last executing test programs: 1m36.08831822s ago: executing program 0 (id=29): r0 = userfaultfd(0x80001) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000140)) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000000000ea04850000005000000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) ioctl$EVIOCGMASK(0xffffffffffffffff, 0x80104592, &(0x7f00000001c0)={0x3, 0x0, 0x0}) r3 = socket$inet6(0xa, 0x1, 0x8010000000000084) r4 = openat$cgroup_devices(0xffffffffffffffff, 0x0, 0x2, 0x0) write$cgroup_devices(r4, &(0x7f0000000140)=ANY=[@ANYBLOB], 0xa) openat$kvm(0xffffffffffffff9c, 0x0, 0x280, 0x0) bind$inet6(r3, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @empty}, 0x1c) connect$inet6(r3, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x14}}}, 0x1c) socket$unix(0x1, 0x1, 0x0) r5 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(r5, 0xc0145608, 0x0) r6 = dup(r5) mmap(&(0x7f0000fed000/0x12000)=nil, 0x12000, 0x2, 0x11, r6, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(r5, 0xc0585609, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x0, 0x3}) ioctl$vim2m_VIDIOC_REQBUFS(r6, 0xc0145608, &(0x7f0000000180)={0xffffff80, 0x0, 0x3, 0x0, 0x7}) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000300)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x0, 0x318, 0x1, 0x24}, 0x9c) 1m32.081038925s ago: executing program 0 (id=33): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x0, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() socket$netlink(0x10, 0x3, 0x8) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) open_by_handle_at(0xffffffffffffffff, &(0x7f0000000180)=ANY=[], 0x1) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000180), r3) sendmsg$IEEE802154_LLSEC_LIST_SECLEVEL(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000980)={0x0}, 0x1, 0x0, 0x0, 0x40c0}, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018000000000000002800000028000000020000000100000000000001e5ff0000400000000000000001000084080000000000000001"], 0x0, 0x42, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4800) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x2e80, 0x0) ioctl$TIOCPKT(r5, 0x5420, &(0x7f00000000c0)=0x1) splice(r5, 0x0, r4, 0x0, 0x4, 0x0) ioctl$PPPIOCSPASS(r4, 0x40107447, &(0x7f0000000400)={0x4, &(0x7f0000000300)=[{0xa00, 0x9a, 0x4, 0x13c}, {0xf4, 0x9, 0x7, 0x4}, {0x8, 0x6, 0xf9, 0x3}, {0x0, 0x4, 0x1, 0x6}]}) r6 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r6, 0x1, &(0x7f0000000040)='source', &(0x7f0000000080)='//', 0x0) 1m29.49461564s ago: executing program 0 (id=38): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000003900)=ANY=[@ANYBLOB="620af8ff0c200021bfa100000000000007010000f8ffffffb702000003000000bd120000000000008500000006000000b70000000000000095000000000000003faf4f1e7f2aa3d9b18ed81c0c869b51ec6c0af4e0e4a9446c7670568982b4e020f698393aa0f3881f9c24aa56f15199fad0093c59d66b5ece9f36c70d0f13905ea23c22624c9f87f9793f50bb546040677b0c5077da80fb982c1e9400e693146cea484a415b76966118b64f751a0f241b07080008002d75593a286cecc93e64c227c95aa0b784625704f07a72c234664c0af9360a1f7a5e6b607130c89f18c0c1089d8b853289e01aa27ae8b09e00e79ab20b0b8e1148f49faf2ad0000000000000006fa03c6468972089b302d7bf6023cdcedb5e0125ebbc08dee510cb2364149215108333719acd97cfa107d40224edc5465a932b77e74e802a0d42bc6099ad2300000080006ef6c1ff0900000000000010c63a949e8b7955394ffa82b8e942c89112f4ab87b1bfeda7be586602d985430cea0162ab3fcf4591c926abfb0767192302000000b0eea24492a660583eecb42cbcd3de3a83209da17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c95c25a573dc2edcaea2b1a52496dfcaf99431412fd134a996382a1a04d5bb924cfe5f3185418d605ffff9c4d2ec7c32f2095e63c80aff9fa740b5b7632f32030916f89c6dad7603f2ba2a790d62d6faec2fed44da4928b30142ba11de6c5d50b83bae613402216b5054d1e7c13b1355d6f4a8245ffa4997da9c77af4c0eb97fca585ec6bf5af51d564beb6d952aab9c70764b0a8a7583c90b3433b809bdb9fbd48bc873495cbff8a326eea31ae4e0f7505ebf6c9d13330ca005ace1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223a0eb4fa39f6b5c02e6d6d90756ff57902a8f57000000009700cf0b4b8bc2294133000000000000000000030000000000000000000000000010008bc0d9559711e6e8861c46495ba585a4b2d02edc3e28dd271c896249ed85b980680b00002b435ac15fc0288d9b2a169cdcacc413038dafb7a2c8cb482bac0ac502d9ba96ffffff7f0000100000000000007d5ad897ef3b7cda42013d53046da21b40216e14ba2d6ad5656bfff17addaedab25b30002abbba7fa725f38400be7c1f001b2cd317902f19e385be9e48dccff729433282830689da6b53b263339863297771429d120000003341bf4abacac95900fca0493cf29b33dcc9ffffffffffffffd39fec2271ff01589646efd1cf870cd7bb2366fde41f94290c2a5ff870ce41fd3467decb05cfd9fcb32c8ed1dbd9d10a64c1083d5e71b5565b1768ee58969c41595229df17bcad70fb4021428ce970275d13b78100788f11f76161d46ea3abe0fa4d30dc94ef241875f3b4ce0232fcea69c271d7fa29822aea68a660e717a04becff0f719197724f4fce1093b62d7e8c7123d8ec571be54c72d978cf906df0042e36acd37d7f9e119f2c06f815312e0cfe222a06f56dd022c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef2ae582786105c7df8be5877050c91301bb997316dbf17866fb84d4173731efe895ff2e1c5560926e90109b598502d3e959efc71f665c4d75cf2458e3546c1c776da64fb5abee0acfd235f2f4632c9062ece84c99a061887a20639b41c8c12ee86c50804042b3fb5aac518a75f9e7d7101d5e186c489b3a06fb99e0aa7f23a054de2f4d92d6bd72ee2c9fdc75aaaf1e3e483b4ad05573af40326993947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f54c2d3335457acf37331766e472391e358c3b377327ac9ecc34f24c9ae153ec60ac0694dc55bff9f5f45f90400000000000000d6b2c5ea1393fdf24285bf16b99c9cc0ad1857216f1a985f369191ae954febb3df464bfe0f7f3ee9afe7befb89d2777399f5874c553aeb3729cffe86e66964ae09bb6d163118e4cbe024fd4500f8ff0700000000cc9d8046c216c1f895778cb25122a2a9f9b444aeadea2a40da8daccf080842a486721737390cbf3a74cb2003016f1514216bdf57d2a40d40b51ab63e96ec8485b3b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde8a168c3f5db2fea6f26e4a4304e50c349f4f9ecee27defc93871c5f99b355b72d538ba4958ea8e4aa37094191e10096e7e60fc3541a2c905a1a95e9571bf38ae1981c4238ecaee6f75cd0a6881bd1517a8250ddc8674152f94e3a409e2a3bce109b60000000000000000d6d5210d7503000000a87a27602b81f76386f1535bef1497f92186086e29c6bc5a1fad6ec9a31137abf9a404abde7750898b1bd627e873f8703be8672d70d1ab57075228a9f46ed9bd1f08fb8191bbab2dc51de3a61f0868afc4294859323e6c257a45319f18101288d139bd3da20fed05a8fe64680b0a3fc22dd70400000000946912d6c98cd1a9fbe1e7d58c08acaf30235b918a31d2eca55f74a23641f61f2d5b308cf0d031b0c7f0ced69993e9960ff5f76015e6009556237badf4e7965bbe2777e808fcba821aa8e8c5c39609ff854352cb4900000000000000000000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66418d169fc03aa188546b3ad2a182068e1e3a0e2505bc7f41019645466a53f1c96e0d4b3bc19faa5449209b083dbd334b47f067bbab40743b2a42010082008df75cf43f8ecc8d3726602111b40e761fd21081920382f14d12ca3c3431ee97471c7868dcda7eaa69eb7f7f80572fdd11bb1d0d1280fbc22bf73468788df51710d7d31c632fc5ed1762eb0b428ee751c47d8e894f745a868404a0bf35f0121008b722b1eaa6aedfa1bf2e7ccb2d61d5d76331945ecefa26b8471d42645288d7226bbd9ccd628ab84875f2c50ba891cea592b0430a537a395dc73bda367bf12cb7d81691a5fe8c47be395656a297e9df0e71f96756ea5cce7daac4be290159f6bcd75f0dda9de5532e71ae9e48b0ed0254a83100000000f6fbb869604d51a36a54c832e45b2569dc0d90b075225fde44c4e0973171ad47d6b0fdf9743af932cd6db49a47613808bad959710300000000000000832d0a45fa4242e24c7e800003c9e8095e02985f28e678f66422436f949e2ab8f162d7e3f855e378f4a1f40b0c6fb2d4b205a800b6d713acebc5b014e61a543a5a194f9ac18d76b5440e3b1a569e7397f6cafa86966d7ba19e720413267a6ccea9c439671d2c680f2753ca184eeeb843450368acb4383a01d25eb3d1e23e0f2645d1cdfa9fa410632f95a5f622f851c66ee7e30393cd7a4d67ff2a49c4f93c0984b5c2d4523497e4d64f95f08493564a1df87111c9bf3194fef97dcecc467ace45feeb685c5870d05f88a0f463db88d377442e1349acaf766218b54a9d624778e1c4e064c98e494198276eb2df7766411bef0ebb5000000000006065d635b0b7a00ee767221d8af9753387e0cd8d718f54a29df6eba3bd4c440e6e2172e3fcc01b8babb757b5c59217b80d0db3ba582814a604e4ef7a803e9ca7c85b35c9b93a9e0885e238b44ae1c2e64cce3b27083b8246829e64056000302bffff15405bd5f2eba20000000000000000000000000000000000009a9823fd8fbc5aa16509945ed032b48ea12d8e0588dc52702e4084913a06d468d0928bad76d697e1f85ab030e788d38788ee5b5428d4a971cc97db9fd231088e570735ce129e7e77fc2777692664a1488fd8d6dff4dad618fd54f529d4555c6507009ee69dd1bc55258789b24052137e9637f3efbab71720f88c3c44b3b7486f979e8a3174b531f573fe0e5239c000be2733c49546f6e8a9175ec6f14dbf72cac91643b2fd99c29eca28a3c2e60d5e5b8795fae16a7c3ea57e728eca35eaf0155a39f97580e079175426c088a0208040982a0000000000000000000000000051ceaaf0159fe61f2eade7603d0a7a56fb09cd119ac06adb6597155ae47846892bb423c024d8cbe9240b71ec6dc2124d3a19e2d714b273d95d1d3aa737cb04a33615ff2a730e51067d5d675d7122361c37c61a43b5afd865b60d4cae891b73220f17d25985a7f76834995e53a93a1c7b9eef267df691ca983a0b15bda7f6c5c1ca7aa50261a3089a1ebf0734c9b07e8951ff023263ad5aed8cfb49b49e128c697724c057d22c5df5aef27ce3db11d5ad5527d149d076e1a87e2df27c0cb8a67ad026bf953e88f10447e125c2c0f1aebee1f3390a9e3ddad4e2a6e0f6e4569fdefa19e870e04acf9493b963f98e23cfc665e4f465fa3f801e1957c399e45f61d3459b1c606204368bb931345af2823c487d2fd99db6ea6e008e7ffa06ca861551189d155bd077a79fe2c7e961352e56824f727d21d41eae78bfec4a2d7a7edbc8ef958c5ea599f7c25bf71c2340558aa12fdd24a88aaad5921aee7dae6a2f3009d9cb43ab4898d0f0aa565431b6abe585d75db04d1c9ba0b9de4ae8b0d3132bc6810cc9a693979f55174a72e1df9fdef35bc470f9e6e591982757f45c52c645d891bf63bb21fb66926ebe1a8525611fc3e8bb8795c36dc2a86b5ab46ff33cc74f61751b2dae92676db85c8d0c721b7ea4544bf51c95c86fcac1f434d09d1ee4928aafe23de66fed972e0dddfb33f64e48701b049239e7f552d816441d11c4c2647c014462344359198d97c4b6e9ed31ca18987b64de079b2bed641e8a92f13ca70844c65cb423d01950b0ebf44bd28e09c05d9ae5dd689fb880fb18d042219f5ac60c3a03b085abf3e8e3efc842a8d328733461f04c99607061c65ed14c61322a5ac2d371a95b8ad867ec92d13a4fa4ae033a09673866cd77f4bcdaaa05207166b19a8758d8855400d8c6a7242dc207251e8797eca24ea4f487663e60f2f5e1f1424958fd148f846830e88a42d93e1fe9c0b4a4a268921738938aa9f3cb3811ac87c54c8ebc8bcfb4613cc3a997ff1579edbd4ade8020e3ad001b072b1a751b588ac4639f35a58e00a50c0270608c7a7f10132b1c25b9ea81232fbef665f6212f875b2a0000000000000000000000000000cf7b6c4ba9bec153d6834bfef080df374703a8ff56a63ec1fe5f2e05a79e3cace7283dd68d41e94420c325fe4dae144fde5ec25a87d625cab20753a77b323fa3783c8b675859b9012647885a242adfee2fe812ecbe5191e0a15142f7349e7627cc39d724e2e34e7a24154f26ae3125b36d0504965295d0453902ac7079b11a3a1e655e482331e3dc35b2e7e4e3ea99064fe5b9c8ae0ca3e5fd653f3286a99d81ce4eba765c38d097391ad4babac38ce5b4344e24a361cd54e5"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x2e) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r0}, 0x10) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) unshare(0x20040600) connect$inet(0xffffffffffffffff, 0x0, 0x0) bind$netlink(0xffffffffffffffff, 0x0, 0x0) write$binfmt_elf64(0xffffffffffffffff, 0x0, 0x78) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, 0xffffffffffffffff, 0x0) setitimer(0x1, 0x0, 0x0) openat$vcs(0xffffffffffffff9c, 0x0, 0x100, 0x0) write$uinput_user_dev(0xffffffffffffffff, 0x0, 0x0) syslog(0x4, &(0x7f0000000140)=""/179, 0xb3) openat$incfs(0xffffffffffffffff, &(0x7f0000000040)='.log\x00', 0x0, 0x20) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'wg1\x00'}) sendmsg$ETHTOOL_MSG_FEATURES_SET(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000600)=ANY=[@ANYBLOB="d8010000", @ANYRES16], 0x1d8}}, 0x0) 1m27.531044217s ago: executing program 0 (id=40): bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='gid_map\x00') sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) pread64(r0, 0x0, 0x0, 0x6) getpid() socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) connect$unix(r4, &(0x7f00000003c0)=@abs={0x1, 0x0, 0x4e23}, 0x6e) r5 = syz_io_uring_setup(0x6de4, &(0x7f0000000180)={0x0, 0x113a, 0x2, 0x2}, &(0x7f00000000c0), &(0x7f0000000000)) io_uring_enter(r5, 0x0, 0xe38e, 0x5, 0x0, 0x0) r6 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x80082, 0x0) write$vga_arbiter(r6, &(0x7f0000000040)=@target={'target ', {'PCI:', '0', ':', '7', ':', '2', '.', '0'}}, 0x13) io_uring_register$IORING_REGISTER_BUFFERS2(r5, 0xf, &(0x7f00000024c0)={0x2, 0x0, 0x0, &(0x7f0000000080)=[{0x0}, {&(0x7f0000000240)=""/191, 0xbf}], &(0x7f0000002480)=[0x0, 0x2]}, 0x20) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r5, 0x10, &(0x7f0000002d80)={0x0, 0x0, &(0x7f0000002cc0)=[{0x0}, {0x0}], 0x0, 0x2}, 0x20) r7 = socket$xdp(0x2c, 0x3, 0x0) write$binfmt_elf64(r7, &(0x7f0000000440)={{0x7f, 0x45, 0x4c, 0x46, 0x6, 0x22, 0xc, 0x1, 0x900000, 0x3, 0x3e, 0x2, 0x6e, 0x40, 0x282, 0xe, 0x7, 0x38, 0x3, 0x81, 0x8}, [{0x474e553, 0x2, 0x8000000000000001, 0xffffffffffffffff, 0x2, 0x2, 0x2627e68d, 0x9}, {0x6474e551, 0x80000000, 0x10001, 0xa26, 0x0, 0x1, 0x9, 0xe}, {0x6, 0x5, 0x7, 0x100, 0x3, 0x0, 0x200, 0xffffffffffffffff}], "25c8e7a093f5a0fce74731a433885038d6507dc8033239d05e3d57a06e2485dcc29e0fe563beb845fffb8c4b3c999c42406191634930ee2dee51270856c218df7d9c8ab3f364530c1adc5c2280597f53f8df4b93fd6896b69882bf6ba04be45f346c34ffb5ca574acb1eede1f34c21a6e164157ad539241d9c345bae08de41f5e83d8a075db754f776a6c254dc818af1d7f6109a94f09469dc9d137917e02ebc29f428349227a0dc85cafa85ed994d246d0f7d0352f84f34b289eedf3ff3934ed7619b45d8653427436c1d", ['\x00']}, 0x2b3) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) 1m25.712660271s ago: executing program 0 (id=41): pipe2(&(0x7f0000000140), 0x80080) r0 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x275a, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() connect$ax25(r0, 0x0, 0x0) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbeee, 0x8031, r0, 0x55779000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r4) r5 = socket$inet6_mptcp(0xa, 0x1, 0x106) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x10) bind$inet6(r4, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x1}, 0x1c) listen(r5, 0x0) r6 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$sock_int(r6, 0x1, 0x8, &(0x7f0000000140), 0x4) connect$inet(r6, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) r7 = accept(r4, 0x0, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[], 0xfffffdef}, 0x1, 0x0, 0x0, 0xc000}, 0x10) recvfrom(r6, &(0x7f0000000180)=""/60, 0xfffffffffffffecb, 0x4100, 0x0, 0x0) mremap(&(0x7f0000000000/0x9000)=nil, 0x600600, 0x200000, 0x3, &(0x7f0000a00000/0x600000)=nil) 1m23.100179887s ago: executing program 0 (id=46): bind$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_open_dev$vcsn(&(0x7f0000000180), 0x0, 0x26642) fsetxattr$security_capability(r0, &(0x7f0000000280), &(0x7f0000000380)=@v2={0x2000000, [{0x6, 0x10}, {0xffffff89, 0x100004}]}, 0x14, 0x3) socket$kcm(0x2, 0x5, 0x84) io_uring_setup(0x3edc, 0x0) ioctl$KVM_CREATE_DEVICE(0xffffffffffffffff, 0xc00caee0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x25dfdbfb, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x8, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x3}}}}, @m_ife={0x48, 0x3, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) rmdir(&(0x7f0000000980)='.\x00') prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = syz_open_dev$usbfs(&(0x7f0000000080), 0x70, 0x101301) r5 = socket$vsock_stream(0x28, 0x1, 0x0) ioctl$int_in(r5, 0x5421, 0x0) connect$vsock_stream(r5, &(0x7f0000000000)={0x28, 0x0, 0x0, @local}, 0x10) ioctl$USBDEVFS_IOCTL(r4, 0xc0105512, &(0x7f0000000200)) 1m7.769106016s ago: executing program 32 (id=46): bind$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_open_dev$vcsn(&(0x7f0000000180), 0x0, 0x26642) fsetxattr$security_capability(r0, &(0x7f0000000280), &(0x7f0000000380)=@v2={0x2000000, [{0x6, 0x10}, {0xffffff89, 0x100004}]}, 0x14, 0x3) socket$kcm(0x2, 0x5, 0x84) io_uring_setup(0x3edc, 0x0) ioctl$KVM_CREATE_DEVICE(0xffffffffffffffff, 0xc00caee0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x25dfdbfb, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x8, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x3}}}}, @m_ife={0x48, 0x3, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) rmdir(&(0x7f0000000980)='.\x00') prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = syz_open_dev$usbfs(&(0x7f0000000080), 0x70, 0x101301) r5 = socket$vsock_stream(0x28, 0x1, 0x0) ioctl$int_in(r5, 0x5421, 0x0) connect$vsock_stream(r5, &(0x7f0000000000)={0x28, 0x0, 0x0, @local}, 0x10) ioctl$USBDEVFS_IOCTL(r4, 0xc0105512, &(0x7f0000000200)) 38.425538066s ago: executing program 3 (id=92): r0 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x2, &(0x7f0000000040)=[{0x30, 0x0, 0x0, 0xfffff004}, {0x6}]}, 0x10) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f00000004c0)=ANY=[@ANYBLOB="9feb0100180000000000000034000000340000000300000000000000000000030000000003000000020000000000000000000000000000010500000010000000010000000000000700000000005f"], 0x0, 0x4f, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000000)='ext4_sync_fs\x00', r1}, 0x18) r2 = socket$inet_smc(0x2b, 0x1, 0x0) openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r3 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) socket$nl_netfilter(0x10, 0x3, 0xc) r6 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r6, &(0x7f0000019680)=""/102392, 0x18ff8) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x11, 0x4, 0x4, 0xff, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) socket(0x10, 0x3, 0x0) r8 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00'}) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000001c0)={r7, &(0x7f0000000140), &(0x7f00000005c0)=@buf="8e5e53640d0102", 0x1}, 0x20) setpriority(0x2, 0x0, 0xffffffffffffffcd) ioctl$KVM_SET_MSRS(r5, 0x4008ae89, 0x0) setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x4f0, 0x340, 0x25, 0x148, 0x0, 0x60, 0x458, 0x2a8, 0x2a8, 0x458, 0x2a8, 0x3, 0x0, {[{{@uncond, 0x0, 0x2f8, 0x340, 0x0, {0x200003ae, 0x7f00}, [@common=@inet=@hashlimit1={{0x58}, {'geneve0\x00', {0x44, 0x0, 0x9, 0x0, 0x0, 0xffffffff, 0x7}}}, @common=@unspec=@bpf1={{0x230, 'bpf\x00', 0x0}, @pinned={0x1, 0x0, 0x6, './file0\x00'}}]}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x6, 'syz0\x00'}}}, {{@ip={@broadcast, @multicast1, 0x0, 0x0, 'veth1_to_bond\x00', 'veth0\x00', {0xff}}, 0x0, 0xd0, 0x118, 0x0, {}, [@common=@unspec=@cgroup0={{0x28}, {0x4}}, @common=@unspec=@statistic={{0x38}}]}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x8000, 'syz0\x00', {0x481c}}}}], {{'\x00', 0xc8, 0x70, 0x98}, {0x28}}}}, 0x550) 35.310314909s ago: executing program 3 (id=93): syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x11, &(0x7f0000000000), 0x9, 0x5fd, &(0x7f0000000ac0)="$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") io_uring_setup(0x3eae, &(0x7f0000003b00)={0x0, 0xc95e, 0x200, 0x1}) sysinfo(&(0x7f0000000000)=""/196) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x3) bpf$ENABLE_STATS(0x20, 0x0, 0x0) open(&(0x7f0000000040)='./file1\x00', 0x1a1142, 0x0) syz_mount_image$hfs(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x30004c0, &(0x7f0000002bc0)=ANY=[@ANYBLOB="71756965742c63726561746f723dd4675f162c696f636861727365743d69736f383835392d322c71756965742c636f6465706167653d63703933362c00b24530a1a1e51b95228246cc65c972358b611490e09004a315011a4fe58392211f22a42390912061adb25c406e20585d9fa4109c4a2b201f39c5e48b745085abecadfbfbbcd03215c2cdd68151829c12d7be50cdd55aa9e506d9e28ad8ce2951dd1f560961e92e8d198954d737b45262a26cc3bb46b70e1ad909d3b0c2d7fb8053f47884a9cc46a9d32ce04b2d00544c47d94d5a91538c024918965b", @ANYRESDEC, @ANYRESOCT], 0x11, 0x2b7, &(0x7f0000000b00)="$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") r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000003480)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) fchown(r4, 0x0, 0x0) r5 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x458, 0x258, 0x4c, 0x232, 0x258, 0x0, 0x388, 0x2e8, 0x2e8, 0x388, 0x2e8, 0x3, 0x0, {[{{@ipv6={@mcast2, @mcast2, [], [], 'veth1_to_bond\x00', 'ip6gre0\x00', {}, {}, 0x6, 0x0, 0x3}, 0x0, 0x230, 0x258, 0x0, {}, [@common=@unspec=@cluster={{0x30}}, @common=@inet=@policy={{0x158}, {[{@ipv4=@dev, [], @ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}}, {@ipv4, [], @ipv4=@broadcast}, {@ipv4=@multicast2, [], @ipv4=@dev}, {@ipv6=@loopback, [], @ipv6=@private2}], 0x1}}]}, @common=@inet=@SYNPROXY={0x28}}, {{@ipv6={@ipv4={'\x00', '\xff\xff', @remote}, @private1, [], [], 'team_slave_0\x00', 'xfrm0\x00'}, 0x0, 0xf8, 0x130, 0x0, {}, [@inet=@rpfilter={{0x28}}, @inet=@rpfilter={{0x28}}]}, @common=@inet=@SET3={0x38}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4b8) ioctl$TCSETS(r0, 0x404c4701, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000080), 0x11d400, 0x0) 32.428246198s ago: executing program 2 (id=95): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) syz_open_dev$usbfs(&(0x7f0000000340), 0x7f, 0x100) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="12000000060000000400000091c6be", @ANYRES32, @ANYBLOB, @ANYRES32=0x0, @ANYRES32], 0x50) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000380)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) gettid() sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket(0x27, 0x3, 0x80000000) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_clone(0x1000, 0x0, 0x0, 0x0, 0x0, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(0xffffffffffffffff, 0x6, 0x23, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x4001, @local}, 0x10, 0x0}, 0x3004c080) sendmsg$BATADV_CMD_SET_HARDIF(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000440)=ANY=[@ANYRES16=0x0, @ANYBLOB, @ANYRES32], 0x34}, 0x1, 0x0, 0x0, 0x24044066}, 0x800) r3 = socket$inet6(0xa, 0x3, 0x38) connect$inet6(r3, &(0x7f0000000300)={0xa, 0x4e23, 0x41200003, @mcast1, 0xb}, 0x1c) ioctl$UFFDIO_UNREGISTER(0xffffffffffffffff, 0x8010aa01, &(0x7f00000000c0)={&(0x7f0000341000/0x4000)=nil, 0x4000}) 31.378295892s ago: executing program 2 (id=96): socket(0x11, 0xa, 0x0) r0 = fsopen(&(0x7f00000000c0)='9p\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000000)='dax\x00', &(0x7f00000001c0)=':,^]+*@', 0x0) r1 = socket(0x2a, 0x2, 0x0) getsockname$packet(r1, &(0x7f0000000540)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) socket(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x5, 0x8a}, 0x0) r3 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r4 = dup(r3) ioctl$PTP_EXTTS_REQUEST2(r4, 0xc0603d0f, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r6 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$VHOST_SET_VRING_ADDR(r6, 0x4028af11, &(0x7f0000000200)={0x1, 0x1, 0x0, &(0x7f0000000740)=""/51, 0x0}) r7 = socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_MEM_TABLE(r6, 0x4008af03, &(0x7f0000000340)) r8 = dup(r7) ioctl$VHOST_NET_SET_BACKEND(r6, 0x4008af30, &(0x7f0000000000)={0x1, r8}) ioctl$VHOST_SET_FEATURES(r6, 0x4008af00, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000680)=@newtfilter={0x40, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0xfffa, 0xfff3}, {}, {0x1c, 0xfff9}}, [@filter_kind_options=@f_matchall={{0xd}, {0xc, 0x2, [@TCA_MATCHALL_CLASSID={0x8, 0x1, {0xfff1, 0x4}}]}}]}, 0x40}}, 0x24000000) 31.040338136s ago: executing program 3 (id=97): syz_mount_image$udf(&(0x7f0000000080), &(0x7f0000000180)='./file1\x00', 0x4040, &(0x7f00000015c0)=ANY=[@ANYBLOB='lastblock=00000000000000000000,umask=00000000000000000000002,dmode=00000000000000000077777,novrs,shortad,shortad,undelete,iocharset=cp437,shortad,umask=00000000000000000000006,dmode=00000000000000000000011,fileset=00000000000000000011,uid=', @ANYRES8=0x0, @ANYRESDEC=0x0, @ANYBLOB="cdf7c0c4ada580d5d36bd90806b670b73bb5112f75ca483652cf9b8a22555c3af34a84c5747ac51aa890ca205a0f27d7dde81ad3a01f21810b6de2d56be05416c54e1c6e8459e1643b129327581f7716b38db3d3f3bbeb6d1b846a2aad654e1795850a1f82ac738387d9c3009d18eb2a78258fcc4ac4eb6a12a5650e10ebf077d9ab33f24de7cbffe0", @ANYRESHEX], 0x2, 0xc3f, &(0x7f0000001780)="$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") prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB], 0x4c}}, 0x0) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYBLOB="2c000000010601020000000073b8901ee608797a3100e58ce0cd84f61d86"], 0x2c}, 0x1, 0x0, 0x0, 0x10000082}, 0x80) prctl$PR_SET_IO_FLUSHER(0x43, 0x1) socket$nl_netfilter(0x10, 0x3, 0xc) prctl$PR_SET_IO_FLUSHER(0x43, 0x0) gettid() r1 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r1, 0x84, 0x10, &(0x7f0000000080)=@sack_info={0x0, 0x6, 0x1}, 0xc) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r1, 0x84, 0x10, 0x0, &(0x7f0000000540)) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r2, 0x84, 0x76, &(0x7f00000003c0)={0x0, 0x7}, 0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r2, 0x84, 0x75, &(0x7f0000000000)={0x0, 0xca}, 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) sendmmsg$inet6(r2, &(0x7f0000000b40)=[{{&(0x7f0000000180)={0xa, 0x4e23, 0x0, @loopback}, 0x1c, &(0x7f0000002180)=[{&(0x7f0000000140)="e9", 0x1}], 0x1}}], 0x1, 0x600c000) syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00') mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0) umount2(&(0x7f0000000040)='.\x00', 0x2) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r2, 0x84, 0x77, &(0x7f0000000100)=ANY=[@ANYRES32=0x0, @ANYBLOB="0200"], 0xc) 30.278556657s ago: executing program 2 (id=98): r0 = syz_open_dev$vim2m(&(0x7f00000001c0), 0xfff9, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1}) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x80}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r5 = socket$inet(0x2, 0x802, 0x1) connect$inet(r5, &(0x7f0000002780)={0x2, 0x4e22, @remote}, 0x10) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x0) r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f0000000040)={0x49, &(0x7f00000000c0)}) bind$bt_hci(r6, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write$bt_hci(r6, &(0x7f0000000040)=ANY=[], 0x6) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x9, 0x6, &(0x7f0000006680)) getrusage(0xffffffffffffffff, 0x0) read(r5, &(0x7f0000000040)=""/25, 0x19) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x50) 27.1378805s ago: executing program 2 (id=111): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpgid(0xffffffffffffffff) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000040)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet6(0xa, 0x80002, 0x0) getsockopt$inet6_mreq(r3, 0x88, 0x64, 0x0, &(0x7f00000004c0)) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) mknod$loop(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x1) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) r5 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000003480)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) read$FUSE(r5, &(0x7f00000034c0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0xcac) fchown(r4, r6, r7) fsetxattr$system_posix_acl(r4, 0x0, &(0x7f0000000080)={{}, {0x1, 0x4}, [], {0x4, 0x4}, [{0x8, 0x0, r7}], {0x10, 0x1}, {0x20, 0x5}}, 0x2c, 0x2) link(0x0, &(0x7f0000000bc0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f0000000340)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r8}, 0x10) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$lock(r9, 0x25, &(0x7f0000000040)={0x0, 0x0, 0x80, 0x7}) fcntl$lock(r9, 0x25, &(0x7f0000000180)={0x0, 0x1, 0x0, 0x80000000}) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) syz_mount_image$udf(&(0x7f0000000000), &(0x7f0000000c80)='./file1\x00', 0x0, &(0x7f0000000180)=ANY=[], 0x1, 0xc4d, &(0x7f0000001b40)="$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") 25.900292227s ago: executing program 2 (id=103): r0 = socket$unix(0x1, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e22, 0x3, @remote, 0x10001}, 0x1c) r2 = socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x10, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000200)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r6}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r7}, 0x10) r8 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r8, 0x560a, &(0x7f0000000040)={0x0, 0x1, 0x0, 0x2, 0x3, 0x3}) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, 0x0) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x40, &(0x7f0000000080)=0x1, 0x4) dup(r0) r9 = socket$inet6(0xa, 0x3, 0xff) connect$inet6(r9, &(0x7f0000000480)={0xa, 0x0, 0x0, @dev, 0x1}, 0x1c) r10 = dup2(r9, r9) sendmmsg$inet6(r10, &(0x7f0000000980)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000600)="384000000000ce8b2e44e6fb44858386d2a320b7531a3afd6b5b01702b8de4ab9c33af8b87553121", 0x28}], 0x2}}], 0x1, 0x0) getsockopt$SO_TIMESTAMP(r0, 0x1, 0x1d, 0x0, 0x0) 25.898450907s ago: executing program 3 (id=104): socket$kcm(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) setregid(0xffffffffffffffff, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r3, 0x84, 0x81, 0x0, 0x0) r4 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000125c0), 0x8000, 0x0) ioctl$SNDCTL_SEQ_OUTOFBAND(r4, 0x40085112, 0x0) setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r3, 0x84, 0x15, 0x0, 0x0) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, 0x0, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, &(0x7f0000000000), 0x0) sendto$inet6(r3, 0x0, 0x0, 0x400c0d4, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @loopback, 0xffffffff}, 0x1c) prlimit64(0x0, 0x3, 0x0, 0x0) r6 = syz_init_net_socket$llc(0x1a, 0x801, 0x0) listen(r6, 0x0) r7 = syz_open_procfs(0x0, &(0x7f0000000040)='net/route\x00') pread64(r7, &(0x7f0000000080)=""/102356, 0x18fd4, 0x3) 21.610564105s ago: executing program 2 (id=106): r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$VIDIOC_QUERY_EXT_CTRL(r0, 0xc0e85667, &(0x7f00000005c0)={0xffffff07, 0x3, "22590a37c8e2d3f458ee5ed83af35c32d4869cadf26264b04173abf0ba771192", 0x2, 0x3921, 0xb, 0x2, 0x8, 0x5, 0x9, 0x6, [0x6, 0xc5f7, 0xb]}) syz_open_dev$sndpcmp(&(0x7f0000000000), 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000180)={'vxcan0\x00', 0x0}) bind$can_raw(r2, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) sendmmsg$unix(r4, &(0x7f00000038c0), 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_group_source_req(r5, 0x0, 0x2e, &(0x7f0000000400)={0x8000, {{0x2, 0x4e23, @multicast1}}, {{0x2, 0x4e22, @local}}}, 0x104) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_usb_connect(0x0, 0x46, 0x0, 0x0) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r6 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f0000000300)={'vxcan1\x00', 0x0}) syz_emit_ethernet(0x52, &(0x7f00000004c0)=ANY=[@ANYBLOB="cf599d594a0987000000000086dd60000000001c2c00fe8000000000000000000000000000bbfec3"], 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) bind$can_raw(r6, &(0x7f0000000000)={0x1d, r7}, 0x10) ioctl$MEDIA_IOC_ENUM_LINKS(r6, 0xc0287c02, &(0x7f00000004c0)={0x80000000, 0x0, 0x0}) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) setsockopt$CAN_RAW_FILTER(r6, 0x65, 0x1, &(0x7f00000000c0), 0xf00) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=@getchain={0x24, 0x11, 0x839, 0x70bd25, 0x0, {0x0, 0x0, 0x0, r3, {0xb, 0x3}, {0xffff, 0xfff9}, {0x1}}}, 0x24}}, 0x0) 20.437207931s ago: executing program 3 (id=109): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x800) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r0, 0x408c5333, &(0x7f0000000140)={0x7, 0x69dee8ce, 0x1, 'queue0\x00', 0xffff8001}) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x2000002, 0x4052, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_REM(r1, 0x84, 0x65, &(0x7f0000000a00)=[@in={0x2, 0x0, @loopback}], 0x10) syz_io_uring_setup(0x728e, 0x0, 0x0, &(0x7f0000000100)) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000040)) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000240), 0x13f, 0x1}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(0xffffffffffffffff, 0x0, 0x0) setxattr$trusted_overlay_upper(0x0, &(0x7f0000000080), &(0x7f00000004c0)=ANY=[@ANYBLOB="00fb800110b8504ac047c042d1ed683d2c16827cb11d377a3e06ffff000000000000bfb3e1e1d20ccfc9a80553efa462be475a019e495aa246eedd3055c058417b11ca1016165566f66d7d739c06699bcffc9684ead1b1d0c096"], 0x80, 0x2) socket$inet_udp(0x2, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r5 = syz_open_procfs(0x0, &(0x7f0000019100)='net/fib_trie\x00') pread64(r5, &(0x7f0000032140)=""/102344, 0x18fc8, 0x4000c2a) 18.172135612s ago: executing program 3 (id=113): syz_mount_image$hfs(&(0x7f0000000180), &(0x7f0000000000)='./file2\x00', 0x3000812, &(0x7f00000001c0)=ANY=[@ANYBLOB="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", @ANYRESOCT, @ANYRESDEC, @ANYRES64, @ANYRES8, @ANYRESOCT=0x0], 0x11, 0x2f0, &(0x7f00000019c0)="$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") r0 = open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_clone3(&(0x7f0000000440)={0xa1880100, &(0x7f0000000040), &(0x7f00000000c0), &(0x7f0000000100)=0x0, {0x2e}, &(0x7f00000003c0)=""/95, 0x5f, &(0x7f0000000500)=""/205, &(0x7f0000000140)=[0xffffffffffffffff, 0x0, 0x0], 0x3, {r0}}, 0x58) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000080)=0xf) write$P9_RAUTH(r0, &(0x7f0000000600)={0x14, 0x67, 0x0, {0x0, 0x0, 0x4}}, 0x14) ioctl$TCFLSH(r3, 0x400455c8, 0x4) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a030000000d0000000000070000000900010073797a30000000004c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a3000000000080005400000000d08000640ffffff00080003400000000c2c0000000b0a01010000000000000000070000000900020073797a31000000000900010073797a30"], 0xc0}}, 0x0) syz_usb_connect(0x5, 0x0, 0x0, 0x0) connect$netlink(0xffffffffffffffff, &(0x7f00000014c0)=@kern={0x10, 0x0, 0x0, 0x100000}, 0xc) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r5) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000001c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_RADAR_DETECT(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)={0x1c, r6, 0x1, 0x70bd27, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r7}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x4000004}, 0x4080) r8 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r8, &(0x7f0000001ff0), 0x10) sendmsg$can_raw(r8, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000ff0)={&(0x7f0000000140)=@can={{0x4, 0x1, 0x1, 0x1}, 0x7, 0x2, 0x0, 0x0, "563ff4125f591070"}, 0x10}, 0xee, 0x0, 0x0, 0x4000801}, 0x20000000) unlink(&(0x7f00000001c0)='./bus\x00') 9.930928664s ago: executing program 1 (id=123): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) syz_open_dev$usbfs(&(0x7f0000000340), 0x7f, 0x100) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="12000000060000000400000091c6be", @ANYRES32, @ANYBLOB, @ANYRES32=0x0, @ANYRES32], 0x50) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000380)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) gettid() sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket(0x27, 0x3, 0x80000000) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_clone(0x1000, 0x0, 0x0, 0x0, 0x0, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(0xffffffffffffffff, 0x6, 0x23, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x4001, @local}, 0x10, 0x0}, 0x3004c080) sendmsg$BATADV_CMD_SET_HARDIF(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000440)=ANY=[@ANYRES16=0x0, @ANYBLOB, @ANYRES32], 0x34}, 0x1, 0x0, 0x0, 0x24044066}, 0x800) r3 = socket$inet6(0xa, 0x3, 0x38) writev(r3, &(0x7f00000000c0)=[{&(0x7f0000000100)=',', 0xf338}], 0x1) ioctl$UFFDIO_UNREGISTER(0xffffffffffffffff, 0x8010aa01, &(0x7f00000000c0)={&(0x7f0000341000/0x4000)=nil, 0x4000}) 8.379311535s ago: executing program 1 (id=134): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) syz_open_dev$usbfs(&(0x7f0000000340), 0x7f, 0x100) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="12000000060000000400000091c6be", @ANYRES32, @ANYBLOB, @ANYRES32=0x0, @ANYRES32], 0x50) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000380)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) gettid() sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket(0x27, 0x3, 0x80000000) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_clone(0x1000, 0x0, 0x0, 0x0, 0x0, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(0xffffffffffffffff, 0x6, 0x23, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x4001, @local}, 0x10, 0x0}, 0x3004c080) sendmsg$BATADV_CMD_SET_HARDIF(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000440)=ANY=[@ANYRES16=0x0, @ANYBLOB, @ANYRES32], 0x34}, 0x1, 0x0, 0x0, 0x24044066}, 0x800) r3 = socket$inet6(0xa, 0x3, 0x38) writev(r3, &(0x7f00000000c0)=[{&(0x7f0000000100)=',', 0xf338}], 0x1) ioctl$UFFDIO_UNREGISTER(0xffffffffffffffff, 0x8010aa01, &(0x7f00000000c0)={&(0x7f0000341000/0x4000)=nil, 0x4000}) 7.33930624s ago: executing program 1 (id=125): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000480)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = fsopen(&(0x7f0000000000)='rpc_pipefs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) r5 = socket(0x28, 0x5, 0x0) connect$vsock_stream(r5, &(0x7f0000000080), 0x10) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r6, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'}) sendmsg$nl_route(r7, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sendmmsg(r5, &(0x7f000000b840), 0x0, 0x40040) r8 = accept4$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) recvfrom$unix(r8, &(0x7f0000000300)=""/293, 0xffffffffffffff14, 0x22, 0x0, 0xfffffffffffffe2b) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x12, 0x4, &(0x7f0000000600)=ANY=[@ANYBLOB="18000000010000000000000000000000711213000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 6.427458352s ago: executing program 33 (id=106): r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$VIDIOC_QUERY_EXT_CTRL(r0, 0xc0e85667, &(0x7f00000005c0)={0xffffff07, 0x3, "22590a37c8e2d3f458ee5ed83af35c32d4869cadf26264b04173abf0ba771192", 0x2, 0x3921, 0xb, 0x2, 0x8, 0x5, 0x9, 0x6, [0x6, 0xc5f7, 0xb]}) syz_open_dev$sndpcmp(&(0x7f0000000000), 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000180)={'vxcan0\x00', 0x0}) bind$can_raw(r2, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) sendmmsg$unix(r4, &(0x7f00000038c0), 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_group_source_req(r5, 0x0, 0x2e, &(0x7f0000000400)={0x8000, {{0x2, 0x4e23, @multicast1}}, {{0x2, 0x4e22, @local}}}, 0x104) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_usb_connect(0x0, 0x46, 0x0, 0x0) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r6 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f0000000300)={'vxcan1\x00', 0x0}) syz_emit_ethernet(0x52, &(0x7f00000004c0)=ANY=[@ANYBLOB="cf599d594a0987000000000086dd60000000001c2c00fe8000000000000000000000000000bbfec3"], 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) bind$can_raw(r6, &(0x7f0000000000)={0x1d, r7}, 0x10) ioctl$MEDIA_IOC_ENUM_LINKS(r6, 0xc0287c02, &(0x7f00000004c0)={0x80000000, 0x0, 0x0}) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) setsockopt$CAN_RAW_FILTER(r6, 0x65, 0x1, &(0x7f00000000c0), 0xf00) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=@getchain={0x24, 0x11, 0x839, 0x70bd25, 0x0, {0x0, 0x0, 0x0, r3, {0xb, 0x3}, {0xffff, 0xfff9}, {0x1}}}, 0x24}}, 0x0) 6.280562354s ago: executing program 4 (id=129): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) syz_open_dev$usbfs(&(0x7f0000000340), 0x7f, 0x100) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="12000000060000000400000091c6be", @ANYRES32, @ANYBLOB, @ANYRES32=0x0, @ANYRES32], 0x50) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000380)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) gettid() sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket(0x27, 0x3, 0x80000000) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_clone(0x1000, 0x0, 0x0, 0x0, 0x0, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(0xffffffffffffffff, 0x6, 0x23, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x4001, @local}, 0x10, 0x0}, 0x3004c080) sendmsg$BATADV_CMD_SET_HARDIF(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000440)=ANY=[@ANYRES16=0x0, @ANYBLOB, @ANYRES32], 0x34}, 0x1, 0x0, 0x0, 0x24044066}, 0x800) r3 = socket$inet6(0xa, 0x3, 0x38) connect$inet6(r3, &(0x7f0000000300)={0xa, 0x4e23, 0x41200003, @mcast1, 0xb}, 0x1c) ioctl$UFFDIO_UNREGISTER(0xffffffffffffffff, 0x8010aa01, &(0x7f00000000c0)={&(0x7f0000341000/0x4000)=nil, 0x4000}) 6.261493734s ago: executing program 1 (id=130): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000200)='sched_switch\x00'}, 0x10) r0 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r3 = socket$inet6(0xa, 0x6, 0x0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000f40), r4) sendmsg$IEEE802154_ADD_IFACE(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x14, r5, 0x1, 0x7ffffc}, 0x14}}, 0x20000000) bind$inet6(r3, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) listen(r3, 0x90101) r6 = socket$inet_dccp(0x2, 0x6, 0x0) setsockopt(r6, 0x10d, 0x800000000d, &(0x7f00001c9fff)="03", 0x1) syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000640)='./file1\x00', 0x3014850, &(0x7f00000001c0)={[{@abort}, {@barrier_val={'barrier', 0x3d, 0x1000}}, {@grpjquota}, {@quota}, {@nobarrier}]}, 0x3, 0x4c1, &(0x7f0000000680)="$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") lsetxattr$system_posix_acl(&(0x7f0000000180)='./file1\x00', &(0x7f0000003380)='system.posix_acl_access\x00', &(0x7f00000003c0)=ANY=[@ANYBLOB="020000000100030000000200040004000000000010000500000000002000000000000000da06de960bc58706e2eaf56357248e1efe3f98cf69318dd50d3cc818349912ad9d8e297fbb8bbc7a29d12148a7b8c457edef9d7940a3f368e304ea4b48b0e16247839b7a7022"], 0x24, 0x3) quotactl$Q_GETNEXTQUOTA(0xffffffff80000900, &(0x7f0000000080)=@loop={'/dev/loop', 0x0}, 0x0, &(0x7f00000002c0)) connect$inet(r6, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10) r7 = accept4(r3, 0x0, 0x0, 0x80800) sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_SET(r7, 0x0, 0x4) write$sysctl(r0, &(0x7f0000000280)='7\x00', 0x2) pselect6(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) 5.277202918s ago: executing program 4 (id=131): socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) bind$inet6(0xffffffffffffffff, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2000007, 0x31, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0xbe, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000057c0), 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x2, &(0x7f0000000080)=0x9, 0x8, 0x0) mbind(&(0x7f0000029000/0x3000)=nil, 0x3000, 0x8000, 0x0, 0x9, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000001080)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f0000000680)=0x400000bce) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x140, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r2 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, 0x0) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/cpuinfo\x00', 0x0, 0x0) sendfile(r1, r3, 0x0, 0x20000023896) sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000600)=ANY=[@ANYBLOB="240000000f14011726bd7000dcdbdf250b004500757618b7627300000800010000"], 0x24}, 0x1, 0x0, 0x0, 0x24048091}, 0x4000) prctl$PR_SET_MM(0x23, 0x3, &(0x7f0000ffd000/0x3000)=nil) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_genetlink_get_family_id$nl802154(0x0, 0xffffffffffffffff) 4.041519725s ago: executing program 1 (id=132): bind$inet6(0xffffffffffffffff, 0x0, 0x0) listen(0xffffffffffffffff, 0x3) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) modify_ldt$write(0x1, 0x0, 0xfffffffffffffe8a) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="440000001a00010000000000000000000a000000000000000000000014000200fe8000000000000000000000000000aa14"], 0x44}}, 0x0) ptrace(0x10, r2) ptrace$pokeuser(0x6, r2, 0x358, 0x800000000000) epoll_create1(0x0) mkdir(0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) rmdir(&(0x7f00000001c0)='./cgroup/../file0\x00') syz_mount_image$ext4(&(0x7f0000000080)='ext3\x00', &(0x7f0000000480)='./file0\x00', 0x0, &(0x7f0000000280)={[{@noload}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x1}}, {@bh}, {@noload}, {@data_err_ignore}, {@usrjquota}]}, 0xfe, 0x44d, &(0x7f0000000900)="$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") syz_clone(0x22023500, 0x0, 0x0, 0x0, 0x0, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x8, &(0x7f0000000000)=0x7fffffff, 0x4) 3.977186066s ago: executing program 4 (id=133): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) syz_open_dev$usbfs(&(0x7f0000000340), 0x7f, 0x100) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="12000000060000000400000091c6be", @ANYRES32, @ANYBLOB, @ANYRES32=0x0, @ANYRES32], 0x50) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000380)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) gettid() sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket(0x27, 0x3, 0x80000000) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_clone(0x1000, 0x0, 0x0, 0x0, 0x0, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(0xffffffffffffffff, 0x6, 0x23, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x4001, @local}, 0x10, 0x0}, 0x3004c080) sendmsg$BATADV_CMD_SET_HARDIF(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000440)=ANY=[@ANYRES16=0x0, @ANYBLOB, @ANYRES32], 0x34}, 0x1, 0x0, 0x0, 0x24044066}, 0x800) r3 = socket$inet6(0xa, 0x3, 0x38) writev(r3, &(0x7f00000000c0)=[{&(0x7f0000000100)=',', 0xf338}], 0x1) ioctl$UFFDIO_UNREGISTER(0xffffffffffffffff, 0x8010aa01, &(0x7f00000000c0)={&(0x7f0000341000/0x4000)=nil, 0x4000}) 2.525262566s ago: executing program 34 (id=113): syz_mount_image$hfs(&(0x7f0000000180), &(0x7f0000000000)='./file2\x00', 0x3000812, &(0x7f00000001c0)=ANY=[@ANYBLOB="71756965742c636f6465706167653d63703836302c696f636861727365743d63703836312c00808fead042bd35dc78f7f06333a5e7165b8271e41aee85e59cbb6c2df3d4e5c16b06c73f2e3b348a7fba46e286378a15ee516bac8d4813c9c3d9cee1ddb95d1bbcf504e065b3749a1cbd841e685a558598cf0db10b55885946e678d0a71877037a090000000700848879ef1604cadc1faca3aa22a576750d559c4e124d4cb7293e7393b77286fa8c6dc449eda0a03d342382e84d6d3c29ab95cc923fbe25e134d1c421320a3bffaa17fcd6b5178e322cc47133b3811e3d3bc34998dc7ed029834ad591d9d56c41063d8de2d50a2398e73ff2913a9fe8e954a4e4ca99ceb5737e57193c5f47fd63b16c8b34f256dbac0e5ebd009078df2cb1ca1051ad091adbfee5126d8a59fa5438734bc3e8cc7b7edc10716a0a9b711952cdf96586e06fbace21dc04bdb4a1a2072ce5f72cf0", @ANYRESOCT, @ANYRESDEC, @ANYRES64, @ANYRES8, @ANYRESOCT=0x0], 0x11, 0x2f0, &(0x7f00000019c0)="$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") r0 = open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_clone3(&(0x7f0000000440)={0xa1880100, &(0x7f0000000040), &(0x7f00000000c0), &(0x7f0000000100)=0x0, {0x2e}, &(0x7f00000003c0)=""/95, 0x5f, &(0x7f0000000500)=""/205, &(0x7f0000000140)=[0xffffffffffffffff, 0x0, 0x0], 0x3, {r0}}, 0x58) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000080)=0xf) write$P9_RAUTH(r0, &(0x7f0000000600)={0x14, 0x67, 0x0, {0x0, 0x0, 0x4}}, 0x14) ioctl$TCFLSH(r3, 0x400455c8, 0x4) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a030000000d0000000000070000000900010073797a30000000004c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a3000000000080005400000000d08000640ffffff00080003400000000c2c0000000b0a01010000000000000000070000000900020073797a31000000000900010073797a30"], 0xc0}}, 0x0) syz_usb_connect(0x5, 0x0, 0x0, 0x0) connect$netlink(0xffffffffffffffff, &(0x7f00000014c0)=@kern={0x10, 0x0, 0x0, 0x100000}, 0xc) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r5) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000001c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_RADAR_DETECT(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)={0x1c, r6, 0x1, 0x70bd27, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r7}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x4000004}, 0x4080) r8 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r8, &(0x7f0000001ff0), 0x10) sendmsg$can_raw(r8, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000ff0)={&(0x7f0000000140)=@can={{0x4, 0x1, 0x1, 0x1}, 0x7, 0x2, 0x0, 0x0, "563ff4125f591070"}, 0x10}, 0xee, 0x0, 0x0, 0x4000801}, 0x20000000) unlink(&(0x7f00000001c0)='./bus\x00') 2.453323346s ago: executing program 4 (id=136): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) syz_open_dev$usbfs(&(0x7f0000000340), 0x7f, 0x100) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="12000000060000000400000091c6be", @ANYRES32, @ANYBLOB, @ANYRES32=0x0, @ANYRES32], 0x50) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000380)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) gettid() sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket(0x27, 0x3, 0x80000000) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_clone(0x1000, 0x0, 0x0, 0x0, 0x0, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(0xffffffffffffffff, 0x6, 0x23, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x4001, @local}, 0x10, 0x0}, 0x3004c080) sendmsg$BATADV_CMD_SET_HARDIF(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000440)=ANY=[@ANYRES16=0x0, @ANYBLOB, @ANYRES32], 0x34}, 0x1, 0x0, 0x0, 0x24044066}, 0x800) r3 = socket$inet6(0xa, 0x3, 0x38) writev(r3, &(0x7f00000000c0)=[{&(0x7f0000000100)=',', 0xf338}], 0x1) ioctl$UFFDIO_UNREGISTER(0xffffffffffffffff, 0x8010aa01, &(0x7f00000000c0)={&(0x7f0000341000/0x4000)=nil, 0x4000}) 1.4672043s ago: executing program 4 (id=137): r0 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, 0x0) lsetxattr$security_capability(&(0x7f0000000080)='./file0\x00', &(0x7f0000000100), &(0x7f0000000040)=@v2={0x2000000, [{0xffff, 0x9}, {0xffbf8001, 0x791}]}, 0x14, 0x0) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x1, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r4) syz_open_procfs$namespace(r4, 0xfffffffffffffffe) getpriority(0x2, r4) ioctl$KVM_SET_MEMORY_ATTRIBUTES(r3, 0x4020aed2, &(0x7f0000000600)={0x10000, 0x286000, 0x8, 0x2000000}) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f0000000000)={0xaa, 0x280}) r5 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) r6 = socket$inet_dccp(0x2, 0x6, 0x0) connect$inet(r6, &(0x7f0000e5c000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x3a}}, 0x10) getsockopt$inet_int(r6, 0x10d, 0xf, &(0x7f0000000380), &(0x7f00000009c0)=0x4) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_WRITE_FIXED={0x5, 0x20, 0x4000, @fd, 0x3fe, 0x74dd, 0xfffffffa, 0x1b, 0x1, {0x3, r5}}) mknod$loop(&(0x7f0000000180)='./file0\x00', 0x6000, 0x0) r7 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) dup2(r7, r7) ioctl$DRM_IOCTL_MODE_LIST_LESSEES(r0, 0xc01064c7, &(0x7f00000002c0)={0xffffffffffffffe4, 0x0, 0x0}) 103.399458ms ago: executing program 1 (id=138): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) getsockopt$XDP_STATISTICS(0xffffffffffffffff, 0x11b, 0x7, &(0x7f0000000080), 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$rds(0x15, 0x5, 0x0) bind$rds(r3, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x800, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, 0x0) r5 = dup3(r4, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000900), 0x0, 0x0, 0x0}) syz_emit_ethernet(0xc5, &(0x7f0000000380)=ANY=[@ANYBLOB="ffffffffffffffffffffffff884700000000000000000000000000000000401a00a7006500000e219078e0000002e0000001860a346715960ce5e061445433c1e00000017fffffff0a010100000000080000000000000007ac1414aa000089880a016e9ab6960008e000000100000003ac1414bb0000008a0000000000000006ac14140a7eaa00010001ac1414bb00000005890bed0a010102e00000020000004e204e2204519078c84753b9081af4edab9464977e1a668761d696a7c69227744ef6ab7c04", @ANYRES16=r2], 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)={0x4c, 0x2, 0x6, 0x801, 0xe4340000, 0x0, {0x1, 0x0, 0x2}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_TYPENAME={0x12, 0x3, 'hash:net,port\x00'}]}, 0x4c}}, 0x2) sendmsg$IPSET_CMD_ADD(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYBLOB="54000000090601080000000000000000050000000900020073797a310000000005000100070000002c000780060004404e21000005000700e30000000c00018008000140850101010c0002800800"], 0x54}, 0x1, 0x0, 0x0, 0x10004893}, 0x80) 0s ago: executing program 4 (id=139): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d000000"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) fanotify_mark(0xffffffffffffffff, 0x105, 0x40009975, 0xffffffffffffffff, 0x0) r4 = socket(0x10, 0x3, 0x0) r5 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000080), 0x2) r6 = socket(0x2b, 0x80801, 0x1) setsockopt$IP6T_SO_SET_REPLACE(r6, 0x29, 0x40, &(0x7f0000000fc0)=@raw={'raw\x00', 0x3c1, 0x3, 0x320, 0x140, 0x5c, 0x160, 0x140, 0x3e0, 0x250, 0x228, 0x25a, 0x250, 0x228, 0x4, 0x0, {[{{@ipv6={@remote, @dev, [], [], 'veth0_to_batadv\x00', 'wg1\x00', {}, {0x222cecdb0fb5a62a}, 0x3a}, 0x5002, 0xf8, 0x140, 0x52020000, {0x0, 0x6802000000000000}, [@common=@icmp6={{0x28}, {0x0, "d176"}}, @common=@unspec=@state={{0x28}, {0xfffffffd}}]}, @unspec=@CT0={0x48}}, {{@ipv6={@local, @private2, [], [0xff], 'veth1_to_hsr\x00', 'dummy0\x00', {}, {}, 0x88}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'snmp\x00', 'syz0\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x380) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[], 0x108}, 0x1, 0x0, 0x0, 0x4048811}, 0x400c4) r7 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) ioctl$TIOCPKT(r7, 0x5420, &(0x7f0000000000)=0x2) sendmsg$nl_route(r6, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000040)={0x0}, 0x1, 0x0, 0x0, 0x48014}, 0x20004000) write$binfmt_aout(r5, &(0x7f0000000200)=ANY=[@ANYBLOB="03000000b500000001000000feefffff"], 0xc8) sendmsg$nl_generic(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="240000001e00"], 0x24}}, 0x0) mknod(0x0, 0x8001420, 0x1) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.10.16' (ED25519) to the list of known hosts. [ 67.037878][ T4243] cgroup: Unknown subsys name 'net' [ 67.179926][ T4243] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 68.738765][ T4243] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k FS [ 70.566222][ T4257] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 70.574836][ T4257] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 70.582400][ T4257] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 70.590629][ T4257] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 70.598596][ T4257] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 70.606197][ T4257] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 70.655876][ T4257] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 70.683836][ T4255] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 70.695793][ T4268] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 70.704993][ T4268] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 70.713541][ T4268] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 70.721307][ T4268] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 70.728597][ T4268] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 70.736625][ T4268] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 70.744307][ T4268] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 70.751667][ T4268] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 70.759715][ T4268] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 70.767069][ T4268] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 70.776015][ T4268] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 70.784355][ T4268] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 70.791486][ T4268] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 70.799320][ T4271] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 70.799622][ T4268] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 70.814054][ T4271] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 70.814546][ T4268] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 70.821305][ T4271] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 70.828536][ T4268] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 70.843856][ T4271] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 70.844362][ T4257] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 70.861755][ T4257] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 70.988097][ T4253] chnl_net:caif_netlink_parms(): no params data found [ 71.150632][ T4253] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.158438][ T4253] bridge0: port 1(bridge_slave_0) entered disabled state [ 71.166744][ T4253] device bridge_slave_0 entered promiscuous mode [ 71.178655][ T4253] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.185851][ T4253] bridge0: port 2(bridge_slave_1) entered disabled state [ 71.193840][ T4253] device bridge_slave_1 entered promiscuous mode [ 71.198289][ T1267] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.206765][ T1267] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.269505][ T4253] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 71.281180][ T4253] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 71.339973][ T4253] team0: Port device team_slave_0 added [ 71.365431][ T4253] team0: Port device team_slave_1 added [ 71.464942][ T4253] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 71.471913][ T4253] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 71.497927][ T4253] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 71.528239][ T4262] chnl_net:caif_netlink_parms(): no params data found [ 71.547699][ T4253] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 71.556621][ T4253] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 71.583087][ T4253] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 71.608018][ T4259] chnl_net:caif_netlink_parms(): no params data found [ 71.639285][ T4260] chnl_net:caif_netlink_parms(): no params data found [ 71.714847][ T4253] device hsr_slave_0 entered promiscuous mode [ 71.721610][ T4253] device hsr_slave_1 entered promiscuous mode [ 71.732159][ T4258] chnl_net:caif_netlink_parms(): no params data found [ 71.851193][ T4262] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.858481][ T4262] bridge0: port 1(bridge_slave_0) entered disabled state [ 71.866795][ T4262] device bridge_slave_0 entered promiscuous mode [ 71.909363][ T4262] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.917003][ T4262] bridge0: port 2(bridge_slave_1) entered disabled state [ 71.925040][ T4262] device bridge_slave_1 entered promiscuous mode [ 71.932357][ T4260] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.939754][ T4260] bridge0: port 1(bridge_slave_0) entered disabled state [ 71.948170][ T4260] device bridge_slave_0 entered promiscuous mode [ 71.990531][ T4260] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.997857][ T4260] bridge0: port 2(bridge_slave_1) entered disabled state [ 72.006996][ T4260] device bridge_slave_1 entered promiscuous mode [ 72.014362][ T4259] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.021432][ T4259] bridge0: port 1(bridge_slave_0) entered disabled state [ 72.030970][ T4259] device bridge_slave_0 entered promiscuous mode [ 72.041858][ T4259] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.049214][ T4259] bridge0: port 2(bridge_slave_1) entered disabled state [ 72.057170][ T4259] device bridge_slave_1 entered promiscuous mode [ 72.064112][ T4258] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.071373][ T4258] bridge0: port 1(bridge_slave_0) entered disabled state [ 72.085128][ T4258] device bridge_slave_0 entered promiscuous mode [ 72.127540][ T4258] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.134836][ T4258] bridge0: port 2(bridge_slave_1) entered disabled state [ 72.142850][ T4258] device bridge_slave_1 entered promiscuous mode [ 72.151818][ T4262] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 72.170548][ T4260] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 72.198115][ T4262] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 72.214132][ T4260] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 72.234375][ T4259] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 72.279632][ T4259] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 72.290845][ T4258] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 72.306226][ T4262] team0: Port device team_slave_0 added [ 72.318752][ T4260] team0: Port device team_slave_0 added [ 72.327382][ T4260] team0: Port device team_slave_1 added [ 72.342935][ T4258] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 72.354116][ T4262] team0: Port device team_slave_1 added [ 72.408583][ T4262] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 72.415735][ T4262] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 72.442755][ T4262] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 72.465296][ T4259] team0: Port device team_slave_0 added [ 72.474360][ T4259] team0: Port device team_slave_1 added [ 72.482592][ T4258] team0: Port device team_slave_0 added [ 72.489443][ T4262] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 72.496733][ T4262] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 72.522812][ T4262] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 72.534422][ T4260] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 72.541382][ T4260] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 72.568267][ T4260] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 72.580702][ T4260] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 72.587953][ T4260] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 72.614441][ T4260] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 72.634213][ T4263] Bluetooth: hci0: command 0x0409 tx timeout [ 72.642725][ T4258] team0: Port device team_slave_1 added [ 72.675107][ T4259] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 72.682079][ T4259] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 72.708878][ T4259] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 72.746392][ T4259] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 72.753521][ T4259] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 72.779499][ T4259] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 72.817591][ T4262] device hsr_slave_0 entered promiscuous mode [ 72.824450][ T4262] device hsr_slave_1 entered promiscuous mode [ 72.831069][ T4262] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 72.839334][ T4262] Cannot create hsr debugfs directory [ 72.848923][ T4258] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 72.856039][ T4258] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 72.882670][ T4258] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 72.889387][ T4263] Bluetooth: hci3: command 0x0409 tx timeout [ 72.919934][ T4258] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 72.927020][ T4258] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 72.953746][ T4263] Bluetooth: hci2: command 0x0409 tx timeout [ 72.953774][ T4257] Bluetooth: hci1: command 0x0409 tx timeout [ 72.953960][ T4257] Bluetooth: hci4: command 0x0409 tx timeout [ 72.966476][ T4258] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 73.025700][ T4260] device hsr_slave_0 entered promiscuous mode [ 73.032491][ T4260] device hsr_slave_1 entered promiscuous mode [ 73.041439][ T4260] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 73.049278][ T4260] Cannot create hsr debugfs directory [ 73.075554][ T4259] device hsr_slave_0 entered promiscuous mode [ 73.082533][ T4259] device hsr_slave_1 entered promiscuous mode [ 73.089230][ T4259] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 73.097531][ T4259] Cannot create hsr debugfs directory [ 73.104916][ T4253] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 73.139827][ T4253] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 73.149701][ T4253] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 73.194495][ T4253] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 73.221992][ T4258] device hsr_slave_0 entered promiscuous mode [ 73.229129][ T4258] device hsr_slave_1 entered promiscuous mode [ 73.236092][ T4258] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 73.243933][ T4258] Cannot create hsr debugfs directory [ 73.507342][ T4262] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 73.520890][ T4262] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 73.529874][ T4262] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 73.551220][ T4262] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 73.615435][ T4253] 8021q: adding VLAN 0 to HW filter on device bond0 [ 73.634504][ T4260] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 73.666676][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 73.677090][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 73.688579][ T4260] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 73.702493][ T4253] 8021q: adding VLAN 0 to HW filter on device team0 [ 73.725796][ T4260] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 73.736275][ T4260] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 73.752690][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 73.762940][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 73.772344][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 73.779787][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 73.790425][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 73.799282][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 73.807977][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.815103][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 73.841907][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 73.850458][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 73.861840][ T4259] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 73.875755][ T4259] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 73.886921][ T4259] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 73.898737][ T4259] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 73.941598][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 73.957150][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 73.967008][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 73.994911][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 74.002961][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 74.012105][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 74.037036][ T4262] 8021q: adding VLAN 0 to HW filter on device bond0 [ 74.059573][ T4253] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 74.071575][ T4253] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 74.085761][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 74.096805][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 74.106578][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 74.115148][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 74.129667][ T4258] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 74.146519][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 74.169695][ T4258] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 74.180518][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 74.188920][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 74.199225][ T4262] 8021q: adding VLAN 0 to HW filter on device team0 [ 74.226269][ T4258] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 74.245220][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 74.259260][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 74.268634][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 74.275846][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 74.294018][ T4258] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 74.320245][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 74.328957][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 74.338501][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 74.355230][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 74.362366][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 74.377234][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 74.416475][ T4260] 8021q: adding VLAN 0 to HW filter on device bond0 [ 74.441238][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 74.458140][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 74.470679][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 74.483155][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 74.497751][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 74.507162][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 74.527648][ T4260] 8021q: adding VLAN 0 to HW filter on device team0 [ 74.547200][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 74.566953][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 74.589559][ T4262] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 74.602480][ T4262] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 74.625498][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 74.636137][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 74.645009][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 74.654291][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 74.664202][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 74.672863][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 74.681859][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 74.688991][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 74.701799][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 74.709966][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 74.718524][ T4257] Bluetooth: hci0: command 0x041b tx timeout [ 74.754383][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 74.761876][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 74.790229][ T4259] 8021q: adding VLAN 0 to HW filter on device bond0 [ 74.802908][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 74.820691][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 74.830257][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 74.837441][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 74.848750][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 74.857941][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 74.886296][ T4253] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 74.907983][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 74.917824][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 74.927532][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 74.937997][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 74.947094][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 74.955143][ T4257] Bluetooth: hci3: command 0x041b tx timeout [ 74.957478][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 74.970089][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 74.977910][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 74.986159][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 75.001391][ T4259] 8021q: adding VLAN 0 to HW filter on device team0 [ 75.012939][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 75.022732][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 75.033414][ T4257] Bluetooth: hci2: command 0x041b tx timeout [ 75.039456][ T4257] Bluetooth: hci1: command 0x041b tx timeout [ 75.046263][ T4255] Bluetooth: hci4: command 0x041b tx timeout [ 75.056736][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 75.070374][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 75.082448][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 75.089711][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 75.105066][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 75.122050][ T4260] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 75.163084][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 75.175051][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 75.185351][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 75.192465][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 75.201453][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 75.210750][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 75.227994][ T4258] 8021q: adding VLAN 0 to HW filter on device bond0 [ 75.262287][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 75.281774][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 75.293924][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 75.304398][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 75.313078][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 75.322577][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 75.332049][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 75.340719][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 75.372616][ T4259] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 75.390878][ T4259] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 75.411014][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 75.419538][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 75.428597][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 75.438302][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 75.447636][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 75.461263][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 75.469126][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 75.476860][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 75.490563][ T4258] 8021q: adding VLAN 0 to HW filter on device team0 [ 75.513043][ T4262] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 75.521438][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 75.531150][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 75.541024][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 75.551687][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 75.569345][ T4253] device veth0_vlan entered promiscuous mode [ 75.587292][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 75.617625][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 75.633174][ T56] bridge0: port 1(bridge_slave_0) entered blocking state [ 75.640465][ T56] bridge0: port 1(bridge_slave_0) entered forwarding state [ 75.709696][ T4253] device veth1_vlan entered promiscuous mode [ 75.736289][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 75.750302][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 75.768475][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 75.778198][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 75.787484][ T56] bridge0: port 2(bridge_slave_1) entered blocking state [ 75.794672][ T56] bridge0: port 2(bridge_slave_1) entered forwarding state [ 75.838178][ T4260] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 75.848065][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 75.859271][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 75.870128][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 75.879400][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 75.890089][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 75.903508][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 75.928352][ T4262] device veth0_vlan entered promiscuous mode [ 75.956591][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 75.971612][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 75.984661][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 76.001468][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 76.011626][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 76.021552][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 76.030498][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 76.040049][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 76.048560][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 76.056929][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 76.071924][ T4253] device veth0_macvtap entered promiscuous mode [ 76.094406][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 76.102897][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 76.111920][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 76.120720][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 76.132099][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 76.144891][ T4262] device veth1_vlan entered promiscuous mode [ 76.158484][ T4253] device veth1_macvtap entered promiscuous mode [ 76.171195][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 76.179683][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 76.188545][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 76.199005][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 76.207483][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 76.215814][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 76.230915][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 76.239599][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 76.254043][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 76.262004][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 76.275772][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 76.285001][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 76.298177][ T4259] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 76.309511][ T4260] device veth0_vlan entered promiscuous mode [ 76.326690][ T4258] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 76.356707][ T4260] device veth1_vlan entered promiscuous mode [ 76.371094][ T4253] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 76.398835][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 76.408348][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 76.424723][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 76.440555][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 76.461836][ T4253] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 76.482906][ T4260] device veth0_macvtap entered promiscuous mode [ 76.509671][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 76.521899][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 76.535768][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 76.545172][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 76.554482][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 76.563227][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 76.572888][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 76.589011][ T4253] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.598632][ T4253] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.607695][ T4253] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.616694][ T4253] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.630069][ T4260] device veth1_macvtap entered promiscuous mode [ 76.641545][ T4262] device veth0_macvtap entered promiscuous mode [ 76.687173][ T4262] device veth1_macvtap entered promiscuous mode [ 76.701105][ T4260] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 76.714242][ T4260] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.727549][ T4260] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 76.751010][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 76.761097][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 76.770422][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 76.784798][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 76.794426][ T4263] Bluetooth: hci0: command 0x040f tx timeout [ 76.801093][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 76.825768][ T4260] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 76.848421][ T4260] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.887070][ T4260] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 76.908085][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 76.920762][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 76.937712][ T4262] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 76.970593][ T4262] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.993367][ T4262] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 77.013397][ T4262] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.025449][ T4262] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 77.043454][ T4263] Bluetooth: hci3: command 0x040f tx timeout [ 77.057231][ T4260] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.074981][ T4260] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.090046][ T4260] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.101004][ T4260] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.113948][ T4263] Bluetooth: hci4: command 0x040f tx timeout [ 77.120090][ T4263] Bluetooth: hci2: command 0x040f tx timeout [ 77.126457][ T4257] Bluetooth: hci1: command 0x040f tx timeout [ 77.126569][ T4316] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 77.142727][ T4316] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 77.156165][ T4262] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 77.166955][ T4262] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.176926][ T4262] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 77.187812][ T4262] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.200178][ T4262] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 77.233059][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 77.242511][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 77.256252][ T4262] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.265430][ T4262] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.274536][ T4262] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.284265][ T4262] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.308768][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 77.317620][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 77.351243][ T4316] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.361121][ T4316] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.380330][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 77.395932][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 77.434164][ T4258] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 77.441903][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 77.488128][ T4259] device veth0_vlan entered promiscuous mode [ 77.498101][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 77.507786][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 77.516843][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 77.524976][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 77.545425][ T4316] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.550652][ T4259] device veth1_vlan entered promiscuous mode [ 77.569794][ T4316] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.579297][ T4316] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 77.587927][ T4316] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 77.608624][ T33] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.618171][ T33] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.663599][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 77.671842][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 77.688235][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 77.699460][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 77.754928][ T4259] device veth0_macvtap entered promiscuous mode [ 77.769393][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 77.780870][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 77.793043][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 77.807352][ T33] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.835802][ T33] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.847557][ T4316] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 77.866417][ T4316] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 77.878446][ T4316] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 77.888915][ T4316] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 77.900440][ T4333] loop2: detected capacity change from 0 to 128 [ 77.900762][ T4316] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 77.955623][ T4258] device veth0_vlan entered promiscuous mode [ 77.965114][ T4259] device veth1_macvtap entered promiscuous mode [ 77.990762][ T4316] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 78.011201][ T4258] device veth1_vlan entered promiscuous mode [ 78.018651][ T4316] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 78.037347][ T33] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 78.050258][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 78.065607][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 78.074899][ T4334] syz.2.3: attempt to access beyond end of device [ 78.074899][ T4334] loop2: rw=2049, sector=145, nr_sectors = 704 limit=128 [ 78.080007][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 78.089934][ T33] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 78.105102][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 78.119103][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 78.135187][ T4259] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 78.156881][ T4259] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 78.176986][ T4259] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 78.181004][ T4332] syz.2.3: attempt to access beyond end of device [ 78.181004][ T4332] loop2: rw=524288, sector=145, nr_sectors = 224 limit=128 [ 78.190890][ T4259] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 78.214792][ T4333] syz.2.3: attempt to access beyond end of device [ 78.214792][ T4333] loop2: rw=0, sector=145, nr_sectors = 8 limit=128 [ 78.218158][ T4259] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 78.229754][ T4333] syz.2.3: attempt to access beyond end of device [ 78.229754][ T4333] loop2: rw=0, sector=145, nr_sectors = 8 limit=128 [ 78.247014][ T4259] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 78.253668][ T4333] syz.2.3: attempt to access beyond end of device [ 78.253668][ T4333] loop2: rw=0, sector=145, nr_sectors = 8 limit=128 [ 78.273036][ T4259] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 78.290253][ T4333] syz.2.3: attempt to access beyond end of device [ 78.290253][ T4333] loop2: rw=0, sector=145, nr_sectors = 8 limit=128 [ 78.313046][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 78.340634][ T4334] syz.2.3: attempt to access beyond end of device [ 78.340634][ T4334] loop2: rw=0, sector=145, nr_sectors = 8 limit=128 [ 78.348592][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 78.356220][ T4334] syz.2.3: attempt to access beyond end of device [ 78.356220][ T4334] loop2: rw=0, sector=145, nr_sectors = 8 limit=128 [ 78.370580][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 78.385165][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 78.396291][ T4334] syz.2.3: attempt to access beyond end of device [ 78.396291][ T4334] loop2: rw=0, sector=145, nr_sectors = 8 limit=128 [ 78.397143][ T4259] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 78.421158][ T4259] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 78.426529][ T4334] syz.2.3: attempt to access beyond end of device [ 78.426529][ T4334] loop2: rw=0, sector=145, nr_sectors = 8 limit=128 [ 78.431229][ T4259] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 78.454635][ T4259] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 78.464536][ T4259] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 78.476782][ T4259] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 78.488545][ T4259] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 78.504839][ T4258] device veth0_macvtap entered promiscuous mode [ 78.520993][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 78.550060][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 78.581479][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 78.602229][ T4259] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.623324][ T4259] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.632068][ T4259] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.651310][ T4259] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.674909][ T4258] device veth1_macvtap entered promiscuous mode [ 78.883767][ T4263] Bluetooth: hci0: command 0x0419 tx timeout [ 79.133446][ T4255] Bluetooth: hci3: command 0x0419 tx timeout [ 79.193439][ T4255] Bluetooth: hci1: command 0x0419 tx timeout [ 79.200042][ T4257] Bluetooth: hci4: command 0x0419 tx timeout [ 79.206246][ T4263] Bluetooth: hci2: command 0x0419 tx timeout [ 79.294696][ T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!! [ 79.397154][ T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!! [ 79.873907][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 79.893267][ T0] NOHZ tick-stop error: local softirq work is pending, handler #202!!! [ 79.903289][ T0] NOHZ tick-stop error: local softirq work is pending, handler #282!!! [ 79.913914][ T0] NOHZ tick-stop error: local softirq work is pending, handler #382!!! [ 80.287868][ T0] NOHZ tick-stop error: local softirq work is pending, handler #38a!!! [ 80.303266][ T0] NOHZ tick-stop error: local softirq work is pending, handler #38a!!! [ 80.313281][ T0] NOHZ tick-stop error: local softirq work is pending, handler #38a!!! [ 80.321640][ T0] NOHZ tick-stop error: local softirq work is pending, handler #38a!!! [ 80.465327][ T4258] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 80.633052][ T4258] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 80.658642][ T4258] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 80.673344][ T4258] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 80.690264][ T4258] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 80.712133][ T4258] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 80.726948][ T4258] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 80.737922][ T4258] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 80.749929][ T4258] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 80.830005][ T4350] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 80.859747][ T4350] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 80.915502][ T4258] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 80.948630][ T4258] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 80.959625][ T4356] process 'syz.2.7' launched './file1' with NULL argv: empty string added [ 81.182433][ T4258] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 81.430592][ T4258] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.442385][ T4258] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 81.471508][ T127] cfg80211: failed to load regulatory.db [ 81.506469][ T4341] binder: 4338:4341 ioctl c00c620f 200000000dc0 returned -22 [ 81.546347][ T4258] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.579843][ T4258] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 81.612511][ T4258] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.746501][ T4258] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 81.842095][ T4316] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 82.277597][ T4316] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 82.304711][ T4316] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 82.312923][ T4316] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 82.333010][ T4316] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 82.505931][ T4258] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.535238][ T4258] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.536616][ T4363] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 82.555823][ T4366] overlayfs: failed to resolve './file0': -2 [ 82.565305][ T4258] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.645875][ T4258] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.865383][ T4363] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 85.933362][ T4368] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 86.135327][ T4384] Bluetooth: hci5: Frame reassembly failed (-84) [ 86.229912][ T4316] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 86.259453][ T4316] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 86.298158][ T4316] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 86.345753][ T4385] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 86.354940][ T4385] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 86.465712][ T4393] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci3/hci3:200/input5 [ 86.695739][ T4363] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 87.452153][ T4395] loop4: detected capacity change from 0 to 32768 [ 88.160502][ T4255] Bluetooth: hci5: command 0x1003 tx timeout [ 88.171467][ T48] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 88.868565][ T4409] loop0: detected capacity change from 0 to 512 [ 90.997184][ T4417] loop2: detected capacity change from 0 to 32768 [ 91.110873][ T4417] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop2 scanned by syz.2.16 (4417) [ 91.152142][ T4417] BTRFS info (device loop2): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 91.162524][ T4417] BTRFS info (device loop2): using sha256 (sha256-avx2) checksum algorithm [ 91.171301][ T4417] BTRFS info (device loop2): force clearing of disk cache [ 91.178473][ T4417] BTRFS info (device loop2): force zlib compression, level 3 [ 91.185903][ T4417] BTRFS info (device loop2): enabling auto defrag [ 91.192537][ T4417] BTRFS info (device loop2): max_inline at 0 [ 91.198563][ T4417] BTRFS info (device loop2): enabling disk space caching [ 91.205638][ T4417] BTRFS info (device loop2): disk space caching is enabled [ 91.334430][ T4409] EXT4-fs warning (device loop0): ext4_multi_mount_protect:404: Unable to create kmmpd thread for loop0. [ 91.624876][ T4403] 8021q: VLANs not supported on xfrm0 [ 92.637280][ T4423] sched: RT throttling activated [ 94.005431][ T48] Bluetooth: hci3: unexpected event 0x06 length: 4 > 3 [ 94.047323][ T4417] BTRFS error (device loop2): open_ctree failed: -12 [ 94.179739][ T4453] can0: slcan on ptm0. [ 95.758884][ T4460] I/O error, dev loop3, sector 128 op 0x0:(READ) flags 0x1000 phys_seg 1 prio class 2 [ 95.769862][ T4460] gfs2: error 10 reading superblock [ 96.648591][ T4274] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop2 scanned by udevd (4274) [ 97.037147][ T4463] QAT: failed to copy from user. [ 97.453819][ T4444] can0 (unregistered): slcan off ptm0. [ 98.181857][ T4472] loop3: detected capacity change from 0 to 128 [ 98.273088][ T4472] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 98.513724][ T48] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci3/hci3:201' [ 98.523673][ T48] CPU: 1 PID: 48 Comm: kworker/u5:0 Not tainted 6.1.140-syzkaller #0 [ 98.531778][ T48] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 98.541962][ T48] Workqueue: hci3 hci_rx_work [ 98.546709][ T48] Call Trace: [ 98.550010][ T48] [ 98.552960][ T48] dump_stack_lvl+0x168/0x22e [ 98.557678][ T48] ? asm_sysvec_reschedule_ipi+0x16/0x20 [ 98.563346][ T48] ? show_regs_print_info+0x12/0x12 [ 98.568582][ T48] ? asm_sysvec_reschedule_ipi+0x16/0x20 [ 98.574257][ T48] sysfs_create_dir_ns+0x252/0x280 [ 98.579405][ T48] ? hci_rx_work+0x3eb/0xd40 [ 98.584025][ T48] ? sysfs_warn_dup+0xa0/0xa0 [ 98.588742][ T48] ? do_raw_spin_unlock+0x11d/0x230 [ 98.593986][ T48] kobject_add_internal+0x6b8/0xc80 [ 98.599221][ T48] kobject_add+0x152/0x210 [ 98.603689][ T48] ? kobject_init+0x1d0/0x1d0 [ 98.608416][ T48] ? klist_children_get+0x50/0x50 [ 98.613476][ T48] ? get_device_parent+0x121/0x3f0 [ 98.618623][ T48] device_add+0x483/0xfb0 [ 98.622989][ T48] ? kmem_cache_free+0xf7/0x290 [ 98.627878][ T48] hci_conn_add_sysfs+0xd1/0x1e0 [ 98.632853][ T48] le_conn_complete_evt+0xd1d/0x1320 [ 98.638186][ T48] ? hci_le_big_info_adv_report_evt+0x310/0x310 [ 98.644468][ T48] ? __mutex_unlock_slowpath+0x19e/0x6a0 [ 98.650142][ T48] ? skb_pull_data+0xf7/0x200 [ 98.654868][ T48] hci_le_conn_complete_evt+0x183/0x440 [ 98.660458][ T48] ? hci_remote_host_features_evt+0x270/0x270 [ 98.666588][ T48] hci_event_packet+0x791/0x1210 [ 98.671578][ T48] ? bis_list+0x280/0x280 [ 98.675957][ T48] ? kcov_remote_start+0x27/0x7e0 [ 98.681014][ T48] ? hci_send_to_monitor+0x9c/0x4a0 [ 98.686249][ T48] hci_rx_work+0x3eb/0xd40 [ 98.690696][ T48] ? _raw_spin_unlock+0x40/0x40 [ 98.695598][ T48] ? process_one_work+0x7a1/0x1160 [ 98.700741][ T48] process_one_work+0x898/0x1160 [ 98.705726][ T48] ? worker_detach_from_pool+0x240/0x240 [ 98.711392][ T48] ? _raw_spin_lock_irq+0xab/0xe0 [ 98.716553][ T48] ? _raw_spin_lock_irqsave+0xf0/0xf0 [ 98.721977][ T48] ? kthread_data+0x4b/0xc0 [ 98.726532][ T48] worker_thread+0xaa2/0x1250 [ 98.731277][ T48] kthread+0x29d/0x330 [ 98.735387][ T48] ? worker_clr_flags+0x1a0/0x1a0 [ 98.740442][ T48] ? kthread_blkcg+0xd0/0xd0 [ 98.745074][ T48] ret_from_fork+0x1f/0x30 [ 98.749543][ T48] [ 98.784908][ T48] kobject_add_internal failed for hci3:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 98.798632][ T48] Bluetooth: hci3: failed to register connection device [ 99.540998][ T4472] ext4 filesystem being mounted at /5/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 101.747853][ T4262] EXT4-fs (loop3): unmounting filesystem. [ 102.586756][ T4508] loop2: detected capacity change from 0 to 512 [ 102.604546][ T4508] EXT4-fs: Ignoring removed bh option [ 103.081669][ T4508] EXT4-fs (loop2): mounting ext3 file system using the ext4 subsystem [ 103.431503][ T4508] EXT4-fs (loop2): 1 truncate cleaned up [ 103.437221][ T4508] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 105.007281][ T48] Bluetooth: hci3: command 0x0406 tx timeout [ 105.015709][ T4253] EXT4-fs (loop2): unmounting filesystem. [ 105.643842][ T4536] Zero length message leads to an empty skb [ 106.757161][ T4549] syz.0.38 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 111.197647][ T4574] loop2: detected capacity change from 0 to 1024 [ 111.413726][ T4572] loop3: detected capacity change from 0 to 2048 [ 112.321030][ T4576] ALSA: mixer_oss: invalid OSS volume '' [ 112.435533][ T4572] UDF-fs: bad mount option "partitiow=00000000000000000002" or missing value [ 112.643191][ T4574] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (62631!=20869) [ 112.774727][ T4574] EXT4-fs (loop2): barriers disabled [ 112.780582][ T4574] JBD2: no valid journal superblock found [ 112.786791][ T4574] EXT4-fs (loop2): error loading journal [ 114.457410][ T4598] Cannot find add_set index 0 as target [ 114.805214][ T4599] loop1: detected capacity change from 0 to 128 [ 114.840262][ T4599] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 115.100095][ T4599] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 115.363399][ T48] Bluetooth: hci3: command 0x0407 tx timeout [ 115.490424][ T33] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 117.757725][ T4617] erofs: (device nullb0): erofs_read_superblock: cannot find valid erofs superblock [ 118.168528][ T4620] syz.4.51[4620] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 118.168639][ T4620] syz.4.51[4620] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 123.996825][ T27] audit: type=1326 audit(1748933054.922:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4648 comm="syz.4.58" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdc2ed8e969 code=0x7ffc0000 [ 124.046907][ T27] audit: type=1326 audit(1748933054.972:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4648 comm="syz.4.58" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdc2ed8e969 code=0x7ffc0000 [ 124.933428][ T4653] tipc: Started in network mode [ 124.933489][ T4653] tipc: Node identity 4000004, cluster identity 4711 [ 124.933499][ T4653] tipc: Node number set to 67108868 [ 125.215893][ T4652] tty tty23: ldisc open failed (-12), clearing slot 22 [ 125.353194][ T27] audit: type=1326 audit(1748933056.242:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4648 comm="syz.4.58" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdc2ed8e969 code=0x7ffc0000 [ 126.206352][ T27] audit: type=1326 audit(1748933056.242:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4648 comm="syz.4.58" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdc2ed8e969 code=0x7ffc0000 [ 126.228786][ T27] audit: type=1326 audit(1748933056.262:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4648 comm="syz.4.58" exe="/root/syz-executor" sig=0 arch=c000003e syscall=425 compat=0 ip=0x7fdc2ed8e969 code=0x7ffc0000 [ 126.252860][ T27] audit: type=1326 audit(1748933056.262:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4648 comm="syz.4.58" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fdc2ed8e9a3 code=0x7ffc0000 [ 126.274945][ T27] audit: type=1326 audit(1748933056.262:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4648 comm="syz.4.58" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fdc2ed8e9a3 code=0x7ffc0000 [ 126.297457][ T27] audit: type=1326 audit(1748933056.262:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4648 comm="syz.4.58" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdc2ed8e969 code=0x7ffc0000 [ 126.320243][ T27] audit: type=1326 audit(1748933056.262:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4648 comm="syz.4.58" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdc2ed8e969 code=0x7ffc0000 [ 126.343379][ T27] audit: type=1326 audit(2000000000.330:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4648 comm="syz.4.58" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fdc2ed8e969 code=0x7ffc0000 [ 127.131535][ T4670] xt_HMARK: proto mask must be zero with L3 mode [ 127.166807][ T4670] Bluetooth: (null): Invalid header checksum [ 127.294466][ T4551] Bluetooth: (null): Invalid header checksum [ 127.370770][ T4551] Bluetooth: (null): Invalid header checksum [ 127.570680][ T4551] Bluetooth: (null): Invalid header checksum [ 127.866638][ T4551] Bluetooth: (null): Invalid header checksum [ 130.913622][ T3585] usb 4-1: new full-speed USB device number 2 using dummy_hcd [ 130.976817][ T4683] Process accounting resumed [ 132.647438][ T1267] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.653849][ T1267] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.943663][ T4701] xt_hashlimit: overflow, try lower: 35184372088832/511 [ 134.934854][ T4700] batman_adv: batadv: cannot create tp meter kthread [ 135.365494][ T4706] Bluetooth: MGMT ver 1.22 [ 136.327576][ T4708] loop2: detected capacity change from 0 to 40427 [ 136.391867][ T4708] F2FS-fs (loop2): invalid crc value [ 136.535826][ T4708] F2FS-fs (loop2): Found nat_bits in checkpoint [ 136.583865][ T4708] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 136.707519][ T4717] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 140.135225][ T4354] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 140.435154][ T4354] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 140.671117][ T4354] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 140.772026][ T4263] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 140.809641][ T4263] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 140.821670][ T4263] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 140.840951][ T4255] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 140.854045][ T4255] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 140.861663][ T4255] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 140.945847][ T4354] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 143.681961][ T4255] Bluetooth: hci5: command 0x0409 tx timeout [ 143.799171][ T4737] loop4: detected capacity change from 0 to 2048 [ 143.826776][ T4737] UDF-fs: warning (device loop4): udf_load_vrs: No anchor found [ 143.834591][ T4737] UDF-fs: Scanning with blocksize 512 failed [ 145.753461][ T4255] Bluetooth: hci5: command 0x041b tx timeout [ 145.959099][ T4737] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 146.506178][ T4755] loop3: detected capacity change from 0 to 1024 [ 146.965040][ T4754] loop2: detected capacity change from 0 to 16 [ 147.240168][ T4754] erofs: (device loop2): mounted with root inode @ nid 36. [ 147.765560][ T4766] capability: warning: `syz.2.82' uses 32-bit capabilities (legacy support in use) [ 147.786113][ T4766] erofs: (device loop2): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 147.795855][ T4766] erofs: (device loop2): z_erofs_readahead: readahead error at page 47 @ nid 36 [ 147.805628][ T4766] erofs: (device loop2): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 147.815277][ T4766] erofs: (device loop2): z_erofs_readahead: readahead error at page 46 @ nid 36 [ 147.824605][ T4766] erofs: (device loop2): z_erofs_readahead: readahead error at page 45 @ nid 36 [ 147.834025][ T4255] Bluetooth: hci5: command 0x040f tx timeout [ 147.848992][ T4766] erofs: (device loop2): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 147.858552][ T4766] erofs: (device loop2): z_erofs_readahead: readahead error at page 43 @ nid 36 [ 147.858658][ T4766] erofs: (device loop2): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 147.858711][ T4766] erofs: (device loop2): z_erofs_readahead: readahead error at page 42 @ nid 36 [ 147.868352][ T4766] erofs: (device loop2): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 147.868385][ T4766] erofs: (device loop2): z_erofs_readahead: readahead error at page 41 @ nid 36 [ 147.868440][ T4766] erofs: (device loop2): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 147.868492][ T4766] erofs: (device loop2): z_erofs_readahead: readahead error at page 40 @ nid 36 [ 147.868555][ T4766] erofs: (device loop2): z_erofs_readahead: readahead error at page 39 @ nid 36 [ 147.868603][ T4766] erofs: (device loop2): z_erofs_readahead: readahead error at page 38 @ nid 36 [ 147.868973][ T4766] erofs: (device loop2): z_erofs_readahead: readahead error at page 36 @ nid 36 [ 147.869409][ T4766] erofs: (device loop2): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 147.869458][ T4766] erofs: (device loop2): z_erofs_readahead: readahead error at page 31 @ nid 36 [ 147.869819][ T4766] erofs: (device loop2): z_erofs_readahead: readahead error at page 25 @ nid 36 [ 147.869885][ T4766] erofs: (device loop2): z_erofs_readahead: readahead error at page 24 @ nid 36 [ 147.870386][ T4766] erofs: (device loop2): z_erofs_readahead: readahead error at page 19 @ nid 36 [ 147.871464][ T4766] bio_check_eod: 4202 callbacks suppressed [ 147.871520][ T4766] syz.2.82: attempt to access beyond end of device [ 147.871520][ T4766] loop2: rw=524288, sector=784, nr_sectors = 64 limit=16 [ 147.871946][ T4766] syz.2.82: attempt to access beyond end of device [ 147.871946][ T4766] loop2: rw=524288, sector=13478624080, nr_sectors = 24 limit=16 [ 147.872163][ T4766] syz.2.82: attempt to access beyond end of device [ 147.872163][ T4766] loop2: rw=524288, sector=13478624032, nr_sectors = 48 limit=16 [ 147.872379][ T4766] syz.2.82: attempt to access beyond end of device [ 147.872379][ T4766] loop2: rw=524288, sector=16, nr_sectors = 16 limit=16 [ 148.957194][ T4722] chnl_net:caif_netlink_parms(): no params data found [ 149.015575][ T4773] netlink: 4 bytes leftover after parsing attributes in process `syz.4.83'. [ 149.089063][ T4755] fscrypt: Error allocating hmac(sha512): -2 [ 149.949128][ T4255] Bluetooth: hci5: command 0x0419 tx timeout [ 150.510416][ T4785] loop1: detected capacity change from 0 to 40427 [ 150.567262][ T4785] F2FS-fs (loop1): invalid crc value [ 150.592668][ T4785] F2FS-fs (loop1): Found nat_bits in checkpoint [ 150.637144][ T4785] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 151.399175][ T4797] I/O error, dev loop2, sector 1 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 151.408958][ T4797] qnx4: unable to read the superblock [ 153.371963][ T4722] bridge0: port 1(bridge_slave_0) entered blocking state [ 153.707737][ T4722] bridge0: port 1(bridge_slave_0) entered disabled state [ 153.747210][ T4722] device bridge_slave_0 entered promiscuous mode [ 153.878459][ T4722] bridge0: port 2(bridge_slave_1) entered blocking state [ 153.944985][ T4722] bridge0: port 2(bridge_slave_1) entered disabled state [ 154.017097][ T4722] device bridge_slave_1 entered promiscuous mode [ 154.242272][ T4813] loop2: detected capacity change from 0 to 512 [ 154.251215][ T4813] ======================================================= [ 154.251215][ T4813] WARNING: The mand mount option has been deprecated and [ 154.251215][ T4813] and is ignored by this kernel. Remove the mand [ 154.251215][ T4813] option from the mount to silence this warning. [ 154.251215][ T4813] ======================================================= [ 154.286143][ C0] vkms_vblank_simulate: vblank timer overrun [ 155.748394][ T4813] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 156.076253][ T4258] syz-executor: attempt to access beyond end of device [ 156.076253][ T4258] loop1: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 156.860225][ T4813] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 156.886326][ T4722] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 156.900509][ T4813] ext4 filesystem being mounted at /18/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 157.326745][ T4722] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 157.372829][ T4253] EXT4-fs (loop2): unmounting filesystem. [ 158.699395][ T4836] loop1: detected capacity change from 0 to 4096 [ 159.837113][ T4837] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 160.004403][ T27] kauditd_printk_skb: 36 callbacks suppressed [ 160.004460][ T27] audit: type=1800 audit(2000000034.650:48): pid=4836 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.90" name="file1" dev="loop1" ino=15 res=0 errno=0 [ 161.435135][ T4722] team0: Port device team_slave_0 added [ 161.841355][ T4843] loop3: detected capacity change from 0 to 1024 [ 162.066066][ T4843] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (62631!=20869) [ 162.114241][ T4722] team0: Port device team_slave_1 added [ 162.193759][ T4843] EXT4-fs (loop3): barriers disabled [ 162.229581][ T4843] JBD2: no valid journal superblock found [ 162.247495][ T4843] EXT4-fs (loop3): error loading journal [ 162.392346][ T4722] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 162.407353][ T4722] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 163.887495][ T4857] loop3: detected capacity change from 0 to 64 [ 164.273485][ T4722] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 164.357567][ T4856] Cannot find add_set index 0 as target [ 164.392320][ T4722] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 164.423438][ T4722] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 164.460036][ T4722] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 164.937447][ T4354] device hsr_slave_0 left promiscuous mode [ 165.204188][ T4354] device hsr_slave_1 left promiscuous mode [ 165.254902][ T4354] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 165.262421][ T4354] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 165.325820][ T4354] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 165.327544][ T4867] loop3: detected capacity change from 0 to 2048 [ 165.373852][ T4354] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 165.537359][ T4867] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 166.299301][ T4354] device bridge_slave_1 left promiscuous mode [ 166.363899][ T4354] bridge0: port 2(bridge_slave_1) entered disabled state [ 166.545350][ T4354] device bridge_slave_0 left promiscuous mode [ 167.377764][ T4354] bridge0: port 1(bridge_slave_0) entered disabled state [ 167.493826][ T4885] loop1: detected capacity change from 0 to 1024 [ 168.560907][ T4354] device veth1_macvtap left promiscuous mode [ 168.578786][ T4354] device veth0_macvtap left promiscuous mode [ 169.158777][ T4894] loop2: detected capacity change from 0 to 2048 [ 169.379426][ T4894] UDF-fs: warning (device loop2): udf_load_vrs: No anchor found [ 169.387393][ T4894] UDF-fs: Scanning with blocksize 512 failed [ 169.442132][ T4885] fscrypt: Error allocating hmac(sha512): -2 [ 169.491737][ T4894] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 169.615170][ T4354] device veth1_vlan left promiscuous mode [ 169.621312][ T4354] device veth0_vlan left promiscuous mode [ 170.770101][ T4902] I/O error, dev loop1, sector 1 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 170.779546][ T4902] qnx4: unable to read the superblock [ 177.522066][ T4950] loop3: detected capacity change from 0 to 64 [ 179.323300][ T4958] loop4: detected capacity change from 0 to 1024 [ 180.532359][ T4968] loop1: detected capacity change from 0 to 2048 [ 180.646347][ T4968] UDF-fs: warning (device loop1): udf_load_vrs: No anchor found [ 180.654212][ T4968] UDF-fs: Scanning with blocksize 512 failed [ 180.732660][ T4968] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 181.124685][ T4958] EXT4-fs: Ignoring removed orlov option [ 181.133537][ T4958] EXT4-fs (loop4): Test dummy encryption mode enabled [ 181.428361][ T4958] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 181.483910][ T4377] Bluetooth: hci3: Frame reassembly failed (-84) [ 181.776539][ T4259] EXT4-fs (loop4): unmounting filesystem. [ 183.409089][ T4354] team0 (unregistering): Port device team_slave_1 removed [ 183.563272][ T4255] Bluetooth: hci3: Opcode 0x1003 failed: -110 [ 183.563332][ T48] Bluetooth: hci3: command 0x1003 tx timeout [ 183.902795][ T4354] team0 (unregistering): Port device team_slave_0 removed [ 183.945247][ T4354] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 185.627412][ T5001] loop4: detected capacity change from 0 to 1024 [ 185.660942][ T4354] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 185.683479][ T5001] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (62631!=20869) [ 185.720054][ T5001] EXT4-fs (loop4): barriers disabled [ 185.739813][ T5001] JBD2: no valid journal superblock found [ 185.756850][ T5001] EXT4-fs (loop4): error loading journal [ 186.736071][ T5008] loop4: detected capacity change from 0 to 64 [ 186.867855][ T5008] --map-set only usable from mangle table [ 188.604592][ T4354] bond0 (unregistering): Released all slaves [ 189.029080][ T5028] binder: 5020:5028 ioctl c0306201 0 returned -14 [ 189.952649][ T5038] loop1: detected capacity change from 0 to 512 [ 189.967377][ T5038] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 190.315444][ T4936] netlink: 4 bytes leftover after parsing attributes in process `syz.2.106'. [ 190.333170][ T5038] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 190.342558][ T5038] ext4 filesystem being mounted at /30/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 191.596241][ T4258] EXT4-fs (loop1): unmounting filesystem. [ 192.197437][ T5060] loop1: detected capacity change from 0 to 512 [ 192.207964][ T5060] EXT4-fs: Ignoring removed bh option [ 192.230594][ T48] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 192.260086][ T5060] EXT4-fs (loop1): mounting ext3 file system using the ext4 subsystem [ 192.303838][ T48] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 192.869871][ T48] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 192.888414][ T48] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 192.897111][ T48] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 192.904709][ T48] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 192.953136][ T5060] EXT4-fs (loop1): 1 truncate cleaned up [ 192.958884][ T5060] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 194.126106][ T1267] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.133333][ T1267] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.243176][ T4255] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 194.252371][ T4255] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 194.261821][ T4263] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 194.283426][ T4263] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 194.291865][ T4263] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 194.299430][ T4263] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 195.077269][ T48] Bluetooth: hci6: command 0x0409 tx timeout [ 195.401243][ T5057] chnl_net:caif_netlink_parms(): no params data found [ 195.518154][ T4258] EXT4-fs (loop1): unmounting filesystem. [ 196.428299][ T5096] binder: 5091:5096 ioctl c0306201 0 returned -14 [ 196.509607][ C1] ------------[ cut here ]------------ [ 196.515449][ C1] WARNING: CPU: 1 PID: 21 at kernel/workqueue.c:1441 __queue_work+0xe2d/0xfb0 [ 196.524372][ C1] Modules linked in: [ 196.528301][ C1] CPU: 1 PID: 21 Comm: ksoftirqd/1 Not tainted 6.1.140-syzkaller #0 [ 196.536310][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 196.546402][ C1] RIP: 0010:__queue_work+0xe2d/0xfb0 [ 196.551722][ C1] Code: e9 9d fc ff ff 48 8b 0c 24 80 e1 07 80 c1 03 38 c1 0f 8c c7 fc ff ff 48 8b 3c 24 e8 8d 2d 7f 00 e9 b9 fc ff ff e8 93 b7 2d 00 <0f> 0b 48 83 c4 60 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 7d b7 2d 00 [ 196.571357][ C1] RSP: 0018:ffffc900001b7988 EFLAGS: 00010046 [ 196.577435][ C1] RAX: ffffffff81531f7d RBX: 0000000000010000 RCX: ffff88813fee1dc0 [ 196.585408][ C1] RDX: 0000000000000100 RSI: 0000000000000100 RDI: 0000000000000000 [ 196.593382][ C1] RBP: 0000000000000000 R08: dffffc0000000000 R09: fffffbfff1bfd006 [ 196.601353][ C1] R10: fffffbfff1bfd006 R11: 1ffffffff1bfd005 R12: ffff88802939a800 [ 196.609329][ C1] R13: ffff88802939a9c0 R14: 0000000000000008 R15: 0000000000000001 [ 196.617302][ C1] FS: 0000000000000000(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000 [ 196.626239][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 196.632822][ C1] CR2: 0000001b2de13ff8 CR3: 00000000627c1000 CR4: 00000000003506e0 [ 196.640799][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 196.648773][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 196.656745][ C1] Call Trace: [ 196.660022][ C1] [ 196.662969][ C1] call_timer_fn+0x1a0/0x670 [ 196.667570][ C1] ? queue_work_node+0x3f0/0x3f0 [ 196.672516][ C1] ? call_timer_fn+0xc1/0x670 [ 196.677194][ C1] ? __run_timers+0x7c0/0x7c0 [ 196.681876][ C1] ? do_raw_spin_unlock+0x11d/0x230 [ 196.687170][ C1] ? queue_work_node+0x3f0/0x3f0 [ 196.692119][ C1] __run_timers+0x550/0x7c0 [ 196.696630][ C1] ? detach_timer+0x350/0x350 [ 196.701315][ C1] ? lock_chain_count+0x20/0x20 [ 196.706175][ C1] run_timer_softirq+0x63/0xf0 [ 196.710948][ C1] handle_softirqs+0x2a1/0x920 [ 196.715727][ C1] ? run_ksoftirqd+0x98/0xf0 [ 196.720331][ C1] ? do_softirq+0x200/0x200 [ 196.724847][ C1] run_ksoftirqd+0x98/0xf0 [ 196.729261][ C1] ? ksoftirqd_should_run+0x20/0x20 [ 196.734458][ C1] ? preempt_schedule_thunk+0x16/0x18 [ 196.739843][ C1] ? takeover_tasklets+0x800/0x800 [ 196.744954][ C1] ? ksoftirqd_should_run+0x20/0x20 [ 196.750166][ C1] smpboot_thread_fn+0x64a/0xa40 [ 196.755111][ C1] ? smpboot_thread_fn+0x4c/0xa40 [ 196.760254][ C1] kthread+0x29d/0x330 [ 196.764343][ C1] ? cpu_report_death+0x230/0x230 [ 196.769375][ C1] ? kthread_blkcg+0xd0/0xd0 [ 196.774090][ C1] ret_from_fork+0x1f/0x30 [ 196.778528][ C1] [ 196.781567][ C1] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 196.788855][ C1] CPU: 1 PID: 21 Comm: ksoftirqd/1 Not tainted 6.1.140-syzkaller #0 [ 196.796920][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 196.806973][ C1] Call Trace: [ 196.810264][ C1] [ 196.813193][ C1] dump_stack_lvl+0x168/0x22e [ 196.817882][ C1] ? memcpy+0x3c/0x60 [ 196.821867][ C1] ? show_regs_print_info+0x12/0x12 [ 196.827076][ C1] ? load_image+0x3b0/0x3b0 [ 196.831592][ C1] panic+0x2c9/0x710 [ 196.835500][ C1] ? bpf_jit_dump+0xd0/0xd0 [ 196.840016][ C1] ? ret_from_fork+0x1f/0x30 [ 196.844621][ C1] __warn+0x2f8/0x4f0 [ 196.848666][ C1] ? __queue_work+0xe2d/0xfb0 [ 196.853445][ C1] ? __queue_work+0xe2d/0xfb0 [ 196.858128][ C1] report_bug+0x2ba/0x4f0 [ 196.862462][ C1] ? __queue_work+0xe2d/0xfb0 [ 196.867148][ C1] handle_bug+0x3a/0x70 [ 196.871318][ C1] exc_invalid_op+0x16/0x40 [ 196.875827][ C1] asm_exc_invalid_op+0x16/0x20 [ 196.880684][ C1] RIP: 0010:__queue_work+0xe2d/0xfb0 [ 196.885974][ C1] Code: e9 9d fc ff ff 48 8b 0c 24 80 e1 07 80 c1 03 38 c1 0f 8c c7 fc ff ff 48 8b 3c 24 e8 8d 2d 7f 00 e9 b9 fc ff ff e8 93 b7 2d 00 <0f> 0b 48 83 c4 60 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 7d b7 2d 00 [ 196.905600][ C1] RSP: 0018:ffffc900001b7988 EFLAGS: 00010046 [ 196.911675][ C1] RAX: ffffffff81531f7d RBX: 0000000000010000 RCX: ffff88813fee1dc0 [ 196.919744][ C1] RDX: 0000000000000100 RSI: 0000000000000100 RDI: 0000000000000000 [ 196.927722][ C1] RBP: 0000000000000000 R08: dffffc0000000000 R09: fffffbfff1bfd006 [ 196.935796][ C1] R10: fffffbfff1bfd006 R11: 1ffffffff1bfd005 R12: ffff88802939a800 [ 196.943778][ C1] R13: ffff88802939a9c0 R14: 0000000000000008 R15: 0000000000000001 [ 196.951766][ C1] ? __queue_work+0xe2d/0xfb0 [ 196.956483][ C1] ? __queue_work+0xe2d/0xfb0 [ 196.961189][ C1] call_timer_fn+0x1a0/0x670 [ 196.965785][ C1] ? queue_work_node+0x3f0/0x3f0 [ 196.970736][ C1] ? call_timer_fn+0xc1/0x670 [ 196.975422][ C1] ? __run_timers+0x7c0/0x7c0 [ 196.980126][ C1] ? do_raw_spin_unlock+0x11d/0x230 [ 196.985344][ C1] ? queue_work_node+0x3f0/0x3f0 [ 196.990297][ C1] __run_timers+0x550/0x7c0 [ 196.994896][ C1] ? detach_timer+0x350/0x350 [ 196.999684][ C1] ? lock_chain_count+0x20/0x20 [ 197.004556][ C1] run_timer_softirq+0x63/0xf0 [ 197.009332][ C1] handle_softirqs+0x2a1/0x920 [ 197.014113][ C1] ? run_ksoftirqd+0x98/0xf0 [ 197.018711][ C1] ? do_softirq+0x200/0x200 [ 197.023243][ C1] run_ksoftirqd+0x98/0xf0 [ 197.027680][ C1] ? ksoftirqd_should_run+0x20/0x20 [ 197.032894][ C1] ? preempt_schedule_thunk+0x16/0x18 [ 197.038367][ C1] ? takeover_tasklets+0x800/0x800 [ 197.043485][ C1] ? ksoftirqd_should_run+0x20/0x20 [ 197.048684][ C1] smpboot_thread_fn+0x64a/0xa40 [ 197.053635][ C1] ? smpboot_thread_fn+0x4c/0xa40 [ 197.058678][ C1] kthread+0x29d/0x330 [ 197.062764][ C1] ? cpu_report_death+0x230/0x230 [ 197.067796][ C1] ? kthread_blkcg+0xd0/0xd0 [ 197.072402][ C1] ret_from_fork+0x1f/0x30 [ 197.076839][ C1] [ 197.080147][ C1] Kernel Offset: disabled [ 197.084530][ C1] Rebooting in 86400 seconds..