last executing test programs: 27m1.206784728s ago: executing program 1 (id=6): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f00000000c0), &(0x7f00000002c0)=0x6a) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r1, 0x89f8, &(0x7f0000000200)={'syztnl1\x00', &(0x7f0000000140)={'erspan0\x00', 0x0, 0x7800, 0x8000, 0x7, 0x1, {{0x1d, 0x4, 0x3, 0x6, 0x74, 0x67, 0x0, 0xbe, 0x4, 0x0, @private=0xa010100, @private=0xa010102, {[@rr={0x7, 0x1f, 0x2a, [@local, @loopback, @broadcast, @empty, @multicast1, @local, @loopback]}, @timestamp_prespec={0x44, 0x1c, 0x9b, 0x3, 0x0, [{@initdev={0xac, 0x1e, 0x1, 0x0}, 0x6e}, {@dev={0xac, 0x14, 0x14, 0x1a}, 0x9}, {@remote, 0x6085}]}, @cipso={0x86, 0x22, 0x3, [{0x6, 0x2}, {0x5, 0x11, "a6554a96d06bb193aeed3fc1f2d93f"}, {0x0, 0x9, "23a4e5b125300d"}]}, @end]}}}}}) r2 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'lo\x00'}) sendmsg$nl_route_sched(r2, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r1, 0x89f0, &(0x7f0000000300)={'gretap0\x00', &(0x7f0000000240)={'tunl0\x00', 0x0, 0x10, 0x40, 0x53b, 0x401, {{0x12, 0x4, 0x2, 0x3, 0x48, 0x65, 0x0, 0x7, 0x2f, 0x0, @local, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@noop, @lsrr={0x83, 0x7, 0x48, [@local]}, @rr={0x7, 0x7, 0x5c, [@multicast1]}, @timestamp={0x44, 0x8, 0x9d, 0x0, 0xc, [0x8]}, @timestamp_addr={0x44, 0x14, 0x39, 0x1, 0x2, [{@dev={0xac, 0x14, 0x14, 0x3d}, 0x4}, {@private=0xa010101, 0xf}]}, @noop, @timestamp={0x44, 0x8, 0x43, 0x0, 0x3, [0x923]}]}}}}}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000340)={'batadv_slave_1\x00'}) socket(0x11, 0x800000003, 0x0) socket(0x1f, 0x1, 0x0) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r3, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) socket$nl_sock_diag(0x10, 0x3, 0x4) socket$inet6(0xa, 0x3, 0xff) write(r3, &(0x7f0000000000)="0a000000010001", 0x7) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000380), 0x4a301, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8d11}) r5 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) 26m55.266906223s ago: executing program 1 (id=9): setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0xa, &(0x7f0000000180)=0x67e, 0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) syz_io_uring_setup(0x35f6, 0x0, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r3 = syz_io_uring_setup(0x24b9, &(0x7f0000000300)={0x0, 0xe0fc, 0x4, 0x400000, 0x3a7}, &(0x7f0000000100)=0x0, &(0x7f0000000200)=0x0) syz_io_uring_submit(r4, r5, &(0x7f00000001c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) r6 = syz_open_dev$dri(&(0x7f00000005c0), 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r6, 0xc04064a0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r6, 0xc05064a7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)=[0x0], &(0x7f0000000180), 0x0, 0x1, 0x0, 0x0, r7}) ioctl$DRM_IOCTL_MODE_GETPROPERTY(r6, 0xc04064aa, &(0x7f0000000300)={&(0x7f0000000000), &(0x7f0000000600)=[{}, {}, {}], r8, 0x0, '\x00', 0x56, 0x3}) ioctl$DRM_IOCTL_MODE_GETPROPERTY(r1, 0xc04064aa, 0x0) io_uring_enter(r3, 0x353, 0x0, 0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x1000000000000, 0x0}) openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r9 = socket$netlink(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r9, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000001200)={&(0x7f00000001c0)={0x38, 0x1403, 0x1, 0x4000000, 0x25dfdbfe, "", [{{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'syzkaller0\x00'}}]}, 0x38}}, 0x0) 26m53.299482775s ago: executing program 1 (id=12): arch_prctl$ARCH_ENABLE_TAGGED_ADDR(0x4002, 0x3) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) openat$adsp1(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$IOCTL_VMCI_VERSION2(0xffffffffffffffff, 0x7a7, 0x0) ioctl$IOCTL_VMCI_DATAGRAM_RECEIVE(0xffffffffffffffff, 0x7ac, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_DEBUG_SET(0xffffffffffffffff, 0x0, 0x8000) arch_prctl$ARCH_ENABLE_TAGGED_ADDR(0x4002, 0x5) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$inet6(0xa, 0x6, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r1, &(0x7f0000000b40)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000980)=ANY=[@ANYBLOB="240000000101050a000000000000000000000000080008400000000008001540a2000000"], 0x24}}, 0x0) 26m52.543698882s ago: executing program 1 (id=14): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000600)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(camellia)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5910fae9d6dcd3292ea54c7b6ef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000440), r1) sendmsg$nl_route_sched_retired(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001480)=@newchain={0xc18, 0x64, 0x800, 0x70bd26, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x8, 0x4}, {0x1, 0xffe0}, {0x6, 0x9}}, [@f_rsvp={{0x9}, {0x2f8, 0x2, [@TCA_RSVP_PINFO={0x20, 0x4, {{0x80000000, 0x4dbd, 0xeeb}, {0x2, 0x8, 0xfffffffa}, 0xc1, 0x6a, 0x5}}, @TCA_RSVP_PINFO={0x20, 0x4, {{0xffffffff, 0xb, 0xa7}, {0x5, 0x5, 0x800}, 0x8, 0x7, 0x7}}, @TCA_RSVP_ACT={0x29c, 0x6, [@m_mpls={0x50, 0x2, 0x0, 0x0, {{0x9}, {0xc, 0x2, 0x0, 0x1, [@TCA_MPLS_TTL={0x5, 0x7, 0x3}]}, {0x19, 0x6, "8afa00b66cd46a3dd56b15e78c42c5591665aeb38c"}, {0xc}, {0xc, 0x8, {0x3, 0x2}}}}, @m_sample={0x120, 0xc, 0x0, 0x0, {{0xb}, {0x14, 0x2, 0x0, 0x1, [@TCA_SAMPLE_RATE={0x8, 0x3, 0x2}, @TCA_SAMPLE_TRUNC_SIZE={0x8, 0x4, 0xb}]}, {0xe1, 0x6, "e72064788474e9d9e37d10634c48137100cd94378d719d8bd7941dad82ddc6801abbaa8f647285f9824234165b9164bf9e07b059e8876d3b86f3d3eff123dba20c31009bf5356d4bfb902c879aadb96893919766360a75e3b6404b4ee350e5069892d8d53a532f0ab2991dacf5372f2793899ac294b8bdf081b1045fcb0642c3ec1f5fa35016be0346c5dfaf13cdf2231fcde134b75b4986efe4e1174e6c8dd6388bb51e53bded3dc1f39636729462668780eeb1beaecaa7e546ef2e208007bfead597ba9860ccd6ffd17cdda2608e6f2d712466d6de10742c6500e684"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0x3}}}}, @m_vlan={0x128, 0xc, 0x0, 0x0, {{0x9}, {0x58, 0x2, 0x0, 0x1, [@TCA_VLAN_PARMS={0x1c, 0x2, {{0x1, 0x9, 0x6, 0x10000, 0x1ff}, 0x2}}, @TCA_VLAN_PUSH_VLAN_PROTOCOL={0x6, 0x4, 0x8100}, @TCA_VLAN_PUSH_VLAN_PROTOCOL={0x6, 0x4, 0x8100}, @TCA_VLAN_PUSH_VLAN_PRIORITY={0x5, 0x6, 0x4}, @TCA_VLAN_PUSH_VLAN_PRIORITY={0x5, 0x6, 0x5}, @TCA_VLAN_PUSH_VLAN_PROTOCOL={0x6, 0x4, 0x88a8}, @TCA_VLAN_PUSH_VLAN_ID={0x6, 0x3, 0xc8f}, @TCA_VLAN_PUSH_VLAN_PRIORITY={0x5, 0x6, 0x5}]}, {0xa5, 0x6, "97100804a6e83741ac91d00f97036bd5a059445798ae5f1d29ed13399a2b8ba89948bbbac461d5c532b687722214ca48aeadc12d3abc2c3309c14abe618318a684e865ac924bdf1ffa74cb1495a8e7fe212fdbcc5cfd00bccbc713c830853e544043950ef0d308e3fc4b92300a548ea899e6b08cdf47a8bbf4f700a6e28bae34b99ba69765535a9bbd1931a83e9e28328635d5a32b511580f1fdf62e8756ba567b"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x3}}}}]}, @TCA_RSVP_CLASSID={0x8, 0x1, {0x1, 0xffff}}, @TCA_RSVP_SRC={0x8, 0x3, @rand_addr=0x64010101}, @TCA_RSVP_CLASSID={0x8, 0x1, {0x9, 0xe}}]}}, @f_rsvp={{0x9}, {0x8e4, 0x2, [@TCA_RSVP_DST={0x8, 0x2, @broadcast}, @TCA_RSVP_PINFO={0x20, 0x4, {{0xa, 0x7fffffff, 0x10000}, {0x9, 0x80000000, 0x19}, 0x3c58127146fc1915, 0x7e, 0x6}}, @TCA_RSVP_PINFO={0x20, 0x4, {{0x7, 0x0, 0x100}, {0xd7, 0x57, 0xff}, 0x2, 0x6, 0x7}}, @TCA_RSVP_CLASSID={0x8, 0x1, {0x0, 0xfff8}}, @TCA_RSVP_ACT={0x390, 0x6, [@m_tunnel_key={0xe0, 0x0, 0x0, 0x0, {{0xf}, {0x7c, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_ENC_KEY_ID={0x8, 0x7, 0x8}, @TCA_TUNNEL_KEY_ENC_IPV4_DST={0x8, 0x4, @rand_addr=0x64010101}, @TCA_TUNNEL_KEY_ENC_IPV4_DST={0x8, 0x4, @multicast2}, @TCA_TUNNEL_KEY_ENC_IPV6_DST={0x14, 0x6, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @TCA_TUNNEL_KEY_ENC_IPV6_DST={0x14, 0x6, @empty}, @TCA_TUNNEL_KEY_NO_CSUM={0x5}, @TCA_TUNNEL_KEY_ENC_KEY_ID={0x8, 0x7, 0x2}, @TCA_TUNNEL_KEY_ENC_IPV6_SRC={0x14, 0x5, @private2}, @TCA_TUNNEL_KEY_ENC_IPV6_SRC={0x14, 0x5, @empty}]}, {0x35, 0x6, "bb2cdd218e1932c60e25532848837b415d56e6744bf0b3f8aba66b0d2cad032b8cf911d07e8929550f9c5047de25564b34"}, {0xc}, {0xc, 0x8, {0x1, 0x1}}}}, @m_gact={0xec, 0x18, 0x0, 0x0, {{0x9}, {0x10, 0x2, 0x0, 0x1, [@TCA_GACT_PROB={0xc, 0x3, {0x1, 0x1cc5, 0x10000000}}]}, {0xb1, 0x6, "2f7e17336698956b6031823656f446206c288c15e63393ac0209c3aca831623d31c5979ed04ea05a6ad1ff34ad989f74edaa909e59500289321dae9b3dd180566cdf21e67e8004f70abffced08e6927c5360bfb787984ba5718d9060fde444b7589483febec75ceecb9874d03d4b9ac235a2e5105f5e4d101c7bb89d42552b5001e6f30636aa246f8a902586bd24150fa3103f039ef05cb2c0d2b249628b30fe700ce0cc2d1bcc9f84cb23539f"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0x2}}}}, @m_ct={0x60, 0x6, 0x0, 0x0, {{0x7}, {0x20, 0x2, 0x0, 0x1, [@TCA_CT_NAT_IPV4_MIN={0x8, 0x9, @multicast2}, @TCA_CT_LABELS={0x14, 0x7, "f41fc0b35e938477d0bf68d3f3424a77"}]}, {0x19, 0x6, "c5ae7b164aca2eb1b650efe7025f54bc4b1f425664"}, {0xc}, {0xc, 0x8, {0x1, 0x1}}}}, @m_mpls={0x160, 0x15, 0x0, 0x0, {{0x9}, {0x5c, 0x2, 0x0, 0x1, [@TCA_MPLS_TC={0x5, 0x6, 0x6}, @TCA_MPLS_TTL={0x5, 0x7, 0x7}, @TCA_MPLS_PARMS={0x1c, 0x2, {{0x4, 0x6, 0x2, 0x1, 0x8}, 0x1}}, @TCA_MPLS_BOS={0x5}, @TCA_MPLS_LABEL={0x8, 0x5, 0xa5f35}, @TCA_MPLS_PARMS={0x1c, 0x2, {{0xf, 0xfffffffe, 0x6, 0x5, 0xdb}, 0x1}}]}, {0xd9, 0x6, "324bf91de07124b9e54937a32ee33bcdaa62106a7caf5835fd0e696c43e2316f8772f9f823bba68a9c89f0ae20748880652a70e1805890363fa80d3dcf379a8acde00c97af04c9d138527c6c9f877e07d6ddafebce4ada28b72f21399dbf3555d32162f5d74e473ab593b947ebc3ec2fa87cc1e9e03f3eb9ceb45b75f908e8a69ff062c983cab8f637a576b62b6458ae5b999b20b4877654cc2a0af9ff333fa596c5a7e37a68fa7aa7e24ad28a58acdf1d3339fc34716c1a7ec899f913568001637d8638e773f205b76fcbe372a9e7ada20d485e8a"}, {0xc}, {0xc, 0x8, {0x3, 0x1}}}}]}, @TCA_RSVP_SRC={0x8, 0x3, @remote}, @TCA_RSVP_POLICE={0x418, 0x5, [@TCA_POLICE_RATE={0x404, 0x2, [0x4, 0x9, 0x0, 0xb3, 0x3, 0x8653, 0x2232, 0xe, 0x7, 0x4, 0x0, 0x7fff, 0x8, 0x9d, 0x632, 0x6, 0x5, 0x6, 0x5, 0x49cc, 0x2, 0x0, 0xde6a, 0xfffffffa, 0x4, 0x9, 0x8a, 0xd, 0x1ff, 0x30, 0x5, 0xfffffffd, 0x6, 0x7ff, 0x8, 0x3, 0x81, 0x4, 0x9, 0x9, 0x4, 0xffffffff, 0x6, 0x4, 0x2, 0x36e, 0x10000, 0x4, 0xd4, 0x1, 0x0, 0x5, 0xddc, 0x2, 0x0, 0x9, 0x80000000, 0x69, 0x80, 0x9, 0x8, 0x3, 0x400, 0x6, 0x0, 0x4, 0x9, 0x572, 0x8, 0x9, 0x4, 0x8a, 0xfffffffe, 0x1, 0x401, 0x6, 0x4c2645fd, 0x6, 0x3, 0x8611329, 0x3, 0x0, 0x2, 0x7, 0x5, 0xfff, 0x4, 0x8, 0x1, 0x80000001, 0x3, 0x39bd, 0x81, 0x5, 0x0, 0x24, 0x3, 0x0, 0xfffffff9, 0x9, 0x1fb4, 0x80000000, 0x9, 0x1, 0xffffffff, 0x7d, 0x4, 0x1000, 0x80000001, 0x0, 0x2a7, 0xc03, 0xfffff000, 0x1e8, 0x5, 0x6, 0x400, 0x528, 0x2, 0x88, 0x3d75, 0x9, 0xb8, 0xd6bb, 0x8, 0x5, 0x6, 0x4, 0x28, 0x9, 0x7, 0x0, 0xfffffffc, 0x6, 0xfffffffa, 0x1000, 0x8, 0x2, 0xa71, 0xfffffff7, 0x401, 0x7, 0xfffffff1, 0x40, 0x1000, 0xfffff000, 0x0, 0x6, 0x6b, 0xc, 0x8c1, 0x7, 0x3, 0x1, 0x2, 0x6, 0x3, 0xfad10b0c, 0x7f, 0x5, 0x2, 0x2b, 0x1ff, 0x9e, 0x80, 0x7, 0x2, 0x1, 0xefe, 0x5cbf198d, 0x3, 0x0, 0x8, 0xf, 0x5, 0x3ff, 0x1ff, 0x9e11, 0x4, 0x4, 0x8, 0x401, 0xfffffff9, 0xf90, 0x1b1, 0xc6, 0x6885, 0x660, 0x8, 0x10001, 0x1000, 0x6, 0x1ff, 0x2, 0x4, 0x7, 0x81, 0x1, 0x4, 0xfff, 0xfff, 0xa0000, 0x5, 0x10000, 0x401, 0x8772, 0xe, 0x400, 0x9, 0x5, 0xba8, 0xd, 0x1, 0x81, 0x8, 0x1, 0x2, 0x5, 0x5, 0xa3d, 0x5, 0x6, 0x7, 0x9, 0x2, 0x5e, 0x10, 0x800, 0x9, 0xfffffff1, 0x3, 0x6, 0x7, 0x10, 0x0, 0x0, 0x4, 0x1ff, 0xf779, 0x5, 0x0, 0xff, 0x8, 0x7abf, 0x2, 0x9, 0x7, 0x99, 0x4, 0x5dc05eee, 0x1, 0xfff, 0x9, 0x3, 0x9]}, @TCA_POLICE_RESULT={0x8, 0x5, 0x6}, @TCA_POLICE_RESULT={0x8, 0x5, 0x9}]}, @TCA_RSVP_SRC={0x8, 0x3, @broadcast}, @TCA_RSVP_ACT={0xd8, 0x6, [@m_pedit={0xd4, 0x11, 0x0, 0x0, {{0xa}, {0x60, 0x2, 0x0, 0x1, [@TCA_PEDIT_KEYS_EX={0x5c, 0x5, 0x0, 0x1, [{0x3c, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_HTYPE={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x3}, @TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x3}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x7}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x4}]}, {0x1c, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x3}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x2}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x5}]}]}]}, {0x49, 0x6, "71a6d04508ff170cc51a31a334dd9c13a6f8dbcb50218378b331323f8b3b5580c5cc2f578a025646bfc5237b6808b383141e2b249dce8f6590795a8d7b29b73fd51a5fa324"}, {0xc, 0x7, {0x1, 0x1}}, {0xc}}}]}]}}]}, 0xc18}, 0x1, 0x0, 0x0, 0x20000800}, 0x24008040) 26m51.445452547s ago: executing program 1 (id=16): r0 = getpid() r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RELOAD(r1, &(0x7f0000000100)={0x0, 0x4100, &(0x7f00000000c0)={&(0x7f0000000080)={0x3c, r2, 0x1, 0x0, 0x0, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r0}}]}, 0x3c}}, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000140), r1) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'netdevsim0\x00'}) socket$inet_udp(0x2, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x10, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x8, 0xb4, &(0x7f0000000140)=""/180, 0x41000, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2) ioctl$I2C_SMBUS(0xffffffffffffffff, 0x720, &(0x7f0000003080)={0x1, 0x0, 0x6, &(0x7f0000003040)={0x0, "f4e1a230be8f46463fb1a5f1b44f44eaa65e485b747aa95df8c01eaf07677d18bc"}}) r7 = socket$nl_audit(0x10, 0x3, 0x9) sendmmsg(r7, &(0x7f0000003f40)=[{{0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000500)="fe", 0x1}], 0x1}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000002940)=ANY=[], 0xc}}], 0x2, 0x40002) 26m42.73120604s ago: executing program 1 (id=34): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000ac0)={0x18, 0x13, &(0x7f00000002c0)=ANY=[@ANYBLOB="1c0000000000000000fc4dffffffff853a", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7020000000000008500000086000000bf91000000000000b7020000000000008500000085000000b7000000000000009500000000000000"], &(0x7f00000003c0)='GPL\x00', 0x9, 0xe6, &(0x7f00000009c0)=""/230, 0x41100, 0x70, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, &(0x7f0000000400)=[{0x2, 0x5, 0x1, 0x1}, {0x0, 0x400001, 0xa, 0x4}, {0x1, 0x3, 0xa, 0xc}], 0x10, 0x8, @void, @value}, 0x94) r2 = socket$nl_generic(0x10, 0x3, 0x10) recvmmsg(r2, &(0x7f00000027c0)=[{{0x0, 0x0, 0x0}, 0x2}], 0x1, 0x100, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000140)={'batadv0\x00', 0x0}) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000b80)=ANY=[@ANYRESDEC=r0, @ANYBLOB="a6944eed5cb88f9d0d6775b02be631971e666da0957216d11bb04fc2f801abd1b621f0acb8c34126033a22c51dec87259d87da24ba0b6faba154034e6544db4af6854bea78805f0af26bcf23fd3f816c37d69c7103696f7e80327c1e9719c08b0b", @ANYRES8, @ANYRESDEC=0x0], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0xc2f00, 0x4, '\x00', r3, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0, 0x0, 0x0, 0x0, 0x3, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r4}, 0x10) r5 = socket(0x10, 0x80003, 0x0) write(r5, &(0x7f0000000000)="240000001a005f0214f9f407000904000a000000fe0000000000000008000f00fd000000", 0x85) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000003900)=ANY=[@ANYBLOB="620af8ff0c200021bfa100000000000007010000f8ffffffb702000003000000bd120000000000008500000006000000b70000000000000095000000000000003faf4f1e7f2aa3d9b18ed81c0c869b51ec6c0af4e0e4a9446c7670568982b4e020f698393aa0f3881f9c24aa56f15199fad0093c59d66b5ece9f36c70d0f13905ea23c22624c9f87f9793f50bb546040677b0c5077da80fb982c1e9400e693146cea484a415b76966118b64f751a0f241b07080008002d75593a286cecc93e64c227c95aa0b784625704f07a72c234664c0af9360a1f7a5e6b607130c89f18c0c1089d8b853289e01aa27ae8b09e00e79ab20b0b8e1148f49faf2ad0000000000000006fa03c6468972089b302d7bf6023cdcedb5e0125ebbc08dee510cb2364149215108333719acd97cfa107d40224edc5465a932b77e74e802a0d42bc6099ad2300000080006ef6c1ff0900000000000010c63a949e8b7955394ffa82b8e942c89112f4ab87b1bfeda7be586602d985430cea0162ab3fcf4591c926abfb0767192302000000b0eea24492a660583eecb42cbcd3de3a83209da17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c95c25a573dc2edcaea2b1a52496dfcaf99431412fd134a996382a1a04d5bb924cfe5f3185418d605ffff9c4d2ec7c32f2095e63c80aff9fa740b5b7632f32030916f89c6dad7603f2ba2a790d62d6faec2fed44da4928b30142ba11de6c5d50b83bae613402216b5054d1e7c13b1355d6f4a8245ffa4997da9c77af4c0eb97fca585ec6bf5af51d564beb6d952aab9c70764b0a8a7583c90b3433b809bdb9fbd48bc873495cbff8a326eea31ae4e0f7505ebf6c9d13330ca005ace1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223a0eb4fa39f6b5c02e6d6d90756ff57902a8f57000000009700cf0b4b8bc2294133000000000000000000030000000000000000000000000010008bc0d9559711e6e8861c46495ba585a4b2d02edc3e28dd271c896249ed85b980680b00002b435ac15fc0288d9b2a169cdcacc413038dafb7a2c8cb482bac0ac502d9ba96ffffff7f0000100000000000007d5ad897ef3b7cda42013d53046da21b40216e14ba2d6ad5656bfff17addaedab25b30002abbba7fa725f38400be7c1f001b2cd317902f19e385be9e48dccff729433282830689da6b53b263339863297771429d120000003341bf4abacac95900fca0493cf29b33dcc9ffffffffffffffd39fec2271ff01589646efd1cf870cd7bb2366fde41f94290c2a5ff870ce41fd3467decb05cfd9fcb32c8ed1dbd9d10a64c1083d5e71b5565b1768ee58969c41595229df17bcad70fb4021428ce970275d13b78100788f11f76161d46ea3abe0fa4d30dc94ef241875f3b4ce0232fcea69c271d7fa29822aea68a660e717a04becff0f719197724f4fce1093b62d7e8c7123d8ec571be54c72d978cf906df0042e36acd37d7f9e119f2c06f815312e0cfe222a06f56dd022c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef2ae582786105c7df8be5877050c91301bb997316dbf17866fb84d4173731efe895ff2e1c5560926e90109b598502d3e959efc71f665c4d75cf2458e3546c1c776da64fb5abee0acfd235f2f4632c9062ece84c99a061887a20639b41c8c12ee86c50804042b3fb5aac518a75f9e7d7101d5e186c489b3a06fb99e0aa7f23a054de2f4d92d6bd72ee2c9fdc75aaaf1e3e483b4ad05573af40326993947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f54c2d3335457acf37331766e472391e358c3b377327ac9ecc34f24c9ae153ec60ac0694dc55bff9f5f45f90400000000000000d6b2c5ea1393fdf24285bf16b99c9cc0ad1857216f1a985f369191ae954febb3df464bfe0f7f3ee9afe7befb89d2777399f5874c553aeb3729cffe86e66964ae09bb6d163118e4cbe024fd4500f8ff0700000000cc9d8046c216c1f895778cb25122a2a9f9b444aeadea2a40da8daccf080842a486721737390cbf3a74cb2003016f1514216bdf57d2a40d40b51ab63e96ec8485b3b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde8a168c3f5db2fea6f26e4a4304e50c349f4f9ecee27defc93871c5f99b355b72d538ba4958ea8e4aa37094191e10096e7e60fc3541a2c905a1a95e9571bf38ae1981c4238ecaee6f75cd0a6881bd1517a8250ddc8674152f94e3a409e2a3bce109b60000000000000000d6d5210d7503000000a87a27602b81f76386f1535bef1497f92186086e29c6bc5a1fad6ec9a31137abf9a404abde7750898b1bd627e873f8703be8672d70d1ab57075228a9f46ed9bd1f08fb8191bbab2dc51de3a61f0868afc4294859323e6c257a45319f18101288d139bd3da20fed05a8fe64680b0a3fc22dd70400000000946912d6c98cd1a9fbe1e7d58c08acaf30235b918a31d2eca55f74a23641f61f2d5b308cf0d031b0c7f0ced69993e9960ff5f76015e6009556237badf4e7965bbe2777e808fcba821aa8e8c5c39609ff854352cb4900000000000000000000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66418d169fc03aa188546b3ad2a182068e1e3a0e2505bc7f41019645466a53f1c96e0d4b3bc19faa5449209b083dbd334b47f067bbab40743b2a42010082008df75cf43f8ecc8d3726602111b40e761fd21081920382f14d12ca3c3431ee97471c7868dcda7eaa69eb7f7f80572fdd11bb1d0d1280fbc22bf73468788df51710d7d31c632fc5ed1762eb0b428ee751c47d8e894f745a868404a0bf35f0121008b722b1eaa6aedfa1bf2e7ccb2d61d5d76331945ecefa26b8471d42645288d7226bbd9ccd628ab84875f2c50ba891cea592b0430a537a395dc73bda367bf12cb7d81691a5fe8c47be395656a297e9df0e71f96756ea5cce7daac4be290159f6bcd75f0dda9de5532e71ae9e48b0ed0254a83100000000f6fbb869604d51a36a54c832e45b2569dc0d90b075225fde44c4e0973171ad47d6b0fdf9743af932cd6db49a47613808bad959710300000000000000832d0a45fa4242e24c7e800003c9e8095e02985f28e678f66422436f949e2ab8f162d7e3f855e378f4a1f40b0c6fb2d4b205a800b6d713acebc5b014e61a543a5a194f9ac18d76b5440e3b1a569e7397f6cafa86966d7ba19e720413267a6ccea9c439671d2c680f2753ca184eeeb843450368acb4383a01d25eb3d1e23e0f2645d1cdfa9fa410632f95a5f622f851c66ee7e30393cd7a4d67ff2a49c4f93c0984b5c2d4523497e4d64f95f08493564a1df87111c9bf3194fef97dcecc467ace45feeb685c5870d05f88a0f463db88d377442e1349acaf766218b54a9d624778e1c4e064c98e494198276eb2df7766411bef0ebb5000000000006065d635b0b7a00ee767221d8af9753387e0cd8d718f54a29df6eba3bd4c440e6e2172e3fcc01b8babb757b5c59217b80d0db3ba582814a604e4ef7a803e9ca7c85b35c9b93a9e0885e238b44ae1c2e64cce3b27083b8246829e64056000302bffff15405bd5f2eba20000000000000000000000000000000000009a9823fd8fbc5aa16509945ed032b48ea12d8e0588dc52702e4084913a06d468d0928bad76d697e1f85ab030e788d38788ee5b5428d4a971cc97db9fd231088e570735ce129e7e77fc2777692664a1488fd8d6dff4dad618fd54f529d4555c6507009ee69dd1bc55258789b24052137e9637f3efbab71720f88c3c44b3b7486f979e8a3174b531f573fe0e5239c000be2733c49546f6e8a9175ec6f14dbf72cac91643b2fd99c29eca28a3c2e60d5e5b8795fae16a7c3ea57e728eca35eaf0155a39f97580e079175426c088a0208040982a0000000000000000000000000051ceaaf0159fe61f2eade7603d0a7a56fb09cd119ac06adb6597155ae47846892bb423c024d8cbe9240b71ec6dc2124d3a19e2d714b273d95d1d3aa737cb04a33615ff2a730e51067d5d675d7122361c37c61a43b5afd865b60d4cae891b73220f17d25985a7f76834995e53a93a1c7b9eef267df691ca983a0b15bda7f6c5c1ca7aa50261a3089a1ebf0734c9b07e8951ff023263ad5aed8cfb49b49e128c697724c057d22c5df5aef27ce3db11d5ad5527d149d076e1a87e2df27c0cb8a67ad026bf953e88f10447e125c2c0f1aebee1f3390a9e3ddad4e2a6e0f6e4569fdefa19e870e04acf9493b963f98e23cfc665e4f465fa3f801e1957c399e45f61d3459b1c606204368bb931345af2823c487d2fd99db6ea6e008e7ffa06ca861551189d155bd077a79fe2c7e961352e56824f727d21d41eae78bfec4a2d7a7edbc8ef958c5ea599f7c25bf71c2340558aa12fdd24a88aaad5921aee7dae6a2f3009d9cb43ab4898d0f0aa565431b6abe585d75db04d1c9ba0b9de4ae8b0d3132bc6810cc9a693979f55174a72e1df9fdef35bc470f9e6e591982757f45c52c645d891bf63bb21fb66926ebe1a8525611fc3e8bb8795c36dc2a86b5ab46ff33cc74f61751b2dae92676db85c8d0c721b7ea4544bf51c95c86fcac1f434d09d1ee4928aafe23de66fed972e0dddfb33f64e48701b049239e7f552d816441d11c4c2647c014462344359198d97c4b6e9ed31ca18987b64de079b2bed641e8a92f13ca70844c65cb423d01950b0ebf44bd28e09c05d9ae5dd689fb880fb18d042219f5ac60c3a03b085abf3e8e3efc842a8d328733461f04c99607061c65ed14c61322a5ac2d371a95b8ad867ec92d13a4fa4ae033a09673866cd77f4bcdaaa05207166b19a8758d8855400d8c6a7242dc207251e8797eca24ea4f487663e60f2f5e1f1424958fd148f846830e88a42d93e1fe9c0b4a4a268921738938aa9f3cb3811ac87c54c8ebc8bcfb4613cc3a997ff1579edbd4ade8020e3ad001b072b1a751b588ac4639f35a58e00a50c0270608c7a7f10132b1c25b9ea81232fbef665f6212f875b2a0000000000000000000000000000cf7b6c4ba9bec153d6834bfef080df374703a8ff56a63ec1fe5f2e05a79e3cace7283dd68d41e94420c325fe4dae144fde5ec25a87d625cab20753a77b323fa3783c8b675859b9012647885a242adfee2fe812ecbe5191e0a15142f7349e7627cc39d724e2e34e7a24154f26ae3125b36d0504965295d0453902ac7079b11a3a1e655e482331e3dc35b2e7e4e3ea99064fe5b9c8ae0ca3e5fd653f3286a99d81ce4eba765c38d097391ad4babac38ce5b4344e24a361cd54e5"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x2e) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r6}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0xd, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="850000006c000000760000000000000027000000000004009500000000000000"], &(0x7f0000000040)='syzkaller\x00', 0x4, 0x99, &(0x7f0000000180)=""/153, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffffffffffed8, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x23) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r7, 0x29, 0x40, &(0x7f0000000680)=@raw={'raw\x00', 0x3c1, 0x3, 0x2b8, 0xf0, 0x6c, 0x300, 0x0, 0x0, 0x1e8, 0x2e8, 0x2e8, 0x1e8, 0x2e8, 0x3, 0x0, {[{{@uncond, 0x0, 0xa8, 0xf0}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz1\x00'}}}, {{@ipv6={@local, @local, [], [], 'ip6_vti0\x00', 'veth0\x00'}, 0x0, 0xd0, 0xf8, 0x0, {}, [@common=@unspec=@connlabel={{0x28}, {0x0, 0x5}}]}, @common=@inet=@SET1={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x318) dup2(r0, r5) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x200400a1}, 0x20010084) syz_usb_connect(0x6, 0x24, 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendmsg$nl_route(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000740)=ANY=[@ANYBLOB="50000000100003040000000000000000f2000000", @ANYRES32=0x0, @ANYBLOB="00000000000000002800128009000100766c616e000000001800028006000100010000000c000200540a00001800000008000500", @ANYRES32], 0x50}, 0x1, 0xba01}, 0x0) fcntl$getownex(0xffffffffffffffff, 0x5, &(0x7f0000000100)) r9 = socket(0x10, 0x3, 0x0) sendmsg$kcm(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="2e00000010008188040f80ec59acbc0413a1f8480d0000005e140602000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x0) write(r9, &(0x7f0000000000)="2400000011005f0414f9f40700090400810000000d0000000000000008000f0001000000", 0x24) 26m27.328738716s ago: executing program 32 (id=34): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000ac0)={0x18, 0x13, &(0x7f00000002c0)=ANY=[@ANYBLOB="1c0000000000000000fc4dffffffff853a", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7020000000000008500000086000000bf91000000000000b7020000000000008500000085000000b7000000000000009500000000000000"], &(0x7f00000003c0)='GPL\x00', 0x9, 0xe6, &(0x7f00000009c0)=""/230, 0x41100, 0x70, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, &(0x7f0000000400)=[{0x2, 0x5, 0x1, 0x1}, {0x0, 0x400001, 0xa, 0x4}, {0x1, 0x3, 0xa, 0xc}], 0x10, 0x8, @void, @value}, 0x94) r2 = socket$nl_generic(0x10, 0x3, 0x10) recvmmsg(r2, &(0x7f00000027c0)=[{{0x0, 0x0, 0x0}, 0x2}], 0x1, 0x100, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000140)={'batadv0\x00', 0x0}) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000b80)=ANY=[@ANYRESDEC=r0, @ANYBLOB="a6944eed5cb88f9d0d6775b02be631971e666da0957216d11bb04fc2f801abd1b621f0acb8c34126033a22c51dec87259d87da24ba0b6faba154034e6544db4af6854bea78805f0af26bcf23fd3f816c37d69c7103696f7e80327c1e9719c08b0b", @ANYRES8, @ANYRESDEC=0x0], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0xc2f00, 0x4, '\x00', r3, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0, 0x0, 0x0, 0x0, 0x3, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r4}, 0x10) r5 = socket(0x10, 0x80003, 0x0) write(r5, &(0x7f0000000000)="240000001a005f0214f9f407000904000a000000fe0000000000000008000f00fd000000", 0x85) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000003900)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x2e) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r6}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0xd, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="850000006c000000760000000000000027000000000004009500000000000000"], &(0x7f0000000040)='syzkaller\x00', 0x4, 0x99, &(0x7f0000000180)=""/153, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffffffffffed8, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x23) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r7, 0x29, 0x40, &(0x7f0000000680)=@raw={'raw\x00', 0x3c1, 0x3, 0x2b8, 0xf0, 0x6c, 0x300, 0x0, 0x0, 0x1e8, 0x2e8, 0x2e8, 0x1e8, 0x2e8, 0x3, 0x0, {[{{@uncond, 0x0, 0xa8, 0xf0}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz1\x00'}}}, {{@ipv6={@local, @local, [], [], 'ip6_vti0\x00', 'veth0\x00'}, 0x0, 0xd0, 0xf8, 0x0, {}, [@common=@unspec=@connlabel={{0x28}, {0x0, 0x5}}]}, @common=@inet=@SET1={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x318) dup2(r0, r5) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x200400a1}, 0x20010084) syz_usb_connect(0x6, 0x24, 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendmsg$nl_route(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000740)=ANY=[@ANYBLOB="50000000100003040000000000000000f2000000", @ANYRES32=0x0, @ANYBLOB="00000000000000002800128009000100766c616e000000001800028006000100010000000c000200540a00001800000008000500", @ANYRES32], 0x50}, 0x1, 0xba01}, 0x0) fcntl$getownex(0xffffffffffffffff, 0x5, &(0x7f0000000100)) r9 = socket(0x10, 0x3, 0x0) sendmsg$kcm(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="2e00000010008188040f80ec59acbc0413a1f8480d0000005e140602000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x0) write(r9, &(0x7f0000000000)="2400000011005f0414f9f40700090400810000000d0000000000000008000f0001000000", 0x24) 24m47.43313425s ago: executing program 3 (id=260): r0 = syz_open_procfs(0x0, &(0x7f0000000000)='comm\x00') fchown(r0, 0x0, 0xee01) syz_genetlink_get_family_id$ipvs(0x0, 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000096c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@getchain={0x4c, 0x66, 0x1, 0x70bd28, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x0, 0xb}, {0xffec, 0x7}, {0xffff, 0xb}}, [{0x8, 0xb, 0xfffffff8}, {0x8, 0xb, 0x3}, {0x8, 0xb, 0x3}, {0x8, 0xb, 0xffff1eca}, {0x8, 0xb, 0x41}]}, 0x4c}}, 0x1) mkdir(&(0x7f0000000440)='./file1\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) clock_gettime(0xfffffffffffffff1, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000180)={'wlan1\x00'}) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$unix(0x1, 0x2, 0x0) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)={0x50, r7, 0x1, 0x70bd28, 0x25dfdbfd, {{}, {@void, @val={0x8, 0x3, r8}, @val={0xc, 0x99, {0x7ff, 0x70}}}}, [@NL80211_ATTR_IFNAME={0x14, 0x4, 'syzkaller0\x00'}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x7}, @NL80211_ATTR_MESH_ID={0xa}]}, 0x50}, 0x1, 0x0, 0x0, 0x91}, 0x24044884) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r9) socket$inet_sctp(0x2, 0x1, 0x84) ioctl$SIOCSIFHWADDR(r9, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000000)=ANY=[@ANYBLOB="5000000008021100000108021100000008021100000000000000000000000000010301000006020202020202010072061003030303037107"], 0x3f) mremap(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x1000, 0x0, &(0x7f00008b5000/0x1000)=nil) 24m46.146991944s ago: executing program 3 (id=265): ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000140)={0x2, @pix_mp={0x0, 0x0, 0x34324152, 0x0, 0xa, [{}, {0x10}]}}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x9}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) r1 = gettid() r2 = socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$inet(r2, &(0x7f0000000a00)={&(0x7f0000000880)={0x2, 0x4e23, @empty}, 0x10, 0x0, 0x0, &(0x7f0000000940)=ANY=[@ANYBLOB="10000000000000003400000001000000"], 0x10}, 0x10) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) madvise(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0xe) madvise(&(0x7f0000c00000/0x1000)=nil, 0x1000, 0x16) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_TCP_MD5SIG(r3, 0x6, 0xe, &(0x7f00000004c0)={@in={{0x2, 0x0, @loopback}}, 0x0, 0x0, 0x7, 0x0, "98d3340600c7aa11897ecaab876eab79576839c5656be8410f2802e944af80373be2666b665770173fbd1883303b6ac4749393ad08f139a68f00"}, 0xd8) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f00000000c0)={0x0, &(0x7f0000000080)}) ioctl$IMCLEAR_L2(0xffffffffffffffff, 0x80044946, 0x0) r4 = socket$inet6(0x10, 0x2, 0x4) sendto$inet6(r4, &(0x7f0000000080)="4c00000012001f15b9409b849ac00a00a5784002000000010000030038c88cc055c5ac27a6c5b068d0bf46d323452536005ad94a461cdbfee9bdb942352359a351d1ec0cffc8792cd8000080", 0x4c, 0x0, 0x0, 0x0) 24m43.736793424s ago: executing program 3 (id=268): connect$inet6(0xffffffffffffffff, &(0x7f0000000180)={0xa, 0x4005, 0x0, @dev={0xfe, 0x80, '\x00', 0x1b}, 0xd}, 0x1c) syz_80211_inject_frame(&(0x7f0000000240)=@device_b, 0x0, 0xb5) r0 = socket$unix(0x1, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) ioctl$SNDRV_PCM_IOCTL_RESUME(0xffffffffffffffff, 0xc0844123, 0x20000000) openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/mdstat\x00', 0x0, 0x0) syz_io_uring_setup(0x23b, 0x0, &(0x7f0000000080), &(0x7f00000001c0)) r4 = socket$kcm(0x10, 0x2, 0x0) openat$binfmt_register(0xffffffffffffff9c, 0x0, 0x1, 0x0) sendmsg$kcm(r4, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="2e00000010008188e6b62aa73772cc9f1ba1f848480000", 0x17}], 0x1}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, 0x0) r5 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) r6 = openat$sysctl(0xffffffffffffff9c, 0x0, 0x1, 0x0) r7 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r7, &(0x7f0000000040), 0x0) sendfile(r6, r5, 0x0, 0x23b) socket$kcm(0x2, 0x922000000001, 0x106) 24m41.996864117s ago: executing program 3 (id=272): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x800000001, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x1) read$msr(r2, 0x0, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0xfffffffd, @local, 0x2}, 0x1c) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x800, 0x0) ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000040)=0x14) ioctl$TIOCSETD(r4, 0x5423, &(0x7f00000003c0)=0x7) ioctl$TIOCVHANGUP(r4, 0x5437, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000300)=[@text64={0x40, &(0x7f0000000200)="f7790066baa00066b86b4266ef66ba420066b8e20066ef0f29902cbb0000c4e2b1ba8c88d9000000666666440f38826b410f7842280f07b8010000000f01d9c4033921820f47a753fd", 0x49}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r5, 0x4400ae8f, 0x0) 24m41.367986824s ago: executing program 3 (id=275): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() socket$phonet(0x23, 0x2, 0x1) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, 0x0, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x1f, 0x2, &(0x7f0000001c40)=ANY=[@ANYBLOB="85000000a800000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x13, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x16, 0x0, 0x8, 0x10002, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="0c0000000400000004000000"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000024c0), &(0x7f0000001280), 0xffffffff, r4}, 0x38) 24m40.436281981s ago: executing program 3 (id=279): r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) write$UHID_CREATE(r0, &(0x7f0000002a00)={0x0, {'syz0\x00', 'syz0\x00', 'syz0\x00', 0x0}}, 0x120) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000059c0)='./bus\x00', 0x1400e, &(0x7f0000005a00), 0x1, 0x42f, &(0x7f0000000940)="$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") r1 = socket$can_bcm(0x1d, 0x2, 0x2) sendmsg$can_bcm(r1, &(0x7f0000001100)={0x0, 0x0, &(0x7f00000010c0)={&(0x7f0000001200)={0x5, 0x3, 0x0, {0x0, 0x2710}, {}, {}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "92774448b28d7fd8"}}, 0x48}}, 0x0) recvmmsg(r1, &(0x7f0000000ec0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x40000022, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x82}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f00000004c0)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$SG_GET_LOW_DMA(0xffffffffffffffff, 0x227a, &(0x7f0000000280)) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={0x20, 0x10, 0x701, 0x0, 0x0, {0xa}, [@typed={0xc, 0x2, 0x0, 0x0, @str='nl80211\x00'}]}, 0x20}}, 0x0) recvmmsg(r5, &(0x7f0000001b40)=[{}], 0x1, 0x0, 0x0) 24m24.556633835s ago: executing program 33 (id=279): r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) write$UHID_CREATE(r0, &(0x7f0000002a00)={0x0, {'syz0\x00', 'syz0\x00', 'syz0\x00', 0x0}}, 0x120) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000059c0)='./bus\x00', 0x1400e, &(0x7f0000005a00), 0x1, 0x42f, &(0x7f0000000940)="$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") r1 = socket$can_bcm(0x1d, 0x2, 0x2) sendmsg$can_bcm(r1, &(0x7f0000001100)={0x0, 0x0, &(0x7f00000010c0)={&(0x7f0000001200)={0x5, 0x3, 0x0, {0x0, 0x2710}, {}, {}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "92774448b28d7fd8"}}, 0x48}}, 0x0) recvmmsg(r1, &(0x7f0000000ec0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x40000022, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x82}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f00000004c0)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$SG_GET_LOW_DMA(0xffffffffffffffff, 0x227a, &(0x7f0000000280)) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={0x20, 0x10, 0x701, 0x0, 0x0, {0xa}, [@typed={0xc, 0x2, 0x0, 0x0, @str='nl80211\x00'}]}, 0x20}}, 0x0) recvmmsg(r5, &(0x7f0000001b40)=[{}], 0x1, 0x0, 0x0) 21m37.165144656s ago: executing program 6 (id=634): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xe, 0x4, 0x4, 0xbf22, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r1 = openat$sndseq(0xffffff9c, &(0x7f0000000040), 0x2) ioctl$SNDRV_SEQ_IOCTL_CLIENT_ID(r1, 0x80045301, &(0x7f0000000080)) r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r3 = dup(r2) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) r4 = socket(0x10, 0x3, 0x0) preadv(r0, 0x0, 0x0, 0x6, 0x5) r5 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r5, &(0x7f0000001080)=[{{0x0, 0x0, 0x0}, 0x5}], 0x1, 0x2, 0x0) sendto$inet6(r5, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast2}, 0x1c) bpf$MAP_CREATE(0x0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000480)={0xffffffffffffffff}) r7 = dup(r6) getpeername$packet(r7, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000000c0)=@newlink={0x40, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_MASTER={0x8, 0xa, r8}, @IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @sit={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LOCAL={0x8, 0x2, @local}]}}}]}, 0x40}, 0x1, 0x4c00000000000000}, 0x8000) 21m34.833165597s ago: executing program 6 (id=642): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000600)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(camellia)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5910fae9d6dcd3292ea54c7b6ef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000440), r1) sendmsg$nl_route_sched_retired(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001480)=@newchain={0xfcc, 0x64, 0x800, 0x70bd26, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x8, 0x4}, {0x1, 0xffe0}, {0x6, 0x9}}, [@f_rsvp={{0x9}, {0x2f8, 0x2, [@TCA_RSVP_PINFO={0x20, 0x4, {{0x80000000, 0x4dbd, 0xeeb}, {0x2, 0x8, 0xfffffffa}, 0xc1, 0x6a, 0x5}}, @TCA_RSVP_PINFO={0x20, 0x4, {{0xffffffff, 0xb, 0xa7}, {0x5, 0x5, 0x800}, 0x8, 0x7, 0x7}}, @TCA_RSVP_ACT={0x29c, 0x6, [@m_mpls={0x50, 0x2, 0x0, 0x0, {{0x9}, {0xc, 0x2, 0x0, 0x1, [@TCA_MPLS_TTL={0x5, 0x7, 0x3}]}, {0x19, 0x6, "8afa00b66cd46a3dd56b15e78c42c5591665aeb38c"}, {0xc}, {0xc, 0x8, {0x3, 0x2}}}}, @m_sample={0x120, 0xc, 0x0, 0x0, {{0xb}, {0x14, 0x2, 0x0, 0x1, [@TCA_SAMPLE_RATE={0x8, 0x3, 0x2}, @TCA_SAMPLE_TRUNC_SIZE={0x8, 0x4, 0xb}]}, {0xe1, 0x6, "e72064788474e9d9e37d10634c48137100cd94378d719d8bd7941dad82ddc6801abbaa8f647285f9824234165b9164bf9e07b059e8876d3b86f3d3eff123dba20c31009bf5356d4bfb902c879aadb96893919766360a75e3b6404b4ee350e5069892d8d53a532f0ab2991dacf5372f2793899ac294b8bdf081b1045fcb0642c3ec1f5fa35016be0346c5dfaf13cdf2231fcde134b75b4986efe4e1174e6c8dd6388bb51e53bded3dc1f39636729462668780eeb1beaecaa7e546ef2e208007bfead597ba9860ccd6ffd17cdda2608e6f2d712466d6de10742c6500e684"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0x3}}}}, @m_vlan={0x128, 0xc, 0x0, 0x0, {{0x9}, {0x58, 0x2, 0x0, 0x1, [@TCA_VLAN_PARMS={0x1c, 0x2, {{0x1, 0x9, 0x6, 0x10000, 0x1ff}, 0x2}}, @TCA_VLAN_PUSH_VLAN_PROTOCOL={0x6, 0x4, 0x8100}, @TCA_VLAN_PUSH_VLAN_PROTOCOL={0x6, 0x4, 0x8100}, @TCA_VLAN_PUSH_VLAN_PRIORITY={0x5, 0x6, 0x4}, @TCA_VLAN_PUSH_VLAN_PRIORITY={0x5, 0x6, 0x5}, @TCA_VLAN_PUSH_VLAN_PROTOCOL={0x6, 0x4, 0x88a8}, @TCA_VLAN_PUSH_VLAN_ID={0x6, 0x3, 0xc8f}, @TCA_VLAN_PUSH_VLAN_PRIORITY={0x5, 0x6, 0x5}]}, {0xa5, 0x6, "97100804a6e83741ac91d00f97036bd5a059445798ae5f1d29ed13399a2b8ba89948bbbac461d5c532b687722214ca48aeadc12d3abc2c3309c14abe618318a684e865ac924bdf1ffa74cb1495a8e7fe212fdbcc5cfd00bccbc713c830853e544043950ef0d308e3fc4b92300a548ea899e6b08cdf47a8bbf4f700a6e28bae34b99ba69765535a9bbd1931a83e9e28328635d5a32b511580f1fdf62e8756ba567b"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x3}}}}]}, @TCA_RSVP_CLASSID={0x8, 0x1, {0x1, 0xffff}}, @TCA_RSVP_SRC={0x8, 0x3, @rand_addr=0x64010101}, @TCA_RSVP_CLASSID={0x8, 0x1, {0x9, 0xe}}]}}, @f_rsvp={{0x9}, {0x94c, 0x2, [@TCA_RSVP_DST={0x8, 0x2, @broadcast}, @TCA_RSVP_PINFO={0x20, 0x4, {{0xa, 0x7fffffff, 0x10000}, {0x9, 0x80000000, 0x19}, 0x3c58127146fc1915, 0x7e, 0x6}}, @TCA_RSVP_PINFO={0x20, 0x4, {{0x7, 0x0, 0x100}, {0xd7, 0x57, 0xff}, 0x2, 0x6, 0x7}}, @TCA_RSVP_CLASSID={0x8, 0x1, {0x0, 0xfff8}}, @TCA_RSVP_ACT={0x398, 0x6, [@m_tunnel_key={0xe0, 0x0, 0x0, 0x0, {{0xf}, {0x7c, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_ENC_KEY_ID={0x8, 0x7, 0x8}, @TCA_TUNNEL_KEY_ENC_IPV4_DST={0x8, 0x4, @rand_addr=0x64010101}, @TCA_TUNNEL_KEY_ENC_IPV4_DST={0x8, 0x4, @multicast2}, @TCA_TUNNEL_KEY_ENC_IPV6_DST={0x14, 0x6, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @TCA_TUNNEL_KEY_ENC_IPV6_DST={0x14, 0x6, @empty}, @TCA_TUNNEL_KEY_NO_CSUM={0x5}, @TCA_TUNNEL_KEY_ENC_KEY_ID={0x8, 0x7, 0x2}, @TCA_TUNNEL_KEY_ENC_IPV6_SRC={0x14, 0x5, @private2}, @TCA_TUNNEL_KEY_ENC_IPV6_SRC={0x14, 0x5, @empty}]}, {0x35, 0x6, "bb2cdd218e1932c60e25532848837b415d56e6744bf0b3f8aba66b0d2cad032b8cf911d07e8929550f9c5047de25564b34"}, {0xc}, {0xc, 0x8, {0x1, 0x1}}}}, @m_gact={0xec, 0x18, 0x0, 0x0, {{0x9}, {0x10, 0x2, 0x0, 0x1, [@TCA_GACT_PROB={0xc, 0x3, {0x1, 0x1cc5, 0x10000000}}]}, {0xb1, 0x6, "2f7e17336698956b6031823656f446206c288c15e63393ac0209c3aca831623d31c5979ed04ea05a6ad1ff34ad989f74edaa909e59500289321dae9b3dd180566cdf21e67e8004f70abffced08e6927c5360bfb787984ba5718d9060fde444b7589483febec75ceecb9874d03d4b9ac235a2e5105f5e4d101c7bb89d42552b5001e6f30636aa246f8a902586bd24150fa3103f039ef05cb2c0d2b249628b30fe700ce0cc2d1bcc9f84cb23539f"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0x2}}}}, @m_ct={0x60, 0x6, 0x0, 0x0, {{0x7}, {0x20, 0x2, 0x0, 0x1, [@TCA_CT_NAT_IPV4_MIN={0x8, 0x9, @multicast2}, @TCA_CT_LABELS={0x14, 0x7, "f41fc0b35e938477d0bf68d3f3424a77"}]}, {0x19, 0x6, "c5ae7b164aca2eb1b650efe7025f54bc4b1f425664"}, {0xc}, {0xc, 0x8, {0x1, 0x1}}}}, @m_mpls={0x168, 0x15, 0x0, 0x0, {{0x9}, {0x64, 0x2, 0x0, 0x1, [@TCA_MPLS_TC={0x5, 0x6, 0x6}, @TCA_MPLS_TTL={0x5, 0x7, 0x7}, @TCA_MPLS_PARMS={0x1c, 0x2, {{0x4, 0x6, 0x2, 0x1, 0x8}, 0x1}}, @TCA_MPLS_BOS={0x5}, @TCA_MPLS_LABEL={0x8, 0x5, 0xfceb}, @TCA_MPLS_LABEL={0x8, 0x5, 0xa5f35}, @TCA_MPLS_PARMS={0x1c, 0x2, {{0xf, 0xfffffffe, 0x6, 0x5, 0xdb}, 0x1}}]}, {0xd9, 0x6, "324bf91de07124b9e54937a32ee33bcdaa62106a7caf5835fd0e696c43e2316f8772f9f823bba68a9c89f0ae20748880652a70e1805890363fa80d3dcf379a8acde00c97af04c9d138527c6c9f877e07d6ddafebce4ada28b72f21399dbf3555d32162f5d74e473ab593b947ebc3ec2fa87cc1e9e03f3eb9ceb45b75f908e8a69ff062c983cab8f637a576b62b6458ae5b999b20b4877654cc2a0af9ff333fa596c5a7e37a68fa7aa7e24ad28a58acdf1d3339fc34716c1a7ec899f913568001637d8638e773f205b76fcbe372a9e7ada20d485e8a"}, {0xc}, {0xc, 0x8, {0x3, 0x1}}}}]}, @TCA_RSVP_SRC={0x8, 0x3, @remote}, @TCA_RSVP_POLICE={0x418, 0x5, [@TCA_POLICE_RATE={0x404, 0x2, [0x4, 0x9, 0x0, 0xb3, 0x3, 0x8653, 0x2232, 0xe, 0x7, 0x4, 0x0, 0x7fff, 0x8, 0x9d, 0x632, 0x6, 0x5, 0x6, 0x5, 0x49cc, 0x2, 0x0, 0xde6a, 0xfffffffa, 0x4, 0x9, 0x8a, 0xd, 0x1ff, 0x30, 0x5, 0xfffffffd, 0x6, 0x7ff, 0x8, 0x3, 0x81, 0x4, 0x9, 0x9, 0x4, 0xffffffff, 0x6, 0x4, 0x2, 0x36e, 0x10000, 0x4, 0xd4, 0x1, 0x0, 0x5, 0xddc, 0x2, 0x0, 0x9, 0x80000000, 0x69, 0x80, 0x9, 0x8, 0x3, 0x400, 0x6, 0x0, 0x4, 0x9, 0x572, 0x8, 0x9, 0x4, 0x8a, 0xfffffffe, 0x1, 0x401, 0x6, 0x4c2645fd, 0x6, 0x3, 0x8611329, 0x3, 0x0, 0x2, 0x7, 0x5, 0xfff, 0x4, 0x8, 0x1, 0x80000001, 0x3, 0x39bd, 0x81, 0x5, 0x0, 0x24, 0x3, 0x0, 0xfffffff9, 0x9, 0x1fb4, 0x80000000, 0x9, 0x1, 0xffffffff, 0x7d, 0x4, 0x1000, 0x80000001, 0x0, 0x2a7, 0xc03, 0xfffff000, 0x1e8, 0x5, 0x6, 0x400, 0x528, 0x2, 0x88, 0x3d75, 0x9, 0xb8, 0xd6bb, 0x8, 0x5, 0x6, 0x4, 0x28, 0x9, 0x7, 0x0, 0xfffffffc, 0x6, 0xfffffffa, 0x1000, 0x8, 0x2, 0xa71, 0xfffffff7, 0x401, 0x7, 0xfffffff1, 0x40, 0x1000, 0xfffff000, 0x0, 0x6, 0x6b, 0xc, 0x8c1, 0x7, 0x3, 0x1, 0x2, 0x6, 0x3, 0xfad10b0c, 0x7f, 0x5, 0x2, 0x2b, 0x1ff, 0x9e, 0x80, 0x7, 0x2, 0x1, 0xefe, 0x5cbf198d, 0x3, 0x0, 0x8, 0xf, 0x5, 0x3ff, 0x1ff, 0x9e11, 0x4, 0x4, 0x8, 0x401, 0xfffffff9, 0xf90, 0x1b1, 0xc6, 0x6885, 0x660, 0x8, 0x10001, 0x1000, 0x6, 0x1ff, 0x2, 0x4, 0x7, 0x81, 0x1, 0x4, 0xfff, 0xfff, 0xa0000, 0x5, 0x10000, 0x401, 0x8772, 0xe, 0x400, 0x9, 0x5, 0xba8, 0xd, 0x1, 0x81, 0x8, 0x1, 0x2, 0x5, 0x5, 0xa3d, 0x5, 0x6, 0x7, 0x9, 0x2, 0x5e, 0x10, 0x800, 0x9, 0xfffffff1, 0x3, 0x6, 0x7, 0x10, 0x0, 0x0, 0x4, 0x1ff, 0xf779, 0x5, 0x0, 0xff, 0x8, 0x7abf, 0x2, 0x9, 0x7, 0x99, 0x4, 0x5dc05eee, 0x1, 0xfff, 0x9, 0x3, 0x9]}, @TCA_POLICE_RESULT={0x8, 0x5, 0x6}, @TCA_POLICE_RESULT={0x8, 0x5, 0x9}]}, @TCA_RSVP_SRC={0x8, 0x3, @broadcast}, @TCA_RSVP_ACT={0x138, 0x6, [@m_pedit={0x134, 0x11, 0x0, 0x0, {{0xa}, {0xbc, 0x2, 0x0, 0x1, [@TCA_PEDIT_KEYS_EX={0xb8, 0x5, 0x0, 0x1, [{0x3c, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_HTYPE={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x3}, @TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x3}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x7}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x4}]}, {0x54, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x3}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x2}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x5}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x4}, @TCA_PEDIT_KEY_EX_CMD={0x6}]}, {0x24, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x5}, @TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x2}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}]}]}]}, {0x4d, 0x6, "71a6d04508ff170cc51a31a334dd9c13a6f8dbcb50218378b331323f8b3b5580c5cc2f578a025646bfc5237b6808b383141e2b249dce8f6590795a8d7b29b73fd51a5fa3242b88e2e3"}, {0xc, 0x7, {0x1, 0x1}}, {0xc}}}]}]}}, @f_rsvp6={{0xa}, {0x340, 0x2, [@TCA_RSVP_ACT={0x33c, 0x6, [@m_gact={0x188, 0x5, 0x0, 0x0, {{0x9}, {0x7c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0xfffffff8, 0xfee, 0x0, 0x1, 0xd}}, @TCA_GACT_PARMS={0x18, 0x2, {0x1, 0xa, 0x3, 0xf1, 0x8}}, @TCA_GACT_PARMS={0x18, 0x2, {0x0, 0x81, 0x1, 0x6, 0x1}}, @TCA_GACT_PARMS={0x18, 0x2, {0x9, 0x4, 0x1, 0x9, 0xd}}, @TCA_GACT_PROB={0xc, 0x3, {0x2, 0x18ce}}, @TCA_GACT_PROB={0xc, 0x3, {0x1, 0x1ecc, 0x2}}]}, {0xe1, 0x6, "3323c9692a4e88ccfe0567bce3eeb3ff8d9f12e00b2d96a2d88090115a6899248e6ceeaba6f4cd59a9c2cb865482d6b2967cbd66c07437bf35fe57962166dfa27ccf7d1e70ace06e41d9334c2f08fe8b6a51f66080099d73d9fd8abcc93897053df061a753bd6c324a7479e78260c8bf5aa16c64946518d259de0685325f157a9ed0239679a903d15e675d914803e8cd73df3d20c7269c58bbbfd7aaf15305e795d5ac257f0a0c205cca225f58b233d0cd140a8636434c32023d7d991599f8ff557027e590273449b4433b767ec3039b3d7b5f5a4054f2ab915adc178d"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0x1}}}}, @m_sample={0x90, 0x5, 0x0, 0x0, {{0xb}, {0x14, 0x2, 0x0, 0x1, [@TCA_SAMPLE_PSAMPLE_GROUP={0x8}, @TCA_SAMPLE_RATE={0x8}]}, {0x51, 0x6, "2de4d412af6cc489a40706c9e66f8ed8cdb5c76f5dd5def0a04783ef5c0ae5de8f7a0657ae2e2cfad420035bba8453d8490d2955cfa8bb2fbda9dc31b500cf69a231888c130ff85c29b958695b"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x1}}}}, @m_csum={0x120, 0x8, 0x0, 0x0, {{0x9}, {0x3c, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x9b, 0x4, 0x5, 0x8, 0x4}, 0x29}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x8, 0x0, 0xffffffffffffffff, 0x9eb50}, 0x68}}]}, {0xb9, 0x6, "da0b5f1d9d892eaa435052deb1ca0c4383a749cfd08ae85f4ca3a7ea3342e2f4ad3386c81764ff5e29307b4e29f566ca4d9b87bfd84edd0a5493713189932597edb7c0ffd27207beb0b0b3a820c800c5b2ed3b8e1d58d9305c7a186bd1f02e54bddc811ad00caa03843b0159524f37cd2cb5f9de9589255b144f29278e96999e245a36cd5821d88dc8fd8eee3362323d61f59d95b4f2d6446bdef8d7f4ba170ad420e7f9e09f9c126f488ca44b0f32a5c4f60625ec"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x3, 0x3}}}}]}]}}]}, 0xfcc}, 0x1, 0x0, 0x0, 0x20000800}, 0x24008040) syz_genetlink_get_family_id$SEG6(&(0x7f0000000040), r1) 21m33.791871732s ago: executing program 6 (id=645): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f00000000c0), &(0x7f00000002c0)=0x6a) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r1, 0x89f8, &(0x7f0000000200)={'syztnl1\x00', &(0x7f0000000140)={'erspan0\x00', 0x0, 0x7800, 0x8000, 0x7, 0x1, {{0x1d, 0x4, 0x3, 0x6, 0x74, 0x67, 0x0, 0xbe, 0x4, 0x0, @private=0xa010100, @private=0xa010102, {[@rr={0x7, 0x1f, 0x2a, [@local, @loopback, @broadcast, @empty, @multicast1, @local, @loopback]}, @timestamp_prespec={0x44, 0x1c, 0x9b, 0x3, 0x0, [{@initdev={0xac, 0x1e, 0x1, 0x0}, 0x6e}, {@dev={0xac, 0x14, 0x14, 0x1a}, 0x9}, {@remote, 0x6085}]}, @cipso={0x86, 0x22, 0x3, [{0x6, 0x2}, {0x5, 0x11, "a6554a96d06bb193aeed3fc1f2d93f"}, {0x0, 0x9, "23a4e5b125300d"}]}, @end]}}}}}) r2 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'lo\x00'}) sendmsg$nl_route_sched(r2, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r1, 0x89f0, &(0x7f0000000300)={'gretap0\x00', &(0x7f0000000240)={'tunl0\x00', 0x0, 0x10, 0x40, 0x53b, 0x401, {{0x12, 0x4, 0x2, 0x3, 0x48, 0x65, 0x0, 0x7, 0x2f, 0x0, @local, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@noop, @lsrr={0x83, 0x7, 0x48, [@local]}, @rr={0x7, 0x7, 0x5c, [@multicast1]}, @timestamp={0x44, 0x8, 0x9d, 0x0, 0xc, [0x8]}, @timestamp_addr={0x44, 0x14, 0x39, 0x1, 0x2, [{@dev={0xac, 0x14, 0x14, 0x3d}, 0x4}, {@private=0xa010101, 0xf}]}, @noop, @timestamp={0x44, 0x8, 0x43, 0x0, 0x3, [0x923]}]}}}}}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000340)={'batadv_slave_1\x00'}) socket(0x11, 0x800000003, 0x0) socket(0x1f, 0x1, 0x0) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r3, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) socket$nl_sock_diag(0x10, 0x3, 0x4) write(r3, &(0x7f0000000000)="0a000000010001", 0x7) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000380), 0x4a301, 0x0) r5 = socket$kcm(0x2, 0xa, 0x2) ioctl$TUNSETQUEUE(r4, 0x400454d9, &(0x7f0000000000)={'\x00', 0x400}) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r4, &(0x7f0000000440)=ANY=[], 0x3e) socket$inet6(0xa, 0x4, 0x6) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) mkdir(&(0x7f0000000440)='./file1\x00', 0x0) 21m29.227285813s ago: executing program 6 (id=649): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x800000001, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x1) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0xfffffffd, @local, 0x2}, 0x1c) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x800, 0x0) ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000040)=0x14) ioctl$TIOCSETD(r4, 0x5423, &(0x7f00000003c0)=0x7) ioctl$TIOCVHANGUP(r4, 0x5437, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r5, 0x4400ae8f, 0x0) 21m24.389547593s ago: executing program 6 (id=664): setsockopt$inet_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x0, 0x2a, &(0x7f0000000180)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) setsockopt$inet_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x0, 0x2a, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$sndmidi(0x0, 0x2, 0x141101) r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00', 0x0}) setsockopt$packet_int(r0, 0x107, 0x14, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', 0xffffffffffffffff, 0x0, 0xfffffffffffffffc}, 0x76) sched_setscheduler(0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = syz_open_dev$MSR(0x0, 0x0, 0x0) read$msr(r2, &(0x7f0000032680)=""/102392, 0x18ff8) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000080)=0xf3e, 0x62) sendto$packet(r0, &(0x7f00000000c0)="3f0336082608123a2c001e0089e9aaa911d7c2290f0086dd1327c9167c643c4a1b7880610cc96655b1b141ab059b24d0fbc50df71548a3f6c5609063382a0c152bfdf9435e3ffe46", 0xe90c, 0xa0c4, &(0x7f0000000540)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @multicast}, 0x14) 21m23.801703031s ago: executing program 6 (id=666): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f00000000c0), &(0x7f00000002c0)=0x6a) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r1, 0x89f8, &(0x7f0000000200)={'syztnl1\x00', &(0x7f0000000140)={'erspan0\x00', 0x0, 0x7800, 0x8000, 0x7, 0x1, {{0x1d, 0x4, 0x3, 0x6, 0x74, 0x67, 0x0, 0xbe, 0x4, 0x0, @private=0xa010100, @private=0xa010102, {[@rr={0x7, 0x1f, 0x2a, [@local, @loopback, @broadcast, @empty, @multicast1, @local, @loopback]}, @timestamp_prespec={0x44, 0x1c, 0x9b, 0x3, 0x0, [{@initdev={0xac, 0x1e, 0x1, 0x0}, 0x6e}, {@dev={0xac, 0x14, 0x14, 0x1a}, 0x9}, {@remote, 0x6085}]}, @cipso={0x86, 0x22, 0x3, [{0x6, 0x2}, {0x5, 0x11, "a6554a96d06bb193aeed3fc1f2d93f"}, {0x0, 0x9, "23a4e5b125300d"}]}, @end]}}}}}) r2 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'lo\x00'}) sendmsg$nl_route_sched(r2, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r1, 0x89f0, &(0x7f0000000300)={'gretap0\x00', &(0x7f0000000240)={'tunl0\x00', 0x0, 0x10, 0x40, 0x53b, 0x401, {{0x12, 0x4, 0x2, 0x3, 0x48, 0x65, 0x0, 0x7, 0x2f, 0x0, @local, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@noop, @lsrr={0x83, 0x7, 0x48, [@local]}, @rr={0x7, 0x7, 0x5c, [@multicast1]}, @timestamp={0x44, 0x8, 0x9d, 0x0, 0xc, [0x8]}, @timestamp_addr={0x44, 0x14, 0x39, 0x1, 0x2, [{@dev={0xac, 0x14, 0x14, 0x3d}, 0x4}, {@private=0xa010101, 0xf}]}, @noop, @timestamp={0x44, 0x8, 0x43, 0x0, 0x3, [0x923]}]}}}}}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000340)={'batadv_slave_1\x00'}) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000380), 0x4a301, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8d11}) r4 = socket$kcm(0x2, 0xa, 0x2) ioctl$TUNSETQUEUE(r3, 0x400454d9, &(0x7f0000000000)={'\x00', 0x400}) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) 21m8.330057047s ago: executing program 34 (id=666): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f00000000c0), &(0x7f00000002c0)=0x6a) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r1, 0x89f8, &(0x7f0000000200)={'syztnl1\x00', &(0x7f0000000140)={'erspan0\x00', 0x0, 0x7800, 0x8000, 0x7, 0x1, {{0x1d, 0x4, 0x3, 0x6, 0x74, 0x67, 0x0, 0xbe, 0x4, 0x0, @private=0xa010100, @private=0xa010102, {[@rr={0x7, 0x1f, 0x2a, [@local, @loopback, @broadcast, @empty, @multicast1, @local, @loopback]}, @timestamp_prespec={0x44, 0x1c, 0x9b, 0x3, 0x0, [{@initdev={0xac, 0x1e, 0x1, 0x0}, 0x6e}, {@dev={0xac, 0x14, 0x14, 0x1a}, 0x9}, {@remote, 0x6085}]}, @cipso={0x86, 0x22, 0x3, [{0x6, 0x2}, {0x5, 0x11, "a6554a96d06bb193aeed3fc1f2d93f"}, {0x0, 0x9, "23a4e5b125300d"}]}, @end]}}}}}) r2 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'lo\x00'}) sendmsg$nl_route_sched(r2, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r1, 0x89f0, &(0x7f0000000300)={'gretap0\x00', &(0x7f0000000240)={'tunl0\x00', 0x0, 0x10, 0x40, 0x53b, 0x401, {{0x12, 0x4, 0x2, 0x3, 0x48, 0x65, 0x0, 0x7, 0x2f, 0x0, @local, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@noop, @lsrr={0x83, 0x7, 0x48, [@local]}, @rr={0x7, 0x7, 0x5c, [@multicast1]}, @timestamp={0x44, 0x8, 0x9d, 0x0, 0xc, [0x8]}, @timestamp_addr={0x44, 0x14, 0x39, 0x1, 0x2, [{@dev={0xac, 0x14, 0x14, 0x3d}, 0x4}, {@private=0xa010101, 0xf}]}, @noop, @timestamp={0x44, 0x8, 0x43, 0x0, 0x3, [0x923]}]}}}}}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000340)={'batadv_slave_1\x00'}) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000380), 0x4a301, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8d11}) r4 = socket$kcm(0x2, 0xa, 0x2) ioctl$TUNSETQUEUE(r3, 0x400454d9, &(0x7f0000000000)={'\x00', 0x400}) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) 17m58.961142496s ago: executing program 7 (id=1109): mknod$loop(&(0x7f0000000140)='./file0\x00', 0x200, 0x0) r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_S_CTRL(r0, 0xc008561c, 0x0) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000140)={0x2, @pix_mp={0x0, 0x0, 0x34324152, 0x0, 0xa, [{}, {0x10}, {}, {}, {}, {0x0, 0x2}, {0x7}]}}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f0000000380)=0x2) socket$inet6_sctp(0xa, 0x5, 0x84) r1 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket(0x15, 0x2, 0x1) socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r2, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x41}}, 0x10) listen(r2, 0x0) r3 = socket$tipc(0x1e, 0x5, 0x0) r4 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) listen(r4, 0x0) sendmsg$tipc(r3, &(0x7f0000000240)={&(0x7f0000000080)=@name={0x1e, 0x2, 0x0, {{0x41}}}, 0x10, 0x0}, 0x0) accept4(r2, 0x0, 0x0, 0x0) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) r7 = dup(r5) read$FUSE(r7, 0x0, 0x0) 17m58.220003443s ago: executing program 7 (id=1110): r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fdinfo\x00') fchdir(r0) r1 = syz_open_dev$vim2m(&(0x7f0000000240), 0x41d3, 0x2) ioctl$vim2m_VIDIOC_STREAMOFF(r1, 0x40045612, &(0x7f0000000100)=0x1) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f00000003c0)='sched_switch\x00', r2}, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r4 = dup(r3) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) r5 = syz_io_uring_setup(0x487, &(0x7f0000000400)={0x0, 0x7079, 0x100, 0x4, 0x288}, &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) syz_io_uring_submit(r6, r7, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) io_uring_enter(r5, 0x3516, 0x0, 0x0, 0x0, 0x0) 17m56.927983907s ago: executing program 7 (id=1112): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x3, &(0x7f00000000c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}, 0x0, 0x8, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000200)={0x8, 0x4}, 0x8, 0x10, &(0x7f0000000240)={0x3, 0x4, 0x3, 0x6}, 0x10, 0x0, 0x0, 0x0, &(0x7f00000016c0)=[0x1], 0x0, 0x10, 0x37, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) syz_clone(0x800c000, &(0x7f0000001480), 0x0, 0x0, 0x0, &(0x7f00000015c0)="89ef1284c86555bfe69b541fc18b8f329814f57bd00b1b3a660bb38d58430a051059c1c370b570890937d18b73fe9e420f4cbc3542c63678") r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a6c000000060a0904000000000000000002000000400004803c0001800e000100696d6d656469617465000000280002801c000280180002800900020073797a320000000008000180fffffffc08000140000000000900010073797a30000000000900020073797a320000000014000000110001"], 0x94}}, 0x0) r5 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0) ioctl$SNDCTL_DSP_SETFMT(r5, 0xc0045005, &(0x7f0000001180)=0x2000000) mmap$dsp(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x3, 0x12, r5, 0x0) r6 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r5, &(0x7f0000000180)) ioctl$SNDCTL_DSP_GETOPTR(r5, 0x5008, 0x0) ioctl$SNDCTL_DSP_GETOSPACE(r5, 0x8010500c, &(0x7f00000000c0)) r7 = socket$unix(0x1, 0x5, 0x0) r8 = dup2(r7, r3) close_range(r8, 0xffffffffffffffff, 0x0) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=ANY=[@ANYBLOB="2c0000003d0007010000000000000000017c0000040008800c00018006000600800a00000800028004000f"], 0x76}}, 0xc000) 17m55.477304822s ago: executing program 7 (id=1116): r0 = syz_open_procfs(0x0, &(0x7f0000000000)='comm\x00') fchown(r0, 0x0, 0xee01) syz_genetlink_get_family_id$ipvs(0x0, 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000096c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@getchain={0x4c, 0x66, 0x1, 0x70bd28, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x0, 0xb}, {0xffec, 0x7}, {0xffff, 0xb}}, [{0x8, 0xb, 0xfffffff8}, {0x8, 0xb, 0x3}, {0x8, 0xb, 0x3}, {0x8, 0xb, 0xffff1eca}, {0x8, 0xb, 0x41}]}, 0x4c}}, 0x1) mkdir(&(0x7f0000000440)='./file1\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) clock_gettime(0xfffffffffffffff1, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000180)={'wlan1\x00'}) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$unix(0x1, 0x2, 0x0) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)={0x50, r6, 0x1, 0x70bd28, 0x25dfdbfd, {{}, {@void, @val={0x8, 0x3, r7}, @val={0xc, 0x99, {0x7ff, 0x70}}}}, [@NL80211_ATTR_IFNAME={0x14, 0x4, 'syzkaller0\x00'}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x7}, @NL80211_ATTR_MESH_ID={0xa}]}, 0x50}, 0x1, 0x0, 0x0, 0x91}, 0x24044884) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r8) socket$inet_sctp(0x2, 0x1, 0x84) ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000000)=ANY=[@ANYBLOB="5000000008021100000108021100000008021100000000000000000000000000010301000006020202020202010072061003030303037107"], 0x3f) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42032, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x1000, 0x0, &(0x7f00008b5000/0x1000)=nil) 17m53.482974473s ago: executing program 7 (id=1122): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x3, &(0x7f00000000c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}, 0x0, 0x8, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000200)={0x8, 0x4}, 0x8, 0x10, &(0x7f0000000240)={0x3, 0x4, 0x3, 0x6}, 0x10, 0x0, 0x0, 0x0, &(0x7f00000016c0)=[0x1], 0x0, 0x10, 0x37, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) syz_clone(0x800c000, &(0x7f0000001480), 0x0, 0x0, 0x0, &(0x7f00000015c0)="89ef1284c86555bfe69b541fc18b8f329814f57bd00b1b3a660bb38d58430a051059c1c370b570890937d18b73fe9e420f4cbc3542c63678") r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a6c000000060a0904000000000000000002000000400004803c0001800e000100696d6d656469617465000000280002801c000280180002800900020073797a320000000008000180fffffffc08000140000000000900010073797a30000000000900020073797a320000000014000000110001"], 0x94}}, 0x0) r5 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0) ioctl$SNDCTL_DSP_SETFMT(r5, 0xc0045005, &(0x7f0000001180)=0x2000000) mmap$dsp(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x3, 0x12, r5, 0x0) r6 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r5, &(0x7f0000000180)) ioctl$SNDCTL_DSP_GETOPTR(r5, 0x5008, 0x0) ioctl$SNDCTL_DSP_GETOSPACE(r5, 0x8010500c, &(0x7f00000000c0)) r7 = socket$unix(0x1, 0x5, 0x0) r8 = dup2(r7, r3) close_range(r8, 0xffffffffffffffff, 0x0) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=ANY=[@ANYBLOB="2c0000003d0007010000000000000000017c0000040008800c00018006000600800a00000800028004000f"], 0x76}}, 0xc000) 17m51.861651876s ago: executing program 7 (id=1125): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f00000000c0), &(0x7f00000002c0)=0x6a) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r1, 0x89f8, &(0x7f0000000200)={'syztnl1\x00', &(0x7f0000000140)={'erspan0\x00', 0x0, 0x7800, 0x8000, 0x7, 0x1, {{0x1d, 0x4, 0x3, 0x6, 0x74, 0x67, 0x0, 0xbe, 0x4, 0x0, @private=0xa010100, @private=0xa010102, {[@rr={0x7, 0x1f, 0x2a, [@local, @loopback, @broadcast, @empty, @multicast1, @local, @loopback]}, @timestamp_prespec={0x44, 0x1c, 0x9b, 0x3, 0x0, [{@initdev={0xac, 0x1e, 0x1, 0x0}, 0x6e}, {@dev={0xac, 0x14, 0x14, 0x1a}, 0x9}, {@remote, 0x6085}]}, @cipso={0x86, 0x22, 0x3, [{0x6, 0x2}, {0x5, 0x11, "a6554a96d06bb193aeed3fc1f2d93f"}, {0x0, 0x9, "23a4e5b125300d"}]}, @end]}}}}}) r2 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'lo\x00'}) sendmsg$nl_route_sched(r2, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r1, 0x89f0, &(0x7f0000000300)={'gretap0\x00', &(0x7f0000000240)={'tunl0\x00', 0x0, 0x10, 0x40, 0x53b, 0x401, {{0x12, 0x4, 0x2, 0x3, 0x48, 0x65, 0x0, 0x7, 0x2f, 0x0, @local, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@noop, @lsrr={0x83, 0x7, 0x48, [@local]}, @rr={0x7, 0x7, 0x5c, [@multicast1]}, @timestamp={0x44, 0x8, 0x9d, 0x0, 0xc, [0x8]}, @timestamp_addr={0x44, 0x14, 0x39, 0x1, 0x2, [{@dev={0xac, 0x14, 0x14, 0x3d}, 0x4}, {@private=0xa010101, 0xf}]}, @noop, @timestamp={0x44, 0x8, 0x43, 0x0, 0x3, [0x923]}]}}}}}) socket$inet6(0xa, 0x3, 0xff) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000380), 0x4a301, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8d11}) r4 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r3, &(0x7f0000000440)=ANY=[], 0x3e) 17m36.218707131s ago: executing program 35 (id=1125): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f00000000c0), &(0x7f00000002c0)=0x6a) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r1, 0x89f8, &(0x7f0000000200)={'syztnl1\x00', &(0x7f0000000140)={'erspan0\x00', 0x0, 0x7800, 0x8000, 0x7, 0x1, {{0x1d, 0x4, 0x3, 0x6, 0x74, 0x67, 0x0, 0xbe, 0x4, 0x0, @private=0xa010100, @private=0xa010102, {[@rr={0x7, 0x1f, 0x2a, [@local, @loopback, @broadcast, @empty, @multicast1, @local, @loopback]}, @timestamp_prespec={0x44, 0x1c, 0x9b, 0x3, 0x0, [{@initdev={0xac, 0x1e, 0x1, 0x0}, 0x6e}, {@dev={0xac, 0x14, 0x14, 0x1a}, 0x9}, {@remote, 0x6085}]}, @cipso={0x86, 0x22, 0x3, [{0x6, 0x2}, {0x5, 0x11, "a6554a96d06bb193aeed3fc1f2d93f"}, {0x0, 0x9, "23a4e5b125300d"}]}, @end]}}}}}) r2 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'lo\x00'}) sendmsg$nl_route_sched(r2, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r1, 0x89f0, &(0x7f0000000300)={'gretap0\x00', &(0x7f0000000240)={'tunl0\x00', 0x0, 0x10, 0x40, 0x53b, 0x401, {{0x12, 0x4, 0x2, 0x3, 0x48, 0x65, 0x0, 0x7, 0x2f, 0x0, @local, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@noop, @lsrr={0x83, 0x7, 0x48, [@local]}, @rr={0x7, 0x7, 0x5c, [@multicast1]}, @timestamp={0x44, 0x8, 0x9d, 0x0, 0xc, [0x8]}, @timestamp_addr={0x44, 0x14, 0x39, 0x1, 0x2, [{@dev={0xac, 0x14, 0x14, 0x3d}, 0x4}, {@private=0xa010101, 0xf}]}, @noop, @timestamp={0x44, 0x8, 0x43, 0x0, 0x3, [0x923]}]}}}}}) socket$inet6(0xa, 0x3, 0xff) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000380), 0x4a301, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8d11}) r4 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r3, &(0x7f0000000440)=ANY=[], 0x3e) 24.979562214s ago: executing program 2 (id=3422): socket$nl_generic(0x10, 0x3, 0x10) socket(0x10, 0x803, 0x0) socket(0x1, 0x803, 0x0) socket(0x10, 0x803, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) socket$inet(0x2, 0x80001, 0x84) r0 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet6_sctp(0xa, 0x1, 0x84) socket$packet(0x11, 0x3, 0x300) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=@base={0x9, 0x3, 0x10004, 0x5, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000ff0f0000"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x14, &(0x7f0000000580)=ANY=[@ANYBLOB="1802000000000000000000000000000018010000786c6c2500000000070000007b1af8ff00000000bfa100000000000007010000f8ffffffb700000000000000b7030000000000fd850000002d00000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b706000000000000850000000100000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000680)='sys_exit\x00', r2}, 0x10) socket$igmp(0x2, 0x3, 0x2) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x6, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000006c0)=ANY=[@ANYBLOB="4c0000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="1502ffffffa100001c00128009000100766c616e000000000c000280060001000000000008000500", @ANYRES32=r3, @ANYBLOB='\b\x00\n\x00', @ANYRES32], 0x4c}, 0x1, 0xba01}, 0x0) 23.525774519s ago: executing program 2 (id=3426): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xb, 0x7, 0x10001, 0x8, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x600000, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/key-users\x00', 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x8002, 0x0) socket(0x10, 0x3, 0x6) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000002c0)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x1, '\x00', 0x0, r1, 0x2, 0x2, 0x3, 0x0, @void, @value, @void, @value}, 0x50) write$P9_RSTATu(r5, &(0x7f0000000980)=ANY=[], 0x2f5) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000080)="82", 0x1}], 0x1) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x1) 22.011956923s ago: executing program 2 (id=3428): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = openat$sysctl(0xffffffffffffff9c, 0x0, 0x1, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x0, 0x0}) pwritev2(r2, 0x0, 0x0, 0x1, 0x3, 0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffff}, 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000040)=0x7f, 0x4) r3 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) r4 = fcntl$dupfd(r3, 0x0, r3) ioctl$SG_IO(r4, 0x2285, 0x0) fsopen(0x0, 0x0) r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0x14d882, 0x0) dup(r5) 21.350655531s ago: executing program 8 (id=3432): r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0200000004000000060000000500000000"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000260018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r5}, 0x10) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) bind$inet6(0xffffffffffffffff, &(0x7f000047b000)={0xa, 0x4e23, 0x0, @empty}, 0x1c) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00'}, 0x10) syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000200)='./file0\x00', 0x0, &(0x7f00000001c0), 0xfe, 0x25e, &(0x7f0000000280)="$eJzs3T9o3FYcB/Cf7k9d16a47VIo/QOllNZg3KFQ6NIuLRhKMaUU2oJLKZ2CHXBssvkyZcmQzEnwlMWEbHEyhiwmSyCrk3hwlgwxGWIyJMMFne7C+Xwmjs93CtbnA7L09J70nkDfZ3mQHEBhjUXEDxFRjojxiKhGRNLe4LNsGWsWl4fXZiLq9d8eJ412WTnTOm4kImoR8V1EpVW3uPrX5tP1n788s1D94tLqn8ODur52W5sbv2xf/PX01alvFkvNfaPNdft1HKaky75KEvF+Pzp7QySVvEfAfkyfvHI3zf0HEfF5I//VKDUje3b+rZvV+PrCXseee3Tno0GOFTh89Xo1/R1YqwOFU2o8AyeliYjItkuliYnsGf5eOYljc/Mnxv+fW5j9L++ZCjgESS37u3fjp+tD10Y68v+wnOV/X77t80iBvkjz//v0yv10e7uc92iAgfg4W6X5H/9n6auQfygc+Yfikn8oLvmHI+CA2ZV/KC75h+KSfzjCqq2NWtdq+Yfikn8oro785/I+LpCP9vwDAMVSH8r7DWQgL3nPPwAAAAAAAAAAAAAAAAAAwG7Lw2szrWVQfd46H7H1Y0RUdvY/1KgtN/4fccTbjZ/vPEnSZi8l2WE9+fvTHk/Qo8s5v3397oN8+7/9SX/Oe2pncc9v2y3NRtTSxpOVyu77P2nefwf33ivqq//22MFrSjrK3/8x2P47PV/Jt/+p9Ygb6fwz2W3+K8WHjXX3+We0/RPLB3T8WY8nAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAYGBeBAAA//9hymrI") creat(&(0x7f0000000e00)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) mknod$loop(&(0x7f0000000840)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x4, 0x1) link(&(0x7f0000001240)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000001040)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f00000001c0)='./bus\x00', 0x41, &(0x7f0000000940)={[{@bsdgroups}, {@nodiscard}, {@noblock_validity}, {@grpjquota}, {@grpjquota}, {@noquota}, {@abort}, {@noload}, {@nodiscard}]}, 0x64, 0x50a, &(0x7f0000000200)="$eJzs3VFrHFsdAPD/bHZr06Y3ueqDXvB6tZW0aHeTxrbBh1pB9Kmg1vcak00I2WRDdtM2oWiKH0AQUcEnffFF8AMIUvDFRxEK+qyoKKKtPvigncvuTtI03U227TabZn8/mMw5Z2b2f86GmZ0zc5gJYGC9FxHXI+JJmqYXImI0K89lU2y1psZ6jx/dm21MSaTpzX8mkWRl25+VZPPT2WYnI+JrX474ZvJ83NrG5tJMpVJey/Kl+vJqqbaxeXFxeWahvFBemZqavDJ9dfry9ERP2nkmIq598a8/+O7PvnTtV5+586dbfz//rUa1RrLlu9vxgvL7LWw1vdD8LnZvsPaSwY6ifLOFmeF2aww9V3L/NdcJAID2Guf4H4yIT0bEhRiNof1PZwEAAIA3UPr5kfhfEpG2d6JDOQAAAPAGyTXHwCa5YjYWYCRyuWKxNYb3w3EqV6nW6p+er66vzLXGyo5FITe/WClPZGOFx6KQNPKTzfTT/KU9+amIeDsivj863MwXZ6uVuX5f/AAAAIABcXpP//8/o63+PwAAAHDMjPW7AgAAAMBrp/8PAAAAx5/+PwAAABxrX7lxozGl2++/nru9sb5UvX1xrlxbKi6vzxZnq2urxYVqdaH5zL7lgz6vUq2ufjZW1u+W6uVavVTb2Ly1XF1fqd9afOYV2AAAAMAhevvjD/6QRMTW54abU8OJ7jbtcjXgqMrvpJJs3ma3/uNbrflfDqlSwKEY6ncFgL7J97sCQN8U+l0BoO+SA5Z3HLzz22z+id7WBwAA6L3xj3a+/5/bd8ut/RcDR56dGAaX+/8wuJr3/7sdyetkAY6VgjMAGHivfP//QGn6QhUCAAB6bqQ5JblidnlvJHK5YjHiTPO1AIVkfrFSnoiItyLi96OFDzTyk80tkwP7DAAAAAAAAAAAAAAAAAAAAAAAAABAS5omkQIAAADHWkTub8mvW8/yHx89N7L3+sCJ5L+jkb0i9M6Pb/7w7ky9vjbZKP/XTnn9R1n5pX5cwQAAAICB8EIv8N/up2/34wEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACglx4/uje7PR1m3H98ISLG2sXPx8nm/GQUIuLUv5PI79ouiYihHsQfbvz5SLv4SaNaOyHbxR/uQfyt+/vGj7HsW2gX/3QP4sMge9A4/lxvt//l4r3mvP3+l494Jv+yOh//Yuf4N9Rh/z/TZYx3Hv6i1DH+/Yh38u2PP9vxkw7xz3YZ/xtf39zstCz9ScR429+f5JlYpfryaqm2sXlxcXlmobxQXpmamrwyfXX68vREaX6xUs7+to3xvY/98sl+7T/VIf7YAe0/12X7///w7qMPtZKFdvHPn20T/zc/zdZ4Pn4u++37VJZuLB/fTm+10ru9+/Pfvbtf++c6tP+g///5Ltt/4avf+XOXqwIAh6C2sbk0U6mU145totFLPwLVkDiCiW/39APTNE0b+9QrfE4SR+FraSb6fWQCAAB67elJf79rAgAAAAAAAAAAAAAAAAAAAIPrMB4ntjfm1k4q6cUjtAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAeuL9AAAA//+GAdlV") 16.403202962s ago: executing program 5 (id=3435): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xb, 0x7, 0x10001, 0x8, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x600000, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/key-users\x00', 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x8002, 0x0) socket(0x10, 0x3, 0x6) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000002c0)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x1, '\x00', 0x0, r0, 0x2, 0x2, 0x3, 0x0, @void, @value, @void, @value}, 0x50) write$P9_RSTATu(r4, &(0x7f0000000980)=ANY=[], 0x2f5) writev(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000080)="82", 0x1}], 0x1) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x1) 16.399739672s ago: executing program 8 (id=3436): socket$nl_generic(0x10, 0x3, 0x10) socket(0x10, 0x803, 0x0) socket(0x1, 0x803, 0x0) socket(0x10, 0x803, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) socket$inet(0x2, 0x80001, 0x84) r0 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet6_sctp(0xa, 0x1, 0x84) socket$packet(0x11, 0x3, 0x300) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=@base={0x9, 0x3, 0x10004, 0x5, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000ff0f000007"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x14, &(0x7f0000000580)=ANY=[@ANYBLOB="1802000000000000000000000000000018010000786c6c2500000000070000007b1af8ff00000000bfa100000000000007010000f8ffffffb700000000000000b7030000000000fd850000002d00000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000680)='sys_exit\x00', r2}, 0x10) socket$igmp(0x2, 0x3, 0x2) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x6, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000006c0)=ANY=[@ANYBLOB="4c0000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="1502ffffffa100001c00128009000100766c616e000000000c000280060001000000000008000500", @ANYRES32=r3, @ANYBLOB='\b\x00\n\x00', @ANYRES32], 0x4c}, 0x1, 0xba01}, 0x0) 16.161872611s ago: executing program 4 (id=3437): r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0200000004000000060000000500000000"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000260018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r5}, 0x10) bind$inet6(0xffffffffffffffff, &(0x7f000047b000)={0xa, 0x4e23, 0x0, @empty}, 0x1c) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00'}, 0x10) syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000200)='./file0\x00', 0x0, &(0x7f00000001c0), 0xfe, 0x25e, &(0x7f0000000280)="$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") creat(&(0x7f0000000e00)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) mknod$loop(&(0x7f0000000840)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x4, 0x1) creat(&(0x7f0000000f00)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) link(&(0x7f0000001240)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000001040)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="240000001a00010000000000000000000a000000000000000000000008001900", @ANYRES32, @ANYBLOB="5ff3764cdf3971bbd85e1c2d7bd122eaebf268773de3f6c80f925dcd8b0571d3c1514d4005eef727e3cc3262c7a74f038bb16e1e7408cafc3683108dc8cb5abf14f92b3e90bd40ce11ee663ee90518db8fed75b98b96fa77fada2e65cc46f6d6ad585e3895e02a2a1a38c10587ba6d1de13fea91c4a11b362e3a82a3aea7d3cc64417815dd277f180331b1b54febc078697c727b7fd77eeda90f4408"], 0x24}}, 0x24004016) 15.001078617s ago: executing program 5 (id=3438): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r0, &(0x7f00000bd000), 0x318, 0x0) landlock_create_ruleset(0xfffffffffffffffe, 0x5c, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mremap(&(0x7f00007fd000/0x2000)=nil, 0x2000, 0x2000, 0x7, &(0x7f00008d7000/0x2000)=nil) madvise(&(0x7f00003c1000/0x1000)=nil, 0xdfc3efff, 0x8) 12.768933878s ago: executing program 8 (id=3439): bind$vsock_stream(0xffffffffffffffff, &(0x7f0000000040)={0x28, 0x0, 0x2710}, 0x10) connect$vsock_stream(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) dup(0xffffffffffffffff) r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000240)=0x7) ioctl$SNDCTL_DSP_CHANNELS(r0, 0xc0045006, &(0x7f0000000080)=0x7f) ioctl$SNDCTL_DSP_SPEED(r0, 0xc0045002, &(0x7f00000000c0)) read$dsp(r0, &(0x7f00000011c0)=""/4117, 0x200021d5) 12.338826527s ago: executing program 4 (id=3440): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000b80)=@delchain={0x108, 0x65, 0x0, 0x70bd27, 0x0, {}, [@filter_kind_options=@f_flower={{0xb}, {0x30, 0x2, [@TCA_FLOWER_KEY_CT_MARK={0x8, 0x5f, 0x9}, @TCA_FLOWER_KEY_IPV4_SRC_MASK={0x8, 0xb, 0xffffff00}, @TCA_FLOWER_KEY_MPLS_TC={0x5, 0x45, 0x5}, @TCA_FLOWER_KEY_ARP_THA_MASK={0xa, 0x42, [0x0, 0xff, 0xff, 0xff, 0xff]}, @TCA_FLOWER_KEY_CT_STATE={0x6, 0x5b, 0x900}]}}, @TCA_RATE={0x6}, @TCA_CHAIN={0x8}, @TCA_RATE={0x6}, @filter_kind_options=@f_route={{0xa}, {0x84, 0x2, [@TCA_ROUTE4_FROM={0x8}, @TCA_ROUTE4_FROM={0x8}, @TCA_ROUTE4_IIF={0x8}, @TCA_ROUTE4_ACT={0x68, 0x6, [@m_connmark={0x34, 0x0, 0x0, 0x0, {{0xd}, {0x4}, {0x4}, {0xc}, {0xc}}}, @m_sample={0x30, 0x1c, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x4}}}}]}]}}]}, 0x108}}, 0x0) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x14}, {&(0x7f00000007c0)=""/154, 0x8}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400}) 11.849145265s ago: executing program 4 (id=3441): socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x4e20, @empty}], 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r2 = dup(r1) mount$binderfs(0x0, &(0x7f0000000380)='./binderfs\x00', 0x0, 0x1, &(0x7f0000000400)={[{@max={'max', 0x3d, 0x2}}, {@stats}], [{@fscontext={'fscontext', 0x3d, 'staff_u'}}]}) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) syz_io_uring_setup(0x690a, 0x0, &(0x7f0000000140), 0x0) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) sendto$inet6(r3, 0x0, 0x0, 0x4c004, &(0x7f0000002880)={0xa, 0x4e22, 0x0, @mcast2}, 0x1c) r4 = socket$nl_route(0x10, 0x3, 0x0) syz_emit_ethernet(0x46, &(0x7f0000000000)={@link_local={0x3}, @link_local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x5, 0x0, 0x0, 0x12, 0x0, 0x2802, {0x5, 0x2, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x21, 0x0, @private, @multicast1}, "200022ebffff0000"}}}}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000007940)={0x0, 0x0, &(0x7f0000007900)={&(0x7f0000000680)=@newtaction={0x90, 0x30, 0x216822a75a8bdd29, 0xffe4, 0x0, {}, [{0x7c, 0x1, [@m_connmark={0x34, 0x2, 0x0, 0x0, {{0xd}, {0x4, 0x20}, {0x4}, {0xc}, {0xc}}}, @m_ct={0x44, 0x1, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x90}}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$tipc(0x1e, 0x5, 0x0) getsockopt$TIPC_DEST_DROPPABLE(r6, 0x10f, 0x81, 0xffffffffffffffff, &(0x7f0000000700)=0x12) sendmsg$ETHTOOL_MSG_STRSET_GET(r5, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x4e20, @local}]}, &(0x7f0000000100)=0x10) mkdir(0x0, 0x10) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000180)={0x0, @in6={{0xa, 0x3, 0x0, @empty}}, 0xfffffffc, 0x3, 0x989, 0x0, 0x84, 0x8000}, 0x9c) 11.838545745s ago: executing program 0 (id=3442): socket$nl_generic(0x10, 0x3, 0x10) socket(0x10, 0x803, 0x0) socket(0x1, 0x803, 0x0) socket(0x10, 0x803, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) socket$inet(0x2, 0x80001, 0x84) r0 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet6_sctp(0xa, 0x1, 0x84) socket$packet(0x11, 0x3, 0x300) bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=@base={0x9, 0x3, 0x10004, 0x5, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000ff0f000007"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x14, &(0x7f0000000580)=ANY=[@ANYBLOB="1802000000000000000000000000000018010000786c6c2500000000070000007b1af8ff00000000bfa100000000000007010000f8ffffffb700000000000000b7030000000000fd850000002d00000018110000", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b706000000000000850000000100000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000680)='sys_exit\x00', r1}, 0x10) socket$igmp(0x2, 0x3, 0x2) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x6, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000006c0)=ANY=[@ANYBLOB="4c0000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="1502ffffffa100001c00128009000100766c616e000000000c000280060001000000000008000500", @ANYRES32=r2, @ANYBLOB='\b\x00\n\x00', @ANYRES32], 0x4c}, 0x1, 0xba01}, 0x0) 11.728534874s ago: executing program 5 (id=3443): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x0, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x30dd3000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x1028000, &(0x7f00000004c0)={[{@verity_off}, {@uuid_on}, {@xino_auto}], [{@fsuuid={'fsuuid', 0x3d, {[0x61, 0x64, 0x34, 0x65, 0x56, 0x31, 0x36, 0x63], 0x2d, [0x30, 0x62, 0x63, 0x30], 0x2d, [0x37, 0x31, 0x66, 0x3e], 0x2d, [0x32, 0x31, 0x66, 0x61], 0x2d, [0x30, 0x62, 0x61, 0x64, 0x34, 0x31, 0x66, 0x64]}}}, {@hash}, {@uid_lt}, {@fscontext={'fscontext', 0x3d, 'unconfined_u'}}, {@measure}, {@obj_type={'obj_type', 0x3d, '^\''}}]}) r4 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=@base={0x1b, 0x0, 0x0, 0x2000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r4}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r5}, 0x10) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) read(0xffffffffffffffff, &(0x7f0000000380)=""/189, 0x8) timerfd_settime(0xffffffffffffffff, 0x0, &(0x7f00000000c0)={{0x77359400}, {0x0, 0x3938700}}, 0x0) getresuid(&(0x7f0000000180), &(0x7f00000002c0), &(0x7f0000000380)) 10.370393009s ago: executing program 5 (id=3444): socket$nl_route(0x10, 0x3, 0x0) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r2 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r2, &(0x7f0000000440), 0x10) socket$vsock_stream(0x28, 0x1, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000cc0)=ANY=[@ANYBLOB="050000000000000061110c00000000008510000002000000850000000500000095000000000000009500a5050000000077d8f3b423cdac8d80000000000000002be16ad10a48b243ccc42606d25dfd73a015e0ca7fc2506a0f7535f7866907dc0200000000000000ae669e17fd6587d452d6453559c3421eed73d56615fe6c54c3b3ffe1b4ce25d7c983c044c03bf3a48dfe47ec9dd6c091c30b93bfae76d9ebacd3ed3e26e7a23129d6606fd28a69989d552af6bda9df2c3af36effff9af2551ce896165127cb3f011a7d06602e2fc40848228567ffb400000000003ed38ae89d24e1cebfba2f87925bfacba83109751fe6c05405d027edd68149ee99eef6a6992308a4fc0b7c70bc677d6dd4aed4af7500d7900a820b6347184e9a217b5614cd50cbe43a1ed2526814bc0000e9e086ce48e90defb6670c3df2624f56da648d28ad0a97aec7291c25447c106a99893e10db21901eb397b2f5fd71400fa7a050fbbef9e326ea27e513e96068fd1e8a43e89f9c85c822a961546ed5363c17ff1432d08806bc376e3e49ee52b59d13182e1f24ed200ada10eb1affb87ba55b2d72078e9f40b4ae7d01000000d11cd22c35d32940000088dde499000000fdffffff00000000000f000000ef0000000000000000000000000c52f4ebd2c893bb97a068bd10734a83584898eccb26f7b789cfc4cd995fa3e11a5c74c85404e2df3ad37b729ac83b0dcb4f48f3c3356b9997fc455a17690b6f7f9ccbe4b1701941b18aba6b16455a66c3b84b138efc20a546d3d5227e23b03f2a834391ade2ff3e93ee296c4082ee73e7c353312c9d75711ce1623e9c54bdff59d2a69dcb7d84c235b23a4480c2461b405cfd1a38992f295ad3adc94cd07c850d1ce6d0b2fea02c24e9280333152fb794e4ddea02017a6c139b50101caecaf2abc0847a1ff2f7fc3c2b99a96fc4275ad107274e2934a87a4ddcdb112754ca5bdec0ead14b6c0f19a43a2f05c7f0be31491eb8c9ff68236c8600040000000000000000000066e034c81c3cab64e4fc8dc55ce0ada18dcbf31c6e82893add3bee3e10fc873d1d922b0877cbcd95b839d3059d5140a1f742f6e75741e39e5cb6a193e06a1043375b0f61b5d4e17c81baa31b924d84f224baf1221c15fa12313ffbfa7c2730309f66705b71e6205e7cbf3643561eabb9a63fcd604d5cc27e1317ad94cf438d71873e540be16b6ca205081173bd03c4754fc4674812daab482fd390a1c903b5d28a1eb247b5837d7603b92495d5c569f6433c3fca5206cb0000003fdbbd3892c52c2e7612e05de32322e980a3d69931e2c9312dd517c96f2ee90362476ed853c4c9b7d4ebf13cbaa795860e92a3d7d004f2c491db38eb769f094d5d48b262cc35c40682138cf13a49aa9f27abec00002f01ba1251aaf2385416ca719300"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={0x0, r3}, 0x18) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) 10.304934219s ago: executing program 2 (id=3445): socket$inet_udp(0x2, 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000480)) creat(&(0x7f0000000000)='./file0\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) socketpair$unix(0x1, 0x1, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000240)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) socket$key(0xf, 0x3, 0x2) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000b40)={&(0x7f0000001040)=@newsa={0x138, 0x10, 0x713, 0x0, 0x0, {{@in=@broadcast, @in6=@remote}, {@in=@multicast1, 0x0, 0x32}, @in6=@mcast1, {0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000000}, {}, {}, 0x0, 0x0, 0xa, 0x2}, [@algo_crypt={0x48, 0x2, {{'ecb(cipher_null)\x00'}}}]}, 0x138}, 0x1, 0xe}, 0x0) 10.273166249s ago: executing program 8 (id=3446): socket$inet_udp(0x2, 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000480)) creat(&(0x7f0000000000)='./file0\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) socketpair$unix(0x1, 0x1, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000240)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) socket$key(0xf, 0x3, 0x2) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000b40)={&(0x7f0000001040)=@newsa={0x138, 0x10, 0x713, 0x0, 0x0, {{@in=@broadcast, @in6=@remote}, {@in=@multicast1, 0x0, 0x32}, @in6=@mcast1, {0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000000}, {}, {}, 0x0, 0x0, 0xa, 0x2}, [@algo_crypt={0x48, 0x2, {{'ecb(cipher_null)\x00'}}}]}, 0x138}, 0x1, 0xe}, 0x0) 10.271985299s ago: executing program 0 (id=3447): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000b80)=@delchain={0x134, 0x65, 0x0, 0x70bd27, 0x0, {}, [@filter_kind_options=@f_flower={{0xb}, {0x30, 0x2, [@TCA_FLOWER_KEY_CT_MARK={0x8, 0x5f, 0x9}, @TCA_FLOWER_KEY_IPV4_SRC_MASK={0x8, 0xb, 0xffffff00}, @TCA_FLOWER_KEY_MPLS_TC={0x5, 0x45, 0x5}, @TCA_FLOWER_KEY_ARP_THA_MASK={0xa, 0x42, [0x0, 0xff, 0xff, 0xff, 0xff]}, @TCA_FLOWER_KEY_CT_STATE={0x6, 0x5b, 0x900}]}}, @TCA_RATE={0x6}, @TCA_CHAIN={0x8}, @TCA_RATE={0x6}, @filter_kind_options=@f_route={{0xa}, {0xb0, 0x2, [@TCA_ROUTE4_FROM={0x8}, @TCA_ROUTE4_FROM={0x8}, @TCA_ROUTE4_IIF={0x8}, @TCA_ROUTE4_ACT={0x94, 0x6, [@m_connmark={0x50, 0x0, 0x0, 0x0, {{0xd}, {0x20, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0xfffffffe, 0x800}}}]}, {0x4}, {0xc}, {0xc}}}, @m_sample={0x40, 0x1c, 0x0, 0x0, {{0xb}, {0x4}, {0x12, 0x6, "7540328a81220054530cf364b2f8"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x4}}}}]}]}}]}, 0x134}}, 0x0) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x14}, {&(0x7f00000007c0)=""/154, 0x8}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400}) 9.794144057s ago: executing program 0 (id=3448): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x0, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x30dd3000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x1028000, &(0x7f00000004c0)={[{@verity_off}, {@uuid_on}, {@xino_auto}], [{@fsuuid={'fsuuid', 0x3d, {[0x61, 0x64, 0x34, 0x65, 0x56, 0x31, 0x36, 0x63], 0x2d, [0x30, 0x62, 0x63, 0x30], 0x2d, [0x37, 0x31, 0x66, 0x3e], 0x2d, [0x32, 0x31, 0x66, 0x61], 0x2d, [0x30, 0x62, 0x61, 0x64, 0x34, 0x31, 0x66, 0x64]}}}, {@hash}, {@uid_lt}, {@fscontext={'fscontext', 0x3d, 'unconfined_u'}}, {@measure}, {@obj_type={'obj_type', 0x3d, '^\''}}]}) r4 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=@base={0x1b, 0x0, 0x0, 0x2000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r4}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00'}, 0x10) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) read(0xffffffffffffffff, &(0x7f0000000380)=""/189, 0x8) timerfd_settime(0xffffffffffffffff, 0x0, &(0x7f00000000c0)={{0x77359400}, {0x0, 0x3938700}}, 0x0) getresuid(&(0x7f0000000180), &(0x7f00000002c0), &(0x7f0000000380)) 8.456898312s ago: executing program 2 (id=3449): openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r0 = getpid() r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={0x0, r1}, 0x18) process_vm_readv(r0, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xc, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x1) ioctl$KVM_SET_MSRS(r5, 0x4008ae89, &(0x7f00000013c0)=ANY=[@ANYBLOB="01000000000000e69d000040"]) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000580)='sched_switch\x00', r2}, 0x10) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000000004000000000000000000008500000050000000850000005000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000080)='ext4_ext_remove_space_done\x00', r6}, 0x18) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='ext4_ext_remove_space_done\x00'}, 0x10) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) 8.380020881s ago: executing program 0 (id=3450): r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0200000004000000060000000500000000"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000260018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r5}, 0x10) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) bind$inet6(0xffffffffffffffff, &(0x7f000047b000)={0xa, 0x4e23, 0x0, @empty}, 0x1c) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00'}, 0x10) syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000200)='./file0\x00', 0x0, &(0x7f00000001c0), 0xfe, 0x25e, &(0x7f0000000280)="$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") mknod$loop(&(0x7f0000000840)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x4, 0x1) link(&(0x7f0000001240)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000001040)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f00000001c0)='./bus\x00', 0x41, &(0x7f0000000940)={[{@bsdgroups}, {@nodiscard}, {@noblock_validity}, {@grpjquota}, {@grpjquota}, {@noquota}, {@abort}, {@noload}, {@nodiscard}]}, 0x64, 0x50a, &(0x7f0000000200)="$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") sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="240000001a00010000000000000000000a000000000000000000000008001900", @ANYRES32, @ANYBLOB="5ff3764cdf3971bbd85e1c2d7bd122eaebf268773de3f6c80f925dcd8b0571d3c1514d4005eef727e3cc3262c7a74f038bb16e1e7408cafc3683108dc8cb5abf14f92b3e90bd40ce11ee663ee90518db8fed75b98b96fa77fada2e65cc46f6d6ad585e3895e02a2a1a38c10587ba6d1de13fea91c4a11b362e3a82a3aea7d3cc64417815dd277f180331b1b54febc078697c727b7fd77eeda90f4408"], 0x24}}, 0x24004016) 8.375401681s ago: executing program 8 (id=3451): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000b80)=@delchain={0x108, 0x65, 0x0, 0x70bd27, 0x0, {}, [@filter_kind_options=@f_flower={{0xb}, {0x30, 0x2, [@TCA_FLOWER_KEY_CT_MARK={0x8, 0x5f, 0x9}, @TCA_FLOWER_KEY_IPV4_SRC_MASK={0x8, 0xb, 0xffffff00}, @TCA_FLOWER_KEY_MPLS_TC={0x5, 0x45, 0x5}, @TCA_FLOWER_KEY_ARP_THA_MASK={0xa, 0x42, [0x0, 0xff, 0xff, 0xff, 0xff]}, @TCA_FLOWER_KEY_CT_STATE={0x6, 0x5b, 0x900}]}}, @TCA_RATE={0x6}, @TCA_CHAIN={0x8}, @TCA_RATE={0x6}, @filter_kind_options=@f_route={{0xa}, {0x84, 0x2, [@TCA_ROUTE4_FROM={0x8}, @TCA_ROUTE4_FROM={0x8}, @TCA_ROUTE4_IIF={0x8}, @TCA_ROUTE4_ACT={0x68, 0x6, [@m_connmark={0x34, 0x0, 0x0, 0x0, {{0xd}, {0x4}, {0x4}, {0xc}, {0xc}}}, @m_sample={0x30, 0x1c, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x4}}}}]}]}}]}, 0x108}}, 0x0) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x14}, {&(0x7f00000007c0)=""/154, 0x8}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400}) 8.238996551s ago: executing program 5 (id=3452): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000240)=ANY=[@ANYBLOB], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='sched_switch\x00', r3}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = gettid() process_vm_writev(r4, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0x23a, 0x0) 5.773981882s ago: executing program 8 (id=3453): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r0, &(0x7f00000bd000), 0x318, 0x0) landlock_create_ruleset(0xfffffffffffffffe, 0x5c, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mremap(&(0x7f00007fd000/0x2000)=nil, 0x2000, 0x2000, 0x7, &(0x7f00008d7000/0x2000)=nil) madvise(&(0x7f00003c1000/0x1000)=nil, 0xdfc3efff, 0x8) 5.773680262s ago: executing program 4 (id=3454): r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0200000004000000060000000500000000"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000260018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r5}, 0x10) bind$inet6(0xffffffffffffffff, &(0x7f000047b000)={0xa, 0x4e23, 0x0, @empty}, 0x1c) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00'}, 0x10) syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000200)='./file0\x00', 0x0, &(0x7f00000001c0), 0xfe, 0x25e, &(0x7f0000000280)="$eJzs3T9o3FYcB/Cf7k9d16a47VIo/QOllNZg3KFQ6NIuLRhKMaUU2oJLKZ2CHXBssvkyZcmQzEnwlMWEbHEyhiwmSyCrk3hwlgwxGWIyJMMFne7C+Xwmjs93CtbnA7L09J70nkDfZ3mQHEBhjUXEDxFRjojxiKhGRNLe4LNsGWsWl4fXZiLq9d8eJ412WTnTOm4kImoR8V1EpVW3uPrX5tP1n788s1D94tLqn8ODur52W5sbv2xf/PX01alvFkvNfaPNdft1HKaky75KEvF+Pzp7QySVvEfAfkyfvHI3zf0HEfF5I//VKDUje3b+rZvV+PrCXseee3Tno0GOFTh89Xo1/R1YqwOFU2o8AyeliYjItkuliYnsGf5eOYljc/Mnxv+fW5j9L++ZCjgESS37u3fjp+tD10Y68v+wnOV/X77t80iBvkjz//v0yv10e7uc92iAgfg4W6X5H/9n6auQfygc+Yfikn8oLvmHI+CA2ZV/KC75h+KSfzjCqq2NWtdq+Yfikn8oro785/I+LpCP9vwDAMVSH8r7DWQgL3nPPwAAAAAAAAAAAAAAAAAAwG7Lw2szrWVQfd46H7H1Y0RUdvY/1KgtN/4fccTbjZ/vPEnSZi8l2WE9+fvTHk/Qo8s5v3397oN8+7/9SX/Oe2pncc9v2y3NRtTSxpOVyu77P2nefwf33ivqq//22MFrSjrK3/8x2P47PV/Jt/+p9Ygb6fwz2W3+K8WHjXX3+We0/RPLB3T8WY8nAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAYGBeBAAA//9hymrI") creat(&(0x7f0000000e00)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) mknod$loop(&(0x7f0000000840)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x4, 0x1) creat(&(0x7f0000000f00)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="240000001a00010000000000000000000a000000000000000000000008001900", @ANYRES32, @ANYBLOB="5ff3764cdf3971bbd85e1c2d7bd122eaebf268773de3f6c80f925dcd8b0571d3c1514d4005eef727e3cc3262c7a74f038bb16e1e7408cafc3683108dc8cb5abf14f92b3e90bd40ce11ee663ee90518db8fed75b98b96fa77fada2e65cc46f6d6ad585e3895e02a2a1a38c10587ba6d1de13fea91c4a11b362e3a82a3aea7d3cc64417815dd277f180331b1b54febc078697c727b7fd77eeda90f4408"], 0x24}}, 0x24004016) 5.668726561s ago: executing program 5 (id=3455): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = openat$sysctl(0xffffffffffffff9c, 0x0, 0x1, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x0, 0x0}) pwritev2(r2, 0x0, 0x0, 0x1, 0x3, 0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffff}, 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000040)=0x7f, 0x4) r3 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) r4 = fcntl$dupfd(r3, 0x0, r3) ioctl$SG_IO(r4, 0x2285, 0x0) fsopen(0x0, 0x0) r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0x14d882, 0x0) sendfile(r5, 0xffffffffffffffff, 0x0, 0x80006) 2.70606647s ago: executing program 0 (id=3456): bind$vsock_stream(0xffffffffffffffff, &(0x7f0000000040)={0x28, 0x0, 0x2710}, 0x10) connect$vsock_stream(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) dup(0xffffffffffffffff) r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000240)=0x7) ioctl$SNDCTL_DSP_CHANNELS(r0, 0xc0045006, &(0x7f0000000080)=0x7f) ioctl$SNDCTL_DSP_SPEED(r0, 0xc0045002, &(0x7f00000000c0)) read$dsp(r0, &(0x7f00000011c0)=""/4117, 0x200021d5) 2.504387529s ago: executing program 4 (id=3457): prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$nfc_llcp(r3, 0x6, 0x11, 0x0, 0x2000e881) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000ed07449e000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f00000003c0)='sched_switch\x00', r4}, 0x18) r5 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_opts(r5, 0x0, 0x4, 0x0, 0x0) r6 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000005c0)=@bpf_tracing={0x1a, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB='8 \x00\x00', @ANYRES32, @ANYBLOB="0000000001000080185300000000000000000000000000008500000051000000"], &(0x7f0000000480)='syzkaller\x00', 0xb6a, 0x0, 0x0, 0x41100, 0x40, '\x00', 0x0, 0x1c, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000680)={0x4, 0xf, 0x81, 0x800}, 0x10, 0x1e0cf, r2, 0x1, &(0x7f0000000a00)=[r5, 0xffffffffffffffff, r3, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], &(0x7f0000000a40)=[{0x0, 0x5, 0x9, 0x5}], 0x10, 0x80000000, @void, @value}, 0x94) r7 = bpf$ITER_CREATE(0xb, &(0x7f00000004c0)={r6}, 0x8) close(r7) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000bc0)={r7, 0x81, &(0x7f0000000340)}, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff) r8 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='net/ip6_tables_matches\x00') syz_open_dev$rtc(&(0x7f0000000140), 0x0, 0x0) close_range(r8, 0xffffffffffffffff, 0x0) 2.307008688s ago: executing program 2 (id=3458): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000002f0d31209000000bc2e79e995"], 0x0) write$binfmt_script(r2, &(0x7f0000000100), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f00000004c0)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 65.98099ms ago: executing program 4 (id=3459): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000600)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(camellia)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5910fae9d6dcd3292ea54c7b6ef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000440), r1) sendmsg$nl_route_sched_retired(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001480)=@newchain={0xc18, 0x64, 0x800, 0x70bd26, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x8, 0x4}, {0x1, 0xffe0}, {0x6, 0x9}}, [@f_rsvp={{0x9}, {0x2f0, 0x2, [@TCA_RSVP_PINFO={0x20, 0x4, {{0x80000000, 0x4dbd, 0xeeb}, {0x2, 0x8, 0xfffffffa}, 0xc1, 0x6a, 0x5}}, @TCA_RSVP_PINFO={0x20, 0x4, {{0xffffffff, 0xb, 0xa7}, {0x5, 0x5, 0x800}, 0x8, 0x7, 0x7}}, @TCA_RSVP_ACT={0x294, 0x6, [@m_mpls={0x48, 0x2, 0x0, 0x0, {{0x9}, {0xc, 0x2, 0x0, 0x1, [@TCA_MPLS_TTL={0x5, 0x7, 0x3}]}, {0x14, 0x6, "8afa00b66cd46a3dd56b15e78c42c559"}, {0xc}, {0xc, 0x8, {0x3, 0x2}}}}, @m_sample={0x120, 0xc, 0x0, 0x0, {{0xb}, {0x14, 0x2, 0x0, 0x1, [@TCA_SAMPLE_RATE={0x8, 0x3, 0x2}, @TCA_SAMPLE_TRUNC_SIZE={0x8, 0x4, 0xb}]}, {0xe1, 0x6, "e72064788474e9d9e37d10634c48137100cd94378d719d8bd7941dad82ddc6801abbaa8f647285f9824234165b9164bf9e07b059e8876d3b86f3d3eff123dba20c31009bf5356d4bfb902c879aadb96893919766360a75e3b6404b4ee350e5069892d8d53a532f0ab2991dacf5372f2793899ac294b8bdf081b1045fcb0642c3ec1f5fa35016be0346c5dfaf13cdf2231fcde134b75b4986efe4e1174e6c8dd6388bb51e53bded3dc1f39636729462668780eeb1beaecaa7e546ef2e208007bfead597ba9860ccd6ffd17cdda2608e6f2d712466d6de10742c6500e684"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0x3}}}}, @m_vlan={0x128, 0xc, 0x0, 0x0, {{0x9}, {0x58, 0x2, 0x0, 0x1, [@TCA_VLAN_PARMS={0x1c, 0x2, {{0x1, 0x9, 0x6, 0x10000, 0x1ff}, 0x2}}, @TCA_VLAN_PUSH_VLAN_PROTOCOL={0x6, 0x4, 0x8100}, @TCA_VLAN_PUSH_VLAN_PROTOCOL={0x6, 0x4, 0x8100}, @TCA_VLAN_PUSH_VLAN_PRIORITY={0x5, 0x6, 0x4}, @TCA_VLAN_PUSH_VLAN_PRIORITY={0x5, 0x6, 0x5}, @TCA_VLAN_PUSH_VLAN_PROTOCOL={0x6, 0x4, 0x88a8}, @TCA_VLAN_PUSH_VLAN_ID={0x6, 0x3, 0xc8f}, @TCA_VLAN_PUSH_VLAN_PRIORITY={0x5, 0x6, 0x5}]}, {0xa5, 0x6, "97100804a6e83741ac91d00f97036bd5a059445798ae5f1d29ed13399a2b8ba89948bbbac461d5c532b687722214ca48aeadc12d3abc2c3309c14abe618318a684e865ac924bdf1ffa74cb1495a8e7fe212fdbcc5cfd00bccbc713c830853e544043950ef0d308e3fc4b92300a548ea899e6b08cdf47a8bbf4f700a6e28bae34b99ba69765535a9bbd1931a83e9e28328635d5a32b511580f1fdf62e8756ba567b"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x3}}}}]}, @TCA_RSVP_CLASSID={0x8, 0x1, {0x1, 0xffff}}, @TCA_RSVP_SRC={0x8, 0x3, @rand_addr=0x64010101}, @TCA_RSVP_CLASSID={0x8, 0x1, {0x9, 0xe}}]}}, @f_rsvp={{0x9}, {0x8ec, 0x2, [@TCA_RSVP_DST={0x8, 0x2, @broadcast}, @TCA_RSVP_PINFO={0x20, 0x4, {{0xa, 0x7fffffff, 0x10000}, {0x9, 0x80000000, 0x19}, 0x3c58127146fc1915, 0x7e, 0x6}}, @TCA_RSVP_PINFO={0x20, 0x4, {{0x7, 0x0, 0x100}, {0xd7, 0x57, 0xff}, 0x2, 0x6, 0x7}}, @TCA_RSVP_CLASSID={0x8, 0x1, {0x0, 0xfff8}}, @TCA_RSVP_ACT={0x398, 0x6, [@m_tunnel_key={0xe0, 0x0, 0x0, 0x0, {{0xf}, {0x7c, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_ENC_KEY_ID={0x8, 0x7, 0x8}, @TCA_TUNNEL_KEY_ENC_IPV4_DST={0x8, 0x4, @rand_addr=0x64010101}, @TCA_TUNNEL_KEY_ENC_IPV4_DST={0x8, 0x4, @multicast2}, @TCA_TUNNEL_KEY_ENC_IPV6_DST={0x14, 0x6, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @TCA_TUNNEL_KEY_ENC_IPV6_DST={0x14, 0x6, @empty}, @TCA_TUNNEL_KEY_NO_CSUM={0x5}, @TCA_TUNNEL_KEY_ENC_KEY_ID={0x8, 0x7, 0x2}, @TCA_TUNNEL_KEY_ENC_IPV6_SRC={0x14, 0x5, @private2}, @TCA_TUNNEL_KEY_ENC_IPV6_SRC={0x14, 0x5, @empty}]}, {0x35, 0x6, "bb2cdd218e1932c60e25532848837b415d56e6744bf0b3f8aba66b0d2cad032b8cf911d07e8929550f9c5047de25564b34"}, {0xc}, {0xc, 0x8, {0x1, 0x1}}}}, @m_gact={0xec, 0x18, 0x0, 0x0, {{0x9}, {0x10, 0x2, 0x0, 0x1, [@TCA_GACT_PROB={0xc, 0x3, {0x1, 0x1cc5, 0x10000000}}]}, {0xb1, 0x6, "2f7e17336698956b6031823656f446206c288c15e63393ac0209c3aca831623d31c5979ed04ea05a6ad1ff34ad989f74edaa909e59500289321dae9b3dd180566cdf21e67e8004f70abffced08e6927c5360bfb787984ba5718d9060fde444b7589483febec75ceecb9874d03d4b9ac235a2e5105f5e4d101c7bb89d42552b5001e6f30636aa246f8a902586bd24150fa3103f039ef05cb2c0d2b249628b30fe700ce0cc2d1bcc9f84cb23539f"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0x2}}}}, @m_ct={0x60, 0x6, 0x0, 0x0, {{0x7}, {0x20, 0x2, 0x0, 0x1, [@TCA_CT_NAT_IPV4_MIN={0x8, 0x9, @multicast2}, @TCA_CT_LABELS={0x14, 0x7, "f41fc0b35e938477d0bf68d3f3424a77"}]}, {0x19, 0x6, "c5ae7b164aca2eb1b650efe7025f54bc4b1f425664"}, {0xc}, {0xc, 0x8, {0x1, 0x1}}}}, @m_mpls={0x168, 0x15, 0x0, 0x0, {{0x9}, {0x64, 0x2, 0x0, 0x1, [@TCA_MPLS_TC={0x5, 0x6, 0x6}, @TCA_MPLS_TTL={0x5, 0x7, 0x7}, @TCA_MPLS_PARMS={0x1c, 0x2, {{0x4, 0x6, 0x2, 0x1, 0x8}, 0x1}}, @TCA_MPLS_BOS={0x5}, @TCA_MPLS_LABEL={0x8, 0x5, 0xfceb}, @TCA_MPLS_LABEL={0x8, 0x5, 0xa5f35}, @TCA_MPLS_PARMS={0x1c, 0x2, {{0xf, 0xfffffffe, 0x6, 0x5, 0xdb}, 0x1}}]}, {0xd9, 0x6, "324bf91de07124b9e54937a32ee33bcdaa62106a7caf5835fd0e696c43e2316f8772f9f823bba68a9c89f0ae20748880652a70e1805890363fa80d3dcf379a8acde00c97af04c9d138527c6c9f877e07d6ddafebce4ada28b72f21399dbf3555d32162f5d74e473ab593b947ebc3ec2fa87cc1e9e03f3eb9ceb45b75f908e8a69ff062c983cab8f637a576b62b6458ae5b999b20b4877654cc2a0af9ff333fa596c5a7e37a68fa7aa7e24ad28a58acdf1d3339fc34716c1a7ec899f913568001637d8638e773f205b76fcbe372a9e7ada20d485e8a"}, {0xc}, {0xc, 0x8, {0x3, 0x1}}}}]}, @TCA_RSVP_SRC={0x8, 0x3, @remote}, @TCA_RSVP_POLICE={0x418, 0x5, [@TCA_POLICE_RATE={0x404, 0x2, [0x4, 0x9, 0x0, 0xb3, 0x3, 0x8653, 0x2232, 0xe, 0x7, 0x4, 0x0, 0x7fff, 0x8, 0x9d, 0x632, 0x6, 0x5, 0x6, 0x5, 0x49cc, 0x2, 0x0, 0xde6a, 0xfffffffa, 0x4, 0x9, 0x8a, 0xd, 0x1ff, 0x30, 0x5, 0xfffffffd, 0x6, 0x7ff, 0x8, 0x3, 0x81, 0x4, 0x9, 0x9, 0x4, 0xffffffff, 0x6, 0x4, 0x2, 0x36e, 0x10000, 0x4, 0xd4, 0x1, 0x0, 0x5, 0xddc, 0x2, 0x0, 0x9, 0x80000000, 0x69, 0x80, 0x9, 0x8, 0x3, 0x400, 0x6, 0x0, 0x4, 0x9, 0x572, 0x8, 0x9, 0x4, 0x8a, 0xfffffffe, 0x1, 0x401, 0x6, 0x4c2645fd, 0x6, 0x3, 0x8611329, 0x3, 0x0, 0x2, 0x7, 0x5, 0xfff, 0x4, 0x8, 0x1, 0x80000001, 0x3, 0x39bd, 0x81, 0x5, 0x0, 0x24, 0x3, 0x0, 0xfffffff9, 0x9, 0x1fb4, 0x80000000, 0x9, 0x1, 0xffffffff, 0x7d, 0x4, 0x1000, 0x80000001, 0x0, 0x2a7, 0xc03, 0xfffff000, 0x1e8, 0x5, 0x6, 0x400, 0x528, 0x2, 0x88, 0x3d75, 0x9, 0xb8, 0xd6bb, 0x8, 0x5, 0x6, 0x4, 0x28, 0x9, 0x7, 0x0, 0xfffffffc, 0x6, 0xfffffffa, 0x1000, 0x8, 0x2, 0xa71, 0xfffffff7, 0x401, 0x7, 0xfffffff1, 0x40, 0x1000, 0xfffff000, 0x0, 0x6, 0x6b, 0xc, 0x8c1, 0x7, 0x3, 0x1, 0x2, 0x6, 0x3, 0xfad10b0c, 0x7f, 0x5, 0x2, 0x2b, 0x1ff, 0x9e, 0x80, 0x7, 0x2, 0x1, 0xefe, 0x5cbf198d, 0x3, 0x0, 0x8, 0xf, 0x5, 0x3ff, 0x1ff, 0x9e11, 0x4, 0x4, 0x8, 0x401, 0xfffffff9, 0xf90, 0x1b1, 0xc6, 0x6885, 0x660, 0x8, 0x10001, 0x1000, 0x6, 0x1ff, 0x2, 0x4, 0x7, 0x81, 0x1, 0x4, 0xfff, 0xfff, 0xa0000, 0x5, 0x10000, 0x401, 0x8772, 0xe, 0x400, 0x9, 0x5, 0xba8, 0xd, 0x1, 0x81, 0x8, 0x1, 0x2, 0x5, 0x5, 0xa3d, 0x5, 0x6, 0x7, 0x9, 0x2, 0x5e, 0x10, 0x800, 0x9, 0xfffffff1, 0x3, 0x6, 0x7, 0x10, 0x0, 0x0, 0x4, 0x1ff, 0xf779, 0x5, 0x0, 0xff, 0x8, 0x7abf, 0x2, 0x9, 0x7, 0x99, 0x4, 0x5dc05eee, 0x1, 0xfff, 0x9, 0x3, 0x9]}, @TCA_POLICE_RESULT={0x8, 0x5, 0x6}, @TCA_POLICE_RESULT={0x8, 0x5, 0x9}]}, @TCA_RSVP_SRC={0x8, 0x3, @broadcast}, @TCA_RSVP_ACT={0xd8, 0x6, [@m_pedit={0xd4, 0x11, 0x0, 0x0, {{0xa}, {0x60, 0x2, 0x0, 0x1, [@TCA_PEDIT_KEYS_EX={0x5c, 0x5, 0x0, 0x1, [{0x3c, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_HTYPE={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x3}, @TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x3}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x7}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x4}]}, {0x1c, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x3}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x2}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x5}]}]}]}, {0x49, 0x6, "71a6d04508ff170cc51a31a334dd9c13a6f8dbcb50218378b331323f8b3b5580c5cc2f578a025646bfc5237b6808b383141e2b249dce8f6590795a8d7b29b73fd51a5fa324"}, {0xc, 0x7, {0x1, 0x1}}, {0xc}}}]}]}}]}, 0xc18}, 0x1, 0x0, 0x0, 0x20000800}, 0x24008040) 0s ago: executing program 0 (id=3460): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000002f0d31209000000bc2e79e995"], 0x0) write$binfmt_script(r2, &(0x7f0000000100), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f00000004c0)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) kernel console output (not intermixed with test programs): ying to free block not in datazone [ 1122.572320][T14700] sysv_free_inode: inode 0,1,2 or nonexistent inode [ 1122.711569][T14703] loop5: detected capacity change from 0 to 135 [ 1122.788791][T14703] VFS: Found a Xenix FS (block size = 512) on device loop5 [ 1122.860449][T14703] sysv_free_block: trying to free block not in datazone [ 1122.878255][T14703] sysv_free_inode: inode 0,1,2 or nonexistent inode [ 1123.262615][T11899] Bluetooth: hci3: command 0x0c1a tx timeout [ 1123.331705][T11899] Bluetooth: hci5: command 0x0c1a tx timeout [ 1123.491515][T11899] Bluetooth: hci1: command 0x0c1a tx timeout [ 1123.889374][T14711] netlink: set zone limit has 8 unknown bytes [ 1124.446855][T14716] syz.0.2212 (14716): drop_caches: 2 [ 1124.531609][T11899] Bluetooth: hci2: command 0x0406 tx timeout [ 1125.331688][T11899] Bluetooth: hci3: command 0x0406 tx timeout [ 1125.411535][T11899] Bluetooth: hci5: command 0x0406 tx timeout [ 1125.571516][T11899] Bluetooth: hci1: command 0x0406 tx timeout [ 1126.320981][T14726] 9pnet_virtio: no channels available for device syz [ 1126.937580][T14738] netlink: 'syz.5.2219': attribute type 10 has an invalid length. [ 1127.010038][T14738] bridge0: port 3(team0) entered disabled state [ 1127.184387][T14738] device team0 left promiscuous mode [ 1127.189793][T14738] device team_slave_0 left promiscuous mode [ 1127.196021][T14738] device team_slave_1 left promiscuous mode [ 1127.202244][T14738] bridge0: port 3(team0) entered disabled state [ 1127.437454][T14738] batman_adv: batadv0: Adding interface: team0 [ 1127.443846][T14738] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1127.470012][T14738] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active [ 1127.480722][T14740] netlink: 'syz.5.2219': attribute type 10 has an invalid length. [ 1127.566816][T14740] netlink: 2 bytes leftover after parsing attributes in process `syz.5.2219'. [ 1127.762585][T14740] device team0 entered promiscuous mode [ 1127.768204][T14740] device team_slave_0 entered promiscuous mode [ 1128.062186][T14740] device team_slave_1 entered promiscuous mode [ 1128.095361][T14740] 8021q: adding VLAN 0 to HW filter on device team0 [ 1128.112353][T14740] batman_adv: batadv0: Interface activated: team0 [ 1128.119646][T14740] batman_adv: batadv0: Interface deactivated: team0 [ 1128.148308][T14740] batman_adv: batadv0: Removing interface: team0 [ 1128.410963][T14740] bridge0: port 3(team0) entered blocking state [ 1128.420404][T14740] bridge0: port 3(team0) entered disabled state [ 1128.460480][T14750] binder: BINDER_SET_CONTEXT_MGR already set [ 1128.469179][T14750] binder: 14729:14750 ioctl 4018620d 200002c0 returned -16 [ 1128.534663][T14740] bridge0: port 3(team0) entered blocking state [ 1128.541031][T14740] bridge0: port 3(team0) entered forwarding state [ 1128.563829][T14754] binder: 14729:14754 ioctl 8818564c 20000f00 returned -22 [ 1128.790597][T14758] syz.8.2224 (14758): drop_caches: 2 [ 1130.239129][T14773] netlink: 'syz.8.2228': attribute type 10 has an invalid length. [ 1130.249691][T14773] bridge0: port 3(team0) entered disabled state [ 1130.305496][T14773] device team0 left promiscuous mode [ 1130.310920][T14773] device team_slave_0 left promiscuous mode [ 1130.317046][T14773] device team_slave_1 left promiscuous mode [ 1130.323777][T14773] bridge0: port 3(team0) entered disabled state [ 1130.332136][T14773] batman_adv: batadv0: Adding interface: team0 [ 1130.338309][T14773] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1130.363465][T14773] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active [ 1130.374025][T14774] netlink: 'syz.8.2228': attribute type 10 has an invalid length. [ 1130.585240][T14774] netlink: 2 bytes leftover after parsing attributes in process `syz.8.2228'. [ 1130.594394][T14774] device team0 entered promiscuous mode [ 1130.599980][T14774] device team_slave_0 entered promiscuous mode [ 1130.606526][T14774] device team_slave_1 entered promiscuous mode [ 1130.772257][T14774] 8021q: adding VLAN 0 to HW filter on device team0 [ 1130.847717][T14774] batman_adv: batadv0: Interface activated: team0 [ 1130.847866][T14774] batman_adv: batadv0: Interface deactivated: team0 [ 1130.847892][T14774] batman_adv: batadv0: Removing interface: team0 [ 1130.854083][T14774] bridge0: port 3(team0) entered blocking state [ 1130.854196][T14774] bridge0: port 3(team0) entered disabled state [ 1130.903966][T14774] bridge0: port 3(team0) entered blocking state [ 1130.904045][T14774] bridge0: port 3(team0) entered forwarding state [ 1131.685379][T14790] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1132.316035][T14779] loop0: detected capacity change from 0 to 40427 [ 1132.364334][T14779] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12 [ 1132.408015][T14779] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 1132.437457][T14779] F2FS-fs (loop0): invalid crc value [ 1132.525822][T14779] F2FS-fs (loop0): Found nat_bits in checkpoint [ 1132.709417][T14779] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 1132.726802][T14779] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 1133.060282][ T26] kauditd_printk_skb: 10 callbacks suppressed [ 1133.060301][ T26] audit: type=1800 audit(1734825331.672:239): pid=14779 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.2229" name="bus" dev="loop0" ino=10 res=0 errno=0 [ 1133.188675][ T26] audit: type=1804 audit(1734825331.692:240): pid=14779 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.2229" name="/newroot/461/file2/bus" dev="loop0" ino=10 res=1 errno=0 [ 1133.632121][T14809] loop2: detected capacity change from 0 to 128 [ 1133.917122][T14809] VFS: Found a Xenix FS (block size = 512) on device loop2 [ 1133.944205][T14809] sysv_free_block: trying to free block not in datazone [ 1133.958071][T14809] sysv_free_inode: inode 0,1,2 or nonexistent inode [ 1135.845703][T14816] binder: transaction release 339 bad handle 1, ret = -22 [ 1135.878573][T14816] binder: 14815:14816 ioctl 8818564c 20000f00 returned -22 [ 1137.722884][T14841] loop5: detected capacity change from 0 to 40427 [ 1137.769201][T14841] F2FS-fs (loop5): Invalid log_blocksize (268), supports only 12 [ 1137.809600][T14841] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock [ 1137.820185][T14841] F2FS-fs (loop5): invalid crc value [ 1137.834278][T14841] F2FS-fs (loop5): Found nat_bits in checkpoint [ 1137.950599][T14842] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1137.971139][T14842] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 1137.979916][T14842] Bluetooth: hci2: Suspend notifier action (1) failed: -4 [ 1137.983598][T14841] F2FS-fs (loop5): Try to recover 1th superblock, ret: 0 [ 1137.989456][T14842] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1137.999688][T14841] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5 [ 1138.009176][T14842] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 1138.072773][T14842] Bluetooth: hci3: Suspend notifier action (1) failed: -4 [ 1138.088117][T14855] binder: BINDER_SET_CONTEXT_MGR already set [ 1138.095018][T14855] binder: 14825:14855 ioctl 4018620d 20000100 returned -16 [ 1138.110401][ T26] audit: type=1800 audit(1734825336.722:241): pid=14841 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.2248" name="bus" dev="loop5" ino=10 res=0 errno=0 [ 1138.121615][T14842] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 1138.147449][T14842] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 1138.157452][T14842] Bluetooth: hci5: Suspend notifier action (1) failed: -4 [ 1138.165793][T14842] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1138.180646][ T26] audit: type=1804 audit(1734825336.722:242): pid=14841 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.5.2248" name="/newroot/456/file2/bus" dev="loop5" ino=10 res=1 errno=0 [ 1138.216182][T14842] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 1138.229571][T14842] Bluetooth: hci1: Suspend notifier action (1) failed: -4 [ 1138.290818][T14826] binder: 14825:14826 ioctl 4018620d 0 returned -22 [ 1138.407509][T14855] binder: 14825:14855 ioctl 8818564c 20000f00 returned -22 [ 1138.517947][T14862] netlink: 80 bytes leftover after parsing attributes in process `syz.0.2252'. [ 1138.561826][ T125] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 1138.751618][ T125] usb 5-1: Using ep0 maxpacket: 32 [ 1138.761054][ T125] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 1138.783023][ T125] usb 5-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 1138.826013][ T125] usb 5-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 1138.840781][ T125] usb 5-1: Product: syz [ 1138.847301][ T125] usb 5-1: Manufacturer: syz [ 1138.855681][ T125] usb 5-1: SerialNumber: syz [ 1138.873794][ T125] usb 5-1: config 0 descriptor?? [ 1138.912478][T14849] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 1139.091749][T11899] Bluetooth: hci2: command 0x0c1a tx timeout [ 1139.246221][T14868] binder: BINDER_SET_CONTEXT_MGR already set [ 1139.254539][T10295] usb 5-1: USB disconnect, device number 8 [ 1139.296190][T14868] binder: 14867:14868 ioctl 4018620d 20000100 returned -16 [ 1139.322181][T14868] binder: BINDER_SET_CONTEXT_MGR already set [ 1139.358941][T14868] binder: 14867:14868 ioctl 4018620d 200002c0 returned -16 [ 1139.435597][T14869] binder: 14867:14869 ioctl 8818564c 20000f00 returned -22 [ 1140.051891][T11899] Bluetooth: hci3: command 0x0c1a tx timeout [ 1140.131672][T11899] Bluetooth: hci5: command 0x0c1a tx timeout [ 1140.212037][T11899] Bluetooth: hci1: command 0x0c1a tx timeout [ 1140.366284][T14877] binder: transaction release 349 bad handle 1, ret = -22 [ 1140.418437][T14877] binder: 14870:14877 ioctl 8818564c 20000f00 returned -22 [ 1141.171627][T11899] Bluetooth: hci2: command 0x0406 tx timeout [ 1142.131584][T11899] Bluetooth: hci3: command 0x0406 tx timeout [ 1142.211504][T11899] Bluetooth: hci5: command 0x0406 tx timeout [ 1142.291629][ T4262] Bluetooth: hci1: command 0x0406 tx timeout [ 1144.535416][T14918] binder: transaction release 355 bad handle 1, ret = -22 [ 1144.575137][T14918] binder: 14917:14918 ioctl 8818564c 20000f00 returned -22 [ 1144.920590][T14923] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1145.034078][T14919] binder: 14893:14919 ioctl 4018620d 0 returned -22 [ 1145.159084][T14925] binder: 14893:14925 ioctl 8818564c 20000f00 returned -22 [ 1147.795058][T14945] netlink: set zone limit has 8 unknown bytes [ 1149.747372][T14949] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1149.765126][T14949] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 1149.775554][T14949] Bluetooth: hci2: Suspend notifier action (1) failed: -4 [ 1149.788112][T14949] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1149.981881][T14949] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 1150.009270][T14959] netlink: 'syz.2.2277': attribute type 10 has an invalid length. [ 1150.019260][T14959] bridge0: port 3(team0) entered disabled state [ 1150.033907][T14949] Bluetooth: hci3: Suspend notifier action (1) failed: -4 [ 1150.077655][T14949] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 1150.099868][T14959] device team0 left promiscuous mode [ 1150.105354][T14959] device team_slave_0 left promiscuous mode [ 1150.111495][T14959] device team_slave_1 left promiscuous mode [ 1150.117699][T14959] bridge0: port 3(team0) entered disabled state [ 1150.124845][T14949] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 1150.133368][T14959] batman_adv: batadv0: Adding interface: team0 [ 1150.139609][T14959] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1150.164864][T14959] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active [ 1150.176131][T14963] netlink: 'syz.2.2277': attribute type 10 has an invalid length. [ 1150.192424][T14963] netlink: 2 bytes leftover after parsing attributes in process `syz.2.2277'. [ 1150.206035][T14963] device team0 entered promiscuous mode [ 1150.212062][T14963] device team_slave_0 entered promiscuous mode [ 1150.218545][T14963] device team_slave_1 entered promiscuous mode [ 1150.225924][T14949] Bluetooth: hci5: Suspend notifier action (1) failed: -4 [ 1150.255803][T14949] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1150.282545][T14949] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 1150.310341][T14949] Bluetooth: hci1: Suspend notifier action (1) failed: -4 [ 1150.439213][T14963] 8021q: adding VLAN 0 to HW filter on device team0 [ 1150.463283][T14963] batman_adv: batadv0: Interface activated: team0 [ 1150.470090][T14963] batman_adv: batadv0: Interface deactivated: team0 [ 1150.480838][T14963] batman_adv: batadv0: Removing interface: team0 [ 1150.496329][T14963] bridge0: port 3(team0) entered blocking state [ 1150.524247][T14963] bridge0: port 3(team0) entered disabled state [ 1150.633508][T14963] bridge0: port 3(team0) entered blocking state [ 1150.639874][T14963] bridge0: port 3(team0) entered forwarding state [ 1150.861653][T11899] Bluetooth: hci2: command 0x0c1a tx timeout [ 1151.864772][T14982] netlink: set zone limit has 8 unknown bytes [ 1152.021482][T11899] Bluetooth: hci3: command 0x0c1a tx timeout [ 1152.500482][ T4262] Bluetooth: hci1: command 0x0c1a tx timeout [ 1152.507029][T11899] Bluetooth: hci5: command 0x0c1a tx timeout [ 1152.972222][T11899] Bluetooth: hci2: command 0x0406 tx timeout [ 1153.059995][T14984] netlink: set zone limit has 8 unknown bytes [ 1154.061753][T11899] Bluetooth: hci3: command 0x0406 tx timeout [ 1154.108542][T14998] netlink: 'syz.2.2288': attribute type 10 has an invalid length. [ 1154.116623][T14998] netlink: 2 bytes leftover after parsing attributes in process `syz.2.2288'. [ 1154.541760][T11899] Bluetooth: hci5: command 0x0406 tx timeout [ 1154.548782][ T4262] Bluetooth: hci1: command 0x0406 tx timeout [ 1154.887445][T14997] netlink: 'syz.5.2287': attribute type 10 has an invalid length. [ 1154.907739][T14997] bridge0: port 3(team0) entered disabled state [ 1155.065709][T14997] device team0 left promiscuous mode [ 1155.071087][T14997] device team_slave_0 left promiscuous mode [ 1155.077475][T14997] device team_slave_1 left promiscuous mode [ 1155.083772][T14997] bridge0: port 3(team0) entered disabled state [ 1155.098674][T14997] batman_adv: batadv0: Adding interface: team0 [ 1155.106622][T14997] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1155.131988][T14997] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active [ 1155.142403][T14999] netlink: 'syz.5.2287': attribute type 10 has an invalid length. [ 1155.185296][T14999] netlink: 2 bytes leftover after parsing attributes in process `syz.5.2287'. [ 1155.208673][T15014] netlink: 80 bytes leftover after parsing attributes in process `syz.4.2292'. [ 1155.243035][T14999] device team0 entered promiscuous mode [ 1155.248645][T14999] device team_slave_0 entered promiscuous mode [ 1155.365890][T14999] device team_slave_1 entered promiscuous mode [ 1156.026521][T14999] 8021q: adding VLAN 0 to HW filter on device team0 [ 1156.095651][T14999] batman_adv: batadv0: Interface activated: team0 [ 1156.260045][T14999] batman_adv: batadv0: Interface deactivated: team0 [ 1156.286362][T14999] batman_adv: batadv0: Removing interface: team0 [ 1156.472246][T14999] bridge0: port 3(team0) entered blocking state [ 1156.544720][T14999] bridge0: port 3(team0) entered disabled state [ 1156.678702][T14999] bridge0: port 3(team0) entered blocking state [ 1156.685155][T14999] bridge0: port 3(team0) entered forwarding state [ 1157.346320][T15033] netlink: 'syz.4.2296': attribute type 10 has an invalid length. [ 1157.588861][T15033] bridge0: port 3(team0) entered disabled state [ 1157.610405][T15033] device team0 left promiscuous mode [ 1157.616609][T15033] device team_slave_0 left promiscuous mode [ 1157.628728][T15033] device team_slave_1 left promiscuous mode [ 1157.640640][T15033] bridge0: port 3(team0) entered disabled state [ 1157.728590][T15033] batman_adv: batadv0: Adding interface: team0 [ 1157.794888][T15033] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1157.915182][T15033] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active [ 1157.960624][T15032] netlink: 'syz.4.2296': attribute type 10 has an invalid length. [ 1157.969188][T15032] netlink: 2 bytes leftover after parsing attributes in process `syz.4.2296'. [ 1157.978254][T15032] device team0 entered promiscuous mode [ 1157.983827][T15032] device team_slave_0 entered promiscuous mode [ 1157.990188][T15032] device team_slave_1 entered promiscuous mode [ 1157.997467][T15032] 8021q: adding VLAN 0 to HW filter on device team0 [ 1158.004336][T15032] batman_adv: batadv0: Interface activated: team0 [ 1158.010830][T15032] batman_adv: batadv0: Interface deactivated: team0 [ 1158.017503][T15032] batman_adv: batadv0: Removing interface: team0 [ 1158.024784][T15032] bridge0: port 3(team0) entered blocking state [ 1158.031197][T15032] bridge0: port 3(team0) entered disabled state [ 1158.039164][T15032] bridge0: port 3(team0) entered blocking state [ 1158.045559][T15032] bridge0: port 3(team0) entered forwarding state [ 1158.542826][T15042] netlink: set zone limit has 8 unknown bytes [ 1158.977888][T15049] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1159.506480][T15047] netlink: 'syz.5.2299': attribute type 10 has an invalid length. [ 1159.514376][T15047] netlink: 2 bytes leftover after parsing attributes in process `syz.5.2299'. [ 1159.790399][T15056] netlink: 'syz.4.2302': attribute type 10 has an invalid length. [ 1159.798573][T15056] netlink: 2 bytes leftover after parsing attributes in process `syz.4.2302'. [ 1160.000449][T15052] netlink: 'syz.0.2301': attribute type 10 has an invalid length. [ 1160.012044][T15052] bridge0: port 3(team0) entered disabled state [ 1160.056816][T15052] device team0 left promiscuous mode [ 1160.062251][T15052] device team_slave_0 left promiscuous mode [ 1160.068298][T15052] device team_slave_1 left promiscuous mode [ 1160.074529][T15052] bridge0: port 3(team0) entered disabled state [ 1160.084829][T15052] batman_adv: batadv0: Adding interface: team0 [ 1160.091011][T15052] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1160.116238][T15052] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active [ 1160.197801][T15052] netlink: 'syz.0.2301': attribute type 10 has an invalid length. [ 1160.205749][T15052] netlink: 2 bytes leftover after parsing attributes in process `syz.0.2301'. [ 1160.214834][T15052] device team0 entered promiscuous mode [ 1160.220381][T15052] device team_slave_0 entered promiscuous mode [ 1160.227209][T15052] device team_slave_1 entered promiscuous mode [ 1160.234378][T15052] 8021q: adding VLAN 0 to HW filter on device team0 [ 1160.241154][T15052] batman_adv: batadv0: Interface activated: team0 [ 1160.247774][T15052] batman_adv: batadv0: Interface deactivated: team0 [ 1160.254685][T15052] batman_adv: batadv0: Removing interface: team0 [ 1160.380923][T15052] bridge0: port 3(team0) entered blocking state [ 1160.387456][T15052] bridge0: port 3(team0) entered disabled state [ 1160.397910][T15052] bridge0: port 3(team0) entered blocking state [ 1160.404514][T15052] bridge0: port 3(team0) entered forwarding state [ 1161.543953][T15074] loop5: detected capacity change from 0 to 136 [ 1161.588064][T15074] VFS: Found a Xenix FS (block size = 512) on device loop5 [ 1161.637121][T15074] sysv_free_block: trying to free block not in datazone [ 1161.666808][T15074] sysv_free_inode: inode 0,1,2 or nonexistent inode [ 1161.976993][T15079] syz.4.2308 (15079): drop_caches: 2 [ 1162.587685][T15088] loop0: detected capacity change from 0 to 128 [ 1162.738968][T15088] VFS: Found a Xenix FS (block size = 512) on device loop0 [ 1162.938882][T15088] sysv_free_block: trying to free block not in datazone [ 1162.947092][T15088] sysv_free_inode: inode 0,1,2 or nonexistent inode [ 1163.097261][T15095] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2312'. [ 1163.250651][T15096] netlink: set zone limit has 8 unknown bytes [ 1164.830770][T15103] netlink: set zone limit has 8 unknown bytes [ 1165.175939][T15111] netlink: 80 bytes leftover after parsing attributes in process `syz.4.2315'. [ 1167.307526][T15139] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2320'. [ 1167.460938][T15140] netlink: set zone limit has 8 unknown bytes [ 1168.891668][T15127] netlink: 'syz.5.2318': attribute type 10 has an invalid length. [ 1168.899578][T15127] netlink: 2 bytes leftover after parsing attributes in process `syz.5.2318'. [ 1169.192761][T15154] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1171.899797][T15181] 9pnet_virtio: no channels available for device syz [ 1172.831154][T15183] loop5: detected capacity change from 0 to 1024 [ 1172.948167][T15183] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 1173.036243][T15188] netlink: 80 bytes leftover after parsing attributes in process `syz.2.2332'. [ 1173.630699][T15201] 9pnet_virtio: no channels available for device syz [ 1175.109325][T15203] netlink: 'syz.8.2333': attribute type 10 has an invalid length. [ 1175.289526][T15203] bridge0: port 3(team0) entered disabled state [ 1175.523303][T15203] device team0 left promiscuous mode [ 1175.739340][T15209] netlink: set zone limit has 8 unknown bytes [ 1176.358569][T15203] device team_slave_0 left promiscuous mode [ 1176.409976][T15204] syz.0.2335 (15204): drop_caches: 2 [ 1176.451757][T15203] device team_slave_1 left promiscuous mode [ 1176.515019][T15203] bridge0: port 3(team0) entered disabled state [ 1176.620629][T15203] batman_adv: batadv0: Adding interface: team0 [ 1176.649348][T15203] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1176.994044][T15203] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active [ 1177.182100][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 1177.192874][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 1177.695847][ T4598] EXT4-fs (loop5): unmounting filesystem. [ 1177.806083][T15220] loop0: detected capacity change from 0 to 139 [ 1177.838936][T15220] VFS: Found a Xenix FS (block size = 512) on device loop0 [ 1178.532703][T15230] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1179.584888][T15236] netlink: set zone limit has 8 unknown bytes [ 1180.787408][T15239] 9pnet_virtio: no channels available for device syz [ 1183.933270][ T4249] sysv_free_block: trying to free block not in datazone [ 1184.269234][ T4249] sysv_free_inode: inode 0,1,2 or nonexistent inode [ 1185.497970][T15259] netlink: set zone limit has 8 unknown bytes [ 1186.731360][T15266] netlink: 'syz.0.2351': attribute type 10 has an invalid length. [ 1186.739326][T15266] netlink: 2 bytes leftover after parsing attributes in process `syz.0.2351'. [ 1189.191103][T15288] netlink: set zone limit has 8 unknown bytes [ 1191.473445][T15300] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1192.508903][T15299] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1192.524740][T15299] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 1192.530969][T15299] Bluetooth: hci2: Suspend notifier action (1) failed: -4 [ 1192.565714][T15299] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1192.603888][T15299] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 1192.631551][T15299] Bluetooth: hci3: Suspend notifier action (1) failed: -4 [ 1192.639338][T15313] binder: BINDER_SET_CONTEXT_MGR already set [ 1192.649021][T15299] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 1192.660601][T15313] binder: 15290:15313 ioctl 4018620d 20000100 returned -16 [ 1192.718840][T15299] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 1192.737398][T15299] Bluetooth: hci5: Suspend notifier action (1) failed: -4 [ 1192.825630][T15299] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1192.837798][T15313] binder: BINDER_SET_CONTEXT_MGR already set [ 1192.843918][T15313] binder: 15290:15313 ioctl 4018620d 200002c0 returned -16 [ 1192.888043][T15299] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 1192.911216][T15299] Bluetooth: hci1: Suspend notifier action (1) failed: -4 [ 1193.138021][T15291] binder: 15290:15291 ioctl 8818564c 20000f00 returned -22 [ 1193.891675][ T4262] Bluetooth: hci2: command 0x0c1a tx timeout [ 1194.093798][T15330] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1194.611469][ T4262] Bluetooth: hci3: command 0x0c1a tx timeout [ 1194.691586][T11899] Bluetooth: hci5: command 0x0c1a tx timeout [ 1194.868528][T11899] Bluetooth: hci1: command 0x0c1a tx timeout [ 1195.229310][T15341] netlink: set zone limit has 8 unknown bytes [ 1196.201086][ T4262] Bluetooth: hci2: command 0x0406 tx timeout [ 1196.691762][ T4262] Bluetooth: hci3: command 0x0406 tx timeout [ 1196.771758][ T4262] Bluetooth: hci5: command 0x0406 tx timeout [ 1196.931567][ T4262] Bluetooth: hci1: command 0x0406 tx timeout [ 1197.832449][T15367] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1199.268085][T15353] loop4: detected capacity change from 0 to 40427 [ 1199.354538][T15353] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12 [ 1199.570481][T15353] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 1199.622282][T15353] F2FS-fs (loop4): invalid crc value [ 1199.822169][T15353] F2FS-fs (loop4): Found nat_bits in checkpoint [ 1200.660318][T15415] netlink: set zone limit has 8 unknown bytes [ 1201.537421][T15416] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1204.380195][T15447] netlink: set zone limit has 8 unknown bytes [ 1204.997204][T15442] 9pnet_virtio: no channels available for device syz [ 1206.851464][T15483] netlink: set zone limit has 8 unknown bytes [ 1207.603371][T15478] loop0: detected capacity change from 0 to 133 [ 1208.006835][T15478] VFS: Found a Xenix FS (block size = 512) on device loop0 [ 1208.016260][T15478] sysv_free_block: trying to free block not in datazone [ 1208.031152][T15478] sysv_free_inode: inode 0,1,2 or nonexistent inode [ 1208.424707][T15493] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1208.996084][T15488] binder: BINDER_SET_CONTEXT_MGR already set [ 1209.002274][T15488] binder: 15463:15488 ioctl 4018620d 20000100 returned -16 [ 1209.181599][T15488] binder: BINDER_SET_CONTEXT_MGR already set [ 1209.231607][T15488] binder: 15463:15488 ioctl 4018620d 200002c0 returned -16 [ 1209.234429][T15499] binder: 15463:15499 ioctl 8818564c 20000f00 returned -22 [ 1210.646934][T15503] netlink: 'syz.4.2402': attribute type 10 has an invalid length. [ 1210.654856][T15503] netlink: 2 bytes leftover after parsing attributes in process `syz.4.2402'. [ 1210.943454][T15518] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1211.610241][T15526] netlink: set zone limit has 8 unknown bytes [ 1213.370389][T15544] netlink: set zone limit has 8 unknown bytes [ 1214.579584][T15558] loop4: detected capacity change from 0 to 1024 [ 1214.666374][T15558] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 1216.091112][T15578] syz.2.2416 (15578): drop_caches: 2 [ 1217.435342][ T4258] EXT4-fs (loop4): unmounting filesystem. [ 1221.026077][T15611] loop4: detected capacity change from 0 to 135 [ 1221.109874][T15611] VFS: Found a Xenix FS (block size = 512) on device loop4 [ 1222.584807][T15623] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1222.613025][T15634] binder: transaction release 366 bad handle 1, ret = -22 [ 1222.661769][T15634] binder: 15612:15634 ioctl 8818564c 20000f00 returned -22 [ 1222.681733][T15623] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 1222.771518][T15623] Bluetooth: hci2: Suspend notifier action (1) failed: -4 [ 1222.786953][ T4258] sysv_free_block: trying to free block not in datazone [ 1222.793694][T15623] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1222.801000][T15623] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 1222.832988][ T4258] sysv_free_inode: inode 0,1,2 or nonexistent inode [ 1222.866393][T15623] Bluetooth: hci3: Suspend notifier action (1) failed: -4 [ 1222.874087][T15623] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 1222.892285][T15623] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 1222.907095][T15623] Bluetooth: hci5: Suspend notifier action (1) failed: -4 [ 1222.924955][T15623] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1222.959885][T15623] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 1222.987490][T15623] Bluetooth: hci1: Suspend notifier action (1) failed: -4 [ 1223.210376][T15637] loop4: detected capacity change from 0 to 128 [ 1223.261572][ T4262] Bluetooth: hci2: command 0x0c1a tx timeout [ 1223.349050][T15637] VFS: Found a Xenix FS (block size = 512) on device loop4 [ 1223.795360][T15643] netlink: set zone limit has 8 unknown bytes [ 1224.871959][ T4262] Bluetooth: hci3: command 0x0c1a tx timeout [ 1224.931486][ T4262] Bluetooth: hci1: command 0x0c1a tx timeout [ 1224.931818][T11899] Bluetooth: hci5: command 0x0c1a tx timeout [ 1225.390638][T11899] Bluetooth: hci2: command 0x0406 tx timeout [ 1226.941535][T11899] Bluetooth: hci3: command 0x0406 tx timeout [ 1227.011596][T11899] Bluetooth: hci1: command 0x0406 tx timeout [ 1227.012268][ T4262] Bluetooth: hci5: command 0x0406 tx timeout [ 1227.400667][T15663] binder: transaction release 372 bad handle 1, ret = -22 [ 1227.425274][T15667] loop5: detected capacity change from 0 to 138 [ 1227.475719][T15667] VFS: Found a Xenix FS (block size = 512) on device loop5 [ 1227.491256][T15663] binder: 15646:15663 ioctl 8818564c 20000f00 returned -22 [ 1228.061192][T15667] sysv_free_block: trying to free block not in datazone [ 1228.130995][T15667] sysv_free_inode: inode 0,1,2 or nonexistent inode [ 1228.680396][T15673] loop2: detected capacity change from 0 to 40427 [ 1228.711033][T15673] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12 [ 1228.740165][T15673] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 1228.770632][T15673] F2FS-fs (loop2): invalid crc value [ 1228.807022][T15673] F2FS-fs (loop2): Found nat_bits in checkpoint [ 1228.913920][ T4258] sysv_free_block: trying to free block not in datazone [ 1228.927032][T15673] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 1228.964072][ T4258] sysv_free_inode: inode 0,1,2 or nonexistent inode [ 1228.971690][T15673] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 1229.078099][T15679] loop0: detected capacity change from 0 to 136 [ 1229.097543][ T26] audit: type=1800 audit(1734825427.712:243): pid=15673 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.2438" name="bus" dev="loop2" ino=10 res=0 errno=0 [ 1229.168293][T15679] VFS: Found a Xenix FS (block size = 512) on device loop0 [ 1229.248448][ T26] audit: type=1804 audit(1734825427.802:244): pid=15681 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.2438" name="/newroot/490/file2/bus" dev="loop2" ino=10 res=1 errno=0 [ 1229.817301][T15688] 9pnet_virtio: no channels available for device syz [ 1231.187412][T15684] netlink: 'syz.4.2440': attribute type 10 has an invalid length. [ 1231.195375][T15684] netlink: 2 bytes leftover after parsing attributes in process `syz.4.2440'. [ 1233.850748][ T4249] sysv_free_block: trying to free block not in datazone [ 1233.872422][ T4249] sysv_free_inode: inode 0,1,2 or nonexistent inode [ 1234.377333][T15722] loop0: detected capacity change from 0 to 142 [ 1234.464769][T15722] VFS: Found a Xenix FS (block size = 512) on device loop0 [ 1235.356587][T15724] binder: transaction release 378 bad handle 1, ret = -22 [ 1235.372033][T15724] binder: 15714:15724 ioctl 8818564c 20000f00 returned -22 [ 1235.695361][T15733] loop4: detected capacity change from 0 to 134 [ 1235.938542][T15733] VFS: Found a Xenix FS (block size = 512) on device loop4 [ 1235.951711][ T4249] sysv_free_block: trying to free block not in datazone [ 1235.963171][ T4249] sysv_free_inode: inode 0,1,2 or nonexistent inode [ 1235.980434][T15733] sysv_free_block: trying to free block not in datazone [ 1236.020122][T15733] sysv_free_inode: inode 0,1,2 or nonexistent inode [ 1238.614252][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 1238.621476][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 1243.621858][T15795] 9pnet_virtio: no channels available for device syz [ 1246.819496][T15809] netlink: 'syz.4.2476': attribute type 10 has an invalid length. [ 1246.827472][T15809] netlink: 2 bytes leftover after parsing attributes in process `syz.4.2476'. [ 1247.555042][T15828] 9pnet_virtio: no channels available for device syz [ 1250.126140][T15840] netlink: 'syz.4.2482': attribute type 10 has an invalid length. [ 1250.208108][T15835] loop8: detected capacity change from 0 to 135 [ 1250.336260][T15835] VFS: Found a Xenix FS (block size = 512) on device loop8 [ 1250.367009][T15840] bridge0: port 3(team0) entered disabled state [ 1251.001629][T15840] device team0 left promiscuous mode [ 1251.007053][T15840] device team_slave_0 left promiscuous mode [ 1251.415622][T15840] device team_slave_1 left promiscuous mode [ 1251.471015][T15840] bridge0: port 3(team0) entered disabled state [ 1251.650905][T15840] batman_adv: batadv0: Adding interface: team0 [ 1251.688928][T15840] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1251.771474][T15840] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active [ 1253.468657][T15863] 9pnet_virtio: no channels available for device syz [ 1254.180289][ T9963] sysv_free_block: trying to free block not in datazone [ 1254.262333][ T9963] sysv_free_inode: inode 0,1,2 or nonexistent inode [ 1258.327539][T15914] netlink: 'syz.5.2499': attribute type 10 has an invalid length. [ 1258.335514][T15914] netlink: 2 bytes leftover after parsing attributes in process `syz.5.2499'. [ 1258.875759][T15918] netlink: 'syz.0.2500': attribute type 10 has an invalid length. [ 1258.883737][T15918] netlink: 2 bytes leftover after parsing attributes in process `syz.0.2500'. [ 1259.966837][T15935] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1260.033154][T15928] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1260.210012][T15928] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 1260.251582][T15928] Bluetooth: hci2: Suspend notifier action (1) failed: -4 [ 1260.259657][T15928] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1260.273141][T15928] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 1260.282512][T15928] Bluetooth: hci3: Suspend notifier action (1) failed: -4 [ 1260.300374][T15928] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 1260.339677][T15928] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 1260.361032][T15928] Bluetooth: hci5: Suspend notifier action (1) failed: -4 [ 1260.361770][T15942] loop0: detected capacity change from 0 to 128 [ 1260.415460][T15942] VFS: Found a Xenix FS (block size = 512) on device loop0 [ 1260.425973][T15928] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1260.438412][T15928] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 1260.464224][T15928] Bluetooth: hci1: Suspend notifier action (1) failed: -4 [ 1260.701629][T11899] Bluetooth: hci2: command 0x0c1a tx timeout [ 1260.948789][T15949] netlink: 80 bytes leftover after parsing attributes in process `syz.5.2507'. [ 1262.301525][ T4262] Bluetooth: hci3: command 0x0c1a tx timeout [ 1262.346734][ T4249] sysv_free_block: trying to free block not in datazone [ 1262.381435][ T4262] Bluetooth: hci5: command 0x0c1a tx timeout [ 1262.391040][ T4249] sysv_free_inode: inode 0,1,2 or nonexistent inode [ 1262.461482][ T4262] Bluetooth: hci1: command 0x0c1a tx timeout [ 1262.837269][ T4262] Bluetooth: hci2: command 0x0406 tx timeout [ 1264.371490][T11899] Bluetooth: hci3: command 0x0406 tx timeout [ 1264.451559][T11899] Bluetooth: hci5: command 0x0406 tx timeout [ 1264.561024][ T4262] Bluetooth: hci1: command 0x0406 tx timeout [ 1264.665314][T15972] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1264.691086][T15972] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 1264.708530][T15987] loop2: detected capacity change from 0 to 137 [ 1264.711548][T15972] Bluetooth: hci2: Suspend notifier action (1) failed: -4 [ 1265.193833][T15972] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1265.220611][T15972] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 1265.235519][T15972] Bluetooth: hci3: Suspend notifier action (1) failed: -4 [ 1265.260489][T15987] VFS: Found a Xenix FS (block size = 512) on device loop2 [ 1265.276265][T15987] sysv_free_block: trying to free block not in datazone [ 1265.276293][T15972] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 1265.299755][T15987] sysv_free_inode: inode 0,1,2 or nonexistent inode [ 1265.348164][T15972] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 1265.386847][T15972] Bluetooth: hci5: Suspend notifier action (1) failed: -4 [ 1265.412041][T11899] Bluetooth: hci2: command 0x0c1a tx timeout [ 1265.419869][T15972] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1265.426753][T15972] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 1265.434065][T15972] Bluetooth: hci1: Suspend notifier action (1) failed: -4 [ 1267.385581][T11899] Bluetooth: hci3: command 0x0c1a tx timeout [ 1267.391776][T11899] Bluetooth: hci5: command 0x0c1a tx timeout [ 1267.491656][ T4262] Bluetooth: hci1: command 0x0c1a tx timeout [ 1267.491727][T11899] Bluetooth: hci2: command 0x0406 tx timeout [ 1269.411548][T11899] Bluetooth: hci5: command 0x0406 tx timeout [ 1269.417633][ T4261] Bluetooth: hci3: command 0x0406 tx timeout [ 1269.578016][ T4262] Bluetooth: hci1: command 0x0406 tx timeout [ 1272.134078][T16048] netlink: 80 bytes leftover after parsing attributes in process `syz.8.2534'. [ 1272.987116][T16052] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1278.660238][T16104] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1279.161614][T16110] loop4: detected capacity change from 0 to 134 [ 1279.217034][T16110] VFS: Found a Xenix FS (block size = 512) on device loop4 [ 1279.233470][T16110] sysv_free_block: trying to free block not in datazone [ 1279.251095][T16110] sysv_free_inode: inode 0,1,2 or nonexistent inode [ 1279.363731][T16111] binder: BINDER_SET_CONTEXT_MGR already set [ 1279.451965][T16111] binder: 16101:16111 ioctl 4018620d 20000100 returned -16 [ 1279.587150][T16111] binder: BINDER_SET_CONTEXT_MGR already set [ 1279.601906][T16111] binder: 16101:16111 ioctl 4018620d 200002c0 returned -16 [ 1279.749462][T16115] binder: 16101:16115 ioctl 8818564c 20000f00 returned -22 [ 1280.942491][T16122] loop4: detected capacity change from 0 to 128 [ 1280.971271][T16122] VFS: Found a Xenix FS (block size = 512) on device loop4 [ 1280.979198][T16122] sysv_free_block: trying to free block not in datazone [ 1280.989129][T16122] sysv_free_inode: inode 0,1,2 or nonexistent inode [ 1287.061731][T16167] loop5: detected capacity change from 0 to 139 [ 1287.076164][T16167] VFS: Found a Xenix FS (block size = 512) on device loop5 [ 1287.085326][T16167] sysv_free_block: trying to free block not in datazone [ 1287.097051][T16167] sysv_free_inode: inode 0,1,2 or nonexistent inode [ 1287.234309][ T4749] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 1290.527950][T16192] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2567'. [ 1291.663968][T16200] netlink: 80 bytes leftover after parsing attributes in process `syz.5.2569'. [ 1291.796766][T16204] loop0: detected capacity change from 0 to 1024 [ 1292.096784][T16204] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 1292.192135][T16216] 9pnet_virtio: no channels available for device syz [ 1293.636282][T16213] netlink: 'syz.8.2572': attribute type 10 has an invalid length. [ 1294.321720][T16230] netlink: 80 bytes leftover after parsing attributes in process `syz.5.2574'. [ 1295.069563][ T4249] EXT4-fs (loop0): unmounting filesystem. [ 1295.436087][T16248] loop0: detected capacity change from 0 to 136 [ 1295.545300][T16248] VFS: Found a Xenix FS (block size = 512) on device loop0 [ 1295.555183][T16248] sysv_free_block: trying to free block not in datazone [ 1295.566938][T16248] sysv_free_inode: inode 0,1,2 or nonexistent inode [ 1295.722348][T16251] netlink: 80 bytes leftover after parsing attributes in process `syz.2.2579'. [ 1296.868310][T16267] loop8: detected capacity change from 0 to 145 [ 1297.250731][T16274] netlink: set zone limit has 8 unknown bytes [ 1297.889213][T16267] VFS: Found a Xenix FS (block size = 512) on device loop8 [ 1298.193631][T16267] sysv_free_block: trying to free block not in datazone [ 1298.216663][T16267] sysv_free_inode: inode 0,1,2 or nonexistent inode [ 1299.195520][T16282] binder: BINDER_SET_CONTEXT_MGR already set [ 1299.217351][T16282] binder: 16278:16282 ioctl 4018620d 20000100 returned -16 [ 1299.490653][T16282] binder: BINDER_SET_CONTEXT_MGR already set [ 1299.507834][T16282] binder: 16278:16282 ioctl 4018620d 200002c0 returned -16 [ 1299.611874][T16294] binder: 16278:16294 ioctl 8818564c 20000f00 returned -22 [ 1300.058380][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 1300.064798][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 1300.225797][T16300] loop0: detected capacity change from 0 to 146 [ 1300.286406][T16300] VFS: Found a Xenix FS (block size = 512) on device loop0 [ 1300.298646][T16300] sysv_free_block: trying to free block not in datazone [ 1300.309610][T16300] sysv_free_inode: inode 0,1,2 or nonexistent inode [ 1301.879286][T16318] netlink: set zone limit has 8 unknown bytes [ 1302.504016][T16309] loop8: detected capacity change from 0 to 140 [ 1302.563377][T16309] VFS: Found a Xenix FS (block size = 512) on device loop8 [ 1302.573194][T16309] sysv_free_block: trying to free block not in datazone [ 1302.593316][T16309] sysv_free_inode: inode 0,1,2 or nonexistent inode [ 1303.120594][T16328] netlink: 80 bytes leftover after parsing attributes in process `syz.5.2598'. [ 1303.258637][T16323] 9pnet_virtio: no channels available for device syz [ 1304.079880][T16337] netlink: set zone limit has 8 unknown bytes [ 1308.907161][T16352] loop5: detected capacity change from 0 to 135 [ 1308.993688][T16352] VFS: Found a Xenix FS (block size = 512) on device loop5 [ 1309.045201][T16352] sysv_free_block: trying to free block not in datazone [ 1309.055878][T16352] sysv_free_inode: inode 0,1,2 or nonexistent inode [ 1309.609051][T16370] netlink: set zone limit has 8 unknown bytes [ 1311.824052][T16388] loop0: detected capacity change from 0 to 128 [ 1311.912247][T16388] VFS: Found a Xenix FS (block size = 512) on device loop0 [ 1312.088067][T16388] sysv_free_block: trying to free block not in datazone [ 1312.135171][T16388] sysv_free_inode: inode 0,1,2 or nonexistent inode [ 1314.531413][T16409] 9pnet_virtio: no channels available for device syz [ 1316.045854][T16415] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1319.286365][T16436] netlink: 'syz.0.2625': attribute type 10 has an invalid length. [ 1319.499521][T16436] bridge0: port 3(team0) entered disabled state [ 1320.335716][T16436] device team0 left promiscuous mode [ 1320.341067][T16436] device team_slave_0 left promiscuous mode [ 1320.347139][T16436] device team_slave_1 left promiscuous mode [ 1320.353238][T16436] bridge0: port 3(team0) entered disabled state [ 1320.371516][T16436] batman_adv: batadv0: Adding interface: team0 [ 1320.378278][T16436] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1320.403628][T16436] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active [ 1320.425474][T16447] netlink: 'syz.0.2625': attribute type 10 has an invalid length. [ 1320.475377][T16447] netlink: 2 bytes leftover after parsing attributes in process `syz.0.2625'. [ 1320.723277][T16447] device team0 entered promiscuous mode [ 1320.729094][T16447] device team_slave_0 entered promiscuous mode [ 1320.739794][T16447] device team_slave_1 entered promiscuous mode [ 1320.769013][T16447] 8021q: adding VLAN 0 to HW filter on device team0 [ 1320.887091][T16460] netlink: set zone limit has 8 unknown bytes [ 1321.600006][T16447] batman_adv: batadv0: Interface activated: team0 [ 1321.737709][T16447] batman_adv: batadv0: Interface deactivated: team0 [ 1321.744791][T16447] batman_adv: batadv0: Removing interface: team0 [ 1321.756024][T16447] bridge0: port 3(team0) entered blocking state [ 1321.767290][T16447] bridge0: port 3(team0) entered disabled state [ 1321.792783][T16447] bridge0: port 3(team0) entered blocking state [ 1321.799242][T16447] bridge0: port 3(team0) entered forwarding state [ 1322.181824][T16472] loop4: detected capacity change from 0 to 128 [ 1322.286861][T16472] VFS: Found a Xenix FS (block size = 512) on device loop4 [ 1322.319442][T16476] loop8: detected capacity change from 0 to 128 [ 1322.327401][T16472] sysv_free_block: trying to free block not in datazone [ 1322.368735][T16472] sysv_free_inode: inode 0,1,2 or nonexistent inode [ 1322.405161][T16476] VFS: Found a Xenix FS (block size = 512) on device loop8 [ 1322.529486][T16476] sysv_free_block: trying to free block not in datazone [ 1322.539763][T16477] loop0: detected capacity change from 0 to 145 [ 1322.562464][T16476] sysv_free_inode: inode 0,1,2 or nonexistent inode [ 1322.707952][T16477] VFS: Found a Xenix FS (block size = 512) on device loop0 [ 1322.837315][T16477] sysv_free_block: trying to free block not in datazone [ 1322.891150][T16477] sysv_free_inode: inode 0,1,2 or nonexistent inode [ 1327.320637][T16508] loop0: detected capacity change from 0 to 137 [ 1327.468919][T16508] VFS: Found a Xenix FS (block size = 512) on device loop0 [ 1327.522544][T16508] sysv_free_block: trying to free block not in datazone [ 1327.531222][T16508] sysv_free_inode: inode 0,1,2 or nonexistent inode [ 1331.521372][T16557] syz.4.2656 (16557): drop_caches: 2 [ 1333.025942][T16564] loop8: detected capacity change from 0 to 128 [ 1333.097463][T16564] VFS: Found a Xenix FS (block size = 512) on device loop8 [ 1333.169757][T16564] sysv_free_block: trying to free block not in datazone [ 1333.190972][T16564] sysv_free_inode: inode 0,1,2 or nonexistent inode [ 1337.371380][T16616] netlink: set zone limit has 8 unknown bytes [ 1338.689536][T16619] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1338.786878][T16622] loop2: detected capacity change from 0 to 129 [ 1338.829653][T16622] VFS: Found a Xenix FS (block size = 512) on device loop2 [ 1338.879100][T16625] binder: BINDER_SET_CONTEXT_MGR already set [ 1338.888000][T16625] binder: 16623:16625 ioctl 4018620d 200002c0 returned -16 [ 1338.890281][T16622] sysv_free_block: trying to free block not in datazone [ 1338.954991][T16622] sysv_free_inode: inode 0,1,2 or nonexistent inode [ 1339.771973][T16631] loop0: detected capacity change from 0 to 151 [ 1339.886074][T16631] VFS: Found a Xenix FS (block size = 512) on device loop0 [ 1339.939007][T16631] sysv_free_block: trying to free block not in datazone [ 1340.255943][T16631] sysv_free_inode: inode 0,1,2 or nonexistent inode [ 1342.320785][T16654] loop5: detected capacity change from 0 to 128 [ 1342.352905][T16654] VFS: Found a Xenix FS (block size = 512) on device loop5 [ 1343.449960][T16654] sysv_free_block: trying to free block not in datazone [ 1343.460103][T16654] sysv_free_inode: inode 0,1,2 or nonexistent inode [ 1343.511482][T16658] netlink: set zone limit has 8 unknown bytes [ 1347.995605][T16712] netlink: 12 bytes leftover after parsing attributes in process `syz.8.2693'. [ 1348.141396][T16712] netlink: set zone limit has 8 unknown bytes [ 1350.033413][T16723] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1351.316752][T16736] loop2: detected capacity change from 0 to 144 [ 1351.330395][T16736] VFS: Found a Xenix FS (block size = 512) on device loop2 [ 1351.345100][T16736] sysv_free_block: trying to free block not in datazone [ 1351.356324][T16736] sysv_free_inode: inode 0,1,2 or nonexistent inode [ 1353.923612][T16765] netlink: 12 bytes leftover after parsing attributes in process `syz.8.2706'. [ 1354.145257][T16767] netlink: set zone limit has 8 unknown bytes [ 1355.106131][T16770] syz.8.2707 (16770): drop_caches: 2 [ 1355.392135][T16774] netlink: 80 bytes leftover after parsing attributes in process `syz.2.2708'. [ 1355.748298][T16779] loop4: detected capacity change from 0 to 138 [ 1355.770530][T16779] VFS: Found a Xenix FS (block size = 512) on device loop4 [ 1355.806610][T16779] sysv_free_block: trying to free block not in datazone [ 1355.836952][T16779] sysv_free_inode: inode 0,1,2 or nonexistent inode [ 1356.634329][T16783] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1357.145008][T16796] netlink: 80 bytes leftover after parsing attributes in process `syz.2.2713'. [ 1357.426689][T16793] loop5: detected capacity change from 0 to 149 [ 1357.518665][T16793] VFS: Found a Xenix FS (block size = 512) on device loop5 [ 1357.531296][T16793] sysv_free_block: trying to free block not in datazone [ 1357.560187][T16793] sysv_free_inode: inode 0,1,2 or nonexistent inode [ 1360.613731][T16821] syz.0.2720 (16821): drop_caches: 2 [ 1360.911594][T16827] loop2: detected capacity change from 0 to 139 [ 1360.955737][T16827] VFS: Found a Xenix FS (block size = 512) on device loop2 [ 1360.967042][T16827] sysv_free_block: trying to free block not in datazone [ 1360.980002][T16827] sysv_free_inode: inode 0,1,2 or nonexistent inode [ 1361.495594][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 1361.502040][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 1363.183607][T16833] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1363.533132][T16842] netlink: 80 bytes leftover after parsing attributes in process `syz.8.2727'. [ 1367.439244][T16875] loop8: detected capacity change from 0 to 140 [ 1367.507395][T16875] VFS: Found a Xenix FS (block size = 512) on device loop8 [ 1367.525993][T16875] sysv_free_block: trying to free block not in datazone [ 1367.536995][T16875] sysv_free_inode: inode 0,1,2 or nonexistent inode [ 1367.908016][T16879] netlink: 80 bytes leftover after parsing attributes in process `syz.0.2736'. [ 1369.378521][T16893] loop8: detected capacity change from 0 to 128 [ 1369.446888][T16893] VFS: Found a Xenix FS (block size = 512) on device loop8 [ 1369.606524][T16893] sysv_free_block: trying to free block not in datazone [ 1370.130884][T16898] netlink: 80 bytes leftover after parsing attributes in process `syz.4.2741'. [ 1370.287416][T16893] sysv_free_inode: inode 0,1,2 or nonexistent inode [ 1370.951615][ T22] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 1371.791395][ T22] usb 1-1: Using ep0 maxpacket: 8 [ 1371.802793][ T22] usb 1-1: config 0 interface 0 altsetting 253 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1371.918350][ T22] usb 1-1: config 0 interface 0 altsetting 253 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1371.959147][ T22] usb 1-1: config 0 interface 0 has no altsetting 0 [ 1371.989890][ T22] usb 1-1: New USB device found, idVendor=056a, idProduct=00bb, bcdDevice= 0.00 [ 1372.058542][ T22] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1372.125266][ T22] usb 1-1: config 0 descriptor?? [ 1372.373378][ T22] usbhid 1-1:0.0: can't add hid device: -71 [ 1372.379479][ T22] usbhid: probe of 1-1:0.0 failed with error -71 [ 1372.481385][ T22] usb 1-1: USB disconnect, device number 7 [ 1372.495382][T16917] netlink: 80 bytes leftover after parsing attributes in process `syz.4.2746'. [ 1373.495644][T16926] netlink: 80 bytes leftover after parsing attributes in process `syz.0.2749'. [ 1374.909075][T16940] netlink: 80 bytes leftover after parsing attributes in process `syz.0.2753'. [ 1375.198126][T16943] loop5: detected capacity change from 0 to 136 [ 1375.229078][T16943] VFS: Found a Xenix FS (block size = 512) on device loop5 [ 1375.255568][T16943] sysv_free_block: trying to free block not in datazone [ 1375.300920][T16943] sysv_free_inode: inode 0,1,2 or nonexistent inode [ 1377.744940][T16966] loop2: detected capacity change from 0 to 128 [ 1377.868811][T16966] VFS: Found a Xenix FS (block size = 512) on device loop2 [ 1377.912895][T16966] sysv_free_block: trying to free block not in datazone [ 1377.941883][T16966] sysv_free_inode: inode 0,1,2 or nonexistent inode [ 1379.610087][T16982] netlink: 80 bytes leftover after parsing attributes in process `syz.0.2764'. [ 1382.680727][T17004] loop4: detected capacity change from 0 to 137 [ 1382.741039][T17004] VFS: Found a Xenix FS (block size = 512) on device loop4 [ 1382.771110][T17004] sysv_free_block: trying to free block not in datazone [ 1382.784508][T17004] sysv_free_inode: inode 0,1,2 or nonexistent inode [ 1387.054626][T17049] loop8: detected capacity change from 0 to 130 [ 1387.120265][T17049] VFS: Found a Xenix FS (block size = 512) on device loop8 [ 1387.130432][T17049] sysv_free_block: trying to free block not in datazone [ 1387.143915][T17049] sysv_free_inode: inode 0,1,2 or nonexistent inode [ 1390.959053][T17078] netlink: 80 bytes leftover after parsing attributes in process `syz.0.2791'. [ 1391.361527][ T125] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 1391.581375][ T125] usb 6-1: Using ep0 maxpacket: 8 [ 1391.588243][ T125] usb 6-1: config 0 interface 0 altsetting 253 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1391.651572][ T125] usb 6-1: config 0 interface 0 altsetting 253 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1391.669389][ T125] usb 6-1: config 0 interface 0 has no altsetting 0 [ 1391.691730][ T125] usb 6-1: New USB device found, idVendor=056a, idProduct=00bb, bcdDevice= 0.00 [ 1391.701108][ T125] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1391.731082][ T125] usb 6-1: config 0 descriptor?? [ 1391.967495][ T125] usbhid 6-1:0.0: can't add hid device: -71 [ 1391.981629][ T125] usbhid: probe of 6-1:0.0 failed with error -71 [ 1391.996016][ T125] usb 6-1: USB disconnect, device number 12 [ 1395.180670][T17122] loop5: detected capacity change from 0 to 128 [ 1395.270925][T17122] VFS: Found a Xenix FS (block size = 512) on device loop5 [ 1395.279728][T17122] sysv_free_block: trying to free block not in datazone [ 1395.294543][T17122] sysv_free_inode: inode 0,1,2 or nonexistent inode [ 1395.474561][T17126] loop2: detected capacity change from 0 to 153 [ 1395.516905][T17126] VFS: Found a Xenix FS (block size = 512) on device loop2 [ 1395.632063][T17126] sysv_free_block: trying to free block not in datazone [ 1395.763909][T17126] sysv_free_inode: inode 0,1,2 or nonexistent inode [ 1400.027014][T17178] netlink: 80 bytes leftover after parsing attributes in process `syz.0.2816'. [ 1400.148798][T17180] binder: 17170:17180 ioctl 8818564c 20000f00 returned -22 [ 1402.775665][T17228] netlink: set zone limit has 8 unknown bytes [ 1406.564904][T17262] netlink: 80 bytes leftover after parsing attributes in process `syz.2.2833'. [ 1407.211412][T16492] usb 6-1: new high-speed USB device number 13 using dummy_hcd [ 1407.406024][T16492] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1407.447338][T16492] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1407.490371][T16492] usb 6-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 1407.521443][T16492] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1407.538330][T16492] usb 6-1: config 0 descriptor?? [ 1407.898577][T17275] netlink: 80 bytes leftover after parsing attributes in process `syz.0.2837'. [ 1408.176695][T16492] usbhid 6-1:0.0: can't add hid device: -32 [ 1408.204228][T16492] usbhid: probe of 6-1:0.0 failed with error -32 [ 1408.241868][T16492] usb 6-1: USB disconnect, device number 13 [ 1419.578612][T17387] netlink: 36 bytes leftover after parsing attributes in process `syz.8.2867'. [ 1419.781149][T17390] netlink: 80 bytes leftover after parsing attributes in process `syz.5.2868'. [ 1420.972300][T17398] netlink: 80 bytes leftover after parsing attributes in process `syz.2.2870'. [ 1421.279221][T17408] binder: 17403:17408 ioctl 8818564c 20000f00 returned -22 [ 1422.952228][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 1422.958679][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 1423.963980][T17439] netlink: set zone limit has 8 unknown bytes [ 1428.329917][T17469] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1428.565528][T17475] netlink: 80 bytes leftover after parsing attributes in process `syz.5.2890'. [ 1433.325166][T17520] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1438.141400][T12587] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 1438.337230][T12587] usb 1-1: Using ep0 maxpacket: 32 [ 1438.346853][T12587] usb 1-1: New USB device found, idVendor=0cde, idProduct=0023, bcdDevice=21.32 [ 1438.376093][T12587] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1438.416739][T12587] usb 1-1: Product: syz [ 1438.454462][T12587] usb 1-1: Manufacturer: syz [ 1438.470811][T12587] usb 1-1: SerialNumber: syz [ 1438.545314][T12587] usb 1-1: config 0 descriptor?? [ 1439.451389][T12587] usb 1-1: reset high-speed USB device number 8 using dummy_hcd [ 1439.543709][ T5683] usb 9-1: new high-speed USB device number 4 using dummy_hcd [ 1439.734206][ T5683] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1439.754465][ T5683] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1439.789144][ T5683] usb 9-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1439.826003][ T5683] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1439.877751][ T22] usb 1-1: USB disconnect, device number 8 [ 1439.896415][ T5683] usb 9-1: config 0 descriptor?? [ 1439.914712][ T5683] usbhid 9-1:0.0: couldn't find an input interrupt endpoint [ 1442.282108][ T5683] usb 9-1: USB disconnect, device number 4 [ 1446.048304][ T4592] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1446.260588][ T4592] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1446.384060][ T4592] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1446.409255][ T4262] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1446.420298][ T4262] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1446.429453][ T4262] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1446.439976][ T4262] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1446.467366][ T4262] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 1446.475007][ T4262] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1446.526988][ T4592] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1446.614646][T17641] syzkaller0 speed is unknown, defaulting to 1000 [ 1447.475632][T17641] chnl_net:caif_netlink_parms(): no params data found [ 1448.532945][ T4261] Bluetooth: hci0: command 0x0409 tx timeout [ 1448.908300][T17641] bridge0: port 1(bridge_slave_0) entered blocking state [ 1448.937914][T17641] bridge0: port 1(bridge_slave_0) entered disabled state [ 1448.986534][T17641] device bridge_slave_0 entered promiscuous mode [ 1449.463292][ T75] smc: removing ib device syz1 [ 1449.503757][T17641] bridge0: port 2(bridge_slave_1) entered blocking state [ 1449.541497][T17641] bridge0: port 2(bridge_slave_1) entered disabled state [ 1449.586239][T17641] device bridge_slave_1 entered promiscuous mode [ 1449.891247][T17641] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1449.945290][T17641] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1450.236862][T17641] team0: Port device team_slave_0 added [ 1450.398518][T17641] team0: Port device team_slave_1 added [ 1450.611926][ T4262] Bluetooth: hci0: command 0x041b tx timeout [ 1450.766484][T17641] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1450.810354][T17641] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1450.908650][T17641] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1451.041246][T17641] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1451.098548][T17641] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1451.181783][T17641] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1451.507917][T17641] device hsr_slave_0 entered promiscuous mode [ 1451.575217][T17641] device hsr_slave_1 entered promiscuous mode [ 1452.691528][ T4262] Bluetooth: hci0: command 0x040f tx timeout [ 1454.727799][T17722] process 'syz.8.2942' launched '/dev/fd/9' with NULL argv: empty string added [ 1454.771465][ T4262] Bluetooth: hci0: command 0x0419 tx timeout [ 1455.020007][ T4592] device hsr_slave_0 left promiscuous mode [ 1455.076069][ T4592] device hsr_slave_1 left promiscuous mode [ 1455.086824][ T4592] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1455.109151][ T4592] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1455.129012][ T4592] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1455.145630][ T4592] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1455.177128][ T4592] bridge0: port 3(team0) entered disabled state [ 1455.199639][ T4592] device bridge_slave_1 left promiscuous mode [ 1455.217709][ T4592] bridge0: port 2(bridge_slave_1) entered disabled state [ 1455.270659][ T4592] device bridge_slave_0 left promiscuous mode [ 1455.288532][ T4592] bridge0: port 1(bridge_slave_0) entered disabled state [ 1455.367154][ T4592] device veth1_macvtap left promiscuous mode [ 1455.375827][ T4592] device veth0_macvtap left promiscuous mode [ 1455.386581][ T4592] device veth1_vlan left promiscuous mode [ 1455.397205][ T4592] device veth0_vlan left promiscuous mode [ 1459.351032][ T4592] device team_slave_1 left promiscuous mode [ 1459.425917][ T4592] team0 (unregistering): Port device team_slave_1 removed [ 1459.640686][ T4592] device team_slave_0 left promiscuous mode [ 1459.705300][ T4592] team0 (unregistering): Port device team_slave_0 removed [ 1459.975476][ T4592] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1460.153330][ T4592] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1461.068395][T17778] kvm: emulating exchange as write [ 1462.185473][ T4592] bond0 (unregistering): Released all slaves [ 1462.887081][T17641] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 1462.941725][T17641] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 1463.001633][T17641] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 1463.091131][T17641] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 1463.702658][T17641] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1463.812368][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1463.854279][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1463.887516][T17641] 8021q: adding VLAN 0 to HW filter on device team0 [ 1463.978916][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1464.029076][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1464.102109][ T75] bridge0: port 1(bridge_slave_0) entered blocking state [ 1464.109357][ T75] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1464.273816][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1464.322350][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1464.336933][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1464.399538][ T75] bridge0: port 2(bridge_slave_1) entered blocking state [ 1464.406848][ T75] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1464.442504][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1464.455021][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1464.537423][ T4338] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1464.567440][ T4338] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1464.631997][ T4338] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1464.672029][ T4338] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1464.681150][ T4338] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1464.779662][ T4338] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1464.811952][ T4338] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1464.853925][T17641] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1464.917347][ T4742] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1464.956790][ T4742] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1466.118713][ T4448] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1466.132715][ T4448] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1466.184393][T17641] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1466.390723][ T4448] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1466.426307][ T4448] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1466.529683][ T4448] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1466.578190][ T4448] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1466.642725][ T4262] Bluetooth: hci1: unexpected event for opcode 0x0c0d [ 1466.661104][T17641] device veth0_vlan entered promiscuous mode [ 1466.682797][ T4448] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1466.698209][ T4448] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1466.718404][T17641] device veth1_vlan entered promiscuous mode [ 1466.889753][ T4742] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 1466.931197][ T4742] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 1467.008138][ T4742] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1467.066600][ T4742] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1467.304092][T17641] device veth0_macvtap entered promiscuous mode [ 1467.330616][ T4742] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1467.526883][T17851] netlink: set zone limit has 8 unknown bytes [ 1467.646016][T17641] device veth1_macvtap entered promiscuous mode [ 1468.143500][T17641] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1468.260375][T17641] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1468.319776][T17641] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1468.511848][T17641] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1468.550593][T17641] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1468.567864][T17641] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1468.587121][T17641] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1468.602841][T17641] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1468.651040][T17641] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1468.667229][ T4742] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1468.752235][ T4742] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1468.828001][T17641] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1468.867292][T17641] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1468.909093][T17641] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1468.922942][T17641] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1468.956326][T17641] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1468.974598][T17641] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1469.005630][T17641] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1469.029598][T17641] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1469.125927][T17641] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1469.168137][ T4592] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1469.182556][ T4592] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1469.199564][T17641] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1469.245173][T17641] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1469.345656][T17641] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1469.399293][T17641] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1469.849312][ T5233] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1469.935092][ T4302] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1469.954037][ T4302] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1469.970410][ T5233] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1470.019458][ T4302] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1470.120685][ T4302] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1470.639057][ T4262] Bluetooth: hci5: unexpected event for opcode 0x0c0d [ 1472.174243][ T4261] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1472.196805][ T4261] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1472.205556][ T4261] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1472.218505][ T4261] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1472.252519][ T4261] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 1472.261647][ T4261] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1472.844841][ T9533] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1472.941860][T17906] chnl_net:caif_netlink_parms(): no params data found [ 1473.017534][ T9533] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1473.216933][ T9533] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1473.337019][ T9533] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1473.445934][T17906] bridge0: port 1(bridge_slave_0) entered blocking state [ 1473.540081][T17906] bridge0: port 1(bridge_slave_0) entered disabled state [ 1473.570266][T17906] device bridge_slave_0 entered promiscuous mode [ 1473.605834][T17906] bridge0: port 2(bridge_slave_1) entered blocking state [ 1473.701318][T17906] bridge0: port 2(bridge_slave_1) entered disabled state [ 1473.726737][T17906] device bridge_slave_1 entered promiscuous mode [ 1473.794394][T17906] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1473.898925][T17906] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1474.106904][T17906] team0: Port device team_slave_0 added [ 1474.229424][T17906] team0: Port device team_slave_1 added [ 1474.381541][ T4261] Bluetooth: hci4: command 0x0409 tx timeout [ 1474.540901][T17906] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1474.560623][T17906] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1474.661469][T17906] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1474.674416][T17906] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1474.681458][T17906] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1474.708222][T17906] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1474.831467][T16462] usb 9-1: new high-speed USB device number 5 using dummy_hcd [ 1475.027303][T17906] device hsr_slave_0 entered promiscuous mode [ 1475.042872][T16462] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1475.064806][T16462] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1475.124869][T16462] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1475.198829][T16462] usb 9-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1475.239278][T16462] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1475.279097][T17906] device hsr_slave_1 entered promiscuous mode [ 1475.286647][T16462] usb 9-1: config 0 descriptor?? [ 1475.304800][T17906] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1475.335685][T17906] Cannot create hsr debugfs directory [ 1475.734309][T16462] plantronics 0003:047F:FFFF.0001: unknown main item tag 0x0 [ 1475.767217][T16462] plantronics 0003:047F:FFFF.0001: unknown main item tag 0x0 [ 1475.795293][T16462] plantronics 0003:047F:FFFF.0001: unknown main item tag 0x0 [ 1475.815547][T16462] plantronics 0003:047F:FFFF.0001: unknown main item tag 0x0 [ 1475.835819][T16462] plantronics 0003:047F:FFFF.0001: unknown main item tag 0x0 [ 1475.873636][T16462] plantronics 0003:047F:FFFF.0001: No inputs registered, leaving [ 1476.128062][T16462] plantronics 0003:047F:FFFF.0001: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.8-1/input0 [ 1476.268526][T16462] usb 9-1: USB disconnect, device number 5 [ 1476.451358][ T4261] Bluetooth: hci4: command 0x041b tx timeout [ 1476.987958][ T4261] Bluetooth: hci1: unexpected event for opcode 0x0c0d [ 1478.194992][T17977] tipc: Started in network mode [ 1478.199894][T17977] tipc: Node identity 7, cluster identity 4711 [ 1478.211474][T17977] tipc: Node number set to 7 [ 1478.531357][ T4261] Bluetooth: hci4: command 0x040f tx timeout [ 1478.859925][ T9533] device hsr_slave_0 left promiscuous mode [ 1478.873195][ T9533] device hsr_slave_1 left promiscuous mode [ 1478.912740][ T9533] batman_adv: batadv0: Removing interface: team0 [ 1478.932920][ T9533] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1478.959034][ T9533] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1478.987507][ T9533] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1479.016171][ T9533] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1479.038276][ T9533] device bridge_slave_1 left promiscuous mode [ 1479.059470][ T9533] bridge0: port 2(bridge_slave_1) entered disabled state [ 1479.089079][ T9533] device bridge_slave_0 left promiscuous mode [ 1479.098583][ T9533] bridge0: port 1(bridge_slave_0) entered disabled state [ 1479.247408][ T9533] device veth1_macvtap left promiscuous mode [ 1479.259573][ T9533] device veth0_macvtap left promiscuous mode [ 1479.292936][ T9533] device veth1_vlan left promiscuous mode [ 1479.342973][ T9533] device veth0_vlan left promiscuous mode [ 1480.611362][ T4261] Bluetooth: hci4: command 0x0419 tx timeout [ 1481.362074][ T9533] team0 (unregistering): Port device team_slave_1 removed [ 1481.470693][ T9533] team0 (unregistering): Port device team_slave_0 removed [ 1481.662987][ T9533] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1481.832918][ T9533] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1482.744807][ T9533] bond0 (unregistering): Released all slaves [ 1482.866432][T18004] tipc: Started in network mode [ 1482.882617][T18004] tipc: Node identity 7, cluster identity 4711 [ 1482.967879][T18004] tipc: Node number set to 7 [ 1483.758669][T17906] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 1483.840420][T17906] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 1483.977879][T17906] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 1484.374828][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 1484.381223][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 1484.584977][T17906] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 1484.631358][T18026] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1485.146739][T17906] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1485.229038][ T9533] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1485.289606][ T9533] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1485.337496][T17906] 8021q: adding VLAN 0 to HW filter on device team0 [ 1485.380804][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1485.405333][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1485.448925][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 1485.456083][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1485.527348][T18050] tipc: Started in network mode [ 1485.538470][T18050] tipc: Node identity 7, cluster identity 4711 [ 1485.584559][T18050] tipc: Node number set to 7 [ 1485.616671][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1485.638201][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1485.687401][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1485.731668][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 1485.738815][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1485.904548][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1485.963037][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1486.042202][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1486.126923][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1486.184929][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1486.306304][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1486.339005][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1486.413506][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1486.477330][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1486.561851][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1486.604446][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1486.639369][T17906] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1487.596468][ T4302] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1487.609753][ T4302] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1487.628274][T17906] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1489.221378][ T9653] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1489.259700][ T9653] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1489.330581][ T4742] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1489.379181][ T4742] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1489.449135][T17906] device veth0_vlan entered promiscuous mode [ 1489.472504][ T4742] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1489.494920][ T4742] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1489.591185][T17906] device veth1_vlan entered promiscuous mode [ 1489.698278][ T4540] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 1489.715379][ T4540] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 1489.739785][ T4540] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1489.759605][ T4540] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1489.772204][T17906] device veth0_macvtap entered promiscuous mode [ 1489.797923][T17906] device veth1_macvtap entered promiscuous mode [ 1489.900837][T17906] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1489.970412][T17906] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1490.118694][T17906] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1490.160650][T17906] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1490.225828][T17906] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1490.318604][T17906] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1490.411378][T17906] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1490.422549][T17906] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1490.442515][T17906] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1490.469086][ T4540] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1490.492541][ T4540] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1490.514626][ T4540] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1490.568592][ T4540] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1490.652697][T17906] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1490.712078][T17906] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1490.820077][T17906] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1490.923414][T17906] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1490.983356][T17906] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1491.017710][T17906] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1491.061114][T17906] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1491.149912][T17906] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1491.236838][T17906] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1491.301570][ T9653] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1491.325004][ T9653] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1491.407655][T17906] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1491.434381][T17906] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1491.497831][T17906] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1491.540360][T17906] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1492.047707][ T9533] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1492.069718][ T9533] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1492.137266][ T9653] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1492.248246][ T9533] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1492.293002][ T9533] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1492.352486][ T9653] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1494.394138][ T4261] Bluetooth: hci2: unexpected event for opcode 0x0c0d [ 1495.144320][ T4598] syz-executor (4598) used greatest stack depth: 19320 bytes left [ 1495.224465][ T9653] netdevsim netdevsim5 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1495.444023][ T9653] netdevsim netdevsim5 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1495.616312][ T9653] netdevsim netdevsim5 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1495.666287][ T4262] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1495.676114][ T4262] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1495.685759][ T4262] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1495.695142][ T4262] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1495.711601][ T4262] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 1495.718884][ T4262] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1495.824678][ T4261] Bluetooth: hci1: unexpected event for opcode 0x0c0d [ 1495.939104][ T9653] netdevsim netdevsim5 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1496.548979][ T9653] tipc: Left network mode [ 1496.970311][T18152] chnl_net:caif_netlink_parms(): no params data found [ 1497.812310][ T4261] Bluetooth: hci3: command 0x0409 tx timeout [ 1497.989071][T18152] bridge0: port 1(bridge_slave_0) entered blocking state [ 1498.012290][T18152] bridge0: port 1(bridge_slave_0) entered disabled state [ 1498.055521][T18152] device bridge_slave_0 entered promiscuous mode [ 1498.155736][T18152] bridge0: port 2(bridge_slave_1) entered blocking state [ 1498.178181][T18152] bridge0: port 2(bridge_slave_1) entered disabled state [ 1498.258591][T18152] device bridge_slave_1 entered promiscuous mode [ 1498.666378][T18152] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1498.753965][T18152] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1499.138408][ T9653] bond0: (slave wlan1): Releasing backup interface [ 1499.313412][T18152] team0: Port device team_slave_0 added [ 1499.374239][T18152] team0: Port device team_slave_1 added [ 1499.860165][ T9653] device hsr_slave_0 left promiscuous mode [ 1499.891445][ T4261] Bluetooth: hci3: command 0x041b tx timeout [ 1499.898629][ T9653] device hsr_slave_1 left promiscuous mode [ 1499.918185][ T9653] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1499.949723][ T9653] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1500.002079][ T9653] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1500.036493][ T9653] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1500.067025][ T9653] bridge0: port 3(team0) entered disabled state [ 1500.111752][ T9653] device bridge_slave_1 left promiscuous mode [ 1500.141289][ T9653] bridge0: port 2(bridge_slave_1) entered disabled state [ 1500.178605][ T9653] device bridge_slave_0 left promiscuous mode [ 1500.206751][ T9653] bridge0: port 1(bridge_slave_0) entered disabled state [ 1500.461039][ T9653] device veth1_macvtap left promiscuous mode [ 1500.480787][ T9653] device veth0_macvtap left promiscuous mode [ 1500.512342][ T9653] device veth1_vlan left promiscuous mode [ 1500.559259][ T9653] device veth0_vlan left promiscuous mode [ 1501.981541][ T4261] Bluetooth: hci3: command 0x040f tx timeout [ 1502.952417][ T9653] device team_slave_1 left promiscuous mode [ 1502.993364][ T9653] team0 (unregistering): Port device team_slave_1 removed [ 1503.089409][ T9653] device team_slave_0 left promiscuous mode [ 1503.102291][ T9653] team0 (unregistering): Port device team_slave_0 removed [ 1503.184394][ T9653] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1503.290732][ T9653] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1504.063396][ T4261] Bluetooth: hci3: command 0x0419 tx timeout [ 1504.476086][ T9653] bond0 (unregistering): Released all slaves [ 1504.789795][T18152] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1504.799668][T18152] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1504.839010][T18152] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1504.960039][T18152] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1504.978837][T18152] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1505.223900][T18152] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1505.419964][T18152] device hsr_slave_0 entered promiscuous mode [ 1505.480576][T18152] device hsr_slave_1 entered promiscuous mode [ 1505.546499][T18152] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1505.611210][T18152] Cannot create hsr debugfs directory [ 1507.686429][T18152] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 1507.715127][T18152] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 1507.748532][ T4261] Bluetooth: hci2: unexpected event for opcode 0x0c0d [ 1507.886584][T18152] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 1507.948226][T18152] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 1508.556607][T18152] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1508.578123][ T4540] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1508.617530][ T4540] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1508.702475][T18152] 8021q: adding VLAN 0 to HW filter on device team0 [ 1508.757999][ T9653] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1508.794388][ T9653] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1508.857991][ T9653] bridge0: port 1(bridge_slave_0) entered blocking state [ 1508.865252][ T9653] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1508.989495][ T9653] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1509.106374][ T9533] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1509.127617][ T9533] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1509.187257][ T9533] bridge0: port 2(bridge_slave_1) entered blocking state [ 1509.194431][ T9533] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1509.310764][ T9533] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1509.380764][ T9533] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1509.390019][ T9533] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1509.422652][ T9533] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1509.506234][ T9533] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1509.564572][ T9533] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1509.617737][ T9533] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1509.709664][ T9533] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1509.769348][ T9533] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1509.857365][T18152] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1509.945377][T18152] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1509.967191][ T9533] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1509.990721][ T9533] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1511.326836][ T9533] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1511.346880][ T9533] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1511.411892][T18152] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1513.203837][ T4448] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1513.235504][ T4448] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1513.342126][ T4448] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1513.381204][ T4448] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1513.460335][T18152] device veth0_vlan entered promiscuous mode [ 1513.477053][ T4448] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1513.535442][ T4448] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1513.558413][T18152] device veth1_vlan entered promiscuous mode [ 1513.737658][ T9533] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 1513.764694][ T9533] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 1513.826184][ T9533] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1513.879393][ T9533] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1513.973751][T18152] device veth0_macvtap entered promiscuous mode [ 1514.014534][T18152] device veth1_macvtap entered promiscuous mode [ 1514.175272][T18152] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1514.302640][T18152] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1514.363396][T18152] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1514.474872][T18152] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1514.502260][T18152] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1514.540032][T18152] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1514.611728][T18152] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1514.622454][T18152] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1514.634409][T18152] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1514.642794][ T9533] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1514.651038][ T9533] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1514.736207][ T9533] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1514.779939][ T9533] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1514.801809][T18152] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1514.838344][T18152] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1514.910129][T18152] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1514.993050][T18152] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1515.125163][T18152] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1515.172804][T18152] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1515.246833][T18152] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1515.359572][T18152] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1515.501054][T18152] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1515.570542][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1515.603239][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1515.695848][T18152] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1515.739263][T18152] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1515.801898][T18152] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1515.831928][T18152] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1516.270570][ T4742] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1516.354185][ T4742] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1516.416674][ T4540] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1516.430132][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1516.469852][ T4540] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1516.558995][ T4540] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1518.674896][ T9653] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1518.840795][ T9653] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1518.950289][ T9653] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1519.018918][T11899] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1519.030066][ T4262] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1519.040747][ T4262] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1519.051933][ T4262] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1519.060562][T11899] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 1519.068590][ T4262] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1519.274736][ T9653] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1519.937485][ T9653] tipc: Left network mode [ 1520.752065][T18448] chnl_net:caif_netlink_parms(): no params data found [ 1521.091618][ T4261] Bluetooth: hci2: command 0x0409 tx timeout [ 1521.463778][T18448] bridge0: port 1(bridge_slave_0) entered blocking state [ 1521.498418][T18448] bridge0: port 1(bridge_slave_0) entered disabled state [ 1521.556515][T18448] device bridge_slave_0 entered promiscuous mode [ 1521.678710][T18448] bridge0: port 2(bridge_slave_1) entered blocking state [ 1521.697945][T18448] bridge0: port 2(bridge_slave_1) entered disabled state [ 1521.757009][T18448] device bridge_slave_1 entered promiscuous mode [ 1521.993245][T18448] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1522.086833][T18448] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1522.648449][T18448] team0: Port device team_slave_0 added [ 1522.955584][T18448] team0: Port device team_slave_1 added [ 1523.067424][ T9653] device hsr_slave_0 left promiscuous mode [ 1523.096505][ T9653] device hsr_slave_1 left promiscuous mode [ 1523.143049][ T9653] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1523.171415][ T4261] Bluetooth: hci2: command 0x041b tx timeout [ 1523.225969][ T9653] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1523.290731][ T9653] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1523.336014][ T9653] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1523.379358][ T9653] bridge0: port 3(team0) entered disabled state [ 1523.435414][ T9653] device bridge_slave_1 left promiscuous mode [ 1523.473458][ T9653] bridge0: port 2(bridge_slave_1) entered disabled state [ 1523.521931][ T9653] device bridge_slave_0 left promiscuous mode [ 1523.572497][ T9653] bridge0: port 1(bridge_slave_0) entered disabled state [ 1523.814846][ T9653] device veth1_macvtap left promiscuous mode [ 1523.820898][ T9653] device veth0_macvtap left promiscuous mode [ 1523.881958][ T9653] device veth1_vlan left promiscuous mode [ 1523.887905][ T9653] device veth0_vlan left promiscuous mode [ 1525.251412][ T4261] Bluetooth: hci2: command 0x040f tx timeout [ 1526.363920][ T4261] Bluetooth: hci1: unexpected event for opcode 0x0c0d [ 1526.634871][ T9653] device team_slave_1 left promiscuous mode [ 1526.675030][ T9653] team0 (unregistering): Port device team_slave_1 removed [ 1526.886938][ T9653] device team_slave_0 left promiscuous mode [ 1526.936565][ T9653] team0 (unregistering): Port device team_slave_0 removed [ 1527.047519][ T9653] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1527.271665][ T9653] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1527.331455][ T4261] Bluetooth: hci2: command 0x0419 tx timeout [ 1527.758561][ T4262] Bluetooth: hci1: unexpected event for opcode 0x0c0d [ 1529.510753][ T9653] bond0 (unregistering): Released all slaves [ 1529.752997][T18448] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1529.800347][T18448] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1529.966290][T18448] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1530.021361][T18448] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1530.028524][T18448] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1530.054496][ C0] vkms_vblank_simulate: vblank timer overrun [ 1530.063835][T18448] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1530.275340][T18448] device hsr_slave_0 entered promiscuous mode [ 1530.400629][T18448] device hsr_slave_1 entered promiscuous mode [ 1530.428243][T18448] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1530.491494][T18448] Cannot create hsr debugfs directory [ 1530.717891][ T4262] Bluetooth: hci1: unexpected event for opcode 0x0c0d [ 1531.952035][T18448] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1532.031205][T18448] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1532.075874][T18448] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1532.152434][T18448] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1532.349022][T18448] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1532.389981][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1532.399308][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1532.472017][T18448] 8021q: adding VLAN 0 to HW filter on device team0 [ 1532.541959][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1532.599106][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1532.675007][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 1532.682173][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1532.845033][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1532.981802][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1533.063283][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1533.106854][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 1533.114177][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1533.213316][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1533.254915][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1533.321886][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1533.361482][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1533.431984][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1533.472002][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1533.511970][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1533.573280][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1533.622720][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1533.843595][T18448] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1534.156767][T18644] netlink: set zone limit has 8 unknown bytes [ 1534.702819][T18448] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1534.726469][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1534.748916][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1535.653920][ T4742] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1535.670443][ T4742] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1535.747578][T18448] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1535.930487][ T9653] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1535.960157][ T9653] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1536.088210][ T9653] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1536.139815][ T9653] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1536.160611][T18448] device veth0_vlan entered promiscuous mode [ 1536.218623][ T4352] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1536.230399][ T4352] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1536.283283][T18448] device veth1_vlan entered promiscuous mode [ 1536.349224][T18448] device veth0_macvtap entered promiscuous mode [ 1536.358969][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 1536.400623][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 1536.493314][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1536.548854][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1536.819220][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1537.154640][T18691] netlink: set zone limit has 8 unknown bytes [ 1537.751910][T18448] device veth1_macvtap entered promiscuous mode [ 1537.781150][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1537.838212][T18448] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1537.901689][T18448] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1537.949007][T18448] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1537.984627][T18448] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1538.029061][T18448] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1538.067888][T18448] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1538.104251][T18448] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1538.134461][T18448] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1538.193729][T18448] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1538.224835][ T4448] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1538.288051][ T4448] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1538.358238][T18448] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1538.409499][T18448] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1538.439126][T18448] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1538.504921][T18448] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1538.543240][T18448] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1538.560195][T18448] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1538.570815][T18448] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1538.591296][T18448] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1538.616070][T18448] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1538.635618][ T4352] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1538.650644][ T4352] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1538.822987][T18448] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1538.890007][T18448] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1539.215055][T18448] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1540.059916][T18448] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1540.414884][ T4262] Bluetooth: hci1: unexpected event for opcode 0x0c0d [ 1540.558544][ T9880] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1540.596832][ T9880] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1540.655106][ T5233] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1540.686755][ T4352] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1540.715376][ T4352] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1540.901481][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1544.194675][T18766] 9pnet_fd: Insufficient options for proto=fd [ 1544.212493][T18766] lo speed is unknown, defaulting to 1000 [ 1544.218877][T18766] lo speed is unknown, defaulting to 1000 [ 1544.233674][T18766] lo speed is unknown, defaulting to 1000 [ 1544.257302][T18766] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 1544.291525][T18766] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 1544.368353][T18766] lo speed is unknown, defaulting to 1000 [ 1544.381518][T18766] lo speed is unknown, defaulting to 1000 [ 1544.393681][T18766] lo speed is unknown, defaulting to 1000 [ 1544.405839][T18766] lo speed is unknown, defaulting to 1000 [ 1544.417426][T18766] lo speed is unknown, defaulting to 1000 [ 1545.814000][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 1545.820351][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 1547.989825][T18796] 9pnet_fd: Insufficient options for proto=fd [ 1548.007039][T18796] siw: device registration error -23 [ 1550.563566][T18812] 9pnet_fd: Insufficient options for proto=fd [ 1550.579778][T18812] siw: device registration error -23 [ 1551.876697][T18822] 9pnet_fd: Insufficient options for proto=fd [ 1551.885035][T18822] siw: device registration error -23 [ 1552.491529][T16462] usb 9-1: new high-speed USB device number 6 using dummy_hcd [ 1552.711441][T16462] usb 9-1: Using ep0 maxpacket: 16 [ 1552.760747][T16462] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1552.784136][T16462] usb 9-1: New USB device found, idVendor=046d, idProduct=c29c, bcdDevice= 0.00 [ 1552.794605][T16462] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1552.833290][T16462] usb 9-1: config 0 descriptor?? [ 1552.884379][T16462] usbhid 9-1:0.0: couldn't find an input interrupt endpoint [ 1554.674937][T18851] 9pnet_fd: Insufficient options for proto=fd [ 1554.689558][T18851] siw: device registration error -23 [ 1557.151412][T10547] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 1557.318679][T18877] 9pnet_fd: Insufficient options for proto=fd [ 1557.331404][T18877] siw: device registration error -23 [ 1558.181322][T10547] usb 3-1: Using ep0 maxpacket: 16 [ 1558.282754][T10547] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1558.292737][T10547] usb 3-1: New USB device found, idVendor=046d, idProduct=c29c, bcdDevice= 0.00 [ 1558.302757][T10547] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1558.312566][T10547] usb 3-1: config 0 descriptor?? [ 1558.424840][T10547] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 1558.666116][T18882] binder: transaction release 396 bad handle 1, ret = -22 [ 1558.707425][T16462] usb 9-1: USB disconnect, device number 6 [ 1558.762947][T18882] binder: 18878:18882 ioctl 8818564c 20000f00 returned -22 [ 1560.811351][ T5683] usb 6-1: new high-speed USB device number 14 using dummy_hcd [ 1561.051323][ T5683] usb 6-1: Using ep0 maxpacket: 16 [ 1561.072312][ T5683] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1561.127136][ T5683] usb 6-1: New USB device found, idVendor=046d, idProduct=c29c, bcdDevice= 0.00 [ 1561.201646][ T5683] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1561.278561][ T5683] usb 6-1: config 0 descriptor?? [ 1561.345242][ T5683] usbhid 6-1:0.0: couldn't find an input interrupt endpoint [ 1562.167866][T10547] usb 3-1: USB disconnect, device number 11 [ 1564.540524][T18926] binder: transaction release 402 bad handle 1, ret = -22 [ 1564.561351][T12587] usb 6-1: USB disconnect, device number 14 [ 1564.637686][T18929] binder: 18923:18929 ioctl 8818564c 20000f00 returned -22 [ 1565.918219][T18945] 9pnet_fd: Insufficient options for proto=fd [ 1565.931314][T18945] siw: device registration error -23 [ 1569.522144][ T5367] usb 9-1: new high-speed USB device number 7 using dummy_hcd [ 1569.798622][ T5367] usb 9-1: Using ep0 maxpacket: 16 [ 1570.284069][ T5367] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1570.529610][ T5367] usb 9-1: New USB device found, idVendor=046d, idProduct=c29c, bcdDevice= 0.00 [ 1570.981338][ T5367] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1571.217125][ T5367] usb 9-1: config 0 descriptor?? [ 1571.561274][T18980] netlink: set zone limit has 8 unknown bytes [ 1572.300591][T18983] binder: transaction release 408 bad handle 1, ret = -22 [ 1572.571587][T16492] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 1572.872047][T18989] binder: 18981:18989 ioctl 8818564c 20000f00 returned -22 [ 1573.171555][T16492] usb 5-1: Using ep0 maxpacket: 32 [ 1573.198566][T16492] usb 5-1: config 0 has an invalid interface number: 184 but max is 0 [ 1573.227641][T16492] usb 5-1: config 0 has no interface number 0 [ 1573.254317][T16492] usb 5-1: config 0 interface 184 has no altsetting 0 [ 1573.300799][T16492] usb 5-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 1573.357193][T16492] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1573.431272][T16492] usb 5-1: Product: syz [ 1573.437880][T16492] usb 5-1: Manufacturer: syz [ 1573.465896][T16492] usb 5-1: SerialNumber: syz [ 1573.543779][T16492] usb 5-1: config 0 descriptor?? [ 1573.597846][T16492] smsc75xx v1.0.0 [ 1574.006670][ T4261] Bluetooth: hci0: command 0x0406 tx timeout [ 1574.762521][T16492] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32 [ 1574.821493][T16492] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 1574.884478][T16492] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -61 [ 1575.178984][T16492] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -61 [ 1575.425522][T16492] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_reset [ 1575.463925][T16492] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -61 [ 1575.510916][T16492] smsc75xx: probe of 5-1:0.184 failed with error -61 [ 1575.551169][T16492] usb 5-1: USB disconnect, device number 9 [ 1575.921615][ T5367] usb 9-1: can't set config #0, error -71 [ 1575.959566][ T5367] usb 9-1: USB disconnect, device number 7 [ 1576.231625][ T5683] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 1577.691405][ T5683] usb 3-1: Using ep0 maxpacket: 16 [ 1577.699212][ T5683] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1577.979460][ T5683] usb 3-1: New USB device found, idVendor=046d, idProduct=c29c, bcdDevice= 0.00 [ 1578.061985][ T5683] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1578.498980][ T5683] usb 3-1: config 0 descriptor?? [ 1578.559655][T19032] siw: device registration error -23 [ 1578.634386][ T5683] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 1579.408916][T19028] 9pnet_fd: Insufficient options for proto=fd [ 1581.575131][T19053] siw: device registration error -23 [ 1582.461521][T12582] usb 3-1: USB disconnect, device number 12 [ 1586.470645][T19087] binder: BINDER_SET_CONTEXT_MGR already set [ 1586.477793][T19087] binder: 19072:19087 ioctl 4018620d 200002c0 returned -16 [ 1586.731120][T19091] binder: 19072:19091 ioctl 8818564c 20000f00 returned -22 [ 1589.157868][T19115] siw: device registration error -23 [ 1589.708385][T19117] 9pnet_fd: Insufficient options for proto=fd [ 1593.077260][T19134] siw: device registration error -23 [ 1594.877607][T19149] binder: transaction release 417 bad handle 1, ret = -22 [ 1594.903298][T19149] binder: 19141:19149 ioctl 8818564c 20000f00 returned -22 [ 1595.351386][T16492] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 1596.971450][T16492] usb 3-1: Using ep0 maxpacket: 32 [ 1596.979522][T16492] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1597.023135][T16492] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1597.040411][T16492] usb 3-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 1597.050265][T16492] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1597.067480][T16492] usb 3-1: config 0 descriptor?? [ 1597.085353][T16492] hub 3-1:0.0: USB hub found [ 1597.333327][T16492] hub 3-1:0.0: 1 port detected [ 1597.342342][T16462] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 1598.281579][T16462] usb 5-1: Using ep0 maxpacket: 32 [ 1598.293093][T16462] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1598.324639][T16462] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1598.336535][T16462] usb 5-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 1598.346175][T16462] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1598.380088][T16462] usb 5-1: config 0 descriptor?? [ 1598.558756][T16462] hub 5-1:0.0: USB hub found [ 1598.589120][T19175] device syzkaller1 entered promiscuous mode [ 1598.602539][T16462] hub 5-1:0.0: 1 port detected [ 1598.633789][T16492] hub 3-1:0.0: hub_ext_port_status failed (err = -71) [ 1598.703415][T19176] siw: device registration error -23 [ 1598.721503][T16492] usb 3-1: USB disconnect, device number 13 [ 1599.542166][ T4262] Bluetooth: hci4: command 0x0406 tx timeout [ 1599.968813][T19002] usb 5-1: USB disconnect, device number 10 [ 1605.461461][T16492] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 1606.361329][T16492] usb 1-1: Using ep0 maxpacket: 16 [ 1606.484886][T16492] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1606.539563][T16492] usb 1-1: New USB device found, idVendor=046d, idProduct=c29c, bcdDevice= 0.00 [ 1606.564297][T16492] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1606.594469][T16492] usb 1-1: config 0 descriptor?? [ 1606.613956][T16492] usbhid 1-1:0.0: couldn't find an input interrupt endpoint [ 1607.254357][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 1607.264527][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 1614.107032][T19271] binder: transaction release 423 bad handle 1, ret = -22 [ 1614.221858][T19273] binder: 19266:19273 ioctl 8818564c 20000f00 returned -22 [ 1617.353965][T12582] usb 1-1: USB disconnect, device number 9 [ 1619.571400][ T4262] Bluetooth: hci3: command 0x0406 tx timeout [ 1620.556618][T19321] binder: transaction release 429 bad handle 1, ret = -22 [ 1636.185140][T19424] binder: transaction release 435 bad handle 1, ret = -22 [ 1636.197228][T19424] binder: 19422:19424 ioctl 8818564c 20000f00 returned -22 [ 1647.764320][T19490] loop0: detected capacity change from 0 to 512 [ 1647.773589][T19490] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 1648.425255][T19490] EXT4-fs warning (device loop0): ext4_expand_extra_isize_ea:2809: Unable to expand inode 11. Delete some EAs or run e2fsck. [ 1648.461351][T19490] EXT4-fs (loop0): 1 truncate cleaned up [ 1648.486157][T19493] binder: transaction release 441 bad handle 1, ret = -22 [ 1648.488910][T19490] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 1648.513062][T19493] binder: 19478:19493 ioctl 8818564c 20000f00 returned -22 [ 1649.479561][ T4262] Bluetooth: hci2: command 0x0406 tx timeout [ 1649.742982][T17641] EXT4-fs (loop0): unmounting filesystem. [ 1652.517134][T19527] 9pnet_fd: Insufficient options for proto=fd [ 1653.124995][T19531] netlink: 24 bytes leftover after parsing attributes in process `syz.5.3369'. [ 1653.298969][T19539] binder: transaction release 447 bad handle 1, ret = -22 [ 1653.329983][T19539] binder: 19536:19539 ioctl 8818564c 20000f00 returned -22 [ 1657.901331][T10547] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 1657.950911][T19557] loop5: detected capacity change from 0 to 512 [ 1658.077675][T19557] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 1658.243755][T19557] EXT4-fs (loop5): 1 truncate cleaned up [ 1658.249444][T19557] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 1659.394654][T18152] EXT4-fs (loop5): unmounting filesystem. [ 1659.907761][T19578] random: crng reseeded on system resumption [ 1660.063035][T12582] usb 6-1: new high-speed USB device number 15 using dummy_hcd [ 1660.351292][T12582] usb 6-1: Using ep0 maxpacket: 32 [ 1660.380559][T12582] usb 6-1: config 0 has an invalid interface number: 67 but max is 0 [ 1660.396430][T12582] usb 6-1: config 0 has no interface number 0 [ 1661.323331][T12582] usb 6-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 1661.360591][T12582] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1661.390008][T12582] usb 6-1: Product: syz [ 1661.401400][T12582] usb 6-1: Manufacturer: syz [ 1661.406065][T12582] usb 6-1: SerialNumber: syz [ 1661.452209][T12582] usb 6-1: config 0 descriptor?? [ 1661.524983][T12582] smsc95xx v2.0.0 [ 1661.875364][T12582] smsc95xx 6-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 1661.941365][T12582] smsc95xx 6-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 1662.143192][T19591] loop2: detected capacity change from 0 to 512 [ 1662.159581][T19590] loop0: detected capacity change from 0 to 512 [ 1662.175454][T19591] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 1662.215827][T19590] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 1662.260398][T19591] EXT4-fs (loop2): 1 truncate cleaned up [ 1662.270175][T19590] EXT4-fs (loop0): 1 truncate cleaned up [ 1662.287751][T19590] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 1662.313031][T19591] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 1663.876549][T17641] EXT4-fs (loop0): unmounting filesystem. [ 1664.573740][T18448] EXT4-fs (loop2): unmounting filesystem. [ 1664.786605][T19603] loop2: detected capacity change from 0 to 512 [ 1664.801323][T12582] smsc95xx 6-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 1664.823765][T12582] smsc95xx: probe of 6-1:0.67 failed with error -71 [ 1664.859103][T19603] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 1664.879467][T12582] usb 6-1: USB disconnect, device number 15 [ 1664.902233][T19601] binder: BINDER_SET_CONTEXT_MGR already set [ 1664.989723][T19603] EXT4-fs (loop2): 1 truncate cleaned up [ 1664.996992][T19601] binder: 19600:19601 ioctl 4018620d 200002c0 returned -16 [ 1665.037543][T19603] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 1665.090854][T19610] binder: 19600:19610 ioctl 8818564c 20000f00 returned -22 [ 1666.158943][T18448] EXT4-fs (loop2): unmounting filesystem. [ 1666.806079][T19628] loop8: detected capacity change from 0 to 512 [ 1667.465456][T19628] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode [ 1667.537847][T19628] EXT4-fs (loop8): 1 truncate cleaned up [ 1667.544759][T19628] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: writeback. [ 1667.597380][T19640] netlink: 148 bytes leftover after parsing attributes in process `syz.0.3400'. [ 1668.701693][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 1668.709350][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 1668.868407][ T9963] EXT4-fs (loop8): unmounting filesystem. [ 1669.155962][T19659] lo speed is unknown, defaulting to 1000 [ 1669.408626][T19667] loop2: detected capacity change from 0 to 512 [ 1669.707762][T19667] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 1669.783456][T19667] EXT4-fs (loop2): 1 truncate cleaned up [ 1669.808952][T19667] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 1670.170626][T19673] loop8: detected capacity change from 0 to 512 [ 1670.179033][T19673] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode [ 1670.419002][T19673] EXT4-fs (loop8): 1 truncate cleaned up [ 1670.425275][T19673] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: writeback. [ 1671.537159][ T9963] EXT4-fs (loop8): unmounting filesystem. [ 1672.516798][T19696] random: crng reseeded on system resumption [ 1672.795419][T18448] EXT4-fs (loop2): unmounting filesystem. [ 1674.461629][T19719] IPVS: sync thread started: state = MASTER, mcast_ifn = veth1_virt_wifi, syncid = 2, id = 0 [ 1674.809095][T19726] random: crng reseeded on system resumption [ 1676.836833][T19742] random: crng reseeded on system resumption [ 1677.205483][T19750] loop8: detected capacity change from 0 to 128 [ 1680.217777][T19750] EXT4-fs: error -4 creating inode table initialization thread [ 1680.225751][T19750] EXT4-fs (loop8): mount failed [ 1683.924802][T19786] loop4: detected capacity change from 0 to 128 [ 1684.448430][T19786] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 1684.460498][T19786] ext4 filesystem being mounted at /86/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1684.549217][T19786] EXT4-fs error (device loop4): dx_make_map:1328: inode #2: block 18: comm syz.4.3437: bad entry in directory: inode out of bounds - offset=988, inode=128, rec_len=36, size=1024 fake=1 [ 1684.589712][T19786] EXT4-fs error (device loop4) in do_split:2095: Corrupt filesystem [ 1685.909259][T17906] EXT4-fs (loop4): unmounting filesystem. [ 1690.446372][T19843] loop0: detected capacity change from 0 to 128 [ 1693.461767][T19843] EXT4-fs: error -4 creating inode table initialization thread [ 1693.469724][T19843] EXT4-fs (loop0): mount failed [ 1693.956066][T19853] loop4: detected capacity change from 0 to 128 [ 1694.124794][T19853] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 1694.135205][T19853] ext4 filesystem being mounted at /89/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1695.684483][T17906] EXT4-fs (loop4): unmounting filesystem. [ 1696.236875][T19870] syz.4.3457[19870] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1696.237293][T19870] syz.4.3457[19870] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1698.369430][T19872] [ 1698.383163][T19872] ====================================================== [ 1698.390179][T19872] WARNING: possible circular locking dependency detected [ 1698.397193][T19872] 6.1.121-syzkaller #0 Tainted: G W [ 1698.403783][T19872] ------------------------------------------------------ [ 1698.410800][T19872] syz.2.3458/19872 is trying to acquire lock: [ 1698.416864][T19872] ffff888075c726d8 (&mm->mmap_lock){++++}-{3:3}, at: mmap_read_lock_killable+0x1d/0x60 [ 1698.426546][T19872] [ 1698.426546][T19872] but task is already holding lock: [ 1698.433999][T19872] ffff8880567e9bd0 (&sb->s_type->i_mutex_key#12){+.+.}-{3:3}, at: generic_file_write_iter+0x7f/0x310 [ 1698.444915][T19872] [ 1698.444915][T19872] which lock already depends on the new lock. [ 1698.444915][T19872] [ 1698.455316][T19872] [ 1698.455316][T19872] the existing dependency chain (in reverse order) is: [ 1698.464322][T19872] [ 1698.464322][T19872] -> #1 (&sb->s_type->i_mutex_key#12){+.+.}-{3:3}: [ 1698.473010][T19872] lock_acquire+0x1f8/0x5a0 [ 1698.478074][T19872] down_write+0x36/0x60 [ 1698.482776][T19872] process_measurement+0x446/0x21b0 [ 1698.488496][T19872] ima_file_mmap+0x121/0x1c0 [ 1698.493610][T19872] __se_sys_remap_file_pages+0x67a/0x8b0 [ 1698.499783][T19872] do_syscall_64+0x3b/0xb0 [ 1698.504742][T19872] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1698.511165][T19872] [ 1698.511165][T19872] -> #0 (&mm->mmap_lock){++++}-{3:3}: [ 1698.518769][T19872] validate_chain+0x1661/0x5950 [ 1698.524227][T19872] __lock_acquire+0x125b/0x1f80 [ 1698.529601][T19872] lock_acquire+0x1f8/0x5a0 [ 1698.534630][T19872] down_read_killable+0xc6/0xd10 [ 1698.540088][T19872] mmap_read_lock_killable+0x1d/0x60 [ 1698.545981][T19872] lock_mm_and_find_vma+0x2a7/0x2e0 [ 1698.551708][T19872] exc_page_fault+0x169/0x620 [ 1698.556903][T19872] asm_exc_page_fault+0x22/0x30 [ 1698.562306][T19872] fault_in_readable+0x1c8/0x340 [ 1698.567758][T19872] fault_in_iov_iter_readable+0xdb/0x270 [ 1698.573906][T19872] generic_perform_write+0x207/0x5e0 [ 1698.579708][T19872] __generic_file_write_iter+0x176/0x400 [ 1698.585855][T19872] generic_file_write_iter+0xab/0x310 [ 1698.591742][T19872] vfs_write+0x857/0xbc0 [ 1698.596534][T19872] ksys_write+0x19c/0x2c0 [ 1698.601405][T19872] do_syscall_64+0x3b/0xb0 [ 1698.606343][T19872] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1698.612761][T19872] [ 1698.612761][T19872] other info that might help us debug this: [ 1698.612761][T19872] [ 1698.622977][T19872] Possible unsafe locking scenario: [ 1698.622977][T19872] [ 1698.630416][T19872] CPU0 CPU1 [ 1698.635773][T19872] ---- ---- [ 1698.641137][T19872] lock(&sb->s_type->i_mutex_key#12); [ 1698.646648][T19872] lock(&mm->mmap_lock); [ 1698.653493][T19872] lock(&sb->s_type->i_mutex_key#12); [ 1698.661566][T19872] lock(&mm->mmap_lock); [ 1698.665892][T19872] [ 1698.665892][T19872] *** DEADLOCK *** [ 1698.665892][T19872] [ 1698.674027][T19872] 3 locks held by syz.2.3458/19872: [ 1698.679211][T19872] #0: ffff88804f138fe8 (&f->f_pos_lock){+.+.}-{3:3}, at: __fdget_pos+0x2ba/0x360 [ 1698.688436][T19872] #1: ffff88802fa78460 (sb_writers#5){.+.+}-{0:0}, at: vfs_write+0x269/0xbc0 [ 1698.697331][T19872] #2: ffff8880567e9bd0 (&sb->s_type->i_mutex_key#12){+.+.}-{3:3}, at: generic_file_write_iter+0x7f/0x310 [ 1698.708657][T19872] [ 1698.708657][T19872] stack backtrace: [ 1698.714564][T19872] CPU: 1 PID: 19872 Comm: syz.2.3458 Tainted: G W 6.1.121-syzkaller #0 [ 1698.724216][T19872] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 1698.734265][T19872] Call Trace: [ 1698.737545][T19872] [ 1698.740467][T19872] dump_stack_lvl+0x1e3/0x2cb [ 1698.745161][T19872] ? nf_tcp_handle_invalid+0x642/0x642 [ 1698.750630][T19872] ? print_circular_bug+0x12b/0x1a0 [ 1698.755827][T19872] check_noncircular+0x2fa/0x3b0 [ 1698.760764][T19872] ? mark_lock+0x9a/0x340 [ 1698.765102][T19872] ? add_chain_block+0x850/0x850 [ 1698.770033][T19872] ? lockdep_lock+0x11f/0x2a0 [ 1698.774720][T19872] ? reacquire_held_locks+0x660/0x660 [ 1698.780090][T19872] ? _find_first_zero_bit+0xd0/0x100 [ 1698.785380][T19872] validate_chain+0x1661/0x5950 [ 1698.790227][T19872] ? reacquire_held_locks+0x660/0x660 [ 1698.795605][T19872] ? __lock_acquire+0x125b/0x1f80 [ 1698.800632][T19872] ? reacquire_held_locks+0x660/0x660 [ 1698.806001][T19872] ? mark_lock+0x9a/0x340 [ 1698.810335][T19872] ? __lock_acquire+0x125b/0x1f80 [ 1698.815375][T19872] ? mark_lock+0x9a/0x340 [ 1698.819711][T19872] __lock_acquire+0x125b/0x1f80 [ 1698.824750][T19872] lock_acquire+0x1f8/0x5a0 [ 1698.829258][T19872] ? mmap_read_lock_killable+0x1d/0x60 [ 1698.834720][T19872] ? read_lock_is_recursive+0x10/0x10 [ 1698.840095][T19872] ? __might_sleep+0xb0/0xb0 [ 1698.844688][T19872] ? __schedule+0x1447/0x4570 [ 1698.849369][T19872] down_read_killable+0xc6/0xd10 [ 1698.854308][T19872] ? mmap_read_lock_killable+0x1d/0x60 [ 1698.859787][T19872] ? cmp_ex_search+0x70/0x90 [ 1698.864373][T19872] ? mmap_read_lock_killable+0x1d/0x60 [ 1698.869850][T19872] ? bsearch+0x8e/0xb0 [ 1698.873949][T19872] ? down_read_interruptible+0xc40/0xc40 [ 1698.879582][T19872] ? search_extable+0xaf/0xf0 [ 1698.884255][T19872] ? trim_init_extable+0x3c0/0x3c0 [ 1698.889370][T19872] ? fault_in_readable+0x1c8/0x340 [ 1698.894479][T19872] ? __init_rwsem+0x160/0x160 [ 1698.899199][T19872] ? print_irqtrace_events+0x210/0x210 [ 1698.904662][T19872] ? lockdep_hardirqs_on_prepare+0x438/0x7a0 [ 1698.910646][T19872] mmap_read_lock_killable+0x1d/0x60 [ 1698.915937][T19872] lock_mm_and_find_vma+0x2a7/0x2e0 [ 1698.921162][T19872] exc_page_fault+0x169/0x620 [ 1698.925874][T19872] asm_exc_page_fault+0x22/0x30 [ 1698.930740][T19872] RIP: 0010:fault_in_readable+0x1c8/0x340 [ 1698.936462][T19872] Code: 24 08 4c 8d b0 ff 0f 00 00 48 89 c3 4d 01 e6 49 81 e6 00 f0 ff ff 49 39 c6 72 70 e8 a2 b0 bf ff 4c 39 f3 74 73 4c 89 64 24 10 <44> 8a 23 43 0f b6 04 2f 84 c0 75 18 44 88 64 24 40 48 81 c3 00 10 [ 1698.956081][T19872] RSP: 0018:ffffc9000d7ff9e0 EFLAGS: 00050287 [ 1698.962236][T19872] RAX: ffffffff81caebce RBX: 00000000205b0000 RCX: 0000000000080000 [ 1698.970224][T19872] RDX: ffffc90017ecd000 RSI: 000000000007ffff RDI: 0000000000080000 [ 1698.978194][T19872] RBP: ffffc9000d7ffa98 R08: ffffffff81caeb66 R09: ffffffff84421285 [ 1698.986170][T19872] R10: 0000000000000002 R11: ffff888025411dc0 R12: 0000000000001000 [ 1698.994138][T19872] R13: dffffc0000000000 R14: 00000000205b1000 R15: 1ffff92001afff44 [ 1699.002117][T19872] ? fault_in_iov_iter_readable+0x45/0x270 [ 1699.007925][T19872] ? fault_in_readable+0x156/0x340 [ 1699.013042][T19872] ? fault_in_readable+0x1be/0x340 [ 1699.018157][T19872] ? fault_in_safe_writeable+0x250/0x250 [ 1699.023811][T19872] ? inode_to_bdi+0x65/0xd0 [ 1699.028322][T19872] fault_in_iov_iter_readable+0xdb/0x270 [ 1699.033959][T19872] generic_perform_write+0x207/0x5e0 [ 1699.039268][T19872] ? generic_file_direct_write+0x460/0x460 [ 1699.045072][T19872] ? __file_remove_privs+0x640/0x640 [ 1699.050367][T19872] ? generic_write_checks+0x15c/0x1c0 [ 1699.055749][T19872] ? clear_nonspinnable+0x60/0x60 [ 1699.060792][T19872] __generic_file_write_iter+0x176/0x400 [ 1699.066428][T19872] generic_file_write_iter+0xab/0x310 [ 1699.071805][T19872] vfs_write+0x857/0xbc0 [ 1699.076048][T19872] ? file_end_write+0x250/0x250 [ 1699.080918][T19872] ? __fget_files+0x28/0x4a0 [ 1699.085505][T19872] ? __fget_files+0x435/0x4a0 [ 1699.090203][T19872] ? __fdget_pos+0x2ba/0x360 [ 1699.094793][T19872] ? ksys_write+0x77/0x2c0 [ 1699.099211][T19872] ksys_write+0x19c/0x2c0 [ 1699.103537][T19872] ? print_irqtrace_events+0x210/0x210 [ 1699.109015][T19872] ? __ia32_sys_read+0x80/0x80 [ 1699.113778][T19872] ? syscall_enter_from_user_mode+0x2e/0x230 [ 1699.119778][T19872] ? lockdep_hardirqs_on+0x94/0x130 [ 1699.124990][T19872] ? syscall_enter_from_user_mode+0x2e/0x230 [ 1699.130966][T19872] do_syscall_64+0x3b/0xb0 [ 1699.135384][T19872] ? clear_bhb_loop+0x45/0xa0 [ 1699.140063][T19872] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1699.145961][T19872] RIP: 0033:0x7fb101985d29 [ 1699.150382][T19872] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1699.169991][T19872] RSP: 002b:00007fb1017ff038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1699.178403][T19872] RAX: ffffffffffffffda RBX: 00007fb101b76080 RCX: 00007fb101985d29 [ 1699.186372][T19872] RDX: 000000000208e24b RSI: 0000000020000100 RDI: 0000000000000007 [ 1699.194362][T19872] RBP: 00007fb101a01aa8 R08: 0000000000000000 R09: 0000000000000000 [ 1699.202330][T19872] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1699.210301][T19872] R13: 0000000000000000 R14: 00007fb101b76080 R15: 00007ffcff4f27f8 [ 1699.218290][T19872]