last executing test programs: 14m33.336206873s ago: executing program 32 (id=54): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f00000005c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000580)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x3) 13m35.499860093s ago: executing program 2 (id=160): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0xffffffffffffff2b, 0x0) ioctl$RTC_AIE_ON(0xffffffffffffffff, 0x7001) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000180)='rpc_pipefs\x00', 0x0, 0x0) r3 = socket$kcm(0x10, 0x2, 0x0) recvmsg$kcm(r3, &(0x7f0000000500)={0x0, 0x0, 0x0}, 0x0) move_mount(0xffffffffffffffff, 0x0, 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) 13m32.094721625s ago: executing program 2 (id=161): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}}, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) futex(&(0x7f000000cffc), 0xc, 0x1, 0x0, &(0x7f0000048000)=0x2, 0x0) r3 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f0000000040)=0x1, 0x4) r4 = socket$netlink(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000000940)=ANY=[@ANYBLOB="38000000031401002dbd7000000000000900020073797a30000000000800410073697700140033006c6f000000000000000000000000000020e6e349a6c7f1289e13bf09d33884ce394a86a5b438daeaf9ceadc27b63172391113f5e533880017f548f0e1f98a8f6b48450aea0f0453207f0b31f"], 0x38}, 0x1, 0x0, 0x0, 0x854}, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000280)={0xffffffffffffffff, 0x58, &(0x7f0000000a00)}, 0x10) sendmsg$nl_route_sched(r4, &(0x7f0000000380)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000300)={&(0x7f0000000a80)=@deltfilter={0x278, 0x2d, 0x4, 0x70bd2c, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x8, 0xffe0}, {0x4, 0xfff2}, {0xe, 0x4}}, [@filter_kind_options=@f_matchall={{0xd}, {0x244, 0x2, [@TCA_MATCHALL_ACT={0x240, 0x2, [@m_tunnel_key={0x60, 0x3, 0x0, 0x0, {{0xf}, {0xc, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_ENC_DST_PORT={0x6, 0x9, 0x4e23}]}, {0x28, 0x6, "58533c89d57f8bf9ea6fb3385dbd4c95805238f9a69df77bd8b5ed3530cca9ed4005f9dc"}, {0xc}, {0xc, 0x8, {0x2, 0x3}}}}, @m_skbmod={0xdc, 0x10, 0x0, 0x0, {{0xb}, {0x6c, 0x2, 0x0, 0x1, [@TCA_SKBMOD_DMAC={0xa, 0x3, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1f}}, @TCA_SKBMOD_DMAC={0xa, 0x3, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1e}}, @TCA_SKBMOD_PARMS={0x24, 0x2, {{0x6016, 0x8, 0x10000000, 0x3, 0xd173}, 0xc}}, @TCA_SKBMOD_PARMS={0x24, 0x2, {{0xf, 0x5fb, 0x1, 0x101, 0x67c}, 0x6}}, @TCA_SKBMOD_ETYPE={0x6, 0x5, 0x3}]}, {0x46, 0x6, "30e933f09f3c98d1eb928ad2f390406c5e1ee2b4cee10ae8d97fe5f6d1a406795c3aac540da34c1d2840e1f1599fad629bcf6ef05e2ff74efe644a99f5dc1b081345"}, {0xc}, {0xc, 0x8, {0x3, 0x3}}}}, @m_mpls={0x100, 0x6, 0x0, 0x0, {{0x9}, {0x24, 0x2, 0x0, 0x1, [@TCA_MPLS_TTL={0x5, 0x7, 0xe}, @TCA_MPLS_TTL={0x5, 0x7, 0x80}, @TCA_MPLS_TTL={0x5, 0x7, 0xc}, @TCA_MPLS_TTL={0x5, 0x7, 0x40}]}, {0xb3, 0x6, "886182583d6f7f010c103cffe4d8d59cfd682c80e79a8ba0119bf01d7fb260238d18a13abbb98d44485bbac589922dcf73738ed478bc36aad2e973a30b06a1ea4d0301908f6fb0edad4e3ae0ee1aab8d94cf34d392a7445069ec7e792cfb7bbdef83c4dbc6f4d1fad55f877edbd1052665298793b8c0a3ad33a4d27c7158b8322ad7f8e8325143f0db6f7c5ddbc61e504ade7438dd9ddb2f161766558b00eed910744dce6900a0e2e1dcf54907478a"}, {0xc, 0x7, {0x5a0237ab023b10a8}}, {0xc, 0x8, {0x2, 0x2}}}}]}]}}]}, 0x278}, 0x1, 0x0, 0x0, 0x4808}, 0x880) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) syz_open_procfs(0x0, &(0x7f0000000580)='net/tcp6\x00') bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x11, 0x9, &(0x7f0000000580)=ANY=[@ANYBLOB="180000000200000000000000f800000065600900f0ffffff8520000403000000185200001000000000000000000000009500000000000000950000000000000095000000000000"], &(0x7f0000000640)='syzkaller\x00', 0xfffffff6, 0x71, &(0x7f0000000680)=""/113, 0x41100, 0x20, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000700)={0x0, 0x3}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x7, &(0x7f0000000780)=[0xffffffffffffffff, 0xffffffffffffffff, 0x1], &(0x7f00000007c0)=[{0x4, 0x1, 0x10, 0x9}, {0x0, 0x5, 0x2, 0x3}, {0x0, 0x5, 0xd, 0x6}, {0x3, 0x1, 0xf}, {0x2, 0x2, 0x3, 0x1}, {0x1, 0x4, 0xc, 0x4}, {0x1, 0x3, 0x3, 0x4}], 0x10, 0x0, @void, @value}, 0x94) 13m16.211338393s ago: executing program 33 (id=161): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}}, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) futex(&(0x7f000000cffc), 0xc, 0x1, 0x0, &(0x7f0000048000)=0x2, 0x0) r3 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f0000000040)=0x1, 0x4) r4 = socket$netlink(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000000940)=ANY=[@ANYBLOB="38000000031401002dbd7000000000000900020073797a30000000000800410073697700140033006c6f000000000000000000000000000020e6e349a6c7f1289e13bf09d33884ce394a86a5b438daeaf9ceadc27b63172391113f5e533880017f548f0e1f98a8f6b48450aea0f0453207f0b31f"], 0x38}, 0x1, 0x0, 0x0, 0x854}, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000280)={0xffffffffffffffff, 0x58, &(0x7f0000000a00)}, 0x10) sendmsg$nl_route_sched(r4, &(0x7f0000000380)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000300)={&(0x7f0000000a80)=@deltfilter={0x278, 0x2d, 0x4, 0x70bd2c, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x8, 0xffe0}, {0x4, 0xfff2}, {0xe, 0x4}}, [@filter_kind_options=@f_matchall={{0xd}, {0x244, 0x2, [@TCA_MATCHALL_ACT={0x240, 0x2, [@m_tunnel_key={0x60, 0x3, 0x0, 0x0, {{0xf}, {0xc, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_ENC_DST_PORT={0x6, 0x9, 0x4e23}]}, {0x28, 0x6, "58533c89d57f8bf9ea6fb3385dbd4c95805238f9a69df77bd8b5ed3530cca9ed4005f9dc"}, {0xc}, {0xc, 0x8, {0x2, 0x3}}}}, @m_skbmod={0xdc, 0x10, 0x0, 0x0, {{0xb}, {0x6c, 0x2, 0x0, 0x1, [@TCA_SKBMOD_DMAC={0xa, 0x3, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1f}}, @TCA_SKBMOD_DMAC={0xa, 0x3, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1e}}, @TCA_SKBMOD_PARMS={0x24, 0x2, {{0x6016, 0x8, 0x10000000, 0x3, 0xd173}, 0xc}}, @TCA_SKBMOD_PARMS={0x24, 0x2, {{0xf, 0x5fb, 0x1, 0x101, 0x67c}, 0x6}}, @TCA_SKBMOD_ETYPE={0x6, 0x5, 0x3}]}, {0x46, 0x6, "30e933f09f3c98d1eb928ad2f390406c5e1ee2b4cee10ae8d97fe5f6d1a406795c3aac540da34c1d2840e1f1599fad629bcf6ef05e2ff74efe644a99f5dc1b081345"}, {0xc}, {0xc, 0x8, {0x3, 0x3}}}}, @m_mpls={0x100, 0x6, 0x0, 0x0, {{0x9}, {0x24, 0x2, 0x0, 0x1, [@TCA_MPLS_TTL={0x5, 0x7, 0xe}, @TCA_MPLS_TTL={0x5, 0x7, 0x80}, @TCA_MPLS_TTL={0x5, 0x7, 0xc}, @TCA_MPLS_TTL={0x5, 0x7, 0x40}]}, {0xb3, 0x6, "886182583d6f7f010c103cffe4d8d59cfd682c80e79a8ba0119bf01d7fb260238d18a13abbb98d44485bbac589922dcf73738ed478bc36aad2e973a30b06a1ea4d0301908f6fb0edad4e3ae0ee1aab8d94cf34d392a7445069ec7e792cfb7bbdef83c4dbc6f4d1fad55f877edbd1052665298793b8c0a3ad33a4d27c7158b8322ad7f8e8325143f0db6f7c5ddbc61e504ade7438dd9ddb2f161766558b00eed910744dce6900a0e2e1dcf54907478a"}, {0xc, 0x7, {0x5a0237ab023b10a8}}, {0xc, 0x8, {0x2, 0x2}}}}]}]}}]}, 0x278}, 0x1, 0x0, 0x0, 0x4808}, 0x880) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) syz_open_procfs(0x0, &(0x7f0000000580)='net/tcp6\x00') bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x11, 0x9, &(0x7f0000000580)=ANY=[@ANYBLOB="180000000200000000000000f800000065600900f0ffffff8520000403000000185200001000000000000000000000009500000000000000950000000000000095000000000000"], &(0x7f0000000640)='syzkaller\x00', 0xfffffff6, 0x71, &(0x7f0000000680)=""/113, 0x41100, 0x20, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000700)={0x0, 0x3}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x7, &(0x7f0000000780)=[0xffffffffffffffff, 0xffffffffffffffff, 0x1], &(0x7f00000007c0)=[{0x4, 0x1, 0x10, 0x9}, {0x0, 0x5, 0x2, 0x3}, {0x0, 0x5, 0xd, 0x6}, {0x3, 0x1, 0xf}, {0x2, 0x2, 0x3, 0x1}, {0x1, 0x4, 0xc, 0x4}, {0x1, 0x3, 0x3, 0x4}], 0x10, 0x0, @void, @value}, 0x94) 12m58.012904059s ago: executing program 3 (id=215): r0 = socket$inet_sctp(0x2, 0x1, 0x84) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) r1 = socket$inet_udp(0x2, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) pread64(0xffffffffffffffff, 0x0, 0x0, 0x0) timer_create(0xb, 0x0, &(0x7f00000000c0)) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000000440)={'sit0\x00', &(0x7f0000000400)={'syztnl0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, @loopback, @dev={0xac, 0x14, 0x14, 0x40}}}}}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r1, 0x89f5, &(0x7f00000001c0)={'gretap0\x00', &(0x7f0000000140)={'erspan0\x00', r5, 0x0, 0x0, 0x0, 0x4, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, @dev={0xac, 0x14, 0x14, 0xd}, @multicast2}}}}) sendto$inet(r0, &(0x7f00000000c0)='}', 0x1, 0x4000, 0x0, 0x0) r6 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) listen(r6, 0x0) 12m56.645454706s ago: executing program 3 (id=216): socket$inet_udp(0x2, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) setsockopt$TIPC_GROUP_JOIN(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000180)={0x42, 0x0, 0x2}, 0x10) setsockopt$TIPC_GROUP_LEAVE(0xffffffffffffffff, 0x10f, 0x88) connect$unix(0xffffffffffffffff, &(0x7f0000000300)=@abs, 0x6e) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x503}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_HELLO_TIME={0x8, 0x2, 0x80}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x0) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) ioctl$TCSETSF(r2, 0x5404, &(0x7f0000000040)={0x5, 0xf7af, 0x8000, 0x8, 0x0, "4cb8b210acdc716f64cf76062d59a56f2584c4"}) 12m51.815092486s ago: executing program 3 (id=223): syz_open_procfs(0x0, 0x0) gettid() timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) fstat(r0, &(0x7f0000000440)) r2 = syz_io_uring_setup(0x10c, &(0x7f0000000380)={0x0, 0x5885, 0x10, 0x1}, &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_TIMEOUT={0xb, 0x1, 0x0, 0x0, 0x7, &(0x7f0000000100)={0x0, 0x989680}, 0x1, 0x4, 0x1}) io_uring_enter(r2, 0x3516, 0x0, 0x0, 0x0, 0x0) 12m38.924457977s ago: executing program 3 (id=241): r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0) getsockopt$X25_QBITINCL(r0, 0x106, 0x1, 0x0, &(0x7f0000000200)) r1 = syz_init_net_socket$rose(0xb, 0x5, 0x0) getsockopt$rose(r1, 0x104, 0x3, 0x0, 0x0) socket$kcm(0x10, 0x2, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) socket$inet_dccp(0x2, 0x6, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r3, 0xc0285700, &(0x7f0000000300)={0x0, "4fcb813dd28b42bee2b094a3de6dbfd30a74457bcd1cfd5feffe5c019f45d57f"}) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r4 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x488c0}, 0xc000) writev(r4, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) pselect6(0x40, &(0x7f00000001c0)={0x0, 0xfffffffffffffffd, 0x8000000000000000, 0x4, 0xaf, 0x0, 0x0, 0x8010000000}, 0x0, &(0x7f00000002c0)={0x3ff, 0x7, 0xfffffffffffffffe, 0xc, 0x0, 0x2, 0x4, 0x7}, 0x0, 0x0) r6 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_FILTER(r6, 0x65, 0x1, 0x0, 0x0) bind$can_raw(r6, &(0x7f0000000100), 0x10) sendmsg$NFQNL_MSG_CONFIG(r2, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000540)={0x14, 0x2, 0x3, 0x3, 0x0, 0x0, {0x1, 0x0, 0x9000}}, 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) sendmsg$NFQNL_MSG_VERDICT(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)={0x14, 0x1, 0x3, 0x101}, 0x14}}, 0x0) socket$kcm(0x29, 0x654e7f0ab9470a69, 0x0) sendmsg$kcm(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000100)}, 0x0) 12m29.799508181s ago: executing program 3 (id=248): r0 = socket$inet_sctp(0x2, 0x1, 0x84) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) r1 = socket$inet_udp(0x2, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) pread64(0xffffffffffffffff, 0x0, 0x0, 0x0) timer_create(0xb, 0x0, &(0x7f00000000c0)) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000000440)={'sit0\x00', &(0x7f0000000400)={'syztnl0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, @loopback, @dev={0xac, 0x14, 0x14, 0x40}}}}}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r1, 0x89f5, &(0x7f00000001c0)={'gretap0\x00', &(0x7f0000000140)={'erspan0\x00', r5, 0x0, 0x0, 0x0, 0x4, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, @dev={0xac, 0x14, 0x14, 0xd}, @multicast2}}}}) r6 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bind$bt_sco(r6, &(0x7f0000000040)={0x1f, @fixed}, 0x8) listen(r6, 0x0) 12m28.18374448s ago: executing program 3 (id=250): r0 = syz_open_dev$sg(&(0x7f00000003c0), 0x0, 0x5) socket(0x28, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket(0x10, 0x3, 0x0) r4 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r4, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$SG_IO(r0, 0x2285, 0x0) writev(r0, &(0x7f0000000400)=[{&(0x7f0000000080)="aefdda9d240300005a90f57f07703aeff0f64ebbee07962c22772e11b44e65d76641cb0100", 0x25}, {&(0x7f0000000040)="aa1d484ea0000000f7fc08fcd111fbdf23ea32db0e8f21d5bc27bd49eb067a0689fff2a41cfbf0e9d85e44", 0x2b}], 0x2) 12m11.076108723s ago: executing program 34 (id=250): r0 = syz_open_dev$sg(&(0x7f00000003c0), 0x0, 0x5) socket(0x28, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket(0x10, 0x3, 0x0) r4 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r4, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$SG_IO(r0, 0x2285, 0x0) writev(r0, &(0x7f0000000400)=[{&(0x7f0000000080)="aefdda9d240300005a90f57f07703aeff0f64ebbee07962c22772e11b44e65d76641cb0100", 0x25}, {&(0x7f0000000040)="aa1d484ea0000000f7fc08fcd111fbdf23ea32db0e8f21d5bc27bd49eb067a0689fff2a41cfbf0e9d85e44", 0x2b}], 0x2) 11m33.324079594s ago: executing program 6 (id=324): ioperm(0x7fff, 0x5, 0xd) openat$ptmx(0xffffffffffffff9c, 0x0, 0x20040, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() syz_emit_ethernet(0xbe, &(0x7f0000000300)=ANY=[@ANYBLOB="4857adeeb62ba53a00000000000000004aeee72baeed09467f9999efc635a4458d0799ff21450062d4038aa279b32afa8682197655d7198903cd4c188ffc96cea4085bea17f489a363bb29d6da37da51f07bf628761cb44e7e4534cefbb272f7ec162bf1c159be1cfc1ed92b6b1972e9bb223c61e828baa3a8b4cec73639620f8c6f"], 0x0) syz_emit_ethernet(0x36, &(0x7f0000001800)={@link_local, @dev, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x64, 0x0, 0x0, 0x2, 0x0, @empty, @multicast2}, @timestamp_reply={0x11, 0x0, 0x0, 0xe000, 0x2, 0x2, 0x1000000}}}}}, 0x0) sched_setaffinity(r0, 0xffffffffffffffd0, &(0x7f00000001c0)=0x9) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) prctl$PR_SET_PTRACER(0x59616d61, r0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10141, 0x2, 0x0) socket$l2tp6(0xa, 0x2, 0x73) r3 = socket$inet6(0xa, 0x6, 0x0) r4 = fanotify_init(0x8, 0x1000) fanotify_mark(r4, 0x1, 0x4800003e, 0xffffffffffffffff, 0x0) r5 = syz_open_dev$dri(&(0x7f0000000000), 0x1ff, 0x0) syz_open_dev$dri(0x0, 0x1ff, 0x10000) r6 = mq_open(&(0x7f00005a1ffb)='eth0\x00', 0x42, 0x0, 0x0) mq_notify(r6, &(0x7f0000000100)={0x0, 0x10, 0x1, @thr={0x0, 0x0}}) ioctl$DRM_IOCTL_MODE_CURSOR(r5, 0xc01c64a3, &(0x7f0000000040)={0x3, 0x0, 0x10000000, 0x80000001, 0xb, 0x1fd, 0x1}) close_range(r3, 0xffffffffffffffff, 0x0) fstatfs(0xffffffffffffffff, 0x0) 11m31.274498259s ago: executing program 6 (id=328): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file2\x00', 0x1200000, &(0x7f0000000940)={[{@noblock_validity}, {}, {@sysvgroups}, {@norecovery}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@noquota}, {@nogrpid}, {@noauto_da_alloc}, {@nomblk_io_submit}]}, 0xff, 0x57e, &(0x7f0000001b40)="$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") syz_open_dev$radio(0x0, 0x0, 0x2) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000b80)=ANY=[], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, 0x0, &(0x7f0000001a40), 0x1003, r1}, 0x38) mkdir(&(0x7f0000000dc0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) openat$sysctl(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0) r3 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r4 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r4, 0xc04064a0, 0x0) ioctl$DRM_IOCTL_MODE_GETCRTC(r4, 0xc06864a1, &(0x7f0000000d40)={0x0}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000140)={0x3ff, 0x2, 0x806}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r3, 0xc00c642d, &(0x7f0000000080)) ppoll(&(0x7f0000000080), 0x0, &(0x7f00000000c0)={0x0, 0x989680}, 0x0, 0x0) write$binfmt_script(r0, &(0x7f0000000000), 0x208e24b) 11m27.95018159s ago: executing program 6 (id=335): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001000)=ANY=[@ANYBLOB="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"/2574], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) 11m23.226156369s ago: executing program 6 (id=340): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001000)=ANY=[@ANYBLOB="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"/2574], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) 11m20.525493863s ago: executing program 6 (id=343): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r1 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000040)={0x10000802, 0x80, 0x0, 0x40000}, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[@ANYBLOB="280000005200010004000000000000001c0000001400", @ANYRES16=r0], 0x28}}, 0x0) 11m20.302743826s ago: executing program 6 (id=344): r0 = openat2(0xffffffffffffffff, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)={0x600, 0x2, 0x14}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x5a20}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000440)={@in={{0x2, 0x4e22, @private=0xa010102}}, 0x0, 0x0, 0x1c, 0x0, "1cc2356ea6bf72b17bfdfccb24b0eaff345ecc5dd0bfa45c45e6df86b69b7c8e22260a5b2f08bd3892cc4ebe2516b52a9a8f16cdc22329bcb223753b2efcb35455a86438d065b7a2e858a06dbf2be0ad"}, 0xd8) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) io_uring_setup(0x1cb2, &(0x7f0000000180)={0x0, 0xcc57, 0x2, 0x3, 0x28c}) socket$netlink(0x10, 0x3, 0x4) r3 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) write$dsp(r3, &(0x7f0000000200)='m', 0x1) r4 = syz_open_dev$sndctrl(&(0x7f0000001440), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r4, 0x40045532, &(0x7f0000000100)) r5 = syz_open_dev$sndpcmp(&(0x7f00000001c0), 0x0, 0xa2c65) ioctl$SNDRV_PCM_IOCTL_REWIND(r5, 0xc0844123, &(0x7f0000000180)=0x4) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000900)={0x1, &(0x7f00000008c0)=[{0x1, 0x0, 0x6}]}) accept4$inet6(0xffffffffffffffff, 0x0, 0x0, 0x80800) close_range(r6, 0xffffffffffffffff, 0x0) socket(0x10, 0x80002, 0x0) 11m3.599706763s ago: executing program 35 (id=344): r0 = openat2(0xffffffffffffffff, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)={0x600, 0x2, 0x14}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x5a20}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000440)={@in={{0x2, 0x4e22, @private=0xa010102}}, 0x0, 0x0, 0x1c, 0x0, "1cc2356ea6bf72b17bfdfccb24b0eaff345ecc5dd0bfa45c45e6df86b69b7c8e22260a5b2f08bd3892cc4ebe2516b52a9a8f16cdc22329bcb223753b2efcb35455a86438d065b7a2e858a06dbf2be0ad"}, 0xd8) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) io_uring_setup(0x1cb2, &(0x7f0000000180)={0x0, 0xcc57, 0x2, 0x3, 0x28c}) socket$netlink(0x10, 0x3, 0x4) r3 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) write$dsp(r3, &(0x7f0000000200)='m', 0x1) r4 = syz_open_dev$sndctrl(&(0x7f0000001440), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r4, 0x40045532, &(0x7f0000000100)) r5 = syz_open_dev$sndpcmp(&(0x7f00000001c0), 0x0, 0xa2c65) ioctl$SNDRV_PCM_IOCTL_REWIND(r5, 0xc0844123, &(0x7f0000000180)=0x4) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000900)={0x1, &(0x7f00000008c0)=[{0x1, 0x0, 0x6}]}) accept4$inet6(0xffffffffffffffff, 0x0, 0x0, 0x80800) close_range(r6, 0xffffffffffffffff, 0x0) socket(0x10, 0x80002, 0x0) 7m17.514714437s ago: executing program 0 (id=737): madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) r0 = socket$nl_route(0x10, 0x3, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mkdir(0x0, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = openat$uhid(0xffffffffffffff9c, 0x0, 0x802, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r3 = syz_io_uring_setup(0x497, &(0x7f0000000400)={0x0, 0x707b, 0x0, 0x4, 0x288}, &(0x7f0000000340)=0x0, &(0x7f0000000140)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r4, r5, 0x0) io_uring_enter(r3, 0x3516, 0x0, 0x4, 0x0, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000580)=@deltaction={0x14, 0x18, 0x1, 0x3, 0x25dedbfe, {0xa}}, 0x14}}, 0x0) mount$tmpfs(0x0, &(0x7f0000000000)='./cgroup\x00', &(0x7f0000000140), 0x3200841, 0x0) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) listxattr(0x0, &(0x7f0000000bc0)=""/66, 0x42) sendmsg$NFNL_MSG_CTHELPER_NEW(r6, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000580)={0x14, 0x0, 0x9, 0x3, 0x0, 0x0, {0x3, 0x0, 0x2}}, 0x14}, 0x1, 0x0, 0x0, 0x4010}, 0x800) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x8, 0xc, 0x4, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r8 = socket(0x11, 0x800000003, 0x0) r9 = socket(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r8, 0x8933, 0x0) sendmsg$nl_route_sched(r9, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x0) sendmsg$inet6(r1, &(0x7f0000000540)={&(0x7f0000000180)={0xa, 0x4e21, 0x3, @empty, 0x2564}, 0x1c, &(0x7f00000007c0)=[{&(0x7f0000000640)="93b5896b940c6e9b0735e7d91a4502a0f3cbaf728ac3963cebb52246ea881c98b6cb784f8c42b46194e4b5f968d4ce1de585ebb80f02ecc7a6f36a834c053375d9bf92a44c7303da4055ce390d77c845a8f1f049ab152a89f7d5ea6e94fafceffce1f65ce5b827604b3c64c59c01e26deb6f23b81e3d74a806dd69fa5aa25c5f5ce6", 0x82}, {0x0}, {0x0}, {0x0}], 0x4, &(0x7f0000000940)=[@tclass={{0x14, 0x29, 0x43, 0x9}}, @hopopts={{0xf0, 0x29, 0x36, {0x68, 0x1a, '\x00', [@generic={0x0, 0xd2, "f3671c954454021a30d6f6da4ad6e7c4ad3ba5068228c77bf1f869fbb8d3afe82782161343e76d989510d20d4501298588504a82764796eb2cabf1a12d36be20df7dbb9600c16f4469821db7f86e6407d475868ffc913a6c541a8b82c7978bae8685f89ecf200fed49c013a65318d8d6cae5f85c1bafe3c368b4dc3d3b85b9334a30da40aa7667f023950ed26fb8f61daa51277550c2b180d470e82f79082643986abb45d78528b43eccc87f41cb5dd3676f99d5d2dfd060c9c2974f8e0433634dfb2abfaac2368e853c57ec8daace9eb676"}]}}}, @hopopts={{0x20, 0x29, 0x36, {0x73, 0x0, '\x00', [@jumbo={0xc2, 0x4, 0x4}]}}}, @rthdr={{0x18, 0x29, 0x39, {0x5c, 0x0, 0x0, 0xfb}}}, @flowinfo={{0x14, 0x29, 0xb, 0x8}}, @rthdr_2292={{0x28, 0x29, 0x39, {0x3c, 0x2, 0x0, 0x6, 0x0, [@local]}}}, @rthdr={{0x38, 0x29, 0x39, {0x32, 0x4, 0x2, 0x8f, 0x0, [@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @local]}}}, @hoplimit_2292={{0x14, 0x29, 0x8, 0x5}}, @tclass={{0x14, 0x29, 0x43, 0x8}}], 0x1e8}, 0x4) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r7}, 0x38) 7m14.940150589s ago: executing program 0 (id=740): madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) r0 = socket$nl_route(0x10, 0x3, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mkdir(0x0, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = openat$uhid(0xffffffffffffff9c, 0x0, 0x802, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r3 = syz_io_uring_setup(0x497, &(0x7f0000000400)={0x0, 0x707b, 0x0, 0x4, 0x288}, &(0x7f0000000340)=0x0, &(0x7f0000000140)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) io_uring_enter(r3, 0x3516, 0x0, 0x4, 0x0, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) mount$tmpfs(0x0, &(0x7f0000000000)='./cgroup\x00', &(0x7f0000000140), 0x3200841, 0x0) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) listxattr(0x0, 0x0, 0x0) sendmsg$NFNL_MSG_CTHELPER_NEW(r6, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000580)={0x70, 0x0, 0x9, 0x3, 0x0, 0x0, {0x3, 0x0, 0x2}, [@NFCTH_PRIV_DATA_LEN={0x8, 0x5, 0x1, 0x0, 0x10}, @NFCTH_NAME={0x9, 0x1, 'syz1\x00'}, @NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x8, 0x1, 0x1, 0x0, 0x6}}, @NFCTH_TUPLE={0x3c, 0x2, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private0={0xfc, 0x0, '\x00', 0x1}}, {0x14, 0x4, @remote}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x11}}]}]}, 0x70}, 0x1, 0x0, 0x0, 0x4010}, 0x800) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x8, 0xc, 0x4, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r7 = socket(0x11, 0x800000003, 0x0) r8 = socket(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r7, 0x8933, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x0) sendmsg$inet6(r1, &(0x7f0000000540)={&(0x7f0000000180)={0xa, 0x4e21, 0x3, @empty, 0x2564}, 0x1c, &(0x7f00000007c0)=[{&(0x7f0000000640)="93b5896b940c6e9b0735e7d91a4502a0f3cbaf728ac3963cebb52246ea881c98b6cb784f8c42b46194e4b5f968d4ce1de585ebb80f02ecc7a6f36a834c053375d9bf92a44c7303da4055ce390d77c845a8f1f049ab152a89f7d5ea6e94fafceffce1f65ce5b827604b3c64c59c01e26deb6f23b81e3d74a806dd69fa5aa25c5f5ce6", 0x82}, {0x0}, {0x0}, {&(0x7f0000000880)="ebd6cee280761f7838fa0dd27a96228fdfe29bff33b2ccaace465feaf7900c4880c5b70aae9eb07ad6b734679555110403e0bacf4211b63cfe9620e017b14271c852a10fbcb2f6dd2fc642339589ae7d2d6a41cfe9085f3ab986deb08c7cf1fe21f496484d6c543a53afd2e52165cc914ffbc308f5c71969d524f1cbe5d1c7ef5ec5", 0x82}, {0x0}], 0x5, &(0x7f0000000940)=[@tclass={{0x14, 0x29, 0x43, 0x9}}, @hopopts={{0xf0, 0x29, 0x36, {0x68, 0x1a, '\x00', [@generic={0x0, 0xd2, "f3671c954454021a30d6f6da4ad6e7c4ad3ba5068228c77bf1f869fbb8d3afe82782161343e76d989510d20d4501298588504a82764796eb2cabf1a12d36be20df7dbb9600c16f4469821db7f86e6407d475868ffc913a6c541a8b82c7978bae8685f89ecf200fed49c013a65318d8d6cae5f85c1bafe3c368b4dc3d3b85b9334a30da40aa7667f023950ed26fb8f61daa51277550c2b180d470e82f79082643986abb45d78528b43eccc87f41cb5dd3676f99d5d2dfd060c9c2974f8e0433634dfb2abfaac2368e853c57ec8daace9eb676"}]}}}, @hopopts={{0x20, 0x29, 0x36, {0x73, 0x0, '\x00', [@jumbo={0xc2, 0x4, 0x4}]}}}, @rthdr={{0x18, 0x29, 0x39, {0x5c, 0x0, 0x0, 0xfb}}}, @flowinfo={{0x14, 0x29, 0xb, 0x8}}, @rthdr_2292={{0x28, 0x29, 0x39, {0x3c, 0x2, 0x0, 0x6, 0x0, [@local]}}}, @rthdr={{0x38, 0x29, 0x39, {0x32, 0x4, 0x2, 0x8f, 0x0, [@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @local]}}}, @hoplimit_2292={{0x14, 0x29, 0x8, 0x5}}, @tclass={{0x14, 0x29, 0x43, 0x8}}], 0x1e8}, 0x4) 7m11.822103767s ago: executing program 0 (id=744): io_uring_setup(0x4fd3, 0x0) write$vga_arbiter(0xffffffffffffffff, &(0x7f0000000380)=ANY=[], 0x15) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, 0x0, 0xc000) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f00000007c0)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = shmget$private(0x0, 0x2000, 0x800, &(0x7f0000ffd000/0x2000)=nil) shmat(r4, &(0x7f0000ffc000/0x4000)=nil, 0xffffffffffff8fff) shmat(r4, &(0x7f00003e8000/0x1000)=nil, 0x4000) set_mempolicy(0x0, &(0x7f0000000000)=0x7, 0x7f) r5 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r5, 0x1, 0x22, 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(0xffffffffffffffff, 0xc1105517, 0x0) r6 = socket$tipc(0x1e, 0x5, 0x0) write$char_usb(0xffffffffffffffff, &(0x7f0000000040)="e2", 0x2250) setsockopt$TIPC_GROUP_JOIN(r6, 0x10f, 0x87, &(0x7f0000000100)={0x42, 0x2}, 0x10) 7m9.619141035s ago: executing program 0 (id=745): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x80000, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) open_by_handle_at(0xffffffffffffffff, 0x0, 0x1) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$lock(r3, 0x25, &(0x7f0000000140)={0x1, 0x2, 0x0, 0x5}) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./file0\x00', 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r5 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r5, 0x10e, 0xc, &(0x7f0000000040)={0x10000802, 0x80, 0x0, 0x40000}, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[@ANYBLOB="280000005200010004000000000000001c0000001400", @ANYRES16=r4], 0x28}}, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, 0x0, 0x0) keyctl$update(0x2, 0x0, 0x0, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, 0x0) epoll_create1(0x80000) preadv(0xffffffffffffffff, &(0x7f0000000640)=[{&(0x7f0000000100)=""/115, 0x73}], 0x1, 0x80000001, 0x800000f5) ppoll(&(0x7f00000001c0), 0x0, 0x0, 0x0, 0x0) 7m7.922188226s ago: executing program 0 (id=748): r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='fd/3\x00') ioctl$FS_IOC_ADD_ENCRYPTION_KEY(r0, 0x541b, 0x0) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000880)=ANY=[], 0x64}, 0x1, 0x0, 0x0, 0x5}, 0x0) socket(0x25, 0x5, 0x0) syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) pread64(0xffffffffffffffff, &(0x7f0000000000)=""/15, 0xf, 0x7fff) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) pselect6(0x40, &(0x7f0000000000)={0x0, 0x0, 0x8000000000000000, 0x0, 0x0, 0x0, 0x0, 0x10000000}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x8, 0x0, 0x0, 0x2, 0x7}, 0x0, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r3, 0x1, 0x25, &(0x7f0000000080)=0x474c, 0x4) bind$inet(r3, &(0x7f0000000200)={0x2, 0x4e29, @broadcast}, 0x10) connect$inet(r3, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, 0x0, 0x1be) r4 = socket$kcm(0x10, 0x2, 0x0) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r4, 0x8982, &(0x7f0000000400)={0x0, 'batadv0\x00', {0x5}}) sendmsg$kcm(r4, 0x0, 0x0) sendmmsg(r3, &(0x7f0000007fc0), 0x800001d, 0x0) bind$netlink(0xffffffffffffffff, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x200}, 0xc) r5 = syz_open_procfs$pagemap(0xffffffffffffffff, &(0x7f0000000080)) ioctl$PAGEMAP_SCAN(r5, 0xc0606610, &(0x7f0000000100)={0x60, 0x0, &(0x7f00001c9000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, &(0x7f0000000180)=[{0x10000000000000}], 0x1, 0x0, 0x0, 0x2, 0x0, 0x2}) recvmmsg(r3, &(0x7f0000000040), 0x291962b, 0x45833af92e4b39ff, 0x0) syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000380)='./file0\x00', 0x804, &(0x7f0000000640)=ANY=[@ANYBLOB='shortname=win95,codepage=866,utf8=0,uni_xlate=0,shortname=winnt,iocharset=iso8859-6,uni_xlate=0,iocharset=iso88598=0,codepage=1251,nonumtail=0,shortname=mixed,shortname=lower,shortname=mixed,shortname=mixed,uni_xlate=1,appraise_type=imasig,\x00'], 0xb, 0x27b, &(0x7f00000003c0)="$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") 7m0.983776872s ago: executing program 0 (id=754): syz_open_dev$video(0x0, 0x80000000, 0x20200) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) close(r1) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x8) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6770c000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f00000002c0)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bind$inet(r2, &(0x7f0000deb000)={0x2, 0x4e23, @multicast2}, 0x10) sendto$inet(r2, 0x0, 0x0, 0x240087f9, &(0x7f0000000100)={0x2, 0x4e23, @loopback}, 0x10) recvmmsg(0xffffffffffffffff, &(0x7f00000001c0), 0x0, 0x48, 0x0) splice(r0, 0x0, r1, 0x0, 0xfffd, 0x0) 6m44.433724759s ago: executing program 36 (id=754): syz_open_dev$video(0x0, 0x80000000, 0x20200) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) close(r1) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x8) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6770c000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f00000002c0)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bind$inet(r2, &(0x7f0000deb000)={0x2, 0x4e23, @multicast2}, 0x10) sendto$inet(r2, 0x0, 0x0, 0x240087f9, &(0x7f0000000100)={0x2, 0x4e23, @loopback}, 0x10) recvmmsg(0xffffffffffffffff, &(0x7f00000001c0), 0x0, 0x48, 0x0) splice(r0, 0x0, r1, 0x0, 0xfffd, 0x0) 5m16.511406572s ago: executing program 7 (id=904): r0 = syz_io_uring_setup(0x10c, &(0x7f0000000380)={0x0, 0x5885, 0x10, 0x1}, &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_TIMEOUT={0xb, 0x1, 0x0, 0x0, 0x7, 0x0, 0x1, 0x4, 0x1}) io_uring_enter(r0, 0x3516, 0x0, 0x0, 0x0, 0x0) 5m16.046043788s ago: executing program 7 (id=906): madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) r0 = socket$nl_route(0x10, 0x3, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mkdir(0x0, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = openat$uhid(0xffffffffffffff9c, 0x0, 0x802, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r3 = syz_io_uring_setup(0x497, &(0x7f0000000400)={0x0, 0x707b, 0x0, 0x4, 0x288}, &(0x7f0000000340)=0x0, &(0x7f0000000140)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r4, r5, 0x0) io_uring_enter(r3, 0x3516, 0x0, 0x4, 0x0, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000580)=@deltaction={0x14, 0x18, 0x1, 0x3, 0x25dedbfe, {0xa}}, 0x14}}, 0x0) mount$tmpfs(0x0, &(0x7f0000000000)='./cgroup\x00', &(0x7f0000000140), 0x3200841, 0x0) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) listxattr(0x0, &(0x7f0000000bc0)=""/66, 0x42) sendmsg$NFNL_MSG_CTHELPER_NEW(r6, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000580)={0x14, 0x0, 0x9, 0x3, 0x0, 0x0, {0x3, 0x0, 0x2}}, 0x14}, 0x1, 0x0, 0x0, 0x4010}, 0x800) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x8, 0xc, 0x4, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r8 = socket(0x11, 0x800000003, 0x0) r9 = socket(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r8, 0x8933, 0x0) sendmsg$nl_route_sched(r9, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x0) sendmsg$inet6(r1, &(0x7f0000000540)={&(0x7f0000000180)={0xa, 0x4e21, 0x3, @empty, 0x2564}, 0x1c, &(0x7f00000007c0)=[{&(0x7f0000000640)="93b5896b940c6e9b0735e7d91a4502a0f3cbaf728ac3963cebb52246ea881c98b6cb784f8c42b46194e4b5f968d4ce1de585ebb80f02ecc7a6f36a834c053375d9bf92a44c7303da4055ce390d77c845a8f1f049ab152a89f7d5ea6e94fafceffce1f65ce5b827604b3c64c59c01e26deb6f23b81e3d74a806dd69fa5aa25c5f5ce6", 0x82}, {0x0}, {0x0}, {&(0x7f0000000880)="ebd6cee280761f7838fa0dd27a96228fdfe29bff33b2ccaace465feaf7900c4880c5b70aae9eb07ad6b734679555110403e0bacf4211b63cfe9620e017b14271c852a10fbcb2f6dd2fc642339589ae7d2d6a41cfe9085f3ab986deb08c7cf1fe21f496484d6c543a53afd2e52165cc914ffbc308f5c71969d524", 0x7a}, {0x0}], 0x5, &(0x7f0000000940)=[@tclass={{0x14, 0x29, 0x43, 0x9}}, @hopopts={{0xf0, 0x29, 0x36, {0x68, 0x1a, '\x00', [@generic={0x0, 0xd2, "f3671c954454021a30d6f6da4ad6e7c4ad3ba5068228c77bf1f869fbb8d3afe82782161343e76d989510d20d4501298588504a82764796eb2cabf1a12d36be20df7dbb9600c16f4469821db7f86e6407d475868ffc913a6c541a8b82c7978bae8685f89ecf200fed49c013a65318d8d6cae5f85c1bafe3c368b4dc3d3b85b9334a30da40aa7667f023950ed26fb8f61daa51277550c2b180d470e82f79082643986abb45d78528b43eccc87f41cb5dd3676f99d5d2dfd060c9c2974f8e0433634dfb2abfaac2368e853c57ec8daace9eb676"}]}}}, @hopopts={{0x20, 0x29, 0x36, {0x73, 0x0, '\x00', [@jumbo={0xc2, 0x4, 0x4}]}}}, @rthdr={{0x18, 0x29, 0x39, {0x5c, 0x0, 0x0, 0xfb}}}, @flowinfo={{0x14, 0x29, 0xb, 0x8}}, @rthdr_2292={{0x28, 0x29, 0x39, {0x3c, 0x2, 0x0, 0x6, 0x0, [@local]}}}, @rthdr={{0x38, 0x29, 0x39, {0x32, 0x4, 0x2, 0x8f, 0x0, [@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @local]}}}, @hoplimit_2292={{0x14, 0x29, 0x8, 0x5}}, @tclass={{0x14, 0x29, 0x43, 0x8}}], 0x1e8}, 0x4) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r7}, 0x38) 5m9.975554044s ago: executing program 7 (id=910): socket(0x2a, 0x2, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout_data(r0, 0x107, 0x16, &(0x7f0000000100)={0x0, 0x0}, 0x10) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x800700, &(0x7f0000000200), 0x3, 0x44a, &(0x7f0000000400)="$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") chdir(&(0x7f00000014c0)='./file0\x00') creat(&(0x7f0000000e00)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) openat$dsp(0xffffffffffffff9c, &(0x7f00000003c0), 0x101a02, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000480)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) creat(&(0x7f0000000580)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) mknod$loop(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x1) symlink(0x0, &(0x7f0000000cc0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') 5m8.563851161s ago: executing program 7 (id=912): io_uring_setup(0x4fd3, 0x0) write$vga_arbiter(0xffffffffffffffff, &(0x7f0000000380)=ANY=[], 0x15) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, 0x0, 0xc000) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f00000007c0)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = shmget$private(0x0, 0x2000, 0x800, &(0x7f0000ffd000/0x2000)=nil) shmat(r4, &(0x7f0000ffc000/0x4000)=nil, 0xffffffffffff8fff) shmat(r4, &(0x7f00003e8000/0x1000)=nil, 0x4000) set_mempolicy(0x0, &(0x7f0000000000)=0x7, 0x7f) r5 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r5, 0x1, 0x22, 0x0, 0x0) syz_open_dev$sg(0x0, 0x0, 0x0) r6 = socket$tipc(0x1e, 0x5, 0x0) r7 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x862b01) ioctl$EVIOCSFF(r7, 0x40304580, 0x0) write$char_usb(r7, &(0x7f0000000040)="e2", 0x2250) setsockopt$TIPC_GROUP_JOIN(r6, 0x10f, 0x87, &(0x7f0000000100)={0x42, 0x2}, 0x10) 5m3.089308059s ago: executing program 7 (id=922): r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='fd/3\x00') ioctl$FS_IOC_ADD_ENCRYPTION_KEY(r0, 0x541b, 0x0) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000880)=ANY=[], 0x64}, 0x1, 0x0, 0x0, 0x5}, 0x0) socket(0x25, 0x5, 0x0) syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) pread64(0xffffffffffffffff, &(0x7f0000000000)=""/15, 0xf, 0x7fff) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r3, 0x1, 0x25, &(0x7f0000000080)=0x474c, 0x4) bind$inet(r3, &(0x7f0000000200)={0x2, 0x4e29, @broadcast}, 0x10) connect$inet(r3, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, 0x0, 0x1be) r4 = socket$kcm(0x10, 0x2, 0x0) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r4, 0x8982, &(0x7f0000000400)={0x0, 'batadv0\x00', {0x5}}) sendmsg$kcm(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000000)="2e00000010008188e6b62aa73f72cc9f0ba1f848140000005e140602000000000e000a000f00000002", 0x29}], 0x1}, 0x0) sendmmsg(r3, &(0x7f0000007fc0), 0x800001d, 0x0) bind$netlink(0xffffffffffffffff, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x200}, 0xc) r5 = syz_open_procfs$pagemap(0xffffffffffffffff, &(0x7f0000000080)) ioctl$PAGEMAP_SCAN(r5, 0xc0606610, &(0x7f0000000100)={0x60, 0x0, &(0x7f00001c9000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, &(0x7f0000000180)=[{0x10000000000000}], 0x1, 0x0, 0x0, 0x2, 0x0, 0x2}) recvmmsg(r3, &(0x7f0000000040), 0x291962b, 0x45833af92e4b39ff, 0x0) syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000380)='./file0\x00', 0x804, &(0x7f0000000640)=ANY=[@ANYBLOB='shortname=win95,codepage=866,utf8=0,uni_xlate=0,shortname=winnt,iocharset=iso8859-6,uni_xlate=0,iocharset=iso88598=0,codepage=1251,nonumtail=0,shortname=mixed,shortname=lower,shortname=mixed,shortname=mixed,uni_xlate=1,appraise_type=imasig,\x00'], 0xb, 0x27b, &(0x7f00000003c0)="$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") 4m57.737206836s ago: executing program 7 (id=926): r0 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r0, 0x0, 0x0) setxattr$system_posix_acl(&(0x7f0000000100)='./file0\x00', &(0x7f0000000280)='system.posix_acl_access\x00', 0x0, 0x0, 0x0) read(0xffffffffffffffff, &(0x7f0000001f80)=""/4101, 0x1005) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000002c0), r1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d000000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) sendmsg$WG_CMD_SET_DEVICE(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000440)={0x0}, 0x1, 0x0, 0x0, 0x4000}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) connect$unix(0xffffffffffffffff, &(0x7f0000000380)=@file={0x1, './file0\x00'}, 0x6e) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) ioctl$DRM_IOCTL_MODE_ATOMIC(0xffffffffffffffff, 0xc03864bc, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0), 0x0, 0x0, 0x0}) openat$mixer(0xffffffffffffff9c, &(0x7f00000016c0), 0x121040, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r0, 0x8983, &(0x7f0000000200)={0x0, 'veth1_to_batadv\x00', {0x2}, 0x4}) 4m41.264481971s ago: executing program 37 (id=926): r0 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r0, 0x0, 0x0) setxattr$system_posix_acl(&(0x7f0000000100)='./file0\x00', &(0x7f0000000280)='system.posix_acl_access\x00', 0x0, 0x0, 0x0) read(0xffffffffffffffff, &(0x7f0000001f80)=""/4101, 0x1005) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000002c0), r1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d000000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) sendmsg$WG_CMD_SET_DEVICE(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000440)={0x0}, 0x1, 0x0, 0x0, 0x4000}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) connect$unix(0xffffffffffffffff, &(0x7f0000000380)=@file={0x1, './file0\x00'}, 0x6e) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) ioctl$DRM_IOCTL_MODE_ATOMIC(0xffffffffffffffff, 0xc03864bc, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0), 0x0, 0x0, 0x0}) openat$mixer(0xffffffffffffff9c, &(0x7f00000016c0), 0x121040, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r0, 0x8983, &(0x7f0000000200)={0x0, 'veth1_to_batadv\x00', {0x2}, 0x4}) 3m4.90409962s ago: executing program 5 (id=1087): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x80000, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) open_by_handle_at(0xffffffffffffffff, 0x0, 0x1) r3 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) fcntl$lock(r3, 0x25, &(0x7f0000000140)={0x1, 0x2, 0x0, 0x5}) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./file0\x00', 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r5 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r5, 0x10e, 0xc, &(0x7f0000000040)={0x10000802, 0x80, 0x0, 0x40000}, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[@ANYBLOB="280000005200010004000000000000001c0000001400", @ANYRES16=r4], 0x28}}, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, 0x0, 0x0) keyctl$update(0x2, 0x0, 0x0, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, 0x0) epoll_create1(0x80000) preadv(0xffffffffffffffff, &(0x7f0000000640)=[{&(0x7f0000000100)=""/115, 0x73}], 0x1, 0x80000001, 0x800000f5) ppoll(&(0x7f00000001c0), 0x0, 0x0, 0x0, 0x0) 3m3.882241353s ago: executing program 5 (id=1089): syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, 0x0, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x400, 0x0, 0x32}, 0x9c) sendto$inet6(r1, 0x0, 0x0, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) 3m0.942814339s ago: executing program 5 (id=1090): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000c40)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000280)=0x1, 0x4) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x80000000, @private0}, 0xffffffba) sendto$inet6(r0, &(0x7f0000001240)="a6e2976b5c4383036d32c6decb363b6a1343ed6d911fda13badd2e144d8645ca8d1b230e105614396838da83c754887e7bea2f35d4ea667817d90d532af065f2e398dd9081ea16f8b371a202a6f9e505bbc964a0d3880bf0104a0a0a2f0d311efee1637e85a0125b38f961918f99bf9c2c146e42327f178dc2b3d4936e7f7f0a79f74ba464d83ab41742d1186776dc1779b5c50ac82d0fa8f9e42074b5b6079207fb21e71808090796466973a13d39e3e98687ee1c98536cd8936e41d167183d50275c78e4eae454ea583358c83fc34245c984a3b74b39322b0fc634119d21eabd4279f08cb8ce5da41a65", 0xeb, 0x840, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="0a00000003000000040000000100000000000000", @ANYRES32, @ANYBLOB="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", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) socket$kcm(0x10, 0x400000002, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r2 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast1, 0x9}, 0x1c) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000180)=0x7) r3 = socket$rxrpc(0x21, 0x2, 0x2) r4 = dup3(r3, 0xffffffffffffffff, 0x0) setsockopt$inet_int(r4, 0x0, 0xd, 0x0, 0x0) 2m56.494620174s ago: executing program 5 (id=1096): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) syz_open_dev$sg(&(0x7f0000000340), 0x276, 0x200) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x4, 0x0, &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)=0xd) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_io_uring_setup(0x9eb, &(0x7f0000000140)={0x0, 0xfad6}, 0x0, 0x0) open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0x0) pselect6(0x40, &(0x7f0000000000)={0x0, 0x40000000002, 0x8000000000000000, 0x8000f, 0x7fff, 0x0, 0x100, 0x10001000}, 0x0, &(0x7f00000002c0)={0x3ff, 0x6, 0x9, 0x4, 0x2, 0x0, 0x2, 0x7}, 0x0, 0x0) ioctl$TIOCVHANGUP(r1, 0x5437, 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0xc08c5332, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="1300000010"], 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000780)={0xffffffffffffffff, 0x18000000000002a0, 0x3, 0x0, &(0x7f0000000400)="5aee41", 0x0, 0x3e, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r3 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x862b01) ioctl$EVIOCGRAB(r3, 0x40044590, &(0x7f0000000000)) ioctl$EVIOCGRAB(r3, 0x40044590, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TIMER(r0, 0xc0605345, &(0x7f0000000040)={0x0, 0x0, {0x2, 0x0, 0x100040}}) 2m54.503257199s ago: executing program 5 (id=1097): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='sched_switch\x00', r0}, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) syz_open_dev$vcsn(0x0, 0x2, 0x20000) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000480)={0x0, &(0x7f0000000740)=""/222, 0x0, 0xde, 0x1, 0x0, 0x0, @void, @value}, 0x28) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) openat$cgroup_devices(0xffffffffffffffff, 0x0, 0x2, 0x0) r3 = syz_init_net_socket$rose(0xb, 0x5, 0x0) accept4$rose(r3, 0x0, &(0x7f0000000000), 0x80000) 2m53.442677183s ago: executing program 5 (id=1099): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000000)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r3 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$VIDIOC_ENUM_FMT(r3, 0xc0405602, &(0x7f0000000040)={0x5c, 0xa, 0x0, "3258c546dacccfae1e008faa00000000f4ff4000", 0x43564548}) socket$nl_netfilter(0x10, 0x3, 0xc) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) syz_open_dev$vim2m(&(0x7f0000000140), 0x200000001003, 0x2) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000480)) unshare(0x68060200) 2m37.468513471s ago: executing program 38 (id=1099): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000000)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r3 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$VIDIOC_ENUM_FMT(r3, 0xc0405602, &(0x7f0000000040)={0x5c, 0xa, 0x0, "3258c546dacccfae1e008faa00000000f4ff4000", 0x43564548}) socket$nl_netfilter(0x10, 0x3, 0xc) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) syz_open_dev$vim2m(&(0x7f0000000140), 0x200000001003, 0x2) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000480)) unshare(0x68060200) 1m5.263664048s ago: executing program 2 (id=1122): r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) bind$inet6(r1, 0x0, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/partitions\x00', 0x0, 0x0) r3 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) sendfile(r3, r2, &(0x7f0000002080)=0x64, 0x23b) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, @void, @value}, 0x94) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/oops_count', 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') r4 = bpf$PROG_LOAD(0x5, 0x0, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r5 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r5, &(0x7f0000000840)=[{0x0}], 0x1) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x6, 0x5d031, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000240)={0x2a, 0x0}, 0x8) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000280)=r6, 0x4) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=ANY=[@ANYBLOB="340000003c0007010000000000000000017c00000400fc800c00018008000600ffff0000080002800400728008000900", @ANYRES32=r7, @ANYBLOB], 0x34}, 0x1, 0x0, 0x0, 0xc000}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000700)='signal_deliver\x00', r4}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) syz_open_procfs$namespace(0x0, 0xfffffffffffffffe) ioctl$sock_inet_SIOCSIFADDR(r0, 0x891c, &(0x7f0000000540)={'batadv_slave_1\x00', {0x2, 0x0, @private=0xfffffffe}}) 1m4.170882682s ago: executing program 2 (id=1237): sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f0000000040)=0x1, 0x4) r4 = socket$netlink(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000000940)=ANY=[@ANYBLOB="38000000031401002dbd7000000000000900020073797a30000000000800410073697700140033006c6f000000000000000000000000000020e6e349a6c7f1289e13bf09d33884ce394a86a5b438daeaf9ceadc27b63172391113f5e533880017f548f0e1f98a8f6b48450aea0f0453207f0b31f"], 0x38}, 0x1, 0x0, 0x0, 0x854}, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000280)={0xffffffffffffffff, 0x58, &(0x7f0000000a00)}, 0x10) sendmsg$nl_route_sched(r4, &(0x7f0000000380)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000300)={&(0x7f0000000a80)=@deltfilter={0x24, 0x2d, 0x4, 0x70bd2c, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x8, 0xffe0}, {0x4, 0xfff2}, {0xe, 0x4}}}, 0x24}, 0x1, 0x0, 0x0, 0x4808}, 0x880) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) syz_open_procfs(0x0, &(0x7f0000000580)='net/tcp6\x00') bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x11, 0x9, &(0x7f0000000580)=ANY=[@ANYBLOB="180000000200000000000000f800000065600900f0ffffff8520000403000000185200001000000000000000000000009500000000000000950000000000000095000000000000"], &(0x7f0000000640)='syzkaller\x00', 0xfffffff6, 0x71, &(0x7f0000000680)=""/113, 0x41100, 0x20, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000700)={0x0, 0x3}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x6, &(0x7f0000000780)=[0xffffffffffffffff, 0xffffffffffffffff, 0x1], &(0x7f00000007c0)=[{0x4, 0x1, 0x10, 0x9}, {0x0, 0x5, 0x2, 0x3}, {0x0, 0x5, 0xd, 0x6}, {0x3, 0x1, 0xf}, {0x2, 0x2, 0x3, 0x1}, {0x1, 0x3, 0x3, 0x4}], 0x10, 0x0, @void, @value}, 0x94) 1m2.089110868s ago: executing program 2 (id=1239): syz_mount_image$udf(&(0x7f0000000f00), &(0x7f00000000c0)='./file0\x00', 0xa00000, &(0x7f0000000540)={[{@utf8}, {@partition={'partition', 0x3d, 0x2}}, {@utf8}, {@unhide}, {@adinicb}, {@shortad}, {@volume={'volume', 0x3d, 0x6}}, {@iocharset={'iocharset', 0x3d, 'cp865'}}, {@anchor={'anchor', 0x3d, 0x5}}, {@dmode={'dmode', 0x3d, 0x86}}]}, 0x1, 0xc59, &(0x7f0000000f40)="$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") r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x3, 0xc, &(0x7f0000000000)=@framed={{}, [@printk={@i, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x9b}}, @call={0x85, 0x0, 0x0, 0x7}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r0, 0x0, 0x10, 0x10, &(0x7f00000002c0)='\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000300)=""/8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0), 0x20002, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000180)={&(0x7f0000000140)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x4, [@typedef={0x2}]}, {0x0, [0x0, 0x61]}}, 0x0, 0x28, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xd, 0x4, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000000000000000000009500a500000000003e62782f6b62fe583a205a2a93679f78609d6ca7f05ba88e8460d0693a8e47c2857ff1c02f24ca929b6aec07a02b58cbd88131bb0d547c9bab43442e4535f88409162afd1ed8ff5a113677be48432632a733fb0c58fcdba24799f692860f292f268d00eac7dd739212a24e74fef584daca158d64b64536a0c21a0ab5a3e038038aaef7bd2ea0621eb7be6fc89005be16748d73f3a1887006e10ed1fb7d9eb609d12ae5bcfd530400e18f6ad05fe15db26a4951f34aa257313b453b"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x6e, '\x00', 0x0, 0xb, r4, 0x8, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x9847, @void, @value}, 0x94) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) getpeername(r5, 0x0, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_PORT_GET(r3, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x48014}, 0x20000000) syz_mount_image$hfsplus(&(0x7f0000000100), &(0x7f0000002900)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2008098, &(0x7f0000000040)=ANY=[], 0x1, 0x6ca, &(0x7f0000000500)="$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") r6 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0xa0201, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r6, 0xc004500a, &(0x7f0000000000)) ioctl$SNDCTL_DSP_CHANNELS(r6, 0xc0045006, &(0x7f0000000180)=0x6f) write$dsp(r6, &(0x7f00000012c0)="a52876830a602214f6b4e928d758f38a5a7cb4b31c4c09289e9ebb6286784c", 0x1f) fspick(0xffffffffffffff9c, 0x0, 0x0) sendmsg$NL80211_CMD_SET_PMKSA(r3, &(0x7f0000000d80)={0x0, 0x0, &(0x7f0000000d40)={0x0, 0x9c}}, 0x4004) socket$packet(0x11, 0x2, 0x300) openat(0xffffffffffffff9c, 0x0, 0x101042, 0x0) r7 = openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) writev(r7, &(0x7f0000000000), 0x0) 49.84858223s ago: executing program 2 (id=1250): sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000000)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x1c, 0x7, 0x6, 0x801, 0x0, 0x0, {0xa, 0x0, 0x4}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000005}, 0x80) 33.456458114s ago: executing program 39 (id=1250): sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000000)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x1c, 0x7, 0x6, 0x801, 0x0, 0x0, {0xa, 0x0, 0x4}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000005}, 0x80) 23.162239512s ago: executing program 1 (id=1285): io_uring_setup(0x4fd3, 0x0) write$vga_arbiter(0xffffffffffffffff, &(0x7f0000000380)=ANY=[], 0x15) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, 0x0, 0xc000) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x0, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = shmget$private(0x0, 0x2000, 0x800, &(0x7f0000ffd000/0x2000)=nil) shmat(r4, &(0x7f0000ffc000/0x4000)=nil, 0xffffffffffff8fff) shmat(r4, &(0x7f00003e8000/0x1000)=nil, 0x4000) set_mempolicy(0x0, &(0x7f0000000000)=0x7, 0x7f) r5 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r5, 0x1, 0x22, 0x0, 0x0) syz_open_dev$sg(0x0, 0x0, 0x0) r6 = socket$tipc(0x1e, 0x5, 0x0) r7 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x862b01) ioctl$EVIOCSFF(r7, 0x40304580, 0x0) write$char_usb(r7, &(0x7f0000000040)="e2", 0x2250) setsockopt$TIPC_GROUP_JOIN(r6, 0x10f, 0x87, &(0x7f0000000100)={0x42, 0x2}, 0x10) 21.73521937s ago: executing program 4 (id=1288): madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) r0 = socket$nl_route(0x10, 0x3, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mkdir(0x0, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = openat$uhid(0xffffffffffffff9c, 0x0, 0x802, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r3 = syz_io_uring_setup(0x497, &(0x7f0000000400)={0x0, 0x707b, 0x0, 0x4, 0x288}, &(0x7f0000000340)=0x0, &(0x7f0000000140)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) io_uring_enter(r3, 0x3516, 0x0, 0x4, 0x0, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) mount$tmpfs(0x0, &(0x7f0000000000)='./cgroup\x00', &(0x7f0000000140), 0x3200841, 0x0) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) listxattr(0x0, 0x0, 0x0) sendmsg$NFNL_MSG_CTHELPER_NEW(r6, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000580)={0x70, 0x0, 0x9, 0x3, 0x0, 0x0, {0x3, 0x0, 0x2}, [@NFCTH_PRIV_DATA_LEN={0x8, 0x5, 0x1, 0x0, 0x10}, @NFCTH_NAME={0x9, 0x1, 'syz1\x00'}, @NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x8, 0x1, 0x1, 0x0, 0x6}}, @NFCTH_TUPLE={0x3c, 0x2, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private0={0xfc, 0x0, '\x00', 0x1}}, {0x14, 0x4, @remote}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x11}}]}]}, 0x70}, 0x1, 0x0, 0x0, 0x4010}, 0x800) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x8, 0xc, 0x4, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r7 = socket(0x11, 0x800000003, 0x0) r8 = socket(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r7, 0x8933, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@gettfilter={0x4c, 0x2e, 0x400, 0x70bd2c, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x3, 0xc}, {0x3, 0x5}, {0x0, 0xffff}}, [{0x8, 0xb, 0x1}, {0x8, 0xb, 0x4}, {0x8, 0xb, 0x80000000}, {0x8, 0xb, 0x1}, {0x8, 0xb, 0x76a4}]}, 0x4c}}, 0x0) sendmsg$inet6(r1, &(0x7f0000000540)={&(0x7f0000000180)={0xa, 0x4e21, 0x3, @empty, 0x2564}, 0x1c, &(0x7f00000007c0)=[{&(0x7f0000000640)="93b5896b940c6e9b0735e7d91a4502a0f3cbaf728ac3963cebb52246ea881c98b6cb784f8c42b46194e4b5f968d4ce1de585ebb80f02ecc7a6f36a834c053375d9bf92a44c7303da4055ce390d77c845a8f1f049ab152a89f7d5ea6e94fafceffce1f65ce5b827604b3c64c59c01e26deb6f23b81e3d74a806dd69fa5aa25c5f5ce6", 0x82}, {0x0}, {0x0}, {0x0}], 0x4}, 0x4) 21.67603966s ago: executing program 8 (id=1289): r0 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r0, 0x0, 0x0) setxattr$system_posix_acl(&(0x7f0000000100)='./file0\x00', &(0x7f0000000280)='system.posix_acl_access\x00', 0x0, 0x0, 0x0) read(0xffffffffffffffff, &(0x7f0000001f80)=""/4101, 0x1005) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000002c0), r1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d000000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r0, 0x8983, &(0x7f0000000200)={0x0, 'veth1_to_batadv\x00', {0x2}, 0x4}) 20.542101014s ago: executing program 4 (id=1290): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) ioperm(0x0, 0xd, 0x4000000000000020) rt_sigqueueinfo(0x0, 0x21, 0x0) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, &(0x7f0000000080)='iocharset', 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), r1) sendmsg$DEVLINK_CMD_RATE_NEW(r1, &(0x7f0000002780)={0x0, 0x0, &(0x7f0000002740)={&(0x7f0000000000)={0x14, r2, 0x301, 0x0, 0x0, {0x17}}, 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x44094) syz_emit_vhci(&(0x7f0000000080)=ANY=[@ANYBLOB="040e03fb0520"], 0x7) syz_mount_image$msdos(&(0x7f00000001c0), &(0x7f0000000040)='./file0\x00', 0xcc04, &(0x7f0000000540)=ANY=[@ANYBLOB='dots,gid=', @ANYRESHEX=0xee01, @ANYBLOB="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"], 0x1, 0x1f0, &(0x7f0000000240)="$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") r3 = openat$incfs(0xffffffffffffff9c, 0x0, 0x1a10c1, 0x0) r4 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r5 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000003f80)={&(0x7f0000002d40)="ab48f92a76f13585c95064bc391833fe36af986a9802e4a8e28c3a50412d832ee99a875f63fe88ea936f58ca683cde3a5b3d925dc1829c8c527f1684702a52eedb91f3600f2d7d3a0b2c8afd68ed1587a6d0a43a694179fd528e9750fb10bfc3916c565608af950d4bb4c235a9d5ac8f4d3d4571288f5e4be7864404610b948afc2d9223b4fb7fa9aad1b453f7e5bcfed7ff6d92d1c3eba7e0e824b83c1034eb3a35806a154c67c39b887a9b176cc89dbabe1ee1c877459c19e8e922f0820a3f013c33124f708d0ffd0ca03370", &(0x7f0000002e40)=""/96, 0x0, &(0x7f0000002f80)="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", 0x21, r5}, 0x38) openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0), 0x42280, 0x0) close(r4) ioctl$KVM_SET_CPUID2(r3, 0x4008ae90, &(0x7f00000028c0)=ANY=[@ANYBLOB="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"/319]) read$FUSE(r3, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='net_prio.prioidx\x00', 0x275a, 0x0) 20.056252521s ago: executing program 8 (id=1291): io_uring_setup(0x4fd3, 0x0) write$vga_arbiter(0xffffffffffffffff, &(0x7f0000000380)=ANY=[], 0x15) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, 0x0, 0xc000) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f00000007c0)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = shmget$private(0x0, 0x2000, 0x800, &(0x7f0000ffd000/0x2000)=nil) shmat(r4, &(0x7f0000ffc000/0x4000)=nil, 0xffffffffffff8fff) shmat(r4, &(0x7f00003e8000/0x1000)=nil, 0x4000) set_mempolicy(0x0, &(0x7f0000000000)=0x7, 0x7f) r5 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r5, 0x1, 0x22, 0x0, 0x0) syz_open_dev$sg(0x0, 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(0xffffffffffffffff, 0xc1105517, 0x0) r6 = socket$tipc(0x1e, 0x5, 0x0) r7 = syz_open_dev$evdev(0x0, 0x2, 0x862b01) ioctl$EVIOCSFF(r7, 0x40304580, 0x0) write$char_usb(r7, &(0x7f0000000040)="e2", 0x2250) setsockopt$TIPC_GROUP_JOIN(r6, 0x10f, 0x87, &(0x7f0000000100)={0x42, 0x2}, 0x10) 17.613852431s ago: executing program 8 (id=1293): ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, 0x0) r0 = openat$cuse(0xffffff9c, &(0x7f00000000c0), 0x2, 0x0) read$FUSE(r0, &(0x7f0000002300)={0x2020}, 0x2020) ioctl$vim2m_VIDIOC_S_CTRL(0xffffffffffffffff, 0xc008561c, &(0x7f0000000080)={0x1, 0xf}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) add_key(&(0x7f0000000080)='asymmetric\x00', 0x0, &(0x7f0000000500)="e306644c2f0b801228a9253e", 0xc, 0xfffffffffffffffd) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f0000000440)={'batadv0\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="4400000010002104000000080000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012800b00010067726574617000000c00028008000100", @ANYRES32, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r5], 0x44}}, 0x0) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, &(0x7f0000000040)=0x3) 16.348486267s ago: executing program 1 (id=1294): openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000014c0), 0xffffffffffffffff) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) semctl$SEM_STAT(0x0, 0x3, 0x12, 0x0) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) openat$cgroup_pressure(0xffffffffffffffff, &(0x7f0000000040)='cpu.pressure\x00', 0x2, 0x0) write$cgroup_pressure(0xffffffffffffffff, &(0x7f00000001c0)={'some', 0x20, 0x6, 0x20, 0x10000100ffffd}, 0x2f) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000080)=0xf) ioctl$TCFLSH(r2, 0x400455c8, 0x4) ioctl$TIOCSTI(r2, 0x5412, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)={0x30, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x98f}], @NL80211_ATTR_CH_SWITCH_COUNT={0x8}, @NL80211_ATTR_CH_SWITCH_BLOCK_TX={0x4}]}, 0x30}}, 0x0) 15.393099119s ago: executing program 4 (id=1295): syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x400, 0x0, 0x32}, 0x9c) bind$inet6(r1, 0x0, 0x0) sendto$inet6(r1, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) 14.372996261s ago: executing program 8 (id=1297): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$kcm(0x23, 0x2, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cgroup.stat\x00', 0x26e1, 0x0) setsockopt$sock_attach_bpf(r3, 0x1, 0x3e, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r3, 0x89e0, &(0x7f0000000940)={r4, r4}) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) io_setup(0x8, &(0x7f0000004200)=0x0) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') io_submit(r6, 0x0, &(0x7f0000004540)) r7 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, 0x0) r8 = socket(0x10, 0x3, 0x0) getsockopt$sock_cred(r8, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setuid(r9) 14.343593782s ago: executing program 4 (id=1298): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r1 = socket$kcm(0x23, 0x2, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cgroup.stat\x00', 0x26e1, 0x0) setsockopt$sock_attach_bpf(r1, 0x1, 0x3e, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r1, 0x89e0, &(0x7f0000000940)={r2, r2}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) io_setup(0x8, &(0x7f0000004200)=0x0) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') io_submit(r4, 0x0, &(0x7f0000004540)) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, 0x0) r6 = socket(0x10, 0x3, 0x0) getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setuid(r7) 12.87961909s ago: executing program 9 (id=1299): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000c40)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000280)=0x1, 0x4) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x80000000, @private0}, 0xffffffba) sendto$inet6(r0, &(0x7f0000001240)="a6e2976b5c4383036d32c6decb363b6a1343ed6d911fda13badd2e144d8645ca8d1b230e105614396838da83c754887e7bea2f35d4ea667817d90d532af065f2e398dd9081ea16f8b371a202a6f9e505bbc964a0d3880bf0104a0a0a2f0d311efee1637e85a0125b38f961918f99bf9c2c146e42327f178dc2b3d4936e7f7f0a79f74ba464d83ab41742d1186776dc1779b5c50ac82d0fa8f9e42074b5b6079207fb21e71808090796466973a13d39e3e98687ee1c98536cd8936e41d167183d50275c78e4eae454ea583358c83fc34245c984a3b74b39322b0fc634119d21eabd4279f08cb8ce5da41a65", 0xeb, 0x840, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) socket$kcm(0x10, 0x400000002, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r2 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast1, 0x9}, 0x1c) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000180)=0x7) r3 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) r4 = socket$rxrpc(0x21, 0x2, 0x2) r5 = dup3(r4, r3, 0x0) setsockopt$inet_int(r5, 0x0, 0xd, 0x0, 0x0) 12.332117737s ago: executing program 4 (id=1300): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x80000, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0, r0}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) sched_rr_get_interval(r1, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./file0\x00', 0x0) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000000080)={0x0, 0x8001}, 0x8) getsockopt$bt_hci(r4, 0x84, 0x7f, &(0x7f0000000080)=""/4057, &(0x7f0000000000)=0xfd9) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) rename(&(0x7f0000000400)='./bus\x00', &(0x7f0000000f00)='./file0\x00') r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r5, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) ioctl$SIOCX25SFACILITIES(0xffffffffffffffff, 0x89e3, &(0x7f0000000080)={0x37, 0x800000, 0x8, 0x9, 0x8000}) write$bt_hci(r5, &(0x7f0000000080)=ANY=[], 0x6) 10.082001535s ago: executing program 4 (id=1301): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000000)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) ioctl$VIDIOC_ENUM_FMT(0xffffffffffffffff, 0xc0405602, &(0x7f0000000040)={0x5c, 0xa, 0x0, "3258c546dacccfae1e008faa00000000f4ff4000", 0x43564548}) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x1c, 0x7, 0x6, 0x801, 0x0, 0x0, {0xa, 0x0, 0x4}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000005}, 0x80) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) syz_open_dev$vim2m(&(0x7f0000000140), 0x200000001003, 0x2) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000480)) unshare(0x68060200) 9.601724221s ago: executing program 9 (id=1302): madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) r0 = socket$nl_route(0x10, 0x3, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mkdir(0x0, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = openat$uhid(0xffffffffffffff9c, 0x0, 0x802, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r3 = syz_io_uring_setup(0x497, &(0x7f0000000400)={0x0, 0x707b, 0x0, 0x4, 0x288}, &(0x7f0000000340)=0x0, &(0x7f0000000140)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r4, r5, 0x0) io_uring_enter(r3, 0x3516, 0x0, 0x4, 0x0, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000580)=@deltaction={0x14, 0x18, 0x1, 0x3, 0x25dedbfe, {0xa}}, 0x14}}, 0x0) mount$tmpfs(0x0, &(0x7f0000000000)='./cgroup\x00', &(0x7f0000000140), 0x3200841, 0x0) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) listxattr(0x0, &(0x7f0000000bc0)=""/66, 0x42) sendmsg$NFNL_MSG_CTHELPER_NEW(r6, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000580)={0x14, 0x0, 0x9, 0x3, 0x0, 0x0, {0x3, 0x0, 0x2}}, 0x14}, 0x1, 0x0, 0x0, 0x4010}, 0x800) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x8, 0xc, 0x4, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r8 = socket(0x11, 0x800000003, 0x0) r9 = socket(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r8, 0x8933, 0x0) sendmsg$nl_route_sched(r9, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x0) sendmsg$inet6(r1, &(0x7f0000000540)={&(0x7f0000000180)={0xa, 0x4e21, 0x3, @empty, 0x2564}, 0x1c, &(0x7f00000007c0)=[{&(0x7f0000000640)="93b5896b940c6e9b0735e7d91a4502a0f3cbaf728ac3963cebb52246ea881c98b6cb784f8c42b46194e4b5f968d4ce1de585ebb80f02ecc7a6f36a834c053375d9bf92a44c7303da4055ce390d77c845a8f1f049ab152a89f7d5ea6e94fafceffce1f65ce5b827604b3c64c59c01", 0x6e}, {0x0}, {0x0}, {&(0x7f0000000880)="ebd6cee280761f7838fa0dd27a96228fdfe29bff33b2ccaace465feaf7900c4880c5b70aae9eb07ad6b734679555110403e0bacf4211b63cfe9620e017b14271c852a10fbcb2f6dd2fc642339589ae7d2d6a41cfe9085f3ab986deb08c7cf1fe21f496484d6c543a53afd2e52165cc914ffbc308f5c71969d524f1cbe5d1c7ef5ec5", 0x82}, {0x0}], 0x5, &(0x7f0000000940)=[@tclass={{0x14, 0x29, 0x43, 0x9}}, @hopopts={{0xf0, 0x29, 0x36, {0x68, 0x1a, '\x00', [@generic={0x0, 0xd2, "f3671c954454021a30d6f6da4ad6e7c4ad3ba5068228c77bf1f869fbb8d3afe82782161343e76d989510d20d4501298588504a82764796eb2cabf1a12d36be20df7dbb9600c16f4469821db7f86e6407d475868ffc913a6c541a8b82c7978bae8685f89ecf200fed49c013a65318d8d6cae5f85c1bafe3c368b4dc3d3b85b9334a30da40aa7667f023950ed26fb8f61daa51277550c2b180d470e82f79082643986abb45d78528b43eccc87f41cb5dd3676f99d5d2dfd060c9c2974f8e0433634dfb2abfaac2368e853c57ec8daace9eb676"}]}}}, @hopopts={{0x20, 0x29, 0x36, {0x73, 0x0, '\x00', [@jumbo={0xc2, 0x4, 0x4}]}}}, @rthdr={{0x18, 0x29, 0x39, {0x5c, 0x0, 0x0, 0xfb}}}, @flowinfo={{0x14, 0x29, 0xb, 0x8}}, @rthdr={{0x28, 0x29, 0x39, {0x32, 0x2, 0x2, 0x8f, 0x0, [@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01']}}}, @hoplimit_2292={{0x14, 0x29, 0x8, 0x5}}, @tclass={{0x14, 0x29, 0x43, 0x8}}], 0x1b0}, 0x4) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r7}, 0x38) 7.710836714s ago: executing program 9 (id=1303): r0 = add_key$keyring(&(0x7f0000000040), &(0x7f0000000080)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) add_key(&(0x7f0000000000)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0x3c0a, r0) syz_open_dev$MSR(&(0x7f0000000000), 0xfffffffffffffffd, 0x0) socket$inet_dccp(0x2, 0x6, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0/file0\x00', 0x1c0) move_mount(0xffffffffffffff9c, &(0x7f00000000c0)='./file0/file0\x00', 0xffffffffffffff9c, 0x0, 0x143) fcntl$setpipe(0xffffffffffffffff, 0x8, 0x80000000) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(0xffffffffffffffff, 0xc0045516, &(0x7f00000000c0)=0x81) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(0xffffffffffffffff, 0xc1105517, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000100)={0x3, 0x0, &(0x7f0000000080)={&(0x7f0000000300)={0x2, 0x3, 0x0, 0x2, 0x28, 0x0, 0x0, 0x0, [@sadb_key={0x1a, 0x8, 0x640, 0x0, "66db642164fce5073dc2e1f8f59a92e863968f9ff6df799c103af2af1741348b0fc45ebc0154e56bbaae50ff5525ba2a4e16a7bb4a5c25c95c756fbf95a953fed5e6b77c5e463333db775e045e640cc23abb8771e281614287c69a9917d6147b1ca5825956fdfe45c8e6cb1cb872205fa3dc2b1aa14874eaec4ac1e125780087708342816ffb776641e0c960ea9898bdd105ccb4de1da3720af7cb689c6a165b2b75c87e731dcda1b17212bafd75669e081e80da80e82530d6aa5f18d6fa35469c7b2305489d385a"}, @sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @loopback}}, @sadb_sa={0x2, 0x1, 0x4d4, 0x4, 0x0, 0x0, 0xfd}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @local}}]}, 0x140}, 0x1, 0x7}, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000680)='net/ip6_mr_cache\x00') read$FUSE(r3, &(0x7f0000000700)={0x2020}, 0x2020) 6.720255627s ago: executing program 8 (id=1304): r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) bind$inet6(r1, 0x0, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/partitions\x00', 0x0, 0x0) r3 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) sendfile(r3, r2, &(0x7f0000002080)=0x64, 0x23b) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, @void, @value}, 0x94) openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') r4 = bpf$PROG_LOAD(0x5, 0x0, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r5 = syz_open_dev$sndmidi(0x0, 0x2, 0x141102) writev(r5, &(0x7f0000000840)=[{0x0}], 0x1) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x6, 0x5d031, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000240)={0x2a, 0x0}, 0x8) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000280)=r6, 0x4) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=ANY=[@ANYBLOB="340000003c0007010000000000000000017c00000400fc800c00018008000600ffff0000080002800400728008000900", @ANYRES32=r7, @ANYBLOB], 0x34}, 0x1, 0x0, 0x0, 0xc000}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000700)='signal_deliver\x00', r4}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) syz_open_procfs$namespace(0x0, 0xfffffffffffffffe) ioctl$sock_inet_SIOCSIFADDR(r0, 0x891c, &(0x7f0000000540)={'batadv_slave_1\x00', {0x2, 0x0, @private=0xfffffffe}}) 6.669230447s ago: executing program 9 (id=1305): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x80000, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) open_by_handle_at(0xffffffffffffffff, 0x0, 0x1) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$lock(r3, 0x25, &(0x7f0000000140)={0x1, 0x2, 0x0, 0x5}) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./file0\x00', 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r5 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r5, 0x10e, 0xc, &(0x7f0000000040)={0x10000802, 0x80, 0x0, 0x40000}, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[@ANYBLOB="280000005200010004000000000000001c0000001400", @ANYRES16=r4], 0x28}}, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, 0x0, 0x0) keyctl$update(0x2, 0x0, 0x0, 0x0) mount$overlay(0x0, 0x0, &(0x7f0000000080), 0x0, 0x0) epoll_create1(0x80000) preadv(0xffffffffffffffff, &(0x7f0000000640)=[{&(0x7f0000000100)=""/115, 0x73}], 0x1, 0x80000001, 0x800000f5) ppoll(&(0x7f00000001c0), 0x0, 0x0, 0x0, 0x0) 5.61719245s ago: executing program 9 (id=1306): openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) syz_open_dev$sg(&(0x7f0000000340), 0x276, 0x200) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x4, 0x0, &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xd) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_io_uring_setup(0x9eb, &(0x7f0000000140)={0x0, 0xfad6}, 0x0, 0x0) open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0x0) pselect6(0x40, &(0x7f0000000000)={0x0, 0x40000000002, 0x8000000000000000, 0x8000f, 0x7fff, 0x0, 0x100, 0x10001000}, 0x0, &(0x7f00000002c0)={0x3ff, 0x6, 0x9, 0x4, 0x2, 0x0, 0x2, 0x7}, 0x0, 0x0) ioctl$TIOCVHANGUP(r0, 0x5437, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="1300000010"], 0x48) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x8, 0xf, &(0x7f0000000880)=ANY=[@ANYBLOB="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", @ANYRES32=r2], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000780)={r3, 0x18000000000002a0, 0x3, 0x0, &(0x7f0000000400)="5aee41", 0x0, 0x3e, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r4 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x862b01) ioctl$EVIOCGRAB(r4, 0x40044590, &(0x7f0000000000)) ioctl$EVIOCGRAB(r4, 0x40044590, 0x0) 4.672271572s ago: executing program 1 (id=1307): syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x400, 0x0, 0x32}, 0x9c) bind$inet6(r1, 0x0, 0x0) sendto$inet6(r1, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) 4.501848614s ago: executing program 1 (id=1308): syz_mount_image$udf(&(0x7f0000000f00), &(0x7f00000000c0)='./file0\x00', 0xa00000, &(0x7f0000000540)={[{@utf8}, {@partition={'partition', 0x3d, 0x2}}, {@utf8}, {@unhide}, {@adinicb}, {@shortad}, {@volume={'volume', 0x3d, 0x6}}, {@iocharset={'iocharset', 0x3d, 'cp865'}}, {@anchor={'anchor', 0x3d, 0x5}}, {@dmode={'dmode', 0x3d, 0x86}}]}, 0x1, 0xc59, &(0x7f0000000f40)="$eJzs3U9sHNd9B/DfGy3FldxUTOwqThoHm7ZIZcVy9S+mYhXuqqbZBpBlIhRzC8CVSKkLUyRBUo1spC3TSw89BCiKHnIi0BoFUjQwmiLokWldILn4UOTUE9HCRlD0wBYBAgQIGMzsW3FJk7JskhIpfz429d2deW/2vXmLGUnQmxcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQMTvv3Tp9Jm0xY5DD6ExAMADcWX0K6fPbnX/BwAeWVe3+/M/AAAAAAAAAAAAAACwX6Qo4vFIMXtlNY1X7zvql9t9t++MDQ1vXe1IqmoeqsqXP/UzZ8+d/+Jzgxe6ebk9fY/6u+3T8cro1UuNF2duzc5Nzs9PTjTGptvXZyYm7/sIO62/2cnqBDRuvXp74saN+cbZZ89t2H1n4N3+x44PXBx8+tRT3bJjQ8PDo+tF6r3lax+6IR3bzfA4HEWcihTPfPcnqRURRez8XNQf7NhvdqTqxMmqE2NDw1VHptqt6YVy50j3RBQRjZ5Kze452nosotb3QPuwvWbEYtn8ssEny+6NzrbmWtemJhsjrbmF9kJ7ZnokdVpb9qcRRVxIEUsRsdL/3sP1RRG1SPHtY6vpWn7qR3UevlBNDN6+HcUe9vE+lO1s9EUsFQdgzPax/iji5Ujx07dOxPV8namuNZ+PeLnM70e8UeYLEan8YpyPeGeL7xEHUy2K+Mty/C+uponqetC9rlz+auPL0zdmyvcf65TtXlc+4P3hPVeKh3R/OLIpH4x9fm2qRxGt6oq/mj78b3YAAAAAAAAAAAAAAAAA2G1HoohPRYqX/uOPq3nFUc1LP3Zx8A8GPtY7Z/zJ9zlOWfbZiFgs7m9O7uE8MXAkjaT0kOcSf5TVo4g/yfP/vvmwGwMAAAAAAAAAAAAAAAAAAPCRVsSPI8Xzb59IS9G7pnh7+mbjauvaVGdV2O7av90109fW1tYaqZPNnOM5F3Mu5VzOuZIzilw/ZzPneM7FnEs5l3Ou5IxDuX7OZs7xnIs5l3Iu51zJGbVcP2cz53jOxZxLOZdzruSMfbJ2LwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAo6SIIn4RKb719dUUKSKaEePRyeX+h906AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAKDUn4r4XqRo/GHz7rZaRKTq/44T5S/no3m4zE9Ec7DMF6J5KWerylrzmw+h/exMXyriR5Giv/7m3QHP49/XeXf3axBvfGP93adrnTzU3Tnwbv9jx49dHBz+7JPbvU5bNeDk5fb07TuNsaHh4dGezbX86Z/o2TaQP7fYna4TEfOvvf5qa2pqcu7Dvyi/AjuofoBepNpHpaf3etG/O1+bg/AiavuiGQ+n7xvUH9YFij1V3v/fiRS/8/Z/dm/4nft/PX6l8+7uHT5+9qfr9//nNx/oPu//tc318v2/vKdvdf9/vGfb8/l3I321iPrCrdm+4xH1+ddeP9W+1bo5eXNy+vzp018aHPzSudN9hyPqN9pTkz2vduV0AQAAAAAAAAAAAAAAADw4qYjfixStH62mRkTcqeZrDVwcfPrUU4fiUDXfasO87VdGr15qvDhza3Zucn5+cqIxNt2+PjMxeb8fV6+me40NDe9JZ97XkT1u/5H6izOzr821b/7Rwpb7j9YvXZtfmGtd33p3HIkiotm75WTV4LGh4arRU+3WdFV1ZMvJ9B9cXyrivyLF9fON9Lm8Lc//3zzDf8P8/8XNB9rF+f+fPbo+/+/jPUXLz0ypiJ9Fit/+qyfjc1U7j8Z7zlku93eR4uSFz+Rycbgs121D57kCnZmBZdn/ixT/9IuNZbvzIR9fL3vmA53cA6Ac/2OR4nt/8Z34jbxt4/Mfth7/o5sPtEfPf3iiZ9vRDRPPd9x18vifihQvPP5m/Ga15ef3fP5H99kbJzqF15/PsUfj/2s92wby5/7WbnUeAAAAAAAAAADgAOtLRfx9pPjBcC09l7fdz7//m9h8oD3691+f7Nk28YAWntnxSQUAAACAfaIvFfHjSHFz4c27c6g3zv/umf/5u+vzP4fSpr3V3/P9avXcgN38+79eA/lzx3febQAAAAAAAAAAAAAAAAAAANhXUiriubye+ng1n39i2/XUlyPFS//zTC6XjpfluuvAD1S/1q/MTJ+6NDU1U4+F1rWpycbobOv6ZFn3iUix+refyXWLan317nrznTXe19din4sUw//QLdtZi727NvkT62XPlGU/Hin++x83ls1LU+e1o6uyZ8uyfxMpvvYvW5c9vl72XFn2O5Hih19rdMseLct2n4/6yfWyz16fKfZgVAAAAAAAAAAAAAAAAAAAAPio6UtF/Hmk+N9bS3fn8uf1//t63lbe+EbPev+b3KnW+R+o1v/f7vWWdQ/n3Gb9/+q5AovbfSoAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADyaUhTxeqSYvbKalvvL9x31y+3p23fGhoa3rnYkVTUPVeXLn/qZs+fOf/G5wQvdvHf93fapeGX06qXGizO3Zucm5+cnJxpj0+3rMxOT932Endbf7GR1Ahq3Xr09cePGfOPss+c27L4z8G7/Y8cHLg4+feqpbtmxoeHh0Z4ytb4P/em9fv5YrI/rZoejiL+OFM989yfpB/0RRez8XLzPd2evHak6cbLqxNjQcNWRqXZreqHcOdI9EUVEo6dSs3uO9nYsdq4ZsVg2v2zwybJ7o7Otuda1qcnGSGtuob3QnpkeSZ3Wlv1pRBEXUsRSRKz0v/dwfVHEq5Hi28dW07/2RxzqnocvXBn9yumz27ej2MM+3oeynY2+iKXiAIzZPtYfRfxzpPjpWyfi3/ojatH5ic9HvFzm9yPeiM54p/KLcT7inS2+RxxMtSji/8vxv7ia3uovrwfd68rlrza+PH1jpqds97qy8f7wZ3nvAbo/PEj7/NpUjyJ+WF3xV9O/P9gzAwAAAAAAAAAAAAAAAMA9FfHrkeL5t0+kan7w3TnF7embjauta1OdaX3duX/dOdNra2trjdTJZs7xnIs5l3Iu51zJGUWun7NZZn1tbTy/X8y5lHM550rOOJTr52zmHM+5mHMp53LOlZxRy/VzNnOO51zMuZRzOedKztgnc/cAAAAAAAAAAAAAAAAAAIBHS1H9l+JbX19Na/2d9aXHo5PL1vl95P0yAAD//1Q883c=") r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x3, 0xc, &(0x7f0000000000)=@framed={{}, [@printk={@i, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x9b}}, @call={0x85, 0x0, 0x0, 0x7}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r0, 0x0, 0x10, 0x10, &(0x7f00000002c0)='\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000300)=""/8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0), 0x20002, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000180)={&(0x7f0000000140)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x4, [@typedef={0x2}]}, {0x0, [0x0, 0x61]}}, 0x0, 0x28, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xd, 0x4, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000000000000000000009500a500000000003e62782f6b62fe583a205a2a93679f78609d6ca7f05ba88e8460d0693a8e47c2857ff1c02f24ca929b6aec07a02b58cbd88131bb0d547c9bab43442e4535f88409162afd1ed8ff5a113677be48432632a733fb0c58fcdba24799f692860f292f268d00eac7dd739212a24e74fef584daca158d64b64536a0c21a0ab5a3e038038aaef7bd2ea0621eb7be6fc89005be16748d73f3a1887006e10ed1fb7d9eb609d12ae5bcfd530400e18f6ad05fe15db26a4951f34aa257313b453b"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x6e, '\x00', 0x0, 0xb, r4, 0x8, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x9847, @void, @value}, 0x94) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) getpeername(r5, 0x0, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_PORT_GET(r3, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x48014}, 0x20000000) syz_mount_image$hfsplus(&(0x7f0000000100), &(0x7f0000002900)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2008098, &(0x7f0000000040)=ANY=[], 0x1, 0x6ca, &(0x7f0000000500)="$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") r6 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0xa0201, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r6, 0xc004500a, &(0x7f0000000000)) ioctl$SNDCTL_DSP_CHANNELS(r6, 0xc0045006, &(0x7f0000000180)=0x6f) write$dsp(r6, &(0x7f00000012c0)="a52876830a602214f6b4e928d758f38a5a7cb4b31c4c09289e9ebb6286784ca3", 0x4000) fspick(0xffffffffffffff9c, 0x0, 0x0) sendmsg$NL80211_CMD_SET_PMKSA(r3, &(0x7f0000000d80)={0x0, 0x0, &(0x7f0000000d40)={0x0, 0x9c}}, 0x4004) socket$packet(0x11, 0x2, 0x300) openat(0xffffffffffffff9c, 0x0, 0x101042, 0x0) r7 = openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) writev(r7, 0x0, 0x0) 4.483855554s ago: executing program 9 (id=1309): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x11, 0x4, &(0x7f00000002c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000100)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000180)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000880)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f00000029c0)={0x0, 0x0, 0x0}, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r6 = socket(0x400000000010, 0x3, 0x0) r7 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffbfffff, {0x0, 0x0, 0x0, r8, {0x0, 0x1}, {0xffff, 0xffff}, {0x0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000006100)=@newtfilter={0x3c, 0x2c, 0xd27, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r8, {0xb, 0x5}, {}, {0xfff3}}, [@filter_kind_options=@f_route={{0xa}, {0xc, 0x2, [@TCA_ROUTE4_TO={0x8, 0x2, 0xf1}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x10}, 0x0) r9 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_DAT_CACHE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x4b, &(0x7f0000000000)={&(0x7f0000000080)={0x1c, r9, 0x303, 0x0, 0x0, {0x6}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r10}]}, 0x1c}}, 0x2000c0c0) 2.860012225s ago: executing program 1 (id=1310): madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) r0 = socket$nl_route(0x10, 0x3, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mkdir(0x0, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = openat$uhid(0xffffffffffffff9c, 0x0, 0x802, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r3 = syz_io_uring_setup(0x497, &(0x7f0000000400)={0x0, 0x707b, 0x0, 0x4, 0x288}, &(0x7f0000000340)=0x0, &(0x7f0000000140)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) io_uring_enter(r3, 0x3516, 0x0, 0x4, 0x0, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) mount$tmpfs(0x0, &(0x7f0000000000)='./cgroup\x00', &(0x7f0000000140), 0x3200841, 0x0) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) listxattr(0x0, 0x0, 0x0) sendmsg$NFNL_MSG_CTHELPER_NEW(r6, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000580)={0x70, 0x0, 0x9, 0x3, 0x0, 0x0, {0x3, 0x0, 0x2}, [@NFCTH_PRIV_DATA_LEN={0x8, 0x5, 0x1, 0x0, 0x10}, @NFCTH_NAME={0x9, 0x1, 'syz1\x00'}, @NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x8, 0x1, 0x1, 0x0, 0x6}}, @NFCTH_TUPLE={0x3c, 0x2, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private0={0xfc, 0x0, '\x00', 0x1}}, {0x14, 0x4, @remote}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x11}}]}]}, 0x70}, 0x1, 0x0, 0x0, 0x4010}, 0x800) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x8, 0xc, 0x4, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r7 = socket(0x11, 0x800000003, 0x0) r8 = socket(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r7, 0x8933, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@gettfilter={0x4c, 0x2e, 0x400, 0x70bd2c, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x3, 0xc}, {0x3, 0x5}, {0x0, 0xffff}}, [{0x8, 0xb, 0x1}, {0x8, 0xb, 0x4}, {0x8, 0xb, 0x80000000}, {0x8, 0xb, 0x1}, {0x8, 0xb, 0x76a4}]}, 0x4c}}, 0x0) sendmsg$inet6(r1, &(0x7f0000000540)={&(0x7f0000000180)={0xa, 0x4e21, 0x3, @empty, 0x2564}, 0x1c, &(0x7f00000007c0)=[{&(0x7f0000000640)="93b5896b940c6e9b0735e7d91a4502a0f3cbaf728ac3963cebb52246ea881c98b6cb784f8c42b46194e4b5f968d4ce1de585ebb80f02ecc7a6f36a834c053375d9bf92a44c7303da4055ce390d77c845a8f1f049ab152a89f7d5ea6e94fafceffce1f65ce5b827604b3c64c59c01e26deb6f23b81e3d74a806dd69fa5aa25c5f5ce6", 0x82}, {0x0}, {0x0}, {0x0}], 0x4}, 0x4) 1.664015319s ago: executing program 1 (id=1311): madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) r0 = socket$nl_route(0x10, 0x3, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mkdir(0x0, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = openat$uhid(0xffffffffffffff9c, 0x0, 0x802, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r3 = syz_io_uring_setup(0x497, &(0x7f0000000400)={0x0, 0x707b, 0x0, 0x4, 0x288}, &(0x7f0000000340)=0x0, &(0x7f0000000140)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) io_uring_enter(r3, 0x3516, 0x0, 0x4, 0x0, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) mount$tmpfs(0x0, &(0x7f0000000000)='./cgroup\x00', &(0x7f0000000140), 0x3200841, 0x0) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) listxattr(0x0, 0x0, 0x0) sendmsg$NFNL_MSG_CTHELPER_NEW(r6, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000580)={0x70, 0x0, 0x9, 0x3, 0x0, 0x0, {0x3, 0x0, 0x2}, [@NFCTH_PRIV_DATA_LEN={0x8, 0x5, 0x1, 0x0, 0x10}, @NFCTH_NAME={0x9, 0x1, 'syz1\x00'}, @NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x8, 0x1, 0x1, 0x0, 0x6}}, @NFCTH_TUPLE={0x3c, 0x2, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private0={0xfc, 0x0, '\x00', 0x1}}, {0x14, 0x4, @remote}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x11}}]}]}, 0x70}, 0x1, 0x0, 0x0, 0x4010}, 0x800) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x8, 0xc, 0x4, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r7 = socket(0x11, 0x800000003, 0x0) r8 = socket(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r7, 0x8933, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@gettfilter={0x4c, 0x2e, 0x400, 0x70bd2c, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x3, 0xc}, {0x3, 0x5}, {0x0, 0xffff}}, [{0x8, 0xb, 0x1}, {0x8, 0xb, 0x4}, {0x8, 0xb, 0x80000000}, {0x8, 0xb, 0x1}, {0x8, 0xb, 0x76a4}]}, 0x4c}}, 0x0) sendmsg$inet6(r1, &(0x7f0000000540)={&(0x7f0000000180)={0xa, 0x4e21, 0x3, @empty, 0x2564}, 0x1c, &(0x7f00000007c0)=[{&(0x7f0000000640)="93b5896b940c6e9b0735e7d91a4502a0f3cbaf728ac3963cebb52246ea881c98b6cb784f8c42b46194e4b5f968d4ce1de585ebb80f02ecc7a6f36a834c053375d9bf92a44c7303da4055ce390d77c845a8f1f049ab152a89f7d5ea6e94fafceffce1f65ce5b827604b3c64c59c01e26deb6f23b81e3d74a806dd69fa5aa25c5f5ce6", 0x82}, {0x0}, {0x0}, {0x0}], 0x4, &(0x7f0000000940)=[@tclass={{0x14, 0x29, 0x43, 0x9}}, @hopopts={{0xf0, 0x29, 0x36, {0x68, 0x1a, '\x00', [@generic={0x0, 0xd2, "f3671c954454021a30d6f6da4ad6e7c4ad3ba5068228c77bf1f869fbb8d3afe82782161343e76d989510d20d4501298588504a82764796eb2cabf1a12d36be20df7dbb9600c16f4469821db7f86e6407d475868ffc913a6c541a8b82c7978bae8685f89ecf200fed49c013a65318d8d6cae5f85c1bafe3c368b4dc3d3b85b9334a30da40aa7667f023950ed26fb8f61daa51277550c2b180d470e82f79082643986abb45d78528b43eccc87f41cb5dd3676f99d5d2dfd060c9c2974f8e0433634dfb2abfaac2368e853c57ec8daace9eb676"}]}}}, @hopopts={{0x20, 0x29, 0x36, {0x73, 0x0, '\x00', [@jumbo={0xc2, 0x4, 0x4}]}}}, @rthdr={{0x18, 0x29, 0x39, {0x5c, 0x0, 0x0, 0xfb}}}, @flowinfo={{0x14, 0x29, 0xb, 0x8}}, @rthdr_2292={{0x28, 0x29, 0x39, {0x3c, 0x2, 0x0, 0x6, 0x0, [@local]}}}, @rthdr={{0x38, 0x29, 0x39, {0x32, 0x4, 0x2, 0x8f, 0x0, [@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @local]}}}, @hoplimit_2292={{0x14, 0x29, 0x8, 0x5}}], 0x1d0}, 0x4) 0s ago: executing program 8 (id=1312): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x11, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000100)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000180)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000880)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f00000029c0)={0x0, 0x0, 0x0}, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r6 = socket(0x400000000010, 0x3, 0x0) r7 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffbfffff, {0x0, 0x0, 0x0, r8, {0x0, 0x1}, {0xffff, 0xffff}, {0x0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000006100)=@newtfilter={0x3c, 0x2c, 0xd27, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r8, {0xb, 0x5}, {}, {0xfff3}}, [@filter_kind_options=@f_route={{0xa}, {0xc, 0x2, [@TCA_ROUTE4_TO={0x8, 0x2, 0xf1}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x10}, 0x0) r9 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_DAT_CACHE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x4b, &(0x7f0000000000)={&(0x7f0000000080)={0x1c, r9, 0x303, 0x0, 0x0, {0x6}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r10}]}, 0x1c}}, 0x2000c0c0) kernel console output (not intermixed with test programs): l use data=ordered instead of data journaling mode [ 676.930283][ T6630] loop5: detected capacity change from 0 to 256 [ 677.112183][ T6622] EXT4-fs (loop7): 1 truncate cleaned up [ 677.200798][ T6622] EXT4-fs (loop7): mounted filesystem without journal. Opts: quota,oldalloc,barrier=0x0000000000000003,debug_want_extra_isize=0x0000000000000080,block_validity,jqfmt=vfsv1,,errors=continue. Quota mode: writeback. [ 677.599069][ T6634] device bridge1 entered promiscuous mode [ 677.986141][ T1325] Bluetooth: hci3: command 0x1003 tx timeout [ 677.992406][ T146] Bluetooth: hci3: sending frame failed (-49) [ 678.842305][ T1325] Bluetooth: hci2: command 0x0406 tx timeout [ 679.111959][ T6646] netlink: 32 bytes leftover after parsing attributes in process `syz.5.464'. [ 680.167397][ T6324] Bluetooth: hci3: command 0x1001 tx timeout [ 680.290283][ T146] Bluetooth: hci3: sending frame failed (-49) [ 680.797163][ T6662] syz.8.468 (6662): drop_caches: 2 [ 680.943131][ T6662] syz.8.468 (6662): drop_caches: 2 [ 682.711559][ T6324] Bluetooth: hci3: command 0x1009 tx timeout [ 684.976878][ T6697] device bridge4 entered promiscuous mode [ 685.126597][ T6704] loop8: detected capacity change from 0 to 2048 [ 685.333429][ T6704] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 686.122086][ T1419] ieee802154 phy0 wpan0: encryption failed: -22 [ 686.129368][ T1419] ieee802154 phy1 wpan1: encryption failed: -22 [ 689.689558][ T6730] netlink: 'syz.5.483': attribute type 10 has an invalid length. [ 690.608105][ T6730] loop5: detected capacity change from 0 to 256 [ 690.663250][ T6730] FAT-fs (loop5): Unrecognized mount option "appra" or missing value [ 694.352553][ T6758] loop0: detected capacity change from 0 to 40427 [ 694.801312][ T6763] siw: device registration error -23 [ 695.987058][ T6758] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12 [ 695.995063][ T6758] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 696.023821][ T6758] F2FS-fs (loop0): invalid crc value [ 696.139615][ T6758] F2FS-fs (loop0): Found nat_bits in checkpoint [ 696.195226][ T6758] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 696.202384][ T6758] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 697.338530][ T6780] loop7: detected capacity change from 0 to 2048 [ 697.412691][ T6784] device bridge2 entered promiscuous mode [ 697.561006][ T6780] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 701.933343][ T6827] loop7: detected capacity change from 0 to 1024 [ 702.889896][ T6836] syz.0.507 (6836): drop_caches: 2 [ 703.005523][ T6836] syz.0.507 (6836): drop_caches: 2 [ 707.569674][ T6875] device bridge2 entered promiscuous mode [ 708.761361][ T6885] siw: device registration error -23 [ 711.532439][ T6895] loop5: detected capacity change from 0 to 2048 [ 711.622693][ T6895] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 711.897253][ T6911] loop7: detected capacity change from 0 to 512 [ 712.710922][ T6911] EXT4-fs error (device loop7): ext4_xattr_inode_iget:404: comm syz.7.525: inode #1: comm syz.7.525: iget: illegal inode # [ 712.752509][ T6911] EXT4-fs error (device loop7): ext4_xattr_inode_iget:409: comm syz.7.525: error while reading EA inode 1 err=-117 [ 712.868562][ T6911] EXT4-fs (loop7): 1 orphan inode deleted [ 712.912891][ T6911] EXT4-fs (loop7): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 712.983807][ T6930] loop0: detected capacity change from 0 to 256 [ 715.345956][ T6943] loop7: detected capacity change from 0 to 1024 [ 715.541772][ T6943] EXT4-fs (loop7): Ignoring removed nomblk_io_submit option [ 716.812437][ T6943] EXT4-fs (loop7): mounted filesystem without journal. Opts: noblock_validity,bsddf,sysvgroups,norecovery,debug_want_extra_isize=0x0000000000000080,noquota,nogrpid,noauto_da_alloc,nomblk_io_submit,,errors=continue. Quota mode: none. [ 717.383121][ T6971] device bridge3 entered promiscuous mode [ 719.511795][ T6985] netlink: 'syz.0.541': attribute type 1 has an invalid length. [ 719.519807][ T6985] netlink: 'syz.0.541': attribute type 2 has an invalid length. [ 722.467924][ T7017] loop4: detected capacity change from 0 to 40427 [ 722.535429][ T7017] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12 [ 722.543644][ T7017] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 722.553869][ T7017] F2FS-fs (loop4): invalid crc value [ 725.178914][ T7017] F2FS-fs (loop4): Failed to initialize F2FS segment manager (-4) [ 726.623642][ T7042] netlink: 'syz.7.555': attribute type 10 has an invalid length. [ 726.697568][ T7043] loop7: detected capacity change from 0 to 256 [ 726.767100][ T7043] FAT-fs (loop7): Unrecognized mount option "appra" or missing value [ 728.738010][ T7042] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 728.763633][ T7042] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 728.793810][ T7045] device bridge4 entered promiscuous mode [ 729.943660][ T7047] syz.0.556 (7047): drop_caches: 2 [ 729.955206][ T7047] syz.0.556 (7047): drop_caches: 2 [ 731.979960][ T7070] syz.0.560 (7070): drop_caches: 2 [ 731.985972][ T7070] syz.0.560 (7070): drop_caches: 2 [ 736.222689][ T7111] loop7: detected capacity change from 0 to 256 [ 737.578300][ T7118] device bridge5 entered promiscuous mode [ 738.257020][ T7122] loop7: detected capacity change from 0 to 512 [ 738.335589][ T7122] EXT4-fs (loop7): Ignoring removed oldalloc option [ 738.342502][ T7122] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 738.645150][ T7131] trusted_key: encrypted_key: key user:syz not found [ 739.667462][ T7122] EXT4-fs (loop7): 1 truncate cleaned up [ 739.694212][ T7122] EXT4-fs (loop7): mounted filesystem without journal. Opts: quota,oldalloc,barrier=0x0000000000000003,debug_want_extra_isize=0x0000000000000080,block_validity,jqfmt=vfsv1,,errors=continue. Quota mode: writeback. [ 743.599681][ T7149] loop5: detected capacity change from 0 to 1024 [ 743.684248][ T7162] loop7: detected capacity change from 0 to 512 [ 743.878197][ T7162] EXT4-fs (loop7): Ignoring removed oldalloc option [ 743.886161][ T7162] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 743.949313][ T7162] EXT4-fs (loop7): 1 truncate cleaned up [ 743.979906][ T7162] EXT4-fs (loop7): mounted filesystem without journal. Opts: quota,oldalloc,barrier=0x0000000000000003,debug_want_extra_isize=0x0000000000000080,block_validity,jqfmt=vfsv1,,errors=continue. Quota mode: writeback. [ 744.743963][ T13] Bluetooth: hci0: command 0x0406 tx timeout [ 747.688811][ T1419] ieee802154 phy0 wpan0: encryption failed: -22 [ 747.695215][ T1419] ieee802154 phy1 wpan1: encryption failed: -22 [ 751.421691][ T7224] device bridge5 entered promiscuous mode [ 753.936796][ T7249] vhci_hcd vhci_hcd.0: pdev(8) rhport(0) sockfd(4) [ 753.944043][ T7249] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 753.957519][ T7249] vhci_hcd vhci_hcd.0: Device attached [ 754.737451][ T7254] netlink: 'syz.0.600': attribute type 1 has an invalid length. [ 754.745352][ T7254] netlink: 'syz.0.600': attribute type 2 has an invalid length. [ 755.071352][ T6022] usb 49-1: new low-speed USB device number 2 using vhci_hcd [ 760.394573][ T7283] loop5: detected capacity change from 0 to 1024 [ 760.981234][ T7290] trusted_key: encrypted_key: key user:syz not found [ 761.662464][ T7250] vhci_hcd: connection reset by peer [ 761.689196][ T7285] syz.7.606 (7285): drop_caches: 2 [ 762.640180][ T7283] EXT4-fs (loop5): Ignoring removed nomblk_io_submit option [ 762.655110][ T7285] syz.7.606 (7285): drop_caches: 2 [ 762.662868][ T4255] vhci_hcd: stop threads [ 762.667926][ T4255] vhci_hcd: release socket [ 762.676475][ T4255] vhci_hcd: disconnect device [ 762.764301][ T6022] vhci_hcd: vhci_device speed not set [ 763.200315][ T7283] EXT4-fs (loop5): mounted filesystem without journal. Opts: noblock_validity,bsddf,sysvgroups,norecovery,debug_want_extra_isize=0x0000000000000080,noquota,nogrpid,noauto_da_alloc,nomblk_io_submit,,errors=continue. Quota mode: none. [ 763.310843][ T7311] netlink: 'syz.7.611': attribute type 10 has an invalid length. [ 763.402503][ T7312] loop7: detected capacity change from 0 to 256 [ 763.456940][ T7312] FAT-fs (loop7): Unrecognized mount option "appra" or missing value [ 764.262400][ T7313] device bridge5 entered promiscuous mode [ 766.998133][ T7323] syz.4.616 (7323): drop_caches: 2 [ 767.007236][ T7323] syz.4.616 (7323): drop_caches: 2 [ 768.134109][ T7339] loop8: detected capacity change from 0 to 1024 [ 769.292048][ T7339] EXT4-fs (loop8): Ignoring removed nomblk_io_submit option [ 769.467734][ T7339] EXT4-fs (loop8): mounted filesystem without journal. Opts: noblock_validity,bsddf,sysvgroups,norecovery,debug_want_extra_isize=0x0000000000000080,noquota,nogrpid,noauto_da_alloc,nomblk_io_submit,,errors=continue. Quota mode: none. [ 769.844349][ T4241] Bluetooth: hci3: Frame reassembly failed (-84) [ 771.343727][ T7374] device bridge3 entered promiscuous mode [ 771.960045][ T4245] Bluetooth: hci3: command 0x1003 tx timeout [ 772.006205][ T4207] Bluetooth: hci3: sending frame failed (-49) [ 772.114590][ T7381] device bridge4 entered promiscuous mode [ 773.174335][ T7390] netlink: 'syz.7.630': attribute type 10 has an invalid length. [ 773.205312][ T7390] loop7: detected capacity change from 0 to 256 [ 775.863986][ T5138] Bluetooth: hci3: command 0x1001 tx timeout [ 775.871699][ T7390] FAT-fs (loop7): Unrecognized mount option "appra" or missing value [ 776.020732][ T4207] Bluetooth: hci3: sending frame failed (-49) [ 776.931943][ T7396] loop8: detected capacity change from 0 to 40427 [ 777.773872][ T7396] F2FS-fs (loop8): Invalid log_blocksize (268), supports only 12 [ 777.781877][ T7396] F2FS-fs (loop8): Can't find valid F2FS filesystem in 1th superblock [ 777.802410][ T7396] F2FS-fs (loop8): invalid crc value [ 777.841561][ T7396] F2FS-fs (loop8): Found nat_bits in checkpoint [ 777.885532][ T7414] loop7: detected capacity change from 0 to 512 [ 778.070888][ T7396] F2FS-fs (loop8): Try to recover 1th superblock, ret: 0 [ 778.078414][ T7396] F2FS-fs (loop8): Mounted with checkpoint version = 48b305e5 [ 778.122106][ T7414] EXT4-fs (loop7): Ignoring removed oldalloc option [ 778.129731][ T7414] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 779.191224][ T5138] Bluetooth: hci3: command 0x1009 tx timeout [ 779.260819][ T7414] EXT4-fs (loop7): 1 truncate cleaned up [ 779.281972][ T7428] netlink: 36 bytes leftover after parsing attributes in process `syz.8.629'. [ 779.296826][ T7414] EXT4-fs (loop7): mounted filesystem without journal. Opts: quota,oldalloc,barrier=0x0000000000000003,debug_want_extra_isize=0x0000000000000080,block_validity,jqfmt=vfsv1,,errors=continue. Quota mode: writeback. [ 781.119887][ T7438] loop4: detected capacity change from 0 to 40427 [ 781.432286][ T7438] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12 [ 781.440079][ T7438] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 781.453839][ T7438] F2FS-fs (loop4): invalid crc value [ 781.532691][ T7438] F2FS-fs (loop4): Found nat_bits in checkpoint [ 781.601364][ T7438] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 781.609223][ T7438] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 783.018340][ T7462] device bridge6 entered promiscuous mode [ 785.004983][ T7483] netlink: 'syz.0.645': attribute type 10 has an invalid length. [ 785.044229][ T7483] loop0: detected capacity change from 0 to 256 [ 785.123823][ T7483] FAT-fs (loop0): Unrecognized mount option "appra" or missing value [ 789.236355][ T7511] loop7: detected capacity change from 0 to 40427 [ 790.152500][ T7511] F2FS-fs (loop7): Invalid log_blocksize (268), supports only 12 [ 790.160693][ T7511] F2FS-fs (loop7): Can't find valid F2FS filesystem in 1th superblock [ 790.262913][ T7511] F2FS-fs (loop7): invalid crc value [ 791.961329][ T7511] F2FS-fs (loop7): Failed to initialize F2FS segment manager (-4) [ 795.440719][ T7543] device bridge7 entered promiscuous mode [ 797.228187][ T7563] loop5: detected capacity change from 0 to 256 [ 800.030334][ T7596] loop0: detected capacity change from 0 to 40427 [ 800.055816][ T7596] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12 [ 800.063819][ T7596] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 800.074360][ T7596] F2FS-fs (loop0): invalid crc value [ 800.106279][ T7598] loop5: detected capacity change from 0 to 512 [ 801.054236][ T7606] netlink: 'syz.7.671': attribute type 1 has an invalid length. [ 801.062423][ T7606] netlink: 'syz.7.671': attribute type 2 has an invalid length. [ 801.105570][ T7596] F2FS-fs (loop0): Found nat_bits in checkpoint [ 801.234897][ T7598] EXT4-fs error (device loop5): ext4_xattr_inode_iget:404: comm syz.5.673: inode #1: comm syz.5.673: iget: illegal inode # [ 801.262148][ T7596] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 801.269359][ T7596] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 802.123489][ T7598] EXT4-fs error (device loop5): ext4_xattr_inode_iget:409: comm syz.5.673: error while reading EA inode 1 err=-117 [ 802.141580][ T7598] EXT4-fs (loop5): 1 orphan inode deleted [ 802.161411][ T7598] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 803.872883][ T7618] netlink: 'syz.4.676': attribute type 10 has an invalid length. [ 803.925144][ T7618] loop4: detected capacity change from 0 to 256 [ 803.992221][ T7618] FAT-fs (loop4): Unrecognized mount option "appra" or missing value [ 806.134279][ T7650] vhci_hcd vhci_hcd.0: pdev(8) rhport(0) sockfd(4) [ 806.141039][ T7650] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 806.264751][ T7650] vhci_hcd vhci_hcd.0: Device attached [ 807.376064][ T5105] usb 49-1: new low-speed USB device number 3 using vhci_hcd [ 809.331712][ T1419] ieee802154 phy0 wpan0: encryption failed: -22 [ 809.338273][ T1419] ieee802154 phy1 wpan1: encryption failed: -22 [ 810.649869][ T7651] vhci_hcd: connection reset by peer [ 810.656251][ T4241] vhci_hcd: stop threads [ 810.660707][ T4241] vhci_hcd: release socket [ 810.689127][ T4241] vhci_hcd: disconnect device [ 810.745560][ T7687] syz.4.687 (7687): drop_caches: 2 [ 810.808242][ T7687] syz.4.687 (7687): drop_caches: 2 [ 812.886501][ T5105] vhci_hcd: vhci_device speed not set [ 816.627323][ T7730] BFS-fs: bfs_fill_super(): No BFS filesystem on nullb0 (magic=00000000) [ 817.186030][ T7750] loop7: detected capacity change from 0 to 256 [ 821.644802][ T7765] loop0: detected capacity change from 0 to 40427 [ 821.733997][ T7765] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12 [ 821.741829][ T7765] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 821.762709][ T7765] F2FS-fs (loop0): invalid crc value [ 822.238617][ T7765] F2FS-fs (loop0): Found nat_bits in checkpoint [ 822.891948][ T7780] netlink: 'syz.4.706': attribute type 10 has an invalid length. [ 822.928604][ T7780] loop4: detected capacity change from 0 to 256 [ 823.424642][ T7765] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 823.432247][ T7765] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 824.653654][ T7780] FAT-fs (loop4): Unrecognized mount option "appra" or missing value [ 825.542889][ T7788] syz.5.709 (7788): drop_caches: 2 [ 825.549326][ T7788] syz.5.709 (7788): drop_caches: 2 [ 825.807088][ T7797] loop4: detected capacity change from 0 to 256 [ 825.893715][ T7797] FAT-fs (loop4): Unrecognized mount option "appra" or missing value [ 827.731173][ T7805] trusted_key: encrypted_key: key user:syz not found [ 829.085897][ T7813] loop7: detected capacity change from 0 to 512 [ 830.015111][ T7813] EXT4-fs error (device loop7): ext4_xattr_inode_iget:404: comm syz.7.715: inode #1: comm syz.7.715: iget: illegal inode # [ 830.104238][ T7824] batman_adv: Cannot find parent device [ 830.111311][ T7824] batman_adv: batadv0: Adding interface: gretap1 [ 830.117687][ T7824] batman_adv: batadv0: The MTU of interface gretap1 is too small (1462) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 830.143017][ C1] vkms_vblank_simulate: vblank timer overrun [ 830.149720][ T7824] batman_adv: batadv0: Not using interface gretap1 (retrying later): interface not active [ 830.171339][ T7813] EXT4-fs error (device loop7): ext4_xattr_inode_iget:409: comm syz.7.715: error while reading EA inode 1 err=-117 [ 830.200742][ T7813] EXT4-fs (loop7): 1 orphan inode deleted [ 830.223051][ T7829] loop0: detected capacity change from 0 to 512 [ 830.229609][ T7813] EXT4-fs (loop7): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 831.424154][ T7829] EXT4-fs error (device loop0): ext4_xattr_inode_iget:404: comm syz.0.710: inode #1: comm syz.0.710: iget: illegal inode # [ 831.510763][ T7829] EXT4-fs error (device loop0): ext4_xattr_inode_iget:409: comm syz.0.710: error while reading EA inode 1 err=-117 [ 831.745511][ T7829] EXT4-fs (loop0): 1 orphan inode deleted [ 831.761132][ T7829] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 835.652383][ T7877] netlink: 'syz.8.724': attribute type 10 has an invalid length. [ 835.698184][ T7877] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 835.729091][ T7878] loop8: detected capacity change from 0 to 256 [ 835.743889][ T7877] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 835.777794][ T7878] FAT-fs (loop8): Unrecognized mount option "appra" or missing value [ 843.701188][ T7926] syz.4.734 (7926): drop_caches: 2 [ 843.707864][ T7926] syz.4.734 (7926): drop_caches: 2 [ 847.469605][ T7946] loop5: detected capacity change from 0 to 2048 [ 847.683125][ T7946] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 847.783270][ T7956] netlink: 'syz.0.740': attribute type 1 has an invalid length. [ 847.791025][ T7956] netlink: 'syz.0.740': attribute type 2 has an invalid length. [ 852.352770][ T7923] Bluetooth: hci3: command 0x1003 tx timeout [ 852.671468][ T4207] Bluetooth: hci3: sending frame failed (-49) [ 854.631432][ T8004] loop0: detected capacity change from 0 to 256 [ 854.686439][ T8004] FAT-fs (loop0): Unrecognized mount option "appra" or missing value [ 855.018891][ T4245] Bluetooth: hci3: command 0x1001 tx timeout [ 856.877198][ T8008] batman_adv: Cannot find parent device [ 856.884636][ T8008] batman_adv: batadv0: Adding interface: gretap1 [ 856.891653][ T8008] batman_adv: batadv0: The MTU of interface gretap1 is too small (1462) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 856.917257][ T8008] batman_adv: batadv0: Not using interface gretap1 (retrying later): interface not active [ 857.294033][ T4207] Bluetooth: hci3: sending frame failed (-49) [ 859.351297][ T7923] Bluetooth: hci3: command 0x1009 tx timeout [ 863.367506][ T8053] siw: device registration error -23 [ 866.701612][ T8075] loop8: detected capacity change from 0 to 512 [ 867.788336][ T8085] loop7: detected capacity change from 0 to 256 [ 867.816024][ T8085] FAT-fs (loop7): Unrecognized mount option "appra" or missing value [ 867.857305][ T8075] EXT4-fs error (device loop8): ext4_xattr_inode_iget:404: comm syz.8.764: inode #1: comm syz.8.764: iget: illegal inode # [ 868.000936][ T8075] EXT4-fs error (device loop8): ext4_xattr_inode_iget:409: comm syz.8.764: error while reading EA inode 1 err=-117 [ 868.547377][ T8075] EXT4-fs (loop8): 1 orphan inode deleted [ 868.600340][ T8075] EXT4-fs (loop8): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 870.331787][ T1419] ieee802154 phy0 wpan0: encryption failed: -22 [ 870.338241][ T1419] ieee802154 phy1 wpan1: encryption failed: -22 [ 876.063821][ T8134] vhci_hcd vhci_hcd.0: pdev(8) rhport(0) sockfd(4) [ 876.070380][ T8134] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 876.198542][ T8149] loop7: detected capacity change from 0 to 256 [ 877.623830][ T8149] FAT-fs (loop7): Unrecognized mount option "appra" or missing value [ 877.646625][ T8134] vhci_hcd vhci_hcd.0: Device attached [ 877.887674][ T8138] vhci_hcd: connection closed [ 877.889408][ T154] vhci_hcd: stop threads [ 877.942017][ T154] vhci_hcd: release socket [ 878.021153][ T1325] usb 49-1: new low-speed USB device number 4 using vhci_hcd [ 878.087525][ T154] vhci_hcd: disconnect device [ 878.221978][ T8152] loop4: detected capacity change from 0 to 512 [ 879.416900][ T8164] loop7: detected capacity change from 0 to 256 [ 879.797079][ T8178] trusted_key: encrypted_key: insufficient parameters specified [ 882.135469][ T8190] lo speed is unknown, defaulting to 1000 [ 883.906648][ T1325] vhci_hcd: vhci_device speed not set [ 883.991879][ T4306] Bluetooth: hci3: command 0x0409 tx timeout [ 884.049583][ T154] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 885.119575][ T8190] chnl_net:caif_netlink_parms(): no params data found [ 885.303802][ T8220] batman_adv: Cannot find parent device [ 885.310714][ T8220] batman_adv: batadv0: Adding interface: gretap1 [ 885.317227][ T8220] batman_adv: batadv0: The MTU of interface gretap1 is too small (1462) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 885.342647][ T8220] batman_adv: batadv0: Not using interface gretap1 (retrying later): interface not active [ 885.614164][ T26] audit: type=1800 audit(1745553395.430:10): pid=8226 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.8.793" name="SYSV00000000" dev="hugetlbfs" ino=0 res=0 errno=0 [ 885.811609][ T154] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 886.145533][ T8229] loop5: detected capacity change from 0 to 512 [ 886.214275][ T4306] Bluetooth: hci3: command 0x041b tx timeout [ 886.420962][ T8240] BFS-fs: bfs_fill_super(): No BFS filesystem on nullb0 (magic=00000000) [ 887.194062][ T8232] loop7: detected capacity change from 0 to 256 [ 887.243156][ T8229] EXT4-fs error (device loop5): ext4_xattr_inode_iget:404: comm syz.5.794: inode #1: comm syz.5.794: iget: illegal inode # [ 887.253016][ T8232] FAT-fs (loop7): Unrecognized mount option "appra" or missing value [ 887.266365][ T154] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 887.295118][ T8229] EXT4-fs error (device loop5): ext4_xattr_inode_iget:409: comm syz.5.794: error while reading EA inode 1 err=-117 [ 887.330230][ T8229] EXT4-fs (loop5): 1 orphan inode deleted [ 887.348128][ T8229] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 888.231334][ T4243] Bluetooth: hci3: command 0x040f tx timeout [ 888.908040][ T8264] siw: device registration error -23 [ 889.691078][ T154] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 890.966630][ T4306] Bluetooth: hci3: command 0x0419 tx timeout [ 890.988388][ T8190] bridge0: port 1(bridge_slave_0) entered blocking state [ 891.002528][ T8190] bridge0: port 1(bridge_slave_0) entered disabled state [ 891.011010][ T8190] device bridge_slave_0 entered promiscuous mode [ 891.035514][ T8190] bridge0: port 2(bridge_slave_1) entered blocking state [ 891.050185][ T8190] bridge0: port 2(bridge_slave_1) entered disabled state [ 891.059155][ T8190] device bridge_slave_1 entered promiscuous mode [ 891.413911][ T8190] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 891.477409][ T8190] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 897.447232][ T8190] team0: Port device team_slave_0 added [ 897.470828][ T8323] loop8: detected capacity change from 0 to 2048 [ 897.512780][ T8190] team0: Port device team_slave_1 added [ 898.699626][ T8323] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 899.407976][ T8328] syz.7.811 (8328): drop_caches: 2 [ 899.828369][ T8190] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 900.001935][ T8190] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 901.674828][ T8328] syz.7.811 (8328): drop_caches: 2 [ 901.680371][ T8190] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 901.852687][ T8190] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 901.859678][ T8190] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 902.233102][ T8190] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 902.333697][ T8190] device hsr_slave_0 entered promiscuous mode [ 902.350953][ T8190] device hsr_slave_1 entered promiscuous mode [ 902.358631][ T8347] loop5: detected capacity change from 0 to 2048 [ 902.367028][ T8190] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 902.395769][ T8190] Cannot create hsr debugfs directory [ 902.708658][ T8347] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 902.788215][ T8351] netlink: 'syz.4.815': attribute type 1 has an invalid length. [ 902.797515][ T8351] netlink: 'syz.4.815': attribute type 2 has an invalid length. [ 904.674733][ T8370] siw: device registration error -23 [ 906.492401][ T8190] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 906.502626][ T8190] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 906.521874][ T8190] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 906.987194][ T8190] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 907.228234][ T8391] loop5: detected capacity change from 0 to 2048 [ 907.890907][ T8391] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 911.670715][ T154] device hsr_slave_0 left promiscuous mode [ 911.843784][ T154] device hsr_slave_1 left promiscuous mode [ 911.855764][ T154] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 911.871131][ T154] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 912.908459][ T154] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 912.932694][ T154] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 912.937986][ T8425] loop4: detected capacity change from 0 to 1024 [ 913.771210][ T8426] siw: device registration error -23 [ 914.641691][ T8419] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(4) [ 914.648350][ T8419] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 914.659964][ T154] device bridge_slave_1 left promiscuous mode [ 914.666636][ T154] bridge0: port 2(bridge_slave_1) entered disabled state [ 914.676018][ T8419] vhci_hcd vhci_hcd.0: Device attached [ 914.683161][ T154] device bridge_slave_0 left promiscuous mode [ 914.689429][ T154] bridge0: port 1(bridge_slave_0) entered disabled state [ 914.833130][ T154] device veth1_macvtap left promiscuous mode [ 914.853453][ T8425] EXT4-fs (loop4): Ignoring removed nomblk_io_submit option [ 914.902339][ T154] device veth0_macvtap left promiscuous mode [ 914.918118][ T154] device veth1_vlan left promiscuous mode [ 914.941742][ T154] device veth0_vlan left promiscuous mode [ 914.971148][ T1325] usb 43-1: new low-speed USB device number 4 using vhci_hcd [ 915.228378][ T8425] EXT4-fs (loop4): mounted filesystem without journal. Opts: noblock_validity,bsddf,sysvgroups,norecovery,debug_want_extra_isize=0x0000000000000080,noquota,nogrpid,noauto_da_alloc,nomblk_io_submit,,errors=continue. Quota mode: none. [ 916.318402][ T8451] syz.5.832 (8451): drop_caches: 2 [ 916.353879][ T8451] syz.5.832 (8451): drop_caches: 2 [ 917.135643][ T8465] syz.8.835 (8465): drop_caches: 2 [ 917.162935][ T8465] syz.8.835 (8465): drop_caches: 2 [ 919.325094][ T8473] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(4) [ 919.331738][ T8473] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 919.366892][ T8473] vhci_hcd vhci_hcd.0: Device attached [ 919.489233][ T154] team0 (unregistering): Port device team_slave_1 removed [ 919.506195][ T154] team0 (unregistering): Port device team_slave_0 removed [ 919.520779][ T154] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 919.536618][ T154] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 919.580278][ T154] bond0 (unregistering): (slave batadv0): Releasing backup interface [ 919.620753][ T154] bond0 (unregistering): Released all slaves [ 919.651510][ T4350] usb 41-1: new low-speed USB device number 2 using vhci_hcd [ 919.734533][ T4244] lo speed is unknown, defaulting to 1000 [ 919.809474][ T8190] 8021q: adding VLAN 0 to HW filter on device bond0 [ 919.983256][ T4302] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 919.992280][ T4302] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 920.003520][ T8190] 8021q: adding VLAN 0 to HW filter on device team0 [ 920.015080][ T4302] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 920.030377][ T4302] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 920.041196][ T4302] bridge0: port 1(bridge_slave_0) entered blocking state [ 920.048284][ T4302] bridge0: port 1(bridge_slave_0) entered forwarding state [ 920.890484][ T4302] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 921.094483][ T4340] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 921.252364][ T4340] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 921.261933][ T4340] bridge0: port 2(bridge_slave_1) entered blocking state [ 921.269084][ T4340] bridge0: port 2(bridge_slave_1) entered forwarding state [ 921.277817][ T4340] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 922.096985][ T4340] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 923.767931][ T4340] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 923.858558][ T4340] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 923.867954][ T4340] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 923.887810][ T4340] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 923.918865][ T8190] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 923.970164][ T8190] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 924.109016][ T4340] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 924.119737][ T4340] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 924.154421][ T4340] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 924.169982][ T4340] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 924.188718][ T4340] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 924.202433][ T4340] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 926.943843][ T8526] syz.5.845 (8526): drop_caches: 2 [ 926.967772][ T8526] syz.5.845 (8526): drop_caches: 2 [ 927.102712][ T4221] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 927.110230][ T4221] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 927.190995][ T8190] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 930.275351][ T4221] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 930.292525][ T4221] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 930.313399][ T8562] loop5: detected capacity change from 0 to 1024 [ 930.516853][ T8562] EXT4-fs (loop5): Ignoring removed nomblk_io_submit option [ 930.560425][ T8567] vhci_hcd vhci_hcd.0: pdev(7) rhport(0) sockfd(4) [ 930.566964][ T8567] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 930.576952][ T4340] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 930.588073][ T8567] vhci_hcd vhci_hcd.0: Device attached [ 930.596961][ T4340] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 930.613226][ T8569] syz.4.852 (8569): drop_caches: 2 [ 930.629190][ T8562] EXT4-fs (loop5): mounted filesystem without journal. Opts: noblock_validity,bsddf,sysvgroups,norecovery,debug_want_extra_isize=0x0000000000000080,noquota,nogrpid,noauto_da_alloc,nomblk_io_submit,,errors=continue. Quota mode: none. [ 930.687523][ T4340] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 930.871563][ T4243] usb 47-1: new low-speed USB device number 2 using vhci_hcd [ 931.283053][ T8569] syz.4.852 (8569): drop_caches: 2 [ 931.328153][ T4340] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 931.369062][ T8570] vhci_hcd: connection reset by peer [ 931.374787][ T411] vhci_hcd: stop threads [ 931.379086][ T411] vhci_hcd: release socket [ 931.396830][ T411] vhci_hcd: disconnect device [ 931.416405][ T8190] device veth0_vlan entered promiscuous mode [ 931.486052][ T8190] device veth1_vlan entered promiscuous mode [ 931.622999][ T4340] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 931.642323][ T4340] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 931.668835][ T8190] device veth0_macvtap entered promiscuous mode [ 931.686957][ T8190] device veth1_macvtap entered promiscuous mode [ 931.749616][ T8190] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 931.763073][ T1419] ieee802154 phy0 wpan0: encryption failed: -22 [ 931.763168][ T1419] ieee802154 phy1 wpan1: encryption failed: -22 [ 931.799488][ T8190] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 931.933187][ T8190] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 932.175421][ T8190] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 932.185695][ T8190] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 932.196446][ T8190] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 932.208290][ T8190] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 932.229227][ T8190] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 932.262276][ T8190] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 932.323559][ T8190] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 932.399183][ T8190] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 932.443170][ T8190] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 932.492546][ T8190] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 932.664842][ T8190] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 932.783700][ T8190] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 932.824725][ T8190] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 932.876321][ T8190] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 933.004348][ T8190] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 933.287384][ T4221] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 933.322357][ T4221] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 933.371956][ T4221] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 933.391924][ T4221] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 933.422067][ T4221] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 933.451823][ T4221] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 933.624405][ T8190] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 934.726108][ T8190] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 935.439113][ T8190] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 935.449033][ T8190] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 935.929502][ T8637] loop7: detected capacity change from 0 to 256 [ 935.975851][ T8637] FAT-fs (loop7): Unrecognized mount option "appra" or missing value [ 936.391166][ T4243] vhci_hcd: vhci_device speed not set [ 937.313785][ T8636] loop8: detected capacity change from 0 to 512 [ 937.432097][ T8636] EXT4-fs (loop8): Ignoring removed oldalloc option [ 937.504544][ T8636] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode [ 938.429640][ T8636] EXT4-fs (loop8): 1 truncate cleaned up [ 938.882043][ T8636] EXT4-fs (loop8): mounted filesystem without journal. Opts: quota,oldalloc,barrier=0x0000000000000003,debug_want_extra_isize=0x0000000000000080,block_validity,jqfmt=vfsv1,,errors=continue. Quota mode: writeback. [ 941.004603][ T8662] loop7: detected capacity change from 0 to 256 [ 941.084339][ T8662] FAT-fs (loop7): Unrecognized mount option "appra" or missing value [ 942.474575][ T8671] loop8: detected capacity change from 0 to 1024 [ 942.845665][ T8671] EXT4-fs (loop8): Ignoring removed nomblk_io_submit option [ 943.066083][ T8677] loop5: detected capacity change from 0 to 512 [ 943.097856][ T8683] loop7: detected capacity change from 0 to 2048 [ 943.109946][ T8680] loop4: detected capacity change from 0 to 1024 [ 943.120309][ T8671] EXT4-fs (loop8): mounted filesystem without journal. Opts: noblock_validity,bsddf,sysvgroups,norecovery,debug_want_extra_isize=0x0000000000000080,noquota,nogrpid,noauto_da_alloc,nomblk_io_submit,,errors=continue. Quota mode: none. [ 943.169246][ T8683] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 943.180724][ T8680] EXT4-fs (loop4): Ignoring removed nomblk_io_submit option [ 943.229478][ T8677] EXT4-fs error (device loop5): ext4_xattr_inode_iget:404: comm syz.5.870: inode #1: comm syz.5.870: iget: illegal inode # [ 943.689639][ T8677] EXT4-fs error (device loop5): ext4_xattr_inode_iget:409: comm syz.5.870: error while reading EA inode 1 err=-117 [ 943.717553][ T8680] EXT4-fs (loop4): mounted filesystem without journal. Opts: noblock_validity,bsddf,sysvgroups,norecovery,debug_want_extra_isize=0x0000000000000080,noquota,nogrpid,noauto_da_alloc,nomblk_io_submit,,errors=continue. Quota mode: none. [ 943.837496][ T8677] EXT4-fs (loop5): 1 orphan inode deleted [ 943.932921][ T8677] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 945.689232][ T5105] Bluetooth: hci1: command 0x0409 tx timeout [ 947.390512][ T8715] netlink: 'syz.5.875': attribute type 2 has an invalid length. [ 947.518946][ T8678] chnl_net:caif_netlink_parms(): no params data found [ 947.607114][ T8718] lo speed is unknown, defaulting to 1000 [ 947.613916][ T8718] lo speed is unknown, defaulting to 1000 [ 947.620353][ T8718] lo speed is unknown, defaulting to 1000 [ 947.634126][ T8718] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 947.708198][ T8718] lo speed is unknown, defaulting to 1000 [ 947.729514][ T8718] lo speed is unknown, defaulting to 1000 [ 947.739505][ T8718] lo speed is unknown, defaulting to 1000 [ 947.761236][ T4245] Bluetooth: hci1: command 0x041b tx timeout [ 948.506021][ T8718] lo speed is unknown, defaulting to 1000 [ 949.775675][ T8718] lo speed is unknown, defaulting to 1000 [ 950.278693][ T4306] Bluetooth: hci1: command 0x040f tx timeout [ 951.571820][ T8718] lo speed is unknown, defaulting to 1000 [ 951.580209][ T8678] bridge0: port 1(bridge_slave_0) entered blocking state [ 951.598956][ T8678] bridge0: port 1(bridge_slave_0) entered disabled state [ 951.647519][ T8678] device bridge_slave_0 entered promiscuous mode [ 951.666854][ T8678] bridge0: port 2(bridge_slave_1) entered blocking state [ 951.690435][ T8678] bridge0: port 2(bridge_slave_1) entered disabled state [ 951.729863][ T8678] device bridge_slave_1 entered promiscuous mode [ 951.776438][ T8753] device bridge5 entered promiscuous mode [ 952.824171][ T4306] Bluetooth: hci1: command 0x0419 tx timeout [ 953.850936][ T8678] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 953.911962][ T8678] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 954.887259][ T8769] siw: device registration error -23 [ 956.197969][ T8678] team0: Port device team_slave_0 added [ 956.325075][ T8678] team0: Port device team_slave_1 added [ 957.659663][ T8678] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 957.683562][ T8678] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 957.710812][ T8678] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 957.724008][ T8678] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 957.731467][ T8678] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 957.781464][ T8678] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 958.050121][ T8805] loop4: detected capacity change from 0 to 256 [ 958.513649][ T8678] device hsr_slave_0 entered promiscuous mode [ 958.547085][ T8805] FAT-fs (loop4): Unrecognized mount option "appra" or missing value [ 958.663286][ T8678] device hsr_slave_1 entered promiscuous mode [ 958.781639][ T8678] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 958.899073][ T8678] Cannot create hsr debugfs directory [ 959.022137][ T154] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 959.200448][ T154] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 959.405876][ T8817] syz.4.893 (8817): drop_caches: 2 [ 960.301214][ T8822] siw: device registration error -23 [ 961.259425][ T8817] syz.4.893 (8817): drop_caches: 2 [ 961.317569][ T154] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 961.405832][ T8828] loop7: detected capacity change from 0 to 2048 [ 961.469267][ T154] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 961.488932][ T8828] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 961.501956][ T8831] vhci_hcd vhci_hcd.0: port 0 already used [ 963.179981][ T8852] loop4: detected capacity change from 0 to 512 [ 963.443310][ T8852] EXT4-fs error (device loop4): ext4_xattr_inode_iget:404: comm syz.4.900: inode #1: comm syz.4.900: iget: illegal inode # [ 963.465863][ T8852] EXT4-fs error (device loop4): ext4_xattr_inode_iget:409: comm syz.4.900: error while reading EA inode 1 err=-117 [ 963.479362][ T8852] EXT4-fs (loop4): 1 orphan inode deleted [ 963.485998][ T8852] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 965.097916][ T8870] siw: device registration error -23 [ 970.352103][ T8894] siw: device registration error -23 [ 971.110931][ T8678] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 971.304116][ T8678] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 972.566634][ T8678] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 972.586067][ T8678] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 972.668219][ T8903] batman_adv: Cannot find parent device [ 972.675142][ T8903] batman_adv: batadv0: Adding interface: gretap1 [ 972.681599][ T8903] batman_adv: batadv0: The MTU of interface gretap1 is too small (1462) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 972.707211][ T8903] batman_adv: batadv0: Not using interface gretap1 (retrying later): interface not active [ 972.797107][ T8906] loop7: detected capacity change from 0 to 512 [ 972.945924][ T8906] EXT4-fs error (device loop7): ext4_xattr_inode_iget:404: comm syz.7.910: inode #1: comm syz.7.910: iget: illegal inode # [ 972.978543][ T154] device hsr_slave_0 left promiscuous mode [ 972.992647][ T8910] loop4: detected capacity change from 0 to 1024 [ 973.011878][ T8906] EXT4-fs error (device loop7): ext4_xattr_inode_iget:409: comm syz.7.910: error while reading EA inode 1 err=-117 [ 973.028916][ T8906] EXT4-fs (loop7): 1 orphan inode deleted [ 973.033256][ T154] device hsr_slave_1 left promiscuous mode [ 973.038735][ T8906] EXT4-fs (loop7): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 973.075192][ T154] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 973.115517][ T8910] EXT4-fs (loop4): Ignoring removed nomblk_io_submit option [ 973.188576][ T154] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 973.244836][ T8910] EXT4-fs (loop4): mounted filesystem without journal. Opts: noblock_validity,bsddf,sysvgroups,norecovery,debug_want_extra_isize=0x0000000000000080,noquota,nogrpid,noauto_da_alloc,nomblk_io_submit,,errors=continue. Quota mode: none. [ 973.322301][ T154] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 973.329776][ T154] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 973.681650][ T154] device bridge_slave_1 left promiscuous mode [ 973.932587][ T154] bridge0: port 2(bridge_slave_1) entered disabled state [ 974.137566][ T154] device bridge_slave_0 left promiscuous mode [ 974.266260][ T154] bridge0: port 1(bridge_slave_0) entered disabled state [ 974.634217][ T154] device veth1_macvtap left promiscuous mode [ 974.698990][ T154] device veth0_macvtap left promiscuous mode [ 974.705312][ T154] device veth1_vlan left promiscuous mode [ 974.712316][ T154] device veth0_vlan left promiscuous mode [ 975.527078][ T154] team0 (unregistering): Port device team_slave_1 removed [ 975.599924][ T154] team0 (unregistering): Port device team_slave_0 removed [ 975.694828][ T154] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 975.745273][ T154] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 976.008490][ T154] bond0 (unregistering): Released all slaves [ 976.121840][ T8940] netlink: 'syz.4.913': attribute type 2 has an invalid length. [ 977.228862][ T8678] 8021q: adding VLAN 0 to HW filter on device bond0 [ 977.294808][ T8678] 8021q: adding VLAN 0 to HW filter on device team0 [ 977.311297][ T411] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 977.319855][ T411] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 978.662733][ T411] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 978.673209][ T411] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 978.687901][ T411] bridge0: port 1(bridge_slave_0) entered blocking state [ 978.695134][ T411] bridge0: port 1(bridge_slave_0) entered forwarding state [ 979.033055][ T8967] loop4: detected capacity change from 0 to 256 [ 979.307536][ T8967] FAT-fs (loop4): Unrecognized mount option "appra" or missing value [ 979.558123][ T411] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 979.698506][ T411] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 979.802520][ T411] bridge0: port 2(bridge_slave_1) entered blocking state [ 979.809625][ T411] bridge0: port 2(bridge_slave_1) entered forwarding state [ 979.817594][ T411] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 979.910066][ T6497] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 979.993565][ T6497] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 980.251251][ T8978] loop7: detected capacity change from 0 to 256 [ 981.508622][ T8978] FAT-fs (loop7): Unrecognized mount option "appra" or missing value [ 981.630445][ T6497] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 981.833208][ T6497] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 981.999802][ T6497] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 982.009377][ T6497] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 982.018475][ T6497] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 982.028593][ T6497] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 982.040945][ T6497] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 983.971708][ T8987] loop4: detected capacity change from 0 to 256 [ 984.034841][ T6497] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 984.179883][ T6497] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 984.313714][ T8678] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 986.545316][ T9010] loop4: detected capacity change from 0 to 1024 [ 987.509566][ T6497] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 987.674053][ T9010] EXT4-fs (loop4): Ignoring removed nomblk_io_submit option [ 987.718840][ T6497] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 988.536133][ T8678] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 988.552825][ T9010] EXT4-fs (loop4): mounted filesystem without journal. Opts: noblock_validity,bsddf,sysvgroups,norecovery,debug_want_extra_isize=0x0000000000000080,noquota,nogrpid,noauto_da_alloc,nomblk_io_submit,,errors=continue. Quota mode: none. [ 989.748346][ T9035] device bridge8 entered promiscuous mode [ 993.326976][ T1419] ieee802154 phy0 wpan0: encryption failed: -22 [ 993.333387][ T1419] ieee802154 phy1 wpan1: encryption failed: -22 [ 996.010394][ T4287] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 997.168723][ T4287] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 997.361807][ T8678] device veth0_vlan entered promiscuous mode [ 997.368785][ T4340] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 997.403335][ T4340] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 997.472186][ T4340] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 997.521749][ T4340] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 997.687921][ T8678] device veth1_vlan entered promiscuous mode [ 1001.501661][ T9096] loop4: detected capacity change from 0 to 1024 [ 1001.568655][ T9096] EXT4-fs (loop4): Ignoring removed nomblk_io_submit option [ 1001.642017][ T9096] EXT4-fs (loop4): mounted filesystem without journal. Opts: noblock_validity,bsddf,sysvgroups,norecovery,debug_want_extra_isize=0x0000000000000080,noquota,nogrpid,noauto_da_alloc,nomblk_io_submit,,errors=continue. Quota mode: none. [ 1001.762137][ T9103] loop8: detected capacity change from 0 to 256 [ 1003.716435][ T9109] netlink: 'syz.5.947': attribute type 1 has an invalid length. [ 1003.724254][ T9109] netlink: 'syz.5.947': attribute type 2 has an invalid length. [ 1003.797308][ T9107] lo speed is unknown, defaulting to 1000 [ 1005.034965][ T9115] lo speed is unknown, defaulting to 1000 [ 1005.063051][ T9128] siw: device registration error -23 [ 1005.236981][ T9107] chnl_net:caif_netlink_parms(): no params data found [ 1005.313875][ T1109] Bluetooth: hci1: command 0x0409 tx timeout [ 1005.520023][ T9136] trusted_key: encrypted_key: key user:syz not found [ 1005.591525][ T4306] Bluetooth: hci2: command 0x0409 tx timeout [ 1006.199894][ T9115] chnl_net:caif_netlink_parms(): no params data found [ 1006.235948][ T9107] bridge0: port 1(bridge_slave_0) entered blocking state [ 1006.247334][ T9107] bridge0: port 1(bridge_slave_0) entered disabled state [ 1006.272666][ T9107] device bridge_slave_0 entered promiscuous mode [ 1006.312238][ T9107] bridge0: port 2(bridge_slave_1) entered blocking state [ 1006.319345][ T9107] bridge0: port 2(bridge_slave_1) entered disabled state [ 1006.336066][ T9107] device bridge_slave_1 entered promiscuous mode [ 1006.482167][ T9107] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1006.544512][ T9107] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1006.711991][ T9167] loop4: detected capacity change from 0 to 1024 [ 1006.737641][ T9107] team0: Port device team_slave_0 added [ 1006.757260][ T9107] team0: Port device team_slave_1 added [ 1006.780209][ T9167] EXT4-fs (loop4): Ignoring removed nomblk_io_submit option [ 1006.828618][ T9107] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1006.836227][ T9107] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1006.850718][ T9167] EXT4-fs (loop4): mounted filesystem without journal. Opts: noblock_validity,bsddf,sysvgroups,norecovery,debug_want_extra_isize=0x0000000000000080,noquota,nogrpid,noauto_da_alloc,nomblk_io_submit,,errors=continue. Quota mode: none. [ 1006.862240][ C1] vkms_vblank_simulate: vblank timer overrun [ 1006.866701][ T9107] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1006.919147][ T9107] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1006.927580][ T9107] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1006.954470][ T9107] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1007.118893][ T154] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1007.176140][ T9115] bridge0: port 1(bridge_slave_0) entered blocking state [ 1007.244905][ T9115] bridge0: port 1(bridge_slave_0) entered disabled state [ 1007.342448][ T9115] device bridge_slave_0 entered promiscuous mode [ 1007.398946][ T4306] Bluetooth: hci1: command 0x041b tx timeout [ 1007.864189][ T4245] Bluetooth: hci2: command 0x041b tx timeout [ 1007.918239][ T9115] bridge0: port 2(bridge_slave_1) entered blocking state [ 1008.096270][ T9115] bridge0: port 2(bridge_slave_1) entered disabled state [ 1008.160734][ T9115] device bridge_slave_1 entered promiscuous mode [ 1008.291337][ T154] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1009.203789][ T9183] syz.5.957 (9183): drop_caches: 2 [ 1009.279102][ T9183] syz.5.957 (9183): drop_caches: 2 [ 1009.431174][ T5105] Bluetooth: hci1: command 0x040f tx timeout [ 1009.448075][ T9115] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1009.487445][ T9107] device hsr_slave_0 entered promiscuous mode [ 1009.515790][ T9107] device hsr_slave_1 entered promiscuous mode [ 1009.674731][ T9107] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1009.731385][ T9107] Cannot create hsr debugfs directory [ 1009.866323][ T9197] siw: device registration error -23 [ 1010.573083][ T5105] Bluetooth: hci2: command 0x040f tx timeout [ 1010.674080][ T9191] netlink: 'syz.8.958': attribute type 10 has an invalid length. [ 1011.494542][ T9115] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1011.511110][ T5105] Bluetooth: hci1: command 0x0419 tx timeout [ 1011.708826][ T154] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1011.713802][ T9208] syz.4.962 (9208): drop_caches: 2 [ 1011.734807][ T9208] syz.4.962 (9208): drop_caches: 2 [ 1012.656485][ T5105] Bluetooth: hci2: command 0x0419 tx timeout [ 1012.706729][ T9115] team0: Port device team_slave_0 added [ 1012.725333][ T9115] team0: Port device team_slave_1 added [ 1012.783766][ T154] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1012.836325][ T9115] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1012.843916][ T9115] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1012.870846][ T9115] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1012.925997][ T9115] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1012.933071][ T9115] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1013.002748][ T9115] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1013.039579][ T9221] loop4: detected capacity change from 0 to 2048 [ 1013.141993][ T9222] loop5: detected capacity change from 0 to 2048 [ 1013.189872][ T9221] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1013.218695][ T9115] device hsr_slave_0 entered promiscuous mode [ 1013.252310][ T9115] device hsr_slave_1 entered promiscuous mode [ 1013.278965][ T9115] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1013.302325][ T9115] Cannot create hsr debugfs directory [ 1013.350789][ T9222] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1013.416590][ T9225] device bridge9 entered promiscuous mode [ 1018.243723][ T154] batman_adv: batadv0: Removing interface: gretap1 [ 1018.747118][ T154] device hsr_slave_0 left promiscuous mode [ 1018.763789][ T154] device hsr_slave_1 left promiscuous mode [ 1018.821315][ T154] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1018.828808][ T154] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1018.846193][ T154] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1018.868686][ T154] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1018.929718][ T154] device bridge_slave_1 left promiscuous mode [ 1018.959637][ T154] bridge0: port 2(bridge_slave_1) entered disabled state [ 1019.003975][ T154] device bridge_slave_0 left promiscuous mode [ 1019.010273][ T154] bridge0: port 1(bridge_slave_0) entered disabled state [ 1019.064885][ T154] device hsr_slave_0 left promiscuous mode [ 1019.081506][ T154] device hsr_slave_1 left promiscuous mode [ 1019.088601][ T154] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1019.109610][ T154] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1019.142629][ T154] device bridge_slave_1 left promiscuous mode [ 1019.151557][ T154] bridge0: port 2(bridge_slave_1) entered disabled state [ 1019.172439][ T154] device bridge_slave_0 left promiscuous mode [ 1019.178663][ T154] bridge0: port 1(bridge_slave_0) entered disabled state [ 1019.260261][ T154] device veth1_macvtap left promiscuous mode [ 1019.292330][ T154] device veth0_macvtap left promiscuous mode [ 1019.320332][ T154] device veth1_vlan left promiscuous mode [ 1019.341261][ T154] device veth0_vlan left promiscuous mode [ 1019.371472][ T154] device veth1_vlan left promiscuous mode [ 1019.377315][ T154] device veth0_vlan left promiscuous mode [ 1020.736128][ T26] audit: type=1800 audit(1745553530.570:11): pid=9279 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.8.977" name="SYSV00000000" dev="hugetlbfs" ino=2 res=0 errno=0 [ 1021.088411][ T154] team0 (unregistering): Port device team_slave_1 removed [ 1021.107248][ T154] team0 (unregistering): Port device team_slave_0 removed [ 1021.129982][ T154] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1021.158597][ T154] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1021.258072][ T154] bond0 (unregistering): (slave batadv0): Releasing backup interface [ 1021.386407][ T154] bond0 (unregistering): Released all slaves [ 1021.612407][ T9290] siw: device registration error -23 [ 1022.584077][ T154] team0 (unregistering): Port device team_slave_1 removed [ 1022.608141][ T154] team0 (unregistering): Port device team_slave_0 removed [ 1022.637624][ T154] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1022.724732][ T154] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1022.929608][ T154] bond0 (unregistering): Released all slaves [ 1023.720751][ T9281] netlink: 'syz.5.978': attribute type 10 has an invalid length. [ 1023.940580][ T9303] siw: device registration error -23 [ 1027.823901][ T9323] lo speed is unknown, defaulting to 1000 [ 1029.710149][ T9329] lo speed is unknown, defaulting to 1000 [ 1030.299413][ T9341] lo speed is unknown, defaulting to 1000 [ 1031.234693][ T9351] loop5: detected capacity change from 0 to 2048 [ 1032.096903][ T9356] loop8: detected capacity change from 0 to 256 [ 1032.112382][ T9351] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1033.660379][ T9367] netlink: 'syz.4.997': attribute type 1 has an invalid length. [ 1033.668451][ T9367] netlink: 'syz.4.997': attribute type 2 has an invalid length. [ 1035.450208][ T9381] netlink: 'syz.5.999': attribute type 10 has an invalid length. [ 1036.267497][ T9391] netlink: 'syz.4.1000': attribute type 1 has an invalid length. [ 1036.275917][ T9391] netlink: 'syz.4.1000': attribute type 2 has an invalid length. [ 1036.984789][ T9406] loop4: detected capacity change from 0 to 40427 [ 1037.080412][ T9115] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 1037.196518][ T9406] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12 [ 1037.204474][ T9406] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 1037.236452][ T9115] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 1037.301882][ T9406] F2FS-fs (loop4): invalid crc value [ 1037.329673][ T9115] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 1037.359255][ T9115] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 1037.375631][ T9406] F2FS-fs (loop4): Found nat_bits in checkpoint [ 1037.418035][ T9107] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 1037.440061][ T9406] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 1037.447937][ T9406] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 1037.632291][ T9107] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 1037.659005][ T9107] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 1037.692088][ T9107] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 1038.289545][ T9115] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1038.314969][ T9432] loop8: detected capacity change from 0 to 512 [ 1038.423570][ T9107] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1038.439644][ T9115] 8021q: adding VLAN 0 to HW filter on device team0 [ 1038.464478][ T9432] EXT4-fs (loop8): Ignoring removed oldalloc option [ 1038.485994][ T9432] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode [ 1038.522098][ T4340] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1038.536443][ T4340] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1038.584669][ T9432] EXT4-fs (loop8): 1 truncate cleaned up [ 1038.590398][ T9432] EXT4-fs (loop8): mounted filesystem without journal. Opts: quota,oldalloc,barrier=0x0000000000000003,debug_want_extra_isize=0x0000000000000080,block_validity,jqfmt=vfsv1,,errors=continue. Quota mode: writeback. [ 1038.716175][ T9439] loop4: detected capacity change from 0 to 256 [ 1039.172899][ T9115] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1039.861482][ T9115] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1041.634181][ T9107] 8021q: adding VLAN 0 to HW filter on device team0 [ 1041.728213][ T4331] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1041.736713][ T4331] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1041.750264][ T4331] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1041.759272][ T4331] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1041.771607][ T4331] bridge0: port 1(bridge_slave_0) entered blocking state [ 1041.778760][ T4331] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1041.791454][ T4331] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1041.800679][ T4331] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1041.809292][ T4331] bridge0: port 2(bridge_slave_1) entered blocking state [ 1041.816408][ T4331] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1041.825209][ T4331] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1041.837571][ T4331] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1041.846977][ T4331] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1041.872003][ T4331] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1041.897046][ T4331] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1041.908323][ T4331] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1041.930148][ T4331] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1042.070127][ T4331] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1042.185179][ T4331] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1042.289760][ T4331] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1042.380163][ T4331] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1043.282784][ T4331] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1043.332071][ T4331] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1043.453202][ T4287] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1043.472005][ T4287] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1043.534720][ T4287] bridge0: port 1(bridge_slave_0) entered blocking state [ 1043.541885][ T4287] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1043.553686][ T4287] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1043.566049][ T4287] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1043.575416][ T4287] bridge0: port 2(bridge_slave_1) entered blocking state [ 1043.582535][ T4287] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1043.591379][ T4287] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1043.600301][ T4287] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1043.665010][ T4287] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1045.065740][ T9107] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1045.122433][ T9476] loop8: detected capacity change from 0 to 512 [ 1045.160115][ T9107] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1045.209765][ T4287] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1045.230871][ T4287] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1045.270892][ T4287] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1045.274793][ T9470] loop5: detected capacity change from 0 to 40427 [ 1045.300569][ T4287] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1045.332419][ T9470] F2FS-fs (loop5): Invalid log_blocksize (268), supports only 12 [ 1045.334315][ T9476] EXT4-fs (loop8): Ignoring removed oldalloc option [ 1045.340234][ T9470] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock [ 1045.359587][ T9470] F2FS-fs (loop5): invalid crc value [ 1045.365998][ T4287] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1045.380383][ T9476] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode [ 1045.447297][ T4287] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1045.485717][ T9470] F2FS-fs (loop5): Found nat_bits in checkpoint [ 1045.530947][ T4287] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1045.559447][ T4287] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1045.560854][ T9476] EXT4-fs (loop8): 1 truncate cleaned up [ 1045.573165][ T9473] lo speed is unknown, defaulting to 1000 [ 1045.576939][ T9470] F2FS-fs (loop5): Try to recover 1th superblock, ret: 0 [ 1045.586014][ T9470] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5 [ 1045.662879][ T9476] EXT4-fs (loop8): mounted filesystem without journal. Opts: quota,oldalloc,barrier=0x0000000000000003,debug_want_extra_isize=0x0000000000000080,block_validity,jqfmt=vfsv1,,errors=continue. Quota mode: writeback. [ 1045.798289][ T4287] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1047.051820][ T4287] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1047.084350][ T4287] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1047.143877][ T4287] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1047.156915][ T9115] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1047.291289][ T4302] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1047.298853][ T4302] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1047.374537][ T9107] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1048.846436][ T9107] device veth0_vlan entered promiscuous mode [ 1048.868627][ T9107] device veth1_vlan entered promiscuous mode [ 1048.906944][ T9107] device veth0_macvtap entered promiscuous mode [ 1048.918346][ T9107] device veth1_macvtap entered promiscuous mode [ 1048.936575][ T9107] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1048.963165][ T9523] loop8: detected capacity change from 0 to 2048 [ 1048.967717][ T9107] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1048.990068][ T9107] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1049.011178][ T9107] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1049.031500][ T9107] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1049.051071][ T9107] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1049.073824][ T9107] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1049.082240][ T9519] netlink: 'syz.4.1021': attribute type 10 has an invalid length. [ 1049.122120][ T9523] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1049.144529][ T4287] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1049.167240][ T4287] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1049.233935][ T4287] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1049.268054][ T9529] syz.5.1019 (9529): drop_caches: 2 [ 1049.278151][ T4287] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1049.678503][ T9529] syz.5.1019 (9529): drop_caches: 2 [ 1049.685208][ T4287] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 1049.695614][ T4287] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 1049.704006][ T4287] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1049.808045][ T4287] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1049.817897][ T4287] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1049.839260][ T4287] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1049.863489][ T4287] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1049.914464][ T9107] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1049.927233][ T9107] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1049.937728][ T9107] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1049.950716][ T9107] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1049.974908][ T9107] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1050.125676][ T9107] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1050.138919][ T9107] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1050.151488][ T4287] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1050.160212][ T4287] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1050.169836][ T4287] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1050.187052][ T4287] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1050.223560][ T4287] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1050.261273][ T9107] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1050.279978][ T9107] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1050.292946][ T9107] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1050.301886][ T9107] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1050.333268][ T4241] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1050.360677][ T4241] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1050.708871][ T4287] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1051.060008][ T4287] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1051.092306][ T9558] netlink: 'syz.8.1025': attribute type 10 has an invalid length. [ 1051.116759][ T9115] device veth0_vlan entered promiscuous mode [ 1051.195927][ T4302] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1051.211138][ T9560] netlink: 'syz.5.1026': attribute type 10 has an invalid length. [ 1051.253878][ T4302] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1051.261586][ T4287] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1051.269564][ T4287] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1051.428574][ T4287] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1052.463857][ T9115] device veth1_vlan entered promiscuous mode [ 1052.689632][ T9575] loop8: detected capacity change from 0 to 40427 [ 1052.747064][ T9575] F2FS-fs (loop8): Invalid log_blocksize (268), supports only 12 [ 1052.754902][ T9575] F2FS-fs (loop8): Can't find valid F2FS filesystem in 1th superblock [ 1052.765637][ T9575] F2FS-fs (loop8): invalid crc value [ 1052.816233][ T4287] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1052.838641][ T9575] F2FS-fs (loop8): Found nat_bits in checkpoint [ 1052.842020][ T4287] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1052.907004][ T9575] F2FS-fs (loop8): Try to recover 1th superblock, ret: 0 [ 1052.914270][ T9575] F2FS-fs (loop8): Mounted with checkpoint version = 48b305e5 [ 1052.952175][ T4287] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1053.107689][ T4287] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1053.170304][ T4287] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1053.201074][ T9115] device veth0_macvtap entered promiscuous mode [ 1053.221433][ T9115] device veth1_macvtap entered promiscuous mode [ 1053.510211][ T9115] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1053.573420][ T9115] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1053.587273][ T9115] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1053.598781][ T9115] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1053.608985][ T9115] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1053.619499][ T9115] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1053.629810][ T9115] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1053.651270][ T9115] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1053.695128][ T9115] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1053.991839][ T411] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1054.007126][ T411] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1054.203395][ T411] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1054.221957][ T411] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1054.259547][ T9115] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1054.343072][ T26] audit: type=1800 audit(1745553564.170:12): pid=9604 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.1032" name="SYSV00000000" dev="hugetlbfs" ino=0 res=0 errno=0 [ 1054.634914][ T1419] ieee802154 phy0 wpan0: encryption failed: -22 [ 1054.641714][ T1419] ieee802154 phy1 wpan1: encryption failed: -22 [ 1055.082418][ T9115] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1055.182849][ T9115] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1055.286161][ T9115] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1055.296345][ T9115] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1055.306952][ T9115] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1055.317079][ T9115] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1055.372767][ T9115] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1055.678981][ T9115] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1056.241882][ T9607] netlink: 'syz.5.1033': attribute type 10 has an invalid length. [ 1056.257323][ T9610] lo speed is unknown, defaulting to 1000 [ 1056.272240][ T411] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1056.321247][ T411] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1056.444931][ T9115] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1056.514150][ T9115] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1056.526765][ T9115] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1056.538334][ T9115] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1061.455774][ T9624] lo speed is unknown, defaulting to 1000 [ 1062.081716][ T9639] loop4: detected capacity change from 0 to 256 [ 1064.015098][ T9632] loop5: detected capacity change from 0 to 40427 [ 1064.090552][ T9645] lo speed is unknown, defaulting to 1000 [ 1064.101985][ T9632] F2FS-fs (loop5): Invalid log_blocksize (268), supports only 12 [ 1064.109845][ T9632] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock [ 1064.243637][ T9632] F2FS-fs (loop5): invalid crc value [ 1064.331337][ T9632] F2FS-fs (loop5): Found nat_bits in checkpoint [ 1064.440535][ T9632] F2FS-fs (loop5): Try to recover 1th superblock, ret: 0 [ 1064.448880][ T9632] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5 [ 1065.397455][ T5037] Bluetooth: hci3: command 0x0409 tx timeout [ 1065.440846][ T9664] lo speed is unknown, defaulting to 1000 [ 1065.852608][ T9669] sp0: Synchronizing with TNC [ 1066.484151][ T9665] [U] è [ 1067.361995][ T9645] chnl_net:caif_netlink_parms(): no params data found [ 1067.431261][ T5037] Bluetooth: hci3: command 0x041b tx timeout [ 1068.818986][ T9688] loop1: detected capacity change from 0 to 2048 [ 1068.819132][ T9686] netlink: 'syz.5.1048': attribute type 10 has an invalid length. [ 1068.842492][ T9645] bridge0: port 1(bridge_slave_0) entered blocking state [ 1068.851710][ T9645] bridge0: port 1(bridge_slave_0) entered disabled state [ 1068.860612][ T9645] device bridge_slave_0 entered promiscuous mode [ 1068.876404][ T9645] bridge0: port 2(bridge_slave_1) entered blocking state [ 1068.883826][ T9645] bridge0: port 2(bridge_slave_1) entered disabled state [ 1068.892305][ T9645] device bridge_slave_1 entered promiscuous mode [ 1068.929806][ T9688] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1069.018108][ T9645] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1069.088431][ T9645] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1069.511165][ T1109] Bluetooth: hci3: command 0x040f tx timeout [ 1070.147084][ T9645] team0: Port device team_slave_0 added [ 1071.299733][ T9708] loop5: detected capacity change from 0 to 256 [ 1072.671285][ T5037] Bluetooth: hci3: command 0x0419 tx timeout [ 1074.115614][ T9645] team0: Port device team_slave_1 added [ 1074.745510][ T9645] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1074.764258][ T9722] loop1: detected capacity change from 0 to 256 [ 1074.837990][ T9645] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1075.592906][ T9645] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1075.775013][ T9645] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1075.818198][ T9645] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1075.965305][ T9645] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1076.694384][ T9645] device hsr_slave_0 entered promiscuous mode [ 1076.752257][ T9645] device hsr_slave_1 entered promiscuous mode [ 1076.766536][ T9645] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1076.831136][ T9645] Cannot create hsr debugfs directory [ 1079.321623][ T9645] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1079.842200][ T9645] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1079.973280][ T9758] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(4) [ 1079.979823][ T9758] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1080.171376][ T9758] vhci_hcd vhci_hcd.0: Device attached [ 1080.211689][ T9645] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1080.441042][ T4306] usb 35-1: new low-speed USB device number 4 using vhci_hcd [ 1082.062536][ T9645] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1082.478879][ T9645] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 1083.101675][ T9645] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 1083.134649][ T9759] vhci_hcd: connection reset by peer [ 1083.145961][ T4287] vhci_hcd: stop threads [ 1083.150280][ T4287] vhci_hcd: release socket [ 1083.166460][ T4287] vhci_hcd: disconnect device [ 1083.212689][ T9645] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 1083.248251][ T9645] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 1084.211155][ T9789] siw: device registration error -23 [ 1086.339376][ T9645] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1086.391147][ T4306] vhci_hcd: vhci_device speed not set [ 1088.339091][ T4287] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1088.881564][ T4287] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1088.913328][ T9645] 8021q: adding VLAN 0 to HW filter on device team0 [ 1088.956460][ T411] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1088.995114][ T411] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1089.895754][ T411] bridge0: port 1(bridge_slave_0) entered blocking state [ 1089.902923][ T411] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1089.921375][ T6497] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1089.929405][ T6497] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1089.985042][ T6497] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1090.208063][ T6497] bridge0: port 2(bridge_slave_1) entered blocking state [ 1090.215272][ T6497] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1090.224079][ T6497] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1090.233383][ T6497] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1091.428106][ T6497] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1091.481470][ T6497] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1092.647410][ T9846] loop1: detected capacity change from 0 to 2048 [ 1092.677549][ T9845] lo speed is unknown, defaulting to 1000 [ 1092.727145][ T9850] netlink: 'syz.4.1080': attribute type 10 has an invalid length. [ 1092.766129][ T9850] loop4: detected capacity change from 0 to 256 [ 1092.988597][ T6497] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1093.027325][ T9850] FAT-fs (loop4): Unrecognized mount option "appra" or missing value [ 1093.082865][ T9846] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1093.129284][ T6497] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1093.311906][ T6497] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1093.469868][ T6497] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1094.021529][ T6497] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1095.621482][ T9645] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1095.774822][ T9645] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1095.871306][ T6497] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1095.923912][ T6497] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1098.414758][ T4340] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1098.433943][ T9887] loop1: detected capacity change from 0 to 2048 [ 1098.558895][ T9887] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1098.606052][ T4340] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1098.853680][ T9893] sp0: Synchronizing with TNC [ 1099.109924][ T9645] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1099.403389][ T9890] [U] è [ 1101.662367][ T9907] sp0: Synchronizing with TNC [ 1103.343636][ T9902] [U] è [ 1105.006241][ T9922] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 1105.032722][ T9922] CIFS mount error: No usable UNC path provided in device string! [ 1105.032722][ T9922] [ 1105.043074][ T9922] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 1105.836985][ T9924] loop8: detected capacity change from 0 to 2048 [ 1105.874786][ T4221] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1105.889865][ T4221] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1105.898959][ T4221] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1105.908935][ T4221] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1105.919401][ T9645] device veth0_vlan entered promiscuous mode [ 1105.927561][ T4221] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1105.939089][ T4221] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1105.963435][ T9924] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1106.536374][ T9645] device veth1_vlan entered promiscuous mode [ 1108.869343][ T9645] device veth0_macvtap entered promiscuous mode [ 1108.927936][ T6497] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1108.967741][ T6497] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1109.005603][ T9645] device veth1_macvtap entered promiscuous mode [ 1109.233904][ T6497] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1109.553451][ T6497] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1110.089617][ T9645] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1110.124536][ T9645] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1110.162819][ T9645] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1110.259608][ T9645] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1110.376425][ T9645] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1110.387427][ T9645] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1110.397924][ T9645] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1110.410041][ T9645] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1110.420399][ T9645] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1110.432511][ T9645] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1110.444428][ T9645] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1110.456915][ T9957] lo speed is unknown, defaulting to 1000 [ 1110.466923][ T9645] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1110.478068][ T9645] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1110.491673][ T9645] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1110.503196][ T9645] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1110.513565][ T9645] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1110.550923][ T9645] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1110.562250][ T9645] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1110.573077][ T9645] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1110.583333][ T9645] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1110.600513][ T9645] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1110.615306][ T9645] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1110.623459][ T9965] netlink: 'syz.8.1100': attribute type 10 has an invalid length. [ 1110.691961][ T4221] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1110.722939][ T4221] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1110.761983][ T4221] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1110.818404][ T4221] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1110.935259][ T9645] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1111.013263][ T9645] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1111.138330][ T9645] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1111.254275][ T9645] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1113.403805][ T4241] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1113.421280][ T4302] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1113.688463][ T4302] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1114.113600][ T9984] syz.8.1102 (9984): drop_caches: 2 [ 1114.119339][ T4241] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1114.367730][ T9984] syz.8.1102 (9984): drop_caches: 2 [ 1114.533291][ T9999] loop1: detected capacity change from 0 to 2048 [ 1114.861669][ T9999] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1114.881894][ T4304] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1115.782300][ T4304] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1115.794421][T10004] lo speed is unknown, defaulting to 1000 [ 1116.271587][ T1419] ieee802154 phy0 wpan0: encryption failed: -22 [ 1116.277987][ T1419] ieee802154 phy1 wpan1: encryption failed: -22 [ 1118.554700][T10035] lo speed is unknown, defaulting to 1000 [ 1119.809478][ T154] device hsr_slave_0 left promiscuous mode [ 1120.759587][ T154] device hsr_slave_1 left promiscuous mode [ 1120.769182][ T154] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1120.778601][ T154] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1120.786523][ T154] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1120.794823][ T154] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1120.859510][ T154] device bridge_slave_1 left promiscuous mode [ 1120.875766][ T154] bridge0: port 2(bridge_slave_1) entered disabled state [ 1120.907295][ T154] device bridge_slave_0 left promiscuous mode [ 1120.928159][ T154] bridge0: port 1(bridge_slave_0) entered disabled state [ 1121.958214][ T154] device veth1_macvtap left promiscuous mode [ 1121.991038][ T154] device veth0_macvtap left promiscuous mode [ 1121.997255][ T154] device veth1_vlan left promiscuous mode [ 1122.003926][ T154] device veth0_vlan left promiscuous mode [ 1123.069791][ T154] team0 (unregistering): Port device team_slave_1 removed [ 1123.089529][ T154] team0 (unregistering): Port device team_slave_0 removed [ 1123.116759][ T154] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1123.145046][ T154] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1123.279803][ T154] bond0 (unregistering): Released all slaves [ 1125.068906][ T8423] vhci_hcd: connection reset by peer [ 1125.143415][ T4340] vhci_hcd: stop threads [ 1125.171065][ T4340] vhci_hcd: release socket [ 1125.221943][ T4340] vhci_hcd: disconnect device [ 1125.495638][T10086] lo speed is unknown, defaulting to 1000 [ 1126.411194][ T1325] vhci_hcd: vhci_device speed not set [ 1129.588194][ T4243] Bluetooth: hci1: command 0x0406 tx timeout [ 1130.370636][T10110] netlink: 'syz.4.1128': attribute type 1 has an invalid length. [ 1130.378601][T10110] netlink: 'syz.4.1128': attribute type 2 has an invalid length. [ 1133.373837][ T5037] Bluetooth: hci2: command 0x0409 tx timeout [ 1133.405270][T10109] lo speed is unknown, defaulting to 1000 [ 1133.456019][T10118] lo speed is unknown, defaulting to 1000 [ 1133.795579][T10125] loop8: detected capacity change from 0 to 2048 [ 1134.787482][T10140] batman_adv: Cannot find parent device [ 1134.794289][T10140] batman_adv: batadv0: Adding interface: gretap1 [ 1134.800639][T10140] batman_adv: batadv0: The MTU of interface gretap1 is too small (1462) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1134.826004][T10140] batman_adv: batadv0: Not using interface gretap1 (retrying later): interface not active [ 1135.196393][T10109] chnl_net:caif_netlink_parms(): no params data found [ 1135.386271][T10125] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1135.441252][ T7923] Bluetooth: hci2: command 0x041b tx timeout [ 1137.019027][T10155] overlayfs: failed to resolve './file0': -2 [ 1138.393127][ T5037] Bluetooth: hci2: command 0x040f tx timeout [ 1140.471204][ T4245] Bluetooth: hci2: command 0x0419 tx timeout [ 1144.491707][T10109] bridge0: port 1(bridge_slave_0) entered blocking state [ 1144.507838][T10109] bridge0: port 1(bridge_slave_0) entered disabled state [ 1144.602750][T10109] device bridge_slave_0 entered promiscuous mode [ 1144.662746][T10109] bridge0: port 2(bridge_slave_1) entered blocking state [ 1144.713791][T10109] bridge0: port 2(bridge_slave_1) entered disabled state [ 1144.743550][T10109] device bridge_slave_1 entered promiscuous mode [ 1145.372198][T10200] siw: device registration error -23 [ 1147.273971][T10109] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1147.540023][T10109] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1149.271136][T10233] siw: device registration error -23 [ 1150.412807][T10109] team0: Port device team_slave_0 added [ 1150.843326][T10109] team0: Port device team_slave_1 added [ 1152.165187][T10109] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1152.355213][T10109] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1153.724398][T10262] loop8: detected capacity change from 0 to 40427 [ 1153.806325][T10109] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1153.817995][T10251] lo speed is unknown, defaulting to 1000 [ 1153.819241][T10109] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1153.834902][T10262] F2FS-fs (loop8): Invalid log_blocksize (268), supports only 12 [ 1153.842768][T10262] F2FS-fs (loop8): Can't find valid F2FS filesystem in 1th superblock [ 1153.854283][T10262] F2FS-fs (loop8): invalid crc value [ 1153.888713][T10109] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1153.926412][T10262] F2FS-fs (loop8): Found nat_bits in checkpoint [ 1153.933781][T10109] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1154.030504][T10262] F2FS-fs (loop8): Try to recover 1th superblock, ret: 0 [ 1154.037764][T10262] F2FS-fs (loop8): Mounted with checkpoint version = 48b305e5 [ 1155.439404][T10274] netlink: 'syz.9.1159': attribute type 1 has an invalid length. [ 1155.465301][T10274] netlink: 'syz.9.1159': attribute type 2 has an invalid length. [ 1155.679394][T10109] device hsr_slave_0 entered promiscuous mode [ 1156.077528][T10109] device hsr_slave_1 entered promiscuous mode [ 1156.102793][T10109] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1156.590984][T10109] Cannot create hsr debugfs directory [ 1157.870082][T10295] loop9: detected capacity change from 0 to 2048 [ 1157.936654][T10299] lo speed is unknown, defaulting to 1000 [ 1158.001442][T10295] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1161.490838][ T26] audit: type=1800 audit(1745553671.170:13): pid=10350 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.1171" name="SYSV00000000" dev="hugetlbfs" ino=6 res=0 errno=0 [ 1162.091082][ T26] audit: type=1800 audit(1745553671.890:14): pid=10356 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.8.1174" name="SYSV00000000" dev="hugetlbfs" ino=5 res=0 errno=0 [ 1162.117177][T10357] netlink: 'syz.9.1173': attribute type 1 has an invalid length. [ 1162.125039][T10357] netlink: 'syz.9.1173': attribute type 2 has an invalid length. [ 1163.312058][T10366] sp0: Synchronizing with TNC [ 1166.160349][T10362] [U] è [ 1166.562163][T10109] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1166.665917][T10109] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1166.723661][T10377] syz.4.1178 (10377): drop_caches: 2 [ 1166.962723][T10109] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1166.970401][T10377] syz.4.1178 (10377): drop_caches: 2 [ 1167.008653][T10385] netlink: 'syz.9.1179': attribute type 1 has an invalid length. [ 1167.016774][T10385] netlink: 'syz.9.1179': attribute type 2 has an invalid length. [ 1169.227144][T10109] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1169.724790][T10109] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1170.543292][ T4351] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1170.552357][ T4351] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1170.610826][T10109] 8021q: adding VLAN 0 to HW filter on device team0 [ 1170.858989][ T4302] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1171.746285][ T4302] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1171.781178][ T4302] bridge0: port 1(bridge_slave_0) entered blocking state [ 1171.788344][ T4302] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1171.827520][ T4302] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1171.981468][ T4302] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1171.997309][ T4302] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1172.043935][ T4302] bridge0: port 2(bridge_slave_1) entered blocking state [ 1172.051111][ T4302] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1172.122273][ T26] audit: type=1800 audit(1745553681.960:15): pid=10429 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.1184" name="SYSV00000000" dev="hugetlbfs" ino=7 res=0 errno=0 [ 1172.356804][T10109] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1172.367879][T10109] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1173.452494][ T6497] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1173.470198][ T6497] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1173.560158][ T6497] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1173.607797][ T6497] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1173.801656][ T6497] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1174.057625][ T6497] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1174.067013][ T6497] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1174.076103][ T6497] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1174.085443][ T6497] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1174.132478][ T6497] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1174.184199][ T6497] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1174.208231][ T6497] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1174.678185][T10453] loop1: detected capacity change from 0 to 2048 [ 1175.148627][T10453] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1175.159317][T10446] trusted_key: encrypted_key: key user:syz not found [ 1175.180866][ T4348] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1175.225039][ T4348] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1175.244892][T10109] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1175.952197][ T4340] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1175.996476][ T4340] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1176.117318][T10109] device veth0_vlan entered promiscuous mode [ 1176.153198][ T4340] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1176.183432][ T4340] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1176.212475][ T4340] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1176.240175][ T4340] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1176.255167][T10109] device veth1_vlan entered promiscuous mode [ 1176.792011][T10483] sp0: Synchronizing with TNC [ 1180.204346][ T1419] ieee802154 phy0 wpan0: encryption failed: -22 [ 1180.210779][ T1419] ieee802154 phy1 wpan1: encryption failed: -22 [ 1180.495899][T10475] [U] è [ 1181.448006][T10156] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1181.510591][T10156] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1181.639849][T10498] loop1: detected capacity change from 0 to 256 [ 1181.784579][T10109] device veth0_macvtap entered promiscuous mode [ 1181.934033][T10109] device veth1_macvtap entered promiscuous mode [ 1182.301921][T10503] lo speed is unknown, defaulting to 1000 [ 1182.387632][T10109] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1183.164517][T10109] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1183.307351][T10109] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1183.367556][T10109] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1183.517301][T10109] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1183.636910][T10109] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1183.696347][T10109] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1183.767321][T10512] loop9: detected capacity change from 0 to 256 [ 1183.807104][T10109] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1183.892547][T10109] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1183.981836][T10109] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1184.110344][T10109] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1184.275042][ T6497] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1184.329008][ T6497] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1184.499096][ T6497] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1184.646256][T10109] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1184.744435][T10109] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1184.838082][T10109] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1184.883217][T10109] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1184.926070][T10109] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1185.180398][T10519] siw: device registration error -23 [ 1186.048746][T10109] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1186.081225][T10109] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1186.164918][T10109] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1186.244240][T10109] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1186.254820][T10109] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1186.266324][T10109] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1186.291208][ T6497] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1186.322536][ T6497] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1187.138479][T10530] batman_adv: Cannot find parent device [ 1187.145378][T10530] batman_adv: batadv0: Adding interface: gretap1 [ 1187.151918][T10530] batman_adv: batadv0: The MTU of interface gretap1 is too small (1462) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1187.177363][T10530] batman_adv: batadv0: Not using interface gretap1 (retrying later): interface not active [ 1187.470806][T10537] lo speed is unknown, defaulting to 1000 [ 1187.490793][T10535] loop1: detected capacity change from 0 to 2048 [ 1187.570211][T10535] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1188.801871][T10537] chnl_net:caif_netlink_parms(): no params data found [ 1189.486175][ T5037] Bluetooth: hci2: command 0x0409 tx timeout [ 1189.799491][T10537] bridge0: port 1(bridge_slave_0) entered blocking state [ 1189.841134][ T5037] Bluetooth: hci3: command 0x0406 tx timeout [ 1189.860465][T10537] bridge0: port 1(bridge_slave_0) entered disabled state [ 1189.905718][T10537] device bridge_slave_0 entered promiscuous mode [ 1189.958566][T10537] bridge0: port 2(bridge_slave_1) entered blocking state [ 1190.020181][T10537] bridge0: port 2(bridge_slave_1) entered disabled state [ 1190.065165][T10537] device bridge_slave_1 entered promiscuous mode [ 1190.176262][T10537] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1190.244279][T10537] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1190.453676][T10537] team0: Port device team_slave_0 added [ 1190.492057][T10537] team0: Port device team_slave_1 added [ 1190.897688][T10581] syz.8.1206 (10581): drop_caches: 2 [ 1191.125806][T10537] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1191.257146][T10537] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1191.504887][T10537] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1191.518013][T10537] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1191.525004][T10537] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1191.551873][T10537] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1191.606307][ T5105] Bluetooth: hci2: command 0x041b tx timeout [ 1191.635778][T10581] syz.8.1206 (10581): drop_caches: 2 [ 1191.768835][T10587] loop4: detected capacity change from 0 to 256 [ 1193.761483][ T5037] Bluetooth: hci2: command 0x040f tx timeout [ 1194.050634][T10537] device hsr_slave_0 entered promiscuous mode [ 1194.161572][T10537] device hsr_slave_1 entered promiscuous mode [ 1194.193499][T10591] syz.8.1208 (10591): drop_caches: 2 [ 1194.200513][T10591] syz.8.1208 (10591): drop_caches: 2 [ 1194.231066][T10537] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1194.261247][T10537] Cannot create hsr debugfs directory [ 1196.677225][ T5037] Bluetooth: hci2: command 0x0419 tx timeout [ 1198.775785][T10628] loop9: detected capacity change from 0 to 256 [ 1202.263261][T10537] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1202.512956][T10537] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1203.694769][T10537] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1203.943521][T10537] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1205.251729][T10537] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1205.380306][T10537] 8021q: adding VLAN 0 to HW filter on device team0 [ 1205.421574][ T396] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1205.429648][ T396] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1205.572259][ T4255] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1205.640363][ T4255] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1205.719584][ T4255] bridge0: port 1(bridge_slave_0) entered blocking state [ 1205.726760][ T4255] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1205.836775][ T4255] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1205.867898][ T4255] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1205.901010][ T4255] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1205.928100][ T4255] bridge0: port 2(bridge_slave_1) entered blocking state [ 1205.935304][ T4255] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1206.021917][ T4255] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1206.031942][ T4255] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1206.041608][ T4255] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1206.064642][ T4255] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1206.120176][ T4255] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1206.137142][ T4255] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1206.156780][ T4255] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1206.179570][ T4255] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1206.199764][ T4255] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1206.230392][ T4255] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1206.260741][ T4255] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1206.293878][T10537] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1207.364782][ T154] device hsr_slave_0 left promiscuous mode [ 1207.431876][ T154] device hsr_slave_1 left promiscuous mode [ 1207.461352][ T154] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1207.479027][ T154] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1207.489995][ T154] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1207.509504][ T154] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1207.520670][ T154] device bridge_slave_1 left promiscuous mode [ 1207.529845][ T154] bridge0: port 2(bridge_slave_1) entered disabled state [ 1207.555427][ T154] device bridge_slave_0 left promiscuous mode [ 1207.561912][ T154] bridge0: port 1(bridge_slave_0) entered disabled state [ 1207.575025][ T154] device veth1_macvtap left promiscuous mode [ 1207.581372][ T154] device veth0_macvtap left promiscuous mode [ 1207.587557][ T154] device veth1_vlan left promiscuous mode [ 1207.597674][ T154] device veth0_vlan left promiscuous mode [ 1207.789160][T10697] loop9: detected capacity change from 0 to 2048 [ 1207.949717][T10697] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1209.581403][T10703] overlayfs: missing 'lowerdir' [ 1211.069116][T10705] syz.8.1229 (10705): drop_caches: 2 [ 1211.108706][T10705] syz.8.1229 (10705): drop_caches: 2 [ 1211.146737][ T154] team0 (unregistering): Port device team_slave_1 removed [ 1211.182468][ T154] team0 (unregistering): Port device team_slave_0 removed [ 1211.286713][ T154] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1211.315422][T10712] trusted_key: encrypted_key: insufficient parameters specified [ 1211.942099][ T154] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1212.219661][ T154] bond0 (unregistering): Released all slaves [ 1212.341697][ T4255] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1212.359837][ T4255] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1212.413749][T10537] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1212.562802][ T4304] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1212.581910][ T4304] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1212.788359][T10537] device veth0_vlan entered promiscuous mode [ 1213.711147][ T4255] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1213.739755][ T4255] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1213.776211][T10537] device veth1_vlan entered promiscuous mode [ 1213.813289][ T4255] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1213.841594][ T4255] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1213.938650][ T4304] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1213.953377][ T4304] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1214.030162][T10537] device veth0_macvtap entered promiscuous mode [ 1214.067331][T10537] device veth1_macvtap entered promiscuous mode [ 1214.111873][T10537] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1214.145140][T10537] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1214.191112][T10537] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1214.274327][T10537] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1214.986470][T10537] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1215.025958][T10537] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1215.100472][T10537] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1215.134326][T10537] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1215.150947][T10537] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1215.170945][T10537] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1215.200682][T10537] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1215.224615][ T4348] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1215.252503][ T4348] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1215.271690][ T4348] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1215.280750][ T4348] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1215.326279][T10537] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1215.357794][T10537] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1215.378595][T10537] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1215.403409][T10537] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1215.413779][T10537] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1215.424680][T10537] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1215.435026][T10537] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1215.446355][T10537] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1215.459096][T10537] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1215.470687][T10537] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1215.482730][T10537] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1215.492578][ T4348] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1215.506342][ T4348] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1215.527175][T10537] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1215.549316][T10537] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1215.559201][T10537] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1215.573420][T10537] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1215.748726][ T4351] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1215.803167][ T4351] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1216.030395][ T4348] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1216.060056][ T4351] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1216.240170][ T4351] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1216.992222][ T4331] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1217.034885][ T4242] Bluetooth: hci6: command 0x1003 tx timeout [ 1217.082289][T10732] Bluetooth: hci6: sending frame failed (-49) [ 1217.125778][T10738] trusted_key: encrypted_key: insufficient parameters specified [ 1217.811552][T10740] syz.2.1122 (10740): drop_caches: 2 [ 1217.988201][T10740] syz.2.1122 (10740): drop_caches: 2 [ 1219.121096][T10750] siw: device registration error -23 [ 1219.694804][ T5037] Bluetooth: hci6: command 0x1001 tx timeout [ 1220.410475][T10753] loop1: detected capacity change from 0 to 256 [ 1220.850525][T10755] loop2: detected capacity change from 0 to 2048 [ 1220.947902][T10732] Bluetooth: hci6: sending frame failed (-49) [ 1221.084523][T10755] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1227.841051][T10793] trusted_key: encrypted_key: key user:syz not found [ 1232.723195][T10810] sp0: Synchronizing with TNC [ 1232.758075][T10809] [U] è [ 1232.788682][T10812] loop4: detected capacity change from 0 to 2048 [ 1233.205083][T10812] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1235.449008][T10833] netlink: 'syz.9.1256': attribute type 1 has an invalid length. [ 1235.457094][T10833] netlink: 'syz.9.1256': attribute type 2 has an invalid length. [ 1244.151691][ T1419] ieee802154 phy0 wpan0: encryption failed: -22 [ 1244.158075][ T1419] ieee802154 phy1 wpan1: encryption failed: -22 [ 1251.029342][T10927] overlayfs: missing 'workdir' [ 1253.876755][ T154] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1254.174150][ T154] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1254.723884][T10957] siw: device registration error -23 [ 1255.202082][T10958] netlink: 'syz.1.1278': attribute type 2 has an invalid length. [ 1255.510615][ T154] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1255.908157][ T4245] Bluetooth: hci2: command 0x1003 tx timeout [ 1255.937048][T10972] loop1: detected capacity change from 0 to 256 [ 1256.024388][T10968] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1279'. [ 1256.632636][ T154] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1256.853360][ T146] Bluetooth: hci2: sending frame failed (-49) [ 1256.853836][ T4188] Bluetooth: hci5: command 0x0409 tx timeout [ 1257.724127][T10989] trusted_key: encrypted_key: insufficient parameters specified [ 1258.518758][T10947] lo speed is unknown, defaulting to 1000 [ 1258.881436][ T4242] Bluetooth: hci5: command 0x041b tx timeout [ 1258.890771][ T4242] Bluetooth: hci2: command 0x1001 tx timeout [ 1258.897868][ T146] Bluetooth: hci2: sending frame failed (-49) [ 1260.705654][T10947] chnl_net:caif_netlink_parms(): no params data found [ 1260.915241][T11017] netlink: 'syz.4.1288': attribute type 1 has an invalid length. [ 1260.923373][T11017] netlink: 'syz.4.1288': attribute type 2 has an invalid length. [ 1261.061140][ T4244] Bluetooth: hci2: command 0x1009 tx timeout [ 1261.795897][ T4244] Bluetooth: hci5: command 0x040f tx timeout [ 1264.556387][ T4244] Bluetooth: hci5: command 0x0419 tx timeout [ 1265.801227][T11039] loop4: detected capacity change from 0 to 256 [ 1267.186561][T10947] bridge0: port 1(bridge_slave_0) entered blocking state [ 1267.405555][ T411] Bluetooth: hci2: Frame reassembly failed (-84) [ 1267.687914][T10947] bridge0: port 1(bridge_slave_0) entered disabled state [ 1267.933849][T10947] device bridge_slave_0 entered promiscuous mode [ 1268.151419][T10947] bridge0: port 2(bridge_slave_1) entered blocking state [ 1268.158518][T10947] bridge0: port 2(bridge_slave_1) entered disabled state [ 1269.017789][T10947] device bridge_slave_1 entered promiscuous mode [ 1269.431177][ T4188] Bluetooth: hci2: command 0x1003 tx timeout [ 1269.437330][ T146] Bluetooth: hci2: sending frame failed (-49) [ 1269.598887][T10947] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1269.725027][T11083] sp0: Synchronizing with TNC [ 1269.742053][T10947] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1270.595643][T11079] [U] è [ 1271.098025][T10947] team0: Port device team_slave_0 added [ 1272.553051][ T5105] Bluetooth: hci2: command 0x1001 tx timeout [ 1272.559289][ T146] Bluetooth: hci2: sending frame failed (-49) [ 1272.598945][T10947] team0: Port device team_slave_1 added [ 1272.688680][T10947] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1272.710493][T10947] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1272.738607][T10947] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1272.763183][T10947] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1272.788714][T10947] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1273.218613][T10947] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1274.641020][ T4245] Bluetooth: hci2: command 0x1009 tx timeout [ 1274.693644][T11111] trusted_key: encrypted_key: insufficient parameters specified [ 1275.356471][T10947] device hsr_slave_0 entered promiscuous mode [ 1275.424475][T10947] device hsr_slave_1 entered promiscuous mode [ 1275.451171][T10947] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1275.458774][T10947] Cannot create hsr debugfs directory [ 1276.771022][T11124] syz.8.1304 (11124): drop_caches: 2 [ 1276.782196][T11124] syz.8.1304 (11124): drop_caches: 2 [ 1276.801462][ T154] device hsr_slave_0 left promiscuous mode [ 1277.695913][ T154] device hsr_slave_1 left promiscuous mode [ 1277.808024][ T154] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1277.863420][ T154] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1277.903332][ T154] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1277.936111][ T154] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1277.979280][T11143] loop1: detected capacity change from 0 to 2048 [ 1278.017523][ T154] device bridge_slave_1 left promiscuous mode [ 1278.031388][ T154] bridge0: port 2(bridge_slave_1) entered disabled state [ 1278.050753][ T154] device bridge_slave_0 left promiscuous mode [ 1278.089654][T11143] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1278.109961][ T154] bridge0: port 1(bridge_slave_0) entered disabled state [ 1278.709361][ T154] device veth1_macvtap left promiscuous mode [ 1278.756243][ T154] device veth0_macvtap left promiscuous mode [ 1278.837755][ T154] device veth1_vlan left promiscuous mode [ 1278.913411][ T154] device veth0_vlan left promiscuous mode [ 1279.767709][T11156] netlink: 'syz.1.1310': attribute type 1 has an invalid length. [ 1279.775783][T11156] netlink: 'syz.1.1310': attribute type 2 has an invalid length. [ 1279.970709][ T154] team0 (unregistering): Port device team_slave_1 removed [ 1280.151676][ T154] team0 (unregistering): Port device team_slave_0 removed [ 1280.307753][ T154] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1280.480674][ T154] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1280.676597][ T154] bond0 (unregistering): Released all slaves [ 1280.900265][T11160] netlink: 'syz.1.1311': attribute type 1 has an invalid length. [ 1280.908224][T11160] netlink: 'syz.1.1311': attribute type 2 has an invalid length. [ 1282.531654][ T27] INFO: task kworker/1:9:4350 blocked for more than 145 seconds. [ 1282.542902][ T27] Not tainted 5.15.180-syzkaller #0 [ 1282.548687][ T27] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1282.591170][ T27] task:kworker/1:9 state:D stack:25016 pid: 4350 ppid: 2 flags:0x00004000 [ 1282.600749][ T27] Workqueue: usb_hub_wq hub_event [ 1282.615586][ T27] Call Trace: [ 1282.618928][ T27] [ 1282.626049][ T27] __schedule+0x12c4/0x45b0 [ 1282.630732][ T27] ? release_firmware_map_entry+0x190/0x190 [ 1282.637237][ T27] ? mark_lock+0x98/0x340 [ 1282.642217][ T27] schedule+0x11b/0x1f0 [ 1282.646500][ T27] usb_kill_urb+0x1c9/0x300 [ 1282.651559][ T27] ? usb_unlink_urb+0xa0/0xa0 [ 1282.656354][ T27] ? _raw_spin_lock_irq+0xdb/0x110 [ 1282.662857][ T27] ? init_wait_entry+0xd0/0xd0 [ 1282.694317][ T27] ? do_raw_spin_unlock+0x137/0x8b0 [ 1282.714369][ T27] ? _raw_spin_unlock_irq+0x1f/0x40 [ 1282.732397][ T27] usb_start_wait_urb+0x1ac/0x510 [ 1282.747097][ T27] ? usb_api_blocking_completion+0xa0/0xa0 [ 1283.574525][ T27] usb_control_msg+0x2ad/0x4c0 [ 1283.591282][ T27] ? usb_anchor_empty+0x40/0x40 [ 1283.607870][ T27] ? kmem_cache_alloc_trace+0x143/0x290 [ 1283.625953][ T27] ? hub_port_init+0x150/0x28c0 [ 1283.643305][ T27] hub_port_init+0xb44/0x28c0 [ 1283.660966][ T27] ? _raw_spin_unlock+0x40/0x40 [ 1283.665892][ T27] hub_event+0x28ed/0x54c0 [ 1283.670396][ T27] ? led_work+0x700/0x700 [ 1283.679472][ T27] ? read_lock_is_recursive+0x10/0x10 [ 1283.694123][ T27] ? lockdep_hardirqs_on_prepare+0x438/0x7a0 [ 1283.700413][ T27] ? rwsem_down_write_slowpath+0x520/0x16a0 [ 1283.711916][ T27] ? do_raw_spin_unlock+0x137/0x8b0 [ 1283.717251][ T27] process_one_work+0x8a1/0x10c0 [ 1283.729733][ T27] ? worker_detach_from_pool+0x260/0x260 [ 1283.737141][ T27] ? _raw_spin_lock_irqsave+0x120/0x120 [ 1283.750373][ T27] ? kthread_data+0x4e/0xc0 [ 1283.763169][ T27] ? wq_worker_running+0x97/0x170 [ 1283.779490][ T27] worker_thread+0xaca/0x1280 [ 1283.790043][ T27] ? _raw_spin_unlock_irqrestore+0xd9/0x130 [ 1283.804496][ T27] kthread+0x3f6/0x4f0 [ 1283.809921][ T27] ? rcu_lock_release+0x20/0x20 [ 1283.819135][ T27] ? kthread_blkcg+0xd0/0xd0 [ 1283.828972][ T27] ret_from_fork+0x1f/0x30 [ 1283.840811][ T27] [ 1283.849230][ T27] [ 1283.849230][ T27] Showing all locks held in the system: [ 1283.886675][ T27] 1 lock held by khungtaskd/27: [ 1283.903687][ T27] #0: ffffffff8cb1f4e0 (rcu_read_lock){....}-{1:2}, at: rcu_lock_acquire+0x0/0x30 [ 1283.934573][ T27] 5 locks held by kworker/u4:2/154: [ 1283.946055][ T27] #0: ffff8880175cd938 ((wq_completion)netns){+.+.}-{0:0}, at: process_one_work+0x78a/0x10c0 [ 1283.965481][ T27] #1: ffffc90002027d20 (net_cleanup_work){+.+.}-{0:0}, at: process_one_work+0x7d0/0x10c0 [ 1283.984412][ T27] #2: ffffffff8dc38350 (pernet_ops_rwsem){++++}-{3:3}, at: cleanup_net+0x166/0xc90 [ 1284.003806][ T27] #3: ffff88807e4193e8 (&wg->device_update_lock){+.+.}-{3:3}, at: wg_destruct+0x10c/0x2f0 [ 1284.021075][ T27] #4: ffffffff8cb23aa8 (rcu_state.exp_mutex){+.+.}-{3:3}, at: synchronize_rcu_expedited+0x350/0x740 [ 1284.040960][ T27] 2 locks held by getty/3932: [ 1284.045844][ T27] #0: ffff88807ecd2098 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x21/0x70 [ 1284.065789][ T27] #1: ffffc900025c62e8 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0x6af/0x1db0 [ 1284.082887][ T27] 3 locks held by kworker/1:1/4187: [ 1284.088308][ T27] #0: ffff888017470938 ((wq_completion)events){+.+.}-{0:0}, at: process_one_work+0x78a/0x10c0 [ 1284.106867][ T27] #1: ffffc9000305fd20 ((work_completion)(&(&nsim_dev->trap_data->trap_report_dw)->work)){+.+.}-{0:0}, at: process_one_work+0x7d0/0x10c0 [ 1284.131498][ T27] #2: ffff88807d708400 (&nsim_dev->port_list_lock#2){+.+.}-{3:3}, at: nsim_dev_trap_report_work+0x56/0xab0 [ 1284.151124][ T27] 2 locks held by kworker/0:4/4245: [ 1284.157638][ T27] #0: ffff888017472138 ((wq_completion)rcu_gp){+.+.}-{0:0}, at: process_one_work+0x78a/0x10c0 [ 1284.176190][ T27] #1: ffffc9000318fd20 ((work_completion)(&rew.rew_work)){+.+.}-{0:0}, at: process_one_work+0x7d0/0x10c0 [ 1284.193029][ T27] 5 locks held by kworker/1:9/4350: [ 1284.198454][ T27] #0: ffff8881407c6938 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_one_work+0x78a/0x10c0 [ 1284.219568][ T27] #1: ffffc900033dfd20 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_one_work+0x7d0/0x10c0 [ 1284.239867][ T27] #2: ffff8880252cd220 (&dev->mutex){....}-{3:3}, at: hub_event+0x208/0x54c0 [ 1284.249439][ T27] #3: ffff8880253185c0 (&port_dev->status_lock){+.+.}-{3:3}, at: hub_event+0x2238/0x54c0 [ 1284.268473][ T27] #4: ffff888024e8c068 (hcd->address0_mutex){+.+.}-{3:3}, at: hub_event+0x2260/0x54c0 [ 1284.279079][ T27] 1 lock held by dhcpcd/7840: [ 1284.291411][ T27] #0: ffff888071d69410 (&sb->s_type->i_mutex_key#11){+.+.}-{3:3}, at: sock_close+0x98/0x230 [ 1284.314636][ T27] 8 locks held by syz-executor/10947: [ 1284.320161][ T27] #0: ffff88807eec4460 (sb_writers#8){.+.+}-{0:0}, at: vfs_write+0x29a/0xe50 [ 1284.334396][ T27] #1: ffff88806146e088 (&of->mutex){+.+.}-{3:3}, at: kernfs_fop_write_iter+0x1e7/0x4f0 [ 1284.349510][ T27] #2: ffff88814806be88 (kn->active#295){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x20b/0x4f0 [ 1284.363861][ T27] #3: ffffffff8d584288 (nsim_bus_dev_list_lock){+.+.}-{3:3}, at: del_device_store+0xf1/0x470 [ 1284.379268][ T27] #4: ffff888062f78178 (&dev->mutex){....}-{3:3}, at: device_release_driver_internal+0xc2/0x7f0 [ 1284.393476][ T27] #5: ffff88807d708400 (&nsim_dev->port_list_lock#2){+.+.}-{3:3}, at: nsim_dev_reload_destroy+0x118/0x240 [ 1284.411777][ T27] #6: ffffffff8dc44008 (rtnl_mutex){+.+.}-{3:3}, at: nsim_destroy+0x3a/0x140 [ 1284.430603][ T27] #7: ffffffff8cb23aa8 (rcu_state.exp_mutex){+.+.}-{3:3}, at: synchronize_rcu_expedited+0x280/0x740 [ 1284.450525][ T27] 2 locks held by syz.4.1301/11096: [ 1284.456105][ T27] #0: ffffffff8dc38350 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x378/0x5d0 [ 1284.473240][ T27] #1: ffffffff8dc44008 (rtnl_mutex){+.+.}-{3:3}, at: cangw_pernet_exit+0xe/0x20 [ 1284.488666][ T27] 1 lock held by syz.9.1309/11148: [ 1284.496649][ T27] #0: ffffffff8dc44008 (rtnl_mutex){+.+.}-{3:3}, at: netdev_run_todo+0x9b8/0xbb0 [ 1284.514175][ T27] 1 lock held by syz.8.1312/11163: [ 1284.519583][ T27] #0: ffffffff8dc44008 (rtnl_mutex){+.+.}-{3:3}, at: tun_chr_close+0x3a/0x1b0 [ 1284.535793][ T27] [ 1284.538246][ T27] ============================================= [ 1284.538246][ T27] [ 1284.554816][ T27] NMI backtrace for cpu 0 [ 1284.559185][ T27] CPU: 0 PID: 27 Comm: khungtaskd Not tainted 5.15.180-syzkaller #0 [ 1284.567187][ T27] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 1284.577267][ T27] Call Trace: [ 1284.580566][ T27] [ 1284.583513][ T27] dump_stack_lvl+0x1e3/0x2d0 [ 1284.588224][ T27] ? io_uring_drop_tctx_refs+0x1a0/0x1a0 [ 1284.593888][ T27] ? panic+0x860/0x860 [ 1284.597984][ T27] ? nmi_cpu_backtrace+0x23b/0x4a0 [ 1284.603126][ T27] nmi_cpu_backtrace+0x46a/0x4a0 [ 1284.608089][ T27] ? __wake_up_klogd+0xd5/0x100 [ 1284.612970][ T27] ? nmi_trigger_cpumask_backtrace+0x2a0/0x2a0 [ 1284.619151][ T27] ? _printk+0xd1/0x120 [ 1284.623332][ T27] ? panic+0x860/0x860 [ 1284.627444][ T27] ? __wake_up_klogd+0xcc/0x100 [ 1284.632331][ T27] ? panic+0x860/0x860 [ 1284.636428][ T27] ? __rcu_read_unlock+0x92/0x100 [ 1284.641478][ T27] ? arch_trigger_cpumask_backtrace+0x10/0x10 [ 1284.647574][ T27] nmi_trigger_cpumask_backtrace+0x181/0x2a0 [ 1284.653605][ T27] watchdog+0xe72/0xeb0 [ 1284.657842][ T27] kthread+0x3f6/0x4f0 [ 1284.661953][ T27] ? hungtask_pm_notify+0x50/0x50 [ 1284.667003][ T27] ? kthread_blkcg+0xd0/0xd0 [ 1284.671620][ T27] ret_from_fork+0x1f/0x30 [ 1284.676073][ T27] [ 1284.680155][ T27] Sending NMI from CPU 0 to CPUs 1: [ 1284.685712][ C1] NMI backtrace for cpu 1 [ 1284.685724][ C1] CPU: 1 PID: 4289 Comm: kworker/u4:8 Not tainted 5.15.180-syzkaller #0 [ 1284.685742][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 1284.685753][ C1] Workqueue: bat_events batadv_nc_worker [ 1284.685773][ C1] RIP: 0010:__lock_acquire+0x4a3/0x1ff0 [ 1284.685803][ C1] Code: 0f 85 29 13 00 00 44 89 33 44 89 e3 41 c1 ec 06 4a 8d 3c e5 c0 c0 98 90 be 08 00 00 00 e8 15 94 67 00 48 0f a3 1d 6d 20 36 0f <73> 20 48 8d 04 5b 48 c1 e0 06 48 8d 98 80 3f 31 90 48 ba 00 00 00 [ 1284.685818][ C1] RSP: 0018:ffffc9000328f9a0 EFLAGS: 00000057 [ 1284.685832][ C1] RAX: 0000000000000001 RBX: 0000000000000015 RCX: ffffffff8162a04b [ 1284.685844][ C1] RDX: 0000000000000000 RSI: 0000000000000008 RDI: ffffffff9098c0c0 [ 1284.685855][ C1] RBP: 000000000000000a R08: dffffc0000000000 R09: fffffbfff2131819 [ 1284.685867][ C1] R10: 0000000000000000 R11: dffffc0000000001 R12: 0000000000000000 [ 1284.685877][ C1] R13: ffff888076bd8ae8 R14: 0000000000000000 R15: ffff888076bd8b60 [ 1284.685890][ C1] FS: 0000000000000000(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000 [ 1284.685904][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1284.685915][ C1] CR2: 000055a4522c7b40 CR3: 000000006610c000 CR4: 00000000003506e0 [ 1284.685931][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 1284.685940][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 1284.685951][ C1] Call Trace: [ 1284.685956][ C1] [ 1284.685968][ C1] lock_acquire+0x1db/0x4f0 [ 1284.685987][ C1] ? rcu_lock_acquire+0x5/0x30 [ 1284.686005][ C1] ? read_lock_is_recursive+0x10/0x10 [ 1284.686025][ C1] ? rcu_lock_release+0x5/0x20 [ 1284.686041][ C1] ? __lock_acquire+0x1ff0/0x1ff0 [ 1284.686061][ C1] ? lockdep_hardirqs_on_prepare+0x438/0x7a0 [ 1284.686084][ C1] rcu_lock_acquire+0x2a/0x30 [ 1284.686099][ C1] ? rcu_lock_acquire+0x5/0x30 [ 1284.686113][ C1] batadv_nc_worker+0xc1/0x5b0 [ 1284.686132][ C1] process_one_work+0x8a1/0x10c0 [ 1284.686155][ C1] ? worker_detach_from_pool+0x260/0x260 [ 1284.686175][ C1] ? _raw_spin_lock_irqsave+0x120/0x120 [ 1284.686194][ C1] ? kthread_data+0x4e/0xc0 [ 1284.686212][ C1] ? wq_worker_running+0x97/0x170 [ 1284.686229][ C1] worker_thread+0xaca/0x1280 [ 1284.686256][ C1] kthread+0x3f6/0x4f0 [ 1284.686270][ C1] ? rcu_lock_release+0x20/0x20 [ 1284.686286][ C1] ? kthread_blkcg+0xd0/0xd0 [ 1284.686301][ C1] ret_from_fork+0x1f/0x30 [ 1284.686324][ C1] [ 1284.709293][ T27] Kernel panic - not syncing: hung_task: blocked tasks [ 1284.945417][ T27] CPU: 1 PID: 27 Comm: khungtaskd Not tainted 5.15.180-syzkaller #0 [ 1284.953578][ T27] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 1284.963642][ T27] Call Trace: [ 1284.966915][ T27] [ 1284.969839][ T27] dump_stack_lvl+0x1e3/0x2d0 [ 1284.974554][ T27] ? io_uring_drop_tctx_refs+0x1a0/0x1a0 [ 1284.980188][ T27] ? panic+0x860/0x860 [ 1284.984259][ T27] panic+0x318/0x860 [ 1284.988147][ T27] ? schedule_preempt_disabled+0x20/0x20 [ 1284.993781][ T27] ? nmi_trigger_cpumask_backtrace+0x221/0x2a0 [ 1284.999935][ T27] ? fb_is_primary_device+0xd0/0xd0 [ 1285.005129][ T27] ? arch_trigger_cpumask_backtrace+0x10/0x10 [ 1285.011196][ T27] ? nmi_trigger_cpumask_backtrace+0x221/0x2a0 [ 1285.017347][ T27] ? nmi_trigger_cpumask_backtrace+0x281/0x2a0 [ 1285.023511][ T27] ? nmi_trigger_cpumask_backtrace+0x286/0x2a0 [ 1285.029664][ T27] watchdog+0xeb0/0xeb0 [ 1285.033826][ T27] kthread+0x3f6/0x4f0 [ 1285.037888][ T27] ? hungtask_pm_notify+0x50/0x50 [ 1285.042925][ T27] ? kthread_blkcg+0xd0/0xd0 [ 1285.047529][ T27] ret_from_fork+0x1f/0x30 [ 1285.051968][ T27] [ 1285.055295][ T27] Kernel Offset: disabled [ 1285.059628][ T27] Rebooting in 86400 seconds..