last executing test programs: 38m17.220788411s ago: executing program 32 (id=172): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000780)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) socketpair$unix(0x1, 0x2, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000d40)={0x44, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x44}}, 0x0) ioctl$SOUND_MIXER_READ_RECSRC(0xffffffffffffffff, 0x80044dff, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={0x44, 0x9, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x1c, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @multicast2}}, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @multicast1=0xe0004001}}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x10000047}, 0x0) 38m8.500409488s ago: executing program 33 (id=137): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000300)=ANY=[@ANYBLOB="1201000000000040de28421100000000000109022400010000000009040000010300000009210000000122050009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000280)={0x24, 0x0, 0x0, &(0x7f0000000040)={0x0, 0x22, 0x5, {[@main=@item_4={0x3, 0x0, 0x2, "ae075ea2"}]}}, 0x0}, 0x0) syz_open_dev$hidraw(&(0x7f0000000080), 0x0, 0x0) r1 = syz_io_uring_setup(0x9e, &(0x7f0000000640)={0x0, 0xec25, 0x0, 0x0, 0x40000333}, &(0x7f00000006c0)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) io_uring_enter(r1, 0x47ba, 0x0, 0x0, 0x0, 0x0) 38m6.718130393s ago: executing program 34 (id=232): r0 = openat$vnet(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000140)=0x200000000) write$vhost_msg_v2(r0, &(0x7f0000000980)={0x2, 0x0, {0x0, 0x4b, 0x0, 0x0, 0x2}}, 0x48) write$vhost_msg_v2(r0, &(0x7f0000002080)={0x2, 0x0, {&(0x7f0000001f80)=""/152, 0x98, 0x0, 0x0, 0x2}}, 0x48) write$vhost_msg_v2(r0, &(0x7f0000000640)={0x2, 0x0, {&(0x7f0000000440)=""/87, 0x57, 0x0, 0x3, 0x2}}, 0x48) write$vhost_msg_v2(r0, &(0x7f0000000200)={0x2, 0x0, {&(0x7f0000000540)=""/219, 0xdb, 0x0, 0x1, 0x2}}, 0x48) write$vhost_msg_v2(r0, &(0x7f0000000340)={0x2, 0x0, {&(0x7f00000018c0)=""/193, 0xc1, 0x0, 0x3, 0x2}}, 0x48) write$vhost_msg_v2(r0, &(0x7f0000000780)={0x2, 0x0, {&(0x7f00000006c0)=""/189, 0xbd, 0x0, 0x1, 0x2}}, 0x48) write$vhost_msg_v2(r0, &(0x7f00000003c0)={0x2, 0x0, {&(0x7f00000002c0)=""/119, 0xfca2, 0x0, 0x0, 0x3}}, 0x48) 36m31.259958135s ago: executing program 35 (id=624): r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x9, 0x2) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000000), 0xffffffffffffffff) r3 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r3, 0xab00, r4) r5 = dup3(r3, r0, 0x80000) ioctl$NBD_DO_IT(r5, 0xab03) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x1c, r2, 0x1, 0x70bd2b, 0x8, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x1c}}, 0x20000004) 35m31.850916695s ago: executing program 36 (id=946): r0 = io_uring_setup(0x177d, &(0x7f0000000240)={0x0, 0x572e, 0x2, 0x10002, 0xfffffffe}) symlinkat(&(0x7f0000002040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0xffffffffffffff9c, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00'}, 0x10) r1 = socket$tipc(0x1e, 0x5, 0x0) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_rx_ring(r2, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a}, 0x1c) socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000300)={0x43, 0x3, 0x3, 0x3}, 0x10) close_range(r0, 0xffffffffffffffff, 0x200000000000000) 34m10.54088254s ago: executing program 37 (id=1358): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x3d13eee0) r0 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0) listen(0xffffffffffffffff, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00'}, 0x10) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) connect$packet(r1, &(0x7f0000000000)={0x1f, 0xf8, 0x0, 0x1, 0x2, 0x6, @broadcast}, 0x14) shutdown(r1, 0x1) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bind$packet(0xffffffffffffffff, 0x0, 0x0) 33m52.085753887s ago: executing program 38 (id=1523): setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xf, &(0x7f0000000080)=0xf3e, 0x62) bind$inet(0xffffffffffffffff, 0x0, 0x0) sendmsg$ETHTOOL_MSG_LINKINFO_SET(0xffffffffffffffff, 0x0, 0x20000001) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x482, &(0x7f0000000040)={0x100000011, @multicast2, 0x0, 0x0, 'nq\x00', 0x4, 0xaecd, 0x400006a}, 0x2c) 33m51.816156984s ago: executing program 39 (id=1526): creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53048c4) socket$unix(0x1, 0x1, 0x0) socket$kcm(0x2, 0x1, 0x84) socket$unix(0x1, 0x5, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000340)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="1fe8ffff0000000000003b00000008000300", @ANYRES32=r2, @ANYBLOB="21003300d0800000080211000000080211000001505050505050000000000000", @ANYRES8=r0], 0x40}, 0x1, 0x0, 0x0, 0x4}, 0x0) 32m55.40180519s ago: executing program 40 (id=1753): bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0x2c41, 0x0) flock(r0, 0x5) connect$tipc(r0, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x0, {0x41, 0x0, 0x4}}, 0x10) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0) flock(r2, 0x2) 32m42.491499282s ago: executing program 41 (id=1822): syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000580)='./file1\x00', 0x0, &(0x7f0000000000)={[{@init_itable_val={'init_itable', 0x3d, 0x4}}, {@nombcache}]}, 0x1, 0x589, &(0x7f0000000bc0)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setxattr$security_ima(&(0x7f0000000100)='./file1\x00', &(0x7f0000000140), &(0x7f0000000180), 0xe00f, 0x0) 28m18.785287334s ago: executing program 42 (id=2858): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = syz_io_uring_setup(0x239, &(0x7f0000000380)={0x0, 0x1ffffe, 0x10100, 0x0, 0x0, 0x0, r1}, &(0x7f0000000180)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0, 0x0, {}, 0x1}) io_uring_enter(r2, 0x2ded, 0x4000, 0x0, 0x0, 0x0) chdir(&(0x7f0000000280)='./file0\x00') r5 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x2c41, 0x0) flock(r5, 0x5) r6 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0) flock(r6, 0x2) 25m49.618263538s ago: executing program 43 (id=3256): r0 = socket(0x1000000000000010, 0x80802, 0x0) bind$netlink(r0, &(0x7f0000000440)={0x10, 0x0, 0x0, 0x10004400}, 0xc) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000080000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000005000000010001000900000001"], 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r1, &(0x7f0000000080), &(0x7f0000001540)=""/155}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000280)='kmem_cache_free\x00', r2}, 0x10) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001100)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x29, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000000)=r3, 0x4) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000cc0)={&(0x7f0000000b80)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000c80)={&(0x7f0000000040)=@deltclass={0x24, 0x29, 0x20, 0x70bd2c, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x0, 0xffff}, {0x8, 0x10}, {0x5, 0x1e}}}, 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) 19m4.355402509s ago: executing program 44 (id=4114): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = syz_io_uring_setup(0x10c, &(0x7f0000000380)={0x0, 0x5885, 0x10, 0x0, 0x2c5}, &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f00000002c0)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x8fd74f81c30b1e87}) io_uring_enter(r3, 0x3516, 0x0, 0x0, 0x0, 0x0) 18m24.223250357s ago: executing program 45 (id=4176): r0 = socket$netlink(0x10, 0x3, 0x4) socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000780)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) syz_open_procfs(r1, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f00000000c0), 0xffffffffffffffff) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000000)="580000001400192340834b80043f679a10ff3d425f020048017f4e32f61bcdf1e422000000000100800000000000001000aadc28da3457e792945f64009400050028925aaa000000c600000000000000feff2c707f8f00ff", 0x58}], 0x1) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000000)='./file0\x00', 0x1000050, &(0x7f0000000a40)=ANY=[@ANYBLOB="666c7573682c756e695f786c6174653d312c6e6f6e756d7461696c3d302c726f6469722c757466383d312c6e6f6e756d7461696c3d302c756e695f786c6174653d312c6e6f6e756d7461696c3d302c756e695f786c6174653d302c757466383d312c756e695f786c6174653d302c757466383d312c756e695f786c6174653d312c6e6f6e756d7461696c3d302c646f733178666c6f7070792c726f6469722c756e695f786c6174653d312c71756965742c00aaed2e6322e12ca43d55f4e47d9fb6f319fab9c81cd7b9b508d5df5619dad30ed85701f46d5bb2b85a6aecd28cb992054878a859b15b1598ee0b05192ff4df579d2dd32fb9a6a092bb22740cfe0636a3d8ff4e975e21fc6d6e2d6ece2beac2098361fe652ea69917e6d47463ceb0b35bc7a2f8799debe5e7b6e82c84ab25d06157c08f006d90e62a8026a845835dbf4ac25eec51c3ec73c82014eee15eaaa123084415546ca2e37c23d441b343cec1f74e52bc1f21eb18053a9b98d3a304fba3751bd0121940bc9d276f1e5352b9f4e674bb80ffeaaff6843ef1c8a7a7e0d592893a77ae91e025a35840e7ff4fdb3571d1986ed6f5a23d9ee6bf1cec94fb17af0627c04bf47586ce288a466c039a1ead7fd99feacc51d9f7a2e67f46a0b86b45e5d7cb4affc1c539a764f5"], 0x1, 0x30c, &(0x7f00000003c0)="$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") 17m5.9291538s ago: executing program 46 (id=4310): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) r1 = mq_open(&(0x7f0000000180)='$[&^%].\x00', 0x800, 0x8, &(0x7f00000001c0)={0x6000, 0x1, 0x2a, 0xd}) mq_notify(r1, &(0x7f0000000240)={0x0, 0x1b, 0x4, @thr={&(0x7f0000000380)="3ad40808bb0f13c86b93c7c0733ffe20ae562ec4baccbc24e569f68ee146745d843290330c385b26b0d6676ae95bc4a95969404428e95f9a5112", &(0x7f0000000400)="66203c72a0efbca4f24cd7111da51f11dbef7487d0218c387c4b2f0e0fa78bb7c4533c0f18b2abc1636507559ae49440a032636fe80f435265e4f950be140ba1a13889e4b0e7a3ae15870767fb5878d1e82f9ce012a2d614dc9c18483bc8ddfe2536581ee209093b308108fd1d3519d9286dff6831b58a56bff4601c35c14b88b35e7ad6d4a1fcfca402cd3fd5c1d09f"}}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000300)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = creat(&(0x7f0000000000)='./file0\x00', 0xd931d3864d39dcdb) close(r4) r5 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x181) fcntl$setlease(r5, 0x400, 0x1) execve(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) 14m10.655720425s ago: executing program 47 (id=4579): prlimit64(0x0, 0xe, &(0x7f0000000240)={0xc, 0xfffffffffffff800}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$vcsa(0xffffffffffffff9c, 0x0, 0x4080, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) syz_mount_image$msdos(&(0x7f00000001c0), &(0x7f0000000080)='./file0\x00', 0x1000000, &(0x7f0000000340)={[{@fat=@codepage={'codepage', 0x3d, '737'}}, {@fat=@nfs}, {@dots}, {@fat=@debug}, {@fat=@fmask={'fmask', 0x3d, 0x1ff}}, {@fat=@discard}, {@nodots}, {@nodots}, {@nodots}, {@fat=@check_normal}, {@nodots}, {@nodots}, {@fat=@showexec}, {@nodots}, {@fat=@discard}, {@nodots}, {@fat=@sys_immutable}, {@nodots}, {@nodots}, {@fat=@check_strict}, {}, {@nodots}]}, 0x0, 0x1f1, &(0x7f00000006c0)="$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") r3 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x10, &(0x7f0000000000)=[@in={0x2, 0x4e20, @rand_addr=0x64010102}]}, &(0x7f00000002c0)=0x10) getsockopt$inet_sctp6_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000300)=0x8) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r3, 0x84, 0x18, &(0x7f00000001c0)={r4, 0x9}, 0x8) 13m59.995440626s ago: executing program 48 (id=4595): read$FUSE(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbef3, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) fchdir(r3) mkdir(&(0x7f0000000100)='./control\x00', 0x0) rmdir(&(0x7f0000000040)='./control\x00') 9m40.939955883s ago: executing program 49 (id=5005): open_tree(0xffffffffffffff9c, 0x0, 0x89901) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) unshare(0x22020600) r2 = syz_io_uring_setup(0x10d, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x40000000}, &(0x7f0000000380)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f0000000100)=@IORING_OP_SYMLINKAT={0x26, 0x40, 0x0, 0xffffffffffffffff, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)='./file0\x00'}) io_uring_enter(r2, 0x3f70, 0x0, 0x0, 0x0, 0x0) 5m58.578282177s ago: executing program 50 (id=5358): epoll_create1(0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/bus/input/devices\x00', 0x0, 0x0) socket$qrtr(0x2a, 0x2, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x101041) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x3}, 0x0, &(0x7f0000000140)={0x1ff, 0x0, 0x1, 0x3, 0x0, 0x8, 0x1, 0x200000000}, 0x0, 0x0) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0) write$uinput_user_dev(r0, &(0x7f0000000cc0)={'syz0\x00', {0x9, 0x0, 0x0, 0x3}, 0x48, [0x1400000, 0x1, 0xd0, 0x7fff, 0x5, 0x7, 0x4, 0x6aa51a28, 0x1891ffb7, 0x2, 0x6e8, 0x7, 0x6, 0x3, 0x10000, 0x7, 0x8, 0x2, 0x1, 0xd, 0x5c01, 0x1, 0x80b7, 0x6, 0xb4, 0x7595, 0x8, 0x8, 0x8, 0xd, 0x0, 0x2, 0x9, 0x20005, 0x4c, 0x3, 0x2, 0xbc, 0x8001, 0x4, 0xfffffffe, 0x40, 0xf, 0xfff, 0xfffffe00, 0x80000001, 0x7, 0x9, 0x2, 0x6, 0x6, 0x0, 0x401, 0x7, 0xffff, 0x9, 0x3, 0x2, 0xe4, 0x23380, 0x8, 0xfff, 0x3d4fffc, 0x200], [0x8, 0xb, 0xf2de, 0x8, 0x8, 0x10, 0xe, 0x6, 0xfffffffa, 0x8, 0x3dc6, 0x9, 0x9, 0xd361, 0x8000, 0x6, 0x4, 0x2489, 0x9d, 0xfff, 0x10, 0x10001, 0x0, 0xb, 0xffff, 0x563, 0x5, 0x2c308c93, 0x7fffffff, 0x71e6, 0xe, 0xe969, 0x2, 0x2, 0x6, 0x0, 0xc0000, 0x74cb9859, 0x2, 0xfffffff7, 0x4, 0x6, 0x7, 0x7, 0x80, 0x72012756, 0x6, 0x152, 0xc, 0x6, 0x0, 0x7, 0x2, 0x80000000, 0x5, 0x3, 0x3, 0x1000, 0x7, 0xfd2e, 0x3ff, 0x5, 0x5, 0xe], [0x101, 0x2, 0x23f4, 0x3, 0x34, 0x55, 0x63, 0xffffffff, 0x9, 0xd8, 0x3c6, 0x1, 0x1, 0x9, 0xd, 0xfff, 0x800002, 0x1ff, 0x7, 0x200, 0x3, 0x0, 0x8, 0x34c, 0x2, 0x8001, 0x92, 0x3, 0xfffffe00, 0x2, 0x7fff, 0xfd, 0x8, 0x3ff, 0x5, 0x3, 0xde3, 0x6, 0x5, 0xffffe25a, 0x3, 0x9, 0x7, 0x6, 0x6, 0x203, 0x3, 0x7, 0x168e, 0x9, 0x4, 0x15c, 0x9, 0x9d, 0xfffffffe, 0x401, 0x3f, 0xfc8a, 0x4, 0x7fff, 0x7, 0x7f, 0x1, 0xa23], [0x100, 0x8, 0x5, 0x8d1, 0x0, 0x6, 0xfffff665, 0x834, 0x6, 0x9, 0x5, 0x4, 0xc6, 0x81, 0xfffffffe, 0xfffffffc, 0x0, 0x240, 0x401, 0x5, 0x4, 0x9, 0x3, 0xf4b, 0x8000001, 0xfffffffd, 0x7, 0x7, 0x1fb, 0xb7, 0x7, 0x401, 0xd, 0x1, 0x1, 0xcd66, 0x8, 0x9, 0x4, 0x8001, 0x9, 0xfffffffc, 0x5606, 0x3, 0x4, 0x0, 0x2, 0x2, 0xfae7, 0x40001, 0x0, 0x1, 0x8, 0x100, 0x2, 0xffffffff, 0x5, 0xfffff82c, 0x8, 0x4, 0x6, 0x81, 0x6, 0xffff4609]}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r2 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r2, 0x0, 0xc8, &(0x7f0000003d40), 0x4) setsockopt$MRT_ADD_VIF(r2, 0x0, 0xca, &(0x7f0000003d80)={0x0, 0x0, 0x0, 0x0, @vifc_lcl_addr=@local, @dev}, 0x10) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_mreq(r3, 0x0, 0x23, &(0x7f0000000000)={@multicast1=0xe0000300, @local}, 0x8) syz_emit_ethernet(0x2a, &(0x7f0000000080)={@local, @remote, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x20, 0x0, 0x2, 0x0, @rand_addr, @multicast1=0xe0000300}, @address_request}}}}, 0x0) syz_emit_ethernet(0x2a, &(0x7f0000000080)={@local, @remote, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x20, 0x0, 0x2, 0x0, @rand_addr=0xe0, @multicast1=0xe0000300}, @address_request}}}}, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) 5m4.553272978s ago: executing program 6 (id=5463): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r3, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r3, 0x10e, 0x4, &(0x7f0000000140)=0x6, 0x4) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x8936, &(0x7f0000000000)) setsockopt$sock_int(r3, 0x1, 0x8, &(0x7f0000000200), 0x4) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000004c0)={0x94, 0x0, 0x1, 0x401, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @empty}, {0x14, 0x4, @mcast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @local}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}]}, 0x94}}, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)={0x94, 0x0, 0x1, 0x401, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @mcast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}]}, 0x94}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000004c0)={0x50, 0x0, 0x1, 0x401, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @empty}, {0x14, 0x4, @mcast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}]}, 0x50}}, 0x0) 5m3.098132107s ago: executing program 6 (id=5467): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1b0000000000000000000000000004", @ANYRES32=0x0], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x2d) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0xf, 0x7fff0006}]}) r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r6, 0x0, 0x0) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040), r7) syz_open_dev$usbfs(&(0x7f0000000040), 0x80000000003, 0x101301) close_range(r5, 0xffffffffffffffff, 0x0) 5m1.407530252s ago: executing program 6 (id=5468): syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000140)={0x2, @pix_mp={0x0, 0x0, 0x34324152, 0x2, 0xb, [{}, {}, {}, {0xfffffffd}, {}, {0x0, 0x1000000}]}}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) fsopen(0x0, 0x1) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000000)={0x40000000, 0x0, 0x0}, 0x0) connect$inet(0xffffffffffffffff, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) r2 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r2, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@mcast1, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x10000, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0xfffffffffffffffd}, {0x0, 0x0, 0x0, 0x8}, 0x0, 0x0, 0x1}, {{@in6=@ipv4={'\x00', '\xff\xff', @private}, 0x2, 0x6c}, 0x0, @in=@empty, 0x0, 0x0, 0x0, 0xb7}}, 0xe8) sendmmsg(r2, &(0x7f0000007fc0), 0x800001d, 0x0) 4m56.713041527s ago: executing program 6 (id=5477): syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000140)={0x2, @pix_mp={0x0, 0x0, 0x34324152, 0x2, 0xb, [{}, {}, {}, {0xfffffffd}, {}, {0x0, 0x1000000}]}}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) fsopen(0x0, 0x1) r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000000)={0x40000000, 0x0, 0x0}, 0x0) connect$inet(0xffffffffffffffff, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r1, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@mcast1, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x10000, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0xfffffffffffffffd}, {0x0, 0x0, 0x0, 0x8}, 0x0, 0x0, 0x1}, {{@in6=@ipv4={'\x00', '\xff\xff', @private}, 0x2, 0x6c}, 0x0, @in=@empty, 0x0, 0x0, 0x0, 0xb7}}, 0xe8) sendmmsg(r1, &(0x7f0000007fc0), 0x800001d, 0x0) 4m52.96594804s ago: executing program 6 (id=5484): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) bpf$BPF_LINK_UPDATE(0x1d, 0x0, 0x0) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f00000000c0)=ANY=[], 0x8) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c) prctl$PR_SET_MM(0x23, 0xa, &(0x7f00002d5000/0x2000)=nil) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x3) syz_clone(0x600, 0x0, 0x33, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) pselect6(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) open_tree(0xffffffffffffff9c, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) capset(&(0x7f00000004c0)={0x20080522}, 0x0) listxattr(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) sendmmsg$inet6(r0, &(0x7f0000004b80)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000040)="82", 0xfd67}, {&(0x7f00000000c0)='\x00\x00', 0x2}], 0x2}}], 0x1, 0x8080) 4m47.429152279s ago: executing program 6 (id=5492): socket$nl_generic(0x10, 0x3, 0x10) socket$inet_mptcp(0x2, 0x1, 0x106) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000140)='u', 0x1, 0x24000010, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1b}, 0xd}, 0x1c) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_queued_recursive\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000100), 0xfffffd9d) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="18050000000000fe000000004b64ffec850000007d000000040000000700000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendfile(r0, r1, 0x0, 0x1000004) 4m31.952971012s ago: executing program 51 (id=5492): socket$nl_generic(0x10, 0x3, 0x10) socket$inet_mptcp(0x2, 0x1, 0x106) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000140)='u', 0x1, 0x24000010, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1b}, 0xd}, 0x1c) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_queued_recursive\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000100), 0xfffffd9d) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="18050000000000fe000000004b64ffec850000007d000000040000000700000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendfile(r0, r1, 0x0, 0x1000004) 4m11.04964556s ago: executing program 3 (id=5556): syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000140)={0x2, @pix_mp={0x0, 0x0, 0x34324152, 0x2, 0xb, [{}, {}, {}, {0xfffffffd}, {}, {0x0, 0x1000000}]}}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) fsopen(0x0, 0x1) r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000000)={0x40000000, 0x0, 0x0}, 0x0) connect$inet(0xffffffffffffffff, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r1, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@mcast1, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x10000, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0xfffffffffffffffd}, {0x0, 0x0, 0x0, 0x8}, 0x0, 0x0, 0x1}, {{@in6=@ipv4={'\x00', '\xff\xff', @private}, 0x2, 0x6c}, 0x0, @in=@empty, 0x0, 0x0, 0x0, 0xb7}}, 0xe8) sendmmsg(r1, &(0x7f0000007fc0), 0x800001d, 0x0) 4m6.73621562s ago: executing program 3 (id=5566): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_open_dev$ttys(0xc, 0x2, 0x1) mount$9p_virtio(&(0x7f0000000000), &(0x7f0000000100)='./cgroup\x00', &(0x7f0000000300), 0x10000, &(0x7f0000000340)=ANY=[@ANYBLOB="7472616e733d76697274696f2c6673757569643d63336531646466642d663730352d620b39652d6262e2332d37336463626236342c646f6e745f6168"]) syz_io_uring_setup(0x1661, 0x0, 0x0, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000020900010073797a30000000003c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a30000000000800054000000029680000001e0a05010000000000000000070000000900020073797a31000000000900010073797a30000000003c00038038000080340001802d000100fefe807eb37bc2a7a6110a370abbe10adf32aa848edc90231f7365de2ae1583b710c20da833679ebe6000000140000001000010000000000000000000084000a"], 0xec}}, 0x0) connect$unix(r2, &(0x7f0000000240)=@file={0x1, './cgroup\x00'}, 0x6e) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x0, 0x0, 0x2}}, 0x0, 0x1a, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x28) r4 = userfaultfd(0x80001) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x749}) ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, &(0x7f0000000200)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) 4m4.567633114s ago: executing program 3 (id=5571): flistxattr(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_status={{0xf, 0x4}, {0x1, 0xfa, 0x2043}}}, 0x7) socket$rds(0x15, 0x5, 0x0) syz_mount_image$iso9660(&(0x7f0000000140), &(0x7f00000001c0)='./file0\x00', 0x2000c12, &(0x7f0000000240)={[{@gid}, {@iocharset={'iocharset', 0x3d, 'koi8-ru'}}, {@check_relaxed}, {@map_acorn}, {@uid}, {@session={'session', 0x3d, 0x9}}, {@check_strict}, {@map_acorn}, {@block={'block', 0x3d, 0x800}}, {@cruft}, {@unhide}, {@cruft}]}, 0x4, 0xa00, &(0x7f00000003c0)="$eJzs3UtsXFf9B/Dv9SNx3SpJ2/z7L1XbTFKSuq1xbIcmRF2UxJ4kLn4g25EasWhK46AQQ6EBqa2QmkqIFRVIIBawq1jBplI3dIO6gx2sWCChrthXrMLK6M6M49eMx3YdO00/n+h67uN3z/nd58mMr+eEz5eF/SumFhZqwxanL/5hBzLmLnZ29JP3P3ivHN69mT3pzPPFn5KeJJWkK8mjSffI6PTURJuCrieXk3ycFEn2pv66IZdT/CIPLE1/nOJ3Zb0t7dloybSzwBfabp9/AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABwNypGRgcHh4o9GZu8+HKlLqmsMTI6PVVkYWHtksV16j6q9fpdfNS23qQoh/T0LHb1/ejBpcWPJKkcyeP1qcdrHZKnJ2/f/8iBFx7u6lhcv1U2n8nejRd74623r786Pz/3RuuQhXfq27A9ud1lzlcnx2amxibOnK9WxmamKqdPnhw8fuHcTOXc2Hh15tLMbHWiMjJdPTM7NV3pG3mmMnT69IlKdeDS1MXJ86MD49XFmae+Mjw4eLLy0sA3q2emZ6Ymj780MDNyYWx8fGzyfC2mXFzGnCpPxG+MzVZmq2cmKpWr1+bnTqzKqXP1zi6DhtptSRk03C5oeHB4eGhoeHjo3Ubv2bdnnHz+9POnBge7BlfJmog7dNJyd7mv9WHe5js4bF1Hvf3Pd8czlslczMupNP03ktFMZyoTLZY3LLb/R49X1613efvfaOW7li1+rPxxJE82JntatP8tctm5fzfyVt7O9bya+cxnLm/sekY7++98qpnMWGYylbFM5ExtTqUxp5LTOZmTGcwruZBDmUkl5zKW8VQzk0uZyWyqtTNqJNOp5kxmM5XpVNKXkTyTSoZyOqdzIpVUM5BLmcrFTOZ8RnOmVsrVXKvt9xPr5Hg7aGgjQcPrBK1uzMtzfXPtf/Ve/Z8gG7b9N3HYooVG+7+nfWjfyE4kBAAAAGy7L/01+w4+9Jd/JUWeqH0uf25svPribqcFAAAAbKPa43qPly/d5dgTPbX3/4O7nRYAAACwjYra39gVSXpzqD62+JdQPgQAAACAe0Tt9/9Ppji0NMP7fwAAALjHtP+O/bYRRf/i1/9WrtRfrzQi6lNF77mx8erAyNT4C0M5VvuWgSRPrC2tMym6a39+8GwO16MO99Zfe5dKLOvsKaOGBl4YyrM50tiQvqfKl6f6mkQO1yOfrkc+vTyyMysiT5SRAHCvO7JOe7zR9v/Z9Ncj+h+rNfldjzVpgwe1rABwt7jdx85/G12aNWn/GxFPtmr/v7rO+/8y4qFcPVR/pGAgr+X1zOdK+tN44uBQs1IXeyOoP4bQ3+bTgN7GIwt/P9WR/jWfB/Tc3tblsXMZTn/TTwSWlVss5nCiHtd5Z44BAOy0I+u2wxtr//vbvP/v9UghANxVbvdgv4mRdzYTPPfGjd3eRgBgJa00AAAAAAAAAAAAAAAAAAAAAAAAAAAAbL8NfYH/344l8/NzyRY6C9jySM9mMlx/pCM7lPOuj3Qm2a3aX8ym1yqP8Weo9I/3NVb/9+7v+XtuZJdvTAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOyIIulsNr8j2ZtkMMnxnc/qzrm52wlsl8qeLa1W3MqtvJl9254PAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMAXXOP7/ztSf72/PitdHcnRJJeTfGu3c9xOt3Y7gTujaB/yvXrg0vf/dyTdWSjSVT/sKbpHRqenJsqiir3l8k/e/+C9cmhf9tpeFcoCyhpWdC7RqGHZnO6Vaz1YW6t3dO7G9R+9/oPK6NnaiXl29tz46MT56a8vBT5SfJhUUh8WLeb7k6N//uWy2Y2OEooPyy1tbnW952r1jq6t9/+brd2i3g24Nj83XNY0W3159sffv/bmskUP5XDyVF/St7Km75RDi5oOr96fKxWfFj8r9uU3uVw7/uXeKBaK8hDtr23/fVevzc8NvPb6/JXbOb2zIqcDOZTkStKz8ZwOtT43a2ddR3dZ62AtqPxxsE1561pW4lCL/fpg7ZTp3dQ2VNpcX232eyOjE00z+tUPH86xTR/pY21qbKr4tPhncSH/yE+X9f/RUR7/o2l6dTYpoha57ExZvmzF5dVRj6xt+fDyBa+sLrPlVckd8PN8O1+7ffw7lt3/G8dqZ+5Hy2psfl0km78ufr9/TYuypNYiHVzVIjXuPq3WaeR5sB7VIs//y3P1MjdxR3muXYt9h67/3xZ9+U9u6v8HAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAC4+xVJZ7P5HcnRJAeS7C+nK8nC6pibW6ivo7fYSprbZis5f/4ULTe0uJVbeTP7djojAAAAAAAAAO6Ms6OfvP/Be+VQ+318Z77c0VhSSbqSHCh+3T0yOj010aag7uTy4q/0ezaXw+XyxwNL0x+XU4+2WWl3Hx8AgM+1/wUAAP//p2dujQ==") r0 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) getdents64(r0, 0xfffffffffffffffe, 0x29) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, @value}, 0x28) socket$nl_route(0x10, 0x3, 0x0) ppoll(&(0x7f0000003840)=[{0xffffffffffffffff, 0x10}], 0x1, 0x0, 0x0, 0x0) pread64(0xffffffffffffffff, 0x0, 0x0, 0x358) request_key(0x0, 0x0, 0x0, 0x0) setsockopt$IP_VS_SO_SET_ADDDEST(0xffffffffffffffff, 0x0, 0x487, 0x0, 0x0) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)={{'fd', 0x3d, r2}, 0x2c, {'rootmode', 0x3d, 0x4000}}) 4m3.316530244s ago: executing program 3 (id=5575): syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) openat$proc_mixer(0xffffffffffffff9c, 0x0, 0x22002, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x5) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={0xffffffffffffffff, 0x0, 0xe, 0x44, &(0x7f0000000100)="0000000000000000000051229dc9", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) openat$dir(0xffffffffffffff9c, &(0x7f0000000180)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x48940, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000002dc0), r2) sendmsg$NLBL_CALIPSO_C_REMOVE(r2, &(0x7f0000002ec0)={0x0, 0x0, &(0x7f0000002e80)={&(0x7f0000002e00)={0x1c, r3, 0x1, 0x70bd2b, 0x25dfdbfe, {}, [@NLBL_CALIPSO_A_DOI={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x10) inotify_init1(0x0) acct(0x0) syz_open_pts(0xffffffffffffffff, 0x0) 4m2.195469577s ago: executing program 3 (id=5579): io_uring_setup(0x30d1, &(0x7f0000000300)={0x0, 0xd27b}) bpf$PROG_LOAD(0x5, 0x0, 0x0) bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0x0, @any, 0x0, 0x1}, 0xe) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$vim2m(0xffffff9c, &(0x7f0000000180), 0x2, 0x0) r3 = syz_io_uring_setup(0x10d, &(0x7f0000000300)={0x0, 0xce5d, 0x80, 0x0, 0x89}, &(0x7f0000000240)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f00000002c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}) io_uring_enter(r3, 0x47f9, 0x0, 0x0, 0x0, 0x0) 3m59.75819185s ago: executing program 2 (id=5581): syz_mount_image$vfat(&(0x7f00000005c0), &(0x7f00000002c0)='./file0\x00', 0xc80, &(0x7f0000000180)=ANY=[@ANYBLOB="00631dda01aef2456795dd9b26209f1c0f624854ea3dd5a00bd6df44035f5c3ae796fec6d633a0ffad0569794acfef7da01767fd4175f2cd82df769aa2ee7bfe3640554507d2e660c9f9e222a72e1e3e71145c480657d2864e5e276f028d64701ae31cde0ceaf408fdb05c0f4142da00e900000100000149e6d308cbe315789f4baffe39bbced9b1d421d2e290e9fc563b62225f002ee310e1fa7321000000000000d6231001a4b2d467825f3abb0c167e129cf1fa0e7854103f4bf2d3a0194983bc86cbd3d75ccef3c8ac4516dac102"], 0x1, 0x266, &(0x7f0000000340)="$eJzs281OE1EYxvGHDwVBmCqKgjG+0Y1uJlCvoCGQGJtokBo/EpNBptp0aEmnwdQYYefW6yAu3ZkYb4CNV+DCHRuXLIxjmKnQlhrDQiba/29zXnJ4mnP6njZn0dl58Ha1XAzdoldXf59pUNrUrpRRvwaU6GuO/XF9Uq02dWMi/+XyvYePbufy+flFs4Xc0s2smY1f+fji1burn+qj99+PfxjSdubJzrfs1+3J7amdH0vPS6GVQqtU6+bZcrVa95YD31ZKYdk1uxv4XuhbqRL6tbb5YlBdW2uYV1kZG1mr+WFoXqVhZb9h9arVaw3znnmlirmua2Mjwp8UthYXvVzaq8DfVavlvDlJ04dmClupLAgAAKSK+38v4/7fC/bu/4+bn9923P8BAAAAAAAAAAAAAAAAAAAAAPgX7EaRE0WR82s8IcVP+ETNv09JGpE0Kum0pDFJ45IcSRlJZySdlTQh6Zyk85ImJV2QdFHSVMtrpb1XHEb/exv97230v7e1PLg7LK2+WS+sF5Ixmc8VVVIgXzNy9D3uZVNSL9zKz89YLKNLqxvN/MZ6YaA9Pytn78B0y88meWvPD8Xnbj+flbN3wLrls13zw7p+rSXvytHnp6oq0Ep8Jg/yr2fN5u7kO/LT8f/971zb17V/rvu7+SR/hPPR8f4Oanow3b1DChsvy14Q+DUKCgqK/SLtbyYch4Omp70SAAAAAAAAAAAAAAAAAMBRHMfPCdPeIwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAnX4GAAD//5KSYE0=") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b20, 0x0) bind$alg(0xffffffffffffffff, 0x0, 0x0) r2 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x1040}, 0x1, 0x0, 0x0, 0x40018}, 0x890) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x200000, &(0x7f0000000980)={[{@nojournal_checksum}, {@noacl}, {@barrier}, {@norecovery}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@lazytime}, {@nodelalloc}, {@usrquota}, {@noauto_da_alloc}, {@bh}, {@init_itable}]}, 0xff, 0x551, &(0x7f0000000cc0)="$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") syz_mount_image$tmpfs(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)) unlinkat(0xffffffffffffff9c, &(0x7f0000000c40)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0) mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1/file2\x00', 0x81c0, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x22, 0x0, 0x0) 3m57.832941741s ago: executing program 3 (id=5584): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) socket$igmp6(0xa, 0x3, 0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mount(0x0, &(0x7f0000000240)='./file1\x00', &(0x7f0000000000)='tmpfs\x00', 0x0, &(0x7f0000000300)='usrquota') chdir(&(0x7f0000000080)='./file1\x00') r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) quotactl_fd$Q_SETQUOTA(r2, 0xffffffff80000800, 0x0, &(0x7f00000003c0)={0x0, 0x5, 0xfeff, 0x0, 0x0, 0xfffffffffffffffc, 0x3, 0x0, 0xfeff}) capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000040)) write$FUSE_CREATE_OPEN(r2, &(0x7f0000000540)={0xa0, 0x0, 0x0, {{0x1, 0x0, 0x2b2a4ad1, 0xffffffff80000001, 0x80000000, 0x200, {0x0, 0x9, 0x7, 0x6f8, 0x8, 0x5, 0xe4, 0xd, 0x0, 0xa000, 0x7fff, 0x0, 0x0, 0xc09c, 0x9}}, {0x0, 0x6}}}, 0xa0) 3m57.618023298s ago: executing program 2 (id=5586): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r3 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) fcntl$notify(r3, 0x402, 0x8000003d) r4 = open(0x0, 0x0, 0x0) fcntl$notify(r4, 0x402, 0x8000003d) close_range(r3, r4, 0x0) 3m56.278005829s ago: executing program 7 (id=5588): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)=ANY=[@ANYBLOB], 0xb0}}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000d80)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$rds(0x15, 0x5, 0x0) bind$rds(r3, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000e00)={0x11, 0xe, &(0x7f0000001880)=ANY=[@ANYRESHEX=r2], &(0x7f0000000cc0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x4, 0x1}, 0x8, 0x10, &(0x7f0000000d00)={0x0, 0x6}, 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x80000000, @void, @value}, 0x94) r4 = syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2) ioctl$vim2m_VIDIOC_TRY_FMT(r4, 0xc0d05640, &(0x7f0000000300)={0x2, @sdr={0x31303553, 0x4}}) r5 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) getsockopt$llc_int(r5, 0x10c, 0x5, 0x0, 0x0) sendmsg$rds(r3, &(0x7f0000000080)={&(0x7f0000000040)={0x2, 0x0, @local}, 0x10, 0x0, 0x0, &(0x7f0000000240)=[@rdma_args={0x48, 0x114, 0x1, {{}, {0x0}, 0x0}}], 0x48}, 0x0) 3m53.096149875s ago: executing program 7 (id=5591): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000040), 0x6) ioctl$sock_bt_hci(r0, 0x400448e6, &(0x7f0000000080)="fc") ioctl$sock_bt_hci(r0, 0x400448e6, &(0x7f0000000500)="d7196381416352dcf170ea58e51e96cc245074ad1ea1e88f6eeca6f22d50e3a349cc14e23bb5e1") ioctl$sock_bt_hci(r0, 0x400448e7, &(0x7f0000000080)) r1 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_int(r1, 0x0, 0xf, &(0x7f0000000040)=0x7, 0x4) bind$inet(r1, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, 0x0, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB, @ANYRES32=r4], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='percpu_alloc_percpu\x00', r5}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0xfff, 0x5, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x4, 0x16, &(0x7f0000000240)=ANY=[@ANYBLOB], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={0xffffffffffffffff, 0x27, 0x0, 0x0, 0x0, 0x0, 0x1600, 0xf2ffffff, 0x0, 0x0, 0x0, 0x0}, 0x50) sendmsg$NFT_BATCH(r3, 0x0, 0x0) openat$cgroup_subtree(0xffffffffffffffff, &(0x7f00000000c0), 0x2, 0x0) 3m53.095333135s ago: executing program 2 (id=5601): socket$nl_route(0x10, 0x3, 0x0) gettid() r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETRULE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000500)=ANY=[@ANYBLOB], 0x14}, 0x1, 0x0, 0x0, 0x890}, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$vim2m(0xffffff9c, &(0x7f0000000180), 0x2, 0x0) io_uring_enter(0xffffffffffffffff, 0x47f9, 0x0, 0x0, 0x0, 0x0) r4 = syz_open_dev$video4linux(&(0x7f0000000480), 0x5, 0x0) ioctl$VIDIOC_SUBDEV_ENUM_FRAME_SIZE(r4, 0xc040564a, &(0x7f0000000280)={0x8008, 0x0, 0x2002, 0x2b, 0x7, 0x0, 0x80, 0x1}) 3m51.148938213s ago: executing program 2 (id=5593): syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000140)={0x2, @pix_mp={0x0, 0x0, 0x34324152, 0x2, 0xb, [{}, {}, {}, {0xfffffffd}, {}, {0x0, 0x1000000}]}}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) fsopen(0x0, 0x1) r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000000)={0x40000000, 0x0, 0x0}, 0x0) connect$inet(0xffffffffffffffff, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r1, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@mcast1, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x10000, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0xfffffffffffffffd}, {0x0, 0x0, 0x0, 0x8}, 0x0, 0x0, 0x1}, {{@in6=@ipv4={'\x00', '\xff\xff', @private}, 0x2, 0x6c}, 0x0, @in=@empty, 0x0, 0x0, 0x0, 0xb7}}, 0xe8) sendmmsg(r1, &(0x7f0000007fc0), 0x800001d, 0x0) 3m51.117129728s ago: executing program 7 (id=5594): add_key$keyring(&(0x7f0000000040), 0x0, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x0, 0x0, &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x54, '\x00', 0x0, @fallback=0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdir(&(0x7f0000000400)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) r3 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x802, 0x0) ioctl$UI_DEV_SETUP(r3, 0x405c5503, &(0x7f00000002c0)={{0xfff9, 0x62, 0x2, 0x9}, 'syz0\x00', 0x1e}) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') sendmsg$SEG6_CMD_SETHMAC(0xffffffffffffffff, 0x0, 0x0) mount$fuse(0x0, &(0x7f0000000440)='./file0\x00', 0x0, 0x208000, 0x0) syz_emit_vhci(&(0x7f0000000080)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_status={{0xf, 0x4}, {0x5, 0x0, 0x41c}}}, 0x7) 3m48.845597905s ago: executing program 7 (id=5597): socket$pppl2tp(0x18, 0x1, 0x1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) socket$inet_udp(0x2, 0x2, 0x0) socket$inet6(0xa, 0x2, 0x0) socket$netlink(0x10, 0x3, 0x0) socket$rxrpc(0x21, 0x2, 0xa) socket$inet_udplite(0x2, 0x2, 0x88) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = syz_io_uring_setup(0x24fc, &(0x7f0000000080)={0x0, 0x0, 0x10100, 0x3}, &(0x7f0000000180)=0x0, &(0x7f0000000140)=0x0) socket$inet6_sctp(0xa, 0x1, 0x84) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000200)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) recvmsg$unix(r3, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000140), 0x100}, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.kill\x00', 0x275a, 0x0) write$UHID_CREATE2(r4, &(0x7f0000000180)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x9, 0x12, r4, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READ_FIXED) io_uring_enter(r0, 0x2d3e, 0x0, 0x0, 0x0, 0x0) 3m48.777622639s ago: executing program 2 (id=5598): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(des3_ede)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f0000000540)=[{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f00000000c0)="e4e32dd2b696733552eca3e95494", 0xe}, {&(0x7f0000000100)="3a10", 0x2}], 0x2, &(0x7f0000000740)=ANY=[@ANYBLOB="300000000000000017e2ffff010000001800000045f43a7ce45002bdb85e47ab3e39597e422ffab456dd963a0000000018000000000000001701000004000000060200000040000018"], 0x60}], 0x1, 0x8001) set_tid_address(0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) ioctl$sock_inet_SIOCDARP(0xffffffffffffffff, 0x8955, 0x0) socket$alg(0x26, 0x5, 0x0) setgroups(0x400000000000026f, &(0x7f0000000080)=[0x0, 0xee00]) recvmmsg(r1, &(0x7f0000001440)=[{{0x0, 0x0, &(0x7f0000000940)=[{&(0x7f00000001c0)=""/156, 0x9c}], 0x1}}], 0x1, 0x0, 0x0) 3m45.867241366s ago: executing program 2 (id=5600): r0 = open(0x0, 0x800, 0x0) setxattr$system_posix_acl(&(0x7f0000000240)='./file0\x00', 0x0, &(0x7f0000000340), 0x24, 0x0) unlinkat(r0, &(0x7f0000000140)='./file0\x00', 0x200) r1 = openat$udambuf(0xffffff9c, &(0x7f0000000000), 0x2) r2 = socket$l2tp6(0xa, 0x2, 0x73) r3 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r3, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @empty}, 0x1c) connect$inet6(r3, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x39}}}, 0x1c) r4 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_ADD_MIF(r4, 0x29, 0xca, &(0x7f0000000040)={0x0, 0x1}, 0xc) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000300)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x0, 0x0, 0x0, 0xb3550aa4ba878396}, 0x9c) socket(0x10, 0x803, 0x0) syz_emit_ethernet(0x10f2, 0x0, &(0x7f0000000040)={0x1, 0x2, [0x914, 0x4cc, 0x3eb, 0x16a]}) syz_emit_ethernet(0x8e, &(0x7f0000000580)=ANY=[@ANYBLOB="aaaaaaaaaaaa1acd1f78800d86dd608a37f200587300fe800000000000000600000000000000fe8000"/52], 0x0) recvmmsg(r2, &(0x7f0000004600)=[{{0x0, 0x0, 0x0}, 0x1000}], 0x1, 0x2, 0x0) pipe2(&(0x7f0000000200)={0x0, 0x0}, 0x0) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r6, 0x84, 0xc, 0x0, 0x0) io_submit(0x0, 0x1, &(0x7f0000000140)=[&(0x7f0000000200)={0x0, 0x0, 0x20, 0x3, 0x0, r5, 0x0, 0x0, 0x4}]) ioctl$UDMABUF_CREATE_LIST(r1, 0x40087543, &(0x7f0000000200)=ANY=[@ANYBLOB="000100000000e500"]) 3m45.627599675s ago: executing program 7 (id=5603): mkdirat(0xffffffffffffff9c, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r3, 0x0, 0x0}, 0x20) r4 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x10) fcntl$dupfd(r4, 0x406, r1) syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00') mount$bind(&(0x7f0000000300)='./file0/../file0/../file0\x00', &(0x7f0000000340)='./file0/../file0\x00', 0x0, 0x41008, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x61, 0x10, 0x88}, [@ldst={0x3, 0x0, 0x3, 0x1c10a1, 0x0, 0x20}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffff51, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) 3m43.361457518s ago: executing program 7 (id=5606): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[], 0x24}}, 0x0) open_tree(0xffffffffffffff9c, 0x0, 0x89901) r3 = socket$inet6_dccp(0xa, 0x6, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x21, &(0x7f00000001c0)={{{@in=@remote, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2c, 0x0, 0xee01}, {0x9}}, {{@in6=@private0}, 0x0, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}}, 0xe8) connect$inet6(r3, &(0x7f0000001480)={0xa, 0x0, 0x0, @loopback}, 0x1c) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) ioctl$AUTOFS_IOC_FAIL(0xffffffffffffffff, 0x4c80, 0x7000000) socket$can_raw(0x1d, 0x3, 0x1) r4 = open(&(0x7f0000000000)='./file0\x00', 0x80140, 0x0) fcntl$setsig(r4, 0xa, 0x21) fcntl$setlease(r4, 0x400, 0x1) open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) 3m41.827429834s ago: executing program 52 (id=5584): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) socket$igmp6(0xa, 0x3, 0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mount(0x0, &(0x7f0000000240)='./file1\x00', &(0x7f0000000000)='tmpfs\x00', 0x0, &(0x7f0000000300)='usrquota') chdir(&(0x7f0000000080)='./file1\x00') r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) quotactl_fd$Q_SETQUOTA(r2, 0xffffffff80000800, 0x0, &(0x7f00000003c0)={0x0, 0x5, 0xfeff, 0x0, 0x0, 0xfffffffffffffffc, 0x3, 0x0, 0xfeff}) capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000040)) write$FUSE_CREATE_OPEN(r2, &(0x7f0000000540)={0xa0, 0x0, 0x0, {{0x1, 0x0, 0x2b2a4ad1, 0xffffffff80000001, 0x80000000, 0x200, {0x0, 0x9, 0x7, 0x6f8, 0x8, 0x5, 0xe4, 0xd, 0x0, 0xa000, 0x7fff, 0x0, 0x0, 0xc09c, 0x9}}, {0x0, 0x6}}}, 0xa0) 3m30.703875783s ago: executing program 53 (id=5600): r0 = open(0x0, 0x800, 0x0) setxattr$system_posix_acl(&(0x7f0000000240)='./file0\x00', 0x0, &(0x7f0000000340), 0x24, 0x0) unlinkat(r0, &(0x7f0000000140)='./file0\x00', 0x200) r1 = openat$udambuf(0xffffff9c, &(0x7f0000000000), 0x2) r2 = socket$l2tp6(0xa, 0x2, 0x73) r3 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r3, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @empty}, 0x1c) connect$inet6(r3, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x39}}}, 0x1c) r4 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_ADD_MIF(r4, 0x29, 0xca, &(0x7f0000000040)={0x0, 0x1}, 0xc) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000300)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x0, 0x0, 0x0, 0xb3550aa4ba878396}, 0x9c) socket(0x10, 0x803, 0x0) syz_emit_ethernet(0x10f2, 0x0, &(0x7f0000000040)={0x1, 0x2, [0x914, 0x4cc, 0x3eb, 0x16a]}) syz_emit_ethernet(0x8e, &(0x7f0000000580)=ANY=[@ANYBLOB="aaaaaaaaaaaa1acd1f78800d86dd608a37f200587300fe800000000000000600000000000000fe8000"/52], 0x0) recvmmsg(r2, &(0x7f0000004600)=[{{0x0, 0x0, 0x0}, 0x1000}], 0x1, 0x2, 0x0) pipe2(&(0x7f0000000200)={0x0, 0x0}, 0x0) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r6, 0x84, 0xc, 0x0, 0x0) io_submit(0x0, 0x1, &(0x7f0000000140)=[&(0x7f0000000200)={0x0, 0x0, 0x20, 0x3, 0x0, r5, 0x0, 0x0, 0x4}]) ioctl$UDMABUF_CREATE_LIST(r1, 0x40087543, &(0x7f0000000200)=ANY=[@ANYBLOB="000100000000e500"]) 3m28.061588602s ago: executing program 54 (id=5606): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[], 0x24}}, 0x0) open_tree(0xffffffffffffff9c, 0x0, 0x89901) r3 = socket$inet6_dccp(0xa, 0x6, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x21, &(0x7f00000001c0)={{{@in=@remote, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2c, 0x0, 0xee01}, {0x9}}, {{@in6=@private0}, 0x0, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}}, 0xe8) connect$inet6(r3, &(0x7f0000001480)={0xa, 0x0, 0x0, @loopback}, 0x1c) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) ioctl$AUTOFS_IOC_FAIL(0xffffffffffffffff, 0x4c80, 0x7000000) socket$can_raw(0x1d, 0x3, 0x1) r4 = open(&(0x7f0000000000)='./file0\x00', 0x80140, 0x0) fcntl$setsig(r4, 0xa, 0x21) fcntl$setlease(r4, 0x400, 0x1) open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) 1m30.362253743s ago: executing program 0 (id=5741): socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$alg(0x26, 0x5, 0x0) keyctl$revoke(0x3, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, 0x0, 0x4c000) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000b80)={0xffffffffffffffff, 0x2000012, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x9}, 0x50) fstat(r2, &(0x7f0000000080)) r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000140)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_NOTIFY(r4, &(0x7f00000001c0)={0xf, 0x8, 0xfa00, {r5, 0x11}}, 0x10) 1m28.988526765s ago: executing program 0 (id=5744): r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x21c0, 0xc) r1 = fanotify_init(0x200, 0x0) dup2(r1, r0) socket$inet_icmp_raw(0x2, 0x3, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x5) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x18, 0x4, &(0x7f0000000040)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = epoll_create1(0x0) r5 = fcntl$dupfd(r4, 0x2, 0xffffffffffffffff) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x16, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_PROG_ATTACH(0x9, &(0x7f0000000140)={@cgroup=r5, r6, 0x11, 0x0, r5, @void, @value}, 0x11) 1m27.779210571s ago: executing program 0 (id=5747): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000001000), 0x169802, 0x0) r1 = dup(r0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) eventfd(0x0) r5 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018000000000000003c0000003c00000002000000000000000200000408000000000000000300000000000000000000000200000000000000"], 0x0, 0x56, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x28) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000017c0)={0x2, 0x4, 0x8, 0x1f, 0x80, 0x1, 0x0, '\x00', 0x0, r5, 0x0, 0x1, 0x0, 0x0, @void, @value, @void, @value}, 0x48) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000006, 0x13, r1, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r6, &(0x7f0000000100)=ANY=[], 0x32600) write$P9_RREAD(r6, &(0x7f00000000c0)={0x22, 0x75, 0x1, {0x17, "e1372ea6157e0688ab7d3442ac30ad0d690846e7cb2ef0"}}, 0x22) ioctl$BLKRRPART(r1, 0x125f, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) 1m23.204960132s ago: executing program 0 (id=5751): setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x6) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) renameat2(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x7) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1b000000000000000000000000000400000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/13], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f00000004c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70200001400f400b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x2d) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x40000c0) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r5, 0x560a, &(0x7f0000000040)={0x0, 0x0, 0x12, 0x2, 0x83, 0x7}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000440)={r4, 0xe0, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000240)=[0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280), 0x0, 0x0, 0x23, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x70, 0x8, 0x0, 0x0}}, 0x10) preadv(0xffffffffffffffff, &(0x7f0000000100)=[{0x0}], 0x1, 0x0, 0x0) 1m10.471959895s ago: executing program 0 (id=5767): sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000480)=ANY=[], 0x18}}, 0x20004000) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) ioctl$NBD_SET_SIZE_BLOCKS(0xffffffffffffffff, 0xab07, 0x8000000000000001) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) ioctl$DMA_HEAP_IOCTL_ALLOC(0xffffffffffffffff, 0xc0184800, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000000)='configfs\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x180, 0x0) getdents64(r3, &(0x7f0000001a00)=""/36, 0x70) getdents64(r3, 0x0, 0x2e) socket(0x11, 0x2, 0x4b04) syz_mount_image$hfs(&(0x7f0000000140), &(0x7f0000000040)='./bus\x00', 0x2810880, &(0x7f0000000300)=ANY=[], 0x8b, 0x28e, &(0x7f0000000680)="$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") openat(0xffffffffffffff9c, 0x0, 0x1a3240, 0x5ca7fd8adae1ec9f) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe) 1m5.473772854s ago: executing program 0 (id=5754): syz_genetlink_get_family_id$nfc(0x0, 0xffffffffffffffff) prlimit64(0x0, 0xe, 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x1a36c1, 0x335) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file3\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x3a) r3 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000100), 0x40202, 0x0) ioctl$SNDCTL_DSP_STEREO(r3, 0xc0045003, &(0x7f00000000c0)=0x1) mmap$dsp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1000007, 0x12, r3, 0x0) ioctl$SNDCTL_DSP_POST(r3, 0x5008, 0x0) ioctl$SNDCTL_DSP_SYNC(r3, 0x5001, 0x0) ioctl$SNDCTL_DSP_GETOPTR(r3, 0x800c5012, &(0x7f0000000080)) 1m1.828912477s ago: executing program 5 (id=5762): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000040)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0xf, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000190c0)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = syz_io_uring_setup(0x10d, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x40000000}, &(0x7f0000000380)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) r6 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2) r7 = memfd_create(&(0x7f0000000340)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xe7a\x9b\x11x\x0e\xa1\xcf\x1a\x98S7\xc9\x00\x00\x00\x00\x00\x00\a\x00\x00\x00\x00\x00\x00\x04\x879\xa24\xa9am\xde\xb2\xd3\xcbZJoa\xc4\x1acB\xaa\xc1\xfb Q\xd4\xf4\x01\xa52\xe2DG\xd4\xbd{\x9f\xa9\x97\x9b@\xdb\x00b\xe1br\xb6\x008\xe3\x10\xff\xc2\x9d\r2\x9e\x8e\x04sW\x1b\xb7\xb3\xa2\xc9&@\xca\xda\xdc\xe2/\x97X\xac\b\xb0\xc2<\x80E\x1a\xbc\xc7W\xda9VsA\xaf\xc6\xcf\xe1\xa1\xb5M\xa2\x85\xa6y\xc4J\xf1\xf7\xfcD\x95\xe3\xeb\xc7\xbc\x91\xb0\xa8\x9eo\xebF(\x9dL\x01vRk\xaacB\x04\xa7I\v\x86EZ\x96\xd5\x14OD\\\xe8R\xe4\xcd\xec\xcc\xd1\x0fre\xe86\xcd\xeb\xc4$\x98\x06J\xd6dD\x8d_U`ji{\xab\x97\xaf;l\x1f\xaf\xb38U\xcb\xfa\xb3j\x92\f\x81\xa0\xa2-g\b\x99\x0e\x8d\x8d\x16\xd9w\\\xf8\xce\xb0j\x9d\'\x93\xef\x1d\xa0H\xd9\xbd\xd9\xaf\x12$\x8d\x16%\x8b\x00', 0x3) ftruncate(r7, 0xffff) fcntl$addseals(r7, 0x409, 0x7) r8 = ioctl$UDMABUF_CREATE(r6, 0x40187542, &(0x7f0000000100)={r7, 0x0, 0x0, 0x1000}) r9 = io_uring_register$IORING_REGISTER_PERSONALITY(r3, 0x9, 0x0, 0x0) syz_io_uring_submit(r4, r5, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r8, 0x0, 0x0, 0x0, {}, 0x1, {0x0, r9}}) io_uring_enter(r3, 0x3f72, 0x74f1, 0x0, 0x0, 0x0) 58.924727606s ago: executing program 5 (id=5773): socket$netlink(0x10, 0x3, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x10, 0x0, 0x0, 0x8, 0x0, 0x0, 0x41000, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x6) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000040)) r3 = socket$kcm(0x21, 0x2, 0xa) sendmsg$kcm(r3, &(0x7f0000000080)={&(0x7f0000000100)=@rxrpc=@in6={0x21, 0x1, 0x2, 0x1c, {0xa, 0x4e20, 0x9c000000, @dev={0xfe, 0x80, '\x00', 0x30}, 0x1df}}, 0x80, 0x0}, 0x0) r4 = socket(0x10, 0x803, 0x0) setreuid(0x0, 0xee01) getresuid(&(0x7f0000000080), &(0x7f0000000000), 0x0) setfsuid(0x0) setfsuid(0x0) fcntl$setlease(r4, 0x400, 0x2) 56.145852237s ago: executing program 5 (id=5776): bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0xe, &(0x7f00000017c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f0000000100), 0x2, 0x500, &(0x7f0000000500)="$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") prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) socket$inet_tcp(0x2, 0x1, 0x0) r2 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000440)=@base={0x12, 0x8, 0x8, 0x6, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r3 = socket(0x1, 0x2, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={r2, &(0x7f0000002040), &(0x7f0000000100)=@tcp6=r3}, 0x20) syz_genetlink_get_family_id$devlink(0x0, r3) sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_GET(r1, &(0x7f0000000ac0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000a80)={0x0}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) ioctl$int_in(r3, 0x5452, &(0x7f0000000780)=0x20b) recvmmsg(r3, &(0x7f0000001c40)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000001b00)=[{&(0x7f0000001a00)=""/49, 0x31}], 0x1}}], 0x2, 0x0, 0x0) sendto$unix(r3, 0x0, 0x0, 0x0, &(0x7f0000000300)=@file={0x1, './file0\x00'}, 0x6e) quotactl$Q_GETQUOTA(0x0, 0x0, 0x0, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) ioctl$FS_IOC_GETFSMAP(0xffffffffffffffff, 0xc0c0583b, &(0x7f0000000500)=ANY=[@ANYBLOB="000000004c9002000000000003000100"/48]) 50.710256227s ago: executing program 5 (id=5784): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x10, &(0x7f00000000c0)=ANY=[@ANYBLOB], &(0x7f0000000000)='GPL\x00', 0x8, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2) r3 = mq_open(&(0x7f0000001140)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xd3\xa7\xd8J\xfd\x94#KT\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\x88N\xb8\xde\xeb)\xcd\xc56m\n\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88|0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc\x02\xea\x91\xe8\xd8\x01YZy\xe6!\x89\x9c\xd1\xa6\x167\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1[\x84\x10aF\x9b\xda\xeb\xc4*\x02q\xb2\x92\x00\x8cv\xac AN\xb9\xaa\xe0\x9d\x97Te\x81\x98L\xfe\x97+u\xd3^\xb1\xf0\xe0\x1f\xbd\a\xbb\xe5\x18\x9ds\x12ha\x00\xeb\x84\x99\xc6\x0f\xf1\xd5LD\xa87\xa0DQ\x8a2\x16!8,\xbc%$\xf1\xf2\xd6\x9cy\xecK\xda\xc5\xdc\xfa\xdd\xf6\b\xc6\xb4\x14\x16\x9c\x7f\x92\x85\xb0\xa2%:\xf0\xf4\x150\x0f\xb4\xa6d\xb4\xe4L\x19W\xd5\x90\xf7l\x1b\xfe\xde\vh\x97=m\x82.\xac\vh\xfe\x84Q}\x838/\x83\xebP\xbe\xd6+:\xceE\\\x95\xd4\xac\x92\x87\xd7\x98\x97\xe3\xec\xad\xd5\xac\x80C\x84R\x88r^g\xbaQ(\x9a>\xe2\xba\xa8=\x17\f04\x8f\x1f\xf2\x88*@v\xe7\xd1\xee\xb3\xc2\x8dT\xda\x81g\xd9\x1a:hzW6s)x\x06\xae\x11\xf2\x1e\xcd\v\xe5L\x19\x96s\xbc\x9e\xf4\x10$\r\xa4\xd8\xa2\xa2\xfcM\xc5R3~$\xc0\xa5n\x9a W\xb1e\xcc<$\xdf\x15\f]\x15\xf5#G\xce\xaf\x88U\xfa\x80\xf24\xf6\xb5\xef\xe2z\xcf\x9eN\x92\xac\x81{\xe6\xbd\xd7\x16\xe6F\xe2\x9e\x91%\x94\v\xb9\xdc\xd6\x87\x8f\xcd\xc1\xb05\x81\x81\xf8\xe9X\xe8Kt9@\xf4\xe1\xa6=\xc9\xe1:p4\nP[f\x1d\xfd\xfa\x839\x8d\x0e\xd1\xf9\xa0\xd2^E\xe5\xedo.\xaa\xf2\xb4\xcdn\x14\f\xcd\x83_yk\xda\xc5\x89\xf0Z\xea\x1d\xbd\xc00\v\xa3\xb3\xbe\xe6\x8b\x18/\xa8\xaaY\xf2\x89\x0f\x9enOOr\x00\xb2\x01\x1f:Z\xb8\xee;\xe3;\x8aPV\xce\xee\xf8[\x16\n\xe6:z\xb8\x1dvk\a{\xc1\x14\xd9+\xdb\t\x11\x90y\xe8\\\xe6\xfc\xca\xb4\xcbC\xd6\xd0\xbeC\xce\xc0L\xdb\xcd\xb3\x907c\xb4\xa6\xce\xdb[\xce\x122N\xa3\xc7Q<\x1a\xa5\xb3)\xc5\x98\x84\x8a\x82\x19\xb0\t\xac\x10\\\x8c\xbe\xcb\raIYe[\xa8\xc4\xac\x0e\xbb\x0f\b^\xdag\xe2\xa9\"\xf5h\'\xcf\xd9\x1b\xef\xe3\xe7y\x82\x1e\xca\x7f\x02 \xcf\x9e\xe0\xd9TM\xb9\n\xa9\xad3\x91\xa5\xe6!\xcd\xa2\xa4\x14\x12\xf9\xbf\xa8b\xcec:\xd7\'\f\f\x957\xc9}\r\xa6\xaa\x0f\xca\x96\xeb', 0x42, 0x0, 0x0) mq_timedsend(r3, 0x0, 0x0, 0x0, 0x0) mq_timedsend(r3, 0x0, 0x0, 0x6, 0x0) mq_unlink(&(0x7f0000000000)='eth0\x00') getsockopt$XDP_STATISTICS(0xffffffffffffffff, 0x11b, 0x7, &(0x7f0000001040), &(0x7f0000001080)=0x26) r4 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) io_uring_enter(0xffffffffffffffff, 0x184c, 0x0, 0x0, 0x0, 0x0) write$uinput_user_dev(r4, &(0x7f0000000100)={'syz0\x00', {}, 0x7, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x88], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86, 0x0, 0x0, 0x0, 0x0, 0x1966cd75, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x641, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffff122]}, 0x45c) utime(&(0x7f0000000080)='./bus\x00', &(0x7f0000000580)={0x4, 0x84}) 48.850623107s ago: executing program 55 (id=5754): syz_genetlink_get_family_id$nfc(0x0, 0xffffffffffffffff) prlimit64(0x0, 0xe, 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x1a36c1, 0x335) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file3\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x3a) r3 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000100), 0x40202, 0x0) ioctl$SNDCTL_DSP_STEREO(r3, 0xc0045003, &(0x7f00000000c0)=0x1) mmap$dsp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1000007, 0x12, r3, 0x0) ioctl$SNDCTL_DSP_POST(r3, 0x5008, 0x0) ioctl$SNDCTL_DSP_SYNC(r3, 0x5001, 0x0) ioctl$SNDCTL_DSP_GETOPTR(r3, 0x800c5012, &(0x7f0000000080)) 46.404975643s ago: executing program 5 (id=5790): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) r2 = bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000080)={r0, r2}, 0xc) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r3, &(0x7f0000002540)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x80000000000002) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f0000000000)) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) setsockopt$XDP_UMEM_REG(0xffffffffffffffff, 0x11b, 0x4, &(0x7f0000000040)={0x0, 0x1115000, 0x0, 0x0, 0x2}, 0x1c) r5 = syz_open_procfs(0x0, &(0x7f0000000300)='net/sockstat\x00') read$FUSE(r5, &(0x7f0000000340)={0x2020}, 0x2020) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) 42.625673394s ago: executing program 5 (id=5794): sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000080), 0xc, &(0x7f0000000400)={0x0}, 0x1, 0x0, 0x0, 0x20000000}, 0x4) socket$netlink(0x10, 0x3, 0x0) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) r1 = socket$unix(0x1, 0x2, 0x0) bind$unix(r1, 0x0, 0x0) listen(r1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xf, &(0x7f0000001380)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x40042, 0x1ff) close(r5) execveat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0, 0x0, 0x0) 36.037219822s ago: executing program 4 (id=5800): r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'tunl0\x00'}) socket$netlink(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) setgroups(0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x10) sendto(0xffffffffffffffff, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) 34.655452511s ago: executing program 4 (id=5801): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000040)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0xf, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000190c0)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = syz_io_uring_setup(0x10d, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x40000000}, &(0x7f0000000380)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) r6 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2) r7 = memfd_create(&(0x7f0000000340)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xe7a\x9b\x11x\x0e\xa1\xcf\x1a\x98S7\xc9\x00\x00\x00\x00\x00\x00\a\x00\x00\x00\x00\x00\x00\x04\x879\xa24\xa9am\xde\xb2\xd3\xcbZJoa\xc4\x1acB\xaa\xc1\xfb Q\xd4\xf4\x01\xa52\xe2DG\xd4\xbd{\x9f\xa9\x97\x9b@\xdb\x00b\xe1br\xb6\x008\xe3\x10\xff\xc2\x9d\r2\x9e\x8e\x04sW\x1b\xb7\xb3\xa2\xc9&@\xca\xda\xdc\xe2/\x97X\xac\b\xb0\xc2<\x80E\x1a\xbc\xc7W\xda9VsA\xaf\xc6\xcf\xe1\xa1\xb5M\xa2\x85\xa6y\xc4J\xf1\xf7\xfcD\x95\xe3\xeb\xc7\xbc\x91\xb0\xa8\x9eo\xebF(\x9dL\x01vRk\xaacB\x04\xa7I\v\x86EZ\x96\xd5\x14OD\\\xe8R\xe4\xcd\xec\xcc\xd1\x0fre\xe86\xcd\xeb\xc4$\x98\x06J\xd6dD\x8d_U`ji{\xab\x97\xaf;l\x1f\xaf\xb38U\xcb\xfa\xb3j\x92\f\x81\xa0\xa2-g\b\x99\x0e\x8d\x8d\x16\xd9w\\\xf8\xce\xb0j\x9d\'\x93\xef\x1d\xa0H\xd9\xbd\xd9\xaf\x12$\x8d\x16%\x8b\x00', 0x3) ftruncate(r7, 0xffff) fcntl$addseals(r7, 0x409, 0x7) r8 = ioctl$UDMABUF_CREATE(r6, 0x40187542, &(0x7f0000000100)={r7, 0x0, 0x0, 0x1000}) r9 = io_uring_register$IORING_REGISTER_PERSONALITY(r3, 0x9, 0x0, 0x0) syz_io_uring_submit(r4, r5, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r8, 0x0, 0x0, 0x0, {}, 0x1, {0x0, r9}}) io_uring_enter(r3, 0x3f72, 0x74f1, 0x0, 0x0, 0x0) 30.141636307s ago: executing program 4 (id=5805): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f00000000c0)='sched_switch\x00', r3, 0x0, 0x401}, 0x18) r4 = openat$audio(0xffffffffffffff9c, 0x0, 0x9e966e64318092aa, 0x0) ioctl$SNDCTL_DSP_CHANNELS(r4, 0xc0045006, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) getpgrp(0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)) r6 = syz_io_uring_setup(0x82e, &(0x7f0000000300)={0x0, 0x0, 0x10100}, &(0x7f0000000100), &(0x7f0000000080)) io_uring_register$IORING_REGISTER_PBUF_RING(r6, 0x16, &(0x7f0000000380)={&(0x7f0000001000)={[{0x0}, {0x0}, {0x0}, {0x0}]}, 0x4}, 0x1) io_uring_enter(r6, 0x27e2, 0x0, 0x0, 0x0, 0x0) sendmsg$unix(r5, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x4041) 28.178264001s ago: executing program 4 (id=5808): openat$cgroup_netprio_ifpriomap(0xffffffffffffffff, 0x0, 0x2, 0x0) mkdir(0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket(0x2, 0x3, 0xff) setsockopt$sock_int(r3, 0x1, 0x29, 0x0, 0x0) bind$inet(r3, 0x0, 0x0) connect$inet(r3, 0x0, 0x0) clock_settime(0x0, &(0x7f0000003c80)={0x77359400}) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) r4 = socket$rds(0x15, 0x5, 0x0) bind$rds(r4, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r4, &(0x7f00000009c0)={&(0x7f0000000540)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x2e}}, 0x10, 0x0, 0x0, &(0x7f0000001300)=[@fadd={0x58, 0x114, 0x6, {{0x0, 0x7}, &(0x7f0000001200)=0x7, 0x0, 0xfffffffffffffffd, 0x81, 0x9, 0x2000000000007, 0x24, 0x7fc}}], 0x58}, 0x0) 25.794947745s ago: executing program 56 (id=5794): sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000080), 0xc, &(0x7f0000000400)={0x0}, 0x1, 0x0, 0x0, 0x20000000}, 0x4) socket$netlink(0x10, 0x3, 0x0) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) r1 = socket$unix(0x1, 0x2, 0x0) bind$unix(r1, 0x0, 0x0) listen(r1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xf, &(0x7f0000001380)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x40042, 0x1ff) close(r5) execveat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0, 0x0, 0x0) 25.694707317s ago: executing program 9 (id=5811): r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x21c0, 0xc) r1 = fanotify_init(0x200, 0x0) dup2(r1, r0) socket$inet_icmp_raw(0x2, 0x3, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x5) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00'}, 0x10) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = epoll_create1(0x0) r5 = fcntl$dupfd(r4, 0x2, 0xffffffffffffffff) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x16, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_PROG_ATTACH(0x9, &(0x7f0000000140)={@cgroup=r5, r6, 0x11, 0x0, r5, @void, @value}, 0x11) 25.177751885s ago: executing program 4 (id=5812): openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) pipe2$watch_queue(0x0, 0x80) keyctl$KEYCTL_WATCH_KEY(0x20, 0x0, 0xffffffffffffffff, 0x0) pipe2$watch_queue(0x0, 0x80) keyctl$KEYCTL_WATCH_KEY(0x20, 0x0, 0xffffffffffffffff, 0xffffffffffffffff) read$FUSE(0xffffffffffffffff, &(0x7f0000006180)={0x2020}, 0x2020) socketpair(0x1, 0x80001, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_ACCT_GET_CTRZERO(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)={0x28, 0x2, 0x7, 0x201, 0x0, 0x0, {0x0, 0x0, 0x8}, [@NFACCT_FILTER={0x14, 0x7, 0x0, 0x1, [@NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x8}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x7}]}]}, 0x28}}, 0x40) socket$inet6_sctp(0xa, 0x1, 0x84) 24.3489621s ago: executing program 9 (id=5814): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0x60, 0x30, 0x1, 0x0, 0x0, {}, [{0x4c, 0x1, [@m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) ioctl$UI_DEV_CREATE(0xffffffffffffffff, 0x5501) openat2$dir(0xffffffffffffff9c, 0x0, &(0x7f0000000040)={0x80c0, 0x40, 0x28}, 0x18) preadv(0xffffffffffffffff, 0x0, 0x0, 0xffff, 0x0) ioctl$sock_inet_SIOCSIFNETMASK(0xffffffffffffffff, 0x891c, &(0x7f00000002c0)={'wg0\x00', {0x2, 0x4e24, @broadcast}}) fsconfig$FSCONFIG_SET_STRING(r3, 0x1, &(0x7f0000000b40)='source', &(0x7f0000000040)='c:::\x00', 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x10, 0x4, 0x4, 0x9, 0x1800, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) io_uring_enter(0xffffffffffffffff, 0x2d3e, 0x0, 0x0, 0x0, 0x0) 22.353556439s ago: executing program 4 (id=5816): syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000140)={0x2, @pix_mp={0x0, 0x0, 0x34324152, 0x2, 0xb, [{}, {}, {}, {0xfffffffd}, {}, {0x0, 0x1000000}]}}) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) fsopen(0x0, 0x1) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000000)={0x40000000, 0x0, 0x0}, 0x0) connect$inet(0xffffffffffffffff, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) r2 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r2, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@mcast1, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x10000, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0xfffffffffffffffd}, {0x0, 0x0, 0x0, 0x8}, 0x0, 0x0, 0x1}, {{@in6=@ipv4={'\x00', '\xff\xff', @private}, 0x2, 0x6c}, 0x0, @in=@empty, 0x0, 0x0, 0x0, 0xb7}}, 0xe8) sendmmsg(r2, &(0x7f0000007fc0), 0x800001d, 0x0) 19.806219244s ago: executing program 9 (id=5818): openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) msgsnd(0x0, &(0x7f0000000180)=ANY=[], 0x4000, 0x0) msgctl$IPC_SET(0x0, 0x1, &(0x7f00000004c0)={{0x1, 0xffffffffffffffff, 0x0, 0x0, 0xee00, 0x1cb, 0x38f}, 0x0, 0x0, 0xb7, 0xda, 0x4, 0x2, 0x8, 0x2, 0x101a, 0xd7df}) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$snapshot(0xffffff9c, &(0x7f00000001c0), 0x8001, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$EBT_SO_GET_ENTRIES(r3, 0x0, 0x81, &(0x7f00000003c0)={'nat\x00', 0x0, 0x3, 0x0, [0x5, 0x9, 0xfa, 0x6, 0x10000, 0x8001], 0x0, 0x0, 0x0}, &(0x7f0000000440)=0x78) r4 = openat$cgroup_root(0xffffff9c, &(0x7f00000005c0)='./cgroup.net/syz0\x00', 0x200002, 0x0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000006c0)={0xffffffffffffffff, r4, 0x14, 0x0, @val=@kprobe_multi=@syms={0x1, 0x9, &(0x7f0000000680)=[&(0x7f0000000300)='ct\x00', &(0x7f0000000340)='ife\x00', &(0x7f0000000380)='filter\x00', &(0x7f0000000000)='\x00', &(0x7f0000000540)='\x00', &(0x7f0000000580)='/dev/snapshot\x00', &(0x7f0000000480)='rM\x03\xee\xf9.\x00\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000600)='!+*\x00', &(0x7f0000000640)='\x00'], 0x0, 0x401}}, 0x30) 14.547760644s ago: executing program 8 (id=5823): eventfd(0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) dup(r0) ioctl$CEC_ADAP_S_LOG_ADDRS(0xffffffffffffffff, 0xc05c6104, 0x0) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x2, 0x2172, 0xffffffffffffffff, 0x0) ioctl$TCXONC(0xffffffffffffffff, 0x5608, 0x3) mprotect(&(0x7f0000008000/0x11000)=nil, 0x11000, 0x100000c) ioctl$USBDEVFS_SETINTERFACE(0xffffffffffffffff, 0x80085504, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000800)=ANY=[@ANYRES32=0x0, @ANYBLOB="0000000000000000340012800e00010069703665727370616e00000020000280060002003000"], 0x5c}}, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000040)='vegas\x00', 0x6) syz_usb_connect(0x0, 0x3f, 0x0, 0x0) connect$inet6(r1, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1b}, 0xd}, 0x1c) write$binfmt_script(r1, &(0x7f0000000200), 0xfffffd9d) 13.276148573s ago: executing program 9 (id=5824): socket$inet6_tcp(0xa, 0x1, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="190000000400000004"], 0x48) r1 = syz_init_net_socket$x25(0x9, 0x5, 0x0) connect$x25(r1, &(0x7f0000000200), 0x12) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) bpf$TOKEN_CREATE(0x24, &(0x7f0000000180)={0x0, r0}, 0x8) r2 = dup(0xffffffffffffffff) write$UHID_INPUT(r2, &(0x7f0000001040)={0xf, {"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", 0x1000}}, 0x1006) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) connect$unix(0xffffffffffffffff, 0x0, 0x0) inotify_add_watch(0xffffffffffffffff, 0x0, 0x600010c) syz_mount_image$ocfs2(&(0x7f0000004440), &(0x7f0000000040)='./file1\x00', 0x10008d0, &(0x7f0000000280)=ANY=[@ANYBLOB="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"], 0x1, 0x4432, &(0x7f0000004480)="$eJzs3c9PG1ceAPA3A9lANtmFbA5ZaaW1tJF2tbtCkFNbIpUQEgIJTZU2UdWLY8BJaA2OwFQ95EBvkXqq1EPVQ9RKvXGKOPSa/gm99JieI7WHXlpVikplewyewRYuwtCkn8+B8bzf9nfm+fkwvDhRubuwkltYyRWWcuW52ytnc++VS6uLxRAfkJb9Hzm4/ulMN66Tw772/siuXbj0xs2zIXw1/83Tzc3NzVDVG1oaaXr94w/355qPDXGmTrXd1q3tl7dDCKd2jKuqJ4Tw1pchRCGE80naeHLsDyGcCPW8m/c/vJXbp9E8elI8l38282Bj9Mz0+sON9u89CuHT0t//f2fxu3/1jH77333qHgAAAAAAAAAAAAAAAACA59zk9Ws3Xh8eCY+j0Lse7XxedzI5tns+dnPf/LP7bxYAAAAAAAAAAAAAAAAAAAB+p7af/89FJ1s8/z+RHMfa1N98tftjpHumXrs2cXF4JNn/PdqR/1KS9P35njDYYt/37P7v5zP1W+//vrOfvWqMr9HvQIjiodR5HA8NhfB5svH76ehYXCqvVP53u7y6NL9vw3hupeNf370/FZ1kQ/9O4z+eab/7+///bcfVVD2/tX+X2AstHf+etuW++CDqKP4XMvUOIv7sXTr+vbW0/uYCY/UJoBr/j3p3j/9Epv3uxP/I1qv+kEvNANU1TC5qv14hLR3/+ueamjqTD7Ld/f9zJv4XM+0f1vy/lv0ioqV0/P9US+tLldi+/wfj3e//S5n2DyP+1fGv+f7vSDr+R+uJvakitU+y0/l/MtN+U/x/2s9x34iTcf4lSl0B61E9vd3/qyMtHf++Hfnbv//ijtZ/lzP1D+r3X6Pfxu+/xvT/n6j++4/W0vHvb1uu0/t/KlOv2/P/WG39x16l43+slpZeOw/U/nYa/+lM+92Kf21V0teI//Z88svRevpn1n8dScf/z/XEuLnEWu1vbf0X7b7+v5Jp/zDWf9Xxr8Xd7fVFkY7/8bblqvH/uoPv/6uZet2PfwjD1vp7lo7/ibblavd/3+7xn8nU63b8/93NxgEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACeA+PJcSBE8VDqPI6HhkK4kJyfDsei2cJ8frZUnnt3JYSJJD0XTkZ3SuXZQim/sFSeL+YLpVJ5LoSLSf6p0BetlMqV/GLh3qWttvqju8XCcmW2WKiEECaT9H+EE422Zhcqi4V7IYTLW3l/jcvL9+4WlvLzC8uvDA8PD4eprTEMRsX3K8WlSr33em4I01t1B6KmwdWyr2yN5Xj0Tnl1ealQqqVfbapTKs8VSk11ZpK8j8NgVFleXZorVIr5UvlOo7/DNJYcJ6auv3n96siO/FtR/Th+sMMCAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4Dd6PPryJyGE3vpZHEIYa7yIWpV/9KR4Lv9s5sHG6Jnp9YcbT9uVAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOBXduBAAAAAAADI/7URqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqrBL/ygRA1EcgN+MhX8qj2EVks42oogWRgRPoMfwMHoUL+EdLCxsLWRhd4ZdshtIs1t9X/NIfsy8B/MAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADmuX0anh/bLiLFyf9xxOfr1/dmfl/q+9Xu80cHmJH9uXsYrm/arrx72sovy6+fPi/Tv9+3l1jXs/pdfYz2ZLxPK7XP6eRcU/s2NV/tex4pNxHRl/wi5dw08+4CAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAYMEOHAgAAAAAAPm/NkJVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVUVduBYAAAAAECYv3UUfRsAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADArwAAAP//sfkf5w==") ioprio_set$pid(0x2, 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000540)='./file1\x00', 0x46842, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x42, 0x0) pwritev2(r4, &(0x7f0000000540)=[{&(0x7f0000000200)="df", 0x1}], 0x1, 0x800005, 0xb02, 0x2) sendfile(r3, r3, 0x0, 0x7a680000) 11.289576841s ago: executing program 8 (id=5826): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() bpf$MAP_DELETE_ELEM(0x2, &(0x7f0000000580)={0xffffffffffffffff, &(0x7f0000000100), 0x20000000}, 0x20) sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r4 = syz_open_dev$evdev(&(0x7f0000000180), 0x0, 0x0) ioctl$EVIOCGMASK(r4, 0x80104592, &(0x7f0000000380)={0x16, 0x0, 0x0}) getsockopt$sock_timeval(r2, 0x1, 0x42, &(0x7f00000000c0), &(0x7f0000000280)=0x10) r5 = socket$inet6(0xa, 0x3, 0xff) bind$inet6(r5, &(0x7f0000000880)={0xa, 0x0, 0x0, @remote, 0x6}, 0x1c) connect$inet6(r5, &(0x7f0000000200)={0xa, 0x0, 0x0, @mcast1}, 0x1c) r6 = dup2(r5, r5) write$binfmt_script(r6, 0x0, 0x0) 10.460378664s ago: executing program 1 (id=5827): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) openat$adsp1(0xffffffffffffff9c, 0x0, 0x8200, 0x0) syz_open_dev$evdev(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) fsopen(&(0x7f0000000180)='rootfs\x00', 0x1) r4 = syz_open_dev$video4linux(&(0x7f0000000080), 0x0, 0x0) ioctl$VIDIOC_SUBDEV_ENUM_FRAME_SIZE(r4, 0xc040564a, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000044c0)={0x0}}, 0x4008000) sendmsg$IPSET_CMD_TEST(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000140)={0x38, 0xb, 0x6, 0x3, 0x0, 0x0, {0x2, 0x0, 0x6}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_DATA={0x10, 0x7, 0x0, 0x1, [@IPSET_ATTR_NAME={0x9, 0x12, 'syz1\x00'}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x44080}, 0x4000002) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000001c0)='mmap_lock_acquire_returned\x00'}, 0x10) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0xc) mremap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x4000, 0x3, &(0x7f0000005000/0x4000)=nil) 9.006036654s ago: executing program 9 (id=5828): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000280)='./file0\x00', 0x21081e, &(0x7f00000002c0)={[{@grpjquota}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x800}}, {@minixdf}]}, 0x1, 0x4fd, &(0x7f0000000ac0)="$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") openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x1, &(0x7f00000003c0)=0x6) prctl$PR_CAP_AMBIENT(0x2f, 0x1, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r4, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/netlink\x00') lseek(r5, 0x401, 0x0) 8.728815127s ago: executing program 8 (id=5829): syz_mount_image$hfsplus(&(0x7f0000000080), &(0x7f0000000100)='./file1\x00', 0x0, &(0x7f00000000c0)=ANY=[], 0x11, 0x6d1, &(0x7f00000008c0)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/cpuinfo\x00', 0x0, 0x0) read$FUSE(r4, 0x0, 0x0) r5 = msgget$private(0x0, 0x3c2) msgrcv(r5, 0x0, 0x0, 0x0, 0x0) msgctl$IPC_SET(r5, 0x1, &(0x7f0000000100)={{0x3}}) creat(0x0, 0x88) write$uinput_user_dev(r0, &(0x7f0000000fc0)={'syz1\x00', {0x6, 0x5, 0x444, 0xa}, 0x21, [0xf9, 0x8, 0xff, 0x2, 0x200, 0x6, 0x8e, 0x9, 0x9, 0x4, 0x400, 0x9, 0x7, 0x1, 0x71c, 0x38, 0xffffff7f, 0xac, 0x0, 0x3ff, 0x0, 0xea7, 0x1, 0x9be4bf38, 0x0, 0x2, 0xc, 0x0, 0x8, 0x6, 0x84, 0xc, 0x8001, 0x0, 0x5, 0xb, 0x2, 0x5f85, 0xfffffffe, 0xc1e, 0x9dd, 0x939a, 0x8000, 0x1, 0x5c, 0x8, 0x7f, 0x9, 0xf2b, 0x1, 0x6, 0xfffffffa, 0xffff, 0x8, 0x5, 0x6, 0xffffff80, 0x9, 0x6, 0xd2, 0x6e, 0xb, 0x52, 0x1], [0x3, 0x2, 0xd91, 0x8, 0x401, 0xfffffff8, 0xb4a6, 0x7f, 0x3, 0xa89, 0xfff, 0xffffff4c, 0x1, 0x2, 0x0, 0x1, 0x8, 0x401, 0x0, 0x5, 0x27, 0x9, 0x5, 0x9, 0xd, 0x9, 0x6, 0x8, 0x8, 0x5, 0xfff, 0xb2d1, 0x1, 0x0, 0x10001, 0x9, 0xe22, 0x9, 0x5, 0x10001, 0x1, 0x865f, 0x80000000, 0x3, 0x1, 0x4, 0x3, 0x40029e3, 0xf7f, 0xb4e5, 0x7, 0x200, 0x6e99, 0x4, 0xff, 0x9, 0x1d, 0x3, 0x10000, 0xa, 0x29, 0x2, 0x6, 0x8], [0x4343fe9f, 0xfffffffd, 0x101, 0xffffffff, 0xc, 0x8, 0x3, 0x3, 0xc, 0x9, 0xcb06, 0xfffffff9, 0x1, 0x37, 0x5, 0x7, 0xc8, 0x8, 0x8000, 0x6, 0xdf9e, 0x5, 0x8, 0xf9f, 0x3, 0x4000007, 0x401, 0x5, 0x2, 0x2, 0x3, 0x5, 0x1, 0x0, 0x4, 0x90e, 0x6, 0x8000, 0x40, 0x8, 0xb, 0x4, 0x2, 0x1f85, 0x1, 0x3, 0x2, 0x8, 0x7, 0x401, 0x9, 0x89d, 0x40, 0x80000000, 0x3, 0xa, 0x80, 0xf, 0x5, 0x8, 0xc5d, 0x4, 0x8, 0x3], [0x27d, 0xe, 0xef, 0x10, 0x16, 0x8, 0x8, 0x6, 0x7fffffff, 0xe011, 0xfffffff8, 0xfffff800, 0xffff7bfb, 0x0, 0x400, 0x401, 0x401, 0x0, 0xa, 0x8, 0x3, 0x5, 0xfffffc00, 0x1, 0x9, 0x2, 0x2, 0x2, 0xa, 0x8000, 0x400, 0x70, 0x5, 0x1000, 0x4, 0xc, 0x2, 0x9, 0x88, 0x10, 0x4, 0x9a2, 0x81, 0xf011, 0x1, 0x4, 0x8, 0x5, 0x4, 0xe4, 0xb, 0x1, 0xc3, 0xfffffffa, 0x7ff, 0x1, 0x3, 0xfffffbff, 0x1, 0xa, 0x5, 0x4, 0x7, 0xfffffff7]}, 0x45c) 7.654875582s ago: executing program 1 (id=5830): open_tree(0xffffffffffffff9c, 0x0, 0x89901) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) unshare(0x22020600) r3 = syz_io_uring_setup(0x10d, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x40000000}, &(0x7f0000000380)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f0000000100)=@IORING_OP_SYMLINKAT={0x26, 0x40, 0x0, 0xffffffffffffffff, &(0x7f00000001c0)='./file0\x00', 0x0}) io_uring_enter(r3, 0x3f70, 0x0, 0x0, 0x0, 0x0) 5.276765296s ago: executing program 57 (id=5816): syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000140)={0x2, @pix_mp={0x0, 0x0, 0x34324152, 0x2, 0xb, [{}, {}, {}, {0xfffffffd}, {}, {0x0, 0x1000000}]}}) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) fsopen(0x0, 0x1) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000000)={0x40000000, 0x0, 0x0}, 0x0) connect$inet(0xffffffffffffffff, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) r2 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r2, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@mcast1, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x10000, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0xfffffffffffffffd}, {0x0, 0x0, 0x0, 0x8}, 0x0, 0x0, 0x1}, {{@in6=@ipv4={'\x00', '\xff\xff', @private}, 0x2, 0x6c}, 0x0, @in=@empty, 0x0, 0x0, 0x0, 0xb7}}, 0xe8) sendmmsg(r2, &(0x7f0000007fc0), 0x800001d, 0x0) 5.22925671s ago: executing program 1 (id=5832): bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x19, 0x4, 0x4, 0x9, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) ioctl$SNDCTL_SEQ_PANIC(0xffffffffffffffff, 0x5100) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = openat$vnet(0xffffffffffffff9c, &(0x7f0000001200), 0x2, 0x0) ioctl$int_in(r3, 0x40000000af01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r3, 0x4008af03, &(0x7f0000000300)) socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_VRING_ADDR(r3, 0x4028af11, 0x0) socket$nl_route(0x10, 0x3, 0x0) ioctl$VHOST_NET_SET_BACKEND(r3, 0x4008af30, &(0x7f0000000000)) syz_emit_ethernet(0x6a, &(0x7f0000000300)={@multicast, @link_local, @val={@void}, {@ipv4={0x800, @gre={{0x5, 0x4, 0x0, 0x0, 0x58, 0x0, 0x0, 0x0, 0x2f, 0x0, @private, @multicast1}, {{0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x4, 0x6558}, {0x0, 0x0, 0x0, 0x0, 0x11}}}}}}, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) 5.215971104s ago: executing program 8 (id=5833): socket$pppl2tp(0x18, 0x1, 0x1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) socket$inet_udp(0x2, 0x2, 0x0) socket$inet6(0xa, 0x2, 0x0) socket$netlink(0x10, 0x3, 0x0) socket$rxrpc(0x21, 0x2, 0xa) socket$inet_udplite(0x2, 0x2, 0x88) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = syz_io_uring_setup(0x24fc, &(0x7f0000000080)={0x0, 0x0, 0x10100, 0x3}, &(0x7f0000000180)=0x0, &(0x7f0000000140)=0x0) socket$inet6_sctp(0xa, 0x1, 0x84) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000200)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) socket$tipc(0x1e, 0x2, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$inet(r4, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r3, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000140), 0x100}, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.kill\x00', 0x275a, 0x0) write$UHID_CREATE2(r5, &(0x7f0000000180)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x9, 0x12, r5, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READ_FIXED) io_uring_enter(r0, 0x2d3e, 0x0, 0x0, 0x0, 0x0) 3.600007851s ago: executing program 1 (id=5834): mkdir(&(0x7f0000000140)='./file0\x00', 0x0) r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) fcntl$setstatus(r0, 0x4, 0x2800) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000100)=0x2) ioctl$sock_SIOCBRDELBR(0xffffffffffffffff, 0x89a2, 0x0) r4 = socket$kcm(0x29, 0x5, 0x0) r5 = syz_io_uring_setup(0x10f, &(0x7f0000000400)={0x0, 0x5885, 0x10, 0x0, 0x2c5}, &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r6, r7, &(0x7f00000002c0)=@IORING_OP_SEND={0x1a, 0x40, 0x0, r4, 0x0, 0x0, 0x0, 0x10}) io_uring_enter(r5, 0x3516, 0x0, 0x0, 0x0, 0x0) 3.478490632s ago: executing program 8 (id=5835): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000200)=0x8, 0x4) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4) bind$inet6(r1, &(0x7f0000000140)={0xa, 0x4e22}, 0x1c) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r2, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r3, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r4, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r5, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r6, 0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r7, 0x0) r8 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r8, &(0x7f0000000100)=[{&(0x7f00000002c0)="580000001400192340834b80040d8c560a067f0200ff000000000000000058000b4824ca945f6400f95023eed19400ff0325010ebc000000000000008000f0fffeffe809005300fff5dd00000010000100080c2994000000", 0x58}], 0x1) syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), r8) 2.918187666s ago: executing program 8 (id=5836): eventfd(0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x2, 0x2172, 0xffffffffffffffff, 0x0) ioctl$TCXONC(0xffffffffffffffff, 0x5608, 0x3) mprotect(&(0x7f0000008000/0x11000)=nil, 0x11000, 0x100000c) ioctl$USBDEVFS_SETINTERFACE(0xffffffffffffffff, 0x80085504, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000800)=ANY=[@ANYRES32=0x0, @ANYBLOB="0000000000000000340012800e00010069703665727370616e00000020000280060002003000"], 0x5c}}, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000040)='vegas\x00', 0x6) syz_usb_connect(0x0, 0x3f, 0x0, 0x0) connect$inet6(r2, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1b}, 0xd}, 0x1c) write$binfmt_script(r2, &(0x7f0000000200), 0xfffffd9d) 1.835950148s ago: executing program 1 (id=5837): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000000)='sched_switch\x00'}, 0x10) ioctl$USBDEVFS_IOCTL(0xffffffffffffffff, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) bpf$PROG_LOAD(0x5, &(0x7f0000caefb8)={0x8, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="850000006100000054000000000000009500000000000000b4a8b1541206000000e9c79077fa15ba36eca61299de54cf77c9062c30bc068829afff36b31fa7e358e95cfa"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000003f80)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000003f40)={&(0x7f0000002240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a600b00000c0a010100000000000000000200000220030380100000800c00054000000000000000085c010080040007800900090073797a3000000000040007800c0004400000000000000006fd000640fcbb68a128cf04519a1cfe7566564c94f408648cca9e4b69959a89f66b96f3bf01bc1d3cbfce98fee59b0148e5cdaf19b9392c1de2b112b484b4d4c0ca83bff43d087fc0557b6a907ee74a8bcdcbbc51d23bd0f1e35d44765efb5511076a9cf65f0389874274a3dfc235d5dfd8bc701a35e0b5233490b70b41439c90b6e098aecb2a956ffc64367ae84d4759d71150ceaa01adbf95ead03bad065568749c98792742ff48b15258387392bd9fff771d987f575541bd373c0b87fc7f6f05fe5d35e6d9308d279f9a67c0115da27ff3587c796e5b33e5a98f67b82d213c52b498f870afba271eb896770dfdd80f0ea916db73c17c2479c83cf1b100000008000340000000010c00044000000000000000070c00044000000000000000090c00044000000000000000000c0004400000000000000007480000800900090073797a30000000000400078008000340000000000c0004400000000000000d010c000440000000000000000908000340000000010c000440000000000000005d680100800c0005400000000000000008f4000180f0000100e4a7881586d5f82fcbcc05b254695e6c6b0b9663043718acfc0fa35a86015901d12b5dbe3d6c3177fdaba69acd7bdcf130f1fa38374a9801b7f9587b1a14206a0f36fa411c3bf0622531a6873d1a64fdf7404cb367f728cce934bd8f0052c067332c9d7027d4074a30d6e8337e2fb154441b50ee219e2e32797f8d3a85f5f368d0c879f1bd5c7595438bf6c3d2de4a6349adb67ee0994f5de50ebb4f7d53cb49eb482ca1fe9afc2ccd26968a701349d716481df829d82001bce1a6007009b9d182f7af152879217d53404452600000000000004452b3e2178fbfa7accaba2381c9dbe85689408baf0f6ce3080c000540000000000000007f040002802e0006401fe757bb66fe79b895a756c5939043ce9b5866dddea97e1ac5095f72e06548aca97b4b737d61e096a584000004000780200002801c00028008000180ffffffff080003400000000108000180ffffffff08000440000000010900020073797a300000000018080380100000800900090073797a3200000000cc040080e8020a805800010090d89c50a644799ced4378f1a19401258b2556ee875ce5cfa8d26d80983e57a87861aad0095bfe1dba4c314b32e1b8bbd90ba78612183ae9e8df590070f2b9d99fdef3ad0b2e4aa26872ab5aeade9e7c266ae0e13800028008000180fffffffd0900020073797a30000000000900020073797a31000000000900020073797a32000000000800034000000007580001004cfd3f1337b83fa5709f88e65c0232f3f0e94f0a64b36c85645370638949"], 0xcc8}, 0x1, 0x0, 0x0, 0x20000800}, 0x2200c0c0) socket$igmp(0x2, 0x3, 0x2) r4 = syz_open_procfs(0x0, &(0x7f0000000100)='net/udplite6\x00') r5 = fanotify_init(0x0, 0x400) fanotify_mark(r5, 0x1, 0x40001019, r4, 0x0) read$FUSE(r4, &(0x7f0000003fc0)={0x2020}, 0x1d34) getsockopt$inet_sctp6_SCTP_PR_STREAM_STATUS(r0, 0x84, 0x73, 0x0, &(0x7f0000000040)) 28.427306ms ago: executing program 1 (id=5838): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000400)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r3}, 0x10) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42031, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, 0x0, 0x0) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0x149a82, 0x240) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x3, &(0x7f0000000200)=@framed, &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000000c0)='contention_end\x00', r5}, 0x18) r6 = openat$sysfs(0xffffffffffffff9c, 0x0, 0xa0042, 0x0) write$tcp_mem(r6, &(0x7f00000000c0)={0x9, 0x2d, 0xfffffffffffffff9, 0x3a, 0x0, 0x2c}, 0x48) write$cgroup_int(r4, &(0x7f0000000000)=0xfe8e, 0x12) r7 = io_uring_setup(0x4d98, &(0x7f0000001500)={0x0, 0x740, 0x40, 0x1, 0x14c}) io_uring_register$IORING_REGISTER_FILES2(r7, 0xd, &(0x7f0000001700)={0x1, 0x1, 0x0, &(0x7f0000001680)=[{0x0}], 0x0}, 0x20) 0s ago: executing program 9 (id=5839): r0 = getpid() bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_udp_int(r1, 0x11, 0xa, &(0x7f0000000000)=0xed, 0x4) sendto$inet6(r1, 0x0, 0x0, 0x80, &(0x7f00000003c0)={0xa, 0x4e21, 0x1, @remote, 0x7}, 0x1c) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r4, 0x8933, &(0x7f0000000040)={'wg1\x00', 0x0}) r6 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x336, '\x00', r5, 0x0, 0x0, 0x0, 0xffffffff, 0x0, @void, @value, @void, @value}, 0x50) r7 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x9, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0xc0ff}, {{0x18, 0x1, 0x1, 0x0, r7}}, {}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9, 0xfe00}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x8}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x6, 0x1, 0xb, 0x8, 0x9}, {0x4, 0x0, 0x0, 0x8}, {}, {}, {}, {0x18, 0x8, 0x2, 0x0, r6}, {}, {0x46, 0x0, 0x0, 0x76}}], {{}, {0x6, 0x0, 0x7, 0x8}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock=0x22, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r8 = syz_pidfd_open(r0, 0x0) setns(r8, 0x8020000) mount_setattr(0xffffffffffffff9c, &(0x7f0000000180)='.\x00', 0x8800, &(0x7f0000001dc0)={0xf, 0x84, 0x40000}, 0x20) kernel console output (not intermixed with test programs): d state [ 1952.006281][ T9094] bridge_slave_0: left allmulticast mode [ 1952.006412][ T9094] bridge_slave_0: left promiscuous mode [ 1952.259955][ T9094] bridge0: port 1(bridge_slave_0) entered disabled state [ 1953.973774][ T9094] bond0 (unregistering): Released all slaves [ 1954.225122][T24696] bridge0: port 1(bridge_slave_0) entered blocking state [ 1954.232293][T24696] bridge0: port 1(bridge_slave_0) entered disabled state [ 1954.263788][T24696] bridge_slave_0: entered allmulticast mode [ 1954.598274][T24696] bridge_slave_0: entered promiscuous mode [ 1954.610760][T24696] bridge0: port 2(bridge_slave_1) entered blocking state [ 1954.618064][T24696] bridge0: port 2(bridge_slave_1) entered disabled state [ 1955.325222][T24696] bridge_slave_1: entered allmulticast mode [ 1955.332503][T24696] bridge_slave_1: entered promiscuous mode [ 1958.178630][T25023] input: syz0 as /devices/virtual/input/input25 [ 1958.229171][T24696] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1958.252135][T25023] syz_tun: entered allmulticast mode [ 1958.330956][T24696] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1958.472140][T25026] syz_tun: left allmulticast mode [ 1958.652523][T24696] team0: Port device team_slave_0 added [ 1958.989011][T24696] team0: Port device team_slave_1 added [ 1962.832676][ C1] dccp_v4_rcv: dropped packet with invalid checksum [ 1962.842965][ C1] dccp_v4_rcv: dropped packet with invalid checksum [ 1962.851494][ C1] dccp_v4_rcv: dropped packet with invalid checksum [ 1962.859967][ C1] dccp_v4_rcv: dropped packet with invalid checksum [ 1962.880488][ C1] dccp_v4_rcv: dropped packet with invalid checksum [ 1962.967285][T24696] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1963.049739][T25038] dccp_check_seqno: Step 6 failed for CLOSEREQ packet, (LSWL(146535441765965) <= P.seqno(146535441765964) <= S.SWH(146535441765988)) and (P.ackno exists or LAWL(166223745436104) <= P.ackno(166223745436104) <= S.AWH(166223745436105), sending SYNC... [ 1963.210254][T24696] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1963.243314][T24696] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1963.256379][T24696] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1963.263350][T24696] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1963.289476][T24696] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1965.858826][ T29] audit: type=1326 audit(2000001178.615:661): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25058 comm="syz.6.5232" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fdc62f85d29 code=0x0 [ 1972.415381][T25090] netlink: 4 bytes leftover after parsing attributes in process `syz.6.5226'. [ 1972.859266][T17850] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1972.869242][T17850] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1972.877835][T17850] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1972.887265][T17850] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1972.895381][T17850] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 1972.903654][T17850] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1973.798087][T25091] virt_wifi0 speed is unknown, defaulting to 1000 [ 1975.933942][ T5844] Bluetooth: hci2: command tx timeout [ 1976.781505][ T2979] bridge_slave_1: left allmulticast mode [ 1976.791140][ T2979] bridge_slave_1: left promiscuous mode [ 1976.798270][ T2979] bridge0: port 2(bridge_slave_1) entered disabled state [ 1976.912078][ T2979] bridge_slave_0: left allmulticast mode [ 1976.918066][ T2979] bridge_slave_0: left promiscuous mode [ 1977.228859][ T2979] bridge0: port 1(bridge_slave_0) entered disabled state [ 1978.028516][ T5844] Bluetooth: hci2: command tx timeout [ 1978.654387][ T2979] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1980.076117][ T5844] Bluetooth: hci2: command tx timeout [ 1980.195277][ T2979] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1980.417628][ T2979] bond0 (unregistering): Released all slaves [ 1980.654433][ T1292] ieee802154 phy0 wpan0: encryption failed: -22 [ 1980.819765][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 1981.817834][ T2979] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1981.894272][ T2979] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1982.214005][ T5844] Bluetooth: hci2: command tx timeout [ 1984.025020][ T2979] team0 (unregistering): Port device team_slave_1 removed [ 1985.073994][ T2979] team0 (unregistering): Port device team_slave_0 removed [ 1985.541450][T25168] loop7: detected capacity change from 0 to 40427 [ 1985.555760][T25168] F2FS-fs (loop7): Invalid log_blocksize (268), supports only 12 [ 1985.563661][T25168] F2FS-fs (loop7): Can't find valid F2FS filesystem in 1th superblock [ 1985.710536][T25168] F2FS-fs (loop7): invalid crc value [ 1985.933219][T25179] loop6: detected capacity change from 0 to 256 [ 1985.943567][T25179] exfat: Deprecated parameter 'utf8' [ 1986.824390][T25179] exFAT-fs (loop6): failed to load upcase table (idx : 0x00010000, chksum : 0x36e00b20, utbl_chksum : 0xe619d30d) [ 1986.855837][T25168] F2FS-fs (loop7): Found nat_bits in checkpoint [ 1986.956468][T25168] F2FS-fs (loop7): Try to recover 1th superblock, ret: 0 [ 1986.964854][T25168] F2FS-fs (loop7): Mounted with checkpoint version = 48b305e5 [ 1989.931664][T25196] loop6: detected capacity change from 0 to 524287999 [ 1990.837733][ C1] blk_print_req_error: 25 callbacks suppressed [ 1990.837756][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1990.853203][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 1990.863250][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1990.872457][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 1990.885788][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1990.895190][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 1990.925545][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1990.934820][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 1991.004905][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1991.014120][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 1991.024483][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1991.033722][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 1991.112863][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1991.122391][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 1991.196555][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1991.205839][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 1991.213895][T25196] ldm_validate_partition_table(): Disk read failed. [ 1991.353871][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1991.363146][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 1991.371487][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1991.380721][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 1991.510368][T25196] Dev loop6: unable to read RDB block 0 [ 1992.314384][T25196] loop6: unable to read partition table [ 1992.325385][T23899] ldm_validate_partition_table(): Disk read failed. [ 1992.345172][T23899] Dev loop6: unable to read RDB block 0 [ 1992.350934][T25196] loop_reread_partitions: partition scan of loop6 (Í¢†ÃÙÇ´ÝCP'OÈQž=}m”=@4r„(Uk+Z—Ö 4—Ö>˜ìF¼1ã“›ÍÀù‚àÔ™Û1Œ°) failed (rc=-5) [ 1992.402825][T23899] loop6: unable to read partition table [ 1993.547354][T25091] chnl_net:caif_netlink_parms(): no params data found [ 1994.535219][T25091] bridge0: port 1(bridge_slave_0) entered blocking state [ 1994.600600][T25091] bridge0: port 1(bridge_slave_0) entered disabled state [ 1996.573622][T25091] bridge_slave_0: entered allmulticast mode [ 1996.581283][T25091] bridge_slave_0: entered promiscuous mode [ 1996.616065][T25091] bridge0: port 2(bridge_slave_1) entered blocking state [ 1997.186643][T25230] syz.7.5259 (25230): drop_caches: 2 [ 1997.479275][T25091] bridge0: port 2(bridge_slave_1) entered disabled state [ 1997.491265][T25091] bridge_slave_1: entered allmulticast mode [ 1997.513921][T25091] bridge_slave_1: entered promiscuous mode [ 1997.717755][T25091] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1997.774349][T25091] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1999.150646][T25091] team0: Port device team_slave_0 added [ 1999.524282][T25091] team0: Port device team_slave_1 added [ 2001.399579][T25091] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2001.412321][T25091] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2001.512318][T25091] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2001.551448][T25263] loop6: detected capacity change from 0 to 128 [ 2001.573225][T25263] FAT-fs (loop6): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 2001.604546][T25091] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2001.632662][T25091] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2002.032755][T25263] FAT-fs (loop6): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 2002.079221][T25091] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2003.144630][T25263] loop6: detected capacity change from 0 to 256 [ 2003.178739][T25263] exFAT-fs (loop6): failed to load upcase table (idx : 0x00010000, chksum : 0x12abf3ed, utbl_chksum : 0xe619d30d) [ 2003.307455][T25091] hsr_slave_0: entered promiscuous mode [ 2003.345728][T25091] hsr_slave_1: entered promiscuous mode [ 2003.378918][T25091] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 2003.452252][T25091] Cannot create hsr debugfs directory [ 2004.197361][T25091] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2006.379549][T25091] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2006.935533][T25091] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2007.034477][T25300] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 2009.462851][T25091] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2009.875852][T25323] loop7: detected capacity change from 0 to 256 [ 2010.657041][ T29] audit: type=1800 audit(2000001223.428:662): pid=25321 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.7.5293" name="file1" dev="loop7" ino=1048773 res=0 errno=0 [ 2013.970183][T25091] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 2014.804981][T25091] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 2014.837367][T25091] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 2014.955987][T25091] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 2016.166669][T25091] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2016.557961][T25091] 8021q: adding VLAN 0 to HW filter on device team0 [ 2017.584792][T25091] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 2018.089881][T25091] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 2018.138762][ T2979] bridge0: port 1(bridge_slave_0) entered blocking state [ 2018.146030][ T2979] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2018.658806][ T2979] bridge0: port 2(bridge_slave_1) entered blocking state [ 2018.666109][ T2979] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2021.097769][T25380] input: syz0 as /devices/virtual/input/input26 [ 2021.167572][T25380] syz_tun: entered allmulticast mode [ 2021.254091][T25380] syz_tun: left allmulticast mode [ 2023.546543][T25091] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2027.094361][T17850] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 2027.106274][T17850] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 2027.114735][T17850] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 2027.122762][T17850] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 2027.134092][T17850] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 2027.145674][T17850] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 2027.540455][T25433] loop3: detected capacity change from 0 to 16 [ 2027.564633][T25433] erofs (device loop3): mounted with root inode @ nid 36. [ 2028.283471][T23765] syz-executor: attempt to access beyond end of device [ 2028.283471][T23765] loop3: rw=0, sector=1049352, nr_sectors = 8 limit=16 [ 2028.295523][T25418] virt_wifi0 speed is unknown, defaulting to 1000 [ 2028.784563][T23765] erofs (device loop3): read error -5 @ 0 of nid 36 [ 2029.040466][T23765] erofs (device loop3): fail to readdir of logical block 0 of nid 36 [ 2029.200985][ T5844] Bluetooth: hci6: command tx timeout [ 2029.458128][T25434] loop6: detected capacity change from 0 to 40427 [ 2029.466990][T25434] F2FS-fs (loop6): Invalid log_blocksize (268), supports only 12 [ 2029.475150][T25434] F2FS-fs (loop6): Can't find valid F2FS filesystem in 1th superblock [ 2029.495850][T25434] F2FS-fs (loop6): invalid crc value [ 2029.524730][T25434] F2FS-fs (loop6): Found nat_bits in checkpoint [ 2029.647973][T25434] F2FS-fs (loop6): Try to recover 1th superblock, ret: 0 [ 2029.655412][T25434] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e5 [ 2030.202334][T25448] syz.6.5323: attempt to access beyond end of device [ 2030.202334][T25448] loop6: rw=2049, sector=77824, nr_sectors = 520 limit=40427 [ 2031.273506][ T5844] Bluetooth: hci6: command tx timeout [ 2031.559659][T23707] kworker/u8:3: attempt to access beyond end of device [ 2031.559659][T23707] loop6: rw=1, sector=78336, nr_sectors = 8 limit=40427 [ 2032.285508][T25418] chnl_net:caif_netlink_parms(): no params data found [ 2033.352664][ T5844] Bluetooth: hci6: command tx timeout [ 2033.450665][T25418] bridge0: port 1(bridge_slave_0) entered blocking state [ 2033.480931][T25418] bridge0: port 1(bridge_slave_0) entered disabled state [ 2033.488272][T25418] bridge_slave_0: entered allmulticast mode [ 2033.860482][T25418] bridge_slave_0: entered promiscuous mode [ 2033.869602][T25418] bridge0: port 2(bridge_slave_1) entered blocking state [ 2033.900488][T25418] bridge0: port 2(bridge_slave_1) entered disabled state [ 2033.908654][T25418] bridge_slave_1: entered allmulticast mode [ 2034.020269][T25418] bridge_slave_1: entered promiscuous mode [ 2035.277328][T25483] loop7: detected capacity change from 0 to 64 [ 2035.286118][T25484] input: syz0 as /devices/virtual/input/input27 [ 2035.453087][ T5844] Bluetooth: hci6: command tx timeout [ 2036.106075][T25418] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2036.390714][ T2979] bridge_slave_1: left allmulticast mode [ 2036.396434][ T2979] bridge_slave_1: left promiscuous mode [ 2037.420449][ T2979] bridge0: port 2(bridge_slave_1) entered disabled state [ 2038.306741][ T2979] bridge_slave_0: left allmulticast mode [ 2038.352963][ T2979] bridge_slave_0: left promiscuous mode [ 2038.381652][ T2979] bridge0: port 1(bridge_slave_0) entered disabled state [ 2040.348455][ T2979] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2040.368422][ T2979] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2040.381293][ T2979] bond0 (unregistering): Released all slaves [ 2040.404571][T25484] syz_tun: entered allmulticast mode [ 2040.413313][T25418] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2040.646314][T25418] team0: Port device team_slave_0 added [ 2041.284773][T25418] team0: Port device team_slave_1 added [ 2042.131258][ T1292] ieee802154 phy0 wpan0: encryption failed: -22 [ 2042.138014][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 2042.738999][T25418] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2042.840039][T25418] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2042.909939][T25418] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2043.898847][T25418] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2043.920203][T25418] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2045.349738][T25418] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2047.821372][ T2979] hsr_slave_0: left promiscuous mode [ 2048.077692][ T2979] hsr_slave_1: left promiscuous mode [ 2048.891060][ T2979] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2048.920692][ T2979] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2053.270934][T25604] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 2058.863408][ T2979] team0 (unregistering): Port device team_slave_1 removed [ 2059.589722][ T2979] team0 (unregistering): Port device team_slave_0 removed [ 2066.226663][T17850] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 2066.239519][T17850] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 2066.249284][T17850] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 2066.259615][T17850] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 2066.270376][T17850] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 2066.277861][T17850] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 2068.408990][ T5844] Bluetooth: hci1: command tx timeout [ 2070.548593][ T5844] Bluetooth: hci1: command tx timeout [ 2072.679513][ T5844] Bluetooth: hci1: command tx timeout [ 2074.718726][ T5844] Bluetooth: hci1: command tx timeout [ 2075.214893][T25746] loop3: detected capacity change from 0 to 256 [ 2075.918759][ T29] audit: type=1800 audit(2000001288.152:663): pid=25746 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.5404" name="file1" dev="loop3" ino=1048774 res=0 errno=0 [ 2079.757411][T25418] hsr_slave_0: entered promiscuous mode [ 2079.940672][T25418] hsr_slave_1: entered promiscuous mode [ 2080.038007][T25418] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 2080.075280][T25418] Cannot create hsr debugfs directory [ 2082.317835][T25690] virt_wifi0 speed is unknown, defaulting to 1000 [ 2086.941639][T25690] chnl_net:caif_netlink_parms(): no params data found [ 2088.188425][T17850] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 2088.202572][T17850] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 2088.214342][T17850] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 2088.237728][T17850] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 2088.247769][T17850] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 2088.255155][T17850] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 2088.843540][T25690] bridge0: port 1(bridge_slave_0) entered blocking state [ 2088.867618][T25690] bridge0: port 1(bridge_slave_0) entered disabled state [ 2088.881016][T25690] bridge_slave_0: entered allmulticast mode [ 2088.909123][T25690] bridge_slave_0: entered promiscuous mode [ 2088.939709][T25690] bridge0: port 2(bridge_slave_1) entered blocking state [ 2089.129420][T25690] bridge0: port 2(bridge_slave_1) entered disabled state [ 2089.277691][T25690] bridge_slave_1: entered allmulticast mode [ 2089.285126][T25690] bridge_slave_1: entered promiscuous mode [ 2089.596078][T25826] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 2091.017646][T17850] Bluetooth: hci2: command tx timeout [ 2091.844646][T25690] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2091.893996][T25815] virt_wifi0 speed is unknown, defaulting to 1000 [ 2091.916662][T25690] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2093.238247][T17850] Bluetooth: hci2: command tx timeout [ 2094.566256][ T2979] bridge_slave_1: left allmulticast mode [ 2094.609683][ T2979] bridge_slave_1: left promiscuous mode [ 2094.615484][ T2979] bridge0: port 2(bridge_slave_1) entered disabled state [ 2094.678977][T25840] loop7: detected capacity change from 0 to 2048 [ 2094.686394][ T2979] bridge_slave_0: left allmulticast mode [ 2094.695251][ T2979] bridge_slave_0: left promiscuous mode [ 2094.790636][ T2979] bridge0: port 1(bridge_slave_0) entered disabled state [ 2094.852040][T25840] EXT4-fs error (device loop7): __ext4_fill_super:5505: inode #2: comm syz.7.5432: casefold flag without casefold feature [ 2094.873115][T25840] EXT4-fs (loop7): get root inode failed [ 2094.887140][T25840] EXT4-fs (loop7): mount failed [ 2095.291082][T17850] Bluetooth: hci2: command tx timeout [ 2096.332112][ T2979] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2096.395355][ T2979] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2096.427555][ T2979] bond0 (unregistering): Released all slaves [ 2096.470310][T25690] team0: Port device team_slave_0 added [ 2096.496088][T25690] team0: Port device team_slave_1 added [ 2096.562198][T25690] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2096.571750][T25690] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2096.612361][ C0] vkms_vblank_simulate: vblank timer overrun [ 2096.620001][T25690] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2096.652549][T25690] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2096.659860][T25690] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2096.687111][T25690] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2096.700953][ T2979] hsr_slave_0: left promiscuous mode [ 2096.709195][ T2979] hsr_slave_1: left promiscuous mode [ 2096.716296][ T2979] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2096.724634][ T2979] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2096.893123][ T2979] team0 (unregistering): Port device team_slave_1 removed [ 2096.939435][ T2979] team0 (unregistering): Port device team_slave_0 removed [ 2097.199947][T25690] hsr_slave_0: entered promiscuous mode [ 2097.206765][T25690] hsr_slave_1: entered promiscuous mode [ 2097.213981][T25690] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 2097.222739][T25690] Cannot create hsr debugfs directory [ 2097.360714][T17850] Bluetooth: hci2: command tx timeout [ 2097.470477][T25815] chnl_net:caif_netlink_parms(): no params data found [ 2097.572140][T25690] netdevsim netdevsim5 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2097.623867][T25815] bridge0: port 1(bridge_slave_0) entered blocking state [ 2097.641325][T25815] bridge0: port 1(bridge_slave_0) entered disabled state [ 2097.649730][T25815] bridge_slave_0: entered allmulticast mode [ 2097.656734][T25815] bridge_slave_0: entered promiscuous mode [ 2097.673883][T25690] netdevsim netdevsim5 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2097.692137][T25815] bridge0: port 2(bridge_slave_1) entered blocking state [ 2097.701246][T25815] bridge0: port 2(bridge_slave_1) entered disabled state [ 2097.708719][T25815] bridge_slave_1: entered allmulticast mode [ 2097.716008][T25815] bridge_slave_1: entered promiscuous mode [ 2097.728341][T25690] netdevsim netdevsim5 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2097.779387][T25690] netdevsim netdevsim5 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2097.800860][T25815] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2097.813232][T25815] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2097.873111][T25815] team0: Port device team_slave_0 added [ 2097.888436][T25815] team0: Port device team_slave_1 added [ 2097.960067][T25815] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2097.967616][T25815] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2097.994639][T25815] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2098.027760][T25815] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2098.034775][T25815] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2098.063048][T25815] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2098.138249][T25815] hsr_slave_0: entered promiscuous mode [ 2098.155206][T25815] hsr_slave_1: entered promiscuous mode [ 2098.162413][T25815] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 2098.171171][T25815] Cannot create hsr debugfs directory [ 2098.192200][T25690] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 2098.216288][T25690] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 2098.250000][T25690] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 2098.273829][T25690] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 2098.475010][T25690] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2098.521559][T25690] 8021q: adding VLAN 0 to HW filter on device team0 [ 2098.536356][ T7949] bridge0: port 1(bridge_slave_0) entered blocking state [ 2098.543558][ T7949] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2098.598116][T21587] bridge0: port 2(bridge_slave_1) entered blocking state [ 2098.605357][T21587] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2098.879199][T25690] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2098.923162][T25815] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 2098.948927][T25815] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 2098.969568][T25815] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 2098.990664][T25815] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 2099.133281][T25815] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2099.175948][T25815] 8021q: adding VLAN 0 to HW filter on device team0 [ 2099.203987][ T7949] bridge0: port 1(bridge_slave_0) entered blocking state [ 2099.211171][ T7949] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2099.240612][T21587] bridge0: port 2(bridge_slave_1) entered blocking state [ 2099.247788][T21587] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2099.397556][T25690] veth0_vlan: entered promiscuous mode [ 2099.410407][T25690] veth1_vlan: entered promiscuous mode [ 2099.463991][T25690] veth0_macvtap: entered promiscuous mode [ 2099.478372][T25690] veth1_macvtap: entered promiscuous mode [ 2099.519116][T25690] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2099.547251][T25690] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2099.567748][T25690] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2099.586779][T25690] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2099.606759][T25690] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2099.626851][T25690] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2099.637091][T25690] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2099.648539][T25690] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2099.658614][T25690] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2099.669414][T25690] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2099.685109][T25690] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2099.696357][T25690] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2099.706592][T25690] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2099.717329][T25690] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2099.727520][T25690] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2099.738399][T25690] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2099.748505][T25690] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2099.759303][T25690] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2099.770844][T25690] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2099.792392][T25690] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2099.816821][T25690] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2099.826773][T25690] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2099.839259][T25690] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2099.849203][T25690] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2099.860381][T25690] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2099.870440][T25690] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2099.881252][T25690] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2099.892160][T25690] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2099.902973][T25690] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2099.913089][T25690] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2099.924121][T25690] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2099.934095][T25690] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2099.944912][T25690] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2099.955327][T25690] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2099.966028][T25690] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2099.976192][T25690] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2099.988061][T25690] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2099.999626][T25690] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2100.012392][T25690] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2100.021528][T25690] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2100.030444][T25690] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2100.039714][T25690] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2100.073851][T25815] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2100.147998][ T7951] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2100.155858][ T7951] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2100.247818][T23707] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2100.257030][T23707] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2101.650854][T25900] loop5: detected capacity change from 0 to 256 [ 2103.517049][ T1292] ieee802154 phy0 wpan0: encryption failed: -22 [ 2103.523434][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 2107.380176][T25925] loop3: detected capacity change from 0 to 512 [ 2108.018794][T25815] veth0_vlan: entered promiscuous mode [ 2108.268642][T25815] veth1_vlan: entered promiscuous mode [ 2108.281964][T25925] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 2109.573292][T25815] veth0_macvtap: entered promiscuous mode [ 2110.578956][T25815] veth1_macvtap: entered promiscuous mode [ 2111.037452][T25935] EXT4-fs error (device loop3): ext4_validate_block_bitmap:440: comm ext4lazyinit: bg 0: block 496: padding at end of block bitmap is not set [ 2111.185324][T25815] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2111.236985][T25815] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2111.265090][T25815] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2111.283372][T23765] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 2111.306894][T25815] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2111.336299][T25815] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2111.366084][T25815] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2112.349856][T25815] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2112.362158][T25815] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2112.373173][T25815] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2112.711745][T25815] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2113.592086][T25815] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2114.057784][T25815] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2114.236321][T25815] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2114.420818][T25815] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2114.646112][T25815] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2114.696122][T25815] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2114.736247][T25815] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2114.802705][T25815] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2115.088454][T25815] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2115.099802][T25815] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2115.111721][T25815] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2115.130216][T25815] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2115.156751][T25815] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2115.189097][T25815] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2116.068247][T25815] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2116.106728][T25815] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2116.935961][T25815] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2116.995887][T25815] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2117.031602][T25815] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2117.065881][T25815] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2117.094357][T25815] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2117.120339][T25815] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2117.376159][T25815] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2117.386184][T25815] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2117.417819][T25815] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2117.447648][T25815] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2118.386775][T25815] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2118.397064][T25815] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2118.407741][T25815] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2118.418561][T25815] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2118.429143][T25815] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2118.445255][T25815] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2118.565876][T25815] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2119.173509][T25815] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2119.620215][T25815] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2120.105676][T25815] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2123.480909][T23718] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2123.672140][T23718] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2124.894135][T21587] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2125.647330][T21587] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2126.168273][T26037] trusted_key: encrypted_key: key user:syz not found [ 2128.612516][T26046] siw: device registration error -23 [ 2133.870360][T26075] loop5: detected capacity change from 0 to 1024 [ 2133.992096][T26075] EXT4-fs: Ignoring removed nobh option [ 2134.025069][T26075] EXT4-fs: Ignoring removed bh option [ 2134.066089][T26075] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 2137.048549][T25690] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 2137.207578][T26090] loop8: detected capacity change from 0 to 128 [ 2139.609771][T26103] loop5: detected capacity change from 0 to 1024 [ 2140.875189][ T7951] hfsplus: b-tree write err: -5, ino 4 [ 2152.354935][T25324] syz_tun (unregistering): left allmulticast mode [ 2154.998287][ T5844] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 2155.009776][ T5844] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 2155.019320][ T5844] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 2155.027784][ T5844] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 2155.035724][ T5844] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 2155.045324][ T5844] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 2155.267479][T23720] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2155.722469][T26205] overlayfs: failed to clone lowerpath [ 2156.899985][T23720] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2157.105797][ T5844] Bluetooth: hci4: command tx timeout [ 2157.211440][T26195] virt_wifi0 speed is unknown, defaulting to 1000 [ 2157.586187][T23720] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2158.254029][T23720] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2158.278025][T26223] overlayfs: failed to clone upperpath [ 2159.073646][T15426] usb 6-1: new full-speed USB device number 21 using dummy_hcd [ 2159.194563][ T5844] Bluetooth: hci4: command tx timeout [ 2159.246336][T15426] usb 6-1: New USB device found, idVendor=13d8, idProduct=0020, bcdDevice=f7.31 [ 2159.276912][T15426] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2159.587155][T15426] usb 6-1: config 0 descriptor?? [ 2160.308417][T15426] usb 6-1: selecting invalid altsetting 3 [ 2160.317009][T15426] comedi comedi0: could not set alternate setting 3 in high speed [ 2160.339849][T15426] usbduxsigma 6-1:0.0: driver 'usbduxsigma' failed to auto-configure device. [ 2161.321262][ T5844] Bluetooth: hci4: command tx timeout [ 2162.479600][T15426] usbduxsigma 6-1:0.0: probe with driver usbduxsigma failed with error -22 [ 2162.649787][T15426] usb 6-1: USB disconnect, device number 21 [ 2163.229642][T26195] chnl_net:caif_netlink_parms(): no params data found [ 2163.381150][T17850] Bluetooth: hci4: command tx timeout [ 2163.723964][T23720] bridge_slave_1: left allmulticast mode [ 2163.729756][T23720] bridge_slave_1: left promiscuous mode [ 2163.782789][T23720] bridge0: port 2(bridge_slave_1) entered disabled state [ 2163.844274][T23720] bridge_slave_0: left allmulticast mode [ 2163.859502][T23720] bridge_slave_0: left promiscuous mode [ 2164.191550][T23720] bridge0: port 1(bridge_slave_0) entered disabled state [ 2164.974596][ T1292] ieee802154 phy0 wpan0: encryption failed: -22 [ 2165.002799][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 2170.432629][T23720] batman_adv: batadv0: Removing interface: vxlan0 [ 2171.700335][T26304] loop8: detected capacity change from 0 to 2048 [ 2174.641171][T26304] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 2174.745293][T25815] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 2177.723002][T17850] Bluetooth: hci0: unexpected event for opcode 0x2043 [ 2177.957286][ C1] vkms_vblank_simulate: vblank timer overrun [ 2178.052068][T23720] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2178.088075][T23720] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2178.147585][T23720] bond0 (unregistering): Released all slaves [ 2178.359569][T26359] siw: device registration error -23 [ 2179.307380][T26346] : entered promiscuous mode [ 2179.739008][T26374] netlink: 20 bytes leftover after parsing attributes in process `syz.7.5576'. [ 2182.488880][T26382] loop8: detected capacity change from 0 to 128 [ 2182.985904][T26195] bridge0: port 1(bridge_slave_0) entered blocking state [ 2182.995661][T26382] hpfs: Bad magic ... probably not HPFS [ 2183.380970][T26195] bridge0: port 1(bridge_slave_0) entered disabled state [ 2183.389025][T26195] bridge_slave_0: entered allmulticast mode [ 2183.396648][T26195] bridge_slave_0: entered promiscuous mode [ 2183.405275][T26195] bridge0: port 2(bridge_slave_1) entered blocking state [ 2183.445860][T26195] bridge0: port 2(bridge_slave_1) entered disabled state [ 2183.509370][T26195] bridge_slave_1: entered allmulticast mode [ 2183.565909][T26195] bridge_slave_1: entered promiscuous mode [ 2183.605812][T26386] loop5: detected capacity change from 0 to 1024 [ 2183.686821][T26386] EXT4-fs (loop5): couldn't mount as ext2 due to feature incompatibilities [ 2187.313112][T26195] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2187.407465][T26416] input: syz0 as /devices/virtual/input/input29 [ 2188.512786][T26195] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2188.889102][T26425] siw: device registration error -23 [ 2190.339226][T26195] team0: Port device team_slave_0 added [ 2191.122748][T26195] team0: Port device team_slave_1 added [ 2192.656693][T23720] hsr_slave_0: left promiscuous mode [ 2193.038204][T23720] hsr_slave_1: left promiscuous mode [ 2193.111744][T17850] Bluetooth: hci1: command 0x0406 tx timeout [ 2193.288226][T23720] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2193.466961][T23720] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2193.962481][T23720] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2195.191669][T23720] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2196.351762][T23720] veth1_macvtap: left promiscuous mode [ 2196.357499][T23720] veth0_macvtap: left promiscuous mode [ 2196.381733][T17850] Bluetooth: hci5: Controller not accepting commands anymore: ncmd = 0 [ 2196.874666][T26468] loop8: detected capacity change from 0 to 256 [ 2197.350451][T17850] Bluetooth: hci5: Injecting HCI hardware error event [ 2197.351367][T23720] veth1_vlan: left promiscuous mode [ 2197.362628][ T5844] Bluetooth: hci5: hardware error 0x00 [ 2197.386349][T23720] veth0_vlan: left promiscuous mode [ 2198.728565][T26479] siw: device registration error -23 [ 2199.434115][ T5844] Bluetooth: hci5: Opcode 0x0c03 failed: -110 [ 2201.729613][T26490] netlink: 8 bytes leftover after parsing attributes in process `syz.8.5611'. [ 2201.873444][T17850] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 2201.884859][T17850] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 2201.893192][T17850] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 2201.914357][T17850] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 2201.925626][T17850] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 2201.935272][T17850] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 2202.067199][T26494] loop8: detected capacity change from 0 to 512 [ 2202.093009][T26494] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 2203.513812][T26496] EXT4-fs error (device loop8): ext4_validate_block_bitmap:440: comm ext4lazyinit: bg 0: block 496: padding at end of block bitmap is not set [ 2203.653837][T25815] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 2203.668850][T23720] team0 (unregistering): Port device team_slave_1 removed [ 2203.843445][T23720] team0 (unregistering): Port device team_slave_0 removed [ 2204.150279][ T5844] Bluetooth: hci0: command tx timeout [ 2206.459488][ T5844] Bluetooth: hci0: command tx timeout [ 2206.793855][T26515] Bluetooth: MGMT ver 1.23 [ 2209.540999][ T5844] Bluetooth: hci0: command tx timeout [ 2209.668733][T26527] loop8: detected capacity change from 0 to 2048 [ 2209.993743][T26529] x_tables: duplicate underflow at hook 3 [ 2210.368397][T26528] tty tty37: ldisc open failed (-12), clearing slot 36 [ 2211.485482][T26538] 9pnet_virtio: no channels available for device syz [ 2212.350224][T17850] Bluetooth: hci0: command tx timeout [ 2213.019967][T26541] loop5: detected capacity change from 0 to 512 [ 2213.081112][T26541] EXT4-fs: inline encryption not supported [ 2213.101214][T17850] Bluetooth: hci2: command 0x0406 tx timeout [ 2213.110939][T26541] EXT4-fs: Ignoring removed nobh option [ 2213.135928][T26541] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 2213.214481][ T5844] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 2213.235340][T26197] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 2213.250809][T26197] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 2213.301024][T26197] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 2213.301558][T26541] EXT4-fs (loop5): 1 truncate cleaned up [ 2213.322908][T26197] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 2213.332701][T26197] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 2213.391406][T26541] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 2213.551338][T26550] loop8: detected capacity change from 0 to 64 [ 2213.655991][T17850] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 2213.673950][T17850] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 2213.684162][T17850] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 2213.694205][T17850] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 2213.702857][T17850] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 2213.710147][T17850] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 2213.889376][T25690] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 2213.910072][T26461] pim6reg: entered allmulticast mode [ 2214.209200][T17850] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 2214.222651][T17850] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 2214.234227][T17850] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 2214.243506][T17850] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 2214.254319][T17850] Bluetooth: hci8: unexpected cc 0x0c25 length: 249 > 3 [ 2214.262962][T17850] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 2214.559904][T26559] netlink: 40 bytes leftover after parsing attributes in process `syz.5.5627'. [ 2215.419302][T26491] virt_wifi0 speed is unknown, defaulting to 1000 [ 2215.469119][T17850] Bluetooth: hci6: command tx timeout [ 2215.743532][T17850] Bluetooth: hci7: command tx timeout [ 2216.302581][T17850] Bluetooth: hci8: command tx timeout [ 2216.601324][T26543] virt_wifi0 speed is unknown, defaulting to 1000 [ 2216.661393][T26556] virt_wifi0 speed is unknown, defaulting to 1000 [ 2216.729662][T26551] virt_wifi0 speed is unknown, defaulting to 1000 [ 2217.976591][T17850] Bluetooth: hci6: command tx timeout [ 2217.982220][T17850] Bluetooth: hci7: command tx timeout [ 2218.407726][T26197] Bluetooth: hci8: command tx timeout [ 2220.063282][T17850] Bluetooth: hci6: command tx timeout [ 2220.074228][T26197] Bluetooth: hci7: command tx timeout [ 2220.470723][T26197] Bluetooth: hci8: command tx timeout [ 2222.148052][T26197] Bluetooth: hci7: command tx timeout [ 2222.154789][T26197] Bluetooth: hci6: command tx timeout [ 2222.542261][T17850] Bluetooth: hci8: command tx timeout [ 2223.995373][T26551] chnl_net:caif_netlink_parms(): no params data found [ 2224.074488][T26491] chnl_net:caif_netlink_parms(): no params data found [ 2224.353496][T26556] chnl_net:caif_netlink_parms(): no params data found [ 2224.417817][T26543] chnl_net:caif_netlink_parms(): no params data found [ 2225.739497][T23720] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2226.919176][ T1292] ieee802154 phy0 wpan0: encryption failed: -22 [ 2226.925629][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 2226.969369][T26551] bridge0: port 1(bridge_slave_0) entered blocking state [ 2226.978883][T26551] bridge0: port 1(bridge_slave_0) entered disabled state [ 2226.987737][T26551] bridge_slave_0: entered allmulticast mode [ 2227.277850][T26551] bridge_slave_0: entered promiscuous mode [ 2228.052243][T23720] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2228.160151][T26551] bridge0: port 2(bridge_slave_1) entered blocking state [ 2228.206365][T26551] bridge0: port 2(bridge_slave_1) entered disabled state [ 2228.237872][T26551] bridge_slave_1: entered allmulticast mode [ 2228.271309][T26551] bridge_slave_1: entered promiscuous mode [ 2228.686867][T26491] bridge0: port 1(bridge_slave_0) entered blocking state [ 2228.704597][T26491] bridge0: port 1(bridge_slave_0) entered disabled state [ 2229.615378][T26491] bridge_slave_0: entered allmulticast mode [ 2229.626857][T26491] bridge_slave_0: entered promiscuous mode [ 2230.185875][T23720] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2231.269914][T26551] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2231.288609][T26660] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 2231.313439][T26491] bridge0: port 2(bridge_slave_1) entered blocking state [ 2231.369612][T26491] bridge0: port 2(bridge_slave_1) entered disabled state [ 2231.377149][T26491] bridge_slave_1: entered allmulticast mode [ 2231.390813][T26491] bridge_slave_1: entered promiscuous mode [ 2232.192213][T23720] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2232.216957][T26551] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2232.407462][T26556] bridge0: port 1(bridge_slave_0) entered blocking state [ 2232.439809][T26556] bridge0: port 1(bridge_slave_0) entered disabled state [ 2232.486154][T26556] bridge_slave_0: entered allmulticast mode [ 2232.514516][T26556] bridge_slave_0: entered promiscuous mode [ 2232.664477][T26551] team0: Port device team_slave_0 added [ 2232.694599][T26491] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2233.024906][T26556] bridge0: port 2(bridge_slave_1) entered blocking state [ 2233.045009][T26556] bridge0: port 2(bridge_slave_1) entered disabled state [ 2233.059411][T26556] bridge_slave_1: entered allmulticast mode [ 2233.076457][T26556] bridge_slave_1: entered promiscuous mode [ 2234.023875][T26543] bridge0: port 1(bridge_slave_0) entered blocking state [ 2234.039467][T26543] bridge0: port 1(bridge_slave_0) entered disabled state [ 2234.051753][T26543] bridge_slave_0: entered allmulticast mode [ 2234.069628][T26543] bridge_slave_0: entered promiscuous mode [ 2234.110731][T26551] team0: Port device team_slave_1 added [ 2234.252649][T26491] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2234.332336][T26556] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2234.365166][T26543] bridge0: port 2(bridge_slave_1) entered blocking state [ 2234.395858][T26543] bridge0: port 2(bridge_slave_1) entered disabled state [ 2234.419725][T26543] bridge_slave_1: entered allmulticast mode [ 2234.436974][T26543] bridge_slave_1: entered promiscuous mode [ 2236.340883][T26491] team0: Port device team_slave_0 added [ 2236.350890][T26556] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2236.931458][T26491] team0: Port device team_slave_1 added [ 2236.976053][T26543] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2237.021042][T26543] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2237.081079][T26551] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2237.098670][T26551] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2237.126357][T15426] usb 9-1: new high-speed USB device number 8 using dummy_hcd [ 2237.155107][T26551] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2237.245706][T26556] team0: Port device team_slave_0 added [ 2237.299351][T15426] usb 9-1: Using ep0 maxpacket: 16 [ 2237.315486][T15426] usb 9-1: unable to get BOS descriptor or descriptor too short [ 2237.634509][T26687] loop5: detected capacity change from 0 to 1024 [ 2237.732743][T15426] usb 9-1: config 0 has an invalid interface number: 190 but max is 0 [ 2237.778630][T15426] usb 9-1: config 0 has an invalid descriptor of length 31, skipping remainder of the config [ 2237.860633][T15426] usb 9-1: config 0 has no interface number 0 [ 2237.923453][T15426] usb 9-1: config 0 interface 190 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 4 [ 2238.223218][T15426] usb 9-1: config 0 interface 190 has no altsetting 0 [ 2238.244772][T23720] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2238.266267][T15426] usb 9-1: string descriptor 0 read error: -71 [ 2238.279226][T15426] usb 9-1: New USB device found, idVendor=07c4, idProduct=a103, bcdDevice=62.6a [ 2238.310336][T15426] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2238.338845][T26551] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2238.348260][T15426] usb 9-1: config 0 descriptor?? [ 2238.364463][T26551] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2238.395774][T15426] usb 9-1: can't set config #0, error -71 [ 2238.409513][T15426] usb 9-1: USB disconnect, device number 8 [ 2238.424700][T26551] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2238.511948][T26491] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2238.520748][T26491] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2238.568139][T26491] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2239.892873][T26491] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2239.916188][T26491] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2239.971137][T26491] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2240.027404][T26556] team0: Port device team_slave_1 added [ 2240.171423][T23720] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2240.505674][T26551] hsr_slave_0: entered promiscuous mode [ 2240.515989][T26551] hsr_slave_1: entered promiscuous mode [ 2240.525868][T26551] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 2240.533948][T26551] Cannot create hsr debugfs directory [ 2241.470057][T26556] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2241.477172][T26556] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2241.548850][T26556] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2241.582025][T26543] team0: Port device team_slave_0 added [ 2241.615493][T23720] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2241.671429][T26556] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2241.683941][T26556] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2241.710103][ C1] vkms_vblank_simulate: vblank timer overrun [ 2241.723719][T26556] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2241.754215][T26543] team0: Port device team_slave_1 added [ 2241.860845][T23720] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2243.498398][T26556] hsr_slave_0: entered promiscuous mode [ 2243.549245][T26556] hsr_slave_1: entered promiscuous mode [ 2243.572469][T26556] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 2243.599121][T26556] Cannot create hsr debugfs directory [ 2243.641931][T26491] hsr_slave_0: entered promiscuous mode [ 2243.666793][T26491] hsr_slave_1: entered promiscuous mode [ 2243.744795][T26491] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 2243.788864][T26491] Cannot create hsr debugfs directory [ 2243.819295][T26543] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2243.833252][T26543] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2243.893347][T26543] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2244.000336][T26543] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2244.017683][T26543] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2244.076500][T26543] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2244.322796][T26720] netlink: 40 bytes leftover after parsing attributes in process `syz.8.5659'. [ 2245.298630][T26724] 9pnet_virtio: no channels available for device 127.0.0.1 [ 2246.279453][T26728] netlink: 36 bytes leftover after parsing attributes in process `syz.8.5663'. [ 2246.294848][T26728] netlink: 16 bytes leftover after parsing attributes in process `syz.8.5663'. [ 2246.326225][T26728] netlink: 36 bytes leftover after parsing attributes in process `syz.8.5663'. [ 2246.337900][T26728] netlink: 36 bytes leftover after parsing attributes in process `syz.8.5663'. [ 2246.496510][T26543] hsr_slave_0: entered promiscuous mode [ 2246.509451][T26543] hsr_slave_1: entered promiscuous mode [ 2246.526170][T26543] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 2246.543802][T26543] Cannot create hsr debugfs directory [ 2246.669925][T23720] bridge_slave_1: left allmulticast mode [ 2246.675774][T23720] bridge_slave_1: left promiscuous mode [ 2246.682334][T23720] bridge0: port 2(bridge_slave_1) entered disabled state [ 2246.692511][T23720] bridge_slave_0: left allmulticast mode [ 2246.698276][T23720] bridge_slave_0: left promiscuous mode [ 2246.704892][T23720] bridge0: port 1(bridge_slave_0) entered disabled state [ 2246.716627][T23720] bridge_slave_1: left allmulticast mode [ 2246.724237][T23720] bridge_slave_1: left promiscuous mode [ 2246.732223][T23720] bridge0: port 2(bridge_slave_1) entered disabled state [ 2246.742831][T23720] bridge_slave_0: left allmulticast mode [ 2246.749609][T23720] bridge_slave_0: left promiscuous mode [ 2246.755477][T23720] bridge0: port 1(bridge_slave_0) entered disabled state [ 2246.768335][T23720] bridge_slave_1: left allmulticast mode [ 2246.775031][T23720] bridge_slave_1: left promiscuous mode [ 2246.782610][T23720] bridge0: port 2(bridge_slave_1) entered disabled state [ 2246.794991][T23720] bridge_slave_0: left allmulticast mode [ 2246.801992][T23720] bridge_slave_0: left promiscuous mode [ 2246.807832][T23720] bridge0: port 1(bridge_slave_0) entered disabled state [ 2247.724848][T23720] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2247.746080][T23720] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2247.770948][T23720] bond0 (unregistering): Released all slaves [ 2248.203945][T26735] loop5: detected capacity change from 0 to 64 [ 2248.380623][T23720] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2248.405357][T23720] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2248.435080][T23720] bond0 (unregistering): Released all slaves [ 2248.825358][T23720] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2248.852745][T23720] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2248.874411][T23720] bond0 (unregistering): Released all slaves [ 2249.627515][T26743] netlink: 20 bytes leftover after parsing attributes in process `syz.5.5666'. [ 2251.130265][T26551] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 2251.154968][T26551] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 2251.196802][T26556] netdevsim netdevsim4 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 2251.218409][T26556] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2251.268770][T26551] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 2251.308856][T26551] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 2251.356431][T26556] netdevsim netdevsim4 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 2251.378199][T26556] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2251.412204][T23720] hsr_slave_0: left promiscuous mode [ 2251.440923][T23720] hsr_slave_1: left promiscuous mode [ 2251.463679][T23720] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2251.485377][T23720] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2251.509304][T23720] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2251.523288][T23720] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2251.553117][T23720] hsr_slave_0: left promiscuous mode [ 2251.565308][T23720] hsr_slave_1: left promiscuous mode [ 2251.584709][T23720] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2251.608297][T23720] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2251.616428][T23720] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2251.632912][T23720] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2251.717529][T23720] veth1_macvtap: left promiscuous mode [ 2251.728423][T23720] veth0_macvtap: left promiscuous mode [ 2251.734076][T23720] veth1_vlan: left promiscuous mode [ 2251.758304][T23720] veth0_vlan: left promiscuous mode [ 2251.764882][T23720] veth1_macvtap: left promiscuous mode [ 2251.778236][T23720] veth0_macvtap: left promiscuous mode [ 2251.783913][T23720] veth1_vlan: left promiscuous mode [ 2251.789534][T23720] veth0_vlan: left promiscuous mode [ 2252.702169][T23720] team0 (unregistering): Port device team_slave_1 removed [ 2254.442986][T23720] team0 (unregistering): Port device team_slave_0 removed [ 2254.492561][T26757] loop8: detected capacity change from 0 to 64 [ 2255.762571][T26763] loop5: detected capacity change from 0 to 256 [ 2259.644235][T23720] team0 (unregistering): Port device team_slave_1 removed [ 2259.726282][T23720] team0 (unregistering): Port device team_slave_0 removed [ 2260.349860][T17850] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 2260.372975][T17850] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 2260.398779][T17850] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 2260.406720][T17850] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 2260.414498][T17850] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 2260.425345][T17850] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 2261.230447][T23720] team0 (unregistering): Port device team_slave_1 removed [ 2261.293086][T23720] team0 (unregistering): Port device team_slave_0 removed [ 2262.060891][T26556] netdevsim netdevsim4 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 2262.088087][T26556] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2262.144975][T26776] virt_wifi0 speed is unknown, defaulting to 1000 [ 2262.174416][T26556] netdevsim netdevsim4 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 2262.187884][T26556] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2262.485603][T26551] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2262.538876][T17850] Bluetooth: hci3: command tx timeout [ 2262.608533][T26551] 8021q: adding VLAN 0 to HW filter on device team0 [ 2262.639711][T21587] bridge0: port 1(bridge_slave_0) entered blocking state [ 2262.647933][T21587] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2262.704125][T26776] chnl_net:caif_netlink_parms(): no params data found [ 2262.720548][T23722] bridge0: port 2(bridge_slave_1) entered blocking state [ 2262.727762][T23722] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2262.932969][T26776] bridge0: port 1(bridge_slave_0) entered blocking state [ 2262.940269][T26776] bridge0: port 1(bridge_slave_0) entered disabled state [ 2262.947462][T26776] bridge_slave_0: entered allmulticast mode [ 2262.955227][T26776] bridge_slave_0: entered promiscuous mode [ 2262.983158][T26776] bridge0: port 2(bridge_slave_1) entered blocking state [ 2262.990885][T26776] bridge0: port 2(bridge_slave_1) entered disabled state [ 2262.998841][T26776] bridge_slave_1: entered allmulticast mode [ 2263.006230][T26776] bridge_slave_1: entered promiscuous mode [ 2263.272762][T26543] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2263.314390][T26776] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2263.342220][T26776] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2263.491295][T26543] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2263.564324][T26776] team0: Port device team_slave_0 added [ 2263.599640][T26543] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2263.682877][T26776] team0: Port device team_slave_1 added [ 2263.756985][T26543] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2263.800047][T26776] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2263.807019][T26776] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2263.834313][T26776] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2263.858643][T26776] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2263.865618][T26776] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2263.893015][T26776] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2263.916798][T26551] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2264.010124][T26776] hsr_slave_0: entered promiscuous mode [ 2264.019851][T26776] hsr_slave_1: entered promiscuous mode [ 2264.027789][T26776] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 2264.035391][T26776] Cannot create hsr debugfs directory [ 2264.097329][T26551] veth0_vlan: entered promiscuous mode [ 2264.148962][T23720] IPVS: stop unused estimator thread 0... [ 2264.269436][T26551] veth1_vlan: entered promiscuous mode [ 2264.284858][T26556] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 2264.324224][T26556] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 2264.335300][T26556] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 2264.366894][T23720] bridge_slave_1: left allmulticast mode [ 2264.373341][T23720] bridge_slave_1: left promiscuous mode [ 2264.381192][T23720] bridge0: port 2(bridge_slave_1) entered disabled state [ 2264.396903][T23720] bridge_slave_0: left allmulticast mode [ 2264.403524][T23720] bridge_slave_0: left promiscuous mode [ 2264.410552][T23720] bridge0: port 1(bridge_slave_0) entered disabled state [ 2264.547755][T23720] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2264.560499][T23720] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2264.573261][T23720] bond0 (unregistering): Released all slaves [ 2264.586644][T26556] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 2264.617949][T17850] Bluetooth: hci3: command tx timeout [ 2264.676843][T23720] hsr_slave_0: left promiscuous mode [ 2264.697171][T23720] hsr_slave_1: left promiscuous mode [ 2264.716048][T23720] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2264.724234][T23720] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2264.935920][T23720] team0 (unregistering): Port device team_slave_1 removed [ 2264.992079][T23720] team0 (unregistering): Port device team_slave_0 removed [ 2265.202898][T26551] veth0_macvtap: entered promiscuous mode [ 2265.210589][T26543] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 2265.260054][T26551] veth1_macvtap: entered promiscuous mode [ 2265.278242][T26543] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 2265.288474][T26543] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 2265.313308][T26543] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 2265.456867][T26551] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2265.469268][T26551] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2265.481078][T26551] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2265.492090][T26551] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2265.515764][T26551] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2265.527073][T26551] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2265.537740][T26551] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2265.548717][T26551] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2265.559964][T26551] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2265.570850][T26551] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2265.582316][T26551] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2265.593038][T26551] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2265.603067][T26551] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2265.613579][T26551] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2265.623553][T26551] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2265.634929][T26551] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2265.659580][T26551] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2265.706099][T26776] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 2265.745715][T26551] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2265.767510][T26551] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2265.787417][T26551] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2265.799352][T26551] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2265.809284][T26551] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2265.819897][T26551] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2265.829809][T26551] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2265.840333][T26551] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2265.850435][T26551] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2265.861224][T26551] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2265.872378][T26551] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2265.884638][T26551] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2265.895051][T26551] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2265.906735][T26551] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2265.916883][T26551] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2265.927479][T26551] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2265.938681][T26551] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2265.947491][T26776] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 2265.962290][T26551] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2265.978461][T26551] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2265.988321][T26551] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2265.997066][T26551] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2266.011887][T26776] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 2266.035633][T26776] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 2266.274847][T26556] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2266.298139][T23709] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2266.306084][T23709] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2266.344772][T26556] 8021q: adding VLAN 0 to HW filter on device team0 [ 2266.363805][T26543] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2266.376754][T23720] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2266.387570][T23720] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2266.392082][T26543] 8021q: adding VLAN 0 to HW filter on device team0 [ 2266.414169][T26361] bridge0: port 1(bridge_slave_0) entered blocking state [ 2266.421347][T26361] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2266.471669][T26361] bridge0: port 2(bridge_slave_1) entered blocking state [ 2266.478868][T26361] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2266.574211][T23707] bridge0: port 1(bridge_slave_0) entered blocking state [ 2266.581509][T23707] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2266.661661][T23707] bridge0: port 2(bridge_slave_1) entered blocking state [ 2266.669189][T23707] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2266.697961][T17850] Bluetooth: hci3: command tx timeout [ 2266.972374][T26789] loop1: detected capacity change from 0 to 40427 [ 2266.993751][T26789] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 2267.001645][T26789] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 2267.022233][T26789] F2FS-fs (loop1): invalid crc value [ 2267.034030][T26789] F2FS-fs (loop1): Found nat_bits in checkpoint [ 2267.107581][T26789] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 2267.114821][T26789] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 2267.748383][T26801] tty tty31: ldisc open failed (-12), clearing slot 30 [ 2268.256790][T26804] syz.1.5621: attempt to access beyond end of device [ 2268.256790][T26804] loop1: rw=2049, sector=77824, nr_sectors = 520 limit=40427 [ 2268.837593][T17850] Bluetooth: hci3: command tx timeout [ 2269.071198][T26776] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2269.139879][T26776] 8021q: adding VLAN 0 to HW filter on device team0 [ 2269.191589][T23720] bridge0: port 1(bridge_slave_0) entered blocking state [ 2269.198780][T23720] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2269.219526][T26361] bridge0: port 2(bridge_slave_1) entered blocking state [ 2269.226648][T26361] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2269.473305][T26811] loop8: detected capacity change from 0 to 2048 [ 2269.613489][T26811] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 2269.844223][T26776] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 2269.854813][T26776] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 2271.720504][T25815] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 2271.963409][T26556] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2272.040033][T26197] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 2272.062705][T26197] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 2272.073311][T26197] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 2272.081783][T26197] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 2272.089783][T26197] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 2272.098808][T26197] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 2272.608097][T26838] F2FS-fs (loop11): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 2272.615987][T26838] F2FS-fs (loop11): Can't find valid F2FS filesystem in 1th superblock [ 2272.624867][T26838] F2FS-fs (loop11): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 2272.632864][T26838] F2FS-fs (loop11): Can't find valid F2FS filesystem in 2th superblock [ 2273.238438][T26840] netlink: 20 bytes leftover after parsing attributes in process `syz.8.5678'. [ 2274.267846][T17850] Bluetooth: hci0: command tx timeout [ 2274.304557][T26828] virt_wifi0 speed is unknown, defaulting to 1000 [ 2275.058150][T26776] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2275.105706][ C1] vkms_vblank_simulate: vblank timer overrun [ 2275.368458][T26853] loop1: detected capacity change from 0 to 64 [ 2275.453333][T26197] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 2275.479439][T26197] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 2275.503545][T26197] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 2275.542414][T26197] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 2275.550220][T26197] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 2275.558043][T26197] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 2276.587583][T17850] Bluetooth: hci0: command tx timeout [ 2277.660031][T26197] Bluetooth: hci4: command tx timeout [ 2278.016949][T26828] chnl_net:caif_netlink_parms(): no params data found [ 2279.216652][T26197] Bluetooth: hci0: command tx timeout [ 2280.278352][T17850] Bluetooth: hci4: command tx timeout [ 2281.265300][T17850] Bluetooth: hci0: command tx timeout [ 2282.278561][T26852] virt_wifi0 speed is unknown, defaulting to 1000 [ 2282.298236][T17850] Bluetooth: hci4: command tx timeout [ 2282.997617][ T9] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 2283.353971][ T9] usb 2-1: config 17 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 255, changing to 11 [ 2283.893535][T26828] bridge0: port 1(bridge_slave_0) entered blocking state [ 2283.911513][T26828] bridge0: port 1(bridge_slave_0) entered disabled state [ 2283.933787][ T9] usb 2-1: config 17 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 59391, setting to 1024 [ 2283.952705][ T9] usb 2-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00 [ 2283.962033][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2283.974457][T26889] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 2283.983023][T26828] bridge_slave_0: entered allmulticast mode [ 2283.994260][T26828] bridge_slave_0: entered promiscuous mode [ 2284.022179][T26828] bridge0: port 2(bridge_slave_1) entered blocking state [ 2284.031090][T26828] bridge0: port 2(bridge_slave_1) entered disabled state [ 2284.076545][T26828] bridge_slave_1: entered allmulticast mode [ 2284.694336][T17850] Bluetooth: hci4: command tx timeout [ 2284.741089][T26828] bridge_slave_1: entered promiscuous mode [ 2284.773396][T26776] veth0_vlan: entered promiscuous mode [ 2286.355138][T26828] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2286.428044][T26828] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2286.475272][ T9] aiptek 2-1:17.0: Aiptek using 400 ms programming speed [ 2286.487406][T26776] veth1_vlan: entered promiscuous mode [ 2286.520357][ T9] input: Aiptek as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:17.0/input/input30 [ 2286.627409][ T9] usb 2-1: USB disconnect, device number 6 [ 2286.627476][ C0] aiptek 2-1:17.0: aiptek_irq - usb_submit_urb failed with result -19 [ 2286.807161][T26828] team0: Port device team_slave_0 added [ 2286.870211][T26828] team0: Port device team_slave_1 added [ 2286.926501][T26913] loop1: detected capacity change from 0 to 2048 [ 2286.933662][T26913] ext4: Unknown parameter 'context' [ 2286.986864][T26908] netlink: 40 bytes leftover after parsing attributes in process `syz.1.5695'. [ 2287.977084][ T1292] ieee802154 phy0 wpan0: encryption failed: -22 [ 2287.984355][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 2288.060165][T26908] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5695'. [ 2288.106801][T26828] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2288.113834][T26828] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2288.140103][T26828] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2288.652459][T26828] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2288.662432][T26828] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2288.688417][ C0] vkms_vblank_simulate: vblank timer overrun [ 2289.677692][T26828] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2290.465162][T26776] veth0_macvtap: entered promiscuous mode [ 2291.573277][T26828] hsr_slave_0: entered promiscuous mode [ 2291.611157][T26828] hsr_slave_1: entered promiscuous mode [ 2291.966155][T26828] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 2291.973793][T26828] Cannot create hsr debugfs directory [ 2292.933435][ T9094] bridge_slave_1: left allmulticast mode [ 2292.955943][ T9094] bridge_slave_1: left promiscuous mode [ 2292.961681][ T9094] bridge0: port 2(bridge_slave_1) entered disabled state [ 2293.979376][ T9094] bridge_slave_0: left allmulticast mode [ 2293.985104][ T9094] bridge_slave_0: left promiscuous mode [ 2294.002430][ T9094] bridge0: port 1(bridge_slave_0) entered disabled state [ 2295.144107][ T9094] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2295.159981][ T9094] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2295.173493][ T9094] bond0 (unregistering): Released all slaves [ 2295.199688][T26852] chnl_net:caif_netlink_parms(): no params data found [ 2295.242819][T26776] veth1_macvtap: entered promiscuous mode [ 2295.390339][ T9094] hsr_slave_0: left promiscuous mode [ 2295.396696][ T9094] hsr_slave_1: left promiscuous mode [ 2295.402821][ T9094] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2295.411725][ T9094] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2295.731176][ T9094] team0 (unregistering): Port device team_slave_1 removed [ 2295.801832][ T9094] team0 (unregistering): Port device team_slave_0 removed [ 2296.441033][T26776] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2296.453318][T26776] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2296.464272][T26776] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2296.475043][T26776] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2296.486904][T26776] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2296.498446][T26776] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2296.508969][T26776] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2296.519689][T26776] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2296.529566][T26776] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2296.542041][T26776] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2296.552887][T26776] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2296.563532][T26776] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2296.573465][T26776] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2296.585326][T26776] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2296.595353][T26776] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2296.606985][T26776] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2296.617110][T26776] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2296.627878][T26776] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2296.639187][T26776] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2296.654111][T26852] bridge0: port 1(bridge_slave_0) entered blocking state [ 2296.679307][T26852] bridge0: port 1(bridge_slave_0) entered disabled state [ 2296.696116][T26852] bridge_slave_0: entered allmulticast mode [ 2296.703642][T26852] bridge_slave_0: entered promiscuous mode [ 2296.724263][T26852] bridge0: port 2(bridge_slave_1) entered blocking state [ 2296.732251][T26852] bridge0: port 2(bridge_slave_1) entered disabled state [ 2296.739610][T26852] bridge_slave_1: entered allmulticast mode [ 2296.747000][T26852] bridge_slave_1: entered promiscuous mode [ 2296.793806][T26776] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2296.817045][T26776] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2296.827091][T26776] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2296.837912][T26776] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2296.847921][T26776] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2296.858617][T26776] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2296.868504][T26776] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2296.879114][T26776] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2296.889002][T26776] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2296.900124][T26776] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2296.910225][T26776] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2296.920833][T26776] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2296.930789][T26776] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2296.941365][T26776] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2296.952413][T26776] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2296.963158][T26776] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2296.973050][T26776] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2296.983635][T26776] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2296.995169][T26776] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2297.034119][T26776] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2297.051452][T26776] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2297.062202][T26776] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2297.071296][T26776] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2297.102109][T26852] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2297.152909][T26852] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2297.259560][T26852] team0: Port device team_slave_0 added [ 2297.279094][T26852] team0: Port device team_slave_1 added [ 2297.348722][T26852] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2297.357042][T26852] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2297.383743][T26852] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2297.421139][T26852] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2297.433992][T26852] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2297.462483][T26852] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2297.550487][T26852] hsr_slave_0: entered promiscuous mode [ 2297.557319][T26852] hsr_slave_1: entered promiscuous mode [ 2297.563813][T26852] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 2297.572108][T26852] Cannot create hsr debugfs directory [ 2297.607405][T26361] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2297.615283][T26361] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2297.820814][T26248] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2297.829380][T26248] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2298.036095][T26828] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 2298.063977][T26828] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 2300.393710][T26957] orangefs_mount: mount request failed with -4 [ 2300.979694][T26828] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 2301.330003][T26828] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 2302.785887][T26984] 9pnet_virtio: no channels available for device syz [ 2304.302894][T26828] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2305.218741][T26996] loop1: detected capacity change from 0 to 64 [ 2305.250557][T26828] 8021q: adding VLAN 0 to HW filter on device team0 [ 2305.300229][T26996] hfs: get root inode failed [ 2305.318973][T26993] loop5: detected capacity change from 0 to 2048 [ 2305.383109][T26993] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 2305.544458][T26828] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 2305.646679][T26828] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 2306.649313][T26247] bridge0: port 1(bridge_slave_0) entered blocking state [ 2306.656583][T26247] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2306.935189][T26247] bridge0: port 2(bridge_slave_1) entered blocking state [ 2306.942426][T26247] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2307.909662][T25690] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 2310.645495][ T9094] bridge_slave_1: left allmulticast mode [ 2310.651331][ T9094] bridge_slave_1: left promiscuous mode [ 2311.293553][ T9094] bridge0: port 2(bridge_slave_1) entered disabled state [ 2313.006683][ T9094] bridge_slave_0: left allmulticast mode [ 2313.150450][ T9094] bridge_slave_0: left promiscuous mode [ 2313.170830][ T9094] bridge0: port 1(bridge_slave_0) entered disabled state [ 2316.215445][T27056] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5726'. [ 2316.723649][ T9094] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2316.736843][ T9094] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2316.747776][ T9094] bond0 (unregistering): Released all slaves [ 2316.896155][ T9094] hsr_slave_0: left promiscuous mode [ 2316.902334][ T9094] hsr_slave_1: left promiscuous mode [ 2316.961700][ T9094] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2316.986104][ T9094] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2317.396051][ T9094] team0 (unregistering): Port device team_slave_1 removed [ 2317.459079][ T9094] team0 (unregistering): Port device team_slave_0 removed [ 2318.217869][T26828] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2318.770646][T26852] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 2318.781387][T26852] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 2318.797918][T26828] veth0_vlan: entered promiscuous mode [ 2318.811777][T26828] veth1_vlan: entered promiscuous mode [ 2318.819487][T26852] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 2318.839680][T26852] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 2318.910383][T26828] veth0_macvtap: entered promiscuous mode [ 2318.928985][T26828] veth1_macvtap: entered promiscuous mode [ 2318.970369][T26828] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2318.983683][T26828] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2318.994048][T26828] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2319.006143][T26828] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2319.017980][T26828] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2319.029629][T26828] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2319.040866][T26828] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2319.051889][T26828] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2319.062052][T26828] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2319.073078][T26828] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2319.083292][T26828] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2319.093990][T26828] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2319.104279][T26828] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2319.116843][T26828] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2319.127012][T26828] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2319.137726][T26828] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2319.148768][T26828] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2319.159391][T26828] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2319.169750][T26828] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2319.181080][T26828] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2319.192498][T26828] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2319.210511][T26828] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2319.222301][T26828] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2319.233037][T26828] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2319.247148][T26828] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2319.257241][T26828] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2319.268478][T26828] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2319.279865][T26828] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2319.291577][T26828] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2319.301620][T26828] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2319.312283][T26828] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2319.323906][T26828] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2319.336226][T26828] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2319.347414][T26828] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2319.358569][T26828] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2319.368778][T26828] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2319.379621][T26828] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2319.390126][T26828] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2319.401912][T26828] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2319.412117][T26828] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2319.424183][T26828] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2319.435900][T26828] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2319.458982][T26852] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2319.469635][T26828] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2319.480063][T26828] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2319.490286][T26828] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2319.500867][T26828] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2319.528655][T26852] 8021q: adding VLAN 0 to HW filter on device team0 [ 2319.556442][T23707] bridge0: port 1(bridge_slave_0) entered blocking state [ 2319.563592][T23707] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2319.611395][T21587] bridge0: port 2(bridge_slave_1) entered blocking state [ 2319.618759][T21587] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2319.692112][ T2979] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2319.701233][ T2979] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2319.771892][T23707] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2319.785409][T23707] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2325.318503][T27095] loop9: detected capacity change from 0 to 64 [ 2325.957521][T27101] loop5: detected capacity change from 0 to 40427 [ 2326.043888][T27101] F2FS-fs (loop5): Invalid log_blocksize (268), supports only 12 [ 2326.051806][T27101] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock [ 2326.070416][T27101] F2FS-fs (loop5): invalid crc value [ 2326.221578][T27101] F2FS-fs (loop5): Found nat_bits in checkpoint [ 2326.505121][T26852] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2326.694195][T27101] F2FS-fs (loop5): Try to recover 1th superblock, ret: 0 [ 2326.703029][T27101] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5 [ 2328.160633][T27118] syz.5.5730: attempt to access beyond end of device [ 2328.160633][T27118] loop5: rw=2049, sector=77824, nr_sectors = 520 limit=40427 [ 2331.730039][T26852] veth0_vlan: entered promiscuous mode [ 2332.250198][T26852] veth1_vlan: entered promiscuous mode [ 2332.279433][T26852] veth0_macvtap: entered promiscuous mode [ 2333.729361][T26852] veth1_macvtap: entered promiscuous mode [ 2335.798163][T26852] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2336.583461][T17850] Bluetooth: hci7: command 0x0406 tx timeout [ 2336.613395][T26852] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2338.090906][T26852] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2338.316946][T26852] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2338.384066][T26852] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2339.981227][T26852] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2341.110628][T17850] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 2341.124077][T17850] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 2341.136640][T17850] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 2341.197440][T17850] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 2341.204803][T26852] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2341.207790][T17850] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 2341.226731][T26852] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2341.233439][T17850] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 2342.232269][T26852] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2342.254666][T26852] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2343.211998][T26852] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2343.222717][T26852] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2343.232864][T26852] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2343.243555][T26852] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2343.255987][T26852] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2343.267077][T26852] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2343.278252][T26852] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2343.289518][T26852] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2343.300259][T26852] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2343.315250][T26852] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2343.325477][T26852] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2343.336975][T26852] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2343.349112][T26852] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2343.630524][T27189] virt_wifi0 speed is unknown, defaulting to 1000 [ 2344.321554][T26197] Bluetooth: hci5: command tx timeout [ 2344.965615][T27189] chnl_net:caif_netlink_parms(): no params data found [ 2345.200071][T27189] bridge0: port 1(bridge_slave_0) entered blocking state [ 2345.207783][T27189] bridge0: port 1(bridge_slave_0) entered disabled state [ 2345.215734][T27189] bridge_slave_0: entered allmulticast mode [ 2345.226767][T27189] bridge_slave_0: entered promiscuous mode [ 2345.236123][T27189] bridge0: port 2(bridge_slave_1) entered blocking state [ 2345.243921][T27189] bridge0: port 2(bridge_slave_1) entered disabled state [ 2345.251325][T27189] bridge_slave_1: entered allmulticast mode [ 2345.265760][T27189] bridge_slave_1: entered promiscuous mode [ 2345.304557][T27189] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2345.318645][T27189] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2345.437185][T27189] team0: Port device team_slave_0 added [ 2345.446943][T27189] team0: Port device team_slave_1 added [ 2345.569784][T27189] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2345.577570][T27189] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2345.604656][T27189] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2345.661788][T27189] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2345.669496][T27189] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2345.696626][T27189] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2345.780218][T27189] hsr_slave_0: entered promiscuous mode [ 2345.787747][T27189] hsr_slave_1: entered promiscuous mode [ 2345.794884][T27189] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 2345.802499][T27189] Cannot create hsr debugfs directory [ 2345.862186][ T7949] bridge_slave_1: left allmulticast mode [ 2345.868922][ T7949] bridge_slave_1: left promiscuous mode [ 2345.877198][ T7949] bridge0: port 2(bridge_slave_1) entered disabled state [ 2345.887085][ T7949] bridge_slave_0: left allmulticast mode [ 2345.892763][ T7949] bridge_slave_0: left promiscuous mode [ 2345.899005][ T7949] bridge0: port 1(bridge_slave_0) entered disabled state [ 2346.387857][T26197] Bluetooth: hci5: command tx timeout [ 2346.602839][ T7949] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2346.615157][ T7949] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2346.626589][ T7949] bond0 (unregistering): Released all slaves [ 2346.784331][ T7949] hsr_slave_0: left promiscuous mode [ 2346.803210][ T7949] hsr_slave_1: left promiscuous mode [ 2346.809689][ T7949] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2346.818943][ T7949] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2346.827351][ T7949] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2346.854532][ T7949] veth1_macvtap: left promiscuous mode [ 2346.861448][ T7949] veth0_macvtap: left promiscuous mode [ 2346.867825][ T7949] veth1_vlan: left promiscuous mode [ 2346.873948][ T7949] veth0_vlan: left promiscuous mode [ 2347.775548][ T7949] team0 (unregistering): Port device team_slave_1 removed [ 2347.881694][ T7949] team0 (unregistering): Port device team_slave_0 removed [ 2348.453164][T26197] Bluetooth: hci5: command tx timeout [ 2349.260976][ T1292] ieee802154 phy0 wpan0: encryption failed: -22 [ 2349.282905][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 2349.359878][T27189] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 2349.372061][T27189] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 2349.382508][T27189] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 2349.398047][T27189] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 2349.476728][T27189] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2349.500762][T27189] 8021q: adding VLAN 0 to HW filter on device team0 [ 2349.515302][T23867] bridge0: port 1(bridge_slave_0) entered blocking state [ 2349.522578][T23867] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2349.541193][T23709] bridge0: port 2(bridge_slave_1) entered blocking state [ 2349.548412][T23709] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2349.790245][T27189] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2350.087323][T27189] veth0_vlan: entered promiscuous mode [ 2350.108113][T27189] veth1_vlan: entered promiscuous mode [ 2350.158344][T27189] veth0_macvtap: entered promiscuous mode [ 2350.168495][T27189] veth1_macvtap: entered promiscuous mode [ 2350.187823][T27189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2350.199509][T27189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2350.209553][T27189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2350.233122][T27189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2350.245890][T27189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2350.257201][T27189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2350.267744][T27189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2350.278911][T27189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2350.289762][T27189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2350.302281][T27189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2350.313597][T27189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2350.324171][T27189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2350.334278][T27189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2350.346834][T27189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2350.357769][T27189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2350.368620][T27189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2350.380607][T27189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2350.391366][T27189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2350.402055][T27189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2350.415458][T27189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2350.425951][T27189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2350.436890][T27189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2350.450496][T27189] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2350.475357][T27189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2350.488986][T27189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2350.500350][T27189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2350.511430][T27189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2350.521723][T27189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2350.534687][T26197] Bluetooth: hci5: command tx timeout [ 2350.540716][T27189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2350.553668][T27189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2350.565487][T27189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2350.575861][T27189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2350.586721][T27189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2350.598692][T27189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2350.609408][T27189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2350.619630][T27189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2350.630246][T27189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2350.640430][T27189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2350.652389][T27189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2350.662989][T27189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2350.674009][T27189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2350.684116][T27189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2350.695059][T27189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2350.705343][T27189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2350.716028][T27189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2350.727590][T27189] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2350.746366][T27189] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2350.759566][T27189] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2350.769969][T27189] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2350.779419][T27189] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2350.911519][T23709] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2350.932968][T23709] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2350.960932][T26361] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2350.969728][T26361] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2353.374537][T27232] loop8: detected capacity change from 0 to 1024 [ 2353.381954][T27232] EXT4-fs: Ignoring removed orlov option [ 2353.395484][T27234] loop5: detected capacity change from 0 to 512 [ 2353.419702][T27232] EXT4-fs (loop8): Test dummy encryption mode enabled [ 2353.655810][T27231] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5766'. [ 2355.644631][T27232] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 2355.700156][T25815] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 2356.229157][T27247] loop4: detected capacity change from 0 to 64 [ 2356.576543][T27253] loop5: detected capacity change from 0 to 1024 [ 2365.547378][T27304] loop8: detected capacity change from 0 to 512 [ 2367.471777][T27304] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 2367.484435][T27304] ext4 filesystem being mounted at /82/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 2367.673137][ T29] audit: type=1800 audit(2000001580.308:664): pid=27304 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.8.5775" name="file1" dev="loop8" ino=15 res=0 errno=0 [ 2367.862836][T27316] loop5: detected capacity change from 0 to 512 [ 2368.016624][ T29] audit: type=1326 audit(2000001580.378:665): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27302 comm="syz.8.5775" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fce48b85d29 code=0x7ffc0000 [ 2368.153648][T27316] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 2368.216389][T25815] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 2368.241719][ T29] audit: type=1326 audit(2000001580.378:666): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27302 comm="syz.8.5775" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fce48b85d29 code=0x7ffc0000 [ 2368.274108][T27316] ext4 filesystem being mounted at /88/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 2368.341646][ T29] audit: type=1326 audit(2000001580.378:667): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27302 comm="syz.8.5775" exe="/root/syz-executor" sig=0 arch=c000003e syscall=2 compat=0 ip=0x7fce48b85d29 code=0x7ffc0000 [ 2368.431671][ T29] audit: type=1326 audit(2000001580.398:668): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27302 comm="syz.8.5775" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fce48b85d29 code=0x7ffc0000 [ 2369.746218][ T29] audit: type=1326 audit(2000001580.398:669): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27302 comm="syz.8.5775" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fce48b85d29 code=0x7ffc0000 [ 2370.832868][T25690] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 2371.165733][T27338] loop8: detected capacity change from 0 to 32768 [ 2371.277703][T27344] loop9: detected capacity change from 0 to 1024 [ 2371.385669][T27338] XFS (loop8): Mounting V5 Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab [ 2372.310326][T27338] XFS (loop8): Ending clean mount [ 2372.407447][T27338] XFS (loop8): Quotacheck needed: Please wait. [ 2372.564125][T23707] hfsplus: b-tree write err: -5, ino 4 [ 2372.761500][T27338] XFS (loop8): Quotacheck: Done. [ 2378.867730][T25815] XFS (loop8): Unmounting Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab [ 2382.523580][T17850] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 2382.611855][T17850] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 2383.586657][T17850] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 2383.599499][T17850] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 2383.607527][T17850] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 2384.214890][T17850] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 2386.741565][T17850] Bluetooth: hci4: command tx timeout [ 2386.751424][T27416] loop9: detected capacity change from 0 to 1024 [ 2387.208395][T27422] netlink: 4 bytes leftover after parsing attributes in process `syz.8.5789'. [ 2387.220702][T27422] netlink: 4 bytes leftover after parsing attributes in process `syz.8.5789'. [ 2388.617917][T26361] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2389.579075][T17850] Bluetooth: hci4: command tx timeout [ 2391.480142][T27391] virt_wifi0 speed is unknown, defaulting to 1000 [ 2392.430608][T17850] Bluetooth: hci4: command tx timeout [ 2393.265939][T26361] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2393.702133][T26361] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2394.557041][T17850] Bluetooth: hci4: command tx timeout [ 2395.381170][T27454] atomic_op ffff888079c58998 conn xmit_atomic 0000000000000000 [ 2397.664720][T26197] Bluetooth: hci0: command 0x0406 tx timeout [ 2398.264966][T26361] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2400.574405][T27474] workqueue: Failed to create a rescuer kthread for wq "ceph-completion": -EINTR [ 2402.031912][T26197] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 2402.056974][T26197] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 2402.065442][T26197] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 2402.074845][T26197] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 2402.082716][T26197] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 2402.186081][T26197] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 2404.461976][T17850] Bluetooth: hci3: command tx timeout [ 2404.688240][T27506] random: crng reseeded on system resumption [ 2405.440155][T26361] bridge_slave_1: left allmulticast mode [ 2405.446107][T26361] bridge_slave_1: left promiscuous mode [ 2405.493088][T26361] bridge0: port 2(bridge_slave_1) entered disabled state [ 2405.794237][T26361] bridge_slave_0: left allmulticast mode [ 2406.619599][T26197] Bluetooth: hci3: command tx timeout [ 2406.771388][T26361] bridge_slave_0: left promiscuous mode [ 2407.055748][T26361] bridge0: port 1(bridge_slave_0) entered disabled state [ 2408.739427][T26197] Bluetooth: hci3: command tx timeout [ 2409.837829][T27521] loop9: detected capacity change from 0 to 32768 [ 2409.918861][T27521] ocfs2: Mounting device (7,9) on (node local, slot 0) with ordered data mode. [ 2410.289905][T27527] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 2410.701426][ T1292] ieee802154 phy0 wpan0: encryption failed: -22 [ 2410.780451][T26197] Bluetooth: hci3: command tx timeout [ 2411.019347][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 2411.041105][ T29] audit: type=1800 audit(2000000016.140:670): pid=27521 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.9.5824" name="file1" dev="loop9" ino=17058 res=0 errno=0 [ 2413.944143][T26828] ocfs2: Unmounting device (7,9) on (node local) [ 2413.953159][T27542] loop8: detected capacity change from 0 to 1024 [ 2417.945724][T27560] loop9: detected capacity change from 0 to 512 [ 2418.006797][T27560] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 2418.089560][T27560] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 2418.154225][T27560] ext4 filesystem being mounted at /21/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 2418.659009][T17850] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 2418.671566][T17850] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 2418.680098][T17850] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 2418.691674][T17850] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 2418.701129][T17850] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 2418.708485][T17850] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 2419.676468][ T29] audit: type=1800 audit(2000000024.751:671): pid=27560 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.9.5828" name="file1" dev="loop9" ino=15 res=0 errno=0 [ 2421.091189][T26197] Bluetooth: hci1: command tx timeout [ 2421.566598][T26828] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 2421.892418][T27584] [ 2421.894793][T27584] ====================================================== [ 2421.901814][T27584] WARNING: possible circular locking dependency detected [ 2421.908928][T27584] 6.13.0-syzkaller-01268-gc0e75905caf3 #0 Not tainted [ 2421.915697][T27584] ------------------------------------------------------ [ 2421.922720][T27584] syz.1.5838/27584 is trying to acquire lock: [ 2421.928797][T27584] ffff88802894a330 (&q->sysfs_lock){+.+.}-{4:4}, at: blk_register_queue+0x132/0x4f0 [ 2421.938375][T27584] [ 2421.938375][T27584] but task is already holding lock: [ 2421.945742][T27584] ffff88802894a3c0 (&q->sysfs_dir_lock){+.+.}-{4:4}, at: blk_register_queue+0x5c/0x4f0 [ 2421.955454][T27584] [ 2421.955454][T27584] which lock already depends on the new lock. [ 2421.955454][T27584] [ 2421.965865][T27584] [ 2421.965865][T27584] the existing dependency chain (in reverse order) is: [ 2421.974885][T27584] [ 2421.974885][T27584] -> #8 (&q->sysfs_dir_lock){+.+.}-{4:4}: [ 2421.982951][T27584] __mutex_lock+0x19b/0xb10 [ 2421.988030][T27584] blk_mq_sysfs_unregister_hctxs+0x92/0x2d0 [ 2421.994473][T27584] blk_mq_update_nr_hw_queues+0x8c1/0x1290 [ 2422.000844][T27584] nbd_start_device+0x172/0xcc0 [ 2422.006257][T27584] nbd_ioctl+0x21a/0xd60 [ 2422.011063][T27584] blkdev_ioctl+0x279/0x6d0 [ 2422.016119][T27584] __x64_sys_ioctl+0x193/0x200 [ 2422.021460][T27584] do_syscall_64+0xcd/0x250 [ 2422.026518][T27584] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2422.032972][T27584] [ 2422.032972][T27584] -> #7 (&q->q_usage_counter(io)#49){++++}-{0:0}: [ 2422.041630][T27584] blk_mq_submit_bio+0x20db/0x25f0 [ 2422.047303][T27584] __submit_bio+0x3d1/0x690 [ 2422.052356][T27584] submit_bio_noacct_nocheck+0x698/0xd70 [ 2422.058548][T27584] submit_bio_noacct+0x50d/0x1ec0 [ 2422.064123][T27584] block_read_full_folio+0x812/0xa50 [ 2422.069957][T27584] filemap_read_folio+0xc9/0x2a0 [ 2422.075437][T27584] filemap_get_pages+0x155f/0x1be0 [ 2422.081091][T27584] filemap_read+0x3ca/0xd70 [ 2422.086134][T27584] blkdev_read_iter+0x187/0x480 [ 2422.091545][T27584] vfs_read+0x882/0xbe0 [ 2422.096236][T27584] ksys_read+0x12b/0x250 [ 2422.101015][T27584] do_syscall_64+0xcd/0x250 [ 2422.106071][T27584] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2422.112520][T27584] [ 2422.112520][T27584] -> #6 (mapping.invalidate_lock#2){++++}-{4:4}: [ 2422.121085][T27584] down_read+0x9a/0x330 [ 2422.125797][T27584] filemap_fault+0x62c/0x2820 [ 2422.131018][T27584] __do_fault+0x10d/0x490 [ 2422.135910][T27584] do_pte_missing+0xebd/0x3e00 [ 2422.141221][T27584] __handle_mm_fault+0x103c/0x2a40 [ 2422.146878][T27584] handle_mm_fault+0x3fa/0xaa0 [ 2422.152214][T27584] do_user_addr_fault+0x7a3/0x13f0 [ 2422.157897][T27584] exc_page_fault+0x5c/0xc0 [ 2422.162953][T27584] asm_exc_page_fault+0x26/0x30 [ 2422.168358][T27584] _copy_from_iter+0x380/0x1560 [ 2422.173758][T27584] tipc_msg_build+0x308/0x1120 [ 2422.179059][T27584] __tipc_sendstream+0x6fa/0x1190 [ 2422.184639][T27584] tipc_sendstream+0x4f/0x70 [ 2422.189793][T27584] sock_write_iter+0x501/0x5b0 [ 2422.195105][T27584] vfs_write+0x5b1/0x1150 [ 2422.199973][T27584] ksys_write+0x207/0x250 [ 2422.204845][T27584] do_syscall_64+0xcd/0x250 [ 2422.209904][T27584] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2422.216358][T27584] [ 2422.216358][T27584] -> #5 (&mm->mmap_lock){++++}-{4:4}: [ 2422.223957][T27584] __might_fault+0x11b/0x190 [ 2422.229109][T27584] _copy_from_user+0x29/0xd0 [ 2422.234259][T27584] csum_and_copy_from_iter_full+0x218/0x1e20 [ 2422.240795][T27584] ip_generic_getfrag+0x175/0x260 [ 2422.246369][T27584] raw6_getfrag+0x22d/0x2a0 [ 2422.251431][T27584] __ip6_append_data.isra.0+0x2dcd/0x45e0 [ 2422.257694][T27584] ip6_append_data+0x1e6/0x500 [ 2422.263004][T27584] rawv6_sendmsg+0x1584/0x4440 [ 2422.268332][T27584] inet_sendmsg+0x11c/0x140 [ 2422.273389][T27584] ____sys_sendmsg+0x98c/0xc90 [ 2422.278703][T27584] ___sys_sendmsg+0x135/0x1e0 [ 2422.283938][T27584] __sys_sendmsg+0x16e/0x220 [ 2422.289174][T27584] do_syscall_64+0xcd/0x250 [ 2422.294230][T27584] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2422.300680][T27584] [ 2422.300680][T27584] -> #4 (sk_lock-AF_INET6){+.+.}-{0:0}: [ 2422.308449][T27584] lock_sock_nested+0x3a/0xf0 [ 2422.313693][T27584] inet_shutdown+0x67/0x440 [ 2422.318749][T27584] nbd_mark_nsock_dead+0xae/0x5d0 [ 2422.324327][T27584] recv_work+0x691/0xaa0 [ 2422.329136][T27584] process_one_work+0x9c8/0x1ba0 [ 2422.334624][T27584] worker_thread+0x6c8/0xf00 [ 2422.339767][T27584] kthread+0x2c4/0x3a0 [ 2422.344400][T27584] ret_from_fork+0x48/0x80 [ 2422.349534][T27584] ret_from_fork_asm+0x1a/0x30 [ 2422.354861][T27584] [ 2422.354861][T27584] -> #3 (&nsock->tx_lock){+.+.}-{4:4}: [ 2422.362543][T27584] __mutex_lock+0x19b/0xb10 [ 2422.367599][T27584] nbd_queue_rq+0x424/0x1220 [ 2422.372928][T27584] blk_mq_dispatch_rq_list+0x446/0x1dc0 [ 2422.379029][T27584] __blk_mq_sched_dispatch_requests+0xcdf/0x1620 [ 2422.385901][T27584] blk_mq_sched_dispatch_requests+0xd8/0x1b0 [ 2422.392427][T27584] blk_mq_run_work_fn+0x135/0x380 [ 2422.397995][T27584] process_one_work+0x9c8/0x1ba0 [ 2422.403479][T27584] worker_thread+0x6c8/0xf00 [ 2422.408614][T27584] kthread+0x2c4/0x3a0 [ 2422.413242][T27584] ret_from_fork+0x48/0x80 [ 2422.418199][T27584] ret_from_fork_asm+0x1a/0x30 [ 2422.423522][T27584] [ 2422.423522][T27584] -> #2 (&cmd->lock){+.+.}-{4:4}: [ 2422.430775][T27584] __mutex_lock+0x19b/0xb10 [ 2422.435832][T27584] nbd_queue_rq+0xbe/0x1220 [ 2422.440900][T27584] blk_mq_dispatch_rq_list+0x446/0x1dc0 [ 2422.447000][T27584] __blk_mq_sched_dispatch_requests+0xcdf/0x1620 [ 2422.453881][T27584] blk_mq_sched_dispatch_requests+0xd8/0x1b0 [ 2422.460421][T27584] blk_mq_run_work_fn+0x135/0x380 [ 2422.465993][T27584] process_one_work+0x9c8/0x1ba0 [ 2422.471477][T27584] worker_thread+0x6c8/0xf00 [ 2422.476613][T27584] kthread+0x2c4/0x3a0 [ 2422.481247][T27584] ret_from_fork+0x48/0x80 [ 2422.486204][T27584] ret_from_fork_asm+0x1a/0x30 [ 2422.491525][T27584] [ 2422.491525][T27584] -> #1 (set->srcu){.+.+}-{0:0}: [ 2422.498687][T27584] __synchronize_srcu+0xa9/0x2a0 [ 2422.504178][T27584] blk_mq_quiesce_queue+0x149/0x1b0 [ 2422.509918][T27584] elevator_disable+0x70/0x490 [ 2422.515231][T27584] blk_mq_update_nr_hw_queues+0x3a0/0x1290 [ 2422.521594][T27584] nbd_start_device+0x172/0xcc0 [ 2422.527029][T27584] nbd_ioctl+0x21a/0xd60 [ 2422.531852][T27584] blkdev_ioctl+0x279/0x6d0 [ 2422.536914][T27584] __x64_sys_ioctl+0x193/0x200 [ 2422.542240][T27584] do_syscall_64+0xcd/0x250 [ 2422.547300][T27584] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2422.553752][T27584] [ 2422.553752][T27584] -> #0 (&q->sysfs_lock){+.+.}-{4:4}: [ 2422.561349][T27584] __lock_acquire+0x249e/0x3c40 [ 2422.566750][T27584] lock_acquire.part.0+0x11b/0x380 [ 2422.572423][T27584] __mutex_lock+0x19b/0xb10 [ 2422.577492][T27584] blk_register_queue+0x132/0x4f0 [ 2422.583058][T27584] add_disk_fwnode+0x8b6/0x1320 [ 2422.588468][T27584] md_alloc+0x3c2/0x1080 [ 2422.593263][T27584] md_probe+0x6e/0xd0 [ 2422.597780][T27584] blk_probe_dev+0x119/0x1a0 [ 2422.602919][T27584] blk_request_module+0x16/0xb0 [ 2422.608326][T27584] blkdev_get_no_open+0x7a/0xe0 [ 2422.613731][T27584] bdev_file_open_by_dev+0x6b/0x210 [ 2422.619484][T27584] swsusp_check+0x74/0x420 [ 2422.624443][T27584] software_resume+0x6d/0x400 [ 2422.629676][T27584] resume_store+0x249/0x460 [ 2422.634825][T27584] kobj_attr_store+0x58/0x80 [ 2422.639982][T27584] sysfs_kf_write+0x11a/0x170 [ 2422.645219][T27584] kernfs_fop_write_iter+0x340/0x500 [ 2422.651076][T27584] vfs_write+0x5b1/0x1150 [ 2422.656031][T27584] ksys_write+0x12b/0x250 [ 2422.660985][T27584] do_syscall_64+0xcd/0x250 [ 2422.666040][T27584] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2422.672486][T27584] [ 2422.672486][T27584] other info that might help us debug this: [ 2422.672486][T27584] [ 2422.682717][T27584] Chain exists of: [ 2422.682717][T27584] &q->sysfs_lock --> &q->q_usage_counter(io)#49 --> &q->sysfs_dir_lock [ 2422.682717][T27584] [ 2422.696952][T27584] Possible unsafe locking scenario: [ 2422.696952][T27584] [ 2422.704404][T27584] CPU0 CPU1 [ 2422.709774][T27584] ---- ---- [ 2422.715143][T27584] lock(&q->sysfs_dir_lock); [ 2422.719840][T27584] lock(&q->q_usage_counter(io)#49); [ 2422.727766][T27584] lock(&q->sysfs_dir_lock); [ 2422.734984][T27584] lock(&q->sysfs_lock); [ 2422.739338][T27584] [ 2422.739338][T27584] *** DEADLOCK *** [ 2422.739338][T27584] [ 2422.747576][T27584] 8 locks held by syz.1.5838/27584: [ 2422.752798][T27584] #0: ffff8880351a30b8 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x267/0x390 [ 2422.761921][T27584] #1: ffff888030dc6420 (sb_writers#8){.+.+}-{0:0}, at: ksys_write+0x12b/0x250 [ 2422.770961][T27584] #2: ffff8880217a0488 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x27b/0x500 [ 2422.780786][T27584] #3: ffff888142290a58 (kn->active#69){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x29e/0x500 [ 2422.790882][T27584] #4: ffffffff8e0839a8 (system_transition_mutex){+.+.}-{4:4}, at: software_resume+0x63/0x400 [ 2422.801227][T27584] #5: ffffffff8ecd8c88 (major_names_lock){+.+.}-{4:4}, at: blk_probe_dev+0x25/0x1a0 [ 2422.810783][T27584] #6: ffffffff8fa5bb88 (disks_mutex){+.+.}-{4:4}, at: md_alloc+0x3e/0x1080 [ 2422.819634][T27584] #7: ffff88802894a3c0 (&q->sysfs_dir_lock){+.+.}-{4:4}, at: blk_register_queue+0x5c/0x4f0 [ 2422.829797][T27584] [ 2422.829797][T27584] stack backtrace: [ 2422.835697][T27584] CPU: 0 UID: 0 PID: 27584 Comm: syz.1.5838 Not tainted 6.13.0-syzkaller-01268-gc0e75905caf3 #0 [ 2422.835750][T27584] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 2422.835776][T27584] Call Trace: [ 2422.835789][T27584] [ 2422.835808][T27584] dump_stack_lvl+0x116/0x1f0 [ 2422.835872][T27584] print_circular_bug+0x490/0x760 [ 2422.835930][T27584] check_noncircular+0x31a/0x400 [ 2422.835974][T27584] ? __pfx_check_noncircular+0x10/0x10 [ 2422.836012][T27584] ? srso_alias_return_thunk+0x5/0xfbef5 [ 2422.836069][T27584] ? kernfs_add_one+0x39d/0x520 [ 2422.836111][T27584] ? lockdep_lock+0xc6/0x200 [ 2422.836142][T27584] ? __pfx_lockdep_lock+0x10/0x10 [ 2422.836173][T27584] ? up_write+0x1b2/0x520 [ 2422.836221][T27584] __lock_acquire+0x249e/0x3c40 [ 2422.836272][T27584] ? __pfx___lock_acquire+0x10/0x10 [ 2422.836313][T27584] ? srso_alias_return_thunk+0x5/0xfbef5 [ 2422.836369][T27584] ? sysfs_add_file_mode_ns+0x227/0x3b0 [ 2422.836425][T27584] lock_acquire.part.0+0x11b/0x380 [ 2422.836468][T27584] ? blk_register_queue+0x132/0x4f0 [ 2422.836505][T27584] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 2422.836549][T27584] ? srso_alias_return_thunk+0x5/0xfbef5 [ 2422.836605][T27584] ? rcu_is_watching+0x12/0xc0 [ 2422.836664][T27584] ? srso_alias_return_thunk+0x5/0xfbef5 [ 2422.836720][T27584] ? trace_lock_acquire+0x14e/0x1f0 [ 2422.836752][T27584] ? blk_register_queue+0x132/0x4f0 [ 2422.836786][T27584] ? srso_alias_return_thunk+0x5/0xfbef5 [ 2422.836842][T27584] ? lock_acquire+0x2f/0xb0 [ 2422.836882][T27584] ? blk_register_queue+0x132/0x4f0 [ 2422.836919][T27584] __mutex_lock+0x19b/0xb10 [ 2422.836964][T27584] ? blk_register_queue+0x132/0x4f0 [ 2422.836998][T27584] ? kernfs_get+0x1f/0x30 [ 2422.837028][T27584] ? srso_alias_return_thunk+0x5/0xfbef5 [ 2422.837084][T27584] ? kobject_add_internal+0x54e/0x990 [ 2422.837136][T27584] ? blk_register_queue+0x132/0x4f0 [ 2422.837169][T27584] ? srso_alias_return_thunk+0x5/0xfbef5 [ 2422.837226][T27584] ? __pfx___mutex_lock+0x10/0x10 [ 2422.837272][T27584] ? srso_alias_return_thunk+0x5/0xfbef5 [ 2422.837327][T27584] ? kobject_add+0x17c/0x240 [ 2422.837379][T27584] ? srso_alias_return_thunk+0x5/0xfbef5 [ 2422.837446][T27584] ? blk_register_queue+0x132/0x4f0 [ 2422.837479][T27584] ? srso_alias_return_thunk+0x5/0xfbef5 [ 2422.837534][T27584] blk_register_queue+0x132/0x4f0 [ 2422.837572][T27584] add_disk_fwnode+0x8b6/0x1320 [ 2422.837627][T27584] md_alloc+0x3c2/0x1080 [ 2422.837669][T27584] md_probe+0x6e/0xd0 [ 2422.837701][T27584] ? __pfx_md_probe+0x10/0x10 [ 2422.837733][T27584] blk_probe_dev+0x119/0x1a0 [ 2422.837776][T27584] blk_request_module+0x16/0xb0 [ 2422.837826][T27584] blkdev_get_no_open+0x7a/0xe0 [ 2422.837876][T27584] bdev_file_open_by_dev+0x6b/0x210 [ 2422.837928][T27584] swsusp_check+0x74/0x420 [ 2422.837964][T27584] software_resume+0x6d/0x400 [ 2422.838013][T27584] resume_store+0x249/0x460 [ 2422.838063][T27584] ? __pfx_resume_store+0x10/0x10 [ 2422.838114][T27584] ? mark_held_locks+0x9f/0xe0 [ 2422.838156][T27584] ? irqentry_exit+0x3b/0x90 [ 2422.838201][T27584] ? lockdep_hardirqs_on+0x7c/0x110 [ 2422.838249][T27584] ? __pfx_resume_store+0x10/0x10 [ 2422.838299][T27584] kobj_attr_store+0x58/0x80 [ 2422.838345][T27584] ? __pfx_kobj_attr_store+0x10/0x10 [ 2422.838393][T27584] sysfs_kf_write+0x11a/0x170 [ 2422.838442][T27584] kernfs_fop_write_iter+0x340/0x500 [ 2422.838498][T27584] ? __pfx_sysfs_kf_write+0x10/0x10 [ 2422.838556][T27584] vfs_write+0x5b1/0x1150 [ 2422.838598][T27584] ? __pfx_kernfs_fop_write_iter+0x10/0x10 [ 2422.838663][T27584] ? __pfx___mutex_lock+0x10/0x10 [ 2422.838726][T27584] ? __pfx_vfs_write+0x10/0x10 [ 2422.838790][T27584] ksys_write+0x12b/0x250 [ 2422.838834][T27584] ? __pfx_ksys_write+0x10/0x10 [ 2422.838880][T27584] ? srso_alias_return_thunk+0x5/0xfbef5 [ 2422.838965][T27584] do_syscall_64+0xcd/0x250 [ 2422.839032][T27584] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2422.839099][T27584] RIP: 0033:0x7f4316585d29 [ 2422.839132][T27584] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 2422.839178][T27584] RSP: 002b:00007f43143b4038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 2422.839218][T27584] RAX: ffffffffffffffda RBX: 00007f4316776160 RCX: 00007f4316585d29 [ 2422.839241][T27584] RDX: 0000000000000012 RSI: 0000000020000000 RDI: 0000000000000005 [ 2422.839263][T27584] RBP: 00007f4316601b08 R08: 0000000000000000 R09: 0000000000000000 [ 2422.839283][T27584] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2422.839304][T27584] R13: 0000000000000000 R14: 00007f4316776160 R15: 00007ffd542c7e58 [ 2422.839337][T27584] [ 2423.322015][T27584] PM: Image not found (code -6) SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 2424.920859][T26197] Bluetooth: hci1: command tx timeout [ 2425.091608][T26361] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2425.176751][T26361] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2425.238051][T26361] bond0 (unregistering): Released all slaves [ 2425.254369][T27490] virt_wifi0 speed is unknown, defaulting to 1000 [ 2425.851774][T26361] hsr_slave_0: left promiscuous mode [ 2425.857795][T26361] hsr_slave_1: left promiscuous mode [ 2425.873418][T26361] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2425.887544][T26361] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2425.919322][T26361] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2425.926896][T26361] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2425.959072][T26361] veth1_macvtap: left promiscuous mode [ 2425.964629][T26361] veth0_macvtap: left promiscuous mode [ 2425.982041][T26361] veth1_vlan: left promiscuous mode [ 2425.987343][T26361] veth0_vlan: left promiscuous mode [ 2426.312223][T26361] team0 (unregistering): Port device team_slave_1 removed [ 2426.361640][T26361] team0 (unregistering): Port device team_slave_0 removed [ 2426.821412][T26361] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2426.856886][T26361] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2426.902641][T26361] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2426.963597][T26361] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2427.055136][T26361] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2427.122474][T26361] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2427.184665][T26361] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2427.223396][T26361] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2427.304234][T26361] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2427.346883][T26361] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2427.405951][T26361] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2427.453906][T26361] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2427.520665][T26361] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2427.587405][T26361] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2427.643387][T26361] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2427.683376][T26361] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2427.762030][T26361] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2427.812852][T26361] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2427.875430][T26361] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2427.922533][T26361] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2427.991991][T26361] bridge_slave_1: left allmulticast mode [ 2427.997665][T26361] bridge_slave_1: left promiscuous mode [ 2428.003492][T26361] bridge0: port 2(bridge_slave_1) entered disabled state [ 2428.012461][T26361] bridge_slave_0: left allmulticast mode [ 2428.020714][T26361] bridge_slave_0: left promiscuous mode [ 2428.026389][T26361] bridge0: port 1(bridge_slave_0) entered disabled state [ 2428.036496][T26361] bridge_slave_1: left allmulticast mode [ 2428.042292][T26361] bridge_slave_1: left promiscuous mode [ 2428.047955][T26361] bridge0: port 2(bridge_slave_1) entered disabled state [ 2428.062118][T26361] bridge_slave_0: left allmulticast mode [ 2428.067784][T26361] bridge_slave_0: left promiscuous mode [ 2428.074599][T26361] bridge0: port 1(bridge_slave_0) entered disabled state [ 2428.084861][T26361] bridge_slave_1: left allmulticast mode [ 2428.090925][T26361] bridge_slave_1: left promiscuous mode [ 2428.096559][T26361] bridge0: port 2(bridge_slave_1) entered disabled state [ 2428.105144][T26361] bridge_slave_0: left allmulticast mode [ 2428.110917][T26361] bridge_slave_0: left promiscuous mode [ 2428.116574][T26361] bridge0: port 1(bridge_slave_0) entered disabled state [ 2428.126481][T26361] bridge_slave_1: left allmulticast mode [ 2428.132390][T26361] bridge_slave_1: left promiscuous mode [ 2428.138078][T26361] bridge0: port 2(bridge_slave_1) entered disabled state [ 2428.146893][T26361] bridge_slave_0: left allmulticast mode [ 2428.152813][T26361] bridge_slave_0: left promiscuous mode [ 2428.159340][T26361] bridge0: port 1(bridge_slave_0) entered disabled state [ 2428.173523][T26361] bridge_slave_1: left allmulticast mode [ 2428.180224][T26361] bridge_slave_1: left promiscuous mode [ 2428.185923][T26361] bridge0: port 2(bridge_slave_1) entered disabled state [ 2428.197800][T26361] bridge_slave_0: left allmulticast mode [ 2428.203582][T26361] bridge_slave_0: left promiscuous mode [ 2428.209426][T26361] bridge0: port 1(bridge_slave_0) entered disabled state [ 2428.841391][T26361] bond0 (unregistering): Released all slaves [ 2428.856231][T26361] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2428.866611][T26361] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2428.880866][T26361] bond0 (unregistering): Released all slaves [ 2428.894436][T26361] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2428.904611][T26361] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2428.917388][T26361] bond0 (unregistering): Released all slaves [ 2428.934454][T26361] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2428.944738][T26361] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2428.955358][T26361] bond0 (unregistering): Released all slaves [ 2428.968625][T26361] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2428.982655][T26361] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2428.996098][T26361] bond0 (unregistering): Released all slaves [ 2429.018086][T26361] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2429.033621][T26361] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2429.045076][T26361] bond0 (unregistering): Released all slaves [ 2429.170537][T26361] : left promiscuous mode [ 2429.783155][T26361] hsr_slave_0: left promiscuous mode [ 2429.789056][T26361] hsr_slave_1: left promiscuous mode [ 2429.794936][T26361] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2429.803349][T26361] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2429.811759][T26361] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2429.820564][T26361] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2429.831246][T26361] hsr_slave_0: left promiscuous mode [ 2429.837027][T26361] hsr_slave_1: left promiscuous mode [ 2429.843132][T26361] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2429.850679][T26361] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2429.858491][T26361] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2429.865895][T26361] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2429.876472][T26361] hsr_slave_0: left promiscuous mode [ 2429.883027][T26361] hsr_slave_1: left promiscuous mode [ 2429.889935][T26361] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2429.897338][T26361] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2429.905737][T26361] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2429.913255][T26361] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2429.924464][T26361] hsr_slave_0: left promiscuous mode [ 2429.932433][T26361] hsr_slave_1: left promiscuous mode [ 2429.940998][T26361] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2429.948602][T26361] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2429.956799][T26361] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2429.964972][T26361] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2429.975348][T26361] hsr_slave_0: left promiscuous mode [ 2429.985542][T26361] hsr_slave_1: left promiscuous mode [ 2429.991502][T26361] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2429.998990][T26361] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2430.007764][T26361] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2430.015444][T26361] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2430.034063][T26361] veth1_macvtap: left promiscuous mode [ 2430.039695][T26361] veth0_macvtap: left promiscuous mode [ 2430.045304][T26361] veth1_vlan: left promiscuous mode [ 2430.051270][T26361] veth0_vlan: left promiscuous mode [ 2430.058850][T26361] veth1_macvtap: left promiscuous mode [ 2430.064367][T26361] veth0_macvtap: left promiscuous mode [ 2430.070010][T26361] veth1_vlan: left promiscuous mode [ 2430.075271][T26361] veth0_vlan: left promiscuous mode [ 2430.083010][T26361] veth1_macvtap: left promiscuous mode [ 2430.088760][T26361] veth0_macvtap: left promiscuous mode [ 2430.094290][T26361] veth1_vlan: left promiscuous mode [ 2430.099732][T26361] veth0_vlan: left promiscuous mode [ 2430.106137][T26361] veth1_macvtap: left promiscuous mode [ 2430.111788][T26361] veth0_macvtap: left promiscuous mode [ 2430.117342][T26361] veth1_vlan: left promiscuous mode [ 2430.122857][T26361] veth0_vlan: left promiscuous mode [ 2430.131482][T26361] veth1_macvtap: left promiscuous mode [ 2430.137166][T26361] veth0_macvtap: left promiscuous mode [ 2430.142814][T26361] veth1_vlan: left promiscuous mode [ 2430.148158][T26361] veth0_vlan: left promiscuous mode [ 2430.581865][T26361] team0 (unregistering): Port device team_slave_1 removed [ 2430.611496][T26361] team0 (unregistering): Port device team_slave_0 removed [ 2430.945261][T26361] team0 (unregistering): Port device team_slave_1 removed [ 2430.986397][T26361] team0 (unregistering): Port device team_slave_0 removed [ 2431.273712][T26361] team0 (unregistering): Port device team_slave_1 removed [ 2431.311268][T26361] team0 (unregistering): Port device team_slave_0 removed [ 2431.474723][T26361] team0 (unregistering): Port device team_slave_1 removed [ 2431.523779][T26361] team0 (unregistering): Port device team_slave_0 removed [ 2431.793388][T26361] team0 (unregistering): Port device team_slave_1 removed [ 2431.805329][T26361] team0 (unregistering): Port device team_slave_0 removed