493fff03, 0xa3f, 0x3, 0x8, 0x273, 0x7, 0x8, 0x8001, 0x2, 0x6, 0xe2, 0x1, 0x250, 0x45, 0x4, 0x6, 0x0, 0x9, 0x9, 0x80000000, 0x101, 0x4, 0x7fffffff, 0x4, 0x432845b8, 0x8, 0x40000000, 0xa4, 0x1000, 0x800, 0x101, 0x9, 0x1, 0x2, 0x4, 0x7, 0x0, 0x0, 0x5, 0x7ff, 0x1, 0x80, 0x1, 0x3, 0x9, 0xfffffffd, 0x2, 0x10d8e5e2, 0x3, 0xde, 0x6, 0x2, 0xd27, 0x4, 0x2, 0x1, 0x6, 0x4, 0xa, 0x2e30, 0x80000000, 0x6, 0xfffffffc, 0xfffffffe, 0x4, 0x8, 0x27c, 0x4, 0x2, 0x5, 0x48000, 0x53, 0x4, 0x5fb, 0x6, 0x7, 0xfffffff7, 0x11, 0x8, 0x6, 0xffffff80, 0x10000, 0x3, 0x3, 0xa1ad, 0x6, 0x100, 0x0, 0x7ff, 0x5, 0x9, 0x401, 0x46, 0xfffffffa, 0x10001, 0x80000000, 0x9, 0xc4, 0x443, 0x1ff, 0x10, 0xd708, 0x7fffffff, 0x8, 0x5, 0x966, 0xfffffe01, 0x2, 0x5, 0x9, 0x8, 0xfffffffc, 0x6, 0x9e2, 0x3, 0xd, 0x1, 0x10, 0x0, 0x4000067f, 0xa, 0x2, 0x3, 0x4, 0x1, 0x2, 0xa, 0x8000, 0x8, 0x7, 0x4, 0x0, 0x3, 0xe, 0x81, 0xfffffffc, 0xe, 0x6, 0x7fffffff, 0xffffffff, 0x3, 0x8, 0x9, 0xc, 0xfffffffd, 0x8, 0x1e, 0x33, 0x4, 0xd4, 0x4, 0x4, 0x6, 0x27f9e4bf, 0xe3, 0x9, 0x9, 0x7fffffff, 0xff, 0x5, 0xbe, 0x4]}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x3}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x5ad6, 0x7, 0x9, 0x9, 0x6, 0x7, 0x1ff, 0x6, 0x8, 0x2, 0x2, 0x7, 0x3, 0x3ff, 0x2, 0x8c5, 0xf32, 0x0, 0x6, 0x8001, 0x0, 0x8, 0xffff8001, 0x3, 0x9, 0xfffffffe, 0xd, 0x6, 0x7, 0x2, 0x9, 0x4, 0xffff, 0x6, 0x2024, 0x5, 0x9, 0x200, 0xffff, 0xffffffff, 0x0, 0x1, 0xd9, 0x7fff, 0xa334, 0x10000, 0x8, 0x1, 0xfffffffe, 0x9, 0x3, 0x7, 0x0, 0x5, 0xff, 0x4, 0x80000001, 0xfffffffd, 0x9, 0x9, 0xfffffc01, 0x7, 0x8, 0x5, 0x800, 0x85c, 0x7, 0x6, 0x2, 0x0, 0x495f267e, 0x10000, 0x4, 0x7, 0x81, 0x2a, 0x5, 0x3, 0x3, 0x8, 0x6, 0xd, 0xc, 0x4, 0x0, 0x7f, 0x4, 0x4, 0x5, 0x8000, 0xad, 0x4603, 0x7fffffff, 0x1, 0x784, 0xa9, 0x1ff, 0x4, 0xab2, 0xffffffff, 0x5, 0x1, 0x3, 0x9, 0x8, 0x4512, 0x0, 0x3, 0x9, 0xd, 0x3, 0xffffffff, 0xa5, 0xff, 0x4, 0x7fff, 0xfffffff7, 0x3, 0x3, 0x7, 0x80000001, 0xfff, 0x10001, 0xa2, 0x7, 0x0, 0x42, 0x80, 0x1000000, 0x2, 0x8, 0x0, 0x7, 0xffffffff, 0xffffff2c, 0xffffff0f, 0x5, 0x8, 0x6, 0x9b, 0x200, 0x4, 0x7f, 0x7, 0x1000, 0x1800, 0x1, 0x3, 0x7, 0x100, 0x80000000, 0x6, 0x4, 0x4, 0x3, 0x81, 0x2, 0x7, 0x6, 0x6, 0x3ff, 0x8, 0xe18, 0x6, 0x3, 0x1, 0xb, 0x1, 0x9, 0x8, 0x4, 0x1, 0x8, 0x6, 0x0, 0x8, 0x4, 0x4, 0x7, 0x0, 0x2, 0x6, 0x4, 0x5, 0x36c, 0x400, 0xfffffffd, 0xadcd, 0x5, 0xfff, 0x3, 0x5, 0x5, 0x1ff, 0x101, 0x2, 0x5, 0x8b, 0xaa65, 0x5, 0x0, 0xeb, 0xc, 0x5, 0x7, 0x2, 0x3, 0x1, 0x1, 0x58f69f97, 0x7, 0x5db7, 0x10000, 0xfffff778, 0x1, 0xffff3750, 0x4, 0x1008, 0xffffffff, 0x400, 0x5, 0xf, 0x33e1, 0x401, 0x1, 0xfffffffd, 0xfa, 0xffff, 0x4efa, 0x5681, 0x100, 0xa4, 0x6, 0x6, 0x5, 0x7, 0x9dc, 0x6, 0x6f, 0xb9, 0x9, 0xfffffff8, 0x296fb8e5, 0x8, 0x2, 0x8001, 0x7f1, 0x40009, 0x5000, 0x7, 0x10, 0xffffffff, 0x0, 0x5, 0x5, 0xd]}, @TCA_POLICE_RATE={0x404, 0x2, [0xcb, 0x8, 0x0, 0x7, 0x5, 0x5, 0x1, 0x9, 0x5, 0xf, 0x3fe00000, 0x0, 0x2, 0x8, 0x5, 0xfff, 0x7, 0xb2, 0x8, 0x7fff, 0x7, 0x8, 0x0, 0x52b, 0x5c9d, 0x8, 0x1, 0x10000, 0x9, 0x6, 0x0, 0x7, 0x7, 0xff, 0x8d11, 0x1, 0xa, 0xd, 0x8, 0x2, 0x6, 0x6, 0x9, 0xf2a9, 0x100, 0x0, 0x51, 0x4, 0x3, 0x3, 0x3, 0x6, 0xf01, 0x80000000, 0x7fffffff, 0x10000, 0x3ff, 0x3, 0x9, 0x7, 0x7, 0x5, 0xd, 0x8, 0x6, 0x0, 0x7, 0x0, 0x5, 0x8, 0x97, 0x6, 0xfffffffd, 0x401, 0x4, 0x9, 0xfffffff9, 0x5d2, 0xc, 0x6, 0x2, 0x7, 0x5, 0x2, 0x1, 0x0, 0x2, 0x10001, 0x9, 0x6651, 0xfeb, 0x6677f80e, 0x1, 0x3, 0x5990, 0x7, 0x374b, 0x2, 0x5, 0x1, 0x81, 0x8000, 0x1, 0x6, 0x8, 0x6, 0x4ead, 0x8, 0xd742, 0x1, 0x3, 0x40, 0x9, 0x1, 0x5fc, 0x3, 0xf, 0xe, 0xffffffdb, 0x6, 0x8, 0x2c, 0xba0, 0x9, 0x4, 0xd, 0x3ff, 0x1f29, 0x9, 0x1, 0x8, 0x6, 0x80000000, 0x3, 0xffff, 0x8, 0xffeffffd, 0x200, 0xf, 0xb90, 0x0, 0xfffffff9, 0x1, 0x3, 0x80000000, 0x0, 0x2, 0x10001, 0x6, 0x5, 0x7, 0x5, 0x80, 0xffffc336, 0xffffffff, 0x8, 0xa87, 0x6, 0x10001, 0x81, 0x84, 0x3, 0xffffff18, 0x4, 0x4, 0x1, 0xd, 0x80000001, 0x8, 0xfffffff9, 0xf7db, 0xfffffffc, 0x3, 0xfffffffb, 0xab1, 0x4c, 0x20, 0x200, 0x8000, 0x5, 0x6, 0x7, 0xfffffffd, 0x200, 0x0, 0xffffffff, 0x6b, 0xab, 0x9, 0x9a, 0x4, 0x5, 0x3, 0x80000001, 0xf5, 0xb, 0x5, 0x3, 0x6, 0x7fffffff, 0x800, 0x1, 0x8, 0xfff, 0x80000001, 0x2cf2, 0x3, 0x8, 0xfd82, 0x365, 0x101, 0x7, 0xffffffe2, 0x3d0f, 0x8, 0x51c, 0x101, 0x5, 0x1ff, 0x0, 0x4db, 0x3ff, 0x66dc, 0x7ff, 0x7, 0xa13d, 0x5, 0x7, 0x124, 0xffffffff, 0x5, 0x54, 0x7f, 0x8000, 0x1, 0x1, 0xfffff000, 0x80000000, 0x1f, 0x2, 0x8001, 0x5, 0x9, 0x0, 0x3, 0x7, 0x10001, 0x7fffffff, 0x6, 0x7, 0x7, 0xf6c, 0x6, 0x200, 0x8001, 0x8001]}], [@TCA_POLICE_RATE64={0xc, 0x8, 0xe89f}]]}, {0x7e, 0x6, "d6d1fc4c553423c26cd4a66b9bf60fbacc9289c78836c2266997924985a3ea8a74dd2aadafd5a275c17be19abdf55d167c0b15a718ac05f9c2b2a6d1be6480ee159c45a31fdde6d79b54315fb342ec4b57308cec6bc6a5d396a3f2507b4e7fa10fc7d9b6735ba69fc4ee7dd9f162bc186d6dca413d114dc4ccc6"}, {0xc, 0x7, {0xd72d03d6105f067a, 0x1}}, {0xc, 0x8, {0x1, 0x2}}}}, @m_bpf={0x68, 0x1a, 0x0, 0x0, {{0x8}, {0x24, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_PARMS={0x18, 0x2, {0x6, 0xf, 0x7, 0x8, 0x80000001}}, @TCA_ACT_BPF_FD={0x8}]}, {0x20, 0x6, "ddb29acb14097fe79758c90e8f1a12986bd7ef9a2d7de7f41002b1f8"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x0, 0x1}}}}]}, @TCA_BASIC_EMATCHES={0x20c, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8}, @TCA_EMATCH_TREE_LIST={0x1c, 0x2, 0x0, 0x1, [@TCF_EM_CMP={0x18, 0x2, 0x0, 0x0, {{0x9}, {0x75, 0x5, 0x2, 0x2, 0xf, 0x1}}}]}, @TCA_EMATCH_TREE_LIST={0x38, 0x2, 0x0, 0x1, [@TCF_EM_IPSET={0x10, 0x1, 0x0, 0x0, {{0xe}, {0xffffffffffffffff, 0x4, 0x5}}}, @TCF_EM_IPT={0x24, 0x2, 0x0, 0x0, {{0xee7}, [@TCA_EM_IPT_MATCH_REVISION={0x5, 0x3, 0x5}, @TCA_EM_IPT_MATCH_NAME={0xb}, @TCA_EM_IPT_MATCH_DATA={0x4}]}}]}, @TCA_EMATCH_TREE_LIST={0x34, 0x2, 0x0, 0x1, [@TCF_EM_CMP={0x18, 0x1, 0x0, 0x0, {{0x0, 0x1, 0x5}, {0xe, 0x6, 0x2644, 0x4, 0x6, 0x2, 0x1}}}, @TCF_EM_CMP={0x18, 0x3, 0x0, 0x0, {{0xfff, 0x1, 0x3}, {0x8, 0x5, 0x5, 0x4, 0x1, 0x1}}}]}, @TCA_EMATCH_TREE_LIST={0x4}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x7}}, @TCA_EMATCH_TREE_LIST={0x58, 0x2, 0x0, 0x1, [@TCF_EM_U32={0x1c, 0x2, 0x0, 0x0, {{0x7, 0x3, 0xbb3}, {0x7, 0x9, 0x3, 0x2}}}, @TCF_EM_IPT={0x1c, 0x2, 0x0, 0x0, {{0x10, 0x9, 0xaf90}, [@TCA_EM_IPT_MATCH_REVISION={0x5, 0x3, 0x9e}, @TCA_EM_IPT_NFPROTO={0x5, 0x4, 0x6}]}}, @TCF_EM_NBYTE={0x1c, 0x1, 0x0, 0x0, {{0x17, 0x2, 0xff}, {0x6, 0xa, 0x2, "f704000000bf8eb5d0e4"}}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x3}}, @TCA_EMATCH_TREE_LIST={0x10c, 0x2, 0x0, 0x1, [@TCF_EM_CONTAINER={0xc, 0x1, 0x0, 0x0, {{0x800, 0x0, 0x4}}}, @TCF_EM_U32={0x1c, 0x2, 0x0, 0x0, {{0x8}, {0x3, 0x4, 0xd, 0x1}}}, @TCF_EM_META={0x88, 0x1, 0x0, 0x0, {{0x3, 0x4, 0x5}, [@TCA_EM_META_HDR={0xc, 0x1, {{0x1, 0x4c, 0x2}, {0xe, 0x6, 0x2}}}, @TCA_EM_META_HDR={0xc, 0x1, {{0xde, 0x1}, {0x58, 0x5, 0x1}}}, @TCA_EM_META_RVALUE={0x26, 0x3, [@TCF_META_TYPE_INT=0x2, @TCF_META_TYPE_VAR="e2b7b69007ff8b0be684", @TCF_META_TYPE_INT=0x3, @TCF_META_TYPE_INT=0x8, @TCF_META_TYPE_INT=0x1, @TCF_META_TYPE_VAR="a425a57fefdb9168"]}, @TCA_EM_META_RVALUE={0x8, 0x3, [@TCF_META_TYPE_INT=0x7]}, @TCA_EM_META_HDR={0xc, 0x1, {{0x8, 0x53, 0x3}, {0x2, 0x8, 0x1}}}, @TCA_EM_META_RVALUE={0x15, 0x3, [@TCF_META_TYPE_VAR="cbc69de15ebfdff1cd45", @TCF_META_TYPE_VAR="9cb2232a929395"]}, @TCA_EM_META_RVALUE={0xe, 0x3, [@TCF_META_TYPE_INT=0x8, @TCF_META_TYPE_VAR='R&', @TCF_META_TYPE_INT=0x8]}]}}, @TCF_EM_IPT={0x48, 0x1, 0x0, 0x0, {{0x0, 0x9, 0x8}, [@TCA_EM_IPT_MATCH_REVISION={0x5, 0x3, 0x3}, @TCA_EM_IPT_MATCH_NAME={0xb}, @TCA_EM_IPT_MATCH_NAME={0xb}, @TCA_EM_IPT_HOOK={0x8, 0x1, 0x4}, @TCA_EM_IPT_MATCH_DATA={0x4}, @TCA_EM_IPT_NFPROTO={0x5, 0x4, 0x4}, @TCA_EM_IPT_MATCH_REVISION={0x5, 0x3, 0x2}]}}, @TCF_EM_IPSET={0x10, 0x2, 0x0, 0x0, {{0xa70, 0x8, 0x5}, {0x0, 0x1, 0x2}}}]}]}]}}]}, 0xf84}, 0x1, 0x0, 0x0, 0x80}, 0x20000800) 5.478507763s ago: executing program 2 (id=3789): r0 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000000), 0x2000, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_FD(r0, 0xc01064c1, &(0x7f0000000080)) 5.363886055s ago: executing program 9 (id=3790): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000820004000000000000000c00850000000f00000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) syz_open_procfs(0x0, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) pipe(&(0x7f00000002c0)={0xffffffffffffffff}) vmsplice(r2, &(0x7f00000014c0)=[{&(0x7f0000000000)='|', 0xfd}], 0xf, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x4000) timer_delete(0x0) 5.209825287s ago: executing program 3 (id=3791): unshare(0x24040000) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000002700)=""/102392, 0x18ff8) openat$6lowpan_enable(0xffffffffffffff9c, 0x0, 0x2, 0x0) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r2, &(0x7f0000000000)={0xa, 0x3, 0x0, @loopback}, 0x1c) connect$inet6(r2, &(0x7f0000000040)={0xa, 0x3, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000240)='lp\x00', 0x54) socketpair$unix(0x1, 0x5, 0x0, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x23, 0x0, 0x0) shutdown(r2, 0x2) write$binfmt_elf32(0xffffffffffffffff, &(0x7f0000000040)=ANY=[], 0x69) setsockopt$inet6_int(r0, 0x29, 0x3c, 0x0, 0x47) 5.196076947s ago: executing program 2 (id=3792): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r3}, 0x10) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r4, 0x6, 0xd, &(0x7f0000000000)='nv\x00', 0x3) bind$inet6(r4, &(0x7f0000d84000)={0xa, 0x2, 0x0, @loopback, 0x7}, 0x1c) setsockopt$inet6_tcp_int(r4, 0x6, 0x2000000000000022, 0x0, 0x0) sendto$inet6(r4, &(0x7f0000000040)='\x00', 0x1, 0x20000045, &(0x7f00000002c0)={0xa, 0x2, 0x395, @empty}, 0x1c) getpgid(r0) socket(0x2, 0x80805, 0x0) r5 = openat$ipvs(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$cgroup_int(r5, 0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) close(0x3) r6 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000180)={{'fd', 0x3d, r6}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r6, &(0x7f00000077c0)={0x2020}, 0x2020) 4.007106666s ago: executing program 2 (id=3793): bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DESTROY(r0, 0x0, 0x4000844) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) write(r2, &(0x7f0000000000)="14000000140005b7ffcc", 0xa) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$RTC_UIE_ON(r5, 0x7003) ioctl$RTC_SET_TIME(r5, 0x4024700a, &(0x7f0000000040)={0x2, 0x37, 0x6, 0x19, 0x3, 0x64, 0x2, 0x106, 0xffffffffffffffff}) mbind(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x4002, &(0x7f0000000040)=0xa632, 0x5, 0x0) set_mempolicy_home_node(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0, 0x0) mbind(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x4002, &(0x7f0000000000)=0x4, 0x6, 0x0) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x10640, 0x0) ioctl$TIOCSTI(r6, 0x5412, &(0x7f0000000100)=0x9) 3.957605947s ago: executing program 9 (id=3794): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000140)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x9, [@struct={0x8, 0x0, 0x0, 0xf}]}, {0x0, [0x0, 0x5f, 0x0, 0x0, 0x0, 0x0, 0x2e]}}, &(0x7f0000000040)=""/249, 0x2d, 0xf9, 0x6, 0x0, 0x0, @void, @value}, 0x28) socket(0x10, 0x3, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r0 = open(&(0x7f0000000040)='./bus\x00', 0x80242, 0x0) ftruncate(r0, 0x2007ffc) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$inet6_sctp(0xa, 0x5, 0x84) sendfile(r0, r0, 0x0, 0x800000009) lseek(r0, 0x8, 0x4) open_tree(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x89901) r2 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r2, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x41, 0x3, 0x380, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2e8, 0x1f0, 0x1f0, 0x2e8, 0x1f0, 0x3, 0x0, {[{{@uncond, 0x0, 0x1f8, 0x218, 0x0, {0x0, 0xffffffffa0028000}, [@common=@unspec=@quota={{0x38}}, @common=@inet=@hashlimit2={{0x150}, {'nicvf0\x00', {0xffffffff, 0x0, 0x20, 0x0, 0x0, 0x3, 0x7bfd, 0x18}}}]}, @unspec=@NOTRACK={0x20}}, {{@uncond, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x3]}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x3e0) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TLS_TX(r4, 0x6, 0x1, 0x0, 0x0) syz_usb_connect$uac1(0x0, 0xa4, &(0x7f0000000080)=ANY=[@ANYBLOB="2a01000020000040b708000000000000030109029200030172e5000904000000010100000a240100", @ANYRES8=r3, @ANYBLOB="05"], 0x0) 2.752474266s ago: executing program 2 (id=3795): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket(0x2b, 0x1, 0x1) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r0, 0x0) accept4$unix(r1, 0x0, 0x0, 0x100800) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) close_range(r3, 0xffffffffffffffff, 0x0) 0s ago: executing program 3 (id=3796): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0100000007000000060000000c000000000000", @ANYRES32, @ANYBLOB="000000000000000000ecf3ff127775bb8e9b103a355df15424ffffffff9d014db4a600e8ff00", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs={0x0, 0x0, 0x10000000}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000440)='host1x_cdma_push\x00', r4, 0x0, 0xfffffffffffffffd}, 0x18) r5 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r5, &(0x7f0000000180)=[{&(0x7f00000001c0)="580000001500add427323b472545b45602117fffffff81000e22d991000000000000a80013007b00090080007f000001e809000000ff0000f03ac7100003ffffffff", 0x42}], 0x1) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, 0x0, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) msgctl$IPC_INFO(0x0, 0x3, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r8 = getpid() r9 = syz_pidfd_open(r8, 0x0) open_by_handle_at(r9, &(0x7f0000000180)=ANY=[@ANYBLOB], 0x1) openat$cgroup_ro(r7, 0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000480)='jbd2_shrink_scan_exit\x00', r6}, 0x18) r10 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_GET(r10, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[@ANYBLOB="180000000914010000"], 0x18}}, 0x0) kernel console output (not intermixed with test programs): FS (loop8): log mount failed [ 1365.909726][T16805] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(11) [ 1365.916401][T16805] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1366.228218][T16805] vhci_hcd vhci_hcd.0: Device attached [ 1366.336351][T16806] vhci_hcd: connection closed [ 1366.336754][T16454] vhci_hcd: stop threads [ 1366.395503][T16454] vhci_hcd: release socket [ 1366.415971][T16454] vhci_hcd: disconnect device [ 1366.457352][ T4299] vhci_hcd: vhci_device speed not set [ 1368.496889][ T7] usb 9-1: new high-speed USB device number 21 using dummy_hcd [ 1368.748274][ T7] usb 9-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 1368.809507][ T7] usb 9-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1368.958142][ T7] usb 9-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1369.048521][ T7] usb 9-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1369.166564][ T7] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1369.255342][ T7] usb 9-1: invalid MIDI out EP 0 [ 1369.327187][ T5367] vhci_hcd: vhci_device speed not set [ 1369.380834][ T7] snd-usb-audio: probe of 9-1:27.0 failed with error -22 [ 1369.490342][ T7] usb 9-1: USB disconnect, device number 21 [ 1370.011851][T13955] udevd[13955]: error opening ATTR{/sys/devices/platform/dummy_hcd.8/usb9/9-1/9-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1374.132925][T16893] nvme_fabrics: missing parameter 'transport=%s' [ 1374.287620][T16893] nvme_fabrics: missing parameter 'nqn=%s' [ 1376.509699][T16925] vhci_hcd vhci_hcd.0: pdev(9) rhport(0) sockfd(11) [ 1376.516551][T16925] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1376.730164][T16925] vhci_hcd vhci_hcd.0: Device attached [ 1376.894067][T16926] vhci_hcd: connection closed [ 1376.894546][T16438] vhci_hcd: stop threads [ 1376.910693][T16438] vhci_hcd: release socket [ 1376.959083][T16438] vhci_hcd: disconnect device [ 1376.997303][ T4301] usb 51-1: new low-speed USB device number 3 using vhci_hcd [ 1377.004798][ T4301] usb 51-1: enqueue for inactive port 0 [ 1377.137141][ T4301] vhci_hcd: vhci_device speed not set [ 1379.885782][T16965] loop3: detected capacity change from 0 to 64 [ 1380.014447][T16965] hfs: inconsistency in B*Tree (2,1,255,1,0) [ 1380.020724][T16965] hfs: get root inode failed [ 1380.149461][T13952] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 1381.754741][T16971] nvme_fabrics: missing parameter 'transport=%s' [ 1381.764783][T16971] nvme_fabrics: missing parameter 'nqn=%s' [ 1382.827337][T16998] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(11) [ 1382.834096][T16998] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1382.885833][T16996] loop8: detected capacity change from 0 to 1024 [ 1383.032368][T16998] vhci_hcd vhci_hcd.0: Device attached [ 1383.243449][T16999] vhci_hcd: connection closed [ 1383.243850][ T4304] vhci_hcd: stop threads [ 1383.297087][ T5367] usb 39-1: new low-speed USB device number 14 using vhci_hcd [ 1383.330525][ T4304] vhci_hcd: release socket [ 1383.342682][ T4304] vhci_hcd: disconnect device [ 1383.404987][T17005] loop9: detected capacity change from 0 to 2048 [ 1383.501296][T17005] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1383.591247][T16996] hfsplus: found bad thread record in catalog [ 1383.604971][T17005] netlink: 232 bytes leftover after parsing attributes in process `syz.9.2841'. [ 1383.634789][T16996] hfsplus: catalog searching failed [ 1383.777947][T17011] hfsplus: xattr search failed [ 1384.629139][T17026] fuse: Unknown parameter 'group_idÌ00000000000000000000' [ 1384.716522][ T26] audit: type=1326 audit(1744853398.790:92): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17025 comm="syz.9.2845" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7ffb1218e169 code=0x0 [ 1385.750982][T17039] nvme_fabrics: missing parameter 'transport=%s' [ 1386.266065][T17039] nvme_fabrics: missing parameter 'nqn=%s' [ 1389.167975][ T5367] vhci_hcd: vhci_device speed not set [ 1389.580695][T17090] fuse: Unknown parameter 'group_idÌ00000000000000000000' [ 1391.145777][T17103] nvme_fabrics: missing parameter 'transport=%s' [ 1391.253123][T17103] nvme_fabrics: missing parameter 'nqn=%s' [ 1395.093061][T17146] vhci_hcd vhci_hcd.0: pdev(9) rhport(0) sockfd(11) [ 1395.099732][T17146] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1395.376752][T17146] vhci_hcd vhci_hcd.0: Device attached [ 1395.478609][T17147] vhci_hcd: connection closed [ 1395.479062][ T4304] vhci_hcd: stop threads [ 1395.508091][ T4304] vhci_hcd: release socket [ 1395.523042][ T4304] vhci_hcd: disconnect device [ 1395.568070][T12934] vhci_hcd: vhci_device speed not set [ 1396.700680][ T4268] Bluetooth: hci1: unexpected subevent 0x0e length: 30 > 15 [ 1399.659141][T17185] nvme_fabrics: missing parameter 'transport=%s' [ 1399.747493][T17185] nvme_fabrics: missing parameter 'nqn=%s' [ 1404.147112][T17244] nvme_fabrics: missing parameter 'transport=%s' [ 1404.160677][T17244] nvme_fabrics: missing parameter 'nqn=%s' [ 1404.989100][T17276] loop3: detected capacity change from 0 to 64 [ 1405.494439][T17276] hfs: inconsistency in B*Tree (2,1,255,1,0) [ 1405.502383][T17276] hfs: get root inode failed [ 1405.587104][ T26] audit: type=1326 audit(1744853419.640:93): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17268 comm="syz.4.2911" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7fd4d8e169 code=0x7fc00000 [ 1405.708963][T13923] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 1405.751925][ T26] audit: type=1326 audit(1744853419.660:94): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17270 comm="syz.9.2910" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffb1218e169 code=0x7fc00000 [ 1405.782993][ T26] audit: type=1326 audit(1744853419.660:95): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17270 comm="syz.9.2910" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffb1218e169 code=0x7fc00000 [ 1405.933128][ T26] audit: type=1326 audit(1744853419.660:96): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17270 comm="syz.9.2910" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffb1218e169 code=0x7fc00000 [ 1407.223867][T17297] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(11) [ 1407.230550][T17297] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1407.453754][T17298] vhci_hcd: connection closed [ 1407.457185][T17297] vhci_hcd vhci_hcd.0: Device attached [ 1407.542268][T16449] vhci_hcd: stop threads [ 1407.546627][T16449] vhci_hcd: release socket [ 1407.569304][T16449] vhci_hcd: disconnect device [ 1407.647322][ T4301] vhci_hcd: vhci_device speed not set [ 1408.844723][T17311] nvme_fabrics: missing parameter 'transport=%s' [ 1408.851266][T17311] nvme_fabrics: missing parameter 'nqn=%s' [ 1409.255252][T17329] loop8: detected capacity change from 0 to 2048 [ 1409.613451][T17329] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1413.613841][T17376] nvme_fabrics: missing parameter 'transport=%s' [ 1413.797610][T17376] nvme_fabrics: missing parameter 'nqn=%s' [ 1413.972030][T17362] loop8: detected capacity change from 0 to 32768 [ 1415.340050][T17362] XFS (loop8): Mounting V5 Filesystem [ 1415.388487][T17404] IPVS: length: 156 != 24 [ 1415.690128][T17362] XFS (loop8): Starting recovery (logdev: internal) [ 1415.935056][T17393] loop9: detected capacity change from 0 to 2048 [ 1416.290473][T17393] UDF-fs: bad mount option "" or missing value [ 1416.354780][T17362] XFS (loop8): Corruption warning: Metadata has LSN (8192:16) ahead of current LSN (1:48). Please unmount and run xfs_repair (>= v4.3) to resolve. [ 1416.563110][T17362] XFS (loop8): Metadata corruption detected at xfs_agi_verify+0x22d/0x530, xfs_agi block 0x2 [ 1416.574577][T17362] XFS (loop8): Unmount and run xfs_repair [ 1416.580834][T17362] XFS (loop8): First 128 bytes of corrupted metadata buffer: [ 1416.588651][T17362] 00000000: 58 41 47 49 00 00 00 01 00 00 00 00 00 00 20 00 XAGI.......... . [ 1416.609201][T17362] 00000010: 00 00 00 40 00 00 00 03 00 00 00 01 00 00 00 37 ...@...........7 [ 1417.223766][T17422] cgroup: Invalid name [ 1417.253914][T17422] loop9: detected capacity change from 0 to 128 [ 1417.474122][T17362] 00000020: 00 00 18 00 ff ff ff ff ff ff ff ff ff ff ff ff ................ [ 1417.636316][T17362] 00000030: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ................ [ 1417.739638][T17362] 00000040: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ................ [ 1417.771874][T17362] 00000050: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ................ [ 1417.791446][T17362] 00000060: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ................ [ 1417.831947][T17362] 00000070: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ................ [ 1417.867716][T17362] XFS (loop8): Corruption of in-memory data (0x8) detected at _xfs_buf_ioapply+0x37a/0x6d0 (fs/xfs/xfs_buf.c:1553). Shutting down filesystem. [ 1417.923193][T17362] XFS (loop8): Please unmount the filesystem and rectify the problem(s) [ 1417.968107][T17362] XFS (loop8): log mount/recovery failed: error -117 [ 1418.087158][T17362] XFS (loop8): log mount failed [ 1419.086280][T17448] loop9: detected capacity change from 0 to 64 [ 1419.122931][T17448] hfs: inconsistency in B*Tree (2,1,255,1,0) [ 1419.129352][T17448] hfs: get root inode failed [ 1421.825597][ T26] audit: type=1326 audit(1744853435.900:97): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17454 comm="syz.9.2953" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7ffb1218e169 code=0x0 [ 1422.275222][T17484] device netdevsim0 entered promiscuous mode [ 1423.103377][ T1276] ieee802154 phy0 wpan0: encryption failed: -22 [ 1423.110376][ T1276] ieee802154 phy1 wpan1: encryption failed: -22 [ 1423.738189][T17497] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(11) [ 1423.744950][T17497] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1423.902979][T17502] vhci_hcd: connection closed [ 1423.911085][T17497] vhci_hcd vhci_hcd.0: Device attached [ 1424.080996][T17517] loop3: detected capacity change from 0 to 64 [ 1424.344291][ T8411] vhci_hcd: stop threads [ 1424.348695][ T8411] vhci_hcd: release socket [ 1424.353717][ T8411] vhci_hcd: disconnect device [ 1424.401659][T17517] hfs: inconsistency in B*Tree (2,1,255,1,0) [ 1424.407964][T17517] hfs: get root inode failed [ 1424.422969][ T4256] vhci_hcd: vhci_device speed not set [ 1425.015537][T17519] loop8: detected capacity change from 0 to 32768 [ 1425.071713][T17519] jfs_mount: dbMount failed w/rc = -22 [ 1425.081589][T17519] Mount JFS Failure: -22 [ 1425.085994][T17519] jfs_mount failed w/return code = -22 [ 1425.856092][ T26] audit: type=1326 audit(1744853439.930:98): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17532 comm="syz.8.2971" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fab6678e169 code=0x0 [ 1426.120100][T17548] fuse: Unknown parameter 'group_idÌ00000000000000000000' [ 1428.673763][T17569] vhci_hcd vhci_hcd.0: pdev(8) rhport(0) sockfd(11) [ 1428.680426][T17569] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1428.688485][T17569] vhci_hcd vhci_hcd.0: Device attached [ 1428.696419][T17576] vhci_hcd: connection closed [ 1428.707107][ T4405] vhci_hcd: stop threads [ 1428.722194][ T4405] vhci_hcd: release socket [ 1428.759029][ T4405] vhci_hcd: disconnect device [ 1430.647229][ T7] usb 9-1: new high-speed USB device number 22 using dummy_hcd [ 1430.748610][ T26] audit: type=1326 audit(1744853444.760:99): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17604 comm="syz.0.2993" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f1dd6f8e169 code=0x0 [ 1430.895993][ T7] usb 9-1: Using ep0 maxpacket: 8 [ 1430.942214][ T7] usb 9-1: config index 0 descriptor too short (expected 301, got 45) [ 1431.084053][ T7] usb 9-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1431.217128][ T7] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1431.258176][ T7] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1431.337773][ T7] usb 9-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1431.419206][T17621] loop3: detected capacity change from 0 to 64 [ 1431.447125][ T7] usb 9-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1431.457591][ T7] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1431.538038][T17621] hfs: inconsistency in B*Tree (2,1,255,1,0) [ 1431.544953][T17621] hfs: get root inode failed [ 1431.803430][ T7] usb 9-1: usb_control_msg returned -32 [ 1432.013458][ T7] usbtmc 9-1:16.0: can't read capabilities [ 1432.142886][T17610] netlink: 12 bytes leftover after parsing attributes in process `syz.8.2991'. [ 1433.053177][ T4409] usb 9-1: USB disconnect, device number 22 [ 1434.233117][T17645] nvme_fabrics: missing parameter 'transport=%s' [ 1434.273000][T17645] nvme_fabrics: missing parameter 'nqn=%s' [ 1434.421540][T17648] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(11) [ 1434.428214][T17648] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1434.488895][T17648] vhci_hcd vhci_hcd.0: Device attached [ 1434.518845][T17652] vhci_hcd: connection closed [ 1434.579884][T16420] vhci_hcd: stop threads [ 1434.619830][T16420] vhci_hcd: release socket [ 1434.639385][T16420] vhci_hcd: disconnect device [ 1434.688480][ T8504] vhci_hcd: vhci_device speed not set [ 1435.694762][T17679] fuse: Bad value for 'fd' [ 1438.558223][T17707] nvme_fabrics: missing parameter 'transport=%s' [ 1438.639106][T17707] nvme_fabrics: missing parameter 'nqn=%s' [ 1439.969054][T17724] vhci_hcd vhci_hcd.0: pdev(8) rhport(0) sockfd(11) [ 1439.975835][T17724] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1439.994407][T17724] vhci_hcd vhci_hcd.0: Device attached [ 1440.280756][T17725] vhci_hcd: connection closed [ 1440.281037][T16454] vhci_hcd: stop threads [ 1440.297211][ T8504] usb 49-1: new low-speed USB device number 6 using vhci_hcd [ 1440.314995][T16454] vhci_hcd: release socket [ 1440.397197][T16454] vhci_hcd: disconnect device [ 1442.115100][T17743] fuse: Bad value for 'fd' [ 1443.460888][T17767] afs: Unknown parameter '00000000000000000000003' [ 1443.987687][T17767] overlayfs: overlapping lowerdir path [ 1445.647111][ T8504] vhci_hcd: vhci_device speed not set [ 1445.683180][T17795] loop8: detected capacity change from 0 to 16 [ 1448.473034][T17806] fuse: Unknown parameter 'group_idÌ00000000000000000000' [ 1448.674184][T17809] loop3: detected capacity change from 0 to 2048 [ 1448.817325][T17809] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1449.318684][T17826] afs: Unknown parameter '00000000000000000000003' [ 1449.326709][T17826] overlayfs: overlapping lowerdir path [ 1451.367911][T17844] loop9: detected capacity change from 0 to 32768 [ 1452.255111][T17844] XFS (loop9): Mounting V5 Filesystem [ 1452.400700][T17844] XFS (loop9): Starting recovery (logdev: internal) [ 1453.039992][T17844] XFS (loop9): Corruption warning: Metadata has LSN (8192:16) ahead of current LSN (1:48). Please unmount and run xfs_repair (>= v4.3) to resolve. [ 1453.055949][T17844] XFS (loop9): Metadata corruption detected at xfs_agi_verify+0x22d/0x530, xfs_agi block 0x2 [ 1453.066394][T17844] XFS (loop9): Unmount and run xfs_repair [ 1453.072197][T17844] XFS (loop9): First 128 bytes of corrupted metadata buffer: [ 1453.079755][T17844] 00000000: 58 41 47 49 00 00 00 01 00 00 00 00 00 00 20 00 XAGI.......... . [ 1453.088812][T17844] 00000010: 00 00 00 40 00 00 00 03 00 00 00 01 00 00 00 37 ...@...........7 [ 1453.097833][T17844] 00000020: 00 00 18 00 ff ff ff ff ff ff ff ff ff ff ff ff ................ [ 1453.106826][T17844] 00000030: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ................ [ 1453.115802][T17844] 00000040: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ................ [ 1453.124892][T17844] 00000050: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ................ [ 1453.133946][T17844] 00000060: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ................ [ 1453.142889][T17844] 00000070: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ................ [ 1453.152695][T17844] XFS (loop9): Corruption of in-memory data (0x8) detected at _xfs_buf_ioapply+0x37a/0x6d0 (fs/xfs/xfs_buf.c:1553). Shutting down filesystem. [ 1453.167347][T17844] XFS (loop9): Please unmount the filesystem and rectify the problem(s) [ 1453.176224][T17844] XFS (loop9): log mount/recovery failed: error -117 [ 1453.344718][T17844] XFS (loop9): log mount failed [ 1453.838873][T17880] fuse: Unknown parameter 'group_idÌ00000000000000000000' [ 1453.972535][T17884] afs: Unknown parameter '00000000000000000000003' [ 1453.980682][T17884] overlayfs: overlapping lowerdir path [ 1456.303151][T17903] syz.0.3063 (17903): drop_caches: 2 [ 1456.310893][T17903] syz.0.3063 (17903): drop_caches: 2 [ 1458.425531][T17940] afs: Unknown parameter '00000000000000000000003' [ 1458.463916][T17940] overlayfs: overlapping lowerdir path [ 1458.484146][T17946] loop8: detected capacity change from 0 to 2048 [ 1458.552447][T17946] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1460.928917][ T26] audit: type=1326 audit(1744853475.000:100): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17971 comm="syz.9.3082" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffb1218e169 code=0x7ffc0000 [ 1461.771065][ T26] audit: type=1326 audit(1744853475.000:101): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17971 comm="syz.9.3082" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffb1218e169 code=0x7ffc0000 [ 1462.042198][ T26] audit: type=1326 audit(1744853475.000:102): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17971 comm="syz.9.3082" exe="/root/syz-executor" sig=0 arch=c000003e syscall=280 compat=0 ip=0x7ffb1218e169 code=0x7ffc0000 [ 1462.181878][T17992] loop9: detected capacity change from 0 to 256 [ 1462.717058][ T26] audit: type=1326 audit(1744853475.000:103): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17971 comm="syz.9.3082" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffb1218e169 code=0x7ffc0000 [ 1462.749314][ T26] audit: type=1326 audit(1744853475.000:104): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17971 comm="syz.9.3082" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffb1218e169 code=0x7ffc0000 [ 1462.855008][T17992] loop9: detected capacity change from 0 to 1764 [ 1462.895615][ T26] audit: type=1326 audit(1744853475.000:105): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17971 comm="syz.9.3082" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7ffb1218e169 code=0x7ffc0000 [ 1462.925922][T17995] afs: Unknown parameter '01777777777777777777777' [ 1462.934297][T17995] overlayfs: overlapping lowerdir path [ 1464.327341][ T26] audit: type=1326 audit(1744853475.010:106): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17971 comm="syz.9.3082" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffb1218e169 code=0x7ffc0000 [ 1464.367074][ T26] audit: type=1326 audit(1744853475.010:107): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17971 comm="syz.9.3082" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffb1218e169 code=0x7ffc0000 [ 1464.454127][ T26] audit: type=1326 audit(1744853475.010:108): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17971 comm="syz.9.3082" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7ffb1218e169 code=0x7ffc0000 [ 1465.168395][T18029] Cannot find add_set index 0 as target [ 1465.487501][ T4301] usb 4-1: new high-speed USB device number 36 using dummy_hcd [ 1465.702302][ T4301] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1467.660822][ T4301] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1468.443501][T18033] netlink: 16402 bytes leftover after parsing attributes in process `syz.8.3097'. [ 1468.454224][ T4301] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 1468.483847][T18032] netlink: 16402 bytes leftover after parsing attributes in process `syz.8.3097'. [ 1468.497185][ T4301] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 1468.526814][ T4301] usb 4-1: SerialNumber: syz [ 1468.786869][ T4301] usb 4-1: 0:2 : does not exist [ 1468.813689][ T4301] usb 4-1: unit 5 not found! [ 1468.877205][ T4301] usb 4-1: USB disconnect, device number 36 [ 1469.131632][T18046] udevd[18046]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1469.522232][T18056] loop8: detected capacity change from 0 to 64 [ 1469.689572][T18056] hfs: inconsistency in B*Tree (2,1,255,1,0) [ 1469.695791][T18056] hfs: get root inode failed [ 1471.514680][T18073] afs: Unknown parameter '01777777777777777777777' [ 1471.523720][T18073] overlayfs: overlapping lowerdir path [ 1472.827703][T18091] netlink: 16402 bytes leftover after parsing attributes in process `syz.9.3110'. [ 1472.867530][T18089] netlink: 16402 bytes leftover after parsing attributes in process `syz.9.3110'. [ 1474.235835][T18108] loop3: detected capacity change from 0 to 256 [ 1477.116713][T18131] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3122'. [ 1478.458232][T18155] netlink: 16402 bytes leftover after parsing attributes in process `syz.8.3128'. [ 1478.547376][T18144] netlink: 16402 bytes leftover after parsing attributes in process `syz.8.3128'. [ 1481.975073][T18179] netlink: 36 bytes leftover after parsing attributes in process `syz.8.3135'. [ 1482.354660][T18184] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(11) [ 1482.361425][T18184] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1482.500727][T18184] vhci_hcd vhci_hcd.0: Device attached [ 1482.688653][T18186] vhci_hcd: connection closed [ 1482.688970][T16442] vhci_hcd: stop threads [ 1482.727048][T16442] vhci_hcd: release socket [ 1482.739279][T16442] vhci_hcd: disconnect device [ 1482.777229][T12678] usb 39-1: new low-speed USB device number 17 using vhci_hcd [ 1482.805205][T12678] usb 39-1: enqueue for inactive port 0 [ 1483.143099][T18192] loop8: detected capacity change from 0 to 40427 [ 1483.160384][T12678] vhci_hcd: vhci_device speed not set [ 1483.392056][T18192] F2FS-fs (loop8): Invalid log_blocksize (268), supports only 12 [ 1483.400823][T18192] F2FS-fs (loop8): Can't find valid F2FS filesystem in 1th superblock [ 1483.413429][T18192] F2FS-fs (loop8): invalid crc value [ 1483.479067][T18192] F2FS-fs (loop8): Found nat_bits in checkpoint [ 1483.545267][T18192] F2FS-fs (loop8): Try to recover 1th superblock, ret: 0 [ 1483.552591][T18192] F2FS-fs (loop8): Mounted with checkpoint version = 48b305e5 [ 1484.607757][ T1276] ieee802154 phy0 wpan0: encryption failed: -22 [ 1484.614190][ T1276] ieee802154 phy1 wpan1: encryption failed: -22 [ 1487.397204][T18226] netlink: 16402 bytes leftover after parsing attributes in process `syz.9.3144'. [ 1487.426685][T18221] netlink: 16402 bytes leftover after parsing attributes in process `syz.9.3144'. [ 1488.346552][T18233] nvme_fabrics: missing parameter 'transport=%s' [ 1488.372403][T18241] netlink: 36 bytes leftover after parsing attributes in process `syz.9.3150'. [ 1488.472498][T18233] nvme_fabrics: missing parameter 'nqn=%s' [ 1488.603524][T18247] loop9: detected capacity change from 0 to 64 [ 1488.631973][T18247] hfs: inconsistency in B*Tree (2,1,255,1,0) [ 1488.638392][T18247] hfs: get root inode failed [ 1490.814157][T18263] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3155'. [ 1491.259569][T18263] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(11) [ 1491.266242][T18263] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1491.332149][T18269] vhci_hcd: connection closed [ 1491.333540][T18263] vhci_hcd vhci_hcd.0: Device attached [ 1491.498969][ T4335] vhci_hcd: stop threads [ 1491.503382][ T4335] vhci_hcd: release socket [ 1491.509292][ T4335] vhci_hcd: disconnect device [ 1492.402216][ T5367] vhci_hcd: vhci_device speed not set [ 1493.310648][T18283] Cannot find add_set index 0 as target [ 1495.636893][T18293] netlink: 16402 bytes leftover after parsing attributes in process `syz.4.3160'. [ 1496.297939][T18292] netlink: 16402 bytes leftover after parsing attributes in process `syz.4.3160'. [ 1497.098566][T18300] netlink: 83 bytes leftover after parsing attributes in process `syz.0.3163'. [ 1497.196397][T18301] netlink: 36 bytes leftover after parsing attributes in process `syz.3.3162'. [ 1498.034450][T18309] loop3: detected capacity change from 0 to 65536 [ 1498.169879][T18309] XFS (loop3): Mounting V5 Filesystem [ 1498.243547][T18309] XFS (loop3): Ending clean mount [ 1498.501543][T14419] XFS (loop3): Unmounting Filesystem [ 1500.225790][T18339] loop9: detected capacity change from 0 to 40427 [ 1500.233742][T18339] F2FS-fs (loop9): Invalid log_blocksize (268), supports only 12 [ 1500.241646][T18339] F2FS-fs (loop9): Can't find valid F2FS filesystem in 1th superblock [ 1500.258458][T18339] F2FS-fs (loop9): invalid crc value [ 1500.387828][T18343] overlayfs: failed to clone upperpath [ 1500.458575][T18339] F2FS-fs (loop9): Found nat_bits in checkpoint [ 1500.517723][T18339] F2FS-fs (loop9): Try to recover 1th superblock, ret: 0 [ 1500.524916][T18339] F2FS-fs (loop9): Mounted with checkpoint version = 48b305e5 [ 1502.112133][T18364] netlink: 16402 bytes leftover after parsing attributes in process `syz.4.3176'. [ 1502.165922][T18362] netlink: 16402 bytes leftover after parsing attributes in process `syz.4.3176'. [ 1502.228981][T18349] nvme_fabrics: missing parameter 'transport=%s' [ 1502.588098][T18349] nvme_fabrics: missing parameter 'nqn=%s' [ 1504.106141][T18381] netlink: 36 bytes leftover after parsing attributes in process `syz.3.3178'. [ 1504.231681][T18387] afs: Unknown parameter '00000000000000000000003' [ 1504.240009][T18387] overlayfs: overlapping lowerdir path [ 1504.430819][T18390] Cannot find add_set index 0 as target [ 1504.747267][T11252] usb 10-1: new high-speed USB device number 10 using dummy_hcd [ 1506.847208][T11252] usb 10-1: device descriptor read/64, error -71 [ 1507.127482][T11252] usb 10-1: new high-speed USB device number 11 using dummy_hcd [ 1507.387677][T11252] usb 10-1: device descriptor read/64, error -71 [ 1507.547757][T11252] usb usb10-port1: attempt power cycle [ 1507.957392][T11252] usb 10-1: new high-speed USB device number 12 using dummy_hcd [ 1508.020426][T11252] usb 10-1: device descriptor read/8, error -71 [ 1508.357415][T11252] usb 10-1: new high-speed USB device number 13 using dummy_hcd [ 1509.309823][T11252] usb 10-1: device descriptor read/8, error -71 [ 1509.477733][T11252] usb usb10-port1: unable to enumerate USB device [ 1509.938309][T18412] loop3: detected capacity change from 0 to 40427 [ 1509.946046][T18412] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 1509.953987][T18412] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 1510.000078][T18412] F2FS-fs (loop3): invalid crc value [ 1510.088987][T18412] F2FS-fs (loop3): Found nat_bits in checkpoint [ 1510.188715][T18412] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 1510.195835][T18412] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 1510.456341][T18423] netlink: 16402 bytes leftover after parsing attributes in process `syz.4.3190'. [ 1511.358172][T18425] netlink: 16402 bytes leftover after parsing attributes in process `syz.4.3190'. [ 1511.823499][T18413] loop8: detected capacity change from 0 to 32768 [ 1511.989354][T18413] XFS (loop8): Mounting V5 Filesystem [ 1512.448096][T18459] netlink: 36 bytes leftover after parsing attributes in process `syz.3.3192'. [ 1514.590367][T18413] XFS (loop8): Starting recovery (logdev: internal) [ 1514.699126][T18413] XFS (loop8): Corruption warning: Metadata has LSN (8192:16) ahead of current LSN (1:48). Please unmount and run xfs_repair (>= v4.3) to resolve. [ 1514.747103][T18413] XFS (loop8): Metadata corruption detected at xfs_agi_verify+0x22d/0x530, xfs_agi block 0x2 [ 1514.758525][T18413] XFS (loop8): Unmount and run xfs_repair [ 1514.764365][T18413] XFS (loop8): First 128 bytes of corrupted metadata buffer: [ 1514.807221][T18413] 00000000: 58 41 47 49 00 00 00 01 00 00 00 00 00 00 20 00 XAGI.......... . [ 1514.852264][T18467] loop3: detected capacity change from 0 to 256 [ 1514.858890][T18413] 00000010: 00 00 00 40 00 00 00 03 00 00 00 01 00 00 00 37 ...@...........7 [ 1514.897376][T18413] 00000020: 00 00 18 00 ff ff ff ff ff ff ff ff ff ff ff ff ................ [ 1514.945315][T18467] exFAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 1514.967251][T18413] 00000030: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ................ [ 1514.990915][T18413] 00000040: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ................ [ 1515.001922][T18467] exFAT-fs (loop3): Medium has reported failures. Some data may be lost. [ 1515.022350][T18413] 00000050: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ................ [ 1515.043712][T18467] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x5419a5d9, utbl_chksum : 0xe619d30d) [ 1515.075861][T18413] 00000060: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ................ [ 1515.124544][T18413] 00000070: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ................ [ 1515.147160][T18413] XFS (loop8): Corruption of in-memory data (0x8) detected at _xfs_buf_ioapply+0x37a/0x6d0 (fs/xfs/xfs_buf.c:1553). Shutting down filesystem. [ 1515.263653][T18413] XFS (loop8): Please unmount the filesystem and rectify the problem(s) [ 1515.385691][T18413] XFS (loop8): log mount/recovery failed: error -117 [ 1516.704977][T18413] XFS (loop8): log mount failed [ 1517.714479][T18488] netlink: 16402 bytes leftover after parsing attributes in process `syz.0.3203'. [ 1517.722137][T18494] loop3: detected capacity change from 0 to 8 [ 1517.774970][T18487] netlink: 16402 bytes leftover after parsing attributes in process `syz.0.3203'. [ 1517.844677][ T26] audit: type=1800 audit(1744853532.922:109): pid=18494 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.3202" name="file1" dev="loop3" ino=5 res=0 errno=0 [ 1518.934697][T18494] SQUASHFS error: Failed to read block 0x2fc: -5 [ 1518.941741][T18494] SQUASHFS error: Unable to read metadata cache entry [2fa] [ 1518.949151][T18494] SQUASHFS error: read_indexes: reading block [2fa:0] [ 1518.955990][T18494] SQUASHFS error: Failed to read block 0xfc: -5 [ 1518.963047][T18494] SQUASHFS error: Unable to read metadata cache entry [2fa] [ 1518.971108][T18494] SQUASHFS error: read_indexes: reading block [2fa:0] [ 1518.980492][T18494] SQUASHFS error: Unable to read metadata cache entry [2fa] [ 1518.988415][T18494] SQUASHFS error: read_indexes: reading block [2fa:0] [ 1520.174648][T18518] nvme_fabrics: missing parameter 'transport=%s' [ 1520.225341][T18518] nvme_fabrics: missing parameter 'nqn=%s' [ 1521.535276][T18550] usb usb1: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 1523.809445][T18568] fuse: Unknown parameter 'group_idÌ00000000000000000000' [ 1524.007180][T18574] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(11) [ 1524.013850][T18574] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1524.109259][T18576] afs: Unknown parameter '00000000000000000000003' [ 1524.123058][T18576] overlayfs: overlapping lowerdir path [ 1524.193898][T18574] vhci_hcd vhci_hcd.0: Device attached [ 1524.231440][T18579] loop8: detected capacity change from 0 to 8 [ 1524.338280][T18579] SQUASHFS error: Failed to read block 0x4e8: -5 [ 1524.345569][T18579] SQUASHFS error: Failed to read block 0x4de: -5 [ 1524.449153][T18579] SQUASHFS error: Failed to read block 0x4de: -5 [ 1524.455628][T18579] SQUASHFS error: Failed to read block 0x4de: -5 [ 1524.617036][T12678] usb 39-1: new low-speed USB device number 19 using vhci_hcd [ 1524.643393][ T26] audit: type=1800 audit(1744853539.722:110): pid=18579 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.8.3221" name="file1" dev="loop8" ino=5 res=0 errno=0 [ 1524.823134][T18591] overlayfs: overlapping lowerdir path [ 1524.929781][T18592] overlayfs: "xino=on" is useless with all layers on same fs, ignore. [ 1525.117082][T18575] vhci_hcd: connection reset by peer [ 1525.123558][T11048] vhci_hcd: stop threads [ 1525.131735][T11048] vhci_hcd: release socket [ 1525.473749][T18593] Cannot find add_set index 0 as target [ 1526.208099][T11048] vhci_hcd: disconnect device [ 1526.327363][ T4298] usb 10-1: new high-speed USB device number 14 using dummy_hcd [ 1526.343816][ T26] audit: type=1800 audit(1744853540.272:111): pid=18585 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.8.3221" name="file1" dev="loop8" ino=5 res=0 errno=0 [ 1526.405825][ C1] raw-gadget.0 gadget.9: ignoring, device is not running [ 1526.577306][ T4298] usb 10-1: device descriptor read/64, error -32 [ 1526.897154][ T4298] usb 10-1: new high-speed USB device number 15 using dummy_hcd [ 1526.945795][ C1] raw-gadget.0 gadget.9: ignoring, device is not running [ 1527.137206][ T4298] usb 10-1: device descriptor read/64, error -32 [ 1527.279998][ T4298] usb usb10-port1: attempt power cycle [ 1527.747952][ T4298] usb 10-1: new high-speed USB device number 16 using dummy_hcd [ 1527.827525][ C1] raw-gadget.0 gadget.9: ignoring, device is not running [ 1527.834899][ T4298] usb 10-1: device descriptor read/8, error -32 [ 1528.127266][ T4298] usb 10-1: new high-speed USB device number 17 using dummy_hcd [ 1528.215913][ T4298] usb 10-1: device descriptor read/8, error -71 [ 1528.487915][ T4298] usb usb10-port1: unable to enumerate USB device [ 1528.975993][T18601] netlink: 16402 bytes leftover after parsing attributes in process `syz.4.3225'. [ 1529.137520][T18600] netlink: 16402 bytes leftover after parsing attributes in process `syz.4.3225'. [ 1530.053892][T12678] vhci_hcd: vhci_device speed not set [ 1530.488067][T18609] netlink: 16 bytes leftover after parsing attributes in process `syz.8.3226'. [ 1535.203446][T18665] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3239'. [ 1535.326611][T18670] netlink: 16402 bytes leftover after parsing attributes in process `syz.8.3238'. [ 1535.377037][T18664] netlink: 16402 bytes leftover after parsing attributes in process `syz.8.3238'. [ 1535.605361][T18674] Cannot find add_set index 0 as target [ 1535.947188][ T5367] usb 4-1: new high-speed USB device number 37 using dummy_hcd [ 1538.043616][ T5367] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1538.263385][ T5367] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1539.142996][ T5367] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 1539.239620][ T5367] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 1539.455336][ T5367] usb 4-1: SerialNumber: syz [ 1539.872763][ T5367] usb 4-1: 0:2 : does not exist [ 1539.909728][ T5367] usb 4-1: unit 5 not found! [ 1539.987050][T18689] loop8: detected capacity change from 0 to 512 [ 1540.017443][ T5367] usb 4-1: USB disconnect, device number 37 [ 1540.056525][T18689] EXT4-fs (loop8): ext4_check_descriptors: Block bitmap for group 0 overlaps block group descriptors [ 1540.123875][T18693] loop9: detected capacity change from 0 to 64 [ 1540.146647][T18693] hfs: inconsistency in B*Tree (2,1,255,1,0) [ 1540.152852][T18693] hfs: get root inode failed [ 1540.433964][T18046] udevd[18046]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1540.951023][T18044] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 1540.960922][T18689] EXT4-fs (loop8): group descriptors corrupted! [ 1541.358559][T18701] vhci_hcd vhci_hcd.0: pdev(9) rhport(0) sockfd(11) [ 1541.365234][T18701] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1541.387095][T18701] vhci_hcd vhci_hcd.0: Device attached [ 1541.398156][T18703] fuse: Bad value for 'fd' [ 1542.137476][T18702] vhci_hcd: connection closed [ 1542.297295][ T5367] usb 51-1: new low-speed USB device number 5 using vhci_hcd [ 1542.405615][T16447] vhci_hcd: stop threads [ 1542.437010][T16447] vhci_hcd: release socket [ 1542.441532][T16447] vhci_hcd: disconnect device [ 1542.573289][ T5367] usb 51-1: enqueue for inactive port 0 [ 1542.940482][ T5367] vhci_hcd: vhci_device speed not set [ 1543.537656][T18746] nvme_fabrics: missing parameter 'transport=%s' [ 1543.574887][T18746] nvme_fabrics: missing parameter 'nqn=%s' [ 1546.418116][ T1276] ieee802154 phy0 wpan0: encryption failed: -22 [ 1546.424480][ T1276] ieee802154 phy1 wpan1: encryption failed: -22 [ 1546.487012][ T5367] usb 4-1: new high-speed USB device number 38 using dummy_hcd [ 1546.740234][T18784] Cannot find add_set index 0 as target [ 1546.807064][ T5367] usb 4-1: Using ep0 maxpacket: 8 [ 1548.139916][ T5367] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 1550.396188][ T5367] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 1550.406835][ T5367] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1550.417128][ T5367] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1550.431186][ T5367] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1550.440572][ T5367] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1550.667736][ T5367] usb 4-1: can't set config #16, error -71 [ 1550.953833][ T5367] usb 4-1: USB disconnect, device number 38 [ 1551.130227][T18803] fuse: Bad value for 'fd' [ 1553.945111][T18823] nvme_fabrics: missing parameter 'transport=%s' [ 1554.007366][T18826] loop8: detected capacity change from 0 to 512 [ 1554.097645][T18826] EXT4-fs (loop8): ext4_check_descriptors: Block bitmap for group 0 overlaps block group descriptors [ 1554.137062][T18823] nvme_fabrics: missing parameter 'nqn=%s' [ 1554.583699][T18826] EXT4-fs (loop8): group descriptors corrupted! [ 1555.317011][T15988] usb 4-1: new high-speed USB device number 39 using dummy_hcd [ 1555.882582][T15988] usb 4-1: Using ep0 maxpacket: 8 [ 1555.923728][T15988] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 1556.937711][T15988] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 1556.947882][T15988] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1556.958185][T15988] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1556.971542][T15988] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1557.007877][T15988] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1558.008290][T15988] usb 4-1: usb_control_msg returned -71 [ 1558.013932][T15988] usbtmc 4-1:16.0: can't read capabilities [ 1558.041991][T15988] usb 4-1: USB disconnect, device number 39 [ 1560.328620][T18887] nvme_fabrics: missing parameter 'transport=%s' [ 1560.335063][T18887] nvme_fabrics: missing parameter 'nqn=%s' [ 1562.417258][ T8504] usb 10-1: new high-speed USB device number 18 using dummy_hcd [ 1562.431950][T18926] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(11) [ 1562.438651][T18926] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1562.483999][T18926] vhci_hcd vhci_hcd.0: Device attached [ 1562.647698][ T8504] usb 10-1: Using ep0 maxpacket: 8 [ 1562.680506][ T8504] usb 10-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 1562.757554][ T4347] usb 33-1: new low-speed USB device number 11 using vhci_hcd [ 1562.969548][ T8504] usb 10-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 1563.166556][ T8504] usb 10-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1563.258805][T18927] vhci_hcd: connection reset by peer [ 1563.265118][T16424] vhci_hcd: stop threads [ 1563.274888][T16424] vhci_hcd: release socket [ 1563.377256][T16424] vhci_hcd: disconnect device [ 1563.382078][ T8504] usb 10-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1563.482825][ T8504] usb 10-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1563.522654][ T8504] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1563.778244][ T8504] usb 10-1: GET_CAPABILITIES returned 0 [ 1563.783875][ T8504] usbtmc 10-1:16.0: can't read capabilities [ 1565.002170][T11252] usb 10-1: USB disconnect, device number 18 [ 1565.441034][T18949] nvme_fabrics: missing parameter 'transport=%s' [ 1565.449519][T18949] nvme_fabrics: missing parameter 'nqn=%s' [ 1568.001085][T18978] loop8: detected capacity change from 0 to 65536 [ 1568.076344][T18978] XFS (loop8): Mounting V5 Filesystem [ 1568.087224][ T4347] vhci_hcd: vhci_device speed not set [ 1568.167160][T18978] XFS (loop8): Ending clean mount [ 1568.188564][T18994] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3311'. [ 1568.371807][T11602] XFS (loop8): Unmounting Filesystem [ 1568.607955][T12765] usb 4-1: new high-speed USB device number 40 using dummy_hcd [ 1568.639565][T19004] Cannot find add_set index 0 as target [ 1568.837383][T12765] usb 4-1: Using ep0 maxpacket: 8 [ 1568.872099][T12765] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 1569.003644][T12765] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 1569.114583][T12765] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1569.216580][T12765] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1569.353563][T12765] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1569.451902][T12765] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1569.818081][ T126] usb 10-1: new high-speed USB device number 19 using dummy_hcd [ 1569.997006][T12765] usb 4-1: GET_CAPABILITIES returned 0 [ 1570.002790][T12765] usbtmc 4-1:16.0: can't read capabilities [ 1570.111444][ T126] usb 10-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1570.173126][ T126] usb 10-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1570.379919][T12765] usb 4-1: USB disconnect, device number 40 [ 1570.449052][ T126] usb 10-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 1570.625382][ T126] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 1570.767750][ T126] usb 10-1: SerialNumber: syz [ 1571.178561][T19002] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(10) [ 1571.185251][T19002] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1572.325526][T19010] vhci_hcd: connection closed [ 1572.327017][T19002] vhci_hcd vhci_hcd.0: Device attached [ 1572.337760][ T9210] vhci_hcd: stop threads [ 1572.343744][ T9210] vhci_hcd: release socket [ 1572.387678][ T9210] vhci_hcd: disconnect device [ 1572.495170][ T126] usb 10-1: 0:2 : does not exist [ 1572.517070][ T126] usb 10-1: unit 5 not found! [ 1572.578182][ T126] usb 10-1: USB disconnect, device number 19 [ 1572.878107][T18797] udevd[18797]: error opening ATTR{/sys/devices/platform/dummy_hcd.9/usb10/10-1/10-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1573.993112][T19022] loop8: detected capacity change from 0 to 8 [ 1574.067133][ T26] audit: type=1800 audit(1744853589.122:112): pid=19022 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.8.3318" name="file1" dev="loop8" ino=5 res=0 errno=0 [ 1579.411889][T19075] Cannot find add_set index 0 as target [ 1579.717168][ T8504] usb 10-1: new high-speed USB device number 20 using dummy_hcd [ 1580.846503][ T8504] usb 10-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1581.060048][ T8504] usb 10-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1581.232363][ T8504] usb 10-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 1581.380915][ T8504] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 1581.520561][ T8504] usb 10-1: SerialNumber: syz [ 1583.725456][ T8504] usb 10-1: 0:2 : does not exist [ 1583.734769][ T8504] usb 10-1: unit 5 not found! [ 1583.848255][ T8504] usb 10-1: USB disconnect, device number 20 [ 1583.996197][T19086] fuse: Unknown parameter 'group_idÌ00000000000000000000' [ 1584.166866][T18797] udevd[18797]: error opening ATTR{/sys/devices/platform/dummy_hcd.9/usb10/10-1/10-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1587.149367][T19112] nvme_fabrics: missing parameter 'transport=%s' [ 1587.183770][T19112] nvme_fabrics: missing parameter 'nqn=%s' [ 1587.587331][T19011] usb 9-1: new high-speed USB device number 23 using dummy_hcd [ 1587.861516][T19011] usb 9-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 1587.935954][T19011] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1588.065197][T19011] usb 9-1: Product: syz [ 1588.135186][T19011] usb 9-1: Manufacturer: syz [ 1588.219247][T19011] usb 9-1: SerialNumber: syz [ 1588.345683][ T4298] usb 4-1: new high-speed USB device number 41 using dummy_hcd [ 1588.346097][T19011] usb 9-1: config 0 descriptor?? [ 1588.657004][ T4298] usb 4-1: Using ep0 maxpacket: 8 [ 1588.663975][ T4298] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 1588.700010][ T4298] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 1588.737662][ T4298] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1588.757042][ T4298] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1588.790512][ T4298] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1588.805403][ T4298] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1588.910932][T19135] Cannot find add_set index 0 as target [ 1589.258052][T19011] usb 9-1: Firmware version (0.0) predates our first public release. [ 1589.267535][T19011] usb 9-1: Please update to version 0.2 or newer [ 1589.269895][ T4298] usb 4-1: GET_CAPABILITIES returned 0 [ 1589.409439][ T4298] usbtmc 4-1:16.0: can't read capabilities [ 1589.432158][T19138] fuse: Unknown parameter 'group_idÌ00000000000000000000' [ 1589.467735][T19011] usb 9-1: USB disconnect, device number 23 [ 1589.503490][ T4298] usb 4-1: USB disconnect, device number 41 [ 1595.067667][T19175] fuse: Unknown parameter 'group_idÌ00000000000000000000' [ 1595.596178][T19188] Cannot find add_set index 0 as target [ 1596.007169][ T22] usb 10-1: new high-speed USB device number 21 using dummy_hcd [ 1596.231104][ T22] usb 10-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1596.324296][ T22] usb 10-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1596.520558][ T22] usb 10-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 1596.703870][ T22] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 1596.866196][ T22] usb 10-1: SerialNumber: syz [ 1599.465472][ T22] usb 10-1: 0:2 : does not exist [ 1599.481215][ T22] usb 10-1: unit 5 not found! [ 1599.565253][ T22] usb 10-1: USB disconnect, device number 21 [ 1599.614153][T18797] udevd[18797]: error opening ATTR{/sys/devices/platform/dummy_hcd.9/usb10/10-1/10-1:1.0/sound/card3/controlC3/../uevent} for writing: No such device [ 1602.104353][T19221] fuse: Bad value for 'fd' [ 1602.190265][T19224] loop3: detected capacity change from 0 to 512 [ 1602.200982][T19224] EXT4-fs (loop3): ext4_check_descriptors: Block bitmap for group 0 overlaps block group descriptors [ 1602.212227][T19224] EXT4-fs (loop3): group descriptors corrupted! [ 1602.469416][T18797] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 1604.596421][T19249] Cannot find add_set index 0 as target [ 1604.920815][ T4256] usb 10-1: new high-speed USB device number 22 using dummy_hcd [ 1607.420075][ T1276] ieee802154 phy0 wpan0: encryption failed: -22 [ 1607.426788][ T1276] ieee802154 phy1 wpan1: encryption failed: -22 [ 1608.258005][ T4256] usb 10-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1608.296262][ T4256] usb 10-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1609.419605][ T4256] usb 10-1: string descriptor 0 read error: -71 [ 1609.426126][ T4256] usb 10-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 1609.637075][ T4256] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 1609.681797][ T4256] usb 10-1: can't set config #1, error -71 [ 1609.719069][ T4256] usb 10-1: USB disconnect, device number 22 [ 1610.821091][T19275] fuse: Unknown parameter 'group_idÌ00000000000000000000' [ 1612.039871][T19290] loop9: detected capacity change from 0 to 512 [ 1612.065593][T19290] EXT4-fs (loop9): ext4_check_descriptors: Block bitmap for group 0 overlaps block group descriptors [ 1612.077332][T19290] EXT4-fs (loop9): group descriptors corrupted! [ 1613.409815][T19304] Cannot find add_set index 0 as target [ 1613.727056][ T5367] usb 10-1: new high-speed USB device number 23 using dummy_hcd [ 1613.941053][ T5367] usb 10-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1614.038039][ T5367] usb 10-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1614.238184][ T5367] usb 10-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 1614.434929][ T5367] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 1614.595924][ T5367] usb 10-1: SerialNumber: syz [ 1617.160127][ T5367] usb 10-1: 0:2 : does not exist [ 1617.165147][ T5367] usb 10-1: unit 5 not found! [ 1617.285477][ T5367] usb 10-1: USB disconnect, device number 23 [ 1618.445573][T19322] fuse: Unknown parameter 'group_idÌ00000000000000000000' [ 1618.455193][T18797] udevd[18797]: error opening ATTR{/sys/devices/platform/dummy_hcd.9/usb10/10-1/10-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1622.791115][T19341] loop8: detected capacity change from 0 to 8 [ 1623.794954][T19334] netlink: 4 bytes leftover after parsing attributes in process `syz.9.3414'. [ 1623.824319][ T26] audit: type=1800 audit(1744853638.892:113): pid=19341 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.8.3417" name="file1" dev="loop8" ino=5 res=0 errno=0 [ 1623.963303][T19350] netlink: 'syz.4.3419': attribute type 4 has an invalid length. [ 1624.086499][T19352] ipt_rpfilter: unknown options [ 1624.105930][ T126] lo speed is unknown, defaulting to 1000 [ 1624.158827][T19356] IPVS: set_ctl: invalid protocol: 59 172.20.20.65:5 [ 1625.285633][T19370] Cannot find add_set index 0 as target [ 1625.887053][ T4256] usb 9-1: new high-speed USB device number 24 using dummy_hcd [ 1626.067445][ T4256] usb 9-1: device descriptor read/64, error -71 [ 1626.819231][ T4256] usb 9-1: new high-speed USB device number 25 using dummy_hcd [ 1627.196268][T19377] loop3: detected capacity change from 0 to 4096 [ 1627.386780][T19379] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1627.497327][ T4256] usb 9-1: device descriptor read/64, error -71 [ 1627.639949][ T4256] usb usb9-port1: attempt power cycle [ 1628.077330][ T4256] usb 9-1: new high-speed USB device number 26 using dummy_hcd [ 1628.138497][ T4256] usb 9-1: device descriptor read/8, error -71 [ 1628.467202][ T4256] usb 9-1: new high-speed USB device number 27 using dummy_hcd [ 1628.518538][ T4256] usb 9-1: device descriptor read/8, error -71 [ 1628.702006][ T4256] usb usb9-port1: unable to enumerate USB device [ 1629.994996][T19388] fuse: Unknown parameter 'group_idÌ00000000000000000000' [ 1633.676978][T19440] fuse: Unknown parameter 'group_idÌ00000000000000000000' [ 1634.006188][T19445] Cannot find add_set index 0 as target [ 1634.358757][ T4256] usb 10-1: new high-speed USB device number 24 using dummy_hcd [ 1634.567060][ T4256] usb 10-1: device descriptor read/64, error -71 [ 1634.867027][ T4256] usb 10-1: new high-speed USB device number 25 using dummy_hcd [ 1635.058115][ T4256] usb 10-1: device descriptor read/64, error -71 [ 1635.188692][ T4256] usb usb10-port1: attempt power cycle [ 1635.627173][ T4256] usb 10-1: new high-speed USB device number 26 using dummy_hcd [ 1635.698637][ T4256] usb 10-1: device descriptor read/8, error -71 [ 1636.097192][ T4256] usb 10-1: new high-speed USB device number 27 using dummy_hcd [ 1636.190111][ T4256] usb 10-1: device descriptor read/8, error -71 [ 1636.411434][ T4256] usb usb10-port1: unable to enumerate USB device [ 1641.045146][T19487] fuse: Unknown parameter 'group_idÌ00000000000000000000' [ 1641.543202][T19495] overlayfs: overlapping lowerdir path [ 1641.591238][T19495] overlayfs: "xino=on" is useless with all layers on same fs, ignore. [ 1644.648543][T19525] Cannot find add_set index 0 as target [ 1645.137461][ T5367] usb 9-1: new high-speed USB device number 28 using dummy_hcd [ 1645.615999][ T5367] usb 9-1: device descriptor read/64, error -71 [ 1648.607141][ T5367] usb 9-1: new high-speed USB device number 29 using dummy_hcd [ 1651.646007][T19572] usb usb1: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 1654.222349][T19594] Cannot find add_set index 0 as target [ 1657.018846][T19609] loop9: detected capacity change from 0 to 32768 [ 1657.163659][ T26] audit: type=1804 audit(1744853672.242:114): pid=19609 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.9.3499" name="/newroot/203/file2/file1" dev="loop9" ino=4 res=1 errno=0 [ 1659.463081][T19635] fuse: Unknown parameter 'group_idÌ00000000000000000000' [ 1659.838284][T19641] loop3: detected capacity change from 0 to 64 [ 1659.890276][T19641] hfs: inconsistency in B*Tree (2,1,255,1,0) [ 1659.897086][T19641] hfs: get root inode failed [ 1660.003720][T19541] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 1661.084410][T19651] Cannot find add_set index 0 as target [ 1661.507585][T12765] usb 10-1: new high-speed USB device number 28 using dummy_hcd [ 1661.727050][T12765] usb 10-1: device descriptor read/64, error -71 [ 1662.037065][T12765] usb 10-1: new high-speed USB device number 29 using dummy_hcd [ 1662.257056][T12765] usb 10-1: device descriptor read/64, error -71 [ 1662.387708][T12765] usb usb10-port1: attempt power cycle [ 1662.807723][T12765] usb 10-1: new high-speed USB device number 30 using dummy_hcd [ 1662.880363][T12765] usb 10-1: device descriptor read/8, error -71 [ 1663.246993][T12765] usb 10-1: new high-speed USB device number 31 using dummy_hcd [ 1664.271518][T12765] usb 10-1: device descriptor read/8, error -71 [ 1664.447756][T12765] usb usb10-port1: unable to enumerate USB device [ 1668.268496][T19669] loop3: detected capacity change from 0 to 128 [ 1669.180565][ T1276] ieee802154 phy0 wpan0: encryption failed: -22 [ 1669.187023][ T1276] ieee802154 phy1 wpan1: encryption failed: -22 [ 1669.228820][T19685] fuse: Unknown parameter 'group_idÌ00000000000000000000' [ 1672.119272][T19707] nvme_fabrics: missing parameter 'transport=%s' [ 1672.125806][T19707] nvme_fabrics: missing parameter 'nqn=%s' [ 1672.594252][T19714] loop8: detected capacity change from 0 to 8 [ 1674.978749][T19727] Cannot find add_set index 0 as target [ 1677.265760][T19751] nvme_fabrics: missing parameter 'transport=%s' [ 1677.455596][T19757] fuse: Unknown parameter 'group_idÌ00000000000000000000' [ 1677.457254][T19751] nvme_fabrics: missing parameter 'nqn=%s' [ 1678.154225][T19765] loop9: detected capacity change from 0 to 512 [ 1679.066677][T19765] EXT4-fs error (device loop9): ext4_xattr_inode_iget:404: comm syz.9.3541: inode #1: comm syz.9.3541: iget: illegal inode # [ 1679.099021][T19765] EXT4-fs error (device loop9): ext4_xattr_inode_iget:409: comm syz.9.3541: error while reading EA inode 1 err=-117 [ 1679.152928][T19765] EXT4-fs (loop9): 1 orphan inode deleted [ 1679.158848][T19765] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: none. [ 1679.241939][T19765] overlayfs: failed to resolve './file1': -40 [ 1680.200659][T19776] trusted_key: encrypted_key: keyword 'new' not allowed when called from .update method [ 1682.186364][T14787] EXT4-fs (loop9): unmounting filesystem. [ 1684.969918][T19792] Cannot find add_set index 0 as target [ 1687.831518][T19800] nvme_fabrics: missing parameter 'transport=%s' [ 1688.341006][T19800] nvme_fabrics: missing parameter 'nqn=%s' [ 1688.918009][T19810] fuse: Unknown parameter 'group_idÌ00000000000000000000' [ 1689.260846][ T4264] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1689.276572][ T4264] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1689.296968][ T4264] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1689.310434][T19814] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1689.318251][T19814] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 1689.325567][T19814] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1691.219857][T18739] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1691.297045][ T26] audit: type=1400 audit(1744853706.372:115): apparmor="DENIED" operation="change_profile" info="label not found" error=-22 profile="unconfined" name="&" pid=19819 comm="syz.0.3556" [ 1691.315012][ C1] vkms_vblank_simulate: vblank timer overrun [ 1691.437511][T19814] Bluetooth: hci3: command 0x0409 tx timeout [ 1692.347804][T19831] netlink: 'syz.3.3563': attribute type 1 has an invalid length. [ 1692.677040][T18739] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1692.730886][T19839] loop9: detected capacity change from 0 to 256 [ 1692.733356][T19813] lo speed is unknown, defaulting to 1000 [ 1692.757770][T19839] exfat: Unknown parameter '18446744073709551615ÿÿÿÿÿÿÿÿÿ' [ 1693.032618][T19839] loop9: detected capacity change from 0 to 128 [ 1693.077337][T19843] Cannot find add_set index 0 as target [ 1693.133361][T18739] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1693.229299][T19839] ext4: Unknown parameter 'fowner' [ 1693.487066][T19814] Bluetooth: hci3: command 0x041b tx timeout [ 1695.566982][T19814] Bluetooth: hci3: command 0x040f tx timeout [ 1697.098598][T19853] nvme_fabrics: missing parameter 'transport=%s' [ 1697.104982][T19853] nvme_fabrics: missing parameter 'nqn=%s' [ 1697.357253][ T8504] usb 4-1: new high-speed USB device number 42 using dummy_hcd [ 1697.472104][T18739] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1697.591261][ T8504] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1697.657112][T19814] Bluetooth: hci3: command 0x0419 tx timeout [ 1697.707000][ T8504] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1697.788330][T19860] fuse: Unknown parameter 'group_idÌ00000000000000000000' [ 1697.797821][T19858] loop9: detected capacity change from 0 to 256 [ 1697.942778][ T8504] usb 4-1: string descriptor 0 read error: -71 [ 1698.007130][ T8504] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 1698.016265][ T8504] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 1698.084366][ T8504] usb 4-1: can't set config #1, error -71 [ 1698.125319][ T8504] usb 4-1: USB disconnect, device number 42 [ 1699.344857][T19813] chnl_net:caif_netlink_parms(): no params data found [ 1699.562135][T19880] loop9: detected capacity change from 0 to 1024 [ 1700.888930][T19813] bridge0: port 1(bridge_slave_0) entered blocking state [ 1700.896087][T19813] bridge0: port 1(bridge_slave_0) entered disabled state [ 1700.934005][T19813] device bridge_slave_0 entered promiscuous mode [ 1701.037984][T19813] bridge0: port 2(bridge_slave_1) entered blocking state [ 1701.045238][T19813] bridge0: port 2(bridge_slave_1) entered disabled state [ 1701.080924][T19813] device bridge_slave_1 entered promiscuous mode [ 1701.277246][T19813] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1701.302523][T19813] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1701.515438][T19813] team0: Port device team_slave_0 added [ 1701.565027][T19813] team0: Port device team_slave_1 added [ 1701.610858][ T4268] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1701.624576][ T4268] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1701.635888][ T4268] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1701.816615][ T4268] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1701.827473][ T4268] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 1701.834996][ T4268] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1702.464992][T19898] loop3: detected capacity change from 0 to 256 [ 1702.516250][T19904] nvme_fabrics: missing parameter 'transport=%s' [ 1702.517393][T19898] exfat: Unknown parameter '18446744073709551615ÿÿÿÿÿÿÿÿÿ' [ 1702.578840][T19868] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 1702.637565][T19904] nvme_fabrics: missing parameter 'nqn=%s' [ 1702.678697][T19897] loop3: detected capacity change from 0 to 128 [ 1702.719620][T19897] ext4: Unknown parameter 'fowner' [ 1702.742146][T19813] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1702.785510][T19813] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1702.811575][ C0] vkms_vblank_simulate: vblank timer overrun [ 1703.375285][T19813] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1703.453038][T19915] fuse: Unknown parameter 'group_idÌ00000000000000000000' [ 1703.505232][T19813] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1703.517023][T19813] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1703.617884][T19813] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1704.350611][ T4268] Bluetooth: hci0: command 0x0409 tx timeout [ 1704.837119][T19900] lo speed is unknown, defaulting to 1000 [ 1705.018540][T19813] device hsr_slave_0 entered promiscuous mode [ 1705.036031][T19813] device hsr_slave_1 entered promiscuous mode [ 1705.059454][T19813] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1705.082481][T19813] Cannot create hsr debugfs directory [ 1705.609307][T18739] device hsr_slave_0 left promiscuous mode [ 1705.620438][T18739] device hsr_slave_1 left promiscuous mode [ 1705.631528][T18739] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1705.641651][T18739] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1705.657980][T18739] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1705.667552][T18739] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1705.990596][T18739] device veth1_macvtap left promiscuous mode [ 1706.661311][T18739] device veth0_macvtap left promiscuous mode [ 1706.667691][T18739] device veth1_vlan left promiscuous mode [ 1706.673677][T18739] device veth0_vlan left promiscuous mode [ 1706.680890][T19948] nvme_fabrics: missing parameter 'transport=%s' [ 1706.687346][ T4268] Bluetooth: hci0: command 0x041b tx timeout [ 1706.696516][T19948] nvme_fabrics: missing parameter 'nqn=%s' [ 1706.934085][T19955] loop8: detected capacity change from 0 to 256 [ 1706.967788][T19955] exfat: Unknown parameter '18446744073709551615ÿÿÿÿÿÿÿÿÿ' [ 1707.706396][T19955] loop8: detected capacity change from 0 to 128 [ 1707.775556][T19960] vhci_hcd vhci_hcd.0: pdev(9) rhport(0) sockfd(11) [ 1707.782325][T19960] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1707.786073][T19955] ext4: Unknown parameter 'fowner' [ 1707.863238][T19964] loop3: detected capacity change from 0 to 64 [ 1707.885829][T19960] vhci_hcd vhci_hcd.0: Device attached [ 1708.132804][T19961] vhci_hcd: connection closed [ 1708.151314][T18725] vhci_hcd: stop threads [ 1708.185407][T18725] vhci_hcd: release socket [ 1708.227770][ T2181] usb 51-1: new low-speed USB device number 6 using vhci_hcd [ 1708.261904][T18725] vhci_hcd: disconnect device [ 1708.828945][ T4268] Bluetooth: hci0: command 0x040f tx timeout [ 1709.052906][T19969] fuse: Unknown parameter 'group_idÌ00000000000000000000' [ 1710.339770][T18739] team0 (unregistering): Port device team_slave_1 removed [ 1710.450264][T18739] team0 (unregistering): Port device team_slave_0 removed [ 1710.537657][T18739] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1710.639473][T18739] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1710.852801][ T4268] Bluetooth: hci0: command 0x0419 tx timeout [ 1711.699940][T18739] bond0 (unregistering): Released all slaves [ 1712.348223][T19988] loop9: detected capacity change from 0 to 32768 [ 1712.435469][T19988] ocfs2: Slot 0 on device (7,9) was already allocated to this node! [ 1712.509036][T19988] ocfs2: Mounting device (7,9) on (node local, slot 0) with ordered data mode. [ 1714.007142][ T2181] vhci_hcd: vhci_device speed not set [ 1714.173740][T19998] nvme_fabrics: missing parameter 'transport=%s' [ 1714.201099][T19998] nvme_fabrics: missing parameter 'nqn=%s' [ 1714.458234][T20002] netlink: 'syz.3.3606': attribute type 10 has an invalid length. [ 1714.509721][T14787] ocfs2: Unmounting device (7,9) on (node local) [ 1714.518151][T20002] bridge0: port 2(bridge_slave_1) entered disabled state [ 1714.525466][T20002] bridge0: port 1(bridge_slave_0) entered disabled state [ 1716.394966][T20004] netlink: 'syz.3.3606': attribute type 10 has an invalid length. [ 1716.425152][T20004] device netdevsim0 left promiscuous mode [ 1716.439259][T19900] chnl_net:caif_netlink_parms(): no params data found [ 1716.657549][T20016] vhci_hcd vhci_hcd.0: pdev(8) rhport(0) sockfd(11) [ 1716.664408][T20016] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1716.796152][T20016] vhci_hcd vhci_hcd.0: Device attached [ 1717.027090][T20017] vhci_hcd: connection closed [ 1717.061977][ T2181] usb 49-1: new low-speed USB device number 7 using vhci_hcd [ 1717.117224][T18725] vhci_hcd: stop threads [ 1717.122009][T18725] vhci_hcd: release socket [ 1717.155150][T18725] vhci_hcd: disconnect device [ 1717.385896][T19900] bridge0: port 1(bridge_slave_0) entered blocking state [ 1717.424008][T19900] bridge0: port 1(bridge_slave_0) entered disabled state [ 1717.453953][T20020] loop9: detected capacity change from 0 to 65536 [ 1717.471604][T19900] device bridge_slave_0 entered promiscuous mode [ 1717.535951][T19900] bridge0: port 2(bridge_slave_1) entered blocking state [ 1717.576381][T19900] bridge0: port 2(bridge_slave_1) entered disabled state [ 1717.623558][T20020] XFS (loop9): Mounting V5 Filesystem [ 1717.631476][T19900] device bridge_slave_1 entered promiscuous mode [ 1717.735045][T20020] XFS (loop9): Ending clean mount [ 1717.821812][T14787] XFS (loop9): Unmounting Filesystem [ 1718.010848][T20042] loop8: detected capacity change from 0 to 2048 [ 1718.082740][T19868] udevd[19868]: incorrect nilfs2 checksum on /dev/loop8 [ 1718.087056][T20042] NILFS (loop8): broken superblock, retrying with spare superblock (blocksize = 1024) [ 1718.185109][T20045] NILFS (loop8): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1718.276216][T19900] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1718.451177][T19900] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1719.148931][T19900] team0: Port device team_slave_0 added [ 1719.183602][T19900] team0: Port device team_slave_1 added [ 1720.198167][T19900] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1720.205200][T19900] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1720.811768][T19900] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1720.991884][T20058] nvme_fabrics: missing parameter 'transport=%s' [ 1721.081935][T20058] nvme_fabrics: missing parameter 'nqn=%s' [ 1721.098282][T20057] loop9: detected capacity change from 0 to 4096 [ 1721.205067][T18739] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1721.266307][T19900] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1721.269646][T20063] NILFS (loop9): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1721.307573][T19900] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1721.377627][T19900] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1722.328190][T20073] loop3: detected capacity change from 0 to 64 [ 1722.339427][T20073] hfs: inconsistency in B*Tree (2,1,255,1,0) [ 1722.345486][T20073] hfs: get root inode failed [ 1722.352025][ T2181] vhci_hcd: vhci_device speed not set [ 1722.612194][T18739] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1722.991588][T19813] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 1723.115588][T20078] vhci_hcd vhci_hcd.0: pdev(9) rhport(0) sockfd(11) [ 1723.122445][T20078] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1723.183839][T20075] loop8: detected capacity change from 0 to 65536 [ 1723.222104][T20075] XFS (loop8): Mounting V5 Filesystem [ 1723.269071][T19900] device hsr_slave_0 entered promiscuous mode [ 1723.279763][T19900] device hsr_slave_1 entered promiscuous mode [ 1723.282989][T20078] vhci_hcd vhci_hcd.0: Device attached [ 1723.312482][T19900] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1723.362925][T19900] Cannot create hsr debugfs directory [ 1723.372682][T20075] XFS (loop8): Ending clean mount [ 1723.383492][T19813] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 1723.440403][T20079] vhci_hcd: connection closed [ 1723.447409][T16447] vhci_hcd: stop threads [ 1723.457996][T11602] XFS (loop8): Unmounting Filesystem [ 1723.464778][T16447] vhci_hcd: release socket [ 1723.478476][T18739] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1723.489769][T16447] vhci_hcd: disconnect device [ 1723.553477][ T8504] usb 51-1: new low-speed USB device number 7 using vhci_hcd [ 1723.561708][T19813] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 1723.578937][ T8504] usb 51-1: enqueue for inactive port 0 [ 1723.670835][ T8504] vhci_hcd: vhci_device speed not set [ 1723.843264][T18739] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1724.448752][T19813] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 1726.181280][T20104] nvme_fabrics: missing parameter 'transport=%s' [ 1726.242414][T20104] nvme_fabrics: missing parameter 'nqn=%s' [ 1726.439655][T19813] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1726.631561][T19900] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1727.267249][T16425] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1727.328903][T16425] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1727.524933][T19813] 8021q: adding VLAN 0 to HW filter on device team0 [ 1727.561200][T20125] nvme_fabrics: missing parameter 'transport=%s' [ 1727.572765][T20122] loop3: detected capacity change from 0 to 4096 [ 1727.611636][T20125] nvme_fabrics: missing parameter 'nqn=%s' [ 1727.741212][T19900] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1727.757179][T20128] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1728.368596][T20130] loop9: detected capacity change from 0 to 65536 [ 1728.526764][T20138] loop8: detected capacity change from 0 to 64 [ 1728.536989][T20138] hfs: inconsistency in B*Tree (2,1,255,1,0) [ 1728.543043][T20138] hfs: get root inode failed [ 1728.562509][T20130] XFS (loop9): Mounting V5 Filesystem [ 1728.637685][T20130] XFS (loop9): Ending clean mount [ 1728.671713][T19868] I/O error, dev loop8, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 1728.790059][T17839] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1728.803381][T14787] XFS (loop9): Unmounting Filesystem [ 1728.813751][T17839] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1728.822501][T17839] bridge0: port 1(bridge_slave_0) entered blocking state [ 1728.829670][T17839] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1729.241231][T20148] loop3: detected capacity change from 0 to 64 [ 1729.422724][T19900] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1729.455901][T20152] vhci_hcd vhci_hcd.0: pdev(8) rhport(0) sockfd(11) [ 1729.462628][T20152] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1729.477135][T20152] vhci_hcd vhci_hcd.0: Device attached [ 1729.566685][T20153] vhci_hcd: connection closed [ 1729.567395][ T46] vhci_hcd: stop threads [ 1729.576418][ T46] vhci_hcd: release socket [ 1729.610653][ T46] vhci_hcd: disconnect device [ 1729.677351][ T2181] vhci_hcd: vhci_device speed not set [ 1729.725369][T17839] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1729.866063][T19900] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1729.915391][ T4335] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1729.941119][ T4335] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1729.968098][ T4335] bridge0: port 2(bridge_slave_1) entered blocking state [ 1729.975290][ T4335] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1730.110371][T16450] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1730.136815][T16450] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1730.192121][T16450] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1730.247161][T16450] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1730.256837][T16450] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1730.289837][ T1276] ieee802154 phy0 wpan0: encryption failed: -22 [ 1730.292650][T16450] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1730.296212][ T1276] ieee802154 phy1 wpan1: encryption failed: -22 [ 1730.329604][T16450] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1730.338588][T16450] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1730.347713][T16450] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1732.322187][T19813] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1732.349700][T20158] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(11) [ 1732.356358][T20158] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1732.364092][T20158] vhci_hcd vhci_hcd.0: Device attached [ 1732.375786][T20165] vhci_hcd: connection closed [ 1732.377422][ T4335] vhci_hcd: stop threads [ 1732.386526][ T4335] vhci_hcd: release socket [ 1732.422185][ T4335] vhci_hcd: disconnect device [ 1732.428473][T19813] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1732.708700][T16446] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1732.737735][T16446] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1733.009064][T19900] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 1735.581546][T20184] nvme_fabrics: missing parameter 'transport=%s' [ 1735.676261][T19900] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 1735.706769][T20184] nvme_fabrics: missing parameter 'nqn=%s' [ 1735.728508][T18725] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1735.736175][T18725] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1735.795608][T19900] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 1735.939706][T20191] Cannot find add_set index 0 as target [ 1736.267019][T19008] usb 4-1: new high-speed USB device number 43 using dummy_hcd [ 1736.347373][T19900] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 1736.536007][T19008] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1736.605483][T19008] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1736.723682][T19008] usb 4-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 10 [ 1736.907675][T19008] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 1737.014299][T19008] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 1737.095998][T19008] usb 4-1: SerialNumber: syz [ 1739.009911][T19813] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1739.587313][T20195] loop9: detected capacity change from 0 to 512 [ 1739.648153][T16425] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1739.669699][T19008] usb 4-1: USB disconnect, device number 43 [ 1739.698684][T16425] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1740.807676][T20195] ext4: Unknown parameter 'noacl' [ 1741.161597][T20209] hub 1-0:1.0: USB hub found [ 1741.168919][T16425] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1741.186058][T20209] hub 1-0:1.0: 1 port detected [ 1741.193552][T16425] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1741.366213][T18739] device hsr_slave_0 left promiscuous mode [ 1741.380628][T18739] device hsr_slave_1 left promiscuous mode [ 1741.587512][T18739] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1741.638756][T18739] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1742.864004][T18739] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1742.886397][T18739] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1742.938117][T18739] device bridge_slave_1 left promiscuous mode [ 1742.944892][T18739] bridge0: port 2(bridge_slave_1) entered disabled state [ 1742.981172][T18739] device bridge_slave_0 left promiscuous mode [ 1742.995811][T20219] fuse: Bad value for 'fd' [ 1743.007962][T18739] bridge0: port 1(bridge_slave_0) entered disabled state [ 1743.105085][T20221] loop3: detected capacity change from 0 to 256 [ 1743.329214][T18739] device veth1_macvtap left promiscuous mode [ 1743.336571][T18739] device veth0_macvtap left promiscuous mode [ 1743.386387][T18739] device veth1_vlan left promiscuous mode [ 1743.411546][T18739] device veth0_vlan left promiscuous mode [ 1745.507137][ T4409] usb 10-1: new high-speed USB device number 32 using dummy_hcd [ 1745.761119][ T4409] usb 10-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1745.822581][ T4409] usb 10-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1745.926745][ T4409] usb 10-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 10 [ 1746.081722][ T4409] usb 10-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 1746.158659][ T4409] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 1746.221854][ T4409] usb 10-1: SerialNumber: syz [ 1748.546999][T20240] Cannot find add_set index 0 as target [ 1748.732056][ T4409] usb 10-1: USB disconnect, device number 32 [ 1749.207912][T19814] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 1749.229014][T19814] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 1749.240407][T19814] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 1749.249840][T19814] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 1749.258134][T19814] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 1749.265604][T19814] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 1749.932617][T18739] team0 (unregistering): Port device team_slave_1 removed [ 1750.880340][T18739] team0 (unregistering): Port device team_slave_0 removed [ 1751.960894][T19814] Bluetooth: hci6: command 0x0409 tx timeout [ 1752.094006][T18739] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1752.455283][T20260] nvme_fabrics: missing parameter 'transport=%s' [ 1752.536586][T20260] nvme_fabrics: missing parameter 'nqn=%s' [ 1752.622917][T20266] syz.3.3663 (20266): /proc/20263/oom_adj is deprecated, please use /proc/20263/oom_score_adj instead. [ 1753.630560][T18739] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1753.726133][T20268] loop3: detected capacity change from 0 to 8192 [ 1753.871339][T20272] loop9: detected capacity change from 0 to 64 [ 1754.049056][T19814] Bluetooth: hci6: command 0x041b tx timeout [ 1754.238714][T20272] hfs: inconsistency in B*Tree (2,1,255,1,0) [ 1754.487501][T20272] hfs: get root inode failed [ 1755.051291][T20276] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(11) [ 1755.058046][T20276] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1755.088431][T20276] vhci_hcd vhci_hcd.0: Device attached [ 1755.356936][ T4256] usb 39-1: new low-speed USB device number 20 using vhci_hcd [ 1755.493438][T20277] vhci_hcd: connection reset by peer [ 1755.499287][T17848] vhci_hcd: stop threads [ 1755.503578][T17848] vhci_hcd: release socket [ 1755.518202][T17848] vhci_hcd: disconnect device [ 1756.142422][T19814] Bluetooth: hci6: command 0x040f tx timeout [ 1756.252231][T20280] loop3: detected capacity change from 0 to 2048 [ 1756.273420][T20280] EXT4-fs: Ignoring removed bh option [ 1756.405266][T20280] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 1756.452133][ T26] audit: type=1800 audit(1744853771.532:116): pid=20280 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.3667" name="file1" dev="loop3" ino=15 res=0 errno=0 [ 1756.792731][T20290] Cannot find add_set index 0 as target [ 1758.207033][T19814] Bluetooth: hci6: command 0x0419 tx timeout [ 1759.965403][T20286] EXT4-fs error (device loop3): ext4_xattr_ibody_find:2186: inode #12: comm syz.3.3667: corrupted in-inode xattr [ 1760.147042][T19190] usb 10-1: new high-speed USB device number 33 using dummy_hcd [ 1760.447152][ T4256] vhci_hcd: vhci_device speed not set [ 1760.764787][T19190] usb 10-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1760.798095][T20280] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 1760.801499][T19190] usb 10-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1760.819235][T20280] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 4 with max blocks 242 with error 28 [ 1760.840285][T20280] EXT4-fs (loop3): This should not happen!! Data will be lost [ 1760.840285][T20280] [ 1760.890915][T20280] EXT4-fs (loop3): Total free blocks count 0 [ 1760.897733][T20280] EXT4-fs (loop3): Free/Dirty block details [ 1760.909358][T20280] EXT4-fs (loop3): free_blocks=2415919104 [ 1760.915880][T18739] bond0 (unregistering): Released all slaves [ 1760.928263][T20280] EXT4-fs (loop3): dirty_blocks=256 [ 1760.957416][T19190] usb 10-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 10 [ 1760.967561][T20280] EXT4-fs (loop3): Block reservation details [ 1760.977712][T20280] EXT4-fs (loop3): i_reserved_data_blocks=16 [ 1761.024444][T19190] usb 10-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 1761.040879][T19190] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 1761.058656][T19190] usb 10-1: SerialNumber: syz [ 1761.246810][T17839] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 1761.274656][T16425] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1761.305901][T19190] usb 10-1: USB disconnect, device number 33 [ 1761.328419][T16425] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1762.512120][ T4268] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 1762.530947][ T4268] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 1762.540244][ T4268] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 1762.550343][ T4268] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 1762.573470][ T4268] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 1762.581123][ T4268] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 1762.883699][T20243] chnl_net:caif_netlink_parms(): no params data found [ 1763.262621][ T4268] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1763.275878][ T4268] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1763.285166][ T4268] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1763.297915][ T4268] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1763.305695][ T4268] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 1763.313550][ T4268] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1764.726928][T19814] Bluetooth: hci7: command 0x0409 tx timeout [ 1764.752033][T20243] bridge0: port 1(bridge_slave_0) entered blocking state [ 1764.816979][T20243] bridge0: port 1(bridge_slave_0) entered disabled state [ 1764.866154][T20243] device bridge_slave_0 entered promiscuous mode [ 1764.878087][T20243] bridge0: port 2(bridge_slave_1) entered blocking state [ 1764.885365][T20243] bridge0: port 2(bridge_slave_1) entered disabled state [ 1764.893663][T20243] device bridge_slave_1 entered promiscuous mode [ 1765.004880][T20243] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1765.047514][T20300] chnl_net:caif_netlink_parms(): no params data found [ 1765.092710][T20243] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1765.280434][T20301] loop3: detected capacity change from 0 to 65536 [ 1765.302597][T20323] vhci_hcd vhci_hcd.0: pdev(9) rhport(0) sockfd(11) [ 1765.309261][T20323] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1765.322896][T20323] vhci_hcd vhci_hcd.0: Device attached [ 1765.408489][T19814] Bluetooth: hci2: command 0x0409 tx timeout [ 1765.469656][T20301] XFS (loop3): Mounting V5 Filesystem [ 1765.586983][ T8504] usb 51-1: new low-speed USB device number 8 using vhci_hcd [ 1765.629671][T20243] team0: Port device team_slave_0 added [ 1765.671860][T20301] XFS (loop3): Ending clean mount [ 1765.761637][T20324] vhci_hcd: connection reset by peer [ 1765.767554][ T46] vhci_hcd: stop threads [ 1765.771922][ T46] vhci_hcd: release socket [ 1765.784499][ T46] vhci_hcd: disconnect device [ 1765.795548][T20243] team0: Port device team_slave_1 added [ 1765.871413][T14419] XFS (loop3): Unmounting Filesystem [ 1766.059789][T20243] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1766.067564][T20243] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1766.105389][T20243] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1766.243845][T20243] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1766.267115][T20243] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1766.343854][T20243] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1766.541919][T20243] device hsr_slave_0 entered promiscuous mode [ 1766.571590][T20243] device hsr_slave_1 entered promiscuous mode [ 1766.624202][T20243] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1766.631929][T20243] Cannot create hsr debugfs directory [ 1766.714243][T20300] bridge0: port 1(bridge_slave_0) entered blocking state [ 1766.741699][T20300] bridge0: port 1(bridge_slave_0) entered disabled state [ 1766.759566][T20300] device bridge_slave_0 entered promiscuous mode [ 1766.768049][T19814] Bluetooth: hci7: command 0x041b tx timeout [ 1766.776563][T20346] loop3: detected capacity change from 0 to 64 [ 1767.361277][T20306] chnl_net:caif_netlink_parms(): no params data found [ 1767.415056][T20346] hfs: inconsistency in B*Tree (2,1,255,1,0) [ 1767.424605][T20300] bridge0: port 2(bridge_slave_1) entered blocking state [ 1767.433086][T20346] hfs: get root inode failed [ 1767.443909][T20300] bridge0: port 2(bridge_slave_1) entered disabled state [ 1767.464252][T20300] device bridge_slave_1 entered promiscuous mode [ 1767.487207][T19814] Bluetooth: hci2: command 0x041b tx timeout [ 1767.699613][T20300] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1767.871961][T20300] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1767.992371][T20306] bridge0: port 1(bridge_slave_0) entered blocking state [ 1768.017538][T20306] bridge0: port 1(bridge_slave_0) entered disabled state [ 1768.038129][T20306] device bridge_slave_0 entered promiscuous mode [ 1768.238386][T20306] bridge0: port 2(bridge_slave_1) entered blocking state [ 1768.263343][T20306] bridge0: port 2(bridge_slave_1) entered disabled state [ 1768.399447][T20306] device bridge_slave_1 entered promiscuous mode [ 1768.615842][T20300] team0: Port device team_slave_0 added [ 1768.858439][T19814] Bluetooth: hci7: command 0x040f tx timeout [ 1769.018641][T18739] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1769.178233][T20300] team0: Port device team_slave_1 added [ 1769.322655][T18739] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1769.566935][ T4268] Bluetooth: hci2: command 0x040f tx timeout [ 1770.144896][T20306] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1770.199574][T20367] vhci_hcd vhci_hcd.0: pdev(9) rhport(0) sockfd(10) [ 1770.206239][T20367] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1770.214098][T20367] vhci_hcd vhci_hcd.0: Device attached [ 1770.272248][T18739] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1770.295889][T20371] vhci_hcd: connection closed [ 1770.296297][ T8411] vhci_hcd: stop threads [ 1770.326719][ T8411] vhci_hcd: release socket [ 1770.337693][ T8411] vhci_hcd: disconnect device [ 1770.357454][T20300] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1770.364735][T20300] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1770.447181][T20300] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1770.477975][T20306] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1770.497794][T20300] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1770.504811][T20300] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1770.574567][T20300] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1770.673222][T20376] netlink: 'syz.3.3686': attribute type 1 has an invalid length. [ 1770.687014][ T8504] vhci_hcd: vhci_device speed not set [ 1770.928177][T19814] Bluetooth: hci7: command 0x0419 tx timeout [ 1770.969509][T18739] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1771.396466][T20306] team0: Port device team_slave_0 added [ 1771.427294][T20306] team0: Port device team_slave_1 added [ 1771.539952][T20306] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1771.565225][T20306] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1771.603773][T20306] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1771.657016][T19814] Bluetooth: hci2: command 0x0419 tx timeout [ 1772.206472][T20306] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1772.297504][T20306] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1772.334499][T20306] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1773.003170][T20300] device hsr_slave_0 entered promiscuous mode [ 1773.142747][T20300] device hsr_slave_1 entered promiscuous mode [ 1773.254934][T20300] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1773.331733][T20300] Cannot create hsr debugfs directory [ 1773.529114][T20393] loop3: detected capacity change from 0 to 64 [ 1773.583753][T20393] hfs: inconsistency in B*Tree (2,1,255,1,0) [ 1773.687168][T20393] hfs: get root inode failed [ 1773.911107][T20306] device hsr_slave_0 entered promiscuous mode [ 1773.938626][T20306] device hsr_slave_1 entered promiscuous mode [ 1773.974883][T20306] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1773.987025][T20306] Cannot create hsr debugfs directory [ 1775.384799][T20403] vhci_hcd vhci_hcd.0: pdev(9) rhport(0) sockfd(11) [ 1775.391784][T20403] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1775.460296][T20403] vhci_hcd vhci_hcd.0: Device attached [ 1775.707612][ T4302] usb 51-1: new low-speed USB device number 9 using vhci_hcd [ 1775.769649][T20404] vhci_hcd: connection reset by peer [ 1775.775601][T18738] vhci_hcd: stop threads [ 1775.780097][T18738] vhci_hcd: release socket [ 1775.794854][T18738] vhci_hcd: disconnect device [ 1777.238101][T20409] loop9: detected capacity change from 0 to 8192 [ 1780.498320][T20435] loop3: detected capacity change from 0 to 64 [ 1780.522863][T20435] hfs: inconsistency in B*Tree (2,1,255,1,0) [ 1780.529127][T20435] hfs: get root inode failed [ 1780.860228][ T4302] vhci_hcd: vhci_device speed not set [ 1781.257142][T20433] vhci_hcd vhci_hcd.0: pdev(9) rhport(0) sockfd(11) [ 1781.263814][T20433] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1781.271667][T20433] vhci_hcd vhci_hcd.0: Device attached [ 1781.278939][T20436] vhci_hcd: connection closed [ 1781.317358][T16446] vhci_hcd: stop threads [ 1781.326357][T16446] vhci_hcd: release socket [ 1781.347026][T16446] vhci_hcd: disconnect device [ 1782.441786][T20243] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 1783.149295][T20243] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 1783.211968][T20243] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 1783.307852][T20243] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 1784.619597][T18739] device hsr_slave_0 left promiscuous mode [ 1784.636392][T18739] device hsr_slave_1 left promiscuous mode [ 1784.643953][T18739] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1785.268731][T18739] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1785.298031][T18739] device bridge_slave_1 left promiscuous mode [ 1785.304377][T18739] bridge0: port 2(bridge_slave_1) entered disabled state [ 1785.324590][T20471] loop3: detected capacity change from 0 to 64 [ 1785.333934][T18739] device bridge_slave_0 left promiscuous mode [ 1785.347525][T18739] bridge0: port 1(bridge_slave_0) entered disabled state [ 1785.481466][T20471] hfs: inconsistency in B*Tree (2,1,255,1,0) [ 1785.519078][T20475] vhci_hcd vhci_hcd.0: pdev(9) rhport(0) sockfd(11) [ 1785.525742][T20475] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1785.528081][T20471] hfs: get root inode failed [ 1785.560323][T18739] device hsr_slave_0 left promiscuous mode [ 1785.571215][T18739] device hsr_slave_1 left promiscuous mode [ 1785.632555][T18739] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1785.653348][T20475] vhci_hcd vhci_hcd.0: Device attached [ 1785.679031][T18739] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1785.762357][T18739] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1785.808884][T18739] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1785.865608][T18739] device bridge_slave_1 left promiscuous mode [ 1785.865884][T20476] vhci_hcd: connection closed [ 1785.884084][T16447] vhci_hcd: stop threads [ 1785.902550][T18739] bridge0: port 2(bridge_slave_1) entered disabled state [ 1785.917307][ T8504] usb 51-1: new low-speed USB device number 10 using vhci_hcd [ 1785.923577][T16447] vhci_hcd: release socket [ 1785.930781][T18739] device bridge_slave_0 left promiscuous mode [ 1785.943644][T16447] vhci_hcd: disconnect device [ 1785.947357][T18739] bridge0: port 1(bridge_slave_0) entered disabled state [ 1785.967453][T18739] device hsr_slave_0 left promiscuous mode [ 1785.986057][T18739] device hsr_slave_1 left promiscuous mode [ 1785.997751][T18739] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1786.015940][T18739] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1786.034621][T18739] device bridge_slave_1 left promiscuous mode [ 1786.050023][T18739] bridge0: port 2(bridge_slave_1) entered disabled state [ 1786.068828][T18739] device bridge_slave_0 left promiscuous mode [ 1786.075228][T18739] bridge0: port 1(bridge_slave_0) entered disabled state [ 1786.216625][T18739] device veth1_macvtap left promiscuous mode [ 1786.227931][T18739] device veth0_macvtap left promiscuous mode [ 1786.244528][T18739] device veth1_vlan left promiscuous mode [ 1786.250783][T18739] device veth0_vlan left promiscuous mode [ 1788.214757][T18739] team0 (unregistering): Port device team_slave_1 removed [ 1788.779621][T18739] team0 (unregistering): Port device team_slave_0 removed [ 1789.048036][T18739] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1789.205284][T18739] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1790.076126][T18739] bond0 (unregistering): Released all slaves [ 1790.876520][T20506] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(11) [ 1790.883206][T20506] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1790.901805][T20506] vhci_hcd vhci_hcd.0: Device attached [ 1791.007631][ T8504] vhci_hcd: vhci_device speed not set [ 1791.227056][ T4256] usb 39-1: new low-speed USB device number 21 using vhci_hcd [ 1791.356786][T20507] vhci_hcd: connection reset by peer [ 1791.362801][T16425] vhci_hcd: stop threads [ 1791.367575][T16425] vhci_hcd: release socket [ 1791.372279][T16425] vhci_hcd: disconnect device [ 1791.738569][ T1276] ieee802154 phy0 wpan0: encryption failed: -22 [ 1791.744966][ T1276] ieee802154 phy1 wpan1: encryption failed: -22 [ 1792.364694][T18739] team0 (unregistering): Port device team_slave_1 removed [ 1792.419438][T20514] loop3: detected capacity change from 0 to 64 [ 1792.474779][T20514] hfs: inconsistency in B*Tree (2,1,255,1,0) [ 1792.481442][T20514] hfs: get root inode failed [ 1792.518446][T18739] team0 (unregistering): Port device team_slave_0 removed [ 1792.725151][T18739] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1792.892832][T18739] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1793.926917][ T8504] usb 4-1: new high-speed USB device number 44 using dummy_hcd [ 1794.157207][ T8504] usb 4-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00 [ 1794.166296][ T8504] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1794.191660][ T8504] usb 4-1: config 0 descriptor?? [ 1794.510072][T18739] bond0 (unregistering): Released all slaves [ 1794.635737][ T8504] elan 0003:04F3:0755.0006: hidraw0: USB HID v1.01 Device [HID 04f3:0755] on usb-dummy_hcd.3-1/input0 [ 1794.832398][ T8504] usb 4-1: USB disconnect, device number 44 [ 1795.333981][T18739] team0 (unregistering): Port device team_slave_1 removed [ 1795.428626][T18739] team0 (unregistering): Port device team_slave_0 removed [ 1795.551196][T18739] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1795.639641][T18739] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1795.719303][T20518] random: crng reseeded on system resumption [ 1795.794724][T20519] loop3: detected capacity change from 0 to 128 [ 1795.867293][T20519] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x00067272 (sector = 1) [ 1796.328173][T20519] FAT-fs (loop3): FAT read failed (blocknr 128) [ 1796.366993][ T4256] vhci_hcd: vhci_device speed not set [ 1796.428381][T20520] FAT-fs (loop3): FAT read failed (blocknr 128) [ 1797.228530][T18739] bond0 (unregistering): Released all slaves [ 1797.336150][T20525] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3726'. [ 1798.405345][T20243] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1799.039248][T18724] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1799.051145][T18724] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1799.100523][T20243] 8021q: adding VLAN 0 to HW filter on device team0 [ 1799.117359][T20300] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1799.148403][ T4335] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1799.177399][ T4335] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1799.206766][ T4335] bridge0: port 1(bridge_slave_0) entered blocking state [ 1799.214078][ T4335] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1799.942858][T20300] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1800.047646][T20538] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(11) [ 1800.054318][T20538] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1800.062254][T20538] vhci_hcd vhci_hcd.0: Device attached [ 1800.073517][T20541] vhci_hcd: connection closed [ 1800.075389][ T46] vhci_hcd: stop threads [ 1800.105512][ T46] vhci_hcd: release socket [ 1800.120417][ T46] vhci_hcd: disconnect device [ 1800.142860][T20243] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1800.173896][T20243] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1800.240426][ T4335] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1800.277739][ T4335] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1800.298624][ T4335] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1800.315761][ T4335] bridge0: port 2(bridge_slave_1) entered blocking state [ 1800.323088][ T4335] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1800.344437][ T4335] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1800.376637][ T4335] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1800.458430][ T4335] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1800.599969][ T4335] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1800.629999][ T4335] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1800.639627][ T4335] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1800.648783][ T4335] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1800.657839][ T4335] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1800.667570][ T4335] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1800.676665][ T4335] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1800.702351][T20300] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1800.790323][ T4335] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1800.868903][ T4335] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1800.911549][T20549] loop3: detected capacity change from 0 to 128 [ 1801.158791][T20546] nvme_fabrics: missing parameter 'transport=%s' [ 1801.204185][T20300] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1801.240607][T20546] nvme_fabrics: missing parameter 'nqn=%s' [ 1801.778747][T20306] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 1801.841952][T20306] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 1801.890859][T20306] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 1801.961379][T20306] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 1802.109530][T20562] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3734'. [ 1803.062314][T20300] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1803.161800][T20306] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1803.741704][T20300] 8021q: adding VLAN 0 to HW filter on device team0 [ 1803.799201][T16450] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1803.828190][T16450] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1803.851138][T16450] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1803.875478][T16450] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1803.933724][T20306] 8021q: adding VLAN 0 to HW filter on device team0 [ 1803.987901][T16450] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1803.996755][T16450] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1804.047504][T16450] bridge0: port 1(bridge_slave_0) entered blocking state [ 1804.054677][T16450] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1804.126289][T16450] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1804.182863][T18738] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1804.226662][T18738] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1804.263693][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1804.326053][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1804.395940][ T46] bridge0: port 2(bridge_slave_1) entered blocking state [ 1804.403192][ T46] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1804.486296][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1804.734843][T20583] Invalid ELF header magic: != ELF [ 1804.872949][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1804.890473][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1804.923140][ T46] bridge0: port 1(bridge_slave_0) entered blocking state [ 1804.930372][ T46] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1804.981833][T20243] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1805.000768][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1805.018117][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1805.071430][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1805.107548][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1805.167423][ T46] bridge0: port 2(bridge_slave_1) entered blocking state [ 1805.174603][ T46] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1805.195005][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1805.213631][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1805.235548][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1805.396440][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1805.467960][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1805.490348][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1805.507938][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1805.571712][T18724] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1805.602323][T18724] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1805.705294][T18724] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1805.825241][T18724] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1805.948212][T18724] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1806.063678][T20590] nvme_fabrics: missing parameter 'transport=%s' [ 1806.064837][T18724] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1806.078981][T18724] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1806.088105][T18724] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1806.097140][T18724] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1806.105798][T18724] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1806.125187][T20590] nvme_fabrics: missing parameter 'nqn=%s' [ 1806.151852][T20300] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1806.205557][T20300] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1806.245067][T20306] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1806.773341][T18724] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1806.794461][T18724] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1806.808094][T18724] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1806.838164][T18724] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1806.895754][T18724] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1806.925250][T18724] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1806.969932][T18724] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1806.986220][T18724] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1807.004356][T18724] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1807.030167][T20243] device veth0_vlan entered promiscuous mode [ 1807.064347][T20243] device veth1_vlan entered promiscuous mode [ 1808.220489][T18725] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 1808.258395][T18725] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 1808.601696][T20616] device netdevsim0 entered promiscuous mode [ 1808.847492][T18725] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1808.855052][T18725] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1808.952075][T20300] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1809.058553][T16446] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1809.076036][T16446] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1809.129426][T16446] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1809.168125][T16446] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1809.184281][T20306] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1809.218463][T20300] device veth0_vlan entered promiscuous mode [ 1809.928521][T16446] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1810.127618][T16446] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1810.193930][T16446] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1810.267772][T16446] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1810.446152][T20635] nvme_fabrics: missing parameter 'transport=%s' [ 1810.452950][T20635] nvme_fabrics: missing parameter 'nqn=%s' [ 1810.551680][ T4268] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1810.564506][ T4268] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1810.574153][ T4268] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1810.599424][ T4264] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1810.608005][ T4264] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 1810.617334][ T4264] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1810.733088][T20300] device veth1_vlan entered promiscuous mode [ 1810.884721][T20300] device veth0_macvtap entered promiscuous mode [ 1811.070637][T16446] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1811.130829][T16446] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1811.339004][T20300] device veth1_macvtap entered promiscuous mode [ 1811.689729][T16446] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1811.759117][T20300] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1811.820604][T20300] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1811.866991][T20300] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1811.883014][T20300] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1811.893696][T20300] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1811.904292][T20300] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1811.920135][T20300] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1811.950960][T20300] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1811.961569][T20300] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1812.957351][T20300] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1813.009876][T20300] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1813.050421][T20300] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1813.101990][T20300] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1813.153879][T20300] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1813.188128][ T4264] Bluetooth: hci0: command 0x0409 tx timeout [ 1813.233792][T16427] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1813.267850][T16427] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1813.298272][T16427] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1813.313685][T16427] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1813.346110][T20300] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1813.356720][T20663] loop9: detected capacity change from 0 to 512 [ 1813.376955][T20300] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1813.407605][T20300] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1813.416379][T20300] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1813.425371][T20663] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 1813.466221][T20663] EXT4-fs (loop9): encrypted files will use data=ordered instead of data journaling mode [ 1813.556185][T20663] EXT4-fs (loop9): 1 truncate cleaned up [ 1813.602893][T20663] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: none. [ 1813.644732][ T8411] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1813.690257][T20660] loop3: detected capacity change from 0 to 32768 [ 1813.698501][ T8411] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1813.865308][T20660] ocfs2: Slot 0 on device (7,3) was already allocated to this node! [ 1813.997407][T20660] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 1814.367992][T20306] device veth0_vlan entered promiscuous mode [ 1814.448343][T20306] device veth1_vlan entered promiscuous mode [ 1814.576662][T14419] ocfs2: Unmounting device (7,3) on (node local) [ 1814.615868][T20306] device veth0_macvtap entered promiscuous mode [ 1814.642206][T14787] EXT4-fs (loop9): unmounting filesystem. [ 1814.796373][ T8411] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1814.814670][ T8411] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1814.830506][ T8411] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 1814.863593][ T8411] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 1814.906132][ T8411] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1814.921881][ T8411] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1814.957945][ T8411] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1814.983233][ T8411] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1815.003912][ T8411] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1815.033928][T20640] chnl_net:caif_netlink_parms(): no params data found [ 1815.070961][T20306] device veth1_macvtap entered promiscuous mode [ 1815.242208][T16442] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1815.253910][ T4264] Bluetooth: hci0: command 0x041b tx timeout [ 1815.265709][T20306] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1815.297135][T20306] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1815.307509][T16442] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1815.326960][T20306] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1815.360915][T20306] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1815.391802][T20306] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1815.443313][T20306] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1815.477194][T20306] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1815.497750][T20306] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1815.548371][T20306] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1815.676011][ T8411] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1815.755037][ T8411] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1815.858629][ T8411] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1816.118632][T20306] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1816.225603][T20306] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1816.343703][T20306] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1816.459267][T20689] nvme_fabrics: missing parameter 'transport=%s' [ 1816.459533][T20306] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1816.476058][T20306] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1816.486646][T20306] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1816.496665][T20306] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1816.507345][T20306] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1816.519128][T20306] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1816.527718][T20689] nvme_fabrics: missing parameter 'nqn=%s' [ 1816.542215][ T8411] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1816.558612][ T8411] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1816.608343][T17839] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1816.616751][T17839] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1816.650193][T20306] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1816.666930][T20306] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1816.716890][T20306] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1816.725664][T20306] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1816.838045][T17839] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1817.329122][T19814] Bluetooth: hci0: command 0x040f tx timeout [ 1817.567214][T20640] bridge0: port 1(bridge_slave_0) entered blocking state [ 1817.578608][T20640] bridge0: port 1(bridge_slave_0) entered disabled state [ 1817.604963][T20640] device bridge_slave_0 entered promiscuous mode [ 1819.407228][ T4264] Bluetooth: hci0: command 0x0419 tx timeout [ 1820.538701][T20640] bridge0: port 2(bridge_slave_1) entered blocking state [ 1820.564306][T20640] bridge0: port 2(bridge_slave_1) entered disabled state [ 1820.725930][T20640] device bridge_slave_1 entered promiscuous mode [ 1821.303041][T20696] SET target dimension over the limit! [ 1821.591358][T20640] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1821.617156][ T4302] usb 4-1: new high-speed USB device number 45 using dummy_hcd [ 1821.679861][T20640] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1821.741296][T16442] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1821.764981][T16442] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1821.826450][ T4302] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1821.844891][T20710] loop9: detected capacity change from 0 to 4096 [ 1821.856396][ T4302] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1821.896593][T20710] ntfs3: Unknown parameter 'windows_names' [ 1821.916244][T20640] team0: Port device team_slave_0 added [ 1821.967659][T16427] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1822.033720][ T4302] usb 4-1: string descriptor 0 read error: -71 [ 1822.048535][ T4302] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 1822.087154][ T4302] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 1822.128790][ T4302] usb 4-1: can't set config #1, error -71 [ 1822.173910][ T4302] usb 4-1: USB disconnect, device number 45 [ 1822.618037][T20722] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 1822.627117][T20722] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 1823.401860][T20640] team0: Port device team_slave_1 added [ 1823.472497][ T4264] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1823.484141][ T4268] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1823.493983][ T4264] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1823.507513][ T4268] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1823.518249][ T4268] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 1823.526686][ T4268] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1823.645645][T20730] loop3: detected capacity change from 0 to 64 [ 1823.979000][T20640] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1823.986090][T20640] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1824.164444][T20640] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1824.239020][T20743] loop9: detected capacity change from 0 to 256 [ 1824.246724][T20743] exfat: Unknown parameter 'io' [ 1824.543919][T20748] SET target dimension over the limit! [ 1826.383196][T19814] Bluetooth: hci3: command 0x0409 tx timeout [ 1826.594000][T20746] loop2: detected capacity change from 0 to 512 [ 1826.667268][T19008] usb 4-1: new high-speed USB device number 46 using dummy_hcd [ 1826.866229][T20746] EXT4-fs (loop2): Test dummy encryption mode enabled [ 1826.881155][T19008] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1826.952109][T19008] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1827.118771][T19008] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 1827.144980][T20746] EXT4-fs error (device loop2): __ext4_iget:5055: inode #11: block 1: comm syz.2.3778: invalid block [ 1827.305708][T19008] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 1827.474282][T19008] usb 4-1: SerialNumber: syz [ 1827.492575][T20746] EXT4-fs error (device loop2): ext4_orphan_get:1405: comm syz.2.3778: couldn't read orphan inode 11 (err -117) [ 1827.773762][T20746] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 1828.447525][T19814] Bluetooth: hci3: command 0x041b tx timeout [ 1828.475929][T20640] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1828.527782][T20640] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1828.591661][T20300] EXT4-fs (loop2): unmounting filesystem. [ 1828.667301][T20640] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1830.165529][T19008] usb 4-1: skipping empty audio interface (v1) [ 1830.901009][T19814] Bluetooth: hci3: command 0x040f tx timeout [ 1831.033366][T19008] snd-usb-audio: probe of 4-1:1.0 failed with error -22 [ 1831.097573][T19008] usb 4-1: USB disconnect, device number 46 [ 1831.136335][T20640] device hsr_slave_0 entered promiscuous mode [ 1831.165087][T20640] device hsr_slave_1 entered promiscuous mode [ 1831.237416][T20640] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1831.245053][T20640] Cannot create hsr debugfs directory [ 1831.332107][T19868] udevd[19868]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1831.697434][T18739] device hsr_slave_0 left promiscuous mode [ 1831.704071][T18739] device hsr_slave_1 left promiscuous mode [ 1831.718343][T18739] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1831.750196][T18739] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1831.774649][T18739] device bridge_slave_1 left promiscuous mode [ 1831.803697][T18739] bridge0: port 2(bridge_slave_1) entered disabled state [ 1831.832564][T18739] device bridge_slave_0 left promiscuous mode [ 1831.871819][T18739] bridge0: port 1(bridge_slave_0) entered disabled state [ 1831.954979][T18739] device veth1_vlan left promiscuous mode [ 1831.997937][T18739] device veth0_vlan left promiscuous mode [ 1832.937021][ T4264] Bluetooth: hci3: command 0x0419 tx timeout [ 1834.874377][T20806] Cannot find add_set index 0 as target [ 1835.187012][T11252] usb 10-1: new high-speed USB device number 34 using dummy_hcd [ 1837.133204][T11252] usb 10-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1837.188546][T11252] usb 10-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1837.344929][T11252] usb 10-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 1837.443924][T11252] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 1837.571837][T11252] usb 10-1: SerialNumber: syz [ 1838.080157][T20808] [ 1838.082557][T20808] ====================================================== [ 1838.089696][T20808] WARNING: possible circular locking dependency detected [ 1838.096830][T20808] 6.1.134-syzkaller #0 Not tainted [ 1838.102049][T20808] ------------------------------------------------------ [ 1838.109099][T20808] syz.2.3795/20808 is trying to acquire lock: [ 1838.115202][T20808] ffff888059731450 ((work_completion)(&new_smc->smc_listen_work)){+.+.}-{0:0}, at: __flush_work+0xe5/0xad0 [ 1838.126656][T20808] [ 1838.126656][T20808] but task is already holding lock: [ 1838.134043][T20808] ffff888059730130 (sk_lock-AF_SMC/1){+.+.}-{0:0}, at: smc_release+0x22d/0x530 [ 1838.143075][T20808] [ 1838.143075][T20808] which lock already depends on the new lock. [ 1838.143075][T20808] [ 1838.153513][T20808] [ 1838.153513][T20808] the existing dependency chain (in reverse order) is: [ 1838.162569][T20808] [ 1838.162569][T20808] -> #1 (sk_lock-AF_SMC/1){+.+.}-{0:0}: [ 1838.170363][T20808] lock_acquire+0x1f8/0x5a0 [ 1838.175443][T20808] lock_sock_nested+0x44/0x100 [ 1838.180876][T20808] smc_listen_out+0x11b/0x3d0 [ 1838.186123][T20808] process_one_work+0x917/0x1260 [ 1838.191615][T20808] worker_thread+0xa47/0x1200 [ 1838.196852][T20808] kthread+0x28d/0x320 [ 1838.201477][T20808] ret_from_fork+0x1f/0x30 [ 1838.206454][T20808] [ 1838.206454][T20808] -> #0 ((work_completion)(&new_smc->smc_listen_work)){+.+.}-{0:0}: [ 1838.216697][T20808] validate_chain+0x1661/0x5950 [ 1838.222094][T20808] __lock_acquire+0x125b/0x1f80 [ 1838.227502][T20808] lock_acquire+0x1f8/0x5a0 [ 1838.232593][T20808] __flush_work+0xfe/0xad0 [ 1838.237553][T20808] __cancel_work_timer+0x519/0x6a0 [ 1838.243226][T20808] smc_clcsock_release+0x5e/0xe0 [ 1838.248766][T20808] __smc_release+0x678/0x7f0 [ 1838.253937][T20808] smc_close_non_accepted+0xd4/0x1e0 [ 1838.259798][T20808] smc_close_active+0xa75/0xe20 [ 1838.265244][T20808] __smc_release+0xa0/0x7f0 [ 1838.270319][T20808] smc_release+0x2d5/0x530 [ 1838.275570][T20808] sock_close+0xcd/0x230 [ 1838.280834][T20808] __fput+0x3f6/0x8d0 [ 1838.285406][T20808] task_work_run+0x246/0x300 [ 1838.291055][T20808] exit_to_user_mode_loop+0xde/0x100 [ 1838.296917][T20808] exit_to_user_mode_prepare+0xb1/0x140 [ 1838.303927][T20808] syscall_exit_to_user_mode+0x60/0x270 [ 1838.310567][T20808] do_syscall_64+0x47/0xb0 [ 1838.315550][T20808] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1838.322189][T20808] [ 1838.322189][T20808] other info that might help us debug this: [ 1838.322189][T20808] [ 1838.333289][T20808] Possible unsafe locking scenario: [ 1838.333289][T20808] [ 1838.340875][T20808] CPU0 CPU1 [ 1838.346730][T20808] ---- ---- [ 1838.352230][T20808] lock(sk_lock-AF_SMC/1); [ 1838.356975][T20808] lock((work_completion)(&new_smc->smc_listen_work)); [ 1838.366753][T20808] lock(sk_lock-AF_SMC/1); [ 1838.373828][T20808] lock((work_completion)(&new_smc->smc_listen_work)); [ 1838.380967][T20808] [ 1838.380967][T20808] *** DEADLOCK *** [ 1838.380967][T20808] [ 1838.389603][T20808] 2 locks held by syz.2.3795/20808: [ 1838.394866][T20808] #0: ffff88807434c410 (&sb->s_type->i_mutex_key#10){+.+.}-{3:3}, at: sock_close+0x98/0x230 [ 1838.405304][T20808] #1: ffff888059730130 (sk_lock-AF_SMC/1){+.+.}-{0:0}, at: smc_release+0x22d/0x530 [ 1838.414789][T20808] [ 1838.414789][T20808] stack backtrace: [ 1838.420712][T20808] CPU: 0 PID: 20808 Comm: syz.2.3795 Not tainted 6.1.134-syzkaller #0 [ 1838.428909][T20808] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 1838.439016][T20808] Call Trace: [ 1838.442330][T20808] [ 1838.445293][T20808] dump_stack_lvl+0x1e3/0x2cb [ 1838.450022][T20808] ? nf_tcp_handle_invalid+0x647/0x647 [ 1838.455526][T20808] ? print_circular_bug+0x12b/0x1a0 [ 1838.460792][T20808] check_noncircular+0x2fa/0x3b0 [ 1838.465776][T20808] ? add_chain_block+0x850/0x850 [ 1838.470746][T20808] ? lockdep_lock+0x11f/0x2a0 [ 1838.475497][T20808] ? _find_first_zero_bit+0xd0/0x100 [ 1838.480821][T20808] validate_chain+0x1661/0x5950 [ 1838.485719][T20808] ? is_bpf_text_address+0x22/0x2a0 [ 1838.490964][T20808] ? __bfs+0x359/0x6e0 [ 1838.495074][T20808] ? reacquire_held_locks+0x660/0x660 [ 1838.500476][T20808] ? mark_lock+0x9a/0x340 [ 1838.504842][T20808] ? __lock_acquire+0x125b/0x1f80 [ 1838.509911][T20808] ? look_up_lock_class+0x77/0x140 [ 1838.515061][T20808] ? register_lock_class+0x100/0x990 [ 1838.520393][T20808] ? is_dynamic_key+0x260/0x260 [ 1838.525282][T20808] ? mark_lock+0x9a/0x340 [ 1838.529638][T20808] __lock_acquire+0x125b/0x1f80 [ 1838.534536][T20808] lock_acquire+0x1f8/0x5a0 [ 1838.539083][T20808] ? __flush_work+0xe5/0xad0 [ 1838.543718][T20808] ? mark_lock+0x9a/0x340 [ 1838.548337][T20808] ? read_lock_is_recursive+0x10/0x10 [ 1838.553744][T20808] ? lockdep_hardirqs_on_prepare+0x438/0x7a0 [ 1838.559774][T20808] ? print_irqtrace_events+0x210/0x210 [ 1838.565294][T20808] ? do_raw_spin_unlock+0x137/0x8a0 [ 1838.570538][T20808] ? finish_task_switch+0x1ca/0x810 [ 1838.575776][T20808] ? lockdep_hardirqs_on+0x94/0x130 [ 1838.581114][T20808] ? __flush_work+0xe5/0xad0 [ 1838.585731][T20808] __flush_work+0xfe/0xad0 [ 1838.590174][T20808] ? __flush_work+0xe5/0xad0 [ 1838.594805][T20808] ? __schedule+0x1447/0x4570 [ 1838.600142][T20808] ? flush_work+0x20/0x20 [ 1838.604532][T20808] ? print_irqtrace_events+0x210/0x210 [ 1838.610045][T20808] ? __cancel_work_timer+0x467/0x6a0 [ 1838.615371][T20808] __cancel_work_timer+0x519/0x6a0 [ 1838.620564][T20808] ? print_irqtrace_events+0x210/0x210 [ 1838.626067][T20808] ? cancel_work_sync+0x20/0x20 [ 1838.630946][T20808] ? asm_sysvec_reschedule_ipi+0x16/0x20 [ 1838.636614][T20808] ? lockdep_hardirqs_on+0x94/0x130 [ 1838.641846][T20808] ? asm_sysvec_reschedule_ipi+0x16/0x20 [ 1838.647523][T20808] ? current_work+0xa/0xd0 [ 1838.651975][T20808] ? __sanitizer_cov_trace_const_cmp2+0x80/0x80 [ 1838.658257][T20808] smc_clcsock_release+0x5e/0xe0 [ 1838.663236][T20808] __smc_release+0x678/0x7f0 [ 1838.667863][T20808] smc_close_non_accepted+0xd4/0x1e0 [ 1838.673177][T20808] smc_close_active+0xa75/0xe20 [ 1838.678088][T20808] ? sock_no_sendpage_locked+0x1e0/0x1e0 [ 1838.683764][T20808] __smc_release+0xa0/0x7f0 [ 1838.688293][T20808] smc_release+0x2d5/0x530 [ 1838.692732][T20808] sock_close+0xcd/0x230 [ 1838.697006][T20808] ? sock_mmap+0x90/0x90 [ 1838.701277][T20808] __fput+0x3f6/0x8d0 [ 1838.705295][T20808] task_work_run+0x246/0x300 [ 1838.709924][T20808] ? task_work_cancel+0x2e0/0x2e0 [ 1838.714990][T20808] ? exit_to_user_mode_loop+0x39/0x100 [ 1838.720570][T20808] exit_to_user_mode_loop+0xde/0x100 [ 1838.725981][T20808] exit_to_user_mode_prepare+0xb1/0x140 [ 1838.731558][T20808] syscall_exit_to_user_mode+0x60/0x270 [ 1838.737141][T20808] do_syscall_64+0x47/0xb0 [ 1838.741583][T20808] ? clear_bhb_loop+0x45/0xa0 [ 1838.746292][T20808] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1838.752263][T20808] RIP: 0033:0x7f9d2278e169 [ 1838.756706][T20808] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1838.776578][T20808] RSP: 002b:00007f9d23604038 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 1838.785032][T20808] RAX: 0000000000000000 RBX: 00007f9d229b5fa0 RCX: 00007f9d2278e169 [ 1838.793039][T20808] RDX: 0000000000000000 RSI: ffffffffffffffff RDI: 0000000000000000 [ 1838.801043][T20808] RBP: 00007f9d22810a68 R08: 0000000000000000 R09: 0000000000000000 [ 1838.809045][T20808] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1838.817050][T20808] R13: 0000000000000000 R14: 00007f9d229b5fa0 R15: 00007fffc5131f98 [ 1838.825063][T20808] [ 1838.944049][T20813] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3796'. [ 1839.325112][T11252] usb 10-1: skipping empty audio interface (v1) [ 1839.361004][T11252] snd-usb-audio: probe of 10-1:1.0 failed with error -22 [ 1839.391019][T11252] usb 10-1: USB disconnect, device number 34 [ 1839.621088][T19868] udevd[19868]: error opening ATTR{/sys/devices/platform/dummy_hcd.9/usb10/10-1/10-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1839.862640][T18739] team0 (unregistering): Port device team_slave_1 removed [ 1839.948112][T18739] team0 (unregistering): Port device team_slave_0 removed [ 1840.037775][T18739] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1840.124945][T18739] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1841.046611][T18739] bond0 (unregistering): Released all slaves [ 1841.218733][T20726] chnl_net:caif_netlink_parms(): no params data found [ 1841.304248][T20726] bridge0: port 1(bridge_slave_0) entered blocking state [ 1841.314681][T20726] bridge0: port 1(bridge_slave_0) entered disabled state [ 1841.323203][T20726] device bridge_slave_0 entered promiscuous mode [ 1841.343871][T20726] bridge0: port 2(bridge_slave_1) entered blocking state [ 1841.353515][T20726] bridge0: port 2(bridge_slave_1) entered disabled state [ 1841.365214][T20726] device bridge_slave_1 entered promiscuous mode [ 1841.404646][T20726] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1841.419515][T20726] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1841.455167][T20726] team0: Port device team_slave_0 added [ 1841.463918][T20726] team0: Port device team_slave_1 added [ 1841.530594][T20726] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1841.541663][T20726] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1841.570965][T20726] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1841.614082][T20726] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1841.621867][T20726] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1841.654887][T20726] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1841.708736][T20640] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 1841.728584][T20640] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 1841.744094][T20726] device hsr_slave_0 entered promiscuous mode [ 1841.751625][T20726] device hsr_slave_1 entered promiscuous mode [ 1841.758999][T20726] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1841.766576][T20726] Cannot create hsr debugfs directory [ 1841.772539][T20640] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 1841.786117][T18739] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1841.808590][T20640] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 1841.841809][T18739] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1841.893018][T18739] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1841.972107][T18739] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1841.999714][T20640] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1842.018038][T16446] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1842.026109][T16446] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1842.039329][T20640] 8021q: adding VLAN 0 to HW filter on device team0 [ 1842.078716][T16446] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1842.088638][T16446] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1842.098823][T16446] bridge0: port 1(bridge_slave_0) entered blocking state [ 1842.105993][T16446] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1842.171640][T16446] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1842.180265][T16446] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1842.192539][T16446] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1842.202041][T16446] bridge0: port 2(bridge_slave_1) entered blocking state [ 1842.209175][T16446] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1842.221604][T16446] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1842.230633][T16446] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1842.242629][T16446] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1842.252025][T16446] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1842.261674][T16446] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1842.271526][T16446] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1842.281217][T16446] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1842.299363][T20640] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1842.311080][T20640] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1842.324563][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1842.338478][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1842.357394][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1842.365955][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1842.382085][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1842.599842][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1842.608884][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1842.622073][T20640] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1842.646157][T18725] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1842.657924][T18725] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1842.675005][T18725] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1842.683771][T18725] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1842.695156][T18725] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1842.704914][T18725] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1842.718900][T20640] device veth0_vlan entered promiscuous mode [ 1842.739352][T20640] device veth1_vlan entered promiscuous mode [ 1842.774002][T18725] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 1842.787941][T18725] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 1842.807409][T18725] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1842.819376][T18725] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1842.830927][T20640] device veth0_macvtap entered promiscuous mode [ 1842.845403][T20640] device veth1_macvtap entered promiscuous mode [ 1842.861858][T20640] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1842.872984][T20640] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1842.883450][T20640] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1842.894221][T20640] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1842.904665][T20640] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1842.915897][T20640] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1842.926276][T20640] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1842.937652][T20640] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1842.947858][T20640] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1842.958627][T20640] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1842.971470][T20640] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1842.981439][T16427] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1842.990720][T16427] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1842.999587][T16427] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1843.008735][T16427] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1843.024466][T20640] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1843.035760][T20640] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1843.046583][T20640] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1843.060690][T20640] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1843.071304][T20640] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1843.084859][T20640] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1843.097675][T20640] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1843.109342][T20640] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1843.120273][T20640] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1843.133628][T20640] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1843.145555][T20640] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1843.155837][T16427] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1843.165693][T16427] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1843.178214][T20640] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1843.188287][T20640] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1843.197977][T20640] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1843.207014][T20640] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1843.246333][T20640] ieee80211 phy43: Selected rate control algorithm 'minstrel_ht' [ 1843.284612][T16446] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1843.294826][T20640] ieee80211 phy44: Selected rate control algorithm 'minstrel_ht' [ 1843.304365][T16446] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1843.322805][T16427] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1843.375575][ T32] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1843.396190][ T32] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1843.409113][T16446] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1843.483806][T18739] device hsr_slave_0 left promiscuous mode [ 1843.492441][T18739] device hsr_slave_1 left promiscuous mode [ 1843.502253][T18739] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1843.511717][T18739] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1843.523145][T18739] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1843.531124][T18739] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1843.542859][T18739] device bridge_slave_1 left promiscuous mode [ 1843.549704][T18739] bridge0: port 2(bridge_slave_1) entered disabled state [ 1843.561472][T18739] device bridge_slave_0 left promiscuous mode [ 1843.570096][T18739] bridge0: port 1(bridge_slave_0) entered disabled state [ 1843.585063][T18739] device veth1_macvtap left promiscuous mode [ 1843.591550][T18739] device veth0_macvtap left promiscuous mode [ 1843.601053][T18739] device veth1_vlan left promiscuous mode [ 1843.607006][T18739] device veth0_vlan left promiscuous mode [ 1843.901511][T18739] team0 (unregistering): Port device team_slave_1 removed [ 1843.945363][T18739] team0 (unregistering): Port device team_slave_0 removed [ 1843.959119][T18739] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1844.003438][T18739] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1844.084431][T18739] bond0 (unregistering): Released all slaves [ 1844.157881][T20726] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 1844.168041][T20726] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 1844.180816][T20726] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 1844.209335][T20726] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 1844.345883][T20726] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1844.373376][T18725] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1844.382787][T18725] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1844.410686][T20726] 8021q: adding VLAN 0 to HW filter on device team0 [ 1844.421573][T17177] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1844.437850][T17177] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1844.455649][T17177] bridge0: port 1(bridge_slave_0) entered blocking state [ 1844.462988][T17177] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1844.494670][T17177] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1844.503861][T17177] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1844.513778][T17177] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1844.523261][T17177] bridge0: port 2(bridge_slave_1) entered blocking state [ 1844.530448][T17177] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1844.543309][T17177] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1844.566287][T17177] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1844.575777][T17177] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1844.589009][T17177] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1844.612163][T17177] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1844.622491][T17177] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1844.633378][T17177] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1844.645821][T17177] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1844.656090][T17177] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1844.669914][T17177] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1844.680368][T17177] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1844.691240][T20726] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1844.880062][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1844.892621][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1844.905217][T20726] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1845.230440][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1845.240243][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1845.264041][T18739] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1845.287543][T18739] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1845.296001][T18739] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1845.303970][T18739] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1845.322064][T20726] device veth0_vlan entered promiscuous mode [ 1845.340449][T20726] device veth1_vlan entered promiscuous mode [ 1845.369665][T18739] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1845.387624][T18739] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1845.410649][T20726] device veth0_macvtap entered promiscuous mode [ 1845.420793][T20726] device veth1_macvtap entered promiscuous mode [ 1845.439764][T20726] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1845.451688][T20726] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1845.463911][T20726] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1845.476083][T20726] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1845.486387][T20726] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1845.501514][T20726] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1845.511747][T20726] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1845.522667][T20726] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1845.532985][T20726] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1845.543909][T20726] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1845.555915][T20726] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1845.565296][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1845.587553][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1845.595545][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1845.617828][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1845.640784][T20726] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1845.652025][T20726] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1845.662284][T20726] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1845.673671][T20726] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1845.684833][T20726] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1845.695764][T20726] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1845.706344][T20726] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1845.719340][T20726] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1845.731048][T20726] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1845.745848][T20726] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1845.758677][T20726] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1845.768842][T16427] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1845.779013][T16427] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1845.790379][T20726] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1845.800359][T20726] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1845.810005][T20726] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1845.821467][T20726] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1845.866566][T20726] ieee80211 phy45: Selected rate control algorithm 'minstrel_ht' [ 1845.895449][T17177] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1845.902158][T20726] ieee80211 phy46: Selected rate control algorithm 'minstrel_ht' [ 1845.917965][T17177] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1845.929719][T18739] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1845.940185][T17177] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1845.951896][T17177] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1845.960821][T18739] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready