last executing test programs: 31m19.521907319s ago: executing program 32 (id=100): r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000580)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r0, 0x1, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x400000008b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = dup(r2) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x2) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r3, r4, &(0x7f000000a000/0x18000)=nil, &(0x7f0000000300)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r2, 0x4010ae67, &(0x7f00000001c0)={0x0, 0xd000}) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$KVM_RUN(r4, 0xae80, 0x0) 27m52.003086635s ago: executing program 33 (id=527): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/ip_tables_targets\x00') socketpair(0x1, 0xf, 0x1, &(0x7f0000000000)) socket(0x10, 0x6, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_usb_connect(0x0, 0x24, 0x0, 0x0) r3 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040201, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r3, 0xc004500a, &(0x7f0000000080)) ioctl$SNDCTL_DSP_SPEED(r3, 0xc0045002, &(0x7f0000000040)=0xdfe5) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000500)={0xa00, 0x18, 0xfa00, {0x100000000000000, 0x0}}, 0xfc36) r4 = io_uring_setup(0x3b84, &(0x7f0000000140)={0x0, 0x1ab5, 0x100, 0x3, 0x131}) io_uring_register$IORING_REGISTER_FILES(r4, 0x2, &(0x7f0000000100)=[0xffffffffffffffff], 0x1) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x66f3098a9041ef33, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f00000000c0)={0x0, @in={{0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}}}, &(0x7f0000000180)=0x9c) lseek(r0, 0x0, 0x0) 27m42.522533425s ago: executing program 34 (id=544): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r1 = syz_open_dev$MSR(&(0x7f0000001140), 0x0, 0x0) read$msr(r1, &(0x7f0000002700)=""/102392, 0x18ff8) bind$inet(0xffffffffffffffff, 0x0, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) dup3(r3, r2, 0x0) mmap$binder(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1, 0x11, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, &(0x7f00000001c0)) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) socket$inet(0x2, 0x3, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[@ANYBLOB="c00000000001050500000000000000000a0000003c0002802c00018014000300ff01000000000000000000000000000114000400ff0200020000000000000000000000010c00028005000100000000003c0001800c00028005000100000000002c00018014000300ff02000000000000000000000000000114000400fc00000000000000000000000000000108000740000000002c00068014000500fc0200000000000000"], 0xc0}, 0x1, 0x0, 0x0, 0x4880}, 0x0) 16m33.194962614s ago: executing program 6 (id=1804): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) syz_genetlink_get_family_id$nl802154(0x0, 0xffffffffffffffff) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0x27) mremap(&(0x7f000020e000/0x2000)=nil, 0x2000, 0x400000, 0x3, &(0x7f000082a000/0x400000)=nil) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r3 = fcntl$getown(0xffffffffffffffff, 0x9) ioprio_get$pid(0x2, r3) madvise(&(0x7f000042f000/0x800000)=nil, 0x80fd00, 0x15) 16m28.05982305s ago: executing program 6 (id=1808): r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0), 0x80280, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f0000000440)="d8f2997b1671ed099418e41002ac4373b4ee19f9d07c58cd57f072e7637127f166f4b018fe0f17b504050000007b025dcf4f420de4336dfc836145e1eecd99e4c4d376ea04372fa8d8d7413a3f81c87eacb0ccbda63c2e38d74085647517eba783d7bfa2ab529a7d275a6fab33bc22b83c8d00", 0xfed1}, {0x0}], 0x2) r3 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_VIF(r3, 0x0, 0x5, &(0x7f0000000240)={0x2, 0x0, 0x0, 0x0, @vifc_lcl_ifindex, @remote}, 0x10) setsockopt$MRT_INIT(r3, 0x0, 0x5, 0x0, 0x0) syz_mount_image$minix(&(0x7f0000000180), &(0x7f00000001c0)='./file1\x00', 0x210012, &(0x7f00000000c0)=ANY=[], 0xfe, 0x1bb, &(0x7f0000000340)="$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") r4 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x42, 0x0) pwritev2(r4, &(0x7f00000000c0)=[{&(0x7f0000000200)="df", 0xf4240}], 0x1, 0x800001, 0x0, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @empty}, 0x1c) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(0xffffffffffffffff, 0x84, 0xf, 0x0, &(0x7f0000000040)) close_range(r1, 0xffffffffffffffff, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) socket(0x27, 0x5, 0x40) syz_mount_image$ext4(&(0x7f0000000d80)='ext2\x00', &(0x7f0000000000)='./file1\x00', 0x21881e, &(0x7f0000000880)={[{@mb_optimize_scan}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}, {@stripe={'stripe', 0x3d, 0x9}}], [{@fowner_lt}, {@dont_appraise}, {@permit_directio}, {@defcontext={'defcontext', 0x3d, 'unconfined_u'}}, {@mask={'mask', 0x3d, '^MAY_EXEC'}}, {@seclabel}, {@obj_type={'obj_type', 0x3d, '-#'}}, {@fsmagic={'fsmagic', 0x3d, 0x6}}, {@smackfstransmute={'smackfstransmute', 0x3d, '/dev/snd/midiC#D#\x00'}}, {@fowner_eq}]}, 0x1, 0x4fa, &(0x7f0000000dc0)="$eJzs3c9vG1kdAPCvnThx0uwmu+wBEOyW3YWCqjqJuxut9gDLCSFUCdEjSG1I3CiKHUexU5rQQ3rmikQlTnDkD+DcE3cuCG5cygGJHxGoQeLg1YwnqZvaTdQkdhR/PtJo3ps39fe9pvNe/U3iF8DQuhoRuxExFhF3I2I6u57LjvisfST3Pdt7uLS/93ApF63W7X/l0vbkWnT8mcSV7DWLEfGj70X8NPdy3Mb2ztpitVrZzOqzzdrGbGN758ZqbXGlslJZL5cX5hfmPrn5cfnMxvpebSwrffXpH3e/9fOkW1PZlc5xnKX20AuHcRKjEfGD8wg2ACPZeMYG3RFeSz4i3o6I99PnfzpG0q8mAHCZtVrT0ZrurAMAl10+zYHl8qUsFzAV+Xyp1M7hvROT+Wq90bx+r761vtzOlc1EIX9vtVqZy3KFM1HIJfX5tPy8Xj5SvxkRb0XEL8cn0nppqV5dHuR/fABgiF05sv7/d7y9/gMAl1xx0B0AAPrO+g8Aw8f6DwDDx/oPAMOnvf5PDLobAEAfef8PAMPH+g8AQ+WHt24lR2s/+/zr5fvbW2v1+zeWK421Um1rqbRU39wordTrK+ln9tSOe71qvb4x/1FsPZj59kajOdvY3rlTq2+tN++kn+t9p1JI79rtw8gAgF7eeu/JX3LJivzpRHpEx14OhYH2DDhv+UF3ABiYkUF3ABgYu33B8DrFe3zpAbgkumzR+4Jit18QarVarfPrEnDOrn1J/h+GVUf+308Bw5CR/4fhJf8Pw6vVyp10z/846Y0AwMUmxw/0+P7/29n5d9k3B36yfPSOx+fZKwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALjYDvb/LWV7gU9FPl8qRbwRETNRyN1brVbmIuLNiPjzeGE8qc8PuM8AwGnl/57L9v+6Nv3h1AtN7145LI5FxM9+fftXDxabzc0/RYzl/j1+cL35OLte7n/vAYDjHazT6bnjjfyzvYdLB0c/+/OP70ZEsR1/f28s9g/jj8Zoei5GISIm/5PL6m25jtzFaew+iogvdht/LqbSHEh759Oj8ZPYb/Q1fv6F+Pm0rX1O/i6+cAZ9gWHzJJl/Puv2/OXjanru/vwX0xnq9LL5L3mppf10Dnwe/2D+G+kx/109aYyP/vD9dmni5bZHEV8ejTiIvd8x/xzEz/WI/+EJ4//1K+++36ut9ZuIa9E9fmes2WZtY7axvXNjtba4UlmprJfLC/MLc5/c/Lg8m+aoZ3uvBv/89PqbvdqS8U/2iF88ZvxfP+H4f/v/uz/+2ivif/ODbvHz8c4r4idr4jdOGH9x8vfFXm1J/OUe4z/u63/9hPGf/m3npW3DAYDBaWzvrC1Wq5VNBYWLX0j+yV6AbnQtfKdfscaie9MvPmg/00eaWq3XitVrxjiLrBtwERw+9BHxv0F3BgAAAAAAAAAAAAAA6Kofv7E06DECAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABweX0eAAD//19xzyM=") openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) 16m26.824700031s ago: executing program 6 (id=1812): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="1800"/16], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000580)={&(0x7f0000003680)='sched_switch\x00', r0}, 0x10) bpf$MAP_CREATE(0x0, 0x0, 0x48) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(0xffffffffffffffff, 0x1, 0xc) fchdir(r2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f00000003c0)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket(0x2a, 0x2, 0x20) r5 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r5, 0x29, 0x2a, &(0x7f0000000080)={0x20, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108) listen(r4, 0x4) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) 16m24.131080707s ago: executing program 6 (id=1815): sendmsg$SOCK_DIAG_BY_FAMILY(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000680)=ANY=[@ANYBLOB="280000001400010000000000000000002800110001006f77bd851b1e06d425e149b697000000000028759f48da514b8716c7ae83c25747ecc8b4af1f2f5cca17b6e92b06caa5601472a6bfd0b997480452c3ab8d92a363a775b7fbc0e50571bb7dc74c4e0e6a476ffb3d4ceb3087ca2d46062ef1fbf0bd1fa502a15f009a51e54fadb01c657007258bb06694c69ecb5ac106a6e57e05257154d5d91eee0b89e54e58fe4eb2c07117901ad821f7423c4a5d19905a6cdc45aa2db1c90e3e796c40f75766679625b2c9628f0eeb675187524692cb618ac8e1263cbd7d3d8ba145e8fefcd8442345b0826bf372a3a5d04c06e991ac3b55ca"], 0x28}}, 0x0) r0 = bpf$MAP_CREATE(0x0, 0x0, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x2125099, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) bpf$PROG_LOAD(0x5, 0x0, 0x0) move_mount(r2, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='./file0/../file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x891018, 0x0) mount$bind(0x0, 0x0, 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000100)='./file0\x00', &(0x7f0000000280)='./file0/../file0\x00', 0x0, 0x1adc51, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) mount$bind(&(0x7f00000002c0)='./file0/file0\x00', &(0x7f0000000240)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000440)='./file0/file0\x00', 0x0, 0x12f451, 0x0) mount$bind(&(0x7f00000000c0)='.\x00', &(0x7f0000000080)='./file0/file0/file0\x00', 0x0, 0x80700a, 0x0) r3 = getpid() r4 = syz_pidfd_open(r3, 0x0) setns(r4, 0x24020000) umount2(&(0x7f0000000040)='.\x00', 0x2) 16m22.370694986s ago: executing program 6 (id=1818): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) syz_genetlink_get_family_id$nl802154(0x0, 0xffffffffffffffff) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0x27) mremap(&(0x7f000020e000/0x2000)=nil, 0x2000, 0x400000, 0x3, &(0x7f000082a000/0x400000)=nil) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r3 = fcntl$getown(0xffffffffffffffff, 0x9) ioprio_get$pid(0x2, r3) madvise(&(0x7f000042f000/0x800000)=nil, 0x80fd00, 0x15) 16m20.853338962s ago: executing program 35 (id=1797): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000000000)=ANY=[@ANYBLOB="180000002c00010026bd70f7fbdbdf250400002804001d00"], 0x18}, 0x1, 0x0, 0x0, 0x404000c}, 0x40000) r1 = socket$igmp6(0xa, 0x3, 0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, 0x0, 0x0) r4 = openat$fb0(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) socket$l2tp6(0xa, 0x2, 0x73) ioctl$FBIOPUT_VSCREENINFO(r4, 0x4601, &(0x7f0000000380)={0x3c0, 0x78, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x1, 0x4, 0x8, 0x3, 0x1ff, 0x3d, 0x5, 0x3, 0x53, 0x202, 0x1, 0xc}) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)={0x30, r5, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@chandef_params, @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8}, @NL80211_ATTR_HE_BSS_COLOR={0x4}]}, 0x30}}, 0x0) getsockopt$MRT6(r1, 0x29, 0xd0, 0x0, 0x0) 16m20.687951755s ago: executing program 6 (id=1820): socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) getcwd(0x0, 0x0) socket$nl_rdma(0x10, 0x3, 0x14) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x1c, 0x1c, 0x4, [@var={0x2, 0x0, 0x0, 0xe, 0x2}, @volatile={0x0, 0x0, 0x0, 0x2}]}, {0x0, [0x0, 0x2e]}}, 0x0, 0x38, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20) keyctl$KEYCTL_PKEY_SIGN(0x1b, 0x0, 0x0, 0x0, 0x0) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/cpuinfo\x00', 0x0, 0x0) pread64(r3, &(0x7f0000000380)=""/85, 0x55, 0x81ffffffffffffc) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) 16m19.512637985s ago: executing program 36 (id=1820): socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) getcwd(0x0, 0x0) socket$nl_rdma(0x10, 0x3, 0x14) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x1c, 0x1c, 0x4, [@var={0x2, 0x0, 0x0, 0xe, 0x2}, @volatile={0x0, 0x0, 0x0, 0x2}]}, {0x0, [0x0, 0x2e]}}, 0x0, 0x38, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20) keyctl$KEYCTL_PKEY_SIGN(0x1b, 0x0, 0x0, 0x0, 0x0) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/cpuinfo\x00', 0x0, 0x0) pread64(r3, &(0x7f0000000380)=""/85, 0x55, 0x81ffffffffffffc) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) 13m59.783913996s ago: executing program 4 (id=2015): openat$sndtimer(0xffffffffffffff9c, 0x0, 0x101040) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2a, 0x0, 0x0) r0 = socket(0x80000000000000a, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = socket(0x2, 0x80805, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2b, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @mcast1}}}, 0x108) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2b, 0x0, 0x0) r3 = socket(0x1e, 0x4, 0x0) connect$tipc(r3, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(0x0, r3) close(0xffffffffffffffff) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[], 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000), 0x5032c0, 0x0) syz_genetlink_get_family_id$gtp(0x0, 0xffffffffffffffff) recvmmsg(r2, &(0x7f0000000800)=[{{&(0x7f00000000c0)=@ax25={{0x3, @bcast}, [@null, @remote, @null, @rose, @remote, @bcast, @bcast, @netrom]}, 0x80, 0x0, 0x0, &(0x7f0000000900)=""/65, 0x41}, 0x4}], 0x1, 0x102, 0x0) 13m58.39509657s ago: executing program 4 (id=2018): r0 = socket(0x25, 0x80805, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000009c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) landlock_create_ruleset(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) close(r1) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r5 = socket(0x2, 0x80805, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000006c0)={{0x14}, [@NFT_MSG_NEWRULE={0x60, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x34, 0x4, 0x0, 0x1, [{0x30, 0x1, 0x0, 0x1, @immediate={{0xe}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_IMMEDIATE_DATA={0x10, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}]}]}, @NFTA_IMMEDIATE_DREG={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x88}}, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r5, 0x84, 0x14, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, 0x0, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, 0xffffffffffffffff, 0x0) 13m55.895776842s ago: executing program 4 (id=2021): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) io_setup(0x7, &(0x7f0000000280)=0x0) r2 = openat$sysfs(0xffffff9c, &(0x7f0000000080)='/sys/power/wakeup_count', 0x101000, 0x152) io_submit(r1, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) fsmount(r2, 0x1, 0x78) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={0xffffffffffffffff, 0x0, 0xfffffffffffffd39, 0x0, 0x0, 0x0, 0x1000003, 0x0, 0x1, 0x0, &(0x7f0000000000)='\x00', 0x0}, 0x50) r5 = socket$inet6(0xa, 0x3, 0x6) setsockopt$inet6_buf(r5, 0x29, 0x39, &(0x7f0000000040)="ff02040000ffffffffffffffff1f2be82db1af0000", 0x15) openat$ptmx(0xffffffffffffff9c, 0x0, 0x2, 0x0) fcntl$setownex(0xffffffffffffffff, 0xf, &(0x7f0000000380)={0x2}) r6 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r6) ptrace$getregset(0x4205, r6, 0x202, &(0x7f0000000240)={&(0x7f0000000180)=""/120, 0xffffffffffffff28}) ioctl$EVIOCRMFF(r2, 0x40044581, &(0x7f0000000100)=0x7) 13m53.097038849s ago: executing program 4 (id=2022): syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) ioctl$VIDIOC_S_SELECTION(0xffffffffffffffff, 0xc040565f, 0x0) sendmsg$NL80211_CMD_NEW_KEY(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)=ANY=[], 0xc4}}, 0x0) r1 = syz_open_dev$radio(&(0x7f0000000000), 0xffffffffffffffff, 0x2) ioctl$VIDIOC_S_EXT_CTRLS(r1, 0xc0205648, &(0x7f0000000100)={0x0, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000000c0)={0x98f90d, 0x9, '\x00', @p_u8=&(0x7f0000000040)}}) recvmsg$kcm(0xffffffffffffffff, 0x0, 0x0) renameat2(0xffffffffffffff9c, 0x0, 0xffffffffffffff9c, 0x0, 0x5) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'hmac(sha1)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, 0x0, 0x0) r3 = accept4(r2, 0x0, 0x0, 0x0) sendmsg$TIPC_CMD_ENABLE_BEARER(r3, &(0x7f0000010280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[], 0x34}, 0x1, 0x0, 0x0, 0x800c0}, 0x4048010) accept4(r3, 0x0, 0x0, 0x0) 13m44.816685189s ago: executing program 4 (id=2034): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) keyctl$clear(0x3, 0xfffffffffffffffd) keyctl$set_reqkey_keyring(0xe, 0x2) request_key(&(0x7f0000000340)='user\x00', &(0x7f0000000380)={'syz', 0x3}, &(0x7f00000003c0)=')\x00', 0x0) sendmsg$NFNL_MSG_ACCT_DEL(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}}, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) mkdirat(r3, &(0x7f0000000180)='./bus\x00', 0x0) syz_open_procfs(0x0, &(0x7f0000000040)='net/ipv6_route\x00') r4 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, 0x0) setreuid(0x0, r5) quotactl$Q_QUOTAON(0xffffffff80000200, &(0x7f0000000000)=@nbd={'/dev/nbd', 0x0}, r5, &(0x7f0000000100)='./file0\x00') 13m43.066651968s ago: executing program 4 (id=2038): ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) socket$nl_route(0x10, 0x3, 0x0) openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000140)) sendmsg$BATADV_CMD_GET_NEIGHBORS(0xffffffffffffffff, 0x0, 0x0) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x14, &(0x7f0000000180)=0xffffffff, 0x4) r1 = socket$nl_sock_diag(0x10, 0x3, 0x4) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) sendto$packet(0xffffffffffffffff, &(0x7f00000000c0)="3f030e00", 0x4, 0x0, 0x0, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, 0x0, 0x14) open$dir(0x0, 0x20600, 0x80) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, 0x0) exit(0x0) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x3c, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x10104}, [@IFLA_IFNAME={0x14, 0x3, 'vlan0\x00'}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x3c}}, 0x0) 13m29.533674967s ago: executing program 37 (id=1824): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00'}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) r3 = syz_open_procfs(0x0, &(0x7f0000000180)='pagemap\x00') syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) pread64(r3, &(0x7f0000001240)=""/102400, 0x19000, 0x2000000000) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000b40)={&(0x7f0000000080)='kfree\x00', 0xffffffffffffffff, 0x0, 0x80000000000000}, 0x18) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x7, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="05000000000000007111ae00000000008510000002000000850000000500000095000000000000009500a50500000000"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000100)={0xffffffffffffffff, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000038, 0x0, 0x0, 0x10, &(0x7f00000000c0), 0x0, 0x0, 0x2, 0x8, 0x0, 0x0}}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000340)={r4, 0xe0, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x80000) quotactl_fd$Q_GETFMT(0xffffffffffffffff, 0xffffffff80000401, 0x0, &(0x7f0000000040)) socket$nl_generic(0x11, 0x3, 0x10) 13m27.822373706s ago: executing program 38 (id=2038): ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) socket$nl_route(0x10, 0x3, 0x0) openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000140)) sendmsg$BATADV_CMD_GET_NEIGHBORS(0xffffffffffffffff, 0x0, 0x0) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x14, &(0x7f0000000180)=0xffffffff, 0x4) r1 = socket$nl_sock_diag(0x10, 0x3, 0x4) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) sendto$packet(0xffffffffffffffff, &(0x7f00000000c0)="3f030e00", 0x4, 0x0, 0x0, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, 0x0, 0x14) open$dir(0x0, 0x20600, 0x80) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, 0x0) exit(0x0) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x3c, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x10104}, [@IFLA_IFNAME={0x14, 0x3, 'vlan0\x00'}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x3c}}, 0x0) 12m13.785677316s ago: executing program 39 (id=2127): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, 0x0, 0x0) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) 9m30.323920012s ago: executing program 40 (id=2379): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() r1 = socket(0x2000000000000021, 0x2, 0x10000000000002) sendmsg$kcm(r1, &(0x7f0000000080)={&(0x7f0000000000)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x1, @initdev={0xac, 0x1e, 0x0, 0x0}}}, 0x80, 0x0, 0x0, &(0x7f00000000c0)=ANY=[], 0x18}, 0x801c) sendmmsg(r1, &(0x7f0000000180)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18, 0x500}}], 0x1, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r4}, 0x10) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) 8m59.164558667s ago: executing program 0 (id=2444): openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000280)={0x0, 0x0}) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, 0x0, 0x0, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e21, @broadcast}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0) r2 = landlock_create_ruleset(&(0x7f00000002c0)={0x2001}, 0x18, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r2, 0x1, &(0x7f0000000340)={0x2000}, 0x0) connect$inet(r1, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000040)='nv\x00', 0x3) setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f00000001c0), 0xc7) sendto$inet(r1, 0x0, 0x0, 0x0, 0x0, 0x0) recvfrom$inet(r1, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x700, 0x0, 0xfffffffffffffd25) 8m56.570687231s ago: executing program 0 (id=2446): setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xf, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) socket$kcm(0x2, 0xa, 0x2) socket$nl_route(0x10, 0x3, 0x0) pipe(0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, 0x0, 0x0) sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x40800) write$tun(r3, &(0x7f0000000140)=ANY=[@ANYRES8=r2], 0xfdef) bind$can_j1939(r1, &(0x7f0000000100)={0x1d, r2, 0x0, {0x0, 0x0, 0x4}, 0x1}, 0x18) setsockopt$sock_int(r1, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4) sendmsg$inet(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000400)="81b641f1f3843704b6", 0x9}], 0x1}, 0x48005) r5 = socket$can_j1939(0x1d, 0x2, 0x7) setsockopt$SO_J1939_FILTER(r1, 0x6b, 0x1, &(0x7f0000000300)=[{0x3, 0xfffffffffffffffc, {0x0, 0xf1, 0x3}, {0x2, 0xff, 0x2}}, {0x0, 0x0, {0x2, 0x0, 0x4}, {0x0, 0xf0, 0x1}, 0x0, 0xff}], 0x40) ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000780)=@newtfilter={0x24, 0x11, 0x1, 0x70bd2b, 0x0, {0x0, 0x0, 0x74, r6, {0xfff8, 0x4}, {0x0, 0xe}, {0xfff2, 0xffff}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x40}, 0x840) 8m55.572539047s ago: executing program 2 (id=2449): ioctl$sock_SIOCGIFVLAN_SET_VLAN_NAME_TYPE_CMD(0xffffffffffffffff, 0x8982, 0x0) ioctl$USBDEVFS_SUBMITURB(0xffffffffffffffff, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48000000, 0x2, 0x0, 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYRES32=0x0, @ANYBLOB="14000b00fe8000000000000000000000000000aa14000100ff02000000000000000000000000000114000600"/57], 0x54}}, 0x0) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000002fc0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x24}}, 0x0) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000002c0), 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000040)='./bus\x00', 0x1808014, &(0x7f0000000600)=ANY=[@ANYBLOB="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"/716], 0x5, 0x558b, &(0x7f00000079c0)="$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") r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000440)='./file0\x00', 0x20148c6, 0x0, 0x84, 0x0, &(0x7f0000000000)) io_submit(0x0, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000300)={0x0, 0x0, 0x0, 'queue1\x00'}) write$sndseq(r0, &(0x7f0000000000)=[{0xa4, 0x77, 0x9, 0x6, @time={0x8, 0x5}, {}, {0x88}, @raw32}], 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f00000000c0)={0x32b, @tick=0x11}) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000180), 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x101142, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143041, 0x0) 8m53.493688303s ago: executing program 0 (id=2451): socketpair$unix(0x1, 0x2, 0x0, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) syz_mount_image$hfs(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x4002, &(0x7f00000004c0)={[{@codepage={'codepage', 0x3d, 'iso8859-1'}}, {@umask={'umask', 0x3d, 0x4}}, {@iocharset={'iocharset', 0x3d, 'cp874'}}]}, 0x4, 0x33e, &(0x7f0000000540)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000400)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x13, &(0x7f0000000180)=0x100000001, 0x4) connect$inet6(r3, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f00000002c0), 0x3) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='cpuacct.usage_sys\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f000000e0c0), 0x10010) setsockopt$inet6_tcp_TLS_TX(r3, 0x11a, 0x1, &(0x7f0000000b00)=@ccm_128={{0x303}, "0000090800000003", "73b59657269ef929ee540a8a0a86c5d0", "6362dfd5", "21be0dd9f7f3c312"}, 0x28) sendfile(r3, r4, &(0x7f0000000100)=0x10, 0x10001) r5 = syz_open_procfs(0x0, 0x0) fchdir(r5) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x40800) 8m52.588211958s ago: executing program 2 (id=2452): openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000280)={0x0, 0x0}) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, 0x0, 0x0, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e21, @broadcast}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0) r2 = landlock_create_ruleset(&(0x7f00000002c0)={0x2001}, 0x18, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r2, 0x1, 0x0, 0x0) connect$inet(r1, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000040)='nv\x00', 0x3) setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x13, 0x0, 0x0) sendto$inet(r1, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0) recvfrom$inet(r1, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x700, 0x0, 0xfffffffffffffd25) 8m51.610738114s ago: executing program 0 (id=2454): openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000280)={0x0, 0x0}) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, 0x0, 0x0, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0) r2 = landlock_create_ruleset(&(0x7f00000002c0)={0x2001}, 0x18, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r2, 0x1, &(0x7f0000000340)={0x2000}, 0x0) connect$inet(r1, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000040)='nv\x00', 0x3) setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f00000001c0), 0xc7) sendto$inet(r1, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0) recvfrom$inet(r1, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x700, 0x0, 0xfffffffffffffd25) 8m49.717320136s ago: executing program 0 (id=2455): openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000280)={0x0, 0x0}) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, 0x0, 0x0, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e21, @broadcast}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0) r2 = landlock_create_ruleset(&(0x7f00000002c0)={0x2001}, 0x18, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r2, 0x1, &(0x7f0000000340)={0x2000}, 0x0) connect$inet(r1, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000040)='nv\x00', 0x3) setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f00000001c0), 0xc7) sendto$inet(r1, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0) recvfrom$inet(r1, 0x0, 0x0, 0x700, 0x0, 0x0) 8m48.470411107s ago: executing program 0 (id=2456): r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, &(0x7f0000002900)=r0, 0x4) syz_emit_ethernet(0x3e, &(0x7f0000000480)={@local, @broadcast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x0, 0x0, 0x3, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2f, 0x8001, @empty, @initdev={0xac, 0x1e, 0x0, 0x0}}}}}}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = socket$rds(0x15, 0x5, 0x0) poll(&(0x7f00000001c0)=[{r2, 0x200}, {0xffffffffffffffff, 0x4}, {0xffffffffffffffff, 0x10a}], 0x3, 0x5) sendmsg$rds(r4, 0x0, 0x0) r5 = io_uring_setup(0xd87, &(0x7f0000000380)={0x0, 0xeed0, 0x40, 0x3, 0x29d}) io_uring_register$IORING_UNREGISTER_FILES(r5, 0x3, 0x0, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x14, 0x22, 0x1, 0x270bd24, 0x25dfdbfd, {0x1}}, 0x14}}, 0x0) r7 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r7, 0x0, 0x40000) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f0000000180)={0x0, 0x78d}, 0x0) 8m42.477014638s ago: executing program 2 (id=2461): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000400)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x1f00, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r3}, 0x10) r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r6 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r6, 0x7a7, &(0x7f0000000100)=0x80000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r6, 0x7a0, &(0x7f0000000140)={@local}) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r6, 0x7a8, &(0x7f0000000080)={{@local}, @local, 0x0, 0x0, 0x7}) ioctl$IOCTL_VMCI_VERSION2(r6, 0x7a7, &(0x7f00000000c0)=0xb0000) ioctl$IOCTL_VMCI_QUEUEPAIR_SETVA(r6, 0x7a4, &(0x7f0000000180)={{@my=0x1}}) bind$bt_hci(r5, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) write(r5, &(0x7f0000000340)='\a\x00\x00\x00', 0x4) close_range(r4, 0xffffffffffffffff, 0x0) 8m40.763992407s ago: executing program 2 (id=2463): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x0, &(0x7f0000000440)={[{@jqfmt_vfsold}, {@orlov}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}, {@jqfmt_vfsv1}, {@noload}, {@jqfmt_vfsv0}, {@stripe={'stripe', 0x3d, 0x20}}, {@bsdgroups}, {@max_batch_time={'max_batch_time', 0x3d, 0x2}}, {@user_xattr}, {@quota}]}, 0x1, 0x562, &(0x7f0000001080)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x807) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x5, 0x4, 0x1, 0xc, 0x0, 0xffffffffffffffff, 0x8, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r0 = socket$inet_smc(0x2b, 0x1, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000000c0)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) syz_open_procfs$namespace(r1, &(0x7f0000000180)='ns/time\x00') r4 = syz_open_dev$vim2m(&(0x7f0000000080), 0x2, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r4, 0xc0145608, 0x0) ioctl$vim2m_VIDIOC_STREAMOFF(r4, 0x40045612, &(0x7f0000000240)=0x1) close_range(r0, 0xffffffffffffffff, 0x0) 8m37.205484157s ago: executing program 2 (id=2467): r0 = openat$ppp(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000080)) socket(0xa, 0x3, 0x6) syz_mount_image$exfat(&(0x7f0000000040), &(0x7f0000000180)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0xa1008a, &(0x7f00000003c0)=ANY=[], 0x21, 0x150b, &(0x7f0000000480)="$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") openat$binderfs(0xffffffffffffff9c, 0x0, 0x803, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) syz_emit_vhci(&(0x7f0000001980)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_status={{0xf, 0x4}, {0x5, 0x0, 0x428}}}, 0x7) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000300)='/sys/kernel/notes', 0x101200, 0x100) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) mkdir(&(0x7f0000000380)='./file1/file0\x00', 0xa6) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, 0x0, 0x0) socket$inet(0x2, 0x3, 0x2) setresuid(0x0, 0xee00, 0xee00) r2 = syz_io_uring_setup(0x93c, &(0x7f00000009c0)={0x0, 0x200d369, 0x10, 0x1, 0x2fc}, &(0x7f0000000a40), &(0x7f0000000a80)) io_uring_register$IORING_REGISTER_BUFFERS2(r2, 0xf, &(0x7f0000000340)={0x2, 0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000000)=""/190, 0xbe}, {&(0x7f0000001440)=""/4096, 0x1000}], 0x0}, 0x20) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r3, 0x6, 0xe, &(0x7f00000000c0)={@in6={{0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x30}}}, 0x0, 0x0, 0x25, 0x0, "61a1ed8439cde8054f2ada6fcd5fe76b933e8bb0ac60081e33dffa158f35f7519d5f73b4f5d80eb4881a5b98cb9fb96d225d602392f816d09dcc09b5063087117502d8c24f1fe97f61fd27a06d6a38a7"}, 0xd8) setsockopt$inet6_tcp_int(r3, 0x6, 0x2000000000000022, 0x0, 0x0) sendto$inet6(r3, &(0x7f0000000240)="c4", 0x1, 0x20000841, &(0x7f0000000040)={0xa, 0x2, 0x0, @empty}, 0x1c) 8m35.940310849s ago: executing program 2 (id=2471): r0 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="1c0000005e00679a3601ffc4910700004f78d4c1a0731ccc"], 0x1c}}, 0x0) recvmmsg$unix(r0, &(0x7f00000012c0), 0x0, 0x0, 0x0) sendmsg$NL80211_CMD_REQ_SET_REG(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000240)=ANY=[], 0xc0}, 0x1, 0x0, 0x0, 0x8000}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = syz_pidfd_open(r2, 0x0) ioctl$EXT4_IOC_MIGRATE(r3, 0xff09) r4 = syz_io_uring_setup(0x10c, &(0x7f00000000c0)={0x0, 0x6d89, 0x400, 0x40000, 0x115}, &(0x7f0000000400)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r5, r6, &(0x7f0000000240)=@IORING_OP_CONNECT={0x10, 0x1d, 0x0, 0xffffffffffffffff, 0x0, 0x0}) io_uring_enter(r4, 0x8aa, 0x0, 0x41, 0x0, 0x0) io_uring_register$IORING_REGISTER_SYNC_CANCEL(r4, 0x18, &(0x7f0000000000)={0x0, r4, 0x0, {0x27fffffffffffff, 0x8}, 0x54}, 0x1) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x10000000000030, 0x0, 0x0) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000e00), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000e40)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_SCAN(r7, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f0000000380)={0x1c, r8, 0xf21, 0x0, 0x0, {{}, {@val={0x8, 0x3, r9}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x14}, 0x4000) syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), r7) sendmsg$L2TP_CMD_TUNNEL_CREATE(r7, 0x0, 0x24008010) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1000004, 0x10012, 0xffffffffffffffff, 0x0) ioctl$PPPIOCGDEBUG(0xffffffffffffffff, 0x80047441, &(0x7f0000000000)) 8m33.085652967s ago: executing program 41 (id=2456): r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, &(0x7f0000002900)=r0, 0x4) syz_emit_ethernet(0x3e, &(0x7f0000000480)={@local, @broadcast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x0, 0x0, 0x3, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2f, 0x8001, @empty, @initdev={0xac, 0x1e, 0x0, 0x0}}}}}}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = socket$rds(0x15, 0x5, 0x0) poll(&(0x7f00000001c0)=[{r2, 0x200}, {0xffffffffffffffff, 0x4}, {0xffffffffffffffff, 0x10a}], 0x3, 0x5) sendmsg$rds(r4, 0x0, 0x0) r5 = io_uring_setup(0xd87, &(0x7f0000000380)={0x0, 0xeed0, 0x40, 0x3, 0x29d}) io_uring_register$IORING_UNREGISTER_FILES(r5, 0x3, 0x0, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x14, 0x22, 0x1, 0x270bd24, 0x25dfdbfd, {0x1}}, 0x14}}, 0x0) r7 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r7, 0x0, 0x40000) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f0000000180)={0x0, 0x78d}, 0x0) 8m20.853823902s ago: executing program 42 (id=2471): r0 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="1c0000005e00679a3601ffc4910700004f78d4c1a0731ccc"], 0x1c}}, 0x0) recvmmsg$unix(r0, &(0x7f00000012c0), 0x0, 0x0, 0x0) sendmsg$NL80211_CMD_REQ_SET_REG(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000240)=ANY=[], 0xc0}, 0x1, 0x0, 0x0, 0x8000}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = syz_pidfd_open(r2, 0x0) ioctl$EXT4_IOC_MIGRATE(r3, 0xff09) r4 = syz_io_uring_setup(0x10c, &(0x7f00000000c0)={0x0, 0x6d89, 0x400, 0x40000, 0x115}, &(0x7f0000000400)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r5, r6, &(0x7f0000000240)=@IORING_OP_CONNECT={0x10, 0x1d, 0x0, 0xffffffffffffffff, 0x0, 0x0}) io_uring_enter(r4, 0x8aa, 0x0, 0x41, 0x0, 0x0) io_uring_register$IORING_REGISTER_SYNC_CANCEL(r4, 0x18, &(0x7f0000000000)={0x0, r4, 0x0, {0x27fffffffffffff, 0x8}, 0x54}, 0x1) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x10000000000030, 0x0, 0x0) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000e00), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000e40)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_SCAN(r7, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f0000000380)={0x1c, r8, 0xf21, 0x0, 0x0, {{}, {@val={0x8, 0x3, r9}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x14}, 0x4000) syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), r7) sendmsg$L2TP_CMD_TUNNEL_CREATE(r7, 0x0, 0x24008010) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1000004, 0x10012, 0xffffffffffffffff, 0x0) ioctl$PPPIOCGDEBUG(0xffffffffffffffff, 0x80047441, &(0x7f0000000000)) 7m16.574464378s ago: executing program 3 (id=2546): ioperm(0x3, 0x4, 0x1000008) semget$private(0x0, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000300)=ANY=[@ANYBLOB="1800"/13], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={0x0, r3}, 0x18) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r4 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) close(0xffffffffffffffff) bind$inet6(0xffffffffffffffff, 0x0, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYRES32=0x0, @ANYBLOB], 0x50) ioctl$FBIOPUT_VSCREENINFO(r4, 0x4601, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x404, &(0x7f0000000200)={[{@init_itable_val}, {@jqfmt_vfsold}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x68}}, {@data_ordered}, {@nombcache}, {@quota}]}, 0x3, 0x42f, &(0x7f0000000940)="$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") 7m12.28881614s ago: executing program 3 (id=2558): socketpair$unix(0x1, 0x3, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$inet_tcp(0x2, 0x1, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = syz_io_uring_setup(0x499, &(0x7f0000000400)={0x0, 0x707b, 0x0, 0xc, 0x288}, &(0x7f0000000100)=0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) r4 = syz_io_uring_setup(0x10d, &(0x7f0000000380)={0x0, 0x0, 0x80, 0xffffffff}, &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r5, r6, &(0x7f00000002c0)=@IORING_OP_SHUTDOWN={0x22, 0x9}) io_uring_enter(r4, 0x3516, 0x0, 0x0, 0x0, 0x0) r7 = mq_open(&(0x7f000084dff0)='\xa1sxt\x1a\x00\x00\x00\x00\x00\x00\x00\x01\x88\xbdd', 0x6e93ebbbcc0884f2, 0x100, &(0x7f0000000300)={0x0, 0x1, 0x3}) mq_timedsend(r7, 0x0, 0x0, 0x0, 0x0) mq_timedsend(r7, 0x0, 0x0, 0x0, 0x0) mq_timedreceive(r7, &(0x7f0000000180)=""/196, 0xc4, 0x8000000000000001, 0x0) syz_io_uring_submit(r3, 0x0, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) io_uring_enter(r2, 0x3516, 0x0, 0x4, 0x0, 0x0) ioctl$KVM_CAP_SPLIT_IRQCHIP(0xffffffffffffffff, 0x4068aea3, 0x0) socket$l2tp6(0xa, 0x2, 0x73) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)) pipe(&(0x7f0000000200)) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000006c0)=ANY=[], 0x80}}, 0x0) 7m5.516313004s ago: executing program 3 (id=2560): bpf$MAP_CREATE(0x0, &(0x7f0000000a40)=@base={0xa, 0x4, 0x8, 0x6, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0xfffffffd, 0x8000, 0x0, @void, @value, @void, @value}, 0x50) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000480)={r0, 0xe0, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0), &(0x7f0000000380), 0x0, 0xdc, &(0x7f0000000380), 0x0, 0x10, &(0x7f0000000400), &(0x7f00000004c0), 0x8, 0xca, 0x8, 0x8, &(0x7f0000000340)}}, 0x10) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYRESHEX=r1, @ANYRES32, @ANYRES16=r2], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x10) socket(0x10, 0x80002, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00008feff0)={0x0, 0x193}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000100)={0x4, 0x0, &(0x7f00008feff0)={&(0x7f0000000180)=ANY=[@ANYBLOB="020d0000100000002f3144e900000000030006000720000002004000e0000001000000f5000000000800120002000100000000000000000030006c000201009f6eae02000000adb20200000000152c000000000000000001020014bb7acde1b8e96408d700000000030005000020000002"], 0x80}}, 0x0) r6 = socket$key(0xf, 0x3, 0x2) sendmmsg(r6, &(0x7f00000000c0), 0x2c8, 0x0) 7m2.575017044s ago: executing program 3 (id=2572): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet_tcp(0x2, 0x1, 0x0) socket(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r4}, 0x10) r5 = add_key(&(0x7f00000002c0)='keyring\x00', &(0x7f0000000300)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r5, 0x0, 0x0) syz_open_dev$radio(0x0, 0x2, 0x2) r6 = openat$sndseq(0xffffffffffffff9c, 0x0, 0x0) r7 = epoll_create1(0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) epoll_ctl$EPOLL_CTL_ADD(r7, 0x1, r8, &(0x7f0000000100)={0x20000004}) epoll_wait(r7, &(0x7f00000000c0)=[{}, {}], 0x2, 0x2) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(r6, 0xc0a85352, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB], 0xe8}}, 0x0) 7m0.501423949s ago: executing program 3 (id=2565): r0 = syz_open_dev$loop(&(0x7f00000005c0), 0x9, 0x12d600) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000400)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r4}, 0x10) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, 0x0, 0x0) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000d3f000/0x1000)=nil, 0x1000, 0x0) r6 = syz_open_dev$swradio(&(0x7f00000007c0), 0x0, 0x2) ioctl$VIDIOC_CREATE_BUFS(r6, 0xc100565c, &(0x7f0000000000)={0x0, 0x1, 0x2, {0xb, @sliced={0x9, [0x8000, 0xd34, 0x7, 0x1, 0x6, 0x1, 0x0, 0x1, 0x4, 0xfff5, 0x1, 0x8, 0x7, 0x3, 0xfffd, 0x2000, 0x1, 0x9, 0x4, 0x7, 0x800, 0x456, 0x2, 0x1b1a, 0x4, 0x40, 0x5, 0x4e, 0x6, 0x1800, 0x6, 0xffff, 0x3, 0x9, 0x100, 0x101, 0x7, 0x1000, 0x6, 0x0, 0x6, 0x67, 0xd000, 0x5ae3, 0x2, 0x0, 0xffff, 0x1000], 0x7fffffff}}}) ioctl$KVM_SET_LAPIC(0xffffffffffffffff, 0x4400ae8f, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000340)=ANY=[@ANYBLOB], 0x20}, 0x1, 0x0, 0x0, 0x4000044}, 0x8800) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cpuacct.usage_user\x00', 0x275a, 0x0) write$binfmt_misc(r7, &(0x7f0000001000), 0xe09) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r7, 0x1000, {0x2a00, 0x80010000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1c, "fee8a2ab78fc179fd1f8a0e91ddaaca7bd64c6a4b4e00d9683dda1af1ea89de2b7fb0a0155aaffffffffffff0300", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "90be8b1c559265406c09306003d8002000", [0x0, 0x2]}}) 6m51.904398944s ago: executing program 3 (id=2577): socket$nl_route(0x10, 0x3, 0x0) socket$packet(0x11, 0x2, 0x300) r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000780), 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x3) syz_clone(0x0, 0x0, 0xfffffe11, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000032680)=""/102400, 0x19000) r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r3) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000820004000000000000000c00850000000f00000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) timer_create(0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) ptrace$pokeuser(0x6, r3, 0x358, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REQ_SET_REG(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010000000000000000001b0000000600210061df"], 0x24}}, 0x0) r5 = fsopen(&(0x7f0000000180)='exfat\x00', 0x1) fsconfig$FSCONFIG_SET_STRING(r5, 0x1, &(0x7f0000000040)='uid', &(0x7f00000008c0)='0\x00#\x00\xd0\x00 \x00\x00qS\x00\x00\x00\x00\x00\x00\x00\x00$\xf6_\xbdI\x1c\xf2\xa9]\xcc\xe0*\xef\x01\x8d\x15\xd2h\x93\xc9\xb57\xc3\xea\\Eb\xf8\xe6,\xdf\xd4\xfae\x84\xcc\xd5\"d\xf0D-\x98\x9f\x81{\xfc$\xc4\xbcF\xf8\xc8\x8d\xcb\xb8\xf2\x1e\xe4\'U\xb3\xb8\xd3\xe6\xd7\x80=\x8a\xeb\n\xb8_\xe8\x96YY\xe3\xc7\xe6\xf28\x19\xa6\xa7\xfa\xdb\x1ce\xc1\x03\x86J\xb2fh\x19\xee#\xcc\x0f\xed\xfea\xdc\x88\xcb%bW\xd35\xda=\xac\x1d\xae\x93\xfd\'T6\x94\n\xa4\x9cU\xc4\fA~[\xbf\x8b\x90\xfe\x04\xe7U\xf3h\x81\x14l7u\x95\x96t\\\x0f\xef;\x03\xa4C\xbc(Vc!a\xc1\xe39\xc6b\x905\x1f\x03\x00\x00\x00\x00\x00\x00\xdf9\xaf5\xc8a:z\xe4\xcbag&67\x814\xf6}\xe10v6l\xd6,\x1e\xa0\xcc\xbf\xfdkm\b?\x839\x85N\x1c\xc1\xcb\xfc\x85\xd2\n\x02\"\xf2\x81g\x90\x01n%\x7f_\xe1.f>>\xa5\xfb\"\xab\xdb\x06\x12e\x14\x11~\x9a\bR-\x85\xc3\xa9\xe6\xf6R\x11\"\xc3\xc9\xfc\x14s X\xec\xdd\xc2qB\x85\xf0\xd7\x04\xdd<\x9ak\x00\x00\x00\x00\x00\x00\x00\n\xa72\xa3\xef^\xe7\x8f', 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ipvs(&(0x7f0000001380), 0xffffffffffffffff) 6m36.10196184s ago: executing program 43 (id=2577): socket$nl_route(0x10, 0x3, 0x0) socket$packet(0x11, 0x2, 0x300) r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000780), 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x3) syz_clone(0x0, 0x0, 0xfffffe11, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000032680)=""/102400, 0x19000) r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r3) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000820004000000000000000c00850000000f00000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) timer_create(0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) ptrace$pokeuser(0x6, r3, 0x358, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REQ_SET_REG(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010000000000000000001b0000000600210061df"], 0x24}}, 0x0) r5 = fsopen(&(0x7f0000000180)='exfat\x00', 0x1) fsconfig$FSCONFIG_SET_STRING(r5, 0x1, &(0x7f0000000040)='uid', &(0x7f00000008c0)='0\x00#\x00\xd0\x00 \x00\x00qS\x00\x00\x00\x00\x00\x00\x00\x00$\xf6_\xbdI\x1c\xf2\xa9]\xcc\xe0*\xef\x01\x8d\x15\xd2h\x93\xc9\xb57\xc3\xea\\Eb\xf8\xe6,\xdf\xd4\xfae\x84\xcc\xd5\"d\xf0D-\x98\x9f\x81{\xfc$\xc4\xbcF\xf8\xc8\x8d\xcb\xb8\xf2\x1e\xe4\'U\xb3\xb8\xd3\xe6\xd7\x80=\x8a\xeb\n\xb8_\xe8\x96YY\xe3\xc7\xe6\xf28\x19\xa6\xa7\xfa\xdb\x1ce\xc1\x03\x86J\xb2fh\x19\xee#\xcc\x0f\xed\xfea\xdc\x88\xcb%bW\xd35\xda=\xac\x1d\xae\x93\xfd\'T6\x94\n\xa4\x9cU\xc4\fA~[\xbf\x8b\x90\xfe\x04\xe7U\xf3h\x81\x14l7u\x95\x96t\\\x0f\xef;\x03\xa4C\xbc(Vc!a\xc1\xe39\xc6b\x905\x1f\x03\x00\x00\x00\x00\x00\x00\xdf9\xaf5\xc8a:z\xe4\xcbag&67\x814\xf6}\xe10v6l\xd6,\x1e\xa0\xcc\xbf\xfdkm\b?\x839\x85N\x1c\xc1\xcb\xfc\x85\xd2\n\x02\"\xf2\x81g\x90\x01n%\x7f_\xe1.f>>\xa5\xfb\"\xab\xdb\x06\x12e\x14\x11~\x9a\bR-\x85\xc3\xa9\xe6\xf6R\x11\"\xc3\xc9\xfc\x14s X\xec\xdd\xc2qB\x85\xf0\xd7\x04\xdd<\x9ak\x00\x00\x00\x00\x00\x00\x00\n\xa72\xa3\xef^\xe7\x8f', 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ipvs(&(0x7f0000001380), 0xffffffffffffffff) 5m36.549424255s ago: executing program 9 (id=2671): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r4, &(0x7f0000000000)={0x2, 0x4e20, @multicast1}, 0x10) sendto$inet(r4, 0x0, 0x0, 0x20020084, &(0x7f00000018c0)={0x2, 0x4e20}, 0x10) r5 = syz_open_dev$media(&(0x7f0000000000), 0x200104, 0x0) ioctl$MEDIA_IOC_ENUM_LINKS(r5, 0xc0287c02, &(0x7f0000000000)={0x80000000, 0x0, 0x0}) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={0xffffffffffffffff, 0x0, &(0x7f0000000040)=@tcp=r4}, 0x20) shutdown(r4, 0x1) r6 = geteuid() getresgid(0x0, &(0x7f0000001200), 0x0) lchown(0x0, r6, 0x0) recvfrom(r4, &(0x7f0000000240)=""/225, 0xe1, 0x40000120, 0x0, 0x0) 5m35.378701484s ago: executing program 9 (id=2673): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r0 = socket$inet_tcp(0x2, 0x1, 0x0) socket$igmp(0x2, 0x3, 0x2) setsockopt$inet_tcp_int(r0, 0x6, 0x3, &(0x7f0000000200)=0x2, 0x4) r1 = socket(0x40000000002, 0x3, 0x2) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f00000012c0)='vlan0\x00', 0x10) setsockopt$inet_mreq(r1, 0x0, 0x20, &(0x7f0000000000)={@multicast1, @local}, 0x8) socket$inet6_udp(0xa, 0x2, 0x0) getsockname$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x0, 0x0, @private1}, &(0x7f0000000140)=0x1c) sendmsg$IPCTNL_MSG_EXP_DELETE(r1, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x800}, 0x4008005) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000a40)=@raw={'raw\x00', 0x3c1, 0x3, 0x4c0, 0x300, 0x2b8, 0x0, 0x300, 0xff000000, 0x3f0, 0x3a8, 0x3a8, 0x3f0, 0x3a8, 0x3, 0x0, {[{{@ipv6={@dev, @ipv4={'\x00', '\xff\xff', @local}, [], [], 'veth1_to_hsr\x00', 'wg2\x00'}, 0x0, 0x298, 0x300, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x4, 0x2, 0x0, 'syz1\x00'}}, @common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x0, 0x0, 'syz0\x00'}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'snmp_trap\x00', 'syz1\x00'}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @unspec=@CT0={0x48}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x520) setsockopt$inet_tcp_int(r0, 0x6, 0x18, &(0x7f00000000c0)=0x28000, 0x4) ioctl$BTRFS_IOC_INO_LOOKUP(r2, 0xd0009412, 0x0) ioctl$AUTOFS_IOC_EXPIRE(r1, 0x810c9365, &(0x7f0000000280)={{0xffffffff, 0xb43}, 0x100, './file0\x00'}) setsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) lsetxattr$trusted_overlay_opaque(&(0x7f0000000240)='./file0\x00', &(0x7f00000003c0), &(0x7f0000000400), 0x2, 0x2) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) sendmsg$DCCPDIAG_GETSOCK(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet_msfilter(0xffffffffffffffff, 0x0, 0x29, 0x0, 0x14) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @local}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @empty}, 0x10) sendto$inet(r0, &(0x7f0000000640)="e046385738d0b6e2f17050c3002a9fe3e2", 0x11, 0x0, 0x0, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x3, &(0x7f00000001c0), 0x4) 5m34.250060173s ago: executing program 9 (id=2677): openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000280)={0x0, 0x0}) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, 0x0, 0x0, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e21, @broadcast}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0) r2 = landlock_create_ruleset(&(0x7f00000002c0)={0x2001}, 0x18, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r2, 0x1, &(0x7f0000000340)={0x2000}, 0x0) connect$inet(r1, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000040)='nv\x00', 0x3) setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x13, 0x0, 0x0) sendto$inet(r1, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0) recvfrom$inet(r1, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x700, 0x0, 0xfffffffffffffd25) 5m27.33413469s ago: executing program 9 (id=2685): socket$inet6_tcp(0xa, 0x1, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000009c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) getpid() open(&(0x7f0000000040)='./bus\x00', 0x1c7c42, 0x18c) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000180)='./bus\x00', 0x0, 0x1000, 0x0) r1 = creat(&(0x7f0000000300)='./bus\x00', 0x14) r2 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f00000007c0)='./file1\x00', 0x400c84, &(0x7f0000000340), 0x1, 0x786, &(0x7f0000001900)="$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") bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x9, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bind$inet(0xffffffffffffffff, 0x0, 0x0) dup3(r2, r1, 0x0) io_setup(0x6, &(0x7f0000000240)=0x0) io_submit(r6, 0x3f0a, &(0x7f0000000540)=[&(0x7f00000000c0)={0xf04aef, 0x3d8, 0x8, 0x0, 0x0, r1, &(0x7f0000000000), 0x200a00}]) 5m25.055995099s ago: executing program 9 (id=2690): bpf$PROG_LOAD(0x5, 0x0, 0x0) openat$vicodec1(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, 0x0) prctl$PR_GET_THP_DISABLE(0x2a) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x21c0, 0xc) r4 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0x149802, 0x0) r5 = dup(r4) sendfile(r4, r5, 0x0, 0x80006) r6 = fanotify_init(0x200, 0x0) fanotify_mark(r6, 0x201, 0x4800003e, r3, 0x0) unlink(&(0x7f00000000c0)='./file0\x00') dup2(r6, r3) mlock(&(0x7f0000ff9000/0x4000)=nil, 0x4000) 5m16.914610096s ago: executing program 9 (id=2701): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_io_uring_setup(0x40010d, &(0x7f0000000300)={0x0, 0xce5d, 0x1000, 0x0, 0x89}, 0x0, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='attr/fscreate\x00') r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_BLANKSCREEN(r3, 0x560e, &(0x7f0000000000)) syz_open_dev$tty1(0xc, 0x4, 0x2) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=@newlink={0x40, 0x10, 0x300, 0x0, 0x0, {0x7a, 0x0, 0x0, 0x0, 0x260}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_QUERY_INTVL={0xc, 0x21, 0x2}]}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x80}, 0x0) openat$uinput(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000011008108090f9becdb4cb92e264831371900000069bd6efb2502eaf60d002700020400bf050005001201", 0x2e}], 0x1}, 0x0) fcntl$getflags(r4, 0x401) ioctl$TIOCSWINSZ(r3, 0x5414, &(0x7f0000000040)={0x9, 0x2, 0x1000, 0x5}) 5m1.525923525s ago: executing program 44 (id=2701): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_io_uring_setup(0x40010d, &(0x7f0000000300)={0x0, 0xce5d, 0x1000, 0x0, 0x89}, 0x0, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='attr/fscreate\x00') r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_BLANKSCREEN(r3, 0x560e, &(0x7f0000000000)) syz_open_dev$tty1(0xc, 0x4, 0x2) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=@newlink={0x40, 0x10, 0x300, 0x0, 0x0, {0x7a, 0x0, 0x0, 0x0, 0x260}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_QUERY_INTVL={0xc, 0x21, 0x2}]}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x80}, 0x0) openat$uinput(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000011008108090f9becdb4cb92e264831371900000069bd6efb2502eaf60d002700020400bf050005001201", 0x2e}], 0x1}, 0x0) fcntl$getflags(r4, 0x401) ioctl$TIOCSWINSZ(r3, 0x5414, &(0x7f0000000040)={0x9, 0x2, 0x1000, 0x5}) 4m1.499514157s ago: executing program 7 (id=2773): getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000480)={0x0, @in={{0x2, 0x4e20, @rand_addr=0x64010101}}, 0x200, 0x100, 0x80, 0x4, 0x20, 0x6, 0x7}, &(0x7f0000000580)=0x9c) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x14, 0x32, 0x701, 0xfffffffc, 0x0, {0x6}}, 0x14}}, 0x0) r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000005c0)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r4, &(0x7f0000000200)={0x3, 0x40, 0xfa02, {{0x6000000, 0x0, 0x0, @mcast2}, {0xa, 0x0, 0x0, @remote}, r5, 0xfffffffc}}, 0x48) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000000)={0xffffffffffffffff}, 0x2, 0xc}}, 0x20) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03400000000000000000010000000900010073797a300000000040000000160a07000000000000000000010000000900010073797a30000000000900020073797a3000000000140003800800024000000000080001400000000038000000160a09010000000000000000010000000900020073797a30000000000900010073797a300000000008000740000000000400038014000000110001"], 0xc0}}, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_IP(r4, &(0x7f0000000280)={0x3, 0x40, 0xfa00, {{0xa, 0x4e23, 0x7ff, @empty, 0x1}, {0xa, 0x4e20, 0x1ff, @dev={0xfe, 0x80, '\x00', 0x2f}, 0x9}, r6, 0xb}}, 0x48) write$RDMA_USER_CM_CMD_DESTROY_ID(r4, &(0x7f0000000380)={0x1, 0x10, 0xfa00, {0x0, r6}}, 0x18) socket$inet6_udplite(0xa, 0x2, 0x88) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)={0x1b0, r9, 0x1, 0x0, 0x0, {}, [@WGDEVICE_A_IFNAME={0x14, 0x2, 'wg0\x00'}, @WGDEVICE_A_PEERS={0x188, 0x8, 0x0, 0x1, [{0x48, 0x0, 0x0, 0x1, [@WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e24, 0x4, @rand_addr=' \x01\x00', 0x1}}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @a_g}]}, {0xdc, 0x0, 0x0, 0x1, [@WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e20, @loopback}}, @WGPEER_A_ALLOWEDIPS={0xa0, 0x9, 0x0, 0x1, [{0x1c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010102}, {0x5}}]}, {0x28, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5, 0x3, 0x2}}]}, {0x58, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @private2={0xfc, 0x2, '\x00', 0x1}}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5, 0x3, 0x1}}]}]}, @WGPEER_A_PUBLIC_KEY={0x24}]}, {0x30, 0x0, 0x0, 0x1, [@WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @neg}]}, {0x30, 0x0, 0x0, 0x1, [@WGPEER_A_FLAGS={0x8, 0x3, 0x5}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @c_g}]}]}]}, 0x1b0}, 0x1, 0x0, 0x0, 0x4004840}, 0x40000) 4m0.212464209s ago: executing program 7 (id=2774): pwritev2(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000080)="ff", 0xabfb}], 0x1, 0x5412, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[], 0x7c}}, 0x0) r0 = semget$private(0x0, 0x2, 0x41c) semctl$GETVAL(r0, 0x0, 0xc, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() r2 = syz_open_dev$media(&(0x7f00000005c0), 0x6, 0x80000) ioctl$MEDIA_IOC_G_TOPOLOGY(r2, 0xc0487c04, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x0, 0x118, 0x0, &(0x7f0000000cc0), 0x0, 0x0, 0x0, 0x42, 0x0, 0x0}) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000), 0x0, 0x0, 0x0, 0x1f00c00e}, 0x0) io_setup(0x8, &(0x7f0000004200)=0x0) r7 = syz_open_procfs(r1, &(0x7f0000000000)='fd/3\x00') io_submit(r6, 0x1, &(0x7f0000002740)=[&(0x7f0000004280)={0x0, 0x0, 0x0, 0x5, 0x0, r7, 0x0}]) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20044885}, 0x0) syz_clone3(&(0x7f00000002c0)={0x8040000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 3m58.289769781s ago: executing program 7 (id=2777): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() r1 = socket(0x2000000000000021, 0x2, 0x10000000000002) sendmsg$kcm(r1, &(0x7f0000000080)={&(0x7f0000000000)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x1, @initdev={0xac, 0x1e, 0x0, 0x0}}}, 0x80, 0x0, 0x0, &(0x7f00000000c0)=ANY=[], 0x18}, 0x801c) sendmmsg(r1, &(0x7f0000000180)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18, 0x500}}], 0x1, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r3}, 0x10) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000900)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) r4 = open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) mknodat$loop(r4, &(0x7f0000001600)='./file1\x00', 0xc000, 0x0) linkat(r4, &(0x7f0000000200)='./file1\x00', r4, &(0x7f0000000240)='./file0\x00', 0x0) rename(&(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)='./bus\x00') 3m57.17815614s ago: executing program 7 (id=2779): openat$dir(0xffffffffffffff9c, 0x0, 0x100, 0x28) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e27, 0xffffffff, @mcast2, 0x5}, 0x1c) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) socketpair$unix(0x1, 0x3, 0x0, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000480)={0xffffffffffffffff, 0x0, 0x25, 0x2, @val=@uprobe_multi={0x0, 0x0, 0x0, 0x6, 0x0, 0x1}}, 0x40) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0xc) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000500)=""/67, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, 0x0, &(0x7f00000000c0)=""/81, &(0x7f0000000480)=""/74}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000e40)) ioctl$VHOST_SET_VRING_ERR(r0, 0x4008af22, &(0x7f00000002c0)={0x1, r1}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xf, @void, @value}, 0x94) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpuacct.usage_percpu\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, 0x0, 0x0, 0x0, 0x0) write$yama_ptrace_scope(r2, &(0x7f0000000080)='0\x00', 0x2) sched_setscheduler(0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x0, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, 0x0, 0x0) 3m55.672302825s ago: executing program 7 (id=2780): bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f0000000000)={0x6, @local, 0xfffe, 0x0, 'lblc\x00'}, 0x2c) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r2, &(0x7f0000002540)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2) socket$nl_route(0x10, 0x3, 0x0) syz_emit_ethernet(0x58, &(0x7f0000000680)={@local, @empty, @void, {@ipv6={0x86dd, @tipc_packet={0x8, 0x6, "bee3e2", 0x22, 0x6, 0x1, @private0={0xfc, 0x0, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0x20}, {[], @payload_direct={{{{0x22, 0x0, 0x1, 0x0, 0x1, 0x8, 0x3, 0x2, 0x6, 0x0, 0x0, 0x9, 0x1, 0x3, 0x9, 0x18, 0x1, 0x4e20, 0x4e21}, 0x0, 0x3}}, [0x0, 0x0]}}}}}}, 0x0) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r4, &(0x7f0000000040)={0x3, 0x0, 0x0, 0x1, 0x7}, 0x0) bpf$BPF_GET_PROG_INFO(0xa, &(0x7f00000021c0)={0xffffffffffffffff, 0x0, 0x0}, 0x10) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) sendmsg$TIPC_CMD_GET_NETID(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x1c, 0x0, 0x100, 0x70bd28, 0x25dfdbfb, {}, ["", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x10000}, 0x4000) r6 = dup(r5) write$UHID_INPUT(r6, &(0x7f0000001040)={0xf, {"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", 0x1000}}, 0x96d) 3m54.173108961s ago: executing program 7 (id=2783): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc9ffb}]}) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x11, 0x3, &(0x7f00000006c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = socket$inet(0x2, 0xa, 0x0) ioctl$sock_inet_SIOCGARP(r1, 0x89a3, &(0x7f0000000340)={{0x3a, 0x0, @private}, {0x0, @multicast}, 0x0, {0x2, 0x0, @remote}}) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x8, 0x4, &(0x7f0000000600)=ANY=[@ANYRESOCT=r1, @ANYBLOB="fe5e131a6d9fbdb59a4971613c13bc8c0dab01e68e8e7770", @ANYRES32=r1, @ANYRESDEC=r1, @ANYRESOCT=r0], &(0x7f00000001c0)='GPL\x00', 0x5, 0xd1, &(0x7f0000000800)=""/209, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x48) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_GET(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="500000000102010100000000000000000a0000003c0001800c00028005200100010000002c0001801400030000000000000000000000ffffac141400140004"], 0x50}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00'}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) timer_create(0x2, 0x0, &(0x7f0000000180)) timer_delete(0x0) r4 = msgget$private(0x0, 0x6) msgsnd(r4, &(0x7f0000000780)=ANY=[], 0x8, 0x800) msgsnd(r4, &(0x7f00000000c0)=ANY=[@ANYBLOB], 0x8, 0x800) msgrcv(r4, 0x0, 0x0, 0x3, 0x2000) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0xc, &(0x7f0000000640)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r6 = syz_open_procfs(0x0, &(0x7f00000002c0)='environ\x00') mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) preadv(r6, &(0x7f0000002400)=[{&(0x7f0000000040)=""/90, 0x5a}], 0x1, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r5}, 0x10) 3m38.489101376s ago: executing program 45 (id=2783): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc9ffb}]}) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x11, 0x3, &(0x7f00000006c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = socket$inet(0x2, 0xa, 0x0) ioctl$sock_inet_SIOCGARP(r1, 0x89a3, &(0x7f0000000340)={{0x3a, 0x0, @private}, {0x0, @multicast}, 0x0, {0x2, 0x0, @remote}}) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x8, 0x4, &(0x7f0000000600)=ANY=[@ANYRESOCT=r1, @ANYBLOB="fe5e131a6d9fbdb59a4971613c13bc8c0dab01e68e8e7770", @ANYRES32=r1, @ANYRESDEC=r1, @ANYRESOCT=r0], &(0x7f00000001c0)='GPL\x00', 0x5, 0xd1, &(0x7f0000000800)=""/209, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x48) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_GET(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="500000000102010100000000000000000a0000003c0001800c00028005200100010000002c0001801400030000000000000000000000ffffac141400140004"], 0x50}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00'}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) timer_create(0x2, 0x0, &(0x7f0000000180)) timer_delete(0x0) r4 = msgget$private(0x0, 0x6) msgsnd(r4, &(0x7f0000000780)=ANY=[], 0x8, 0x800) msgsnd(r4, &(0x7f00000000c0)=ANY=[@ANYBLOB], 0x8, 0x800) msgrcv(r4, 0x0, 0x0, 0x3, 0x2000) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0xc, &(0x7f0000000640)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r6 = syz_open_procfs(0x0, &(0x7f00000002c0)='environ\x00') mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) preadv(r6, &(0x7f0000002400)=[{&(0x7f0000000040)=""/90, 0x5a}], 0x1, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r5}, 0x10) 10.334731306s ago: executing program 8 (id=3084): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) sendmmsg$inet(r3, &(0x7f00000026c0)=[{{&(0x7f0000000800)={0x2, 0x4e21, @loopback}, 0x10, &(0x7f0000000ac0)=[{0x0}], 0x1, &(0x7f0000000c40)}}], 0x1, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r4, &(0x7f0000000000)={0x2, 0x4e20, @multicast1}, 0x10) sendto$inet(r4, 0x0, 0x0, 0x20020084, &(0x7f00000018c0)={0x2, 0x4e20}, 0x10) r5 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000b80)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000140)=ANY=[@ANYRES32=r6, @ANYRES32=r5, @ANYBLOB="05"], 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r6, &(0x7f0000000340), &(0x7f0000000040)=@tcp=r4}, 0x20) shutdown(r4, 0x1) recvfrom(r4, &(0x7f0000000240)=""/225, 0xe1, 0x40000120, 0x0, 0x0) 7.255281508s ago: executing program 1 (id=3088): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) socket(0xa, 0x800, 0x1) r3 = socket$inet6(0xa, 0x2, 0x0) prctl$PR_SET_MM(0x23, 0x6, &(0x7f0000ff9000/0x4000)=nil) prctl$PR_SET_MM(0x23, 0x7, &(0x7f0000ffc000/0x4000)=nil) setuid(0x0) openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') fchdir(r4) mount(0x0, &(0x7f0000000080)='.\x00', 0x0, 0x0, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000400)='ns\x00') readlinkat(r5, 0x0, &(0x7f0000000440)=""/163, 0xa3) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000002380)=@nat={'nat\x00', 0x8, 0x5, 0x508, 0x118, 0x208, 0xffffffff, 0x208, 0x0, 0x438, 0x438, 0xffffffff, 0x438, 0x438, 0x5, 0x0, {[{{@uncond, 0xb7030000, 0xe8, 0x118, 0x0, {}, [@common=@unspec=@connlimit={{0x40}}]}, @common=@unspec=@CONNMARK={0x30}}, {{@ipv6={@dev, @mcast1, [], [], 'veth0_macvtap\x00', 'veth1_to_batadv\x00'}, 0x0, 0xa8, 0xf0}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x0, @ipv4=@remote, @ipv4=@multicast2, @port, @icmp_id}}}, {{@ipv6={@mcast2, @local, [], [], 'wg1\x00', 'virt_wifi0\x00', {}, {}, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xf8, 0x140, 0x0, {}, [@common=@hl={{0x28}}, @common=@hl={{0x28}}]}, @REDIRECT={0x48, 'REDIRECT\x00', 0x0, {0x0, @ipv6=@ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, @ipv6=@mcast1, @icmp_id=0xfffd, @gre_key}}}, {{@ipv6={@ipv4={'\x00', '\xff\xff', @multicast2}, @private1, [], [], 'vlan0\x00', 'team0\x00', {}, {}, 0x0, 0x0, 0x1}, 0x0, 0xa8, 0xf0}, @REDIRECT={0x48, 'REDIRECT\x00', 0x0, {0x0, @ipv4, @ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}, @port, @icmp_id}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x568) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) 7.247054207s ago: executing program 8 (id=3097): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x80002, 0x0) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x1a, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600722, 0x19) keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=ANY=[], 0x2a, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r2 = dup(r1) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) r3 = syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2) ioctl$VIDIOC_S_INPUT(r3, 0xc0045627, &(0x7f0000000100)=0x3) ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(r3, 0xc0845657, &(0x7f0000000200)={0x0, @bt={0xa02, 0x870, 0x1, 0x2, 0xd59f80, 0x19f2, 0x3f, 0x19ef, 0x3, 0x8, 0x2800, 0x6, 0x2, 0xba2, 0xc, 0x30, {0x8, 0xffffffff}, 0xd0, 0x9}}) syz_io_uring_submit(0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r4, &(0x7f0000000600)={0x0, 0x0, 0x0}, 0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) openat$sysctl(0xffffffffffffff9c, 0x0, 0x1, 0x0) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r6 = socket$inet_smc(0x2b, 0x1, 0x0) accept4(r6, &(0x7f00000002c0)=@pppoe={0x18, 0x0, {0x0, @multicast}}, &(0x7f0000000180)=0x80, 0x80000) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) dup3(0xffffffffffffffff, r5, 0x0) r7 = openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r0, r7, 0x0, 0x20000023896) 7.238926578s ago: executing program 5 (id=3098): ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) kcmp(0x0, 0x0, 0x1, 0xffffffffffffffff, 0xffffffffffffffff) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3fc, 0x0, 0x32}, 0x9c) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r3, 0x84, 0x72, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000000)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x800, 0x0, 0x0, 0x8a}, 0x9c) socket$inet6(0xa, 0x80000, 0x1ff) syz_init_net_socket$x25(0x9, 0x5, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) syz_mount_image$iso9660(&(0x7f0000000140), &(0x7f0000000000)='./file0\x00', 0x2000c12, &(0x7f0000000080)={[{@check_relaxed}, {@iocharset={'iocharset', 0x3d, 'iso8859-2'}}, {@check_relaxed}, {@iocharset={'iocharset', 0x3d, 'cp865'}}, {@overriderock}, {@cruft}, {@check_strict}, {@check_relaxed}, {@block={'block', 0x3d, 0x400}}, {@cruft}, {@unhide}, {@session={'session', 0x3d, 0x2f}}]}, 0x1, 0xa03, &(0x7f0000000f40)="$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") openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000440)='blkio.bfq.io_serviced_recursive\x00', 0x275a, 0x0) bind$inet6(r3, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(0xffffffffffffffff, 0x84, 0x75, &(0x7f0000000300)={0x0, 0x6}, 0x8) sendto$inet6(r3, &(0x7f0000847fff), 0x0, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) ioctl$SNDCTL_DSP_SPEED(0xffffffffffffffff, 0xc0045002, &(0x7f0000000080)=0x82) 5.889120801s ago: executing program 1 (id=3090): openat$udambuf(0xffffffffffffff9c, 0x0, 0x2) memfd_create(&(0x7f0000000340)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xe7a\x9b\x11x\x0e\xa1\xcf\x1a\x98S7\xc9\x00\x00\x00\x00\x00\x00\a\x00\x00\x00\x00\x00\x00\x04\x879\xa24\xa9am\xde\xb2\xd3\xcbZJoa\xc4\x1acB\xaa\xc1\xfb Q\xd4\xf4\x01\xa52\xe2DG\xd4\xbd{\x9f\xa9\x97\x9b@\xdb\x00b\xe1br\xb6\x008\xe3\x10\xff\xc2\x9d\r2\x9e\x8e\x04sW\x1b\xb7\xb3\xa2\xc9&@\xca\xda\xdc\xe2/\x97X\xac\b\xb0\xc2<\x80E\x1a\xbc\xc7W\xda9VsA\xaf\xc6\xcf\xe1\xa1\xb5M\xa2\x85\xa6y\xc4J\xf1\xf7\xfcD\x95\xe3\xeb\xc7\xbc\x91\xb0\xa8\x9eo\xebF(\x9dL\x01vRk\xaacB\x04\xa7I\v\x86EZ\x96\xd5\x14OD\\\xe8R\xe4\xcd\xec\xcc\xd1\x0fre\xe86\xcd\xeb\xc4$\x98\x06J\xd6dD\x8d_U`ji{\xab\x97\xaf;l\x1f\xaf\xb38U\xcb\xfa\xb3j\x92\f\x81\xa0\xa2-g\b\x99\x0e\x8d\x8d\x16\xd9w\\\xf8\xce\xb0j\x9d\'\x93\xef\x1d\xa0H\xd9\xbd\xd9\xaf\x12$\x8d\x16%\x8b\x00', 0x3) io_submit(0x0, 0x0, 0x0) sendmsg$key(0xffffffffffffffff, 0x0, 0x18) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_SCRNMAP(r0, 0x4b41, &(0x7f00000016c0)) r1 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'}) r3 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$sock_netdev_private(r3, 0x8914, &(0x7f0000000000)) ioctl$sock_netrom_SIOCADDRT(r1, 0x890b, &(0x7f0000000280)={0x1, @bcast, @bpq0, 0xfff4, 'syz0\x00', @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x3ff, 0x2, [@null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast]}) r4 = syz_init_net_socket$x25(0x9, 0x5, 0x0) accept4$x25(r4, 0x0, &(0x7f0000000100)=0xffffffffffffffd1, 0x800) r5 = syz_init_net_socket$ax25(0x3, 0x3, 0xcb) bind$ax25(r5, &(0x7f0000000540)={{0x3, @bcast, 0x1}, [@default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @null, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}, 0x48) connect$ax25(r5, 0x0, 0x0) ioctl$sock_ifreq(r4, 0x8990, &(0x7f0000000180)={'bond0\x00', @ifru_names='rose0\x00'}) getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f0000000200)) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x40) openat$userio(0xffffffffffffff9c, 0x0, 0x22242, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0xe22}, 0x1c) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$BPF_PROG_DETACH(0x9, 0x0, 0x0) syz_usb_connect$hid(0x5, 0x0, 0x0, 0x0) 3.395660043s ago: executing program 1 (id=3091): r0 = socket$inet6_dccp(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000000400)={0xa, 0x4e21, 0x0, @empty}, 0x1c) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0x3, &(0x7f0000000d80)=ANY=[@ANYBLOB="180000000300"/15], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r1, 0x0, 0x3f00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x63, 0x0, &(0x7f00000000c0)='\x00', 0x0, 0x2}, 0x48) pipe2(&(0x7f0000000440), 0x84000) write$uinput_user_dev(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e23}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r5 = socket(0x15, 0x5, 0x0) getsockopt(r5, 0x200000000114, 0x2710, 0x0, &(0x7f0000000040)) setsockopt$inet6_IPV6_HOPOPTS(0xffffffffffffffff, 0x29, 0x36, 0x0, 0x8) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x2, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @loopback}, 0x62) r6 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r6, 0x4b72, &(0x7f0000000400)={0x1, 0x1, 0x5, 0xf, 0xe}) 3.392233893s ago: executing program 8 (id=3101): openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x80002, 0x0) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x1a, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600722, 0x19) keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=ANY=[], 0x2a, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2) ioctl$VIDIOC_S_INPUT(r2, 0xc0045627, &(0x7f0000000100)=0x3) 3.391582653s ago: executing program 5 (id=3092): syz_mount_image$bfs(&(0x7f0000000000), &(0x7f0000000240)='./bus\x00', 0x8008, &(0x7f0000000100)=ANY=[@ANYRES64=0x0], 0xf, 0xab, &(0x7f0000010140)="$eJzs1zGKwkAYBeB/s7CbdptFsLBO4x08ilhqI1aK4A3Ei3gVj5DewiKtiCOYiIidRQT5vmLgzWPgtbM7brubIiKtIlLRme7T3Wy+GA8n9Rl8pCwifiMij4jeX50Pg7r7avqyWo7K6vv58c+69b0AAMDrsug/5nNqLk7NL/Aa/m993vI+AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgHe7BAAA//+dfyiL") openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.current\x00', 0x275a, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file2\x00', 0x143042, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='rdma.current\x00', 0x275a, 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000140)='./file4\x00', 0x40, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file7\x00', 0x105042, 0x1ff) linkat(0xffffffffffffff9c, &(0x7f0000000000)='./file4\x00', 0xffffffffffffff9c, &(0x7f00000006c0)='./file5\x00', 0x0) syz_mount_image$udf(&(0x7f0000000000), &(0x7f0000000080)='./bus\x00', 0x1000000, &(0x7f0000000040)=ANY=[@ANYBLOB='\x00'], 0x2, 0x58a, &(0x7f0000000740)="$eJzs3c1rXWkZAPDnPc1NbzrtzJ22ttaOckHBMmJJ006qpjjWyQSE4oRp04UrY5N2wtwkJclIOgzahejG/8HVbBRkQN0ILnTrQnciA67ErVEGBhRHOSfnfiUZk5mbm4/m94PknnvOcz7eAwk872cAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABFff/nm8JW0308BAAAA9NM3b786PCL/BwAAgCfaHe3/AAAAAAAAAHDYpcjih5Fi9dRaOll8X1e9NbfwxurU+MTWpw2l4sxjRXz+U70ycvXaC6PXv9T8/P/n77YL8crtOzfrLy3OP1yaXV6enalPLczdW5yZ3fEVej1/o+eLF1Cff/2Nmfv3l+sjl692HV6t/e34U+dqY19++eytZuzU+MTE7Y6YgcrHvvsmengAAAAcbYORxbVIcefiz9OpiMii91x4m7qDfhuKWp5/F4WYGp8oCtKYm15YyQ9ONhPhWndOPNjMkfcgF+9JLeJ0/qyDMnoAAAB2rhJZfCZSXPhgLT0dEceaefAXiokBt79AbQ8ecgsDEXEmIi7FIcjZAQAAYJ8djyxejRS/adTimTKvLvL/r0WM7ffDAQAAALtiILK4HineG1tLtaI/QEQ8PzU+Ub91t/6NhfuLHbGTqWxRP+zjA/aSvgkAAAAcANXI4lTR4r+Wnv2QmIE9fiYAAABgdw1FFv+KFJ9/8bvFvHJRzEv/zNhXTt6Y6Jxh7vw218ljL0fExR2Oya+Ucw1OpsmUsk1Xe7wrhQMAAAAK1ZTFXyPF+3+uFt8vlbl50ugPAAAAT46UxQ8ixVcn11LasC79sY71/VsO+9j//j7/UPWlxYePluYevLay5fET1ZvfWV5Zmr639eH1tQu7ukNst44hAAAA7EAlZfHPSPH7xjutvLNcA6DsAdBONN++0c5Nq2nD0aLe4Omi3qA1huCpkZHO7S1T1o8wP16tvO+x3osNAAAAR0pKWQxGis/97pPl2v8nYlMbdBn3h0hxY/G5Mi4bzOOawwRqxe/q/bnG7HAeOx4pftloxkYRe7yMPdOOvZLH/ja/7nR3bLWMPduOHcljP4gUry1tHfuJduzVPHYpUvzsJ/Vm7Ik89mQZe64de/neYmOmby8YAAAADoBKyuJXkeLH/663hvx3t/+3W9vffqvd3r9pgr4PafPvtf2/1rHvcVkPcbysrxjYpr7ilUhx4dnnmuUp6gqa3QrW1zpo11f8I1Isfas7drCMPd2OvbLjFwsAAAAHSLP//x/v/rrV5b7MgcuvW+f/n9o4P2Cf8v/ONQnzey4/evP16UZjdmk/Nyof8azvR0TXnnQQSmHjv6WD8jx7ulH+UT0+KM/T60Zv/wcBAOAoyPP/u5Fi9b13W+3dZf5fdpVv5//vf6+d/49tvFCf8v/THfvGyvkGKgMR1ZX5h5XzEdXlR29+cW5++sHsg9mFq6MvjA6Pjl6/NlIZbDbut7d6flcAAABwWOX5/3Ck+PuPftoan7+T9v8TGy/Up/z/TMe+/J7tRr98z196LT4AAAAcCXn+/4tI8aeL77Tm0evO/zvm/3+rPc7+0mfXewu0agf6lP+f7dhXK+4bMbRLZQcAAAAAAAAAAAAAAAAAAICDopKy+E+keLc6kMoJ/3c0/9/Mxgv1afz/uY59M7E36//1/FIBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADgkMoii7lI8enza+nFfMe3I052fgIAAACH3v8CAAD//16XHzs=") write$binfmt_script(r0, &(0x7f00000008c0), 0xfecc) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000006ac0)='cpuacct.stat\x00', 0x275a, 0x0) openat$incfs(0xffffffffffffff9c, &(0x7f0000000640)='.log\x00', 0xa5d, 0x1) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x161442, 0xb6) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='pids.current\x00', 0x275a, 0x0) open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cpu.stat\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='freezer.state\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0) syz_open_dev$loop(&(0x7f0000000400), 0x0, 0x41) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='pids.current\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.sectors\x00', 0x275a, 0x0) 2.267924362s ago: executing program 1 (id=3093): sched_setscheduler(0x0, 0x2, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000002c0), 0x4) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) getsockopt$CAN_RAW_FD_FRAMES(0xffffffffffffffff, 0x65, 0x5, &(0x7f00000001c0), &(0x7f0000000240)=0x4) mount$9p_fd(0x0, &(0x7f0000000000)='.\x00', &(0x7f0000000080), 0x0, &(0x7f0000000500)={'trans=fd,', {}, 0x2c, {}, 0x2c, {[{@access_uid}, {@cache_fscache}]}}) syz_emit_vhci(&(0x7f0000000280)=ANY=[@ANYBLOB="040e0700081400c9"], 0xa) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) openat$hwrng(0xffffffffffffff9c, 0x0, 0x101800, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) ppoll(&(0x7f00000010c0)=[{0xffffffffffffffff, 0xad0}], 0x1, 0x0, 0x0, 0x0) bind$ax25(0xffffffffffffffff, 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, &(0x7f0000000400)={{0x3}}) 2.211429983s ago: executing program 8 (id=3094): sendmsg$NL80211_CMD_START_NAN(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x8}, 0x4004000) r0 = syz_io_uring_setup(0x186, &(0x7f0000000080)={0x0, 0x3416, 0x13100}, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r0, 0x2def, 0x0, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_SET_SREGS(r6, 0x4138ae84, &(0x7f0000000100)={{0x4, 0xdddd1000, 0x0, 0x2, 0x4, 0x0, 0x0, 0x2, 0x0, 0x8, 0x9, 0x10}, {0xffff1000, 0xd000, 0xc, 0x8, 0x0, 0x0, 0x0, 0x0, 0x7, 0x7, 0x0, 0xfe}, {0x3000, 0x5000, 0xc, 0x0, 0x7, 0x4, 0x0, 0x0, 0x3, 0x0, 0x0, 0xfc}, {0x3000, 0xd000, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0xfe, 0x0, 0x4}, {0xdddd0000, 0x3000, 0x9, 0x0, 0xff, 0x4, 0x6, 0xe, 0x0, 0x3c}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1, 0x0, 0x0, 0x80}, {0xdddd1000, 0x0, 0xa, 0x6, 0x0, 0x0, 0x3}, {0x0, 0x3000, 0x0, 0x0, 0x1, 0x1, 0x83, 0xa, 0x26, 0x5}, {0x80a0000}, {0xdddd1000, 0xff}, 0xddf8ffdb, 0x0, 0x0, 0x70, 0xfffffffffffffffe, 0xd801, 0x0, [0x0, 0x0, 0x1]}) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r7) r8 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r7, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x1}, 0x1c) listen(r8, 0x0) r9 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$sock_int(r9, 0x1, 0x8, &(0x7f0000000140), 0x4) connect$inet(r9, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) r10 = accept(r7, 0x0, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(r10, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[], 0xfffffdef}}, 0x1) recvfrom(r9, &(0x7f0000000180)=""/60, 0xfffffffffffffecb, 0x4100, 0x0, 0x0) 2.142611484s ago: executing program 5 (id=3095): r0 = io_uring_setup(0x1581, &(0x7f0000000a40)={0x0, 0x2000000, 0x40, 0x0, 0x3bd}) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000280), 0x22802, 0x0) socket$unix(0x1, 0x5, 0x0) socket$inet_dccp(0x2, 0x6, 0x0) socket$inet_udp(0x2, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) msgsnd(0x0, 0x0, 0x8, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x1c3302) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) pselect6(0x40, &(0x7f0000000000)={0x0, 0x0, 0x8000000000000000, 0x0, 0x0, 0x0, 0x0, 0x10000000}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x8, 0x0, 0x0, 0x2, 0x7}, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000400)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x103041, 0x1ae) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) bind$bt_l2cap(r3, &(0x7f0000000040)={0x1f, 0x0, @any, 0x4}, 0xe) connect$bt_l2cap(r3, 0x0, 0x0) setsockopt$bt_BT_SECURITY(r3, 0x112, 0x4, &(0x7f00000000c0)={0x3, 0x67}, 0x2) socket$netlink(0x10, 0x3, 0x0) r4 = socket$rxrpc(0x21, 0x2, 0xa) bind$rxrpc(r4, &(0x7f0000000000)=@in4={0x21, 0x4, 0x2, 0x10, {0x2, 0x4e20, @empty}}, 0x24) close_range(r0, r4, 0x0) 1.339585857s ago: executing program 5 (id=3096): syz_mount_image$bfs(&(0x7f0000000000), &(0x7f0000000240)='./bus\x00', 0x8008, &(0x7f0000000100)=ANY=[@ANYRES64=0x0], 0xf, 0xab, &(0x7f0000010140)="$eJzs1zGKwkAYBeB/s7CbdptFsLBO4x08ilhqI1aK4A3Ei3gVj5DewiKtiCOYiIidRQT5vmLgzWPgtbM7brubIiKtIlLRme7T3Wy+GA8n9Rl8pCwifiMij4jeX50Pg7r7avqyWo7K6vv58c+69b0AAMDrsug/5nNqLk7NL/Aa/m993vI+AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgHe7BAAA//+dfyiL") openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.current\x00', 0x275a, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file2\x00', 0x143042, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='rdma.current\x00', 0x275a, 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000140)='./file4\x00', 0x40, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file7\x00', 0x105042, 0x1ff) linkat(0xffffffffffffff9c, &(0x7f0000000000)='./file4\x00', 0xffffffffffffff9c, &(0x7f00000006c0)='./file5\x00', 0x0) syz_mount_image$udf(&(0x7f0000000000), &(0x7f0000000080)='./bus\x00', 0x1000000, &(0x7f0000000040)=ANY=[@ANYBLOB='\x00'], 0x2, 0x58a, &(0x7f0000000740)="$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") write$binfmt_script(r0, &(0x7f00000008c0), 0xfecc) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000006ac0)='cpuacct.stat\x00', 0x275a, 0x0) openat$incfs(0xffffffffffffff9c, &(0x7f0000000640)='.log\x00', 0xa5d, 0x1) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x161442, 0xb6) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='pids.current\x00', 0x275a, 0x0) open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='freezer.state\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.io_service_time_recursive\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0) syz_open_dev$loop(&(0x7f0000000400), 0x0, 0x41) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='pids.current\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.sectors\x00', 0x275a, 0x0) 1.148552651s ago: executing program 1 (id=3099): lsetxattr$system_posix_acl(&(0x7f0000000400)='.\x00', &(0x7f0000000440)='system.posix_acl_default\x00', &(0x7f00000000c0)=ANY=[@ANYBLOB="0200000001000000000000000200", @ANYRES32=0xee01, @ANYBLOB="02000000", @ANYRES32=0xee00, @ANYBLOB="02000000", @ANYRES32=0xee00, @ANYBLOB="02000000", @ANYRES32=0x0, @ANYBLOB="040000000000800008000000", @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB="100000000000000020"], 0x5c, 0x0) symlink(&(0x7f0000000040)='.\x00', &(0x7f0000000100)='./file0\x00') prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) add_key$keyring(&(0x7f0000000080), &(0x7f00000000c0)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-twofish-3way\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x20) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f00000004c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) r4 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x0, 0x0) mknodat$loop(r4, &(0x7f0000000340)='./file1\x00', 0x0, 0x0) chdir(&(0x7f0000000140)='./bus\x00') rename(&(0x7f0000000140)='./file1\x00', &(0x7f0000001900)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) lseek(0xffffffffffffffff, 0x10001, 0x0) 1.078108882s ago: executing program 8 (id=3100): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0x12, 0x5, &(0x7f0000000040)=@framed={{0x56, 0xa, 0x0, 0x0, 0x0, 0x7b, 0x11, 0x10}, [@initr0]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00'}, 0x10) shutdown(0xffffffffffffffff, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='numa_maps\x00') read$FUSE(0xffffffffffffffff, &(0x7f000000cb80)={0x2020}, 0x206c) r3 = fsopen(&(0x7f0000000000)='smb3\x00', 0x1) truncate(&(0x7f0000000080)='./file1\x00', 0xf000) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(0xffffffffffffffff, 0xc0185879, 0x0) r4 = socket$inet6(0xa, 0x6, 0x0) ioctl$int_in(r4, 0x5452, &(0x7f0000000100)=0x8000000000000001) bind$inet6(r4, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @empty}, 0x1c) r5 = socket$inet_dccp(0x2, 0x6, 0x0) syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000040)='./bus\x00', 0x1a00040, &(0x7f0000000200)={[{@utf8}, {@rodir}, {@uni_xlateno}, {@iocharset={'iocharset', 0x3d, 'macturkish'}}, {@shortname_win95}, {@uni_xlateno}, {@fat=@usefree}, {@fat=@codepage={'codepage', 0x3d, '737'}}, {@rodir}, {@iocharset={'iocharset', 0x3d, 'macinuit'}}, {@iocharset={'iocharset', 0x3d, 'cp949'}}, {@utf8no}]}, 0x3, 0x350, &(0x7f0000000580)="$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") connect$inet(r5, &(0x7f0000000000)={0x2, 0x4e20, @local}, 0x10) close_range(r4, 0xffffffffffffffff, 0x0) fsconfig$FSCONFIG_SET_STRING(r3, 0x1, &(0x7f0000000080)='source', 0x0, 0x0) 847.823696ms ago: executing program 5 (id=3102): openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x80002, 0x0) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x1a, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600722, 0x19) 42.248649ms ago: executing program 5 (id=3103): openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x80002, 0x0) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x1a, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600722, 0x19) keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=ANY=[], 0x2a, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2) ioctl$VIDIOC_S_INPUT(r2, 0xc0045627, &(0x7f0000000100)=0x3) ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(r2, 0xc0845657, &(0x7f0000000200)={0x0, @bt={0xa02, 0x870, 0x1, 0x2, 0xd59f80, 0x19f2, 0x3f, 0x19ef, 0x3, 0x8, 0x2800, 0x6, 0x2, 0xba2, 0xc, 0x30, {0x8, 0xffffffff}, 0xd0, 0x9}}) syz_io_uring_submit(0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f0000000600)={0x0, 0x0, 0x0}, 0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) openat$sysctl(0xffffffffffffff9c, 0x0, 0x1, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) 39.740439ms ago: executing program 8 (id=3104): syz_mount_image$bfs(&(0x7f0000000000), &(0x7f0000000240)='./bus\x00', 0x8008, &(0x7f0000000100)=ANY=[@ANYRES64=0x0], 0xf, 0xab, &(0x7f0000010140)="$eJzs1zGKwkAYBeB/s7CbdptFsLBO4x08ilhqI1aK4A3Ei3gVj5DewiKtiCOYiIidRQT5vmLgzWPgtbM7brubIiKtIlLRme7T3Wy+GA8n9Rl8pCwifiMij4jeX50Pg7r7avqyWo7K6vv58c+69b0AAMDrsug/5nNqLk7NL/Aa/m993vI+AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgHe7BAAA//+dfyiL") openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.current\x00', 0x275a, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file2\x00', 0x143042, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='rdma.current\x00', 0x275a, 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000140)='./file4\x00', 0x40, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file7\x00', 0x105042, 0x1ff) linkat(0xffffffffffffff9c, &(0x7f0000000000)='./file4\x00', 0xffffffffffffff9c, &(0x7f00000006c0)='./file5\x00', 0x0) syz_mount_image$udf(&(0x7f0000000000), &(0x7f0000000080)='./bus\x00', 0x1000000, &(0x7f0000000040)=ANY=[@ANYBLOB='\x00'], 0x2, 0x58a, &(0x7f0000000740)="$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") write$binfmt_script(r0, &(0x7f00000008c0), 0xfecc) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000006ac0)='cpuacct.stat\x00', 0x275a, 0x0) openat$incfs(0xffffffffffffff9c, &(0x7f0000000640)='.log\x00', 0xa5d, 0x1) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x161442, 0xb6) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='pids.current\x00', 0x275a, 0x0) open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cpu.stat\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='freezer.state\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.io_service_time_recursive\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0) syz_open_dev$loop(&(0x7f0000000400), 0x0, 0x41) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='pids.current\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.sectors\x00', 0x275a, 0x0) 0s ago: executing program 1 (id=3105): openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x80002, 0x0) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x1a, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600722, 0x19) keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=ANY=[], 0x2a, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2) ioctl$VIDIOC_S_INPUT(r2, 0xc0045627, &(0x7f0000000100)=0x3) kernel console output (not intermixed with test programs): debugfs directory [ 1774.741261][T17857] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1774.932524][ T4752] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1774.963091][ T4752] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1774.992472][T17857] 8021q: adding VLAN 0 to HW filter on device team0 [ 1775.036973][T18050] loop7: detected capacity change from 0 to 1764 [ 1776.039404][ T4409] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1776.390215][ T4752] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1776.684612][ T4752] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1776.790726][ T4752] bridge0: port 1(bridge_slave_0) entered blocking state [ 1776.798081][ T4752] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1777.204859][ T4752] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1777.244643][ T4752] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1777.277804][ T4752] bridge0: port 2(bridge_slave_1) entered blocking state [ 1777.285015][ T4752] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1777.403149][ T4752] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1777.428194][ T4752] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1777.472202][ T4752] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1777.507195][ T4752] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1777.546805][ T4752] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1777.657966][ T4752] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1777.667109][ T4752] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1777.687152][ T4752] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1778.556657][ T4409] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1778.587931][ T4752] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1778.600998][ T4752] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1778.731782][T18082] x_tables: duplicate underflow at hook 2 [ 1778.925744][ T4409] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1778.995870][ T4752] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1779.036668][ T4752] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1779.083376][T17857] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1779.195978][ T4409] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1781.683698][T17857] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1784.419516][ T4752] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1784.428250][ T4752] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1785.825693][T18159] netlink: 8 bytes leftover after parsing attributes in process `syz.8.2769'. [ 1788.890392][ T4783] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1788.931948][ T4783] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1790.020894][T18179] serio: Serial port ptm0 [ 1790.082528][T17857] device veth0_vlan entered promiscuous mode [ 1790.112592][ T8286] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1790.143252][ T8286] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1790.421339][ T8286] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1790.437722][ T8286] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1790.464653][T17942] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 1790.528514][T17857] device veth1_vlan entered promiscuous mode [ 1792.200597][T17942] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 1792.299330][T17942] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 1792.352277][T17942] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 1792.425178][T17857] device veth0_macvtap entered promiscuous mode [ 1792.455912][T17857] device veth1_macvtap entered promiscuous mode [ 1792.523021][T17857] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1792.555857][T17857] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1792.586962][T17857] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1792.897220][T17857] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1792.996175][T17857] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1793.076106][T17857] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1793.149619][T17857] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1793.194510][T17857] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1793.254485][T17857] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1793.302873][T17857] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1793.352728][T17857] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1793.391329][ T4354] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1793.455464][ T4354] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1793.545676][ T4354] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1793.620811][ T4354] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1794.026829][ T4354] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1794.750267][ T4354] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1794.787270][T17857] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1794.845703][T17857] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1794.885886][T17857] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1794.915650][T17857] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1794.955604][T17857] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1794.987957][T17857] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1795.005591][T17857] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1795.017617][T17857] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1795.030557][T17857] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1795.041630][T17857] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1795.054088][T17857] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1795.378054][T17942] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1796.436705][ T4354] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1796.451766][ T4354] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1796.483024][ T4409] device hsr_slave_0 left promiscuous mode [ 1796.522743][ T4409] device hsr_slave_1 left promiscuous mode [ 1796.565184][ T4409] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1796.585037][ T4409] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1796.593089][ T27] audit: type=1326 audit(20582388.894:95): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18249 comm="syz.7.2783" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff03bd8d169 code=0x7ffc0000 [ 1796.602373][ T4409] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1796.631353][ T27] audit: type=1326 audit(20582388.894:96): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18249 comm="syz.7.2783" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff03bd8d169 code=0x7ffc0000 [ 1796.701815][T18252] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2783'. [ 1796.707014][ T4409] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1796.737964][ T27] audit: type=1326 audit(20582388.894:97): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18249 comm="syz.7.2783" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff03bd8d169 code=0x7ffc0000 [ 1796.795458][ T4409] device bridge_slave_1 left promiscuous mode [ 1796.801815][ T4409] bridge0: port 2(bridge_slave_1) entered disabled state [ 1797.010973][ T4409] device bridge_slave_0 left promiscuous mode [ 1797.045193][ T4409] bridge0: port 1(bridge_slave_0) entered disabled state [ 1797.067262][ T27] audit: type=1326 audit(20582388.894:98): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18249 comm="syz.7.2783" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff03bd8d169 code=0x7ffc0000 [ 1797.089818][ T27] audit: type=1326 audit(20582388.894:99): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18249 comm="syz.7.2783" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff03bd8d169 code=0x7ffc0000 [ 1797.858851][T18264] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 1797.870795][T18264] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 1798.144513][ T27] audit: type=1326 audit(20582388.894:100): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18249 comm="syz.7.2783" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7ff03bd8d169 code=0x7ffc0000 [ 1798.510551][ T27] audit: type=1326 audit(20582388.894:101): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18249 comm="syz.7.2783" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff03bd8d169 code=0x7ffc0000 [ 1800.872660][ T27] audit: type=1326 audit(20582388.894:102): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18249 comm="syz.7.2783" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff03bd8d169 code=0x7ffc0000 [ 1800.932728][ T4409] device veth1_macvtap left promiscuous mode [ 1800.961671][ T4409] device veth0_macvtap left promiscuous mode [ 1800.989509][ T4409] device veth1_vlan left promiscuous mode [ 1801.012391][ T27] audit: type=1326 audit(20582388.894:103): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18249 comm="syz.7.2783" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7ff03bd8d169 code=0x7ffc0000 [ 1801.038889][ T4409] device veth0_vlan left promiscuous mode [ 1801.152297][ T27] audit: type=1326 audit(20582389.174:104): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18249 comm="syz.7.2783" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff03bd8d169 code=0x7ffc0000 [ 1803.280674][ T9566] Bluetooth: hci1: command 0x0411 tx timeout [ 1803.450352][ T4409] team0 (unregistering): Port device team_slave_1 removed [ 1803.527542][T18294] I/O error, dev loop5, sector 128 op 0x0:(READ) flags 0x1000 phys_seg 1 prio class 2 [ 1803.552700][T18294] gfs2: error 10 reading superblock [ 1803.683041][ T4409] team0 (unregistering): Port device team_slave_0 removed [ 1803.787419][ T4409] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1804.381034][ T4409] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1805.463465][T18302] loop5: detected capacity change from 0 to 2048 [ 1805.525165][T18302] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1807.040072][T18309] trusted_key: encrypted_key: insufficient parameters specified [ 1811.687392][T17620] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 1811.917245][T17620] usb 9-1: Using ep0 maxpacket: 16 [ 1811.943409][T17620] usb 9-1: config 0 has an invalid interface number: 17 but max is 0 [ 1812.027250][T17620] usb 9-1: config 0 has no interface number 0 [ 1812.149803][T17620] usb 9-1: New USB device found, idVendor=0408, idProduct=4034, bcdDevice=dd.cd [ 1812.180417][T17620] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1812.225939][T17620] usb 9-1: Product: syz [ 1812.366840][T17620] usb 9-1: Manufacturer: syz [ 1812.391861][T17620] usb 9-1: SerialNumber: syz [ 1812.433212][T17620] usb 9-1: config 0 descriptor?? [ 1812.495878][T17620] usb 9-1: Found UVC 0.00 device syz (0408:4034) [ 1812.689293][T17620] usb 9-1: No valid video chain found. [ 1812.714788][T17620] usb 9-1: USB disconnect, device number 2 [ 1813.408901][ T4409] bond0 (unregistering): Released all slaves [ 1813.504418][ T4252] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1813.519632][ T4252] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1813.531853][ T4252] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1813.540815][ T4252] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1813.548599][ T4252] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 1813.556797][ T4252] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1813.912145][T17857] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1813.921766][T17857] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1813.931431][T17857] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1815.091595][T17857] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1815.335937][ T4752] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1815.354512][ T4752] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1815.360907][T18351] loop5: detected capacity change from 0 to 512 [ 1815.385735][T17942] 8021q: adding VLAN 0 to HW filter on device team0 [ 1815.457756][T18351] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 1815.605476][ T9566] Bluetooth: hci3: command 0x0409 tx timeout [ 1815.648827][T18351] EXT4-fs (loop5): 1 truncate cleaned up [ 1815.654543][T18351] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 1815.705346][ T8124] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1815.714172][ T8124] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1815.728159][ T4752] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1815.846275][ T4752] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1815.928089][ T8124] bridge0: port 1(bridge_slave_0) entered blocking state [ 1815.935319][ T8124] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1816.555224][ T8124] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1816.573812][ T8124] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1816.647691][T18362] Bluetooth: MGMT ver 1.22 [ 1817.339385][T14092] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1817.437248][T16095] EXT4-fs (loop5): unmounting filesystem. [ 1817.618834][T14092] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1817.696426][ T4252] Bluetooth: hci3: command 0x041b tx timeout [ 1817.928923][T14092] bridge0: port 2(bridge_slave_1) entered blocking state [ 1817.936098][T14092] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1818.076616][T14095] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1818.225356][T14092] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1818.267204][T14092] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1818.321254][T14092] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1818.858943][T16156] Bluetooth: hci0: command 0x0c1a tx timeout [ 1818.876310][ T9566] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 1819.188439][T16156] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1819.204047][T16156] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1819.223882][T16156] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1819.295046][T16156] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1819.303123][ T4252] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 1819.310703][T16156] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1819.919390][ T9566] Bluetooth: hci3: command 0x040f tx timeout [ 1820.820352][T18395] loop5: detected capacity change from 0 to 16 [ 1820.873136][T18395] erofs: (device loop5): mounted with root inode @ nid 36. [ 1821.218420][T14092] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1821.424952][T16156] Bluetooth: hci2: command 0x0409 tx timeout [ 1822.002065][ T9566] Bluetooth: hci3: command 0x0419 tx timeout [ 1822.285197][T18407] vhci_hcd vhci_hcd.0: port 0 already used [ 1823.045634][T18338] chnl_net:caif_netlink_parms(): no params data found [ 1823.461379][ T9566] Bluetooth: hci2: command 0x041b tx timeout [ 1823.868116][T16156] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1823.880974][T16156] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1823.893114][T16156] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1823.906594][ T4252] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1823.914582][ T4252] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 1823.922201][ T4252] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1824.060451][T18425] ubi31: detaching mtd0 [ 1824.099644][T18425] ubi31: mtd0 is detached [ 1824.995276][ T4409] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1825.190692][ T27] kauditd_printk_skb: 2 callbacks suppressed [ 1825.190714][ T27] audit: type=1326 audit(20582417.478:107): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18430 comm="syz.8.2812" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f380bb8d169 code=0x0 [ 1825.776781][ T27] audit: type=1326 audit(20582418.098:108): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18427 comm="syz.5.2815" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fbb77d8d169 code=0x0 [ 1825.821538][ T4409] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1826.701961][T18441] autofs4:pid:18441:autofs_fill_super: called with bogus options [ 1826.719302][ T9566] Bluetooth: hci0: command 0x0409 tx timeout [ 1827.023755][ T4252] Bluetooth: hci2: command 0x040f tx timeout [ 1827.191247][ T4409] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1827.266152][T18338] bridge0: port 1(bridge_slave_0) entered blocking state [ 1828.758766][T18338] bridge0: port 1(bridge_slave_0) entered disabled state [ 1828.790471][T18338] device bridge_slave_0 entered promiscuous mode [ 1828.809077][ T4252] Bluetooth: hci0: command 0x041b tx timeout [ 1828.822738][T18338] bridge0: port 2(bridge_slave_1) entered blocking state [ 1828.830134][T18338] bridge0: port 2(bridge_slave_1) entered disabled state [ 1828.838455][T18338] device bridge_slave_1 entered promiscuous mode [ 1829.088717][ T9566] Bluetooth: hci2: command 0x0419 tx timeout [ 1829.836160][ T4409] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1829.912735][T18381] chnl_net:caif_netlink_parms(): no params data found [ 1830.032065][T18338] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1830.035238][T18338] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1830.261510][T18338] team0: Port device team_slave_0 added [ 1830.273561][T18338] team0: Port device team_slave_1 added [ 1830.525764][T18477] loop8: detected capacity change from 0 to 1764 [ 1831.671920][ T4252] Bluetooth: hci0: command 0x040f tx timeout [ 1831.933073][T18477] iso9660: Corrupted directory entry in block 2 of inode 1920 [ 1832.053657][T18338] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1832.066133][T18338] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1832.096685][T18338] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1832.781632][T18338] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1832.916027][T18338] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1832.959250][T18338] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1832.974292][T18381] bridge0: port 1(bridge_slave_0) entered blocking state [ 1832.982155][T18381] bridge0: port 1(bridge_slave_0) entered disabled state [ 1832.990656][T18381] device bridge_slave_0 entered promiscuous mode [ 1833.067312][ T126] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 1833.215114][T18381] bridge0: port 2(bridge_slave_1) entered blocking state [ 1833.226564][T18381] bridge0: port 2(bridge_slave_1) entered disabled state [ 1833.235231][T18381] device bridge_slave_1 entered promiscuous mode [ 1833.335304][T18497] netlink: 8 bytes leftover after parsing attributes in process `syz.8.2824'. [ 1835.045652][ T4252] Bluetooth: hci0: command 0x0419 tx timeout [ 1835.052689][ T126] usb 6-1: Using ep0 maxpacket: 16 [ 1835.181194][ T126] usb 6-1: unable to read config index 0 descriptor/start: -71 [ 1835.189195][ T126] usb 6-1: can't read configurations, error -71 [ 1835.745925][T18338] device hsr_slave_0 entered promiscuous mode [ 1835.809473][T18338] device hsr_slave_1 entered promiscuous mode [ 1835.829408][T18338] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1835.842733][T18338] Cannot create hsr debugfs directory [ 1836.920592][T18381] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1836.953096][T18417] chnl_net:caif_netlink_parms(): no params data found [ 1837.471713][T18381] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1837.493752][T18512] loop5: detected capacity change from 0 to 1024 [ 1837.494545][T18518] Bluetooth: MGMT ver 1.22 [ 1837.564137][T18512] hfsplus: invalid btree flag [ 1837.575489][T18512] hfsplus: failed to load attributes file [ 1838.058836][T18381] team0: Port device team_slave_0 added [ 1838.282589][T18381] team0: Port device team_slave_1 added [ 1838.456661][T18528] loop8: detected capacity change from 0 to 32768 [ 1838.673783][T18381] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1838.673819][T18381] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1838.673865][T18381] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1838.676402][T18381] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1839.081572][T18381] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1839.157706][T18381] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1840.007361][T18417] bridge0: port 1(bridge_slave_0) entered blocking state [ 1840.015295][T18417] bridge0: port 1(bridge_slave_0) entered disabled state [ 1840.031416][T18541] loop5: detected capacity change from 0 to 64 [ 1840.050882][T18417] device bridge_slave_0 entered promiscuous mode [ 1840.093485][T18417] bridge0: port 2(bridge_slave_1) entered blocking state [ 1840.116759][T18417] bridge0: port 2(bridge_slave_1) entered disabled state [ 1840.156637][T18417] device bridge_slave_1 entered promiscuous mode [ 1843.297046][T18381] device hsr_slave_0 entered promiscuous mode [ 1843.299514][T18381] device hsr_slave_1 entered promiscuous mode [ 1844.013682][T18381] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1844.041326][T18381] Cannot create hsr debugfs directory [ 1844.068518][T18417] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1844.216233][T18593] loop8: detected capacity change from 0 to 1764 [ 1844.386103][T18417] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1844.415949][T18596] loop8: detected capacity change from 0 to 1764 [ 1845.364763][T16659] I/O error, dev loop8, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 1846.447556][T18610] loop8: detected capacity change from 0 to 128 [ 1847.413672][T18417] team0: Port device team_slave_0 added [ 1847.431945][T18613] netlink: 'syz.5.2842': attribute type 10 has an invalid length. [ 1847.498927][T18613] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1847.548930][T18613] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 1847.595134][T18615] device bond0 entered promiscuous mode [ 1847.614170][T18615] device bond_slave_0 entered promiscuous mode [ 1847.636118][T18615] device bond_slave_1 entered promiscuous mode [ 1847.646160][T18615] device batadv0 entered promiscuous mode [ 1847.735201][T18417] team0: Port device team_slave_1 added [ 1847.754874][T18623] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 1847.795942][ T4409] device hsr_slave_0 left promiscuous mode [ 1847.859392][ T4409] device hsr_slave_1 left promiscuous mode [ 1847.887628][ T4409] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1847.909130][ T4409] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1847.938594][ T4409] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1847.947932][ T4409] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1847.967516][ T4409] device bridge_slave_1 left promiscuous mode [ 1847.977515][ T4409] bridge0: port 2(bridge_slave_1) entered disabled state [ 1848.004714][ T4409] device bridge_slave_0 left promiscuous mode [ 1848.019278][ T4409] bridge0: port 1(bridge_slave_0) entered disabled state [ 1848.084357][ T4409] device veth1_macvtap left promiscuous mode [ 1848.090837][ T4409] device veth0_macvtap left promiscuous mode [ 1848.097505][ T4409] device veth1_vlan left promiscuous mode [ 1848.103901][ T4409] device veth0_vlan left promiscuous mode [ 1850.429878][T18645] loop5: detected capacity change from 0 to 256 [ 1851.838055][ T4409] team0 (unregistering): Port device team_slave_1 removed [ 1851.943769][T18649] hub 2-0:1.0: USB hub found [ 1851.953167][T18649] hub 2-0:1.0: 1 port detected [ 1852.736730][ T4409] team0 (unregistering): Port device team_slave_0 removed [ 1852.855834][ T4409] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1852.940052][ T4409] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1855.114038][ T4252] Bluetooth: hci4: command 0x0406 tx timeout [ 1855.327391][ T4409] bond0 (unregistering): Released all slaves [ 1855.663425][T18417] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1855.679321][T18417] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1855.697444][T18662] loop5: detected capacity change from 0 to 64 [ 1855.753902][T18417] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1855.877870][T18667] futex_wake_op: syz.8.2852 tries to shift op by -1; fix this program [ 1856.365694][T18417] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1856.372808][T18417] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1856.431222][T18417] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1856.657474][T18417] device hsr_slave_0 entered promiscuous mode [ 1856.683210][T18417] device hsr_slave_1 entered promiscuous mode [ 1856.698737][T18338] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 1856.797168][T18338] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 1857.139770][T18338] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 1857.549856][T18338] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 1858.431113][T18338] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1859.311815][T18338] 8021q: adding VLAN 0 to HW filter on device team0 [ 1859.476171][ T8286] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1859.515703][ T8286] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1859.524126][ T8286] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1859.533569][ T8286] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1859.542282][ T8286] bridge0: port 1(bridge_slave_0) entered blocking state [ 1859.549471][ T8286] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1859.559068][ T8286] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1859.574254][ T8286] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1859.586951][ T8286] bridge0: port 2(bridge_slave_1) entered blocking state [ 1859.594215][ T8286] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1859.605221][ T8286] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1859.614963][ T8286] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1859.624541][ T8286] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1859.634076][ T8286] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1859.642973][ T8286] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1859.881109][ T8286] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1860.220449][ T8286] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1860.245062][ T8286] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1860.305059][ T8286] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1860.334647][ T8286] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1860.367869][ T8286] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1860.388597][ T8286] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1860.451118][T18693] Process accounting resumed [ 1860.777733][T18338] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1861.772258][T18716] loop8: detected capacity change from 0 to 64 [ 1865.071500][T18738] loop5: detected capacity change from 0 to 512 [ 1865.131158][T18738] EXT4-fs: Ignoring removed i_version option [ 1865.157678][T18738] EXT4-fs: Ignoring removed mblk_io_submit option [ 1865.216368][ T4768] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1865.226132][T18738] ext4: Unknown parameter 'seclabel' [ 1865.233861][ T4768] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1865.268232][T18338] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1865.329031][ T4768] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1865.351118][ T4768] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1865.415732][ T4760] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1865.501540][ T4760] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1865.544842][T18338] device veth0_vlan entered promiscuous mode [ 1865.739544][ T4760] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1865.754732][ T4760] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1865.858377][T18338] device veth1_vlan entered promiscuous mode [ 1866.116077][T18338] device veth0_macvtap entered promiscuous mode [ 1866.917620][ T4768] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 1866.938283][ T4768] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 1866.947076][T18756] loop8: detected capacity change from 0 to 512 [ 1866.972524][ T4768] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1867.000624][T18756] EXT4-fs error (device loop8): ext4_orphan_get:1400: inode #15: comm syz.8.2866: casefold flag without casefold feature [ 1867.021339][ T4768] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1867.040432][T18756] EXT4-fs error (device loop8): ext4_orphan_get:1405: comm syz.8.2866: couldn't read orphan inode 15 (err -117) [ 1867.056736][T18338] device veth1_macvtap entered promiscuous mode [ 1867.074596][T18756] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: writeback. [ 1867.314068][ T4768] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1867.356059][T18338] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1867.377115][T18338] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1867.422390][T18338] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1867.569591][T18338] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1867.620580][T18338] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1867.680425][T18338] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1867.733172][T18338] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1867.759393][ T4301] usb 9-1: new high-speed USB device number 3 using dummy_hcd [ 1867.876295][T18338] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1867.994898][ T4301] usb 9-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1868.060544][ T4301] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1868.140203][ T4301] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1868.140872][T18338] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1868.168226][ T4301] usb 9-1: config 1 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 1868.172086][T18338] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1868.210493][ T4301] usb 9-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1868.229648][T18338] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1868.230692][ T4301] usb 9-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1868.261483][ T4301] usb 9-1: Product: syz [ 1868.265771][ T4301] usb 9-1: Manufacturer: syz [ 1868.267044][T18338] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1868.290262][ T4301] cdc_wdm 9-1:1.0: skipping garbage [ 1868.301520][T18767] loop5: detected capacity change from 0 to 4096 [ 1868.308222][ T4301] cdc_wdm 9-1:1.0: skipping garbage [ 1868.308839][T18338] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1868.314257][ T4301] cdc_wdm: probe of 9-1:1.0 failed with error -22 [ 1868.361289][T18338] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1868.375368][T18767] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 1868.411540][T18338] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1868.543134][T18762] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1868.552938][T18762] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1868.619551][T18338] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1868.658861][T18338] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1868.794239][T18773] overlayfs: missing 'lowerdir' [ 1868.835442][T18338] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1869.569200][T16095] EXT4-fs (loop5): unmounting filesystem. [ 1869.580240][ T4760] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1869.616748][ T4760] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1869.675265][ T4760] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1869.704924][ T4760] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1869.841497][T18338] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1869.876378][T18338] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1869.889554][T18781] loop5: detected capacity change from 0 to 1024 [ 1869.908545][T18338] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1869.930668][T18338] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1870.053061][T12684] usb 9-1: USB disconnect, device number 3 [ 1870.099614][T17600] EXT4-fs (loop8): unmounting filesystem. [ 1870.631814][T18791] loop8: detected capacity change from 0 to 1024 [ 1870.646272][T18791] EXT4-fs: Ignoring removed orlov option [ 1870.667239][T18791] EXT4-fs (loop8): Test dummy encryption mode enabled [ 1870.741362][T18791] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: writeback. [ 1871.344563][T17600] EXT4-fs (loop8): unmounting filesystem. [ 1871.361882][ T8286] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1871.482649][ T8286] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1872.127014][ T4409] device hsr_slave_0 left promiscuous mode [ 1872.163886][ T4409] device hsr_slave_1 left promiscuous mode [ 1872.183926][ T4409] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1872.254684][T18806] loop5: detected capacity change from 0 to 2048 [ 1872.280429][T18806] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1872.434746][ T4409] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1872.448529][ T4409] device bridge_slave_1 left promiscuous mode [ 1872.455047][ T4409] bridge0: port 2(bridge_slave_1) entered disabled state [ 1872.479522][ T4409] device bridge_slave_0 left promiscuous mode [ 1874.596122][ T4409] bridge0: port 1(bridge_slave_0) entered disabled state [ 1875.827460][ T9566] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1875.872435][ T9566] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1875.887862][ T9566] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1875.904137][ T9566] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1875.913471][ T9566] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 1875.921014][ T9566] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1876.023308][ T4409] team0 (unregistering): Port device team_slave_1 removed [ 1876.113560][ T4409] team0 (unregistering): Port device team_slave_0 removed [ 1876.258334][ T4409] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1876.396178][ T4409] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1877.517616][ T9566] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1877.553329][ T9566] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1877.570240][ T9566] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1877.581222][ T9566] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1877.589545][ T9566] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 1877.599980][ T9566] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1877.637612][ T4409] bond0 (unregistering): Released all slaves [ 1877.786803][ T4473] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1877.809819][T18822] netlink: 16 bytes leftover after parsing attributes in process `syz.8.2873'. [ 1877.820095][T18825] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1877.837623][T18825] device batadv_slave_1 entered promiscuous mode [ 1877.974505][ T4252] Bluetooth: hci1: command 0x0409 tx timeout [ 1878.213192][T18417] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 1878.305832][T18869] loop8: detected capacity change from 0 to 64 [ 1879.057604][T18417] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 1879.163514][T18417] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 1879.291675][T18417] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 1879.461362][T18876] loop5: detected capacity change from 0 to 1024 [ 1879.669649][ T4252] Bluetooth: hci5: command 0x0409 tx timeout [ 1880.065414][ T4252] Bluetooth: hci1: command 0x041b tx timeout [ 1880.924876][T18888] 9pnet_fd: Insufficient options for proto=fd [ 1881.686239][T18895] loop8: detected capacity change from 0 to 256 [ 1881.732370][ T4252] Bluetooth: hci5: command 0x041b tx timeout [ 1882.132036][ T4252] Bluetooth: hci1: command 0x040f tx timeout [ 1882.472657][T18831] chnl_net:caif_netlink_parms(): no params data found [ 1882.700693][T18863] chnl_net:caif_netlink_parms(): no params data found [ 1882.934831][T18831] bridge0: port 1(bridge_slave_0) entered blocking state [ 1882.961707][T18831] bridge0: port 1(bridge_slave_0) entered disabled state [ 1882.990614][T18831] device bridge_slave_0 entered promiscuous mode [ 1883.060323][T18831] bridge0: port 2(bridge_slave_1) entered blocking state [ 1883.075359][T18831] bridge0: port 2(bridge_slave_1) entered disabled state [ 1883.106430][T18831] device bridge_slave_1 entered promiscuous mode [ 1884.813257][ T4252] Bluetooth: hci5: command 0x040f tx timeout [ 1884.819307][ T4252] Bluetooth: hci1: command 0x0419 tx timeout [ 1885.181560][ T9566] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1885.192522][ T9566] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1885.207719][ T9566] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1885.221979][ T9566] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1885.245531][ T9566] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 1885.255901][ T9566] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1885.580667][ T27] audit: type=1326 audit(20582477.928:109): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18935 comm="syz.5.2884" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbb77d8d169 code=0x7fc00000 [ 1886.315481][ T27] audit: type=1326 audit(20582478.578:110): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18935 comm="syz.5.2884" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fbb77d8d169 code=0x7fc00000 [ 1886.348528][ T27] audit: type=1326 audit(20582478.578:111): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18935 comm="syz.5.2884" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbb77d8d169 code=0x7fc00000 [ 1886.420100][ T27] audit: type=1326 audit(20582478.578:112): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18935 comm="syz.5.2884" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbb77d8d169 code=0x7fc00000 [ 1886.493789][ T27] audit: type=1326 audit(20582478.578:113): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18935 comm="syz.5.2884" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbb77d8d169 code=0x7fc00000 [ 1886.522984][ T27] audit: type=1326 audit(20582478.578:114): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18935 comm="syz.5.2884" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbb77d8d169 code=0x7fc00000 [ 1886.553071][ T27] audit: type=1326 audit(20582478.578:115): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18935 comm="syz.5.2884" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbb77d8d169 code=0x7fc00000 [ 1886.577609][ T27] audit: type=1326 audit(20582478.578:116): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18935 comm="syz.5.2884" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbb77d8d169 code=0x7fc00000 [ 1886.603301][ T27] audit: type=1326 audit(20582478.578:117): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18935 comm="syz.5.2884" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbb77d8d169 code=0x7fc00000 [ 1886.854418][ T9566] Bluetooth: hci5: command 0x0419 tx timeout [ 1887.485544][ T4252] Bluetooth: hci0: command 0x0409 tx timeout [ 1887.839512][T18831] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1887.865105][T18863] bridge0: port 1(bridge_slave_0) entered blocking state [ 1887.872628][T18863] bridge0: port 1(bridge_slave_0) entered disabled state [ 1888.350773][T18863] device bridge_slave_0 entered promiscuous mode [ 1888.405078][T18831] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1888.440493][T18863] bridge0: port 2(bridge_slave_1) entered blocking state [ 1888.448370][T18863] bridge0: port 2(bridge_slave_1) entered disabled state [ 1888.540577][T18863] device bridge_slave_1 entered promiscuous mode [ 1888.997955][T18831] team0: Port device team_slave_0 added [ 1890.288384][ T4252] Bluetooth: hci0: command 0x041b tx timeout [ 1890.295715][T18863] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1890.409020][T18831] team0: Port device team_slave_1 added [ 1890.978223][T18863] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1891.085212][T18987] loop5: detected capacity change from 0 to 1024 [ 1891.321837][T18831] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1892.607889][ T9566] Bluetooth: hci0: command 0x040f tx timeout [ 1893.234440][T18831] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1893.236966][ T4473] hfsplus: b-tree write err: -5, ino 4 [ 1893.260673][ C1] vkms_vblank_simulate: vblank timer overrun [ 1893.283777][T18831] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1893.327297][T18863] team0: Port device team_slave_0 added [ 1893.343942][T18831] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1893.357479][T18831] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1893.404004][T18831] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1893.558663][T18863] team0: Port device team_slave_1 added [ 1893.711454][T18863] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1893.729151][T18863] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1893.773898][T18863] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1893.884873][T18863] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1893.894806][T18863] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1893.922966][T18863] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1894.668878][T18831] device hsr_slave_0 entered promiscuous mode [ 1894.685860][ T9566] Bluetooth: hci0: command 0x0419 tx timeout [ 1894.701140][T18831] device hsr_slave_1 entered promiscuous mode [ 1894.716200][T18831] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1894.724229][T18831] Cannot create hsr debugfs directory [ 1895.486580][T18938] chnl_net:caif_netlink_parms(): no params data found [ 1895.759708][ T4409] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1895.820142][T19029] loop5: detected capacity change from 0 to 64 [ 1895.838006][T18863] device hsr_slave_0 entered promiscuous mode [ 1895.871159][T19032] loop8: detected capacity change from 0 to 64 [ 1895.881946][T18863] device hsr_slave_1 entered promiscuous mode [ 1895.910687][T18863] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1895.939723][T18863] Cannot create hsr debugfs directory [ 1896.123027][ T4409] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1897.338966][ T4409] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1897.501718][T19052] loop8: detected capacity change from 0 to 4096 [ 1897.542452][T19052] ntfs3: loop8: try to read out of volume at offset 0x3fffffc0c00 [ 1897.594468][T19052] ntfs3: loop8: try to read out of volume at offset 0x3fffffc0c00 [ 1897.648910][T19052] ntfs3: loop8: try to read out of volume at offset 0x3fffffc0c00 [ 1897.669173][T19052] ntfs3: loop8: try to read out of volume at offset 0x3fffffc0c00 [ 1897.684294][T19052] ntfs3: loop8: try to read out of volume at offset 0x3fffffc1c00 [ 1897.698606][ T4409] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1897.704180][T19052] ntfs3: loop8: try to read out of volume at offset 0x3fffffc2c00 [ 1897.717605][T19052] ntfs3: loop8: try to read out of volume at offset 0x3fffffc4c00 [ 1897.728932][T19052] ntfs3: loop8: try to read out of volume at offset 0x3fffffc8c00 [ 1897.739571][T19052] ntfs3: loop8: try to read out of volume at offset 0x3fffffd0c00 [ 1897.753361][T19052] ntfs3: loop8: try to read out of volume at offset 0x3fffffe0c00 [ 1897.769829][T18938] bridge0: port 1(bridge_slave_0) entered blocking state [ 1897.778377][T18938] bridge0: port 1(bridge_slave_0) entered disabled state [ 1897.792762][T18938] device bridge_slave_0 entered promiscuous mode [ 1897.827906][T18938] bridge0: port 2(bridge_slave_1) entered blocking state [ 1897.838971][T18938] bridge0: port 2(bridge_slave_1) entered disabled state [ 1897.883864][T18938] device bridge_slave_1 entered promiscuous mode [ 1898.100531][T18938] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1898.276636][T18938] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1898.446270][T18938] team0: Port device team_slave_0 added [ 1898.470165][T18938] team0: Port device team_slave_1 added [ 1898.639046][T19070] loop5: detected capacity change from 0 to 2048 [ 1898.745316][T19070] Alternate GPT is invalid, using primary GPT. [ 1898.752001][T19070] loop5: p1 p2 p3 [ 1899.042263][T18938] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1899.873145][T18938] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1899.995333][T18938] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1900.037243][T18938] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1900.057214][T18938] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1900.058426][T19081] loop8: detected capacity change from 0 to 64 [ 1900.083258][ C0] vkms_vblank_simulate: vblank timer overrun [ 1900.107315][T18938] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1900.337737][T19085] loop5: detected capacity change from 0 to 64 [ 1900.569444][T19091] loop8: detected capacity change from 0 to 64 [ 1900.824083][T18938] device hsr_slave_0 entered promiscuous mode [ 1900.859730][T18938] device hsr_slave_1 entered promiscuous mode [ 1900.979480][T18938] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1900.994093][T18938] Cannot create hsr debugfs directory [ 1901.048631][T19098] loop8: detected capacity change from 0 to 128 [ 1904.245073][T19125] loop8: detected capacity change from 0 to 64 [ 1905.249102][T19134] loop5: detected capacity change from 0 to 64 [ 1905.429137][T19136] loop8: detected capacity change from 0 to 64 [ 1906.733351][T19147] loop5: detected capacity change from 0 to 64 [ 1906.747139][ T4409] device hsr_slave_0 left promiscuous mode [ 1906.842005][ T4409] device hsr_slave_1 left promiscuous mode [ 1906.885389][ T4409] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1907.003927][ T4409] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1907.060971][ T4409] device bridge_slave_1 left promiscuous mode [ 1907.067370][ T4409] bridge0: port 2(bridge_slave_1) entered disabled state [ 1907.308553][ T4409] device bridge_slave_0 left promiscuous mode [ 1907.316757][ T4409] bridge0: port 1(bridge_slave_0) entered disabled state [ 1907.393720][ T4409] device hsr_slave_0 left promiscuous mode [ 1907.453032][ T4409] device hsr_slave_1 left promiscuous mode [ 1907.492580][ T4409] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1907.519357][ T4409] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1907.530599][ T4409] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1907.562108][ T4409] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1907.581228][ T4409] device bridge_slave_1 left promiscuous mode [ 1907.591631][ T4409] bridge0: port 2(bridge_slave_1) entered disabled state [ 1907.959031][T19153] loop5: detected capacity change from 0 to 32768 [ 1908.122489][ T4409] device bridge_slave_0 left promiscuous mode [ 1908.134123][ T4409] bridge0: port 1(bridge_slave_0) entered disabled state [ 1908.153804][T19153] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 1908.162788][T19153] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 1908.288466][T19153] gfs2: fsid=syz:syz.s: journal 0 mapped with 5 extents in 1ms [ 1908.614034][T19153] gfs2: fsid=syz:syz.s: first mount done, others may mount [ 1908.742802][ T4409] device veth1_macvtap left promiscuous mode [ 1908.769300][ T4409] device veth0_macvtap left promiscuous mode [ 1908.908863][ T4409] device veth1_vlan left promiscuous mode [ 1908.914871][ T4409] device veth0_vlan left promiscuous mode [ 1910.051915][T19178] overlayfs: failed to clone upperpath [ 1911.238260][T19188] loop5: detected capacity change from 0 to 64 [ 1911.426567][ T4409] team0 (unregistering): Port device team_slave_1 removed [ 1911.541099][ T4409] team0 (unregistering): Port device team_slave_0 removed [ 1911.812651][ T4409] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1912.556872][T19198] netlink: 40 bytes leftover after parsing attributes in process `syz.8.2929'. [ 1913.803115][ T4409] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1915.214294][ T4409] bond0 (unregistering): Released all slaves [ 1915.286045][T19212] overlayfs: failed to clone upperpath [ 1917.168330][ T4409] team0 (unregistering): Port device team_slave_1 removed [ 1917.396150][ T4409] team0 (unregistering): Port device team_slave_0 removed [ 1917.540303][ T4409] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1917.701186][ T4409] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1919.098008][ T4409] bond0 (unregistering): Released all slaves [ 1919.220958][T18831] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 1919.231336][T18831] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 1919.312069][T18831] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 1919.604158][T18831] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 1921.824697][T18831] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1922.632789][ T4300] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1924.391926][ T4300] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1924.488489][T19257] loop5: detected capacity change from 0 to 64 [ 1924.538776][T18831] 8021q: adding VLAN 0 to HW filter on device team0 [ 1924.603071][ T4300] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1924.612744][ T4300] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1924.660774][ T4300] bridge0: port 1(bridge_slave_0) entered blocking state [ 1924.667932][ T4300] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1924.732725][T18831] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1924.752345][T18831] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1924.844646][ T4300] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1924.891990][ T4300] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1924.918727][ T4300] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1925.285410][ T4300] bridge0: port 2(bridge_slave_1) entered blocking state [ 1925.292739][ T4300] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1925.617446][ T4300] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1925.637430][ T4300] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1925.651807][ T4300] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1925.665187][ T4300] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1925.674550][ T4300] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1925.687226][ T4300] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1925.700217][T19275] netlink: 48 bytes leftover after parsing attributes in process `syz.5.2945'. [ 1925.709909][ T4300] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1926.276421][ T4300] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1926.296768][ T4300] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1926.340328][ T4300] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1926.362021][ T4300] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1926.370906][ T4300] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1926.626791][T19282] loop5: detected capacity change from 0 to 64 [ 1926.918451][T18863] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 1926.976419][T18863] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 1927.090349][T18863] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 1927.110849][T18863] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 1927.272880][ T4300] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1927.296337][ T4300] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1927.347167][T18831] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1927.462475][T18938] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 1927.486113][T18938] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 1927.560080][T18938] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 1927.585642][T18938] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 1927.632741][T14088] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1927.650733][T14088] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1927.782824][T18863] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1927.829288][T14088] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1927.852616][T14088] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1927.910817][T18831] device veth0_vlan entered promiscuous mode [ 1927.937153][T18863] 8021q: adding VLAN 0 to HW filter on device team0 [ 1928.036768][T14088] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1928.080006][T14088] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1928.111292][T14088] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1928.138787][T14088] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1928.175478][T14088] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1928.213561][T14088] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1928.229668][T14088] bridge0: port 1(bridge_slave_0) entered blocking state [ 1928.236825][T14088] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1928.316449][T18831] device veth1_vlan entered promiscuous mode [ 1928.330192][T14088] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 1928.338657][T14088] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1928.392932][T14088] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 1928.409848][T14088] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1928.455740][T14088] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1928.484729][T19315] overlayfs: failed to clone upperpath [ 1928.564571][T14088] bridge0: port 2(bridge_slave_1) entered blocking state [ 1928.571771][T14088] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1928.676063][T14088] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1928.741263][T14088] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1929.297779][ T4354] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1929.343948][ T4354] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1929.401440][T18831] device veth0_macvtap entered promiscuous mode [ 1929.419553][ T4354] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1929.437170][ T4354] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1929.458915][ T4354] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1929.487171][ T4354] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1929.514085][ T4354] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1929.531645][ T4354] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1929.541348][ T4354] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1929.550513][ T4354] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1929.567362][ T4354] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1929.596196][T18938] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1929.615212][T18863] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1929.649472][T18831] device veth1_macvtap entered promiscuous mode [ 1929.680941][ T4354] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1929.707955][ T4354] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1929.776302][T18938] 8021q: adding VLAN 0 to HW filter on device team0 [ 1929.827643][ T4354] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1929.853972][ T4354] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1929.963806][ T4354] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1929.987570][ T4354] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1930.017487][ T4354] bridge0: port 1(bridge_slave_0) entered blocking state [ 1930.024710][ T4354] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1930.075505][ T4354] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1930.104256][T18831] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1930.134818][T18831] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1930.163376][T18831] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1930.197868][T18831] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1930.233446][T18831] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1930.268812][T18831] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1930.295587][T18831] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1930.318105][T18831] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1930.359586][T18831] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1930.450415][T18831] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1930.490946][T18831] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1930.571087][T19338] loop5: detected capacity change from 0 to 256 [ 1930.577547][T18831] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1930.602743][T19338] exfat: Unknown parameter 'ÿÿ00000000000000000000' [ 1930.609526][T18831] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1930.620596][T18831] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1930.631748][T18831] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1930.654988][T18831] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1931.706148][ T4354] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1931.752154][ T4354] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1931.778018][ T4354] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1932.322144][ T4354] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1932.382548][ T4354] bridge0: port 2(bridge_slave_1) entered blocking state [ 1932.389852][ T4354] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1932.497312][ T4354] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1932.594376][ T4354] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1932.676783][ T4409] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1932.685940][ T4409] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1932.816459][T18863] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1932.972277][T14092] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1932.993997][T14092] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1933.032985][T14092] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1933.059851][T14092] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1933.089844][T14092] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1933.136156][T18831] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1933.151723][T18831] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1933.164052][T18831] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1933.173140][T18831] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1933.195228][ T4752] device hsr_slave_0 left promiscuous mode [ 1933.236701][ T4752] device hsr_slave_1 left promiscuous mode [ 1933.251583][ T4752] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1933.264448][ T4752] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1933.273383][ T4752] device bridge_slave_1 left promiscuous mode [ 1933.291867][ T4752] bridge0: port 2(bridge_slave_1) entered disabled state [ 1933.311892][ T4752] device bridge_slave_0 left promiscuous mode [ 1933.326182][ T4752] bridge0: port 1(bridge_slave_0) entered disabled state [ 1933.723764][ T4752] team0 (unregistering): Port device team_slave_1 removed [ 1933.776618][ T4752] team0 (unregistering): Port device team_slave_0 removed [ 1933.835697][ T4752] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1933.899751][ T4752] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1934.014016][T19380] overlayfs: failed to clone upperpath [ 1934.869924][T19382] loop5: detected capacity change from 0 to 64 [ 1934.985681][ T4752] bond0 (unregistering): Released all slaves [ 1935.215486][ T4409] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1935.224849][ T4409] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1935.277565][ T4409] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1935.302523][T19389] loop5: detected capacity change from 0 to 64 [ 1935.320176][ T4409] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1935.340961][ T4409] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1935.387671][ T4409] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1935.438535][T18938] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1935.949005][T14095] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1935.968618][T14095] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1936.082944][ T4252] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1936.103467][ T4252] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1936.114474][ T4252] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1936.122780][ T4252] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1936.133386][ T4252] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 1936.155778][ T4252] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1936.382733][T18863] device veth0_vlan entered promiscuous mode [ 1936.405503][T12220] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1936.442488][T12220] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1936.457129][T12220] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1936.466047][T12220] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1936.493329][T18863] device veth1_vlan entered promiscuous mode [ 1936.546626][T19314] usb 6-1: new full-speed USB device number 8 using dummy_hcd [ 1936.575661][T18938] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1936.706109][T14095] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1936.716744][T14095] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1936.784221][T14095] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1936.797296][T14095] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1936.816696][T19314] usb 6-1: config 0 has no interfaces? [ 1936.825175][T19314] usb 6-1: New USB device found, idVendor=0499, idProduct=6bb7, bcdDevice=68.2f [ 1936.845810][T18863] device veth0_macvtap entered promiscuous mode [ 1936.871090][T19314] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1936.900127][T19314] usb 6-1: Product: syz [ 1936.908188][T19314] usb 6-1: Manufacturer: syz [ 1936.912843][T19314] usb 6-1: SerialNumber: syz [ 1936.965295][T19314] usb 6-1: config 0 descriptor?? [ 1937.019734][T18863] device veth1_macvtap entered promiscuous mode [ 1937.135831][T18863] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1937.174480][T18863] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1937.201402][T18863] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1937.250555][T18863] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1937.292493][T18863] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1937.384668][T18863] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1937.883554][T18863] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1938.043993][T18863] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1938.054340][T18863] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1938.065258][T18863] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1938.088729][T18863] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1938.090607][ T126] usb 6-1: USB disconnect, device number 8 [ 1938.184192][ T9566] Bluetooth: hci2: command 0x0409 tx timeout [ 1938.269737][T14088] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1938.316428][T14088] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1938.345532][T14088] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1938.375639][T14088] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1938.560970][T19449] overlayfs: failed to clone upperpath [ 1939.790895][ T4752] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1939.818425][ T8286] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1940.079139][ T8286] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1940.263011][ T4252] Bluetooth: hci2: command 0x041b tx timeout [ 1940.652040][T19468] loop5: detected capacity change from 0 to 64 [ 1940.669982][ T9566] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1940.684906][ T9566] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1940.693872][ T9566] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1940.701849][ T9566] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1940.726331][ T9566] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 1940.735226][ T9566] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1941.080744][T19404] chnl_net:caif_netlink_parms(): no params data found [ 1941.171683][ T4752] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1942.212222][T19492] 9pnet_fd: Insufficient options for proto=fd [ 1942.259871][ T4752] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1942.337131][ T8286] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1942.345015][ T9566] Bluetooth: hci2: command 0x040f tx timeout [ 1942.352905][ T8286] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1942.394004][ T8286] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1942.419367][ T8286] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1942.587049][ T4752] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1942.607148][T18938] device veth0_vlan entered promiscuous mode [ 1942.644242][T19404] bridge0: port 1(bridge_slave_0) entered blocking state [ 1942.651690][T19404] bridge0: port 1(bridge_slave_0) entered disabled state [ 1942.661097][T19404] device bridge_slave_0 entered promiscuous mode [ 1942.672115][T18938] device veth1_vlan entered promiscuous mode [ 1942.689480][T19404] bridge0: port 2(bridge_slave_1) entered blocking state [ 1942.700421][T19404] bridge0: port 2(bridge_slave_1) entered disabled state [ 1942.727619][T19404] device bridge_slave_1 entered promiscuous mode [ 1942.823400][ T9566] Bluetooth: hci1: command 0x0409 tx timeout [ 1942.862196][ T4300] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 1942.874402][ T4300] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 1942.885257][ T4300] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1942.894968][ T4300] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1942.963091][T19404] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1943.056661][T19404] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1943.330758][T19404] team0: Port device team_slave_0 added [ 1943.410515][T19404] team0: Port device team_slave_1 added [ 1943.496498][T19404] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1943.510960][T19404] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1943.568492][T19404] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1944.421166][ T4252] Bluetooth: hci2: command 0x0419 tx timeout [ 1944.901360][T19404] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1944.909687][ T4252] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1944.927669][T19404] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1944.961201][ T4252] Bluetooth: hci1: command 0x041b tx timeout [ 1944.976230][ T4252] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1944.987430][ T4252] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1944.995486][ T4252] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1945.003491][ T4252] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 1945.013233][ T4252] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1945.054788][T19404] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1945.174308][T19464] chnl_net:caif_netlink_parms(): no params data found [ 1946.262173][ T4252] Bluetooth: hci4: Controller not accepting commands anymore: ncmd = 0 [ 1946.274153][ T4252] Bluetooth: hci4: Injecting HCI hardware error event [ 1946.293337][ T4252] Bluetooth: hci4: hardware error 0x00 [ 1946.652061][T19552] loop5: detected capacity change from 0 to 64 [ 1946.663365][T19404] device hsr_slave_0 entered promiscuous mode [ 1946.715208][T19404] device hsr_slave_1 entered promiscuous mode [ 1946.979620][ T9566] Bluetooth: hci1: command 0x040f tx timeout [ 1947.083740][T19464] bridge0: port 1(bridge_slave_0) entered blocking state [ 1947.100190][T19464] bridge0: port 1(bridge_slave_0) entered disabled state [ 1947.119235][T19464] device bridge_slave_0 entered promiscuous mode [ 1947.177977][T19464] bridge0: port 2(bridge_slave_1) entered blocking state [ 1947.192089][T19464] bridge0: port 2(bridge_slave_1) entered disabled state [ 1947.210229][T19464] device bridge_slave_1 entered promiscuous mode [ 1947.227129][T19527] Bluetooth: hci0: command 0x0409 tx timeout [ 1948.204052][T19464] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1948.293896][T19571] loop5: detected capacity change from 0 to 256 [ 1948.307827][T19464] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1948.499041][ T4252] Bluetooth: hci4: Opcode 0x0c03 failed: -110 [ 1949.088747][ T4252] Bluetooth: hci1: command 0x0419 tx timeout [ 1949.298463][ T4252] Bluetooth: hci0: command 0x041b tx timeout [ 1949.343929][T19464] team0: Port device team_slave_0 added [ 1949.375045][T19464] team0: Port device team_slave_1 added [ 1949.422414][T19579] overlayfs: failed to clone upperpath [ 1949.543456][T19464] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1949.567293][T19464] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1949.690188][T19464] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1949.735167][T19522] chnl_net:caif_netlink_parms(): no params data found [ 1949.770965][T19464] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1949.791473][T19464] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1949.834228][T19464] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1950.547927][T19464] device hsr_slave_0 entered promiscuous mode [ 1950.588151][T19464] device hsr_slave_1 entered promiscuous mode [ 1950.598062][T19464] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1950.606079][T19464] Cannot create hsr debugfs directory [ 1950.923394][T19522] bridge0: port 1(bridge_slave_0) entered blocking state [ 1950.931613][T19522] bridge0: port 1(bridge_slave_0) entered disabled state [ 1950.940859][T19522] device bridge_slave_0 entered promiscuous mode [ 1950.950575][T19522] bridge0: port 2(bridge_slave_1) entered blocking state [ 1950.958162][T19522] bridge0: port 2(bridge_slave_1) entered disabled state [ 1950.966725][T19522] device bridge_slave_1 entered promiscuous mode [ 1951.104675][T19604] loop5: detected capacity change from 0 to 64 [ 1951.455950][ T4252] Bluetooth: hci0: command 0x040f tx timeout [ 1951.715389][ T4752] device hsr_slave_0 left promiscuous mode [ 1951.992929][ T4752] device hsr_slave_1 left promiscuous mode [ 1952.010122][ T4752] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1952.033836][ T4752] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1952.080294][ T4752] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1952.097175][ T4752] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1952.117727][ T4752] device bridge_slave_1 left promiscuous mode [ 1952.124736][ T4752] bridge0: port 2(bridge_slave_1) entered disabled state [ 1952.143976][ T4752] device bridge_slave_0 left promiscuous mode [ 1952.157236][ T4752] bridge0: port 1(bridge_slave_0) entered disabled state [ 1952.232480][ T4752] device veth1_macvtap left promiscuous mode [ 1952.240114][ T4752] device veth0_macvtap left promiscuous mode [ 1952.246368][ T4752] device veth1_vlan left promiscuous mode [ 1952.252602][ T4752] device veth0_vlan left promiscuous mode [ 1953.546280][T19527] Bluetooth: hci0: command 0x0419 tx timeout [ 1955.873788][ T4752] team0 (unregistering): Port device team_slave_1 removed [ 1956.000289][ T4752] team0 (unregistering): Port device team_slave_0 removed [ 1956.150842][ T4752] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1956.300799][ T4752] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1956.612750][T19660] overlayfs: failed to clone upperpath [ 1960.054253][T19682] overlayfs: failed to clone upperpath [ 1961.849710][T19690] x_tables: duplicate underflow at hook 2 [ 1962.379475][ T4752] bond0 (unregistering): Released all slaves [ 1963.756801][T19704] overlayfs: failed to clone upperpath [ 1964.815892][T19522] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1964.895234][T19522] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1964.970211][T19522] team0: Port device team_slave_0 added [ 1964.981917][T19522] team0: Port device team_slave_1 added [ 1965.077863][T19522] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1965.085540][T19522] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1965.127041][T19522] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1965.171737][T19522] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1965.178739][T19522] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1965.275392][T19522] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1965.956120][T19722] overlayfs: failed to clone upperpath [ 1966.154127][T19522] device hsr_slave_0 entered promiscuous mode [ 1966.185328][T19522] device hsr_slave_1 entered promiscuous mode [ 1966.310161][T19522] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1966.338880][T19522] Cannot create hsr debugfs directory [ 1967.918550][T19404] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 1968.117136][T19736] Process accounting resumed [ 1968.243842][T19404] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 1968.279419][T19404] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 1968.408487][T19404] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 1969.086495][T19759] overlayfs: missing 'lowerdir' [ 1970.158837][T19404] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1970.175272][T10304] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1970.198864][T10304] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1970.229434][T19404] 8021q: adding VLAN 0 to HW filter on device team0 [ 1970.296852][ T4565] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1970.324851][ T4565] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1970.338612][ T4565] bridge0: port 1(bridge_slave_0) entered blocking state [ 1970.345782][ T4565] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1970.398271][ T4565] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1970.422670][ T4565] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1970.438676][ T4565] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1970.458131][ T4565] bridge0: port 2(bridge_slave_1) entered blocking state [ 1970.465322][ T4565] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1970.499005][ T4565] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1970.524056][ T4565] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1970.567168][ T4565] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1970.591607][ T4565] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1970.662119][ T4565] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1970.678864][ T4565] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1970.698352][ T4565] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1970.718571][ T4565] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1970.738206][ T4565] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1970.765129][ T4565] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1970.774328][ T4565] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1970.786044][T19404] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1971.170311][T19783] overlayfs: failed to clone upperpath [ 1973.435664][T14088] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1973.455066][T14088] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1973.572570][T19404] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1973.728574][ T4300] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1973.835720][ T4300] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1974.287597][T19404] device veth0_vlan entered promiscuous mode [ 1974.379825][T14088] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1974.690014][T14088] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1975.443283][T19404] device veth1_vlan entered promiscuous mode [ 1975.452054][T14088] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1975.460756][T14088] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1975.469777][T14088] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 1976.255594][T19404] device veth0_macvtap entered promiscuous mode [ 1976.288395][T19404] device veth1_macvtap entered promiscuous mode [ 1976.313809][T12220] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1976.324585][T12220] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1976.340769][T12220] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1976.635982][T19464] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 1976.688495][T12220] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1976.750954][T19817] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 1977.418498][T19404] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1977.431716][T19404] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1977.441752][T19404] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1977.452769][T19404] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1977.466968][T19404] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1977.485167][T19404] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1977.498442][T19404] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1977.508964][T19404] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1977.519219][T19404] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1977.531697][T19404] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1977.543930][T19404] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1977.555784][T19404] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1977.566481][T19404] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1977.577581][T19404] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1977.588645][T19404] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1977.598855][T19404] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1977.609954][T19404] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1977.715829][T19404] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1978.720628][T19464] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 1978.737953][ T8286] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1978.748021][ T8286] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1978.759954][ T8286] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1978.888138][ T8286] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1980.091850][T19404] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1980.132928][T19404] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1980.150310][T19404] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1980.168116][T19404] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1980.276994][T19522] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 1980.298484][T19522] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 1980.319103][T19522] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 1980.356586][T19522] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 1980.412508][T19464] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 1980.449605][ T4752] device hsr_slave_0 left promiscuous mode [ 1980.479381][ T4752] device hsr_slave_1 left promiscuous mode [ 1981.171585][ T4752] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1981.213778][ T4752] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1981.242711][ T4752] device bridge_slave_1 left promiscuous mode [ 1981.249018][ T4752] bridge0: port 2(bridge_slave_1) entered disabled state [ 1981.287886][ T4752] device bridge_slave_0 left promiscuous mode [ 1981.320746][ T4752] bridge0: port 1(bridge_slave_0) entered disabled state [ 1981.361441][ T4752] device hsr_slave_0 left promiscuous mode [ 1981.374906][ T4752] device hsr_slave_1 left promiscuous mode [ 1981.410642][ T4752] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1981.422384][ T4752] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1981.460663][ T4752] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1981.483250][ T4752] device bridge_slave_1 left promiscuous mode [ 1981.502666][ T4752] bridge0: port 2(bridge_slave_1) entered disabled state [ 1981.532561][ T4752] device bridge_slave_0 left promiscuous mode [ 1981.538954][ T4752] bridge0: port 1(bridge_slave_0) entered disabled state [ 1982.333713][ T4752] device veth1_vlan left promiscuous mode [ 1982.352019][ T4752] device veth0_vlan left promiscuous mode [ 1982.380806][ T4752] device veth1_macvtap left promiscuous mode [ 1982.392968][ T4752] device veth0_macvtap left promiscuous mode [ 1982.421970][ T4752] device veth1_vlan left promiscuous mode [ 1982.427986][ T4752] device veth0_vlan left promiscuous mode [ 1982.606428][T19853] overlayfs: failed to clone upperpath [ 1983.337217][T19855] loop5: detected capacity change from 0 to 32768 [ 1985.152198][ T4752] team0 (unregistering): Port device team_slave_1 removed [ 1985.313508][ T4752] team0 (unregistering): Port device team_slave_0 removed [ 1985.685808][ T4752] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1986.034752][ T4752] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1986.891872][ T4752] bond0 (unregistering): Released all slaves [ 1987.659761][ T4752] team0 (unregistering): Port device team_slave_1 removed [ 1987.732763][ T4752] team0 (unregistering): Port device team_slave_0 removed [ 1987.813383][ T4752] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1987.894515][ T4752] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1988.739939][ T4752] bond0 (unregistering): Released all slaves [ 1988.864470][T19464] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 1988.878320][T19863] netlink: 'syz.8.3038': attribute type 10 has an invalid length. [ 1988.907502][T19863] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1988.916126][T19863] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 1988.943568][T19867] device bond0 entered promiscuous mode [ 1988.949400][T19867] device bond_slave_0 entered promiscuous mode [ 1988.956094][T19867] device bond_slave_1 entered promiscuous mode [ 1988.962872][T19867] device batadv0 entered promiscuous mode [ 1989.285886][T19522] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1990.101797][ T4300] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1990.127958][ T4300] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1990.173290][T14092] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1990.250960][T14092] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1990.261935][T14092] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1990.683868][T19522] 8021q: adding VLAN 0 to HW filter on device team0 [ 1990.721435][ T8286] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1990.768789][ T8286] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1990.798347][T14092] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1990.808042][T14092] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1990.832105][T14092] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1990.852154][T14092] bridge0: port 1(bridge_slave_0) entered blocking state [ 1990.859484][T14092] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1990.887350][T14092] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1990.904158][T14092] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1990.925255][T14092] bridge0: port 2(bridge_slave_1) entered blocking state [ 1990.932602][T14092] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1990.955254][T14092] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1991.031024][ T8286] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1991.072486][ T8286] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1991.510994][ T4300] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1991.643233][ T4300] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1991.713325][T19464] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1991.756740][ T4300] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1991.779553][ T4300] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1991.804691][ T4300] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1991.865329][T19522] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1992.105561][T19522] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1992.357466][ T4300] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1992.438624][ T4300] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1992.447557][ T4300] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1992.462223][ T4300] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1992.475002][ T4300] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1992.500110][ T4354] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1992.519512][ T4354] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1992.554201][T19464] 8021q: adding VLAN 0 to HW filter on device team0 [ 1992.651118][ T4300] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1992.701911][ T4300] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1992.764149][ T4300] bridge0: port 1(bridge_slave_0) entered blocking state [ 1992.771362][ T4300] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1992.839997][ T4300] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1992.887886][T19898] overlayfs: failed to clone upperpath [ 1992.961206][ T4354] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1992.982642][ T4354] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1993.034934][ T4354] bridge0: port 2(bridge_slave_1) entered blocking state [ 1993.042167][ T4354] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1993.491066][ T4354] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1994.079386][ T4354] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1994.118962][T19907] loop1: detected capacity change from 0 to 64 [ 1994.190690][ T4354] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1994.245890][ T4354] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1994.306606][ T4354] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1994.337182][ T4354] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1994.440241][ T4354] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1994.539962][ T4354] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1994.620557][ T4354] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1995.350273][T19464] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1995.425499][T19914] loop1: detected capacity change from 0 to 16 [ 1995.444655][T19914] erofs: (device loop1): mounted with root inode @ nid 36. [ 1995.463408][ T4354] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1995.493167][ T4354] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1997.318181][ T4409] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1997.357410][ T4409] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1997.659966][T19522] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1999.002832][ T27] audit: type=1326 audit(20582590.834:118): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19923 comm="syz.1.3050" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f148bb8d169 code=0x0 [ 1999.861900][ T4565] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 2000.631293][T19958] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3053'. [ 2000.988609][ T4565] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 2001.075126][T19522] device veth0_vlan entered promiscuous mode [ 2001.143446][T19960] overlayfs: failed to clone upperpath [ 2001.210212][T19522] device veth1_vlan entered promiscuous mode [ 2002.030303][T19522] device veth0_macvtap entered promiscuous mode [ 2002.457686][ T4565] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 2002.487222][ T4565] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 2002.573090][ T4565] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 2002.628030][ T4565] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 2002.682248][ T4565] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 2002.740312][ T4565] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 2002.799347][T19522] device veth1_macvtap entered promiscuous mode [ 2002.931998][ T4565] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 2002.940253][ T4565] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 2003.024884][ T4565] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 2003.075564][ T4252] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 2003.093222][ T4252] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 2003.102954][ T4252] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 2003.112842][ T9566] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 2003.125099][ T9566] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 2003.132452][ T9566] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 2003.176925][T19522] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2003.804167][T19522] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2003.855283][T19522] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2003.906836][T19522] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2003.951106][T19522] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2004.001012][T19522] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2004.051297][T19522] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2004.092756][T19522] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2004.144172][T19522] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2004.191090][T19522] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2004.262782][T19522] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2004.542405][ T4779] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 2004.602726][ T4779] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 2005.190563][ T9566] Bluetooth: hci1: command 0x0409 tx timeout [ 2006.731146][T19527] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 2006.744984][T19527] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 2006.757036][ T4252] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 2006.769823][ T4252] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 2006.782777][ T4252] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 2006.793407][ T4252] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 2007.549665][ T9566] Bluetooth: hci1: command 0x041b tx timeout [ 2008.239842][T20021] loop5: detected capacity change from 0 to 64 [ 2009.025765][ T9566] Bluetooth: hci0: command 0x0409 tx timeout [ 2009.426427][ T27] audit: type=1326 audit(20582601.440:119): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20022 comm="syz.8.3062" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f380bb8d169 code=0x0 [ 2010.151000][ T9566] Bluetooth: hci1: command 0x040f tx timeout [ 2010.288579][T19975] chnl_net:caif_netlink_parms(): no params data found [ 2010.491224][T20007] chnl_net:caif_netlink_parms(): no params data found [ 2011.730627][ T9566] Bluetooth: hci0: command 0x041b tx timeout [ 2011.731226][T20057] loop1: detected capacity change from 0 to 1764 [ 2011.802975][T20055] iso9660: Corrupted directory entry in block 2 of inode 1920 [ 2012.226966][ T4252] Bluetooth: hci1: command 0x0419 tx timeout [ 2012.921617][T20074] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3068'. [ 2013.829434][ T9566] Bluetooth: hci0: command 0x040f tx timeout [ 2014.308763][ T9566] Bluetooth: hci1: command 0x0411 tx timeout [ 2014.496636][T20083] futex_wake_op: syz.1.3069 tries to shift op by -1; fix this program [ 2014.577402][T19975] bridge0: port 1(bridge_slave_0) entered blocking state [ 2014.597659][T19975] bridge0: port 1(bridge_slave_0) entered disabled state [ 2014.606477][T19975] device bridge_slave_0 entered promiscuous mode [ 2014.752888][T19975] bridge0: port 2(bridge_slave_1) entered blocking state [ 2014.785838][T19975] bridge0: port 2(bridge_slave_1) entered disabled state [ 2014.833846][T19975] device bridge_slave_1 entered promiscuous mode [ 2015.023105][T20007] bridge0: port 1(bridge_slave_0) entered blocking state [ 2015.038433][T20007] bridge0: port 1(bridge_slave_0) entered disabled state [ 2015.066446][T20007] device bridge_slave_0 entered promiscuous mode [ 2015.246125][T20007] bridge0: port 2(bridge_slave_1) entered blocking state [ 2015.254067][T20007] bridge0: port 2(bridge_slave_1) entered disabled state [ 2015.297745][T20007] device bridge_slave_1 entered promiscuous mode [ 2015.338757][T19975] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2015.477103][T20101] loop5: detected capacity change from 0 to 64 [ 2015.570181][T19975] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2015.751566][T20007] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2015.905277][ T9566] Bluetooth: hci0: command 0x0419 tx timeout [ 2015.933459][T20007] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2017.839099][T19975] team0: Port device team_slave_0 added [ 2017.894735][T20007] team0: Port device team_slave_0 added [ 2017.948933][T20120] 9pnet_fd: Insufficient options for proto=fd [ 2017.995009][ T4752] device hsr_slave_0 left promiscuous mode [ 2018.015540][ T4752] device hsr_slave_1 left promiscuous mode [ 2018.115964][ T4752] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2018.144866][ T4752] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2018.164997][ T4752] device bridge_slave_1 left promiscuous mode [ 2018.199149][ T4752] bridge0: port 2(bridge_slave_1) entered disabled state [ 2018.218977][ T4752] device bridge_slave_0 left promiscuous mode [ 2018.228925][ T4752] bridge0: port 1(bridge_slave_0) entered disabled state [ 2019.385271][T20137] 9pnet_fd: Insufficient options for proto=fd [ 2019.386256][T20139] loop1: detected capacity change from 0 to 64 [ 2020.040890][T20148] futex_wake_op: syz.5.3081 tries to shift op by -1; fix this program [ 2020.756512][T20150] loop1: detected capacity change from 0 to 512 [ 2021.106003][ T4752] team0 (unregistering): Port device team_slave_1 removed [ 2021.135106][T20161] loop1: detected capacity change from 0 to 64 [ 2021.339003][ T4752] team0 (unregistering): Port device team_slave_0 removed [ 2021.557073][ T4752] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2021.822698][T20171] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(7) [ 2021.829258][T20171] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 2021.837185][T20171] vhci_hcd vhci_hcd.0: Device attached [ 2022.062214][ T9566] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0 [ 2022.074737][ T9566] Bluetooth: hci2: Injecting HCI hardware error event [ 2022.097834][ T4252] Bluetooth: hci2: hardware error 0x00 [ 2022.618108][T11949] usb 35-1: new low-speed USB device number 2 using vhci_hcd [ 2022.674469][T20172] vhci_hcd: connection closed [ 2022.677934][T14092] vhci_hcd: stop threads [ 2022.766532][T14092] vhci_hcd: release socket [ 2022.819141][T14092] vhci_hcd: disconnect device [ 2023.350101][ T4752] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2023.818585][T20189] loop5: detected capacity change from 0 to 1764 [ 2025.219020][T20189] iso9660: Corrupted directory entry in block 2 of inode 1920 [ 2025.340347][ T4252] Bluetooth: hci2: Opcode 0x0c03 failed: -110 [ 2026.449749][ T4752] bond0 (unregistering): Released all slaves [ 2026.573214][T19975] team0: Port device team_slave_1 added [ 2026.580606][T20007] team0: Port device team_slave_1 added [ 2026.605359][T20204] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 2026.648592][T20007] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2026.656971][T20007] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2026.683813][T20007] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2026.696855][T20007] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2026.704137][T20007] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2026.730704][T20007] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2026.763066][T19975] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2026.771665][T19975] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2026.798101][T19975] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2026.870944][T19975] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2026.878057][T19975] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2026.904454][T19975] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2026.936990][T20007] device hsr_slave_0 entered promiscuous mode [ 2026.944586][T20007] device hsr_slave_1 entered promiscuous mode [ 2026.953273][T20007] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 2026.960977][T20007] Cannot create hsr debugfs directory [ 2027.070079][T19975] device hsr_slave_0 entered promiscuous mode [ 2027.078467][T19975] device hsr_slave_1 entered promiscuous mode [ 2027.085765][T19975] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 2027.093708][T19975] Cannot create hsr debugfs directory [ 2027.292895][T20220] loop5: detected capacity change from 0 to 64 [ 2027.839207][T11949] vhci_hcd: vhci_device speed not set [ 2028.477719][T20228] 9pnet_fd: Insufficient options for proto=fd [ 2029.484418][T20242] loop5: detected capacity change from 0 to 64 [ 2032.320496][T20007] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 2032.330778][T20007] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 2032.385494][T20007] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 2032.412305][T20007] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 2032.434820][ T4752] device hsr_slave_0 left promiscuous mode [ 2032.443794][ T4752] device hsr_slave_1 left promiscuous mode [ 2032.451128][ T4752] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2032.459336][ T4752] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2032.468387][ T4752] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2032.486627][ T4752] device bridge_slave_1 left promiscuous mode [ 2032.493287][ T4752] bridge0: port 2(bridge_slave_1) entered disabled state [ 2032.513254][ T4752] device bridge_slave_0 left promiscuous mode [ 2032.525062][ T4752] bridge0: port 1(bridge_slave_0) entered disabled state [ 2032.564925][ T4752] device veth1_macvtap left promiscuous mode [ 2032.571096][ T4752] device veth0_macvtap left promiscuous mode [ 2032.578099][ T4752] device veth1_vlan left promiscuous mode [ 2032.584871][ T4752] device veth0_vlan left promiscuous mode [ 2033.819345][ T4752] team0 (unregistering): Port device team_slave_1 removed [ 2033.890724][ T4752] team0 (unregistering): Port device team_slave_0 removed [ 2033.963061][ T4752] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2034.035281][ T4752] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2034.823736][ T4752] bond0 (unregistering): Released all slaves [ 2035.040013][T19975] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 2035.051774][T19975] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 2035.109136][T19975] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 2035.126316][T19975] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 2035.229381][T20007] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2035.282392][ T4779] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 2035.291830][ T4779] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 2035.306230][T20007] 8021q: adding VLAN 0 to HW filter on device team0 [ 2035.343298][T14092] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 2035.363913][T14092] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 2035.376195][T14092] bridge0: port 1(bridge_slave_0) entered blocking state [ 2035.383469][T14092] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2035.392479][T14092] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 2035.401714][T14092] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 2035.410886][T14092] bridge0: port 2(bridge_slave_1) entered blocking state [ 2035.418178][T14092] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2035.444312][T14092] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 2035.454471][T14092] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 2035.466309][T14092] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 2035.527159][T19975] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2035.539022][ T8286] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 2035.560290][ T8286] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 2035.580566][ T8286] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 2035.613057][ T8286] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 2035.626810][ T8286] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 2035.654180][ T8286] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 2035.666355][ T8286] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 2035.682459][T19975] 8021q: adding VLAN 0 to HW filter on device team0 [ 2035.709929][T14092] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 2035.734684][T14092] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 2035.783605][ T8286] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 2035.795953][ T8286] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 2035.811615][ T8286] bridge0: port 1(bridge_slave_0) entered blocking state [ 2035.818926][ T8286] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2035.841796][ T8286] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 2035.851507][ T8286] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 2035.870127][ T8286] bridge0: port 2(bridge_slave_1) entered blocking state [ 2035.877446][ T8286] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2035.888433][ T8286] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 2035.898253][ T8286] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 2035.907352][ T8286] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 2035.916391][ T8286] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 2035.948334][T20007] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 2035.959974][ T8286] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 2035.970395][ T8286] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 2035.985492][ T8286] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 2035.994493][ T8286] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 2036.007163][ T8286] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 2036.018912][ T8286] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 2036.035012][ T8286] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 2036.043927][ T8286] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 2036.065118][ T8286] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 2036.074575][ T8286] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 2036.105336][T19975] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 2036.435965][T14092] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 2036.443706][T14092] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 2036.481251][T19975] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2036.546917][T12220] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 2036.554524][T12220] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 2036.577989][T20007] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2037.078725][ T8286] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 2037.090172][ T8286] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 2037.157389][ T4779] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 2037.176642][ T4779] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 2037.202790][T19975] device veth0_vlan entered promiscuous mode [ 2037.210764][ T4779] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 2037.221347][ T4779] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 2037.237952][T19975] device veth1_vlan entered promiscuous mode [ 2037.302845][T19975] device veth0_macvtap entered promiscuous mode [ 2037.315362][T19975] device veth1_macvtap entered promiscuous mode [ 2037.332612][T12220] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 2037.342877][T12220] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 2037.352198][T12220] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 2037.361304][T12220] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 2037.371986][T12220] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 2037.396311][T12220] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 2037.413677][T12220] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 2037.436864][T12220] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 2037.456459][T19975] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2037.476340][T19975] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2037.487213][T19975] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2037.498208][T19975] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2037.508461][T19975] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2037.519438][T19975] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2037.529692][T19975] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2037.541384][T19975] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2037.551570][T19975] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2037.563237][T19975] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2037.576303][T19975] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2037.612079][ T8286] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 2037.631206][ T8286] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 2037.643849][ T8286] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 2037.666845][ T8286] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 2037.676605][T19975] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2037.687434][T19975] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2037.698002][T19975] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2037.709290][T19975] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2037.719590][T19975] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2037.730545][T19975] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2037.741038][T19975] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2037.751563][T19975] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2037.763620][T19975] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2037.776466][T19975] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2037.785304][T19975] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2037.796038][T19975] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2037.805762][T19975] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2037.825360][ T8286] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 2037.833807][ T8286] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 2037.852814][ T8286] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 2037.872593][ T8286] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 2037.909132][T20007] device veth0_vlan entered promiscuous mode [ 2037.996796][T20007] device veth1_vlan entered promiscuous mode [ 2038.063185][ T8286] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2038.082597][T20007] device veth0_macvtap entered promiscuous mode [ 2038.091285][ T8286] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2038.096323][T12220] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 2038.111244][T12220] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 2038.142115][T20007] device veth1_macvtap entered promiscuous mode [ 2038.152562][T12220] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 2038.162555][T12220] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 2038.173387][T12220] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 2038.207616][T12220] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2038.230290][T20007] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2038.245672][T12220] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2038.257712][T20007] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2038.275095][T20007] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2038.301422][T20007] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2038.319100][T20007] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2038.333580][T20007] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2038.355472][T20007] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2038.383977][T20007] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2038.404557][T20007] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2038.425036][T20007] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2038.443020][T20007] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2038.463037][T20007] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2038.480253][T20007] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2038.500931][T14088] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 2038.510078][T14088] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 2038.532693][T14088] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 2038.556348][T20007] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2038.573535][T20007] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2038.602983][T20007] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2038.618402][T20007] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2038.629056][T20007] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2038.639694][T20007] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2038.649588][T20007] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2038.660211][T20007] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2038.670126][T20007] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2038.681328][T20007] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2038.692752][T20007] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2038.705802][T20007] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2038.714734][T20007] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2038.733167][T20007] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2038.741965][T20007] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2038.759980][T14088] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 2038.770527][T14088] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 2039.136835][T14088] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2039.163707][T14088] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2039.187160][ T8286] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2039.193205][ T4752] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 2039.225322][ T8286] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2039.527474][T12220] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 2040.852073][T20400] 9pnet_fd: Insufficient options for proto=fd [ 2042.287810][T20418] loop5: detected capacity change from 0 to 64 [ 2042.533945][T20422] loop4: detected capacity change from 0 to 128 [ 2042.852987][T20427] loop6: detected capacity change from 0 to 1024 [ 2042.890058][T20427] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 2043.100314][T20427] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 2043.906233][T20007] EXT4-fs (loop6): unmounting filesystem. [ 2131.447452][ T9566] Bluetooth: hci0: command 0x0406 tx timeout [ 2131.453823][ T9566] Bluetooth: hci1: command 0x0406 tx timeout [ 2175.434393][ T28] INFO: task kworker/0:3:1190 blocked for more than 143 seconds. [ 2175.447479][ T28] Not tainted 6.1.133-syzkaller #0 [ 2175.453167][ T28] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 2175.462901][ T28] task:kworker/0:3 state:D stack:23296 pid:1190 ppid:2 flags:0x00004000 [ 2175.472758][ T28] Workqueue: usb_hub_wq hub_event [ 2175.480560][ T28] Call Trace: [ 2175.483894][ T28] [ 2175.487466][ T28] __schedule+0x143f/0x4570 [ 2175.492051][ T28] ? release_firmware_map_entry+0x18b/0x18b [ 2175.498693][ T28] ? _raw_spin_unlock_irq+0x1f/0x40 [ 2175.503950][ T28] ? lockdep_hardirqs_on+0x94/0x130 [ 2175.510196][ T28] schedule+0xbf/0x180 [ 2175.514426][ T28] usb_kill_urb+0x1c5/0x300 [ 2175.533274][ T28] ? usb_unlink_urb+0xa0/0xa0 [ 2175.540723][ T28] ? wake_bit_function+0x210/0x210 [ 2175.557864][ T28] usb_start_wait_urb+0x1ac/0x510 [ 2175.572342][ T28] ? usb_api_blocking_completion+0xa0/0xa0 [ 2175.580592][ T28] ? __kmalloc+0xe2/0x230 [ 2175.595173][ T28] usb_control_msg+0x2ad/0x4c0 [ 2175.600014][ T28] ? usb_anchor_empty+0x40/0x40 [ 2175.604908][ T28] hub_port_init+0xb41/0x2a00 [ 2175.618486][ T28] hub_event+0x2b31/0x5730 [ 2175.624948][ T28] ? led_work+0x700/0x700 [ 2175.634504][ T28] ? read_lock_is_recursive+0x10/0x10 [ 2175.649816][ T28] ? preempt_schedule+0xd9/0xe0 [ 2175.661063][ T28] ? firmware_map_add_hotplug+0xaa/0x23d [ 2175.682698][ T28] ? lockdep_hardirqs_on+0x94/0x130 [ 2175.688369][ T28] ? asm_sysvec_reschedule_ipi+0x16/0x20 [ 2175.694065][ T28] ? preempt_schedule_thunk+0x16/0x18 [ 2175.700038][ T28] ? process_one_work+0x806/0x1260 [ 2175.707172][ T28] process_one_work+0x917/0x1260 [ 2175.712183][ T28] ? worker_detach_from_pool+0x260/0x260 [ 2175.718260][ T28] ? _raw_spin_lock_irqsave+0x120/0x120 [ 2175.734373][ T28] ? kthread_data+0x4e/0xc0 [ 2175.739438][ T28] ? wq_worker_running+0x97/0x190 [ 2175.744512][ T28] worker_thread+0xa47/0x1200 [ 2175.759512][ T28] ? _raw_spin_unlock+0x40/0x40 [ 2175.764460][ T28] kthread+0x28d/0x320 [ 2175.781877][ T28] ? worker_clr_flags+0x190/0x190 [ 2175.790695][ T28] ? kthread_blkcg+0xd0/0xd0 [ 2175.801244][ T28] ret_from_fork+0x1f/0x30 [ 2175.809673][ T28] [ 2175.812927][ T28] [ 2175.812927][ T28] Showing all locks held in the system: [ 2175.833756][ T28] 1 lock held by rcu_tasks_kthre/12: [ 2175.842110][ T28] #0: ffffffff8d32e910 (rcu_tasks.tasks_gp_mutex){+.+.}-{3:3}, at: rcu_tasks_one_gp+0x29/0xe30 [ 2175.862590][ T28] 1 lock held by rcu_tasks_trace/13: [ 2175.869663][ T28] #0: ffffffff8d32f110 (rcu_tasks_trace.tasks_gp_mutex){+.+.}-{3:3}, at: rcu_tasks_one_gp+0x29/0xe30 [ 2175.894954][ T28] 1 lock held by rcu_preempt/16: [ 2175.899952][ T28] #0: ffff8880b8e3a998 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0xa8/0x140 [ 2175.918809][ T28] 1 lock held by khungtaskd/28: [ 2175.923724][ T28] #0: ffffffff8d32e740 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x51/0x290 [ 2175.936795][ T28] 5 locks held by kworker/0:3/1190: [ 2175.942138][ T28] #0: ffff88801f2f6538 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_one_work+0x806/0x1260 [ 2175.953064][ T28] #1: ffffc90004c9fd20 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_one_work+0x806/0x1260 [ 2175.966714][ T28] #2: ffff888145fc4190 (&dev->mutex){....}-{3:3}, at: hub_event+0x1fe/0x5730 [ 2175.976827][ T28] #3: ffff888145fc74f8 (&port_dev->status_lock){+.+.}-{3:3}, at: hub_event+0x2471/0x5730 [ 2175.986976][ T28] #4: ffff888145baf868 (hcd->address0_mutex){+.+.}-{3:3}, at: hub_event+0x249e/0x5730 [ 2176.011952][ T28] 2 locks held by getty/4010: [ 2176.018051][ T28] #0: ffff888031233098 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x21/0x70 [ 2176.034603][ T28] #1: ffffc9000325e2f0 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0x54a/0x1620 [ 2176.045447][ T28] 4 locks held by kworker/u4:30/4775: [ 2176.050900][ T28] #0: ffff8880b8e3a998 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0xa8/0x140 [ 2176.061076][ T28] #1: ffff8880b8e27788 (&per_cpu_ptr(group->pcpu, cpu)->seq){-.-.}-{0:0}, at: psi_task_switch+0x419/0x790 [ 2176.073225][ T28] #2: ffff8880b8e28358 (&base->lock){-.-.}-{2:2}, at: __mod_timer+0x62d/0xee0 [ 2176.083947][ T28] #3: ffffffff8d32e740 (rcu_read_lock){....}-{1:2}, at: ieee80211_sta_active_ibss+0xb1/0x310 [ 2176.094549][ T28] 2 locks held by kworker/1:10/19904: [ 2176.100089][ T28] #0: ffff888017c72138 ((wq_completion)rcu_gp){+.+.}-{0:0}, at: process_one_work+0x806/0x1260 [ 2176.110662][ T28] #1: ffffc90003257d20 ((work_completion)(&rew->rew_work)){+.+.}-{0:0}, at: process_one_work+0x806/0x1260 [ 2176.122203][ T28] 2 locks held by dhcpcd/22605: [ 2176.127131][ T28] #0: ffff888071d22010 (&sb->s_type->i_mutex_key#10){+.+.}-{3:3}, at: sock_close+0x98/0x230 [ 2176.138396][ T28] #1: ffffffff8d333d78 (rcu_state.exp_mutex){+.+.}-{3:3}, at: synchronize_rcu_expedited+0x4f0/0x930 [ 2176.149545][ T28] [ 2176.151901][ T28] ============================================= [ 2176.151901][ T28] [ 2176.160469][ T28] NMI backtrace for cpu 0 [ 2176.164824][ T28] CPU: 0 PID: 28 Comm: khungtaskd Not tainted 6.1.133-syzkaller #0 [ 2176.172730][ T28] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 2176.182787][ T28] Call Trace: [ 2176.186070][ T28] [ 2176.189005][ T28] dump_stack_lvl+0x1e3/0x2cb [ 2176.193714][ T28] ? nf_tcp_handle_invalid+0x647/0x647 [ 2176.199193][ T28] ? panic+0x764/0x764 [ 2176.203284][ T28] ? vprintk_emit+0x622/0x740 [ 2176.208057][ T28] ? printk_sprint+0x490/0x490 [ 2176.212835][ T28] ? nmi_cpu_backtrace+0x252/0x560 [ 2176.217975][ T28] nmi_cpu_backtrace+0x4e1/0x560 [ 2176.222931][ T28] ? nmi_trigger_cpumask_backtrace+0x430/0x430 [ 2176.229115][ T28] ? _printk+0xd1/0x111 [ 2176.233288][ T28] ? panic+0x764/0x764 [ 2176.237378][ T28] ? __wake_up_klogd+0xcc/0x100 [ 2176.242267][ T28] ? panic+0x764/0x764 [ 2176.246379][ T28] ? nmi_trigger_cpumask_backtrace+0xfc/0x430 [ 2176.252466][ T28] nmi_trigger_cpumask_backtrace+0x1ca/0x430 [ 2176.258483][ T28] ? arch_trigger_cpumask_backtrace+0x10/0x10 [ 2176.264571][ T28] watchdog+0xf88/0xfd0 [ 2176.268755][ T28] ? watchdog+0x1f8/0xfd0 [ 2176.273129][ T28] kthread+0x28d/0x320 [ 2176.277206][ T28] ? hungtask_pm_notify+0x50/0x50 [ 2176.282242][ T28] ? kthread_blkcg+0xd0/0xd0 [ 2176.286846][ T28] ret_from_fork+0x1f/0x30 [ 2176.291313][ T28] [ 2176.295681][ T28] Sending NMI from CPU 0 to CPUs 1: [ 2176.300934][ C1] NMI backtrace for cpu 1 [ 2176.300947][ C1] CPU: 1 PID: 10304 Comm: kworker/u4:7 Not tainted 6.1.133-syzkaller #0 [ 2176.300966][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 2176.300978][ C1] Workqueue: phy43 ieee80211_iface_work [ 2176.301005][ C1] RIP: 0010:ieee80211_iface_work+0x2c8/0xce0 [ 2176.301028][ C1] Code: 5e dc b2 f7 48 8b 1b 48 89 d8 48 c1 e8 03 4d 89 fc 48 89 44 24 10 42 0f b6 04 38 84 c0 0f 85 b4 05 00 00 49 89 df 44 0f b7 33 <44> 89 f3 81 e3 fc 00 00 00 bf d0 00 00 00 89 de e8 c3 7d 5b f7 81 [ 2176.301044][ C1] RSP: 0018:ffffc90005a77be0 EFLAGS: 00000246 [ 2176.301059][ C1] RAX: 0000000000000000 RBX: ffff88807b9ec050 RCX: ffffffff816b25ca [ 2176.301072][ C1] RDX: ffff8880791b8000 RSI: 0000000000000000 RDI: 0000000000000d89 [ 2176.301085][ C1] RBP: ffff8880203183c0 R08: ffffffff8a2f2ecb R09: fffffbfff225786b [ 2176.301099][ C1] R10: 0000000000000000 R11: dffffc0000000001 R12: dffffc0000000000 [ 2176.301112][ C1] R13: ffff88805cda9848 R14: 0000000000000080 R15: ffff88807b9ec050 [ 2176.301125][ C1] FS: 0000000000000000(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000 [ 2176.301141][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 2176.301154][ C1] CR2: 000055d912eca680 CR3: 0000000031e66000 CR4: 00000000003506e0 [ 2176.301170][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 2176.301181][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 2176.301192][ C1] Call Trace: [ 2176.301198][ C1] [ 2176.301204][ C1] ? nmi_cpu_backtrace+0x3de/0x560 [ 2176.301223][ C1] ? read_lock_is_recursive+0x10/0x10 [ 2176.301253][ C1] ? nmi_trigger_cpumask_backtrace+0x430/0x430 [ 2176.301273][ C1] ? nmi_handle+0x25/0x440 [ 2176.301308][ C1] ? nmi_cpu_backtrace_handler+0x8/0x10 [ 2176.301325][ C1] ? nmi_handle+0x12e/0x440 [ 2176.301351][ C1] ? nmi_handle+0x25/0x440 [ 2176.301377][ C1] ? ieee80211_iface_work+0x2c8/0xce0 [ 2176.301398][ C1] ? default_do_nmi+0x62/0x150 [ 2176.301418][ C1] ? exc_nmi+0xa8/0x100 [ 2176.301436][ C1] ? end_repeat_nmi+0x16/0x31 [ 2176.301462][ C1] ? ieee80211_iface_work+0x23b/0xce0 [ 2176.301482][ C1] ? mark_lock+0x9a/0x340 [ 2176.301497][ C1] ? ieee80211_iface_work+0x2c8/0xce0 [ 2176.301518][ C1] ? ieee80211_iface_work+0x2c8/0xce0 [ 2176.301540][ C1] ? ieee80211_iface_work+0x2c8/0xce0 [ 2176.301566][ C1] [ 2176.301572][ C1] [ 2176.301577][ C1] ? do_raw_spin_unlock+0x137/0x8a0 [ 2176.301600][ C1] ? process_one_work+0x806/0x1260 [ 2176.301621][ C1] process_one_work+0x917/0x1260 [ 2176.301649][ C1] ? worker_detach_from_pool+0x260/0x260 [ 2176.301673][ C1] ? _raw_spin_lock_irqsave+0x120/0x120 [ 2176.301691][ C1] ? kthread_data+0x4e/0xc0 [ 2176.301719][ C1] ? wq_worker_running+0x97/0x190 [ 2176.301737][ C1] worker_thread+0xa47/0x1200 [ 2176.301762][ C1] ? _raw_spin_unlock+0x40/0x40 [ 2176.301786][ C1] kthread+0x28d/0x320 [ 2176.301801][ C1] ? worker_clr_flags+0x190/0x190 [ 2176.301821][ C1] ? kthread_blkcg+0xd0/0xd0 [ 2176.301839][ C1] ret_from_fork+0x1f/0x30 [ 2176.301870][ C1] [ 2176.319616][ T28] Kernel panic - not syncing: hung_task: blocked tasks [ 2176.319637][ T28] CPU: 1 PID: 28 Comm: khungtaskd Not tainted 6.1.133-syzkaller #0 [ 2176.319661][ T28] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 2176.319676][ T28] Call Trace: [ 2176.319685][ T28] [ 2176.319695][ T28] dump_stack_lvl+0x1e3/0x2cb [ 2176.319727][ T28] ? nf_tcp_handle_invalid+0x647/0x647 [ 2176.319753][ T28] ? panic+0x764/0x764 [ 2176.319782][ T28] ? llist_add_batch+0x160/0x1d0 [ 2176.319813][ T28] ? vscnprintf+0x59/0x80 [ 2176.319845][ T28] panic+0x318/0x764 [ 2176.319876][ T28] ? nmi_trigger_cpumask_backtrace+0x2db/0x430 [ 2176.319907][ T28] ? memcpy_page_flushcache+0xfc/0xfc [ 2176.319937][ T28] ? preempt_schedule_thunk+0x16/0x18 [ 2176.319973][ T28] ? nmi_trigger_cpumask_backtrace+0x2db/0x430 [ 2176.319997][ T28] ? nmi_trigger_cpumask_backtrace+0x358/0x430 [ 2176.320025][ T28] ? nmi_trigger_cpumask_backtrace+0x35d/0x430 [ 2176.320049][ T28] ? arch_trigger_cpumask_backtrace+0x10/0x10 [ 2176.320078][ T28] watchdog+0xfc7/0xfd0 [ 2176.320117][ T28] ? watchdog+0x1f8/0xfd0 [ 2176.320153][ T28] kthread+0x28d/0x320 [ 2176.320176][ T28] ? hungtask_pm_notify+0x50/0x50 [ 2176.320216][ T28] ? kthread_blkcg+0xd0/0xd0 [ 2176.320242][ T28] ret_from_fork+0x1f/0x30 [ 2176.320288][ T28] [ 2176.327768][ T28] Kernel Offset: disabled [ 2176.735870][ T28] Rebooting in 86400 seconds..