last executing test programs: 24m54.025907953s ago: executing program 32 (id=39): socket$packet(0x11, 0x2, 0x300) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x6, 0x50, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sched_setattr(0x0, 0x0, 0x0) fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1) write$USERIO_CMD_SEND_INTERRUPT(0xffffffffffffffff, &(0x7f0000000140)={0x2, 0x1}, 0x2) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0x149a82, 0x10) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) socket$kcm(0x2, 0xa, 0x2) write$tun(r3, &(0x7f0000004c40)={@val={0x1c, 0xf5}, @val, @mpls={[{}], @ipv6=@gre_packet={0x4, 0x6, "ace260", 0x44, 0x2f, 0x1, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @rand_addr=' \x01\x00', {[], {{0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x880b, 0x0, 0x2}, {}, {0x0, 0x0, 0x1, 0x1}, {0x8, 0x88be, 0x2, {{0x0, 0x1, 0x23, 0x0, 0x0, 0x1, 0x0, 0x2}, 0x1, {0x3e}}}, {0x8, 0x22eb, 0x3, {{0x2, 0x2, 0x48, 0x1, 0x1, 0x0, 0x1, 0x61}, 0x2, {0xfffffffb, 0xf587, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1}}}, {0x8, 0x6558, 0x2}}}}}}, 0x7e) write$cgroup_int(r2, &(0x7f0000000000)=0x2b00, 0x12) r4 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r4, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) mmap(&(0x7f0000000000/0x2000)=nil, 0x30000, 0x2, 0x11, r4, 0x0) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000040)=[{{&(0x7f0000000100)={0x2, 0x4e23, @empty}, 0x10, &(0x7f0000000000)=[{&(0x7f0000000240)="d2a7b3", 0x3}, {&(0x7f0000000400)="e06bd3f745", 0xfcfd}, {&(0x7f0000000500)="86e9a0d8", 0x4}, {&(0x7f00000005c0)="25062456", 0x4}], 0x4}}], 0x1, 0x4000800) syz_usb_connect(0x2, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x55, 0xe7, 0x64, 0x20, 0x421, 0x492, 0x49fc, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x20, 0x0, [{{0x9, 0x4, 0x84, 0x0, 0x2, 0xd3, 0xc0, 0x44, 0x0, [], [{{0x9, 0x5, 0x3, 0x2, 0x3ff}}, {{0x9, 0x5, 0x2, 0x2, 0x8}}]}}]}}]}}, 0x0) 24m53.082316653s ago: executing program 33 (id=41): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) r1 = socket$phonet_pipe(0x23, 0x5, 0x2) setsockopt(r1, 0x6, 0x6, &(0x7f00000003c0)="0e884dc65ddaca377628506c01ebdf93581e8cc65381ee2d855b2978640443072de91c443653064d045bb29adb34e859312ef61d11f513940c2febab7c9ba1759d26754072501d19f273b02c841fdbb9ce274d60ee8a10bb8b9dc1e98513171e028e113b2ba38665ab3e118b3339b407e73fac7a8db4a4691b698c1e982a34c8a3782ae895eea1aa09b27efd75bf4f08836d19fc9e1ff7f947f874b2762dac75515b1032070ff94acbc30376", 0xac) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-serpent-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, 0x0, 0x0) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) connect$inet6(0xffffffffffffffff, &(0x7f00000002c0)={0xa, 0x4e24}, 0x1c) r4 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) bind$nfc_llcp(r4, 0x0, 0x0) sendmsg$NFC_CMD_ENABLE_SE(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000200)={0x3c, 0x0, 0x0, 0x70bd2c, 0x25dfdbff, {}, [@NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_SE_INDEX={0x8, 0x15, 0x2}, @NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_SE_INDEX={0x8, 0x15, 0xc0}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000}, 0x4) syz_genetlink_get_family_id$ipvs(0x0, 0xffffffffffffffff) syz_genetlink_get_family_id$ipvs(&(0x7f0000000000), r3) sendmsg$IPVS_CMD_NEW_SERVICE(0xffffffffffffffff, &(0x7f0000001100)={0x0, 0x0, &(0x7f00000010c0)={0x0}, 0x1, 0x0, 0x0, 0x20004084}, 0x400c800) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, 0x0) mknod(0x0, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) 24m51.406700995s ago: executing program 34 (id=43): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x5, &(0x7f0000000080)=0xdc4) r0 = getpid() preadv(0xffffffffffffffff, &(0x7f0000000240), 0x0, 0x0, 0x0) ioctl$VIDIOC_CREATE_BUFS(0xffffffffffffffff, 0xc100565c, &(0x7f00000013c0)={0x3, 0x2, 0x2, {0x5, @vbi={0xb5, 0x4, 0x3, 0x0, [0x0, 0x18000000], [0x8200, 0x1]}}, 0xe}) ioctl$VIDIOC_QBUF(0xffffffffffffffff, 0xc058565d, &(0x7f0000000200)=@fd={0x0, 0x5, 0x4, 0x10, 0x0, {}, {0x0, 0x0, 0x0, 0x4, 0x0, 0x0, "001500"}, 0x0, 0x2, {}, 0x18603}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) r1 = socket$inet6(0xa, 0x5, 0x0) openat$full(0xffffffffffffff9c, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0xfffffffffffffffe) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000001a40)=""/102392, 0x18ff8) ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f00000000c0)={0x1000, 0x0, {}, {0xffffffffffffffff}, 0x4}) syz_open_procfs(0x0, 0x0) mq_timedreceive(0xffffffffffffffff, 0x0, 0x0, 0x200000000004, 0x0) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000180)=0x40002008) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) setpriority(0x2, 0x0, 0x3b) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) r3 = bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000002c0)={{r3}, &(0x7f0000000240), &(0x7f0000000280)='%pS \x00'}, 0x20) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000200)=[@in6={0xa, 0x4e24, 0x0, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x8}], 0x1c) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) 24m1.408679167s ago: executing program 35 (id=93): bind$alg(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000140)={0x1f, 0xffff, 0x2}, 0x6) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000001680)={@cgroup=r3, r2, 0x2f}, 0x20) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000300)={0x8, 0x0}, 0x8) r5 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000180)=r4, 0x4) bpf$BPF_PROG_DETACH(0x9, &(0x7f00000008c0)={@cgroup=r2, r3, 0x2f, 0x2000, 0x4, @value=r5}, 0x20) r6 = socket$kcm(0x10, 0x3, 0x10) recvmsg(r6, &(0x7f00000003c0)={0x0, 0x0, 0x0}, 0x10000) sendmsg$kcm(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{0x0}], 0x1}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) socket$inet_sctp(0x2, 0x1, 0x84) openat$comedi(0xffffff9c, &(0x7f0000000040)='/dev/comedi3\x00', 0x2000, 0x0) r7 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r7, 0x400448ca, 0x0) syz_80211_inject_frame(0x0, &(0x7f0000000100)=ANY=[], 0x36) 23m45.463796122s ago: executing program 36 (id=105): socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg(r1, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb4b, 0x9, 0x8, 0x0, 0x400003}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$devlink(&(0x7f00000001c0), r2) sendmsg$DEVLINK_CMD_RATE_SET(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000500)={0x34, r3, 0x801, 0x70bd2a, 0x0, {0x2a}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0xd4209235c937efa7}, 0x0) getsockopt$CAN_RAW_LOOPBACK(0xffffffffffffffff, 0x65, 0x20, 0x0, 0x0) syz_usb_connect(0x0, 0x5f, 0x0, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001400)=@newtaction={0x60, 0x30, 0x1, 0x70bd2b, 0x25dfdbfd, {}, [{0x4c, 0x1, [@m_pedit={0x48, 0x1, 0x0, 0x0, {{0xa}, {0x1c, 0x2, 0x0, 0x1, [@TCA_PEDIT_KEYS_EX={0x18, 0x5, 0x0, 0x1, [{0x14, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x500}, @TCA_PEDIT_KEY_EX_HTYPE={0x6}]}]}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x3}}}}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x4081}, 0x2400c800) write$6lowpan_control(0xffffffffffffffff, &(0x7f0000000180)='connect aa:aa:aa:aa:aa:11 0', 0x1b) mkdir(&(0x7f0000000140)='./control\x00', 0x5) r4 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_int(r4, 0x29, 0x1000000000021, &(0x7f0000000000)=0xffffffc3, 0x4) inotify_add_watch(0xffffffffffffffff, 0x0, 0x64000ba6) inotify_add_watch(0xffffffffffffffff, &(0x7f0000000180)='./control\x00', 0xa4000960) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000680), 0x40000, 0x19) r5 = socket(0x2, 0x80805, 0x0) setsockopt$inet_sctp_SCTP_DELAYED_SACK(r5, 0x84, 0x10, &(0x7f00000000c0)=@assoc_value={0x0, 0x6}, 0x8) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="2000000034000900000000caae9e7f531771b3be0000000000030000000c000300332f34122ee5f6c7"], 0x20}}, 0x4000010) 23m31.382491729s ago: executing program 37 (id=113): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) syz_emit_ethernet(0x36, &(0x7f0000000340)={@multicast, @dev, @val={@void}, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x4, 0x0, @dev, @multicast1}, {0x0, 0x0, 0x10, 0x0, @gue={{0x2}}}}}}}, 0x0) sendmsg$TIPC_NL_BEARER_SET(0xffffffffffffffff, 0x0, 0x4004) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newtaction={0xa0, 0x30, 0x51b, 0xfffffffc, 0x0, {}, [{0x8c, 0x1, [@m_skbmod={0x5c, 0x1, 0x0, 0x0, {{0xb}, {0x30, 0x2, 0x0, 0x1, [@TCA_SKBMOD_PARMS={0x24, 0x2, {{}, 0xe}}, @TCA_SKBMOD_ETYPE={0x6, 0x5, 0x6}]}, {0x4, 0x14}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x6}}}, @m_ct={0x2c, 0x2, 0x0, 0x0, {{0x7}, {0x4}, {0x4}, {0xc}, {0xc, 0x8, {0x1, 0x2}}}}]}]}, 0xa0}}, 0x0) sendmsg$netlink(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000380)=ANY=[@ANYBLOB="180100002e00010000000000fcdbdf250801f2800c00180008ac0f0000000000140001"], 0x118}], 0x1, 0x0, 0x0, 0x1}, 0x0) socket$inet_udp(0x2, 0x2, 0x0) socket$key(0xf, 0x3, 0x2) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) fsmount(0xffffffffffffffff, 0x0, 0x0) gettid() socket$inet_icmp_raw(0x2, 0x3, 0x1) prctl$PR_SCHED_CORE(0x3e, 0x10000000001, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000180)=0x1400200bce) r1 = syz_open_dev$MSR(&(0x7f0000000200), 0x0, 0x0) read$msr(r1, &(0x7f0000002700)=""/102392, 0x18ff8) socket$inet(0x2, 0x2, 0x1) socket$kcm(0x10, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000a40), 0x4) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="6000000002060103000000000000000000000004050001000700000013000300686173683a6e65742c696661636500000900020073797a30000000000500040000000000050005000a00000014000780050015000000000008001240"], 0x60}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sendmsg$IPSET_CMD_DESTROY(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)={0x1c, 0x3, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) 23m26.674696996s ago: executing program 38 (id=117): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r0 = syz_open_dev$MSR(&(0x7f0000000200), 0xa, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) read$msr(r0, &(0x7f0000002240)=""/102400, 0x19000) r1 = syz_open_dev$I2C(&(0x7f0000000040), 0x0, 0x0) ioctl$I2C_SMBUS(r1, 0x720, &(0x7f0000000080)={0x1, 0x0, 0x1, 0x0}) r2 = open(0x0, 0x0, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000840)=ANY=[@ANYBLOB="500000001000010428bd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="5d580000000000001c001a8018000a80140007000000000000000000000000000000000114000300697036677265300000000000000000005bcac90b605a6709aba1e76609218f061fbc08"], 0x50}, 0x1, 0x0, 0x0, 0x840}, 0x0) mount$tmpfs(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000001c0), 0xc00, &(0x7f0000000480)=ANY=[@ANYBLOB="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"]) chdir(&(0x7f0000000240)='./file0\x00') bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x3, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x61, 0x10, 0x14}, [@ldst={0x2, 0x0, 0x3, 0x1c10a1, 0x0, 0xc}], {0x95, 0x0, 0x9}}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x85}, 0x52) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mkdir(&(0x7f00000000c0)='./bus\x00', 0x0) mkdir(&(0x7f0000000440)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, 0x0) open(&(0x7f0000000140)='./file1\x00', 0x0, 0xc0) ioctl$DRM_IOCTL_MODE_GETCRTC(0xffffffffffffffff, 0xc06864a1, &(0x7f00000003c0)={0x0}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r2, 0xc05064a7, &(0x7f0000000900)={0x0, &(0x7f00000005c0)=[{}, {}, {}, {}], &(0x7f0000000280), &(0x7f0000000280), 0x4}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a000000180100002020702500000000002020207b"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x0, r2}, 0x94) r4 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r4, 0x0, 0x0) 21m59.008660751s ago: executing program 39 (id=123): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(ecb-aes-aesni)\x00'}, 0x58) r1 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) ioctl$sock_bt_hidp_HIDPCONNDEL(r1, 0x400448c9, &(0x7f0000000480)={@any, 0x4}) pipe2(&(0x7f0000001040)={0xffffffffffffffff}, 0x0) r3 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000400)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) pipe2(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) tee(r2, r4, 0xfffffffffffffc01, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) 21m7.923083493s ago: executing program 40 (id=153): r0 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) fsmount(r0, 0x0, 0x0) gettid() socket$inet_icmp_raw(0x2, 0x3, 0x1) prctl$PR_SCHED_CORE(0x3e, 0x10000000001, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1) r1 = syz_open_dev$MSR(&(0x7f0000000200), 0x0, 0x0) read$msr(r1, &(0x7f0000002700)=""/102392, 0x18ff8) socket$inet(0x2, 0x2, 0x1) 17m29.520391486s ago: executing program 41 (id=860): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @multicast2}, 0x10) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0xf, &(0x7f0000000000)=0x6, 0x4) bind$inet(0xffffffffffffffff, &(0x7f0000000100)={0x2, 0x4e20, @broadcast}, 0x10) 16m40.357605765s ago: executing program 42 (id=933): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) openat$vimc2(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r2 = socket(0x10, 0x3, 0x0) ioctl$EVIOCGRAB(0xffffffffffffffff, 0x40044590, 0x0) set_mempolicy(0x1, 0x0, 0x4) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0xb, 0x59032, 0xffffffffffffffff, 0x0) r3 = userfaultfd(0x80801) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x4}) ioctl$UFFDIO_COPY(r3, 0xc028aa03, &(0x7f0000000100)={&(0x7f0000800000/0x800000)=nil, &(0x7f0000339000/0x1000)=nil, 0x800000}) io_submit(0x0, 0x2, &(0x7f0000000000)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x5, 0x0, 0xffffffffffffffff, 0x0}, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x7, r2, 0x0, 0x0, 0x10000, 0x0, 0x2}]) write$char_usb(0xffffffffffffffff, &(0x7f0000000340)="e2", 0x1) sendmsg$nl_route_sched(r2, 0x0, 0x0) openat$nullb(0xffffffffffffff9c, 0x0, 0x2c240, 0x0) r4 = syz_open_dev$vim2m(&(0x7f0000000040), 0x8, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r4, 0xc0405602, &(0x7f00000000c0)={0xfffffffe, 0x2, 0x1, "f7b817716daef7e53fa4f998da1907309f97630a33ea3b6bd13c74c37001fd36", 0x35315241}) ioctl$sock_FIOGETOWN(r1, 0x8903, 0x0) sched_getattr(0x0, &(0x7f0000000200)={0x38}, 0x38, 0x0) 16m39.580681736s ago: executing program 43 (id=934): r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vxcan1\x00', 0x0}) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) bind$can_j1939(r0, &(0x7f00000000c0)={0x1d, r1}, 0x18) connect$can_j1939(r0, &(0x7f0000000140)={0x1d, r1, 0x0, {0x1, 0xff, 0xa8fe8ad4eea2351f}, 0x2}, 0x18) setsockopt$SO_J1939_ERRQUEUE(r0, 0x6b, 0x4, &(0x7f00000003c0)=0x5, 0x4) sendmmsg(r0, &(0x7f0000003e40), 0x3fffffffffffe3d, 0xf5) r2 = syz_io_uring_setup(0x111, &(0x7f0000000140)={0x0, 0x334e, 0x10, 0x4, 0x312}, &(0x7f00000029c0)=0x0, &(0x7f0000000300)=0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuset.memory_pressure_enabled\x00', 0x275a, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x1, 0x7}) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) write$UHID_CREATE2(r5, &(0x7f00000001c0)=ANY=[@ANYBLOB="06"], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r5, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffff9c, 0x0, 0x0, 0x60, 0x185100}) io_uring_enter(r2, 0x7277, 0x0, 0x28, 0x0, 0x0) 15m20.879692821s ago: executing program 44 (id=1085): socketpair$unix(0x1, 0x2, 0x0, 0x0) unshare(0x22020600) tee(0xffffffffffffffff, 0xffffffffffffffff, 0x3, 0xd) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x4e22, @local}, 0x10) syz_emit_ethernet(0x46, &(0x7f0000000440)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1b}, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x9, 0x38, 0x68, 0x0, 0x0, 0x6, 0x0, @remote, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x2, 0x9, 0x4, 0x2, 0x0, 0x0, {[@generic={0x2, 0x3, '7'}, @timestamp={0x8, 0xa, 0x6, 0xc}]}}}}}}}, 0x0) 12m22.998337033s ago: executing program 45 (id=1522): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) socket$xdp(0x2c, 0x3, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$pptp(0x18, 0x1, 0x2) connect$pptp(r3, &(0x7f0000000700)={0x18, 0x2, {0x0, @multicast1}}, 0x1e) connect$pptp(r3, &(0x7f00000001c0)={0x18, 0x2, {0x2, @local}}, 0x1e) socket$nl_netfilter(0x10, 0x3, 0xc) r4 = syz_open_dev$usbfs(&(0x7f0000000480), 0x77, 0x41341) ioctl$USBDEVFS_IOCTL(r4, 0xc0105512, &(0x7f0000000200)) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="180000000008002b000000000000000018040000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000004300000095"], 0x0, 0x0, 0x11, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f00000003c0)='sched_switch\x00', r5}, 0x10) syz_open_dev$dri(&(0x7f00000000c0), 0x1, 0x0) openat$nvram(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r6 = syz_open_dev$sndctrl(&(0x7f0000000100), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r6, 0xc0045516, &(0x7f00000000c0)=0x81) ioctl$EVIOCSREP(0xffffffffffffffff, 0x40084503, 0x0) r7 = gettid() ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r6, 0xc1105517, &(0x7f0000000900)={{0x0, 0x4, 0x1, 0x0, 'syz1\x00', 0xd3}, 0x1, 0x40, 0x2, r7, 0x0, 0x3, 'syz1\x00', 0x0}) 10m4.37620782s ago: executing program 46 (id=1904): socket$kcm(0x10, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000001e80)={0x2020}, 0x2020) dup3(r0, r1, 0x0) r2 = syz_open_dev$vcsa(&(0x7f0000000080), 0x1, 0x40402) writev(r2, &(0x7f0000000c40)=[{0x0}, {&(0x7f00000005c0)="c21cfb", 0x3}, {&(0x7f00000007c0), 0x320}, {&(0x7f0000000900), 0x4000}], 0xe) 9m25.100980997s ago: executing program 47 (id=1977): landlock_create_ruleset(0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, 0x0, 0x0) sendmmsg$unix(r1, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x6, 0x4, 0x40, 0x5}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000007c0), &(0x7f0000000380), 0xfff, r2, 0x0, 0xa0028000}, 0x38) 8m24.09477559s ago: executing program 48 (id=2096): setsockopt$inet_sctp6_SCTP_EVENTS(0xffffffffffffffff, 0x84, 0xb, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f0000000040), 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0xc, &(0x7f0000000800)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x8, 0xf, 0x0, 0x0}, 0x94) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = syz_open_dev$usbfs(&(0x7f0000000480), 0x77, 0x41341) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000200)) r2 = socket(0x1e, 0x4, 0x0) keyctl$read(0xb, 0x0, &(0x7f0000000100)=""/59, 0x3b) dup3(r2, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000000)=@usbdevfs_connect) 8m4.07066663s ago: executing program 49 (id=2141): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x4, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) read$msr(r0, &(0x7f0000004340)=""/102376, 0x18fe8) openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = syz_open_dev$vim2m(0x0, 0x7, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r1, 0xc0d05605, &(0x7f0000000140)={0x1, @pix_mp={0x0, 0x0, 0x34524742, 0x0, 0x7, [{}, {0xfffffff7}, {}, {}, {}, {0x0, 0x4}, {0x2000000}, {0xc28f}], 0x2}}) syz_open_dev$sndctrl(0x0, 0xfffffffffffffffe, 0x16ef03) socketpair$unix(0x1, 0x5, 0x0, 0x0) r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x149002, 0x0) write$P9_RSTATu(r2, &(0x7f00000004c0)={0x232, 0x7d, 0x0, {{0x500, 0xf0, 0x401, 0x5000000, {}, 0x0, 0x0, 0x0, 0x0, 0x1f, '\x04nodev{cvfox\x92\xff\xff\xff\x81\x02\x00\x00\x00\x00\x001\xff\xce\xbc\x92\x00\x00\x00', 0x38, 'pJ\x86\xce\xc6\x02\x00}\xfag>\xff\xeb\t\xb55\x1f[\xde\x05\xf7\x00\x00\x00\x00\x18{\x82\x00\xb5\x00\x00;Y_\xcb\x14\x03CT\xb9\xfd\x9e\xf1\x96\xa5\x1c\xd5\x15z\xdc\x81\x06\xb4\x94\xe1', 0x12, '\xcf\xc2\x00\x10\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xf3\x13\xf6\x00', 0x55, '\xf8\xf6i\xfbqm\xcf1^\xca\xf3\x85@\x9a\xc6[\x94\bg\x8c,;\x9e\x1dR\xc3l\xde{\xa4\xa4\x00\xb4\xb0\xb4\xf1t\xa6f\xa8R\x9aE\x1b4\a\xdb\xda\xb2\x88K\xaf\x05\x00\x00\x00\x00\x00\x00\x00G\xec!\xca\xbf\xf2\x0f\x9c\x1c\xbe6\xf4\xfd\x1aL\xc2\x80\xe8\xd4\x89\xdad\x9a7\x00'}, 0x12c, 'odev-n\xb1{#\x00\xf9\xda\xa5\xee#&n\xcf\x85\xfe\xa6^B\xd9y\xa3\xfd\xe5\xf4u\xda\xf0;\x11r\xd9{\xad\xc7\tZ\xfdv\xfeO\x04A\xf7\xf7t\x1e\xac\x03\x00\x00\xec\xff\x00\x00\xdb\xa0\xc2\xf7\xf0\x9f\xf5<~M\x1a\xd6n-\a\x01\x98\x01\x9f0\x11\x84G\xaa\x9at\xf5\x16\x85\xf5\x06\xae\x89H\x06\x87\x82g\xd5\xa1)\x8dy,J7\xf2\xe1\xcb\xbd$\x82\x92\x9a\r\x89r\xb5\xcfs.\xa5\xb0\xd7#\x85\x9d\xba?\x93\xae\xd3\xb4.\xe7\xca\xc0}\xe0\x9d\x1dh\xa6\x033\xa8\x82F}+1\xaa\xcd\xf9\x18\x85I\xb1\x12]lL\x9b\x18\xc2\xfbV\xc5}}\xc6&\xe49\a\x96\xa1\xebH\'Fi\xab\x13\xf8\xb1\x1d\x14`Y\xf3\x10\xe2cMY?\xece\xd5)\xf3\x82\x06fd\xdf$NL\x90W\np\x04\x9f9\x9f\x06\x1fu\xb7y|\xe1\xfe\x11\xea\x91\x96\t\xd5\x1aA\xdd=\xe3\x04\xbd|~\xd0\xa4V\xf0\xae\x12Qa\x05\xc9\xce\x88}\xf5\xa6\xe0\xb6\xa7}Yl\xf8\x8b\xa6\xe5\xc69|}P!\xd7\x98\x95(\xfd\x179\xe1\xc2\xd8\x7f\xff\x00'/300, 0xffffffffffffffff}}, 0x232) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) dup3(r2, r1, 0x80000) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x1, 0x8, 0xc, 0xffffffff, 0x1, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x2}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_BIND_MAP(0xa, 0x0, 0x0) syz_emit_ethernet(0x42, &(0x7f0000000200)={@broadcast, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x34, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x1, 0x0, 0x3, 0x0, 0x0, {0x6, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x4, 0x0, @loopback, @local, {[@timestamp_prespec={0x44, 0x4, 0xd9}]}}}}}}}, 0x0) 6m47.684311506s ago: executing program 50 (id=2298): syz_open_dev$sndctrl(0x0, 0x6, 0x0) syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000002000)=""/102400, 0x19000) r1 = getpid() io_uring_setup(0x30a7, 0x0) r2 = syz_pidfd_open(r1, 0x0) socket(0x40000000015, 0x5, 0x0) bind$rds(0xffffffffffffffff, 0x0, 0x0) open_by_handle_at(r2, &(0x7f0000000180)=ANY=[@ANYBLOB="15000000fe00"], 0x1) 6m44.354942146s ago: executing program 51 (id=2307): connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, 0x0, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="1805000000000000000000004b64ffec850000007d000000850000000700000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000900)={&(0x7f00000000c0)='mmap_lock_acquire_returned\x00', r0, 0x0, 0x1}, 0x18) openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') mount$9p_fd(0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r1}}) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, 0x0, 0x0, 0x4) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) move_pages(0x0, 0x1efe, &(0x7f0000000080), 0x0, &(0x7f0000000040), 0x0) 5m31.093885575s ago: executing program 52 (id=2435): socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x2, 0x7}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000005580)=""/102392, 0x18ff8) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x2b1e}, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000900)=[@in={0x2, 0x4e23, @loopback}, @in6={0xa, 0x0, 0x0, @loopback, 0x7ff}], 0x2c) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000000280)=[@in6={0xa, 0x4e23, 0x0, @loopback, 0x7}], 0x1c) ioctl$SNDRV_TIMER_IOCTL_START(0xffffffffffffffff, 0x54a0) openat$sndtimer(0xffffffffffffff9c, 0x0, 0x0) openat$audio(0xffffffffffffff9c, 0x0, 0x40000000040201, 0x0) sendmsg$IPSET_CMD_DESTROY(0xffffffffffffffff, 0x0, 0x4) socket$nl_route(0x10, 0x3, 0x0) 5m4.944278872s ago: executing program 7 (id=2535): r0 = userfaultfd(0x80001) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000140)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0x1}) r1 = socket$xdp(0x2c, 0x3, 0x0) r2 = gettid() timer_create(0x0, &(0x7f00000002c0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)=0x0) timer_settime(r3, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) setsockopt$XDP_UMEM_REG(r1, 0x11b, 0x4, &(0x7f0000000340)={&(0x7f0000000000)=""/59, 0x312000, 0x800, 0x0, 0x5}, 0x20) mkdir(0x0, 0x0) ioctl$UFFDIO_COPY(r0, 0xc028aa05, &(0x7f0000000040)={&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000000/0x3000)=nil, 0x3000}) 5m3.334831822s ago: executing program 7 (id=2539): r0 = io_uring_setup(0x60f7, &(0x7f0000000a40)={0x0, 0x0, 0x80, 0x2, 0x3bd}) close_range(r0, 0xffffffffffffffff, 0x0) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_int(r1, 0x6, 0x22, 0x0, 0x0) sendmmsg(r1, &(0x7f00000007c0)=[{{&(0x7f0000000380)=@in={0x2, 0x4e24, @local}, 0x80, &(0x7f0000000140)=[{&(0x7f00000004c0)='&', 0x1}], 0x1}}], 0xf00, 0x2c000011) 5m2.655161999s ago: executing program 7 (id=2541): ioctl$SG_SET_TIMEOUT(0xffffffffffffffff, 0x2201, 0x0) socket$nl_route(0x10, 0x3, 0x0) creat(0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r0 = syz_open_dev$MSR(&(0x7f0000000200), 0x0, 0x0) syz_open_dev$sg(&(0x7f00000002c0), 0x0, 0x2000) read$msr(r0, &(0x7f0000002700)=""/102392, 0x18ff8) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$lock(r1, 0x26, &(0x7f0000000000)={0x1, 0x0, 0x56b, 0xfffffffffffffffc}) fcntl$lock(r1, 0x24, &(0x7f0000000040)={0x2, 0x2, 0x1, 0x7}) 4m46.94094835s ago: executing program 53 (id=2541): ioctl$SG_SET_TIMEOUT(0xffffffffffffffff, 0x2201, 0x0) socket$nl_route(0x10, 0x3, 0x0) creat(0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r0 = syz_open_dev$MSR(&(0x7f0000000200), 0x0, 0x0) syz_open_dev$sg(&(0x7f00000002c0), 0x0, 0x2000) read$msr(r0, &(0x7f0000002700)=""/102392, 0x18ff8) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$lock(r1, 0x26, &(0x7f0000000000)={0x1, 0x0, 0x56b, 0xfffffffffffffffc}) fcntl$lock(r1, 0x24, &(0x7f0000000040)={0x2, 0x2, 0x1, 0x7}) 4m29.567625727s ago: executing program 54 (id=2594): bpf$MAP_CREATE(0x0, 0x0, 0x0) r0 = gettid() syz_open_dev$tty1(0xc, 0x4, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8) sched_setaffinity(0x0, 0xfffffffffffffdee, &(0x7f0000000000)=0x8000000000005) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000009c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000840)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r6}, 0x10) mount$tmpfs(0x0, 0x0, &(0x7f00000004c0), 0x23031, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$packet(0x11, 0x2, 0x300) socket$packet(0x11, 0xa, 0x300) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r7 = socket$unix(0x1, 0x1, 0x0) bind$unix(r7, &(0x7f00000000c0)=@abs={0x1, 0x0, 0x4e20}, 0x6e) listen(r7, 0x0) 3m52.018042665s ago: executing program 0 (id=2730): r0 = syz_open_dev$media(0x0, 0x10, 0x0) r1 = signalfd(r0, &(0x7f0000000980), 0x8) unlinkat(r1, &(0x7f00000013c0)='./file0\x00', 0x0) r2 = openat$btrfs_control(0xffffffffffffff9c, 0x0, 0x20000, 0x0) r3 = socket$inet6(0xa, 0x3, 0x6) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000580)={0x0, 0x0, 0x0}, &(0x7f0000000a00)=0xc) syz_mount_image$hfsplus(&(0x7f00000000c0), &(0x7f0000000980)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB='nobarrier,gid=', @ANYRESHEX=r5, @ANYBLOB="2c63726561746f723dbd3d66f12c63726561746f723d64eb8ba92c6e6f6465636f6d706f73652c756d61736b3d3030303030303030303030303030303030303030303032000000003d", @ANYRESHEX=r4, @ANYRESOCT], 0x3, 0x6a4, &(0x7f0000001b40)="$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") fstat(r1, &(0x7f0000001540)={0x0, 0x0, 0x0, 0x0, 0x0}) syz_mount_image$fuse(&(0x7f0000001400), &(0x7f0000001440)='./cgroup\x00', 0x3e0ba9c2a79694cd, &(0x7f00000015c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYBLOB, @ANYRESDEC=r4, @ANYBLOB=',group_id=', @ANYRESDEC, @ANYBLOB="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", @ANYRESDEC=r6, @ANYBLOB="2c646f6e745f61707072616973652c726f2c646f6e745f686173682c736d61636b6673726f6fd75048f57a31002c61707072616973652c00"], 0x0, 0x0, &(0x7f0000001c40)="22f916ef3208eeb4b36d2c17f61db6cb0313076857c7de2ce3b1fafb256f0040bec3ec0b67f404ee42d4f821f16b0964047780d8522ba8267ec841b46fdffd9f6020b9d940f23b49e0200ba5e71d2e81029b26b0178312862991fd9a4fecba379979dc796ae4ae5aed23029148e93c2bd6ba03881365f6865189b2f7e5e75d5bf92ca517b0b86333fc089d97928933bffec0180ff0f634be797abbd7343d31c4f7d6312a666e809ca341050ef350075b17dc2d886af7d6c9b1963642bb68fc2473eb90e51872124f36485475a1eb72b4fe9fbd9fa76f1006a4a6078ecb7b7acba550e519a7fefe3dc573a8aadfbb3b5467384de288e2") ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000000040)={0x0, 0x7, 0x0, &(0x7f0000000300)=[{}, {}, {}, {}, {}, {}, {}], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_mount_image$udf(&(0x7f0000000080), &(0x7f0000000500)='./file0\x00', 0x1818418, &(0x7f0000000200)=ANY=[], 0xdf, 0x4b1, &(0x7f0000000ac0)="$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") mkdirat(0xffffffffffffffff, &(0x7f0000000200)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0) renameat2(0xffffffffffffffff, &(0x7f0000000340)='./file0\x00', 0xffffffffffffffff, &(0x7f0000000140)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) 3m50.063027917s ago: executing program 0 (id=2734): r0 = syz_open_dev$vbi(&(0x7f0000000080), 0x3, 0x2) ioctl$VIDIOC_S_OUTPUT(r0, 0xc004562f, &(0x7f0000000000)=0x1) ioctl$VIDIOC_S_DV_TIMINGS(r0, 0xc0845657, &(0x7f0000000380)={0x0, @bt={0x2d0, 0x190, 0x0, 0x0, 0xdd9f83, 0x1, 0xc, 0x1, 0x2, 0x8, 0x723, 0xed, 0x7, 0x7f, 0x8, 0xb763599953cb090f, {0x10000, 0x6fd8e84b}, 0x3, 0xed}}) 3m49.907688964s ago: executing program 8 (id=2737): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = socket$inet6(0xa, 0x2, 0x3a) sendto$inet6(r1, &(0x7f0000000080)="800037bbfa9ba1ce", 0xffd8, 0x0, 0x0, 0x0) readv(r0, &(0x7f0000000380)=[{&(0x7f00000000c0)=""/42, 0x2a}], 0x1) 3m48.890903732s ago: executing program 0 (id=2741): socket$inet_udplite(0x2, 0x2, 0x88) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r0 = syz_io_uring_setup(0x44cd, &(0x7f00000004c0)={0x0, 0x5331, 0x10100, 0x1000006, 0xfffefffe}, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) sendmsg$IPSET_CMD_TYPE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='8'], 0x38}}, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r3, &(0x7f0000000180)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_POLL_REMOVE={0x7, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}) io_uring_enter(r0, 0x2d3e, 0xec84, 0x0, 0x0, 0x0) 3m48.079027631s ago: executing program 8 (id=2745): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)={{0x14}, [@NFT_MSG_NEWSET={0x5c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x20}, @NFTA_SET_EXPR={0x20, 0x11, 0x0, 0x1, @quota={{0xa}, @val={0x10, 0x2, 0x0, 0x1, [@NFTA_QUOTA_BYTES={0xc}]}}}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0x84}}, 0x20008844) 3m47.839276691s ago: executing program 0 (id=2746): syz_open_dev$tty1(0xc, 0x4, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f0000000480), 0x400034f, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) 3m47.335039726s ago: executing program 8 (id=2748): bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x12, 0x9, 0x4, 0x2, 0x0, 0xffffffffffffffff, 0x4}, 0x50) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="9402000021000100fcffffff00000000ac1414aae5fffff8b49ed9825133a900fc0100000000000000070000000000000000add500200000000000801aea", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000700004e6706362632874776f666973682900000000000000000000000480000000000000000000000000000000000000000000000000000000000000000000000000000040010000dc06216ef2c68e9f6da05d886dbc3273ef99796b36698e2bd5179c3eea5474fc78c9720bfc4f90a708001f0001000000cc0111"], 0x294}}, 0x0) 3m46.556222132s ago: executing program 8 (id=2752): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) writev(0xffffffffffffffff, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r0 = syz_io_uring_setup(0x112, &(0x7f00000003c0)={0x0, 0xfded}, &(0x7f0000000040)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, {0x2085}}) io_uring_enter(r0, 0x1f85, 0x40110a, 0x4d, 0x0, 0x85) 3m45.634078342s ago: executing program 8 (id=2755): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000032680)=""/102392, 0x18ff8) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWRULE={0x54, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @objref={{0xb}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_OBJREF_SET_SREG={0x8}, @NFTA_OBJREF_SET_ID={0x8, 0x5, 0x1, 0x0, 0x3}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x7c}}, 0x0) dup3(0xffffffffffffffff, r0, 0x0) 3m43.156347036s ago: executing program 0 (id=2762): bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x12, 0x9, 0x4, 0x2, 0x0, 0xffffffffffffffff, 0x4}, 0x50) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="9402000021000100fcffffff00000000ac1414aae5fffff8b49ed9825133a900fc0100000000000000070000000000000000add500200000000000801aea", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000700004e6706362632874776f666973682900000000000000000000000480000000000000000000000000000000000000000000000000000000000000000000000000000040010000dc06216ef2c68e9f6da05d886dbc3273ef99796b36698e2bd5179c3eea5474fc78c9720bfc4f90a708001f0001000000cc0111"], 0x294}}, 0x0) 3m42.24878444s ago: executing program 0 (id=2763): setsockopt(0xffffffffffffffff, 0x84, 0x81, &(0x7f0000000280)="1a00000002000000", 0x8) r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000040)="2e00000011008188040f80ec59acbc0413a1f8480b0000005e140602000000000e004300100000", 0x27}], 0x1}, 0x40000) r1 = socket(0x10, 0x3, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000180)={0xffffff}, 0x10) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="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"], 0x0, 0x3f, 0x0, 0x9}, 0x28) write(r1, 0x0, 0x0) r3 = socket$inet6(0xa, 0x802, 0x0) getsockopt$inet6_opts(r3, 0x29, 0x36, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x0, 0x0, 0x2, 0x0) timer_settime(0x0, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, &(0x7f0000000380)) r4 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r4, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(r4, &(0x7f0000000180)={0x2, 0x4e21, @empty}, 0x10) sendto$inet(r4, &(0x7f0000000000), 0xfffffffffffffd74, 0x40004, 0x0, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r4, 0x6, 0xd, &(0x7f00000001c0)='htcp\x00', 0x51) recvfrom$inet(r4, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0xc9100120, 0x0, 0xfffffffffffffd25) 3m38.068185953s ago: executing program 3 (id=2775): r0 = socket$vsock_stream(0x28, 0x1, 0x0) ioctl$int_in(r0, 0x5421, &(0x7f0000000080)=0xfffffffffbfffffe) connect$vsock_stream(r0, &(0x7f0000000280)={0x28, 0x0, 0xffffffff, @local}, 0x31) connect$vsock_stream(r0, 0x0, 0x0) 3m37.222971099s ago: executing program 3 (id=2777): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="240000001800010600000000000000001c140000fe000001000000000800010000000a"], 0x24}, 0x1, 0x0, 0x0, 0x4009}, 0x0) 3m35.763104002s ago: executing program 3 (id=2780): r0 = socket$l2tp6(0xa, 0x2, 0x73) bind$l2tp6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @empty, 0x0, 0x80000}, 0x20) r1 = socket$l2tp6(0xa, 0x2, 0x73) bind$l2tp6(r1, &(0x7f0000000000)={0xa, 0x0, 0x1, @empty, 0x0, 0x3}, 0x20) close(r1) 3m34.27215443s ago: executing program 3 (id=2782): socket(0x40000000015, 0x805, 0x0) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) socket(0x1d, 0x2, 0x6) epoll_create(0x2) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x240303, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) r0 = syz_open_dev$dri(&(0x7f0000000440), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000040)={&(0x7f0000000100)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_ATOMIC(r0, 0xc03864bc, 0x0) 3m33.021370862s ago: executing program 3 (id=2785): mmap(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x8, 0x32, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000540)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x18, 0x12, &(0x7f0000000380)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x87, 0x0, 0x0, 0x0, 0x6}, {{0x18, 0x1, 0x1, 0x0, r0}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x40000}, {0x85, 0x0, 0x0, 0x86}}, {}, [@jmp={0x5, 0x1, 0xb, 0xa, 0x0, 0x6}, @initr0={0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x20000010}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x3}, {0x85, 0x0, 0x0, 0x2a}}}, &(0x7f0000000080)='GPL\x00', 0x7, 0x1001, &(0x7f0000001cc0)=""/4097, 0x41100, 0x4d}, 0x94) 3m32.26062331s ago: executing program 3 (id=2787): r0 = syz_open_dev$ndb(&(0x7f0000000040), 0x0, 0x40001) ioctl$BLKTRACESETUP(r0, 0xc0401273, &(0x7f0000000000)={'\x00', 0x2, 0x6f11, 0x8, 0xfffffffffffffeff, 0x11c3adec}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000010001, 0x4, 0xffffffff}, 0x0) fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x50, 0x0, &(0x7f0000000040)=0x54) write$USERIO_CMD_SEND_INTERRUPT(0xffffffffffffffff, &(0x7f0000000140)={0x2, 0x1}, 0x2) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x800000019) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mremap(&(0x7f000054e000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f000022c000/0x3000)=nil) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60) ioctl$KVM_GET_IRQCHIP(r4, 0xc208ae62, &(0x7f0000000600)={0x0, 0x0, @pic={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}}) process_mrelease(0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x10252000) bpf$PROG_LOAD(0x5, 0x0, 0x0) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) write$binfmt_misc(r5, &(0x7f0000000000), 0xfffffecc) 3m30.370064647s ago: executing program 55 (id=2755): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000032680)=""/102392, 0x18ff8) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWRULE={0x54, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @objref={{0xb}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_OBJREF_SET_SREG={0x8}, @NFTA_OBJREF_SET_ID={0x8, 0x5, 0x1, 0x0, 0x3}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x7c}}, 0x0) dup3(0xffffffffffffffff, r0, 0x0) 3m26.223903903s ago: executing program 56 (id=2763): setsockopt(0xffffffffffffffff, 0x84, 0x81, &(0x7f0000000280)="1a00000002000000", 0x8) r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000040)="2e00000011008188040f80ec59acbc0413a1f8480b0000005e140602000000000e004300100000", 0x27}], 0x1}, 0x40000) r1 = socket(0x10, 0x3, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000180)={0xffffff}, 0x10) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="9feb010018de0000000000002400000024000000030000000000000002000013020000000100000000000000000000fe00000000003ca0861b000000006100bfd92558c4a6492d47399a35be9c0e18f82daf76e3208b46053a2e960ac91b433dc74f5c38b024776ff5a2ca4fd5b897586c77b8485f05000000bd56163ccf70892e4f067289b7a2ad43a2d8e9055f6a901282f32d8fa5f5fa950300a9052b3d190c1eef5b7c29d2cff3caa2808ffe4181eccf0ae77ca0384602e39f4d292de1e1a649f49174a31b6727ddc2bf9894f9ec997d52ac4f05348b6b0ea89a255c44b835d545b076989a6c192d4ead5dc5be66f882e00e4392a9fb1af63fea39e8c86116a909a8ddd4f3ab104753090054f7fb42bc910f8b5a4ecb48a035fd720b81735333afbd2d97f7b7f404bce5abe5462229ef8bc4a2"], 0x0, 0x3f, 0x0, 0x9}, 0x28) write(r1, 0x0, 0x0) r3 = socket$inet6(0xa, 0x802, 0x0) getsockopt$inet6_opts(r3, 0x29, 0x36, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x0, 0x0, 0x2, 0x0) timer_settime(0x0, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, &(0x7f0000000380)) r4 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r4, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(r4, &(0x7f0000000180)={0x2, 0x4e21, @empty}, 0x10) sendto$inet(r4, &(0x7f0000000000), 0xfffffffffffffd74, 0x40004, 0x0, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r4, 0x6, 0xd, &(0x7f00000001c0)='htcp\x00', 0x51) recvfrom$inet(r4, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0xc9100120, 0x0, 0xfffffffffffffd25) 3m16.360271588s ago: executing program 57 (id=2787): r0 = syz_open_dev$ndb(&(0x7f0000000040), 0x0, 0x40001) ioctl$BLKTRACESETUP(r0, 0xc0401273, &(0x7f0000000000)={'\x00', 0x2, 0x6f11, 0x8, 0xfffffffffffffeff, 0x11c3adec}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000010001, 0x4, 0xffffffff}, 0x0) fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x50, 0x0, &(0x7f0000000040)=0x54) write$USERIO_CMD_SEND_INTERRUPT(0xffffffffffffffff, &(0x7f0000000140)={0x2, 0x1}, 0x2) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x800000019) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mremap(&(0x7f000054e000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f000022c000/0x3000)=nil) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60) ioctl$KVM_GET_IRQCHIP(r4, 0xc208ae62, &(0x7f0000000600)={0x0, 0x0, @pic={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}}) process_mrelease(0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x10252000) bpf$PROG_LOAD(0x5, 0x0, 0x0) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) write$binfmt_misc(r5, &(0x7f0000000000), 0xfffffecc) 2m3.444253803s ago: executing program 6 (id=2937): r0 = socket$netlink(0x10, 0x3, 0x8000000004) setreuid(0x0, 0xee01) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000080)="580000001400192340834b80040d8c560a067f0200ff000000000000000058000b4824ca945f64009400ff0325010ebc000000000000008000f0fffeffe809005300fff5dd00000010000100080c100000000000", 0x54}, {&(0x7f0000000340)="86d0f724", 0x4}], 0x2) 2m1.980343469s ago: executing program 6 (id=2940): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x89}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socket$inet6(0xa, 0x1, 0x0) bpf$MAP_CREATE(0x1900000000000000, 0x0, 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x3000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) socket(0x15, 0x5, 0x0) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x6) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r4 = syz_open_dev$dri(&(0x7f00000003c0), 0x1, 0x80000) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r4, 0xc04064a0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000440)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_SETPROPERTY(r4, 0xc01064ab, &(0x7f0000000e00)={0x4ff1, 0x0, r5}) 1m57.502722087s ago: executing program 6 (id=2946): r0 = creat(&(0x7f0000000000)='./file0\x00', 0xd931d3864d39dcdb) close(r0) r1 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x1a1) fcntl$setlease(r1, 0x400, 0x1) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x0, 0x8f, &(0x7f0000000440)=ANY=[@ANYBLOB="180200000000000000000000000002001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000340)='leases_conflict\x00', r2}, 0x18) r3 = memfd_create(&(0x7f0000000180)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf3:\x99\x1e\xac`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\xd2q#\xc6\xca\x97\x9d\xcb\x1e\x80\xd6\xd5%N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xecz\xabq\x95t*T9\xa9\b X \x04\"\x17\xbf\xcb\xccF\xda\xcf\xdd^\xa0\x15\xc0\xcb^h>\x1b\xb5d\xc7\x7f0\x9a&\xb0\x12#\x9c`\xa6\xed\x05\x95g\a\xccYb\xaf\xe9\xb6G?\x9f\xf5\xfe\xc1\xc0JJ\xc8\xd9d\x80\x13\x8fX\xb4\x19\xc4\\\xcb\x89-)\x90\x01\v\xac^\xdbBQ|\xaej;\x92\\\xf8u\x19Y\xee\x99EI\xf1t\xadn<\x9b\xc9\x87\xd0\xa7\x1a\x81\xb9\xc87sq\xd7\x15\xd6\x91O\x9c\x99!9>\xff\xa8\xfa\xe6=d\xcf\xca\xa9\xc61!\xc6P\x13\xd0\x88gZ\xbe\xdfl\xfa\xff\xb0m;d07tx\xbb\xabd\xe5\x16\xc4\xae\xf0', 0x0) write$binfmt_script(r3, &(0x7f0000000340)={'#! ', './file0'}, 0xb) execveat(r3, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) 1m56.038171791s ago: executing program 6 (id=2950): accept4(0xffffffffffffffff, &(0x7f0000000180)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @ipv4={""/10, ""/2, @multicast2}}}}, &(0x7f0000000200)=0x80, 0x100800) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(0xffffffffffffffff, 0x84, 0x6d, 0x0, &(0x7f0000000200)) 1m55.165016377s ago: executing program 6 (id=2954): r0 = syz_open_dev$media(0x0, 0x10, 0x0) r1 = signalfd(r0, &(0x7f0000000980), 0x8) unlinkat(r1, &(0x7f00000013c0)='./file0\x00', 0x0) r2 = socket$inet6(0xa, 0x3, 0x6) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000580)={0x0, 0x0, 0x0}, &(0x7f0000000a00)=0xc) syz_mount_image$hfsplus(&(0x7f00000000c0), &(0x7f0000000980)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB='nobarrier,gid=', @ANYRESHEX=r4, @ANYBLOB="2c63726561746f723dbd3d66f12c63726561746f723d64eb8ba92c6e6f6465636f6d706f73652c756d61736b3d3030303030303030303030303030303030303030303032000000003d", @ANYRESHEX=r3, @ANYRESOCT], 0x3, 0x6a4, &(0x7f0000001b40)="$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") r5 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) mkdirat(r5, &(0x7f0000000200)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) renameat2(r5, &(0x7f0000000340)='./file0\x00', r5, &(0x7f0000000140)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) sendmsg$AUDIT_ADD_RULE(0xffffffffffffffff, &(0x7f0000000900)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000002c0)={&(0x7f0000000f80)={0x428, 0x3f3, 0x200, 0x70bd26, 0x25dfdbff, {0x1, 0x1, 0xa, [0x4, 0x3, 0x6, 0x800, 0xe356, 0x7, 0x0, 0x2, 0x74e8, 0x0, 0x1ff, 0x4, 0x0, 0x60012aa4, 0x1, 0xc, 0x10, 0x400, 0xe0d, 0x101, 0xf576, 0x2, 0x1ff, 0x4, 0x5, 0xffffffff, 0x5, 0x4, 0x1, 0x6, 0x101, 0xffffffff, 0x6, 0xa, 0x6, 0x7, 0x100, 0x697, 0xa, 0x9, 0x800, 0x9, 0xf4, 0x2, 0x5, 0x58, 0x80000000, 0x0, 0x9, 0x32, 0x5, 0x90, 0xfffffff8, 0x3, 0x4, 0x9, 0x7, 0x7f, 0xd, 0x5, 0x7fff, 0x401, 0x81, 0x6], [0x4, 0xffff0e2f, 0x0, 0x1, 0x3, 0x7, 0x100, 0x5, 0x5, 0x7, 0x85a1, 0x1, 0xf, 0x81, 0x0, 0x6, 0x5, 0xcc2, 0x1ff, 0x0, 0x0, 0x0, 0x7, 0x997, 0x100, 0x2, 0x6, 0x4, 0xff, 0x9, 0x80000000, 0x6, 0x7, 0xc, 0xe, 0x4, 0x7, 0xd5f5, 0x9, 0x9, 0x6, 0x4, 0x3, 0x0, 0x6, 0x6, 0x3, 0xff, 0x4, 0x1, 0x4, 0x7, 0x9, 0x7, 0x8001, 0x10001, 0x10001, 0xe4, 0x2, 0x1, 0x2, 0x7, 0x9, 0x8], [0x10001, 0x1, 0x6, 0xfffffffc, 0x4, 0x4, 0x7, 0x8, 0x400, 0x100, 0x6, 0xffffffff, 0xfffffffe, 0x2, 0x7, 0x4, 0x9b, 0xff, 0x3, 0x400, 0x0, 0x4, 0x9, 0x3, 0x7fffffff, 0x0, 0x4, 0x3, 0x3, 0x50, 0x2, 0x5, 0x3, 0x4, 0x8, 0x0, 0x8e, 0x7, 0x908cc36e, 0xa, 0xd, 0x8, 0x9, 0x5, 0x3c9, 0x4, 0x3, 0x80000000, 0x393ed8a9, 0x3, 0x96, 0x7, 0x4, 0x8, 0x5, 0x10001, 0xfdbb, 0x2, 0x8, 0x4, 0xffffffff, 0x7, 0xffffff31], [0x8f2, 0x4, 0x3, 0x4, 0xe47d, 0x10001, 0x10000, 0x1, 0x7, 0x3, 0x0, 0x8, 0x0, 0x6, 0xc, 0x6, 0xa85, 0x10, 0x1, 0x9, 0x7, 0x10, 0xffffffff, 0x9, 0x1, 0x2, 0xa2b3, 0x4, 0x6, 0x822, 0xe, 0x2, 0x0, 0xcd, 0xc9, 0x4, 0x8, 0x7fffffff, 0x3, 0x3, 0x9, 0xb, 0x8, 0x1, 0x8, 0xa, 0x5b99f4dc, 0x4, 0x401, 0x9, 0x4, 0x401, 0x4, 0x36, 0x5, 0x9, 0xfffffff9, 0x22e81042, 0x9, 0x4, 0x5, 0x0, 0x0, 0x371b], 0x6, ['syz1\x00', '\x00']}, ["", "", ""]}, 0x428}, 0x1, 0x0, 0x0, 0x1}, 0x4000000) 1m54.064529737s ago: executing program 6 (id=2958): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x1, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@base={0x1, 0x42, 0x6, 0x8, 0x0, 0x1}, 0x48) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0c00000004000000040000000180000000000000", @ANYRES32=r2, @ANYBLOB="00000000000000deffffff000000000000000000", @ANYRES32=0x0, @ANYBLOB='\x00'/21], 0x50) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x8000, r3}, 0x38) 1m53.994739641s ago: executing program 9 (id=2959): r0 = creat(&(0x7f0000000000)='./file0\x00', 0xd931d3864d39dcdb) close(r0) r1 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x1a1) fcntl$setlease(r1, 0x400, 0x1) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x0, 0x8f, &(0x7f0000000440)=ANY=[@ANYBLOB="180200000000000000000000000002001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000085000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000340)='leases_conflict\x00', r2}, 0x18) r3 = memfd_create(&(0x7f0000000180)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf3:\x99\x1e\xac`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\xd2q#\xc6\xca\x97\x9d\xcb\x1e\x80\xd6\xd5%N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xecz\xabq\x95t*T9\xa9\b X \x04\"\x17\xbf\xcb\xccF\xda\xcf\xdd^\xa0\x15\xc0\xcb^h>\x1b\xb5d\xc7\x7f0\x9a&\xb0\x12#\x9c`\xa6\xed\x05\x95g\a\xccYb\xaf\xe9\xb6G?\x9f\xf5\xfe\xc1\xc0JJ\xc8\xd9d\x80\x13\x8fX\xb4\x19\xc4\\\xcb\x89-)\x90\x01\v\xac^\xdbBQ|\xaej;\x92\\\xf8u\x19Y\xee\x99EI\xf1t\xadn<\x9b\xc9\x87\xd0\xa7\x1a\x81\xb9\xc87sq\xd7\x15\xd6\x91O\x9c\x99!9>\xff\xa8\xfa\xe6=d\xcf\xca\xa9\xc61!\xc6P\x13\xd0\x88gZ\xbe\xdfl\xfa\xff\xb0m;d07tx\xbb\xabd\xe5\x16\xc4\xae\xf0', 0x0) write$binfmt_script(r3, &(0x7f0000000340)={'#! ', './file0'}, 0xb) execveat(r3, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) 1m52.463701806s ago: executing program 9 (id=2963): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r0, 0x84, 0x6d, 0x0, &(0x7f0000000200)) 1m51.630116782s ago: executing program 9 (id=2966): ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, &(0x7f00000083c0)={{0x3}}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x800}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x80, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r3, @ANYBLOB=',rootmode=000000000100000,', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r3, &(0x7f0000006300)={0x2020, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r3, &(0x7f0000000040)={0x50, 0x0, r4, {0x7, 0x1f, 0x0, 0x10408, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}}, 0x50) syz_fuse_handle_req(r3, &(0x7f00000021c0)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000081000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000090000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003dc150f4000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f50000000000000000000000000000000000000000000000000000000000000000000000000000000000c6d90000000000001354c4b6000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f8000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001a00", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0186405, &(0x7f0000000300)={0xfffffff8, 0x0, {r0}, {r5}, 0x400, 0x5c}) mkdir(&(0x7f0000000040)='./file0\x00', 0x80) mkdir(&(0x7f0000000040)='./file1\x00', 0x0) mkdir(&(0x7f0000000000)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x80, &(0x7f0000000380)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) chdir(&(0x7f0000000440)='./bus\x00') r6 = open(&(0x7f0000000580)='./file1\x00', 0x80242, 0x1df2a23c5997fa5f) sendfile(r6, r6, &(0x7f0000000080), 0x7f03) 1m48.705853392s ago: executing program 9 (id=2968): r0 = syz_open_dev$media(0x0, 0x10, 0x0) signalfd(r0, &(0x7f0000000980), 0x8) r1 = socket$inet6(0xa, 0x3, 0x6) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000580)={0x0, 0x0, 0x0}, &(0x7f0000000a00)=0xc) syz_mount_image$hfsplus(&(0x7f00000000c0), &(0x7f0000000980)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB='nobarrier,gid=', @ANYRESHEX=r3, @ANYBLOB="2c63726561746f723dbd3d66f12c63726561746f723d64eb8ba92c6e6f6465636f6d706f73652c756d61736b3d3030303030303030303030303030303030303030303032000000003d", @ANYRESHEX=r2, @ANYRESOCT], 0x3, 0x6a4, &(0x7f0000001b40)="$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") r4 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) mkdirat(r4, &(0x7f0000000200)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) renameat2(r4, &(0x7f0000000340)='./file0\x00', r4, &(0x7f0000000140)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) sendmsg$AUDIT_ADD_RULE(0xffffffffffffffff, &(0x7f0000000900)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000002c0)={&(0x7f0000000f80)={0x428, 0x3f3, 0x200, 0x70bd26, 0x25dfdbff, {0x1, 0x1, 0xa, [0x4, 0x3, 0x6, 0x800, 0xe356, 0x7, 0x0, 0x2, 0x74e8, 0x0, 0x1ff, 0x4, 0x0, 0x60012aa4, 0x1, 0xc, 0x10, 0x400, 0xe0d, 0x101, 0xf576, 0x2, 0x1ff, 0x4, 0x5, 0xffffffff, 0x5, 0x4, 0x1, 0x6, 0x101, 0xffffffff, 0x6, 0xa, 0x6, 0x7, 0x100, 0x697, 0xa, 0x9, 0x800, 0x9, 0xf4, 0x2, 0x5, 0x58, 0x80000000, 0x0, 0x9, 0x32, 0x5, 0x90, 0xfffffff8, 0x3, 0x4, 0x9, 0x7, 0x7f, 0xd, 0x5, 0x7fff, 0x401, 0x81, 0x6], [0x4, 0xffff0e2f, 0x0, 0x1, 0x3, 0x7, 0x100, 0x5, 0x5, 0x7, 0x85a1, 0x1, 0xf, 0x81, 0x0, 0x6, 0x5, 0xcc2, 0x1ff, 0x0, 0x0, 0x0, 0x7, 0x997, 0x100, 0x2, 0x6, 0x4, 0xff, 0x9, 0x80000000, 0x6, 0x7, 0xc, 0xe, 0x4, 0x7, 0xd5f5, 0x9, 0x9, 0x6, 0x4, 0x3, 0x0, 0x6, 0x6, 0x3, 0xff, 0x4, 0x1, 0x4, 0x7, 0x9, 0x7, 0x8001, 0x10001, 0x10001, 0xe4, 0x2, 0x1, 0x2, 0x7, 0x9, 0x8], [0x10001, 0x1, 0x6, 0xfffffffc, 0x4, 0x4, 0x7, 0x8, 0x400, 0x100, 0x6, 0xffffffff, 0xfffffffe, 0x2, 0x7, 0x4, 0x9b, 0xff, 0x3, 0x400, 0x0, 0x4, 0x9, 0x3, 0x7fffffff, 0x0, 0x4, 0x3, 0x3, 0x50, 0x2, 0x5, 0x3, 0x4, 0x8, 0x0, 0x8e, 0x7, 0x908cc36e, 0xa, 0xd, 0x8, 0x9, 0x5, 0x3c9, 0x4, 0x3, 0x80000000, 0x393ed8a9, 0x3, 0x96, 0x7, 0x4, 0x8, 0x5, 0x10001, 0xfdbb, 0x2, 0x8, 0x4, 0xffffffff, 0x7, 0xffffff31], [0x8f2, 0x4, 0x3, 0x4, 0xe47d, 0x10001, 0x10000, 0x1, 0x7, 0x3, 0x0, 0x8, 0x0, 0x6, 0xc, 0x6, 0xa85, 0x10, 0x1, 0x9, 0x7, 0x10, 0xffffffff, 0x9, 0x1, 0x2, 0xa2b3, 0x4, 0x6, 0x822, 0xe, 0x2, 0x0, 0xcd, 0xc9, 0x4, 0x8, 0x7fffffff, 0x3, 0x3, 0x9, 0xb, 0x8, 0x1, 0x8, 0xa, 0x5b99f4dc, 0x4, 0x401, 0x9, 0x4, 0x401, 0x4, 0x36, 0x5, 0x9, 0xfffffff9, 0x22e81042, 0x9, 0x4, 0x5, 0x0, 0x0, 0x371b], 0x6, ['syz1\x00', '\x00']}, ["", "", ""]}, 0x428}, 0x1, 0x0, 0x0, 0x1}, 0x4000000) 1m47.141002026s ago: executing program 9 (id=2971): openat$rfkill(0xffffff9c, &(0x7f0000000040), 0x182, 0x0) r0 = syz_open_dev$vcsa(0x0, 0x1, 0x40002) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xe}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000002c0)='contention_begin\x00', r1, 0x0, 0xd}, 0x18) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r3 = syz_open_dev$vbi(&(0x7f0000000000), 0x1, 0x2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000140)='syzkaller\x00'}, 0x94) ioctl$VIDIOC_G_EXT_CTRLS(r3, 0xc0205647, &(0x7f0000000100)={0xf000000, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000080)={0x98f90b, 0xffffc002, '\x00', @p_u8=0x0}}) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000000)={{0x3, 0x2, 0x80000000, 0x1, 0x7}}) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) r5 = dup(r4) write$UHID_INPUT(r5, &(0x7f0000001040)={0xf, {"a2e3ad21ed0d09f91b3d090987f70e06d038e7ff7fc6e5539b0d440e8b089b3f380068090890e0878f0e1ac6e7049b334d959b669a240d5b67f3988f7ef319520120ffe8d178708c523c921b1b5b5b070d074a0936cd3b78130daa61d8e8040000005802b77f07227227b7ba67e0e78657a6f5c2a874e62a9ccdc0d31a0c9f318c0da1993bd160e233df4a62179c6f30e065cd5b91cd0ae193973735b36d5b1b63dd1c00305d3f46635eb016d5b1dda98e2d749be7bd1df1fb3b231fdcdb5075a9aaa1b469c3090000000000000075271b286329d169934288fd789aa37d6e98b224fd44b65b31334ffc55cc82cd3ac32ecdb08ced6f9081b4dd0d8b38f3cd4498bee800490841bdb114f6b76383709d8f5c55432a909fda039aec54a1236e80f6a8abadea7662496bddbb42be6bfb2f17959d1f416e56c71b1931870262f5e801119242ca026bfc821e7e7daf2451138e645bb80c617669314e2fbe70de98ec76a9e40dad47f36fd9f7d0d42a4b5f1185ccdcf16ff46295d8a0fa17713c5802630933a9a34af674f3f39fe23491237c08822dec110911e893d0a8c4f677747abc360934b82910ff85bfd995083bba2987a67399eac427d145d546a40b9f6ff14ac488ec130fb3850a27af9544ae15a7e454dea05918b41243513f000000000000000a3621c56cea8d20fa911a0c41db6ebe8cac64f17679141d54b34bbc9963ac4f4bb3309603f1d4ab966203861b5b15a841f2b575a8bd0d78248ebe4d9a80002695104f674c2431dca141fae269cab70e9a66f3c3a9a63e9639e1f59c0ede26c6b5d74b078a5e15c31634e5ae098ce9ee70771aaa18119a867e1088334975e9f73483b6a62fa678ca14ffd9f9db2a7869d85864056526f889af43a6056080572286522449df466c632b3570243f989cce7cd9f465e41e610c20d80421d653a5520000008213b704c7fb082ff27590678ef9f190bae97909507041d860420c5664b27921b14dc1db8892fd32d0ad7bc946813591ad8deff4b05f60cea0da7710ac0000000000008000bea37ce0d0d4aa202f928f28381aab144a5d429a04a6a2b83c7068ae949ed06e288e810bac9c76600025e19c907f8ea2e2010000008271a1f5f8528f227e79c1389dbdfffe492f21579d2c15b8c70cdb1c332d86d87341432750861ec2bc3451edca194b221cfec4603d276bbaa1dfa6d4fb8a48a76eafc9a9a0270e4c10d64cd5a62427264f2377fe763c43470833ac96c45f357cbbaba8f1b1fdcc7cbb61a7cdb9744ed7f9129aede2be21ccfdc4e9134f8684b3a4f354da9a795e96334e207dff70f1988037b2ed3aaf575c0b88d8f146684078416d59fdee5325928974d12dad99dac44c3f0008047096a44002bebc2420aed92fa9b6578b4779415d4ac01b75d5495c118045651cf41c2fc48b778efa5ea5677747430af4162b987b80c3e001cd34e5c92f76cc4c24eeb8bc4e9ac2aed9e53803ed0ca4ae3a9737d214060005ea6f1783e287b3bee96e3a726eafe2fdfaa78d1f48c13b64df07847754b8400daaa69bf5c8f4350aeae9ca1207e78283cd0b20ceb360c7e658828163e2d25c4aa348561f927e88f63aa70e73a5e69b3df3495903f06572e1e007fa55a2999f596d067312f5779e8dbfdcf3427138f3d444d2639a10477f9bec4b0bbb6e3c04be68981f392203dd0ee3ef478e16dacfc5e3e03cf7ab8e3902f1b0ff034ef655b253ca509383815b1b6fc6522d4e4fdc11a48cf42d48604675fde2b94cf00500a2690891abf8ab9c015073014d9e08d4338b8780bdecd436cf0541359bafffa45237f104b96210403b2de9efed496f42355bc7872c827467cfa5c4e72730d56bd068ed211cf847535edecb7b373f78b095b68441a34cb51682a8ae4d24ad0465f3927f889b813076038e79a7962fb385a882e8020f06c4c2ba1dd5cac7c18876da865d258734dd73583df292892448039ef799cf0630becdcce04579b5561dc825ab829827945e020c1f67ee615feb6243378e0610060f02cca4e91b2f001edb3d78fb4b55668dda93aec92a5de203717aa49c2d284acfabe262fccfcbb2b75a2183c46eb65ca8104e1b4da7fbb77ab2fc043aead87c32ab875ee7c2e7b7019c982cd3b43eaeb1a5fb135c0c7dcee8fe6516a328032f88c042891824659e9e94265c803b35ee5f83a2b210520106b8a358b50ab7a1fa89af9c251fe5294b3d1802d5676d95f160ec97b1ad94872cb2044642c37b4a6cc6c04effc1672db7e4b68d787d9a7a508ae54b3cd7369dde50e8c77d95a3d361c040babb171607caac2a3559ad4f75465f49c0d0ae3716db6e00cb11db4a5fade2a57c10238e204a67737c3b42aae501b20f7694a00f16e2d0174035a2c22656dc29880acebdbe8ddbd75c2f998d8ac2dfad2ba3a504767b6b45a45957f24d758ed024b3849c11d412a2a03b4047497022d9c30e23ef4df5c89644f48bb536f7945b59d7bcddff754413d135273ea8e75f22f216c6b9990ae71806f2c00b4025c48b75c0f73cdb9a7b8fa367b50028067e7f16f4dd569d462f4f19eacdb3ed70eeebb4483f8fd777d443e8b40427db6fe29068c0ca3d2414442e8f3a154704b0e51bc664a137b26be719f4f7c9a5678a674dfc95df80b9ce375dd649c8c704e509bd88c8e63d8c7dd67071115c8982ba46af4d6adcc9f68a75b9397b035153faf46366e7205dd8d6f37525c1a0e94610dd94323f6c15d085197149bfd6655548cfd9c52c9711937f79abb1a124f1210465483cd3b2d78378cfb85ed82e7da0f6eb6d279f2ae455925d0f6f1ba571eba281f2a654fb39ddff3b484439ff158e7c5419e037f3e3ad038f2211f1033195563c7f93cd54b9094f226e783271e1e5a2a2c10712eab625d64931cd4ffe6738d97b9b5ef828ee9fb059fc01af0e79c1e14b1d25988c69a399567c1d93768f7971d31488b8658a20878b7c1dd7ba02fc42939dde3d4a3339a65d507dc59c51097b40517705da56e9ebf0afa53282bf86dbb58c548069ff6eb95aade7cc66d7bbef724779ca1f731b3346ff177050373d79ff7b3e7f9bc0c1b4b266a8878b90baaa039d3e3b63979ac3df6e6f4859afd50238c7547a39b60810938044ae185d2ba3e00a4e73676864ae090d81eaee5ee6cf1d0ab378dd4dd891e937c2ea5410e0513005000000000000003911fab964c271550027697b52160687461602f88df165d884b36ec2b6c25a2f33c715687e9d4afb96d6861aca47da73d6f3144345f48843dd014e5c5ad8fe995754bd9cf32fce1e31919c4b2082fb0a30b9deae84bed4b28045634073c9c58c89d9e99c81769177c6d594f88a4facfd4c735a20307c737afa2d60399473296b831dbd933d93994ba3064279b10ea0c5833f41f157ea2302993dbe433b1aa3a3766d5439020484f4113c4c859465c3b415c3432f81db8719539d5bf372aaaea1cc43a6c5cbe59758bfee2916580dac4b008e595f437491d87abed02cefcd9db53d94d02daee67918e5d6787463183b4b87c1050000002f7809959bc048850613d17ca51055f2f416a44fe180d2d50c312cca7cb14a2bdc331f57a9817139a206fc76957227ffff2de20a4b8e3737fbb42913777c06376f799eba367e21f94ca598705f5dcb767d6f0900d6b0f6095e53c4c4234d0c1fbe434f6ab8f43c0013ee93b83946ee7759e89d7bdd1a32d7b311711b757fe43c06d21a35810d8fe98b27faea8aa12bc8716eefc5c97c45ac33eeec964c5214bc3a9359bdea1cccab94f15e36319cb34ebcacedb82c2ed3de5a8a8f0011e8f74e82d7f96093530e76692839d7961939adfdeeeaff19d11efcafb6d546fef271e89d6cc2389e81ff58cefcce3fbf4625a7e7de40e42e07b34449e15e065cc7340002000000000000f288a4510de03dab19d26285eda89156d50dd385a60333ba5bbf5d77cd7007ad1519ad5470de3dd6d6080cafccf8a97406bb6b68a1f0c4549820a73c880f475f732ae00398e8bd1f4108b7807fb33b72685ec37a2d3f766413a60459516246e5a1d998a2017aef0948a68cf255315ab80dd349e891aef595dc4d470e8ac32a308e15fc37d06aeac289c0523f483e1ff7408c6087f1ab652f2ef91d4f2b01987b0f46da034e5c3f745a7ee8101a3934c54e24b48ec0275e2d0687dc746b0827cbf652f406c6b95f2722e58c05f752ce2126596e1cd7655b904801784c416b22f73d324678e2724f43f1fe687c7e8a60c28b82b6528341b648cdd56fed7cdcbb1575912d5ecd36dea3bca0b7427d8392c6289455e8f8d2ab2242729251ae033a9e02210e62df0546a74b333a1c48f95fd54acb5741259e8c5488efeee327415cc19451432c6f14c27693102a3cd84857cd6586fc5ca9a93eb0145fac0662ff86107f998a8ef7df8aa14046c55b03d3d47f88a8d60f7774a2ee08758897fb411a94b3c2fc5d5f0db42c0456ec015f08e5247d33ae2d35603ff8454c16f8342856935125102bb784ed7148b6ce431b63ee356b0c785f2f47b90e29389f22fc5b59a70efaea2bd40195af4486220d702e30bfc43c10ec23ea6283994a7dde4dcb61fea6b651fb1d62458d0741a12830052fcc460db043afe525629b40d7cee458e4cb5e930ed624806c43a006e39336d07c2b8081c128ad2706f48261f7897484c297a1a6613bc18f5a38d442768af38041efe03d152ef95ff569e76db2391f4509d7f339d92fdb4a89364949da398000000000000000d80a4fe654578376e599aff3565b1d531f30912b9945030b81ea9935fd46edb44a78f615255490a4b621501f2a9e4d24624c4dac9274118c67584f5d374755534d7f68f679c4ff516a9c861a0e7e65868fcb2bf1cb9aea4e05df72279fdb0d2b9e935c5af3cf474bed79dfc248c1f5aea4b8b32c5d295e57079d0fe662a46b7f71cd47744db86c50b704c971d90295c7b2c7439a2d78ccfa79b5fc2bff6bbf840262bf89394b3e0691953264d2700c838fa2c7b3425260f59554e502dcea39cb313b0000000000004ca7c12f45858d6284ca6270d6b2f0e58fded8a7b4a302a97bc641df07720ba2b26bbfcc807ca0abb1b44322269c21c5ec68cb068ea88067d905ea917bb03eefdaebdeabf2d0dce80997c915c8949de992587c2cb5fe36d7d3e5db21b094b8b77940b5f07722e47a08d367e5f84c96ec664b72934b99b3109af65d77e86abd6859cddf4bbae1f0930462df15fddbc48562ea3511a8065ef028cf12f14dcf6ebecd8d884836174faf1aa609e5f1ee1162dfa13bdc1fa7cfaadba85c72e9758f03a755d0be53f8d2a1dfb1c68cc164b0a0780d971a96ea2c4d4ca0398c2235980a9307b3d5bd3b01faffd0a5dbed2881a9700af561ac8c6b00000000000000f96f06817fb903729a7db6ff957697c9ede7885d94ffb0969be0daf60af93109eb1dee72e4363f51af62af6fb2a6df3bec89822a7a0b678058fa3fef86faec216eb6992162f8dcbf719c148cd2f9c55f4901203a9a8a2c3e90f3943dbc10360a1a49700d1dfbf66d69f6fbaf506c8bcce8bb0d872a02238926407a4eddd5d0fc5a752f9000", 0x1000}}, 0x1006) 1m44.260193134s ago: executing program 9 (id=2974): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_CCA_MODE(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x30, r1, 0x1, 0x70bd27, 0x25dfdbff, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_CCA_MODE={0x8, 0xc, 0x3}, @NL802154_ATTR_WPAN_PHY={0x8}]}, 0x30}, 0x1, 0x0, 0x0, 0x404c000}, 0x8884) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) openat$mixer(0xffffffffffffff9c, 0x0, 0x1c1140, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000032680)=""/102392, 0x18ff8) r3 = socket$inet_udp(0x2, 0x2, 0x0) socket$key(0xf, 0x3, 0x2) bind$inet(r3, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r3, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) setsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f00000002c0)={{{@in=@dev={0xac, 0x14, 0x14, 0x11}, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0x400000000}, 0x5, 0x0, 0x1, 0x0, 0x0, 0x2}, {{@in6=@ipv4={'\x00', '\xff\xff', @loopback}, 0x1, 0x6c}, 0x0, @in6=@loopback, 0x0, 0x0, 0x0, 0xb7}}, 0xe8) 1m38.571469964s ago: executing program 58 (id=2958): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x1, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@base={0x1, 0x42, 0x6, 0x8, 0x0, 0x1}, 0x48) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0c00000004000000040000000180000000000000", @ANYRES32=r2, @ANYBLOB="00000000000000deffffff000000000000000000", @ANYRES32=0x0, @ANYBLOB='\x00'/21], 0x50) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x8000, r3}, 0x38) 1m28.904397786s ago: executing program 59 (id=2974): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_CCA_MODE(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x30, r1, 0x1, 0x70bd27, 0x25dfdbff, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_CCA_MODE={0x8, 0xc, 0x3}, @NL802154_ATTR_WPAN_PHY={0x8}]}, 0x30}, 0x1, 0x0, 0x0, 0x404c000}, 0x8884) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) openat$mixer(0xffffffffffffff9c, 0x0, 0x1c1140, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000032680)=""/102392, 0x18ff8) r3 = socket$inet_udp(0x2, 0x2, 0x0) socket$key(0xf, 0x3, 0x2) bind$inet(r3, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r3, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) setsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f00000002c0)={{{@in=@dev={0xac, 0x14, 0x14, 0x11}, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0x400000000}, 0x5, 0x0, 0x1, 0x0, 0x0, 0x2}, {{@in6=@ipv4={'\x00', '\xff\xff', @loopback}, 0x1, 0x6c}, 0x0, @in6=@loopback, 0x0, 0x0, 0x0, 0xb7}}, 0xe8) 1m21.368435195s ago: executing program 1 (id=3016): r0 = socket$inet6(0xa, 0x2, 0x3a) sendmmsg$inet6(r0, &(0x7f0000000b80)=[{{&(0x7f00000000c0)={0xa, 0x4e20, 0x7ffe, @mcast2, 0x4}, 0x1c, &(0x7f00000002c0)=[{&(0x7f0000000080)="8000102e7577d401", 0x8}], 0x1, &(0x7f0000000100)=[@dstopts_2292={{0x18, 0x29, 0x43, {0x1d}}}], 0x18}}], 0x1, 0x4000084) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001000000800000", @ANYRES32=0x0, @ANYBLOB='\x00'/14, @ANYRES32=0x0, @ANYRES32=0x0], 0x48) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000), 0xc) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000008280), r3) sendmsg$DEVLINK_CMD_SB_POOL_GET(r3, &(0x7f00000084c0)={0x0, 0x0, &(0x7f0000008480)={&(0x7f00000082c0)={0x44, r4, 0x1, 0x70bd26, 0x25dfdbfd, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xfffffffffffffe51, 0xb, 0x8001}, {0x6, 0x11, 0x40}}]}, 0x44}, 0x1, 0x0, 0x0, 0x24000084}, 0x40080) 1m16.584658783s ago: executing program 1 (id=3019): accept4(0xffffffffffffffff, 0x0, &(0x7f0000000200), 0x100800) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r0, 0x84, 0x6d, 0x0, &(0x7f0000000200)) 1m15.584760944s ago: executing program 1 (id=3021): socket$netlink(0x10, 0x3, 0x0) eventfd2(0x0, 0x0) io_setup(0x81, &(0x7f0000000400)) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000005"], 0x50) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x11, &(0x7f0000000500)={[{@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x5}}, {@journal_dev={'journal_dev', 0x3d, 0x3}}, {@barrier}, {@norecovery}, {@noload}, {@data_writeback}]}, 0x0, 0x634, &(0x7f0000001940)="$eJzs3c1vVFUbAPDn3k6/3/edQt6ouJBGYyBRWlrAEGMC3bgiBD92riotBBkooTVaJLFNcGNi3LgwceVC/C+UxK0Lty7cuDIkxBgWYlDG3Jk7ZTrt9Hs6pf39kmnvndM557lNn54zZ86ZCWDPGsy+pBEHIuJaElGsKytEXjhY/bn7f9w8n92SKJff+j2Jmx8nc/V1Jfn3/vzB/xQj+SmN2N+xtN3p2RuXx0ulyev5+fDMlWvD07M3jly6Mn5x8uLk1dFXRk+eOH7i5MjRTV1fHtPf2Zczt977oPjp2Xe++ephMvLtL2eTOB2P8tiy62p8bPemWs5+Z4NRrnqwqCCNOLnJuneKP4u1v5OK7uwPIim0MyLWI42IUxHRGRFPRzE64nGyFuOTN9oaHNBS5SQqfdRgGdh7kmhadKkn/yexVE9LYwK2Q20cUHtuv9zz4KXSVg5JgG1yb6w6V1fN/c6IqOV/oTo3GD2VuYG++0n9PE9lXm1zM3NVWRs//nD2VnaLJvNwQGvMzddmuRv7/6SSmwNRfQ7Qdz9d9NrAWD4KSPPXCd5srHiNk+eDDefyH7bP3HxEPJP3/12xYv7X9/9pnru1/H93g+3LfwAAAAAAANg6d8Yi4uXl1v+lC+t/upZZ/9MfEae3oP3VX/9L7+YHyRY0B9S5Nxbx2rLrfxfW+A505Gf/rawH6EwuXCpNHo2I/0XE4ejszs5HGuqtXyF85LP9XzZrv379X3bL2q+tBcxrultoWEs0MT4zvtnrBiLuzUc8W1n/ezC/Z/H6n6z/T5bp/7P8vrbGNva/ePtcs7LV8x9olfLXEYeW7f8fD7eTld+fY7gyHhiujQqWeu6jz79r1r78h/bJ+v++lfO/O6l/v57p9dXfFRHHZgvlZuUbHf93JW931OrPfDg+M3N9JKIrObP0/tH1xQy7VS0favmS5f/hF1ae/1sY/9flYW9EzK2xzace9f/arEz/D+2T5f/Eyv1/cXH/v/6D0dsD3zdr/9ya+v/jlT79cH6P+T+ot/T9ONaaoG0JFwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACecGlE/CeSdGjhOE2HhiL6I+L/0ZeWpqZnXrow9f7Viays8vn/ae2TfovV86T2+f8DdeejDefHImJfRHzR0Vs5Hzo/VZpo98UDAAAAAAAAAAAAAAAAAADADtFf2fNf7m7c/5/5raPd0QEtV8i/y3fYewobfmS5e0sDAbbdxvMfeJLNryv/O1saC7D9muf/g4flioa7X3++5TEB28P4H/auDea/lwtgF9D/w161xjm9nlbHAbSD/h8AAAAAAHaVfQfv/JxExNyrvZVbpisv621rZECrpe0OAGgba3hh7ypMtTsCoF1s6AeShaO/Gjf7VzRf/Z+0JiAAAAAAAAAAAAAAYIlDB5rv/7c3AHa3lff/W9sPu9kK+/+XS35vFwC7SPOP/tD3w27nOT6wWm9v/z8AAAAAAAAAAAAA7AA9Ny6Pl0qT16dnn7yDUzsjjPUdzI1vrp5y9064isUHj1pTc2dE7IwL3IKDLNlKpclyOWL1H669BUcbY27vvyUAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOCxfwMAAP//zHwgMg==") r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={0x0, r0}, 0x18) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)={{0x14}, [@NFT_MSG_NEWSET={0x3c, 0x12, 0xa, 0x9, 0x0, 0x0, {0x2}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_KEY_TYPE={0x8}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x5}]}], {0x52}}, 0x64}, 0x1, 0x0, 0x0, 0x890}, 0x0) 1m13.308276831s ago: executing program 1 (id=3024): write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000100)={'syz0\x00', {0x0, 0x2}, 0x2b, [0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x6, 0x0, 0x0, 0x800, 0x0, 0x10000000, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4000000, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0xffffe, 0x0, 0x0, 0x0, 0x3, 0x0, 0x401, 0x0, 0x0, 0x4, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x2, 0xfffffffd, 0x0, 0x0, 0xffffffff], [0x2, 0x2, 0x0, 0x0, 0x10000000, 0x800000, 0x0, 0x44a, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x4, 0x0, 0x1409, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x180d, 0x0, 0x1, 0x0, 0x0, 0xf, 0x0, 0x0, 0x58000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6], [0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x2, 0x0, 0x9, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000, 0x0, 0x4, 0x0, 0x3, 0x0, 0x3, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x4, 0x0, 0x0, 0x0, 0x9], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0xfffffff6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2, 0x0, 0x4, 0x0, 0x0, 0x0, 0xfffffe04, 0x0, 0xb0d, 0x0, 0x0, 0xfffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80001, 0x0, 0x3, 0x7f, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x3, 0xef86]}, 0x45c) mknodat(0xffffffffffffff9c, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff017f000e0800395032303030"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18, 0x0, 0x0, {0x1}}, 0x18) write$FUSE_DIRENTPLUS(r2, &(0x7f00000003c0)=ANY=[@ANYBLOB="b0"], 0xb0) write$FUSE_GETXATTR(r2, &(0x7f00000000c0)={0x18}, 0x18) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r3, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r3, &(0x7f0000006380)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r2, &(0x7f0000000600)={0x50, 0x0, r4, {0x7, 0x2b, 0x3, 0x4200000, 0xf800, 0xfff9, 0xe, 0x800, 0x0, 0x0, 0x8, 0x9}}, 0x50) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@cache_fscache}]}}) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0xff0f) 1m12.200987243s ago: executing program 1 (id=3028): r0 = syz_open_dev$media(0x0, 0x10, 0x0) signalfd(r0, &(0x7f0000000980), 0x8) r1 = socket$inet6(0xa, 0x3, 0x6) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000580)={0x0, 0x0, 0x0}, &(0x7f0000000a00)=0xc) syz_mount_image$hfsplus(&(0x7f00000000c0), &(0x7f0000000980)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB='nobarrier,gid=', @ANYRESHEX=r3, @ANYBLOB="2c63726561746f723dbd3d66f12c63726561746f723d64eb8ba92c6e6f6465636f6d706f73652c756d61736b3d3030303030303030303030303030303030303030303032000000003d", @ANYRESHEX=r2, @ANYRESOCT], 0x3, 0x6a4, &(0x7f0000001b40)="$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") syz_mount_image$udf(&(0x7f0000000080), &(0x7f0000000500)='./file0\x00', 0x1818418, &(0x7f0000000200)=ANY=[], 0xdf, 0x4b1, &(0x7f0000000ac0)="$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") r4 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) mkdirat(r4, &(0x7f0000000200)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0) renameat2(r4, &(0x7f0000000340)='./file0\x00', r4, &(0x7f0000000140)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) 1m10.447547559s ago: executing program 1 (id=3031): openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) open(0x0, 0x64842, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0, 0x0, 0x1}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0xffffffe8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) symlink(&(0x7f0000000540)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000640)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000140)={r1, 0x0, 0x0}, 0x10) 1m8.130758925s ago: executing program 4 (id=3035): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000000000105509147200ed0000000109022400010000000009040000030300000009"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000000800)=ANY=[@ANYBLOB="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"/757], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000100), 0x10}, 0x14) r1 = syz_open_dev$sndmidi(&(0x7f0000000100), 0x2, 0x141121) fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x2) r2 = dup(r1) write$6lowpan_enable(r2, &(0x7f0000000180)='0', 0xfffffd5e) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) r3 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_GET(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x18, 0x1409, 0x1, 0x70bd26, 0x25dfdbff, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x18}}, 0x200040c0) mount(&(0x7f0000000140)=@nullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000000)='befs\x00', 0x200000, 0x0) 1m3.995343781s ago: executing program 4 (id=3039): syz_open_dev$media(0x0, 0x10, 0x0) r0 = socket$inet6(0xa, 0x3, 0x6) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000580)={0x0, 0x0, 0x0}, &(0x7f0000000a00)=0xc) syz_mount_image$hfsplus(&(0x7f00000000c0), &(0x7f0000000980)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB='nobarrier,gid=', @ANYRESHEX=r2, @ANYBLOB="2c63726561746f723dbd3d66f12c63726561746f723d64eb8ba92c6e6f6465636f6d706f73652c756d61736b3d3030303030303030303030303030303030303030303032000000003d", @ANYRESHEX=r1, @ANYRESOCT], 0x3, 0x6a4, &(0x7f0000001b40)="$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") syz_mount_image$udf(&(0x7f0000000080), &(0x7f0000000500)='./file0\x00', 0x1818418, &(0x7f0000000200)=ANY=[], 0xdf, 0x4b1, &(0x7f0000000ac0)="$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") r3 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) mkdirat(r3, &(0x7f0000000200)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0) renameat2(r3, &(0x7f0000000340)='./file0\x00', r3, &(0x7f0000000140)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) 1m2.555742272s ago: executing program 4 (id=3041): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="06000000040000000400000001"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x8, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000850000007d00000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="18010000000000000000000000000000850000000700000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffff"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0xd, &(0x7f0000000040)=ANY=[], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='tlb_flush\x00', r1}, 0x10) 1m1.367141785s ago: executing program 4 (id=3043): r0 = creat(&(0x7f0000000000)='./file0\x00', 0xd931d3864d39dcdb) close(r0) r1 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x1a1) fcntl$setlease(r1, 0x400, 0x1) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x0, 0x8f, &(0x7f0000000440)=ANY=[@ANYBLOB="180200000000000000000000000002001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000060000008500000007000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000340)='leases_conflict\x00', r2}, 0x18) r3 = memfd_create(&(0x7f0000000180)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf3:\x99\x1e\xac`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\xd2q#\xc6\xca\x97\x9d\xcb\x1e\x80\xd6\xd5%N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xecz\xabq\x95t*T9\xa9\b X \x04\"\x17\xbf\xcb\xccF\xda\xcf\xdd^\xa0\x15\xc0\xcb^h>\x1b\xb5d\xc7\x7f0\x9a&\xb0\x12#\x9c`\xa6\xed\x05\x95g\a\xccYb\xaf\xe9\xb6G?\x9f\xf5\xfe\xc1\xc0JJ\xc8\xd9d\x80\x13\x8fX\xb4\x19\xc4\\\xcb\x89-)\x90\x01\v\xac^\xdbBQ|\xaej;\x92\\\xf8u\x19Y\xee\x99EI\xf1t\xadn<\x9b\xc9\x87\xd0\xa7\x1a\x81\xb9\xc87sq\xd7\x15\xd6\x91O\x9c\x99!9>\xff\xa8\xfa\xe6=d\xcf\xca\xa9\xc61!\xc6P\x13\xd0\x88gZ\xbe\xdfl\xfa\xff\xb0m;d07tx\xbb\xabd\xe5\x16\xc4\xae\xf0', 0x0) write$binfmt_script(r3, &(0x7f0000000340)={'#! ', './file0'}, 0xb) execveat(r3, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) 1m0.002530834s ago: executing program 4 (id=3045): write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000100)={'syz0\x00', {0x0, 0x2}, 0x2b, [0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x6, 0x0, 0x0, 0x800, 0x0, 0x10000000, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4000000, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0xffffe, 0x0, 0x0, 0x0, 0x3, 0x0, 0x401, 0x0, 0x0, 0x4, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x2, 0xfffffffd, 0x0, 0x0, 0xffffffff], [0x2, 0x2, 0x0, 0x0, 0x10000000, 0x800000, 0x0, 0x44a, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x4, 0x0, 0x1409, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x180d, 0x0, 0x1, 0x0, 0x0, 0xf, 0x0, 0x0, 0x58000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6], [0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x2, 0x0, 0x9, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000, 0x0, 0x4, 0x0, 0x3, 0x0, 0x3, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x4, 0x0, 0x0, 0x0, 0x9], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0xfffffff6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2, 0x0, 0x4, 0x0, 0x0, 0x0, 0xfffffe04, 0x0, 0xb0d, 0x0, 0x0, 0xfffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80001, 0x0, 0x3, 0x7f, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x3, 0xef86]}, 0x45c) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) pipe2$9p(0x0, 0x0) write$P9_RVERSION(0xffffffffffffffff, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff017f000e0800395032303030"], 0x15) r0 = dup(0xffffffffffffffff) write$FUSE_BMAP(r0, &(0x7f0000000100)={0x18, 0x0, 0x0, {0x1}}, 0x18) write$FUSE_DIRENTPLUS(r0, &(0x7f00000003c0)=ANY=[@ANYBLOB="b0"], 0xb0) write$FUSE_GETXATTR(r0, &(0x7f00000000c0)={0x18}, 0x18) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r1, &(0x7f0000006380)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000600)={0x50, 0x0, r2, {0x7, 0x2b, 0x3, 0x4200000, 0xf800, 0xfff9, 0xe, 0x800, 0x0, 0x0, 0x8, 0x9}}, 0x50) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={'trans=fd,', {}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@cache_fscache}]}}) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0xff0f) 58.48403765s ago: executing program 4 (id=3048): socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000004000000b703000000000000850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r3 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x8, &(0x7f0000000940)=ANY=[@ANYBLOB="1809000000000000000000000000000018120000", @ANYRES32=r3, @ANYBLOB="0000000000000000b703000000000000850000000c000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 54.659719581s ago: executing program 60 (id=3031): openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) open(0x0, 0x64842, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0, 0x0, 0x1}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0xffffffe8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) symlink(&(0x7f0000000540)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000640)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000140)={r1, 0x0, 0x0}, 0x10) 44.857334114s ago: executing program 7 (id=2984): r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket$kcm(0xa, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={0x0}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r2 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r2, 0x84, 0x7b, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000180)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r3, 0x8, &(0x7f0000000240)=0x2) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mbind(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x3, &(0x7f0000000340)=0xffffffffffff0001, 0xd, 0x2) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000040)={0xffffffffffffffff}, 0x2, 0x6}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r1, &(0x7f00000002c0)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f0000000280), r4, 0x0, 0x1, 0x4}}, 0x20) openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x5, 0x6576, 0x9}) syz_clone3(&(0x7f0000002340)={0x828080, 0x0, 0x0, 0x0, {0x30}, 0x0, 0x0, 0x0, 0x0}, 0x58) 42.648700347s ago: executing program 61 (id=3048): socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000004000000b703000000000000850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r3 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x8, &(0x7f0000000940)=ANY=[@ANYBLOB="1809000000000000000000000000000018120000", @ANYRES32=r3, @ANYBLOB="0000000000000000b703000000000000850000000c000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 39.60358628s ago: executing program 7 (id=3066): r0 = socket$inet6(0xa, 0x3, 0x6) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000580)={0x0, 0x0, 0x0}, &(0x7f0000000a00)=0xc) syz_mount_image$hfsplus(&(0x7f00000000c0), &(0x7f0000000980)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB='nobarrier,gid=', @ANYRESHEX=r2, @ANYBLOB="2c63726561746f723dbd3d66f12c63726561746f723d64eb8ba92c6e6f6465636f6d706f73652c756d61736b3d3030303030303030303030303030303030303030303032000000003d", @ANYRESHEX=r1, @ANYRESOCT], 0x3, 0x6a4, &(0x7f0000001b40)="$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") syz_mount_image$udf(&(0x7f0000000080), &(0x7f0000000500)='./file0\x00', 0x1818418, &(0x7f0000000200)=ANY=[], 0xdf, 0x4b1, &(0x7f0000000ac0)="$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") r3 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) mkdirat(r3, &(0x7f0000000200)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0) renameat2(r3, &(0x7f0000000340)='./file0\x00', r3, &(0x7f0000000140)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) 37.823610769s ago: executing program 7 (id=3069): mbind(&(0x7f00000a2000/0x4000)=nil, 0x4000, 0x4002, 0x0, 0x5, 0x3) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e23, 0x2, @local, 0x5}, 0x1c) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x6, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3fc, 0x0, 0x32}, 0x9c) 27.334134663s ago: executing program 5 (id=3084): write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000100)={'syz0\x00', {0x0, 0x2}, 0x2b, [0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x6, 0x0, 0x0, 0x800, 0x0, 0x10000000, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4000000, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0xffffe, 0x0, 0x0, 0x0, 0x3, 0x0, 0x401, 0x0, 0x0, 0x4, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x2, 0xfffffffd, 0x0, 0x0, 0xffffffff], [0x2, 0x2, 0x0, 0x0, 0x10000000, 0x800000, 0x0, 0x44a, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x4, 0x0, 0x1409, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x180d, 0x0, 0x1, 0x0, 0x0, 0xf, 0x0, 0x0, 0x58000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6], [0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x2, 0x0, 0x9, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000, 0x0, 0x4, 0x0, 0x3, 0x0, 0x3, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x4, 0x0, 0x0, 0x0, 0x9], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0xfffffff6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2, 0x0, 0x4, 0x0, 0x0, 0x0, 0xfffffe04, 0x0, 0xb0d, 0x0, 0x0, 0xfffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80001, 0x0, 0x3, 0x7f, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x3, 0xef86]}, 0x45c) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, 0x0, 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18, 0x0, 0x0, {0x1}}, 0x18) write$FUSE_DIRENTPLUS(r2, &(0x7f00000003c0)=ANY=[@ANYBLOB="b0"], 0xb0) write$FUSE_GETXATTR(r2, &(0x7f00000000c0)={0x18}, 0x18) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r3, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r3, &(0x7f0000006380)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r2, &(0x7f0000000600)={0x50, 0x0, r4, {0x7, 0x2b, 0x3, 0x4200000, 0xf800, 0xfff9, 0xe, 0x800, 0x0, 0x0, 0x8, 0x9}}, 0x50) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@cache_fscache}]}}) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0xff0f) 25.583868577s ago: executing program 5 (id=3086): mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) get_mempolicy(&(0x7f00000001c0), 0x0, 0x481, &(0x7f000000d000/0x4000)=nil, 0x3) 24.804263037s ago: executing program 5 (id=3087): r0 = socket$inet6(0xa, 0x3, 0x6) getsockopt$sock_cred(r0, 0x1, 0x11, 0x0, &(0x7f0000000a00)) syz_mount_image$hfsplus(&(0x7f00000000c0), &(0x7f0000000980)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB='nobarrier,gid=', @ANYRESHEX, @ANYBLOB="2c63726561746f723dbd3d66f12c63726561746f723d64eb8ba92c6e6f6465636f6d706f73652c756d61736b3d3030303030303030303030303030303030303030303032000000003d", @ANYRESHEX, @ANYRESOCT], 0x3, 0x6a4, &(0x7f0000001b40)="$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") syz_mount_image$udf(&(0x7f0000000080), &(0x7f0000000500)='./file0\x00', 0x1818418, &(0x7f0000000200)=ANY=[], 0xdf, 0x4b1, &(0x7f0000000ac0)="$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") r1 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) mkdirat(r1, &(0x7f0000000200)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0) renameat2(r1, &(0x7f0000000340)='./file0\x00', r1, &(0x7f0000000140)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) 23.539146784s ago: executing program 5 (id=3090): socket$kcm(0x10, 0x2, 0x10) socket$pppl2tp(0x18, 0x1, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x6, 0x89}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r0 = openat$mixer(0xffffffffffffff9c, &(0x7f0000003fc0), 0x0, 0x0) ioctl$SOUND_MIXER_WRITE_VOLUME(r0, 0xc0044d08, &(0x7f0000000040)=0x45) 22.121940509s ago: executing program 62 (id=3069): mbind(&(0x7f00000a2000/0x4000)=nil, 0x4000, 0x4002, 0x0, 0x5, 0x3) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e23, 0x2, @local, 0x5}, 0x1c) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x6, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3fc, 0x0, 0x32}, 0x9c) 22.092683465s ago: executing program 5 (id=3092): ioctl$KVM_CLEAR_DIRTY_LOG(0xffffffffffffffff, 0xc018aec0, &(0x7f0000000100)={0x10003, 0x400, 0x300, &(0x7f00000003c0)=[0x450fd3d7, 0xfffffffffffffcda, 0xff, 0x9, 0x10001, 0x8, 0xfffffffffffffff9, 0x3, 0x5, 0x23b, 0x8, 0x2b, 0xb79d, 0x4, 0x402, 0x9, 0x9, 0x4ce3d10b, 0x5, 0x1, 0x35b, 0x1, 0x8, 0x7, 0x6, 0xf8, 0x5, 0x3, 0x6, 0x10, 0xffffffff, 0x101, 0x100000001, 0x338c, 0xa4d, 0x1, 0x2, 0x3, 0x65, 0x40000000000, 0x10000, 0x1, 0x525, 0x100, 0x10, 0x6, 0x8, 0x8, 0xb48, 0x4fcd, 0x2, 0x9, 0x200, 0x4596371f, 0x8, 0x7, 0x8, 0x44ce, 0x6, 0xfffffffffffffffc, 0x8, 0x1, 0x10001, 0x3, 0x3, 0x0, 0x1, 0x7f, 0x2, 0x1, 0xffffffffffffff00, 0xffffffffffffff7a, 0x7ff, 0x3ff, 0x5b, 0x6, 0x100, 0x5, 0x3, 0x33, 0x8f0, 0x2, 0x8, 0x7fffffffffffffff, 0xfffffffffffffff8, 0x8e2f, 0x10000, 0x0, 0x0, 0xa, 0x3, 0x0, 0x7, 0xc0, 0xff, 0x0, 0x5, 0x7, 0x7fff, 0x0, 0x0, 0x1, 0x0, 0x9649, 0x0, 0x0, 0x3, 0x0, 0x6, 0x4, 0xb36f, 0x1, 0xd, 0x8, 0x4, 0x10000, 0x8, 0x3, 0x3cc, 0x3, 0x4, 0x5, 0x2, 0x0, 0x915a, 0x6, 0x7, 0x9]}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, 0x0}, 0x0) r0 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) truncate(&(0x7f0000000000)='./bus\x00', 0x8001) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x2, 0x9, 0xfffffffffffffffd, 0x0, 0x2, 0x0, 0x4002004c4, 0x1004, 0xffffffffffffffff, 0xc595, 0x0, 0x1, 0xffffffffffffffff, 0x2000000000000000, 0x80000004000000, 0x8d], 0xeeee8000, 0x2010d3}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 20.554976994s ago: executing program 5 (id=3095): r0 = gettid() timer_create(0x0, &(0x7f0000000000)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) r1 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r1, &(0x7f0000000440), 0x10) listen(r1, 0xf) fanotify_mark(0xffffffffffffffff, 0x201, 0x4800003e, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, 0x0, 0xd40, 0xd2) socket$vsock_stream(0x28, 0x1, 0x0) accept4$unix(r1, 0x0, 0x0, 0x0) timer_settime(0x0, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) 5.841759012s ago: executing program 2 (id=3104): r0 = socket$inet6(0xa, 0x3, 0x6) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000580)={0x0, 0x0, 0x0}, &(0x7f0000000a00)=0xc) syz_mount_image$hfsplus(&(0x7f00000000c0), &(0x7f0000000980)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB='nobarrier,gid=', @ANYRESHEX=r2, @ANYBLOB="2c63726561746f723dbd3d66f12c63726561746f723d64eb8ba92c6e6f6465636f6d706f73652c756d61736b3d3030303030303030303030303030303030303030303032000000003d", @ANYRESHEX=r1, @ANYRESOCT], 0x3, 0x6a4, &(0x7f0000001b40)="$eJzs3U9sHFcdB/DvbDbrbJBS918aEFKtRqqgEYmdVUmQkBoQQjlEKIJLr1biNFY2aeW4KK0Q2QAFiRMn1AOHIhQOPSGEkMoJUc5ISFw4+R6JG4ccAKOZnV2v7Y1jJ7HXbT8faTzv7Zv33m9+nT+7s402wGfW+ddzsJci509cuFXWV+52uit3O9cH5SRTSRpJs79K0U6Kj5Nz6S/5fPliPVzxoHlevfdR0Xz/w06/1qyXavvGVv02GbtlLzk0rBxIMtMv/mfbw24ar1qqcS6tjfeIimHcZcKODxIHk7a6SW+tsfHQ7ts/b4F963b/vrnJdHI4/btr+T4g9dXh4VeGydvy2tTbuzgAAABgt4z9LD/qqfu5n1s5sjfhAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwKdD0f/NwKJeGoPyTIrB7/+3Rn5TvzXhcB/Te1eq1XefmnQgAAAAAAAAAPBYXryf+7mVI4P6alF95/9SVXmu+vu5vJ2bWchSTuZW5rOc5SxlLsn0yECtW/PLy0tzm3v+MmXP1dXV23XP02N7nl4fV29joOP+T4NNGwEAAAAAAADAZ9aPcn7t+38AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAANgPiuRAf1Utzw3K02k0kxxK0ipmhpu3JhrsE/DnSQcAAAAAu69dr48U/+sXVovqM//R6nP/obydG1nOYpbTzUIuV88C+p/6G3/vdbordzvXy2XzwN/4147iqEZM/9nD+Jlnqy2eH/Y4n2/nezmRmVzMUhbz/cxnOQuZybeq0nyKTNdPL6ZX7rYziHVzvOfW1S5ujO3FkXIZ37EqknauZLGK7WQutQahN+rtjo3M9sdWsmHGO2V2itdq28zR5Xpd7tEv6vX+MF3t+cFhRmbr3JfZeHo075tzv8PjZONMc2kMn0E9tzZLWd040yPl/HC9LnP9093N+Q4fpa3PRO/nZW1w9B3dOufJl//xl4tXGzeuXb1y88T+OYwe0cZjojOSiRe2lYlumYneY2Ti0OPE/+S06mz0r6I7u1q+VPU9ksV8J2/mchZyJrOZy9nM5ms5nU5Oj+T1+a3zWp1rjZ2da8e/VBfKe9LPRu5Ne2bqQQ1lXp8eyevolW66aht9ZS1Lz2wjS0Ur47P0z7GhNL9QF8o5fjxyx5m8jZmYG8nEs1tn4tf/XU1ys3vj2tLV+be2Od/L9bo8bd9bf23+zRPZoZ2rd7c8Xp4p/2Olf9sYPTrKtmcHbRvy1aq/cWnWg61ra6U6n/ttDztTy5GO3hk3Ur/thbGzdKq2YyNt697l5M10h+9CANjHDr9yuNW+1/5b+4P2T9pX2xcOfXPq7NQXWzn41+afDvyu8dvG14tX8kF+mCOTjhQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD4Nbr7z7rX5bndhaR8W0njCA94Z2zRIRf+V1v7Y909qYWqrI+r3Sbbo3ppEzO0k+yJ1ae7BXFMZ03Rh+Eo7aQzjSXJtn/zAHbAbTi1ff+vUzXfe/cri9fk3Ft5YuHH67JnXznS+Onf71JXF7sJs/++kowR2w9rbgElHAgAAAAAAAAAAAGzXXvzzhjHTFr0J7CsAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADwyXT+9Rzspcjc7MnZsr5yt9Mtl0F5bctmkkaS4gdJ8XFyLv0l0yPDFQ+a59V7H/3q5fc/7KyN1Rxs39jQ7w//Xl3d4V706iUzSQ7U64eb2tZ4l0bG6+0wsL5iuIdlwo4PEgeT9v8AAAD//x5LB84=") r3 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) mkdirat(r3, 0x0, 0x0) renameat2(r3, &(0x7f0000000340)='./file0\x00', r3, &(0x7f0000000140)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) sendmsg$AUDIT_ADD_RULE(0xffffffffffffffff, &(0x7f0000000900)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000002c0)={&(0x7f0000000f80)={0x428, 0x3f3, 0x200, 0x70bd26, 0x25dfdbff, {0x1, 0x1, 0xa, [0x4, 0x3, 0x6, 0x800, 0xe356, 0x7, 0x0, 0x2, 0x74e8, 0x0, 0x1ff, 0x4, 0x0, 0x60012aa4, 0x1, 0xc, 0x10, 0x400, 0xe0d, 0x101, 0xf576, 0x2, 0x1ff, 0x4, 0x5, 0xffffffff, 0x5, 0x4, 0x1, 0x6, 0x101, 0xffffffff, 0x6, 0xa, 0x6, 0x7, 0x100, 0x697, 0xa, 0x9, 0x800, 0x9, 0xf4, 0x2, 0x5, 0x58, 0x80000000, 0x0, 0x9, 0x32, 0x5, 0x90, 0xfffffff8, 0x3, 0x4, 0x9, 0x7, 0x7f, 0xd, 0x5, 0x7fff, 0x401, 0x81, 0x6], [0x4, 0xffff0e2f, 0x0, 0x1, 0x3, 0x7, 0x100, 0x5, 0x5, 0x7, 0x85a1, 0x1, 0xf, 0x81, 0x0, 0x6, 0x5, 0xcc2, 0x1ff, 0x0, 0x0, 0x0, 0x7, 0x997, 0x100, 0x2, 0x6, 0x4, 0xff, 0x9, 0x80000000, 0x6, 0x7, 0xc, 0xe, 0x4, 0x7, 0xd5f5, 0x9, 0x9, 0x6, 0x4, 0x3, 0x0, 0x6, 0x6, 0x3, 0xff, 0x4, 0x1, 0x4, 0x7, 0x9, 0x7, 0x8001, 0x10001, 0x10001, 0xe4, 0x2, 0x1, 0x2, 0x7, 0x9, 0x8], [0x10001, 0x1, 0x6, 0xfffffffc, 0x4, 0x4, 0x7, 0x8, 0x400, 0x100, 0x6, 0xffffffff, 0xfffffffe, 0x2, 0x7, 0x4, 0x9b, 0xff, 0x3, 0x400, 0x0, 0x4, 0x9, 0x3, 0x7fffffff, 0x0, 0x4, 0x3, 0x3, 0x50, 0x2, 0x5, 0x3, 0x4, 0x8, 0x0, 0x8e, 0x7, 0x908cc36e, 0xa, 0xd, 0x8, 0x9, 0x5, 0x3c9, 0x4, 0x3, 0x80000000, 0x393ed8a9, 0x3, 0x96, 0x7, 0x4, 0x8, 0x5, 0x10001, 0xfdbb, 0x2, 0x8, 0x4, 0xffffffff, 0x7, 0xffffff31], [0x8f2, 0x4, 0x3, 0x4, 0xe47d, 0x10001, 0x10000, 0x1, 0x7, 0x3, 0x0, 0x8, 0x0, 0x6, 0xc, 0x6, 0xa85, 0x10, 0x1, 0x9, 0x7, 0x10, 0xffffffff, 0x9, 0x1, 0x2, 0xa2b3, 0x4, 0x6, 0x822, 0xe, 0x2, 0x0, 0xcd, 0xc9, 0x4, 0x8, 0x7fffffff, 0x3, 0x3, 0x9, 0xb, 0x8, 0x1, 0x8, 0xa, 0x5b99f4dc, 0x4, 0x401, 0x9, 0x4, 0x401, 0x4, 0x36, 0x5, 0x9, 0xfffffff9, 0x22e81042, 0x9, 0x4, 0x5, 0x0, 0x0, 0x371b], 0x6, ['syz1\x00', '\x00']}, ["", "", ""]}, 0x428}, 0x1, 0x0, 0x0, 0x1}, 0x4000000) 4.247898406s ago: executing program 63 (id=3095): r0 = gettid() timer_create(0x0, &(0x7f0000000000)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) r1 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r1, &(0x7f0000000440), 0x10) listen(r1, 0xf) fanotify_mark(0xffffffffffffffff, 0x201, 0x4800003e, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, 0x0, 0xd40, 0xd2) socket$vsock_stream(0x28, 0x1, 0x0) accept4$unix(r1, 0x0, 0x0, 0x0) timer_settime(0x0, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) 4.023595532s ago: executing program 2 (id=3106): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x9}, 0x1c) listen(r0, 0x3) syz_emit_ethernet(0x0, 0x0, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000240)={@local, @broadcast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '@\x00', 0x14, 0x6, 0x1, @empty, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x7, 0x0, 0x0, 0xf}}}}}}}, 0x0) 3.396627206s ago: executing program 2 (id=3107): setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x13, 0x0, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x6, 0x89}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r0 = openat$mixer(0xffffffffffffff9c, &(0x7f0000003fc0), 0x0, 0x0) ioctl$SOUND_MIXER_WRITE_VOLUME(r0, 0xc0044d08, &(0x7f0000000040)=0x45) 2.367963476s ago: executing program 2 (id=3108): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000440)=ANY=[@ANYBLOB="120100002eab5a40401c3405cc6d010203010902120001000000000904"], 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$rtl8150(r0, 0x0, &(0x7f00000013c0)={0x2c, &(0x7f00000011c0)={0x40, 0x11, 0x4, "30d27cfa"}, 0x0, 0x0, 0x0, 0x0}) 1.179627933s ago: executing program 2 (id=3109): r0 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000100), 0x8000) preadv2(r0, &(0x7f0000000000)=[{&(0x7f0000000080)=""/66, 0x42}], 0x1, 0x80, 0x8000, 0x0) r1 = socket$qrtr(0x2a, 0x2, 0x0) connect$qrtr(r1, &(0x7f0000000040)={0x2a, 0xffffffff, 0xfffffffe}, 0xc) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="1800000000", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00'], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) close_range(r0, r1, 0x0) 819.662927ms ago: executing program 8 (id=3052): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000780)=ANY=[@ANYBLOB="12010000cf8bed20d90f25004029000000010902120001000000000904"], 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000580)={0x24, &(0x7f0000000700)=ANY=[@ANYBLOB="201109"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) ioctl$I2C_SMBUS(r1, 0x720, &(0x7f0000000540)={0x1, 0x79, 0x4, &(0x7f0000000500)={0x14, "f2eb3419f0eadfc126c73da429a3f7eeb637eecf3b624c5198fc7c650c1b47117d"}}) 0s ago: executing program 2 (id=3110): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x6, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0xa) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) unshare(0x8000000) r0 = socket$inet6(0xa, 0x80002, 0x88) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYRES32, @ANYBLOB="0000000000000000000000000000180000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/24], 0x48) socket$inet6(0xa, 0x3, 0x6) bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x10000000004e20, 0x0, @mcast2, 0x6}, 0x1c) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB, @ANYRES32=r1, @ANYBLOB="0000000000000000b704000001000000850000007800"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, 0x0, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) syz_emit_ethernet(0x83, &(0x7f0000000040)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaf9ff030486dd601b8b97004d88c19e9ace00000000000000002100000002ff02000000000000000000000000000104004e200023b0"], 0x0) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r0, &(0x7f0000000200)={0xa0000004}) kernel console output (not intermixed with test programs): ] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1302.171122][T14453] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2216'. [ 1302.291229][T14458] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2216'. [ 1302.432475][T14460] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2216'. [ 1305.000388][T14289] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1306.510562][ T3881] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1306.725482][ T3881] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1306.926072][ T3881] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1307.330817][ T3881] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1307.548671][ T9968] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1307.562530][ T9968] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1308.118609][ T9968] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1308.126825][ T9968] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1308.299345][ T3881] bridge_slave_1: left allmulticast mode [ 1308.305492][ T3881] bridge_slave_1: left promiscuous mode [ 1308.312330][ T3881] bridge0: port 2(bridge_slave_1) entered disabled state [ 1308.455381][ T3881] bridge_slave_0: left allmulticast mode [ 1308.461279][ T3881] bridge_slave_0: left promiscuous mode [ 1308.468070][ T3881] bridge0: port 1(bridge_slave_0) entered disabled state [ 1309.383731][ T3881] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1309.434674][ T3881] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1309.483289][ T3881] bond0 (unregistering): Released all slaves [ 1310.209841][T14523] loop9: detected capacity change from 0 to 1024 [ 1310.338951][T14523] EXT4-fs (loop9): ext4_check_descriptors: Block bitmap for group 0 overlaps block group descriptors [ 1310.350451][T14523] EXT4-fs (loop9): ext4_check_descriptors: Checksum for group 0 failed (38281!=20869) [ 1310.364602][T14523] EXT4-fs (loop9): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 1310.500528][T14523] EXT4-fs error (device loop9): ext4_get_journal_inode:5800: comm syz.9.2232: inode #1: comm syz.9.2232: iget: illegal inode # [ 1310.584819][T14523] EXT4-fs (loop9): no journal found [ 1310.590258][T14523] EXT4-fs (loop9): can't get journal size [ 1310.634996][T14523] EXT4-fs (loop9): failed to initialize system zone (-22) [ 1310.650984][T14523] EXT4-fs (loop9): mount failed [ 1310.906509][ T3881] hsr_slave_0: left promiscuous mode [ 1310.934057][ T3881] hsr_slave_1: left promiscuous mode [ 1310.943514][ T3881] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1310.951132][ T3881] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1311.031586][ T3881] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1311.039457][ T3881] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1311.153753][ T3881] veth1_macvtap: left promiscuous mode [ 1311.159544][ T3881] veth0_macvtap: left promiscuous mode [ 1311.166117][ T3881] veth1_vlan: left promiscuous mode [ 1311.171827][ T3881] veth0_vlan: left promiscuous mode [ 1312.144877][ T3881] team0 (unregistering): Port device team_slave_1 removed [ 1312.178535][ T3881] team0 (unregistering): Port device team_slave_0 removed [ 1312.830194][T14289] veth0_vlan: entered promiscuous mode [ 1312.960721][T14289] veth1_vlan: entered promiscuous mode [ 1313.526129][T14289] veth0_macvtap: entered promiscuous mode [ 1313.624910][T14289] veth1_macvtap: entered promiscuous mode [ 1313.873922][T14289] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1313.976709][T14289] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1314.136299][ T14] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1314.167200][ T14] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1314.288986][ T36] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1314.364972][ T36] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1320.819079][T14610] loop9: detected capacity change from 0 to 1024 [ 1320.913453][T14610] EXT4-fs (loop9): ext4_check_descriptors: Block bitmap for group 0 overlaps block group descriptors [ 1320.924934][T14610] EXT4-fs (loop9): ext4_check_descriptors: Checksum for group 0 failed (38281!=20869) [ 1320.934989][T14610] EXT4-fs (loop9): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 1321.043640][T14610] EXT4-fs error (device loop9): ext4_get_journal_inode:5800: comm syz.9.2258: inode #1: comm syz.9.2258: iget: illegal inode # [ 1321.195662][T14610] EXT4-fs (loop9): no journal found [ 1321.201108][T14610] EXT4-fs (loop9): can't get journal size [ 1321.325095][T14610] EXT4-fs (loop9): failed to initialize system zone (-22) [ 1321.332580][T14610] EXT4-fs (loop9): mount failed [ 1323.418274][T14638] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2265'. [ 1325.478310][T14710] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1325.492664][T14710] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1325.507945][T14680] loop9: detected capacity change from 0 to 1024 [ 1325.543271][ T9968] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1325.551322][ T9968] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1326.861567][ T4049] hfsplus: b-tree write err: -5, ino 4 [ 1329.383932][T14739] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2275'. [ 1330.254702][T14751] loop9: detected capacity change from 0 to 1024 [ 1330.522651][T14751] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1331.276648][T14150] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1333.756258][T14784] netlink: 56 bytes leftover after parsing attributes in process `syz.4.2287'. [ 1338.263886][T14823] netlink: 56 bytes leftover after parsing attributes in process `syz.5.2299'. [ 1339.122083][ T30] audit: type=1326 audit(1757346058.430:83): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14827 comm="syz.6.2301" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fe4539 code=0x7ffc0000 [ 1339.204162][T14829] sd 0:0:1:0: device reset [ 1339.282390][ T30] audit: type=1326 audit(1757346058.490:84): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14827 comm="syz.6.2301" exe="/root/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf7fe4539 code=0x7ffc0000 [ 1339.310779][ T30] audit: type=1326 audit(1757346058.490:85): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14827 comm="syz.6.2301" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fe4539 code=0x7ffc0000 [ 1339.336023][ T30] audit: type=1326 audit(1757346058.490:86): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14827 comm="syz.6.2301" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fe4539 code=0x7ffc0000 [ 1339.358487][ T30] audit: type=1326 audit(1757346058.540:87): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14827 comm="syz.6.2301" exe="/root/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf7fe4539 code=0x7ffc0000 [ 1339.381418][ T30] audit: type=1326 audit(1757346058.560:88): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14827 comm="syz.6.2301" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fe4539 code=0x7ffc0000 [ 1339.404108][ T30] audit: type=1326 audit(1757346058.560:89): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14827 comm="syz.6.2301" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fe4539 code=0x7ffc0000 [ 1340.877351][ T1287] ieee802154 phy0 wpan0: encryption failed: -22 [ 1340.884994][ T1287] ieee802154 phy1 wpan1: encryption failed: -22 [ 1343.245417][T14863] netlink: 56 bytes leftover after parsing attributes in process `syz.5.2312'. [ 1346.004600][T14879] netlink: 'syz.4.2317': attribute type 21 has an invalid length. [ 1347.847651][T14898] netlink: 56 bytes leftover after parsing attributes in process `syz.2.2323'. [ 1354.662010][T14290] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1354.707736][T14290] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1354.717837][T14290] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1354.749513][T14290] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1354.761609][T14290] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1355.551460][T14953] netlink: 56 bytes leftover after parsing attributes in process `syz.4.2338'. [ 1356.374168][T14942] chnl_net:caif_netlink_parms(): no params data found [ 1356.854213][T14290] Bluetooth: hci1: command tx timeout [ 1358.913085][ T8098] Bluetooth: hci1: command tx timeout [ 1358.923225][ T8098] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1358.933588][ T8098] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1358.943658][ T8098] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1358.958684][ T8098] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1359.259068][T14975] bridge_slave_0: left allmulticast mode [ 1359.265155][T14975] bridge_slave_0: left promiscuous mode [ 1359.271798][T14975] bridge0: port 1(bridge_slave_0) entered disabled state [ 1359.336167][ T8098] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1359.527473][T14975] bridge_slave_1: left allmulticast mode [ 1359.533549][T14975] bridge_slave_1: left promiscuous mode [ 1359.539959][T14975] bridge0: port 2(bridge_slave_1) entered disabled state [ 1359.780159][T14975] bond0: (slave bond_slave_0): Releasing backup interface [ 1359.944412][T14975] bond0: (slave bond_slave_1): Releasing backup interface [ 1360.089955][T14975] team0: Port device team_slave_0 removed [ 1360.254948][T14975] team0: Port device team_slave_1 removed [ 1360.265279][T14975] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1360.273149][T14975] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1360.528869][T14975] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1360.536667][T14975] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1360.853644][T14942] bridge0: port 1(bridge_slave_0) entered blocking state [ 1360.861082][T14942] bridge0: port 1(bridge_slave_0) entered disabled state [ 1360.868888][T14942] bridge_slave_0: entered allmulticast mode [ 1360.877690][T14942] bridge_slave_0: entered promiscuous mode [ 1360.996715][T14942] bridge0: port 2(bridge_slave_1) entered blocking state [ 1361.004493][T14942] bridge0: port 2(bridge_slave_1) entered disabled state [ 1361.012165][T14942] bridge_slave_1: entered allmulticast mode [ 1361.031804][T14942] bridge_slave_1: entered promiscuous mode [ 1361.055159][T14290] Bluetooth: hci1: command tx timeout [ 1361.476079][T14290] Bluetooth: hci4: command tx timeout [ 1361.573078][T14942] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1361.714017][T14942] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1362.747153][T14942] team0: Port device team_slave_0 added [ 1363.011280][T14942] team0: Port device team_slave_1 added [ 1363.073587][T14290] Bluetooth: hci1: command tx timeout [ 1363.381267][T14942] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1363.388631][T14942] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1363.415884][T14942] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1363.494396][T15002] netlink: 56 bytes leftover after parsing attributes in process `syz.5.2349'. [ 1363.563228][T14290] Bluetooth: hci4: command tx timeout [ 1363.608808][T15003] netlink: 'syz.4.2348': attribute type 5 has an invalid length. [ 1363.629144][T14942] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1363.636677][T14942] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1363.663990][T14942] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1364.478708][T14979] chnl_net:caif_netlink_parms(): no params data found [ 1364.549490][T14942] hsr_slave_0: entered promiscuous mode [ 1364.558983][T14942] hsr_slave_1: entered promiscuous mode [ 1364.567976][T14942] debugfs: 'hsr0' already exists in 'hsr' [ 1364.573970][T14942] Cannot create hsr debugfs directory [ 1365.633171][T14290] Bluetooth: hci4: command tx timeout [ 1367.641525][T14979] bridge0: port 1(bridge_slave_0) entered blocking state [ 1367.651271][T14979] bridge0: port 1(bridge_slave_0) entered disabled state [ 1367.659717][T14979] bridge_slave_0: entered allmulticast mode [ 1367.668736][T14979] bridge_slave_0: entered promiscuous mode [ 1367.715386][T14290] Bluetooth: hci4: command tx timeout [ 1368.011258][T14979] bridge0: port 2(bridge_slave_1) entered blocking state [ 1368.019885][T14979] bridge0: port 2(bridge_slave_1) entered disabled state [ 1368.028205][T14979] bridge_slave_1: entered allmulticast mode [ 1368.042275][T14979] bridge_slave_1: entered promiscuous mode [ 1368.460804][T14942] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 1368.518583][T14979] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1368.606522][T14942] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 1368.668139][T14979] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1368.726406][T14942] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 1368.967941][T14942] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 1369.328466][T14979] team0: Port device team_slave_0 added [ 1369.426260][T14979] team0: Port device team_slave_1 added [ 1370.089393][T14979] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1370.096721][T14979] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1370.123442][T14979] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1370.526532][T14979] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1370.533762][T14979] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1370.568649][T14979] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1371.136316][T15040] netlink: 'syz.4.2358': attribute type 5 has an invalid length. [ 1371.383269][T14942] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1371.505829][T14979] hsr_slave_0: entered promiscuous mode [ 1371.515523][T14979] hsr_slave_1: entered promiscuous mode [ 1371.525066][T14979] debugfs: 'hsr0' already exists in 'hsr' [ 1371.530959][T14979] Cannot create hsr debugfs directory [ 1371.709377][T15043] netlink: 56 bytes leftover after parsing attributes in process `syz.2.2359'. [ 1371.791753][T14942] 8021q: adding VLAN 0 to HW filter on device team0 [ 1371.899279][T14698] bridge0: port 1(bridge_slave_0) entered blocking state [ 1371.907063][T14698] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1372.328079][T14698] bridge0: port 2(bridge_slave_1) entered blocking state [ 1372.335787][T14698] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1372.927537][T14942] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1372.938847][T14942] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1375.286882][T14979] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 1375.385827][T14979] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 1375.623683][T14979] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 1375.756942][T14979] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 1377.930337][T14979] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1378.305098][T14979] 8021q: adding VLAN 0 to HW filter on device team0 [ 1378.397444][T15085] netlink: 56 bytes leftover after parsing attributes in process `syz.2.2369'. [ 1378.519566][ T3982] bridge0: port 1(bridge_slave_0) entered blocking state [ 1378.527344][ T3982] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1378.706022][ T3982] bridge0: port 2(bridge_slave_1) entered blocking state [ 1378.713725][ T3982] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1379.509464][T14942] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1380.512170][T14942] veth0_vlan: entered promiscuous mode [ 1380.856835][T14942] veth1_vlan: entered promiscuous mode [ 1381.569675][T14942] veth0_macvtap: entered promiscuous mode [ 1381.712902][T14942] veth1_macvtap: entered promiscuous mode [ 1382.202459][T14942] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1382.440587][T14942] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1382.610784][T14698] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1382.752372][T14700] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1382.845292][T14700] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1382.952196][T14700] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1383.359674][T14979] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1383.909039][ T8098] Bluetooth: hci3: command 0x0406 tx timeout [ 1383.934328][T15122] netlink: 'syz.2.2379': attribute type 5 has an invalid length. [ 1384.176875][T15124] netlink: 56 bytes leftover after parsing attributes in process `syz.4.2380'. [ 1386.572305][ T3634] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1386.820858][ T3634] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1387.091083][ T3634] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1387.420662][ T3634] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1388.563860][ T3634] bridge_slave_1: left allmulticast mode [ 1388.569877][ T3634] bridge_slave_1: left promiscuous mode [ 1388.578125][ T3634] bridge0: port 2(bridge_slave_1) entered disabled state [ 1388.793697][ T3634] bridge_slave_0: left allmulticast mode [ 1388.799597][ T3634] bridge_slave_0: left promiscuous mode [ 1388.806646][ T3634] bridge0: port 1(bridge_slave_0) entered disabled state [ 1389.457501][T15174] netlink: 1688 bytes leftover after parsing attributes in process `syz.5.2389'. [ 1389.789733][ T3634] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1389.855937][ T3634] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1389.891003][ T3634] bond0 (unregistering): Released all slaves [ 1390.793714][T14979] veth0_vlan: entered promiscuous mode [ 1390.893273][ T3634] hsr_slave_0: left promiscuous mode [ 1390.916823][ T3634] hsr_slave_1: left promiscuous mode [ 1390.926119][ T3634] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1390.934876][ T3634] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1391.006567][ T3634] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1391.014688][ T3634] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1391.324753][ T3634] veth1_macvtap: left promiscuous mode [ 1391.330640][ T3634] veth0_macvtap: left promiscuous mode [ 1391.336867][ T3634] veth1_vlan: left promiscuous mode [ 1391.342453][ T3634] veth0_vlan: left promiscuous mode [ 1391.387097][T15191] tipc: Can't bind to reserved service type 2 [ 1392.775392][ T3634] team0 (unregistering): Port device team_slave_1 removed [ 1392.846107][ T3634] team0 (unregistering): Port device team_slave_0 removed [ 1393.367358][T14979] veth1_vlan: entered promiscuous mode [ 1393.697053][ T3634] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1393.869455][ T3634] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1394.108084][ T3634] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1394.358186][ T3634] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1394.558666][T14979] veth0_macvtap: entered promiscuous mode [ 1394.635409][T14979] veth1_macvtap: entered promiscuous mode [ 1395.060451][T14979] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1395.344316][T14979] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1395.429369][ T3634] bridge_slave_1: left allmulticast mode [ 1395.437575][ T3634] bridge_slave_1: left promiscuous mode [ 1395.445468][ T3634] bridge0: port 2(bridge_slave_1) entered disabled state [ 1395.615483][ T3634] bridge_slave_0: left allmulticast mode [ 1395.621310][ T3634] bridge_slave_0: left promiscuous mode [ 1395.629431][ T3634] bridge0: port 1(bridge_slave_0) entered disabled state [ 1396.359055][ T3634] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1396.417083][ T3634] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1396.454001][ T3634] bond0 (unregistering): Released all slaves [ 1396.674414][T14687] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1396.708701][T14687] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1396.942370][T14687] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1397.045446][T14687] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1397.603991][ T3634] hsr_slave_0: left promiscuous mode [ 1397.653247][ T3634] hsr_slave_1: left promiscuous mode [ 1397.661479][ T3634] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1397.669416][ T3634] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1397.806121][ T3634] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1397.813940][ T3634] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1397.978653][ T3634] veth1_macvtap: left promiscuous mode [ 1397.990403][ T3634] veth0_macvtap: left promiscuous mode [ 1397.996533][ T3634] veth1_vlan: left promiscuous mode [ 1398.001971][ T3634] veth0_vlan: left promiscuous mode [ 1398.682552][T15238] netlink: 1688 bytes leftover after parsing attributes in process `syz.5.2402'. [ 1399.046362][ T3634] team0 (unregistering): Port device team_slave_1 removed [ 1399.076131][ T3634] team0 (unregistering): Port device team_slave_0 removed [ 1400.784781][T14696] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1400.793189][T14696] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1401.148750][ T4049] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1401.161246][ T4049] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1402.346205][ T1287] ieee802154 phy0 wpan0: encryption failed: -22 [ 1402.353515][ T1287] ieee802154 phy1 wpan1: encryption failed: -22 [ 1404.457577][T15277] bridge0: port 2(bridge_slave_1) entered disabled state [ 1404.467870][T15277] bridge0: port 1(bridge_slave_0) entered disabled state [ 1404.821286][T15277] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1404.866041][T15277] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1405.819774][ T3982] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1405.849563][ T3982] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1405.916921][ T3982] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1405.981280][ T3634] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1407.655677][T15318] netlink: 56 bytes leftover after parsing attributes in process `syz.4.2420'. [ 1408.697646][T15323] loop1: detected capacity change from 0 to 4096 [ 1408.857873][T15323] ntfs3(loop1): Different NTFS sector size (4096) and media sector size (512). [ 1409.126637][T14687] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1409.135061][T14687] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1409.415094][ T3982] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1409.423829][ T3982] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1409.484700][T15323] ntfs3(loop1): Mark volume as dirty due to NTFS errors [ 1409.536401][T15323] ntfs3(loop1): Failed to load $Extend (-22). [ 1409.542989][T15323] ntfs3(loop1): Failed to initialize $Extend. [ 1409.837412][T15331] overlay: Unknown parameter 'ôêÝ?¡}B‡Þ½û·ïУSBÇ®ýºOhÜ£Sû~ºöêשoºowîÑ»OŸÁ í{u4Ô>};õë—о×à„î'ôïпïà„ö÷¶ïÚ+¡xñâ †Jàwj±èŸ^' [ 1410.227986][T15333] tipc: Started in network mode [ 1410.233549][T15333] tipc: Node identity fa326b27d1f6, cluster identity 4711 [ 1410.241833][T15333] tipc: Enabled bearer , priority 0 [ 1410.279307][T15337] syzkaller0: entered promiscuous mode [ 1410.285229][T15337] syzkaller0: entered allmulticast mode [ 1410.398083][T15333] tipc: Resetting bearer [ 1410.535408][T15332] tipc: Resetting bearer [ 1410.616640][T15332] tipc: Disabling bearer [ 1411.353028][T15340] bridge0: port 2(bridge_slave_1) entered disabled state [ 1411.361015][T15340] bridge0: port 1(bridge_slave_0) entered disabled state [ 1411.421194][T15344] loop1: detected capacity change from 0 to 1024 [ 1411.659420][T15340] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1411.683645][T15340] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1412.198678][ T3634] hfsplus: b-tree write err: -5, ino 4 [ 1412.369750][T15349] loop7: detected capacity change from 0 to 1024 [ 1412.483239][T15349] EXT4-fs (loop7): ext4_check_descriptors: Block bitmap for group 0 overlaps block group descriptors [ 1412.494862][T15349] EXT4-fs (loop7): ext4_check_descriptors: Checksum for group 0 failed (38281!=20869) [ 1412.506258][T15349] EXT4-fs (loop7): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 1412.600243][T15349] EXT4-fs error (device loop7): ext4_get_journal_inode:5800: comm syz.7.2428: inode #1: comm syz.7.2428: iget: illegal inode # [ 1412.690469][T15349] EXT4-fs (loop7): no journal found [ 1412.696080][T15349] EXT4-fs (loop7): can't get journal size [ 1412.804473][T14687] netdevsim netdevsim5 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1412.815099][T14687] netdevsim netdevsim5 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1412.896923][T14687] netdevsim netdevsim5 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1412.906314][T15349] EXT4-fs (loop7): failed to initialize system zone (-22) [ 1412.909542][T15349] EXT4-fs (loop7): mount failed [ 1412.915392][T14687] netdevsim netdevsim5 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1413.122118][T14687] netdevsim netdevsim5 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1413.132484][T14687] netdevsim netdevsim5 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1413.219863][T14687] netdevsim netdevsim5 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1413.229798][T14687] netdevsim netdevsim5 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1413.800362][T15363] netlink: 56 bytes leftover after parsing attributes in process `syz.5.2431'. [ 1414.033728][T15367] netlink: 16 bytes leftover after parsing attributes in process `syz.7.2434'. [ 1415.093689][ T5872] usb 8-1: new high-speed USB device number 4 using dummy_hcd [ 1415.304636][ T5872] usb 8-1: Using ep0 maxpacket: 16 [ 1415.339427][ T5872] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1415.408106][ T5872] usb 8-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1415.417784][ T5872] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1415.426192][ T5872] usb 8-1: Product: syz [ 1415.430506][ T5872] usb 8-1: Manufacturer: syz [ 1415.435385][ T5872] usb 8-1: SerialNumber: syz [ 1416.754556][ T5872] cdc_ncm 8-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 1416.761287][ T5872] cdc_ncm 8-1:1.0: dwNtbInMaxSize=16 is too small. Using 2048 [ 1416.769416][ T5872] cdc_ncm 8-1:1.0: setting rx_max = 2048 [ 1416.972828][ T5872] cdc_ncm 8-1:1.0: setting tx_max = 88 [ 1416.993902][ T5872] cdc_ncm 8-1:1.0 usb0: register 'cdc_ncm' at usb-dummy_hcd.7-1, CDC NCM (NO ZLP), 42:42:42:42:42:42 [ 1417.064798][ T5872] usb 8-1: USB disconnect, device number 4 [ 1417.073655][ T5872] cdc_ncm 8-1:1.0 usb0: unregister 'cdc_ncm' usb-dummy_hcd.7-1, CDC NCM (NO ZLP) [ 1419.344120][T15409] netlink: 56 bytes leftover after parsing attributes in process `syz.2.2447'. [ 1419.446228][ T4049] netdevsim netdevsim4 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1419.455793][ T4049] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1419.503807][ T4049] netdevsim netdevsim4 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1419.513930][ T4049] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1419.557490][ T4049] netdevsim netdevsim4 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1419.568003][ T4049] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1419.643439][ T4049] netdevsim netdevsim4 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1419.652643][ T4049] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1420.122544][ T30] audit: type=1800 audit(1757346139.440:90): pid=15415 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.2449" name="nullb0" dev="tmpfs" ino=321 res=0 errno=0 [ 1420.320399][T15418] netlink: 1752 bytes leftover after parsing attributes in process `syz.4.2450'. [ 1420.595729][T15414] loop7: detected capacity change from 0 to 4096 [ 1421.035820][T15414] ntfs3(loop7): Mark volume as dirty due to NTFS errors [ 1424.785296][T15454] input: syz1 as /devices/virtual/input/input6 [ 1426.500693][T15458] bridge0: port 2(bridge_slave_1) entered disabled state [ 1426.509942][T15458] bridge0: port 1(bridge_slave_0) entered disabled state [ 1426.856165][T15458] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1426.892522][T15458] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1427.652938][ T1125] netdevsim netdevsim7 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1427.704299][ T1125] netdevsim netdevsim7 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1427.785706][ T1125] netdevsim netdevsim7 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1427.828346][ T1125] netdevsim netdevsim7 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1429.078177][T15481] overlayfs: failed to clone upperpath [ 1432.030256][ T8098] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1432.040833][ T8098] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1432.053386][ T8098] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1432.074259][ T8098] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1432.086950][ T8098] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1433.490848][T15518] loop7: detected capacity change from 0 to 1024 [ 1433.984660][T15501] chnl_net:caif_netlink_parms(): no params data found [ 1434.126616][ T4049] hfsplus: b-tree write err: -5, ino 4 [ 1434.195827][ T8098] Bluetooth: hci3: command tx timeout [ 1435.621162][T15549] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1436.196844][T15549] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 1436.213987][T15549] bond1: (slave macvlan2): making interface the new active one [ 1436.227344][T15549] bond1: (slave macvlan2): Enslaving as an active interface with an up link [ 1436.292463][ T8098] Bluetooth: hci3: command tx timeout [ 1436.404171][T15501] bridge0: port 1(bridge_slave_0) entered blocking state [ 1436.411858][T15501] bridge0: port 1(bridge_slave_0) entered disabled state [ 1436.419934][T15501] bridge_slave_0: entered allmulticast mode [ 1436.429936][T15501] bridge_slave_0: entered promiscuous mode [ 1436.589748][T15501] bridge0: port 2(bridge_slave_1) entered blocking state [ 1436.597387][T15501] bridge0: port 2(bridge_slave_1) entered disabled state [ 1436.605150][T15501] bridge_slave_1: entered allmulticast mode [ 1436.614585][T15501] bridge_slave_1: entered promiscuous mode [ 1437.085212][T15501] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1437.193110][T15501] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1437.575367][T15501] team0: Port device team_slave_0 added [ 1437.714993][T15501] team0: Port device team_slave_1 added [ 1438.082057][T15501] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1438.089453][T15501] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1438.115932][T15501] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1438.308974][T15501] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1438.316528][T15501] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1438.345069][T15501] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1438.365508][ T8098] Bluetooth: hci3: command tx timeout [ 1439.069281][T15570] loop7: detected capacity change from 0 to 1024 [ 1439.165370][T15501] hsr_slave_0: entered promiscuous mode [ 1439.176637][T15501] hsr_slave_1: entered promiscuous mode [ 1439.186544][T15501] debugfs: 'hsr0' already exists in 'hsr' [ 1439.192597][T15501] Cannot create hsr debugfs directory [ 1439.743990][T14696] hfsplus: b-tree write err: -5, ino 4 [ 1440.434940][ T8098] Bluetooth: hci3: command tx timeout [ 1440.464556][T15578] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2491'. [ 1440.473989][T15578] netlink: 40 bytes leftover after parsing attributes in process `syz.7.2491'. [ 1440.703780][T15578] ip6erspan0: entered promiscuous mode [ 1442.339363][T15501] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 1442.657645][T15501] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 1442.780103][T15501] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 1442.886562][T15501] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 1444.637614][ T30] audit: type=1326 audit(1757346163.940:91): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15610 comm="syz.4.2500" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf710e539 code=0x7ffc0000 [ 1444.773858][ T30] audit: type=1326 audit(1757346164.020:92): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15610 comm="syz.4.2500" exe="/root/syz-executor" sig=0 arch=40000003 syscall=357 compat=1 ip=0xf710e539 code=0x7ffc0000 [ 1444.796755][ T30] audit: type=1326 audit(1757346164.020:93): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15610 comm="syz.4.2500" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf710e539 code=0x7ffc0000 [ 1444.819788][ T30] audit: type=1326 audit(1757346164.020:94): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15610 comm="syz.4.2500" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf710e539 code=0x7ffc0000 [ 1444.886749][T15501] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1444.957844][T15501] 8021q: adding VLAN 0 to HW filter on device team0 [ 1445.022102][ T1125] bridge0: port 1(bridge_slave_0) entered blocking state [ 1445.029954][ T1125] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1445.147529][ T1125] bridge0: port 2(bridge_slave_1) entered blocking state [ 1445.155296][ T1125] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1447.558284][T15501] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1448.105615][T15501] veth0_vlan: entered promiscuous mode [ 1448.222528][T15501] veth1_vlan: entered promiscuous mode [ 1448.653635][T15501] veth0_macvtap: entered promiscuous mode [ 1448.757025][T15501] veth1_macvtap: entered promiscuous mode [ 1448.983970][T15501] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1449.072228][T15501] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1449.201821][ T4049] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1449.256824][ T4049] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1449.305589][ T4049] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1449.340496][ T4049] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1451.013845][T15682] netlink: 344 bytes leftover after parsing attributes in process `syz.7.2520'. [ 1452.547093][T15694] bridge0: port 2(bridge_slave_1) entered disabled state [ 1452.555922][T15694] bridge0: port 1(bridge_slave_0) entered disabled state [ 1452.646713][T15701] netlink: 1624 bytes leftover after parsing attributes in process `syz.5.2525'. [ 1452.857047][T15694] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1452.887269][T15694] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1453.683470][T14687] netdevsim netdevsim2 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1453.693183][T14687] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1453.737796][T14687] netdevsim netdevsim2 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1453.747918][T14687] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1453.821647][T14687] netdevsim netdevsim2 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1453.832307][T14687] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1453.890334][T14687] netdevsim netdevsim2 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1453.899947][T14687] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1455.240045][T15724] loop7: detected capacity change from 0 to 1024 [ 1455.865260][ T36] hfsplus: b-tree write err: -5, ino 4 [ 1456.700473][T15746] netlink: 1624 bytes leftover after parsing attributes in process `syz.2.2536'. [ 1459.098241][T14692] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1459.106742][T14692] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1459.547196][ T3634] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1459.555845][ T3634] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1460.678281][T15778] loop0: detected capacity change from 0 to 1024 [ 1460.784421][T15778] EXT4-fs (loop0): ext4_check_descriptors: Block bitmap for group 0 overlaps block group descriptors [ 1460.796144][T15778] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (38281!=20869) [ 1460.806503][T15778] EXT4-fs (loop0): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 1460.955207][T15778] EXT4-fs error (device loop0): ext4_get_journal_inode:5800: comm syz.0.2469: inode #1: comm syz.0.2469: iget: illegal inode # [ 1461.064378][T15778] EXT4-fs (loop0): no journal found [ 1461.069835][T15778] EXT4-fs (loop0): can't get journal size [ 1461.194997][T15778] EXT4-fs (loop0): failed to initialize system zone (-22) [ 1461.217397][T15778] EXT4-fs (loop0): mount failed [ 1463.743519][ T1287] ieee802154 phy0 wpan0: encryption failed: -22 [ 1463.750560][ T1287] ieee802154 phy1 wpan1: encryption failed: -22 [ 1464.784397][T15810] input: syz1 as /devices/virtual/input/input7 [ 1465.583501][T15817] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2555'. [ 1465.594720][T15817] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2555'. [ 1465.951526][T15824] overlayfs: failed to clone upperpath [ 1465.956147][T15821] loop0: detected capacity change from 0 to 1024 [ 1466.085319][T15821] EXT4-fs (loop0): ext4_check_descriptors: Block bitmap for group 0 overlaps block group descriptors [ 1466.098163][T15821] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (38281!=20869) [ 1466.108949][T15821] EXT4-fs (loop0): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 1466.181914][T15821] EXT4-fs error (device loop0): ext4_get_journal_inode:5800: comm syz.0.2556: inode #1: comm syz.0.2556: iget: illegal inode # [ 1466.291627][T15821] EXT4-fs (loop0): no journal found [ 1466.297463][T15821] EXT4-fs (loop0): can't get journal size [ 1466.345524][T15821] EXT4-fs (loop0): failed to initialize system zone (-22) [ 1466.466115][T15821] EXT4-fs (loop0): mount failed [ 1468.266908][T15847] loop0: detected capacity change from 0 to 1024 [ 1468.821086][T13786] IPVS: starting estimator thread 0... [ 1468.923551][T15858] IPVS: using max 192 ests per chain, 9600 per kthread [ 1469.036852][T14687] hfsplus: b-tree write err: -5, ino 4 [ 1473.261430][T15889] netlink: 92 bytes leftover after parsing attributes in process `syz.0.2577'. [ 1473.272008][T15889] netem: unknown loss type 0 [ 1473.277298][T15889] netem: change failed [ 1473.578898][T15897] overlayfs: failed to clone upperpath [ 1475.447724][T14290] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1475.475406][T14290] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1475.487288][T14290] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1475.520906][T14290] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1475.534117][T14290] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1476.401294][T15930] netlink: 92 bytes leftover after parsing attributes in process `syz.4.2593'. [ 1476.410722][T15930] netem: unknown loss type 0 [ 1476.416188][T15930] netem: change failed [ 1477.120385][T15941] overlayfs: failed to clone upperpath [ 1477.368316][T15921] chnl_net:caif_netlink_parms(): no params data found [ 1477.383675][T13786] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 1477.623036][T13786] usb 1-1: config 0 has an invalid interface number: 229 but max is 0 [ 1477.631785][T13786] usb 1-1: config 0 has no interface number 0 [ 1477.638674][T13786] usb 1-1: New USB device found, idVendor=0dfc, idProduct=0001, bcdDevice= c.19 [ 1477.649498][T13786] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1477.673195][T14290] Bluetooth: hci1: command tx timeout [ 1477.741982][T13786] usb 1-1: config 0 descriptor?? [ 1477.996422][T13786] usb 1-1: USB disconnect, device number 8 [ 1479.501880][T15921] bridge0: port 1(bridge_slave_0) entered blocking state [ 1479.509940][T15921] bridge0: port 1(bridge_slave_0) entered disabled state [ 1479.517860][T15921] bridge_slave_0: entered allmulticast mode [ 1479.526803][T15921] bridge_slave_0: entered promiscuous mode [ 1479.677583][T15921] bridge0: port 2(bridge_slave_1) entered blocking state [ 1479.685480][T15921] bridge0: port 2(bridge_slave_1) entered disabled state [ 1479.693608][T15921] bridge_slave_1: entered allmulticast mode [ 1479.703958][T15921] bridge_slave_1: entered promiscuous mode [ 1479.727418][T14290] Bluetooth: hci1: command tx timeout [ 1480.264049][T15921] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1480.292358][T15921] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1480.708153][T15973] input: syz1 as /devices/virtual/input/input8 [ 1480.720914][T15921] team0: Port device team_slave_0 added [ 1480.826528][T15921] team0: Port device team_slave_1 added [ 1481.178905][T15977] netlink: 580 bytes leftover after parsing attributes in process `syz.2.2607'. [ 1481.188914][T15977] netlink: 580 bytes leftover after parsing attributes in process `syz.2.2607'. [ 1481.329255][T15921] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1481.339441][T15921] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1481.367713][T15921] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1481.526164][T15921] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1481.534388][T15921] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1481.562567][T15921] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1481.794017][T14290] Bluetooth: hci1: command tx timeout [ 1481.887284][T15983] overlayfs: failed to clone upperpath [ 1482.369869][T15921] hsr_slave_0: entered promiscuous mode [ 1482.381405][T15921] hsr_slave_1: entered promiscuous mode [ 1482.390034][T15921] debugfs: 'hsr0' already exists in 'hsr' [ 1482.396125][T15921] Cannot create hsr debugfs directory [ 1483.681389][T15992] loop0: detected capacity change from 0 to 1024 [ 1483.794217][T15992] EXT4-fs (loop0): ext4_check_descriptors: Block bitmap for group 0 overlaps block group descriptors [ 1483.806349][T15992] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (38281!=20869) [ 1483.817657][T15992] EXT4-fs (loop0): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 1483.924943][T14290] Bluetooth: hci1: command tx timeout [ 1484.073848][T15992] EXT4-fs error (device loop0): ext4_get_journal_inode:5800: comm syz.0.2611: inode #1: comm syz.0.2611: iget: illegal inode # [ 1484.174076][T15992] EXT4-fs (loop0): no journal found [ 1484.179862][T15992] EXT4-fs (loop0): can't get journal size [ 1484.256556][T15992] EXT4-fs (loop0): failed to initialize system zone (-22) [ 1484.287850][T15992] EXT4-fs (loop0): mount failed [ 1485.495220][T15921] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 1485.584631][T15921] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 1485.679897][T15921] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 1485.774836][T15921] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 1485.980630][T16011] netlink: 580 bytes leftover after parsing attributes in process `syz.4.2617'. [ 1485.990447][T16011] netlink: 580 bytes leftover after parsing attributes in process `syz.4.2617'. [ 1486.275861][ T8098] Bluetooth: hci4: command 0x0406 tx timeout [ 1486.736155][T16017] overlayfs: failed to clone upperpath [ 1487.131177][T15921] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1487.361624][T15921] 8021q: adding VLAN 0 to HW filter on device team0 [ 1487.490776][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 1487.498560][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1487.623536][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 1487.631114][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1487.839515][T16028] loop0: detected capacity change from 0 to 1024 [ 1488.525006][ T4049] hfsplus: b-tree write err: -5, ino 4 [ 1489.332050][T16046] netlink: 580 bytes leftover after parsing attributes in process `syz.4.2628'. [ 1489.341910][T16046] netlink: 580 bytes leftover after parsing attributes in process `syz.4.2628'. [ 1490.051083][T16054] overlayfs: failed to clone upperpath [ 1490.219470][T15921] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1492.727358][ T8098] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1492.740901][ T8098] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1492.764025][ T8098] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1492.807845][ T8098] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1492.823793][ T8098] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1493.476751][T16085] fuse: Bad value for 'fd' [ 1493.552269][T15921] veth0_vlan: entered promiscuous mode [ 1493.801572][T15921] veth1_vlan: entered promiscuous mode [ 1494.194184][T15921] veth0_macvtap: entered promiscuous mode [ 1494.382578][T15921] veth1_macvtap: entered promiscuous mode [ 1494.639900][T15921] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1494.767083][T15921] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1494.904809][T14687] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1494.918472][ T8098] Bluetooth: hci4: command tx timeout [ 1494.975733][T14687] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1495.017820][T14687] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1495.087340][T14687] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1495.097724][T16081] chnl_net:caif_netlink_parms(): no params data found [ 1495.300267][T16097] netlink: 536 bytes leftover after parsing attributes in process `syz.4.2640'. [ 1495.309992][T16097] netlink: 536 bytes leftover after parsing attributes in process `syz.4.2640'. [ 1496.066767][T16103] overlayfs: failed to clone upperpath [ 1496.993473][ T8098] Bluetooth: hci4: command tx timeout [ 1497.160138][T16081] bridge0: port 1(bridge_slave_0) entered blocking state [ 1497.168043][T16081] bridge0: port 1(bridge_slave_0) entered disabled state [ 1497.178480][T16081] bridge_slave_0: entered allmulticast mode [ 1497.188913][T16081] bridge_slave_0: entered promiscuous mode [ 1497.356232][T16081] bridge0: port 2(bridge_slave_1) entered blocking state [ 1497.364352][T16081] bridge0: port 2(bridge_slave_1) entered disabled state [ 1497.372342][T16081] bridge_slave_1: entered allmulticast mode [ 1497.383017][T16081] bridge_slave_1: entered promiscuous mode [ 1497.547340][T16124] fuse: Bad value for 'fd' [ 1497.951276][T16081] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1498.057770][T16081] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1498.521114][T16138] netlink: 536 bytes leftover after parsing attributes in process `syz.0.2650'. [ 1498.530758][T16138] netlink: 536 bytes leftover after parsing attributes in process `syz.0.2650'. [ 1498.586375][T16081] team0: Port device team_slave_0 added [ 1498.655892][T16081] team0: Port device team_slave_1 added [ 1499.082156][ T8098] Bluetooth: hci4: command tx timeout [ 1499.101198][T16081] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1499.108795][T16081] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1499.135425][T16081] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1499.195105][T16081] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1499.202367][T16081] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1499.230064][T16081] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1499.491119][T16147] loop0: detected capacity change from 0 to 1024 [ 1500.014373][T16081] hsr_slave_0: entered promiscuous mode [ 1500.027578][T16081] hsr_slave_1: entered promiscuous mode [ 1500.038625][T16081] debugfs: 'hsr0' already exists in 'hsr' [ 1500.045395][T16081] Cannot create hsr debugfs directory [ 1500.139793][T14687] hfsplus: b-tree write err: -5, ino 4 [ 1500.993818][T16159] loop0: detected capacity change from 0 to 1024 [ 1501.100283][T16159] EXT4-fs (loop0): ext4_check_descriptors: Block bitmap for group 0 overlaps block group descriptors [ 1501.112010][T16159] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (38281!=20869) [ 1501.122236][T16159] EXT4-fs (loop0): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 1501.154117][ T8098] Bluetooth: hci4: command tx timeout [ 1501.163796][T16165] fuse: Bad value for 'fd' [ 1501.295495][T16159] EXT4-fs error (device loop0): ext4_get_journal_inode:5800: comm syz.0.2656: inode #1: comm syz.0.2656: iget: illegal inode # [ 1501.388831][T16159] EXT4-fs (loop0): no journal found [ 1501.395056][T16159] EXT4-fs (loop0): can't get journal size [ 1501.413606][T16159] EXT4-fs (loop0): failed to initialize system zone (-22) [ 1501.533536][T16159] EXT4-fs (loop0): mount failed [ 1502.665087][T16181] netlink: 536 bytes leftover after parsing attributes in process `syz.0.2661'. [ 1502.674726][T16181] netlink: 536 bytes leftover after parsing attributes in process `syz.0.2661'. [ 1502.804102][T16081] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 1502.871124][T16081] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 1502.955594][T16081] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 1503.074554][T16081] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 1503.653754][T16193] loop0: detected capacity change from 0 to 1024 [ 1504.458719][ T3634] hfsplus: b-tree write err: -5, ino 4 [ 1504.792994][T16081] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1504.953179][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1504.961517][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1505.137768][T16081] 8021q: adding VLAN 0 to HW filter on device team0 [ 1505.252485][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 1505.260179][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1505.303106][ T4049] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1505.311724][ T4049] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1505.333487][T13786] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 1505.468099][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 1505.475827][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1505.607832][T13786] usb 1-1: Using ep0 maxpacket: 16 [ 1505.638494][T13786] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1505.753534][T13786] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1505.763176][T13786] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1505.771444][T13786] usb 1-1: Product: syz [ 1505.776411][T13786] usb 1-1: Manufacturer: syz [ 1505.781405][T13786] usb 1-1: SerialNumber: syz [ 1506.655206][T13786] cdc_ncm 1-1:1.0: failed GET_NTB_PARAMETERS [ 1506.661705][T13786] cdc_ncm 1-1:1.0: bind() failure [ 1506.683382][T13786] cdc_ncm 1-1:1.1: CDC Union missing and no IAD found [ 1506.690537][T13786] cdc_ncm 1-1:1.1: bind() failure [ 1506.960775][T16221] netlink: 580 bytes leftover after parsing attributes in process `syz.4.2672'. [ 1506.970575][T16221] netlink: 580 bytes leftover after parsing attributes in process `syz.4.2672'. [ 1508.288540][ T5905] usb 1-1: USB disconnect, device number 9 [ 1508.434461][T16081] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1508.660830][T16235] loop8: detected capacity change from 0 to 1024 [ 1508.933360][ T30] audit: type=1800 audit(1757346228.250:95): pid=16241 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.2677" name="/" dev="9p" ino=2 res=0 errno=0 [ 1509.260483][T16081] veth0_vlan: entered promiscuous mode [ 1509.415666][T16081] veth1_vlan: entered promiscuous mode [ 1509.473689][ T3982] hfsplus: b-tree write err: -5, ino 4 [ 1509.918360][T16081] veth0_macvtap: entered promiscuous mode [ 1510.028694][T16081] veth1_macvtap: entered promiscuous mode [ 1510.441656][T16081] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1510.586319][T16081] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1510.834989][ T4049] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1510.898059][ T4049] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1510.976213][ T4049] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1511.054559][ T4049] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1511.700774][T16257] loop0: detected capacity change from 0 to 1024 [ 1511.823557][T16257] EXT4-fs (loop0): ext4_check_descriptors: Block bitmap for group 0 overlaps block group descriptors [ 1511.835097][T16257] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (38281!=20869) [ 1511.845519][T16257] EXT4-fs (loop0): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 1511.943453][T16257] EXT4-fs error (device loop0): ext4_get_journal_inode:5800: comm syz.0.2681: inode #1: comm syz.0.2681: iget: illegal inode # [ 1512.025519][T16257] EXT4-fs (loop0): no journal found [ 1512.031066][T16257] EXT4-fs (loop0): can't get journal size [ 1512.119551][T16257] EXT4-fs (loop0): failed to initialize system zone (-22) [ 1512.151296][T16257] EXT4-fs (loop0): mount failed [ 1512.505339][T16265] netlink: 580 bytes leftover after parsing attributes in process `syz.8.2683'. [ 1512.515593][T16265] netlink: 580 bytes leftover after parsing attributes in process `syz.8.2683'. [ 1515.774825][T16311] netlink: 580 bytes leftover after parsing attributes in process `syz.0.2695'. [ 1515.784791][T16311] netlink: 580 bytes leftover after parsing attributes in process `syz.0.2695'. [ 1517.426470][T16331] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 1517.436685][T16331] block device autoloading is deprecated and will be removed. [ 1519.399132][T16358] netlink: 580 bytes leftover after parsing attributes in process `syz.8.2708'. [ 1519.408874][T16358] netlink: 580 bytes leftover after parsing attributes in process `syz.8.2708'. [ 1519.490288][T16356] loop0: detected capacity change from 0 to 1024 [ 1519.594096][T16356] EXT4-fs (loop0): ext4_check_descriptors: Block bitmap for group 0 overlaps block group descriptors [ 1519.606034][T16356] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (38281!=20869) [ 1519.616283][T16356] EXT4-fs (loop0): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 1519.726688][T16356] EXT4-fs error (device loop0): ext4_get_journal_inode:5800: comm syz.0.2707: inode #1: comm syz.0.2707: iget: illegal inode # [ 1519.784407][T16356] EXT4-fs (loop0): no journal found [ 1519.789963][T16356] EXT4-fs (loop0): can't get journal size [ 1519.824377][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1519.833371][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1519.885379][T16356] EXT4-fs (loop0): failed to initialize system zone (-22) [ 1519.954240][T16356] EXT4-fs (loop0): mount failed [ 1520.287200][ T1125] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1520.295735][ T1125] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1520.508796][T16368] loop8: detected capacity change from 0 to 1024 [ 1520.622521][T16368] hfsplus: Bad value for 'gid' [ 1521.371612][T16378] loop3: detected capacity change from 0 to 1024 [ 1521.843104][T16385] loop8: detected capacity change from 0 to 1024 [ 1522.143999][T14692] hfsplus: b-tree write err: -5, ino 4 [ 1522.821027][T16399] netlink: 580 bytes leftover after parsing attributes in process `syz.3.2719'. [ 1522.830808][T16399] netlink: 580 bytes leftover after parsing attributes in process `syz.3.2719'. [ 1525.018631][ T36] hfsplus: b-tree write err: -5, ino 4 [ 1525.227714][ T1287] ieee802154 phy0 wpan0: encryption failed: -22 [ 1525.235270][ T1287] ieee802154 phy1 wpan1: encryption failed: -22 [ 1526.442217][T16463] loop3: detected capacity change from 0 to 1024 [ 1526.574835][T16463] EXT4-fs (loop3): ext4_check_descriptors: Block bitmap for group 0 overlaps block group descriptors [ 1526.586601][T16463] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (38281!=20869) [ 1526.603246][T16463] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 1526.711558][T16463] EXT4-fs error (device loop3): ext4_get_journal_inode:5800: comm syz.3.2723: inode #1: comm syz.3.2723: iget: illegal inode # [ 1526.843543][T16463] EXT4-fs (loop3): no journal found [ 1526.849258][T16463] EXT4-fs (loop3): can't get journal size [ 1526.954339][T16463] EXT4-fs (loop3): failed to initialize system zone (-22) [ 1527.013688][T14700] bridge_slave_1: left allmulticast mode [ 1527.020166][T14700] bridge_slave_1: left promiscuous mode [ 1527.029449][T14700] bridge0: port 2(bridge_slave_1) entered disabled state [ 1527.070396][T16463] EXT4-fs (loop3): mount failed [ 1527.090772][T14700] bridge_slave_0: left allmulticast mode [ 1527.108537][T14700] bridge_slave_0: left promiscuous mode [ 1527.126903][T14700] bridge0: port 1(bridge_slave_0) entered disabled state [ 1527.774361][T14700] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1527.839641][T14700] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1527.901719][T14700] bond0 (unregistering): Released all slaves [ 1528.925487][T14700] hsr_slave_0: left promiscuous mode [ 1528.956810][T14700] hsr_slave_1: left promiscuous mode [ 1528.965128][T14700] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1529.041344][T14700] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1529.439331][T16483] loop0: detected capacity change from 0 to 1024 [ 1529.796732][T16488] loop8: detected capacity change from 0 to 1024 [ 1530.023016][T14700] team0 (unregistering): Port device team_slave_1 removed [ 1530.237974][T14700] team0 (unregistering): Port device team_slave_0 removed [ 1530.647858][T16495] netlink: 580 bytes leftover after parsing attributes in process `syz.4.2733'. [ 1530.657570][T16495] netlink: 580 bytes leftover after parsing attributes in process `syz.4.2733'. [ 1530.869890][T14706] hfsplus: b-tree write err: -5, ino 4 [ 1530.879165][T14711] hfsplus: b-tree write err: -5, ino 4 [ 1531.393562][T14700] IPVS: stop unused estimator thread 0... [ 1533.213288][T16526] loop3: detected capacity change from 0 to 1024 [ 1533.822816][T16534] netlink: 580 bytes leftover after parsing attributes in process `syz.8.2748'. [ 1533.832175][T16534] netlink: 580 bytes leftover after parsing attributes in process `syz.8.2748'. [ 1534.013955][T14711] hfsplus: b-tree write err: -5, ino 4 [ 1537.945827][T16576] netlink: 580 bytes leftover after parsing attributes in process `syz.0.2762'. [ 1537.957275][T16576] netlink: 580 bytes leftover after parsing attributes in process `syz.0.2762'. [ 1539.144846][T16582] Driver unsupported XDP return value 0 on prog (id 134) dev N/A, expect packet loss! [ 1542.021795][T14711] bridge_slave_1: left allmulticast mode [ 1542.028073][T14711] bridge_slave_1: left promiscuous mode [ 1542.034979][T14711] bridge0: port 2(bridge_slave_1) entered disabled state [ 1542.244039][T14711] bridge_slave_0: left allmulticast mode [ 1542.250641][T14711] bridge_slave_0: left promiscuous mode [ 1542.259377][T14711] bridge0: port 1(bridge_slave_0) entered disabled state [ 1542.314592][T16611] netlink: 580 bytes leftover after parsing attributes in process `syz.2.2773'. [ 1542.324562][T16611] netlink: 580 bytes leftover after parsing attributes in process `syz.2.2773'. [ 1543.036601][T14711] bond1 (unregistering): (slave macvlan2): Releasing active interface [ 1543.169605][T14711] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1543.375368][T14711] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1543.482924][T14711] bond0 (unregistering): Released all slaves [ 1543.509455][T14711] bond1 (unregistering): Released all slaves [ 1544.199183][T14711] tipc: Left network mode [ 1544.570796][T14711] hsr_slave_0: left promiscuous mode [ 1544.603123][T14711] hsr_slave_1: left promiscuous mode [ 1544.610978][T14711] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1544.664990][T14711] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1545.510500][T14711] team0 (unregistering): Port device team_slave_1 removed [ 1545.681705][T14711] team0 (unregistering): Port device team_slave_0 removed [ 1548.514056][T16656] netlink: 580 bytes leftover after parsing attributes in process `syz.2.2786'. [ 1548.523689][T16656] netlink: 580 bytes leftover after parsing attributes in process `syz.2.2786'. [ 1552.144109][T14290] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1552.187423][T14290] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1552.202408][T14290] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1552.266694][T14290] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1552.311275][T14290] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1554.433158][T14290] Bluetooth: hci5: command tx timeout [ 1555.995075][T16706] netlink: 580 bytes leftover after parsing attributes in process `syz.4.2798'. [ 1556.007237][T16706] netlink: 580 bytes leftover after parsing attributes in process `syz.4.2798'. [ 1556.045356][T16680] chnl_net:caif_netlink_parms(): no params data found [ 1556.105525][T11010] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 1556.147484][T11010] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 1556.208333][T11010] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 1556.276196][T11010] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 1556.314948][T11010] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 1556.514792][T11010] Bluetooth: hci5: command tx timeout [ 1557.960205][T11010] Bluetooth: hci3: command 0x0406 tx timeout [ 1558.282940][ T30] audit: type=1326 audit(1757346277.590:96): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16720 comm="syz.4.2800" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf710e539 code=0x7ffc0000 [ 1558.433817][ T8098] Bluetooth: hci6: command tx timeout [ 1558.450211][ T30] audit: type=1326 audit(1757346277.740:97): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16720 comm="syz.4.2800" exe="/root/syz-executor" sig=0 arch=40000003 syscall=14 compat=1 ip=0xf710e539 code=0x7ffc0000 [ 1558.476799][ T30] audit: type=1326 audit(1757346277.740:98): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16720 comm="syz.4.2800" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf710e539 code=0x7ffc0000 [ 1558.499856][ T30] audit: type=1326 audit(1757346277.740:99): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16720 comm="syz.4.2800" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf710e539 code=0x7ffc0000 [ 1558.523324][ T30] audit: type=1326 audit(1757346277.740:100): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16720 comm="syz.4.2800" exe="/root/syz-executor" sig=0 arch=40000003 syscall=182 compat=1 ip=0xf710e539 code=0x7ffc0000 [ 1558.549827][ T30] audit: type=1326 audit(1757346277.740:101): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16720 comm="syz.4.2800" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf710e539 code=0x7ffc0000 [ 1558.574259][ T30] audit: type=1326 audit(1757346277.740:102): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16720 comm="syz.4.2800" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf710e539 code=0x7ffc0000 [ 1558.607808][T16704] chnl_net:caif_netlink_parms(): no params data found [ 1558.640064][ T8098] Bluetooth: hci5: command tx timeout [ 1559.495863][T16680] bridge0: port 1(bridge_slave_0) entered blocking state [ 1559.504825][T16680] bridge0: port 1(bridge_slave_0) entered disabled state [ 1559.512535][T16680] bridge_slave_0: entered allmulticast mode [ 1559.521781][T16680] bridge_slave_0: entered promiscuous mode [ 1560.043616][T16680] bridge0: port 2(bridge_slave_1) entered blocking state [ 1560.051492][T16680] bridge0: port 2(bridge_slave_1) entered disabled state [ 1560.059857][T16680] bridge_slave_1: entered allmulticast mode [ 1560.069074][T16680] bridge_slave_1: entered promiscuous mode [ 1560.543051][ T8098] Bluetooth: hci6: command tx timeout [ 1560.674583][ T8098] Bluetooth: hci5: command tx timeout [ 1561.470647][T16680] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1561.605933][T16680] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1562.083109][T16680] team0: Port device team_slave_0 added [ 1562.185601][T16680] team0: Port device team_slave_1 added [ 1562.593840][ T8098] Bluetooth: hci6: command tx timeout [ 1562.698463][T16680] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1562.706967][T16680] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1562.733533][T16680] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1562.988889][T16680] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1562.996454][T16680] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1563.023952][T16680] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1564.673938][ T8098] Bluetooth: hci6: command tx timeout [ 1564.686161][T16704] bridge0: port 1(bridge_slave_0) entered blocking state [ 1564.698808][T16704] bridge0: port 1(bridge_slave_0) entered disabled state [ 1564.707134][T16704] bridge_slave_0: entered allmulticast mode [ 1564.716261][T16704] bridge_slave_0: entered promiscuous mode [ 1564.798153][T16680] hsr_slave_0: entered promiscuous mode [ 1564.808177][T16680] hsr_slave_1: entered promiscuous mode [ 1564.816594][T16680] debugfs: 'hsr0' already exists in 'hsr' [ 1564.822901][T16680] Cannot create hsr debugfs directory [ 1565.017538][T16704] bridge0: port 2(bridge_slave_1) entered blocking state [ 1565.025869][T16704] bridge0: port 2(bridge_slave_1) entered disabled state [ 1565.034028][T16704] bridge_slave_1: entered allmulticast mode [ 1565.044532][T16704] bridge_slave_1: entered promiscuous mode [ 1566.191488][T16704] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1566.318430][T16704] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1566.504706][T11010] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 1566.522441][T11010] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 1566.543534][T11010] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 1566.640806][T11010] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 1566.659359][T11010] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 1566.998135][T16704] team0: Port device team_slave_0 added [ 1567.096161][T16704] team0: Port device team_slave_1 added [ 1567.989857][T16704] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1567.997779][T16704] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1568.025425][T16704] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1568.176753][T16704] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1568.183991][T16704] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1568.210545][T16704] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1568.276810][T16755] 9pnet_fd: Insufficient options for proto=fd [ 1568.753044][T11010] Bluetooth: hci7: command tx timeout [ 1569.297170][T16704] hsr_slave_0: entered promiscuous mode [ 1569.309075][T16704] hsr_slave_1: entered promiscuous mode [ 1569.327330][T16704] debugfs: 'hsr0' already exists in 'hsr' [ 1569.334660][T16704] Cannot create hsr debugfs directory [ 1570.844639][T11010] Bluetooth: hci7: command tx timeout [ 1570.898268][T16680] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 1570.956790][T16745] chnl_net:caif_netlink_parms(): no params data found [ 1571.012553][T16680] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 1571.132119][T16680] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 1571.357495][T16680] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 1571.904975][T14706] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1572.140888][T14706] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1572.342304][T14706] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1572.468895][T14706] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1572.962084][T11010] Bluetooth: hci7: command tx timeout [ 1573.045954][T14706] bridge_slave_1: left allmulticast mode [ 1573.051866][T14706] bridge_slave_1: left promiscuous mode [ 1573.059303][T14706] bridge0: port 2(bridge_slave_1) entered disabled state [ 1573.075911][T14706] bridge_slave_0: left allmulticast mode [ 1573.081851][T14706] bridge_slave_0: left promiscuous mode [ 1573.096523][T14706] bridge0: port 1(bridge_slave_0) entered disabled state [ 1573.769875][T14706] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1573.805782][T14706] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1573.885857][T14706] bond0 (unregistering): Released all slaves [ 1574.516801][T16781] 9pnet_fd: Insufficient options for proto=fd [ 1574.906069][T14706] hsr_slave_0: left promiscuous mode [ 1574.964502][T14706] hsr_slave_1: left promiscuous mode [ 1574.973629][T14706] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1574.981399][T14706] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1575.007860][T11010] Bluetooth: hci7: command tx timeout [ 1575.015118][T14706] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1575.023405][T14706] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1575.230508][T14706] veth1_macvtap: left promiscuous mode [ 1575.237796][T14706] veth0_macvtap: left promiscuous mode [ 1575.244087][T14706] veth1_vlan: left promiscuous mode [ 1575.250549][T14706] veth0_vlan: left promiscuous mode [ 1577.204225][T14706] team0 (unregistering): Port device team_slave_1 removed [ 1577.339529][T14706] team0 (unregistering): Port device team_slave_0 removed [ 1578.485873][T16745] bridge0: port 1(bridge_slave_0) entered blocking state [ 1578.493824][T16745] bridge0: port 1(bridge_slave_0) entered disabled state [ 1578.501670][T16745] bridge_slave_0: entered allmulticast mode [ 1578.514151][T16745] bridge_slave_0: entered promiscuous mode [ 1578.694132][T16745] bridge0: port 2(bridge_slave_1) entered blocking state [ 1578.701544][T16745] bridge0: port 2(bridge_slave_1) entered disabled state [ 1578.709562][T16745] bridge_slave_1: entered allmulticast mode [ 1578.722031][T16745] bridge_slave_1: entered promiscuous mode [ 1578.893539][T16680] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1579.329530][T16745] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1579.383799][T16704] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 1579.479271][T16745] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1579.509393][T16704] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 1579.731363][T16704] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 1579.771808][T16680] 8021q: adding VLAN 0 to HW filter on device team0 [ 1579.834724][T16704] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 1579.920744][T16745] team0: Port device team_slave_0 added [ 1580.020708][T16745] team0: Port device team_slave_1 added [ 1580.192071][ T1156] bridge0: port 1(bridge_slave_0) entered blocking state [ 1580.200060][ T1156] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1580.379765][ T1156] bridge0: port 2(bridge_slave_1) entered blocking state [ 1580.387358][ T1156] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1580.626462][T16745] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1580.633842][T16745] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1580.660649][T16745] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1580.686427][T16804] 9pnet_fd: Insufficient options for proto=fd [ 1581.082469][T16745] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1581.091096][T16745] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1581.118180][T16745] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1581.344827][T16680] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1582.419073][T16745] hsr_slave_0: entered promiscuous mode [ 1582.430682][T16745] hsr_slave_1: entered promiscuous mode [ 1582.440937][T16745] debugfs: 'hsr0' already exists in 'hsr' [ 1582.447321][T16745] Cannot create hsr debugfs directory [ 1582.832003][T16704] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1583.251844][T16449] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1583.561812][T16449] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1583.767909][T16704] 8021q: adding VLAN 0 to HW filter on device team0 [ 1583.859796][T16449] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1584.039946][T14706] bridge0: port 1(bridge_slave_0) entered blocking state [ 1584.047732][T14706] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1584.119117][T16449] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1584.318344][T14711] bridge0: port 2(bridge_slave_1) entered blocking state [ 1584.326046][T14711] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1584.779492][T16680] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1584.967067][T16449] bridge_slave_1: left allmulticast mode [ 1584.973277][T16449] bridge_slave_1: left promiscuous mode [ 1584.980118][T16449] bridge0: port 2(bridge_slave_1) entered disabled state [ 1585.084176][T16449] bridge_slave_0: left allmulticast mode [ 1585.090195][T16449] bridge_slave_0: left promiscuous mode [ 1585.099289][T16449] bridge0: port 1(bridge_slave_0) entered disabled state [ 1585.748236][T16449] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1585.777598][T16449] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1585.799925][T16449] bond0 (unregistering): Released all slaves [ 1586.626918][ T1287] ieee802154 phy0 wpan0: encryption failed: -22 [ 1586.633956][ T1287] ieee802154 phy1 wpan1: encryption failed: -22 [ 1586.763233][T16449] hsr_slave_0: left promiscuous mode [ 1586.798309][T16449] hsr_slave_1: left promiscuous mode [ 1586.809439][T16449] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1586.817245][T16449] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1586.872339][T16449] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1586.885326][T16449] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1587.004408][T16449] veth1_macvtap: left promiscuous mode [ 1587.011794][T16449] veth0_macvtap: left promiscuous mode [ 1587.018326][T16449] veth1_vlan: left promiscuous mode [ 1587.024198][T16449] veth0_vlan: left promiscuous mode [ 1587.850432][T16449] team0 (unregistering): Port device team_slave_1 removed [ 1588.020015][T16449] team0 (unregistering): Port device team_slave_0 removed [ 1589.398962][T16449] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1589.450738][T16745] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 1589.560462][T16449] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1589.621497][T16745] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 1589.740160][T16449] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1589.787927][T16745] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 1589.920460][T16449] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1589.986006][T16745] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 1590.111040][T16704] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1590.466930][T16680] veth0_vlan: entered promiscuous mode [ 1590.653727][T16680] veth1_vlan: entered promiscuous mode [ 1590.769352][T16449] bridge_slave_1: left allmulticast mode [ 1590.777566][T16449] bridge_slave_1: left promiscuous mode [ 1590.784531][T16449] bridge0: port 2(bridge_slave_1) entered disabled state [ 1590.851871][T16449] bridge_slave_0: left allmulticast mode [ 1590.858091][T16449] bridge_slave_0: left promiscuous mode [ 1590.865085][T16449] bridge0: port 1(bridge_slave_0) entered disabled state [ 1591.490697][T16449] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1591.523995][T16449] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1591.559307][T16449] bond0 (unregistering): Released all slaves [ 1592.346919][T16680] veth0_macvtap: entered promiscuous mode [ 1592.444433][T16680] veth1_macvtap: entered promiscuous mode [ 1592.566128][T16449] hsr_slave_0: left promiscuous mode [ 1592.597021][T16449] hsr_slave_1: left promiscuous mode [ 1592.606103][T16449] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1592.613994][T16449] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1592.629575][T16449] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1592.641321][T16449] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1592.707260][T16449] veth1_macvtap: left promiscuous mode [ 1592.714928][T16449] veth0_macvtap: left promiscuous mode [ 1592.720882][T16449] veth1_vlan: left promiscuous mode [ 1592.726921][T16449] veth0_vlan: left promiscuous mode [ 1593.505711][T16449] team0 (unregistering): Port device team_slave_1 removed [ 1593.606625][T16449] team0 (unregistering): Port device team_slave_0 removed [ 1594.260467][T16680] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1594.388193][T16680] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1594.581122][T14712] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1594.624592][T14711] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1594.675232][T14711] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1594.738554][T16745] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1594.788742][T14711] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1594.944567][T16745] 8021q: adding VLAN 0 to HW filter on device team0 [ 1595.079180][T14706] bridge0: port 1(bridge_slave_0) entered blocking state [ 1595.086894][T14706] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1595.227084][T14706] bridge0: port 2(bridge_slave_1) entered blocking state [ 1595.234911][T14706] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1595.496520][T16704] veth0_vlan: entered promiscuous mode [ 1595.675372][T16704] veth1_vlan: entered promiscuous mode [ 1596.142742][T16704] veth0_macvtap: entered promiscuous mode [ 1596.197874][T16704] veth1_macvtap: entered promiscuous mode [ 1596.489692][T16704] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1596.565887][T16704] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1596.696789][T14706] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1596.754943][T14706] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1596.844204][T14712] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1596.930296][T14712] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1598.249908][T16745] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1598.804492][T16928] netlink: 392 bytes leftover after parsing attributes in process `syz.2.2855'. [ 1598.913430][T16745] veth0_vlan: entered promiscuous mode [ 1598.976246][T16745] veth1_vlan: entered promiscuous mode [ 1599.317031][T16745] veth0_macvtap: entered promiscuous mode [ 1599.384697][T16745] veth1_macvtap: entered promiscuous mode [ 1599.570395][T16745] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1599.682491][T16745] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1599.759605][T14712] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1599.803153][T14712] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1599.839036][T14712] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1599.880293][T14712] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1603.019682][T16449] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1603.028886][T16449] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1603.358861][T16449] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1603.368270][T16449] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1605.680683][ T1125] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1605.688895][ T1125] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1606.001350][T17009] loop9: detected capacity change from 0 to 1024 [ 1606.010126][T14706] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1606.018559][T14706] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1606.091515][T17009] hfsplus: Bad value for 'gid' [ 1608.039673][T16449] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1608.048810][T16449] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1608.285265][T14668] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1608.294506][T14668] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1610.585516][T17059] loop1: detected capacity change from 0 to 1024 [ 1610.620062][T17059] hfsplus: Bad value for 'gid' [ 1612.113223][ T8098] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1612.148999][ T8098] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1612.159339][ T8098] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1612.217214][ T8098] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1612.240060][ T8098] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1613.973923][T17072] chnl_net:caif_netlink_parms(): no params data found [ 1614.357853][ T8098] Bluetooth: hci1: command tx timeout [ 1616.443687][ T8098] Bluetooth: hci1: command tx timeout [ 1616.594859][T17072] bridge0: port 1(bridge_slave_0) entered blocking state [ 1616.602558][T17072] bridge0: port 1(bridge_slave_0) entered disabled state [ 1616.618375][T17072] bridge_slave_0: entered allmulticast mode [ 1616.630125][T17072] bridge_slave_0: entered promiscuous mode [ 1616.760232][T17072] bridge0: port 2(bridge_slave_1) entered blocking state [ 1616.768119][T17072] bridge0: port 2(bridge_slave_1) entered disabled state [ 1616.776550][T17072] bridge_slave_1: entered allmulticast mode [ 1616.786679][T17072] bridge_slave_1: entered promiscuous mode [ 1617.479827][T17072] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1617.663562][T17072] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1618.202339][T17072] team0: Port device team_slave_0 added [ 1618.354549][T17072] team0: Port device team_slave_1 added [ 1618.513525][ T8098] Bluetooth: hci1: command tx timeout [ 1618.894488][T17072] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1618.901749][T17072] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1618.928481][T17072] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1619.359607][T17072] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1619.368029][T17072] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1619.400299][T17072] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1620.389489][T14712] bond0 (unregistering): Released all slaves [ 1620.611641][ T8098] Bluetooth: hci1: command tx timeout [ 1620.980547][T17072] hsr_slave_0: entered promiscuous mode [ 1620.991548][T17072] hsr_slave_1: entered promiscuous mode [ 1621.001120][T17072] debugfs: 'hsr0' already exists in 'hsr' [ 1621.008585][T17072] Cannot create hsr debugfs directory [ 1621.464854][T14712] hsr_slave_0: left promiscuous mode [ 1621.498764][T14712] hsr_slave_1: left promiscuous mode [ 1621.557976][T14712] pim6reg (unregistering): left allmulticast mode [ 1622.915260][T17156] loop6: detected capacity change from 0 to 1024 [ 1623.005066][T17156] hfsplus: Bad value for 'gid' [ 1624.519537][T14712] IPVS: stop unused estimator thread 0... [ 1624.989135][T17172] loop6: detected capacity change from 0 to 1024 [ 1625.056408][T17172] hfsplus: Bad value for 'gid' [ 1626.096674][T17072] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 1626.159421][T17072] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 1626.263796][T17072] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 1626.408949][T17072] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 1628.083154][T17072] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1628.297945][T17072] 8021q: adding VLAN 0 to HW filter on device team0 [ 1628.498833][T14706] bridge0: port 1(bridge_slave_0) entered blocking state [ 1628.506945][T14706] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1628.668935][T14706] bridge0: port 2(bridge_slave_1) entered blocking state [ 1628.676659][T14706] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1631.551279][T17215] loop6: detected capacity change from 0 to 1024 [ 1631.678160][T17215] hfsplus: Bad value for 'gid' [ 1632.380766][T17072] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1635.509967][T17072] veth0_vlan: entered promiscuous mode [ 1635.671038][T17072] veth1_vlan: entered promiscuous mode [ 1636.157779][T17072] veth0_macvtap: entered promiscuous mode [ 1636.267843][T17072] veth1_macvtap: entered promiscuous mode [ 1636.500839][T17072] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1636.646763][T17072] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1636.808373][ T1125] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1636.877727][ T1125] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1636.924591][ T1125] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1636.983614][ T1125] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1644.344347][T17345] input: syz1 as /devices/virtual/input/input9 [ 1644.652877][T17349] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 1645.342473][T14683] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1645.350988][T14683] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1645.703739][T14712] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1645.712010][T14712] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1646.035976][T17365] bond1: entered promiscuous mode [ 1646.041256][T17365] bond1: entered allmulticast mode [ 1646.107293][T17369] loop6: detected capacity change from 0 to 1024 [ 1646.730082][T16449] hfsplus: b-tree write err: -5, ino 4 [ 1647.982429][T17391] input: syz1 as /devices/virtual/input/input10 [ 1648.064271][ T1287] ieee802154 phy0 wpan0: encryption failed: -22 [ 1648.071477][ T1287] ieee802154 phy1 wpan1: encryption failed: -22 [ 1652.773314][T17413] loop9: detected capacity change from 0 to 1024 [ 1653.651849][T14683] hfsplus: b-tree write err: -5, ino 4 [ 1657.547473][T17441] input: syz1 as /devices/virtual/input/input11 [ 1664.596102][T11010] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1664.623985][T11010] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1664.639492][T11010] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1664.693967][T11010] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1664.723035][T11010] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1666.863112][ T8098] Bluetooth: hci0: command tx timeout [ 1667.524293][T17481] chnl_net:caif_netlink_parms(): no params data found [ 1668.920419][ T8098] Bluetooth: hci0: command tx timeout [ 1669.396364][T16449] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1669.772484][T16449] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1670.041842][T16449] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1670.111966][T17481] bridge0: port 1(bridge_slave_0) entered blocking state [ 1670.120160][T17481] bridge0: port 1(bridge_slave_0) entered disabled state [ 1670.128117][T17481] bridge_slave_0: entered allmulticast mode [ 1670.137014][T17481] bridge_slave_0: entered promiscuous mode [ 1670.251914][T16449] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1670.376982][T17481] bridge0: port 2(bridge_slave_1) entered blocking state [ 1670.384780][T17481] bridge0: port 2(bridge_slave_1) entered disabled state [ 1670.393051][T17481] bridge_slave_1: entered allmulticast mode [ 1670.403141][T17481] bridge_slave_1: entered promiscuous mode [ 1671.010116][ T8098] Bluetooth: hci0: command tx timeout [ 1671.097021][T16449] bridge_slave_1: left allmulticast mode [ 1671.103664][T16449] bridge_slave_1: left promiscuous mode [ 1671.110558][T16449] bridge0: port 2(bridge_slave_1) entered disabled state [ 1671.188732][T16449] bridge_slave_0: left allmulticast mode [ 1671.195101][T16449] bridge_slave_0: left promiscuous mode [ 1671.201792][T16449] bridge0: port 1(bridge_slave_0) entered disabled state [ 1672.417284][T16449] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1672.510865][T16449] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1672.580847][T16449] bond0 (unregistering): Released all slaves [ 1672.739570][T17481] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1672.851156][T17481] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1673.073521][ T8098] Bluetooth: hci0: command tx timeout [ 1673.501504][T17481] team0: Port device team_slave_0 added [ 1673.610162][T17481] team0: Port device team_slave_1 added [ 1673.697101][T16449] hsr_slave_0: left promiscuous mode [ 1673.706826][T16449] hsr_slave_1: left promiscuous mode [ 1673.716609][T16449] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1673.726206][T16449] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1673.738016][T16449] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1673.748054][T16449] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1673.863912][T16449] veth1_macvtap: left promiscuous mode [ 1673.869990][T16449] veth0_macvtap: left promiscuous mode [ 1673.877106][T16449] veth1_vlan: left promiscuous mode [ 1673.883000][T16449] veth0_vlan: left promiscuous mode [ 1674.506781][T17545] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1674.517128][T17545] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1674.539627][T17545] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1674.573999][T17545] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1674.596705][T17545] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1675.371845][T16449] team0 (unregistering): Port device team_slave_1 removed [ 1675.516611][T16449] team0 (unregistering): Port device team_slave_0 removed [ 1675.796560][T11010] Bluetooth: hci5: command 0x0406 tx timeout [ 1676.156347][T17553] loop4: detected capacity change from 0 to 1024 [ 1676.477225][T17558] tmpfs: Bad value for 'mpol' [ 1676.756486][ T8098] Bluetooth: hci3: command tx timeout [ 1676.830576][T17481] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1676.837979][T17481] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1676.866497][T17481] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1677.118205][T17481] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1677.130324][T17481] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1677.158768][T17481] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1677.182116][ T1125] hfsplus: b-tree write err: -5, ino 4 [ 1677.722859][T17566] loop1: detected capacity change from 0 to 1024 [ 1678.063593][T17481] hsr_slave_0: entered promiscuous mode [ 1678.076375][T17481] hsr_slave_1: entered promiscuous mode [ 1678.391579][T14700] hfsplus: b-tree write err: -5, ino 4 [ 1678.833511][ T8098] Bluetooth: hci3: command tx timeout [ 1679.567162][T17544] chnl_net:caif_netlink_parms(): no params data found [ 1680.916623][ T8098] Bluetooth: hci3: command tx timeout [ 1683.024116][ T8098] Bluetooth: hci3: command tx timeout [ 1684.105484][T17481] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 1684.279763][T17481] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 1684.448341][T17481] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 1684.650772][T17481] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 1685.600723][T17544] bridge0: port 1(bridge_slave_0) entered blocking state [ 1685.609094][T17544] bridge0: port 1(bridge_slave_0) entered disabled state [ 1685.617251][T17544] bridge_slave_0: entered allmulticast mode [ 1685.633520][T17544] bridge_slave_0: entered promiscuous mode [ 1685.976953][T17544] bridge0: port 2(bridge_slave_1) entered blocking state [ 1685.984665][T17544] bridge0: port 2(bridge_slave_1) entered disabled state [ 1685.992474][T17544] bridge_slave_1: entered allmulticast mode [ 1686.001637][T17544] bridge_slave_1: entered promiscuous mode [ 1686.058432][T17613] loop1: detected capacity change from 0 to 1024 [ 1686.161389][T17613] EXT4-fs (loop1): ext4_check_descriptors: Block bitmap for group 0 overlaps block group descriptors [ 1686.173308][T17613] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (38281!=20869) [ 1686.183643][T17613] EXT4-fs (loop1): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 1686.327012][T17613] EXT4-fs error (device loop1): ext4_get_journal_inode:5800: comm syz.1.3021: inode #1: comm syz.1.3021: iget: illegal inode # [ 1686.463509][T17613] EXT4-fs (loop1): no journal found [ 1686.468955][T17613] EXT4-fs (loop1): can't get journal size [ 1686.662752][T17613] EXT4-fs (loop1): failed to initialize system zone (-22) [ 1686.715534][T17613] EXT4-fs (loop1): mount failed [ 1686.742278][T17544] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1686.884686][T17544] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1687.499460][T17544] team0: Port device team_slave_0 added [ 1687.621906][T17544] team0: Port device team_slave_1 added [ 1688.011237][T17544] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1688.018771][T17544] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1688.046019][T17544] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1688.085755][T17481] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1688.266958][T17481] 8021q: adding VLAN 0 to HW filter on device team0 [ 1688.305052][T17544] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1688.312229][T17544] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1688.339534][T17544] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1688.437571][T14666] bridge0: port 1(bridge_slave_0) entered blocking state [ 1688.445419][T14666] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1688.611219][T14666] bridge0: port 2(bridge_slave_1) entered blocking state [ 1688.619332][T14666] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1689.351617][T17544] hsr_slave_0: entered promiscuous mode [ 1689.361151][T17544] hsr_slave_1: entered promiscuous mode [ 1689.369526][T17544] debugfs: 'hsr0' already exists in 'hsr' [ 1689.375587][T17544] Cannot create hsr debugfs directory [ 1689.453308][T17639] loop1: detected capacity change from 0 to 1024 [ 1690.367910][T14711] hfsplus: b-tree write err: -5, ino 4 [ 1691.084044][T11010] Bluetooth: hci7: command 0x0406 tx timeout [ 1692.629571][T17544] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 1692.787078][T17544] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 1692.967794][T17544] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 1693.136181][T17544] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 1693.259391][T17481] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1693.484342][ T5905] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 1693.762940][ T5905] usb 5-1: Using ep0 maxpacket: 16 [ 1693.796524][ T5905] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1693.807313][ T5905] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 1693.824506][ T5905] usb 5-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00 [ 1693.835160][ T5905] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1694.079019][ T5905] usb 5-1: config 0 descriptor?? [ 1694.203412][ T5905] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 1694.890566][T17679] befs: (nullb0): No write support. Marking filesystem read-only [ 1694.899342][T17679] befs: (nullb0): invalid magic header [ 1695.153393][T17544] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1695.556381][T17544] 8021q: adding VLAN 0 to HW filter on device team0 [ 1695.590554][T16449] bridge0: port 1(bridge_slave_0) entered blocking state [ 1695.598341][T16449] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1695.731625][T16449] bridge0: port 2(bridge_slave_1) entered blocking state [ 1695.739296][T16449] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1696.659839][ T5905] usb 5-1: USB disconnect, device number 11 [ 1697.260101][T14666] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1697.419696][T17690] loop4: detected capacity change from 0 to 1024 [ 1697.520284][T14666] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1697.774793][T14666] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1698.041723][T14666] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1698.248594][T16449] hfsplus: b-tree write err: -5, ino 4 [ 1699.085557][T14666] bridge_slave_1: left allmulticast mode [ 1699.091459][T14666] bridge_slave_1: left promiscuous mode [ 1699.100033][T14666] bridge0: port 2(bridge_slave_1) entered disabled state [ 1699.266514][T14666] bridge_slave_0: left allmulticast mode [ 1699.272418][T14666] bridge_slave_0: left promiscuous mode [ 1699.279690][T14666] bridge0: port 1(bridge_slave_0) entered disabled state [ 1699.919032][T14666] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1699.941964][T14666] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1699.999561][T14666] bond0 (unregistering): Released all slaves [ 1700.020853][T14666] bond1 (unregistering): Released all slaves [ 1700.157011][T17481] veth0_vlan: entered promiscuous mode [ 1700.380689][T17481] veth1_vlan: entered promiscuous mode [ 1700.555412][T17713] mac80211_hwsim hwsim42 wlan1: entered allmulticast mode [ 1700.871511][T17544] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1701.068928][T14666] hsr_slave_0: left promiscuous mode [ 1701.100016][T14666] hsr_slave_1: left promiscuous mode [ 1701.108555][T14666] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1701.116367][T14666] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1701.223302][T14666] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1701.230939][T14666] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1701.335248][T17718] 9pnet_fd: Insufficient options for proto=fd [ 1701.377244][T14666] veth1_macvtap: left promiscuous mode [ 1701.383253][T14666] veth0_macvtap: left promiscuous mode [ 1701.389229][T14666] veth1_vlan: left promiscuous mode [ 1701.397739][T14666] veth0_vlan: left promiscuous mode [ 1702.440768][T14666] team0 (unregistering): Port device team_slave_1 removed [ 1702.467894][T14666] team0 (unregistering): Port device team_slave_0 removed [ 1703.328801][T17481] veth0_macvtap: entered promiscuous mode [ 1703.487575][T17481] veth1_macvtap: entered promiscuous mode [ 1703.765426][T17481] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1703.885784][T17481] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1704.050609][T14712] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1704.164246][T14712] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1704.211091][T14712] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1704.244378][T14712] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1705.478280][T17544] veth0_vlan: entered promiscuous mode [ 1705.581939][T17544] veth1_vlan: entered promiscuous mode [ 1706.078265][T17544] veth0_macvtap: entered promiscuous mode [ 1706.198472][T17544] veth1_macvtap: entered promiscuous mode [ 1706.438876][T17544] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1706.634839][T17544] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1706.874160][T14706] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1706.975439][T14706] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1707.035100][T14706] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1707.131208][T14668] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1708.232286][T11010] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1708.271856][T11010] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1708.289788][T11010] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1708.322871][T11010] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1708.339974][T11010] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1709.529958][ T1287] ieee802154 phy0 wpan0: encryption failed: -22 [ 1709.537748][ T1287] ieee802154 phy1 wpan1: encryption failed: -22 [ 1709.659784][T17788] 9pnet_fd: Insufficient options for proto=fd [ 1710.009040][T17770] chnl_net:caif_netlink_parms(): no params data found [ 1710.433482][ T8098] Bluetooth: hci4: command tx timeout [ 1712.299328][T17770] bridge0: port 1(bridge_slave_0) entered blocking state [ 1712.308027][T17770] bridge0: port 1(bridge_slave_0) entered disabled state [ 1712.316159][T17770] bridge_slave_0: entered allmulticast mode [ 1712.325063][T17770] bridge_slave_0: entered promiscuous mode [ 1712.476769][T17770] bridge0: port 2(bridge_slave_1) entered blocking state [ 1712.484373][T17770] bridge0: port 2(bridge_slave_1) entered disabled state [ 1712.492028][T17770] bridge_slave_1: entered allmulticast mode [ 1712.501242][T17770] bridge_slave_1: entered promiscuous mode [ 1712.534920][ T8098] Bluetooth: hci4: command tx timeout [ 1712.647595][T17770] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1712.710755][T17770] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1713.042080][T17770] team0: Port device team_slave_0 added [ 1713.226942][T17770] team0: Port device team_slave_1 added [ 1713.949104][T17770] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1713.961345][T17770] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1713.991304][T17770] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1714.173235][T17770] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1714.180501][T17770] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1714.208622][T17770] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1714.606941][ T8098] Bluetooth: hci4: command tx timeout [ 1714.713244][T17770] hsr_slave_0: entered promiscuous mode [ 1714.722393][T17770] hsr_slave_1: entered promiscuous mode [ 1714.730713][T17770] debugfs: 'hsr0' already exists in 'hsr' [ 1714.737046][T17770] Cannot create hsr debugfs directory [ 1715.361554][ T1156] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1715.370291][ T1156] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1715.552164][ T1125] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1715.560463][ T1125] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1716.675856][ T8098] Bluetooth: hci4: command tx timeout [ 1717.719131][T17770] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 1717.938836][T17770] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 1718.040864][T17770] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 1718.168136][T17770] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 1719.244854][ T1156] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1719.256265][ T1156] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1719.756656][ T1125] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1719.765095][ T1125] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1719.957817][T17856] 9pnet_fd: Insufficient options for proto=fd [ 1720.327285][T11010] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1720.359363][T11010] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1720.379393][T11010] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1720.401452][T11010] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1720.448567][T11010] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1720.890138][T17770] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1721.159715][T17770] 8021q: adding VLAN 0 to HW filter on device team0 [ 1721.233802][T14683] bridge0: port 1(bridge_slave_0) entered blocking state [ 1721.241275][T14683] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1721.388791][T14683] bridge0: port 2(bridge_slave_1) entered blocking state [ 1721.396394][T14683] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1722.156575][T17869] loop7: detected capacity change from 0 to 1024 [ 1722.595521][ T8098] Bluetooth: hci5: command tx timeout [ 1723.022001][T14683] hfsplus: b-tree write err: -5, ino 4 [ 1723.664140][T17858] chnl_net:caif_netlink_parms(): no params data found [ 1724.674049][ T8098] Bluetooth: hci5: command tx timeout [ 1725.249666][T17770] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1726.775496][ T8098] Bluetooth: hci5: command tx timeout [ 1726.947006][T14668] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1727.540011][T14668] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1727.674858][T17858] bridge0: port 1(bridge_slave_0) entered blocking state [ 1727.683137][T17858] bridge0: port 1(bridge_slave_0) entered disabled state [ 1727.691110][T17858] bridge_slave_0: entered allmulticast mode [ 1727.701289][T17858] bridge_slave_0: entered promiscuous mode [ 1727.895951][T14668] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1728.158827][T14668] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1728.293685][T17858] bridge0: port 2(bridge_slave_1) entered blocking state [ 1728.301456][T17858] bridge0: port 2(bridge_slave_1) entered disabled state [ 1728.309779][T17858] bridge_slave_1: entered allmulticast mode [ 1728.320010][T17858] bridge_slave_1: entered promiscuous mode [ 1728.846859][ T8098] Bluetooth: hci5: command tx timeout [ 1729.900317][T17858] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1729.901317][T17919] loop5: detected capacity change from 0 to 1024 [ 1729.919812][T14668] bridge_slave_1: left allmulticast mode [ 1729.925903][T14668] bridge_slave_1: left promiscuous mode [ 1729.932796][T14668] bridge0: port 2(bridge_slave_1) entered disabled state [ 1730.100398][T17919] hfsplus: Bad value for 'gid' [ 1730.161476][T14668] bridge_slave_0: left allmulticast mode [ 1730.174608][T14668] bridge_slave_0: left promiscuous mode [ 1730.181393][T14668] bridge0: port 1(bridge_slave_0) entered disabled state [ 1731.101960][T14668] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1731.129123][T14668] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1731.175741][T14668] bond0 (unregistering): Released all slaves [ 1731.346162][T17858] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1732.109814][T17858] team0: Port device team_slave_0 added [ 1732.524386][T17858] team0: Port device team_slave_1 added [ 1733.066142][T14668] hsr_slave_0: left promiscuous mode [ 1733.114138][T14668] hsr_slave_1: left promiscuous mode [ 1733.122838][T14668] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1733.130540][T14668] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1733.203472][T14668] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1733.211217][T14668] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1733.393371][T14668] veth1_macvtap: left promiscuous mode [ 1733.399179][T14668] veth0_macvtap: left promiscuous mode [ 1733.406244][T14668] veth1_vlan: left promiscuous mode [ 1733.411882][T14668] veth0_vlan: left promiscuous mode [ 1734.317855][T14668] team0 (unregistering): Port device team_slave_1 removed [ 1734.341489][T14668] team0 (unregistering): Port device team_slave_0 removed [ 1734.710313][T17858] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1734.718471][T17858] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1734.745134][T17858] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1734.901470][T17770] veth0_vlan: entered promiscuous mode [ 1735.032000][T17770] veth1_vlan: entered promiscuous mode [ 1735.231829][T17858] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1735.240509][T17858] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1735.266962][T17858] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1735.487088][T17770] veth0_macvtap: entered promiscuous mode [ 1735.672164][T14668] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1735.721099][T17770] veth1_macvtap: entered promiscuous mode [ 1736.019393][T14668] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1736.156417][T17858] hsr_slave_0: entered promiscuous mode [ 1736.167546][T17858] hsr_slave_1: entered promiscuous mode [ 1736.176960][T17858] debugfs: 'hsr0' already exists in 'hsr' [ 1736.183096][T17858] Cannot create hsr debugfs directory [ 1736.286080][T14668] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1736.456164][T17770] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1736.521294][T17951] loop5: detected capacity change from 0 to 1024 [ 1736.588577][T17951] hfsplus: Bad value for 'gid' [ 1736.701076][T14668] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1736.877456][T17770] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1737.420496][T14706] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1737.502797][T14706] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1737.658312][ T1125] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1737.694860][T14668] bridge_slave_1: left allmulticast mode [ 1737.700827][T14668] bridge_slave_1: left promiscuous mode [ 1737.707667][T14668] bridge0: port 2(bridge_slave_1) entered disabled state [ 1737.769094][T14668] bridge_slave_0: left allmulticast mode [ 1737.775566][T14668] bridge_slave_0: left promiscuous mode [ 1737.782848][T14668] bridge0: port 1(bridge_slave_0) entered disabled state [ 1737.816030][T14668] bridge_slave_1: left allmulticast mode [ 1737.821841][T14668] bridge_slave_1: left promiscuous mode [ 1737.828425][T14668] bridge0: port 2(bridge_slave_1) entered disabled state [ 1737.904066][T14668] bridge_slave_0: left allmulticast mode [ 1737.910008][T14668] bridge_slave_0: left promiscuous mode [ 1737.916551][T14668] bridge0: port 1(bridge_slave_0) entered disabled state [ 1738.638375][T14668] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1738.702832][T14668] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1738.760644][T14668] bond0 (unregistering): Released all slaves [ 1739.045449][T14668] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1739.108902][T14668] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1739.157569][T14668] bond0 (unregistering): Released all slaves [ 1739.273099][ T1125] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1740.275900][T11010] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1740.332171][T11010] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1740.351086][T11010] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1740.385457][T11010] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1740.438659][T11010] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1742.001815][T14668] hsr_slave_0: left promiscuous mode [ 1742.034734][T14668] hsr_slave_1: left promiscuous mode [ 1742.046466][T14668] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1742.055241][T14668] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1742.155152][T14668] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1742.163248][T14668] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1742.234012][T14668] hsr_slave_0: left promiscuous mode [ 1742.255275][T14668] hsr_slave_1: left promiscuous mode [ 1742.263296][T14668] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1742.276910][T14668] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1742.311747][T14668] veth1_macvtap: left promiscuous mode [ 1742.318545][T14668] veth0_macvtap: left promiscuous mode [ 1742.324496][T14668] veth1_vlan: left promiscuous mode [ 1742.329944][T14668] veth0_vlan: left promiscuous mode [ 1742.617443][ T8098] Bluetooth: hci1: command tx timeout [ 1742.959006][T14668] team0 (unregistering): Port device team_slave_1 removed [ 1742.999260][T14668] team0 (unregistering): Port device team_slave_0 removed [ 1744.245554][T14668] team0 (unregistering): Port device team_slave_1 removed [ 1744.415814][T14668] team0 (unregistering): Port device team_slave_0 removed [ 1744.693149][ T8098] Bluetooth: hci1: command tx timeout [ 1744.710279][T17858] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 1745.000898][T17858] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 1745.296464][T17858] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 1745.390026][T17858] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 1745.529660][T17974] chnl_net:caif_netlink_parms(): no params data found [ 1746.756590][ T8098] Bluetooth: hci1: command tx timeout [ 1746.841387][T17858] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1747.071430][T17858] 8021q: adding VLAN 0 to HW filter on device team0 [ 1747.167964][T14666] bridge0: port 1(bridge_slave_0) entered blocking state [ 1747.175490][T14666] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1747.289329][T14666] bridge0: port 2(bridge_slave_1) entered blocking state [ 1747.296928][T14666] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1748.835125][ T8098] Bluetooth: hci1: command tx timeout [ 1748.998958][T17974] bridge0: port 1(bridge_slave_0) entered blocking state [ 1749.006734][T17974] bridge0: port 1(bridge_slave_0) entered disabled state [ 1749.019347][T17974] bridge_slave_0: entered allmulticast mode [ 1749.029631][T17974] bridge_slave_0: entered promiscuous mode [ 1749.568220][T17974] bridge0: port 2(bridge_slave_1) entered blocking state [ 1749.577235][T17974] bridge0: port 2(bridge_slave_1) entered disabled state [ 1749.585462][T17974] bridge_slave_1: entered allmulticast mode [ 1749.595772][T17974] bridge_slave_1: entered promiscuous mode [ 1750.246376][T17858] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1750.290076][T17974] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1750.400754][T17974] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1750.818943][T17974] team0: Port device team_slave_0 added [ 1750.905850][T17974] team0: Port device team_slave_1 added [ 1751.129589][T17858] veth0_vlan: entered promiscuous mode [ 1751.276346][T17974] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1751.284703][T17974] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1751.311080][T17974] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1751.343399][T17858] veth1_vlan: entered promiscuous mode [ 1751.456014][T17974] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1751.463674][T17974] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1751.491220][T17974] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1751.609839][T17858] veth0_macvtap: entered promiscuous mode [ 1751.666966][T17858] veth1_macvtap: entered promiscuous mode [ 1751.848915][T17858] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1751.926113][T17858] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1752.056971][T14683] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1752.085594][T17974] hsr_slave_0: entered promiscuous mode [ 1752.095099][T17974] hsr_slave_1: entered promiscuous mode [ 1752.103420][T17974] debugfs: 'hsr0' already exists in 'hsr' [ 1752.109270][T17974] Cannot create hsr debugfs directory [ 1752.139806][T14683] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1752.171625][T14683] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1752.188259][T14683] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1755.106554][T17974] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 1755.205827][T17974] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 1755.308833][T17974] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 1755.435119][T17974] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 1757.069205][T17974] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1757.345759][T17974] 8021q: adding VLAN 0 to HW filter on device team0 [ 1757.471411][ T3881] bridge0: port 1(bridge_slave_0) entered blocking state [ 1757.478935][ T3881] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1757.720258][ T3881] bridge0: port 2(bridge_slave_1) entered blocking state [ 1757.727795][ T3881] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1759.025462][T16449] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1759.035152][T16449] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1759.512307][ T3634] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1759.520548][ T3634] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1760.483427][T16775] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 1760.686695][T16775] usb 9-1: Using ep0 maxpacket: 32 [ 1760.745329][T16775] usb 9-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 1760.755473][T16775] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1760.866007][T16775] usb 9-1: config 0 descriptor?? [ 1760.902388][T17974] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1761.045783][T11010] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 1761.067461][T11010] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 1761.099645][T11010] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 1761.128924][T11010] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 1761.148049][T11010] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 1761.651402][T16775] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 1761.709306][T16775] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1761.779653][T16775] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 1761.787820][T16775] usb 9-1: media controller created [ 1761.819458][T18081] ===================================================== [ 1761.828775][T18081] BUG: KMSAN: kernel-infoleak in _copy_to_user+0xcc/0x120 [ 1761.836577][T18081] _copy_to_user+0xcc/0x120 [ 1761.841237][T18081] i2cdev_ioctl_smbus+0x586/0x660 [ 1761.846642][T18081] compat_i2cdev_ioctl+0x48f/0xb40 [ 1761.852128][T18081] __ia32_compat_sys_ioctl+0x7f6/0x1270 [ 1761.858187][T18081] ia32_sys_call+0x2d5f/0x4310 [ 1761.863222][T18081] __do_fast_syscall_32+0xb0/0x150 [ 1761.868508][T18081] do_fast_syscall_32+0x38/0x80 [ 1761.873822][T18081] do_SYSENTER_32+0x1f/0x30 [ 1761.878449][T18081] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1761.885757][T18081] [ 1761.888208][T18081] Uninit was stored to memory at: [ 1761.893712][T18081] __i2c_smbus_xfer+0x254d/0x2f60 [ 1761.898949][T18081] i2c_smbus_xfer+0x31d/0x4d0 [ 1761.904139][T18081] i2cdev_ioctl_smbus+0x4a1/0x660 [ 1761.911746][T18081] compat_i2cdev_ioctl+0x48f/0xb40 [ 1761.917928][T18081] __ia32_compat_sys_ioctl+0x7f6/0x1270 [ 1761.923920][T18081] ia32_sys_call+0x2d5f/0x4310 [ 1761.928852][T18081] __do_fast_syscall_32+0xb0/0x150 [ 1761.935669][T18081] do_fast_syscall_32+0x38/0x80 [ 1761.940655][T18081] do_SYSENTER_32+0x1f/0x30 [ 1761.945447][T18081] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1761.951946][T18081] [ 1761.957465][T18081] Local variable msgbuf1.i created at: [ 1761.964940][T18081] __i2c_smbus_xfer+0x86a/0x2f60 [ 1761.970026][T18081] i2c_smbus_xfer+0x31d/0x4d0 [ 1761.975516][T18081] [ 1761.978129][T18081] Bytes 0-1 of 2 are uninitialized [ 1761.983481][T18081] Memory access of size 2 starts at ffff88804435fc86 [ 1761.990326][T18081] Data copied to user address 0000000080000500 [ 1761.996777][T18081] [ 1761.999254][T18081] CPU: 0 UID: 0 PID: 18081 Comm: syz.8.3052 Not tainted syzkaller #0 PREEMPT(none) [ 1762.009204][T18081] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1762.021585][T18081] ===================================================== [ 1762.029488][T18081] Disabling lock debugging due to kernel taint [ 1762.036750][T18081] Kernel panic - not syncing: kmsan.panic set ... [ 1762.043350][T18081] CPU: 0 UID: 0 PID: 18081 Comm: syz.8.3052 Tainted: G B syzkaller #0 PREEMPT(none) [ 1762.054512][T18081] Tainted: [B]=BAD_PAGE [ 1762.058732][T18081] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1762.068981][T18081] Call Trace: [ 1762.072361][T18081] [ 1762.075488][T18081] __dump_stack+0x26/0x30 [ 1762.080052][T18081] dump_stack_lvl+0x53/0x270 [ 1762.084795][T18081] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 1762.090800][T18081] dump_stack+0x1e/0x25 [ 1762.095137][T18081] vpanic+0x361/0xc50 [ 1762.099294][T18081] panic+0x15d/0x160 [ 1762.103450][T18081] kmsan_report+0x31c/0x320 [ 1762.108102][T18081] ? kmsan_internal_set_shadow_origin+0x79/0x110 [ 1762.114660][T18081] ? kmsan_internal_check_memory+0x1e1/0x230 [ 1762.121169][T18081] ? kmsan_copy_to_user+0xf1/0x190 [ 1762.126517][T18081] ? _copy_to_user+0xcc/0x120 [ 1762.131493][T18081] ? i2cdev_ioctl_smbus+0x586/0x660 [ 1762.136832][T18081] ? compat_i2cdev_ioctl+0x48f/0xb40 [ 1762.142305][T18081] ? __ia32_compat_sys_ioctl+0x7f6/0x1270 [ 1762.148182][T18081] ? ia32_sys_call+0x2d5f/0x4310 [ 1762.153264][T18081] ? __do_fast_syscall_32+0xb0/0x150 [ 1762.158685][T18081] ? do_fast_syscall_32+0x38/0x80 [ 1762.163936][T18081] ? do_SYSENTER_32+0x1f/0x30 [ 1762.168806][T18081] ? entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1762.175490][T18081] ? __pfx_az6027_i2c_xfer+0x10/0x10 [ 1762.180928][T18081] ? __i2c_transfer+0x11cd/0x3110 [ 1762.186205][T18081] ? kmsan_get_metadata+0xfb/0x160 [ 1762.191483][T18081] ? kmsan_internal_set_shadow_origin+0x79/0x110 [ 1762.197964][T18081] ? kmsan_get_metadata+0xfb/0x160 [ 1762.203225][T18081] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 1762.209178][T18081] ? __i2c_smbus_xfer+0x1e93/0x2f60 [ 1762.214509][T18081] ? kmsan_get_metadata+0xfb/0x160 [ 1762.219781][T18081] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 1762.226469][T18081] kmsan_internal_check_memory+0x1e1/0x230 [ 1762.232454][T18081] kmsan_copy_to_user+0xf1/0x190 [ 1762.237596][T18081] _copy_to_user+0xcc/0x120 [ 1762.242238][T18081] i2cdev_ioctl_smbus+0x586/0x660 [ 1762.247442][T18081] compat_i2cdev_ioctl+0x48f/0xb40 [ 1762.252758][T18081] ? __pfx_compat_i2cdev_ioctl+0x10/0x10 [ 1762.258794][T18081] __ia32_compat_sys_ioctl+0x7f6/0x1270 [ 1762.264616][T18081] ? kmsan_get_metadata+0xfb/0x160 [ 1762.269895][T18081] ? kmsan_get_metadata+0xfb/0x160 [ 1762.275149][T18081] ia32_sys_call+0x2d5f/0x4310 [ 1762.280127][T18081] __do_fast_syscall_32+0xb0/0x150 [ 1762.285465][T18081] do_fast_syscall_32+0x38/0x80 [ 1762.290458][T18081] do_SYSENTER_32+0x1f/0x30 [ 1762.295092][T18081] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1762.301696][T18081] RIP: 0023:0xf7fe3539 [ 1762.305860][T18081] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 1762.325717][T18081] RSP: 002b:00000000f54f655c EFLAGS: 00000206 ORIG_RAX: 0000000000000036 [ 1762.334276][T18081] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000000000720 [ 1762.342342][T18081] RDX: 0000000080000540 RSI: 0000000000000000 RDI: 0000000000000000 [ 1762.350932][T18081] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1762.359081][T18081] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1762.367215][T18081] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1762.375424][T18081] [ 1762.378868][T18081] Kernel Offset: disabled [ 1762.383270][T18081] Rebooting in 86400 seconds..