last executing test programs: 21m18.038456086s ago: executing program 1 (id=2): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x101e01, 0x0) ioctl$TIOCSTI(r0, 0x5412, 0x0) syz_emit_ethernet(0x71, &(0x7f0000000880)=ANY=[@ANYBLOB="0180c20000000000fc00000008004719006300680000042f9078e0000001e00000028606ffffffff00008686b9e79b530421880b0000000204001c200d0086dd080088be0000000313e2b24f8bb400000000000808"], 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r2 = fsopen(&(0x7f00000014c0)='proc\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) fchdir(0xffffffffffffffff) lseek(0xffffffffffffffff, 0x101, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$NBD_SET_FLAGS(0xffffffffffffffff, 0xab0a, 0x8) ioctl$BTRFS_IOC_ENCODED_WRITE(r1, 0x40789440, &(0x7f0000000a40)={&(0x7f0000000a00)=[{&(0x7f0000000500)="29c7f52c6f983c24214ef79ee07435617a7312a5a589a158fdf04f005c6811c75030872f61ba208be468f3ec20c8156ce33996a0b822a11f021f11306d5e99ea81216c517aeffcca796094e1f48bfbfdae2555fa3b05bb68c711ef0a997f99a1b28705fa8648c27368d5a68f63fc226995bc7b3523c0a2f4c617f3c3f507b8975d91b14b67605fa1b192356bd1688f45c02f816c2e981cfe628a7c80d042c8385e2310c7631f66e2564f90465b32f521a0a9269fd057f49c02a44e4e439adf6ae59c5a826874c181ebf51e60bf06c1de3e9e92b51f6bccddc7c849", 0xdb}, {&(0x7f0000000640)="8410684c357ec8cc99b98cc68c9236256f84677044961237049c6164e728fcfa", 0x20}, {0x0}, {&(0x7f0000000900)="34624091edd29517bb5c6b826ec99ebe8215fecad54eea032803ae18afb96cbbe704aea5a95f35cef72ea72c0e2e7c090ca3ca3329f592134b88e1b065909f7594b47122f62da70a3dbf8e7fb900e185d651ee63c361ef721acb06e74b50e01b7c5f6f11524ba565d312b49bc2c1b328809cb3d382795caf40a47c7d504954d9f2e11defa6fe7c0ae6b23744e50a1918587763a2b5e50cb6efcdd7c30076247902648176699370dceb0a029aeb9d602abbbbd2bfb28b7cbac63694a5b0ffe2452e635a4955ccd8631d1343e15d7fd6a4d3f7e1c91018cbe06404d8f77c20ff6142717bf5ae862050376af9", 0xeb}], 0x4, 0x4, 0x0, 0xfffffffffffffff9, 0x10001, 0x1, 0x8, 0x101}) r4 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r4, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000003c0)=ANY=[], 0x114}], 0x1}, 0x24044010) recvmmsg(r4, 0x0, 0x0, 0x14022, 0x0) unshare(0x10000000) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)={0x48, 0x2, 0x6, 0x405, 0x0, 0x0, {0xa}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:net\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}]}, 0x48}}, 0x0) sendmsg$IPSET_CMD_ADD(r5, 0x0, 0x0) sendmsg$IPSET_CMD_DEL(r5, &(0x7f0000000700)={&(0x7f0000000000), 0x10, &(0x7f0000000800)={&(0x7f0000000900)={0x44, 0xa, 0x6, 0x5, 0x0, 0x0, {0xa}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0x1c, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0x18, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @empty}}]}]}, 0x44}}, 0x0) 21m14.25477356s ago: executing program 1 (id=7): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = syz_open_dev$sndctrl(0x0, 0x0, 0x0) getpid() ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r2, 0xc1105517, 0x0) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) shutdown(r3, 0x32ce970513f32900) close(r3) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/bus/pci/devices/0000:00:01.0/remove\x00', 0x1, 0x0) write(r4, &(0x7f00000000c0)='1\x00', 0x1) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000380)='/proc/vmstat\x00', 0x0, 0x0) preadv(r5, &(0x7f00000000c0)=[{&(0x7f0000001600)=""/4113, 0x1011}], 0x1, 0xf0, 0xa) r6 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/bus/pci/rescan\x00', 0x1, 0x0) write(r6, &(0x7f00000001c0)='1', 0x1) recvmsg(0xffffffffffffffff, 0x0, 0x123) syz_open_dev$sg(&(0x7f00000002c0), 0x0, 0x9840) ioctl$PTP_SYS_OFFSET_PRECISE(0xffffffffffffffff, 0xc0403d08, 0x0) ioctl$FS_IOC_GETFSLABEL(r0, 0x800452d3, &(0x7f0000000100)) 21m13.172061887s ago: executing program 1 (id=8): r0 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000000), 0x103902, 0x0) r1 = dup(r0) write$UHID_INPUT(r1, &(0x7f0000001040)={0x18, {"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", 0x100d}}, 0xfffffdef) 21m11.695192894s ago: executing program 1 (id=12): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000b, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1200000009000000040000000300000000000000", @ANYRES32, @ANYRES32], 0x50) r4 = socket$inet_tcp(0x2, 0x1, 0x0) listen(r4, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r3, &(0x7f0000000080), &(0x7f0000000180)=@tcp=r4, 0x2}, 0x20) r5 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_opts(r5, 0x29, 0x3b, &(0x7f0000000600)=ANY=[], 0x18) r6 = socket(0x10, 0x80002, 0x4) sendmsg$nl_route_sched(r6, 0x0, 0x200d4) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r5, 0x29, 0x20, &(0x7f00000000c0)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x800, 0x0, 0x103, 0x1}, 0x20) setsockopt$inet6_IPV6_RTHDRDSTOPTS(r5, 0x29, 0x37, &(0x7f0000000080)=ANY=[@ANYBLOB], 0x8) syz_genetlink_get_family_id$wireguard(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(0xffffffffffffffff, 0x0, 0x40000) sendmsg$inet6(r5, &(0x7f0000000100)={&(0x7f0000000040)={0xa, 0x4e24, 0x1, @loopback}, 0x1c, 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='`\x00\x00\x00\x00\x00\x00\x00)\x00\x00\x00\v\x00\x00\x00\x00\b'], 0x60}, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x24) write$binfmt_elf64(0xffffffffffffffff, 0x0, 0x0) socket$nl_sock_diag(0x10, 0x3, 0x4) 21m10.626341921s ago: executing program 1 (id=13): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000140), 0x4000000004002, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a3100000000090003007379"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) sendmsg$NFT_BATCH(r5, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000042c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [@NFT_MSG_NEWRULE={0x74, 0x6, 0xa, 0x403, 0x0, 0x0, {0xa, 0x0, 0x5}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x48, 0x4, 0x0, 0x1, [{0x44, 0x1, 0x0, 0x1, @target={{0xb}, @val={0x34, 0x2, 0x0, 0x1, [@NFTA_TARGET_INFO={0x24, 0x3, "7339f2f304fdd672bad09dfb040000000001000001f9580dabf95ddc91967c20"}, @NFTA_TARGET_NAME={0xc, 0x1, 'RATEEST\x00'}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x9c}, 0x1, 0x0, 0x0, 0x4000850}, 0x20008040) syz_usb_connect(0x5, 0xe4, 0x0, 0x0) r6 = dup(r0) getsockopt$inet6_mreq(r6, 0x29, 0x1b, &(0x7f0000000000)={@dev}, &(0x7f00000000c0)=0x14) bind$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0xe64, 0x3, @private1={0xfc, 0x1, '\x00', 0x1}, 0x202}, 0x1c) r7 = syz_open_dev$radio(&(0x7f00000005c0), 0x0, 0x2) flock(r7, 0x5) ioctl$VIDIOC_S_EXT_CTRLS(r7, 0xc0205648, &(0x7f0000000380)={0x0, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000040)={0x98f910, 0x8000, '\x00', @p_u8=0x0}}) r8 = gettid() rt_sigqueueinfo(r8, 0x21, &(0x7f00000002c0)) syz_open_procfs(r8, &(0x7f0000000100)='net/anycast6\x00') 21m6.895991044s ago: executing program 1 (id=15): r0 = socket$netlink(0x10, 0x3, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000c00)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x59, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) mount$9p_virtio(0x0, 0x0, 0x0, 0x3200006, 0x0) r1 = openat$autofs(0xffffffffffffff9c, 0x0, 0x149000, 0x0) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r1, 0xc018937a, 0x0) getpid() r2 = syz_open_procfs(0xffffffffffffffff, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r4 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$packet_tx_ring(r5, 0x107, 0xd, &(0x7f0000019080)=@req={0x7, 0x50d, 0x0, 0x6}, 0x10) add_key$user(&(0x7f0000002100), &(0x7f0000002180)={'syz', 0x1}, &(0x7f00000021c0)='\x00', 0x1, 0xfffffffffffffffe) add_key$user(&(0x7f0000002300), &(0x7f0000002340)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) keyctl$dh_compute(0x17, 0x0, 0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)={'streebog256-generic\x00'}}) sendmsg$nl_generic(r5, 0x0, 0x4004000) getsockopt(0xffffffffffffffff, 0x200000000114, 0x2716, 0x0, 0x0) r6 = syz_io_uring_setup(0x264a, &(0x7f00000190c0)={0x0, 0x8847, 0x40, 0x2, 0x266, 0x0, r2}, &(0x7f0000019140), &(0x7f0000000180), &(0x7f00000191c0)) io_uring_register$IORING_UNREGISTER_IOWQ_AFF(r6, 0x12, 0x0, 0x0) writev(r4, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000240)=ANY=[@ANYBLOB="40000000100005ff0000000800000000000067a8", @ANYRES32=0x0, @ANYBLOB="134cb3f600000000140012800b0001006261746164760000040002800a000100bbbbbbbbbbbb0000"], 0x40}}, 0x20000840) 20m51.339694952s ago: executing program 32 (id=15): r0 = socket$netlink(0x10, 0x3, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000c00)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x59, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) mount$9p_virtio(0x0, 0x0, 0x0, 0x3200006, 0x0) r1 = openat$autofs(0xffffffffffffff9c, 0x0, 0x149000, 0x0) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r1, 0xc018937a, 0x0) getpid() r2 = syz_open_procfs(0xffffffffffffffff, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r4 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$packet_tx_ring(r5, 0x107, 0xd, &(0x7f0000019080)=@req={0x7, 0x50d, 0x0, 0x6}, 0x10) add_key$user(&(0x7f0000002100), &(0x7f0000002180)={'syz', 0x1}, &(0x7f00000021c0)='\x00', 0x1, 0xfffffffffffffffe) add_key$user(&(0x7f0000002300), &(0x7f0000002340)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) keyctl$dh_compute(0x17, 0x0, 0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)={'streebog256-generic\x00'}}) sendmsg$nl_generic(r5, 0x0, 0x4004000) getsockopt(0xffffffffffffffff, 0x200000000114, 0x2716, 0x0, 0x0) r6 = syz_io_uring_setup(0x264a, &(0x7f00000190c0)={0x0, 0x8847, 0x40, 0x2, 0x266, 0x0, r2}, &(0x7f0000019140), &(0x7f0000000180), &(0x7f00000191c0)) io_uring_register$IORING_UNREGISTER_IOWQ_AFF(r6, 0x12, 0x0, 0x0) writev(r4, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000240)=ANY=[@ANYBLOB="40000000100005ff0000000800000000000067a8", @ANYRES32=0x0, @ANYBLOB="134cb3f600000000140012800b0001006261746164760000040002800a000100bbbbbbbbbbbb0000"], 0x40}}, 0x20000840) 17m7.186224401s ago: executing program 33 (id=329): openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000540)=@bpf_lsm={0x6, 0x5, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x0, 0x1}, @ldst={0x2, 0x0, 0x3, 0x0, 0x0, 0x2}]}, &(0x7f0000000100)='GPL\x00', 0x8, 0x0, 0x0, 0x0, 0x1}, 0x94) r0 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) sendmmsg(r0, &(0x7f000000b3c0), 0x0, 0x4000) ioctl$DRM_IOCTL_PANTHOR_SET_USER_MMIO_OFFSET(0xffffffffffffffff, 0xc008644e, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = socket$pppoe(0x18, 0x1, 0x0) r3 = socket$inet6(0xa, 0x3, 0x8000000003c) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f00000014c0)=@raw={'raw\x00', 0x8, 0x3, 0x4c8, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x3f8, 0xffffffff, 0xffffffff, 0x3f8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'team_slave_0\x00'}, 0x0, 0x148, 0x170, 0x0, {}, [@common=@unspec=@helper={{0x48}}, @common=@inet=@hashlimit1={{0x58}, {'bond_slave_1\x00', {0x41, 0x1ff, 0x6, 0xb0e2, 0x10001, 0x84e, 0xfffffffb, 0x18, 0x8}, {0x1}}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @private0={0xfc, 0x0, '\x00', 0x1}, [], [0xff], 'erspan0\x00', 'gre0\x00'}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0x0, 0x2, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x528) connect$inet6(r3, &(0x7f0000000200)={0xa, 0x4e22, 0xfffffffd, @loopback, 0xfff}, 0x1c) sendmsg(r3, &(0x7f00000000c0)={0x0, 0x953a, &(0x7f0000000100)=[{&(0x7f0000000000)="2c10", 0xffd0}], 0x1, 0x0, 0x0, 0x2c}, 0x44004) connect$pppoe(r2, &(0x7f0000000040)={0x18, 0x0, {0x4, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x18}, 'vlan1\x00'}}, 0x1e) prctl$PR_GET_TSC(0x43, &(0x7f0000000040)) r4 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x401) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB="6c0000001000010400"/20, @ANYBLOB], 0x6c}, 0x1, 0x0, 0x0, 0x840}, 0x84) r6 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r6, 0x107, 0xf, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000040)={'bridge0\x00'}) ioctl$DRM_IOCTL_MODE_DIRTYFB(0xffffffffffffffff, 0xc01864b1, &(0x7f0000000480)={0x0, 0x2, 0x2, 0x2, &(0x7f0000000440)=[{0x9, 0xb, 0x9, 0x9}, {0x8, 0x101, 0x700, 0x6}]}) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000640)=ANY=[@ANYBLOB="58000000020601010000000000000000010000040c000300686173683a697000050001000700000005000500020000000900020073797a300000000005000400000000001400078008000840000000d3050014"], 0x58}, 0x1, 0x0, 0x0, 0x2002c0c4}, 0x8004) ioctl$SG_IO(r4, 0x2285, &(0x7f00000005c0)={0x53, 0xfffffffffffffffe, 0x6, 0x0, @scatter={0x0, 0x20000, 0x0}, &(0x7f0000000240)='\b\x00\x00\x00\x00\x00', 0x0, 0x7, 0x10, 0x8000000, 0x0}) 9m30.685984291s ago: executing program 4 (id=1125): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000b40)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r4 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r4) socket$nl_generic(0x10, 0x3, 0x10) ptrace$pokeuser(0x6, r4, 0x388, 0x41d9fda7) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x0) openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x80000, 0x0) r6 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r7 = ioctl$LOOP_CTL_GET_FREE(r6, 0x4c82) ioctl$LOOP_CTL_REMOVE(r6, 0x4c81, r7) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000040)={r0, 0xffffffffffffffff}, 0x4) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0x18, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702100000000002020267b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000fffffff88500000004000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ff", @ANYRES32=r8], 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000)={r9}, 0xc) r10 = fsopen(&(0x7f0000000180)='proc\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r10, 0x6, 0x0, 0x0, 0x0) r11 = fsmount(r10, 0x0, 0x1) fchdir(r11) 9m28.177249974s ago: executing program 4 (id=1126): r0 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$pppl2tp(0x18, 0x1, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_HOPOPTS(r5, 0x29, 0x36, &(0x7f0000000340)=ANY=[], 0x8) setsockopt$SO_BINDTODEVICE(r5, 0x1, 0x19, 0x0, 0x0) sendto$inet6(r5, 0x0, 0x0, 0x0, 0x0, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b40500000000000071103100000000001f010000000000009500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x6, 0xc3, &(0x7f000000cf3d)=""/189, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000080)={0x0, 0x0, 0x1}, 0x10}, 0x4e) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mount(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x1c3425, 0x0) r6 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r1, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r6, {0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x20}}, 0x2}}, 0x2e) r7 = syz_genetlink_get_family_id$l2tp(&(0x7f00000008c0), 0xffffffffffffffff) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="01042cbd701004000000050000000600010005e1000008000900060000000800050014000800"/54], 0x3c}, 0x1, 0x0, 0x0, 0x20008000}, 0x30) setsockopt$inet6_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000000680)='dctcp', 0x5) getsockopt$inet6_tcp_buf(0xffffffffffffffff, 0x6, 0x1a, 0x0, &(0x7f0000000100)) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="500400002900090027bd700000000000040000003c0411801b0b6aa62fd0d528e13d7ce86c27728cfd", @ANYRESDEC=r0], 0x450}, 0x1, 0x0, 0x0, 0x24002817}, 0x24000094) 9m27.214866928s ago: executing program 4 (id=1128): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$xdp(0x2c, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = openat(0xffffffffffffffff, 0x0, 0x288082, 0x52) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) ioctl$SNDCTL_SYNTH_ID(r2, 0xc08c5114, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r4 = openat$comedi(0xffffff9c, &(0x7f0000000100)='/dev/comedi0\x00', 0x101401, 0x0) ioctl$COMEDI_DEVCONFIG(r4, 0x40946400, &(0x7f0000000140)={'dt2801\x00', [0x294, 0x8, 0x7fffffff, 0x8, 0x2f, 0x2006, 0xf1, 0x8, 0x80ffa, 0x2, 0x0, 0x9, 0x0, 0x1000004, 0x1, 0x10000, 0xfff7ffa8, 0x7ffffffd, 0x1ef, 0x1, 0x20000010, 0x55, 0x8, 0x4008, 0x746f, 0x8, 0x6, 0x4, 0xee, 0x4, 0x7ffd]}) socket$nl_route(0x10, 0x3, 0x0) socket$kcm(0xa, 0x1, 0x106) unshare(0x26020480) r5 = fsopen(&(0x7f00000003c0)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0) sendmsg$ETHTOOL_MSG_COALESCE_SET(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16, @ANYBLOB="010000000000000000001400000018000180140002006e657464657673696d30000000000000080014000700100008001300080003000800"], 0x44}}, 0x0) fchdir(0xffffffffffffffff) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x211000, 0x1000}, 0x20) r6 = socket$netlink(0x10, 0x3, 0x400000000000004) writev(r6, &(0x7f0000019440)=[{&(0x7f0000000200)="480000001400190d7ebdeb75fd0d8c562c84d8c033ed7a80ffe0090f000060000000a2bc5603ca00000f7f89000000200000004a2471083ec6991778581acb6c0101ff0000000309", 0x48}], 0x1) mq_open(&(0x7f0000000100)='&\x00', 0x40, 0x100, 0x0) 9m25.375772634s ago: executing program 4 (id=1132): r0 = socket$phonet_pipe(0x23, 0x5, 0x2) getsockopt$sock_buf(r0, 0x1, 0x1c, &(0x7f0000000000)=""/45, &(0x7f0000000040)=0x2d) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r2 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x22803) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r3, 0xc0a85320, &(0x7f00000003c0)={{0x80, 0xd}, 'port1\x00', 0xf3, 0x1b1c06, 0xfffffffa, 0x4, 0x1000000, 0x0, 0x1, 0x0, 0x0, 0x8}) r4 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000000c0), 0x80d02, 0x0) r5 = dup3(r4, r3, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x801a01, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000180)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x1) sched_setaffinity(0x0, 0x0, 0x0) r6 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r6, &(0x7f0000019680)=""/102392, 0x18ff8) r7 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) ioctl$SCSI_IOCTL_GET_PCI(r7, 0x5319, 0x0) r8 = socket$inet_tcp(0x2, 0x1, 0x0) mbind(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x6002, &(0x7f0000000000)=0x3, 0xf, 0x0) r9 = syz_open_dev$usbmon(&(0x7f0000000280), 0x2c, 0x80001) ioctl$MON_IOCT_RING_SIZE(r9, 0x9204, 0x374c4) r10 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000200)='/proc/stat\x00', 0x0, 0x0) fcntl$lock(r10, 0x7, &(0x7f0000000080)={0x0, 0x4, 0x40, 0xa01}) r11 = bpf$PROG_LOAD(0x5, &(0x7f0000000d00)={0x16, 0xd, &(0x7f0000000480)=ANY=[@ANYBLOB, @ANYRESHEX=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x26, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r11, 0x0, 0x180, 0x0, &(0x7f0000000500)="7a7fa22c2aff88df53ef2a2d280f094d2c509a356e9bcd4c21fddfda1602b845666d60ff403b90528113f50538314aae565fefe03610008678c8696281b83d5cccfb24d18ec3d356e417649b8adde61673674f3a90e1497b3e773cac87a98b1c2dc3d6b723398c19705675d9bad4ce25b894dd2d99bec08059e35916f5612694c14bca518373af8721f1934793162b8f257d5390fb7f465f175dac6ec16e1f6807edf4ff7b71f0a094702338fa570e7a3a4d79190c6c2e414e706b65b607d5e6138c59d6087d5a7ae30ff92b01cdb93e80fbafc82e2f14cabd80250ceb797861aac506fbc09885d8278a2758e61c69a5e69d96690d5ebec8100fc8c7c066abc9c3135f1598c67d34f8dca675b6ae4c40fbb21fee4c3454a0658add4b67af6a1f5de434c9115853ab6f8a29fcb0aafbd0de776a7802094ae62dac8175773bfbab3b7edc06f4b3c1e239634323a7f65df8c39c1e7ee7d10a9922603c841f8a2d8cfc270e5e6624ec33832d8620715ac524f335320ae41dac432b71c23ce11ca402", 0x0, 0xa00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) ioctl$SNDCTL_SEQ_RESET(r5, 0x5100) close_range(r2, 0xffffffffffffffff, 0x0) connect$bt_sco(r1, 0x0, 0x0) 9m23.669214407s ago: executing program 4 (id=1134): bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x15, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB], &(0x7f0000003ff6)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_reuseport}, 0xad) r0 = socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$netlink(r0, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)=[{0x0, 0xe0}], 0x1}, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x50) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000700)={r1, 0x0, &(0x7f0000000600)=""/193}, 0x20) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r2 = getpgrp(0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000080)=0x80005) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r4 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, 0x0, 0x0) sendmsg$NFT_MSG_GETOBJ(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000002240)={&(0x7f0000000400)=ANY=[@ANYBLOB="30000000150a0102000000230000a6ffffff0020080003400000000508000340000000020900010073797a30"], 0x30}, 0x1, 0x0, 0x0, 0x20040011}, 0x24040808) sched_setaffinity(r4, 0x8, &(0x7f0000000100)=0x3) r7 = openat(0xffffffffffffff9c, 0x0, 0x40000, 0x5) bind$vsock_stream(0xffffffffffffffff, &(0x7f0000000940)={0x28, 0x0, 0xffffffff, @host}, 0x10) msgrcv(0x0, &(0x7f00000004c0)={0x0, ""/179}, 0xbb, 0x1, 0x0) msgctl$IPC_RMID(0x0, 0x0) statx(r7, &(0x7f00000002c0)='./file0\x00', 0x4800, 0x200, &(0x7f0000000340)) stat(&(0x7f0000000440)='./file0\x00', &(0x7f0000000480)) 9m22.433932568s ago: executing program 4 (id=1139): socket$nl_route(0x10, 0x3, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = socket$inet_udp(0x2, 0x2, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000c40)={&(0x7f0000000c80)=ANY=[@ANYBLOB="300000001800010600000000000000002d0100000000000100000000050001002e0000000c000500010000000c000000300000001800010600000000000000002d010000000000010000000005000100fe0000000c000500010000000c"], 0xc0}}, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f0000000140)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="0207000902"], 0x10}}, 0x0) r4 = syz_open_procfs(0xffffffffffffffff, 0x0) pread64(r4, &(0x7f0000000080)=""/102356, 0x18fd4, 0x200) openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000019180)={0x1, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94) bind$inet(r1, &(0x7f00000001c0)={0x2, 0x2, @remote}, 0x10) connect$inet(r1, &(0x7f0000000480)={0x2, 0x4e23, @multicast2}, 0x10) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10}, 0x0) openat$comedi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/comedi2\x00', 0x20000, 0x0) setsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f00000002c0)={{{@in=@multicast2, @in6=@mcast1, 0x4e20, 0x4, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x3, 0xfffffffffffffffe}, {0x0, 0x0, 0xfffffffffffffffc, 0xff}, 0x0, 0x0, 0x1}, {{@in=@dev={0xac, 0x14, 0x14, 0x3c}, 0x0, 0x32}, 0x0, @in=@private=0xa010100, 0x0, 0x2, 0x0, 0xb7, 0xfffffffe, 0xffffff7e}}, 0xe8) sendmmsg(r1, &(0x7f0000007fc0), 0x800001d, 0x1c) syz_usb_connect(0x0, 0x2d, 0x0, 0x0) 9m6.546648836s ago: executing program 34 (id=1139): socket$nl_route(0x10, 0x3, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = socket$inet_udp(0x2, 0x2, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000c40)={&(0x7f0000000c80)=ANY=[@ANYBLOB="300000001800010600000000000000002d0100000000000100000000050001002e0000000c000500010000000c000000300000001800010600000000000000002d010000000000010000000005000100fe0000000c000500010000000c"], 0xc0}}, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f0000000140)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="0207000902"], 0x10}}, 0x0) r4 = syz_open_procfs(0xffffffffffffffff, 0x0) pread64(r4, &(0x7f0000000080)=""/102356, 0x18fd4, 0x200) openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000019180)={0x1, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94) bind$inet(r1, &(0x7f00000001c0)={0x2, 0x2, @remote}, 0x10) connect$inet(r1, &(0x7f0000000480)={0x2, 0x4e23, @multicast2}, 0x10) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10}, 0x0) openat$comedi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/comedi2\x00', 0x20000, 0x0) setsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f00000002c0)={{{@in=@multicast2, @in6=@mcast1, 0x4e20, 0x4, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x3, 0xfffffffffffffffe}, {0x0, 0x0, 0xfffffffffffffffc, 0xff}, 0x0, 0x0, 0x1}, {{@in=@dev={0xac, 0x14, 0x14, 0x3c}, 0x0, 0x32}, 0x0, @in=@private=0xa010100, 0x0, 0x2, 0x0, 0xb7, 0xfffffffe, 0xffffff7e}}, 0xe8) sendmmsg(r1, &(0x7f0000007fc0), 0x800001d, 0x1c) syz_usb_connect(0x0, 0x2d, 0x0, 0x0) 8m38.850648711s ago: executing program 0 (id=1205): openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000540)=@bpf_lsm={0x6, 0x5, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x0, 0x1}, @ldst={0x2, 0x0, 0x3, 0x0, 0x0, 0x2}]}, &(0x7f0000000100)='GPL\x00', 0x8, 0x0, 0x0, 0x0, 0x1}, 0x94) r0 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) sendmmsg(r0, &(0x7f000000b3c0)=[{{0x0, 0x0, &(0x7f00000044c0)=[{0x0}, {&(0x7f0000004480)="5e72d8", 0x3}], 0x2}}], 0x1, 0x4000) ioctl$DRM_IOCTL_PANTHOR_SET_USER_MMIO_OFFSET(0xffffffffffffffff, 0xc008644e, &(0x7f0000000180)={0xa}) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = socket$pppoe(0x18, 0x1, 0x0) r3 = socket$inet6(0xa, 0x3, 0x8000000003c) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f00000014c0)=@raw={'raw\x00', 0x8, 0x3, 0x4c8, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x3f8, 0xffffffff, 0xffffffff, 0x3f8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'team_slave_0\x00'}, 0x0, 0x148, 0x170, 0x0, {}, [@common=@unspec=@helper={{0x48}}, @common=@inet=@hashlimit1={{0x58}, {'bond_slave_1\x00', {0x41, 0x1ff, 0x6, 0xb0e2, 0x10001, 0x84e, 0xfffffffb, 0x18, 0x8}, {0x1}}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @private0={0xfc, 0x0, '\x00', 0x1}, [], [0xff], 'erspan0\x00', 'gre0\x00'}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0x0, 0x2, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x528) connect$inet6(r3, &(0x7f0000000200)={0xa, 0x4e22, 0xfffffffd, @loopback, 0xfff}, 0x1c) sendmsg(r3, &(0x7f00000000c0)={0x0, 0x953a, &(0x7f0000000100)=[{&(0x7f0000000000)="2c10", 0xffd0}], 0x1, 0x0, 0x0, 0x2c}, 0x44004) connect$pppoe(r2, &(0x7f0000000040)={0x18, 0x0, {0x4, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x18}, 'vlan1\x00'}}, 0x1e) prctl$PR_GET_TSC(0x43, &(0x7f0000000040)) r4 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x401) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$DRM_IOCTL_MODE_GETCRTC(0xffffffffffffffff, 0xc06864a1, &(0x7f00000003c0)={&(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x7, 0x0, 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB="6c0000001000010400"/19, @ANYBLOB="5d580000000000001c001a8018000a801400070000000000000000000000000000000001140003006970766c616e310000000000000000001c0012800b0001006970766c61"], 0x6c}, 0x1, 0x0, 0x0, 0x840}, 0x84) r7 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r7, 0x107, 0xf, &(0x7f00000000c0)=0x207, 0x4) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000040)={'bridge0\x00', 0x0}) sendto$packet(r7, &(0x7f00000002c0)="05031600d3fc142e00004788031c0910", 0x10, 0x4, &(0x7f0000000140)={0x11, 0x86dd, r8, 0x1, 0x0, 0x6, @multicast}, 0x14) ioctl$DRM_IOCTL_MODE_DIRTYFB(0xffffffffffffffff, 0xc01864b1, &(0x7f0000000480)={r6, 0x2, 0x2, 0x2, &(0x7f0000000440)=[{0x9, 0xb, 0x9, 0x9}, {0x8, 0x101, 0x700, 0x6}]}) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000640)=ANY=[@ANYBLOB="58000000020601010000000000000000010000040c000300686173683a697000050001000700000005000500020000000900020073797a300000000005000400000000001400078008000840000000d3050014"], 0x58}, 0x1, 0x0, 0x0, 0x2002c0c4}, 0x8004) ioctl$SG_IO(r4, 0x2285, &(0x7f00000005c0)={0x53, 0xfffffffffffffffe, 0x6, 0x0, @scatter={0x0, 0x20000, 0x0}, &(0x7f0000000240)='\b\x00\x00\x00\x00\x00', 0x0, 0x7, 0x10, 0x8000000, 0x0}) 8m34.11949001s ago: executing program 0 (id=1202): socket$packet(0x11, 0x3, 0x300) syz_open_dev$loop(&(0x7f0000000240), 0xffffffff7ffffffd, 0x1608e2) syz_open_dev$video(&(0x7f0000000000), 0x9, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0) mount$cgroup(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f00000001c0), 0x2010042, 0x0) lremovexattr(&(0x7f0000000000)='./file0\x00', 0x0) r3 = socket$alg(0x26, 0x5, 0x0) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) r5 = dup(r4) getsockname$packet(r5, 0x0, 0x0) bind$alg(r3, 0x0, 0x0) mremap(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x3000, 0x0, &(0x7f0000ffc000/0x3000)=nil) accept$alg(r3, 0x0, 0x0) process_vm_writev(r0, 0x0, 0x0, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_RTOINFO(r5, 0x84, 0x0, 0x0, 0x0) 8m32.849750641s ago: executing program 0 (id=1203): r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000), 0x102, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000380)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = socket$l2tp6(0xa, 0x2, 0x73) bind$l2tp6(r4, &(0x7f0000000040)={0xa, 0x0, 0xbf, @empty, 0x4, 0x100}, 0x20) bpf$PROG_LOAD(0x5, 0x0, 0x0) connect$l2tp6(r4, &(0x7f0000000f40)={0xa, 0x0, 0x0, @empty}, 0x20) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_FLUSH(r5, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000900)=ANY=[], 0x1c}, 0x1, 0x0, 0x0, 0x20000810}, 0x80d0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000a00000a6c000000060a0104000000000000000002000000400004803c0001800a0001006d617463680000002c000280140003002000000000000000030007116b61979e0c000100636c75737465720008000240000000000900010073797a30000000000900020073797a32"], 0x94}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) r7 = syz_open_dev$loop(0x0, 0x3, 0x2000) ioctl$LOOP_SET_CAPACITY(r7, 0x4c07) sendmmsg$inet6(r4, &(0x7f0000000ac0)=[{{&(0x7f0000000180)={0xa, 0x0, 0x0, @empty}, 0x1b, 0x0, 0x0, 0x0, 0x0, 0xc0fe}}], 0x17fd147c801ae9af, 0xff14) ioctl$RTC_IRQP_READ(r0, 0x8008700b, &(0x7f0000000040)) 8m31.812623447s ago: executing program 0 (id=1204): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$xdp(0x2c, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = openat(0xffffffffffffffff, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x288082, 0x52) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) ioctl$SNDCTL_SYNTH_ID(r2, 0xc08c5114, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r3 = syz_open_dev$sndmidi(0x0, 0x2, 0x143102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r4 = openat$comedi(0xffffff9c, &(0x7f0000000100)='/dev/comedi0\x00', 0x101401, 0x0) ioctl$COMEDI_DEVCONFIG(r4, 0x40946400, &(0x7f0000000140)={'dt2801\x00', [0x294, 0x8, 0x7fffffff, 0x8, 0x2f, 0x2006, 0xf1, 0x8, 0x80ffa, 0x2, 0x0, 0x9, 0x0, 0x1000004, 0x1, 0x10000, 0xfff7ffa8, 0x7ffffffd, 0x1ef, 0x1, 0x20000010, 0x55, 0x8, 0x4008, 0x746f, 0x8, 0x6, 0x4, 0xee, 0x4, 0x7ffd]}) socket$nl_route(0x10, 0x3, 0x0) socket$kcm(0xa, 0x1, 0x106) unshare(0x26020480) r5 = fsopen(&(0x7f00000003c0)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0) sendmsg$ETHTOOL_MSG_COALESCE_SET(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16, @ANYBLOB="010000000000000000001400000018000180140002006e657464657673696d30000000000000080014000700100008001300080003000800"], 0x44}}, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x211000, 0x1000}, 0x20) r6 = socket$netlink(0x10, 0x3, 0x400000000000004) writev(r6, &(0x7f0000019440)=[{&(0x7f0000000200)="480000001400190d7ebdeb75fd0d8c562c84d8c033ed7a80ffe0090f000060000000a2bc5603ca00000f7f89000000200000004a2471083ec6991778581acb6c0101ff0000000309", 0x48}], 0x1) mq_open(&(0x7f0000000100)='&\x00', 0x40, 0x100, 0x0) 8m29.435269307s ago: executing program 0 (id=1206): syz_init_net_socket$x25(0x9, 0x5, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f0000000240), 0xffffffffffffffff) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x80102, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() setrlimit(0x0, &(0x7f0000000080)={0x9a4, 0x4}) sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) openat$tun(0xffffffffffffff9c, 0x0, 0xa2f01, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x10, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x48) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000a80)={{r5}, &(0x7f0000000a00), &(0x7f0000000a40)}, 0x20) bpf$BPF_PROG_QUERY(0x10, 0x0, 0x0) bpf$LINK_GET_NEXT_ID(0x1f, 0x0, 0x0) write$binfmt_format(0xffffffffffffffff, &(0x7f0000000100)='-1\x00', 0x2) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) eventfd2(0x42000006, 0x801) socket$kcm(0x2, 0x200000000000001, 0x106) 8m27.024217017s ago: executing program 0 (id=1208): r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000000)={'veth0\x00', {0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x14}}}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000040)={'veth0\x00', 0x1}) r1 = socket$netlink(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r1, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x5}, 0x100) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./config\x00', &(0x7f0000000040)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./config/nvmet/subsystems\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config/nvmet/subsystems/testnqn\x00', 0x1ff) r2 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./config/nvmet/subsystems/testnqn/attr_allow_any_host\x00', 0x2, 0x0) write(r2, &(0x7f0000000180)='1\x00', 0x1) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./config/nvmet/subsystems/testnqn/namespaces\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./config/nvmet/subsystems/testnqn/namespaces/1\x00', 0x1ff) write(0xffffffffffffffff, &(0x7f0000000280)='/dev/nullb0\x00', 0xc) r3 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./config/nvmet/subsystems/testnqn/namespaces/1/enable\x00', 0x2, 0x0) write(r3, &(0x7f0000000300)='1\x00', 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./config/nvmet/ports\x00', 0x1ff) r4 = openat(0xffffffffffffff9c, &(0x7f00000003c0)='./config/nvmet/ports/1/addr_trtype\x00', 0x2, 0x0) write(r4, &(0x7f0000000400)='rdma\x00', 0x4) openat(0xffffffffffffff9c, &(0x7f0000000440)='./config/nvmet/ports/1/addr_adrfam\x00', 0x2, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f00000004c0)='./config/nvmet/ports/1/addr_traddr\x00', 0x2, 0x0) write(r5, &(0x7f0000000500)='172.20.20.20\x00', 0xc) r6 = openat(0xffffffffffffff9c, &(0x7f0000000540)='./config/nvmet/ports/1/addr_trsvcid\x00', 0x2, 0x0) write(r6, &(0x7f0000000580)='4420\x00', 0x4) symlinkat(&(0x7f00000005c0)='./config/nvmet/subsystems/testnqn\x00', 0xffffffffffffff9c, &(0x7f0000000600)='./config/nvmet/ports/1/subsystems/testnqn\x00') 8m11.932166746s ago: executing program 35 (id=1208): r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000000)={'veth0\x00', {0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x14}}}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000040)={'veth0\x00', 0x1}) r1 = socket$netlink(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r1, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x5}, 0x100) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./config\x00', &(0x7f0000000040)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./config/nvmet/subsystems\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config/nvmet/subsystems/testnqn\x00', 0x1ff) r2 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./config/nvmet/subsystems/testnqn/attr_allow_any_host\x00', 0x2, 0x0) write(r2, &(0x7f0000000180)='1\x00', 0x1) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./config/nvmet/subsystems/testnqn/namespaces\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./config/nvmet/subsystems/testnqn/namespaces/1\x00', 0x1ff) write(0xffffffffffffffff, &(0x7f0000000280)='/dev/nullb0\x00', 0xc) r3 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./config/nvmet/subsystems/testnqn/namespaces/1/enable\x00', 0x2, 0x0) write(r3, &(0x7f0000000300)='1\x00', 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./config/nvmet/ports\x00', 0x1ff) r4 = openat(0xffffffffffffff9c, &(0x7f00000003c0)='./config/nvmet/ports/1/addr_trtype\x00', 0x2, 0x0) write(r4, &(0x7f0000000400)='rdma\x00', 0x4) openat(0xffffffffffffff9c, &(0x7f0000000440)='./config/nvmet/ports/1/addr_adrfam\x00', 0x2, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f00000004c0)='./config/nvmet/ports/1/addr_traddr\x00', 0x2, 0x0) write(r5, &(0x7f0000000500)='172.20.20.20\x00', 0xc) r6 = openat(0xffffffffffffff9c, &(0x7f0000000540)='./config/nvmet/ports/1/addr_trsvcid\x00', 0x2, 0x0) write(r6, &(0x7f0000000580)='4420\x00', 0x4) symlinkat(&(0x7f00000005c0)='./config/nvmet/subsystems/testnqn\x00', 0xffffffffffffff9c, &(0x7f0000000600)='./config/nvmet/ports/1/subsystems/testnqn\x00') 3m49.283390372s ago: executing program 3 (id=1536): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000b40)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r4 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r4) socket$nl_generic(0x10, 0x3, 0x10) ptrace$pokeuser(0x6, r4, 0x388, 0x41d9fda7) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x0) openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x80000, 0x0) r6 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r7 = ioctl$LOOP_CTL_GET_FREE(r6, 0x4c82) ioctl$LOOP_CTL_REMOVE(r6, 0x4c81, r7) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000040)={r0, 0xffffffffffffffff}, 0x4) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0x18, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702100000000002020267b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000fffffff88500000004000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ff", @ANYRES32=r8], 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000)={r9}, 0xc) r10 = fsopen(&(0x7f0000000180)='proc\x00', 0x1) r11 = fsmount(r10, 0x0, 0x1) fchdir(r11) 3m47.512779326s ago: executing program 3 (id=1540): r0 = userfaultfd(0x801) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000001c0)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) ioctl$XFS_IOC_FSGROWFSRT(r0, 0x40105870, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) r5 = syz_open_dev$sndctrl(&(0x7f0000000100), 0x0, 0x0) syz_emit_ethernet(0x76, &(0x7f0000000580)=ANY=[@ANYBLOB], 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_inet6_SIOCDELRT(r6, 0x890c, &(0x7f0000005fc0)={@remote, @private0={0xfc, 0x0, '\x00', 0x1}, @empty, 0x7, 0x8000, 0x3d, 0x500, 0x5, 0x18c0012}) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000b00)={'syz0\x00', {0x5, 0x7, 0x3, 0x7}, 0x50, [0x2, 0x9, 0x0, 0x1, 0x8, 0xea45, 0xe, 0x1, 0x63, 0x1, 0x6, 0xc, 0x2, 0x9, 0x1, 0x4, 0x8001000, 0x7fffffff, 0x51, 0x8, 0x800, 0xa4d, 0x3ff, 0x4, 0x6, 0x4, 0xffff, 0x0, 0x9, 0x6, 0x10401, 0xc, 0x9, 0x4, 0x2, 0x1, 0x5, 0x4, 0x1, 0x4, 0xa, 0x8, 0x3, 0x9, 0x804d7f, 0x2, 0x8c00, 0x6, 0x939, 0x5, 0x9, 0x2, 0x2, 0x4, 0xfffffff7, 0x7fff, 0x6, 0x5, 0x80000001, 0xd77, 0x5, 0x2a, 0x1, 0x23], [0x8, 0xfff, 0x72, 0x9, 0x80000005, 0x12, 0x800, 0x2c, 0x0, 0x2329, 0xfd8, 0x3, 0x7, 0x5, 0x0, 0x24a, 0x80000001, 0xfffffff7, 0x0, 0x3, 0x5, 0x4009, 0x80, 0xb, 0x8001, 0x40, 0x6, 0x4, 0xffffffff, 0x5, 0x10004, 0x9e, 0xffffff00, 0x7ff, 0x6, 0x7, 0x0, 0xe, 0xffff3f16, 0x2, 0x2, 0x9, 0xa, 0x5, 0x2, 0x207, 0x800, 0x5, 0xc5, 0x3, 0x1, 0x9, 0x8, 0x3, 0xffff7ff7, 0x3, 0x24c, 0x1ff, 0x2a0, 0x5, 0x6, 0x6, 0x280007, 0x8], [0x20002, 0x9, 0x1a9e1bf7, 0xfffffffc, 0x8, 0x9, 0x1, 0x8, 0x7aae, 0x5, 0x2, 0x7ffffff7, 0x8000, 0x1, 0x1, 0x5, 0x400, 0x2, 0x2b0, 0x3, 0x97f82544, 0x8, 0x0, 0x0, 0x9, 0x4, 0x7, 0x10000, 0xc90, 0xffffff3c, 0x8b2, 0x10, 0x4, 0x7, 0x140, 0x2, 0x2, 0x1000000c, 0x0, 0x6, 0x7, 0x8007c12, 0x5, 0x1, 0x17, 0x8000, 0xe, 0xf3, 0x4, 0x8, 0x1, 0xffffff00, 0x100, 0x3fff80, 0x2, 0x0, 0x8, 0xdd, 0x1, 0x9, 0xc3, 0x20ffff, 0x7a0], [0x9, 0x3a8d, 0xffff9a7f, 0x400, 0x6, 0x1, 0x1, 0xfffffff3, 0xd077, 0x2, 0xffffffff, 0x1f, 0x81, 0xa, 0x6, 0x2, 0x200, 0xfe, 0x2, 0x66608000, 0x5e82, 0x7fb, 0x6, 0x0, 0x4, 0x5, 0x80000001, 0xffff, 0x101, 0x0, 0xfffffffd, 0x1, 0x10001, 0x61, 0x10, 0x1000, 0xc, 0x100, 0x8, 0x20000000, 0x8, 0x15, 0xb32a, 0xec000000, 0x8001, 0x1904, 0x0, 0xc, 0x8, 0x7ff, 0x280, 0x5, 0xfffffffb, 0x7, 0x6e79, 0x5, 0xc, 0x9371, 0x4f89, 0x7, 0x580, 0x2d1, 0x80, 0x8]}, 0x45c) mmap(&(0x7f00005aa000/0x4000)=nil, 0x4000, 0x1, 0x20010, 0xffffffffffffffff, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r5, 0xc1105517, &(0x7f0000000340)={{0x0, 0x1, 0x0, 0xffffffff, 'syz0\x00', 0x71}, 0x1, 0x0, 0x4, 0xffffffffffffffff, 0x0, 0x0, 'syz0\x00', 0x0}) ioctl$COMEDI_DEVCONFIG(0xffffffffffffffff, 0x40946400, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r7 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r7, 0x0, 0x2000404c) 3m44.360770144s ago: executing program 3 (id=1543): r0 = openat$ipvs(0xffffffffffffff9c, 0x0, 0x2, 0x0) bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000180)=@bloom_filter={0x1e, 0x8, 0x6, 0x5, 0x2c0, 0x1, 0xfff, '\x00', 0x0, r0, 0x3e, 0x2, 0x4, 0xc}, 0x50) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r1 = getpid() r2 = socket$key(0xf, 0x3, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x100000a, 0x4082172, 0xffffffffffffffff, 0x0) openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000080)='hugetlb.1GB.rsvd.limit_in_bytes\x00', 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000ac0)=ANY=[@ANYBLOB="9feb010018000000000000003c0000003c00000002000000000000000100000d0000000000000000030000000000000000000001ff00003e400000000000000000000003000000000200000002"], 0x0, 0x56}, 0x20) sendmsg$key(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)={0x2, 0xf, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x4e23, @broadcast}}, @sadb_x_policy={0x8, 0x12, 0x0, 0x1, 0x0, 0x0, 0x0, {0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @in6=@empty, @in6=@private2}}, @sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x0, @multicast1}}]}, 0x80}}, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000580)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x101, 0x0, 0x0, {0x5}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x54, 0x3, 0xa, 0x301, 0x0, 0x0, {0x5}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_HOOK={0x28, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x12}, @NFTA_HOOK_HOOKNUM={0x8}, @NFTA_HOOK_DEV={0x14, 0x3, 'netdevsim0\x00'}]}]}, @NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7, 0x0, 0x9}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xbc}, 0x1, 0x1000000}, 0x0) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r8, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r7, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x3d, &(0x7f0000000340), 0x4) 3m32.293970537s ago: executing program 3 (id=1556): madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x2) epoll_create1(0x0) semget(0x3, 0x2, 0x800) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = syz_open_dev$video(&(0x7f0000000000), 0x8, 0x0) ioctl$VIDIOC_S_EXT_CTRLS(r3, 0xc0205648, &(0x7f00000000c0)={0x4, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000040)={0x98f90d, 0x9c, '\x00', @p_u8=0x0}}) r4 = socket$nl_crypto(0x10, 0x3, 0x15) getsockopt$sock_buf(r4, 0x1, 0x52, 0xffffffffffffffff, &(0x7f0000000000)=0xa) r5 = semget(0x2, 0x3, 0x33a) semtimedop(r5, 0x0, 0x0, 0x0) semctl$GETVAL(r5, 0x2, 0xc, 0x0) mount$fuseblk(&(0x7f0000000040), &(0x7f0000000000)='.\x00', &(0x7f00000000c0), 0x0, 0x0) mount(0x0, &(0x7f00000000c0)='.\x00', &(0x7f0000000040)='ubifs\x00', 0x0, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x10402, 0x89) r6 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000180), 0x4) bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x6, 0x6, 0x2, 0xeb, 0x40860, 0xffffffffffffffff, 0x15, '\x00', 0x0, r6, 0x5, 0x2, 0x5}, 0x50) ioctl$TIOCOUTQ(0xffffffffffffffff, 0x5411, &(0x7f0000000340)) r7 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETVESABLANK(r7, 0x541c, &(0x7f0000000000)) 3m30.948121421s ago: executing program 3 (id=1559): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x30, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x10000005) prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r4, 0x29, 0x20, &(0x7f0000000100)={@loopback, 0x800, 0x0, 0x1, 0x9, 0x0, 0x8}, 0x20) fsopen(0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="4c000000020601080000000000000000000000400500010006200000050005000a00000005000400000000000900020073797a310000000011000300686173683a69702c6d61726b"], 0x4c}}, 0x0) syz_io_uring_setup(0x47a8, 0x0, 0x0, 0x0, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2040, 0x100) fcntl$setlease(r6, 0x400, 0x0) close(0x3) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2040, 0x6c) r7 = syz_open_procfs(0x0, &(0x7f0000000080)='fdinfo/3\x00') preadv(r7, &(0x7f0000000640)=[{&(0x7f0000000140)=""/134, 0x86}], 0x1, 0x0, 0x0) sendmsg$IPSET_CMD_ADD(r5, 0x0, 0x4000080) setsockopt$inet6_int(r4, 0x29, 0x1000000000021, &(0x7f0000000040)=0x5, 0x4) rt_tgsigqueueinfo(r0, r2, 0x28, &(0x7f0000000200)={0x2c, 0x4993, 0x8}) 3m29.268228023s ago: executing program 3 (id=1561): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) rename(&(0x7f0000000080)='./file0\x00', &(0x7f0000000180)='./file0/file0\x00') setsockopt$inet6_tcp_int(r0, 0x6, 0x24, &(0x7f0000000080)=0x1, 0x4) sched_setscheduler(0x0, 0x2, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x7f, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) openat(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup.net/devices.allow\x00', 0x189002, 0x40) r2 = getpid() r3 = syz_pidfd_open(r2, 0x0) setns(r3, 0x24020000) mount_setattr(0xffffffffffffff9c, &(0x7f0000000180)='.\x00', 0x8000, &(0x7f0000001dc0)={0xb, 0x0, 0x100000}, 0x20) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000280)) preadv(0xffffffffffffffff, &(0x7f0000000180), 0x0, 0x5fae, 0x4) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_genetlink_get_family_id$smc(0x0, 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4000080) r4 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) r5 = syz_io_uring_setup(0x497, &(0x7f0000000180)={0x0, 0x4885, 0x100, 0x0, 0x1d, 0x0, r4}, &(0x7f0000000340), &(0x7f0000000600), &(0x7f00000012c0)) io_uring_register$IORING_REGISTER_PBUF_RING(r5, 0x16, &(0x7f0000000040)={0x0, 0x2, 0xf}, 0x1) shutdown(r0, 0x0) recvmmsg(r0, &(0x7f0000001980)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=""/26, 0x1a, 0x1000000}}, {{0x0, 0x0, &(0x7f0000001300)=[{&(0x7f00000000c0)=""/47, 0x2f}, {&(0x7f0000000100)=""/224, 0xe0}, {&(0x7f0000000200)=""/4096, 0x1000}, {&(0x7f0000001200)=""/124, 0x7c}, {&(0x7f0000001280)=""/60, 0x3c}], 0x5}}, {{&(0x7f0000001380)=@pppoe={0x18, 0x0, {0x0, @local}}, 0x80, &(0x7f0000001840)=[{&(0x7f0000001400)=""/149, 0x95}, {&(0x7f0000001b00)=""/118, 0x76}, {&(0x7f0000001540)=""/188, 0xbc}, {0x0}, {&(0x7f0000001640)=""/135, 0x87}, {&(0x7f00000014c0)=""/101, 0x65}, {&(0x7f0000001780)=""/171, 0xab}], 0x7, &(0x7f00000018c0)=""/176, 0xb0}}], 0x3, 0x0, 0x0) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) 3m13.629291725s ago: executing program 36 (id=1561): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) rename(&(0x7f0000000080)='./file0\x00', &(0x7f0000000180)='./file0/file0\x00') setsockopt$inet6_tcp_int(r0, 0x6, 0x24, &(0x7f0000000080)=0x1, 0x4) sched_setscheduler(0x0, 0x2, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x7f, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) openat(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup.net/devices.allow\x00', 0x189002, 0x40) r2 = getpid() r3 = syz_pidfd_open(r2, 0x0) setns(r3, 0x24020000) mount_setattr(0xffffffffffffff9c, &(0x7f0000000180)='.\x00', 0x8000, &(0x7f0000001dc0)={0xb, 0x0, 0x100000}, 0x20) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000280)) preadv(0xffffffffffffffff, &(0x7f0000000180), 0x0, 0x5fae, 0x4) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_genetlink_get_family_id$smc(0x0, 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4000080) r4 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) r5 = syz_io_uring_setup(0x497, &(0x7f0000000180)={0x0, 0x4885, 0x100, 0x0, 0x1d, 0x0, r4}, &(0x7f0000000340), &(0x7f0000000600), &(0x7f00000012c0)) io_uring_register$IORING_REGISTER_PBUF_RING(r5, 0x16, &(0x7f0000000040)={0x0, 0x2, 0xf}, 0x1) shutdown(r0, 0x0) recvmmsg(r0, &(0x7f0000001980)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=""/26, 0x1a, 0x1000000}}, {{0x0, 0x0, &(0x7f0000001300)=[{&(0x7f00000000c0)=""/47, 0x2f}, {&(0x7f0000000100)=""/224, 0xe0}, {&(0x7f0000000200)=""/4096, 0x1000}, {&(0x7f0000001200)=""/124, 0x7c}, {&(0x7f0000001280)=""/60, 0x3c}], 0x5}}, {{&(0x7f0000001380)=@pppoe={0x18, 0x0, {0x0, @local}}, 0x80, &(0x7f0000001840)=[{&(0x7f0000001400)=""/149, 0x95}, {&(0x7f0000001b00)=""/118, 0x76}, {&(0x7f0000001540)=""/188, 0xbc}, {0x0}, {&(0x7f0000001640)=""/135, 0x87}, {&(0x7f00000014c0)=""/101, 0x65}, {&(0x7f0000001780)=""/171, 0xab}], 0x7, &(0x7f00000018c0)=""/176, 0xb0}}], 0x3, 0x0, 0x0) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) 2m44.140799995s ago: executing program 7 (id=1611): close(0xffffffffffffffff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x401c2, 0x0) ioctl$F2FS_IOC_RESIZE_FS(r0, 0x4008f510, &(0x7f0000000000)=0x1) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0x7}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x3, 0xc, &(0x7f0000000140)=@framed={{}, [@ringbuf_output={{0x18, 0x5, 0x1, 0x0, r1}, {}, {0x3, 0x3, 0x3, 0xa, 0x5}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x1e}}]}, &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = getpgrp(0x0) sched_setaffinity(r3, 0x8, &(0x7f0000000040)=0x781) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000180)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r5 = syz_clone(0x400000, 0x0, 0xfffffeb6, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r5, 0x1, 0x0) r6 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r6, &(0x7f0000019680)=""/102392, 0x18ff8) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r7, 0x1, 0x3c, &(0x7f0000000000)=0x2, 0x4) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, 0x0, 0x0) sendmsg$NFT_BATCH(r8, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000540)=ANY=[], 0xdc}, 0x1, 0x0, 0x0, 0x4000850}, 0x20004090) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r2, 0x0, 0xa, 0x0, &(0x7f0000000180)="5becbcd9679caa7ecf8a", 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) ftruncate(r0, 0x8800000) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) recvmmsg(r10, &(0x7f00000034c0)=[{{0x0, 0x0, &(0x7f0000001e40)=[{&(0x7f0000000b80)=""/4096, 0x20001b80}, {&(0x7f0000001b80)=""/112, 0x70}], 0x2, 0x0, 0xa0028cb4}}], 0x40000000000013c, 0x700, 0x0) sendfile(r9, r0, 0x0, 0x578410eb) pidfd_getfd(r0, 0xffffffffffffffff, 0x0) ioctl$F2FS_IOC_GARBAGE_COLLECT(r9, 0x4004f506, &(0x7f0000000080)) 2m41.072368862s ago: executing program 7 (id=1613): semtimedop(0x0, 0x0, 0x0, 0x0) syz_emit_ethernet(0x32, &(0x7f0000000780)=ANY=[@ANYRESDEC], 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) read$char_usb(0xffffffffffffffff, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) ioctl$VIDIOC_G_EXT_CTRLS(0xffffffffffffffff, 0xc0205649, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0x1000, 0x4000003, 0x50032, 0xffffffffffffffff, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$rxrpc(0x21, 0x2, 0x2) setsockopt$RXRPC_SECURITY_KEYRING(r2, 0x110, 0x2, 0x0, 0x0) syz_clone(0x100, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000240), 0x3af4701e) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28012, r4, 0x0) r5 = ioctl$LOOP_CTL_GET_FREE(r4, 0x4c82) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000001cc0)="68000000000905040000000000000000020000000900010073797a3000000000140002800600010000020000050002000600000008000500000000002c0004800800010000000001200002800c000100706f6c69637930000800020000000043950003000000001e", 0x68}], 0x1}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xc, 0x16, &(0x7f00000003c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x27) ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, r5) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, r5) mq_open(0x0, 0x42, 0x0, 0x0) 2m34.580119994s ago: executing program 7 (id=1621): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket(0x10, 0x3, 0x0) bpf$BPF_LINK_CREATE_XDP(0x9, 0x0, 0x0) r2 = socket$xdp(0x2c, 0x3, 0x0) bind$xdp(r2, &(0x7f0000000100)={0x2c, 0xa}, 0x10) wait4(0x0, 0x0, 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000001c0)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) eventfd(0xfffffff9) r4 = shmget$private(0x0, 0x2000, 0x200, &(0x7f0000ffe000/0x2000)=nil) getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, &(0x7f00000003c0)={{{@in6=@ipv4={""/10, ""/2, @loopback}, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6}, 0x0, @in=@dev}}, &(0x7f0000000500)=0xe8) r6 = openat$cuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) read$FUSE(r6, &(0x7f0000000200)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_DIRENTPLUS(r6, &(0x7f0000002240)={0xb0, 0xfffffff5, 0x3, [{{0x1, 0x1, 0xfffffffffffffff7, 0x6, 0x0, 0x6, {0x5, 0x6, 0x80000000, 0xd, 0x9, 0x100, 0x1, 0xffffff01, 0x200, 0x4000, 0x3, r7, r8, 0x4, 0x10000}}, {0x2, 0x40, 0x1, 0x0, ':'}}]}, 0xb0) r9 = getegid() r10 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r10) waitid(0x1, r10, 0x0, 0x61000006, &(0x7f0000000340)) ptrace$getregset(0x4205, r10, 0x202, &(0x7f0000000240)={&(0x7f0000000180)=""/120, 0xffffffffffffff28}) shmctl$IPC_SET(r4, 0x1, &(0x7f00000005c0)={{0x2, r5, 0xee00, r7, r9, 0x80, 0xc01}, 0x5, 0x7fffffff, 0x0, 0x3, 0xffffffffffffffff, r10}) r11 = syz_io_uring_setup(0x27c8, &(0x7f0000000540)={0x0, 0x800069ea, 0x3000, 0x3, 0x8000d}, &(0x7f0000000140)=0x0, &(0x7f0000000080)=0x0, &(0x7f00000000c0)=0x0) syz_io_uring_submit(r12, r13, r14, &(0x7f0000000280)=@IORING_OP_WRITE={0x17, 0x0, 0x6000, @fd_index=0x8, 0x1, 0x0, 0x0, 0x14, 0x0, {0x0, 0x0, 0x0, '\x00', 0x0}}) io_uring_enter(r11, 0x1, 0x1, 0x1, 0x0, 0x0) sendmsg$NFNL_MSG_CTHELPER_DEL(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)={0x20, 0x2, 0x9, 0x5, 0x0, 0x0, {0x0, 0x0, 0x9}, [@NFCTH_NAME={0x9, 0x1, 'syz0\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x4048011}, 0x20004024) 2m27.535116091s ago: executing program 7 (id=1630): socket$packet(0x11, 0x3, 0x300) r0 = syz_open_dev$loop(&(0x7f0000000240), 0xffffffff7ffffffd, 0x1608e2) r1 = syz_open_dev$video(&(0x7f0000000000), 0x9, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0) mount$cgroup(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f00000001c0), 0x2010042, 0x0) lremovexattr(&(0x7f0000000000)='./file0\x00', 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) bind$alg(0xffffffffffffffff, 0x0, 0x0) mremap(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x3000, 0x0, &(0x7f0000ffc000/0x3000)=nil) accept$alg(0xffffffffffffffff, 0x0, 0x0) process_vm_writev(r2, 0x0, 0x0, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, 0x0, 0x0) ioctl$VIDIOC_ENUMINPUT(r1, 0xc050561a, 0x0) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, 0x0) ioctl$FE_READ_SIGNAL_STRENGTH(0xffffffffffffffff, 0x80026f47, 0x0) 2m25.943166031s ago: executing program 7 (id=1633): syz_open_dev$sndctrl(&(0x7f0000000100), 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6) syz_emit_ethernet(0x5a, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x6, 0xd, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001010000000000000500000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb7030000f6000000b7040000050000008500000033000000850000002300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000b80)={r5, 0x2000012, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xb}, 0x50) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x3) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f000000c0c0)="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", 0x2000, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r6}, 0x0, &(0x7f0000000040)}, 0x20) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000780)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r7, 0x2000002, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x8401, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) stat(&(0x7f0000000040)='./file0/file0\x00', 0x0) r8 = syz_open_dev$usbfs(&(0x7f00000001c0), 0x800000001fe, 0x102) r9 = dup(r8) ioctl$USBDEVFS_CONTROL(r9, 0xc0185500, 0x0) 2m24.261247803s ago: executing program 7 (id=1635): rt_sigprocmask(0x0, 0x0, 0x0, 0x0) setpgid(0x0, 0x0) bpf$BPF_LINK_CREATE_XDP(0x9, 0x0, 0x0) r0 = socket$xdp(0x2c, 0x3, 0x0) bind$xdp(r0, &(0x7f0000000100)={0x2c, 0xa}, 0x10) setsockopt$XDP_TX_RING(r0, 0x11b, 0x3, &(0x7f0000000080), 0x4) openat$khugepaged_scan(0xffffffffffffff9c, 0x0, 0x1, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000001c0)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) eventfd(0xfffffff9) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sec\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./sec\x00', &(0x7f0000000140)='securityfs\x00', 0x0, 0x0) prctl$PR_SET_SECUREBITS(0x1c, 0x4) setresuid(0x0, 0xee00, 0xee01) r2 = openat(0xffffffffffffff9c, &(0x7f00000000e0)='./sec/tomoyo/profile\x00', 0x1, 0x0) write(r2, &(0x7f0000000040)="3c5c583ecd45036a2762bb626c65640a", 0x10) r3 = syz_io_uring_setup(0x27c8, &(0x7f0000000540)={0x0, 0x800069ea, 0x3000, 0x3, 0x8000d}, &(0x7f0000000140), &(0x7f0000000080), &(0x7f00000000c0)) io_uring_enter(r3, 0x1, 0x1, 0x1, 0x0, 0x0) syz_io_uring_setup(0x126b, &(0x7f0000000500)={0x0, 0x72de, 0x0, 0x0, 0x3a8}, &(0x7f0000000140), 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0x31) 2m8.989692266s ago: executing program 37 (id=1635): rt_sigprocmask(0x0, 0x0, 0x0, 0x0) setpgid(0x0, 0x0) bpf$BPF_LINK_CREATE_XDP(0x9, 0x0, 0x0) r0 = socket$xdp(0x2c, 0x3, 0x0) bind$xdp(r0, &(0x7f0000000100)={0x2c, 0xa}, 0x10) setsockopt$XDP_TX_RING(r0, 0x11b, 0x3, &(0x7f0000000080), 0x4) openat$khugepaged_scan(0xffffffffffffff9c, 0x0, 0x1, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000001c0)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) eventfd(0xfffffff9) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sec\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./sec\x00', &(0x7f0000000140)='securityfs\x00', 0x0, 0x0) prctl$PR_SET_SECUREBITS(0x1c, 0x4) setresuid(0x0, 0xee00, 0xee01) r2 = openat(0xffffffffffffff9c, &(0x7f00000000e0)='./sec/tomoyo/profile\x00', 0x1, 0x0) write(r2, &(0x7f0000000040)="3c5c583ecd45036a2762bb626c65640a", 0x10) r3 = syz_io_uring_setup(0x27c8, &(0x7f0000000540)={0x0, 0x800069ea, 0x3000, 0x3, 0x8000d}, &(0x7f0000000140), &(0x7f0000000080), &(0x7f00000000c0)) io_uring_enter(r3, 0x1, 0x1, 0x1, 0x0, 0x0) syz_io_uring_setup(0x126b, &(0x7f0000000500)={0x0, 0x72de, 0x0, 0x0, 0x3a8}, &(0x7f0000000140), 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0x31) 1m47.412385217s ago: executing program 2 (id=1676): socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[], 0x48) socket$nl_generic(0x10, 0x3, 0x10) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)) socket$inet6(0x10, 0x3, 0x0) socket(0x10, 0x3, 0x0) socket$inet6(0xa, 0x80003, 0x6) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$inet6(0xa, 0x2, 0x0) syz_open_procfs$pagemap(0xffffffffffffffff, &(0x7f0000000080)) socket$packet(0x11, 0x2, 0x300) socket$packet(0x11, 0x2, 0x300) socket$inet6_tcp(0xa, 0x1, 0x0) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000640)='/sys/power/pm_test', 0x88002, 0x0) ioctl$sock_inet_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000000)={0x4000000, {0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x2, 0x0, @local}, {0x2, 0x4e23, @loopback}, 0x1d7, 0x0, 0x0, 0x0, 0xfff8, 0x0, 0x4, 0x8}) sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYRES32, @ANYRES16=0x0, @ANYRES8=r0], 0x1c}, 0x1, 0x0, 0x0, 0x20000844}, 0x48885) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1400000007"], 0x50) pwrite64(0xffffffffffffffff, &(0x7f0000000000)='L', 0x1, 0x7ffffffe) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r1, &(0x7f0000000000), 0xd) 1m38.50426778s ago: executing program 2 (id=1688): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f00000011c0)=ANY=[@ANYRES64=0x0], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) syz_open_dev$vim2m(0x0, 0x3, 0x2) r1 = socket$inet(0x2, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, 0x0, 0x0) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x290, 0x0, 0xb, 0xd0e0011, 0x120, 0xc6, 0x1f8, 0x1d8, 0x190, 0x1f8, 0x1d8, 0x3, 0x0, {[{{@ip={@rand_addr, @broadcast, 0x0, 0x0, 'nr0\x00', '\x00', {}, {}, 0x1}, 0x0, 0xd8, 0x120, 0x7000000, {}, [@common=@icmp={{0x28}, {0x0, "0010"}}, @common=@unspec=@connlimit={{0x40}}]}, @unspec=@CT0={0x48}}, {{@ip={@remote, @multicast1, 0x0, 0x0, 'bridge_slave_1\x00', 'virt_wifi0\x00'}, 0x0, 0x70, 0xd8}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x20000, 'syz1\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2f0) r5 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) sendmsg(r5, 0x0, 0x10040800) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), r6) sendmsg$ETHTOOL_MSG_TSINFO_GET(r6, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="01002dbd7000fedbdf252c00000018000180140002"], 0x2c}, 0x1, 0x0, 0x0, 0x20048881}, 0x2000c800) ioctl$sock_SIOCINQ(r5, 0x541b, 0x0) bpf$TOKEN_CREATE(0x24, 0x0, 0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) futex(0x0, 0xc, 0x1, 0x0, 0x0, 0x0) syz_clone(0x25000, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x18000000000002a0, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x60000000, 0x22, 0x30, &(0x7f0000000400)="f0821c123d981a1a2e7c613e359b3c0a3f3931fe41f06994eb8829966685c85e19aa", &(0x7f00000003c0)="553f2fb5dc93400d8a309712cda62e76f49bae896d8d802404394f0fdef2c2527415389d423ee2ccb489cdd5fc2e1df7"}, 0xb) 1m37.427584147s ago: executing program 2 (id=1689): socket$packet(0x11, 0x3, 0x300) r0 = syz_open_dev$loop(&(0x7f0000000240), 0xffffffff7ffffffd, 0x1608e2) r1 = syz_open_dev$video(&(0x7f0000000000), 0x9, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0) lremovexattr(&(0x7f0000000000)='./file0\x00', 0x0) r5 = socket$alg(0x26, 0x5, 0x0) r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) r7 = dup(r6) getsockname$packet(r7, 0x0, 0x0) bind$alg(r5, 0x0, 0x0) mremap(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x3000, 0x0, &(0x7f0000ffc000/0x3000)=nil) accept$alg(r5, 0x0, 0x0) process_vm_writev(r2, 0x0, 0x0, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_RTOINFO(r7, 0x84, 0x0, 0x0, 0x0) ioctl$VIDIOC_ENUMINPUT(r1, 0xc050561a, 0x0) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, 0x0) ioctl$FE_READ_SIGNAL_STRENGTH(0xffffffffffffffff, 0x80026f47, 0x0) 1m36.288505246s ago: executing program 2 (id=1691): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = socket$netlink(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mkdirat(0xffffffffffffffff, &(0x7f0000000300)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/uncompressed/yuyv\x00', 0x1c5) linkat(0xffffffffffffff9c, 0x0, 0xffffffffffffff9c, &(0x7f0000000100)='./file7\x00', 0x1000) syz_mount_image$fuse(0x0, &(0x7f0000000000)='./bus\x00', 0x300f401, 0x0, 0x2, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000100)='./bus\x00', &(0x7f0000000440), 0x8, &(0x7f0000000200)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}, {@index_on}]}) renameat2(0xffffffffffffff9c, &(0x7f0000000780)='./file7\x00', 0xffffffffffffff9c, &(0x7f00000007c0)='./file1\x00', 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="30000000120005ff00000000000000000000004a", @ANYRES32=0x0, @ANYBLOB="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"], 0x30}, 0x1, 0x0, 0x0, 0x4000004}, 0x810) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r1, 0x84009422, 0x0) ioctl$BTRFS_IOC_GET_DEV_STATS(r1, 0xc4089434, &(0x7f00000006c0)={0x0, 0xd, 0x0, [0x100000000, 0x4, 0x7a9d36d5, 0x3, 0x101], [0x10001, 0x8ebd, 0x0, 0x0, 0x1, 0x8000000000000000, 0x1, 0x9b61, 0x3ff, 0x1, 0x8, 0x2, 0x40000000000, 0x2, 0x3, 0x64e, 0x2, 0xbe3, 0x9, 0xfffffffffffffbff, 0x6, 0x6, 0x6, 0x8, 0x9, 0x1000, 0x0, 0x2, 0x80000000, 0x2, 0x5, 0x4, 0x4, 0x2, 0x36e6, 0x5, 0x0, 0x8001, 0x6, 0x6, 0x8, 0x5, 0x89, 0x3, 0x4, 0x12dd, 0x5, 0x2, 0x10001, 0x0, 0x8ac, 0x4, 0x6, 0x5, 0x6, 0xa9, 0x4, 0x1, 0x1d5, 0x7, 0x7f, 0x3, 0x8, 0x1, 0xa, 0x400, 0x4, 0x5, 0x5, 0x4, 0x1000, 0x4, 0x6, 0x7, 0x20fd, 0x4, 0x4, 0x800, 0xffff, 0x3, 0x66, 0x2a, 0x100000001, 0x5, 0xfffffffffffffffe, 0x9, 0x5, 0x1, 0x0, 0x71c6d084, 0x3, 0x7, 0x5, 0x5, 0x3ff, 0x9, 0x100000000, 0x7fffffffffffffff, 0x3f79, 0x7, 0x5, 0x1, 0x7, 0xb703, 0x7, 0xa, 0x8, 0x0, 0x0, 0x1, 0x0, 0x5fc, 0x62, 0x4000800000000000, 0x0, 0x2f, 0x7fffffffffffffff, 0x8000000000000000, 0x4, 0x3, 0x5]}) ioctl$VT_GETMODE(r0, 0x5601, &(0x7f00000000c0)) mkdir(&(0x7f0000000140)='./config\x00', 0x1ff) mount(0x0, &(0x7f00000001c0)='./config\x00', &(0x7f0000000200)='configfs\x00', 0x0, 0x0) mkdir(&(0x7f0000000240)='./config/usb_gadget/g1\x00', 0x1ff) mkdir(&(0x7f0000000380)='./config/usb_gadget/g1/functions/uvc.usb0\x00', 0x1ff) mkdir(&(0x7f00000003c0)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/uncompressed/yuyv\x00', 0x1ff) mkdir(&(0x7f0000000440)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/uncompressed/yuyv/720p\x00', 0x1ff) r5 = open(&(0x7f0000000640)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/uncompressed/yuyv/720p/dwMaxVideoFrameBufferSize\x00', 0x241, 0x1ff) write(r5, &(0x7f00000006c0)='184', 0x3) 1m34.642442228s ago: executing program 2 (id=1692): r0 = fsopen(&(0x7f0000000100)='nfs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000140)='addr\x00', &(0x7f0000000180)='127.0.0.1\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f00000001c0)='source\x00', &(0x7f0000000200)='127.0.0.1:/export\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000240)='vers\x00', &(0x7f0000000280)='3\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000340)='mountproto\x00', 0x0, 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f00000003c0)='timeo\x00', &(0x7f0000000400)='1\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008e}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) setuid(0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x0, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) listen(0xffffffffffffffff, 0x5) r4 = eventfd2(0x0, 0x0) io_setup(0x4, &(0x7f0000000080)=0x0) io_pgetevents(r5, 0x2, 0x0, 0x0, 0x0, 0x0) epoll_pwait2(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000200), 0x0, 0x0) shutdown(0xffffffffffffffff, 0x0) copy_file_range(r4, 0x0, 0xffffffffffffffff, 0x0, 0x6, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) 1m29.794822479s ago: executing program 2 (id=1696): r0 = userfaultfd(0x801) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000001c0)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) ioctl$XFS_IOC_FSGROWFSRT(r0, 0x40105870, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) syz_open_dev$sndctrl(&(0x7f0000000100), 0x0, 0x0) syz_emit_ethernet(0x76, &(0x7f0000000580)=ANY=[@ANYBLOB], 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_inet6_SIOCDELRT(r5, 0x890c, &(0x7f0000005fc0)={@remote, @private0={0xfc, 0x0, '\x00', 0x1}, @empty, 0x7, 0x8000, 0x3d, 0x500, 0x5, 0x18c0012}) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000b00)={'syz0\x00', {0x5, 0x7, 0x3, 0x7}, 0x50, [0x2, 0x9, 0x0, 0x1, 0x8, 0xea45, 0xe, 0x1, 0x63, 0x1, 0x6, 0xc, 0x2, 0x9, 0x1, 0x4, 0x8001000, 0x7fffffff, 0x51, 0x8, 0x800, 0xa4d, 0x3ff, 0x4, 0x6, 0x4, 0xffff, 0x0, 0x9, 0x6, 0x10401, 0xc, 0x9, 0x4, 0x2, 0x1, 0x5, 0x4, 0x1, 0x4, 0xa, 0x8, 0x3, 0x9, 0x804d7f, 0x2, 0x8c00, 0x6, 0x939, 0x5, 0x9, 0x2, 0x2, 0x4, 0xfffffff7, 0x7fff, 0x6, 0x5, 0x80000001, 0xd77, 0x5, 0x2a, 0x1, 0x23], [0x8, 0xfff, 0x72, 0x9, 0x80000005, 0x12, 0x800, 0x2c, 0x0, 0x2329, 0xfd8, 0x3, 0x7, 0x5, 0x0, 0x24a, 0x80000001, 0xfffffff7, 0x0, 0x3, 0x5, 0x4009, 0x80, 0xb, 0x8001, 0x40, 0x6, 0x4, 0xffffffff, 0x5, 0x10004, 0x9e, 0xffffff00, 0x7ff, 0x6, 0x7, 0x0, 0xe, 0xffff3f16, 0x2, 0x2, 0x9, 0xa, 0x5, 0x2, 0x207, 0x800, 0x5, 0xc5, 0x3, 0x1, 0x9, 0x8, 0x3, 0xffff7ff7, 0x3, 0x24c, 0x1ff, 0x2a0, 0x5, 0x6, 0x6, 0x280007, 0x8], [0x20002, 0x9, 0x1a9e1bf7, 0xfffffffc, 0x8, 0x9, 0x1, 0x8, 0x7aae, 0x5, 0x2, 0x7ffffff7, 0x8000, 0x1, 0x1, 0x5, 0x400, 0x2, 0x2b0, 0x3, 0x97f82544, 0x8, 0x0, 0x0, 0x9, 0x4, 0x7, 0x10000, 0xc90, 0xffffff3c, 0x8b2, 0x10, 0x4, 0x7, 0x140, 0x2, 0x2, 0x1000000c, 0x0, 0x6, 0x7, 0x8007c12, 0x5, 0x1, 0x17, 0x8000, 0xe, 0xf3, 0x4, 0x8, 0x1, 0xffffff00, 0x100, 0x3fff80, 0x2, 0x0, 0x8, 0xdd, 0x1, 0x9, 0xc3, 0x20ffff, 0x7a0], [0x9, 0x3a8d, 0xffff9a7f, 0x400, 0x6, 0x1, 0x1, 0xfffffff3, 0xd077, 0x2, 0xffffffff, 0x1f, 0x81, 0xa, 0x6, 0x2, 0x200, 0xfe, 0x2, 0x66608000, 0x5e82, 0x7fb, 0x6, 0x0, 0x4, 0x5, 0x80000001, 0xffff, 0x101, 0x0, 0xfffffffd, 0x1, 0x10001, 0x61, 0x10, 0x1000, 0xc, 0x100, 0x8, 0x20000000, 0x8, 0x15, 0xb32a, 0xec000000, 0x8001, 0x1904, 0x0, 0xc, 0x8, 0x7ff, 0x280, 0x5, 0xfffffffb, 0x7, 0x6e79, 0x5, 0xc, 0x9371, 0x4f89, 0x7, 0x580, 0x2d1, 0x80, 0x8]}, 0x45c) mmap(&(0x7f00005aa000/0x4000)=nil, 0x4000, 0x1, 0x20010, 0xffffffffffffffff, 0x0) ioctl$COMEDI_DEVCONFIG(0xffffffffffffffff, 0x40946400, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r6, &(0x7f0000000140)={0xa, 0x4e22, 0x3, @ipv4={'\x00', '\xff\xff', @multicast1}}, 0x1c) r7 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r7, 0x0, 0x2000404c) 1m14.58240996s ago: executing program 38 (id=1696): r0 = userfaultfd(0x801) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000001c0)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) ioctl$XFS_IOC_FSGROWFSRT(r0, 0x40105870, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) syz_open_dev$sndctrl(&(0x7f0000000100), 0x0, 0x0) syz_emit_ethernet(0x76, &(0x7f0000000580)=ANY=[@ANYBLOB], 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_inet6_SIOCDELRT(r5, 0x890c, &(0x7f0000005fc0)={@remote, @private0={0xfc, 0x0, '\x00', 0x1}, @empty, 0x7, 0x8000, 0x3d, 0x500, 0x5, 0x18c0012}) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000b00)={'syz0\x00', {0x5, 0x7, 0x3, 0x7}, 0x50, [0x2, 0x9, 0x0, 0x1, 0x8, 0xea45, 0xe, 0x1, 0x63, 0x1, 0x6, 0xc, 0x2, 0x9, 0x1, 0x4, 0x8001000, 0x7fffffff, 0x51, 0x8, 0x800, 0xa4d, 0x3ff, 0x4, 0x6, 0x4, 0xffff, 0x0, 0x9, 0x6, 0x10401, 0xc, 0x9, 0x4, 0x2, 0x1, 0x5, 0x4, 0x1, 0x4, 0xa, 0x8, 0x3, 0x9, 0x804d7f, 0x2, 0x8c00, 0x6, 0x939, 0x5, 0x9, 0x2, 0x2, 0x4, 0xfffffff7, 0x7fff, 0x6, 0x5, 0x80000001, 0xd77, 0x5, 0x2a, 0x1, 0x23], [0x8, 0xfff, 0x72, 0x9, 0x80000005, 0x12, 0x800, 0x2c, 0x0, 0x2329, 0xfd8, 0x3, 0x7, 0x5, 0x0, 0x24a, 0x80000001, 0xfffffff7, 0x0, 0x3, 0x5, 0x4009, 0x80, 0xb, 0x8001, 0x40, 0x6, 0x4, 0xffffffff, 0x5, 0x10004, 0x9e, 0xffffff00, 0x7ff, 0x6, 0x7, 0x0, 0xe, 0xffff3f16, 0x2, 0x2, 0x9, 0xa, 0x5, 0x2, 0x207, 0x800, 0x5, 0xc5, 0x3, 0x1, 0x9, 0x8, 0x3, 0xffff7ff7, 0x3, 0x24c, 0x1ff, 0x2a0, 0x5, 0x6, 0x6, 0x280007, 0x8], [0x20002, 0x9, 0x1a9e1bf7, 0xfffffffc, 0x8, 0x9, 0x1, 0x8, 0x7aae, 0x5, 0x2, 0x7ffffff7, 0x8000, 0x1, 0x1, 0x5, 0x400, 0x2, 0x2b0, 0x3, 0x97f82544, 0x8, 0x0, 0x0, 0x9, 0x4, 0x7, 0x10000, 0xc90, 0xffffff3c, 0x8b2, 0x10, 0x4, 0x7, 0x140, 0x2, 0x2, 0x1000000c, 0x0, 0x6, 0x7, 0x8007c12, 0x5, 0x1, 0x17, 0x8000, 0xe, 0xf3, 0x4, 0x8, 0x1, 0xffffff00, 0x100, 0x3fff80, 0x2, 0x0, 0x8, 0xdd, 0x1, 0x9, 0xc3, 0x20ffff, 0x7a0], [0x9, 0x3a8d, 0xffff9a7f, 0x400, 0x6, 0x1, 0x1, 0xfffffff3, 0xd077, 0x2, 0xffffffff, 0x1f, 0x81, 0xa, 0x6, 0x2, 0x200, 0xfe, 0x2, 0x66608000, 0x5e82, 0x7fb, 0x6, 0x0, 0x4, 0x5, 0x80000001, 0xffff, 0x101, 0x0, 0xfffffffd, 0x1, 0x10001, 0x61, 0x10, 0x1000, 0xc, 0x100, 0x8, 0x20000000, 0x8, 0x15, 0xb32a, 0xec000000, 0x8001, 0x1904, 0x0, 0xc, 0x8, 0x7ff, 0x280, 0x5, 0xfffffffb, 0x7, 0x6e79, 0x5, 0xc, 0x9371, 0x4f89, 0x7, 0x580, 0x2d1, 0x80, 0x8]}, 0x45c) mmap(&(0x7f00005aa000/0x4000)=nil, 0x4000, 0x1, 0x20010, 0xffffffffffffffff, 0x0) ioctl$COMEDI_DEVCONFIG(0xffffffffffffffff, 0x40946400, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r6, &(0x7f0000000140)={0xa, 0x4e22, 0x3, @ipv4={'\x00', '\xff\xff', @multicast1}}, 0x1c) r7 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r7, 0x0, 0x2000404c) 21.527960571s ago: executing program 6 (id=1764): openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x802, 0x0) r0 = io_uring_setup(0x59d8, 0x0) syz_ublk_setup_io_uring(0x5e45, &(0x7f0000000a40)={0x0, 0x0, 0x200, 0x1, 0x5e2, 0x0, r0}, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x82042, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) socket(0x1, 0x803, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) syz_open_dev$sndpcmc(&(0x7f00000000c0), 0x7, 0x96603) r2 = syz_open_dev$vbi(&(0x7f0000000040), 0x2, 0x2) mkdirat(0xffffffffffffff9c, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000100)=ANY=[@ANYRESOCT, @ANYRESDEC=r2, @ANYRES8=r2], 0x7c}}, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) openat$vcs(0xffffff9c, &(0x7f0000000180), 0x50040, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000240), 0x22600, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r4 = socket$nl_rdma(0x10, 0x3, 0x14) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="24000000200001032abd7000ffd9df2502000000ff000008"], 0x24}, 0x1, 0x0, 0x0, 0x240480d4}, 0x4040) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x38, 0x1403, 0x1, 0x70bd2a, 0x25dfdbfe, "", [{{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'bond0\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x800}, 0x20000000) syz_io_uring_setup(0x795e, &(0x7f0000000300)={0x0, 0x800069ea, 0x3000, 0x0, 0x8000d}, &(0x7f0000000140)=0x0, &(0x7f0000000100)=0x0, &(0x7f00000000c0)=0x0) syz_io_uring_submit(r6, r7, r8, &(0x7f0000000280)=@IORING_OP_WRITE={0x17, 0x0, 0x6000, @fd_index=0x7, 0x8, 0x0, 0x0, 0x14, 0x0, {0x0, 0x0, 0x0, '\x00', 0x0}}) 19.97813073s ago: executing program 5 (id=1709): r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi2\x00', 0x20001, 0x0) socket$nl_generic(0x10, 0x3, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)}, {0x0}], 0x2) socket$nl_generic(0x10, 0x3, 0x10) socket$kcm(0xa, 0x2, 0x0) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r2, 0x107, 0xa, 0x0, 0x0) setsockopt$packet_rx_ring(r2, 0x107, 0x5, &(0x7f0000000040)=@req3={0x10001000, 0x7ff, 0xffffffff, 0x3d, 0xe, 0x0, 0xffe00002}, 0x1c) r3 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$IP_VS_SO_SET_ADD(r3, 0x0, 0x482, &(0x7f0000000140)={0x84, @rand_addr=0x64010105, 0x4e22, 0x3, 'lblc\x00', 0x1, 0x80005, 0x6f}, 0x2c) socket$kcm(0xa, 0x2, 0x0) r4 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$IP_VS_SO_SET_ADDDEST(r4, 0x0, 0x487, &(0x7f0000000000)={{0x84, @private=0xa010102, 0x4e24, 0x3, 'lc\x00', 0x5, 0x8, 0x77}, {@remote, 0x4e20, 0x10000, 0xc, 0x2}}, 0x44) r5 = openat$ttynull(0xffffffffffffff9c, &(0x7f00000000c0), 0x88002, 0x0) ioctl$TIOCSETD(r5, 0x5423, &(0x7f0000000100)=0xd) r6 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000000), 0x103902, 0x0) r7 = dup(r6) write$UHID_INPUT(r7, &(0x7f0000001040)={0x18, {"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", 0x100d}}, 0xfffffdef) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x1f, 0x4, &(0x7f0000000140)=ANY=[@ANYBLOB="18000000000000000000000002000000c3110000100100219500000000000000"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x13}, 0x94) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, &(0x7f00000003c0)={'pcl818\x00', [0x140, 0x2, 0x3, 0x0, 0x1, 0x2, 0x7ffd, 0x6, 0x1007, 0xf, 0x4, 0x10, 0xf8, 0x8, 0x4ce, 0x9e9b, 0x101, 0x401, 0x9, 0x8, 0x4, 0x0, 0xa, 0x9, 0xffd, 0x200000, 0xaf, 0x0, 0x10001fc, 0x0, 0x4]}) ioctl$BTRFS_IOC_QUOTA_RESCAN_WAIT(r0, 0x942e, 0x0) 18.978661494s ago: executing program 5 (id=1767): bpf$MAP_CREATE(0x0, 0x0, 0x48) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000a50000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7050000080000a8c5000000a5000000180100002020640500000000002020207b1af8fe00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b300000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x35, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) syz_mount_image$squashfs(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x804cd8, &(0x7f00000000c0)=ANY=[@ANYRES8=0x0, @ANYRES64], 0x3, 0x232, &(0x7f0000000500)="$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") openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, &(0x7f00000000c0), 0x4) sendmsg$unix(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0xfffffffffffffe96, 0x0, 0x0, 0x0, 0x0, 0x20000001}, 0x40000) r5 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$IP_VS_SO_SET_ADD(r5, 0x0, 0x482, 0x0, 0x0) setsockopt$IP_VS_SO_SET_FLUSH(r5, 0x0, 0x485, 0x0, 0x0) 17.784144984s ago: executing program 5 (id=1768): r0 = fsopen(&(0x7f0000000100)='nfs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000140)='addr\x00', &(0x7f0000000180)='127.0.0.1\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f00000001c0)='source\x00', &(0x7f0000000200)='127.0.0.1:/export\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000240)='vers\x00', &(0x7f0000000280)='3\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000340)='mountproto\x00', 0x0, 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f00000003c0)='timeo\x00', &(0x7f0000000400)='1\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008e}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5) setuid(0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x0, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) listen(0xffffffffffffffff, 0x5) r5 = eventfd2(0x0, 0x0) io_setup(0x4, &(0x7f0000000080)=0x0) io_pgetevents(r6, 0x2, 0x0, 0x0, 0x0, 0x0) epoll_pwait2(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000200), 0x0, 0x0) shutdown(0xffffffffffffffff, 0x0) copy_file_range(r5, 0x0, 0xffffffffffffffff, 0x0, 0x6, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) 15.621220209s ago: executing program 5 (id=1770): bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80880) write$P9_RFSYNC(r0, &(0x7f0000000180)={0x7, 0x33, 0x2}, 0x7) r1 = socket(0xa, 0x3, 0x3a) openat(0xffffffffffffffff, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x840, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r5 = syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2) ioctl$VIDIOC_S_INPUT(r5, 0xc0045627, &(0x7f0000000100)=0x3) ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(r5, 0xc0845657, &(0x7f0000000200)={0x0, @bt={0xe10, 0x870, 0x1, 0x1, 0xd59f80, 0x19f2, 0x3f, 0x19ef, 0x3, 0x3, 0x2800, 0x2800, 0x2, 0xd1, 0xc, 0x30, {0x8, 0xfffffff7}, 0xd0, 0x9}}) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) setsockopt$MRT6_ADD_MIF(r1, 0x29, 0xca, &(0x7f0000000000)={0x4, 0x1, 0x4}, 0xc) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) r7 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/seq/timer\x00', 0x0, 0x0) close(0x3) statx(r7, 0x0, 0x1000, 0xf0cb2f4a0c2cfc5d, 0x0) setsockopt$MRT6_ADD_MIF(r1, 0x29, 0xca, &(0x7f00000000c0)={0x0, 0x0, 0x3, r6, 0x230d}, 0xc) setsockopt$MRT6_FLUSH(r1, 0x29, 0xd4, &(0x7f0000000080)=0xa, 0x4) r8 = add_key$user(&(0x7f00000001c0), &(0x7f0000003700)={'syz', 0x0}, &(0x7f0000000300)="c2", 0x1, 0xfffffffffffffffb) keyctl$setperm(0x5, r8, 0x1010) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x11, 0x4, &(0x7f00000000c0)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0xc}, 0x94) gettid() 15.424423883s ago: executing program 6 (id=1771): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000780)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x1011f, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = add_key(&(0x7f0000000000)='big_key\x00', 0x0, &(0x7f00000002c0), 0x0, 0xfffffffffffffffe) keyctl$revoke(0x3, r3) add_key$user(&(0x7f0000000680), &(0x7f00000006c0)={'syz', 0x3}, &(0x7f0000000700)="6a9031c2d2f647e6ee164e02c2832642a30098b7f46758361b920bb9b2a55d0493235ba354095f3d4ce94c24779bf3f0b2f453fec24ee7ebf228dbecf7d1652d6caa1a47a959c37378cca7273419243065f948fcaf053f6fe74e6238bb35f0db3a6fbf635152de78931f1d4b958ddc", 0x6f, r3) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) shutdown(r4, 0x1) r5 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) getsockopt$bt_BT_DEFER_SETUP(r5, 0x112, 0x13, 0x0, 0x0) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000000)=@mangle={'mangle\x00', 0x2, 0x6, 0x580, 0xe0, 0xe0, 0x0, 0x0, 0x1c0, 0x520, 0x520, 0x520, 0x520, 0x520, 0x6, 0x0, {[{{@uncond, 0x0, 0xa8, 0xe0, 0x0, {0x7a00000010000000}}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{0xffffffffffffffff, 0x2, 0x1}, {0xffffffffffffffff, 0x4, 0x1}, {0xffffffffffffffff, 0x4}, 0x5, 0x7ff}}}, {{@ipv6={@mcast2, @dev={0xfe, 0x80, '\x00', 0xa}, [0x0, 0x0, 0x0, 0xffffff00], [0x0, 0x0, 0xffffffff, 0xff], 'macvlan0\x00', 'veth1_vlan\x00', {}, {}, 0x6, 0x1, 0x4}, 0x0, 0xa8, 0xe0}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{0xffff}, {}, {0x87, 0x0, 0x7}}}}, {{@uncond, 0x0, 0x108, 0x130, 0x48000000, {}, [@common=@inet=@udp={{0x30}, {[0x4e20, 0x4e23], [0x4e21, 0x4e21]}}, @common=@srh={{0x30}, {0x33, 0x66, 0xf8, 0xa6, 0x9, 0x440, 0x502}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffc}}, {{@uncond, 0x0, 0xa8, 0xf0}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv6=@empty, @ipv4=@empty, 0x2c, 0x16, 0x4}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @HL={0x28, 'HL\x00', 0x0, {0x1}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x5e0) socket$nl_netfilter(0x10, 0x3, 0xc) r6 = fsopen(&(0x7f00000000c0)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r6, 0x6, 0x0, 0x0, 0x0) write$P9_RREAD(0xffffffffffffffff, &(0x7f0000000880)={0x4d2, 0x75, 0x2, {0x4c7, "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"}}, 0x4d2) unshare(0x22020600) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) r7 = fsmount(r6, 0x0, 0x0) r8 = socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$inet(r8, &(0x7f00000015c0)={&(0x7f0000001140)={0x2, 0x4e21, @multicast1}, 0x10, 0x0, 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="1c000000000000000000000007000000860c"], 0x20}, 0x4000004) r9 = openat$cgroup(r7, &(0x7f0000000040)='syz0\x00', 0x200002, 0x0) syz_clone3(&(0x7f0000000340)={0x201800000, 0x0, 0x0, 0x0, {0x1f}, 0x0, 0x0, 0x0, 0x0, 0x0, {r9}}, 0x58) 11.784839505s ago: executing program 6 (id=1775): r0 = userfaultfd(0x801) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000001c0)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) ioctl$XFS_IOC_FSGROWFSRT(r0, 0x40105870, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) syz_emit_ethernet(0x76, &(0x7f0000000580)=ANY=[@ANYBLOB], 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(0xffffffffffffffff, 0xc1105517, &(0x7f0000000340)={{0x0, 0x1, 0x0, 0xffffffff, 'syz0\x00', 0x71}, 0x1, 0x0, 0x4, 0xffffffffffffffff, 0x0, 0x0, 'syz0\x00', 0x0}) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r5, &(0x7f0000000140)={0xa, 0x4e22, 0x3, @ipv4={'\x00', '\xff\xff', @multicast1}}, 0x1c) 11.631161238s ago: executing program 8 (id=1776): bpf$MAP_CREATE(0x0, 0x0, 0x48) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000a50000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7050000080000a8c5000000a5000000180100002020640500000000002020207b1af8fe00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b300000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x35, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) syz_mount_image$squashfs(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x804cd8, &(0x7f00000000c0)=ANY=[@ANYRES8=0x0, @ANYRES64], 0x3, 0x232, &(0x7f0000000500)="$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") openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, &(0x7f00000000c0), 0x4) sendmsg$unix(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0xfffffffffffffe96, 0x0, 0x0, 0x0, 0x0, 0x20000001}, 0x40000) r5 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$IP_VS_SO_SET_ADD(r5, 0x0, 0x482, 0x0, 0x0) setsockopt$IP_VS_SO_SET_FLUSH(r5, 0x0, 0x485, 0x0, 0x0) 7.663740878s ago: executing program 6 (id=1777): r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000000)) r1 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$lock(r2, 0x6, &(0x7f0000002000)={0x1}) fcntl$lock(r2, 0x26, &(0x7f00000031c0)={0x1}) fcntl$lock(r2, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x3}) fcntl$lock(r2, 0x7, &(0x7f0000000200)={0x0, 0x2, 0x8, 0x7}) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000c80)={'netdevsim0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x1c, 0x2, [@TCA_FQ_ORPHAN_MASK={0x8, 0xa, 0xd3b}, @TCA_FQ_QUANTUM={0x8, 0x3, 0xf1ff}, @TCA_FQ_FLOW_REFILL_DELAY={0x8, 0x9, 0x8}]}}]}, 0x48}}, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) r6 = openat$kvm(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) r7 = socket$key(0xf, 0x3, 0x2) r8 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) ioctl$SNDCTL_SEQ_GETOUTCOUNT(r8, 0x80045104, &(0x7f0000001180)) ioctl$FAT_IOCTL_SET_ATTRIBUTES(r8, 0x40047211, &(0x7f00000000c0)) sendmsg$key(r7, &(0x7f0000000040)={0xa, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=ANY=[@ANYBLOB="020300020c00000027bd706971000000030005002b800000020010000000000000000000000000000200010000000000000005fc010000e0030005000000000002000000ac1414aa0000000000000000020008000800000034"], 0x60}, 0x1, 0x7}, 0x0) ioctl$sock_netdev_private(r5, 0x89fa, &(0x7f0000000140)="480998b9d0e5d0ac42bcfabb57989b03d2d4249075ce3b19d414626408c4c6500ea08976d68840579843e015272a7ce160ba68a4e37889a7770fda12d9ccd5bbde7eba20642f715f2e9018c56bf4a7e6a8a6dff9ffa77886394c920a75c236595cec54febfbe3081491f28064bb65e7ac4458fd393575b5402b0f76b30353251c036166e86fd58") r9 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r9) timer_create(0x3, &(0x7f0000000000)={0x0, 0x1a, 0x1, @tid=r9}, &(0x7f0000000080)) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r5, 0x8933, &(0x7f0000000240)={'batadv_slave_0\x00', 0x0}) setsockopt$packet_add_memb(r5, 0x107, 0x1, &(0x7f0000000200)={r10, 0x1, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}, 0x20) setsockopt$packet_add_memb(r5, 0x107, 0x1, &(0x7f0000000100)={r10, 0x1, 0x6, @broadcast}, 0x10) sendmsg$key(r7, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f00000007c0)={0x2, 0xb, 0x6, 0x7, 0x1c, 0x0, 0x70bd2d, 0x25dfdbfc, [@sadb_ident={0x2, 0xa, 0x4, 0x0, 0x628}, @sadb_sa={0x2, 0x1, 0x4d5, 0x62, 0x6, 0x74, 0x4, 0x1}, @sadb_x_sec_ctx={0xb, 0x18, 0xb, 0x20, 0x4d, "373e20d80cf0ac8333916e2ac1e0c23637223f325fa5768daab5ef22e2c4f10b9368af1a2a175db48a54cb92e77ade9d389318f91dc2425fe5dfdacdf2505d7b983d17643261c923dc11da7346"}, @sadb_lifetime={0x4, 0x4, 0x7, 0x5, 0x3, 0x9}, @sadb_address={0x3, 0x5, 0xeb, 0x80, 0x0, @in={0x2, 0x4e23, @multicast2}}, @sadb_ident={0x2, 0xa, 0x8, 0x0, 0x2}, @sadb_ident={0x2, 0xb, 0x7e02, 0x0, 0x10000}]}, 0xe0}}, 0x0) setsockopt$packet_add_memb(r5, 0x107, 0x1, &(0x7f0000000040)={r4, 0x11, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}, 0x10) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000004c0)=ANY=[@ANYBLOB="7c000000100001002cbd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="a821000000000000140003006e657464657673696d30000000000200140014006e657464657673696d300000"], 0x7c}}, 0x0) 6.415683669s ago: executing program 8 (id=1778): r0 = fsopen(&(0x7f0000000100)='nfs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000140)='addr\x00', &(0x7f0000000180)='127.0.0.1\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f00000001c0)='source\x00', &(0x7f0000000200)='127.0.0.1:/export\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000240)='vers\x00', &(0x7f0000000280)='3\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000340)='mountproto\x00', 0x0, 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f00000003c0)='timeo\x00', &(0x7f0000000400)='1\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008e}, 0x0) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) setuid(0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x0, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) listen(0xffffffffffffffff, 0x5) r5 = eventfd2(0x0, 0x0) io_setup(0x4, &(0x7f0000000080)=0x0) io_pgetevents(r6, 0x2, 0x0, 0x0, 0x0, 0x0) epoll_pwait2(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000200), 0x0, 0x0) shutdown(0xffffffffffffffff, 0x0) copy_file_range(r5, 0x0, 0xffffffffffffffff, 0x0, 0x6, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) 4.894367038s ago: executing program 8 (id=1779): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'bond0\x00', 0x0}) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmsg$ETHTOOL_MSG_COALESCE_GET(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000004c0)={0x0}, 0x1, 0x0, 0x0, 0x48800}, 0x10) ioctl$sock_SIOCSIFVLAN_SET_VLAN_NAME_TYPE_CMD(r2, 0x8983, &(0x7f0000000000)={0x6, 'wlan1\x00', {0x944d}, 0x3}) r3 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000400)={'veth0_to_hsr\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x0, r4, {0x0, 0xffe1}, {0xffff, 0xffff}, {0xffe0, 0xfff3}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x4, 0x9}}]}}]}, 0x48}}, 0xc840) syz_open_dev$radio(&(0x7f00000000c0), 0xffffffffffffffff, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x40, 0x103) statx(0xffffffffffffffff, &(0x7f0000000300)='./file1\x00', 0x4000, 0x7ff, &(0x7f00000003c0)) geteuid() lsetxattr$system_posix_acl(&(0x7f0000000180)='./file2\x00', &(0x7f00000001c0)='system.posix_acl_default\x00', 0x0, 0x0, 0x1) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_ADD_COUNTERS(r5, 0x29, 0x41, 0x0, 0x48) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r6 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r6, &(0x7f0000019680)=""/102392, 0xfc30) fsopen(&(0x7f0000000100)='ocfs2_dlmfs\x00', 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="24000000010327bd7000ffdbdf2502000000"], 0x24}, 0x1, 0x0, 0x0, 0x240480d4}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001680)=@newtfilter={0xff0, 0x2c, 0xd2b, 0x70bd2b, 0x25dfdbfb, {0x0, 0x0, 0x0, r4, {0x6, 0x5}, {}, {0x7, 0xfff1}}, [@filter_kind_options=@f_fw={{0x7}, {0xfc4, 0x2, [@TCA_FW_ACT={0xfc0, 0x4, [@m_pedit={0xfbc, 0x1b, 0x0, 0x0, {{0xa}, {0xf90, 0x2, 0x0, 0x1, [@TCA_PEDIT_KEYS_EX={0xc4, 0x5, 0x0, 0x1, [{0x24, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x5}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x4}, @TCA_PEDIT_KEY_EX_CMD={0x6}]}, {0x4c, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x1}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x4}, @TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x5}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x7}]}, {0x3c, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x4}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x5}, @TCA_PEDIT_KEY_EX_CMD={0x6}]}, {0x14, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6}]}]}, @TCA_PEDIT_PARMS={0xec8, 0x2, {{{0x10000, 0x2, 0x20000000, 0xf, 0x7}, 0xc7, 0x3, [{0x10001, 0x5, 0x5, 0x9, 0x148, 0x1}, {0xfffffffe, 0x23b, 0x2, 0x446, 0x85, 0x5c83}, {0x4, 0x96ca, 0x73, 0x5, 0x8, 0x101}, {0x4, 0x400, 0x3, 0x3, 0xa97f, 0x9}, {0x7, 0x1, 0x1, 0x7576e630, 0x7fffffff, 0x7f}, {0x4, 0x200, 0x7, 0x8, 0x7, 0x1}, {0x0, 0xa0ae, 0x56a, 0x2, 0x400, 0x5}]}, [{0x40, 0x6, 0x4, 0x3, 0x1, 0x6}, {0xd00, 0x4, 0x1, 0x2, 0x5, 0x6}, {0x3, 0x3, 0x7, 0x0, 0x1, 0x5}, {0x0, 0x67, 0x2, 0x3, 0x6d8, 0x5}, {0x8, 0x2, 0xfffffff9, 0x94c, 0x4000000, 0x3}, {0x200, 0x6, 0x43e31e60, 0x0, 0x7, 0x3f7}, {0xb515, 0x5, 0x7, 0xbf7, 0x4, 0xffffffff}, {0x8, 0x400, 0x80, 0xc, 0xb, 0x2}, {0x41f, 0x2, 0xc0000000, 0x8001, 0x0, 0x3}, {0x7, 0x8001, 0x4, 0x0, 0x8, 0x4}, {0x0, 0xafd, 0x1000, 0x200000, 0x800, 0x6}, {0x9, 0xe5af, 0x5, 0x81b, 0x1, 0xc}, {0x81, 0x9, 0x9, 0x2, 0x1000, 0xfffffffe}, {0xfffffff7, 0xffffffff, 0xc, 0xbec, 0x1, 0xfffffffd}, {0x2ff, 0xc94, 0x46bc, 0x4, 0x8000}, {0x5, 0x3215, 0x5, 0x10, 0x1ff, 0x1d39}, {0xeab, 0x54, 0x7, 0x19a25db4, 0x8}, {0x238e, 0x31, 0x8, 0xd, 0x1000, 0x7}, {0xffffffff, 0x8001, 0xd0, 0x101, 0x3, 0x5}, {0x2, 0x8, 0x3d, 0x7, 0xfffffffa}, {0x3, 0x1, 0xe, 0x80000000, 0x7f, 0x6b}, {0x1, 0x9b, 0xb, 0x7fffffff, 0xffff, 0x4}, {0x10001, 0xc, 0x3, 0xb, 0x6, 0xffffff7e}, {0x2ec59bb7, 0xdc2, 0x7, 0xffc0000, 0x6, 0x6}, {0xd20d, 0x3, 0x7, 0x9, 0x9, 0x5}, {0x13, 0x2, 0x8, 0x6, 0x6, 0x5}, {0x7f, 0x7, 0x1, 0x7, 0x3, 0x9}, {0x5, 0x7, 0xa37, 0x3, 0x5, 0x1ff}, {0x8, 0x100, 0x3, 0x4, 0x4}, {0x6, 0x1, 0x810, 0x0, 0x2cc}, {0x8001, 0xfffffffa, 0x5, 0xc33, 0xd, 0x400}, {0x1, 0x2, 0x4, 0xffff0001, 0x3ffc0000, 0x3ff}, {0x8, 0x5, 0x4456, 0x9, 0x7, 0x9}, {0x4, 0x31a, 0x6, 0x3, 0x8000, 0x7}, {0x1ff, 0x6, 0x1, 0xffff, 0x0, 0xb}, {0x2, 0x8, 0x9, 0x95b, 0x81, 0x8}, {0x81, 0x9, 0x200, 0x0, 0x6, 0x1}, {0x5, 0x6, 0x3, 0x7, 0x3, 0x1000}, {0x1, 0x7ff0, 0xc, 0x0, 0xffffffff, 0x7fffffff}, {0x0, 0x9, 0x82e, 0x1, 0xffffffff, 0x80000000}, {0xfffffff9, 0x8001, 0x7, 0x80000001, 0x3}, {0x1, 0x9, 0x3, 0x40, 0x40, 0x200}, {0x7fff, 0x0, 0xd540, 0x8, 0x9, 0x1}, {0x7ff, 0x4366, 0x8, 0x6a0, 0xc, 0x6}, {0xbd9, 0x6, 0x2, 0x4a, 0x1000, 0x7fffffff}, {0x3, 0x6, 0xd577, 0xe46b, 0x0, 0x7}, {0xfffffffe, 0x4, 0xe28, 0xe, 0x6, 0x2}, {0x8, 0xfd, 0x40000003, 0x3, 0x4, 0xb}, {0x9, 0x9, 0xf, 0x4, 0x9, 0x4}, {0x57, 0x0, 0xbd7b, 0x7, 0x8065, 0xa379}, {0x8, 0x7, 0xa1, 0x9, 0x6b7, 0x2}, {0xc0, 0x8, 0x10000, 0x7ff, 0x81, 0xbe0e}, {0x58714c8a, 0x3, 0x9, 0x7fff, 0xfffff001, 0x4}, {0x3, 0x41, 0x10, 0x1fd56072, 0x8, 0x6469}, {0xf68, 0x3, 0xb, 0x6, 0x0, 0xa28}, {0x4, 0x67, 0xfffffffa, 0xffffffc7, 0x7, 0xfffff39a}, {0x9, 0x2, 0x80, 0x2, 0x1, 0x9}, {0x76, 0x8000, 0x2, 0x9, 0xfff, 0x9}, {0x2, 0x9, 0x63, 0x4, 0x5, 0x7}, {0xf7, 0x8, 0x0, 0xc2, 0x7, 0x1}, {0x1ff, 0x5, 0x2, 0x5, 0xd, 0x10000}, {0x0, 0x2, 0x5, 0x1, 0x80000001, 0xa}, {0x5e57, 0x0, 0x1, 0x8, 0xa2, 0x9}, {0x5, 0x2, 0xfffffffc, 0x6, 0x1a0}, {0x0, 0x9dca, 0x0, 0x5, 0x6, 0x7}, {0x101, 0x8, 0x5, 0x3, 0x4, 0x100}, {0x9, 0x3, 0x0, 0x0, 0x448, 0x3}, {0x9, 0x0, 0xcf, 0x3, 0x4}, {0x10001, 0xb, 0x462, 0x7f, 0x9, 0x3}, {0x8, 0x7, 0x796, 0x9, 0x7, 0x8}, {0x2, 0x7f, 0x3, 0x3, 0x0, 0x2}, {0x76580, 0xfff, 0x8, 0xfffffe01, 0x0, 0xfffffffe}, {0x7, 0x20000, 0xf6, 0xfff, 0xfffffffb, 0x1000}, {0x5, 0x1b1185a7, 0x6183, 0x8, 0x1, 0x401}, {0xfffffffc, 0x1, 0x10, 0x0, 0xf, 0x2}, {0x0, 0xffffffff, 0x8, 0xfffffffe, 0x12d}, {0xfffffffd, 0x5, 0x3, 0x8, 0x0, 0x5}, {0x101, 0x9, 0x1, 0x56c, 0x8, 0x81}, {0x80, 0xfffffffa, 0x9, 0x6, 0x7f, 0x5}, {0x0, 0x614, 0x74c1, 0x4, 0x9, 0x6}, {0x5, 0x96e1, 0xfd4, 0x8413}, {0x90, 0xf, 0x7, 0xfffffffb, 0x0, 0x4}, {0x1, 0x5, 0xd, 0xa, 0x7, 0x4}, {0xbfb, 0x4, 0x3ff, 0x9, 0xffffffff, 0xffffffff}, {0x5, 0x4d5f, 0xd5c, 0x401, 0x7, 0xb00c}, {0x7, 0xf, 0x1, 0x9, 0xfffffff8, 0x4}, {0x1706, 0x80000000, 0x4, 0x4, 0x2, 0xb8}, {0x3, 0x6, 0x6, 0x0, 0x8f, 0x6}, {0xa, 0x9, 0xffffffff, 0x73, 0x0, 0x10}, {0x4, 0x80, 0x400, 0x2, 0xfffffff9, 0x3}, {0x8, 0x4, 0x3, 0x40, 0xc40, 0x8}, {0xe4, 0x3, 0xc, 0x81, 0x1, 0xe0d}, {0x3, 0x100, 0x1d200000, 0x7, 0xb, 0x50}, {0x400, 0x30000000, 0x4, 0x457be482, 0x8, 0x5}, {0x8, 0x6, 0x8, 0x5, 0xa54, 0x8}, {0x9b1a, 0x8, 0xe5, 0xb, 0x10001, 0x9}, {0x456, 0x2, 0xe3b, 0x1, 0xffffffff, 0xf6}, {0x8, 0x550bcb49, 0x1, 0x8001, 0x1, 0x2}, {0x7, 0x2, 0x8, 0xd, 0x3, 0xfffffff8}, {0xfffffff8, 0x2, 0x100, 0xfffffff8, 0xffff7ec8, 0x4}, {0x81, 0x18, 0xfff, 0x10, 0x5, 0xfffffff7}, {0xa606, 0x1ff, 0x81, 0x8, 0x100, 0x8}, {0x80000000, 0x1a4, 0x6, 0x200, 0x2, 0x7}, {0x7, 0x73744c62, 0x4, 0x10001, 0x100, 0x3}, {0x8d, 0x2, 0x336e88d4, 0xffffffff, 0x80000000}, {0x1, 0x7fff, 0x2, 0x3, 0x1, 0x1}, {0x7fffffff, 0xee19, 0x23ab, 0x1, 0x100, 0x3}, {0x7, 0x1, 0x2, 0x400, 0x23, 0x4}, {0x1, 0x7, 0xfffffff8, 0x44b37923, 0x1, 0x469cff04}, {0x9, 0x8ee, 0xee9, 0x6, 0x1, 0x4}, {0x3, 0x200006, 0x624b, 0xb9, 0x2, 0x5}, {0x7, 0xe5e6, 0xd, 0xa669, 0x100, 0x2}, {0x10, 0x800, 0x63, 0x3ff, 0xd85, 0x6}, {0x1ff, 0xa2, 0x2, 0xe0, 0xfffffff8, 0xff}, {0x10, 0x2, 0x80000001, 0x1, 0x2}, {0x3d4d, 0x1, 0x8, 0x1, 0x9, 0xfffffff1}, {0xb8e, 0xffffffff, 0x8001, 0x8, 0xb0a, 0x3}, {0x4, 0xb, 0x2, 0x2, 0x9, 0x3ff}, {0x8, 0x8000, 0x1, 0x8, 0x5, 0x200}, {0xc1fd, 0x0, 0x6, 0x7fffffff, 0x4, 0x2}, {0x5, 0x8000, 0x7fffffff, 0x1, 0x9, 0x7}, {0x40, 0xfd, 0x2, 0x7, 0x1, 0x4}, {0x401, 0x800, 0x6, 0x9, 0x4, 0x4d1}, {0x5, 0x8, 0xe07de82, 0x4, 0x62, 0xb}, {0x200, 0x8, 0x1, 0x3, 0x7, 0x7f}, {0x3, 0x0, 0x13, 0x7, 0x7, 0x8}, {0x4f6, 0x6, 0x7, 0x6, 0x100, 0x1}, {0x7fff, 0x1e3, 0x7, 0x2, 0x8, 0x4}], [{0x0, 0x1}, {0x2, 0x1}, {0x0, 0x1}, {0x6}, {0x2}, {0x0, 0x1}, {0x0, 0x1}, {0x6, 0x1}, {0x4, 0x1}, {}, {0x4}, {0x2, 0x1}, {0x1}, {0x3}, {0x4}, {0x2, 0x1}, {0x5, 0x1}, {0x2, 0x1}, {}, {0x2}, {0x1}, {0x2, 0x1}, {0x0, 0x1}, {0x5, 0x1}, {0x3, 0x1}, {0x0, 0x1}, {0x1}, {0x4, 0x1}, {0x3}, {0x2}, {0x5}, {0x1}, {0x2, 0x1}, {0x3}, {0x3}, {0x1, 0x1}, {0x0, 0x1}, {}, {0x2, 0x1}, {0x0, 0x1}, {0x4}, {0x4, 0x1}, {0x4}, {0x1}, {0x2}, {0x3}, {0x5}, {0x2}, {0x2}, {}, {0x1, 0x1}, {0x3, 0x1}, {0x2, 0x1}, {0x1}, {0x2}, {0x3}, {0x1, 0x1}, {0x1}, {0x1}, {0x2}, {0x3}, {0x0, 0x1}, {0x3, 0x1}, {0x0, 0x1}, {0x1}, {0x1, 0x1}, {0x0, 0x1}, {0x4, 0x1}, {0x2}, {0x5, 0x1}, {}, {0x5, 0x1}, {}, {0x3, 0x1}, {0x5, 0x1}, {0x1}, {0x5}, {0x3, 0x1}, {0x5}, {0x5}, {}, {0x3, 0x1}, {0x5}, {0x5}, {}, {0x5, 0x1}, {0x4, 0x1}, {0x6}, {0x2, 0x1}, {0x2, 0x1}, {0x2}, {0x3}, {0x2, 0x1}, {0x5}, {0x3, 0x1}, {0x3, 0x1}, {0x3, 0x1}, {0x0, 0x1}, {0x1, 0x1}, {0x4}, {0x1}, {0x0, 0x1}, {0x5}, {}, {0x5}, {0x0, 0x1}, {0x2, 0x1}, {0x6, 0x1}, {0x5, 0x1}, {0x3}, {0x1}, {0x2, 0xbe4f9f066116f011}, {0x3, 0x1}, {0x0, 0x1}, {0x4, 0x1}, {0x3, 0x1}, {0x2, 0x1}, {0x0, 0x1}, {0x5}, {0x4}, {0x1, 0x1}, {0x5, 0x1}, {0x2, 0x1}, {0x3}, {0x5, 0x1}, {0x1, 0x1}, {0x3, 0x1}, {0x6, 0x1}]}}]}, {0x4}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2, 0x2}}}}]}]}}]}, 0xff0}, 0x1, 0x0, 0x0, 0x4004884}, 0x24040084) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="a80000001000ffff26bd7000fedbdf2500000000", @ANYRES32=0x0, @ANYBLOB="20ba0100380a04008000128009000100766c616e0000000070000280060001000400000004000380580004800c0001000a004000060000000c00010081000000080000000c00010000000000ffffffff0c00010004000000050000000c000100fbffffffff7f00000c00010003000000050000000c00010006000000000000000600050088a8000008000500", @ANYRES32=r1], 0xa8}}, 0x8000002) creat(0x0, 0x32) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x50) 3.379419205s ago: executing program 5 (id=1780): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f00000011c0)=ANY=[@ANYRES64=0x0], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) syz_open_dev$vim2m(0x0, 0x3, 0x2) r1 = socket$inet(0x2, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x290, 0x0, 0xb, 0xd0e0011, 0x120, 0xc6, 0x1f8, 0x1d8, 0x190, 0x1f8, 0x1d8, 0x3, 0x0, {[{{@ip={@rand_addr, @broadcast, 0x0, 0x0, 'nr0\x00', '\x00', {}, {}, 0x1}, 0x0, 0xd8, 0x120, 0x7000000, {}, [@common=@icmp={{0x28}, {0x0, "0010"}}, @common=@unspec=@connlimit={{0x40}}]}, @unspec=@CT0={0x48}}, {{@ip={@remote, @multicast1, 0x0, 0x0, 'bridge_slave_1\x00', 'virt_wifi0\x00'}, 0x0, 0x70, 0xd8}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x20000, 'syz1\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2f0) r5 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) sendmsg(r5, 0x0, 0x10040800) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), r6) sendmsg$ETHTOOL_MSG_TSINFO_GET(r6, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="01002dbd7000fedbdf252c00000018000180140002"], 0x2c}, 0x1, 0x0, 0x0, 0x20048881}, 0x2000c800) ioctl$sock_SIOCINQ(r5, 0x541b, 0x0) bpf$TOKEN_CREATE(0x24, 0x0, 0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) futex(0x0, 0xc, 0x1, 0x0, 0x0, 0x0) syz_clone(0x25000, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x18000000000002a0, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x60000000, 0x22, 0x30, &(0x7f0000000400)="f0821c123d981a1a2e7c613e359b3c0a3f3931fe41f06994eb8829966685c85e19aa", &(0x7f00000003c0)="553f2fb5dc93400d8a309712cda62e76f49bae896d8d802404394f0fdef2c2527415389d423ee2ccb489cdd5fc2e1df7"}, 0xb) 3.134452162s ago: executing program 8 (id=1781): r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000000)={'veth0\x00', {0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x14}}}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000040)={'veth0\x00', 0x1}) r1 = socket$netlink(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r1, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x5}, 0x100) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./config\x00', &(0x7f0000000040)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./config/nvmet\x00', 0x1ff) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config/nvmet/subsystems/testnqn\x00', 0x1ff) r2 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./config/nvmet/subsystems/testnqn/attr_allow_any_host\x00', 0x2, 0x0) write(r2, &(0x7f0000000180)='1\x00', 0x1) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./config/nvmet/subsystems/testnqn/namespaces\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./config/nvmet/subsystems/testnqn/namespaces/1\x00', 0x1ff) write(0xffffffffffffffff, &(0x7f0000000280)='/dev/nullb0\x00', 0xc) r3 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./config/nvmet/subsystems/testnqn/namespaces/1/enable\x00', 0x2, 0x0) write(r3, &(0x7f0000000300)='1\x00', 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./config/nvmet/ports\x00', 0x1ff) r4 = openat(0xffffffffffffff9c, &(0x7f00000003c0)='./config/nvmet/ports/1/addr_trtype\x00', 0x2, 0x0) write(r4, &(0x7f0000000400)='rdma\x00', 0x4) openat(0xffffffffffffff9c, &(0x7f0000000440)='./config/nvmet/ports/1/addr_adrfam\x00', 0x2, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f00000004c0)='./config/nvmet/ports/1/addr_traddr\x00', 0x2, 0x0) write(r5, &(0x7f0000000500)='172.20.20.20\x00', 0xc) r6 = openat(0xffffffffffffff9c, &(0x7f0000000540)='./config/nvmet/ports/1/addr_trsvcid\x00', 0x2, 0x0) write(r6, &(0x7f0000000580)='4420\x00', 0x4) symlinkat(&(0x7f00000005c0)='./config/nvmet/subsystems/testnqn\x00', 0xffffffffffffff9c, &(0x7f0000000600)='./config/nvmet/ports/1/subsystems/testnqn\x00') 3.132938682s ago: executing program 6 (id=1782): r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000), 0x102, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000380)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = socket$l2tp6(0xa, 0x2, 0x73) bind$l2tp6(r4, &(0x7f0000000040)={0xa, 0x0, 0xbf, @empty, 0x4, 0x100}, 0x20) bpf$PROG_LOAD(0x5, 0x0, 0x0) connect$l2tp6(r4, &(0x7f0000000f40)={0xa, 0x0, 0x0, @empty}, 0x20) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_FLUSH(r5, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000900)=ANY=[@ANYBLOB="1c0000000406010800000000000000000200000205000100070000008d19e0da1eab44795dee96d502b9dd1c0facca66750302e07ad5035f33ea1709268fc24f1c6db1613898b0be3c12717a4c67"], 0x1c}, 0x1, 0x0, 0x0, 0x20000810}, 0x80d0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000a00000a6c000000060a0104000000000000000002000000400004803c0001800a0001006d617463680000002c000280140003002000000000000000030007116b61979e0c000100636c75737465720008000240000000000900010073797a30000000000900020073797a32"], 0x94}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) r7 = syz_open_dev$loop(0x0, 0x3, 0x2000) ioctl$LOOP_SET_CAPACITY(r7, 0x4c07) sendmmsg$inet6(r4, &(0x7f0000000ac0)=[{{&(0x7f0000000180)={0xa, 0x0, 0x0, @empty}, 0x1b, 0x0, 0x0, 0x0, 0x0, 0xc0fe}}], 0x17fd147c801ae9af, 0xff14) ioctl$RTC_IRQP_READ(r0, 0x8008700b, &(0x7f0000000040)) 2.087609658s ago: executing program 5 (id=1783): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = socket(0x10, 0x803, 0x0) r2 = syz_io_uring_setup(0xefd, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000080)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$inet_tcp(0x2, 0x1, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000200)={0x58, 0x2, 0x6, 0x5, 0x0, 0x0, {0x5, 0x0, 0x1}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0xd4}]}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}]}, 0x58}}, 0x0) sendmsg$IPSET_CMD_ADD(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)={0x40, 0x9, 0x6, 0x201, 0x0, 0x0, {0x2, 0x0, 0xffff}, [@IPSET_ATTR_DATA={0x18, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @multicast2}}, @IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0x2}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x40}, 0x1, 0x0, 0x0, 0x800}, 0x40c0080) io_uring_enter(r2, 0x1, 0xfffffffd, 0x9, 0x0, 0x0) syz_genetlink_get_family_id$gtp(0x0, r1) r7 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqsrc(r7, 0x0, 0x26, &(0x7f00000000c0)={@multicast1, @empty, @rand_addr=0x64010100}, 0xc) getsockopt$sock_cred(r7, 0x1, 0x11, &(0x7f0000000040), 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000440)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_tcp(&(0x7f0000000280), &(0x7f0000000300)='./file0\x00', &(0x7f0000000340), 0x800002, &(0x7f0000000380)=ANY=[@ANYBLOB='trans=tcp,port=0x0000000000004']) setsockopt(r0, 0x84, 0x81, &(0x7f00000002c0)="1a0000000200", 0x6) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r0, 0x84, 0x23, 0x0, 0x0) r8 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r8, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) syz_open_dev$dri(0x0, 0x44, 0x48900) 1.763901786s ago: executing program 8 (id=1784): r0 = userfaultfd(0x801) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000001c0)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) ioctl$XFS_IOC_FSGROWFSRT(r0, 0x40105870, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = syz_open_dev$sndctrl(&(0x7f0000000100), 0x0, 0x0) syz_emit_ethernet(0x76, &(0x7f0000000580)=ANY=[@ANYBLOB], 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_inet6_SIOCDELRT(r5, 0x890c, &(0x7f0000005fc0)={@remote, @private0={0xfc, 0x0, '\x00', 0x1}, @empty, 0x7, 0x8000, 0x3d, 0x500, 0x5, 0x18c0012}) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000b00)={'syz0\x00', {0x5, 0x7, 0x3, 0x7}, 0x50, [0x2, 0x9, 0x0, 0x1, 0x8, 0xea45, 0xe, 0x1, 0x63, 0x1, 0x6, 0xc, 0x2, 0x9, 0x1, 0x4, 0x8001000, 0x7fffffff, 0x51, 0x8, 0x800, 0xa4d, 0x3ff, 0x4, 0x6, 0x4, 0xffff, 0x0, 0x9, 0x6, 0x10401, 0xc, 0x9, 0x4, 0x2, 0x1, 0x5, 0x4, 0x1, 0x4, 0xa, 0x8, 0x3, 0x9, 0x804d7f, 0x2, 0x8c00, 0x6, 0x939, 0x5, 0x9, 0x2, 0x2, 0x4, 0xfffffff7, 0x7fff, 0x6, 0x5, 0x80000001, 0xd77, 0x5, 0x2a, 0x1, 0x23], [0x8, 0xfff, 0x72, 0x9, 0x80000005, 0x12, 0x800, 0x2c, 0x0, 0x2329, 0xfd8, 0x3, 0x7, 0x5, 0x0, 0x24a, 0x80000001, 0xfffffff7, 0x0, 0x3, 0x5, 0x4009, 0x80, 0xb, 0x8001, 0x40, 0x6, 0x4, 0xffffffff, 0x5, 0x10004, 0x9e, 0xffffff00, 0x7ff, 0x6, 0x7, 0x0, 0xe, 0xffff3f16, 0x2, 0x2, 0x9, 0xa, 0x5, 0x2, 0x207, 0x800, 0x5, 0xc5, 0x3, 0x1, 0x9, 0x8, 0x3, 0xffff7ff7, 0x3, 0x24c, 0x1ff, 0x2a0, 0x5, 0x6, 0x6, 0x280007, 0x8], [0x20002, 0x9, 0x1a9e1bf7, 0xfffffffc, 0x8, 0x9, 0x1, 0x8, 0x7aae, 0x5, 0x2, 0x7ffffff7, 0x8000, 0x1, 0x1, 0x5, 0x400, 0x2, 0x2b0, 0x3, 0x97f82544, 0x8, 0x0, 0x0, 0x9, 0x4, 0x7, 0x10000, 0xc90, 0xffffff3c, 0x8b2, 0x10, 0x4, 0x7, 0x140, 0x2, 0x2, 0x1000000c, 0x0, 0x6, 0x7, 0x8007c12, 0x5, 0x1, 0x17, 0x8000, 0xe, 0xf3, 0x4, 0x8, 0x1, 0xffffff00, 0x100, 0x3fff80, 0x2, 0x0, 0x8, 0xdd, 0x1, 0x9, 0xc3, 0x20ffff, 0x7a0], [0x9, 0x3a8d, 0xffff9a7f, 0x400, 0x6, 0x1, 0x1, 0xfffffff3, 0xd077, 0x2, 0xffffffff, 0x1f, 0x81, 0xa, 0x6, 0x2, 0x200, 0xfe, 0x2, 0x66608000, 0x5e82, 0x7fb, 0x6, 0x0, 0x4, 0x5, 0x80000001, 0xffff, 0x101, 0x0, 0xfffffffd, 0x1, 0x10001, 0x61, 0x10, 0x1000, 0xc, 0x100, 0x8, 0x20000000, 0x8, 0x15, 0xb32a, 0xec000000, 0x8001, 0x1904, 0x0, 0xc, 0x8, 0x7ff, 0x280, 0x5, 0xfffffffb, 0x7, 0x6e79, 0x5, 0xc, 0x9371, 0x4f89, 0x7, 0x580, 0x2d1, 0x80, 0x8]}, 0x45c) mmap(&(0x7f00005aa000/0x4000)=nil, 0x4000, 0x1, 0x20010, 0xffffffffffffffff, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r4, 0xc1105517, &(0x7f0000000340)={{0x0, 0x1, 0x0, 0xffffffff, 'syz0\x00', 0x71}, 0x1, 0x0, 0x4, 0xffffffffffffffff, 0x0, 0x0, 'syz0\x00', 0x0}) 1.428480624s ago: executing program 6 (id=1785): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./config\x00', &(0x7f0000000080)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./config/usb_gadget/g1\x00', 0x1ff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./config/usb_gadget/g1/idVendor\x00', 0x1, 0x0) write(r0, &(0x7f0000000140)='0x17b3\n\x00', 0x7) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./config/usb_gadget/g1/idProduct\x00', 0x1, 0x0) write(r1, &(0x7f0000000400)="5053991c82ddc7f75765a560ad3f59c4795031a503c8358a576cdc91230000000000", 0x22) close(r1) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./config/usb_gadget/g1/strings/0x409\x00', 0x1ff) socket$nl_generic(0x10, 0x3, 0x10) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) openat$fuse(0xffffffffffffff9c, &(0x7f00000002c0), 0x42, 0x0) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000400)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x10, 0x1c, &(0x7f0000000040)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0xe0}, {{0x18, 0x1, 0x1, 0x0, r4}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x2, 0x1}, {0x3, 0x3, 0x6, 0xa, 0xa, 0xfff8, 0xf1}, {0x7, 0x1, 0xb, 0x2, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {0x7, 0x0, 0x0, 0x9}, {0x7, 0x0, 0xc}, {0x18, 0x2, 0x2, 0x0, r3}, {}, {0x46, 0x8, 0xfff1, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x12, 0x3, &(0x7f0000000100)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x4}}, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mount$fuse(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000340)=ANY=[]) mkdir(&(0x7f0000000100)='./file1\x00', 0x13b) r5 = socket(0x10, 0x3, 0x0) write(r5, &(0x7f0000000000)="2400000011005f0414f9f40700090400810000000d0000000000000008000f0001000000", 0x24) r6 = openat$dsp1(0xffffffffffffff9c, &(0x7f00000001c0), 0x9640, 0x0) ppoll(&(0x7f0000000040)=[{r6, 0xb00}], 0x1, 0x0, 0x0, 0x0) 0s ago: executing program 8 (id=1786): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x9, 0x6, 0xff, 0x5}, 0x50) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="230000000800000002000000ffff000005"], 0x48) r0 = getpid() rt_sigprocmask(0x0, &(0x7f0000000000)={[0xfffffffffffffff9]}, 0x0, 0x8) r1 = gettid() r2 = gettid() tkill(r1, 0x12) tkill(r1, 0x1) tkill(r2, 0x14) syz_pidfd_open(r0, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42797000) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) read$FUSE(r3, &(0x7f0000006e80)={0x2020}, 0x2082) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x102}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) migrate_pages(0x0, 0x8, 0x0, 0x0) r7 = syz_open_dev$vim2m(&(0x7f0000001880), 0x33a, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r7, 0xc0145608, &(0x7f0000000040)={0x8, 0x1, 0x1}) ioctl$vim2m_VIDIOC_QBUF(r7, 0xc058560f, &(0x7f00000001c0)=@mmap={0x0, 0x1, 0x4, 0x20, 0x0, {0x77359400}, {0x4, 0x0, 0x1, 0x1, 0x0, 0x1}, 0x291d}) ioctl$vim2m_VIDIOC_STREAMOFF(r7, 0x40045612, &(0x7f0000000100)=0x1) kernel console output (not intermixed with test programs): Port device team_slave_1 removed [ 855.751404][ T9] team0 (unregistering): Port device team_slave_0 removed [ 855.934486][ T9] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 856.079552][ T9] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 861.949339][T10122] "syz.6.1226" (10122) uses obsolete ecb(arc4) skcipher [ 864.398071][ T9] bond0 (unregistering): Released all slaves [ 864.715334][ T4431] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 864.722960][ T4431] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 864.764938][ T9824] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 868.980199][ T4341] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 869.024555][ T4341] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 869.836237][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 870.400394][ T9824] device veth0_vlan entered promiscuous mode [ 870.412517][ T4341] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 870.450484][ T4341] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 870.481570][ T9610] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 870.576498][ T9610] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 870.585492][ T9610] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 870.598202][ T9610] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 870.609930][ T9610] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 870.618142][ T9610] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 870.648542][ T9824] device veth1_vlan entered promiscuous mode [ 870.936073][ T4341] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 870.976248][ T4341] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 871.491302][ T9] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 871.904711][ T9] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 873.313815][ T4279] Bluetooth: hci0: command 0x0409 tx timeout [ 873.534536][ T4277] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 873.552457][ T4277] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 873.575135][ T4277] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 873.587833][ T4277] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 873.614016][ T9] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 873.664510][ T4277] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 873.694859][ T4277] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 873.761012][T10176] chnl_net:caif_netlink_parms(): no params data found [ 874.201486][ T9] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 874.458038][T10210] ieee802154 phy1 wpan1: encryption failed: -22 [ 874.796171][T10219] serio: Serial port ptm0 [ 875.339970][ T4279] Bluetooth: hci0: command 0x041b tx timeout [ 875.739436][ T4279] Bluetooth: hci1: command 0x0409 tx timeout [ 875.756242][T10176] bridge0: port 1(bridge_slave_0) entered blocking state [ 875.811887][T10176] bridge0: port 1(bridge_slave_0) entered disabled state [ 875.829030][T10176] device bridge_slave_0 entered promiscuous mode [ 875.841306][T10176] bridge0: port 2(bridge_slave_1) entered blocking state [ 875.856094][T10176] bridge0: port 2(bridge_slave_1) entered disabled state [ 875.890396][T10176] device bridge_slave_1 entered promiscuous mode [ 876.016429][T10176] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 876.057901][T10176] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 876.124117][T10230] loop3: detected capacity change from 0 to 4096 [ 876.238303][T10230] ntfs3: loop3: Mark volume as dirty due to NTFS errors [ 876.282927][T10201] chnl_net:caif_netlink_parms(): no params data found [ 876.532464][T10176] team0: Port device team_slave_0 added [ 877.168722][T10176] team0: Port device team_slave_1 added [ 877.417295][ T4279] Bluetooth: hci0: command 0x040f tx timeout [ 877.818473][ T4279] Bluetooth: hci1: command 0x041b tx timeout [ 878.272411][T10176] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 878.280507][T10176] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 878.309409][T10176] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 878.505203][T10176] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 879.497170][ T4279] Bluetooth: hci0: command 0x0419 tx timeout [ 879.896881][ T4279] Bluetooth: hci1: command 0x040f tx timeout [ 881.415237][T10176] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 881.511063][T10176] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 881.697894][T10201] bridge0: port 1(bridge_slave_0) entered blocking state [ 881.705097][T10201] bridge0: port 1(bridge_slave_0) entered disabled state [ 881.743172][T10201] device bridge_slave_0 entered promiscuous mode [ 881.778555][T10201] bridge0: port 2(bridge_slave_1) entered blocking state [ 881.785771][T10201] bridge0: port 2(bridge_slave_1) entered disabled state [ 881.801347][T10201] device bridge_slave_1 entered promiscuous mode [ 881.976967][ T4279] Bluetooth: hci1: command 0x0419 tx timeout [ 882.754325][T10201] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 884.317769][T10201] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 884.538823][T10176] device hsr_slave_0 entered promiscuous mode [ 884.625013][T10176] device hsr_slave_1 entered promiscuous mode [ 884.753839][T10176] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 884.825496][T10176] Cannot create hsr debugfs directory [ 885.557359][T10201] team0: Port device team_slave_0 added [ 885.617922][T10201] team0: Port device team_slave_1 added [ 887.647551][T10318] loop2: detected capacity change from 0 to 256 [ 887.656544][T10318] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 887.876261][T10318] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 888.055165][T10201] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 888.066495][T10201] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 888.111615][T10201] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 888.325664][T10201] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 888.333509][T10201] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 888.459550][T10326] syz.6.1269 sent an empty control message without MSG_MORE. [ 889.196118][T10201] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 889.377781][ T9] device hsr_slave_0 left promiscuous mode [ 889.417865][ T9] device hsr_slave_1 left promiscuous mode [ 889.481794][ T9] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 889.529161][ T9] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 889.586146][ T9] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 889.608222][ T94] block nbd2: Attempted send on invalid socket [ 889.614727][ T94] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 889.626425][T10331] efs: cannot read volume header [ 889.663330][ T9] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 889.725954][ T9] device bridge_slave_1 left promiscuous mode [ 889.772118][ T9] bridge0: port 2(bridge_slave_1) entered disabled state [ 889.849791][ T9] device bridge_slave_0 left promiscuous mode [ 889.892300][ T9] bridge0: port 1(bridge_slave_0) entered disabled state [ 890.143867][ T9] device veth1_macvtap left promiscuous mode [ 890.181018][ T9] device veth0_macvtap left promiscuous mode [ 890.206185][ T9] device veth1_vlan left promiscuous mode [ 890.248723][ T9] device veth0_vlan left promiscuous mode [ 891.151218][ T9] team0 (unregistering): Port device team_slave_1 removed [ 891.196685][ T9] team0 (unregistering): Port device team_slave_0 removed [ 891.242418][ T9] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 891.289195][ T9] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 891.657701][ T9] bond0 (unregistering): Released all slaves [ 891.803890][T10329] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1261'. [ 891.821742][T10329] device erspan0 left promiscuous mode [ 891.837190][T10329] bridge0: port 3(erspan0) entered disabled state [ 891.850345][T10329] device bridge_slave_1 left promiscuous mode [ 891.881773][T10329] bridge0: port 2(bridge_slave_1) entered disabled state [ 891.921797][T10329] device bridge_slave_0 left promiscuous mode [ 891.940759][T10329] bridge0: port 1(bridge_slave_0) entered disabled state [ 895.519718][T10201] device hsr_slave_0 entered promiscuous mode [ 895.537691][T10201] device hsr_slave_1 entered promiscuous mode [ 895.544849][T10201] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 895.557148][T10201] Cannot create hsr debugfs directory [ 895.563581][T10356] netlink: 56 bytes leftover after parsing attributes in process `syz.3.1264'. [ 895.956586][T10176] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 896.016473][T10176] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 896.087264][T10176] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 896.100595][T10176] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 896.374078][T10369] loop5: detected capacity change from 0 to 4671 [ 896.550810][T10368] loop5: detected capacity change from 4671 to 6143 [ 896.568123][T10176] 8021q: adding VLAN 0 to HW filter on device bond0 [ 896.675511][ T4473] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 896.686396][ T4473] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 896.723766][T10176] 8021q: adding VLAN 0 to HW filter on device team0 [ 896.821147][ T4374] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 896.858385][ T4374] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 896.903999][ T4374] bridge0: port 1(bridge_slave_0) entered blocking state [ 896.911223][ T4374] bridge0: port 1(bridge_slave_0) entered forwarding state [ 896.997377][ T4374] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 897.108222][ T4374] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 897.125733][ T4374] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 897.424880][ T4374] bridge0: port 2(bridge_slave_1) entered blocking state [ 897.432126][ T4374] bridge0: port 2(bridge_slave_1) entered forwarding state [ 898.206492][ T4374] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 898.983994][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 901.553391][T10383] device syzkaller0 entered promiscuous mode [ 902.275697][ T4632] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 902.361623][ T4632] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 902.835245][ T4632] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 902.890975][ T4632] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 903.011059][ T4632] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 903.132856][ T4632] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 903.241196][ T4632] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 903.259108][ T4527] rpcbind: server 127.0.0.1 not responding, timed out [ 905.306943][ T4632] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 905.315500][ T4632] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 905.366571][T10201] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 905.427720][T10176] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 905.518806][T10201] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 905.673074][T10201] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 905.698305][T10201] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 905.753820][ T27] audit: type=1800 audit(1786638302.679:223): pid=10416 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.1277" name="power" dev="configfs" ino=52533 res=0 errno=0 [ 906.269779][T10418] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 906.351201][T10418] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 906.414743][ T9] device hsr_slave_0 left promiscuous mode [ 906.467989][ T9] device hsr_slave_1 left promiscuous mode [ 906.491728][ T9] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 906.515062][ T9] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 906.537830][ T9] device bridge_slave_1 left promiscuous mode [ 906.545288][ T9] bridge0: port 2(bridge_slave_1) entered disabled state [ 906.575677][ T9] device bridge_slave_0 left promiscuous mode [ 906.587059][ T9] bridge0: port 1(bridge_slave_0) entered disabled state [ 906.640020][ T9] device veth1_vlan left promiscuous mode [ 906.645987][ T9] device veth0_vlan left promiscuous mode [ 910.622299][ T9] team0 (unregistering): Port device team_slave_1 removed [ 910.694371][ T9] team0 (unregistering): Port device team_slave_0 removed [ 910.782908][ T9] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 910.920179][ T9] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 912.732677][ T9] bond0 (unregistering): Released all slaves [ 912.769243][T10452] loop6: detected capacity change from 0 to 4096 [ 912.815303][T10452] ntfs3: loop6: Mark volume as dirty due to NTFS errors [ 913.087123][T10201] 8021q: adding VLAN 0 to HW filter on device bond0 [ 913.386461][T10201] 8021q: adding VLAN 0 to HW filter on device team0 [ 913.856894][ T4431] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 913.864816][ T4431] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 913.977717][ T4431] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 913.986550][ T4431] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 914.024463][ T4431] bridge0: port 1(bridge_slave_0) entered blocking state [ 914.031712][ T4431] bridge0: port 1(bridge_slave_0) entered forwarding state [ 914.138677][T10461] sctp: [Deprecated]: syz.3.1284 (pid 10461) Use of int in max_burst socket option deprecated. [ 914.138677][T10461] Use struct sctp_assoc_value instead [ 914.249085][ T4431] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 914.286093][T10465] netlink: 204 bytes leftover after parsing attributes in process `syz.3.1284'. [ 915.119015][ T4431] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 915.158637][ T4431] bridge0: port 2(bridge_slave_1) entered blocking state [ 915.165807][ T4431] bridge0: port 2(bridge_slave_1) entered forwarding state [ 915.223703][ T4431] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 915.357987][ T4431] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 915.407778][ T4431] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 915.473271][ T4431] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 915.693715][ T4431] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 915.907177][ T4431] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 916.102784][ T4431] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 916.152941][ T4431] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 916.197673][ T4431] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 916.249406][ T4431] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 916.328846][ T4431] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 916.347817][ T4431] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 916.420383][T10176] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 917.847190][ T4428] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 917.854732][ T4428] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 918.755086][T10499] MTD: Attempt to mount non-MTD device "/dev/nullb0" [ 918.763638][T10499] cramfs: wrong magic [ 919.545741][ T4428] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 919.581685][ T4428] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 919.636517][T10201] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 922.771887][T10517] loop3: detected capacity change from 0 to 1024 [ 922.951713][T10517] EXT4-fs: Ignoring removed bh option [ 923.148037][T10517] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a80ec028, mo2=0002] [ 923.242832][T10517] System zones: 0-1, 3-12 [ 923.250064][T10517] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 923.397104][ T5870] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 923.427286][ T5870] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 923.571908][T10176] device veth0_vlan entered promiscuous mode [ 923.652656][ T9785] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 923.708755][T10526] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 923.717884][T10526] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 923.761999][ T9785] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 923.905972][T10176] device veth1_vlan entered promiscuous mode [ 923.916610][ T9785] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 923.960747][ T9785] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 924.008557][ T9785] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 924.106077][ T4543] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 924.130832][ T4543] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 924.173986][ T4543] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 924.207843][ T4285] EXT4-fs (loop3): unmounting filesystem. [ 924.230276][T10176] device veth0_macvtap entered promiscuous mode [ 924.272953][T10176] device veth1_macvtap entered promiscuous mode [ 924.355101][T10176] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 924.444562][T10176] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 924.484434][T10176] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 924.533849][T10176] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 924.575053][T10176] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 924.604843][T10176] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 924.641995][T10176] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 927.724244][ T4431] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 927.739621][ T4431] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 927.782155][ T4431] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 927.895521][ T4431] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 928.232650][T10556] serio: Serial port ptm0 [ 930.780091][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 931.885748][ T53] block nbd6: Attempted send on invalid socket [ 931.892580][ T53] I/O error, dev nbd6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 931.902794][T10579] FAT-fs (nbd6): unable to read boot sector [ 931.929944][T10579] netlink: 20 bytes leftover after parsing attributes in process `syz.6.1300'. [ 932.677702][ T4277] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 932.699481][ T9610] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 932.727040][ T9610] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 932.737614][ T9610] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 932.747022][ T9610] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 932.754709][ T9610] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 933.088268][ T9610] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 933.380819][ T9610] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 933.391755][ T9610] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 933.598104][ T4277] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 933.610356][ T4277] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 933.619128][ T4277] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 934.778020][ T4279] Bluetooth: hci0: command 0x0409 tx timeout [ 936.554233][ T4279] Bluetooth: hci3: command 0x0409 tx timeout [ 936.856981][ T4279] Bluetooth: hci0: command 0x041b tx timeout [ 938.140066][T10581] chnl_net:caif_netlink_parms(): no params data found [ 938.617946][ T4279] Bluetooth: hci3: command 0x041b tx timeout [ 938.936894][ T4279] Bluetooth: hci0: command 0x040f tx timeout [ 939.193010][T10588] chnl_net:caif_netlink_parms(): no params data found [ 940.697107][ T4279] Bluetooth: hci3: command 0x040f tx timeout [ 941.021653][ T4279] Bluetooth: hci0: command 0x0419 tx timeout [ 941.288668][T10637] netlink: 56 bytes leftover after parsing attributes in process `syz.2.1309'. [ 941.735392][T10581] bridge0: port 1(bridge_slave_0) entered blocking state [ 941.758352][T10581] bridge0: port 1(bridge_slave_0) entered disabled state [ 941.949210][T10581] device bridge_slave_0 entered promiscuous mode [ 943.539412][ T4279] Bluetooth: hci3: command 0x0419 tx timeout [ 943.624626][T10581] bridge0: port 2(bridge_slave_1) entered blocking state [ 943.682371][T10581] bridge0: port 2(bridge_slave_1) entered disabled state [ 943.698130][T10581] device bridge_slave_1 entered promiscuous mode [ 943.752203][T10581] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 943.779408][T10581] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 943.854185][T10581] team0: Port device team_slave_0 added [ 943.912257][T10581] team0: Port device team_slave_1 added [ 944.319363][T10581] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 944.334067][T10581] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 944.452277][T10581] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 944.620994][T10588] bridge0: port 1(bridge_slave_0) entered blocking state [ 944.649942][T10588] bridge0: port 1(bridge_slave_0) entered disabled state [ 944.707091][T10588] device bridge_slave_0 entered promiscuous mode [ 944.736022][T10581] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 944.743882][T10581] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 945.052798][T10581] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 945.348646][T10588] bridge0: port 2(bridge_slave_1) entered blocking state [ 945.423526][T10588] bridge0: port 2(bridge_slave_1) entered disabled state [ 945.455536][T10588] device bridge_slave_1 entered promiscuous mode [ 947.140727][T10588] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 949.633425][T10581] device hsr_slave_0 entered promiscuous mode [ 949.752106][T10581] device hsr_slave_1 entered promiscuous mode [ 949.786961][T10581] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 949.794595][T10581] Cannot create hsr debugfs directory [ 949.838595][T10588] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 950.995189][T10588] team0: Port device team_slave_0 added [ 952.943542][T10588] team0: Port device team_slave_1 added [ 953.128799][T10721] netlink: 56 bytes leftover after parsing attributes in process `syz.6.1319'. [ 953.198347][T10588] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 953.235839][T10588] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 953.526316][T10588] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 953.542778][T10588] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 955.035512][T10588] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 955.131621][T10588] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 956.166921][ T76] device hsr_slave_0 left promiscuous mode [ 956.174282][ T76] device hsr_slave_1 left promiscuous mode [ 956.187939][ T76] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 956.195431][ T76] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 956.217630][ T76] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 956.252619][ T76] device bridge_slave_1 left promiscuous mode [ 956.297179][ T76] bridge0: port 2(bridge_slave_1) entered disabled state [ 956.320893][ T76] device bridge_slave_0 left promiscuous mode [ 956.347000][ T76] bridge0: port 1(bridge_slave_0) entered disabled state [ 956.520986][ T76] device veth1_macvtap left promiscuous mode [ 956.567819][ T76] device veth0_macvtap left promiscuous mode [ 956.712914][ T76] device veth1_vlan left promiscuous mode [ 956.794259][ T76] device veth0_vlan left promiscuous mode [ 957.367274][T10742] xt_CT: You must specify a L4 protocol and not use inversions on it [ 957.695586][T10750] xt_CT: You must specify a L4 protocol and not use inversions on it [ 961.089713][ T76] team0 (unregistering): Port device team_slave_1 removed [ 961.419435][T10769] loop3: detected capacity change from 0 to 1024 [ 963.853321][ T76] team0 (unregistering): Port device team_slave_0 removed [ 964.027306][ T76] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 964.222357][ T76] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 964.408460][T10779] futex_wake_op: syz.3.1335 tries to shift op by 144; fix this program [ 964.449591][T10779] loop3: detected capacity change from 0 to 256 [ 964.500572][T10779] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x205ab87c, utbl_chksum : 0xe619d30d) [ 964.645241][T10779] syz.3.1335: attempt to access beyond end of device [ 964.645241][T10779] loop3: rw=0, sector=184, nr_sectors = 120 limit=256 [ 964.692662][ T27] audit: type=1800 audit(1786638361.489:224): pid=10779 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.1335" name="file1" dev="loop3" ino=1048691 res=0 errno=0 [ 964.752703][T10778] syz.3.1335: attempt to access beyond end of device [ 964.752703][T10778] loop3: rw=524288, sector=3552, nr_sectors = 256 limit=256 [ 964.753033][T10779] syz.3.1335: attempt to access beyond end of device [ 964.753033][T10779] loop3: rw=524288, sector=664, nr_sectors = 256 limit=256 [ 964.770435][T10778] syz.3.1335: attempt to access beyond end of device [ 964.770435][T10778] loop3: rw=0, sector=3680, nr_sectors = 8 limit=256 [ 964.784654][T10779] syz.3.1335: attempt to access beyond end of device [ 964.784654][T10779] loop3: rw=524288, sector=920, nr_sectors = 256 limit=256 [ 964.796181][T10778] syz.3.1335: attempt to access beyond end of device [ 964.796181][T10778] loop3: rw=0, sector=3680, nr_sectors = 8 limit=256 [ 964.808090][T10779] syz.3.1335: attempt to access beyond end of device [ 964.808090][T10779] loop3: rw=0, sector=664, nr_sectors = 8 limit=256 [ 964.808250][T10779] syz.3.1335: attempt to access beyond end of device [ 964.808250][T10779] loop3: rw=0, sector=664, nr_sectors = 8 limit=256 [ 964.822285][T10778] syz.3.1335: attempt to access beyond end of device [ 964.822285][T10778] loop3: rw=0, sector=3680, nr_sectors = 8 limit=256 [ 964.835082][T10779] syz.3.1335: attempt to access beyond end of device [ 964.835082][T10779] loop3: rw=0, sector=664, nr_sectors = 8 limit=256 [ 967.016868][T10783] binder: 10777:10783 ioctl 401c7012 0 returned -22 [ 967.038782][T10783] 9pnet: Unknown protocol version 9 [ 967.052302][T10783] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1342'. [ 969.112505][T10796] xt_CT: You must specify a L4 protocol and not use inversions on it [ 969.257370][ T76] bond0 (unregistering): Released all slaves [ 969.541163][T10588] device hsr_slave_0 entered promiscuous mode [ 969.590446][T10588] device hsr_slave_1 entered promiscuous mode [ 969.666392][T10588] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 969.697008][T10588] Cannot create hsr debugfs directory [ 970.169317][T10828] xt_CT: You must specify a L4 protocol and not use inversions on it [ 971.826567][T10837] 9pnet_fd: Insufficient options for proto=fd [ 973.688832][T10588] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 973.728499][T10588] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 973.814439][T10588] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 973.954695][T10588] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 974.011383][T10581] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 974.139146][T10581] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 974.205860][T10581] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 974.285783][T10581] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 975.592186][T10862] slcan: can't register candev [ 975.597797][T10862] Falling back ldisc for ttyS3. [ 979.493920][ T76] device hsr_slave_0 left promiscuous mode [ 979.507133][ T76] device hsr_slave_1 left promiscuous mode [ 979.557825][ T76] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 979.577900][ T76] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 979.629878][ T76] device bridge_slave_1 left promiscuous mode [ 979.750066][ T76] bridge0: port 2(bridge_slave_1) entered disabled state [ 979.855809][ T76] device bridge_slave_0 left promiscuous mode [ 979.912406][ T76] bridge0: port 1(bridge_slave_0) entered disabled state [ 982.029838][ T76] team0 (unregistering): Port device team_slave_1 removed [ 982.813836][ T76] team0 (unregistering): Port device team_slave_0 removed [ 982.994711][ T76] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 983.058225][T10912] Bluetooth: ISO socket layer initialized [ 983.891301][ T76] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 987.177321][T10933] slcan: can't register candev [ 987.182414][T10933] Falling back ldisc for ttyS3. [ 989.243508][ T76] bond0 (unregistering): Released all slaves [ 990.374938][T10588] 8021q: adding VLAN 0 to HW filter on device bond0 [ 990.389013][T10941] tipc: Started in network mode [ 990.394029][T10941] tipc: Node identity 4, cluster identity 4711 [ 990.400358][T10941] tipc: Node number set to 4 [ 990.608040][ T9785] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 990.617594][ T9785] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 990.660745][T10588] 8021q: adding VLAN 0 to HW filter on device team0 [ 992.026844][ T4404] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 992.058482][ T4404] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 992.098123][ T4277] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 992.106205][ T4404] bridge0: port 1(bridge_slave_0) entered blocking state [ 992.113401][ T4404] bridge0: port 1(bridge_slave_0) entered forwarding state [ 992.122971][ T4277] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 992.136848][ T4277] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 992.144906][ T4277] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 992.152888][ T4277] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 992.160308][ T4277] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 992.235677][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 992.309127][ T4404] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 993.852220][T10958] chnl_net:caif_netlink_parms(): no params data found [ 994.293797][ T4277] Bluetooth: hci4: unexpected event for opcode 0x042c [ 994.307235][ T4277] Bluetooth: hci1: command 0x0409 tx timeout [ 995.107782][ T4279] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 995.207198][ T4279] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 995.224173][ T4279] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 995.232442][ T4279] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 995.240460][ T4279] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 995.251174][ T4279] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 996.054598][T10958] bridge0: port 1(bridge_slave_0) entered blocking state [ 996.107110][T10958] bridge0: port 1(bridge_slave_0) entered disabled state [ 996.137568][T10958] device bridge_slave_0 entered promiscuous mode [ 996.146629][T10958] bridge0: port 2(bridge_slave_1) entered blocking state [ 996.154447][T10958] bridge0: port 2(bridge_slave_1) entered disabled state [ 996.171160][T10958] device bridge_slave_1 entered promiscuous mode [ 996.220975][T10996] xt_CT: You must specify a L4 protocol and not use inversions on it [ 996.387140][ T4277] Bluetooth: hci1: command 0x041b tx timeout [ 997.171959][T10958] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 997.286516][T10958] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 997.337999][ T4277] Bluetooth: hci0: command 0x0409 tx timeout [ 998.313265][T10958] team0: Port device team_slave_0 added [ 998.457098][ T4277] Bluetooth: hci1: command 0x040f tx timeout [ 999.416920][ T4277] Bluetooth: hci0: command 0x041b tx timeout [ 1000.161561][T10958] team0: Port device team_slave_1 added [ 1001.152154][ T4277] Bluetooth: hci1: command 0x0419 tx timeout [ 1001.185563][T10982] chnl_net:caif_netlink_parms(): no params data found [ 1001.224770][T10958] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1001.242066][T10958] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1001.280394][T10958] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1001.356083][T10958] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1001.364829][T10958] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1001.409284][T10958] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1002.636991][ T4277] Bluetooth: hci0: command 0x040f tx timeout [ 1003.133570][T10958] device hsr_slave_0 entered promiscuous mode [ 1003.164395][T10958] device hsr_slave_1 entered promiscuous mode [ 1003.180504][T10958] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1003.206871][T10958] Cannot create hsr debugfs directory [ 1003.249556][T10982] bridge0: port 1(bridge_slave_0) entered blocking state [ 1003.277006][T10982] bridge0: port 1(bridge_slave_0) entered disabled state [ 1003.298081][T10982] device bridge_slave_0 entered promiscuous mode [ 1003.352698][T10982] bridge0: port 2(bridge_slave_1) entered blocking state [ 1003.373931][T10982] bridge0: port 2(bridge_slave_1) entered disabled state [ 1003.399727][T10982] device bridge_slave_1 entered promiscuous mode [ 1003.531409][T10982] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1003.556348][T10982] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1003.858087][T11020] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1004.367333][T10982] team0: Port device team_slave_0 added [ 1004.497174][T10982] team0: Port device team_slave_1 added [ 1004.697164][ T4277] Bluetooth: hci0: command 0x0419 tx timeout [ 1004.745296][T10982] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1004.781416][T10982] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1004.876355][T10982] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1004.911773][T10982] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1004.926858][T10982] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1004.960745][T10982] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1005.101794][T10982] device hsr_slave_0 entered promiscuous mode [ 1005.132643][T10982] device hsr_slave_1 entered promiscuous mode [ 1005.176149][T10982] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1005.204708][T10982] Cannot create hsr debugfs directory [ 1007.129999][T11071] loop6: detected capacity change from 0 to 1024 [ 1013.414150][T10958] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 1013.637552][T10958] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 1013.768516][T10958] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 1013.868874][T10958] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 1015.124460][ T76] device hsr_slave_0 left promiscuous mode [ 1015.133123][T11109] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1015.158812][ T76] device hsr_slave_1 left promiscuous mode [ 1015.182634][ T76] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1015.224612][ T76] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1015.258302][ T76] device bridge_slave_1 left promiscuous mode [ 1015.264581][ T76] bridge0: port 2(bridge_slave_1) entered disabled state [ 1015.292088][ T76] device bridge_slave_0 left promiscuous mode [ 1015.306967][ T76] bridge0: port 1(bridge_slave_0) entered disabled state [ 1015.352043][ T76] device hsr_slave_0 left promiscuous mode [ 1015.367630][ T76] device hsr_slave_1 left promiscuous mode [ 1015.386637][ T76] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1015.394921][ T76] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1015.422587][ T76] device bridge_slave_1 left promiscuous mode [ 1015.439697][ T76] bridge0: port 2(bridge_slave_1) entered disabled state [ 1015.457118][ T76] device bridge_slave_0 left promiscuous mode [ 1015.463340][ T76] bridge0: port 1(bridge_slave_0) entered disabled state [ 1015.955854][ T76] team0 (unregistering): Port device team_slave_1 removed [ 1016.019287][ T76] team0 (unregistering): Port device team_slave_0 removed [ 1016.076643][ T76] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1016.135347][ T76] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1018.027022][T11126] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1018.836522][ T76] bond0 (unregistering): Released all slaves [ 1019.136043][T11133] futex_wake_op: syz.2.1391 tries to shift op by 144; fix this program [ 1022.986627][T11145] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1023.203338][ T76] team0 (unregistering): Port device team_slave_1 removed [ 1023.343096][ T76] team0 (unregistering): Port device team_slave_0 removed [ 1023.448062][ T76] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1023.554828][T11162] binder: 11157:11162 ioctl 401c7012 0 returned -22 [ 1023.578902][T11162] 9pnet: Unknown protocol version 9 [ 1023.591122][T11162] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1397'. [ 1023.815865][ T76] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1024.551056][ T76] bond0 (unregistering): Released all slaves [ 1025.005378][T11168] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1026.889409][T10958] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1026.907934][ T4404] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1026.923696][ T4404] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1026.941051][T10958] 8021q: adding VLAN 0 to HW filter on device team0 [ 1026.963739][T10982] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 1026.997211][ T4404] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1027.007684][ T4404] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1027.026375][ T4404] bridge0: port 1(bridge_slave_0) entered blocking state [ 1027.033598][ T4404] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1027.168636][ T4404] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1027.214026][ T4404] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1027.274665][ T4404] bridge0: port 2(bridge_slave_1) entered blocking state [ 1027.281894][ T4404] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1027.296448][T10982] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 1027.539235][T10982] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 1028.122864][T10958] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1028.206851][T10958] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1028.260322][ T4404] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1028.274233][ T4404] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1028.345227][ T4404] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1028.545713][ T4404] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1028.667940][ T4404] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1028.716081][ T4404] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1028.745415][ T4404] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1028.769896][ T4404] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1028.824218][ T4404] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1028.864492][ T4404] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1028.904032][ T4404] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1028.945911][T10982] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 1028.967919][ T4404] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1029.004450][ T4404] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1030.204819][T10982] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1030.246500][ T4374] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1031.349393][ T4374] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1031.459796][T10982] 8021q: adding VLAN 0 to HW filter on device team0 [ 1031.534898][ T7793] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1031.578410][ T7793] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1031.587768][ T7793] bridge0: port 1(bridge_slave_0) entered blocking state [ 1031.594975][ T7793] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1031.677210][ T7793] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1031.712627][ T7793] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1031.737842][ T7793] bridge0: port 2(bridge_slave_1) entered blocking state [ 1031.745078][ T7793] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1031.787159][ T7793] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1031.965449][ T9785] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1032.065965][ T9785] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1032.264696][ T9785] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1032.508119][ T9785] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1032.628214][ T9785] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1032.838765][T10982] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1032.883258][T10982] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1032.917005][ T9785] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1032.939733][ T9785] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1032.961634][ T9785] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1032.997641][ T9785] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1033.049001][ T9785] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1033.099791][ T9785] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1033.220779][ T9785] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1033.488735][ T9785] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1033.697602][ T9785] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1033.793641][T10958] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1034.617581][T11247] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1406'. [ 1036.402835][ T9791] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1036.415595][ T9791] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1036.456451][T10982] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1036.946233][T11265] MTD: Attempt to mount non-MTD device "/dev/nullb0" [ 1036.959715][T11265] cramfs: wrong magic [ 1037.513256][T11273] loop6: detected capacity change from 0 to 512 [ 1037.560764][T11273] FAT-fs (loop6): Directory bread(block 199916) failed [ 1037.567951][T11273] FAT-fs (loop6): Directory bread(block 199917) failed [ 1037.575050][T11273] FAT-fs (loop6): Directory bread(block 199918) failed [ 1037.582184][T11273] FAT-fs (loop6): Directory bread(block 199919) failed [ 1037.589267][T11273] FAT-fs (loop6): Directory bread(block 199920) failed [ 1037.596290][T11273] FAT-fs (loop6): Directory bread(block 199921) failed [ 1037.603363][T11273] FAT-fs (loop6): Directory bread(block 199922) failed [ 1037.610460][T11273] FAT-fs (loop6): Directory bread(block 199923) failed [ 1037.699353][T11273] FAT-fs (loop6): FAT read failed (blocknr 128) [ 1038.327866][ T5870] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1038.348518][ T5870] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1038.381141][ T5870] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1038.398756][ T5870] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1038.410552][T10958] device veth0_vlan entered promiscuous mode [ 1038.418133][ T5870] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1038.426630][ T5870] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1038.440345][T10958] device veth1_vlan entered promiscuous mode [ 1038.471815][ T9791] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 1038.481586][ T9791] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 1038.499179][ T9791] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1038.512112][ T9791] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1038.534734][T10958] device veth0_macvtap entered promiscuous mode [ 1038.571295][T10958] device veth1_macvtap entered promiscuous mode [ 1038.608956][T10958] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1038.628815][T10958] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1038.653081][T10958] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1038.663835][T10958] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1038.674844][T10958] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1038.689661][T10958] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1038.701805][T10958] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1038.717026][ T9791] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1038.725275][ T9791] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1038.734725][ T9791] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1038.746394][ T9791] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1038.759086][T10958] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1038.770334][T10958] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1038.781745][T10958] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1038.794816][T10958] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1038.805445][T10958] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1038.816259][T10958] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1038.830039][T10958] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1038.851317][ T9791] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1038.861528][ T9791] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1038.871446][ T9791] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1038.881149][ T9791] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1038.893429][T10958] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1038.904200][T10958] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1038.919247][T10958] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1038.931307][T10958] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1038.948777][ T9791] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1038.977801][ T9791] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1038.989693][T10982] device veth0_vlan entered promiscuous mode [ 1039.002688][ T9791] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1039.013976][ T9791] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1039.071382][T10982] device veth1_vlan entered promiscuous mode [ 1039.155371][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 1039.164819][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 1039.174291][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1039.184287][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1039.196301][ T4430] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1039.208157][T10982] device veth0_macvtap entered promiscuous mode [ 1039.214790][ T4430] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1039.224476][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1039.246510][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1039.282592][T10982] device veth1_macvtap entered promiscuous mode [ 1039.304548][ T76] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1039.320295][ T76] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1039.323192][T10982] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1039.340830][T10982] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1039.351556][T10982] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1039.362255][T10982] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1039.372452][T10982] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1039.383139][T10982] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1039.393615][T10982] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1039.404239][T10982] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1039.419362][T10982] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1039.428969][ T9785] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1039.437959][ T9785] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1039.446068][ T9785] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1039.455445][ T9785] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1039.470024][T10982] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1039.484625][T10982] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1039.494944][T10982] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1039.506128][T10982] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1039.520945][T10982] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1039.531914][T10982] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1039.541917][T10982] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1039.552410][T10982] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1039.563866][T10982] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1039.576454][T10982] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1039.585310][T10982] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1039.606617][T10982] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1039.615997][T10982] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1039.635049][ T9791] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1039.645119][ T9791] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1040.237237][ T4374] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1040.374011][ T4374] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1040.675124][ T9791] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1040.734877][ T9791] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1040.761324][ T9791] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1040.794112][ T9791] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1041.247364][T11321] tipc: Started in network mode [ 1041.252379][T11321] tipc: Node identity 4, cluster identity 4711 [ 1041.259360][T11321] tipc: Node number set to 4 [ 1044.158093][T11329] binder: 11311:11329 ioctl 401c7012 0 returned -22 [ 1044.178177][T11329] 9pnet: Unknown protocol version 9 [ 1044.193089][T11329] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1425'. [ 1048.190989][T11362] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1418'. [ 1053.682649][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 1056.413224][T11406] MTD: Attempt to mount non-MTD device "/dev/nullb0" [ 1056.750362][T11406] cramfs: wrong magic [ 1057.429937][ T27] audit: type=1800 audit(1786638454.359:225): pid=11411 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.1432" name="idVendor" dev="configfs" ino=56662 res=0 errno=0 [ 1057.624931][T11400] netlink: 52 bytes leftover after parsing attributes in process `syz.7.1423'. [ 1058.019580][ T27] audit: type=1800 audit(1786638454.489:226): pid=11411 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.1432" name="serialnumber" dev="configfs" ino=56667 res=0 errno=0 [ 1058.041515][ C1] vkms_vblank_simulate: vblank timer overrun [ 1058.257907][T11400] bridge0: port 2(bridge_slave_1) entered disabled state [ 1058.265279][T11400] bridge0: port 1(bridge_slave_0) entered disabled state [ 1058.366957][ T27] audit: type=1800 audit(1786638454.489:227): pid=11411 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.1432" name="manufacturer" dev="configfs" ino=56668 res=0 errno=0 [ 1058.443072][ T27] audit: type=1800 audit(1786638454.489:228): pid=11411 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.1432" name="configuration" dev="configfs" ino=56669 res=0 errno=0 [ 1059.347476][T11426] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1062.456171][T11444] fuse: Unknown parameter '' [ 1064.440048][T11451] Bluetooth: MGMT ver 1.22 [ 1066.262403][T11478] tipc: Started in network mode [ 1066.267638][T11478] tipc: Node identity 4, cluster identity 4711 [ 1066.273894][T11478] tipc: Node number set to 4 [ 1067.348944][ T27] audit: type=1800 audit(1786638464.279:229): pid=11483 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.1450" name="idVendor" dev="configfs" ino=56788 res=0 errno=0 [ 1068.353107][ T27] audit: type=1800 audit(1786638464.309:230): pid=11483 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.1450" name="serialnumber" dev="configfs" ino=56790 res=0 errno=0 [ 1068.804810][ T27] audit: type=1800 audit(1786638464.309:231): pid=11483 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.1450" name="manufacturer" dev="configfs" ino=56791 res=0 errno=0 [ 1068.886289][ T27] audit: type=1800 audit(1786638465.719:232): pid=11483 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.1450" name="configuration" dev="configfs" ino=57912 res=0 errno=0 [ 1077.526957][ T27] audit: type=1800 audit(1786638474.439:233): pid=11568 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.8.1467" name="attr_allow_any_host" dev="configfs" ino=56859 res=0 errno=0 [ 1077.550567][T11568] nvmet: failed to open block device (null): (-22) [ 1077.736787][ T27] audit: type=1800 audit(1786638474.479:234): pid=11568 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.8.1467" name="enable" dev="configfs" ino=56860 res=0 errno=0 [ 1077.935801][T11570] ieee802154 phy1 wpan1: encryption failed: -22 [ 1078.170835][T11579] tipc: Started in network mode [ 1078.175835][T11579] tipc: Node identity 4, cluster identity 4711 [ 1078.182255][T11579] tipc: Node number set to 4 [ 1079.322636][T11583] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1469'. [ 1087.891356][ T27] audit: type=1800 audit(1786638484.819:235): pid=11623 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.1478" name="attr_allow_any_host" dev="configfs" ino=56947 res=0 errno=0 [ 1087.921522][T11623] nvmet: failed to open block device (null): (-22) [ 1089.167092][ T27] audit: type=1800 audit(1786638484.849:236): pid=11623 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.1478" name="enable" dev="configfs" ino=56948 res=0 errno=0 [ 1092.016313][ T4277] Bluetooth: hci5: unexpected event for opcode 0x2016 [ 1106.248762][T11760] futex_wake_op: syz.6.1502 tries to shift op by 144; fix this program [ 1106.320281][T11762] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1110.351795][ T4633] kworker/dying (4633) used greatest stack depth: 20496 bytes left [ 1111.929468][T11815] printk: console [ttyGS0] disabled [ 1115.500491][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 1116.510110][T11856] netlink: 8 bytes leftover after parsing attributes in process `syz.8.1519'. [ 1118.061384][ T4277] Bluetooth: hci1: command 0x0406 tx timeout [ 1120.978468][T11902] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1123.229807][ T4279] Bluetooth: hci0: command 0x0406 tx timeout [ 1124.630050][T11923] ieee802154 phy1 wpan1: encryption failed: -22 [ 1129.048778][T11954] nvmet: failed to open block device (null): (-22) [ 1129.076789][ T27] audit: type=1800 audit(1786638525.969:237): pid=11954 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.7.1529" name="attr_allow_any_host" dev="configfs" ino=58522 res=0 errno=0 [ 1129.226778][ T27] audit: type=1800 audit(1786638525.979:238): pid=11954 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.7.1529" name="enable" dev="configfs" ino=58524 res=0 errno=0 [ 1136.402784][ T4279] Bluetooth: hci0: command 0x0405 tx timeout [ 1138.590722][T12019] futex_wake_op: syz.7.1548 tries to shift op by 144; fix this program [ 1140.872673][ T27] audit: type=1800 audit(1786638537.799:239): pid=12030 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.7.1551" name="attr_allow_any_host" dev="configfs" ino=59489 res=0 errno=0 [ 1140.903311][T12030] nvmet: failed to open block device (null): (-22) [ 1140.939843][ T27] audit: type=1800 audit(1786638537.829:240): pid=12030 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.7.1551" name="enable" dev="configfs" ino=59490 res=0 errno=0 [ 1145.156024][T12067] UBIFS error (pid: 12067): cannot open "(null)", error -22 [ 1155.002956][T12119] futex_wake_op: syz.8.1562 tries to shift op by 144; fix this program [ 1156.198662][T12122] nvmet: failed to open block device (null): (-22) [ 1156.216999][ T27] audit: type=1800 audit(1786638553.129:241): pid=12122 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.1564" name="attr_allow_any_host" dev="configfs" ino=59601 res=0 errno=0 [ 1156.334713][ T27] audit: type=1800 audit(1786638553.129:242): pid=12122 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.1564" name="enable" dev="configfs" ino=59602 res=0 errno=0 [ 1159.083353][T12154] atomic_op ffff8880545b4998 conn xmit_atomic 0000000000000000 [ 1162.916795][ T130] usb 3-1: new full-speed USB device number 3 using dummy_hcd [ 1164.144455][ T130] usb 3-1: device descriptor read/all, error -71 [ 1164.988004][ T27] audit: type=1800 audit(1786638561.919:243): pid=12197 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.7.1580" name="attr_allow_any_host" dev="configfs" ino=58820 res=0 errno=0 [ 1165.014975][T12197] nvmet: failed to open block device (null): (-22) [ 1165.073754][ T27] audit: type=1800 audit(1786638561.949:244): pid=12197 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.7.1580" name="enable" dev="configfs" ino=58822 res=0 errno=0 [ 1168.039735][ T4277] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1168.117083][ T4277] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1168.126344][ T4277] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1168.141692][ T4277] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1168.152842][ T4277] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 1168.162673][ T4277] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1170.216897][ T4279] Bluetooth: hci3: command 0x0409 tx timeout [ 1170.773434][T12235] infiniband syz1: ib_query_port failed (-19) [ 1173.742327][ T4279] Bluetooth: hci3: command 0x041b tx timeout [ 1175.874871][ T4277] Bluetooth: hci3: command 0x040f tx timeout [ 1176.567160][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 1177.488099][T12221] chnl_net:caif_netlink_parms(): no params data found [ 1177.953280][ T4277] Bluetooth: hci3: command 0x0419 tx timeout [ 1179.457063][ T4428] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1180.436386][T12304] futex_wake_op: syz.2.1598 tries to shift op by 144; fix this program [ 1182.995240][T12316] Cannot find add_set index 0 as target [ 1183.193011][ T4277] Bluetooth: hci0: unexpected subevent 0x06 length: 18 > 10 [ 1183.715735][ T4338] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 1183.723949][ T4338] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 1183.731572][ T4338] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 1183.741757][ T4338] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 1183.751143][ T4338] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 1183.766722][ T4338] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 1183.794546][ T4338] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 1183.816296][ T4338] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 1183.834018][ T4338] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 1183.843979][ T4338] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 1183.856340][ T4338] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 1183.866293][ T4338] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 1183.878500][ T4338] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 1183.885982][ T4338] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 1183.910975][ T4338] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 1183.931248][ T4338] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 1183.950720][ T4338] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 1183.962816][ T4338] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 1183.973184][ T4338] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 1183.990509][ T4338] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 1184.005396][ T4338] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 1184.017751][ T4338] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 1184.025303][ T4338] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 1184.038590][ T4338] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 1184.046164][ T4338] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 1184.064678][ T4338] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 1184.075909][ T4338] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 1184.087064][ T4338] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 1184.094654][ T4338] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 1184.109592][ T4338] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 1184.121595][ T4338] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 1184.132538][ T4338] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 1184.149882][ T4338] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 1184.167977][ T4338] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 1184.175442][ T4338] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 1184.203350][ T4338] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 1184.218600][ T4338] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 1184.226093][ T4338] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 1184.257190][ T4338] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 1184.264689][ T4338] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 1184.291877][ T4338] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 1184.306935][ T4338] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 1184.316164][ T4338] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 1184.330841][ T4338] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 1184.350177][ T4338] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 1184.382666][ T4338] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 1184.477353][ T4338] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 1184.552571][ T4338] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 1184.625342][ T4338] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 1184.705724][ T4338] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 1184.784763][ T4338] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 1184.879779][ T4338] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 1184.946440][ T4338] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 1185.020281][ T4338] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 1185.094755][ T4338] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 1185.130341][ T4338] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 1185.138261][ T4338] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 1185.146020][ T4338] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 1185.153979][ T4338] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 1185.167274][ T4338] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 1185.174720][ T4338] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 1185.183020][ T4338] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 1185.190756][ T4338] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 1185.198678][ T4338] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 1185.206122][ T4338] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 1185.214133][ T4338] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 1185.225028][ T4338] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 1185.234483][ T4338] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 1185.242458][ T4338] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 1185.250228][ T4338] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 1185.257072][ T4277] Bluetooth: hci0: command 0x2021 tx timeout [ 1185.259204][ T4338] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 1185.277093][ T4338] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 1185.284864][ T4338] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 1185.292745][ T4338] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 1185.300821][ T4338] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 1185.316986][ T4338] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 1185.334729][ T4338] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 1185.356748][ T4338] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 1185.364293][ T4338] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 1185.376128][ T4338] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 1185.383759][ T4338] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 1185.397097][ T4338] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 1185.404567][ T4338] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 1185.418717][ T4338] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 1185.426200][ T4338] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 1185.441459][ T4338] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 1185.455607][ T4338] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 1185.466336][ T4338] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 1185.477185][ T4338] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 1185.484649][ T4338] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 1185.497155][ T4338] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 1185.504770][ T4338] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 1185.515424][ T4338] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 1185.526120][ T4338] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 1185.676754][ T4338] hid-generic 0000:0000:0000.0001: hidraw0: HID v0.03 Device [syz1] on syz1 [ 1185.677267][ T4428] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1190.246338][ T4428] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1190.406134][T12359] ubi8: attaching mtd0 [ 1190.428480][T12359] ubi8: scanning is finished [ 1190.444869][T12359] ubi8: empty MTD device detected [ 1192.062376][T12359] ubi8: attached mtd0 (name "mtdram test device", size 0 MiB) [ 1192.070185][T12359] ubi8: PEB size: 4096 bytes (4 KiB), LEB size: 385 bytes [ 1192.077939][T12359] ubi8: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 1192.085023][T12359] ubi8: VID header offset: 3647 (aligned 3647), data offset: 3711 [ 1192.093564][T12359] ubi8: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 1192.100770][T12359] ubi8: user volume: 0, internal volumes: 1, max. volumes count: 2 [ 1192.108848][T12359] ubi8: max/mean erase counter: 0/0, WL threshold: 4096, image sequence number: 3729803257 [ 1192.119040][T12359] ubi8: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 1192.137387][T12363] ubi8: background thread "ubi_bgt8d" started, PID 12363 [ 1192.276140][T12336] fido_id[12336]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 1193.338379][T12361] ./file0: Can't open blockdev [ 1195.985729][ T4428] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1196.098801][T12221] bridge0: port 1(bridge_slave_0) entered blocking state [ 1196.105989][T12221] bridge0: port 1(bridge_slave_0) entered disabled state [ 1196.151496][T12221] device bridge_slave_0 entered promiscuous mode [ 1196.486841][T12221] bridge0: port 2(bridge_slave_1) entered blocking state [ 1197.202760][T12221] bridge0: port 2(bridge_slave_1) entered disabled state [ 1197.283661][T12221] device bridge_slave_1 entered promiscuous mode [ 1198.060519][T12221] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1198.340130][T12221] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1198.830088][T12221] team0: Port device team_slave_0 added [ 1199.006108][T12221] team0: Port device team_slave_1 added [ 1199.290963][T12221] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1200.335159][T12221] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1200.362933][T12221] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1200.375350][ T4428] tipc: Left network mode [ 1200.380706][T12221] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1200.380723][T12221] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1200.380781][T12221] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1200.566290][T12415] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1613'. [ 1200.732434][T12221] device hsr_slave_0 entered promiscuous mode [ 1200.864685][T12221] device hsr_slave_1 entered promiscuous mode [ 1200.979277][T12221] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1201.096484][T12221] Cannot create hsr debugfs directory [ 1202.458937][T12430] block device autoloading is deprecated and will be removed. [ 1203.025894][T12439] block device autoloading is deprecated and will be removed. [ 1209.010849][T12221] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 1209.216555][T12479] Bluetooth: MGMT ver 1.22 [ 1209.929043][T12221] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 1210.778518][T12221] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 1212.454945][T12221] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 1215.865540][ T4428] device hsr_slave_0 left promiscuous mode [ 1215.916770][ T4428] device hsr_slave_1 left promiscuous mode [ 1215.947735][ T4428] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1215.986782][ T4428] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1216.155624][ T4428] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1216.173786][ T4428] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1216.549164][ T4428] device veth1_macvtap left promiscuous mode [ 1216.555645][ T4428] device veth0_macvtap left promiscuous mode [ 1216.566595][ T4428] device veth1_vlan left promiscuous mode [ 1216.581692][ T4428] device veth0_vlan left promiscuous mode [ 1218.522127][ T4428] bond1 (unregistering): Released all slaves [ 1220.947419][ T4428] team0 (unregistering): Port device team_slave_1 removed [ 1222.364468][ T4428] team0 (unregistering): Port device team_slave_0 removed [ 1222.588579][ T4428] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1222.753293][ T4428] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1224.840279][ T4279] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1224.998070][ T4279] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1225.009223][ T4279] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1225.025152][ T4279] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1225.049682][ T4279] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 1225.058448][ T4279] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1227.102586][ T4279] Bluetooth: hci4: command 0x0409 tx timeout [ 1227.207414][ T4428] bond0 (unregistering): Released all slaves [ 1228.703574][T12593] chnl_net:caif_netlink_parms(): no params data found [ 1229.137913][T12593] bridge0: port 1(bridge_slave_0) entered blocking state [ 1229.145178][T12593] bridge0: port 1(bridge_slave_0) entered disabled state [ 1229.178700][ T4279] Bluetooth: hci4: command 0x041b tx timeout [ 1229.278234][T12593] device bridge_slave_0 entered promiscuous mode [ 1229.318243][T12593] bridge0: port 2(bridge_slave_1) entered blocking state [ 1229.326890][T12593] bridge0: port 2(bridge_slave_1) entered disabled state [ 1230.039593][T12593] device bridge_slave_1 entered promiscuous mode [ 1230.131451][T12634] futex_wake_op: syz.2.1657 tries to shift op by 144; fix this program [ 1230.707953][T12593] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1230.761230][ T4277] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1230.779007][T12593] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1230.807312][ T4277] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1230.817629][ T4277] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1230.826168][ T4277] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1230.835979][ T4277] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 1230.856957][ T4277] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1231.161073][T12593] team0: Port device team_slave_0 added [ 1231.900303][ T4279] Bluetooth: hci4: command 0x040f tx timeout [ 1232.934008][T12593] team0: Port device team_slave_1 added [ 1232.940132][ T4277] Bluetooth: hci0: command 0x0409 tx timeout [ 1234.455646][ T4277] Bluetooth: hci4: command 0x0419 tx timeout [ 1236.090364][ T4277] Bluetooth: hci0: command 0x041b tx timeout [ 1236.195535][T12593] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1236.217233][T12593] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1236.346884][T12593] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1236.607440][T12593] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1236.614451][T12593] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1236.717552][T12593] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1237.214175][T12593] device hsr_slave_0 entered promiscuous mode [ 1237.247140][T12593] device hsr_slave_1 entered promiscuous mode [ 1237.267002][T12593] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1237.274639][T12593] Cannot create hsr debugfs directory [ 1237.301070][T12639] chnl_net:caif_netlink_parms(): no params data found [ 1237.851645][T12639] bridge0: port 1(bridge_slave_0) entered blocking state [ 1237.998806][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 1238.030228][T12639] bridge0: port 1(bridge_slave_0) entered disabled state [ 1238.071496][T12639] device bridge_slave_0 entered promiscuous mode [ 1239.425216][ T4277] Bluetooth: hci0: command 0x040f tx timeout [ 1240.028267][T12698] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1240.095066][ T4428] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1240.190836][T12639] bridge0: port 2(bridge_slave_1) entered blocking state [ 1240.208393][T12639] bridge0: port 2(bridge_slave_1) entered disabled state [ 1240.234254][T12639] device bridge_slave_1 entered promiscuous mode [ 1240.487737][ T4428] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1240.672552][T12639] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1240.902416][ T4428] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1241.498575][ T4277] Bluetooth: hci0: command 0x0419 tx timeout [ 1243.207127][T12639] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1243.388898][ T4428] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1244.444169][T12639] team0: Port device team_slave_0 added [ 1244.498975][T12639] team0: Port device team_slave_1 added [ 1244.754064][T12639] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1244.791820][T12639] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1244.884082][T12639] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1244.997381][T12639] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1245.004388][T12639] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1245.134576][T12639] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1245.472798][T12639] device hsr_slave_0 entered promiscuous mode [ 1245.574424][T12639] device hsr_slave_1 entered promiscuous mode [ 1245.588673][T12639] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1245.596284][T12639] Cannot create hsr debugfs directory [ 1246.920212][ T4428] tipc: Left network mode [ 1246.982398][T12593] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 1247.048952][T12593] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 1250.159163][T12785] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1253.145824][T12593] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 1254.104462][T12593] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 1254.677226][T12818] Bluetooth: MGMT ver 1.22 [ 1258.783240][T12842] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1261.437633][T12859] overlayfs: failed to resolve './file0': -2 [ 1264.754134][T12593] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1267.037287][T12593] 8021q: adding VLAN 0 to HW filter on device team0 [ 1267.052267][ T4374] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1267.080376][ T4374] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1267.497465][ T4374] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1267.536435][ T4374] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1267.566188][ T4374] bridge0: port 1(bridge_slave_0) entered blocking state [ 1267.573542][ T4374] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1267.589672][ T4374] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1267.603214][ T4374] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1267.615412][ T4374] bridge0: port 2(bridge_slave_1) entered blocking state [ 1267.622726][ T4374] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1267.773521][ T4374] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1267.816551][ T4374] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1267.835283][ T4374] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1268.524106][ T4374] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1268.583751][ T4374] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1268.629988][T12639] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 1268.991900][T12903] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1269.727011][ T4374] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1269.756434][ T4374] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1269.787919][ T4374] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1270.534943][T12639] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 1270.569903][T12639] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 1270.712659][T12639] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 1270.735224][ T4430] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1270.770799][ T4430] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1270.945580][ T4428] device hsr_slave_0 left promiscuous mode [ 1270.966495][ T4428] device hsr_slave_1 left promiscuous mode [ 1270.993041][ T4428] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1272.710978][ T4428] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1272.727526][ T4428] device bridge_slave_1 left promiscuous mode [ 1272.744176][ T4428] bridge0: port 2(bridge_slave_1) entered disabled state [ 1272.758041][ T4428] device bridge_slave_0 left promiscuous mode [ 1272.771458][ T4428] bridge0: port 1(bridge_slave_0) entered disabled state [ 1273.818495][ T4428] device hsr_slave_0 left promiscuous mode [ 1273.836824][ T4428] device hsr_slave_1 left promiscuous mode [ 1273.847121][ T4428] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1273.854954][ T4428] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1273.864594][ T4428] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1273.876859][ T4428] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1273.974425][ T4428] device bridge_slave_1 left promiscuous mode [ 1273.998099][ T4428] bridge0: port 2(bridge_slave_1) entered disabled state [ 1274.101906][T12936] ceph: No mds server is up or the cluster is laggy [ 1274.141868][ T4326] libceph: connect (1)[c::]:6789 error -101 [ 1274.194100][ T4326] libceph: mon0 (1)[c::]:6789 connect error [ 1274.258131][ T4428] device bridge_slave_0 left promiscuous mode [ 1274.271819][ T4428] bridge0: port 1(bridge_slave_0) entered disabled state [ 1274.841504][ T4428] device veth1_macvtap left promiscuous mode [ 1274.879967][ T4428] device veth0_macvtap left promiscuous mode [ 1274.922232][ T4428] device veth1_vlan left promiscuous mode [ 1274.967543][ T4428] device veth0_vlan left promiscuous mode [ 1276.430678][ T4428] team0 (unregistering): Port device team_slave_1 removed [ 1276.492964][ T4428] team0 (unregistering): Port device team_slave_0 removed [ 1276.668089][ T4428] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1276.791514][ T4428] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1278.063689][T12956] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1278.356491][ T4428] bond0 (unregistering): Released all slaves [ 1280.302376][ T4428] team0 (unregistering): Port device team_slave_1 removed [ 1280.425247][ T4428] team0 (unregistering): Port device team_slave_0 removed [ 1280.650333][ T4428] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1280.731914][ T4428] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1281.634189][ T4428] bond0 (unregistering): Released all slaves [ 1281.915197][ T4543] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1281.967533][ T4543] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1282.035689][T12593] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1282.490900][T12973] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1282.583070][T12964] netdevsim netdevsim10 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1282.668074][T12639] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1282.723586][T12639] 8021q: adding VLAN 0 to HW filter on device team0 [ 1282.757801][ T4430] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1282.766140][ T4430] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1282.850359][ T4430] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1282.911936][ T4430] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1282.964704][ T4430] bridge0: port 1(bridge_slave_0) entered blocking state [ 1282.971928][ T4430] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1283.044642][ T4430] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1283.067914][ T4430] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1283.097720][ T4430] bridge0: port 2(bridge_slave_1) entered blocking state [ 1283.104889][ T4430] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1283.143791][ T4430] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1283.158986][ T4430] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1283.181731][ T4430] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1283.191560][ T4430] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1283.200750][ T4430] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1283.211093][ T4279] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1283.224469][ T4279] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1283.234915][ T4279] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1283.243023][ T4279] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1283.250791][ T4279] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 1283.252413][ T4430] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1283.266509][ T4279] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1283.298155][ T4430] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1283.306848][ T4430] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1283.337924][T12639] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1283.350245][T12639] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1283.372488][ T4430] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1283.382027][ T4430] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1283.390839][ T4430] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1283.401722][ T4430] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1284.553375][T12976] chnl_net:caif_netlink_parms(): no params data found [ 1285.300020][ T4279] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1285.314510][ T4279] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1285.323104][ T4279] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1285.331118][ T4279] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1285.339036][ T4279] Bluetooth: hci3: command 0x0409 tx timeout [ 1285.346406][ T9610] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 1285.355097][T13001] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1285.400797][T12639] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1285.458159][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1285.618796][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1285.626566][T12976] bridge0: port 1(bridge_slave_0) entered blocking state [ 1285.647003][T12976] bridge0: port 1(bridge_slave_0) entered disabled state [ 1285.669423][T12976] device bridge_slave_0 entered promiscuous mode [ 1285.701146][T12976] bridge0: port 2(bridge_slave_1) entered blocking state [ 1285.758512][T12976] bridge0: port 2(bridge_slave_1) entered disabled state [ 1285.802280][T12976] device bridge_slave_1 entered promiscuous mode [ 1286.448779][T12976] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1286.515413][T12976] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1286.655937][ T4632] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1286.665699][ T4632] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1287.224498][T12976] team0: Port device team_slave_0 added [ 1287.268313][ T9791] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1287.306305][ T9791] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1287.417470][ T4277] Bluetooth: hci2: command 0x0409 tx timeout [ 1287.427138][ T9610] Bluetooth: hci3: command 0x041b tx timeout [ 1287.436463][ T9791] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1287.447635][ T9791] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1287.465326][T12639] device veth0_vlan entered promiscuous mode [ 1287.533589][T12976] team0: Port device team_slave_1 added [ 1287.612068][T12976] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1287.631667][T12976] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1288.443643][T12976] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1288.469412][T12639] device veth1_vlan entered promiscuous mode [ 1288.551471][ T9785] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 1288.565402][T12976] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1288.573088][T12976] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1288.608126][T12976] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1288.689762][T12976] device hsr_slave_0 entered promiscuous mode [ 1288.707916][T12976] device hsr_slave_1 entered promiscuous mode [ 1288.732995][T12976] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1288.780662][T12976] Cannot create hsr debugfs directory [ 1288.964017][T13024] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1289.309549][T12999] chnl_net:caif_netlink_parms(): no params data found [ 1289.498099][ T4277] Bluetooth: hci2: command 0x041b tx timeout [ 1289.505864][ T9610] Bluetooth: hci3: command 0x040f tx timeout [ 1291.576826][ T9610] Bluetooth: hci3: command 0x0419 tx timeout [ 1291.583022][ T9610] Bluetooth: hci2: command 0x040f tx timeout [ 1291.889421][T13046] fuse: Bad value for 'fd' [ 1291.975427][T12999] bridge0: port 1(bridge_slave_0) entered blocking state [ 1291.987560][T12999] bridge0: port 1(bridge_slave_0) entered disabled state [ 1291.998717][T12999] device bridge_slave_0 entered promiscuous mode [ 1292.009456][T12999] bridge0: port 2(bridge_slave_1) entered blocking state [ 1292.021925][T13048] i2c i2c-0: Frontend requested software zigzag, but didn't set the frequency step size [ 1292.034977][T13043] netlink: 32 bytes leftover after parsing attributes in process `syz.6.1720'. [ 1292.044343][T12999] bridge0: port 2(bridge_slave_1) entered disabled state [ 1292.057869][T12999] device bridge_slave_1 entered promiscuous mode [ 1292.114875][ T4277] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1292.126009][ T4277] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1292.138660][ T4277] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1292.148249][ T4277] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1292.155936][ T4277] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 1292.163503][ T4277] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1293.657465][ T4277] Bluetooth: hci2: command 0x0419 tx timeout [ 1294.108718][T12999] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1294.147885][T12999] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1294.216781][ T4277] Bluetooth: hci0: command 0x0409 tx timeout [ 1295.375853][T12999] team0: Port device team_slave_0 added [ 1295.427632][T12999] team0: Port device team_slave_1 added [ 1296.338652][ T4277] Bluetooth: hci0: command 0x041b tx timeout [ 1296.800719][ T9785] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1296.825639][T12999] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1296.843626][T12999] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1296.874318][T13072] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1297.396507][T12999] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1298.388416][ T4277] Bluetooth: hci0: command 0x040f tx timeout [ 1298.592622][T12999] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1298.600224][T12999] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1298.656464][T12999] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1299.238604][ T9785] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1299.439204][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 1299.448778][ T9785] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1299.488043][T12976] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 1300.211412][ T9785] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1300.232356][T13094] platform regulatory.0: loading /lib/firmware/regulatory.db failed with error -12 [ 1300.232387][ T27] audit: type=1800 audit(1786638697.159:245): pid=13094 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.8.1729" name="regulatory.db" dev="sda1" ino=448 res=0 errno=0 [ 1300.241786][T13094] platform regulatory.0: Direct firmware load for regulatory.db failed with error -12 [ 1300.272446][T13047] chnl_net:caif_netlink_parms(): no params data found [ 1300.279769][T13094] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 1300.397686][T13094] syz.8.1729 (13094) used greatest stack depth: 20160 bytes left [ 1300.503429][T12999] device hsr_slave_0 entered promiscuous mode [ 1300.510047][ T4277] Bluetooth: hci0: command 0x0419 tx timeout [ 1300.533153][T12999] device hsr_slave_1 entered promiscuous mode [ 1300.588686][T12999] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1300.596338][T12999] Cannot create hsr debugfs directory [ 1301.024854][T12976] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 1301.316216][T12976] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 1301.405443][T13047] bridge0: port 1(bridge_slave_0) entered blocking state [ 1301.426833][T13047] bridge0: port 1(bridge_slave_0) entered disabled state [ 1301.457609][T13047] device bridge_slave_0 entered promiscuous mode [ 1301.496983][T12976] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 1301.522334][T13047] bridge0: port 2(bridge_slave_1) entered blocking state [ 1301.545055][T13047] bridge0: port 2(bridge_slave_1) entered disabled state [ 1301.562657][T13047] device bridge_slave_1 entered promiscuous mode [ 1301.668390][T13047] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1301.739871][T13047] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1302.671526][T13112] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1732'. [ 1303.024940][T13119] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1303.746539][T13115] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 1305.465392][T13047] team0: Port device team_slave_0 added [ 1305.588882][T13047] team0: Port device team_slave_1 added [ 1305.725307][T12976] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1305.869245][T13047] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1305.876258][T13047] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1306.113816][T13047] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1306.810286][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1306.834152][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1306.860005][T12976] 8021q: adding VLAN 0 to HW filter on device team0 [ 1306.881680][T13047] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1306.900418][T13047] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1306.966815][T13047] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1307.098392][ T4374] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1307.137155][ T4374] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1307.190214][ T4374] bridge0: port 1(bridge_slave_0) entered blocking state [ 1307.197454][ T4374] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1307.314525][ T4374] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1307.400254][ T4374] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1307.472275][ T4374] bridge0: port 2(bridge_slave_1) entered blocking state [ 1307.479503][ T4374] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1307.620571][ T4374] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1307.897865][T13047] device hsr_slave_0 entered promiscuous mode [ 1307.930774][T13047] device hsr_slave_1 entered promiscuous mode [ 1307.951282][T13047] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1307.989201][T13047] Cannot create hsr debugfs directory [ 1308.171931][ T4374] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1308.190402][ T4374] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1308.208911][ T4374] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1308.276849][ T4374] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1308.304541][ T4374] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1309.644096][ T4473] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1309.654260][ T4473] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1309.680757][ T4473] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1309.691187][ T4473] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1309.701153][ T4473] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1309.772758][ T4473] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1310.674418][T12976] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1311.339980][T13167] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1314.123801][T12999] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 1314.295035][T12999] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 1314.662917][T13196] MTD: Attempt to mount non-MTD device "/dev/nullb0" [ 1314.686506][T13196] VFS: Can't find a romfs filesystem on dev nullb0. [ 1314.686506][T13196] [ 1314.916560][T12999] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 1315.536948][T12999] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 1315.589173][ T4374] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1315.647052][ T4374] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1315.662769][T12976] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1318.269180][T13220] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1745'. [ 1318.483121][T13220] team0: Port device team_slave_0 removed [ 1318.543106][ T9785] device hsr_slave_0 left promiscuous mode [ 1318.612182][ T9785] device hsr_slave_1 left promiscuous mode [ 1318.642776][ T9785] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1318.674693][ T9785] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1318.700627][ T9785] device bridge_slave_1 left promiscuous mode [ 1318.745428][ T9785] bridge0: port 2(bridge_slave_1) entered disabled state [ 1318.792696][ T9785] device bridge_slave_0 left promiscuous mode [ 1318.809955][ T9785] bridge0: port 1(bridge_slave_0) entered disabled state [ 1318.842782][ T9785] device hsr_slave_0 left promiscuous mode [ 1318.853194][ T9785] device hsr_slave_1 left promiscuous mode [ 1318.861762][ T9785] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1318.873690][ T9785] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1318.882278][ T9785] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1318.902848][ T9785] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1319.305891][T13201] udevd[13201]: inotify_add_watch(7, /dev/loop0, 10) failed: No such file or directory [ 1320.416972][ T9785] device veth1_macvtap left promiscuous mode [ 1320.423090][ T9785] device veth0_macvtap left promiscuous mode [ 1320.458087][ T9785] device veth1_vlan left promiscuous mode [ 1320.519276][ T9785] device veth0_vlan left promiscuous mode [ 1320.864894][T13251] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1323.788930][ T9785] team0 (unregistering): Port device team_slave_1 removed [ 1323.876056][ T9785] team0 (unregistering): Port device team_slave_0 removed [ 1323.954409][ T9785] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1324.015233][ T9785] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1324.319008][ T9785] bond0 (unregistering): Released all slaves [ 1325.030235][ T9785] team0 (unregistering): Port device team_slave_1 removed [ 1325.084142][ T9785] team0 (unregistering): Port device team_slave_0 removed [ 1325.144024][ T9785] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1325.204227][ T9785] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1325.636973][ T9785] bond0 (unregistering): Released all slaves [ 1325.689302][T13047] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 1325.700327][T13047] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 1325.836895][T12999] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1325.848198][T13047] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 1325.933025][T13047] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 1325.980422][ T4430] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1325.997277][ T4430] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1326.025406][ T27] audit: type=1800 audit(1786638722.949:246): pid=13278 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.1755" name="attr_allow_any_host" dev="configfs" ino=64608 res=0 errno=0 [ 1326.050585][T13278] nvmet: failed to open block device (null): (-22) [ 1326.059425][T12999] 8021q: adding VLAN 0 to HW filter on device team0 [ 1326.114975][ T4430] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1326.146856][ T27] audit: type=1800 audit(1786638722.979:247): pid=13278 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.1755" name="enable" dev="configfs" ino=64609 res=0 errno=0 [ 1326.148504][ T4430] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1326.210573][ T4430] bridge0: port 1(bridge_slave_0) entered blocking state [ 1326.217847][ T4430] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1326.287138][ T4430] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1326.308742][ T4430] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1326.338033][ T4430] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1326.364840][ T4430] bridge0: port 2(bridge_slave_1) entered blocking state [ 1326.372088][ T4430] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1326.431569][ T4430] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1326.574271][ T4430] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1326.673411][ T4430] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1326.807772][ T4430] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1326.826838][ T4430] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1326.863834][ T5870] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1326.923772][ T5870] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1326.933096][ T5870] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1326.942098][ T5870] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1326.951064][ T5870] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1326.959757][ T5870] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1326.985003][ T5870] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1326.994123][ T5870] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1327.026196][T12999] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1327.042901][ T5870] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1327.057872][ T5870] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1327.085080][ T5870] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1327.106153][ T5870] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1327.134076][T12976] device veth0_vlan entered promiscuous mode [ 1327.274454][T12976] device veth1_vlan entered promiscuous mode [ 1327.378008][T13047] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1327.535952][T12976] device veth0_macvtap entered promiscuous mode [ 1327.596063][T12976] device veth1_macvtap entered promiscuous mode [ 1327.693884][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 1327.717605][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 1327.726011][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1327.958761][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1328.082100][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1328.291685][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1328.407625][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1328.459687][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1328.535734][T13047] 8021q: adding VLAN 0 to HW filter on device team0 [ 1328.578567][T12976] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1328.661671][T12976] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1330.590043][T13307] ipt_CLUSTERIP: ipt_CLUSTERIP is deprecated and it will removed soon, use xt_cluster instead [ 1330.600700][T13307] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1330.756386][T12976] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1331.008668][T12976] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1331.020397][T12976] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1331.268587][ T4374] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1331.649442][ T4374] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1332.073824][ T4374] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1332.093062][ T4374] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1332.111671][ T4374] bridge0: port 1(bridge_slave_0) entered blocking state [ 1332.118844][ T4374] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1332.158281][ T4374] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1332.184204][ T4374] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1332.211024][ T4374] bridge0: port 2(bridge_slave_1) entered blocking state [ 1332.218265][ T4374] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1332.247176][ T4374] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1332.279126][ T4374] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1332.293495][ T4374] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1332.450259][T12976] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1332.471659][T12976] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1332.482628][T13327] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1332.499822][T12976] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1332.518128][T12976] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1332.543050][T12976] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1332.641142][ T4430] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1332.659745][ T4430] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1332.679508][ T4430] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1332.725203][ T4430] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1332.738884][ T4430] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1332.788906][ T4430] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1332.974694][T12999] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1333.391409][T12976] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1333.434065][T12976] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1333.458052][T12976] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1333.474549][T12976] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1333.487169][ T4430] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1334.898615][ T4430] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1334.929045][ T4430] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1334.947490][ T4430] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1334.955693][ T27] audit: type=1800 audit(1786638731.879:248): pid=13345 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.8.1763" name="attr_allow_any_host" dev="configfs" ino=64321 res=0 errno=0 [ 1334.979324][ T4430] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1334.998652][T13345] nvmet: failed to open block device (null): (-22) [ 1335.024742][T13047] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1335.035367][ T27] audit: type=1800 audit(1786638731.929:249): pid=13345 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.8.1763" name="enable" dev="configfs" ino=64322 res=0 errno=0 [ 1335.139575][ T5870] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1335.198162][ T5870] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1335.477327][ T5870] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1335.485226][ T5870] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1335.520839][ T5870] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1335.708967][ T4374] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1336.391874][ T4374] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1336.594265][ T4428] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1337.634541][ T53] block nbd8: Attempted send on invalid socket [ 1337.640900][ T53] I/O error, dev nbd8, sector 0 op 0x0:(READ) flags 0x1000 phys_seg 1 prio class 2 [ 1337.883275][ T9791] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1337.895353][ T9791] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1337.958449][T13047] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1338.166144][T13372] block device autoloading is deprecated and will be removed. [ 1339.409625][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1339.437241][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1340.883176][T13388] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1764'. [ 1340.974172][ T4374] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1340.993241][ T4374] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1341.107734][ T4374] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1341.274345][ T4374] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1341.283636][ T4374] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1341.292150][ T4374] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1341.361629][T13403] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1341.650662][T13047] device veth0_vlan entered promiscuous mode [ 1341.987506][T13047] device veth1_vlan entered promiscuous mode [ 1342.083382][T12999] device veth0_vlan entered promiscuous mode [ 1342.207249][ T4374] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1342.222644][ T4374] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1342.252173][ T4374] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 1342.280529][ T27] audit: type=1800 audit(1786638739.209:250): pid=13414 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.8.1772" name="attr_allow_any_host" dev="configfs" ino=65574 res=0 errno=0 [ 1342.284437][T13414] nvmet: failed to open block device (null): (-22) [ 1342.308878][ T4374] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 1342.337629][ T4374] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1342.353173][ T27] audit: type=1800 audit(1786638739.209:251): pid=13414 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.8.1772" name="enable" dev="configfs" ino=65575 res=0 errno=0 [ 1342.391220][ T4374] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1342.422653][T12999] device veth1_vlan entered promiscuous mode [ 1342.540187][ T4374] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1342.552446][ T4374] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1342.585437][T13047] device veth0_macvtap entered promiscuous mode [ 1342.883676][T12999] device veth0_macvtap entered promiscuous mode [ 1343.198926][T13047] device veth1_macvtap entered promiscuous mode [ 1343.575559][T13047] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1343.619116][T13047] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1343.636829][T13047] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1343.662899][T13047] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1343.686801][T13047] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1343.697338][T13047] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1343.708923][T13047] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1344.795594][ T4374] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1344.820841][ T4374] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1344.837620][ T4374] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1344.867347][ T4374] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1344.895396][ T4374] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1344.914725][ T4374] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1344.934593][ T4374] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1345.095047][ T9785] device hsr_slave_0 left promiscuous mode [ 1345.124371][ T9785] device hsr_slave_1 left promiscuous mode [ 1345.140969][ T9785] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1345.198668][ T9785] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1345.206253][ T4277] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1345.217770][ T4277] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1345.240107][ T9785] device bridge_slave_1 left promiscuous mode [ 1345.241029][ T4277] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1345.256269][ T4277] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1345.265464][ T4277] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 1345.273102][ T4277] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1345.433001][ T9785] bridge0: port 2(bridge_slave_1) entered disabled state [ 1347.322202][ T9785] device bridge_slave_0 left promiscuous mode [ 1347.337149][ T9610] Bluetooth: hci4: command 0x0409 tx timeout [ 1347.380172][ T9785] bridge0: port 1(bridge_slave_0) entered disabled state [ 1347.865261][ T9785] device veth1_vlan left promiscuous mode [ 1347.910403][ T9785] device veth0_vlan left promiscuous mode [ 1349.417201][ T9610] Bluetooth: hci4: command 0x041b tx timeout [ 1350.412620][ T9610] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1350.423600][ T9610] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1350.433382][ T9610] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1350.453701][ T9610] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1350.463292][ T9610] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 1350.472377][ T9610] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1350.745237][ T9785] team0 (unregistering): Port device team_slave_1 removed [ 1351.602903][ T9610] Bluetooth: hci4: command 0x040f tx timeout [ 1351.630233][ T9785] team0 (unregistering): Port device team_slave_0 removed [ 1351.694241][ T9785] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1351.830602][ T9785] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1352.392990][ T9785] bond0 (unregistering): Released all slaves [ 1352.538777][ T9610] Bluetooth: hci2: command 0x0409 tx timeout [ 1352.616679][T13047] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1352.636720][T13047] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1352.646802][T13047] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1352.657998][T13047] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1352.668040][T13047] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1352.678924][T13047] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1352.722017][T13047] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1352.812089][ T4527] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1352.856994][ T4527] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1353.111555][T13451] device batadv_slave_0 entered promiscuous mode [ 1353.130600][T13464] netlink: 52 bytes leftover after parsing attributes in process `syz.6.1777'. [ 1353.152850][T13464] device netdevsim0 entered promiscuous mode [ 1353.281023][T13451] device batadv_slave_0 left promiscuous mode [ 1353.716794][ T9610] Bluetooth: hci4: command 0x0419 tx timeout [ 1353.807600][T13484] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1354.337698][ T27] audit: type=1800 audit(1786638751.269:252): pid=13483 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.8.1781" name="attr_allow_any_host" dev="configfs" ino=65234 res=0 errno=0 [ 1354.371394][T13483] nvmet: failed to open block device (null): (-22) [ 1354.512655][ T27] audit: type=1800 audit(1786638751.299:253): pid=13483 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.8.1781" name="enable" dev="configfs" ino=65235 res=0 errno=0 [ 1354.617084][ T4277] Bluetooth: hci2: command 0x041b tx timeout [ 1355.092301][T13499] 9pnet_fd: p9_fd_create_tcp (13499): problem connecting socket to 127.0.0.1 [ 1356.696787][ T9610] Bluetooth: hci2: command 0x040f tx timeout [ 1356.834469][T13460] chnl_net:caif_netlink_parms(): no params data found [ 1356.852568][ T26] [ 1356.854985][ T26] ============================================ [ 1356.861161][ T26] WARNING: possible recursive locking detected [ 1356.867358][ T26] syzkaller #0 Not tainted [ 1356.871807][ T26] -------------------------------------------- [ 1356.877993][ T26] kworker/1:1/26 is trying to acquire lock: [ 1356.883926][ T26] ffff88814cc53130 (&grp->list_lock){.+.+}-{2:2}, at: snd_seq_deliver_event+0x1cb/0x8c0 [ 1356.893732][ T26] [ 1356.893732][ T26] but task is already holding lock: [ 1356.901132][ T26] ffff88807d4ad930 (&grp->list_lock){.+.+}-{2:2}, at: snd_seq_deliver_event+0x1cb/0x8c0 [ 1356.910946][ T26] [ 1356.910946][ T26] other info that might help us debug this: [ 1356.919026][ T26] Possible unsafe locking scenario: [ 1356.919026][ T26] [ 1356.926481][ T26] CPU0 [ 1356.929892][ T26] ---- [ 1356.933173][ T26] lock(&grp->list_lock); [ 1356.937590][ T26] lock(&grp->list_lock); [ 1356.942008][ T26] [ 1356.942008][ T26] *** DEADLOCK *** [ 1356.942008][ T26] [ 1356.950148][ T26] May be due to missing lock nesting notation [ 1356.950148][ T26] [ 1356.958482][ T26] 3 locks held by kworker/1:1/26: [ 1356.963539][ T26] #0: ffff888017470938 ((wq_completion)events){+.+.}-{0:0}, at: process_one_work+0x7b4/0x1160 [ 1356.973949][ T26] #1: ffffc90000a1fd00 ((work_completion)(&runtime->event_work)){+.+.}-{0:0}, at: process_one_work+0x7b4/0x1160 [ 1356.985900][ T26] #2: ffff88807d4ad930 (&grp->list_lock){.+.+}-{2:2}, at: snd_seq_deliver_event+0x1cb/0x8c0 [ 1356.996113][ T26] [ 1356.996113][ T26] stack backtrace: [ 1357.002034][ T26] CPU: 1 PID: 26 Comm: kworker/1:1 Not tainted syzkaller #0 [ 1357.009339][ T26] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1357.019509][ T26] Workqueue: events snd_rawmidi_input_event_work [ 1357.025878][ T26] Call Trace: [ 1357.029175][ T26] [ 1357.032115][ T26] dump_stack_lvl+0x188/0x24e [ 1357.036841][ T26] ? show_regs_print_info+0x12/0x12 [ 1357.042064][ T26] ? load_image+0x410/0x410 [ 1357.046626][ T26] __lock_acquire+0x12c8/0x7c40 [ 1357.051519][ T26] ? verify_lock_unused+0x140/0x140 [ 1357.056789][ T26] ? ktime_get_ts64+0x111/0x470 [ 1357.061681][ T26] ? verify_lock_unused+0x140/0x140 [ 1357.066917][ T26] ? verify_lock_unused+0x140/0x140 [ 1357.072171][ T26] ? __rwlock_init+0x140/0x140 [ 1357.076994][ T26] lock_acquire+0x1bb/0x4a0 [ 1357.081547][ T26] ? snd_seq_deliver_event+0x1cb/0x8c0 [ 1357.087054][ T26] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 1357.093055][ T26] ? read_lock_is_recursive+0x10/0x10 [ 1357.098441][ T26] ? lock_chain_count+0x20/0x20 [ 1357.103316][ T26] ? do_raw_read_unlock+0x39/0x70 [ 1357.108368][ T26] _raw_read_lock+0x32/0x40 [ 1357.112889][ T26] ? snd_seq_deliver_event+0x1cb/0x8c0 [ 1357.118378][ T26] snd_seq_deliver_event+0x1cb/0x8c0 [ 1357.123698][ T26] snd_seq_kernel_client_dispatch+0x1fc/0x2f0 [ 1357.129799][ T26] snd_seq_control_queue+0x8ff/0x1010 [ 1357.135212][ T26] ? snd_seq_queue_remove_cells+0x2e0/0x2e0 [ 1357.141154][ T26] ? mark_lock+0x94/0x320 [ 1357.145539][ T26] ? snd_seq_port_use_ptr+0xfd/0x120 [ 1357.150858][ T26] ? __lock_acquire+0x7c40/0x7c40 [ 1357.155895][ T26] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 1357.161801][ T26] ? _raw_spin_unlock+0x40/0x40 [ 1357.166736][ T26] ? mark_lock+0x94/0x320 [ 1357.171096][ T26] ? do_raw_read_unlock+0x39/0x70 [ 1357.176123][ T26] ? _raw_read_unlock+0x24/0x40 [ 1357.180978][ T26] ? snd_seq_port_use_ptr+0xfd/0x120 [ 1357.186267][ T26] ? snd_seq_system_notify+0x170/0x170 [ 1357.191734][ T26] snd_seq_deliver_single_event+0x806/0xb30 [ 1357.197669][ T26] ? snd_seq_deliver_event+0x1e2/0x8c0 [ 1357.203210][ T26] ? snd_sequencer_device_done+0x20/0x20 [ 1357.208904][ T26] snd_seq_kernel_client_dispatch+0x1fc/0x2f0 [ 1357.215013][ T26] snd_seq_oss_timer_start+0x2ce/0x510 [ 1357.220492][ T26] ? snd_seq_oss_process_timer_event+0x3d0/0x3d0 [ 1357.226826][ T26] ? _raw_spin_unlock_irqrestore+0x82/0x120 [ 1357.232725][ T26] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 1357.238621][ T26] ? _raw_spin_unlock+0x40/0x40 [ 1357.243481][ T26] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 1357.249416][ T26] ? _raw_spin_unlock+0x40/0x40 [ 1357.254273][ T26] ? mark_lock+0x94/0x320 [ 1357.258618][ T26] ? snd_seq_oss_readq_put_timestamp+0x33f/0x5c0 [ 1357.264973][ T26] snd_seq_oss_midi_input+0x2e8/0x890 [ 1357.270392][ T26] ? snd_seq_oss_midi_get_addr+0x260/0x260 [ 1357.276245][ T26] ? do_raw_read_unlock+0x39/0x70 [ 1357.281299][ T26] ? _raw_read_unlock+0x24/0x40 [ 1357.286183][ T26] ? snd_seq_port_use_ptr+0xfd/0x120 [ 1357.291481][ T26] ? snd_seq_oss_process_event+0x2910/0x2910 [ 1357.297466][ T26] snd_seq_deliver_single_event+0x806/0xb30 [ 1357.303372][ T26] ? lockdep_hardirqs_on+0x94/0x140 [ 1357.308574][ T26] ? snd_sequencer_device_done+0x20/0x20 [ 1357.314216][ T26] ? do_raw_read_unlock+0x39/0x70 [ 1357.319244][ T26] snd_seq_deliver_event+0x49d/0x8c0 [ 1357.324544][ T26] snd_seq_kernel_client_dispatch+0x1fc/0x2f0 [ 1357.330635][ T26] snd_midi_input_event+0x295/0x3e0 [ 1357.335881][ T26] ? event_process_midi+0x4b0/0x4b0 [ 1357.341120][ T26] ? _raw_spin_unlock+0x40/0x40 [ 1357.345999][ T26] ? _raw_spin_unlock_irq+0x1f/0x40 [ 1357.351205][ T26] ? process_one_work+0x7b4/0x1160 [ 1357.356323][ T26] process_one_work+0x8ab/0x1160 [ 1357.361271][ T26] ? worker_detach_from_pool+0x240/0x240 [ 1357.366913][ T26] ? _raw_spin_lock_irq+0xb7/0xf0 [ 1357.371984][ T26] ? _raw_spin_lock_irqsave+0x100/0x100 [ 1357.377564][ T26] ? wq_worker_running+0x97/0x190 [ 1357.382600][ T26] worker_thread+0xaf5/0x12a0 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 1357.387293][ T26] kthread+0x29d/0x330 [ 1357.391402][ T26] ? worker_clr_flags+0x1a0/0x1a0 [ 1357.396437][ T26] ? kthread_blkcg+0xd0/0xd0 [ 1357.401033][ T26] ret_from_fork+0x1f/0x30 [ 1357.405505][ T26] [ 1357.560272][T13433] chnl_net:caif_netlink_parms(): no params data found [ 1359.963378][ T9785] device hsr_slave_0 left promiscuous mode [ 1359.969968][ T9785] device hsr_slave_1 left promiscuous mode [ 1359.976384][ T9785] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1359.987219][ T9785] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1359.994989][ T9785] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1360.004667][ T9785] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1360.013135][ T9785] device bridge_slave_1 left promiscuous mode [ 1360.021382][ T9785] bridge0: port 2(bridge_slave_1) entered disabled state [ 1360.030918][ T9785] device bridge_slave_0 left promiscuous mode [ 1360.039052][ T9785] bridge0: port 1(bridge_slave_0) entered disabled state [ 1360.050898][ T9785] device hsr_slave_0 left promiscuous mode [ 1360.060831][ T9785] device hsr_slave_1 left promiscuous mode [ 1360.067603][ T9785] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1360.075233][ T9785] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1360.083189][ T9785] device bridge_slave_1 left promiscuous mode [ 1360.089826][ T9785] bridge0: port 2(bridge_slave_1) entered disabled state [ 1360.099650][ T9785] device bridge_slave_0 left promiscuous mode [ 1360.105880][ T9785] bridge0: port 1(bridge_slave_0) entered disabled state [ 1360.118148][ T9785] device veth1_macvtap left promiscuous mode [ 1360.124238][ T9785] device veth0_macvtap left promiscuous mode [ 1360.130977][ T9785] device veth1_vlan left promiscuous mode [ 1360.137066][ T9785] device veth0_vlan left promiscuous mode [ 1360.143450][ T9785] device veth0_macvtap left promiscuous mode [ 1360.149882][ T9785] device veth1_vlan left promiscuous mode [ 1360.155713][ T9785] device veth0_vlan left promiscuous mode [ 1360.375167][ T9785] team0 (unregistering): Port device team_slave_1 removed [ 1360.389451][ T9785] team0 (unregistering): Port device team_slave_0 removed [ 1360.440795][ T9785] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1360.483127][ T9785] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1360.562884][ T9785] bond0 (unregistering): Released all slaves [ 1360.683503][ T9785] team0 (unregistering): Port device team_slave_1 removed [ 1360.715146][ T9785] team0 (unregistering): Port device team_slave_0 removed [ 1360.726879][ T9785] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1360.741248][ T9785] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1360.794254][ T9785] bond0 (unregistering): Released all slaves [ 1360.859000][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 1361.514108][ T9785] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1361.601926][ T9785] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1361.651300][ T9785] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1361.703560][ T9785] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1361.814919][ T9785] netdevsim netdevsim10 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1361.877410][ T9785] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1361.931144][ T9785] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1362.001289][ T9785] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1362.051058][ T9785] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1362.152539][ T9785] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1362.191365][ T9785] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1362.231058][ T9785] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1362.301583][ T9785] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1362.445577][ T9785] tipc: Left network mode [ 1362.452718][ T9785] tipc: Left network mode [ 1363.864030][ T9785] device hsr_slave_0 left promiscuous mode [ 1363.871007][ T9785] device hsr_slave_1 left promiscuous mode [ 1363.880458][ T9785] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1363.888409][ T9785] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1363.896113][ T9785] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1363.910128][ T9785] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1363.919509][ T9785] device bridge_slave_1 left promiscuous mode [ 1363.925762][ T9785] bridge0: port 2(bridge_slave_1) entered disabled state [ 1363.934241][ T9785] device bridge_slave_0 left promiscuous mode [ 1363.941980][ T9785] bridge0: port 1(bridge_slave_0) entered disabled state [ 1363.953612][ T9785] device hsr_slave_0 left promiscuous mode [ 1363.961490][ T9785] device hsr_slave_1 left promiscuous mode [ 1363.968324][ T9785] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1363.975775][ T9785] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1363.984366][ T9785] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1363.992581][ T9785] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1364.000419][ T9785] device bridge_slave_1 left promiscuous mode [ 1364.007143][ T9785] bridge0: port 2(bridge_slave_1) entered disabled state [ 1364.015533][ T9785] device bridge_slave_0 left promiscuous mode [ 1364.022587][ T9785] bridge0: port 1(bridge_slave_0) entered disabled state [ 1364.034902][ T9785] device hsr_slave_0 left promiscuous mode [ 1364.041375][ T9785] device hsr_slave_1 left promiscuous mode [ 1364.047846][ T9785] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1364.055279][ T9785] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1364.064897][ T9785] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1364.072889][ T9785] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1364.085523][ T9785] device veth1_macvtap left promiscuous mode [ 1364.091708][ T9785] device veth0_macvtap left promiscuous mode [ 1364.097999][ T9785] device veth1_vlan left promiscuous mode [ 1364.104058][ T9785] device veth0_vlan left promiscuous mode [ 1364.111752][ T9785] device veth1_macvtap left promiscuous mode [ 1364.117895][ T9785] device veth0_macvtap left promiscuous mode [ 1364.124015][ T9785] device veth1_vlan left promiscuous mode [ 1364.130009][ T9785] device veth0_vlan left promiscuous mode [ 1364.138793][ T9785] device veth1_macvtap left promiscuous mode [ 1364.144864][ T9785] device veth0_macvtap left promiscuous mode [ 1364.151253][ T9785] device veth1_vlan left promiscuous mode [ 1364.157268][ T9785] device veth0_vlan left promiscuous mode [ 1364.440013][ T9785] team0 (unregistering): Port device team_slave_1 removed [ 1364.472111][ T9785] team0 (unregistering): Port device team_slave_0 removed [ 1364.483527][ T9785] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1364.514876][ T9785] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1364.568187][ T9785] bond0 (unregistering): Released all slaves [ 1364.708257][ T9785] team0 (unregistering): Port device team_slave_1 removed [ 1364.720500][ T9785] team0 (unregistering): Port device team_slave_0 removed [ 1364.752456][ T9785] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1364.784753][ T9785] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1364.841202][ T9785] bond0 (unregistering): Released all slaves [ 1364.895873][ T9785] bond0 (unregistering): Released all slaves [ 1364.968060][ T9785] bond0 (unregistering): Released all slaves [ 1365.102717][ T9785] team0 (unregistering): Port device team_slave_1 removed [ 1365.132925][ T9785] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1365.168860][ T9785] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1365.177781][ T26] infiniband syz1: ib_query_port failed (-19) [ 1365.227582][ T9785] bond0 (unregistering): Released all slaves [ 1365.255507][ T7] bond0 speed is unknown, defaulting to 1000