last executing test programs: 23m20.78668189s ago: executing program 32 (id=516): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000400)=0x1, 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f00000003c0)=@gcm_128={{0x303}, 'w\x00', "bb6710bc8150e4a1a117d7b27caf00", "fbef00", "3d8efa05fdffffff"}, 0x28) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$tun(r1, &(0x7f0000000340)=ANY=[], 0x141) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r1, 0x0) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000080)=@ccm_128={{0x303}, "a06adadb1e8816ec", "de0000006deed7f21d74bc440900", "9884f958", "fc4bd6b33a9b93ca"}, 0x28) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) recvfrom(r0, &(0x7f0000002800)=""/4071, 0xfffffffffffffdab, 0x17, 0x0, 0x0) writev(r0, &(0x7f00000005c0)=[{&(0x7f0000000140)="58ddb007a47a8b1f458ab677d557ca50def8e5bc61dbc50bca64f7e76268cd64007095adfef77465b69ec03139854d6f03d5f9bd019fe046035ef7049f48fcc7321c34faca94ff08f59edaf2ab55eedcc278df823564618627217a527b971bdfa0afd948a6cdb9e05ccaef35c22047246a7b97a8e1b645e51c47b296c759c8dfd56beb8fa15c800ad060ab378a269557bc053d9be903", 0x96}, {&(0x7f0000000300)="2ea63d218bc1023b2e6eceeb92d548803a43d4dddc2433c76650030c188f490311ff86da69fab1539139f6dda31739c2bb4412dd471137e2a53496c5f7707e01ccfb826f2eb96895230862e11d56c19af139de912ac5e68a99080e428443fcfba8b0460290c6275affe9953a97260b0304fd7ef159c9cd30cae1bcc75d568d353575ec3b5293fb80de85c7562804230489274831b2c17dccccc523ada66a46", 0x9f}, {&(0x7f0000000440)="63e73686513c53aec098be4b2dfc27b5be1f5f85f54c24efb8fc94ccaac29f1378e04daa49f8dcbda8b0faff57761a0ce8a311802e5dd07a159721cac7d2250f4359e04727386cc7d1a3e8bf93339f3df1340041f71046f2b1d9a80af70fb8246258d09c310af3bef017fde1fd8ce505cd4858549192a95e512257b6c676a7ebb41230e4e4fb23e9666bfdc8bc2ca77bbd11810836df4a6f3dbe3ee75c34b07c64e1af6d62d54fccb9f281eac16eca7129aa4355fd53", 0xb6}, {&(0x7f0000000500)="de21cff472aa580c2ee9f858", 0xc}, {&(0x7f00000015c0)="8fa68a274cab49b9c806172798e6a829701bb4eefee6919e0a30fa83a50170b6a3b499361f95ab6ff05f9001332b3a463b64282a924b0dcf6499c8c9b23d7290ab896ed6e2c7280dcda0336864e06d9570ea2cc78330859fa73080f5ddd3fd2b943287b312357816e9cfaa9e8941dd981f837506cabc6e016e507076819ff37d790c0b868166925649c9a74f4afc322ac971832fc3f12ba4dd3931c773134441bd46d9b10095eaabcfb846ac5fa9ea76f3547884091f073880656438f4406cf2051edb37139066dcaed45a544f5f92cccb1db0e2e503de3d4216d961dea1cbd9119a3f49b8bcdfe7078a7706296712eab5bd91b189f0140892b56c46912cc16dbe9fb469502eb67f36e8531dbfbed70615a836d32b5dabcf933201c97b29209e071433edb1b92ba47b514232654a36067c9b241737eb902ede1e18f99757339d2858bbe9c48484ec608e5fae534c4580d22fcd6ad28a786e0f5e675bc264ca03cf081038cb872e039100f94d25a7b5b9f2f18815e948aa65513c63a61e68c6a4ef4888980b54e3b7332112ee424e65172b2076528cd11cf63d7f4ff88c9eabf2c388bcb02beaa7e9c33cbe26149703fd3d511283739fa9638b1d6290a53b679227ee54d0fb232befdc92e59396c5bb818926e8a30a38a0aa358e1c818dbc27646fb4dc43168540cf724358d07124937cb3baa5365970e14240d727a8111d250202b39e8e3d6ff5e250eb09fdd83b8a129015567ae0f71a6b9166cd3718e3a83e711271f2ffd2d968e1153a38a8c5995e5c46fb8f22613690852bbea407b417eff9fd86e685025cbad82174164c3529407c4a27af5c6fdd911a4a87b7365655d5275c5719151b4440752785ff416a8e3a1f83f70e1f5d2538348b839f4e965e586e8b28a8aa94b79bc4e23d97d159af010918721be419234850fbeac52bb5de10a199f6591ab4deea9670e8b3d9f9341cddef4f3fe1b08a4f1943329cfa12c3972fc50525b8ebb5923235bbecd182d486169cf51e8c69259a404c0867328943358e95ad690a9c8eea73ddde677ebfe6f0d5f2e3a03541291e09a30bcce4b66550c28c6ba6cc431bb0fa87848652fb9319577a38a8ad45a87647b523fe3e452d90306c4c690b47d3c840ebbb1d96abb0735b21f557f5de101b7fbb7618d9739fabf89b8fb34c02493d1bfc31e80b1a9fcdac8aaf0fd69a0aee6f456705420ea3e7df30b478dd12ee137a6d6747750e5d6a7e5d308276c0ebd77377f000296108954f5371a9c84a01a18a76bee8ea849ddaf492a35f943ac395b9dddbd5ee05f6d75ac40237a0690584d7afaa3e117135b1406e03c9e49223ee48feccab18a3fd0325ed281bc70fb41b4f13905744afcbb588b8daee6d635007cf96dbd9549726c4cf9e350072702058bb533a4bb598a06e5505e8393b2793cc6ac2d66a0529b2aa7991a30f8bdd2bec5ac7ca2064e7b3a2a2d510de4675a7a6ce5d1729c2b98dbb08ab4a33cbd83484092d48b9c4fac7b7b6191057a2acf109565c6d49d9be0f1f2838650cdc36ad835fd78be83c6df052659ed1e8242d45891442a54205311da1814b18ed7fcc7c5bd979434040cd2133fd35ab946ff87e807a48a4802a1e4cce7cef4f2f555029cdecadaf99c5c3bf65db4be3940bfedb87cc491ac59d027496d87a792961f1f59cb72df3280b1845722282745fa77dfa1fce5e67e09466475c0e988719e528d39815cdfe0d16a6de1d871cfc4778ed47e8a7d3b2dfeea2083a41b061848324fe15e90c2dac3303992fdc42ba1a1995b87154a618660094a942074c5e02ed1a11293c5276b06439468f99c9d184c0152c44308c64c432277fe367a7fac9c9fb08d9dc8949e8ab9740a357fdc9d69df07375d011947b43072f554d63831af4319664e735c3eb08c0afe5120bd89b4d0654b6266aa4709ea2beb3dfd0449d2c3fde3f1098c9f73d994a741bb9f3c5322743c310fd7881856e5d529f4a9eb7dc43c0be6c36653b2cda92a7f07247450d666ca88863c6880d656eb8006bfe2f96543bf683fe3126e03ccf2120878a4fc46bdf64e11e323637ae0024a3d6fa52729591758c36a5ddeff1d1c5ba3e1bfedad1ff460f05ce276f1f3c2d70f9c6c5927a8fd15e65bc9c648b7dfccde510f5bf46bab8f2c5e21cb129dbf3f4df7a5a831f198f21fee429d73646eab00b1542941108592708fe8f53613d6b7dc1e4999374317b57c1e4a974fedd089c4295682d1a03d770b7639e80d25b0f428dfd3c46be492fc80b5c4913e476845a359dbe4187fd0027bd9fc814ba6a2877b61b637878f2af7ef18a085852456089efae8a13d3e6ac9d28c18cb1ca54522066edbf9e67ab4cf158b63c7b4d25146bafa14163cd4d171ad97f3ef93cfabae0557e237bbbe9cb80144b03f6fdb7d357d253235ddbde503829403657fdde516d3974091c40c6b9dd245f730458e1fd594f6b694af0150cbd31b6d0fb3bc04eb5096e704e039eecf4be9e93eb2f841878538ed1c46d015b1a792b599ed9225577460f72e6b4e271e5e6eeed34f69cfd76683e21d87e3ee8ed88df79901f9354823824fa6b67a91e2626161436327fc58879085d87db5dd94e09a0d24c7c381fb8fdc7198d2c2fece49e6496a119023852fca717d2ff2f9ed5e0715ddebd267ed0b8378ad852b03a539e6d03025b4a04f2483bdb79a4bd233ce3b6bd30d736ad0784b978861badc236e7106d23f26eac50e93d8ab012dc7c5d85d4f944aaa27378efc99572f932344cddc488ffa9210dc6b8f0cc29d07110362485eaa5b4b196a49c7080633c1befe802207ed0a172fa0b61fea6305f04d7b755a6e5e162aa8047f80647ad0bae8143226ce3aa8de3b0c0fc4e7cd6baab274fba47abf95ae88584778325250063855a4b9f0c966efa43dc0196d3dec619c490181c259b341b3fd370bab0b66af3cb1e9365cf6b62e44d939d36ffcc6badb924f44e86337360efbf4e3f9bd716adbc3f0ba6055ec9790504c9f3865f47e422b1c6ba16c07d0df618cc572b36ec8e519db90a499424a7d689e6fbcc9be1abd843512ec16540c6c7c6d6e2cf50ab2014e4208c2abb0ddfd2ef9dece79389f21d7a9985903f7f01b0394d268349fa41a487bacfe8deba2ffca815ad0b1c6ffa5af2eba6d9436ad298c4e11b68451c7ff001c02ddd3ceb153a865327845349e8b817aa8ed24924f49260f8209d0ddcacf5306d9222320776162fe8396914fa22c85bc261661fa547c3063e20ca37c0862c3b9abd3da9b02e3f58d89be00003509bae9b82f60975c0687c500bb213a580f6e9f08b207d7c31748e3fda05a0cc76b1fdd563610a2bb09a57020d85026a57a178c38839b5b88cd8434d1f0308d872c7356a6445de801ff14c133bda3b42b9ca099fb3ee0d5c7a835f56ed30aa75d47cd97c329b682879290faee167334500d2fe596564f3e4064f41cf3469aaae846f1e84f3d8a7f42d98d0b6b67913c376d6bbde3027aa41b753ace165f88379981685f918ada5043800b5e0a0865dcda94df85fefa9348d6ec4e1ffbd940d023fbbd3b77d5db572981dbe40cbae9f010c1ea02718b1c4b7d0447c9d83d1afea58097a0467d6cdd47aef05f97dab63462f6ea61f4b611040b30e7cf60a499aa9d0bc50c08463f25a47d2dbc958fe1d1cf2399dcf1952987b6fcbc97bf73b12177c374c8fd56c8228fc796c958687104f4eb9d46ab80eeeeedb7096a67ee440ae92a65cbf6f81939e3d1050c67245036b5dcc13d577fbb4d9c3fbf2e2e61aa154074ae225c54e23289c4ef41a07a49a9d40f3103f4c9dfd4d750cc646adadd2e1fe24c74ce099d753d4c59d806a0b7f576ac37ac58a51a120f93162c43d16c1f7e5289c75f5f0a5b838d020040c9ce512ca35d08f42acd24cdbc2e6b1ac3c6809a5ed9e272155e9fa55349bc3ce0e3f2d1624dc60e2396b954587bbab275f38911e86b826b85730c6670a92a221cdcbf18ee0c44aec4591fcd12204b3049a1b5da1215a4cf88ecbe2d877ef975f4f661999d17d7d9ec14e0895ce25034dac4705d50ae42ca162778d0dcfc4e9180517be0daca5deb10773f93e2c61a5fe9b823218a97c35d0d7b436b2e1afb670b5a4c6dacd401afd1832c1dd96e8eba7734954070c6796cc80707441404cfe95fabf214bf03a6e4643ca559c2b8dcf1fa871114f3dc973a056c9aee7cd0ed4cbaf18298377e750869551632c1713bd8372e3f117a02edf0a68d2c01245459d9e78597ac1eec75064024c1f3c98260d34b611ba8fa4b2022babd44b76ea70c718df8268dba447038b1539f0499603cf2d79bcc49c35a8cf38892d982d153d72253a22ae68da65e84d6399e81a14ebf89ba446630814d9dcf8914acafc8603a5396167c5aa99814af62c1c39a6ba76ad2c6c51a6d56d89fbda5334e626540ef1b1ecad53247531fcdd661a48d28a6d48bac8ef70c888b00db57edceee94425df5161e1b1a1bec9c897e01867442ed8ba000b5f75832a8ec57ef0737994b95f40eac48f3c8da5db80e965fcdf3f0bbb4439a7123b59987f0fdac96bc7ce09c013562ff7c0cb23a882828e45a51f7e748db90c5eaacfdf3657d11a348f747ddd860387de41be3376a5dabf4296bc05282cb73fcd60c4a4148d9e872ae86e30b22db1ce5452ad9fe3fea029f94a583d301e74eac1818da3f1279c63690db6e7166ddaacd1278716fa3221daaa27c98fd97b88e63208d604505ad8f31bd2b83a19f89480b71198d8a31c89cadd258ce338afe1a26b0db248c1a39fe027716e417e45bb6c9a68cab1cd6c3445e9796ee1003650e97eccdadc9bea540e2c8253652c8f1586ba7e508cd29d53467bad11eef729796dbe83d3fc0bc15762c2f1de34c6380a6725f94600a82d87ccf80948babcadec31ca654671d17de360f20aaf04f4d44951661fe8fe7731174ec3aaf330aebeaed9620f694859785a36c5f787ce35e4425ed3387710fa346f04db11255c6985fa4cdbe54d25c942264b3383d60903bd2677611850fe12", 0xde9}], 0x5) syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), r0) setsockopt$sock_int(r0, 0x1, 0x7, &(0x7f00000000c0)=0xffff1884, 0x4) 22m27.899668819s ago: executing program 2 (id=585): syz_mount_image$vfat(&(0x7f0000000240), &(0x7f0000000280)='./file0\x00', 0x8000, &(0x7f0000000740)=ANY=[@ANYBLOB="636865636b3d7374726963742c757466383d312c757466383d312c6e66732c6572726f72733d72656d6f756e742d726f2c73686f72746e616d653d77696e6e742c00043518f9aad8a4f2c1cdb3e993cf0444d9d2d40bb509d4da042c2c85e3650de97db42c38cafa7a9d7503c3c985486cf7fc80515e9bef7e9e56fb346de370b3eb3ecbc59d343c36bf04efc3d68033308b0014b0c677eef7536f8115edae5ef2932cc05f566112668fa4f6844dcf823618a2993da771384e8fc12467a56b33e3b00030dbfd82ea2f8ddbeb1d04bac86815ebe0b9d084d60edf56b15e74589892dce86962f611a4313120b738dddfd38d20b443570197dc795020ecf541601ef9a5618869febf769dd50261849a47e170ba166b97e76a0261d0dc1fb3e2646595f1c8b49057d94f10f7b5e35ead0a38", @ANYBLOB="5490f41e89db5c6987bb89944e3ce8a9d74aa557beeb12bf7bf4a19bec956b719f048f1e043475577b7adb3114dbb00a614a03808dfe14f5f5c2dd1b71c4d5a6a09435057b932b0b", @ANYRESHEX], 0x3, 0x240, &(0x7f0000000500)="$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") bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/asound/seq/clients\x00', 0x0, 0x0) read$FUSE(r3, &(0x7f0000000480)={0x2020}, 0x2020) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000040)='./file1\x00', 0x21081e, &(0x7f00000001c0)={[{@grpquota}, {@nogrpid}, {@quota}]}, 0x1, 0x4fa, &(0x7f00000005c0)="$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") 22m24.413416945s ago: executing program 2 (id=593): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0xfffffffc, @empty, 0x7}, 0x1c) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)={0x38, r2, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast1=0xac1414aa}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1}]}]}, 0x38}}, 0x0) listen(r0, 0xc) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r3, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r4, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)={0x30, r5, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast1=0xac1414aa}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x3}]}]}, 0x30}}, 0x0) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, 0x0, 0x0) openat$nci(0xffffffffffffff9c, 0x0, 0x2, 0x0) syz_genetlink_get_family_id$nfc(0x0, 0xffffffffffffffff) close(0x3) 22m20.826614745s ago: executing program 2 (id=600): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='new default user:syz 00040'], 0x2a, 0x0) r4 = add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe) add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0x5ba8, 0xfffffffffffffffd) keyctl$read(0xb, r4, &(0x7f0000000240)=""/112, 0xd9) 22m18.444311548s ago: executing program 2 (id=601): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0xffffffffffffffff}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000380)=0x7) r0 = getpid() bind$inet6(0xffffffffffffffff, 0x0, 0x0) sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f00000001c0)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000140)='./file1\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) 22m3.390912824s ago: executing program 33 (id=601): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0xffffffffffffffff}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000380)=0x7) r0 = getpid() bind$inet6(0xffffffffffffffff, 0x0, 0x0) sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f00000001c0)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000140)='./file1\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) 21m17.992630917s ago: executing program 34 (id=650): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mount(0x0, 0x0, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./debug\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./debug\x00', &(0x7f00000000c0)='debugfs\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./debug/tracing/trace_pipe\x00', 0x800, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./debug/tracing/trace_pipe\x00', &(0x7f0000000100), 0x2008040, &(0x7f0000000180)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r3, @ANYBLOB=',wfdno=', @ANYRESHEX=r4]) 17m27.832033812s ago: executing program 35 (id=972): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r2, {0x0, 0x2}, {0xffff, 0xffff}, {0xd, 0xf}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r5 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) close(r5) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}) r6 = socket$kcm(0x11, 0x3, 0x0) r7 = socket(0x400000000010, 0x3, 0x0) r8 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=@newtfilter={0x84, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r9, {0x1, 0x4}, {}, {0x8}}, [@filter_kind_options=@f_matchall={{0xd}, {0x50, 0x2, [@TCA_MATCHALL_ACT={0x4c, 0x2, [@m_gact={0x48, 0x1, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x8, 0x2, 0x10000000, 0x400, 0x9}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}]}]}}]}, 0x84}}, 0x0) sendmsg$kcm(r6, &(0x7f0000002900)={&(0x7f0000000500)=@xdp={0x2c, 0x8, r4, 0x109}, 0x80, &(0x7f0000000600)=[{&(0x7f00000002c0)="d8", 0x1}], 0x1}, 0x20000885) 16m12.750550169s ago: executing program 36 (id=1072): socket$inet6(0x10, 0x2, 0x4) r0 = socket(0x11, 0xa, 0x0) sendmmsg(r0, &(0x7f0000000080), 0x0, 0x24044015) sendmsg$TIPC_NL_PUBL_GET(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[], 0x50}, 0x1, 0x0, 0x0, 0x4008080}, 0x8000) request_key(0x0, 0x0, &(0x7f0000000340)='\x8e\x00\x9e\xbb\x1e\x1av\xe8M\x00d\xaaI\x00\x00\x00\x00\x00\x00\t<\xe5u\xedA\xa7\aT\xdd\xd1{\xff\xcb\xdb\xb11\xc2s\xcb\xbf\x04\x00\x00\x00<\xfe\xf9\f\xe6E\b\x00\xd7\x85q\xc4\xab\xbd&\x92\x89(\xf3\"\xceJ\x19\x185\xa6- \xe6uK\xe1D\x8f\x9f\x92\xca\x93#\xf5E\xc2\x91Yl\x17\a\x02\t\x17\x7f\xc4\xde\x04\x9b\x89#\xf6&[\xd81\xb3\xdc\x00\x04\x15\x03\x17R\xd24\xeb\xb5\xc2\xff\x1bnF\x8e\xe4\'\x18\xba9.\xd4\xd9\xc6\x98\x8f\xc6D!p\xbeV\xb7x\r@\x1b5\x8br\x11\xdex\x19\x89\xdc\x1el\xcd\x13\xb6\xc2\xdb\x1fr2\x7f?\xfe\x0f\x04\x11\xc3\x8f:uXQ\x0f\v\xfc\xff\x7fL\xfb\xa8]\xd4\xd7\x13?\xe3<#\x1f\x9a\x03C\x8f\xe7\rV1\x99\xaf@Re\x18J\xb6\xee\xeeAnR\n\x8a\xe4\x1a:&\xc7\x15B\x8aG\xa4\a`\xee\xaf\x80T\xddo\xc4D^z\xbf\x1c\x87F?!k\'\xc3\xf9\xa3\xd9\x85\xb1N%\x17\f\xd0#\x05^\xf7\x11\x13\xadKb\x8ck\x10\xd3 >\t\xe0\x16\x80\x82\xb3\xcc\xc7\x05*\x9b\x0eQ\x92\xd7\xbaO\x06\xb2\xdc\xe7/\x1f\x90]IB94(evFMJ\x85\xc4S\xa8\x8b\xbe\xd3\x90\xe9\t\x00\x13\x1e\x9a\x94\x00\x00\x00\x00\x00U\xfbLA\xa6K\xd5\x0eD\xf2Y\xc3,\t4hD\xc4o\xc3\x87$\x9d6\xc8\x93\xa3\x8e:\xfe#\xa0`\xb1k\xacz\xe0\xb3\x95\x17\xdf\xc7\xc2\xedKc\xa3\xbd\xc2\x9f\x86C(/\xe3\xb2\xc6$s^\xd1vU\x9cB)ao\xf1\'', 0xffffffffffffffff) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0xa90d, 0x2, 0x2, 0x257}) openat(0xffffffffffffff9c, 0x0, 0x1, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xfffffffffffffffe, 0x4031, 0xffffffffffffffff, 0x7542d000) r2 = userfaultfd(0x80001) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000000040)={0xaa, 0x358}) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f00000002c0)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x5}) ioctl$UFFDIO_REGISTER(r2, 0xc020aa04, &(0x7f0000000000)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x0, 0x2}) 15m35.301191954s ago: executing program 37 (id=1111): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x47) close(0xffffffffffffffff) socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mount(0x0, 0x0, 0x0, 0x0, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFCONF(r4, 0x8912, &(0x7f0000002c00)=@buf) 13m5.515220719s ago: executing program 9 (id=1267): syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x804, &(0x7f0000000380)=ANY=[@ANYBLOB="756e695f786c6174653d302c757466383d312c73686f72746e616d653d77696e6e742c756e695f786c6174653d302c73686f72746e616d653d6d697865642c757466383d302c73686f72746e616d653d77696e6e742c756e695f786c6174653d302c757466383d312c6572726f72733d72656d6f756e742d726f2c636865636b3d7374726963742c73686f72746e616d653d77696e39352c73686f72746e616d653d77696e6e742c696f636861727365743d63703934392c757466383d302c636f6465706167653d3836392c00a8c083848e73321f9801dfbaddc615fa29c04eac3de3814ed0b60507d2eb356434ab8f52dfa5d498ced1d32d399d4bd8a72813cc3ef7026a6449360c807c7b7252b89f0af8422df7ae9a966c845aa03291cd9889c4c7ad6950b1bc19f680ee64eec3b4e734f1094591acb6dc3dd17df828333de719cf03c78268de6080d71f4417b812201d8627ee2322f6c25bce1116a6"], 0xfe, 0x28b, &(0x7f00000008c0)="$eJzs3cFqK2UUAOAzyaRJdJEsXIlwB3Th6nLrE7TIFcSCoGShLvTiTUGaUGghUBXTrnwCn8DncSO+gA+guLMLcWQykzSRSbU1beT2+zY9nP+c+c9khnaVv5+9Nj56fnx6ePH1z9HpJNHYi724TKIfjZg7j1o//VqfBwD+5y7zPH7LS+0ydbZa0VrTmTbufDgA4E4s//3f9iwAwP348KOP39s/OHj6QZZ1IsbfTgZJlD/L9f3D+CJGMYwn0Ys/IvKFMn7n3YOnkWaFfrwxnk4GRef40x+q6+//EjHr341e9Ov7d7PSUv90MmjFS9X+e6MYvv999OKV+v63avpjsBNvvr40/+PoxY+fx3GM4nk127z/m90sezv/7vevPimyRX8ynQzai7q0rG7e+8MBAAAAAAAAAAAAAAAAAAAAAOCF9Thb6K+evzM/+P+a9ZXzgS4XZ/IUpkvn8zzJsixPyvqr/jReTaujdQAAAAAAAAAAAAAAAAAAAOCBOz378ujZaDQ82Wgw/1p/zVL8uZppR8Tt93r0r4pbV5loVqONkoib7dWK9qzzn4ubN7yLbjHP8CRJY3OPIFlkustLj6Lcq8h0y2Ap859378QsmL9dR8+S9Q83nQWdupdkA0Fe8/o1V2saswlnmZ2/t3erO6i5cvea3XdevtXMeW/NUhIRrcWHef11Wpv9DMtNz+/p9xAAAAAAAAAAAAAAAAAAALD8/f+axYstDAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAW3D1//9vEEyr5nU1ebMI0qgyW75FAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHoC/AgAA//9iBGi+") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x10000000}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0) sendmsg$key(0xffffffffffffffff, 0x0, 0x0) dup(0xffffffffffffffff) mount$9p_fd(0x0, &(0x7f00000001c0)='.\x00', &(0x7f0000000180), 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) 13m1.300963351s ago: executing program 9 (id=1272): socket$inet6_sctp(0xa, 0x1, 0x84) move_mount(0xffffffffffffffff, 0x0, 0xffffffffffffff9c, 0x0, 0x144) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, 0x0, 0x0) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000300)=0x4, 0xf) ioctl$VIDIOC_SUBDEV_G_FMT(0xffffffffffffffff, 0xc0585604, &(0x7f00000001c0)={0x0, 0x0, {0x4d39580f, 0x2, 0x3008, 0x3, 0xb, 0x6, 0x1}}) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = openat$cgroup_int(r2, &(0x7f0000000040)='hugetlb.1GB.limit_in_bytes\x00', 0x2, 0x0) r4 = open(&(0x7f00000000c0)='./bus\x00', 0x1e5842, 0x0) mbind(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x2, &(0x7f0000001800)=0x7, 0x6, 0x1) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r5, 0x0, 0x40) r6 = open(&(0x7f0000000080)='./bus\x00', 0x145542, 0x40) ftruncate(r6, 0x2007ffd) sendfile(r3, r4, 0x0, 0x1000a3) 12m44.806377126s ago: executing program 38 (id=1272): socket$inet6_sctp(0xa, 0x1, 0x84) move_mount(0xffffffffffffffff, 0x0, 0xffffffffffffff9c, 0x0, 0x144) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, 0x0, 0x0) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000300)=0x4, 0xf) ioctl$VIDIOC_SUBDEV_G_FMT(0xffffffffffffffff, 0xc0585604, &(0x7f00000001c0)={0x0, 0x0, {0x4d39580f, 0x2, 0x3008, 0x3, 0xb, 0x6, 0x1}}) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = openat$cgroup_int(r2, &(0x7f0000000040)='hugetlb.1GB.limit_in_bytes\x00', 0x2, 0x0) r4 = open(&(0x7f00000000c0)='./bus\x00', 0x1e5842, 0x0) mbind(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x2, &(0x7f0000001800)=0x7, 0x6, 0x1) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r5, 0x0, 0x40) r6 = open(&(0x7f0000000080)='./bus\x00', 0x145542, 0x40) ftruncate(r6, 0x2007ffd) sendfile(r3, r4, 0x0, 0x1000a3) 11m22.810224372s ago: executing program 7 (id=1364): socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)) openat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x103a42, 0x133) creat(&(0x7f0000000080)='./file1\x00', 0x8) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42042, 0x1cb) socket$packet(0x11, 0x3, 0x300) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)) socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000006c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000680), 0x901800, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000040)={0x3, 0x2, 0x3000, 0x1000, &(0x7f0000feb000/0x1000)=nil}) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0xa, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="7b87f20f"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) syz_kvm_setup_cpu$x86(r3, r4, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x4, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 11m20.648469666s ago: executing program 7 (id=1368): r0 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r2, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) recvmmsg(r2, &(0x7f0000005700)=[{{0x0, 0x0, &(0x7f0000003380)=[{0x0}], 0x1}, 0x4}], 0x1, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000840)={0x6, 0x64, &(0x7f0000000680)=ANY=[], 0x0, 0x5, 0x0, 0x0, 0x60ff78ce1cb3c070, 0x0, '\x00', 0x0, 0x25, r0}, 0x94) close(0x3) openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000000480)={0x2020}, 0x2020) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r3 = syz_open_dev$usbmon(&(0x7f0000000000), 0x6, 0x200) ioctl$MON_IOCX_MFETCH(r3, 0xc00c9207, &(0x7f0000000080)={&(0x7f0000000040), 0x0, 0x7fff}) readv(r3, &(0x7f0000000040), 0x2000000000000213) syz_open_dev$usbfs(&(0x7f0000000240), 0x10, 0x80100) 11m16.294555523s ago: executing program 7 (id=1372): r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) add_key$fscrypt_v1(&(0x7f0000000180), &(0x7f0000000240)={'fscrypt:', @desc3}, &(0x7f0000000800)={0x0, "1b104e81c4144fe8c5e108d432df1d6d339c151537c56119f8b116fd9ee6ec68d4f8e848484a097e97e46b4d4ac2c5b4d0d08663fdcae2a8df4839b28bc2d2b7", 0x15}, 0x48, r0) add_key$keyring(&(0x7f0000000300), &(0x7f0000000780)={'syz', 0x3}, 0x0, 0x0, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000740)={'fscrypt:', @auto=[0x30, 0x65, 0x37, 0x30, 0x30, 0x30, 0x39, 0x30, 0x66, 0x30, 0x30, 0x64, 0x30, 0x30, 0x65, 0x30]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x3b}, 0x48, r0) add_key$keyring(&(0x7f0000000900), &(0x7f0000000940)={'syz', 0x2}, 0x0, 0x0, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000001c0)={'fscrypt:', @desc4}, &(0x7f0000000640)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff0011223344556677889900bbccddeeff", 0x34}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000200)={'fscrypt:', @auto=[0x30, 0x30, 0x65, 0x30, 0x30, 0x39, 0x30, 0x30, 0x30, 0x66, 0x38, 0x30, 0x30, 0x30, 0x66, 0x34]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000007c0)={'fscrypt:', @auto=[0x64, 0x30, 0x66, 0x30, 0x62, 0x32, 0x30, 0x34, 0x30, 0x30, 0x39, 0x66, 0x30, 0x30, 0x63, 0x66]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000280)={'fscrypt:', @auto=[0x31, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x36]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000002c0)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x35, 0x30, 0x62, 0x35, 0x39, 0x51, 0x64, 0x62, 0x30, 0x64, 0x30, 0x30, 0x37]}, &(0x7f0000000580)={0x0, "00112233445566778899aabbccdd2233445566778899c8bbccddeeff00", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000600)={'fscrypt:', @auto=[0x30, 0x62, 0x30, 0x39, 0x62, 0x30, 0x30, 0x35, 0x39, 0x37, 0x30, 0x30, 0x35, 0x30, 0x36, 0x38]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000340)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x39, 0x39]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000440), &(0x7f0000000380)={'fscrypt:', @auto=[0x30, 0x34, 0x62, 0x30, 0x30, 0x30, 0x30, 0x64, 0x30, 0x30, 0x31, 0x30, 0x37, 0x63, 0x66, 0x61]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff0011223344556677878d486ca0bac53400112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000003c0)={'fscrypt:', @auto=[0x30, 0x39, 0x62, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x62, 0x30, 0x35, 0x33, 0x62]}, &(0x7f0000000100)={0x0, "00112233100000008899aabbccddeeff00112233445566fd8899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aebbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000400)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x66, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x39, 0x64, 0x38, 0x63]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000480)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x38, 0x32, 0x30, 0x6e, 0x30, 0x30, 0x30, 0x30, 0x30, 0x35, 0x30, 0x30, 0x65]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000004c0)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x32, 0x30, 0x32, 0x30, 0x30, 0x32, 0x66, 0x30, 0x30, 0x38, 0x37]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000500)={'fscrypt:', @auto=[0x30, 0x64, 0x30, 0x30, 0x64, 0x30, 0x30, 0x30, 0x30, 0x35, 0x30, 0x30, 0x30, 0x30, 0x66, 0x64]}, &(0x7f00000006c0)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x23}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000540)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x35, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x39, 0x31, 0x31]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aa00000000ff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) 11m14.149990555s ago: executing program 7 (id=1377): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = bpf$ITER_CREATE(0x21, &(0x7f0000000140), 0x8) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r1, 0x7a8, &(0x7f00000001c0)={{@local, 0x7}, @my=0x1, 0x8, 0x100, 0x10000, 0x4, 0x8, 0x1, 0x20d}) socket$inet6(0xa, 0x80803, 0x87) syz_emit_ethernet(0xa2, &(0x7f00000002c0)=ANY=[], 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, r2, {0x2, 0x4e24, @multicast2}, 0x2, 0x0, 0x3}}, 0x26) r3 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r3, &(0x7f0000000280)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x2, 0xffff, 0x2, 0x0, {0xa, 0x0, 0xfffffffe, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x400}}}, 0x32) r4 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r4, &(0x7f0000000040)=@pppol2tpv3={0x18, 0x1, {0x3, 0xffffffffffffffff, {0x2, 0x4e21, @broadcast}, 0x2, 0x9800, 0xfffffffd}}, 0x2e) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sched_setattr(0x0, &(0x7f0000000200)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r5 = openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) r6 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r6, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x18}}, 0x2, 0x1}}, 0x2e) ioctl$PPPIOCATTCHAN(r5, 0x40047438, &(0x7f0000000500)=0x2) ioctl$PPPIOCBRIDGECHAN(r5, 0x40047435, &(0x7f0000000100)=0x1) 11m7.33377319s ago: executing program 7 (id=1383): prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x200000000001, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f0000000000), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(r2, 0x8, &(0x7f00000002c0)=0x80000000000003) setresuid(0x0, 0xee00, 0x0) capset(&(0x7f0000000500)={0x20080522}, &(0x7f0000000200)={0x200002, 0x200003, 0x803, 0x4, 0x7}) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x181) syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3009042, 0x0, 0x1, 0x0, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000140)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) setxattr$security_capability(0x0, 0x0, 0x0, 0x0, 0x0) 11m1.119345246s ago: executing program 7 (id=1393): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000980)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(r3, 0x47, &(0x7f0000000200)=0x7) r5 = creat(0x0, 0x66) quotactl_fd$Q_SETINFO(r5, 0xffffffff80000601, 0x0, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$sock_int(r6, 0x1, 0x21, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0xd, 0x17, &(0x7f00000007c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x7}, {{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, {{0x5, 0x0, 0x6}, {0x66, 0x0, 0x0, 0x6}}, [@printk={@lu, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x1, 0x5, 0x1, 0x9}, {0x7, 0x0, 0x3}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x2}, {0x56}}], {{0x4, 0x1, 0x2, 0x3}, {0x5, 0x0, 0xb, 0x3}, {0x85, 0x0, 0x0, 0x78}}}, &(0x7f0000000040)='GPL\x00', 0xa, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 10m45.737809709s ago: executing program 39 (id=1393): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000980)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(r3, 0x47, &(0x7f0000000200)=0x7) r5 = creat(0x0, 0x66) quotactl_fd$Q_SETINFO(r5, 0xffffffff80000601, 0x0, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$sock_int(r6, 0x1, 0x21, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0xd, 0x17, &(0x7f00000007c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x7}, {{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, {{0x5, 0x0, 0x6}, {0x66, 0x0, 0x0, 0x6}}, [@printk={@lu, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x1, 0x5, 0x1, 0x9}, {0x7, 0x0, 0x3}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x2}, {0x56}}], {{0x4, 0x1, 0x2, 0x3}, {0x5, 0x0, 0xb, 0x3}, {0x85, 0x0, 0x0, 0x78}}}, &(0x7f0000000040)='GPL\x00', 0xa, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 10m21.454855396s ago: executing program 6 (id=1418): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000240)={0x2, 0x4e20, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000ccb000)={0x2, 0x4e20, @local}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x4, [@enum={0x2, 0x0, 0x0, 0xf}]}, {0x0, [0x0, 0x5f]}}, 0x0, 0x28}, 0x20) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000040)={0x2, 0x4, 0x4, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, r4, 0x0, 0x1}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r5 = syz_open_dev$vbi(&(0x7f0000000340), 0x0, 0x2) ioctl$VIDIOC_S_INPUT(r5, 0xc0045627, &(0x7f00000000c0)=0x3) ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(r5, 0xc0845657, &(0x7f0000000200)={0x0, @bt={0x8a5, 0x96, 0x1, 0x1, 0xd59f80, 0x9, 0x6, 0x19ef, 0x3, 0x4, 0x27ff, 0x2800, 0x2, 0xbb6, 0x0, 0x1c, {0x80008, 0xff7ffbff}, 0xd0, 0x9}}) 10m15.986084126s ago: executing program 6 (id=1420): setresuid(0x0, 0xee00, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r0, 0x220c) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r2, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r3, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r4, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r5, 0x9) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r6, 0x0) r7 = socket$netlink(0x10, 0x3, 0x8000000004) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r8, 0x7c2) writev(r7, &(0x7f0000000040)=[{&(0x7f0000000200)="580000001400192340834b80040d8c560a06e7bc45ff810500000000000058000b480000945f64009400050028925a01000000000000008000f0fffeffa809000000fff5dd0000001000010002081000418e00000004fcff", 0x58}], 0x1) 10m15.670480941s ago: executing program 6 (id=1421): syz_init_net_socket$x25(0x9, 0x5, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB=',rootmode=000000000000000001000']) syz_emit_ethernet(0x4e, &(0x7f0000000000)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @link_local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "00cd04", 0x18, 0x3a, 0xff, @loopback, @private2, {[], @mld={0x82, 0x0, 0x0, 0x0, 0x1, @dev={0xfe, 0x80, '\x00', 0x3f}}}}}}}, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) socket(0x2, 0x80805, 0x0) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_open_dev$sndctrl(&(0x7f0000000080), 0x0, 0x0) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f00000001c0), r0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r3, 0x0, 0x0) sendmsg$NFQNL_MSG_CONFIG(r3, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20004094}, 0x40400d4) bind$bt_hci(0xffffffffffffffff, 0x0, 0x0) sendmsg$NL802154_CMD_GET_SEC_LEVEL(r0, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000640)={0x20, r2, 0x703, 0x70bd25, 0x25dfdbfe, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x20}, 0x1, 0x0, 0x0, 0x26040000}, 0x4) 10m14.450495409s ago: executing program 6 (id=1422): mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) syz_usb_ep_write$ath9k_ep1(0xffffffffffffffff, 0x82, 0xa8, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r3, 0x1, &(0x7f0000000040)='source\x00', &(0x7f0000000080)='0.0.0.0:0:/\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r4, &(0x7f0000000000)='3', 0x4e) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) 10m12.893724443s ago: executing program 6 (id=1425): socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x200000000001, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) add_key$keyring(0x0, 0x0, 0x0, 0xfeffff, 0xfffffffffffffffd) r4 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r4, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(r4, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1d}}, 0x10) sendto$inet(r4, &(0x7f0000000000), 0xffffffffffffff94, 0xb, 0x0, 0x0) recvfrom$inet(r4, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0xc9100120, 0x0, 0xfffffffffffffd25) 10m10.517832867s ago: executing program 6 (id=1428): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xa62d6000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x15, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x69, 0x11, 0x16}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0xa0}, @exit], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_reuseport, 0xffffffffffffffff, 0x6}, 0x70) r3 = socket$inet(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFADDR(r3, 0x8916, &(0x7f0000000000)={'veth0_to_team\x00', {0x2, 0x4e26, @rand_addr=0xfffffc13}}) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000940)=ANY=[@ANYBLOB="02000000040000000800"], 0x50) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFBR(r4, 0x8940, &(0x7f0000000040)=@add_del={0x2, &(0x7f0000000000)='ip6erspan0\x00'}) ioctl$sock_SIOCGIFBR(r5, 0x8941, 0x0) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) 9m55.250981624s ago: executing program 40 (id=1428): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xa62d6000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x15, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x69, 0x11, 0x16}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0xa0}, @exit], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_reuseport, 0xffffffffffffffff, 0x6}, 0x70) r3 = socket$inet(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFADDR(r3, 0x8916, &(0x7f0000000000)={'veth0_to_team\x00', {0x2, 0x4e26, @rand_addr=0xfffffc13}}) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000940)=ANY=[@ANYBLOB="02000000040000000800"], 0x50) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFBR(r4, 0x8940, &(0x7f0000000040)=@add_del={0x2, &(0x7f0000000000)='ip6erspan0\x00'}) ioctl$sock_SIOCGIFBR(r5, 0x8941, 0x0) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) 9m18.840529219s ago: executing program 0 (id=1472): socket(0x10, 0x3, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x4, &(0x7f0000006680)) r0 = syz_open_procfs(0x0, &(0x7f0000000100)='ns\x00') getdents(r0, &(0x7f0000000140)=""/72, 0x48) mremap(&(0x7f00005ab000/0x1000)=nil, 0x1000, 0x1000, 0x7, &(0x7f0000ffe000/0x1000)=nil) mq_unlink(&(0x7f0000000080)='\x00') syz_usb_connect(0x0, 0x24, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000cc1ef420890b070064ef000000010902120001000000000904"], 0x0) execveat(0xffffffffffffff9c, 0x0, 0x0, 0x0, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000200), 0x400, 0x0) r1 = landlock_create_ruleset(&(0x7f00000002c0)={0x7f6e, 0x2}, 0x18, 0x0) landlock_restrict_self(r1, 0xe) socket$nl_route(0x10, 0x3, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8) 9m8.900151132s ago: executing program 0 (id=1480): r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) add_key$keyring(&(0x7f0000000300), &(0x7f0000000780)={'syz', 0x3}, 0x0, 0x0, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000740)={'fscrypt:', @auto=[0x30, 0x65, 0x37, 0x30, 0x30, 0x30, 0x39, 0x30, 0x66, 0x30, 0x30, 0x64, 0x30, 0x30, 0x65, 0x30]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x3b}, 0x48, r0) add_key$keyring(&(0x7f0000000900), &(0x7f0000000940)={'syz', 0x2}, 0x0, 0x0, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000180)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x32]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000001c0)={'fscrypt:', @desc4}, &(0x7f0000000640)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff0011223344556677889900bbccddeeff", 0x34}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000200)={'fscrypt:', @auto=[0x30, 0x30, 0x65, 0x30, 0x30, 0x39, 0x30, 0x30, 0x30, 0x66, 0x38, 0x30, 0x30, 0x30, 0x66, 0x34]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000007c0)={'fscrypt:', @auto=[0x64, 0x30, 0x66, 0x30, 0x62, 0x32, 0x30, 0x34, 0x30, 0x30, 0x39, 0x66, 0x30, 0x30, 0x63, 0x66]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000280)={'fscrypt:', @auto=[0x31, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x36]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000002c0)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x35, 0x30, 0x62, 0x35, 0x39, 0x51, 0x64, 0x62, 0x30, 0x64, 0x30, 0x30, 0x37]}, &(0x7f0000000580)={0x0, "00112233445566778899aabbccdd2233445566778899c8bbccddeeff00", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000600)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x39, 0x62, 0x30, 0x30, 0x35, 0x30, 0x30, 0x30, 0x30, 0x35, 0x30, 0x36, 0x38]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000340)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x39, 0x39]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000440), &(0x7f0000000380)={'fscrypt:', @auto=[0x30, 0x34, 0x62, 0x30, 0x30, 0x30, 0x30, 0x64, 0x30, 0x30, 0x31, 0x30, 0x37, 0x63, 0x66, 0x61]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff0011223344556677878d486ca0bac53400112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000003c0)={'fscrypt:', @auto=[0x30, 0x39, 0x62, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x62, 0x30, 0x65, 0x33, 0x62]}, &(0x7f0000000100)={0x0, "00112233100000008899aabbccddeeff00112233445566fd8899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aebbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000400)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x66, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x39, 0x64, 0x38, 0x63]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000500)={'fscrypt:', @auto=[0x30, 0x64, 0x30, 0x30, 0x64, 0x30, 0x30, 0x30, 0x30, 0x35, 0x30, 0x30, 0x30, 0x30, 0x66, 0x64]}, &(0x7f00000006c0)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x23}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000540)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x35, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x39, 0x37, 0x31]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aa00000000ff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$user(&(0x7f0000000000), &(0x7f0000000080)={'syz', 0x2}, &(0x7f00000000c0)='c', 0x1, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000000c0)={'fscrypt:', @desc2}, &(0x7f0000000280)={0x0, "28ceb3e0791d62b8b62265e3c05d5c87b67e89baf42aa931804784f51d5b21c321f0b462bf6a5adcb2da779a473e0ea0db0dcf964c5b49e3f733a518c74d2d7a", 0x40}, 0x48, r0) 9m7.633993752s ago: executing program 0 (id=1475): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7001}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000640)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x104, 0xe}}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x4}, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) r5 = socket$kcm(0x11, 0x3, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r6) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000480)={'syzkaller0\x00', 0x0}) r8 = socket(0x400000000010, 0x3, 0x0) r9 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000640)=@newtfilter={0x3c, 0x2c, 0xd3f, 0x30bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r10, {0xb}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_basic={{0xa}, {0xc, 0x2, [@TCA_BASIC_CLASSID={0x8, 0x1, {0x0, 0xfff1}}]}}]}, 0x3c}}, 0x0) setsockopt$sock_attach_bpf(r5, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r5, &(0x7f0000000300)={&(0x7f0000000380)=@xdp={0x2c, 0x0, r7, 0x7}, 0x80, &(0x7f00000001c0)=[{&(0x7f0000000180)="27030200080314000e00072f01000000000000113cfdcb00000080ed00827600000000000100", 0x26}, {&(0x7f0000000780)="9942d6af00007f8f", 0x8}], 0x2}, 0x5) 9m4.75364697s ago: executing program 0 (id=1479): r0 = io_uring_setup(0xe67, 0x0) r1 = socket$rds(0x15, 0x5, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = syz_open_dev$radio(&(0x7f0000000100), 0x2, 0x2) ioctl$VIDIOC_QUERYMENU(r5, 0xc02c5625, &(0x7f0000001080)={0x98f904, 0x0, @value=0x9}) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x8000) setsockopt$sock_int(r1, 0x1, 0x3c, &(0x7f0000000080)=0x1, 0x4) bind$rds(r1, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) sendmsg$rds(r1, &(0x7f0000000140)={&(0x7f00000000c0)={0x2, 0x4e21, @local}, 0x10, &(0x7f0000000200)=[{&(0x7f0000000300)=""/4, 0x4}], 0x1, &(0x7f0000000400)=[@zcopy_cookie={0x18, 0x114, 0xc, 0x42}], 0x18}, 0x4000000) close_range(r0, 0xffffffffffffffff, 0x0) 9m3.094578839s ago: executing program 0 (id=1482): bind$alg(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6) ioctl$PTP_EXTTS_REQUEST2(0xffffffffffffffff, 0xc4c03d12, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(r2, 0x47, &(0x7f0000000200)=0x7) futex(&(0x7f000000cffc)=0x1, 0xd, 0x2, 0x0, 0x0, 0x400000) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r4, 0x400448e1, 0x0) bind$bt_hci(r4, 0x0, 0x0) syz_open_procfs(0x0, 0x0) 9m2.708241537s ago: executing program 2 (id=1398): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f00000000c0)=0x10000000005) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)) syz_ublk_setup_io_uring(0x20, &(0x7f0000000340)={0x0, 0xd40c, 0x1000, 0x40002, 0x1e5}, &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000140)=0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, r4, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x104, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@any_dev={0x2, 0xe69, 0x0, 0x0, 0x1000, 0x86, r0, 0x0, 0x30}}}, &(0x7f0000000300)=0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = dup(r6) syz_ublk_setup_queues(r7, r5, 0x0, &(0x7f0000000500)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x4704, 0x80000, 0x2, 0x33d, 0x0, r7}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7396, 0x420, 0x0, 0x142}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x727f, 0x80, 0xffffffff, 0x135}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x2, 0x1, 0x2, 0xffffffff}}], 0x1, 0x0, 0x0) 9m0.020591705s ago: executing program 0 (id=1486): openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, 0x0, 0x0) r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r2, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r2, 0x4008af03, &(0x7f0000000200)) ioctl$VHOST_SET_FEATURES(r2, 0x4008af00, &(0x7f0000000080)=0x200000000) r3 = dup2(r2, r2) r4 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) ioctl$VHOST_SET_VRING_ADDR(r4, 0x4028af11, 0x0) read$FUSE(r3, &(0x7f0000000a40)={0x2020}, 0x50a) write$vhost_msg_v2(r3, &(0x7f0000000380)={0x2, 0x0, {&(0x7f0000000140)=""/116, 0x74, 0x0, 0x1, 0x2}}, 0x48) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000002400)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10}, 0x94) sendmsg$IPSET_CMD_DESTROY(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="1c0000000306010400000000000000000200000505000100070000002027c043383f78c5f7d37ec3fab478a4bc87ce5e188c0fb4bac5bb55a2a871def1506fec5ac49a230bd85dd076226223b6a9bb3544b6ef049373f21e0d089612c60af8697a82c7af6ab1b7204f91ec76d9deaffbd753f84fe70f08abefa43ae622e0d8a5a2ac6640384c04d338f21046e7d8bebe5f59a14222436d763fc9cb8c41445ea4e1e06ecfbecfe1a9e4c7ec2fc60c396d136e01f8cc91f0eaa060dce5e0b77f2fab9591c0b5d65296d2e6c4ffe3313b9f1057638d969ab349f3"], 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x20000080) 8m57.19350264s ago: executing program 2 (id=1488): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000040)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x4000087, 0x2, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) r3 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) write$uinput_user_dev(r3, &(0x7f0000000ec0)={'syz0\x00', {0x0, 0x0, 0xfffc, 0x4}, 0x0, [0x9faf, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x3, 0x0, 0x4, 0xfeffffff, 0x0, 0x0, 0xffff, 0x1, 0x0, 0x0, 0x20000000, 0x0, 0x24, 0x0, 0x6, 0x8, 0x7fff, 0x3, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0xfffffffe, 0x80, 0x10, 0x0, 0x4, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0xfffffffc, 0x3, 0x0, 0x401, 0x0, 0xffffffff, 0x0, 0x100d, 0x0, 0x2d52c0], [0x0, 0x1, 0x2, 0xb16, 0x0, 0x8, 0x0, 0x0, 0x0, 0x2000, 0x3, 0x0, 0x0, 0x0, 0x0, 0x4000000, 0x9, 0x0, 0x1, 0xfffffffd, 0xfffffffe, 0x0, 0x0, 0x8, 0x0, 0x0, 0x7, 0x0, 0x0, 0x4, 0x1000, 0x0, 0xf, 0xc559, 0x2000002, 0x0, 0x0, 0x0, 0xfffffffe, 0x20000100, 0x1, 0x0, 0x0, 0x66bd, 0x0, 0xfefffffd, 0x1, 0x8, 0xd77, 0x0, 0x0, 0xfffff37a, 0x0, 0x0, 0x9bd, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0xf, 0x0, 0x2], [0x8, 0x80000a, 0x4, 0x1, 0x3, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0xff, 0x0, 0x0, 0x9, 0x0, 0x7, 0x20000, 0xfffffffe, 0x2, 0xe, 0xffff, 0x0, 0x0, 0xffffff7f, 0x9, 0x0, 0x0, 0x0, 0x9, 0x0, 0x5, 0xf, 0x0, 0xd12, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x1000000, 0x8000000, 0x8, 0x0, 0x0, 0x0, 0x80, 0x8, 0x0, 0x7, 0xca, 0x0, 0xfffffffe, 0x4], [0x0, 0xfffffffc, 0xfffffffc, 0xc, 0x6, 0x0, 0x7, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x7e, 0x0, 0x3, 0x2, 0x0, 0xe, 0x4000000, 0x0, 0x0, 0x8d, 0x0, 0x101, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x8, 0x0, 0xfffeffff, 0x1fd, 0x10000, 0x0, 0x0, 0x5, 0x0, 0x5, 0x0, 0xfffffffd, 0x3ff, 0x0, 0x40002, 0x2, 0x0, 0x7, 0x6, 0x0, 0x401, 0x100000, 0x4, 0x10000, 0x0, 0x0, 0xfffffffd, 0x2, 0x0, 0x0, 0x0, 0x0, 0x5]}, 0x45c) write$uinput_user_dev(r3, &(0x7f0000000a40)={'syz0\x00', {0x0, 0x0, 0x0, 0xf}, 0x4d, [0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x4, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x4001, 0x0, 0x2, 0xfffffe00, 0x0, 0xa9, 0x0, 0x1, 0x0, 0x7ff, 0x80, 0x0, 0x4, 0xfffffffc, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x1, 0x800, 0x3, 0x0, 0x0, 0x1, 0x0, 0x401, 0x0, 0x0, 0xfffffffe, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x2, 0x0, 0x5, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x4], [0xffffffff, 0x3, 0x10000002, 0x0, 0x0, 0x100, 0x7, 0x4, 0xfffffffd, 0x800, 0x9262, 0x4, 0x0, 0x0, 0x0, 0x4, 0xffffffff, 0x400000, 0x1, 0x5, 0x0, 0x3, 0x0, 0x4, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000, 0x1000, 0x401f, 0x0, 0x0, 0x0, 0x4, 0xfffffffb, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xb, 0x0, 0x0, 0xfd5], [0x0, 0xfffffff6, 0x0, 0x400, 0x0, 0x5, 0x0, 0x0, 0x5, 0x0, 0xfffffffe, 0x800, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x8, 0x80000, 0x0, 0x0, 0x2, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x2, 0x8000000, 0x0, 0x0, 0x6, 0x0, 0x3, 0x6, 0x82, 0x3ff, 0x0, 0x4, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x100, 0x0, 0x6, 0x6, 0x0, 0x5], [0x81, 0x5, 0x5d30, 0x1, 0x0, 0x100000, 0xdbc1, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x6, 0x0, 0x0, 0xfffffffe, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x8, 0xffffffff, 0x2, 0x0, 0xd, 0x0, 0x0, 0x0, 0x0, 0x2000, 0x4, 0x3, 0x0, 0x7fffffff, 0xfffffffd, 0x0, 0xff, 0x0, 0x0, 0x0, 0xe58b, 0xfffffff9, 0x0, 0x3, 0x0, 0x4, 0x1ff]}, 0x45c) syz_mount_image$ext4(&(0x7f00000003c0)='ext4\x00', &(0x7f0000000200)='./file0\x00', 0x2200850, &(0x7f0000001680)={[{@i_version}, {@dioread_lock}, {@nodioread_nolock}, {@noquota}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@grpquota}, {@nodelalloc}, {@jqfmt_vfsv1}, {@norecovery}]}, 0x5, 0x596, &(0x7f0000000400)="$eJzs3V1rFFcYAOB3NonGj9YIIrUXRfCiFuvGJK0fUNBellYqtPd2SdYg2biS3YhJhepFvelNkUIpFUp/QO97Kf0D/RVCK0iR0FKkkDKb2SQm+5Ho6q7u88DoOTOTPefsmXf2nJlZNoC+dTj9JxdxKCK+TSL2rds2GNnGwyv7LT26MZkuSSwvf/ZXEkm2rr5/kv2/J8u8ERG/fR1xLLeyfmjda1cWFmcKpVJxLsuPVmevjlYWFo9fni1MF6eLV8YnJk6/Pzx+5tTJjrX1nQv//PDpvY+Gvzmy9P0vD/bfSeJc7M22rW/HM7i5PnO48F+WGopzG3Yc60BhvSTpdgV4KgNZnKexeSj2xUAW9cCr76uIWAb6VCL+oU/VxwH1uX2H5sEvjYcfrkyANrd/cOXaSAzX5ka7l5InZkbpfHekA+WnZfz659076RKtr0PsapMH2JabtyLixODg5vNfkp3/nt6J2sXj1jaW0W+fP9BN99Lxz7uNxj+51fFPNBj/7GkQu0+jffznHjyR7fCNhnT890HD8e/qqWtkIMu9VhvzDSWXLpeKJyLi9Yg4GkM703yr+zmnl+4vN9u2fvyXLmn59bFgVo8Hgztrl+lXTRWqhWdr9ZqHtyLebDj+TVb7P2nQ/+n7caHlK6911MHi3bea7dW+/c/X8s8Rbzfs/7X6J03vT06Mnzl1crR2PIzWj4rN/r598Pdm5Xe7/Wn/727d/pFk/f3ayvbL+Gn4cbHZti0e/09Ij/8dyee19I5s3fVCtTo3FrEj+WTz+vG1v63n6/un7T96pPX5r9Hxn06+vthi+28fuN10117o/6lt9f/2E/c//vLHZuVvrf/fq6WOZms2nP8eb7iUUbPVCnbobQQAAAAAAICekIuIvZHk8qvpXC6fX3m+40DszpXKleqxS+X5K1NR+67sSAzl6ne699Vuwa48DzGWPQ9bfz5ifEN+IiL2R8R3A7tq+fxkuTTV7cYDAAAAAAAAAAAAAAAAAABAj9jT5Pv/qT8Gul074Lmr/bDBzm7XAuiGtj/534lfegJ6Utv4B15Z4h/6l/iH/iX+oX+Jf+hf4h/6V+P49/QP9AOf/wAAAAAAAAAAAAAAAAAAAAAAAAAAANBRF86fT5flpUc3JtP81LWF+ZnyteNTxcpMfnZ+Mj9Znruany6Xp0vF/GR5tt3rlcrlq2PjMX99tFqsVEcrC4sXZ8vzV6oXL88WposXi0MvpFUAAAAAAAAAAAAAAAAAAADwcqksLM4USqXi3AtODEYXCm2VGM7ekAabzkZP1PD5Jc42b3v7xODmTf9GRC+0S+IZEl08KQEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADABv8HAAD//9L0OVA=") chdir(0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) syz_open_procfs(0x0, 0x0) ioctl$IOMMU_HWPT_ALLOC$TEST(0xffffffffffffffff, 0x3b89, &(0x7f0000000180)={0x28, 0x0, 0x0, 0x0, 0x0, 0x0, 0xdead, 0x0, 0x0}) 8m41.371346703s ago: executing program 41 (id=1486): openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, 0x0, 0x0) r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r2, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r2, 0x4008af03, &(0x7f0000000200)) ioctl$VHOST_SET_FEATURES(r2, 0x4008af00, &(0x7f0000000080)=0x200000000) r3 = dup2(r2, r2) r4 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) ioctl$VHOST_SET_VRING_ADDR(r4, 0x4028af11, 0x0) read$FUSE(r3, &(0x7f0000000a40)={0x2020}, 0x50a) write$vhost_msg_v2(r3, &(0x7f0000000380)={0x2, 0x0, {&(0x7f0000000140)=""/116, 0x74, 0x0, 0x1, 0x2}}, 0x48) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000002400)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10}, 0x94) sendmsg$IPSET_CMD_DESTROY(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="1c0000000306010400000000000000000200000505000100070000002027c043383f78c5f7d37ec3fab478a4bc87ce5e188c0fb4bac5bb55a2a871def1506fec5ac49a230bd85dd076226223b6a9bb3544b6ef049373f21e0d089612c60af8697a82c7af6ab1b7204f91ec76d9deaffbd753f84fe70f08abefa43ae622e0d8a5a2ac6640384c04d338f21046e7d8bebe5f59a14222436d763fc9cb8c41445ea4e1e06ecfbecfe1a9e4c7ec2fc60c396d136e01f8cc91f0eaa060dce5e0b77f2fab9591c0b5d65296d2e6c4ffe3313b9f1057638d969ab349f3"], 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x20000080) 8m41.299086527s ago: executing program 42 (id=1488): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000040)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x4000087, 0x2, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) r3 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) write$uinput_user_dev(r3, &(0x7f0000000ec0)={'syz0\x00', {0x0, 0x0, 0xfffc, 0x4}, 0x0, [0x9faf, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x3, 0x0, 0x4, 0xfeffffff, 0x0, 0x0, 0xffff, 0x1, 0x0, 0x0, 0x20000000, 0x0, 0x24, 0x0, 0x6, 0x8, 0x7fff, 0x3, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0xfffffffe, 0x80, 0x10, 0x0, 0x4, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0xfffffffc, 0x3, 0x0, 0x401, 0x0, 0xffffffff, 0x0, 0x100d, 0x0, 0x2d52c0], [0x0, 0x1, 0x2, 0xb16, 0x0, 0x8, 0x0, 0x0, 0x0, 0x2000, 0x3, 0x0, 0x0, 0x0, 0x0, 0x4000000, 0x9, 0x0, 0x1, 0xfffffffd, 0xfffffffe, 0x0, 0x0, 0x8, 0x0, 0x0, 0x7, 0x0, 0x0, 0x4, 0x1000, 0x0, 0xf, 0xc559, 0x2000002, 0x0, 0x0, 0x0, 0xfffffffe, 0x20000100, 0x1, 0x0, 0x0, 0x66bd, 0x0, 0xfefffffd, 0x1, 0x8, 0xd77, 0x0, 0x0, 0xfffff37a, 0x0, 0x0, 0x9bd, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0xf, 0x0, 0x2], [0x8, 0x80000a, 0x4, 0x1, 0x3, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0xff, 0x0, 0x0, 0x9, 0x0, 0x7, 0x20000, 0xfffffffe, 0x2, 0xe, 0xffff, 0x0, 0x0, 0xffffff7f, 0x9, 0x0, 0x0, 0x0, 0x9, 0x0, 0x5, 0xf, 0x0, 0xd12, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x1000000, 0x8000000, 0x8, 0x0, 0x0, 0x0, 0x80, 0x8, 0x0, 0x7, 0xca, 0x0, 0xfffffffe, 0x4], [0x0, 0xfffffffc, 0xfffffffc, 0xc, 0x6, 0x0, 0x7, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x7e, 0x0, 0x3, 0x2, 0x0, 0xe, 0x4000000, 0x0, 0x0, 0x8d, 0x0, 0x101, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x8, 0x0, 0xfffeffff, 0x1fd, 0x10000, 0x0, 0x0, 0x5, 0x0, 0x5, 0x0, 0xfffffffd, 0x3ff, 0x0, 0x40002, 0x2, 0x0, 0x7, 0x6, 0x0, 0x401, 0x100000, 0x4, 0x10000, 0x0, 0x0, 0xfffffffd, 0x2, 0x0, 0x0, 0x0, 0x0, 0x5]}, 0x45c) write$uinput_user_dev(r3, &(0x7f0000000a40)={'syz0\x00', {0x0, 0x0, 0x0, 0xf}, 0x4d, [0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x4, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x4001, 0x0, 0x2, 0xfffffe00, 0x0, 0xa9, 0x0, 0x1, 0x0, 0x7ff, 0x80, 0x0, 0x4, 0xfffffffc, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x1, 0x800, 0x3, 0x0, 0x0, 0x1, 0x0, 0x401, 0x0, 0x0, 0xfffffffe, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x2, 0x0, 0x5, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x4], [0xffffffff, 0x3, 0x10000002, 0x0, 0x0, 0x100, 0x7, 0x4, 0xfffffffd, 0x800, 0x9262, 0x4, 0x0, 0x0, 0x0, 0x4, 0xffffffff, 0x400000, 0x1, 0x5, 0x0, 0x3, 0x0, 0x4, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000, 0x1000, 0x401f, 0x0, 0x0, 0x0, 0x4, 0xfffffffb, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xb, 0x0, 0x0, 0xfd5], [0x0, 0xfffffff6, 0x0, 0x400, 0x0, 0x5, 0x0, 0x0, 0x5, 0x0, 0xfffffffe, 0x800, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x8, 0x80000, 0x0, 0x0, 0x2, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x2, 0x8000000, 0x0, 0x0, 0x6, 0x0, 0x3, 0x6, 0x82, 0x3ff, 0x0, 0x4, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x100, 0x0, 0x6, 0x6, 0x0, 0x5], [0x81, 0x5, 0x5d30, 0x1, 0x0, 0x100000, 0xdbc1, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x6, 0x0, 0x0, 0xfffffffe, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x8, 0xffffffff, 0x2, 0x0, 0xd, 0x0, 0x0, 0x0, 0x0, 0x2000, 0x4, 0x3, 0x0, 0x7fffffff, 0xfffffffd, 0x0, 0xff, 0x0, 0x0, 0x0, 0xe58b, 0xfffffff9, 0x0, 0x3, 0x0, 0x4, 0x1ff]}, 0x45c) syz_mount_image$ext4(&(0x7f00000003c0)='ext4\x00', &(0x7f0000000200)='./file0\x00', 0x2200850, &(0x7f0000001680)={[{@i_version}, {@dioread_lock}, {@nodioread_nolock}, {@noquota}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@grpquota}, {@nodelalloc}, {@jqfmt_vfsv1}, {@norecovery}]}, 0x5, 0x596, &(0x7f0000000400)="$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") chdir(0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) syz_open_procfs(0x0, 0x0) ioctl$IOMMU_HWPT_ALLOC$TEST(0xffffffffffffffff, 0x3b89, &(0x7f0000000180)={0x28, 0x0, 0x0, 0x0, 0x0, 0x0, 0xdead, 0x0, 0x0}) 4m17.477001052s ago: executing program 8 (id=1732): syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) bpf$MAP_CREATE(0x0, &(0x7f0000000a00)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) ioctl$VIDIOC_ENUMAUDOUT(0xffffffffffffffff, 0xc0345642, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={0xffffffffffffffff, 0x0, 0x0, 0x8, 0x0, &(0x7f0000000700)=""/8, 0x60ff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r1 = openat$vmci(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r1, 0x7a7, 0x0) ioctl$IOCTL_VMCI_INIT_CONTEXT(r1, 0x7a0, &(0x7f0000000100)={@my=0x1}) syz_usb_disconnect(0xffffffffffffffff) r2 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'dummy0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r3, {0x0, 0xfff3}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x4c840) sendmsg$nl_route_sched(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000380)=@newtfilter={0x4c, 0x2c, 0xf3f, 0x30bd2a, 0x25dfdbfc, {0x0, 0x0, 0x0, r3, {0xf, 0xfff3}, {0x0, 0xfff3}, {0xb, 0x6}}, [@filter_kind_options=@f_fw={{0x7}, {0x20, 0x2, [@TCA_FW_INDEV={0x14, 0x3, 'gre0\x00'}, @TCA_FW_CLASSID={0x8, 0x1, {0x3, 0xfff2}}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20041091}, 0x0) syz_usb_connect$printer(0x4, 0x2d, 0x0, 0x0) ioctl$EVIOCRMFF(0xffffffffffffffff, 0xc0085504, 0x0) socket$inet6_icmp(0xa, 0x2, 0x3a) 4m8.81089248s ago: executing program 8 (id=1738): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x1214040, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000300)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) chroot(0x0) socket$nl_netfilter(0x10, 0x3, 0xc) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000003c0)={[{@xino_auto}, {@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x4, 0x80) getdents64(r3, &(0x7f0000002600)=""/4113, 0x1011) socket(0x10, 0x5, 0xffffffff) 4m4.552517971s ago: executing program 8 (id=1741): openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x6) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) mq_open(&(0x7f0000000080)='eth0\x00#~\x02\x00\x00\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfd\x05\x00\x00\x00\x00\x00\x80\x00\t/\x8dv\xb8\x93\xc3C\xae\x9dc\xd1T\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94uu_\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88\x9e0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc7\x8avs\xb2\a\xfe\xb3j*\xad\x18A\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x05\x00\x00\x000\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xce\x00\x00\x00\xe8\vq+\xbb\xc7\xaf\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1J\xec\x926\xb5a0\xa0B\xae|', 0x42, 0x54, 0x0) prlimit64(0x0, 0x8, &(0x7f0000000600)={0x9, 0xfffffffffffff8e4}, 0x0) setresgid(0xee00, 0xee01, 0x0) setgroups(0x0, 0x0) setuid(0xee00) shmget$private(0x0, 0x4000, 0x800, &(0x7f0000007000/0x4000)=nil) setsockopt$inet6_IPV6_HOPOPTS(0xffffffffffffffff, 0x29, 0x36, 0x0, 0xc0) socket$nl_route(0x10, 0x3, 0x0) 3m58.155232762s ago: executing program 8 (id=1746): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000380)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = syz_open_dev$vim2m(&(0x7f0000000000), 0x7, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r3, 0xc0d05605, &(0x7f0000000140)={0x1, @pix_mp={0xffffffff, 0x0, 0x34325241, 0x0, 0x3, [{0x0, 0x3}, {0xfffffffc, 0x20000000}, {}, {0x8}, {0x0, 0x400000}, {}, {0x0, 0xfffffffd}], 0x0, 0x0, 0x7, 0x0, 0x4}}) r4 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000bc0), 0xffffffffffffffff) sendmsg$NLBL_CIPSOV4_C_ADD(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000000)=ANY=[@ANYBLOB='@\x00', @ANYRES16=r4], 0x40}}, 0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) dup(0xffffffffffffffff) socket(0xa, 0x5, 0x0) ioctl$vim2m_VIDIOC_S_CTRL(0xffffffffffffffff, 0xc008561c, &(0x7f0000000040)={0xf0f024}) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000540)={0x2, @pix={0x3, 0x401, 0x3132564e, 0x1, 0x3, 0x3, 0xc, 0x7, 0x0, 0x0, 0x0, 0x3}}) 3m55.484106098s ago: executing program 8 (id=1748): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) futex(&(0x7f000000cffc)=0x1, 0xd, 0x2, 0x0, 0x0, 0x400000) ioctl$sock_bt_hci(0xffffffffffffffff, 0x400448e1, 0x0) bind$bt_hci(0xffffffffffffffff, 0x0, 0x0) r4 = syz_open_procfs(0x0, 0x0) openat$cgroup_freezer_state(r4, 0x0, 0x2, 0x0) io_setup(0x7, &(0x7f0000000280)=0x0) io_submit(r5, 0x1, &(0x7f0000000500)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, 0xffffffffffffffff, 0x0}]) 3m52.618245863s ago: executing program 8 (id=1751): mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x2, &(0x7f0000000000)=0x9, 0x8, 0x0) mbind(&(0x7f000058a000/0x2000)=nil, 0x2000, 0x4000, 0x0, 0x6, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000000)=0x6) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) syz_emit_ethernet(0x66, &(0x7f0000000480)={@broadcast, @dev, @void, {@ipv4={0x800, @gre={{0x5, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x0, 0x0, 0x2f, 0x0, @private, @multicast1}, {{0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x4, 0x6558}, {0x0, 0x0, 0x0, 0x0, 0x11}, {}, {0x8, 0x88be, 0x81000004}}}}}}, 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_AUTO_ASCONF(r2, 0x84, 0x1e, &(0x7f0000000000)=0xfffffff4, 0x4) mount(0x0, &(0x7f0000000000)='./debug\x00', &(0x7f0000000040)='debugfs\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, 0x0, 0x2, 0x0) write(r3, &(0x7f0000000540)="48696c060a2f686c64bf8fcc6b881b5fa6802c012f6869642d636f72652e63206c696e65cb57e017fcb309130850af815ecccc4d204e993838202bb97263e20d133f29281464f37f2afb75a76a8e2f56368df246", 0x54) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_buf(r4, 0x6, 0x8, 0x0, &(0x7f0000001040)) 3m35.808798035s ago: executing program 43 (id=1751): mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x2, &(0x7f0000000000)=0x9, 0x8, 0x0) mbind(&(0x7f000058a000/0x2000)=nil, 0x2000, 0x4000, 0x0, 0x6, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000000)=0x6) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) syz_emit_ethernet(0x66, &(0x7f0000000480)={@broadcast, @dev, @void, {@ipv4={0x800, @gre={{0x5, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x0, 0x0, 0x2f, 0x0, @private, @multicast1}, {{0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x4, 0x6558}, {0x0, 0x0, 0x0, 0x0, 0x11}, {}, {0x8, 0x88be, 0x81000004}}}}}}, 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_AUTO_ASCONF(r2, 0x84, 0x1e, &(0x7f0000000000)=0xfffffff4, 0x4) mount(0x0, &(0x7f0000000000)='./debug\x00', &(0x7f0000000040)='debugfs\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, 0x0, 0x2, 0x0) write(r3, &(0x7f0000000540)="48696c060a2f686c64bf8fcc6b881b5fa6802c012f6869642d636f72652e63206c696e65cb57e017fcb309130850af815ecccc4d204e993838202bb97263e20d133f29281464f37f2afb75a76a8e2f56368df246", 0x54) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_buf(r4, 0x6, 0x8, 0x0, &(0x7f0000001040)) 3m8.029805723s ago: executing program 5 (id=1788): socket$inet6_mptcp(0xa, 0x1, 0x106) r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x401) socket$inet_sctp(0x2, 0x1, 0x84) socket$inet_smc(0x2b, 0x1, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x24, 0x0) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x5, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r1, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) syz_open_dev$video4linux(&(0x7f00000001c0), 0x3, 0x40483) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, 0x0) openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0) socket$nl_route(0x10, 0x3, 0x0) rt_sigprocmask(0x0, &(0x7f0000000000)={[0xfffffffffffffffd]}, 0x0, 0x8) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x2, 0x3, 0xfffffffffffffffd, 0x3, 0x80, 0x1}, 0x0, &(0x7f0000002080)={0x3ff, 0x0, 0x8, 0x9, 0x0, 0x663, 0x7fffffff}, 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f00000005c0)={0x53, 0x0, 0x6, 0x0, @scatter={0x0, 0x20000, 0x0}, &(0x7f0000000240)="588d7acda0b2", 0x0, 0x0, 0x0, 0x0, 0x0}) 3m7.796525674s ago: executing program 5 (id=1789): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(r2, 0x47, &(0x7f0000000200)=0x7) futex(&(0x7f000000cffc)=0x1, 0xd, 0x2, 0x0, 0x0, 0x400000) ioctl$sock_bt_hci(0xffffffffffffffff, 0x400448e1, 0x0) bind$bt_hci(0xffffffffffffffff, 0x0, 0x0) r4 = syz_open_procfs(0x0, 0x0) openat$cgroup_freezer_state(r4, 0x0, 0x2, 0x0) io_setup(0x7, &(0x7f0000000280)) 3m5.509628242s ago: executing program 5 (id=1790): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000380)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = syz_open_dev$vim2m(&(0x7f0000000000), 0x7, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r3, 0xc0d05605, &(0x7f0000000140)={0x1, @pix_mp={0xffffffff, 0x0, 0x34325241, 0x0, 0x3, [{0x0, 0x3}, {0xfffffffc, 0x20000000}, {}, {0x8}, {0x0, 0x400000}, {}, {0x0, 0xfffffffd}], 0x0, 0x0, 0x7, 0x0, 0x4}}) r4 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000bc0), 0xffffffffffffffff) sendmsg$NLBL_CIPSOV4_C_ADD(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000000)=ANY=[@ANYBLOB='@\x00', @ANYRES16=r4], 0x40}}, 0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) dup(0xffffffffffffffff) r5 = syz_open_dev$vim2m(&(0x7f0000000000), 0x800, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r5, 0xc008561c, &(0x7f0000000040)={0xf0f024}) ioctl$vim2m_VIDIOC_S_FMT(r5, 0xc0d05605, &(0x7f0000000540)={0x2, @pix={0x3, 0x401, 0x3132564e, 0x1, 0x3, 0x3, 0xc, 0x7, 0x0, 0x0, 0x0, 0x3}}) 3m0.743528826s ago: executing program 5 (id=1795): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x1, &(0x7f0000000240)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000280), 0x28d, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x4000087, 0x2, 0x0) getsockopt$IP_SET_OP_GET_BYNAME(0xffffffffffffffff, 0x1, 0x53, 0x0, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r4 = accept$inet(0xffffffffffffffff, 0x0, &(0x7f0000000280)) clock_gettime(0x0, &(0x7f00000029c0)={0x0, 0x0}) recvmmsg(r4, &(0x7f0000002940)=[{{&(0x7f0000000300)=@vsock={0x28, 0x0, 0x0, @hyper}, 0x80, &(0x7f00000003c0)=[{&(0x7f0000000380)=""/13, 0xd}], 0x1}, 0x9}, {{0x0, 0x0, &(0x7f0000002800)=[{&(0x7f0000001800)=""/4096, 0x1000}], 0x1, &(0x7f0000002840)=""/212, 0xd4}, 0x7}], 0x2, 0x10003, &(0x7f0000002a00)={r5, r6+60000000}) ioctl$HCIINQUIRY(r3, 0x400448ca, 0x0) bind$bt_hci(r3, &(0x7f0000000040)={0x1f, 0x0, 0x1}, 0x6) r7 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r7, 0x800448f0, &(0x7f0000000000)={0x4, 0xffff, "a46593", 0x5, 0xaa}) io_setup(0x75a, 0x0) 2m55.655490646s ago: executing program 5 (id=1798): openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x41}, 0x809d) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) mbind(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x6002, &(0x7f0000000140)=0xa, 0xffffffffffffffff, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000002f0d31209000000bc2e79e995"], 0x0) write$binfmt_script(r2, &(0x7f0000000100), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000499000/0x18000)=nil, &(0x7f0000000040)=[@text16={0x10, &(0x7f0000000180)="66b9800000c00f326635000800000f300f0f1c9a65660ff3b20618baa000ec672e660f38803d004000000f285473f61366b9800000c00f320f300f20e06635800000000f22e02b6aa6c8", 0x4a}], 0x1, 0x0, 0x0, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) recvmmsg(r3, &(0x7f0000002080)=[{{0x0, 0x0, 0x0}, 0x8}, {{0x0, 0x0, 0x0}, 0x7aaf804d}, {{0x0, 0x0, 0x0}, 0xd}, {{0x0, 0x0, &(0x7f00000005c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000001e00)=""/54, 0x36}, {0x0}, {0x0}, {0x0}, {0x0}], 0x8}, 0x81}], 0x4, 0x12002, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10008000}, 0x40095) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000240)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) sendmsg$inet6(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0xa, 0x4e21, 0x80000, @loopback, 0x3}, 0x1c, 0x0}, 0x440e0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 2m50.527026798s ago: executing program 5 (id=1802): bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) r5 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={&(0x7f0000000040)=ANY=[@ANYBLOB], 0x0, 0x34}, 0x28) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2c}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={r7, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001440)={r7, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) sendmsg$nl_route_sched(r6, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000ac0)=@newqdisc={0x78, 0x24, 0xf0b, 0x2070bd2c, 0x200, {0x0, 0x0, 0x12, r8, {0x0, 0xd}, {0xffff, 0xffff}, {0x2, 0x5}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x853, 0x1ff, 0x43ff, 0x1, 0x8005}, 0x0, 0x10000000, 0x2, 0x5, 0x100004, 0x19, 0x13, 0x8, 0x0, 0xfffffffe, {0x4, 0x521, 0x9, 0x2000009, 0x81, 0x8}}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x4048810}, 0x2400c040) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000b00)=@bpf_tracing={0x1a, 0xf, &(0x7f0000000500)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r4}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x18, r5, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x1}, 0x94) 2m33.909340391s ago: executing program 44 (id=1802): bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) r5 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={&(0x7f0000000040)=ANY=[@ANYBLOB], 0x0, 0x34}, 0x28) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2c}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={r7, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001440)={r7, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) sendmsg$nl_route_sched(r6, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000ac0)=@newqdisc={0x78, 0x24, 0xf0b, 0x2070bd2c, 0x200, {0x0, 0x0, 0x12, r8, {0x0, 0xd}, {0xffff, 0xffff}, {0x2, 0x5}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x853, 0x1ff, 0x43ff, 0x1, 0x8005}, 0x0, 0x10000000, 0x2, 0x5, 0x100004, 0x19, 0x13, 0x8, 0x0, 0xfffffffe, {0x4, 0x521, 0x9, 0x2000009, 0x81, 0x8}}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x4048810}, 0x2400c040) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000b00)=@bpf_tracing={0x1a, 0xf, &(0x7f0000000500)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r4}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x18, r5, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x1}, 0x94) 41.396704721s ago: executing program 3 (id=1922): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(r1, 0x47, &(0x7f0000000200)=0x7) futex(&(0x7f000000cffc)=0x1, 0xd, 0x2, 0x0, 0x0, 0x400000) ioctl$sock_bt_hci(0xffffffffffffffff, 0x400448e1, 0x0) bind$bt_hci(0xffffffffffffffff, 0x0, 0x0) r3 = syz_open_procfs(0x0, 0x0) openat$cgroup_freezer_state(r3, 0x0, 0x2, 0x0) io_setup(0x7, &(0x7f0000000280)=0x0) io_submit(r4, 0x1, &(0x7f0000000500)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, 0xffffffffffffffff, 0x0}]) 33.515339712s ago: executing program 3 (id=1926): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000380)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = syz_open_dev$vim2m(&(0x7f0000000000), 0x7, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r3, 0xc0d05605, &(0x7f0000000140)={0x1, @pix_mp={0xffffffff, 0x0, 0x34325241, 0x0, 0x3, [{0x0, 0x3}, {0xfffffffc, 0x20000000}, {}, {0x8}, {0x0, 0x400000}, {}, {0x0, 0xfffffffd}], 0x0, 0x0, 0x7, 0x0, 0x4}}) sendmsg$NLBL_CIPSOV4_C_ADD(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000000)=ANY=[@ANYBLOB='@\x00', @ANYRES16], 0x40}}, 0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) dup(0xffffffffffffffff) socket(0xa, 0x5, 0x0) r4 = syz_open_dev$vim2m(&(0x7f0000000000), 0x800, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r4, 0xc008561c, &(0x7f0000000040)={0xf0f024}) ioctl$vim2m_VIDIOC_S_FMT(r4, 0xc0d05605, &(0x7f0000000540)={0x2, @pix={0x3, 0x401, 0x3132564e, 0x1, 0x3, 0x3, 0xc, 0x7, 0x0, 0x0, 0x0, 0x3}}) 18.47414947s ago: executing program 1 (id=1933): r0 = fsopen(&(0x7f0000000340)='adfs\x00', 0x1) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000240)='uid', &(0x7f00000008c0)='0\x00#\x00\xd0\x00 \x00\x00qS\x00\x00\x00\x00\x00\x00\x00\x00$\xf6_\xbdI\x1c\xf2\xa9]\xcc\xe0*\xef\x01\x8d\x15\xd2h\x93\xc9\xb57\xc3\xea\\Eb\xf8\xe6,\xdf\xd4\xfae\x84\xcc\xd5\"d\xf0D-\x98\x9f\x81{\xfc$\xc4\xbcF\xf8\xc8\x8d\xcb\xb8\xf2\x1e\xe4\'U\xb3\xb8\xd3\xe6\xd7\x80=\x8a\xeb\n\xb8_\xe8\x96YY\xe3\xc7\xe6\xf28\x19\xa6\xa7\xfa\xdb\x1ce\xc1\x03\x86J\xb2fh\x19\xee#\xcc\x0f\xed\xfea\xdc\x88\xcb%bW\xd35\xda=\xac\x1d\xae\x93\xfd\'T6\x94\n\xa4\x9cU\xc4\fA~[\xbf\x8b\x90\xfe\x04\xe7U\xf3h\x81\x14l7u\x95\x96t\\\x0f\xef;\x03\xa4C\xbc(Vc!a\xc1\xe39\xc6b\x905\x1f\x03\x00\x00\x00\x00\x00\x00\xdf9\xaf5\xc8a:z\xe4\xcbag&67\x814\xf6}\xe10v6l\xd6,\x1e\xa0\xcc\xbf\xfdkm\b?\x839\x85N\x1c\xc1\xcb\xfc\x85\xd2\n\x02\"\xf2\x81g\x90\x01n%\x7f_\xe1.f>>\xa5\xfb\"\xab\xdb\x06\x12e\x14\x11~\x9a\bR-\x85\xc3\xa9\xe6\xf6R\x11\"\xc3\xc9\xfc\x14s X\xec\xdd\xc2qB\x85\xf0\xd7\x04\xdd<\x9ak\x00\x00\x00\x00\x00\x00\x00\n\xa72\xa3\xef^\xe7\x8f', 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f00000020c0), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) add_key(&(0x7f0000002340)='big_key\x00', &(0x7f0000000040)={'syz', 0x3}, &(0x7f0000000080)="ae", 0x1, 0xffffffffffffffff) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r3 = fcntl$dupfd(0xffffffffffffffff, 0x406, 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_MPATH(r3, &(0x7f0000000140)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x20000000}, 0x37, &(0x7f0000000940)={0x0}, 0x1, 0x0, 0x0, 0x4004}, 0x40000) syz_genetlink_get_family_id$ethtool(&(0x7f0000000ac0), r3) recvmsg$can_bcm(r3, &(0x7f00000026c0)={0x0, 0x0, 0x0}, 0x2100) mknod(&(0x7f00000000c0)='./bus\x00', 0x8000, 0xd02) ioctl$SG_BLKTRACESETUP(r1, 0xc0401273, &(0x7f0000000240)={'\x00', 0x7, 0x78129536, 0x401, 0x1, 0x8}) ioctl$SG_SET_COMMAND_Q(r1, 0x2271, &(0x7f0000000280)=0x1) r4 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x8080, 0x8, 0x3, 0x0, 0x0, r1}, &(0x7f00000000c0)=0x0, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r8 = open(&(0x7f0000000140)='./file1\x00', 0x66842, 0x21) syz_ublk_add_dev(r8, r5, r6, r7, &(0x7f00000003c0)={0x2e, 0x71, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000180)=@any_dev={0x4, 0x58e, 0x0, 0x0, 0x1000, 0x9, 0xffffffffffffffff}}}, &(0x7f0000000440)=0x0) syz_ublk_setup_queues(r8, r10, &(0x7f0000000340)={0x0, 0xfb7e, 0x3000, 0x2, 0x3cf, 0x0, r4}, &(0x7f00000007c0)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xd3db, 0x200, 0xfffffffd, 0x3de, 0x0, r1}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x9e00, 0x8000, 0xfffffffe, 0x275}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xdada, 0x1000, 0x3, 0x321}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xc9b3, 0x20, 0x3, 0x80000c4}}], 0x4, &(0x7f0000000e00)={0x2e, 0x40, 0x0, r2, 0xc0107520, 0x0, 0x0, 0x0, 0x1, {0xf6}, 0x0, r9, '\x00', {0x5, 0xa30, 0x0, 0x0}}, 0x0) 18.452454221s ago: executing program 3 (id=1934): syz_open_dev$dvb_demux(0x0, 0x0, 0x40440) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x2136dbec, 0x800001000089}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(r2, 0x2, &(0x7f0000000000)=0x80000000000003) close(0xffffffffffffffff) io_uring_enter(0xffffffffffffffff, 0x2000, 0xfffffffd, 0x9, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$xdp(0x2c, 0x3, 0x0) r4 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r4, 0x40045532, 0x0) openat$audio(0xffffffffffffff9c, 0x0, 0x40000000040201, 0x0) 15.394377706s ago: executing program 3 (id=1928): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x6) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, 0x0) ioctl$vim2m_VIDIOC_EXPBUF(0xffffffffffffffff, 0xc0405610, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) mq_open(&(0x7f0000000080)='eth0\x00#~\x02\x00\x00\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfd\x05\x00\x00\x00\x00\x00\x80\x00\t/\x8dv\xb8\x93\xc3C\xae\x9dc\xd1T\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94uu_\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88\x9e0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc7\x8avs\xb2\a\xfe\xb3j*\xad\x18A\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x05\x00\x00\x000\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xce\x00\x00\x00\xe8\vq+\xbb\xc7\xaf\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1J\xec\x926\xb5a0\xa0B\xae|', 0x42, 0x54, 0x0) prlimit64(0x0, 0x8, &(0x7f0000000600)={0x9, 0xfffffffffffff8e4}, 0x0) setresgid(0xee00, 0xee01, 0x0) setgroups(0x0, 0x0) setuid(0xee00) shmget$private(0x0, 0x4000, 0x800, &(0x7f0000007000/0x4000)=nil) setsockopt$inet6_IPV6_HOPOPTS(0xffffffffffffffff, 0x29, 0x36, 0x0, 0xc0) socket$nl_route(0x10, 0x3, 0x0) 15.29058091s ago: executing program 1 (id=1929): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) getpid() socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x1214040, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000300)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) mount(&(0x7f0000000180)=@nullb, &(0x7f0000000240)='./cgroup\x00', &(0x7f0000000040)='vfat\x00', 0x800041, &(0x7f00000001c0)='discard') chroot(0x0) socket$nl_netfilter(0x10, 0x3, 0xc) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000003c0)={[{@xino_auto}, {@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x4, 0x80) getdents64(r2, &(0x7f0000002600)=""/4113, 0x1011) socket(0x10, 0x5, 0xffffffff) 13.035197627s ago: executing program 4 (id=1930): openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x41}, 0x809d) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) mbind(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x6002, &(0x7f0000000140)=0xa, 0xffffffffffffffff, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000002f0d31209000000bc2e79e995"], 0x0) write$binfmt_script(r2, &(0x7f0000000100), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="1400000042003303"], 0x14}, 0x1, 0x0, 0x0, 0x4015}, 0x24040004) recvmmsg(r3, &(0x7f0000002080)=[{{0x0, 0x0, 0x0}, 0x8}, {{0x0, 0x0, 0x0}, 0x7aaf804d}, {{0x0, 0x0, 0x0}, 0xd}, {{0x0, 0x0, &(0x7f00000005c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000001e00)=""/54, 0x36}, {0x0}, {0x0}, {0x0}, {0x0}], 0x8}, 0x81}], 0x4, 0x12002, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10008000}, 0x40095) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000240)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) sendmsg$inet6(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0xa, 0x4e21, 0x80000, @loopback, 0x3}, 0x1c, 0x0}, 0x440e0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 12.32993064s ago: executing program 9 (id=1812): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(r2, 0x47, &(0x7f0000000200)=0x7) futex(&(0x7f000000cffc)=0x1, 0xd, 0x2, 0x0, 0x0, 0x400000) ioctl$sock_bt_hci(0xffffffffffffffff, 0x400448e1, 0x0) bind$bt_hci(0xffffffffffffffff, 0x0, 0x0) r4 = syz_open_procfs(0x0, 0x0) openat$cgroup_freezer_state(r4, 0x0, 0x2, 0x0) io_setup(0x7, &(0x7f0000000280)=0x0) io_submit(r5, 0x1, &(0x7f0000000500)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, 0xffffffffffffffff, 0x0}]) 9.913044434s ago: executing program 9 (id=1931): bpf$PROG_LOAD(0x5, &(0x7f0000002180)={0x4, 0xe, 0x0, &(0x7f0000000000)='syzkaller\x00'}, 0x94) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000007c0)=@newtaction={0x4c, 0x30, 0x871a15abc695fb3d, 0x0, 0x0, {}, [{0x38, 0x1, [@m_tunnel_key={0x34, 0x1, 0x0, 0x0, {{0xf}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}, 0x4c}}, 0x0) ioctl$UI_SET_ABSBIT(0xffffffffffffffff, 0x40045567, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f0000001040)={'gre0\x00', 0x0}) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r2, 0x89f2, 0x0) modify_ldt$read(0x0, 0x0, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) mkdir(&(0x7f0000000000)='./tracefs\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./tracefs\x00', &(0x7f0000000080)='tracefs\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./tracefs/trace_options\x00', 0x2, 0x0) write(r3, &(0x7f0000000100)='raw', 0x3) syz_fuse_handle_req(r3, &(0x7f0000000180)="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", 0x2000, &(0x7f0000002e40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 8.93060937s ago: executing program 4 (id=1932): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(r1, 0x47, &(0x7f0000000200)=0x7) futex(&(0x7f000000cffc)=0x1, 0xd, 0x2, 0x0, 0x0, 0x400000) ioctl$sock_bt_hci(0xffffffffffffffff, 0x400448e1, 0x0) bind$bt_hci(0xffffffffffffffff, 0x0, 0x0) r3 = syz_open_procfs(0x0, 0x0) openat$cgroup_freezer_state(r3, 0x0, 0x2, 0x0) io_setup(0x7, &(0x7f0000000280)=0x0) io_submit(r4, 0x1, &(0x7f0000000500)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, 0xffffffffffffffff, 0x0}]) 8.403007105s ago: executing program 1 (id=1935): socket$inet6_udp(0xa, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000001500)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0x1ff) mount(&(0x7f00000000c0)=@filename='./dev/sda1\x00', &(0x7f0000000140)='./mnt\x00', &(0x7f0000000100)='ext4\x00', 0x8410, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) chdir(&(0x7f0000000140)='./file0\x00') r3 = open(&(0x7f0000000040)='./bus\x00', 0x4c27e, 0x10) fallocate(r3, 0x0, 0x0, 0x1000f4) sendfile(r3, r3, 0x0, 0x40000000800) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x80042, 0x4d) fallocate(r4, 0x100000000000011, 0x2000, 0x2f93) 7.768209385s ago: executing program 3 (id=1936): r0 = openat$ttynull(0xffffffffffffff9c, &(0x7f00000000c0), 0x88002, 0x0) syz_genetlink_get_family_id$wireguard(&(0x7f0000000100), 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8d}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) syz_clone(0x600, 0x0, 0x33, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000032680)=""/102400, 0x19000) fsconfig$FSCONFIG_SET_PATH_EMPTY(0xffffffffffffffff, 0x4, 0x0, &(0x7f00000058c0)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0xffffffffffffff9c) unlinkat(0xffffffffffffff9c, &(0x7f0000000040)='./file0/file2\x00', 0x0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000003c0), 0x10) ioctl$TIOCSSOFTCAR(0xffffffffffffffff, 0x5453, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0xd) r3 = open(&(0x7f0000000040)='./bus\x00', 0x143142, 0x80) ftruncate(r3, 0x2007ffb) sendfile(r0, r3, 0x0, 0x1000000201002) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r4, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000080)={0x54, 0x3, 0x8, 0x201, 0x0, 0x0, {0x3, 0x0, 0x5}, [@CTA_TIMEOUT_DATA={0x1c, 0x4, 0x0, 0x1, @icmpv6=[@CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x7f}, @CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0xbad5}, @CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x3135}]}, @CTA_TIMEOUT_DATA={0x14, 0x4, 0x0, 0x1, @icmpv6=[@CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x3}, @CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x7}]}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0xc01}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x1}]}, 0x54}, 0x1, 0x0, 0x0, 0x24044801}, 0x4000) sendmsg$NFT_BATCH(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="1400000010000100000000000000000000000a0020000000000a01000000000000000000050000000900010073797a300000000064000000120a01000000000000000000050000000900010073797a30000000000900020073797a3100000000080003000000000630000480080001"], 0xb0}, 0x1, 0x0, 0x0, 0x20004081}, 0x40800) 7.489199898s ago: executing program 4 (id=1937): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000300)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) pwritev(0xffffffffffffffff, 0x0, 0x0, 0x80000001, 0x5f) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) mount$nfs(0x0, &(0x7f00000000c0)='./mnt\x00', &(0x7f0000000100), 0x0, 0x0) socket$packet(0x11, 0x3, 0x300) connect$inet(r1, &(0x7f00000000c0)={0x2, 0x20, @remote}, 0x10) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/crypto\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x4000000000010046) 5.618641086s ago: executing program 3 (id=1938): socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_create_resource$binfmt(&(0x7f0000001400)='./file0\x00') openat$binfmt(0xffffffffffffff9c, r0, 0x42, 0x1ff) openat$fuse(0xffffffffffffff9c, &(0x7f0000002040), 0x2, 0x0) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000180)={0x2c, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) write(0xffffffffffffffff, &(0x7f0000000140)='p', 0x1) mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r2, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r1, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=[@cred={{0x1c}}, @rights={{0x10}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x70}, 0x80) socketpair$unix(0x1, 0x2, 0x0, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000001c0)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) r4 = syz_ublk_setup_io_uring(0x467c, &(0x7f0000000140)={0x0, 0xcfab, 0x8000, 0x0, 0x118}, &(0x7f0000000280), &(0x7f00000002c0), &(0x7f00000003c0)) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = dup(r5) syz_ublk_setup_queues(r6, r3, &(0x7f00000004c0)={0x0, 0x400042cc, 0x10, 0x1, 0x80, 0x0, r4}, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe706, 0x1000, 0x3, 0x91}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x3b40, 0x2, 0x4, 0x3aa}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x93f9, 0x8000, 0x4003bfff, 0x2b8}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5, 0x800, 0x3, 0x8}}], 0x1, 0x0, 0x0) 5.554285889s ago: executing program 4 (id=1939): sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(r2, 0x47, &(0x7f0000000200)=0x7) futex(&(0x7f000000cffc)=0x1, 0xd, 0x2, 0x0, 0x0, 0x400000) ioctl$sock_bt_hci(0xffffffffffffffff, 0x400448e1, 0x0) bind$bt_hci(0xffffffffffffffff, 0x0, 0x0) r4 = syz_open_procfs(0x0, 0x0) openat$cgroup_freezer_state(r4, 0x0, 0x2, 0x0) 4.281744499s ago: executing program 9 (id=1940): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8d}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_BIND_MAP(0xa, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x14, &(0x7f0000000400)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x40f03, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r1}, 0xc) syz_clone(0x600, 0x0, 0x33, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000032680)=""/102400, 0x19000) r3 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$inet(r3, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x300060c1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r4 = semget(0x3, 0x4, 0x69c) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) semop(r4, 0x0, 0x0) semop(r4, &(0x7f0000000340)=[{0x2, 0x7f, 0x1800}, {0x1, 0xbbdb, 0x1000}, {0x1, 0x5}], 0x3) semctl$SETALL(r4, 0x0, 0x11, &(0x7f0000000140)=[0x6, 0x7fff]) 4.190496403s ago: executing program 1 (id=1941): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0x47, &(0x7f0000000200)=0x7) futex(&(0x7f000000cffc)=0x1, 0xd, 0x2, 0x0, 0x0, 0x400000) ioctl$sock_bt_hci(0xffffffffffffffff, 0x400448e1, 0x0) bind$bt_hci(0xffffffffffffffff, 0x0, 0x0) r3 = syz_open_procfs(0x0, 0x0) openat$cgroup_freezer_state(r3, 0x0, 0x2, 0x0) io_setup(0x7, &(0x7f0000000280)=0x0) io_submit(r4, 0x1, &(0x7f0000000500)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, 0xffffffffffffffff, 0x0}]) 2.55663027s ago: executing program 9 (id=1942): openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x41}, 0x809d) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) mbind(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x6002, &(0x7f0000000140)=0xa, 0xffffffffffffffff, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000002f0d31209000000bc2e79e995"], 0x0) write$binfmt_script(r2, &(0x7f0000000100), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="1400000042003303"], 0x14}, 0x1, 0x0, 0x0, 0x4015}, 0x24040004) recvmmsg(r3, &(0x7f0000002080)=[{{0x0, 0x0, 0x0}, 0x8}, {{0x0, 0x0, 0x0}, 0x7aaf804d}, {{0x0, 0x0, 0x0}, 0xd}, {{0x0, 0x0, &(0x7f00000005c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000001e00)=""/54, 0x36}, {0x0}, {0x0}, {0x0}, {0x0}], 0x8}, 0x81}], 0x4, 0x12002, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10008000}, 0x40095) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000240)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) sendmsg$inet6(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0xa, 0x4e21, 0x80000, @loopback, 0x3}, 0x1c, 0x0}, 0x440e0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 1.5032371s ago: executing program 1 (id=1943): socket$inet6_mptcp(0xa, 0x1, 0x106) r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x401) socket$inet_sctp(0x2, 0x1, 0x84) socket$inet_smc(0x2b, 0x1, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x24, 0x0) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x5, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r1, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) syz_open_dev$video4linux(&(0x7f00000001c0), 0x3, 0x40483) openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0) signalfd4(0xffffffffffffffff, &(0x7f0000000080)={[0x2]}, 0x8, 0x80000) socket$nl_route(0x10, 0x3, 0x0) rt_sigprocmask(0x0, &(0x7f0000000000)={[0xfffffffffffffffd]}, 0x0, 0x8) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x2, 0x3, 0xfffffffffffffffd, 0x3, 0x80, 0x1}, 0x0, &(0x7f0000002080)={0x3ff, 0x0, 0x8, 0x9, 0x0, 0x663, 0x7fffffff}, 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f00000005c0)={0x53, 0x0, 0x6, 0x0, @scatter={0x0, 0x20000, 0x0}, &(0x7f0000000240)="588d7acda0b2", 0x0, 0x0, 0x0, 0x0, 0x0}) 1.410665264s ago: executing program 4 (id=1944): socket$inet_mptcp(0x2, 0x1, 0x106) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() rt_tgsigqueueinfo(r0, r0, 0xa, &(0x7f0000000180)={0x26, 0x6, 0x50}) sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0xffff, 0x3fd, 0x0, 0xb2, 0x0, 0x2}, 0x9c) r4 = syz_open_procfs(0x0, 0x0) read$FUSE(r4, &(0x7f00000005c0)={0x2020}, 0x2020) sendmsg$802154_dgram(0xffffffffffffffff, &(0x7f00000018c0)={&(0x7f0000000500)={0x24, @short}, 0x14, &(0x7f0000001880)={0x0}}, 0x0) gettimeofday(0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x20000090) bind$inet6(r3, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r3, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) 190.034672ms ago: executing program 4 (id=1945): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) syz_open_dev$usbfs(&(0x7f0000000080), 0x75, 0x109301) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_RATE_GET(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={0x0}, 0x1, 0x0, 0x0, 0x40014}, 0x0) syz_emit_ethernet(0x2a, 0x0, 0x0) prlimit64(0x0, 0xc, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) connect$packet(r3, &(0x7f0000000200)={0x1f, 0xf8, 0x0, 0x1, 0x2}, 0x14) shutdown(r3, 0x1) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, 0x0) syz_genetlink_get_family_id$smc(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$SMC_PNETID_DEL(0xffffffffffffffff, 0x0, 0x4000) 0s ago: executing program 1 (id=1946): mkdirat(0xffffffffffffff9c, 0x0, 0x1c0) socket$inet_sctp(0x2, 0x1, 0x84) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x6) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4090}, 0x4004) shmget(0x2, 0x1000, 0x7800010c, &(0x7f0000ffd000/0x1000)=nil) io_uring_setup(0x2a6a, &(0x7f00000002c0)={0x0, 0xd610, 0x0, 0x1, 0x3c}) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r3 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x8042, 0x0) write$P9_RSTATu(r3, &(0x7f0000000580)=ANY=[@ANYRES32=0x0, @ANYRES32=0x0], 0x239) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x10, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="b400000000000000791148000000000071112a000000000095000300"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0x11, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0xffffffffffffff96}, 0x3e) kernel console output (not intermixed with test programs): xecutor: mark_inode_dirty error [ 1155.214131][T13224] netlink: 27 bytes leftover after parsing attributes in process `syz.0.1397'. [ 1160.420632][ T8] IPVS: starting estimator thread 0... [ 1160.686677][T13252] IPVS: using max 17 ests per chain, 40800 per kthread [ 1165.805114][ T51] Bluetooth: hci0: command 0x0406 tx timeout [ 1166.666029][ T6190] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1166.832636][ T51] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1166.846130][ T51] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1166.855961][ T51] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1166.911642][ T51] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1166.936166][ T51] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 1166.946432][ T51] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1167.034603][T13277] sctp: [Deprecated]: syz.6.1406 (pid 13277) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1167.034603][T13277] Use struct sctp_sack_info instead [ 1167.820362][ T6190] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1168.208983][ T6190] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1168.630205][ T6190] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1169.091666][ T51] Bluetooth: hci2: command tx timeout [ 1171.321417][ T51] Bluetooth: hci2: command tx timeout [ 1172.853381][T13274] chnl_net:caif_netlink_parms(): no params data found [ 1173.416492][ T51] Bluetooth: hci2: command tx timeout [ 1173.571924][ T6190] tipc: Left network mode [ 1173.921922][ T6190] batman_adv: batadv0: Interface deactivated: ip6gretap1 [ 1176.086349][ T51] Bluetooth: hci2: command tx timeout [ 1177.575102][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 1177.581724][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 1178.561172][T13339] loop0: detected capacity change from 0 to 512 [ 1178.587558][ T6190] batman_adv: batadv0: Removing interface: ip6gretap1 [ 1178.608249][T13339] ext4: Bad value for 'data' [ 1180.876015][T12935] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 1181.956027][T13274] bridge0: port 1(bridge_slave_0) entered blocking state [ 1181.976637][T13274] bridge0: port 1(bridge_slave_0) entered disabled state [ 1181.984098][T13274] bridge_slave_0: entered allmulticast mode [ 1182.040772][T13274] bridge_slave_0: entered promiscuous mode [ 1182.216778][T13274] bridge0: port 2(bridge_slave_1) entered blocking state [ 1182.224033][T13274] bridge0: port 2(bridge_slave_1) entered disabled state [ 1182.241471][T13274] bridge_slave_1: entered allmulticast mode [ 1182.268870][T13274] bridge_slave_1: entered promiscuous mode [ 1182.524225][T13274] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1182.577401][T13274] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1183.176181][T13274] team0: Port device team_slave_0 added [ 1183.309700][T13274] team0: Port device team_slave_1 added [ 1186.223021][ T6190] bond1: (slave gretap1): Releasing active interface [ 1186.533230][T13274] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1186.566375][T13274] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1186.656336][T13274] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1186.828407][T13274] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1186.852878][T13274] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1186.920319][T13274] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1188.427842][T13396] FAULT_INJECTION: forcing a failure. [ 1188.427842][T13396] name failslab, interval 1, probability 0, space 0, times 0 [ 1188.441400][T13396] CPU: 0 PID: 13396 Comm: syz.6.1422 Not tainted syzkaller #0 [ 1188.448927][T13396] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1188.459024][T13396] Call Trace: [ 1188.462342][T13396] [ 1188.465342][T13396] dump_stack_lvl+0x18c/0x250 [ 1188.470180][T13396] ? show_regs_print_info+0x20/0x20 [ 1188.475434][T13396] ? load_image+0x420/0x420 [ 1188.479992][T13396] ? __might_sleep+0xe0/0xe0 [ 1188.484638][T13396] ? __lock_acquire+0x7d80/0x7d80 [ 1188.489726][T13396] should_fail_ex+0x394/0x4c0 [ 1188.494460][T13396] should_failslab+0x9/0x20 [ 1188.499018][T13396] slab_pre_alloc_hook+0x59/0x300 [ 1188.504103][T13396] ? rng_is_initialized+0x40/0x40 [ 1188.509181][T13396] ? ceph_create_client+0x6f/0x300 [ 1188.514345][T13396] __kmem_cache_alloc_node+0x53/0x250 [ 1188.519784][T13396] ? ceph_create_client+0x6f/0x300 [ 1188.524947][T13396] kmalloc_trace+0x2a/0xe0 [ 1188.529428][T13396] ceph_create_client+0x6f/0x300 [ 1188.534427][T13396] ceph_get_tree+0x1ca/0x1800 [ 1188.539170][T13396] ? bpf_lsm_capable+0x9/0x10 [ 1188.543886][T13396] ? security_capable+0x89/0xb0 [ 1188.548793][T13396] vfs_get_tree+0x8c/0x280 [ 1188.553269][T13396] vfs_cmd_create+0xe3/0x230 [ 1188.557941][T13396] __se_sys_fsconfig+0x70a/0x850 [ 1188.562942][T13396] ? __x64_sys_fsconfig+0xc0/0xc0 [ 1188.568029][T13396] ? lockdep_hardirqs_on+0x98/0x150 [ 1188.573273][T13396] ? __x64_sys_fsconfig+0x20/0xc0 [ 1188.578350][T13396] do_syscall_64+0x55/0xb0 [ 1188.582844][T13396] ? clear_bhb_loop+0x40/0x90 [ 1188.587576][T13396] ? clear_bhb_loop+0x40/0x90 [ 1188.592309][T13396] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1188.598255][T13396] RIP: 0033:0x7fe4c2d9e159 [ 1188.602709][T13396] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1188.622368][T13396] RSP: 002b:00007fe4c3cad028 EFLAGS: 00000246 ORIG_RAX: 00000000000001af [ 1188.630834][T13396] RAX: ffffffffffffffda RBX: 00007fe4c3026180 RCX: 00007fe4c2d9e159 [ 1188.638869][T13396] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 0000000000000005 [ 1188.646892][T13396] RBP: 00007fe4c2e3503b R08: 0000000000000000 R09: 0000000000000000 [ 1188.654906][T13396] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1188.662920][T13396] R13: 00007fe4c3026218 R14: 00007fe4c3026180 R15: 00007ffdc5e28528 [ 1188.670961][T13396] [ 1189.030588][T13274] hsr_slave_0: entered promiscuous mode [ 1189.095122][T13274] hsr_slave_1: entered promiscuous mode [ 1189.134120][T13400] Cannot find add_set index 0 as target [ 1189.197321][T13274] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1189.215020][T13274] Cannot create hsr debugfs directory [ 1189.656423][ T6190] hsr_slave_0: left promiscuous mode [ 1189.696894][ T6190] hsr_slave_1: left promiscuous mode [ 1189.718741][T13406] loop0: detected capacity change from 0 to 1024 [ 1189.725471][ T6190] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1189.754552][ T6190] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1189.774755][T13406] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (38034!=20869) [ 1189.808070][ T6190] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1189.815563][ T6190] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1191.858234][T13406] JBD2: no valid journal superblock found [ 1191.907509][T13406] EXT4-fs (loop0): Could not load journal inode [ 1191.921546][ T6190] bridge_slave_1: left allmulticast mode [ 1191.966604][ T6190] bridge_slave_1: left promiscuous mode [ 1191.974721][ T6190] bridge0: port 2(bridge_slave_1) entered disabled state [ 1192.117912][ T6190] bridge_slave_0: left allmulticast mode [ 1192.123705][ T6190] bridge_slave_0: left promiscuous mode [ 1192.206633][ T6190] bridge0: port 1(bridge_slave_0) entered disabled state [ 1202.217331][ T6190] veth1_macvtap: left promiscuous mode [ 1202.222964][ T6190] veth0_macvtap: left promiscuous mode [ 1202.238626][ T6190] veth1_vlan: left promiscuous mode [ 1202.287430][ T6190] veth0_vlan: left promiscuous mode [ 1203.506719][T13463] loop8: detected capacity change from 0 to 1024 [ 1203.576634][T13463] EXT4-fs (loop8): stripe (4) is not aligned with cluster size (4096), stripe is disabled [ 1203.681241][T13463] EXT4-fs error (device loop8): ext4_map_blocks:610: inode #3: block 2: comm syz.8.1433: lblock 2 mapped to illegal pblock 2 (length 1) [ 1203.789751][T13463] Quota error (device loop8): qtree_write_dquot: dquota write failed [ 1203.798416][T13463] EXT4-fs error (device loop8): ext4_map_blocks:610: inode #3: block 48: comm syz.8.1433: lblock 0 mapped to illegal pblock 48 (length 1) [ 1203.859398][T13463] Quota error (device loop8): v2_write_file_info: Can't write info structure [ 1203.868521][T13463] EXT4-fs error (device loop8): ext4_acquire_dquot:6953: comm syz.8.1433: Failed to acquire dquot type 0 [ 1203.890178][T13463] EXT4-fs error (device loop8) in ext4_reserve_inode_write:5952: Corrupt filesystem [ 1203.905978][T13463] EXT4-fs error (device loop8): ext4_evict_inode:254: inode #11: comm syz.8.1433: mark_inode_dirty error [ 1203.924830][T13463] EXT4-fs warning (device loop8): ext4_evict_inode:257: couldn't mark inode dirty (err -117) [ 1203.935903][T13463] EXT4-fs (loop8): 1 orphan inode deleted [ 1203.950740][T13463] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1204.047974][ T6190] bond1 (unregistering): Released all slaves [ 1204.352784][T11589] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1204.397629][T11619] EXT4-fs error (device loop8): ext4_map_blocks:610: inode #3: block 1: comm kworker/u4:1: lblock 1 mapped to illegal pblock 1 (length 1) [ 1204.461903][T11619] Quota error (device loop8): remove_tree: Can't read quota data block 1 [ 1204.499471][T11619] EXT4-fs error (device loop8): ext4_release_dquot:6989: comm kworker/u4:1: Failed to release dquot type 0 [ 1204.527107][T11589] EXT4-fs error (device loop8): __ext4_get_inode_loc:4509: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 1204.686556][T11589] EXT4-fs error (device loop8) in ext4_reserve_inode_write:5952: Corrupt filesystem [ 1204.701735][T11589] EXT4-fs error (device loop8): ext4_quota_off:7237: inode #3: comm syz-executor: mark_inode_dirty error [ 1204.945761][T13469] FAULT_INJECTION: forcing a failure. [ 1204.945761][T13469] name failslab, interval 1, probability 0, space 0, times 0 [ 1204.958907][T13469] CPU: 0 PID: 13469 Comm: syz.0.1434 Not tainted syzkaller #0 [ 1204.966422][T13469] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1204.976522][T13469] Call Trace: [ 1204.979849][T13469] [ 1204.982813][T13469] dump_stack_lvl+0x18c/0x250 [ 1204.987548][T13469] ? show_regs_print_info+0x20/0x20 [ 1204.992795][T13469] ? load_image+0x420/0x420 [ 1204.997350][T13469] ? __might_sleep+0xe0/0xe0 [ 1205.001985][T13469] ? __lock_acquire+0x7d80/0x7d80 [ 1205.007062][T13469] should_fail_ex+0x394/0x4c0 [ 1205.011799][T13469] should_failslab+0x9/0x20 [ 1205.016361][T13469] slab_pre_alloc_hook+0x59/0x300 [ 1205.021443][T13469] ? rng_is_initialized+0x40/0x40 [ 1205.026526][T13469] ? ceph_create_client+0x6f/0x300 [ 1205.031715][T13469] __kmem_cache_alloc_node+0x53/0x250 [ 1205.037159][T13469] ? ceph_create_client+0x6f/0x300 [ 1205.042327][T13469] kmalloc_trace+0x2a/0xe0 [ 1205.046804][T13469] ceph_create_client+0x6f/0x300 [ 1205.051803][T13469] ceph_get_tree+0x1ca/0x1800 [ 1205.056540][T13469] ? bpf_lsm_capable+0x9/0x10 [ 1205.061256][T13469] ? security_capable+0x89/0xb0 [ 1205.066174][T13469] vfs_get_tree+0x8c/0x280 [ 1205.070643][T13469] vfs_cmd_create+0xe3/0x230 [ 1205.075309][T13469] __se_sys_fsconfig+0x70a/0x850 [ 1205.080310][T13469] ? __x64_sys_fsconfig+0xc0/0xc0 [ 1205.085402][T13469] ? lockdep_hardirqs_on+0x98/0x150 [ 1205.090647][T13469] ? __x64_sys_fsconfig+0x20/0xc0 [ 1205.095735][T13469] do_syscall_64+0x55/0xb0 [ 1205.100316][T13469] ? clear_bhb_loop+0x40/0x90 [ 1205.105443][T13469] ? clear_bhb_loop+0x40/0x90 [ 1205.110376][T13469] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1205.116352][T13469] RIP: 0033:0x7f08e8f9e159 [ 1205.120821][T13469] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1205.142228][T13469] RSP: 002b:00007f08e9e57028 EFLAGS: 00000246 ORIG_RAX: 00000000000001af [ 1205.150797][T13469] RAX: ffffffffffffffda RBX: 00007f08e9226180 RCX: 00007f08e8f9e159 [ 1205.158817][T13469] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 0000000000000005 [ 1205.166919][T13469] RBP: 00007f08e903503b R08: 0000000000000000 R09: 0000000000000000 [ 1205.175109][T13469] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1205.183161][T13469] R13: 00007f08e9226218 R14: 00007f08e9226180 R15: 00007fff37662aa8 [ 1205.191208][T13469] [ 1207.470692][ T6190] team0 (unregistering): Port device team_slave_1 removed [ 1207.598306][ T6190] team0 (unregistering): Port device team_slave_0 removed [ 1207.702912][ T6190] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1207.975987][ T6190] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1208.314639][T10661] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1208.330599][T10661] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1208.345276][T10661] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1208.441860][T10661] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1208.456385][T10661] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 1208.464161][T10661] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1208.959245][ T6190] bond0 (unregistering): Released all slaves [ 1210.606510][T10661] Bluetooth: hci3: command tx timeout [ 1213.911759][T10661] Bluetooth: hci3: command tx timeout [ 1214.152146][ T28] audit: type=1326 audit(1789412488.358:203): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13505 comm="syz.0.1442" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f08e8f9e159 code=0x7fc00000 [ 1214.362210][ T6190] IPVS: stop unused estimator thread 0... [ 1215.828818][T13537] loop8: detected capacity change from 0 to 512 [ 1215.877813][T13537] ext4: Bad value for 'data' [ 1216.036836][T10661] Bluetooth: hci3: command tx timeout [ 1219.389825][T10661] Bluetooth: hci3: command tx timeout [ 1221.851372][ T6190] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1222.194337][T13486] chnl_net:caif_netlink_parms(): no params data found [ 1222.460110][ T6190] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1222.513406][T13565] loop0: detected capacity change from 0 to 2048 [ 1224.250198][ T51] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1224.280111][ T51] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1224.291198][ T51] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1224.311422][ T51] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1224.335707][ T51] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 1224.345939][ T51] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1224.605002][T13578] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1451'. [ 1226.311451][ T6190] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1226.681001][ T51] Bluetooth: hci1: command tx timeout [ 1227.651040][ T6190] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1227.991276][T13486] bridge0: port 1(bridge_slave_0) entered blocking state [ 1228.148968][T13592] loop0: detected capacity change from 0 to 128 [ 1228.717582][T13486] bridge0: port 1(bridge_slave_0) entered disabled state [ 1228.799021][ T51] Bluetooth: hci1: command tx timeout [ 1228.841010][T13486] bridge_slave_0: entered allmulticast mode [ 1228.888187][T13486] bridge_slave_0: entered promiscuous mode [ 1228.928680][T13486] bridge0: port 2(bridge_slave_1) entered blocking state [ 1228.965476][T13486] bridge0: port 2(bridge_slave_1) entered disabled state [ 1228.997599][T13486] bridge_slave_1: entered allmulticast mode [ 1229.005917][T13486] bridge_slave_1: entered promiscuous mode [ 1229.869691][T13602] program syz.0.1456 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1229.924529][T13486] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1229.978546][T13600] netlink: 'syz.8.1455': attribute type 10 has an invalid length. [ 1230.282268][T13600] team0 (unregistering): Port device team_slave_0 removed [ 1230.308264][T13600] team0 (unregistering): Port device team_slave_1 removed [ 1230.527404][T13486] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1230.996591][ T51] Bluetooth: hci1: command tx timeout [ 1231.594720][T13486] team0: Port device team_slave_0 added [ 1231.608864][T13486] team0: Port device team_slave_1 added [ 1231.876509][T13486] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1231.883824][T13486] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1232.453993][T13486] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1232.767451][T13486] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1232.774531][T13486] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1232.879469][T13486] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1232.977437][ T6190] tipc: Left network mode [ 1233.086345][ T51] Bluetooth: hci1: command tx timeout [ 1235.831429][T13486] hsr_slave_0: entered promiscuous mode [ 1235.861989][T13486] hsr_slave_1: entered promiscuous mode [ 1235.877616][T13486] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1235.885315][T13486] Cannot create hsr debugfs directory [ 1235.917723][T13635] team_slave_0: mtu less than device minimum [ 1236.961942][T13572] chnl_net:caif_netlink_parms(): no params data found [ 1240.067022][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 1240.073968][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 1243.412758][ T6190] erspan0 (unregistering): left allmulticast mode [ 1243.436728][ T6190] erspan0 (unregistering): left promiscuous mode [ 1243.566617][ T6190] bridge2: port 1(erspan0) entered disabled state [ 1244.344186][T13572] bridge0: port 1(bridge_slave_0) entered blocking state [ 1244.400532][T13572] bridge0: port 1(bridge_slave_0) entered disabled state [ 1244.439649][T13572] bridge_slave_0: entered allmulticast mode [ 1244.457422][T13572] bridge_slave_0: entered promiscuous mode [ 1244.519354][T13572] bridge0: port 2(bridge_slave_1) entered blocking state [ 1244.598883][T13572] bridge0: port 2(bridge_slave_1) entered disabled state [ 1244.616715][T13572] bridge_slave_1: entered allmulticast mode [ 1244.711927][T13572] bridge_slave_1: entered promiscuous mode [ 1245.451226][T13572] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1245.760948][T13572] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1246.014741][T13691] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1246.028065][T13691] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1246.211682][T13572] team0: Port device team_slave_0 added [ 1246.234712][T13572] team0: Port device team_slave_1 added [ 1246.487698][ T6190] hsr_slave_0: left promiscuous mode [ 1246.511256][ T6190] hsr_slave_1: left promiscuous mode [ 1246.532139][ T6190] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1246.563393][ T6190] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1246.601796][ T6190] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1246.616341][ T6190] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1246.625879][ T6190] bridge_slave_1: left allmulticast mode [ 1246.636287][ T6190] bridge_slave_1: left promiscuous mode [ 1246.642393][ T6190] bridge0: port 2(bridge_slave_1) entered disabled state [ 1246.654643][ T6190] bridge_slave_0: left allmulticast mode [ 1246.664221][ T6190] bridge_slave_0: left promiscuous mode [ 1246.674173][ T6190] bridge0: port 1(bridge_slave_0) entered disabled state [ 1246.726087][ T6190] veth1_macvtap: left promiscuous mode [ 1246.731910][ T6190] veth0_macvtap: left promiscuous mode [ 1246.740371][ T6190] veth1_vlan: left promiscuous mode [ 1246.745877][ T6190] veth0_vlan: left promiscuous mode [ 1247.961275][ T6190] team0 (unregistering): Port device team_slave_1 removed [ 1248.049461][ T6190] team0 (unregistering): Port device team_slave_0 removed [ 1248.125691][ T6190] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1248.220941][ T6190] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1248.288607][ T51] Bluetooth: hci4: command 0x0c1a tx timeout [ 1248.291438][T13691] Bluetooth: hci4: Opcode 0x0c1a failed: -110 [ 1248.889374][T13691] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1248.895597][T13691] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 1248.917634][T13691] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1248.923906][T13691] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 1248.930683][ T6190] bond0 (unregistering): Released all slaves [ 1248.941472][T13691] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 1248.977686][T13691] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1248.994173][T13691] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 1249.024897][T13691] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 1249.243806][T13572] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1249.275998][T13572] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1249.313604][T13572] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1249.331649][T13572] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1249.346351][T13572] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1249.402025][T13572] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1249.592815][T13572] hsr_slave_0: entered promiscuous mode [ 1249.615800][T13572] hsr_slave_1: entered promiscuous mode [ 1249.633324][T13572] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1249.655228][T13572] Cannot create hsr debugfs directory [ 1249.917637][ T6190] IPVS: stop unused estimator thread 0... [ 1249.952153][T13486] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 1249.963858][T13486] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 1250.004185][T13486] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 1250.024037][T13486] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 1250.366366][ T51] Bluetooth: hci0: command 0x0406 tx timeout [ 1250.391757][T13572] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1250.435512][T13572] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1250.449288][T13572] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1250.498861][T13572] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1250.529685][T13486] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1250.640649][T13486] 8021q: adding VLAN 0 to HW filter on device team0 [ 1250.677486][ T1093] bridge0: port 1(bridge_slave_0) entered blocking state [ 1250.684708][ T1093] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1250.739020][ T6160] bridge0: port 2(bridge_slave_1) entered blocking state [ 1250.746317][ T6160] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1250.889064][T13572] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1250.927835][ T51] Bluetooth: hci3: command 0x0c1a tx timeout [ 1250.991667][T13572] 8021q: adding VLAN 0 to HW filter on device team0 [ 1251.016608][ T51] Bluetooth: hci1: command 0x0c1a tx timeout [ 1251.067586][ T1135] bridge0: port 1(bridge_slave_0) entered blocking state [ 1251.074800][ T1135] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1251.101250][ T6190] hsr_slave_0: left promiscuous mode [ 1251.116030][ T6190] hsr_slave_1: left promiscuous mode [ 1251.123938][ T6190] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1251.138745][ T6190] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1251.147179][ T6190] bridge_slave_1: left allmulticast mode [ 1251.152896][ T6190] bridge_slave_1: left promiscuous mode [ 1251.160714][ T6190] bridge0: port 2(bridge_slave_1) entered disabled state [ 1251.172358][ T6190] bridge_slave_0: left allmulticast mode [ 1251.178461][ T6190] bridge_slave_0: left promiscuous mode [ 1251.184338][ T6190] bridge0: port 1(bridge_slave_0) entered disabled state [ 1251.493708][ T6190] team0 (unregistering): Port device team_slave_1 removed [ 1251.548885][ T6190] team0 (unregistering): Port device team_slave_0 removed [ 1251.605703][ T6190] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1251.667531][ T6190] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1251.868069][ T6190] bond0 (unregistering): Released all slaves [ 1251.942425][ T1135] bridge0: port 2(bridge_slave_1) entered blocking state [ 1251.949673][ T1135] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1252.314232][T13486] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1252.447960][ T51] Bluetooth: hci0: command 0x0406 tx timeout [ 1252.520769][T13486] veth0_vlan: entered promiscuous mode [ 1252.581340][T13486] veth1_vlan: entered promiscuous mode [ 1252.682088][T13486] veth0_macvtap: entered promiscuous mode [ 1252.710526][T13486] veth1_macvtap: entered promiscuous mode [ 1252.748150][T13486] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1252.765405][T13486] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1252.783923][T13486] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1252.803151][T13486] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1252.816116][T13486] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1252.840363][T13486] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1252.852336][T13486] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1252.864057][T13486] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1252.875590][T13486] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1252.888012][T13486] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1252.913485][T13486] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1252.922790][T13486] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1252.933763][T13486] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1252.943896][T13486] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1252.970902][T13572] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1253.007760][ T51] Bluetooth: hci3: command 0x0c1a tx timeout [ 1253.087578][ T51] Bluetooth: hci1: command 0x0c1a tx timeout [ 1253.229062][ T6160] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1253.239131][ T6160] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1253.314635][T13572] veth0_vlan: entered promiscuous mode [ 1253.336130][ T6160] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1253.346131][ T6160] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1253.369522][T13572] veth1_vlan: entered promiscuous mode [ 1253.498747][T13572] veth0_macvtap: entered promiscuous mode [ 1253.557166][T13572] veth1_macvtap: entered promiscuous mode [ 1253.650939][T13572] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1253.668282][T13572] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1253.901106][T13572] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1253.947051][T13572] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1254.010148][T13572] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1254.118863][T13572] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1254.789611][T13572] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1255.010662][T13572] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1255.068851][T13572] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1255.082301][T13572] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1255.088968][ T51] Bluetooth: hci3: command 0x0c1a tx timeout [ 1255.101294][T13572] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1255.166521][ T51] Bluetooth: hci1: command 0x0c1a tx timeout [ 1255.173057][T13572] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1255.190603][T13572] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1255.213870][T13572] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1255.307815][T13572] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1255.325867][T13572] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1255.355273][T13572] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1255.374528][T13572] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1255.419122][T13756] syzkaller0: entered promiscuous mode [ 1255.424761][T13756] syzkaller0: entered allmulticast mode [ 1257.857561][ T6180] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1257.931821][T13778] loop3: detected capacity change from 0 to 512 [ 1257.962623][ T6180] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1258.278081][T13514] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 1259.201103][ T1128] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1259.297993][ T1128] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1266.470763][T13815] loop3: detected capacity change from 0 to 512 [ 1266.502295][T13814] loop8: detected capacity change from 0 to 1024 [ 1266.554622][T13815] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 1266.629823][T13814] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1266.646425][T13815] EXT4-fs (loop3): 1 truncate cleaned up [ 1266.721732][T13815] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1267.464478][ T28] audit: type=1800 audit(1789412541.598:204): pid=13825 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.8.1489" name="file1" dev="loop8" ino=15 res=0 errno=0 [ 1267.974674][ T28] audit: type=1800 audit(1789412541.608:205): pid=13825 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.8.1489" name="file1" dev="loop8" ino=15 res=0 errno=0 [ 1268.019006][T11589] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1268.274703][T13486] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1268.370908][T13831] loop8: detected capacity change from 0 to 512 [ 1268.399061][T13831] EXT4-fs (loop8): unable to read superblock [ 1270.306924][T13843] syzkaller0: entered promiscuous mode [ 1270.312499][T13843] syzkaller0: entered allmulticast mode [ 1273.605047][T13860] loop2: detected capacity change from 0 to 1024 [ 1273.614216][T13860] EXT4-fs: Ignoring removed i_version option [ 1280.692779][T13860] EXT4-fs warning (device loop2): ext4_multi_mount_protect:398: Unable to create kmmpd thread for loop2. [ 1282.386355][T10661] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1282.401408][T10661] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1282.411142][T10661] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1282.428960][T10661] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1282.453817][T10661] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 1282.465149][T10661] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1283.027505][ T1135] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1283.530225][ T1135] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1283.823920][ T51] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1283.849129][ T51] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1283.863264][ T51] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1283.887647][ T51] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1283.917544][ T51] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 1283.933973][ T51] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1284.114214][ T1135] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1284.598647][T10661] Bluetooth: hci0: command tx timeout [ 1284.945796][ T1135] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1287.446456][T10661] Bluetooth: hci1: command tx timeout [ 1287.449612][ T51] Bluetooth: hci0: command tx timeout [ 1288.566603][ T1135] tipc: Left network mode [ 1288.582803][T13871] chnl_net:caif_netlink_parms(): no params data found [ 1288.820710][T13912] Cannot find add_set index 0 as target [ 1289.486318][T10661] Bluetooth: hci1: command tx timeout [ 1289.491802][T10661] Bluetooth: hci0: command tx timeout [ 1289.517559][T13881] chnl_net:caif_netlink_parms(): no params data found [ 1289.587405][T13927] cgroup: Unknown subsys name '¬§@﬽æì¦4*oäÂÒ£hÓîºoþüíUÜ' [ 1289.701618][T13871] bridge0: port 1(bridge_slave_0) entered blocking state [ 1289.711763][T13871] bridge0: port 1(bridge_slave_0) entered disabled state [ 1289.720759][T13871] bridge_slave_0: entered allmulticast mode [ 1289.745842][T13871] bridge_slave_0: entered promiscuous mode [ 1290.131663][T13871] bridge0: port 2(bridge_slave_1) entered blocking state [ 1290.170498][T13871] bridge0: port 2(bridge_slave_1) entered disabled state [ 1290.201192][T13871] bridge_slave_1: entered allmulticast mode [ 1290.250986][T13871] bridge_slave_1: entered promiscuous mode [ 1290.774890][T13871] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1290.835778][T13871] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1291.566798][ T51] Bluetooth: hci0: command tx timeout [ 1291.572906][T10661] Bluetooth: hci1: command tx timeout [ 1293.725137][T10661] Bluetooth: hci1: command tx timeout [ 1293.968487][T13871] team0: Port device team_slave_0 added [ 1294.275196][T13871] team0: Port device team_slave_1 added [ 1294.387271][T13881] bridge0: port 1(bridge_slave_0) entered blocking state [ 1294.412015][T13881] bridge0: port 1(bridge_slave_0) entered disabled state [ 1294.445603][T13881] bridge_slave_0: entered allmulticast mode [ 1294.488330][T13881] bridge_slave_0: entered promiscuous mode [ 1294.532793][T13881] bridge0: port 2(bridge_slave_1) entered blocking state [ 1294.556961][T13881] bridge0: port 2(bridge_slave_1) entered disabled state [ 1294.585892][T13881] bridge_slave_1: entered allmulticast mode [ 1294.623690][T13881] bridge_slave_1: entered promiscuous mode [ 1295.107562][T13871] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1295.124633][T13871] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1295.193417][T13871] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1295.474405][T13881] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1295.507150][T13871] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1295.526906][T13871] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1295.566587][T13871] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1295.620843][T13881] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1295.803497][ T1135] hsr_slave_0: left promiscuous mode [ 1295.851781][ T1135] hsr_slave_1: left promiscuous mode [ 1295.877749][ T1135] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1295.885328][ T1135] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1295.931323][ T1135] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1295.939312][ T1135] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1296.181268][ T1135] bridge_slave_1: left allmulticast mode [ 1296.187100][ T1135] bridge_slave_1: left promiscuous mode [ 1296.192931][ T1135] bridge0: port 2(bridge_slave_1) entered disabled state [ 1296.240298][ T1135] bridge_slave_0: left allmulticast mode [ 1296.246028][ T1135] bridge_slave_0: left promiscuous mode [ 1296.267115][ T1135] bridge0: port 1(bridge_slave_0) entered disabled state [ 1297.000395][T13972] loop8: detected capacity change from 0 to 256 [ 1297.042271][T13972] FAT-fs (loop8): Unrecognized mount option "uh¤á1" or missing value [ 1297.169773][T13974] loop3: detected capacity change from 0 to 128 [ 1297.239456][ T1135] veth1_macvtap: left promiscuous mode [ 1297.287703][ T1135] veth0_macvtap: left promiscuous mode [ 1297.324055][ T1135] veth1_vlan: left promiscuous mode [ 1297.344256][ T1135] veth0_vlan: left promiscuous mode [ 1298.306653][T13981] ptrace attach of "ci2-linux-6-6-kasan/syz-executor exec"[13486] was attempted by "ci2-linux-6-6-kasan/syz-executor exec"[13981] [ 1298.748015][T13976] x86/PAT: syz.8.1508:13976 freeing invalid memtype [mem 0xfe004000-0xfe004fff] [ 1299.500691][T13990] netlink: 8 bytes leftover after parsing attributes in process `syz.8.1511'. [ 1299.511982][T13990] netlink: 36 bytes leftover after parsing attributes in process `syz.8.1511'. [ 1299.521574][T13990] netlink: 12 bytes leftover after parsing attributes in process `syz.8.1511'. [ 1299.530699][T13990] netlink: 8 bytes leftover after parsing attributes in process `syz.8.1511'. [ 1300.494987][T13994] FAT-fs (nullb0): bogus number of reserved sectors [ 1300.502699][T13994] FAT-fs (nullb0): Can't find a valid FAT filesystem [ 1300.527451][T13994] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 1300.792941][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 1300.804652][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 1304.068487][ T1135] team0 (unregistering): Port device team_slave_1 removed [ 1304.260267][ T1135] team0 (unregistering): Port device team_slave_0 removed [ 1304.413136][ T1135] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1304.521193][ T1135] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1307.679204][ T1135] bond0 (unregistering): Released all slaves [ 1310.143761][T13881] team0: Port device team_slave_0 added [ 1310.314706][T13871] hsr_slave_0: entered promiscuous mode [ 1310.338287][T13871] hsr_slave_1: entered promiscuous mode [ 1310.402292][T13881] team0: Port device team_slave_1 added [ 1310.517393][T13881] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1310.543056][T13881] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1310.636226][T13881] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1310.833583][T13881] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1310.844239][T13881] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1311.065057][T13881] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1312.254347][T14035] loop8: detected capacity change from 0 to 128 [ 1312.887489][T13881] hsr_slave_0: entered promiscuous mode [ 1313.060463][T13881] hsr_slave_1: entered promiscuous mode [ 1313.116892][T13881] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1313.155900][T13881] Cannot create hsr debugfs directory [ 1316.934957][ T1135] IPVS: stop unused estimator thread 0... [ 1320.432789][ T1135] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1321.034238][ T1135] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1326.330137][ T1135] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1327.345487][ T1135] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1328.878607][T14116] 9pnet_virtio: no channels available for device syz [ 1329.866880][T13881] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 1329.900477][T13881] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 1330.042572][T14122] loop3: detected capacity change from 0 to 2048 [ 1330.080044][T13881] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 1330.104308][T14122] UDF-fs: error (device loop3): udf_process_sequence: Primary Volume Descriptor not found! [ 1330.141733][T13881] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 1330.179473][T14122] UDF-fs: warning (device loop3): udf_load_logicalvol: Damaged or missing LVID, forcing readonly mount [ 1335.799212][T13871] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 1335.925036][T13871] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 1336.194232][T13871] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 1336.295064][T13871] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 1337.259644][T14166] binder: 14164:14166 ioctl c0306201 0 returned -14 [ 1339.455111][T14170] "syz.8.1537" (14170) uses obsolete ecb(arc4) skcipher [ 1340.900465][T13881] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1341.184719][T13881] 8021q: adding VLAN 0 to HW filter on device team0 [ 1341.277493][ T6190] bridge0: port 1(bridge_slave_0) entered blocking state [ 1341.284726][ T6190] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1342.664714][ T51] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1342.678879][ T51] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1342.689202][ T1135] hsr_slave_0: left promiscuous mode [ 1342.698465][ T51] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1342.715028][ T51] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1342.762275][ T51] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 1342.773573][ T51] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1342.812878][ T1135] hsr_slave_1: left promiscuous mode [ 1342.933292][ T1135] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1342.943103][ T51] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1342.959961][ T51] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1342.972504][ T51] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1342.992688][ T51] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1343.046394][ T1135] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1343.062590][ T51] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 1343.076349][ T51] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1343.088713][ T1135] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1343.146526][ T1135] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1343.177832][ T1135] bridge_slave_1: left allmulticast mode [ 1343.184090][ T1135] bridge_slave_1: left promiscuous mode [ 1343.212308][ T1135] bridge0: port 2(bridge_slave_1) entered disabled state [ 1343.254472][ T1135] bridge_slave_0: left allmulticast mode [ 1343.266489][ T1135] bridge_slave_0: left promiscuous mode [ 1343.272357][ T1135] bridge0: port 1(bridge_slave_0) entered disabled state [ 1343.410544][ T1135] veth1_macvtap: left promiscuous mode [ 1343.422120][ T1135] veth0_macvtap: left promiscuous mode [ 1343.433201][ T1135] veth1_vlan: left promiscuous mode [ 1343.444836][ T1135] veth0_vlan: left promiscuous mode [ 1344.934990][T10661] Bluetooth: hci2: command tx timeout [ 1345.178560][T10661] Bluetooth: hci0: command tx timeout [ 1345.304486][T14196] loop3: detected capacity change from 0 to 256 [ 1345.315067][T14196] exfat: Deprecated parameter 'namecase' [ 1345.321377][T14196] exfat: Deprecated parameter 'namecase' [ 1345.365618][T14196] exFAT-fs (loop3): failed to load upcase table (idx : 0x0001fe89, chksum : 0xbf24f927, utbl_chksum : 0xe619d30d) [ 1348.056088][T10661] Bluetooth: hci2: command tx timeout [ 1348.061702][T10661] Bluetooth: hci0: command tx timeout [ 1348.836907][T14206] loop3: detected capacity change from 0 to 128 [ 1351.947965][ T51] Bluetooth: hci0: command tx timeout [ 1351.953509][ T51] Bluetooth: hci2: command tx timeout [ 1352.037171][ T1135] team0 (unregistering): Port device team_slave_1 removed [ 1352.861108][T14214] binder: 14212:14214 ioctl c0306201 0 returned -14 [ 1354.247021][ T51] Bluetooth: hci0: command tx timeout [ 1354.255798][ T51] Bluetooth: hci2: command tx timeout [ 1354.501021][ T1135] team0 (unregistering): Port device team_slave_0 removed [ 1354.694217][ T1135] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1354.925648][ T1135] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1355.280563][T14220] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 1356.743659][ T1135] bond0 (unregistering): Released all slaves [ 1357.218098][T14228] loop3: detected capacity change from 0 to 256 [ 1357.326566][T14228] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 1357.571356][T14227] bridge0: adding interface bridge0 with same address as a received packet (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1362.266644][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 1362.273098][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 1362.598356][T14175] chnl_net:caif_netlink_parms(): no params data found [ 1362.935933][T14180] chnl_net:caif_netlink_parms(): no params data found [ 1363.130127][T14175] bridge0: port 1(bridge_slave_0) entered blocking state [ 1363.146821][T14175] bridge0: port 1(bridge_slave_0) entered disabled state [ 1363.154261][T14175] bridge_slave_0: entered allmulticast mode [ 1363.162491][T14175] bridge_slave_0: entered promiscuous mode [ 1363.180342][T14175] bridge0: port 2(bridge_slave_1) entered blocking state [ 1363.196419][T14175] bridge0: port 2(bridge_slave_1) entered disabled state [ 1363.203895][T14175] bridge_slave_1: entered allmulticast mode [ 1363.214141][T14175] bridge_slave_1: entered promiscuous mode [ 1363.534214][T14175] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1365.598828][T14180] bridge0: port 1(bridge_slave_0) entered blocking state [ 1365.609044][T14180] bridge0: port 1(bridge_slave_0) entered disabled state [ 1365.646489][T14180] bridge_slave_0: entered allmulticast mode [ 1365.654695][T14180] bridge_slave_0: entered promiscuous mode [ 1365.702874][T14175] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1365.793835][T14180] bridge0: port 2(bridge_slave_1) entered blocking state [ 1365.816715][T14180] bridge0: port 2(bridge_slave_1) entered disabled state [ 1365.829104][T14180] bridge_slave_1: entered allmulticast mode [ 1365.846301][T14180] bridge_slave_1: entered promiscuous mode [ 1365.949055][T14175] team0: Port device team_slave_0 added [ 1365.973356][T14180] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1365.990022][T14180] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1366.020015][T14175] team0: Port device team_slave_1 added [ 1366.143634][T14180] team0: Port device team_slave_0 added [ 1366.198912][T14180] team0: Port device team_slave_1 added [ 1366.208888][T14175] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1366.215918][T14175] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1366.243739][T14175] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1366.373130][T14175] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1366.389540][T14175] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1366.419268][T14175] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1366.521286][T14180] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1366.539084][T14180] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1366.575867][T14180] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1366.730197][T14180] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1366.746521][T14180] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1366.804538][T14180] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1366.905374][T14175] hsr_slave_0: entered promiscuous mode [ 1366.922850][T14175] hsr_slave_1: entered promiscuous mode [ 1366.932789][T14175] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1366.951256][T14175] Cannot create hsr debugfs directory [ 1367.415935][T14263] lo: entered allmulticast mode [ 1367.422790][T14263] tunl0: entered allmulticast mode [ 1367.429808][T14263] gre0: entered allmulticast mode [ 1367.437249][T14263] gretap0: entered allmulticast mode [ 1367.444562][T14263] erspan0: entered allmulticast mode [ 1367.452014][T14263] ip_vti0: entered allmulticast mode [ 1367.459531][T14263] ip6_vti0: entered allmulticast mode [ 1367.467012][T14263] sit0: entered allmulticast mode [ 1367.475293][T14263] ip6tnl0: entered allmulticast mode [ 1367.483739][T14263] ip6gre0: entered allmulticast mode [ 1367.491047][T14263] syz_tun: entered allmulticast mode [ 1367.498482][T14263] ip6gretap0: entered allmulticast mode [ 1367.506056][T14263] bridge0: entered allmulticast mode [ 1367.513299][T14263] vcan0: entered allmulticast mode [ 1367.520445][T14263] bond0: entered allmulticast mode [ 1367.526497][T14263] bond_slave_0: entered allmulticast mode [ 1367.533162][T14263] bond_slave_1: entered allmulticast mode [ 1367.541319][T14263] team0: entered allmulticast mode [ 1367.547407][T14263] team_slave_0: entered allmulticast mode [ 1367.554153][T14263] team_slave_1: entered allmulticast mode [ 1367.562790][T14263] dummy0: entered allmulticast mode [ 1367.570084][T14263] nlmon0: entered allmulticast mode [ 1367.578105][T14263] caif0: entered allmulticast mode [ 1367.584600][T14263] batadv0: entered allmulticast mode [ 1367.592503][T14263] vxcan0: entered allmulticast mode [ 1367.599301][T14263] vxcan1: entered allmulticast mode [ 1367.605840][T14263] veth0: entered allmulticast mode [ 1367.613199][T14263] veth1: entered allmulticast mode [ 1367.620935][T14263] wg0: entered allmulticast mode [ 1367.628260][T14263] wg1: entered allmulticast mode [ 1367.635162][T14263] wg2: entered allmulticast mode [ 1367.642293][T14263] veth0_to_bridge: entered allmulticast mode [ 1367.654979][T14263] veth1_to_bridge: entered allmulticast mode [ 1367.665529][T14263] veth0_to_bond: entered allmulticast mode [ 1367.675716][T14263] veth1_to_bond: entered allmulticast mode [ 1367.685516][T14263] veth0_to_team: entered allmulticast mode [ 1367.695295][T14263] veth1_to_team: entered allmulticast mode [ 1367.707212][T14263] veth0_to_batadv: entered allmulticast mode [ 1367.715475][T14263] batadv_slave_0: entered allmulticast mode [ 1367.723551][T14263] veth1_to_batadv: entered allmulticast mode [ 1367.731790][T14263] batadv_slave_1: entered allmulticast mode [ 1367.739982][T14263] xfrm0: entered allmulticast mode [ 1367.747893][T14263] veth0_to_hsr: entered allmulticast mode [ 1367.756045][T14263] hsr_slave_0: entered allmulticast mode [ 1367.764266][T14263] veth1_to_hsr: entered allmulticast mode [ 1367.772198][T14263] hsr_slave_1: entered allmulticast mode [ 1367.782114][T14263] hsr0: entered allmulticast mode [ 1367.789802][T14263] veth1_virt_wifi: entered allmulticast mode [ 1367.798293][T14263] veth0_virt_wifi: entered allmulticast mode [ 1367.807269][T14263] virt_wifi0: entered allmulticast mode [ 1367.814305][T14263] veth1_vlan: entered allmulticast mode [ 1367.822014][T14263] veth0_vlan: entered allmulticast mode [ 1367.829968][T14263] vlan0: entered allmulticast mode [ 1367.837287][T14263] vlan1: entered allmulticast mode [ 1367.844598][T14263] macvlan0: entered allmulticast mode [ 1367.851829][T14263] macvlan1: entered allmulticast mode [ 1367.859223][T14263] ipvlan0: entered allmulticast mode [ 1367.865281][T14263] ipvlan1: entered allmulticast mode [ 1367.871659][T14263] veth1_macvtap: entered allmulticast mode [ 1367.880416][T14263] veth0_macvtap: entered allmulticast mode [ 1367.889372][T14263] macvtap0: entered allmulticast mode [ 1367.897647][T14263] macsec0: entered allmulticast mode [ 1367.904998][T14263] geneve0: entered allmulticast mode [ 1367.912435][T14263] geneve1: entered allmulticast mode [ 1367.919815][T14263] netdevsim netdevsim3 netdevsim0: entered allmulticast mode [ 1367.929665][T14263] netdevsim netdevsim3 netdevsim1: entered allmulticast mode [ 1367.939424][T14263] netdevsim netdevsim3 netdevsim2: entered allmulticast mode [ 1367.949058][T14263] netdevsim netdevsim3 netdevsim3: entered allmulticast mode [ 1367.959180][T14263] mac80211_hwsim hwsim24 wlan0: entered allmulticast mode [ 1367.968463][T14263] mac80211_hwsim hwsim25 wlan1: entered allmulticast mode [ 1368.304033][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1368.885474][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1369.268013][T14180] hsr_slave_0: entered promiscuous mode [ 1369.302055][T14180] hsr_slave_1: entered promiscuous mode [ 1369.319324][T14271] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 1369.347655][T14180] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1369.386440][T14180] Cannot create hsr debugfs directory [ 1373.483494][T14175] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 1373.567304][T14175] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 1373.596761][T14175] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 1373.757620][T14175] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 1378.263675][ T1135] hsr_slave_0: left promiscuous mode [ 1378.287129][ T1135] hsr_slave_1: left promiscuous mode [ 1378.317870][ T1135] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1378.354397][ T1135] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1378.375657][ T1135] bridge_slave_1: left allmulticast mode [ 1378.386429][ T1135] bridge_slave_1: left promiscuous mode [ 1378.392936][ T1135] bridge0: port 2(bridge_slave_1) entered disabled state [ 1378.409010][ T1135] bridge_slave_0: left allmulticast mode [ 1378.415003][ T1135] bridge_slave_0: left promiscuous mode [ 1378.426526][ T1135] bridge0: port 1(bridge_slave_0) entered disabled state [ 1378.452991][ T1135] hsr_slave_0: left promiscuous mode [ 1378.467484][ T1135] hsr_slave_1: left promiscuous mode [ 1378.474290][ T1135] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1378.493806][ T1135] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1378.515053][ T1135] bridge_slave_1: left allmulticast mode [ 1378.521577][ T1135] bridge_slave_1: left promiscuous mode [ 1378.540824][ T1135] bridge0: port 2(bridge_slave_1) entered disabled state [ 1378.558069][ T1135] bridge_slave_0: left allmulticast mode [ 1378.564471][ T1135] bridge_slave_0: left promiscuous mode [ 1378.576831][ T1135] bridge0: port 1(bridge_slave_0) entered disabled state [ 1379.119221][ T1135] team0 (unregistering): Port device team_slave_1 removed [ 1379.223908][ T1135] team0 (unregistering): Port device team_slave_0 removed [ 1379.357051][ T1135] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1379.895653][ T1135] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1381.029275][ T1135] bond0 (unregistering): Released all slaves [ 1381.141889][T14302] netlink: 4 bytes leftover after parsing attributes in process `syz.8.1560'. [ 1381.718844][ T1135] team0 (unregistering): Port device team_slave_1 removed [ 1381.830495][ T1135] team0 (unregistering): Port device team_slave_0 removed [ 1381.912750][ T1135] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1381.977364][ T1135] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1382.252116][ T1135] bond0 (unregistering): Released all slaves [ 1384.682047][T14175] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1384.772844][T14175] 8021q: adding VLAN 0 to HW filter on device team0 [ 1384.859525][ T1128] bridge0: port 1(bridge_slave_0) entered blocking state [ 1384.866786][ T1128] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1384.882185][ T1128] bridge0: port 2(bridge_slave_1) entered blocking state [ 1384.889435][ T1128] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1385.132101][T14175] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1385.375501][T14180] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 1385.564771][T14180] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 1386.512039][T14180] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 1386.647293][T14175] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1386.657021][T14180] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 1387.177595][T14321] loop8: detected capacity change from 0 to 4096 [ 1387.490495][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1388.319346][T14180] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1388.445362][T14180] 8021q: adding VLAN 0 to HW filter on device team0 [ 1388.535170][ T6184] bridge0: port 1(bridge_slave_0) entered blocking state [ 1388.542446][ T6184] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1388.585817][ T6180] bridge0: port 2(bridge_slave_1) entered blocking state [ 1388.593087][ T6180] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1389.169225][T14175] veth0_vlan: entered promiscuous mode [ 1389.238066][T14175] veth1_vlan: entered promiscuous mode [ 1389.403043][T14175] veth0_macvtap: entered promiscuous mode [ 1389.460531][T14175] veth1_macvtap: entered promiscuous mode [ 1389.591906][T14175] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1389.654088][T14175] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1389.696988][T14175] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1389.737431][T14175] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1389.783192][T14175] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1389.864427][T14175] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1389.888534][T14175] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1389.908792][T14175] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1389.926054][T14175] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1389.949545][T14175] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1390.031248][T14175] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1390.067107][T14175] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1390.077692][T14175] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1390.101036][T14175] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1390.197108][T14180] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1390.560992][ T6184] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1390.614740][ T6184] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1390.641224][T14180] veth0_vlan: entered promiscuous mode [ 1390.750792][T14180] veth1_vlan: entered promiscuous mode [ 1390.784063][ T6164] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1390.821911][ T6164] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1390.948281][T14180] veth0_macvtap: entered promiscuous mode [ 1390.974814][T14180] veth1_macvtap: entered promiscuous mode [ 1391.081644][T14180] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1391.103886][T14180] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1391.150508][T14180] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1391.194726][T14180] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1391.244566][T14180] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1391.298825][T14180] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1391.353661][T14180] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1392.229198][T14180] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1393.927188][T14180] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1393.946238][T14180] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1393.981120][T14180] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1394.045905][T14180] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1396.406743][T14180] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1396.439581][T14180] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1396.554327][T14180] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1396.570764][T14180] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1396.834386][T14180] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1396.868529][T14180] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1396.931805][T14368] xt_NFQUEUE: number of queues (5) out of range (got 65536) [ 1397.945176][ T6164] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1397.976332][ T6164] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1398.066413][ T6184] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1398.090602][ T6184] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1406.278536][T14416] ubi: mtd0 is already attached to ubi0 [ 1408.789535][T14425] netdevsim netdevsim8: loading /lib/firmware/. failed with error -22 [ 1408.798809][T14425] netdevsim netdevsim8: Direct firmware load for . failed with error -22 [ 1408.807493][T14425] netdevsim netdevsim8: Falling back to sysfs fallback for: . [ 1409.677728][T14429] team0: Device xfrm0 is of different type [ 1409.803531][T14431] tipc: Started in network mode [ 1409.826706][T14431] tipc: Node identity aaaaaaaaaa1a, cluster identity 4711 [ 1409.867442][T14431] tipc: Enabled bearer , priority 0 [ 1412.329304][T13707] tipc: Node number set to 11578026 [ 1412.671837][T14444] syzkaller0: entered promiscuous mode [ 1412.687455][T14444] syzkaller0: entered allmulticast mode [ 1412.816239][T14447] loop8: detected capacity change from 0 to 512 [ 1413.034960][T14447] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode [ 1413.600064][T14447] EXT4-fs (loop8): 1 truncate cleaned up [ 1413.690575][T14447] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1414.183930][T14472] loop5: detected capacity change from 0 to 512 [ 1414.202584][T14472] EXT4-fs: Project quota feature not enabled. Cannot enable project quota enforcement. [ 1416.237659][T14464] EXT4-fs error (device loop8): ext4_validate_block_bitmap:430: comm ext4lazyinit: bg 0: block 4: invalid block bitmap [ 1416.292691][T14464] EXT4-fs (loop8): Remounting filesystem read-only [ 1417.089388][T11589] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1418.010975][T14488] loop5: detected capacity change from 0 to 4096 [ 1421.240583][ T28] audit: type=1800 audit(1789412695.448:206): pid=14502 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.1593" name=08 dev="sda1" ino=2071 res=0 errno=0 [ 1421.453661][ T28] audit: type=1800 audit(1789412695.658:207): pid=14509 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.1594" name="idVendor" dev="configfs" ino=40362 res=0 errno=0 [ 1421.504156][ T28] audit: type=1800 audit(1789412695.678:208): pid=14509 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.1594" name="idProduct" dev="configfs" ino=40363 res=0 errno=0 [ 1421.525178][ T28] audit: type=1800 audit(1789412695.708:209): pid=14509 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.1594" name="max_speed" dev="configfs" ino=41103 res=0 errno=0 [ 1421.568889][ T28] audit: type=1800 audit(1789412695.778:210): pid=14509 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.1594" name="c_sync" dev="configfs" ino=41105 res=0 errno=0 [ 1421.615637][ T28] audit: type=1800 audit(1789412695.808:211): pid=14509 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.1594" name="UDC" dev="configfs" ino=41106 res=0 errno=0 [ 1423.966320][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 1423.972764][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 1428.678265][T14551] loop3: detected capacity change from 0 to 4096 [ 1434.447129][T14551] ntfs3: loop3: Failed to read $AttrDef (-4). [ 1437.614664][T14574] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1608'. [ 1437.936219][ T5840] IPVS: starting estimator thread 0... [ 1438.046971][T14581] IPVS: using max 16 ests per chain, 38400 per kthread [ 1444.758410][T14624] loop3: detected capacity change from 0 to 16 [ 1444.768384][T14624] MTD: Attempt to mount non-MTD device "/dev/loop3" [ 1445.802899][T14623] loop1: detected capacity change from 0 to 4096 [ 1446.356693][ T28] audit: type=1800 audit(1789412720.558:212): pid=14641 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.1614" name=08 dev="sda1" ino=2071 res=0 errno=0 [ 1454.480351][T14693] loop8: detected capacity change from 0 to 4096 [ 1456.382943][T14706] bridge0: port 3(netdevsim0) entered blocking state [ 1456.405111][T14706] bridge0: port 3(netdevsim0) entered disabled state [ 1458.414791][T14706] netdevsim netdevsim1 netdevsim0: entered allmulticast mode [ 1458.532715][T14706] netdevsim netdevsim1 netdevsim0: entered promiscuous mode [ 1458.588901][T14706] bridge0: port 3(netdevsim0) entered blocking state [ 1458.595767][T14706] bridge0: port 3(netdevsim0) entered forwarding state [ 1458.821506][T14718] loop3: detected capacity change from 0 to 512 [ 1458.938370][T14718] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1462.040544][T14753] FAT-fs (nullb0): bogus number of reserved sectors [ 1462.047485][T14753] FAT-fs (nullb0): Can't find a valid FAT filesystem [ 1462.062294][T14753] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 1462.174476][T13486] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1464.920563][T14774] FAT-fs (nullb0): bogus number of reserved sectors [ 1464.929023][T14774] FAT-fs (nullb0): Can't find a valid FAT filesystem [ 1464.944728][T14774] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 1467.846073][T14773] Bluetooth: hci2: command 0x0406 tx timeout [ 1467.857037][T14773] Bluetooth: hci0: command 0x0406 tx timeout [ 1470.360480][T14792] netdevsim netdevsim5: loading /lib/firmware/. failed with error -22 [ 1470.370147][T14792] netdevsim netdevsim5: Direct firmware load for . failed with error -22 [ 1470.379230][T14792] netdevsim netdevsim5: Falling back to sysfs fallback for: . [ 1471.107033][T14800] tipc: Enabling of bearer rejected, failed to enable media [ 1472.594396][T14814] hugetlbfs: syz.8.1647 (14814): Using mlock ulimits for SHM_HUGETLB is obsolete [ 1473.353664][T14817] loop3: detected capacity change from 0 to 512 [ 1473.407926][T14817] EXT4-fs: inline encryption not supported [ 1473.502796][T14817] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 1473.556621][T14817] EXT4-fs (loop3): Invalid default hash set in the superblock [ 1473.685127][T14823] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 1473.809391][ T28] audit: type=1800 audit(1789412748.018:213): pid=14825 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.1644" name=08 dev="sda1" ino=2071 res=0 errno=0 [ 1477.202107][T14849] loop5: detected capacity change from 0 to 16 [ 1477.212826][T14849] MTD: Attempt to mount non-MTD device "/dev/loop5" [ 1479.855989][T14864] FAT-fs (nullb0): bogus number of reserved sectors [ 1479.863088][T14864] FAT-fs (nullb0): Can't find a valid FAT filesystem [ 1479.877609][T14864] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 1481.839426][ T28] audit: type=1800 audit(1789412755.998:214): pid=14877 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.1663" name="ipv4_address" dev="configfs" ino=42276 res=0 errno=0 [ 1481.999483][ T28] audit: type=1800 audit(1789412756.028:215): pid=14877 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.1663" name="ipv4_port" dev="configfs" ino=42277 res=0 errno=0 [ 1482.152688][ T28] audit: type=1800 audit(1789412756.038:216): pid=14877 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.1663" name="num" dev="configfs" ino=42278 res=0 errno=0 [ 1482.286410][ T28] audit: type=1800 audit(1789412756.048:217): pid=14877 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.1663" name="local" dev="configfs" ino=42279 res=0 errno=0 [ 1483.382763][T14892] loop1: detected capacity change from 0 to 1024 [ 1483.456164][T14892] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1485.632829][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 1485.646319][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 1490.733032][ T5840] IPVS: starting estimator thread 0... [ 1490.970272][T14915] IPVS: using max 16 ests per chain, 38400 per kthread [ 1491.547352][ T28] audit: type=1800 audit(1789412765.748:218): pid=14920 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.1675" name=08 dev="sda1" ino=2071 res=0 errno=0 [ 1495.012620][T14955] FAT-fs (nullb0): bogus number of reserved sectors [ 1495.021985][T14955] FAT-fs (nullb0): Can't find a valid FAT filesystem [ 1505.572996][T15008] FAT-fs (nullb0): bogus number of reserved sectors [ 1505.579753][T15008] FAT-fs (nullb0): Can't find a valid FAT filesystem [ 1505.594709][T15008] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 1510.738806][T15043] overlayfs: overlapping lowerdir path [ 1510.797624][T15044] FAT-fs (nullb0): bogus number of reserved sectors [ 1510.804387][T15044] FAT-fs (nullb0): Can't find a valid FAT filesystem [ 1510.865708][T15044] overlayfs: overlapping lowerdir path [ 1524.205591][T15100] overlayfs: overlapping lowerdir path [ 1524.267936][T15103] FAT-fs (nullb0): bogus number of reserved sectors [ 1524.274663][T15103] FAT-fs (nullb0): Can't find a valid FAT filesystem [ 1524.335598][T15103] overlayfs: overlapping lowerdir path [ 1525.082217][T15105] loop1: detected capacity change from 0 to 8192 [ 1529.581333][T14180] FAT-fs (loop1): error, invalid access to FAT (entry 0x0000e1b1) [ 1529.615828][T14180] FAT-fs (loop1): Filesystem has been set read-only [ 1530.154695][T15127] loop1: detected capacity change from 0 to 1024 [ 1530.191727][T15127] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 1530.488758][T15127] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1530.854271][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1532.063772][T14180] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1532.502017][T15151] loop3: detected capacity change from 0 to 4096 [ 1540.149520][T15194] batman_adv: batadv0: Adding interface: dummy0 [ 1540.176219][T15194] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1540.304061][T15194] batman_adv: batadv0: Interface activated: dummy0 [ 1541.615617][T15216] loop3: detected capacity change from 0 to 16 [ 1541.636025][T15216] erofs: (device loop3): mounted with root inode @ nid 36. [ 1541.677755][T15217] FAT-fs (nullb0): bogus number of reserved sectors [ 1541.684475][T15217] FAT-fs (nullb0): Can't find a valid FAT filesystem [ 1541.699525][T15217] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 1542.708407][T14959] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 1545.247718][T15234] syzkaller0: entered promiscuous mode [ 1545.391979][T15234] syzkaller0: entered allmulticast mode [ 1545.948944][T15230] tipc: Enabled bearer , priority 0 [ 1546.045593][T15240] loop1: detected capacity change from 0 to 16 [ 1546.129071][T15240] erofs: (device loop1): mounted with root inode @ nid 36. [ 1546.214234][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 1546.221019][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 1547.467517][T15222] tipc: Resetting bearer [ 1548.107770][T15222] tipc: Disabling bearer [ 1556.804192][T15271] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 1569.807879][T15342] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 1586.865468][T15419] FAT-fs (nullb0): bogus number of reserved sectors [ 1586.872656][T15419] FAT-fs (nullb0): Can't find a valid FAT filesystem [ 1586.883863][T15419] overlayfs: overlapping lowerdir path [ 1586.935479][T15418] overlayfs: overlapping lowerdir path [ 1589.383305][T10661] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1589.397360][T10661] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1589.407174][T10661] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1589.425279][T10661] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1589.433781][T10661] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 1589.443560][T10661] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1589.961666][T15437] chnl_net:caif_netlink_parms(): no params data found [ 1590.316478][T15437] bridge0: port 1(bridge_slave_0) entered blocking state [ 1590.323799][T15437] bridge0: port 1(bridge_slave_0) entered disabled state [ 1590.331634][T15437] bridge_slave_0: entered allmulticast mode [ 1590.339617][T15437] bridge_slave_0: entered promiscuous mode [ 1590.349823][T15437] bridge0: port 2(bridge_slave_1) entered blocking state [ 1590.359230][T15437] bridge0: port 2(bridge_slave_1) entered disabled state [ 1590.376790][T15437] bridge_slave_1: entered allmulticast mode [ 1590.407036][T15437] bridge_slave_1: entered promiscuous mode [ 1590.695788][T15452] syzkaller0: entered promiscuous mode [ 1590.752973][T15452] syzkaller0: entered allmulticast mode [ 1591.158000][T15452] tipc: Started in network mode [ 1591.244845][T15452] tipc: Node identity c2cff9860f3a, cluster identity 4711 [ 1591.333192][T15452] tipc: Enabled bearer , priority 0 [ 1591.402102][T15437] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1591.457035][T15460] tipc: Resetting bearer [ 1591.479585][T15437] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1591.489219][T10661] Bluetooth: hci1: command tx timeout [ 1591.579537][T15449] tipc: Resetting bearer [ 1591.627232][T15468] overlayfs: overlapping lowerdir path [ 1591.689404][T15469] FAT-fs (nullb0): bogus number of reserved sectors [ 1591.696227][T15469] FAT-fs (nullb0): Can't find a valid FAT filesystem [ 1591.714584][T15469] overlayfs: overlapping lowerdir path [ 1591.928468][T15449] tipc: Disabling bearer [ 1592.199402][T15437] team0: Port device team_slave_0 added [ 1592.659486][T15437] team0: Port device team_slave_1 added [ 1594.490078][T10661] Bluetooth: hci1: command tx timeout [ 1595.268083][T15437] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1595.336481][T15437] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1595.386152][T15437] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1595.429226][T15437] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1595.448042][T15437] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1595.513534][T15437] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1595.588034][T15486] overlayfs: overlapping lowerdir path [ 1595.651909][T15487] FAT-fs (nullb0): bogus number of reserved sectors [ 1595.658760][T15487] FAT-fs (nullb0): Can't find a valid FAT filesystem [ 1595.675093][T15487] overlayfs: overlapping lowerdir path [ 1596.348267][ T6166] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1596.737487][T15437] hsr_slave_0: entered promiscuous mode [ 1598.252617][ T51] Bluetooth: hci1: command tx timeout [ 1599.856824][T15437] hsr_slave_1: entered promiscuous mode [ 1600.251538][ T6166] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1600.286829][ T51] Bluetooth: hci1: command tx timeout [ 1600.658648][ T6166] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1600.888616][ T6166] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1603.086819][ T6166] tipc: Left network mode [ 1603.297385][ T6166] batman_adv: batadv0: Interface deactivated: ip6gretap1 [ 1605.505502][ T6166] batman_adv: batadv0: Removing interface: ip6gretap1 [ 1605.554468][T15542] FAT-fs (nullb0): bogus number of reserved sectors [ 1605.561783][T15542] FAT-fs (nullb0): Can't find a valid FAT filesystem [ 1606.549496][T15543] loop5: detected capacity change from 0 to 16 [ 1606.573489][T15543] erofs: (device loop5): mounted with root inode @ nid 36. [ 1606.988367][T15548] FAT-fs (nullb0): bogus number of reserved sectors [ 1606.995137][T15548] FAT-fs (nullb0): Can't find a valid FAT filesystem [ 1607.664324][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 1607.673408][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 1613.193577][T15569] syz.5.1787: vmalloc error: size 9223372036854775807, exceeds total pages, mode:0xcc0(GFP_KERNEL), nodemask=(null),cpuset=syz5,mems_allowed=0-1 [ 1613.210393][T15569] CPU: 1 PID: 15569 Comm: syz.5.1787 Not tainted syzkaller #0 [ 1613.217892][T15569] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1613.227978][T15569] Call Trace: [ 1613.231309][T15569] [ 1613.234279][T15569] dump_stack_lvl+0x18c/0x250 [ 1613.239018][T15569] ? show_regs_print_info+0x20/0x20 [ 1613.244272][T15569] ? load_image+0x420/0x420 [ 1613.248841][T15569] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 1613.255299][T15569] ? cpuset_print_current_mems_allowed+0x2e7/0x360 [ 1613.261886][T15569] warn_alloc+0x246/0x340 [ 1613.266270][T15569] ? zone_watermark_ok_safe+0x230/0x230 [ 1613.271892][T15569] ? __mutex_trylock_common+0x160/0x270 [ 1613.277502][T15569] __vmalloc_node_range+0x129/0x1320 [ 1613.282847][T15569] ? tomoyo_path_number_perm+0x217/0x5e0 [ 1613.288539][T15569] ? rcu_is_watching+0x15/0xb0 [ 1613.293365][T15569] ? trace_contention_end+0x39/0xe0 [ 1613.298603][T15569] ? __mutex_lock+0x30d/0xc80 [ 1613.303359][T15569] ? tomoyo_path_number_perm+0x56b/0x5e0 [ 1613.309054][T15569] ? tomoyo_path_number_perm+0x217/0x5e0 [ 1613.314850][T15569] ? free_vm_area+0x50/0x50 [ 1613.319510][T15569] ? dvb_dvr_do_ioctl+0x12e/0x220 [ 1613.324599][T15569] vmalloc+0x79/0x90 [ 1613.328556][T15569] ? dvb_dvr_do_ioctl+0x12e/0x220 [ 1613.333663][T15569] dvb_dvr_do_ioctl+0x12e/0x220 [ 1613.338584][T15569] dvb_usercopy+0x195/0x2b0 [ 1613.343146][T15569] ? dvb_dvr_release+0x3e0/0x3e0 [ 1613.348146][T15569] ? dvb_generic_ioctl+0xb0/0xb0 [ 1613.353155][T15569] ? dvb_dvr_poll+0x230/0x230 [ 1613.357938][T15569] dvb_dvr_ioctl+0x29/0x30 [ 1613.362415][T15569] __se_sys_ioctl+0xfd/0x170 [ 1613.367077][T15569] do_syscall_64+0x55/0xb0 [ 1613.371555][T15569] ? clear_bhb_loop+0x40/0x90 [ 1613.376292][T15569] ? clear_bhb_loop+0x40/0x90 [ 1613.381032][T15569] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1613.386990][T15569] RIP: 0033:0x7f57a559e159 [ 1613.391454][T15569] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1613.411207][T15569] RSP: 002b:00007f57a6474028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1613.419864][T15569] RAX: ffffffffffffffda RBX: 00007f57a5826090 RCX: 00007f57a559e159 [ 1613.427892][T15569] RDX: 7fffffffffffffff RSI: 0000000000006f2d RDI: 0000000000000005 [ 1613.435905][T15569] RBP: 00007f57a563503b R08: 0000000000000000 R09: 0000000000000000 [ 1613.443915][T15569] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1613.451927][T15569] R13: 00007f57a5826128 R14: 00007f57a5826090 R15: 00007fffc7e5ea58 [ 1613.459955][T15569] [ 1613.465359][T15569] Mem-Info: [ 1613.468604][T15569] active_anon:28309 inactive_anon:0 isolated_anon:0 [ 1613.468604][T15569] active_file:18545 inactive_file:40746 isolated_file:0 [ 1613.468604][T15569] unevictable:768 dirty:148 writeback:0 [ 1613.468604][T15569] slab_reclaimable:12092 slab_unreclaimable:102147 [ 1613.468604][T15569] mapped:24514 shmem:21877 pagetables:803 [ 1613.468604][T15569] sec_pagetables:0 bounce:0 [ 1613.468604][T15569] kernel_misc_reclaimable:0 [ 1613.468604][T15569] free:1308816 free_pcp:7765 free_cma:0 [ 1613.514260][T15569] Node 0 active_anon:113236kB inactive_anon:0kB active_file:74180kB inactive_file:162780kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:98056kB dirty:592kB writeback:0kB shmem:85972kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:11732kB pagetables:3212kB sec_pagetables:0kB all_unreclaimable? no [ 1613.547769][T15569] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no [ 1613.578548][T15569] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1613.605775][T15569] lowmem_reserve[]: 0 2521 2522 2522 2522 [ 1613.611667][T15569] Node 0 DMA32 free:1316160kB boost:0kB min:34644kB low:43304kB high:51964kB reserved_highatomic:0KB active_anon:113200kB inactive_anon:0kB active_file:74180kB inactive_file:161952kB unevictable:1536kB writepending:592kB present:3129332kB managed:2586800kB mlocked:0kB bounce:0kB free_pcp:22436kB local_pcp:14648kB free_cma:0kB [ 1613.643734][T15569] lowmem_reserve[]: 0 0 0 0 0 [ 1613.648583][T15569] Node 0 Normal free:8kB boost:0kB min:8kB low:8kB high:8kB reserved_highatomic:0KB active_anon:36kB inactive_anon:0kB active_file:0kB inactive_file:828kB unevictable:0kB writepending:0kB present:1048576kB managed:872kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1613.675916][T15569] lowmem_reserve[]: 0 0 0 0 0 [ 1613.680806][T15569] Node 1 Normal free:3903736kB boost:0kB min:55244kB low:69052kB high:82860kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB writepending:0kB present:4194304kB managed:4117312kB mlocked:0kB bounce:0kB free_pcp:8624kB local_pcp:0kB free_cma:0kB [ 1613.709996][T15569] lowmem_reserve[]: 0 0 0 0 0 [ 1613.714800][T15569] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 1613.727749][T15569] Node 0 DMA32: 2208*4kB (UME) 2324*8kB (UME) 1478*16kB (UME) 602*32kB (UME) 262*64kB (UME) 296*128kB (UME) 45*256kB (UE) 64*512kB (UME) 32*1024kB (UME) 18*2048kB (UME) 263*4096kB (UM) = 1316160kB [ 1613.748486][T15569] Node 0 Normal: 0*4kB 1*8kB (M) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 8kB [ 1613.760935][T15569] Node 1 Normal: 236*4kB (UME) 57*8kB (UME) 50*16kB (UME) 221*32kB (UME) 65*64kB (UME) 11*128kB (UME) 3*256kB (UE) 2*512kB (M) 2*1024kB (ME) 3*2048kB (UME) 947*4096kB (M) = 3903736kB [ 1613.779393][T15569] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1613.789094][T15569] Node 0 hugepages_total=4 hugepages_free=2 hugepages_surp=2 hugepages_size=2048kB [ 1613.798495][T15569] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1613.808140][T15569] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 1613.817527][T15569] 81158 total pagecache pages [ 1613.822237][T15569] 0 pages in swap cache [ 1613.826500][T15569] Free swap = 124676kB [ 1613.830686][T15569] Total swap = 124996kB [ 1613.834888][T15569] 2097051 pages RAM [ 1613.838980][T15569] 0 pages HighMem/MovableOnly [ 1613.844708][T15569] 416965 pages reserved [ 1613.848974][T15569] 0 pages cma reserved [ 1614.198362][T15568] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1787'. [ 1618.497255][T15594] loop3: detected capacity change from 0 to 1024 [ 1618.536524][T15594] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 1618.767877][T15594] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1619.119529][T15437] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 1619.188739][T15437] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 1619.301348][T15437] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 1619.413178][T15437] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 1619.556025][T13486] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1619.923032][T15610] FAT-fs (nullb0): bogus number of reserved sectors [ 1619.929854][T15610] FAT-fs (nullb0): Can't find a valid FAT filesystem [ 1620.053275][ T6166] hsr_slave_0: left promiscuous mode [ 1620.188700][ T6166] hsr_slave_1: left promiscuous mode [ 1620.320939][ T6166] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1620.424922][ T6166] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1620.542262][ T6166] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1620.696272][ T6166] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1620.967274][ T6166] bridge_slave_1: left allmulticast mode [ 1620.973057][ T6166] bridge_slave_1: left promiscuous mode [ 1621.189742][ T6166] bridge0: port 2(bridge_slave_1) entered disabled state [ 1623.494613][ T6166] bridge_slave_0: left allmulticast mode [ 1623.621589][ T6166] bridge_slave_0: left promiscuous mode [ 1623.646876][ T6166] bridge0: port 1(bridge_slave_0) entered disabled state [ 1626.943232][ T6166] veth1_macvtap: left promiscuous mode [ 1626.993522][ T6166] veth0_macvtap: left promiscuous mode [ 1627.109581][ T6166] veth1_vlan: left promiscuous mode [ 1627.193755][ T6166] veth0_vlan: left promiscuous mode [ 1636.532835][T15677] rt1719: probe of 0-0049 failed with error -5 [ 1636.544890][T15677] i2c i2c-0: new_device: Instantiated device rt1719 at 0x49 [ 1638.896858][T15687] overlayfs: overlapping lowerdir path [ 1638.907501][T15687] FAT-fs (nullb0): bogus number of reserved sectors [ 1638.914427][T15687] FAT-fs (nullb0): Can't find a valid FAT filesystem [ 1638.929248][T15687] overlayfs: overlapping lowerdir path [ 1643.087993][ T6166] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1643.322377][ T6166] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1649.616581][ T6166] bond0 (unregistering): (slave bridge0): Releasing backup interface [ 1649.668588][ T6166] bond0 (unregistering): Released all slaves [ 1650.611522][T10661] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1650.625408][T10661] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1650.636267][T10661] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1650.644547][T10661] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1650.652799][T10661] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 1650.670345][T10661] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1650.902960][T10661] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1650.919428][T10661] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1650.931111][T10661] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1650.949270][T10661] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1650.958094][T10661] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 1650.965604][T10661] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1652.778771][T10661] Bluetooth: hci4: command tx timeout [ 1653.008168][T10661] Bluetooth: hci5: command tx timeout [ 1654.900154][T10661] Bluetooth: hci4: command tx timeout [ 1655.106179][T10661] Bluetooth: hci5: command tx timeout [ 1655.640476][T15762] FAT-fs (nullb0): bogus number of reserved sectors [ 1655.647335][T15762] FAT-fs (nullb0): Can't find a valid FAT filesystem [ 1655.662681][T15762] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 1657.426181][T10661] Bluetooth: hci4: command tx timeout [ 1657.431682][T10661] Bluetooth: hci5: command tx timeout [ 1658.065267][T15729] chnl_net:caif_netlink_parms(): no params data found [ 1658.098957][ T6166] IPVS: stop unused estimator thread 0... [ 1660.129436][T10661] Bluetooth: hci5: command tx timeout [ 1660.134925][T10661] Bluetooth: hci4: command tx timeout [ 1660.183227][T15732] chnl_net:caif_netlink_parms(): no params data found [ 1660.386647][T15786] FAT-fs (nullb0): bogus number of reserved sectors [ 1660.393392][T15786] FAT-fs (nullb0): Can't find a valid FAT filesystem [ 1660.404204][T15786] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 1662.766554][T15729] bridge0: port 1(bridge_slave_0) entered blocking state [ 1662.774010][T15729] bridge0: port 1(bridge_slave_0) entered disabled state [ 1662.781748][T15729] bridge_slave_0: entered allmulticast mode [ 1662.789878][T15729] bridge_slave_0: entered promiscuous mode [ 1663.055628][T15795] overlayfs: overlapping lowerdir path [ 1663.116535][T15796] FAT-fs (nullb0): bogus number of reserved sectors [ 1663.123287][T15796] FAT-fs (nullb0): Can't find a valid FAT filesystem [ 1663.142074][T15795] overlayfs: overlapping lowerdir path [ 1663.413596][T15729] bridge0: port 2(bridge_slave_1) entered blocking state [ 1663.504016][T15729] bridge0: port 2(bridge_slave_1) entered disabled state [ 1663.605710][T15729] bridge_slave_1: entered allmulticast mode [ 1663.701511][T15729] bridge_slave_1: entered promiscuous mode [ 1664.757748][T15729] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1664.829615][T15729] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1665.362899][T15732] bridge0: port 1(bridge_slave_0) entered blocking state [ 1665.383381][T15732] bridge0: port 1(bridge_slave_0) entered disabled state [ 1665.401882][T15732] bridge_slave_0: entered allmulticast mode [ 1665.428620][T15732] bridge_slave_0: entered promiscuous mode [ 1665.504102][T15732] bridge0: port 2(bridge_slave_1) entered blocking state [ 1665.542616][T15732] bridge0: port 2(bridge_slave_1) entered disabled state [ 1665.570789][T15732] bridge_slave_1: entered allmulticast mode [ 1665.603035][T15732] bridge_slave_1: entered promiscuous mode [ 1665.711195][T15729] team0: Port device team_slave_0 added [ 1665.782795][T15729] team0: Port device team_slave_1 added [ 1665.945625][T15732] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1665.988552][T15732] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1666.059786][T15729] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1666.094525][T15729] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1666.176193][T15729] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1666.334594][T15729] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1666.343431][T15729] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1666.388416][T15729] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1666.606840][T15732] team0: Port device team_slave_0 added [ 1666.639262][T15732] team0: Port device team_slave_1 added [ 1667.605704][T15729] hsr_slave_0: entered promiscuous mode [ 1667.621261][T15729] hsr_slave_1: entered promiscuous mode [ 1667.698056][T15729] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1667.727763][T15729] Cannot create hsr debugfs directory [ 1667.763234][T15732] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1667.780573][T15732] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1667.933385][T15732] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1668.248216][T15836] FAT-fs (nullb0): bogus number of reserved sectors [ 1668.254956][T15836] FAT-fs (nullb0): Can't find a valid FAT filesystem [ 1668.266274][T15836] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 1668.593060][T15732] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1668.621190][T15732] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1669.116877][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 1669.123279][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 1669.186149][T15732] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1672.624228][T15732] hsr_slave_0: entered promiscuous mode [ 1672.676923][T15732] hsr_slave_1: entered promiscuous mode [ 1672.715413][T15732] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1672.764516][T15732] Cannot create hsr debugfs directory [ 1675.146449][T15534] hsr_slave_0: left promiscuous mode [ 1675.206814][T15534] hsr_slave_1: left promiscuous mode [ 1675.266345][T15534] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1675.307818][T15534] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1675.342526][T15534] bridge_slave_1: left allmulticast mode [ 1675.362854][T15534] bridge_slave_1: left promiscuous mode [ 1675.388461][T15534] bridge0: port 2(bridge_slave_1) entered disabled state [ 1675.428085][T15534] bridge_slave_0: left allmulticast mode [ 1675.433813][T15534] bridge_slave_0: left promiscuous mode [ 1675.466363][T15534] bridge0: port 1(bridge_slave_0) entered disabled state [ 1679.474441][T15534] team0 (unregistering): Port device team_slave_1 removed [ 1680.936933][T15534] team0 (unregistering): Port device team_slave_0 removed [ 1681.875942][T15534] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1682.681560][T15534] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1683.322318][T15910] FAT-fs (nullb0): bogus number of reserved sectors [ 1683.329348][T15910] FAT-fs (nullb0): Can't find a valid FAT filesystem [ 1686.052809][T15534] bond0 (unregistering): Released all slaves [ 1686.206703][T15923] FAT-fs (nullb0): bogus number of reserved sectors [ 1686.213578][T15923] FAT-fs (nullb0): Can't find a valid FAT filesystem [ 1686.244724][T15923] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 1690.926926][T15944] FAT-fs (nullb0): bogus number of reserved sectors [ 1690.933660][T15944] FAT-fs (nullb0): Can't find a valid FAT filesystem [ 1700.082551][T15987] FAT-fs (nullb0): bogus number of reserved sectors [ 1700.089316][T15987] FAT-fs (nullb0): Can't find a valid FAT filesystem [ 1700.100222][T15987] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 1706.827402][T16023] FAT-fs (nullb0): bogus number of reserved sectors [ 1706.834148][T16023] FAT-fs (nullb0): Can't find a valid FAT filesystem [ 1706.845119][T16023] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 1708.000294][T15729] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 1708.040756][T15729] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 1708.055557][T16032] FAT-fs (nullb0): bogus number of reserved sectors [ 1708.070848][T16032] FAT-fs (nullb0): Can't find a valid FAT filesystem [ 1708.106204][T16032] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 1708.189681][T15729] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 1708.244691][T15729] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 1708.850598][T15732] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 1713.336115][T16064] FAT-fs (nullb0): bogus number of reserved sectors [ 1713.342835][T16064] FAT-fs (nullb0): Can't find a valid FAT filesystem [ 1713.358234][T16064] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 1714.547642][ T51] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1714.560658][ T51] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1714.569787][ T51] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1714.683468][ T5787] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1714.691894][ T5787] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 1714.699871][ T5787] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1714.720713][ T5787] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1714.737963][ T5787] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1714.749328][ T5787] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1714.763324][ T5787] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1714.777168][ T5787] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 1714.788221][ T5787] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1715.175669][T16083] FAT-fs (nullb0): bogus number of reserved sectors [ 1715.182921][T16083] FAT-fs (nullb0): Can't find a valid FAT filesystem [ 1715.193185][T16083] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 1715.769073][T16092] FAT-fs (nullb0): bogus number of reserved sectors [ 1715.775758][T16092] FAT-fs (nullb0): Can't find a valid FAT filesystem [ 1715.785745][T16092] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 1717.439520][ T51] Bluetooth: hci1: command tx timeout [ 1717.446647][ T51] Bluetooth: hci2: command tx timeout [ 1719.487825][ T5787] Bluetooth: hci2: command tx timeout [ 1719.491450][ T51] Bluetooth: hci1: command tx timeout [ 1719.671284][T16070] chnl_net:caif_netlink_parms(): no params data found [ 1719.809681][T16072] chnl_net:caif_netlink_parms(): no params data found [ 1720.430785][T16070] bridge0: port 1(bridge_slave_0) entered blocking state [ 1720.483939][T16070] bridge0: port 1(bridge_slave_0) entered disabled state [ 1720.518007][T16070] bridge_slave_0: entered allmulticast mode [ 1720.547634][T16070] bridge_slave_0: entered promiscuous mode [ 1720.879279][T16070] bridge0: port 2(bridge_slave_1) entered blocking state [ 1720.910174][T16070] bridge0: port 2(bridge_slave_1) entered disabled state [ 1720.944613][T16070] bridge_slave_1: entered allmulticast mode [ 1721.946399][ T51] Bluetooth: hci2: command tx timeout [ 1721.951904][ T51] Bluetooth: hci1: command tx timeout [ 1721.987498][T16070] bridge_slave_1: entered promiscuous mode [ 1722.530445][T16072] bridge0: port 1(bridge_slave_0) entered blocking state [ 1722.574507][T16072] bridge0: port 1(bridge_slave_0) entered disabled state [ 1722.599109][T16072] bridge_slave_0: entered allmulticast mode [ 1722.618146][T16072] bridge_slave_0: entered promiscuous mode [ 1723.071183][T16144] FAT-fs (nullb0): bogus number of reserved sectors [ 1723.078440][T16144] FAT-fs (nullb0): Can't find a valid FAT filesystem [ 1723.088442][T16144] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 1723.160204][ T6176] hsr_slave_0: left promiscuous mode [ 1723.192994][ T6176] hsr_slave_1: left promiscuous mode [ 1723.234573][ T6176] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1723.267260][ T6176] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1723.298985][ T6176] bridge_slave_1: left allmulticast mode [ 1723.328628][ T6176] bridge_slave_1: left promiscuous mode [ 1723.356250][ T6176] bridge0: port 2(bridge_slave_1) entered disabled state [ 1723.401621][ T6176] bridge_slave_0: left allmulticast mode [ 1723.424813][ T6176] bridge_slave_0: left promiscuous mode [ 1723.457747][ T6176] bridge0: port 1(bridge_slave_0) entered disabled state [ 1723.966435][ T5787] Bluetooth: hci1: command tx timeout [ 1723.971966][ T5787] Bluetooth: hci2: command tx timeout [ 1726.439946][ T6176] team0 (unregistering): Port device team_slave_1 removed [ 1726.536296][ T6176] team0 (unregistering): Port device team_slave_0 removed [ 1726.925090][ T6176] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1727.472579][ T6176] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1731.516834][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 1731.556624][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 1731.664607][ T6176] bond0 (unregistering): Released all slaves [ 1732.789465][T16072] bridge0: port 2(bridge_slave_1) entered blocking state [ 1732.855629][T16195] FAT-fs (nullb0): bogus number of reserved sectors [ 1732.862410][T16195] FAT-fs (nullb0): Can't find a valid FAT filesystem [ 1732.872143][T16195] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 1733.229807][T16072] bridge0: port 2(bridge_slave_1) entered disabled state [ 1733.237397][T16072] bridge_slave_1: entered allmulticast mode [ 1733.245282][T16072] bridge_slave_1: entered promiscuous mode [ 1733.494166][T16070] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1734.152226][T16070] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1734.512030][T16072] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1734.612040][T16070] team0: Port device team_slave_0 added [ 1734.722948][T16070] team0: Port device team_slave_1 added [ 1735.007833][T16072] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1738.244333][T16070] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1738.252515][T16070] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1738.280001][T16070] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1738.299217][T16070] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1738.306736][T16070] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1738.333713][T16070] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1738.352831][T16072] team0: Port device team_slave_0 added [ 1738.448403][T16072] team0: Port device team_slave_1 added [ 1739.063396][T16070] hsr_slave_0: entered promiscuous mode [ 1739.275471][T16070] hsr_slave_1: entered promiscuous mode [ 1739.532538][T16072] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1739.564410][T16072] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1739.723542][T16072] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1739.749640][T16072] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1739.785746][T16072] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1739.865691][T16072] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1741.971646][T16072] hsr_slave_0: entered promiscuous mode [ 1741.984779][T16072] hsr_slave_1: entered promiscuous mode [ 1741.993865][T16072] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1742.037123][T16072] Cannot create hsr debugfs directory [ 1746.632284][T16269] FAT-fs (nullb0): bogus number of reserved sectors [ 1746.639073][T16269] FAT-fs (nullb0): Can't find a valid FAT filesystem [ 1746.649659][T16269] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 1750.595446][T16070] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 1750.660082][T16070] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 1750.729495][ T1128] hsr_slave_0: left promiscuous mode [ 1750.785228][ T1128] hsr_slave_1: left promiscuous mode [ 1750.808107][ T1128] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1750.847027][ T1128] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1750.887091][ T1128] bridge_slave_1: left allmulticast mode [ 1750.893261][ T1128] bridge_slave_1: left promiscuous mode [ 1750.939831][ T1128] bridge0: port 2(bridge_slave_1) entered disabled state [ 1750.967804][ T1128] bridge_slave_0: left allmulticast mode [ 1750.995295][ T1128] bridge_slave_0: left promiscuous mode [ 1751.003443][ T1128] bridge0: port 1(bridge_slave_0) entered disabled state [ 1753.160090][T16305] FAT-fs (nullb0): bogus number of reserved sectors [ 1753.167408][T16305] FAT-fs (nullb0): Can't find a valid FAT filesystem [ 1753.178786][T16305] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 1754.304765][ T1128] team0 (unregistering): Port device team_slave_1 removed [ 1756.419529][ T1128] team0 (unregistering): Port device team_slave_0 removed [ 1756.742912][ T1128] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1756.997143][ T1128] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1761.117738][ T1128] bond0 (unregistering): Released all slaves [ 1761.386895][T16070] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 1761.436684][T16070] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 1762.076971][T16070] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1762.195729][T16070] 8021q: adding VLAN 0 to HW filter on device team0 [ 1762.329887][ T6184] bridge0: port 1(bridge_slave_0) entered blocking state [ 1762.337691][ T6184] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1762.417012][ T6184] bridge0: port 2(bridge_slave_1) entered blocking state [ 1762.424633][ T6184] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1762.838482][T16072] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 1762.941870][T16072] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 1765.070682][T16072] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 1765.405122][T16072] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 1768.440174][T16072] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1768.581950][T16072] 8021q: adding VLAN 0 to HW filter on device team0 [ 1768.735217][ T6176] bridge0: port 1(bridge_slave_0) entered blocking state [ 1768.742512][ T6176] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1768.801182][ T6176] bridge0: port 2(bridge_slave_1) entered blocking state [ 1768.808476][ T6176] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1769.041419][T16070] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1771.361568][ T51] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1771.378370][ T51] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1771.398547][ T51] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1771.456435][ T51] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1771.465910][ T51] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 1771.475776][ T51] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1771.894381][ T5787] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1771.908882][ T5787] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1771.920336][ T5787] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1771.928776][ T5787] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1771.936974][ T5787] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 1771.944390][ T5787] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1772.303447][T16390] FAT-fs (nullb0): bogus number of reserved sectors [ 1772.310191][T16390] FAT-fs (nullb0): Can't find a valid FAT filesystem [ 1772.320568][T16390] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 1773.297733][T16376] chnl_net:caif_netlink_parms(): no params data found [ 1773.317155][T16383] chnl_net:caif_netlink_parms(): no params data found [ 1773.566301][ T51] Bluetooth: hci4: command tx timeout [ 1773.882731][T16376] bridge0: port 1(bridge_slave_0) entered blocking state [ 1773.890578][T16376] bridge0: port 1(bridge_slave_0) entered disabled state [ 1773.898331][T16376] bridge_slave_0: entered allmulticast mode [ 1773.906629][T16376] bridge_slave_0: entered promiscuous mode [ 1773.936125][T16376] bridge0: port 2(bridge_slave_1) entered blocking state [ 1773.943353][T16376] bridge0: port 2(bridge_slave_1) entered disabled state [ 1773.955682][T16376] bridge_slave_1: entered allmulticast mode [ 1773.965855][T16376] bridge_slave_1: entered promiscuous mode [ 1774.046690][ T51] Bluetooth: hci2: command tx timeout [ 1774.055606][T16383] bridge0: port 1(bridge_slave_0) entered blocking state [ 1774.064944][T16383] bridge0: port 1(bridge_slave_0) entered disabled state [ 1774.072852][T16383] bridge_slave_0: entered allmulticast mode [ 1774.081363][T16383] bridge_slave_0: entered promiscuous mode [ 1774.132773][T16383] bridge0: port 2(bridge_slave_1) entered blocking state [ 1774.149652][T16383] bridge0: port 2(bridge_slave_1) entered disabled state [ 1774.159044][T16383] bridge_slave_1: entered allmulticast mode [ 1774.167246][T16383] bridge_slave_1: entered promiscuous mode [ 1774.204754][T16376] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1774.345723][T16376] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1774.367452][T16383] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1774.454736][T16383] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1774.550000][T16376] team0: Port device team_slave_0 added [ 1774.590087][T16383] team0: Port device team_slave_0 added [ 1774.609301][T16376] team0: Port device team_slave_1 added [ 1774.649446][T16383] team0: Port device team_slave_1 added [ 1774.670111][ T6176] hsr_slave_0: left promiscuous mode [ 1774.677311][ T6176] hsr_slave_1: left promiscuous mode [ 1774.683769][ T6176] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1774.698003][ T6176] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1774.710020][ T6176] bridge_slave_1: left allmulticast mode [ 1774.717646][ T6176] bridge_slave_1: left promiscuous mode [ 1774.723463][ T6176] bridge0: port 2(bridge_slave_1) entered disabled state [ 1774.734094][ T6176] bridge_slave_0: left allmulticast mode [ 1774.740369][ T6176] bridge_slave_0: left promiscuous mode [ 1774.747242][ T6176] bridge0: port 1(bridge_slave_0) entered disabled state [ 1775.201049][ T6176] team0 (unregistering): Port device team_slave_1 removed [ 1775.251302][ T6176] team0 (unregistering): Port device team_slave_0 removed [ 1775.317083][ T6176] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1775.377736][ T6176] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1775.656381][ T51] Bluetooth: hci4: command tx timeout [ 1775.818622][ T6176] bond0 (unregistering): Released all slaves [ 1776.048149][T16376] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1776.055175][T16376] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1776.083060][T16376] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1776.114757][T16383] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1776.131150][T16383] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1776.163219][T16383] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1776.173908][ T51] Bluetooth: hci2: command tx timeout [ 1776.182933][T16376] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1776.198851][T16376] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1776.229129][T16376] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1776.272478][T16383] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1776.281523][T16383] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1776.346749][T16383] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1776.491793][T16376] hsr_slave_0: entered promiscuous mode [ 1776.499330][T16376] hsr_slave_1: entered promiscuous mode [ 1776.506778][T16376] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1776.514491][T16376] Cannot create hsr debugfs directory [ 1776.634787][T16383] hsr_slave_0: entered promiscuous mode [ 1776.650575][T16383] hsr_slave_1: entered promiscuous mode [ 1776.663514][T16383] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1776.673445][T16383] Cannot create hsr debugfs directory [ 1777.738132][ T51] Bluetooth: hci4: command tx timeout [ 1778.208853][ T51] Bluetooth: hci2: command tx timeout [ 1778.694762][ T6176] hsr_slave_0: left promiscuous mode [ 1778.701489][ T6176] hsr_slave_1: left promiscuous mode [ 1778.711941][ T6176] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1778.724964][ T6176] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1778.734876][ T6176] bridge_slave_1: left allmulticast mode [ 1778.741316][ T6176] bridge_slave_1: left promiscuous mode [ 1778.747644][ T6176] bridge0: port 2(bridge_slave_1) entered disabled state [ 1778.762107][ T6176] bridge_slave_0: left allmulticast mode [ 1778.768799][ T6176] bridge_slave_0: left promiscuous mode [ 1778.775187][ T6176] bridge0: port 1(bridge_slave_0) entered disabled state [ 1779.416164][ T6176] team0 (unregistering): Port device team_slave_1 removed [ 1779.508526][ T6176] team0 (unregistering): Port device team_slave_0 removed [ 1779.607612][ T6176] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1779.699532][ T6176] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1779.829949][ T51] Bluetooth: hci4: command tx timeout [ 1780.247355][ T6176] bond0 (unregistering): Released all slaves [ 1780.306434][ T51] Bluetooth: hci2: command tx timeout [ 1780.611537][T16383] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 1780.645116][T16383] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 1780.723783][T16383] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 1780.757656][T16383] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 1781.040170][T16376] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 1781.074415][T16376] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 1781.104159][T16376] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 1781.127678][T16376] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 1781.161389][T16383] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1781.221632][T16383] 8021q: adding VLAN 0 to HW filter on device team0 [ 1781.255888][ T42] bridge0: port 1(bridge_slave_0) entered blocking state [ 1781.263163][ T42] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1781.290695][ T42] bridge0: port 2(bridge_slave_1) entered blocking state [ 1781.297954][ T42] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1781.474811][T16376] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1781.521579][T16376] 8021q: adding VLAN 0 to HW filter on device team0 [ 1781.553233][ T42] bridge0: port 1(bridge_slave_0) entered blocking state [ 1781.560504][ T42] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1781.612114][ T42] bridge0: port 2(bridge_slave_1) entered blocking state [ 1781.619378][ T42] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1782.002800][T16383] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1782.259637][T16376] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1782.647500][T16383] veth0_vlan: entered promiscuous mode [ 1782.670544][T16383] veth1_vlan: entered promiscuous mode [ 1782.752580][T16383] veth0_macvtap: entered promiscuous mode [ 1782.770712][T16383] veth1_macvtap: entered promiscuous mode [ 1782.823388][T16383] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1782.845756][T16383] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1782.864244][T16383] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1782.875238][T16383] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1782.896350][T16383] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1782.922123][T16383] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1782.940471][T16383] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1782.996044][T16383] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1783.026958][T16383] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1783.046057][T16383] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1783.069102][T16383] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1783.094084][T16383] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1783.110439][T16383] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1783.127534][T16383] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1783.175031][T16383] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1783.194942][T16383] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1783.212118][T16383] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1783.221980][T16383] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1783.326643][T16376] veth0_vlan: entered promiscuous mode [ 1783.393450][T16376] veth1_vlan: entered promiscuous mode [ 1783.495642][ T6190] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1783.525733][ T6190] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1783.571092][T16376] veth0_macvtap: entered promiscuous mode [ 1783.602418][T16376] veth1_macvtap: entered promiscuous mode [ 1783.612319][ T6184] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1783.633713][ T6184] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1783.672844][T16376] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1783.683802][T16376] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1783.706281][T16376] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1783.730423][T16376] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1783.740777][T16376] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1783.751712][T16376] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1783.764441][T16376] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1783.775654][T16376] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1783.806793][T16376] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1783.835677][T16376] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1783.856056][T16376] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1783.879821][T16376] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1783.906238][T16376] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1783.951622][T16376] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1783.966188][T16376] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1786.156315][T16376] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1786.177309][T16376] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1786.207810][T16376] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1786.229265][T16376] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1786.403420][T16376] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1786.412456][T16376] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1786.421479][T16376] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1789.294654][ T6166] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1789.360080][ T6166] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1789.579986][T16558] FAT-fs (nullb0): bogus number of reserved sectors [ 1789.589844][T15534] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1789.596433][T16558] FAT-fs (nullb0): Can't find a valid FAT filesystem [ 1789.637447][T16558] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 1789.661118][T15534] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1792.196521][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 1792.203811][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 1795.893841][T16595] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1936'. [ 1802.475346][T16635] [ 1802.477930][T16635] ====================================================== [ 1802.486031][T16635] WARNING: possible circular locking dependency detected [ 1802.493094][T16635] syzkaller #0 Not tainted [ 1802.497548][T16635] ------------------------------------------------------ [ 1802.504597][T16635] syz.4.1945/16635 is trying to acquire lock: [ 1802.510692][T16635] ffff88806a04c0b8 (&hdev->lock){+.+.}-{3:3}, at: l2cap_chan_connect+0xfc/0xe30 [ 1802.519800][T16635] SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 1802.519800][T16635] but task is already holding lock: [ 1802.527211][T16635] ffffffff8e562248 (rfcomm_mutex){+.+.}-{3:3}, at: rfcomm_dlc_open+0x95/0xec0 [ 1802.536161][T16635] [ 1802.536161][T16635] which lock already depends on the new lock. [ 1802.536161][T16635] [ 1802.546618][T16635] [ 1802.546618][T16635] the existing dependency chain (in reverse order) is: [ 1802.555667][T16635] [ 1802.555667][T16635] -> #2 (rfcomm_mutex){+.+.}-{3:3}: [ 1802.563101][T16635] __mutex_lock+0x135/0xc80 [ 1802.568178][T16635] rfcomm_security_cfm+0x41/0x550 [ 1802.573765][T16635] hci_key_refresh_complete_evt+0x405/0x810 [ 1802.580222][T16635] hci_event_packet+0x807/0x1280 [ 1802.585725][T16635] hci_rx_work+0x43a/0xd60 [ 1802.590708][T16635] process_scheduled_works+0xa60/0x1600 [ 1802.596822][T16635] worker_thread+0xa5e/0xfe0 [ 1802.601972][T16635] kthread+0x2fa/0x390 [ 1802.606608][T16635] ret_from_fork+0x48/0x80 [ 1802.611625][T16635] ret_from_fork_asm+0x11/0x20 [ 1802.616959][T16635] [ 1802.616959][T16635] -> #1 (hci_cb_list_lock){+.+.}-{3:3}: [ 1802.624864][T16635] __mutex_lock+0x135/0xc80 [ 1802.629968][T16635] hci_remote_features_evt+0x535/0x900 [ 1802.635997][T16635] hci_event_packet+0x807/0x1280 [ 1802.641497][T16635] hci_rx_work+0x43a/0xd60 [ 1802.646479][T16635] process_scheduled_works+0xa60/0x1600 [ 1802.652594][T16635] worker_thread+0xa5e/0xfe0 [ 1802.657754][T16635] kthread+0x2fa/0x390 [ 1802.662397][T16635] ret_from_fork+0x48/0x80 [ 1802.667380][T16635] ret_from_fork_asm+0x11/0x20 [ 1802.672723][T16635] [ 1802.672723][T16635] -> #0 (&hdev->lock){+.+.}-{3:3}: [ 1802.680068][T16635] __lock_acquire+0x37ef/0x7d80 [ 1802.685495][T16635] lock_acquire+0x19e/0x420 [ 1802.690569][T16635] __mutex_lock+0x135/0xc80 [ 1802.695639][T16635] l2cap_chan_connect+0xfc/0xe30 [ 1802.701133][T16635] l2cap_sock_connect+0x586/0x760 [ 1802.706721][T16635] kernel_connect+0x142/0x1c0 [ 1802.711963][T16635] rfcomm_dlc_open+0xa1f/0xec0 [ 1802.717306][T16635] rfcomm_sock_connect+0x2ed/0x600 [ 1802.722983][T16635] __sys_connect+0x3da/0x470 [ 1802.728173][T16635] __x64_sys_connect+0x7a/0x90 [ 1802.733503][T16635] do_syscall_64+0x55/0xb0 [ 1802.738659][T16635] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1802.745121][T16635] [ 1802.745121][T16635] other info that might help us debug this: [ 1802.745121][T16635] [ 1802.755380][T16635] Chain exists of: [ 1802.755380][T16635] &hdev->lock --> hci_cb_list_lock --> rfcomm_mutex [ 1802.755380][T16635] [ 1802.767947][T16635] Possible unsafe locking scenario: [ 1802.767947][T16635] [ 1802.775442][T16635] CPU0 CPU1 [ 1802.780849][T16635] ---- ---- [ 1802.786274][T16635] lock(rfcomm_mutex); [ 1802.790506][T16635] lock(hci_cb_list_lock); [ 1802.797566][T16635] lock(rfcomm_mutex); [ 1802.804282][T16635] lock(&hdev->lock); [ 1802.808395][T16635] [ 1802.808395][T16635] *** DEADLOCK *** [ 1802.808395][T16635] [ 1802.816581][T16635] 1 lock held by syz.4.1945/16635: [ 1802.821743][T16635] #0: ffffffff8e562248 (rfcomm_mutex){+.+.}-{3:3}, at: rfcomm_dlc_open+0x95/0xec0 [ 1802.831139][T16635] [ 1802.831139][T16635] stack backtrace: [ 1802.837062][T16635] CPU: 1 PID: 16635 Comm: syz.4.1945 Not tainted syzkaller #0 [ 1802.844592][T16635] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1802.854779][T16635] Call Trace: [ 1802.858095][T16635] [ 1802.861061][T16635] dump_stack_lvl+0x18c/0x250 [ 1802.865790][T16635] ? load_image+0x420/0x420 [ 1802.870336][T16635] ? show_regs_print_info+0x20/0x20 [ 1802.875589][T16635] ? print_circular_bug+0x12b/0x1a0 [ 1802.880858][T16635] check_noncircular+0x2fc/0x400 [ 1802.885972][T16635] ? print_deadlock_bug+0x5d0/0x5d0 [ 1802.891415][T16635] ? lockdep_lock+0xf5/0x230 [ 1802.896069][T16635] ? _find_first_zero_bit+0xd6/0x100 [ 1802.901459][T16635] __lock_acquire+0x37ef/0x7d80 [ 1802.908481][T16635] ? verify_lock_unused+0x140/0x140 [ 1802.914002][T16635] ? lock_chain_get_class+0x80/0xb0 [ 1802.919524][T16635] ? asan.module_dtor+0x20/0x20 [ 1802.924429][T16635] ? lockdep_hardirqs_on+0x98/0x150 [ 1802.929679][T16635] lock_acquire+0x19e/0x420 [ 1802.934230][T16635] ? l2cap_chan_connect+0xfc/0xe30 [ 1802.939655][T16635] ? __might_sleep+0xe0/0xe0 [ 1802.944758][T16635] ? preempt_schedule_common+0x82/0xc0 [ 1802.951407][T16635] ? read_lock_is_recursive+0x20/0x20 [ 1802.956853][T16635] ? preempt_schedule+0xc0/0xd0 [ 1802.961765][T16635] ? schedule_preempt_disabled+0x20/0x20 [ 1802.967581][T16635] ? __lock_acquire+0x7d80/0x7d80 [ 1802.973621][T16635] __mutex_lock+0x135/0xc80 [ 1802.978178][T16635] ? l2cap_chan_connect+0xfc/0xe30 [ 1802.983732][T16635] ? _raw_read_unlock+0x3a/0x40 [ 1802.990983][T16635] ? hci_get_route+0x3a5/0x4d0 [ 1802.998620][T16635] ? l2cap_chan_connect+0xfc/0xe30 [ 1803.004153][T16635] ? mutex_lock_nested+0x20/0x20 [ 1803.009398][T16635] ? print_unlock_imbalance_bug+0x160/0x160 [ 1803.015355][T16635] ? mark_lock+0x94/0x320 [ 1803.019825][T16635] l2cap_chan_connect+0xfc/0xe30 [ 1803.024901][T16635] ? lock_chain_count+0x20/0x20 [ 1803.029802][T16635] ? l2cap_chan_le_send_credits+0x4e0/0x4e0 [ 1803.036009][T16635] ? __local_bh_enable_ip+0x13a/0x1c0 [ 1803.042206][T16635] ? _local_bh_enable+0xa0/0xa0 [ 1803.047478][T16635] ? bacmp+0xe/0x30 [ 1803.051355][T16635] l2cap_sock_connect+0x586/0x760 [ 1803.056459][T16635] ? l2cap_sock_bind+0x940/0x940 [ 1803.061541][T16635] ? asm_sysvec_reschedule_ipi+0x1a/0x20 [ 1803.067411][T16635] ? kernel_connect+0xf2/0x1c0 [ 1803.072249][T16635] kernel_connect+0x142/0x1c0 [ 1803.078385][T16635] ? kernel_accept+0x350/0x350 [ 1803.083837][T16635] ? rfcomm_dlc_open+0x9e3/0xec0 [ 1803.088932][T16635] rfcomm_dlc_open+0xa1f/0xec0 [ 1803.093751][T16635] ? rfcomm_sock_connect+0x2c6/0x600 [ 1803.099352][T16635] ? __local_bh_enable_ip+0x13a/0x1c0 [ 1803.105035][T16635] ? rfcomm_dlc_free+0x50/0x50 [ 1803.111088][T16635] ? __local_bh_enable_ip+0x13a/0x1c0 [ 1803.116508][T16635] ? _local_bh_enable+0xa0/0xa0 [ 1803.121398][T16635] ? do_raw_spin_unlock+0x121/0x230 [ 1803.126645][T16635] rfcomm_sock_connect+0x2ed/0x600 [ 1803.131802][T16635] __sys_connect+0x3da/0x470 [ 1803.136436][T16635] ? __sys_connect_file+0x170/0x170 [ 1803.141690][T16635] __x64_sys_connect+0x7a/0x90 [ 1803.146502][T16635] do_syscall_64+0x55/0xb0 [ 1803.150993][T16635] ? clear_bhb_loop+0x40/0x90 [ 1803.155720][T16635] ? clear_bhb_loop+0x40/0x90 [ 1803.160474][T16635] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1803.166501][T16635] RIP: 0033:0x7f0a8279e159 [ 1803.171040][T16635] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1803.190719][T16635] RSP: 002b:00007f0a8359b028 EFLAGS: 00000246 ORIG_RAX: 000000000000002a [ 1803.199442][T16635] RAX: ffffffffffffffda RBX: 00007f0a82a26090 RCX: 00007f0a8279e159 [ 1803.207455][T16635] RDX: 0000000000000014 RSI: 0000200000000200 RDI: 0000000000000009 [ 1803.215469][T16635] RBP: 00007f0a8283503b R08: 0000000000000000 R09: 0000000000000000 [ 1803.223477][T16635] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1803.231510][T16635] R13: 00007f0a82a26128 R14: 00007f0a82a26090 R15: 00007ffc5e9bbd28 [ 1803.239530][T16635] [ 1805.354333][T15534] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1805.508578][T15534] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1805.685805][T15534] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1805.767999][T15534] bridge0: port 3(netdevsim0) entered disabled state [ 1805.779347][T15534] netdevsim netdevsim1 netdevsim0 (unregistering): left allmulticast mode [ 1805.788449][T15534] netdevsim netdevsim1 netdevsim0 (unregistering): left promiscuous mode [ 1805.799392][T15534] bridge0: port 3(netdevsim0) entered disabled state [ 1805.809662][T15534] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1806.138787][T15534] tipc: Left network mode [ 1807.104023][T15534] hsr_slave_0: left promiscuous mode [ 1807.112956][T15534] hsr_slave_1: left promiscuous mode [ 1807.119508][T15534] batman_adv: batadv0: Interface deactivated: dummy0 [ 1807.128437][T15534] batman_adv: batadv0: Removing interface: dummy0 [ 1807.135579][T15534] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1807.143862][T15534] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1807.154149][T15534] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1807.162075][T15534] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1807.172421][T15534] bridge_slave_1: left allmulticast mode [ 1807.180714][T15534] bridge_slave_1: left promiscuous mode [ 1807.188622][T15534] bridge0: port 2(bridge_slave_1) entered disabled state [ 1807.198166][T15534] bridge_slave_0: left allmulticast mode [ 1807.203865][T15534] bridge_slave_0: left promiscuous mode [ 1807.214442][T15534] bridge0: port 1(bridge_slave_0) entered disabled state [ 1807.229580][T15534] veth1_macvtap: left promiscuous mode [ 1807.235210][T15534] veth0_macvtap: left promiscuous mode [ 1807.241954][T15534] veth1_vlan: left promiscuous mode [ 1807.249115][T15534] veth0_vlan: left promiscuous mode [ 1807.633410][T15534] team0 (unregistering): Port device team_slave_1 removed [ 1807.680063][T15534] team0 (unregistering): Port device team_slave_0 removed [ 1807.722104][T15534] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1807.772511][T15534] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1807.883785][T15534] bond0 (unregistering): Released all slaves [ 1808.354170][T15534] IPVS: stop unused estimator thread 0... [ 1808.459668][T15534] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1808.525751][T15534] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1808.605365][T15534] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1808.703338][T15534] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1808.865811][T15534] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1808.915493][T15534] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1808.990883][T15534] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1809.056322][T15534] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1810.345276][T15534] hsr_slave_0: left promiscuous mode [ 1810.352855][T15534] hsr_slave_1: left promiscuous mode [ 1810.363232][T15534] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1810.371337][T15534] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1810.383460][T15534] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1810.391416][T15534] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1810.400183][T15534] bridge_slave_1: left allmulticast mode [ 1810.405915][T15534] bridge_slave_1: left promiscuous mode [ 1810.413448][T15534] bridge0: port 2(bridge_slave_1) entered disabled state [ 1810.423431][T15534] bridge_slave_0: left allmulticast mode [ 1810.429584][T15534] bridge_slave_0: left promiscuous mode [ 1810.435425][T15534] bridge0: port 1(bridge_slave_0) entered disabled state [ 1810.451568][T15534] hsr_slave_0: left promiscuous mode [ 1810.458733][T15534] hsr_slave_1: left promiscuous mode [ 1810.465103][T15534] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1810.474946][T15534] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1810.483601][T15534] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1810.491477][T15534] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1810.499859][T15534] bridge_slave_1: left allmulticast mode [ 1810.505597][T15534] bridge_slave_1: left promiscuous mode [ 1810.512502][T15534] bridge0: port 2(bridge_slave_1) entered disabled state [ 1810.522456][T15534] bridge_slave_0: left allmulticast mode [ 1810.528919][T15534] bridge_slave_0: left promiscuous mode [ 1810.535463][T15534] bridge0: port 1(bridge_slave_0) entered disabled state [ 1810.552755][T15534] veth1_macvtap: left promiscuous mode [ 1810.560007][T15534] veth0_macvtap: left promiscuous mode [ 1810.565748][T15534] veth1_vlan: left promiscuous mode [ 1810.571828][T15534] veth0_vlan: left promiscuous mode [ 1810.581804][T15534] veth1_macvtap: left promiscuous mode [ 1810.589836][T15534] veth0_macvtap: left promiscuous mode [ 1810.595837][T15534] veth1_vlan: left promiscuous mode [ 1810.604932][T15534] veth0_vlan: left promiscuous mode [ 1811.209101][T15534] team0 (unregistering): Port device team_slave_1 removed [ 1811.258568][T15534] team0 (unregistering): Port device team_slave_0 removed [ 1811.273913][T15534] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1811.321741][T15534] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1811.424099][T15534] bond0 (unregistering): Released all slaves [ 1811.735376][T15534] team0 (unregistering): Port device team_slave_1 removed [ 1811.784343][T15534] team0 (unregistering): Port device team_slave_0 removed [ 1811.830787][T15534] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1811.849849][T15534] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1811.979946][T15534] bond0 (unregistering): Released all slaves