last executing test programs: 8m34.120217487s ago: executing program 32 (id=385): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$unix(0x1, 0x1, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) r3 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000600)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xb}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x4}}]}, 0x34}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000cc0)=@newtfilter={0x90, 0x2c, 0xd27, 0x70bd2a, 0x25dfdc00, {0x0, 0x0, 0x0, r4, {0x8, 0x3}, {}, {0x7, 0x3}}, [@filter_kind_options=@f_matchall={{0xd}, {0x5c, 0x2, [@TCA_MATCHALL_ACT={0x58, 0x2, [@m_vlan={0x54, 0x1, 0x0, 0x0, {{0x9}, {0x28, 0x2, 0x0, 0x1, [@TCA_VLAN_PUSH_VLAN_ID={0x6, 0x3, 0x57f}, @TCA_VLAN_PARMS={0x1c, 0x2, {{0x4e3, 0xca0b, 0x10000000, 0x3}, 0x2}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc}}}]}]}}]}, 0x90}, 0x1, 0x0, 0x0, 0x40800}, 0x44000) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r5) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) r6 = socket$kcm(0x11, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r6, &(0x7f00000000c0)={&(0x7f0000000380)=@xdp={0x2c, 0x7, r7, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000140)='\r', 0x1}], 0x1, 0x0, 0x0, 0x86dd}, 0x4) 8m32.518505787s ago: executing program 33 (id=387): syz_emit_ethernet(0x4e, &(0x7f0000000300)={@broadcast, @remote, @val={@val={0x88a8, 0x4, 0x0, 0x1}}, {@ipv4={0x800, @tcp={{0x8, 0x4, 0x0, 0x6, 0x38, 0x64, 0x0, 0x4, 0x6, 0x0, @multicast1, @loopback, {[@cipso={0x86, 0x9, 0x2, [{0x7, 0x3, "91"}]}]}}, {{0x4e20, 0x4e23, 0x41424344, 0x41424344, 0x1, 0x0, 0x6, 0x80, 0x95e, 0x0, 0x2, {[@window={0x3, 0x3, 0x4}]}}}}}}}, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000340)={0x2, 0x4001, @dev}, 0x10, 0x0}, 0x300440c4) sendmmsg$sock(0xffffffffffffffff, &(0x7f0000003b40)=[{{0x0, 0x0, &(0x7f00000009c0)=[{&(0x7f00000002c0)="f973085a6ea39ea1b25a1c6b351e11245900557d1c8e9f86bae5e5c64e50ef25afb0295d0c303850b4bff4d088bf9df67e013836e2882dad3f7698b52997", 0x3e}, {&(0x7f0000000380)="82f294054d05973abfac6a6f31050418457d017c5fd68b034cf51b9f6a6d71daa5c776bca90037bc7c3d88b151fbf856f69ebd05e750f13f02af646b284953b6640a08c827c6f2ff", 0x48}], 0x2}}], 0x1, 0x20000044) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3be", 0x6) r1 = accept4(r0, 0x0, 0x0, 0x800) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000040)=[@in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x1c}}]}, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x85, &(0x7f0000000240)={0x0, @in={{0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}}, 0xff, 0x3}, 0x90) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) 7m18.860475069s ago: executing program 34 (id=498): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e22, 0x0, @empty, 0x4000006}, 0x1c) listen(r1, 0x6) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) accept(r0, 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0x9, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x10}, 0x94) r4 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000740), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r3, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000a40)={&(0x7f0000000980)=ANY=[@ANYBLOB="84000000", @ANYRES16=r4, @ANYBLOB="010000000000fbdbdf25010000000800020000000000050005000000000008000300010000004800018005000200200000000600010002000000080006000a000000080003"], 0x84}}, 0x0) 6m56.824838942s ago: executing program 35 (id=536): syz_usb_control_io$hid(0xffffffffffffffff, &(0x7f0000000840)={0x24, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="00220f000000540b4550182395"], 0x0}, 0x0) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000300)={0x1, 0x0, 0x0, &(0x7f0000000480)=""/74, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000400)) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x0, 0x0, 0x0, &(0x7f0000000340)=""/185, &(0x7f0000000140)=""/92}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f00000000c0)=0x1) ioctl$VHOST_VSOCK_SET_GUEST_CID(r0, 0x4008af60, &(0x7f0000001500)={@my=0x1}) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001"], 0x64}}, 0x40110) r1 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r1, &(0x7f0000000500)={0x28, 0x0, 0x2710, @my=0x1}, 0x10) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000080)=""/57, 0x0, &(0x7f0000001540)=""/4092}) r2 = eventfd(0xf7b2) ioctl$VHOST_SET_VRING_ERR(r0, 0x4008af22, &(0x7f0000000040)={0x0, r2}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1) 6m37.683312407s ago: executing program 36 (id=563): syz_open_dev$usbmon(&(0x7f0000000000), 0x6, 0x200) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) syz_open_dev$usbfs(&(0x7f0000000080), 0x201, 0x440) syz_open_dev$mouse(0x0, 0x0, 0x2042) mq_open(&(0x7f0000000340)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xb8\x93\xc3C\xae\x9dc\xd1T\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bL\x10\x00\x00\x00\x04\x00\x00\x00\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdc\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x1d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1J\xec\x926\xb5a0\xa0B\xae|\x00'/336, 0x40, 0xa4, 0x0) writev(r0, 0x0, 0x0) sendmsg$BATADV_CMD_GET_MESH(0xffffffffffffffff, 0x0, 0x0) pselect6(0x40, &(0x7f0000000180)={0x6, 0x3, 0x1fd, 0x7d, 0xfffffffffffffffd, 0x7f, 0x104, 0x8000000000000001}, 0x0, &(0x7f0000000440)={0x3ff, 0x6, 0xae07, 0x9, 0xc, 0x15, 0x80000006, 0x8}, 0x0, 0x0) 5m35.833046618s ago: executing program 37 (id=626): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet6_IPV6_RTHDR(r0, 0x29, 0x39, &(0x7f0000000080)=ANY=[@ANYBLOB="00020201"], 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000000000002}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="3c010000190001000000000000000000e0000001000000000000000000000000fe8000000000000000000000000000aa4e220000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000104000000000000feffffffffffffff030000000000000000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001000000000000008400050020010000000000000000000000000000000000002b00000000000000000000000000000000000000000500000000000002000700000000000000000000000000e00000020000000000000000000000004000000033"], 0x13c}, 0x1, 0x0, 0x0, 0x20000000}, 0x20040880) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) sendmmsg$inet6(r0, &(0x7f0000000a80)=[{{&(0x7f0000000200)={0xa, 0x4e20, 0x4d7, @private2={0xfc, 0x2, '\x00', 0x1}, 0x3}, 0x1c, &(0x7f0000000900)=[{&(0x7f0000000400)="fc", 0x1}], 0x1}}], 0x1, 0x4c040) 5m24.120165414s ago: executing program 38 (id=639): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x40081, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) ioctl$TIOCSTI(r0, 0x5412, 0x0) socket$nl_route(0x10, 0x3, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xb, 0xc3072, 0xffffffffffffffff, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/stat\x00', 0x0, 0x0) pselect6(0x40, &(0x7f0000000240)={0x0, 0x0, 0xd0, 0x7d, 0x0, 0x8000, 0x4, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff, 0x6, 0xffffffffffffffff, 0x9, 0x0, 0xa, 0x80000006, 0x400}, 0x0, 0x0) 5m22.854131436s ago: executing program 39 (id=640): syz_genetlink_get_family_id$mptcp(0x0, 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$nl_route(0x10, 0x3, 0x0) sendmsg$RDMA_NLDEV_CMD_GET(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x180d1}, 0x49010) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={0x14, r4, 0x701, 0x2070bd24, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x40850}, 0x4000) 3m15.205830049s ago: executing program 6 (id=813): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x181) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./bus\x00', 0x140) mount$overlay(0x0, &(0x7f0000000100)='./bus\x00', &(0x7f0000000440), 0x8, &(0x7f0000000080)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './cgroup'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) chdir(&(0x7f00000001c0)='./bus\x00') rename(0x0, 0x0) r3 = creat(&(0x7f0000000240)='./file1\x00', 0x0) io_setup(0x200, &(0x7f0000000140)=0x0) io_submit(r4, 0x3b, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0x0, 0x2, 0x1, 0x0, r3, &(0x7f0000000000), 0x4000}]) 3m11.410295319s ago: executing program 6 (id=822): setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x210000000013, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x7}, 0x1c) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_int(r1, 0x29, 0x49, 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) listen(r0, 0xc) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r3, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), r2) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r4, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)={0x30, r5, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast1=0xac1414aa}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x3}]}]}, 0x30}}, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000740), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)={0x14, r7, 0x1, 0x70bd2c, 0x25dfdbff}, 0x14}}, 0x800) close(0x3) 3m9.487232997s ago: executing program 6 (id=823): syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000040)='./file0\x00', 0x300001a, &(0x7f00000010c0)=ANY=[], 0xfc, 0x2c7, &(0x7f0000000100)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x40, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1002, 0x12) write(r1, &(0x7f0000000a00)="c7", 0x1) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000400)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) mknodat$loop(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x1004, 0x1) r2 = openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) mount$fuse(0x0, 0x0, 0x0, 0x2008800, &(0x7f00000010c0)={{'fd', 0x3d, r2}, 0x2c, {'rootmode', 0x3d, 0x8000}}) syz_fuse_handle_req(r2, &(0x7f00000062c0)="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", 0x2000, 0x0) socket$packet(0x11, 0x3, 0x300) openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x42, 0x0) sendfile(r1, r0, 0x0, 0x3ffff) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x18002, 0x0) sendfile(r1, r0, 0x0, 0x7ffff000) shmget(0x0, 0x2000, 0x80, &(0x7f0000ffb000/0x2000)=nil) 3m5.618741454s ago: executing program 6 (id=829): socket$inet6_icmp_raw(0xa, 0x3, 0x3a) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0x0, 0x0, 0x0}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$BTRFS_IOC_ADD_DEV(0xffffffffffffffff, 0x5000940a, &(0x7f00000001c0)={{}, "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"}) r1 = fsopen(&(0x7f0000000000)='rpc_pipefs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) close(r1) ioprio_get$pid(0x1, 0xffffffffffffffff) bpf$MAP_CREATE(0x0, 0x0, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, 0x0, 0x8000) 3m4.214022715s ago: executing program 8 (id=832): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000480)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) syz_clone(0xb21e0000, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000000)='net/netlink\x00') lseek(r3, 0xffffffffffffffff, 0x1) syz_mount_image$squashfs(&(0x7f0000000240), &(0x7f0000000280)='./file0\x00', 0x0, &(0x7f00000002c0), 0x1, 0x236, &(0x7f0000000000)="$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") 3m2.999765206s ago: executing program 6 (id=833): bpf$MAP_CREATE(0x0, 0x0, 0x48) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) fchdir(0xffffffffffffffff) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_clone(0x20223000, 0x0, 0x0, 0x0, 0x0, 0x0) 3m0.865479855s ago: executing program 6 (id=835): r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$int_in(r0, 0x5452, &(0x7f0000000000)=0x6) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @broadcast}, 0x10) openat$uinput(0xffffffffffffff9c, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x3) syz_clone(0x600, 0x0, 0x33, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000032680)=""/102400, 0x19000) r3 = inotify_init1(0x80800) inotify_add_watch(r3, &(0x7f0000000640)='.\x00', 0x80000001) r4 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x40) fallocate(r4, 0x0, 0x8e14, 0x8ffff) copy_file_range(r4, 0x0, r4, &(0x7f0000000500)=0xffff, 0x9, 0x0) 2m48.230619613s ago: executing program 40 (id=832): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000480)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) syz_clone(0xb21e0000, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000000)='net/netlink\x00') lseek(r3, 0xffffffffffffffff, 0x1) syz_mount_image$squashfs(&(0x7f0000000240), &(0x7f0000000280)='./file0\x00', 0x0, &(0x7f00000002c0), 0x1, 0x236, &(0x7f0000000000)="$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") 2m47.520496079s ago: executing program 9 (id=863): socket$nl_generic(0x10, 0x3, 0x10) socket$inet(0x2, 0x2, 0x1) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_xfrm(0x10, 0x3, 0x6) mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x3, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=[@cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x10}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x90}, 0x80) socketpair$unix(0x1, 0x2, 0x0, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000001c0)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = dup(r5) syz_ublk_setup_queues(r6, r4, &(0x7f00000004c0)={0x0, 0xbd, 0x10, 0x1, 0x7f}, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe708, 0x42, 0x1000002, 0x91, 0x0, r2}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x3b00, 0x2, 0x1, 0x3aa}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x93ea, 0x2000, 0x4003bfff, 0x2b9, 0x0, r3}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5, 0x800, 0x1, 0x26d}}], 0x1, 0x0, 0x0) 2m44.23887956s ago: executing program 41 (id=835): r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$int_in(r0, 0x5452, &(0x7f0000000000)=0x6) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @broadcast}, 0x10) openat$uinput(0xffffffffffffff9c, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x3) syz_clone(0x600, 0x0, 0x33, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000032680)=""/102400, 0x19000) r3 = inotify_init1(0x80800) inotify_add_watch(r3, &(0x7f0000000640)='.\x00', 0x80000001) r4 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x40) fallocate(r4, 0x0, 0x8e14, 0x8ffff) copy_file_range(r4, 0x0, r4, &(0x7f0000000500)=0xffff, 0x9, 0x0) 2m42.223407469s ago: executing program 1 (id=856): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x1b, 0x0, 0x0) r3 = socket$kcm(0x29, 0x2, 0x0) r4 = socket$kcm(0x2, 0x1, 0x0) sendmsg$inet(r4, &(0x7f0000000fc0)={&(0x7f0000000000)={0x2, 0x4001, @remote}, 0x10, 0x0}, 0x20000811) ioctl$sock_kcm_SIOCKCMATTACH(r3, 0x89e0, &(0x7f0000000040)={r4}) sendmsg$kcm(r3, &(0x7f0000002080)={0x0, 0x0, &(0x7f0000002000)=[{&(0x7f0000000880)="1a", 0x100000}], 0x1}, 0x0) 2m42.135338011s ago: executing program 9 (id=857): openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/custom0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000140), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) shmat(0x0, &(0x7f0000ffc000/0x3000)=nil, 0x4000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x0, 0x3, 0x0, 0x0, 0x8, 0x0, 0x0, 0x41000, 0x36, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xa22}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="2200000004"], 0x48) socket(0x29, 0x2, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) syz_open_procfs(0x0, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x48) keyctl$update(0x2, 0x0, 0x0, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000000c0)={r2}, 0x4) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000640)={r1, 0xffffffffffffffff}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x7, 0x1c, &(0x7f0000000680)=ANY=[@ANYBLOB="18080000cbb60000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000008000000bf0920000000000035090100000000009500000000000000b7080000000000007b8af8ff00000000b7080000020000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r3, @ANYBLOB="0000000000020000b7050000080000001c00000000000000bf980000000000000d080000000000008500000006000000b70000000200000095"], &(0x7f0000000000)='GPL\x00', 0x5, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000}, 0x94) 2m40.504814279s ago: executing program 1 (id=858): socket$nl_generic(0x10, 0x3, 0x10) socket$inet(0x2, 0x2, 0x1) socket$nl_generic(0x10, 0x3, 0x10) socket(0xa, 0x3, 0x3a) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_xfrm(0x10, 0x3, 0x6) mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x3, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x4004000) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x80) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socketpair$unix(0x1, 0x2, 0x0, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000001c0)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup(r1) syz_ublk_setup_queues(r2, r0, &(0x7f00000004c0)={0x0, 0xbd, 0x10, 0x1, 0x7f}, &(0x7f0000001080)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x8000e308, 0x42, 0x1000002, 0x91}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x3b00, 0x2, 0x1, 0x3aa}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x93ea, 0x2000, 0x4003bfff, 0x69}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5, 0x800, 0x1, 0x26d}}], 0x1, 0x0, 0x0) 2m40.02232835s ago: executing program 9 (id=860): syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000180)='./file1\x00', 0x2000c16, &(0x7f00000001c0)={[{@usrquota}, {@nodelalloc}], [{@fsmagic={'fsmagic', 0x3d, 0x3}}, {@smackfshat={'smackfshat', 0x3d, '$:],-}\x12-\x0e)^\''}}, {@appraise_type}, {@func={'func', 0x3d, 'POLICY_CHECK'}}, {@smackfshat={'smackfshat', 0x3d, 'ext4\x00'}}]}, 0xff, 0x25e, &(0x7f0000000e80)="$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") prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$inet6(0xa, 0x800000000000002, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x20, 0xf, &(0x7f0000000280)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8fea, 0x0, 0x0, 0x0, 0x5}, {{0x18, 0x1, 0x1, 0x0, r4}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x67a021c03d2005e9, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99ee}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000002380)={r5, 0x0, 0x2d, 0x0, @val=@netfilter={0x2, 0x4, 0x600, 0x1}}, 0x20) connect$inet6(r3, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @mcast1, 0x4}, 0x1c) writev(r3, &(0x7f0000002a00)=[{&(0x7f0000001880)="fd", 0x1}], 0x1) 2m38.054514153s ago: executing program 0 (id=864): bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0800000004000000040000000900000000", @ANYRES32=0x0, @ANYRES32], 0x50) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, 0x0, 0x20004450) socket$nl_netfilter(0x10, 0x3, 0xc) socket$alg(0x26, 0x5, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r2, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/cgroup\x00') r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$IP6T_SO_SET_ADD_COUNTERS(r3, 0x29, 0x41, 0x0, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) recvmsg$unix(r1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f00000014c0), 0xe8}, 0x0) r4 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x3, 0x8, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000000000000000000000000000018020000", @ANYRES32=r4, @ANYBLOB="0000000000000000b703000000000000850000000d000000b70000000000000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r5, 0x0, 0xe, 0x0, &(0x7f0000000900)="c1dfb080cd21d308098ee68888a8", 0x0, 0xaded, 0x4000000, 0x0, 0x0, 0x0, 0x0}, 0x50) 2m36.973919699s ago: executing program 1 (id=865): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0xffff, 0x3fd, 0x0, 0xb2, 0x0, 0x2}, 0x9c) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) sendto$inet6(r3, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) ptrace$getregset(0x4204, 0x0, 0x6, 0x0) shutdown(r3, 0x2) 2m34.92368418s ago: executing program 1 (id=866): socket$tipc(0x1e, 0x2, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x4) socket$can_j1939(0x1d, 0x2, 0x7) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0xc000) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, 0x0) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x300, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) fsmount(0xffffffffffffffff, 0x1, 0x8) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r1, &(0x7f00000001c0)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0xfffc, 0x0, @loopback={0x0, 0x1c9ae7fffe9a6f34}}, 0x1c) setsockopt$inet_sctp6_SCTP_EVENTS(r1, 0x84, 0xb, &(0x7f00000000c0)={0xfd, 0x0, 0xfe, 0x22, 0x0, 0x7, 0x6, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2, 0x3}, 0xe) shutdown(r1, 0x1) recvmmsg(r1, &(0x7f0000000840)=[{{0x0, 0x0, 0x0}}], 0x414, 0x0, 0x0) 2m34.922337323s ago: executing program 9 (id=876): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) process_vm_writev(r2, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_group_source_req(r4, 0x29, 0x2e, &(0x7f0000000200)={0x1, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @local}, 0x3}}}, 0x108) r5 = syz_open_procfs(0x0, &(0x7f00000003c0)='net/mcfilter6\x00') preadv(r5, &(0x7f0000000580)=[{&(0x7f00000004c0)=""/142, 0x8e}], 0x1, 0x36, 0xffffffff) 2m34.754538849s ago: executing program 0 (id=868): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x2000800001000088}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) sched_setaffinity(0x0, 0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000400)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x10, 0x1c, &(0x7f0000000040)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0xe0}, {{0x18, 0x1, 0x1, 0x0, r4}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x2, 0x1}, {0x3, 0x3, 0x6, 0xa, 0xa, 0xfff8, 0x50}, {0x7, 0x1, 0xb, 0x2, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {0x7, 0x0, 0x0, 0x9}, {0x7, 0x0, 0xc}, {0x18, 0x2, 0x2, 0x0, r3}, {}, {0x46, 0x8, 0xfff1, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 2m32.737738872s ago: executing program 9 (id=869): r0 = add_key$keyring(&(0x7f0000000680), &(0x7f0000000000)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000000c0)={'fscrypt:', @desc4}, &(0x7f0000000100)={0x0, "00379bce195566778899aabbccddfcff00112233445566778899aabbccddeeff000011688e0346d524b29db701e5ddeeff8000", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000180)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x32]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000001c0)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x33]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000200)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x34]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000240)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x35]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000280)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x36]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000002c0)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x37]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000300)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x38, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x0, 0x38]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000340)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x39]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000380)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x61]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000003c0)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x62]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000400)={'fscrypt:', @desc3}, &(0x7f0000000100)={0x0, "00112233444d66778899aabbccddefff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff0011223344556677889c69bbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000440)={'fscrypt:', @auto=[0x30, 0x30, 0x0, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x6f, 0x30, 0x30, 0x30, 0x30, 0x64]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000480)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x65]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000004c0)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x66]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000500)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x31, 0x30]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000540)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x31, 0x31]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) 2m20.679037986s ago: executing program 0 (id=881): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000040)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x6}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) unshare(0x8000000) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) connect$inet6(r3, 0x0, 0x0) setitimer(0x2, &(0x7f0000000040)={{0x0, 0x2710}, {0x0, 0x2710}}, 0x0) setitimer(0x2, 0x0, 0x0) socket$igmp6(0xa, 0x3, 0x2) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r3, 0x6, 0x23, 0x0, &(0x7f0000000000)) 2m20.677558032s ago: executing program 9 (id=882): openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = socket$inet_udp(0x2, 0x2, 0x0) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000140)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="0207000902"], 0x10}}, 0x0) r3 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) syz_genetlink_get_family_id$nfc(&(0x7f0000000480), 0xffffffffffffffff) write$nci(r3, &(0x7f00000004c0)=ANY=[], 0x102) bind$inet(r1, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r1, &(0x7f0000000480)={0x2, 0x4e23, @multicast2}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f00000002c0)={{{@in=@multicast2, @in6=@mcast1, 0x4e20, 0x4, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x3, 0xfffffffffffffffe}, {0x0, 0x0, 0xfffffffffffffffc, 0xff}, 0x0, 0x0, 0x1}, {{@in=@dev={0xac, 0x14, 0x14, 0x3c}, 0x0, 0x32}, 0x0, @in=@private=0xa010100, 0x0, 0x2, 0x0, 0xb7, 0xfffffffe, 0xffffff7e}}, 0xe8) sendmmsg(r1, &(0x7f0000007fc0), 0x800001d, 0x1c) 2m20.6721305s ago: executing program 1 (id=884): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x10000005) prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) socket$inet_tcp(0x2, 0x1, 0x0) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r5 = dup(r4) sendmsg$inet(r5, &(0x7f0000000780)={&(0x7f0000000100)={0x2, 0xffff, @multicast1}, 0x10, &(0x7f00000014c0)=[{&(0x7f0000000000)="be39", 0xffeb}, {0x0}], 0x2, &(0x7f0000000c80)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @local, @private}}}], 0x20}, 0x0) recvmmsg(r5, 0x0, 0x0, 0x2, 0x0) ioctl$KDFONTOP_SET(r5, 0x4b72, 0x0) 2m15.373042484s ago: executing program 0 (id=886): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x40010, 0xffffffffffffffff, 0xd6fff000) syz_open_dev$dvb_demux(0x0, 0x0, 0x41) syz_open_dev$dvb_demux(&(0x7f0000001e00), 0x0, 0x2000) 2m15.370582536s ago: executing program 1 (id=887): openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) syz_open_dev$radio(&(0x7f0000000340), 0x2, 0x2) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$inet6_tcp(0xa, 0x1, 0x0) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x1000, 0x1) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r1, &(0x7f0000003840)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r1, &(0x7f0000000040)={0x50, 0x0, r2, {0x7, 0x1f, 0x6, 0xa68d7c51df802ff5, 0xffbc, 0x6, 0x1d46, 0x0, 0x0, 0x0, 0x40}}, 0x50) syz_fuse_handle_req(r1, &(0x7f0000008380)="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006340)={0x20, 0x0, 0x68cc, {0x0, 0x14}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x101001, 0x0) pselect6(0x40, &(0x7f0000000240)={0x3, 0x0, 0x202, 0x5, 0x10000, 0x8000, 0x4, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff, 0x6, 0xffffffffffffffff, 0x9, 0x0, 0xf, 0x80000006, 0xb06c}, 0x0, 0x0) 2m14.061367905s ago: executing program 0 (id=872): bpf$MAP_CREATE(0x0, 0x0, 0x48) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) fchdir(0xffffffffffffffff) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_clone(0x20223000, 0x0, 0x0, 0x0, 0x0, 0x0) 2m11.488701461s ago: executing program 0 (id=873): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000180)=ANY=[@ANYBLOB="1201fb0009030320d812010079de01ec020109021b0001000003000904000001785ecc00090585020004"], 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x7f) read$char_usb(r1, &(0x7f0000000000)=""/172, 0xac) syz_usb_disconnect(0xffffffffffffffff) syz_usb_disconnect(0xffffffffffffffff) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000240)=ANY=[@ANYRESOCT, @ANYBLOB="77223a7160d55a7c9c00205a86cc4518900ed2a87f5d0940de411e9ba9dc58b3f1302d6b0161aad75d1fb201726cbb7179b968f1d248dd08577e825671335f25175e87ece2591140ac25410c74f13a18d636adbcd1dce9156bd604fa690dbbba80b9d3442dca5070b107d085e697f5d136e9"], 0x0) r2 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$EVIOCRMFF(0xffffffffffffffff, 0x4004550d, 0x0) syz_usb_control_io$cdc_ncm(0xffffffffffffffff, 0x0, 0x0) r3 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) read$char_usb(r3, &(0x7f0000000300)=""/227, 0xe3) read$char_usb(r2, &(0x7f0000000400)=""/186, 0x110) syz_usb_disconnect(0xffffffffffffffff) r4 = syz_usb_connect(0x0, 0x2d, &(0x7f00000003c0)=ANY=[@ANYBLOB="120100009ac0b620110f211066865578ac0109029c000100000400090400bf900b64ea00090587"], 0x0) syz_usb_disconnect(r4) syz_open_dev$evdev(&(0x7f0000000040), 0x3e, 0x208604) syz_usb_connect$cdc_ecm(0x0, 0x5e, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x0) syz_usb_disconnect(r0) 2m5.211874498s ago: executing program 42 (id=882): openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = socket$inet_udp(0x2, 0x2, 0x0) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000140)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="0207000902"], 0x10}}, 0x0) r3 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) syz_genetlink_get_family_id$nfc(&(0x7f0000000480), 0xffffffffffffffff) write$nci(r3, &(0x7f00000004c0)=ANY=[], 0x102) bind$inet(r1, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r1, &(0x7f0000000480)={0x2, 0x4e23, @multicast2}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f00000002c0)={{{@in=@multicast2, @in6=@mcast1, 0x4e20, 0x4, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x3, 0xfffffffffffffffe}, {0x0, 0x0, 0xfffffffffffffffc, 0xff}, 0x0, 0x0, 0x1}, {{@in=@dev={0xac, 0x14, 0x14, 0x3c}, 0x0, 0x32}, 0x0, @in=@private=0xa010100, 0x0, 0x2, 0x0, 0xb7, 0xfffffffe, 0xffffff7e}}, 0xe8) sendmmsg(r1, &(0x7f0000007fc0), 0x800001d, 0x1c) 1m59.551853004s ago: executing program 43 (id=887): openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) syz_open_dev$radio(&(0x7f0000000340), 0x2, 0x2) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$inet6_tcp(0xa, 0x1, 0x0) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x1000, 0x1) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r1, &(0x7f0000003840)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r1, &(0x7f0000000040)={0x50, 0x0, r2, {0x7, 0x1f, 0x6, 0xa68d7c51df802ff5, 0xffbc, 0x6, 0x1d46, 0x0, 0x0, 0x0, 0x40}}, 0x50) syz_fuse_handle_req(r1, &(0x7f0000008380)="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006340)={0x20, 0x0, 0x68cc, {0x0, 0x14}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x101001, 0x0) pselect6(0x40, &(0x7f0000000240)={0x3, 0x0, 0x202, 0x5, 0x10000, 0x8000, 0x4, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff, 0x6, 0xffffffffffffffff, 0x9, 0x0, 0xf, 0x80000006, 0xb06c}, 0x0, 0x0) 1m55.033354089s ago: executing program 44 (id=873): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000180)=ANY=[@ANYBLOB="1201fb0009030320d812010079de01ec020109021b0001000003000904000001785ecc00090585020004"], 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x7f) read$char_usb(r1, &(0x7f0000000000)=""/172, 0xac) syz_usb_disconnect(0xffffffffffffffff) syz_usb_disconnect(0xffffffffffffffff) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000240)=ANY=[@ANYRESOCT, @ANYBLOB="77223a7160d55a7c9c00205a86cc4518900ed2a87f5d0940de411e9ba9dc58b3f1302d6b0161aad75d1fb201726cbb7179b968f1d248dd08577e825671335f25175e87ece2591140ac25410c74f13a18d636adbcd1dce9156bd604fa690dbbba80b9d3442dca5070b107d085e697f5d136e9"], 0x0) r2 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$EVIOCRMFF(0xffffffffffffffff, 0x4004550d, 0x0) syz_usb_control_io$cdc_ncm(0xffffffffffffffff, 0x0, 0x0) r3 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) read$char_usb(r3, &(0x7f0000000300)=""/227, 0xe3) read$char_usb(r2, &(0x7f0000000400)=""/186, 0x110) syz_usb_disconnect(0xffffffffffffffff) r4 = syz_usb_connect(0x0, 0x2d, &(0x7f00000003c0)=ANY=[@ANYBLOB="120100009ac0b620110f211066865578ac0109029c000100000400090400bf900b64ea00090587"], 0x0) syz_usb_disconnect(r4) syz_open_dev$evdev(&(0x7f0000000040), 0x3e, 0x208604) syz_usb_connect$cdc_ecm(0x0, 0x5e, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x0) syz_usb_disconnect(r0) 26.052927416s ago: executing program 5 (id=892): socket$inet_tcp(0x2, 0x1, 0x6) r0 = fsopen(&(0x7f0000000100)='nfs\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000240)='/sys/kernel/address_bits', 0x20000, 0x280) ioctl$VIDIOC_S_TUNER(r2, 0x4054561e, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x6) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000140)='source\x00', &(0x7f0000000180)='127.0.0.1:/export\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f00000001c0)='addr\x00', &(0x7f0000000200)='127.0.0.1\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f00000002c0)='vers\x00', &(0x7f0000000300)='4\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) 23.696721324s ago: executing program 5 (id=993): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x400, &(0x7f0000000280), 0x2, 0x786, &(0x7f0000000f80)="$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") r0 = socket$inet6(0xa, 0x800000000000002, 0x0) ioctl$XFS_IOC_AG_GEOMETRY(r0, 0xc080583d, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f0000000040), 0x0, 0x0) read$msr(r1, &(0x7f0000000300)=""/102400, 0x19000) fanotify_init(0x3f, 0x0) pipe(&(0x7f0000000380)) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x10000000013, &(0x7f0000000180)=0x1, 0x4) setsockopt$inet_tcp_int(r2, 0x6, 0x14, &(0x7f00000000c0)=0x1, 0x4) connect$inet(r2, &(0x7f0000000300)={0x2, 0x0, @remote}, 0x10) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_buf(r3, 0x0, 0x8008000000010, &(0x7f0000000380), 0x0) socket$key(0xf, 0x3, 0x2) sendto$inet(r2, &(0x7f0000000200)="e1", 0xfea8, 0x0, 0x0, 0x0) 22.945798785s ago: executing program 8 (id=898): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'geneve0\x00'}) r1 = syz_open_dev$loop(&(0x7f0000000280), 0xffff, 0x14f600) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000010007000000000000000000000a20000000000a03000000000000000100010000"], 0xec}, 0x1, 0x0, 0x0, 0x24004005}, 0x0) ioctl$LOOP_CONFIGURE(r1, 0x4c0a, &(0x7f0000000400)={0xffffffffffffffff, 0x0, {0x2a00, 0x80010000, 0x0, 0xe, 0x4000080000000700, 0x0, 0x0, 0x19, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "f4bd000000801900000000000000000000000000000000000000004000", [0xfffffffffffffffc, 0x31]}}) ioctl$DRM_IOCTL_MODE_GETCRTC(0xffffffffffffffff, 0xc06864a1, &(0x7f0000000340)={&(0x7f0000000340)}) r2 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) r3 = syz_open_dev$vim2m(0x0, 0x7, 0x2) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r3, 0xc02c564a, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000540), 0x40, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r2, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, &(0x7f0000000000)={0x73622a85, 0x1100, 0x3}) ioctl$BINDER_THREAD_EXIT(0xffffffffffffffff, 0x40046208, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r2, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000040)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_GETPLANE(r2, 0xc02064b6, &(0x7f00000001c0)={r4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r2, 0xc02064b9, &(0x7f00000002c0)={&(0x7f0000000240)=[0x0, 0x0, 0x0], &(0x7f0000000040), 0x3, r5}) ioctl$DRM_IOCTL_MODE_ATOMIC(r2, 0xc03864bc, &(0x7f0000000580)={0x401, 0x1, &(0x7f0000000180)=[r5], &(0x7f00000000c0)=[0x3], &(0x7f0000000640)=[r7, r6, r6], &(0x7f0000000340), 0x0, 0xffffffffffffffff}) 20.846027945s ago: executing program 8 (id=1001): r0 = socket$nl_generic(0x10, 0x3, 0x10) socket$netlink(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000380)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) shmat(0x0, &(0x7f0000ffc000/0x3000)=nil, 0x4000) syz_open_dev$vim2m(0x0, 0x7, 0x2) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB], 0x0, 0x34}, 0x28) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x15, 0x3, &(0x7f0000000100)=@framed, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r4, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x1, 0x10, 0x0, 0x0, 0x0, 0x0, 0xb00}, 0x90) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) 19.078108124s ago: executing program 8 (id=1002): r0 = socket$netlink(0x10, 0x3, 0x6) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) r5 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r5, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r5, &(0x7f0000000480)={0x2, 0x4e23, @multicast2}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r5, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@dev={0xfe, 0x80, '\x00', 0x4}, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x0, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x0, 0x80000000000000, 0x0, 0x0, 0x4000000000002, 0x0, 0xffeffffffffffffe}, {0x0, 0x2000000000000, 0x0, 0x2}, 0x0, 0x0, 0x1, 0x0, 0x3}, {{@in6=@ipv4={'\x00', '\xff\xff', @local}, 0xfffffffd, 0x32}, 0x0, @in=@broadcast, 0x10000, 0x0, 0x2, 0xb7, 0xc4, 0xfffffffe}}, 0xe8) sendmmsg(r5, &(0x7f0000007fc0), 0x800001d, 0x1c) 18.529516665s ago: executing program 5 (id=1003): socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x8000000000100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x8000, &(0x7f0000000080)=ANY=[@ANYBLOB="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"], 0x0, 0x31a, &(0x7f0000000580)="$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") sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$nl_netfilter(0x10, 0x3, 0xc) sendmmsg$inet_sctp(0xffffffffffffffff, &(0x7f00000032c0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="30000000000000008400000001000000000000017c"], 0x30}], 0x1, 0x0) r3 = socket(0xa, 0x2, 0x0) connect$inet6(r3, &(0x7f0000000040)={0xa, 0x4e23, 0x42003, @dev={0xfe, 0x80, '\x00', 0xd}, 0x4}, 0x1c) r4 = syz_open_procfs(0x0, &(0x7f0000000100)='mountinfo\x00') setsockopt$SO_TIMESTAMPING(r3, 0x1, 0x41, &(0x7f0000000440)=0x3faa, 0x4) sendfile(r3, r4, 0x0, 0xffffffff) 17.78685678s ago: executing program 7 (id=1004): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000340)=ANY=[@ANYBLOB="200000001000010700000000200000000a0000000c000200657468746f6f6c"], 0x20}}, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f00000002c0), r1) syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), r1) accept$alg(r0, 0x0, 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) r3 = socket$netlink(0x10, 0x3, 0x4) writev(r3, &(0x7f0000002a80)=[{&(0x7f0000000880)="6d0000001400116109004beafd0d8c560a84476080ff7612082e32b6e006f635a3641b0fe9e6e85c5e", 0x29}, {&(0x7f0000000900)="e6ed585f03ab7ac75c72950460c1f54725bad79eed8968baed6f89a1d94386cd079d5771ac8ecdb367de8ae71969c8a6ede0e8bd802c71be70d1842f2d20653de9424c5042f47c005dbecac36b4282753a2a68c1e3336622022827871e8b5b883f57d9f2acb3b84b562bbd53f29aeacc2472a751439fff78ec95f10c9e524b63fdc2dc6528a628a38cb0c953c6adde4210584627b70987fbc2b08a732db7ae8d18ee3f3e277a5f7afea240a77c38523d74bbaffea4cf9afd9caa03addd80618fe9fe27ccad195f914f2af1faa63b521e6f64e0", 0xd3}, {&(0x7f0000001980)="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", 0xe00}, {&(0x7f0000002980)}], 0x4) shutdown(r2, 0x0) landlock_add_rule$LANDLOCK_RULE_NET_PORT(0xffffffffffffffff, 0x2, &(0x7f0000000240)={0x3, 0x8001}, 0x0) bpf$TOKEN_CREATE(0x24, 0x0, 0x0) r4 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r4, 0x18000000000002a0, 0x12, 0x0, &(0x7f0000000340)="b9ff0300600d220962f0480d0600fb9e14f0", 0x0, 0xe00, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) ioctl$sock_inet_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000040)={'batadv_slave_1\x00', {0x2, 0x0, @loopback=0x7f000000}}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) setsockopt$inet_sctp6_SCTP_RECVNXTINFO(0xffffffffffffffff, 0x84, 0x21, &(0x7f0000000180)=0x10000, 0x4) 16.730287844s ago: executing program 4 (id=1005): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet6_IPV6_RTHDR(r0, 0x29, 0x39, &(0x7f0000000080)=ANY=[@ANYBLOB="00020201"], 0x18) bind$netlink(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000000000002}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000280)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_emit_ethernet(0x2a, &(0x7f0000000000)=ANY=[@ANYBLOB="0180c20001007f00ae41210000029078ac1e0001ac1414aa12009078dfffec01"], 0x0) ioctl$vim2m_VIDIOC_STREAMOFF(0xffffffffffffffff, 0x40045612, &(0x7f0000000000)=0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="3c010000190001000000000000000000e0000001000000000000000000000000fe8000000000000000000000000000aa4e220000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000104000000000000feffffffffffffff030000000000000000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001000000000000008400050020010000000000000000000000000000000000002b00000000000000000000000000000000000000000500000000000002000700000000000000000000000000e00000020000000000000000000000004000000033"], 0x13c}, 0x1, 0x0, 0x0, 0x20000000}, 0x20040880) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) sendmmsg$inet6(r0, &(0x7f0000000a80)=[{{&(0x7f0000000200)={0xa, 0x4e20, 0x4d7, @private2={0xfc, 0x2, '\x00', 0x1}, 0x3}, 0x1c, &(0x7f0000000900)=[{&(0x7f0000000400)="fc", 0x1}], 0x1}}], 0x1, 0x4c040) 16.588406514s ago: executing program 2 (id=1006): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeeb, 0x8031, 0xffffffffffffffff, 0xc36e5000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r3, 0x29, 0x20, &(0x7f0000000180)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x800, 0x0, 0x3, 0x1, 0x8}, 0x52) bind$inet6(0xffffffffffffffff, 0x0, 0x0) shutdown(0xffffffffffffffff, 0x0) setsockopt$sock_linger(0xffffffffffffffff, 0x1, 0xd, &(0x7f0000000040)={0x1, 0xffffffff}, 0x8) sendto$inet6(0xffffffffffffffff, &(0x7f00000001c0), 0x0, 0x4, 0x0, 0x0) getpid() socket$pppl2tp(0x18, 0x1, 0x1) 16.552917689s ago: executing program 3 (id=1007): socket$inet6_tcp(0xa, 0x1, 0x0) r0 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e21, @multicast2}, 0x10) pipe(&(0x7f0000000200)) syz_usb_connect(0x0, 0x24, 0x0, 0x0) mkdirat(0xffffffffffffffff, 0x0, 0xf3) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) close(0xffffffffffffffff) socket$unix(0x1, 0x3, 0x0) r2 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_FILL_RING(r2, 0x11b, 0x5, 0x0, 0x0) syz_open_dev$radio(0x0, 0x3, 0x2) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x72, 0x0, 0x7fff0000}]}) close_range(r3, 0xffffffffffffffff, 0x0) 15.452963079s ago: executing program 4 (id=1008): r0 = syz_open_dev$usbfs(&(0x7f0000000080), 0x76, 0x101301) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f0000000140)) accept$inet(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x2, 0x7}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_FUTEX_WAITV={0x35, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) getpgrp(0x0) read$msr(r1, &(0x7f0000005580)=""/102392, 0x18ff8) madvise(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0xe) r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x109042, 0x0) write$P9_RSTATu(r2, &(0x7f00000003c0)={0x23b, 0x7d, 0x2, {{0x500, 0xf2, 0x0, 0x4, {0x0, 0x1, 0x5}, 0x0, 0x0, 0x0, 0x0, 0x1b, '\x04nodev{evoo~\x059\xc6\x00\x05\x00\x007\xd9:\x8b\x92\x00\x00\x00', 0x38, 'pJ\x86\xce>\x02\x00}\xfag>\xff\xeb\t\xb55\x1f[\xde\x05@\x00\x00\x00\x00\x18{\x82\x00\xb5\x00\x00+Y_\xcb\x14\x03CT\xb9\xfd\x9e\xf1\x96\xa5\x1c\xd5\x15z\xdc\x81\x03\xb4\x94\xe1', 0xf, '\xcf\xc2m\xd7\xc5\xb4\x99\xbf\xb4+\x93\x80~\x8bZ', 0x5d, '\xf8\xf6i\xfbqm\xcf1^\xca\xf3\x85@\x9a\xc6[\x94\bg\x8c,;\xa6\x1dR\xc3l\xde{\a\xdb\xda\xb2\x88K\xaf\x05\x00~\x04\xe6\x9d\xb0\xc3\xca\x00\x00\x00\x00\x00\x00G\xec!\xca\xbf\xf2\x0f\x9c\x1c\xbe6\xf4\xfd\x1aL\xc2\x9e\x95?\xa5\xe0R\x15t\x80\xe8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x81\xff\xff\xff\x00'}, 0x134, 'm\x97\x8d,0K\xca\xe9#\x00\xf9\xda\xa5\xee#&n\xcf\x85\xfe\xa6^B\xd9y\xa3\xfd\xe5\xf4U\xda\xf0;\x11r\xd9{\xad\xc7\tZ\xfdv\xfeO\x04A\xf7\xf7t\x1e\xac\x03\x00\x00\xec\xff\x00\x00\xdb\xa0\xc2\xf7\xf0\x9f\xf5<~M\x1a\xd6n-\a\x01\x98\x01\x9f0\x11\x84G\xaa\x9at\xf5\x16\x85\xf5\x06\xae\x89H\x06\x87\x82g\xd5\xa1)\x8dy,J7\xf2\xe1\xcb\xbd$\x82\x92\x9a\r\x89r\xb5\xcfs.\xa5\xb0\xd7#\x85\x9d\xba?\x93\xae\xd3\xb4.\xe7\xca\xc0}\xe0\x9d\x1dh\xa6\x033\xa8\x82F}+1\xaa\xcd\xf9\x18\x85I\xb1\x12]lL\x9b\x18\xc2\xfbV\xc5}}\xc6&\xe49\a\x96\xa1\xebH\'Fi\xab\x13\xf8\xb1\x1d\x14`Y\xf3\x10\xe2cMY?\xecx\xd5)\xf3\x82\x06fd\xdf$NL\x90W\np\x04\x9f9\x9f\x9f\xfeQ\xf4\x1f\xd3u\x84\x06\x1fu\xb7y|\xe1\xfe\x11\xea\x91\x96\t\xd5\x1aA\xdd=\xe3\x04\xbd|~\xd0\xa4V\xf0\xae\x12Qa\x05\xc9\xce\x88}\xf5\xa6\xe0\xb6\xa7}Yl\xf8\x8b\xa6\xe5\xc69|}P!\xd7\x98\x95(\xfd\x179\xe1\xc2\xd8\x7f\xff\x00'/308}}, 0x23b) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x800) socketpair(0x21, 0x80000, 0x3, 0x0) ioctl$VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, 0x0) ioctl$USBDEVFS_CONNECTINFO(r0, 0x80045518, 0x0) 15.423243943s ago: executing program 7 (id=1009): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000101c1b021b00000000000109022400010000400009040000010300400009"], 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, 0x0, 0x0) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000ec0), 0x200) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(r1, 0xc0a85352, &(0x7f0000000f00)={{}, 'port0\x00', 0x0, 0x1000, 0x91e, 0x5a, 0x0, 0x1000, 0x8, 0x0, 0x1, 0x8}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$packet(0x11, 0x2, 0x300) mmap(&(0x7f0000001000/0x3000)=nil, 0x30000, 0x0, 0x11, r3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x1, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="18020000068a00800000000004000000cb2004001001000095"], 0x0, 0x4, 0xfe5, &(0x7f0000001600)=""/4069, 0x40f00, 0x41}, 0x94) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000240)={'dummy0\x00', &(0x7f0000000300)=@ethtool_perm_addr={0x4b, 0x2b, "4372dcc479e73bdcff27008bea5c3116934efc980074b6641702b91f9afb90beeb84d658e9f118be85e05a5a06452546c36a5218f6214a13"}}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000080)={0x24, 0x0, 0x0, &(0x7f0000000040)={0x0, 0x22, 0x5, {[@local=@item_4={0x3, 0x2, 0x9, "0400"}]}}, 0x0}, 0x0) r4 = socket$nl_sock_diag(0x10, 0x3, 0x4) bind$netlink(r4, &(0x7f0000000180)={0x10, 0x0, 0x25dfdbfb, 0x4}, 0xc) r5 = openat$iommufd(0xffffffffffffff9c, 0x0, 0x42002, 0x0) ioctl$IOMMU_IOAS_ALLOC(r5, 0x3b81, &(0x7f0000000040)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_COPY$syz(r5, 0x3b83, &(0x7f0000000080)={0x28, 0x10000, r6, r6, 0xffffffffffffffff, 0x1, 0x405, 0x1e190e}) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r7, 0x5) close_range(r7, 0xffffffffffffffff, 0x0) 14.299386317s ago: executing program 2 (id=1010): openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x4e20, @empty}], 0x10) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000040)=[@in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}]}, &(0x7f0000000100)=0x10) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x85, &(0x7f0000000240)={0x0, @in={{0x2, 0x0, @empty}}, 0x7, 0x23}, 0x90) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000840)={r2, @in6={{0xa, 0x4e23, 0xe84, @empty, 0x129}}, 0x2, 0x2, 0x0, 0x2, 0x5, 0x8, 0x4}, 0x9c) sendmsg$key(0xffffffffffffffff, 0x0, 0x0) pread64(0xffffffffffffffff, 0x0, 0x0, 0x200) openat$nci(0xffffffffffffff9c, 0x0, 0x2, 0x0) bind$inet(0xffffffffffffffff, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) mkdir(0x0, 0x8) mount(0x0, 0x0, 0x0, 0x8, 0x0) 14.296507386s ago: executing program 5 (id=1011): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x400, &(0x7f0000000280), 0x2, 0x786, &(0x7f0000000f80)="$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") r0 = socket$inet6(0xa, 0x800000000000002, 0x0) ioctl$XFS_IOC_AG_GEOMETRY(r0, 0xc080583d, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f0000000040), 0x0, 0x0) read$msr(r1, &(0x7f0000000300)=""/102400, 0x19000) fanotify_init(0x3f, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x14, &(0x7f00000000c0)=0x1, 0x4) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_buf(r3, 0x0, 0x8008000000010, &(0x7f0000000380)="170000000200010000ffbe8c5ee17688a20033000301fcff000002a257fc5ad90200bb6a880000d6c8db000000df018002000000fc0607bdff59100ac45761547a681f009cee4a5acb3da400001fb700674f00c88ebbf93150334769e106e7db76849d3c98bf79ac2dfc060115003901000000000000ea000000000000000062068f5ee50ce5d4af9477170d283f02ff030000ba000840024f0298e9e90539062a80e605007f71174aa961f3", 0xac) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r4, 0x0, 0x0) sendto$inet(r2, &(0x7f0000000200)="e1", 0xfea8, 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) 14.084902051s ago: executing program 8 (id=1012): r0 = syz_open_procfs(0xffffffffffffffff, 0x0) lseek(r0, 0x10000000005, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = socket(0x10, 0x80002, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0x0, 0x0, 0x0}, 0x94) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8b24, &(0x7f0000000000)={'wlan0\x00'}) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000500)=ANY=[@ANYBLOB="2c00000020000100ffffffff000000000200200000000000000000000800100005000000080002000a01010145da5f63b6718a55a58d9723bac1d6664b1bb0b4f0e52fb069c9d7c730d6aa7c49201754147e22f5bab6e6a6a627e42ee0eca0b86bbb2c5549b9509512812135d177238c57646cd34487660f0e5ac0e94ebaa6da334d9740240a2aaeaee259e4033f8bd9dc27d4496d2d0600faf1b02fdeba7ed92b2564c02b68441cfe4b5326fb4bfec965e573cd90ac17c6a08b008ded0eba761561ff8bb09db357e3b4c4e4f98f24d96f2a953aa4e4162530a2bb55870c4899cdb976753b81f18c059c"], 0x2c}, 0x1, 0x0, 0x0, 0x40008c4}, 0x8000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x18, 0x10, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000408c002000000000000400000018110000b49c084ae18f6d5f2cbda63e118e78bdb2d3784798c30419e76d66749dd5b5f4fbcddc7da1575b9ee7ddb09f93a57b2beb01d443c48166716b0a5ae98e84a56876acc236488e0ad6d3900342389c0c22bf3758dd0633e6bdd2e1da62885c30f9f495cd46239d928e280a66dc1e76bcc4e2c394d62d3666d7102aff538eae080165e9ae9c50cb68c29366bbf5ee269a11556e89ec7b6db46e7df25d35e0991513f8b4d368b3c911d3406e1e59daa0d0f431", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000086000000bf09200000000000550901000000000095000000"], &(0x7f0000000480)='syzkaller\x00', 0x7, 0x0, 0x0, 0x41100, 0x49, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xff}, 0x94) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r4, &(0x7f0000000040)={0xa, 0x4e24}, 0x1c) listen(r4, 0x0) 10.392228166s ago: executing program 3 (id=1013): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) socket$netlink(0x10, 0x3, 0x8) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() rt_tgsigqueueinfo(0x0, 0x0, 0x0, &(0x7f0000000480)={0x0, 0x0, 0x80}) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeeb, 0x8031, 0xffffffffffffffff, 0xc36e5000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) syz_io_uring_setup(0x18d6, &(0x7f0000000280)={0x0, 0x5352, 0x208, 0x3, 0x99}, &(0x7f0000000080), &(0x7f00000004c0), &(0x7f0000000000)) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r3, 0x29, 0x1b, &(0x7f0000000000)={@remote, 0x0, 0x2}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r3, 0x29, 0x1b, &(0x7f0000000040)={@remote={0xfe, 0x80, '\x00', 0xffffffffffffffff}, 0x4, 0x0, 0x3}, 0x20) r4 = io_uring_setup(0x1020, &(0x7f00000000c0)={0x0, 0x0, 0x3000, 0x1, 0xfefffffd}) io_uring_register$IORING_REGISTER_RESIZE_RINGS(r4, 0x21, &(0x7f0000005500)={0x0, 0x2fc3f, 0x20, 0x2, 0x37a}, 0x1) 10.154314602s ago: executing program 7 (id=1014): openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x5, 0x0) socket$inet6(0xa, 0x80002, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) close(0x3) openat$cgroup_procs(r0, &(0x7f0000000080)='cgroup.procs\x00', 0x2, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) unlinkat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x200) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f000068b000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f000068c000/0xc000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) socket$inet6_sctp(0xa, 0x5, 0x84) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r1 = io_uring_setup(0x185d, &(0x7f0000000040)={0x0, 0xc821, 0xc000, 0x4, 0x800000c1}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="16"], 0x50) io_uring_enter(r1, 0x2219, 0x7721, 0x16, 0x0, 0x900) syz_open_procfs(0x0, &(0x7f00000001c0)='fd/3\x00') r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/asound/timers\x00', 0x1800, 0x0) pread64(r2, &(0x7f0000000580)=""/198, 0xc6, 0x10000) 10.097701297s ago: executing program 2 (id=1015): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000000240), 0xb, 0x101301) getpid() socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000200)) ioctl$USBDEVFS_ALLOW_SUSPEND(r1, 0x5522) ioctl$USBDEVFS_IOCTL(r1, 0x80045505, &(0x7f0000000140)=@usbdevfs_driver={0x0, 0x8, 0x0}) ioctl$USBDEVFS_SETCONFIGURATION(r1, 0x80045505, &(0x7f0000000000)=0x1) ioctl$PIO_UNIMAPCLR(0xffffffffffffffff, 0x4b68, 0x0) 9.917320109s ago: executing program 7 (id=1016): syz_usb_connect(0x0, 0x24, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x6) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000980)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$nl_route(0x10, 0x3, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r4, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r4, &(0x7f0000000480)={0x2, 0x4e23, @multicast2}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r4, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@dev={0xfe, 0x80, '\x00', 0x4}, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x2, 0x0, 0x0, 0x0, 0x2, 0x401, 0xffeffffffffffffe}, {0x0, 0x2000000000000}, 0x0, 0x0, 0x1, 0x0, 0x2}, {{@in6=@ipv4={'\x00', '\xff\xff', @multicast1}, 0x0, 0x32}, 0x0, @in=@private=0xa010100, 0x10000, 0x0, 0x2, 0xb7, 0xc4, 0xfffffffe}}, 0xe8) sendmmsg(r4, &(0x7f0000007fc0), 0x800001d, 0x1c) 9.046121543s ago: executing program 3 (id=1017): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000003c0)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x1000, 0x1) bind$netlink(0xffffffffffffffff, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x20000080) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x40000c0) r3 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc)) openat$dir(0xffffffffffffff9c, 0x0, 0x216006, 0x90) syz_open_dev$usbfs(&(0x7f0000000100), 0x8000000000000009, 0x8c0002) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) name_to_handle_at(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)=ANY=[@ANYBLOB="14"], &(0x7f0000000180), 0x0) open_by_handle_at(0xffffffffffffff9c, &(0x7f00000000c0)=ANY=[], 0x0) 6.803037611s ago: executing program 2 (id=1018): socket$kcm(0xa, 0x3, 0x3a) semget(0x3, 0x2, 0x800) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) semget(0x2, 0x3, 0x33a) mount(0x0, 0x0, 0x0, 0x0, 0x0) set_mempolicy(0x3, &(0x7f0000000000)=0x4000000ffb, 0x8) r3 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[], 0x18}, 0x1, 0x0, 0x0, 0x60042800}, 0x40084c0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) ioctl$FBIOPUTCMAP(r3, 0x4605, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 6.747993896s ago: executing program 4 (id=1019): bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x19, 0x3, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @cgroup_sockopt=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) setsockopt$inet6_IPV6_RTHDR(0xffffffffffffffff, 0x29, 0x39, &(0x7f0000000400)=ANY=[@ANYBLOB="0000020100000000d9f9c367923dcaef76ea51d74565b79bf3f9eab00878e9abe3c917545db1ee04dcde5c544c5eda88dc859882"], 0x8) setsockopt$XDP_UMEM_COMPLETION_RING(0xffffffffffffffff, 0x11b, 0x6, &(0x7f00000001c0)=0x103410, 0x4) bpf$ENABLE_STATS(0x20, 0x0, 0x0) sendmsg$nl_route_sched(r0, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}, 0x1, 0x0, 0x0, 0x2000c015}, 0x2404c8c0) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000100)=':..\x1a\x00', 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000001540)={0xd, 0x20000000000000bb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x20, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$netlink(0x10, 0x3, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000380), 0x80042, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000080)=0xe) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x94) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x1a01, 0x0) ioctl$EVIOCGPROP(r2, 0x40047438, &(0x7f0000000180)=""/246) write$binfmt_aout(r2, &(0x7f00000003c0)=ANY=[], 0xfce1) ioctl$TCFLSH(r1, 0x540b, 0x1) 5.420880011s ago: executing program 8 (id=1020): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./my_configfs\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='./my_configfs\x00', &(0x7f0000000300)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000500)='./my_configfs/usb_gadget/g1\x00', 0x1ff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./my_configfs/usb_gadget/g1\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000700)='./my_configfs/usb_gadget/g1/functions/uvc.usb0\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000800)='./my_configfs/usb_gadget/g1/configs/c.1\x00', 0x1ff) chdir(&(0x7f0000000b00)='./my_configfs/usb_gadget/g1/functions/uvc.usb0\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000c00)='control/header/h\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000d00)='streaming/header/h\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000e00)='streaming/uncompressed/u\x00', 0x1ff) symlink(0x0, &(0x7f0000001100)='control/class/fs/h\x00') symlink(&(0x7f0000001400)='streaming/uncompressed/u\x00', 0x0) symlink(&(0x7f0000001600)='streaming/header/h\x00', &(0x7f0000001700)='streaming/class/fs/h\x00') symlink(&(0x7f0000001800)='streaming/header/h\x00', &(0x7f0000001900)='streaming/class/hs/h\x00') symlink(&(0x7f0000001a00)='streaming/header/h\x00', &(0x7f0000001b00)='streaming/class/ss/h\x00') fchdir(r0) symlink(&(0x7f0000001c00)='functions/uvc.usb0\x00', &(0x7f0000001d00)='configs/c.1/uvc.usb0\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000001e00)='UDC\x00', 0x1, 0x0) write(r1, &(0x7f0000001f00)='usbip-vudc.0', 0xc) 4.729693244s ago: executing program 3 (id=1021): socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet_icmp_raw(0x2, 0x3, 0x1) socket$nl_route(0x10, 0x3, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xb, 0xc3072, 0xffffffffffffffff, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/stat\x00', 0x0, 0x0) pselect6(0x40, &(0x7f0000000240)={0x0, 0x0, 0xd0, 0x7d, 0x0, 0x8000, 0x4, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff, 0x6, 0xffffffffffffffff, 0x9, 0x0, 0xa, 0x80000006, 0x400}, 0x0, 0x0) sendmsg$NFULNL_MSG_CONFIG(0xffffffffffffffff, 0x0, 0x0) close(0x3) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) 4.143084078s ago: executing program 2 (id=1022): r0 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r0, &(0x7f00000000c0)={0x201c}) r1 = socket$igmp6(0xa, 0x3, 0x2) syz_usb_connect(0x2, 0x24, 0x0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) syz_clone3(&(0x7f0000000900)={0x23800000, 0x0, 0x0, 0x0, {0x27}, 0x0, 0x0, 0x0, 0x0}, 0x58) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x1, 0x0, 0x0, 0x2) r2 = syz_open_dev$I2C(&(0x7f00000001c0), 0x78b5, 0x80) ioctl$I2C_RDWR(r2, 0x707, &(0x7f0000000000)={&(0x7f0000000340)=[{0x6, 0xe000, 0x1, &(0x7f0000000200)="c7"}, {0x3, 0xa201, 0x0, 0x0}], 0x2}) sendto$inet6(r1, &(0x7f0000000180)="be430bd25cb28d993bd2ff28e9dd577e9eb8b08fb6f5af29e7fe77736cbfa38ee4bd59bc2c6e3579bfe0c99067e303e9c7a13dcb61cb094352355c27ddd9f47a20a609606b060161be328ddf6e68acf7b649806f25a653382b1fd4537f4357b234529a46cbd9ece8bf39d3111a063cabc5bebb5743f03872cee0c30ba5b1ac816e4416dda19a04da4e6e9273566a9a839f5fed4d3ca7e07d446bd9810ed62e6040c83c0c3911a773aae86a509d39cc3e334ac3663db94e358e1abee695d76a48bad8a00575c08c465ecfa58f722871b9e0545766068ec954db2fc2af1ca81fca0e7c633339e72103c29aac661d7c4ebc3a2e49400c0e3aefb25da16dff08a5ffa353c24efc1de04ded1ab7b1911eb55f2d9ffd02460dff88f9eb5a95e707e07f4f84e0f36ec8d39809427c0b3722f0e5879bb83d4a3122c803ff0080df453f690e5b72d165df3e1605428be0510d92d03c0a03f01529b24893111d28b7cc879d1d168b405101aa6c0a706ff9f472009dc642b6fa941c93d77ef1a6673fca228036dfd058fcf564f4e457e19ec2ac4f0683450226d18b85221fdde57b5c518f3d309c4630e137639019020beaed32f73efbc92dcf90c2d4366a21ffb1a0e0e601f4982804b1864e7a64db333700184e4f1e9f976ca0555626e33d7506a7a1880d58178c05e6d533fe8a4766c84533867b338bcecabb6ff7477588991a82b93428ebbeb800086a62e71d4c53667b8a2138edef6af382d662137049fabd8b7a668201def8a3ad6e2c42ac8a411cc32b75d6f3d733738c9610b9fa75e9242950f2d39faeb94e79cb271827a670c2929c9533829c5a3bd017e7a866d4d40fa29474511448dc60a3a3c2ed1b933907050e4b2555cea64235012a916b81e3dbb89800e55b20ffe268c99652b748820e4b43b3e92173ab31230538b629417fbf77b72770ad8ca56d2dd3ec4354acbd54e408494587b00b6cd7346f8eb0ed558b2e45e42b919610f9a87cab94703e321ab7dc8bacbfb0f06cf5eaf91d5a27e7d8e9ad99bd93347c3907a42fa49475b0cb704125276d4565c9adc653776a64c9759f7394c743709707dc62e2a130dfd936544ef86773ae24f5b957a0f102db33e83de6d2db108df4e0b40e1dc0e315d96de5fc3446d75844fe3177c308716e3a5dc4e3f58452570a6d5aad9ad353a7dc07a0770d2d01e9efc65db3bada76c91470cb379b398744eb5758b165d4c21d86652e58f4a2f1114a226ea32bbcd97529210ee68e9ba936c2140b099933d4e88c1bfda97d8780135d49138a929952b7c861548bacc24594451011611c3ef9b421d0cc0a87637ab07dbb97df1b7f5572d474206ba5665c13f15d6d81a179ff1fe649fd2ee3ab6e4790a4163c53298516a672e4da5cc28c9008ec6159dedd743cc5aa8439b31c02965a4ec48cc74e827af10c1d007f56c4b476460010576c79764fb7a796b19090713f27c9b0984dc22f9179173a4fed009bb3d67c07d104cd351334018c35f17aa8f995350b3401fe591c810f6e0a8c5e635d2bd464754d4fd8377f914a5e290f2021c5dc51f5105cecc25ec1d4a0f9ebbae9f730c09bd726ca2f90faec708828f1386d2dbbc5d51ebddb11e094dbf580eab5f8919be5d8471a92ed4c83bc8272ddaa4eaa1cc294a9bd0cb66bf07c1c363a62d7143ba3ba40c37a5afdeabe2f5f9fcf1628f80a8212cec4c465415c9cac5711215e5acd37138f79da836c91fb350256265e98130dfae2fa9fe1fe143ecb6d2af96ead8e0a710725f1b598c37e3537c22cf19a10071ff4fc3d61aba960a9a8038721b0cf1cfa40ced51566460607d0204d7b6f9f075acf017dfc8cc14226a16be8a47445088cf4494956a3e60f9ef007a9c075242b2cb50dfce19a49c925f6e1013a64b0c976ae258cc3359677d2c32c0af128dcdfb2194dd6f22511a299a727fd27bff326f0362316adba3c13a810afa24ed1b19db35ab36c76cdc781151dd1ed7b4b7ca8ebf72ac00d15dab24dc5e8e66f54a35746817856d042070ed97c4a04fc45ef163b85c5ac2d791d7e052600bf8bce161a8355334592982346744af728c78dcdcca09833f21c59e34dadf67a7fc48a16a6ad3cb087c011073b31f7166130f8cce7f587fdf8485f86955229b73e840047e0c239697a7c615a09137a47d38e0dd80abc41c5c847e90f241127639a673d2f248ecfb4ef41bacda21af82d8ece1de99e264018feace0372f8ab7458124f79dcb1f32662e23b365739fa6dc69039f539967f25f913595b74c5f8044a58d01b3334468bb428d428b5a2c48092d1b4995555501d0f56ca4b5a214d9cff1aec00db55681b03b51fca73dae5be72baa20d57fd3c68eb4f8acbe42290fb207f8b04c7a0208793a2e17a23816abf0bd4be5a2f32f7e0009a02f6c172efa412756f1554c03fde48681ce720938ef1e317f26a63de4b2e52d3103214b37acb724e38d63eb8a7baa1486f84e643762ef0c1aa9625ec13f2afc0b7c947918db46c17df28c75a5023e69e9c57cbdcfb500cb7928ba87a33c9466643b90b9a8e2906fcc9990ebd880052a09a485bb7b2249c2f4347443b407aa375bd2b602a4701f8c26e12ae48021e0fafdc01f039db5b0b32fb3020fd345241bc6e7329baa61d3ce0313a6728e642fc03ddef661f5630866555d1dad73133dd1a9d349932a4c96859cbb50ef25567fcc812ee7dc437fc27365f4c999aaa0ca06de370c452eb605a7a1cf4b0234e0c36f4e4276e3390a10ec6ba979c32827943c6fc48f74fc43b6e2e628c4540c7d54f32eb2d105bf55f869e64a17458226149140bee11a19e8926d0231c45997971f5cfaf98436680999326f5f364fe2b53bb82960aa9c2920495f60bd01a9df3995fa3f138b6df563e042076d08c8fb6aaf6be2064481e3d0748b9a90423eddd78127fe878104039f0a58fd996630840c722284edf132b2f6a20d4c0bdb2280648f6b49620ee8fabbd14f84f2c9206c7e1a29598355712c54f335b47694c4493cbfa17d20f04516f23562dcdc1e63b3542c77a94c03078958fd6fa38581ab7d27027f8c7676638b58db65a2865977303d552cadb85e71938801e66b03bfe9cc10ceedb944aaabec0b1f0846f469b3f49372f904068fd6637eaf9ded1edcbe2be46a227efa1fbbbd0570d12b7b7e1a55dc72c197e454e6df8e46a62af4ff6dc73262658ee8fb907600133c8dd8b09820254b1708b83bad461b1092e3bcd938575bef6ad0cc99c1471ade954402b13027e042362aab2bb968378a37335db90cc5e0f1303a550f7c710201f4b241cd27f0c204b32a1fd3b9b1bbc4eee56184f0ab2e20f81ad3512995a102bdb7ae699c62aa619be8dedc26c4417d4f4210686e22aae703eed64125262d206d5d6ffe3800dda223dd0dda9828a76201fb6cc8f6e3b97f361b2e087e2ad21af2a417c836b3285f5e5142791ad3abe40246cc6ada99103853ecccbcfb27443c30996d13932ef02c94d4ecdf550dc0d9231ced67f8172454b0d8fa6784396ce404fa0bcc4fd169b513f6c78d4908538a0d8c7c6aa370d5a9f3ef7ec09765a102ac9af38da90d9139419d9a2e29467ba8b50cd9dae579e4959a5a7f9c75b756077c3b5d7f025fec985e2f5f409504fdfcc4bd0957bdad7bd371e8fcb1ea0f60a171814ba23b32da7131ef1c702965036f0326769b64be0f1efeacae563cc34bed344d1cb067a5e7e64a59c56f7b4adf00627bb85749d6f7a5a0af734bd28aa58484bc4bd964d9d115ca0a335724f59bb8bbfd9faddb0f8205a1ab5f12de3833005f9a619c4c0355db03240d61ba74cddf67fe803a489a4393a8c1602a73d6a5fb68f510edd658b43992d6423ee8501a79f1a62e315ccfee91a9b5c431f6474222b5ff3a501a4c449bfefddb02f0dd37db87897cb74a76d3e841896c2b19a1e4b82d93e6f49ae1c60156ac4ef0532066886db05adc59badb7ff28548461a346583efaa758ccf79ebdd9aa0ea5500f366f4f59b171baae7c90e16594e1bfe9b74ce28403b23ad991f3c6b563ce290795607cb6581b86a6e953fff1aeaace7297940fddcd70ebc8a0a2727b7e85b9c57d4ddd0f0275407c39451b716f386b695297445652ce97f29192ecf4cda2db40a14dcb8e175579e44ca02502019afc927f7906bfccac79e9d13352fc17e18c499fd21e5c11e51487b244ef5d77637f75b778a9716671c9cf2fcdf7c869e86eeb554f43e795d7f0f8040b72868176865167087d760a466323972116eb7905d599daa431e22c83134d3cb7ab72d055a2dc2f82a809f52b26b73d6323a840287ffc586e6fffafec08dab1919ee23684917985c9621dbc3ed0b49e77054de659d53db0e889fdd116da4f4cd9cb695086f8f6cd76bef006867ec139cdd04dee697245226815ba4aade948242132cea16d447327c03a2bef32bc6fca7d6dc9a4814f363d22e4cd6b7bc87a01fa582a6535d12f35e50192e7029b4f45bf2811757898ab492ee324fbde996fafd8b17cbfdc53c15ab865e0384b18a79b5fcf16c904214cc96fbb6e1982f85adbc12e1dd17badc0f86326f017186f72f626fa8bb46f182d75cd905506eb1f394989c8eefd270119339d9b08953c158e1960bc25bc03c5e01cf2c84770e7f75b43f14bdcdc96e968d9d0ade7fbf14348aafcf9fc58fc0cefaa25f2800d99b4daf077ff49aae765da4c0efdb10e7d41941e5acf03161519a32124d3c500d1fbdf9db902619105be596fec488da2e2cbae890cc9a9197f94cc6485ef56cb7b2debffcde6670090039080b5415419845bf5b8399bf7adb6af4adbaeab3fc9b4ce6a27b9a5b24e1634959e6c2d8c2628735737eba466cfb535079e753eb31491a107e02724bcf325525ff83ba2e6e726a83b63769e153ad8d3f931c77ebe0bcef1f1fb8b516dc18786c8e0c93d78df054b990d5e3c9ca39b411b0ed5723965679498b8119859c41fd87ab4ca23f3139edda0cc267e8691c877a2670f1ba26e1f10523e3e62bdb0b896455913a294f3eac1d89e96ed53be68e0794ae83cbfdd1079059d8a5a615fc861c45843a76901d758d498e830592219d2cb198fe68388ff7555af90e150899c6670bb9e9aee1b63f59300b4947b6776af88fda1ce6500b6200866347f99febc5bc45f0c8fd471f2225b4f2366369f808c5bfee0a4e130226f0d97471bc27c4f3035144dcc577e9a696cd12d079c0c2343e57e2869fea2f077b0310344f4edb8bbf27e5d7535398352ead5b0750326757a84c81de5fd94d07ecc6c96453f828f4c0bc96bf35de0b82ebc7f595505ef00cdb3fbc59698f4978f4d935578a1d274ca76f00078593bf0a6da47e0330dd25cbb11a9a7ef1fc1acfe8d897d932e62e599c26accff43fd76c6bbb1fd552bb1e2056fa50481bc17ec35ad99ccb4cedf6c29d8ec61d853d83c837f2c88160ed077f5e781f898ae441100926e61d72d8023230658a4988bbfae7d8eb65bb6ad545f7c736373e60bc602cf39844c81711250df79599b89ca56540ecaf56020d8960babf5ea519c9d7e26cd12c33e6d011e055ad85aeca1a35e81c68d68665a31e795e25159f812cd397a79f725d39e9891ba8cb3d1b6b61cd16e9ef0bcfaac5e74828510886da430b0676f42a8cc1785a33a160b3a09620f81e0d62705f88df2e631da27aa64abbd12bf124676151ba31c13a65", 0xfc0, 0x44014, &(0x7f0000001180)={0xa, 0x4e21, 0x5, @remote, 0x7f}, 0x1c) r3 = socket$nl_route(0x10, 0x3, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x3000003, 0x4031, 0xffffffffffffffff, 0x0) r4 = syz_open_dev$vim2m(&(0x7f0000000000), 0x800, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r4, 0xc008561c, &(0x7f0000000540)={0xf0f024}) r5 = syz_open_dev$video(&(0x7f0000000440), 0x8, 0x0) ioctl$VIDIOC_S_SELECTION(r5, 0xc040565f, &(0x7f0000000940)={0xa, 0x0, 0x7, {0x3, 0x1000, 0xfc, 0x1a8}}) ioctl$vim2m_VIDIOC_S_FMT(r4, 0xc0d05605, &(0x7f00000007c0)={0x2, @sdr={0x34343452, 0x4}}) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="640000001000010400000000000000", @ANYRESHEX=r3, @ANYBLOB="84000000000000fb13000300697036746e6c30200000000000000000300012800b000100697036746e6c00002000028008001400ffffffff14000200fe"], 0x64}, 0x1, 0x0, 0x0, 0x400000c}, 0x0) 4.02235178s ago: executing program 7 (id=1023): timer_create(0x5, &(0x7f0000000100)={0x0, 0x3f, 0x1}, 0x0) clock_gettime(0x0, &(0x7f0000000280)={0x0, 0x0}) timer_settime(0x0, 0x0, &(0x7f00000002c0)={{r0, r1+60000000}}, &(0x7f0000000300)) syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f0000000900)='./file1\x00', 0x200000, &(0x7f0000000180), 0x3, 0x566, &(0x7f0000002080)="$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") r2 = open(&(0x7f0000000200)='./file1\x00', 0x4827e, 0x20) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27fffff, 0x4002011, r2, 0x9000) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200000, 0x0, 0x0, 0xffffb9e3, 0x5}) r3 = socket(0x10, 0x3, 0x0) setsockopt$sock_int(r3, 0x1, 0x2e, &(0x7f0000000040)=0x3, 0x4) fallocate(r2, 0x0, 0x0, 0x8800000) open(&(0x7f0000000140)='./file1\x00', 0x66842, 0x21) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/slabinfo\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x1, 0x11, r4, 0x0) move_mount(0xffffffffffffffff, &(0x7f0000000180)='./mnt\x00', 0xffffffffffffffff, &(0x7f0000000380)='./mnt\x00', 0x151) r5 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r5, 0x89f1, &(0x7f0000000440)={'tunl0\x00', &(0x7f00000000c0)={'syztnl0\x00', 0x0, 0x8, 0x7000, 0x0, 0x5, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x3, 0x0, 0x1, 0x4, 0x0, @local, @private=0x10000}}}}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000005c0)={'gre0\x00', 0x0}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r5, 0x89f3, &(0x7f0000000940)={'syztnl0\x00', &(0x7f0000000140)={'gretap0\x00', r6, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x4, 0x0, @multicast1, @broadcast}}}}) 3.77673339s ago: executing program 4 (id=1024): socket$inet_tcp(0x2, 0x1, 0x6) r0 = fsopen(&(0x7f0000000100)='nfs\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000240)='/sys/kernel/address_bits', 0x20000, 0x280) ioctl$VIDIOC_S_TUNER(r2, 0x4054561e, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x6) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000140)='source\x00', &(0x7f0000000180)='127.0.0.1:/export\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f00000001c0)='addr\x00', &(0x7f0000000200)='127.0.0.1\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f00000002c0)='vers\x00', &(0x7f0000000300)='4\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) 3.773173168s ago: executing program 5 (id=1025): socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_netfilter(0x10, 0x3, 0xc) mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20000845, &(0x7f0000b63fe4), 0x1c) getsockopt$inet6_buf(r0, 0x29, 0x3d, 0x0, &(0x7f00000000c0)=0x37) socketpair$unix(0x1, 0x3, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r2, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=[@cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x10}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x10}}], 0xa0}, 0x80) socketpair$unix(0x1, 0x2, 0x0, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000001c0)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = dup(r6) syz_ublk_setup_queues(r7, r5, &(0x7f00000004c0)={0x0, 0xbd, 0x10, 0x1, 0x7f}, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe708, 0x42, 0x1000002, 0x91, 0x0, r3}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x3b00, 0x2, 0x1, 0x3aa}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x93ea, 0x2000, 0x4003bfff, 0x2b9, 0x0, r4}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5, 0x800, 0x1, 0x26d}}], 0x1, 0x0, 0x0) 1.572812764s ago: executing program 4 (id=1026): bind$unix(0xffffffffffffffff, 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0xa27}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) sendmsg$key(r3, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="02030609100000000000004c9e0000000200130002000000da16c167d803f1f805000600200000000a00060000000000ff0000000000000000001ffeff0001000003f1dc7f7c6e7c0200010000000000004000020000000005000500000000000a"], 0x80}}, 0x0) sendmmsg(r3, &(0x7f0000000180), 0x400008a, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = socket$key(0xf, 0x3, 0x2) setsockopt$sock_int(r4, 0x1, 0x8, &(0x7f00000001c0), 0x4) 1.560814326s ago: executing program 3 (id=1027): socket$inet6_sctp(0xa, 0x5, 0x84) socket$can_j1939(0x1d, 0x2, 0x7) socket$netlink(0x10, 0x3, 0x0) r0 = openat$ppp(0xffffffffffffff9c, 0x0, 0xc0802, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000180)) r1 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x30b5, 0x0, 0x2, 0x158}, &(0x7f0000000100)=0x0, 0x0, &(0x7f0000000140)=0x0) r4 = inotify_init() r5 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) connect$can_bcm(r5, &(0x7f00000000c0)={0x1d, r6}, 0x10) sendmsg$can_bcm(r5, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)=ANY=[@ANYBLOB="01000000400800000008000000000000", @ANYRES64=0x0, @ANYRES64=0x2710, @ANYRES64=0x77359400, @ANYRES64=0x0, @ANYBLOB="0000000001"], 0x80}, 0x1, 0x0, 0x0, 0x8004}, 0x0) sendmsg$can_bcm(r5, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="010000000b0e00000300000000000000", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYBLOB="0040000001"], 0x80}}, 0x11) ioctl$TIOCGDEV(0xffffffffffffffff, 0x80045432, &(0x7f0000000300)) close_range(r4, 0xffffffffffffffff, 0x0) syz_ublk_add_dev(r1, r2, 0x0, r3, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)=0x0) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) r9 = dup(r8) syz_ublk_setup_queues(r9, r7, &(0x7f0000000180)={0x0, 0x1, 0x200, 0x3, 0x255}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xad58, 0x400, 0x2120, 0x10000004, 0x0, r9}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x11e0, 0x20, 0xfffffffe, 0xae, 0x0, r1}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf911, 0x0, 0x0, 0x1f0, 0x0, r9}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xac1b, 0x8200, 0x2, 0x200250}}], 0x1, &(0x7f0000000340)={0x2e, 0x44, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x1, {}, 0x1f, 0x0, '\x00', {0xfff6, 0x0, 0x0, 0x0}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x6, 0x0, &(0x7f0000000000)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x94) 1.12425399s ago: executing program 7 (id=1028): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_cipso(0x0, r0) fanotify_mark(0xffffffffffffffff, 0x401, 0x48001051, 0xffffffffffffffff, 0x0) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) setsockopt$IP_VS_SO_SET_ADD(r2, 0x0, 0x482, &(0x7f0000000180)={0x84, @remote, 0x0, 0x0, 'lblc\x00'}, 0x2c) setsockopt$IP_VS_SO_SET_DEL(r2, 0x0, 0x484, &(0x7f0000001280)={0x20000000000084, @remote, 0x0, 0x0, 'rr\x00'}, 0x2c) sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000002dc0)=ANY=[@ANYBLOB="7c010000", @ANYRES16=r1, @ANYBLOB="07020000000000000000010000002c0108802801078008000600b3000000ec000500ff00000008000600e10000000800050040ef116808000600cd00000008000600af00000008000500f712f706080006009600000034000780080006003c00004f08000500e2f05c100800050012c61f100800060066000000080005007118862e08000600fd0000001c00078008000500a156eb25080005000b608179080006007f0000003c000780080006009100000008000500a06e96730800060094000000080005004baa1d3f0800050038560852080005009889fe5708000600180000004400078008000600570000000800060059000000080006005a0000000800060097000000080006008300000008000500b252a030080006005000000008000600410000001400078008000500d9a9bc2c0800050075190a492c0004800500030001000000050003000000000005000300010000000500030000000000050003000100000008000100030000000800020001"], 0x17c}, 0x1, 0x0, 0x0, 0x20008000}, 0x40480d4) sendmsg$NLBL_MGMT_C_ADDDEF(r0, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x1c, 0x0, 0x100, 0x70bd2b, 0x25dfdbfe, {}, [@NLBL_MGMT_A_FAMILY={0x6}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x4000880) syz_open_procfs(0x0, &(0x7f0000000080)='net/connector\x00') 271.18696ms ago: executing program 5 (id=1029): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) ptrace$ARCH_GET_GS(0x1e, r1, 0x0, 0x1004) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) setsockopt$inet_tcp_int(r0, 0x6, 0x2, 0x0, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) write(r4, &(0x7f0000000000)="240000005800410f9c00f4f90085b3a85c91fddf080001000501009f0800028001000000", 0x24) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) connect$inet(r0, 0x0, 0x0) 86.932028ms ago: executing program 3 (id=1030): r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r1 = getpid() socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_FLUSH(r2, 0x0, 0xc810) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x10000000000002) connect$unix(0xffffffffffffffff, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x0, 0x0) syz_usbip_server_init(0x6) socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_DETACH(0x9, 0x0, 0x20) ioctl$int_in(r0, 0x40000000af01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000016c0)) r3 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r3, 0x10f, 0x87, 0x0, 0x0) 287.248µs ago: executing program 2 (id=1031): socket$nl_route(0x10, 0x3, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f0000000040), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) openat$sndseq(0xffffff9c, 0x0, 0x101100) r1 = openat$iommufd(0xffffffffffffff9c, 0x0, 0x88800, 0x0) ioctl$IOMMU_IOAS_ALLOC(r1, 0x3b81, &(0x7f00000003c0)={0xc}) ioctl$IOMMU_IOAS_MAP$PAGES(r1, 0x3b85, 0x0) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r1, 0x3ba0, 0x0) prctl$PR_SET_SECUREBITS(0x1c, 0x1d) setuid(0xee01) r2 = syz_open_procfs(0x0, &(0x7f0000000700)='mounts\x00') mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f00000000c0)='tmpfs\x00', 0xa14dc7, 0x0) read$FUSE(r2, &(0x7f00000047c0)={0x2020}, 0x2020) 0s ago: executing program 4 (id=1032): socket$inet_udp(0x2, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) syz_emit_ethernet(0x0, 0x0, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=@encrypted_new={'new ', 'default', 0x20, 'user:', 'syz', 0x20, 0x1000}, 0x2a, 0x0) add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe) keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=@encrypted_update={'update ', 'default', 0x20, 'user:', 'tr:\x00\x00\x00\x00\x00'}, 0x1d, 0xfffffffffffffffd) add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe) kernel console output (not intermixed with test programs): [ 451.217361][ T24] gspca_vc032x: I2c Bus Busy Wait 00 [ 451.224346][ T24] gspca_vc032x: I2c Bus Busy Wait 00 [ 451.227382][ T8480] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 451.239151][ T24] gspca_vc032x: I2c Bus Busy Wait 00 [ 451.244760][ T24] gspca_vc032x: I2c Bus Busy Wait 00 [ 451.250064][ T24] gspca_vc032x: I2c Bus Busy Wait 00 [ 451.263815][ T24] gspca_vc032x: I2c Bus Busy Wait 00 [ 451.270356][ T24] gspca_vc032x: Unknown sensor... [ 451.276065][ T24] vc032x 4-1:0.0: probe with driver vc032x failed with error -22 [ 451.436507][ T5974] hsr_slave_0: left promiscuous mode [ 451.530883][ T5974] hsr_slave_1: left promiscuous mode [ 451.563282][ T5974] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 451.608270][ T5974] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 451.660369][ T5974] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 451.732932][ T5974] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 452.632816][ T24] usb 4-1: USB disconnect, device number 3 [ 452.680532][ T5974] veth1_macvtap: left promiscuous mode [ 452.710841][ T5974] veth0_macvtap: left promiscuous mode [ 452.716486][ T5974] veth1_vlan: left promiscuous mode [ 452.748223][ T5974] veth0_vlan: left promiscuous mode [ 452.876997][ T5752] IPVS: starting estimator thread 0... [ 452.903070][ T8766] [U]  [ 453.001956][ T8768] IPVS: using max 26 ests per chain, 62400 per kthread [ 453.161344][ T5629] Bluetooth: hci4: command tx timeout [ 455.319625][ T5629] Bluetooth: hci4: command tx timeout [ 456.049009][ T8791] loop0: detected capacity change from 0 to 128 [ 456.079763][ T8791] ext4: Unknown parameter 'fsmagic' [ 457.402490][ T5629] Bluetooth: hci4: command tx timeout [ 459.481011][ T5629] Bluetooth: hci4: command tx timeout [ 459.951782][ T5974] team0 (unregistering): Port device team_slave_1 removed [ 460.708298][ T5974] team0 (unregistering): Port device team_slave_0 removed [ 462.705547][ T5629] Bluetooth: hci7: command 0x0406 tx timeout [ 463.499049][ T8829] syz.7.599 uses obsolete (PF_INET,SOCK_PACKET) [ 463.806279][ T8833] openvswitch: netlink: Duplicate or invalid key (type 0). [ 464.583265][ T8833] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 466.195061][ T5282] 8021q: adding VLAN 0 to HW filter on device eth9 [ 466.292712][ T8480] team0: Port device team_slave_0 added [ 466.302870][ T8480] team0: Port device team_slave_1 added [ 466.821314][ T8855] loop7: detected capacity change from 0 to 256 [ 467.673335][ T8480] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 467.680322][ T8480] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 467.970822][ T8480] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 468.165429][ T8480] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 468.175770][ T8480] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 468.180163][ T31] audit: type=1804 audit(1785336258.353:14): pid=8855 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.7.604" name="/newroot/30/file0/bus" dev="loop7" ino=1048731 res=1 errno=0 [ 468.203741][ T8480] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 468.334799][ T8867] netlink: 12 bytes leftover after parsing attributes in process `syz.0.606'. [ 471.955739][ T5629] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 471.974451][ T5629] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 471.985625][ T5629] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 471.995463][ T5629] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 472.005996][ T5629] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 472.195311][ T5974] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 472.538060][ T5974] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 472.719919][ T5974] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 472.916942][ T8648] bridge0: port 1(bridge_slave_0) entered blocking state [ 472.941600][ T8648] bridge0: port 1(bridge_slave_0) entered disabled state [ 472.961230][ T8648] bridge_slave_0: entered allmulticast mode [ 472.980053][ T8648] bridge_slave_0: entered promiscuous mode [ 473.024020][ T8648] bridge0: port 2(bridge_slave_1) entered blocking state [ 473.042093][ T8648] bridge0: port 2(bridge_slave_1) entered disabled state [ 473.061118][ T8648] bridge_slave_1: entered allmulticast mode [ 473.076754][ T8648] bridge_slave_1: entered promiscuous mode [ 473.155194][ T5974] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 473.263937][ T8648] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 473.340983][ T8648] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 473.492904][ T8648] team0: Port device team_slave_0 added [ 473.549601][ T8648] team0: Port device team_slave_1 added [ 473.679811][ T8648] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 473.697697][ T8648] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 473.730775][ T8648] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 473.754825][ T8648] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 473.762777][ T8648] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 473.789364][ T8648] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 474.014962][ T5974] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 474.041315][ T5629] Bluetooth: hci2: command tx timeout [ 474.065073][ T8648] hsr_slave_0: entered promiscuous mode [ 474.073993][ T8648] hsr_slave_1: entered promiscuous mode [ 474.080608][ T8648] debugfs: 'hsr0' already exists in 'hsr' [ 474.102264][ T8648] Cannot create hsr debugfs directory [ 474.230206][ T5974] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 474.294691][ T8741] bridge0: port 1(bridge_slave_0) entered blocking state [ 474.304039][ T8741] bridge0: port 1(bridge_slave_0) entered disabled state [ 474.314345][ T8741] bridge_slave_0: entered allmulticast mode [ 474.336763][ T8741] bridge_slave_0: entered promiscuous mode [ 474.395358][ T8741] bridge0: port 2(bridge_slave_1) entered blocking state [ 474.403923][ T8741] bridge0: port 2(bridge_slave_1) entered disabled state [ 474.411797][ T8741] bridge_slave_1: entered allmulticast mode [ 474.422925][ T8741] bridge_slave_1: entered promiscuous mode [ 474.478186][ T5974] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 474.699360][ T5974] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 474.735334][ T8741] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 474.809034][ T8741] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 474.852323][ T8741] team0: Port device team_slave_0 added [ 474.880067][ T8741] team0: Port device team_slave_1 added [ 475.015445][ T8741] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 475.022723][ T8741] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 475.051145][ T8741] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 475.100406][ T8741] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 475.108582][ T8741] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 475.134987][ T8741] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 475.384538][ T8887] bridge0: port 1(bridge_slave_0) entered blocking state [ 475.394510][ T8887] bridge0: port 1(bridge_slave_0) entered disabled state [ 475.408560][ T8887] bridge_slave_0: entered allmulticast mode [ 475.417626][ T8887] bridge_slave_0: entered promiscuous mode [ 475.476846][ T8741] hsr_slave_0: entered promiscuous mode [ 475.484103][ T8741] hsr_slave_1: entered promiscuous mode [ 475.493649][ T8741] debugfs: 'hsr0' already exists in 'hsr' [ 475.499442][ T8741] Cannot create hsr debugfs directory [ 475.505906][ T8887] bridge0: port 2(bridge_slave_1) entered blocking state [ 475.515347][ T8887] bridge0: port 2(bridge_slave_1) entered disabled state [ 475.523075][ T8887] bridge_slave_1: entered allmulticast mode [ 475.532057][ T8887] bridge_slave_1: entered promiscuous mode [ 475.685022][ T5974] bridge_slave_1: left allmulticast mode [ 475.691030][ T5974] bridge_slave_1: left promiscuous mode [ 475.697372][ T5974] bridge0: port 2(bridge_slave_1) entered disabled state [ 475.710060][ T5974] bridge_slave_0: left allmulticast mode [ 475.717460][ T5974] bridge_slave_0: left promiscuous mode [ 475.728839][ T5974] bridge0: port 1(bridge_slave_0) entered disabled state [ 475.753168][ T5974] bridge_slave_1: left allmulticast mode [ 475.758935][ T5974] bridge_slave_1: left promiscuous mode [ 475.765998][ T5974] bridge0: port 2(bridge_slave_1) entered disabled state [ 475.791975][ T5974] bridge_slave_0: left allmulticast mode [ 475.797705][ T5974] bridge_slave_0: left promiscuous mode [ 475.804155][ T5974] bridge0: port 1(bridge_slave_0) entered disabled state [ 476.091117][ T5974] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 476.103512][ T5974] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 476.113977][ T5974] bond0 (unregistering): Released all slaves [ 476.131699][ T5629] Bluetooth: hci2: command tx timeout [ 476.253704][ T5974] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 476.264768][ T5974] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 476.276915][ T5974] bond0 (unregistering): Released all slaves [ 476.295309][ T8887] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 476.307492][ T8648] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 476.329091][ T8648] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 476.349949][ T8648] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 476.376923][ T8648] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 476.402350][ T5282] 8021q: adding VLAN 0 to HW filter on device eth10 [ 476.433694][ T8887] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 476.475335][ T8648] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 476.502479][ T8648] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 476.521701][ T8648] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 476.551192][ T8648] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 476.655465][ T8887] team0: Port device team_slave_0 added [ 476.665696][ T8887] team0: Port device team_slave_1 added [ 476.774429][ T8887] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 476.782297][ T8887] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 476.809612][ T8887] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 476.825700][ T8887] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 476.834893][ T8887] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 476.861086][ T8887] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 477.130238][ T8887] hsr_slave_0: entered promiscuous mode [ 477.137264][ T8887] hsr_slave_1: entered promiscuous mode [ 477.144313][ T8887] debugfs: 'hsr0' already exists in 'hsr' [ 477.150084][ T8887] Cannot create hsr debugfs directory [ 477.385806][ T5974] hsr_slave_0: left promiscuous mode [ 477.395580][ T5974] hsr_slave_1: left promiscuous mode [ 477.402453][ T5974] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 477.412795][ T5974] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 477.421763][ T5974] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 477.429210][ T5974] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 477.447570][ T5974] hsr_slave_0: left promiscuous mode [ 477.455582][ T5974] hsr_slave_1: left promiscuous mode [ 477.462257][ T5974] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 477.469688][ T5974] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 477.478805][ T5974] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 477.488569][ T5974] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 477.527278][ T5974] veth1_macvtap: left promiscuous mode [ 477.533252][ T5974] veth0_macvtap: left promiscuous mode [ 477.538874][ T5974] veth1_vlan: left promiscuous mode [ 477.548111][ T5974] veth0_vlan: left promiscuous mode [ 477.556764][ T5974] veth1_macvtap: left promiscuous mode [ 477.563370][ T5974] veth0_macvtap: left promiscuous mode [ 477.569032][ T5974] veth1_vlan: left promiscuous mode [ 477.576263][ T5974] veth0_vlan: left promiscuous mode [ 477.975692][ T5974] team0 (unregistering): Port device team_slave_1 removed [ 478.014801][ T5974] team0 (unregistering): Port device team_slave_0 removed [ 478.211040][ T5629] Bluetooth: hci2: command tx timeout [ 478.350553][ T5974] team0 (unregistering): Port device team_slave_1 removed [ 478.370496][ T5974] team0 (unregistering): Port device team_slave_0 removed [ 478.596944][ T5282] 8021q: adding VLAN 0 to HW filter on device eth11 [ 479.115214][ T8648] 8021q: adding VLAN 0 to HW filter on device bond0 [ 479.290880][ T8648] 8021q: adding VLAN 0 to HW filter on device team0 [ 479.307225][ T8741] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 479.349121][ T8741] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 479.378816][ T8741] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 479.397696][ T8741] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 479.414046][ T1025] bridge0: port 1(bridge_slave_0) entered blocking state [ 479.421205][ T1025] bridge0: port 1(bridge_slave_0) entered forwarding state [ 479.460683][ T8741] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 479.480188][ T8741] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 479.485183][ T5974] IPVS: stop unused estimator thread 0... [ 479.498841][ T8377] bridge0: port 2(bridge_slave_1) entered blocking state [ 479.505147][ T5974] IPVS: stop unused estimator thread 0... [ 479.506020][ T8377] bridge0: port 2(bridge_slave_1) entered forwarding state [ 479.580581][ T8741] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 479.593139][ T8741] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 479.702631][ T5974] bridge_slave_1: left allmulticast mode [ 479.708360][ T5974] bridge_slave_1: left promiscuous mode [ 479.714444][ T5974] bridge0: port 2(bridge_slave_1) entered disabled state [ 479.723880][ T5974] bridge_slave_0: left allmulticast mode [ 479.729521][ T5974] bridge_slave_0: left promiscuous mode [ 479.736660][ T5974] bridge0: port 1(bridge_slave_0) entered disabled state [ 479.813830][ T5974] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 479.830246][ T5974] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 479.840540][ T5974] bond0 (unregistering): Released all slaves [ 479.885168][ T8887] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 479.921293][ T8887] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 479.948643][ T8887] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 479.975051][ T8887] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 479.995493][ T5974] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 480.006707][ T5974] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 480.051934][ T5974] team0 (unregistering): Port device team_slave_1 removed [ 480.083961][ T5974] team0 (unregistering): Port device team_slave_0 removed [ 480.280642][ T8887] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 480.291695][ T5629] Bluetooth: hci2: command tx timeout [ 480.315547][ T8887] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 480.357298][ T8887] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 480.397134][ T8887] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 480.739614][ T8741] 8021q: adding VLAN 0 to HW filter on device bond0 [ 480.824148][ T8741] 8021q: adding VLAN 0 to HW filter on device team0 [ 480.851728][ T8377] bridge0: port 1(bridge_slave_0) entered blocking state [ 480.858900][ T8377] bridge0: port 1(bridge_slave_0) entered forwarding state [ 480.905021][ T8377] bridge0: port 2(bridge_slave_1) entered blocking state [ 480.912208][ T8377] bridge0: port 2(bridge_slave_1) entered forwarding state [ 480.932151][ T8887] 8021q: adding VLAN 0 to HW filter on device bond0 [ 480.995825][ T8887] 8021q: adding VLAN 0 to HW filter on device team0 [ 481.036153][ T5976] bridge0: port 1(bridge_slave_0) entered blocking state [ 481.043345][ T5976] bridge0: port 1(bridge_slave_0) entered forwarding state [ 481.076430][ T5976] bridge0: port 2(bridge_slave_1) entered blocking state [ 481.083638][ T5976] bridge0: port 2(bridge_slave_1) entered forwarding state [ 481.494090][ T8648] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 482.264010][ T8648] veth0_vlan: entered promiscuous mode [ 482.310314][ T8648] veth1_vlan: entered promiscuous mode [ 482.363014][ T8741] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 482.458614][ T8887] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 482.474822][ T8648] veth0_macvtap: entered promiscuous mode [ 482.500391][ T8648] veth1_macvtap: entered promiscuous mode [ 482.543827][ T5282] 8021q: adding VLAN 0 to HW filter on device eth12 [ 482.579095][ T8648] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 482.624779][ T8648] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 482.657366][ T12] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 482.685864][ T12] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 482.718959][ T8377] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 482.754087][ T8377] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 482.986398][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 483.022438][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 483.090071][ T8378] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 483.122964][ T8378] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 483.268105][ T8741] veth0_vlan: entered promiscuous mode [ 483.317953][ T8741] veth1_vlan: entered promiscuous mode [ 486.650286][ T8887] veth0_vlan: entered promiscuous mode [ 486.754788][ T8741] veth0_macvtap: entered promiscuous mode [ 487.096534][ T8887] veth1_vlan: entered promiscuous mode [ 487.912535][ T8741] veth1_macvtap: entered promiscuous mode [ 488.156557][ T8741] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 488.204054][ T8741] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 488.374397][ T8377] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 488.412576][ T8377] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 489.437466][ T8377] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 489.499222][ T8377] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 490.025592][ T8887] veth0_macvtap: entered promiscuous mode [ 490.122590][ T9138] loop3: detected capacity change from 0 to 4096 [ 490.148866][ T9147] loop7: detected capacity change from 0 to 128 [ 490.202623][ T9147] EXT4-fs (loop7): Test dummy encryption mode enabled [ 490.336884][ T5282] 8021q: adding VLAN 0 to HW filter on device eth13 [ 490.358499][ T9147] EXT4-fs (loop7): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 490.362636][ T8887] veth1_macvtap: entered promiscuous mode [ 490.507922][ T9151] loop0: detected capacity change from 0 to 256 [ 490.706420][ T9147] ext4 filesystem being mounted at /33/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 491.035087][ T9138] ntfs3(loop3): Mark volume as dirty due to NTFS errors [ 491.204771][ T9138] ntfs3(loop3): Failed to read $UpCase (-4). [ 491.341908][ T8887] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 491.395346][ T8887] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 491.416033][ T3322] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 491.895963][ T3322] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 491.962351][ T3322] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 491.974926][ T3322] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 492.665248][ T7815] EXT4-fs (loop7): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 492.983922][ T1025] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 493.033755][ T1025] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 495.078043][ T8377] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 495.375935][ T8377] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 496.191360][ T1010] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 496.250224][ T1010] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 496.547713][ T9183] loop0: detected capacity change from 0 to 32768 [ 496.556248][ T9183] btrfs: Deprecated parameter 'usebackuproot' [ 496.563716][ T9183] BTRFS warning: 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead [ 496.620103][ T9183] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.635 (9183) [ 496.752197][ T9183] BTRFS info (device loop0): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 496.762993][ T9183] BTRFS info (device loop0): using crc32c checksum algorithm [ 498.019633][ T5976] BTRFS warning (device loop0): checksum verify failed on logical 5337088 mirror 1 wanted 0xe63dbdda found 0xc926492d level 0 [ 498.082199][ T9183] BTRFS error (device loop0): failed to load root extent [ 498.090078][ T9183] BTRFS warning (device loop0): try to load backup roots slot 1 [ 498.100418][ T5976] BTRFS warning (device loop0): checksum verify failed on logical 5324800 mirror 1 wanted 0x9f73850b found 0x80379423 level 0 [ 498.114057][ T9183] BTRFS warning (device loop0): couldn't read tree root [ 498.121162][ T9183] BTRFS warning (device loop0): try to load backup roots slot 2 [ 498.130354][ T5976] BTRFS error (device loop0): level verify failed on logical 5255168 mirror 1 wanted 0 found 1 [ 498.144171][ T9183] BTRFS warning (device loop0): couldn't read tree root [ 498.151340][ T9183] BTRFS warning (device loop0): try to load backup roots slot 3 [ 498.173690][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 498.191984][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 498.307608][ T9183] BTRFS info (device loop0): rebuilding free space tree [ 498.400143][ T9183] BTRFS info (device loop0): checking UUID tree [ 498.408995][ T9183] BTRFS info (device loop0): enabling ssd optimizations [ 498.417949][ T9183] BTRFS info (device loop0): turning on async discard [ 498.424837][ T9183] BTRFS info (device loop0): enabling free space tree [ 498.431789][ T9183] BTRFS info (device loop0): force clearing of disk cache [ 498.438935][ T9183] BTRFS info (device loop0): enabling auto defrag [ 498.445536][ T9183] BTRFS info (device loop0): trying to use backup root at mount time [ 498.453640][ T9183] BTRFS info (device loop0): use zstd compression, level 3 [ 500.775363][ T1310] ieee802154 phy0 wpan0: encryption failed: -22 [ 500.823684][ T1310] ieee802154 phy1 wpan1: encryption failed: -22 [ 501.415020][ T7259] BTRFS info (device loop0): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 501.743928][ T9235] loop9: detected capacity change from 0 to 256 [ 502.091402][ T9237] loop8: detected capacity change from 0 to 128 [ 502.099636][ T9237] ext4: Unknown parameter 'fsmagic' [ 507.240464][ T9250] loop9: detected capacity change from 0 to 2048 [ 507.297313][ T5282] 8021q: adding VLAN 0 to HW filter on device eth14 [ 507.298547][ T9250] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 507.700486][ T31] audit: type=1800 audit(1785336297.883:15): pid=9250 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.9.637" name="bus" dev="loop9" ino=1367 res=0 errno=0 [ 507.819580][ T9256] loop8: detected capacity change from 0 to 8 [ 508.538913][ T9256] SQUASHFS error: xz decompression failed, data probably corrupt [ 508.548870][ T9256] SQUASHFS error: Failed to read block 0x108: -5 [ 508.556076][ T9256] SQUASHFS error: Unable to read metadata cache entry [106] [ 508.563490][ T9256] SQUASHFS error: Unable to read inode 0x11f [ 515.984047][ T5633] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 515.999900][ T5633] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 516.011036][ T5633] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 516.027046][ T5633] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 516.036467][ T5633] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 517.459773][ T9306] loop9: detected capacity change from 0 to 256 [ 518.124195][ T5629] Bluetooth: hci0: command tx timeout [ 519.625012][ T9313] netlink: 'syz.0.653': attribute type 1 has an invalid length. [ 520.633334][ T5629] Bluetooth: hci0: command tx timeout [ 522.833445][ T5629] Bluetooth: hci0: command tx timeout [ 523.138416][ T9313] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 524.505784][ T5282] 8021q: adding VLAN 0 to HW filter on device eth15 [ 524.579291][ T5633] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 524.592579][ T5633] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 524.603069][ T5633] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 524.620984][ T5633] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 524.629554][ T5633] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 524.844615][ T5629] Bluetooth: hci0: command tx timeout [ 525.909204][ T5633] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 525.940794][ T5633] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 525.952888][ T5633] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 525.963053][ T5633] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 525.971743][ T5633] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 526.775289][ T5629] Bluetooth: hci5: command tx timeout [ 528.045186][ T5629] Bluetooth: hci6: command tx timeout [ 528.739332][ T9364] xt_CT: You must specify a L4 protocol and not use inversions on it [ 528.924002][ T5629] Bluetooth: hci5: command tx timeout [ 530.250866][ T5629] Bluetooth: hci6: command tx timeout [ 531.000800][ T5633] Bluetooth: hci5: command tx timeout [ 531.032123][ T9374] loop0: detected capacity change from 0 to 8 [ 531.122038][ T9374] SQUASHFS error: xz decompression failed, data probably corrupt [ 531.210862][ T9374] SQUASHFS error: Failed to read block 0x108: -5 [ 531.226392][ T9374] SQUASHFS error: Unable to read metadata cache entry [106] [ 531.298079][ T9374] SQUASHFS error: Unable to read inode 0x11f [ 532.280944][ T5633] Bluetooth: hci6: command tx timeout [ 533.091002][ T5633] Bluetooth: hci5: command tx timeout [ 534.015839][ T5882] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 534.264232][ T5282] 8021q: adding VLAN 0 to HW filter on device eth16 [ 534.372477][ T5633] Bluetooth: hci6: command tx timeout [ 534.621764][ T5882] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 536.415188][ T9418] loop8: detected capacity change from 0 to 32768 [ 536.422966][ T9418] btrfs: Deprecated parameter 'usebackuproot' [ 536.429157][ T9418] BTRFS warning: 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead [ 536.730354][ T9418] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop8 (7:8) scanned by syz.8.667 (9418) [ 536.766223][ T9418] BTRFS info (device loop8): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 536.777775][ T9418] BTRFS info (device loop8): using crc32c checksum algorithm [ 536.995989][ T8378] BTRFS warning (device loop8): checksum verify failed on logical 5337088 mirror 1 wanted 0xe63dbdda found 0xc926492d level 0 [ 537.082263][ T9418] BTRFS error (device loop8): failed to load root extent [ 537.089405][ T9418] BTRFS warning (device loop8): try to load backup roots slot 1 [ 537.102495][ T37] BTRFS warning (device loop8): checksum verify failed on logical 5324800 mirror 1 wanted 0x9f73850b found 0x80379423 level 0 [ 538.076337][ T9418] BTRFS warning (device loop8): couldn't read tree root [ 538.084563][ T9418] BTRFS warning (device loop8): try to load backup roots slot 2 [ 538.094782][ T37] BTRFS error (device loop8): level verify failed on logical 5255168 mirror 1 wanted 0 found 1 [ 538.115399][ T9289] bridge0: port 1(bridge_slave_0) entered blocking state [ 538.122145][ T9418] BTRFS warning (device loop8): couldn't read tree root [ 538.129433][ T9418] BTRFS warning (device loop8): try to load backup roots slot 3 [ 538.145129][ T9289] bridge0: port 1(bridge_slave_0) entered disabled state [ 538.185235][ T9418] BTRFS info (device loop8): rebuilding free space tree [ 538.189916][ T9289] bridge_slave_0: entered allmulticast mode [ 538.223277][ T9418] BTRFS info (device loop8): checking UUID tree [ 538.230058][ T9418] BTRFS info (device loop8): enabling ssd optimizations [ 538.237898][ T9289] bridge_slave_0: entered promiscuous mode [ 538.244656][ T9418] BTRFS info (device loop8): turning on async discard [ 538.249281][ T9289] bridge0: port 2(bridge_slave_1) entered blocking state [ 538.251499][ T9418] BTRFS info (device loop8): enabling free space tree [ 538.251533][ T9418] BTRFS info (device loop8): force clearing of disk cache [ 538.251564][ T9418] BTRFS info (device loop8): enabling auto defrag [ 538.251593][ T9418] BTRFS info (device loop8): trying to use backup root at mount time [ 538.251625][ T9418] BTRFS info (device loop8): use zstd compression, level 3 [ 538.285594][ T9289] bridge0: port 2(bridge_slave_1) entered disabled state [ 538.326772][ T9289] bridge_slave_1: entered allmulticast mode [ 540.048437][ T9449] loop0: detected capacity change from 0 to 256 [ 540.087818][ T9289] bridge_slave_1: entered promiscuous mode [ 540.370831][ T31] audit: type=1804 audit(1785336330.553:16): pid=9449 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.0.672" name="/newroot/77/file0/bus" dev="loop0" ino=1048748 res=1 errno=0 [ 540.423557][ T8887] BTRFS info (device loop8): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 540.826476][ T5882] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 541.054701][ T9289] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 541.775493][ T9289] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 541.984344][ T5882] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 542.140165][ T9289] team0: Port device team_slave_0 added [ 542.184244][ T9289] team0: Port device team_slave_1 added [ 542.252580][ T9289] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 542.267742][ T9289] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 542.338939][ T9289] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 543.638275][ T9289] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 544.922989][ T9289] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 544.951738][ T9289] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 546.411941][ T5882] bridge_slave_1: left allmulticast mode [ 546.431030][ T5882] bridge_slave_1: left promiscuous mode [ 546.447087][ T5882] bridge0: port 2(bridge_slave_1) entered disabled state [ 546.471250][ T5882] bridge_slave_0: left allmulticast mode [ 546.487127][ T5882] bridge_slave_0: left promiscuous mode [ 546.496386][ T5882] bridge0: port 1(bridge_slave_0) entered disabled state [ 552.460195][ T5882] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 552.525458][ T5882] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 552.535004][ T9533] loop9: detected capacity change from 0 to 256 [ 552.592643][ T5882] bond0 (unregistering): Released all slaves [ 552.628126][ T31] audit: type=1804 audit(1785336342.813:17): pid=9533 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.9.688" name="/newroot/20/file0/bus" dev="loop9" ino=1048763 res=1 errno=0 [ 552.752088][ T9289] hsr_slave_0: entered promiscuous mode [ 552.758978][ T9289] hsr_slave_1: entered promiscuous mode [ 552.784172][ T9289] debugfs: 'hsr0' already exists in 'hsr' [ 552.801094][ T9289] Cannot create hsr debugfs directory [ 552.962373][ T5282] 8021q: adding VLAN 0 to HW filter on device eth17 [ 554.706640][ T9554] loop0: detected capacity change from 0 to 256 [ 554.728259][ T9332] bridge0: port 1(bridge_slave_0) entered blocking state [ 554.756927][ T9332] bridge0: port 1(bridge_slave_0) entered disabled state [ 554.796507][ T9332] bridge_slave_0: entered allmulticast mode [ 554.815960][ T9332] bridge_slave_0: entered promiscuous mode [ 555.313987][ T9332] bridge0: port 2(bridge_slave_1) entered blocking state [ 555.363421][ T9332] bridge0: port 2(bridge_slave_1) entered disabled state [ 555.408870][ T9332] bridge_slave_1: entered allmulticast mode [ 555.423837][ T9332] bridge_slave_1: entered promiscuous mode [ 558.581719][ T9570] usb usb8: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 559.960951][ T5629] Bluetooth: hci3: command 0x0406 tx timeout [ 561.330495][ T9580] workqueue: Failed to create a rescuer kthread for wq "dio/overlay": -EINTR [ 561.695434][ T9332] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 561.840964][ T5882] hsr_slave_0: left promiscuous mode [ 561.854188][ T5882] hsr_slave_1: left promiscuous mode [ 561.867969][ T9590] No control pipe specified [ 561.868580][ T5882] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 561.900815][ T5882] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 561.950517][ T5882] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 561.965677][ T5882] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 562.064841][ T5882] veth1_macvtap: left promiscuous mode [ 562.088835][ T5882] veth0_macvtap: left promiscuous mode [ 562.120178][ T5882] veth1_vlan: left promiscuous mode [ 562.160919][ T5882] veth0_vlan: left promiscuous mode [ 562.216187][ T1310] ieee802154 phy0 wpan0: encryption failed: -22 [ 562.224625][ T1310] ieee802154 phy1 wpan1: encryption failed: -22 [ 562.421977][ T9600] ubi0: attaching mtd0 [ 562.454177][ T9600] ubi0: scanning is finished [ 562.458865][ T9600] ubi0: empty MTD device detected [ 563.012229][ T9601] binder: 9597:9601 ioctl c0306201 0 returned -14 [ 563.579434][ T9600] ubi0 error: ubi_attach_mtd_dev: cannot spawn "ubi_bgt0d", error -4 [ 563.956705][ T9607] No control pipe specified [ 564.500802][ T9615] loop8: detected capacity change from 0 to 8 [ 565.416482][ T9615] SQUASHFS error: xz decompression failed, data probably corrupt [ 565.426259][ T9615] SQUASHFS error: Failed to read block 0x108: -5 [ 565.432703][ T9615] SQUASHFS error: Unable to read metadata cache entry [106] [ 565.439999][ T9615] SQUASHFS error: Unable to read inode 0x11f [ 567.692393][ T5882] team0 (unregistering): Port device team_slave_1 removed [ 567.717409][ T5882] team0 (unregistering): Port device team_slave_0 removed [ 571.766447][ T9651] No control pipe specified [ 571.940604][ T9332] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 572.389994][ T9659] input: syz0 as /devices/virtual/input/input6 [ 572.567485][ T5282] 8021q: adding VLAN 0 to HW filter on device eth18 [ 573.464741][ T5629] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 573.485944][ T5629] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 573.500975][ T5629] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 573.521087][ T5629] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 573.528891][ T5629] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 573.573062][ T9344] bridge0: port 1(bridge_slave_0) entered blocking state [ 573.605348][ T9344] bridge0: port 1(bridge_slave_0) entered disabled state [ 573.612796][ T9344] bridge_slave_0: entered allmulticast mode [ 573.667322][ T9344] bridge_slave_0: entered promiscuous mode [ 573.740265][ T9344] bridge0: port 2(bridge_slave_1) entered blocking state [ 573.775704][ T9344] bridge0: port 2(bridge_slave_1) entered disabled state [ 573.814465][ T9344] bridge_slave_1: entered allmulticast mode [ 573.859253][ T9670] No control pipe specified [ 573.874234][ T9344] bridge_slave_1: entered promiscuous mode [ 573.918118][ T9332] team0: Port device team_slave_0 added [ 573.948369][ T9332] team0: Port device team_slave_1 added [ 574.195120][ T9344] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 575.805747][ T5633] Bluetooth: hci4: command tx timeout [ 576.457474][ T9344] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 577.427095][ T9332] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 577.450311][ T9332] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 577.490863][ T9332] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 577.595305][ T9344] team0: Port device team_slave_0 added [ 577.633857][ T9344] team0: Port device team_slave_1 added [ 577.671881][ T9332] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 577.700879][ T9332] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 577.770618][ T9332] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 577.880872][ T5633] Bluetooth: hci4: command tx timeout [ 579.069848][ T13] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 579.102823][ T9704] No control pipe specified [ 579.538449][ T9344] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 579.557126][ T9344] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 579.665459][ T9344] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 579.849719][ T9344] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 579.968859][ T9344] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 579.998202][ T5633] Bluetooth: hci4: command tx timeout [ 580.251019][ T9344] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 580.451615][ T9332] hsr_slave_0: entered promiscuous mode [ 580.480910][ T9332] hsr_slave_1: entered promiscuous mode [ 580.506225][ T9332] debugfs: 'hsr0' already exists in 'hsr' [ 580.542652][ T9332] Cannot create hsr debugfs directory [ 581.526627][ T13] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 582.053231][ T5633] Bluetooth: hci4: command tx timeout [ 586.794292][ T13] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 587.027733][ T5629] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 587.043527][ T5629] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 587.057510][ T5629] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 587.079313][ T5629] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 587.099565][ T5629] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 587.431680][ T9344] hsr_slave_0: entered promiscuous mode [ 587.452171][ T9344] hsr_slave_1: entered promiscuous mode [ 587.459073][ T9344] debugfs: 'hsr0' already exists in 'hsr' [ 587.479513][ T9344] Cannot create hsr debugfs directory [ 587.514433][ T5282] 8021q: adding VLAN 0 to HW filter on device eth19 [ 588.597459][ T5633] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 588.610804][ T5633] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 588.620971][ T5633] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 588.733552][ T5633] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 588.745241][ T5633] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 588.877782][ T9784] loop8: detected capacity change from 0 to 256 [ 588.900379][ T13] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 589.164556][ T5633] Bluetooth: hci0: command tx timeout [ 589.689455][ T31] audit: type=1804 audit(1785336379.863:18): pid=9790 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.8.735" name="/newroot/31/file0/bus" dev="loop8" ino=1048765 res=1 errno=0 [ 591.456199][ T5633] Bluetooth: hci7: command tx timeout [ 591.463614][ T5633] Bluetooth: hci0: command tx timeout [ 593.481275][ T5633] Bluetooth: hci0: command tx timeout [ 593.486889][ T5633] Bluetooth: hci7: command tx timeout [ 594.536050][ T13] bridge_slave_1: left allmulticast mode [ 594.565369][ T13] bridge_slave_1: left promiscuous mode [ 594.770968][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 594.795241][ T13] bridge_slave_0: left allmulticast mode [ 594.800927][ T13] bridge_slave_0: left promiscuous mode [ 594.822397][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 595.488254][ T9835] Bluetooth: hci2: command 0x0406 tx timeout [ 595.561251][ T9835] Bluetooth: hci7: command tx timeout [ 595.566827][ T5631] Bluetooth: hci0: command tx timeout [ 596.891822][ T13] bridge_slave_1: left allmulticast mode [ 596.898021][ T13] bridge_slave_1: left promiscuous mode [ 596.903845][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 596.929536][ T13] bridge_slave_0: left allmulticast mode [ 596.935283][ T13] bridge_slave_0: left promiscuous mode [ 596.941261][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 597.041771][ T9853] loop0: detected capacity change from 0 to 8 [ 597.651207][ T5629] Bluetooth: hci7: command tx timeout [ 597.885917][ T9853] SQUASHFS error: xz decompression failed, data probably corrupt [ 597.893760][ T9853] SQUASHFS error: Failed to read block 0x108: -5 [ 597.900122][ T9853] SQUASHFS error: Unable to read metadata cache entry [106] [ 597.907466][ T9853] SQUASHFS error: Unable to read inode 0x11f [ 598.285421][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 598.296470][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 598.307014][ T13] bond0 (unregistering): Released all slaves [ 598.429787][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 598.441045][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 598.457659][ T13] bond0 (unregistering): Released all slaves [ 598.510325][ T5282] 8021q: adding VLAN 0 to HW filter on device eth20 [ 598.701235][ T9662] bridge0: port 1(bridge_slave_0) entered blocking state [ 598.708606][ T9662] bridge0: port 1(bridge_slave_0) entered disabled state [ 598.715957][ T9662] bridge_slave_0: entered allmulticast mode [ 598.723725][ T9662] bridge_slave_0: entered promiscuous mode [ 598.765902][ T9662] bridge0: port 2(bridge_slave_1) entered blocking state [ 598.776427][ T9662] bridge0: port 2(bridge_slave_1) entered disabled state [ 598.783832][ T9662] bridge_slave_1: entered allmulticast mode [ 598.793415][ T9662] bridge_slave_1: entered promiscuous mode [ 598.902258][ T9662] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 598.917187][ T9662] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 599.082247][ T9662] team0: Port device team_slave_0 added [ 599.103506][ T13] hsr_slave_0: left promiscuous mode [ 599.110742][ T13] hsr_slave_1: left promiscuous mode [ 599.118041][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 599.126613][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 599.145598][ T13] hsr_slave_0: left promiscuous mode [ 599.152212][ T13] hsr_slave_1: left promiscuous mode [ 599.158404][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 599.170843][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 599.179082][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 599.188056][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 599.210258][ T13] veth1_macvtap: left promiscuous mode [ 599.216961][ T13] veth0_macvtap: left promiscuous mode [ 599.224405][ T13] veth1_vlan: left promiscuous mode [ 599.229828][ T13] veth0_vlan: left promiscuous mode [ 599.529499][ T13] team0 (unregistering): Port device team_slave_1 removed [ 599.565949][ T13] team0 (unregistering): Port device team_slave_0 removed [ 600.032250][ T13] team0 (unregistering): Port device team_slave_1 removed [ 600.065576][ T13] team0 (unregistering): Port device team_slave_0 removed [ 600.287454][ T9662] team0: Port device team_slave_1 added [ 600.449192][ T9662] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 600.456797][ T9662] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 600.511557][ T9662] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 600.544208][ T9662] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 600.560772][ T9662] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 600.598103][ T9662] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 600.929494][ T9662] hsr_slave_0: entered promiscuous mode [ 600.948849][ T9662] hsr_slave_1: entered promiscuous mode [ 600.956680][ T9662] debugfs: 'hsr0' already exists in 'hsr' [ 600.963311][ T9662] Cannot create hsr debugfs directory [ 601.217835][ T9755] bridge0: port 1(bridge_slave_0) entered blocking state [ 601.226633][ T9755] bridge0: port 1(bridge_slave_0) entered disabled state [ 601.235006][ T9755] bridge_slave_0: entered allmulticast mode [ 601.243748][ T9755] bridge_slave_0: entered promiscuous mode [ 601.277139][ T9755] bridge0: port 2(bridge_slave_1) entered blocking state [ 601.285156][ T9755] bridge0: port 2(bridge_slave_1) entered disabled state [ 601.293269][ T9755] bridge_slave_1: entered allmulticast mode [ 601.301820][ T9755] bridge_slave_1: entered promiscuous mode [ 601.451854][ T9755] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 601.502309][ T9755] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 601.575600][ T13] bridge_slave_1: left allmulticast mode [ 601.582123][ T13] bridge_slave_1: left promiscuous mode [ 601.587988][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 601.598868][ T13] bridge_slave_0: left allmulticast mode [ 601.605352][ T13] bridge_slave_0: left promiscuous mode [ 601.611539][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 601.632102][ T13] bridge_slave_1: left allmulticast mode [ 601.637816][ T13] bridge_slave_1: left promiscuous mode [ 601.643784][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 601.655550][ T13] bridge_slave_0: left allmulticast mode [ 601.661562][ T13] bridge_slave_0: left promiscuous mode [ 601.667359][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 601.776678][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 601.788504][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 601.799516][ T13] bond0 (unregistering): Released all slaves [ 601.893610][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 601.908637][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 601.919668][ T13] bond0 (unregistering): Released all slaves [ 601.979700][ T9755] team0: Port device team_slave_0 added [ 602.017440][ T9755] team0: Port device team_slave_1 added [ 602.045416][ T9776] bridge0: port 1(bridge_slave_0) entered blocking state [ 602.064560][ T9776] bridge0: port 1(bridge_slave_0) entered disabled state [ 602.084841][ T9776] bridge_slave_0: entered allmulticast mode [ 602.107833][ T9776] bridge_slave_0: entered promiscuous mode [ 602.117171][ T9776] bridge0: port 2(bridge_slave_1) entered blocking state [ 602.155074][ T9776] bridge0: port 2(bridge_slave_1) entered disabled state [ 602.169644][ T9776] bridge_slave_1: entered allmulticast mode [ 602.178757][ T9776] bridge_slave_1: entered promiscuous mode [ 602.261283][ T13] hsr_slave_0: left promiscuous mode [ 602.267563][ T13] hsr_slave_1: left promiscuous mode [ 602.275030][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 602.285390][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 602.295525][ T13] hsr_slave_0: left promiscuous mode [ 602.302120][ T13] hsr_slave_1: left promiscuous mode [ 602.308232][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 602.318314][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 602.416048][ T13] team0 (unregistering): Port device team_slave_1 removed [ 602.448353][ T13] team0 (unregistering): Port device team_slave_0 removed [ 602.722427][ T13] team0 (unregistering): Port device team_slave_1 removed [ 602.755274][ T13] team0 (unregistering): Port device team_slave_0 removed [ 602.982722][ T9776] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 603.009961][ T9755] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 603.019305][ T9755] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 603.048931][ T9755] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 603.064784][ T9755] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 603.074413][ T9755] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 603.109990][ T9755] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 603.135504][ T9776] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 603.369190][ T9776] team0: Port device team_slave_0 added [ 603.409426][ T9776] team0: Port device team_slave_1 added [ 603.476913][ T9755] hsr_slave_0: entered promiscuous mode [ 603.483878][ T9755] hsr_slave_1: entered promiscuous mode [ 603.491376][ T9755] debugfs: 'hsr0' already exists in 'hsr' [ 603.497160][ T9755] Cannot create hsr debugfs directory [ 603.571103][ T9776] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 603.578059][ T9776] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 603.604122][ T9776] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 603.657703][ T9776] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 603.676163][ T9776] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 603.709882][ T9776] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 603.942717][ T9776] hsr_slave_0: entered promiscuous mode [ 603.950291][ T9776] hsr_slave_1: entered promiscuous mode [ 603.958273][ T9776] debugfs: 'hsr0' already exists in 'hsr' [ 603.964488][ T9776] Cannot create hsr debugfs directory [ 604.352966][ T9662] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 604.367515][ T9662] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 604.385030][ T9662] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 604.399424][ T9662] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 604.409246][ T9662] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 604.421234][ T9662] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 604.484032][ T9662] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 604.498299][ T9662] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 604.718615][ T9662] 8021q: adding VLAN 0 to HW filter on device bond0 [ 604.749799][ T9662] 8021q: adding VLAN 0 to HW filter on device team0 [ 604.833157][ T5882] bridge0: port 1(bridge_slave_0) entered blocking state [ 604.840347][ T5882] bridge0: port 1(bridge_slave_0) entered forwarding state [ 604.858383][ T5882] bridge0: port 2(bridge_slave_1) entered blocking state [ 604.865620][ T5882] bridge0: port 2(bridge_slave_1) entered forwarding state [ 605.639618][ T9755] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 605.669137][ T9755] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 605.681708][ T9755] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 605.704868][ T9755] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 605.737887][ T9755] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 605.771129][ T9755] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 605.794984][ T9755] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 605.824159][ T9755] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 606.015030][ T9776] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 606.029049][ T9776] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 606.039258][ T9776] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 606.053670][ T9776] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 606.063881][ T9662] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 606.075045][ T9776] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 606.086235][ T9776] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 606.094656][ T9776] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 606.105409][ T9776] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 606.274885][ T9662] veth0_vlan: entered promiscuous mode [ 606.306821][ T9662] veth1_vlan: entered promiscuous mode [ 606.325493][ T9755] 8021q: adding VLAN 0 to HW filter on device bond0 [ 606.382331][ T9755] 8021q: adding VLAN 0 to HW filter on device team0 [ 606.399936][ T9776] 8021q: adding VLAN 0 to HW filter on device bond0 [ 606.417003][ T8378] bridge0: port 1(bridge_slave_0) entered blocking state [ 606.424133][ T8378] bridge0: port 1(bridge_slave_0) entered forwarding state [ 606.444223][ T9662] veth0_macvtap: entered promiscuous mode [ 606.462945][ T5976] bridge0: port 2(bridge_slave_1) entered blocking state [ 606.470087][ T5976] bridge0: port 2(bridge_slave_1) entered forwarding state [ 606.484893][ T9662] veth1_macvtap: entered promiscuous mode [ 606.504820][ T9776] 8021q: adding VLAN 0 to HW filter on device team0 [ 606.545927][ T5976] bridge0: port 1(bridge_slave_0) entered blocking state [ 606.553112][ T5976] bridge0: port 1(bridge_slave_0) entered forwarding state [ 606.569784][ T9662] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 606.591920][ T5976] bridge0: port 2(bridge_slave_1) entered blocking state [ 606.599061][ T5976] bridge0: port 2(bridge_slave_1) entered forwarding state [ 606.623147][ T9662] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 606.660576][ T13] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 606.669937][ T13] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 606.690501][ T13] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 606.699944][ T13] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 606.899124][ T5976] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 606.922565][ T5976] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 607.007059][ T8377] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 607.040201][ T8377] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 616.112743][ T9776] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 616.174088][ T9755] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 616.346171][ T9776] veth0_vlan: entered promiscuous mode [ 616.401228][ T9776] veth1_vlan: entered promiscuous mode [ 616.499997][ T9776] veth0_macvtap: entered promiscuous mode [ 616.538260][ T9776] veth1_macvtap: entered promiscuous mode [ 616.621433][ T9776] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 616.678990][ T9776] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 616.736394][ T8382] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 616.774931][ T8382] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 616.828823][ T13] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 616.857783][ T13] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 617.119918][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 617.148891][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 617.275018][ T8382] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 617.313545][ T8382] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 617.439634][ T9755] veth0_vlan: entered promiscuous mode [ 617.500850][ T9755] veth1_vlan: entered promiscuous mode [ 617.657149][ T9755] veth0_macvtap: entered promiscuous mode [ 621.444798][ T9755] veth1_macvtap: entered promiscuous mode [ 621.741802][ T9755] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 622.713764][ T9755] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 622.882367][ T13] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 622.910788][ T13] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 622.932661][ T13] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 623.563129][ T13] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 623.791443][ T1310] ieee802154 phy0 wpan0: encryption failed: -22 [ 623.808040][ T1310] ieee802154 phy1 wpan1: encryption failed: -22 [ 623.855808][T10136] loop1: detected capacity change from 0 to 256 [ 624.364271][T10134] loop9: detected capacity change from 0 to 32768 [ 624.710902][ T31] audit: type=1804 audit(1785336414.843:19): pid=10136 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.1.753" name="/newroot/2/file0/bus" dev="loop1" ino=1048777 res=1 errno=0 [ 624.892229][T10134] XFS (loop9): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 625.567776][T10134] XFS (loop9): Ending clean mount [ 625.584500][T10134] XFS (loop9): Quotacheck needed: Please wait. [ 625.923954][ T37] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 625.987171][ T37] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 626.062813][T10134] XFS (loop9): Quotacheck: Done. [ 627.426600][ T8648] XFS (loop9): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 628.260206][ T3322] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 628.342648][ T3322] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 631.167865][T10182] netlink: 14 bytes leftover after parsing attributes in process `syz.1.766'. [ 631.449451][T10187] loop9: detected capacity change from 0 to 4096 [ 631.493509][T10187] ntfs3: Unknown parameter 'ªªª' [ 635.021380][T10235] syzkaller0: entered promiscuous mode [ 635.026974][T10235] syzkaller0: entered allmulticast mode [ 635.793086][T10239] tipc: Started in network mode [ 635.941560][T10239] tipc: Node identity fef74fab4ef7, cluster identity 4711 [ 636.056123][T10239] tipc: Enabled bearer , priority 0 [ 636.167500][T10232] tipc: Resetting bearer [ 636.259710][T10232] tipc: Disabling bearer [ 638.162986][T10268] netlink: 12 bytes leftover after parsing attributes in process `syz.6.786'. [ 639.686896][T10264] loop1: detected capacity change from 0 to 2048 [ 640.101250][T10264] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 641.150469][T10286] loop0: detected capacity change from 0 to 8 [ 641.222822][T10286] SQUASHFS error: xz decompression failed, data probably corrupt [ 641.230913][T10286] SQUASHFS error: Failed to read block 0x108: -5 [ 641.237340][T10286] SQUASHFS error: Unable to read metadata cache entry [106] [ 641.244758][T10286] SQUASHFS error: Unable to read inode 0x11f [ 643.054320][ T9776] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 643.646105][T10305] loop0: detected capacity change from 0 to 8 [ 644.372471][T10305] SQUASHFS error: xz decompression failed, data probably corrupt [ 644.380293][T10305] SQUASHFS error: Failed to read block 0x108: -5 [ 644.386700][T10305] SQUASHFS error: Unable to read metadata cache entry [106] [ 644.394135][T10305] SQUASHFS error: Unable to read inode 0x11f [ 646.030060][T10301] syzkaller0: entered promiscuous mode [ 646.110525][T10301] syzkaller0: entered allmulticast mode [ 646.480988][T10301] tipc: Started in network mode [ 646.488793][T10301] tipc: Node identity c24ca1212bd1, cluster identity 4711 [ 646.514631][T10321] loop2: detected capacity change from 0 to 256 [ 647.066336][T10301] tipc: Enabled bearer , priority 0 [ 647.319497][T10301] tipc: Resetting bearer [ 647.360487][ T31] audit: type=1804 audit(1785336437.543:20): pid=10321 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.2.799" name="/newroot/10/file0/bus" dev="loop2" ino=1048797 res=1 errno=0 [ 647.411827][T10300] tipc: Resetting bearer [ 647.891036][ T5759] IPVS: starting estimator thread 0... [ 648.031357][T10338] IPVS: using max 21 ests per chain, 50400 per kthread [ 648.186070][T10300] tipc: Disabling bearer [ 648.192542][T10336] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 648.256011][ T5768] tipc: Node number set to 3919421729 [ 652.743365][T10382] loop2: detected capacity change from 0 to 8 [ 653.016484][T10385] virt_wifi0 speed is unknown, defaulting to 1000 [ 653.023366][T10385] virt_wifi0 speed is unknown, defaulting to 1000 [ 653.034033][T10385] virt_wifi0 speed is unknown, defaulting to 1000 [ 653.043512][T10385] smbdirect: ib_dev[syz1]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 653.058034][T10385] smbdirect: ib_dev[syz1]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 653.075036][T10385] smbdirect: ib_dev[syz1]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 653.090497][T10385] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 653.110640][T10385] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 653.189152][T10385] virt_wifi0 speed is unknown, defaulting to 1000 [ 653.197942][T10385] virt_wifi0 speed is unknown, defaulting to 1000 [ 653.206540][T10385] virt_wifi0 speed is unknown, defaulting to 1000 [ 653.217294][T10385] virt_wifi0 speed is unknown, defaulting to 1000 [ 653.226463][T10385] virt_wifi0 speed is unknown, defaulting to 1000 [ 653.238024][T10385] virt_wifi0 speed is unknown, defaulting to 1000 [ 653.246872][T10385] virt_wifi0 speed is unknown, defaulting to 1000 [ 653.273334][ T31] audit: type=1800 audit(1785336443.443:21): pid=10376 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.9.815" name="idVendor" dev="configfs" ino=28125 res=0 errno=0 [ 655.136961][T10377] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 655.182068][ T31] audit: type=1800 audit(1785336445.323:22): pid=10376 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.9.815" name="idProduct" dev="configfs" ino=28128 res=0 errno=0 [ 655.186391][T10382] SQUASHFS error: xz decompression failed, data probably corrupt [ 655.210238][T10382] SQUASHFS error: Failed to read block 0x108: -5 [ 655.216652][T10382] SQUASHFS error: Unable to read metadata cache entry [106] [ 655.223968][T10382] SQUASHFS error: Unable to read inode 0x11f [ 655.399600][T10376] file system registered [ 656.471617][T10408] syz.9.821 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 658.028090][T10419] loop6: detected capacity change from 0 to 256 [ 659.112565][ T31] audit: type=1804 audit(1785336449.303:23): pid=10419 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.6.823" name="/newroot/12/file0/bus" dev="loop6" ino=1048812 res=1 errno=0 [ 674.456161][T10515] loop1: detected capacity change from 0 to 128 [ 675.297835][T10515] ext4: Unknown parameter 'fsmagic' [ 675.511715][T10519] loop2: detected capacity change from 0 to 40427 [ 675.538139][T10519] F2FS-fs (loop2): invalid crc value [ 675.636444][T10519] F2FS-fs (loop2): f2fs_recover_fsync_data: recovery fsync data, check_only: 1 [ 675.848922][T10519] F2FS-fs (loop2): f2fs_disable_checkpoint starts, unusable: 0 [ 675.856634][T10519] F2FS-fs (loop2): f2fs_disable_checkpoint: call f2fs_write_checkpoint(), meta: 0, node: 0, data: 0 [ 675.868986][T10519] F2FS-fs (loop2): Start checkpoint disabled! [ 675.884377][T10519] F2FS-fs (loop2): f2fs_disable_checkpoint finishes, err:0 [ 675.893958][T10519] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e6 [ 676.844434][T10530] syz.2.844: attempt to access beyond end of device [ 676.844434][T10530] loop2: rw=2049, sector=77824, nr_sectors = 136 limit=40427 [ 678.282235][ T8375] kworker/u8:17: attempt to access beyond end of device [ 678.282235][ T8375] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 678.426946][ T8375] CPU: 0 UID: 0 PID: 8375 Comm: kworker/u8:17 Not tainted syzkaller #0 PREEMPT(full) [ 678.426996][ T8375] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 678.427021][ T8375] Workqueue: writeback wb_workfn (flush-7:2) [ 678.427083][ T8375] Call Trace: [ 678.427094][ T8375] [ 678.427106][ T8375] dump_stack_lvl+0x100/0x190 [ 678.427143][ T8375] f2fs_stop_checkpoint+0x5e6/0xb30 [ 678.427194][ T8375] ? srso_alias_return_thunk+0x5/0xfbef5 [ 678.427241][ T8375] ? errseq_set+0xe3/0x150 [ 678.427287][ T8375] ? srso_alias_return_thunk+0x5/0xfbef5 [ 678.427333][ T8375] f2fs_write_end_bio+0xf53/0x1340 [ 678.427371][ T8375] ? __pfx_f2fs_write_end_bio+0x10/0x10 [ 678.427410][ T8375] ? srso_alias_return_thunk+0x5/0xfbef5 [ 678.427459][ T8375] ? __pfx_f2fs_write_end_io+0x10/0x10 [ 678.427492][ T8375] bio_endio+0x778/0x8e0 [ 678.427533][ T8375] submit_bio_noacct+0x64c/0x1ff0 [ 678.427598][ T8375] f2fs_submit_write_bio+0x133/0x330 [ 678.427657][ T8375] __submit_merged_bio+0x330/0x7b0 [ 678.427694][ T8375] ? rcu_is_watching+0x12/0xc0 [ 678.427753][ T8375] __submit_merged_write_cond+0x3fe/0x510 [ 678.427802][ T8375] ? __pfx___submit_merged_write_cond+0x10/0x10 [ 678.427852][ T8375] ? __pfx___might_resched+0x10/0x10 [ 678.427895][ T8375] ? srso_alias_return_thunk+0x5/0xfbef5 [ 678.427929][ T8375] ? folio_clear_dirty_for_io+0x178/0x960 [ 678.427979][ T8375] f2fs_write_cache_pages+0x20e9/0x2630 [ 678.428033][ T8375] ? __pfx_f2fs_write_cache_pages+0x10/0x10 [ 678.428112][ T8375] ? srso_alias_return_thunk+0x5/0xfbef5 [ 678.428191][ T8375] ? unwind_next_frame+0x3be/0x2090 [ 678.428246][ T8375] ? srso_alias_return_thunk+0x5/0xfbef5 [ 678.428278][ T8375] ? rcu_is_watching+0x12/0xc0 [ 678.428322][ T8375] f2fs_write_data_pages+0x799/0x16d0 [ 678.428368][ T8375] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 678.428416][ T8375] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 678.428454][ T8375] do_writepages+0x278/0x600 [ 678.428503][ T8375] ? __pfx_do_writepages+0x10/0x10 [ 678.428550][ T8375] ? srso_alias_return_thunk+0x5/0xfbef5 [ 678.428588][ T8375] __writeback_single_inode+0x164/0x1300 [ 678.428626][ T8375] ? find_held_lock+0x2b/0x80 [ 678.428679][ T8375] ? srso_alias_return_thunk+0x5/0xfbef5 [ 678.428715][ T8375] ? __pfx___writeback_single_inode+0x10/0x10 [ 678.428752][ T8375] ? srso_alias_return_thunk+0x5/0xfbef5 [ 678.428785][ T8375] ? do_raw_spin_unlock+0x145/0x1e0 [ 678.428823][ T8375] ? srso_alias_return_thunk+0x5/0xfbef5 [ 678.428861][ T8375] writeback_sb_inodes+0x766/0x1c50 [ 678.428913][ T8375] ? srso_alias_return_thunk+0x5/0xfbef5 [ 678.428948][ T8375] ? __pfx_writeback_sb_inodes+0x10/0x10 [ 678.428984][ T8375] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 678.429016][ T8375] ? debug_object_assert_init+0x1c4/0x310 [ 678.429103][ T8375] ? srso_alias_return_thunk+0x5/0xfbef5 [ 678.429136][ T8375] ? rcu_is_watching+0x12/0xc0 [ 678.429174][ T8375] ? srso_alias_return_thunk+0x5/0xfbef5 [ 678.429211][ T8375] ? queue_io+0x287/0x530 [ 678.429245][ T8375] wb_writeback+0x1c0/0xb50 [ 678.429290][ T8375] ? __pfx_wb_writeback+0x10/0x10 [ 678.429336][ T8375] ? srso_alias_return_thunk+0x5/0xfbef5 [ 678.429369][ T8375] ? mark_held_locks+0x40/0x70 [ 678.429400][ T8375] ? _raw_spin_unlock_irq+0x23/0x50 [ 678.429432][ T8375] wb_workfn+0x143/0xc80 [ 678.429473][ T8375] ? srso_alias_return_thunk+0x5/0xfbef5 [ 678.429506][ T8375] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 678.429538][ T8375] ? __pfx_wb_workfn+0x10/0x10 [ 678.429577][ T8375] ? srso_alias_return_thunk+0x5/0xfbef5 [ 678.429614][ T8375] ? srso_alias_return_thunk+0x5/0xfbef5 [ 678.429650][ T8375] ? srso_alias_return_thunk+0x5/0xfbef5 [ 678.429683][ T8375] ? rcu_is_watching+0x12/0xc0 [ 678.429730][ T8375] process_one_work+0xa23/0x1940 [ 678.429773][ T8375] ? __pfx_process_one_work+0x10/0x10 [ 678.429799][ T8375] ? srso_alias_return_thunk+0x5/0xfbef5 [ 678.429843][ T8375] ? srso_alias_return_thunk+0x5/0xfbef5 [ 678.429882][ T8375] worker_thread+0x5ef/0xe50 [ 678.429924][ T8375] ? kthread+0x13a/0x450 [ 678.429964][ T8375] ? __pfx_worker_thread+0x10/0x10 [ 678.429990][ T8375] kthread+0x370/0x450 [ 678.430032][ T8375] ? __pfx_kthread+0x10/0x10 [ 678.430077][ T8375] ret_from_fork+0x72b/0xd50 [ 678.430116][ T8375] ? __pfx_ret_from_fork+0x10/0x10 [ 678.430154][ T8375] ? srso_alias_return_thunk+0x5/0xfbef5 [ 678.430187][ T8375] ? __switch_to+0x800/0x10f0 [ 678.430234][ T8375] ? __switch_to_asm+0x39/0x70 [ 678.430272][ T8375] ? __pfx_kthread+0x10/0x10 [ 678.430318][ T8375] ret_from_fork_asm+0x1a/0x30 [ 678.430374][ T8375] [ 679.031761][ T8375] F2FS-fs (loop2): Stopped filesystem due to reason: 3 [ 680.023125][T10546] ubi0: attaching mtd0 [ 680.049886][T10546] ubi0: scanning is finished [ 680.661035][ T5631] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 680.688194][ T5631] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 680.700041][ T5631] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 680.709911][ T5631] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 680.719268][ T5631] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 681.080330][T10553] loop1: detected capacity change from 0 to 32768 [ 681.118023][T10546] ubi0 error: ubi_attach_mtd_dev: cannot spawn "ubi_bgt0d", error -4 [ 681.292773][T10553] XFS (loop1): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 681.408827][T10553] XFS (loop1): Ending clean mount [ 681.434319][T10553] XFS (loop1): Quotacheck needed: Please wait. [ 681.649288][T10553] XFS (loop1): Quotacheck: Done. [ 682.765409][ T5629] Bluetooth: hci5: command tx timeout [ 683.248253][ T9776] XFS (loop1): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 684.840911][ T5629] Bluetooth: hci5: command tx timeout [ 685.083020][ T1310] ieee802154 phy0 wpan0: encryption failed: -22 [ 685.089396][ T1310] ieee802154 phy1 wpan1: encryption failed: -22 [ 685.477524][ T5631] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 685.494283][ T5631] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 685.503521][ T5631] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 685.515466][ T5631] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 685.538547][ T5631] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 686.921369][ T5629] Bluetooth: hci5: command tx timeout [ 687.481365][T10616] Bluetooth: MGMT ver 1.23 [ 687.641474][ T5629] Bluetooth: hci6: command tx timeout [ 687.696322][T10621] loop9: detected capacity change from 0 to 128 [ 687.729589][T10549] virt_wifi0 speed is unknown, defaulting to 1000 [ 688.093145][T10625] loop0: detected capacity change from 0 to 8 [ 688.902697][T10625] SQUASHFS error: xz decompression failed, data probably corrupt [ 688.910502][T10625] SQUASHFS error: Failed to read block 0x108: -5 [ 688.916911][T10625] SQUASHFS error: Unable to read metadata cache entry [106] [ 688.926030][T10625] SQUASHFS error: Unable to read inode 0x11f [ 689.001029][ T5629] Bluetooth: hci5: command tx timeout [ 689.021938][T10621] ext4: Unknown parameter 'fsmagic' [ 689.724827][ T5629] Bluetooth: hci6: command tx timeout [ 690.372401][T10634] netlink: 12 bytes leftover after parsing attributes in process `syz.2.862'. [ 692.318055][ T5629] Bluetooth: hci6: command tx timeout [ 694.441644][ T5629] Bluetooth: hci6: command tx timeout [ 696.745818][ T5882] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 697.278709][ T5882] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 697.364379][T10594] virt_wifi0 speed is unknown, defaulting to 1000 [ 697.404477][ T5631] Bluetooth: hci4: command 0x0406 tx timeout [ 697.694078][ T5882] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 698.053332][ T5882] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 698.810987][ T5882] bridge_slave_1: left allmulticast mode [ 698.826355][ T5882] bridge_slave_1: left promiscuous mode [ 698.844935][ T5882] bridge0: port 2(bridge_slave_1) entered disabled state [ 698.863896][ T5882] bridge_slave_0: left allmulticast mode [ 698.884638][ T5882] bridge_slave_0: left promiscuous mode [ 698.907776][ T5882] bridge0: port 1(bridge_slave_0) entered disabled state [ 699.467891][ T5882] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 699.506324][ T5882] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 699.537815][ T5882] bond0 (unregistering): Released all slaves [ 699.709795][T10549] bridge0: port 1(bridge_slave_0) entered blocking state [ 699.726403][T10549] bridge0: port 1(bridge_slave_0) entered disabled state [ 699.737133][T10549] bridge_slave_0: entered allmulticast mode [ 699.746770][T10549] bridge_slave_0: entered promiscuous mode [ 699.766049][T10549] bridge0: port 2(bridge_slave_1) entered blocking state [ 699.775803][T10549] bridge0: port 2(bridge_slave_1) entered disabled state [ 699.783903][T10549] bridge_slave_1: entered allmulticast mode [ 699.794002][T10549] bridge_slave_1: entered promiscuous mode [ 699.802483][ T5882] tipc: Left network mode [ 700.119168][T10549] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 700.136829][T10549] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 700.329144][T10549] team0: Port device team_slave_0 added [ 700.339162][T10549] team0: Port device team_slave_1 added [ 700.557356][T10594] bridge0: port 1(bridge_slave_0) entered blocking state [ 700.581051][T10594] bridge0: port 1(bridge_slave_0) entered disabled state [ 700.592617][T10594] bridge_slave_0: entered allmulticast mode [ 700.638275][T10594] bridge_slave_0: entered promiscuous mode [ 700.711961][ T5882] hsr_slave_0: left promiscuous mode [ 700.725898][ T5882] hsr_slave_1: left promiscuous mode [ 700.738877][ T5882] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 700.760706][ T5882] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 700.784533][ T5882] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 700.810830][ T5882] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 700.880860][ T5882] veth1_macvtap: left promiscuous mode [ 700.896368][ T5882] veth0_macvtap: left promiscuous mode [ 700.914729][ T5882] veth1_vlan: left promiscuous mode [ 700.940758][ T5882] veth0_vlan: left promiscuous mode [ 701.449976][ T5882] team0 (unregistering): Port device team_slave_1 removed [ 701.485629][ T5882] team0 (unregistering): Port device team_slave_0 removed [ 701.655694][T10594] bridge0: port 2(bridge_slave_1) entered blocking state [ 701.682268][T10594] bridge0: port 2(bridge_slave_1) entered disabled state [ 701.689596][T10594] bridge_slave_1: entered allmulticast mode [ 701.698456][T10594] bridge_slave_1: entered promiscuous mode [ 701.710181][T10549] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 701.719259][T10549] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 701.749771][T10549] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 701.773047][T10549] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 701.779994][T10549] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 701.807644][T10549] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 701.904196][T10549] hsr_slave_0: entered promiscuous mode [ 701.912326][T10549] hsr_slave_1: entered promiscuous mode [ 701.919054][T10549] debugfs: 'hsr0' already exists in 'hsr' [ 701.926899][T10549] Cannot create hsr debugfs directory [ 701.937220][T10594] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 701.955015][T10594] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 702.062695][T10594] team0: Port device team_slave_0 added [ 702.073080][T10594] team0: Port device team_slave_1 added [ 702.181208][T10594] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 702.188216][T10594] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 702.215015][T10594] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 702.250419][T10594] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 702.261805][T10594] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 702.299953][T10594] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 702.445209][T10594] hsr_slave_0: entered promiscuous mode [ 702.452198][T10594] hsr_slave_1: entered promiscuous mode [ 702.458685][T10594] debugfs: 'hsr0' already exists in 'hsr' [ 702.465033][T10594] Cannot create hsr debugfs directory [ 703.154449][T10549] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 703.180602][T10549] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 703.189869][T10549] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 703.208709][T10549] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 703.228389][T10549] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 703.240247][T10549] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 703.265426][T10549] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 703.277332][T10549] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 703.371565][T10594] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 703.524069][T10594] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 703.686585][T10594] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 703.717450][T10549] 8021q: adding VLAN 0 to HW filter on device bond0 [ 703.746579][T10549] 8021q: adding VLAN 0 to HW filter on device team0 [ 703.771923][ T37] bridge0: port 1(bridge_slave_0) entered blocking state [ 703.779076][ T37] bridge0: port 1(bridge_slave_0) entered forwarding state [ 703.849818][T10594] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 703.879562][ T37] bridge0: port 2(bridge_slave_1) entered blocking state [ 703.886768][ T37] bridge0: port 2(bridge_slave_1) entered forwarding state [ 704.177621][T10594] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 704.206697][T10594] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 704.225249][T10594] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 704.250565][T10594] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 704.266633][T10594] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 704.285177][T10594] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 704.299372][T10594] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 704.319821][T10594] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 704.511498][T10594] 8021q: adding VLAN 0 to HW filter on device bond0 [ 704.549661][T10594] 8021q: adding VLAN 0 to HW filter on device team0 [ 704.565780][ T8376] bridge0: port 1(bridge_slave_0) entered blocking state [ 704.572962][ T8376] bridge0: port 1(bridge_slave_0) entered forwarding state [ 704.593383][ T8376] bridge0: port 2(bridge_slave_1) entered blocking state [ 704.600546][ T8376] bridge0: port 2(bridge_slave_1) entered forwarding state [ 704.975355][T10549] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 705.630991][T10594] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 705.693096][T10549] veth0_vlan: entered promiscuous mode [ 705.727716][T10549] veth1_vlan: entered promiscuous mode [ 705.756072][T10594] veth0_vlan: entered promiscuous mode [ 705.796571][T10594] veth1_vlan: entered promiscuous mode [ 705.845716][T10549] veth0_macvtap: entered promiscuous mode [ 705.869840][T10549] veth1_macvtap: entered promiscuous mode [ 705.894838][T10594] veth0_macvtap: entered promiscuous mode [ 705.932459][T10549] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 705.959096][T10594] veth1_macvtap: entered promiscuous mode [ 705.980350][T10549] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 706.015950][ T37] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 706.040300][ T37] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 706.050788][ T37] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 706.078949][ T37] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 706.095182][T10594] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 706.133608][T10594] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 706.232851][ T8376] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 706.241846][ T8376] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 706.284469][ T8376] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 706.311571][ T8376] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 706.340575][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 706.366330][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 706.425961][ T133] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 706.437399][ T133] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 706.621803][ T8376] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 706.653692][ T8376] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 712.226348][T10890] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 712.245402][T10890] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 712.820066][T10904] loop4: detected capacity change from 0 to 256 [ 713.210734][ T31] audit: type=1804 audit(1785336503.253:24): pid=10904 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.4.870" name="/newroot/1/file0/bus" dev="loop4" ino=1048832 res=1 errno=0 [ 713.401447][ T5631] Bluetooth: hci7: command 0x0406 tx timeout [ 715.911776][T10917] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 718.925918][T10928] loop3: detected capacity change from 0 to 512 [ 718.987603][T10928] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 719.109932][T10928] EXT4-fs warning (device loop3): ext4_expand_extra_isize_ea:2859: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 719.144866][T10932] loop2: detected capacity change from 0 to 128 [ 719.152626][T10932] ext4: Unknown parameter 'fsmagic' [ 720.246213][T10928] EXT4-fs (loop3): 1 truncate cleaned up [ 720.300540][T10928] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 721.912626][T10594] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 722.665579][T10952] ubi0: attaching mtd0 [ 722.698278][T10952] ubi0: scanning is finished [ 723.400479][T10952] ubi0 error: ubi_attach_mtd_dev: cannot spawn "ubi_bgt0d", error -4 [ 727.210244][T10973] loop4: detected capacity change from 0 to 8 [ 727.236139][T10973] SQUASHFS error: xz decompression failed, data probably corrupt [ 727.244177][T10973] SQUASHFS error: Failed to read block 0x108: -5 [ 727.250525][T10973] SQUASHFS error: Unable to read metadata cache entry [106] [ 727.257899][T10973] SQUASHFS error: Unable to read inode 0x11f [ 727.315959][ T5631] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 727.338865][ T5631] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 727.352253][ T5631] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 727.365050][ T5631] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 727.375667][ T5631] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 727.616051][ T8382] bridge_slave_1: left allmulticast mode [ 727.700022][ T8382] bridge_slave_1: left promiscuous mode [ 727.743590][ T8382] bridge0: port 2(bridge_slave_1) entered disabled state [ 728.097106][ T8382] bridge_slave_0: left allmulticast mode [ 728.160080][ T8382] bridge_slave_0: left promiscuous mode [ 729.203977][ T8382] bridge0: port 1(bridge_slave_0) entered disabled state [ 729.563580][ T5631] Bluetooth: hci0: command tx timeout [ 730.642506][ T5629] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 730.661687][ T5629] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 730.710866][ T5629] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 730.739073][ T5629] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 730.756716][ T5629] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 730.865068][T11000] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 732.013118][ T5631] Bluetooth: hci0: command tx timeout [ 732.845131][ T5631] Bluetooth: hci2: command tx timeout [ 733.508712][ T8382] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 733.597633][ T8382] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 733.664767][ T8382] bond0 (unregistering): Released all slaves [ 734.047773][ T5631] Bluetooth: hci0: command tx timeout [ 734.920732][ T5631] Bluetooth: hci2: command tx timeout [ 734.979022][ T5629] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 734.993693][ T5629] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 735.074887][ T5629] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 735.098598][ T5629] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 735.203113][ T5629] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 736.126682][ T5629] Bluetooth: hci0: command tx timeout [ 736.134797][ T8382] tipc: Left network mode [ 737.081475][ T5629] Bluetooth: hci2: command tx timeout [ 738.516023][ T5629] Bluetooth: hci3: command tx timeout [ 739.162531][ T5629] Bluetooth: hci2: command tx timeout [ 740.572761][T11069] loop3: detected capacity change from 0 to 32768 [ 740.600786][ T5629] Bluetooth: hci3: command tx timeout [ 741.033324][T11069] XFS (loop3): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 741.112419][T11069] XFS (loop3): Ending clean mount [ 741.142002][T11069] XFS (loop3): Quotacheck needed: Please wait. [ 741.382507][T11069] XFS (loop3): Quotacheck: Done. [ 742.284031][T10594] XFS (loop3): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 742.691151][ T5629] Bluetooth: hci3: command tx timeout [ 742.957414][T11095] loop2: detected capacity change from 0 to 8 [ 743.857125][T11095] SQUASHFS error: xz decompression failed, data probably corrupt [ 743.865018][T11095] SQUASHFS error: Failed to read block 0x108: -5 [ 743.871468][T11095] SQUASHFS error: Unable to read metadata cache entry [106] [ 743.878772][T11095] SQUASHFS error: Unable to read inode 0x11f [ 744.714187][ T8382] hsr_slave_0: left promiscuous mode [ 744.765370][ T8382] hsr_slave_1: left promiscuous mode [ 744.770748][ T5629] Bluetooth: hci3: command tx timeout [ 744.866138][ T8382] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 745.007640][ T8382] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 745.771605][ T8382] veth1_macvtap: left promiscuous mode [ 745.783657][ T8382] veth0_macvtap: left promiscuous mode [ 745.805046][ T8382] veth1_vlan: left promiscuous mode [ 745.843408][ T8382] veth0_vlan: left promiscuous mode [ 746.530551][ T1310] ieee802154 phy0 wpan0: encryption failed: -22 [ 746.620071][ T1310] ieee802154 phy1 wpan1: encryption failed: -22 [ 747.022523][T11115] netlink: 476 bytes leftover after parsing attributes in process `syz.4.913'. [ 751.427098][T11122] udc usbip-vudc.0: failed to start g1: -4 [ 751.448143][T11122] configfs-gadget.g1 gadget.32: probe with driver configfs-gadget.g1 failed with error -4 [ 751.471699][T11122] UDC core: g1: couldn't find an available UDC or it's busy [ 753.277598][T11136] loop3: detected capacity change from 0 to 8 [ 753.722627][T11136] SQUASHFS error: xz decompression failed, data probably corrupt [ 753.730428][T11136] SQUASHFS error: Failed to read block 0x108: -5 [ 753.736908][T11136] SQUASHFS error: Unable to read metadata cache entry [106] [ 753.744244][T11136] SQUASHFS error: Unable to read inode 0x11f [ 754.978054][T11148] loop2: detected capacity change from 0 to 8 [ 755.044922][T11148] SQUASHFS error: xz decompression failed, data probably corrupt [ 755.052837][T11148] SQUASHFS error: Failed to read block 0x108: -5 [ 755.059178][T11148] SQUASHFS error: Unable to read metadata cache entry [106] [ 755.066528][T11148] SQUASHFS error: Unable to read inode 0x11f [ 755.493689][T11152] siw: device registration error -23 [ 760.684640][ T8382] team0 (unregistering): Port device team_slave_1 removed [ 760.743261][ T8382] team0 (unregistering): Port device team_slave_0 removed [ 760.789815][T11167] loop4: detected capacity change from 0 to 2048 [ 762.360426][T11167] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 764.109846][T11183] loop3: detected capacity change from 0 to 8 [ 764.123981][T11177] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1314: group 0, block bitmap and bg descriptor inconsistent: 25 vs 281 free clusters [ 764.162034][T11183] SQUASHFS error: xz decompression failed, data probably corrupt [ 764.169849][T11183] SQUASHFS error: Failed to read block 0x108: -5 [ 764.176237][T11183] SQUASHFS error: Unable to read metadata cache entry [106] [ 764.183562][T11183] SQUASHFS error: Unable to read inode 0x11f [ 764.277361][T10970] virt_wifi0 speed is unknown, defaulting to 1000 [ 764.468392][T10994] virt_wifi0 speed is unknown, defaulting to 1000 [ 764.809946][T11026] virt_wifi0 speed is unknown, defaulting to 1000 [ 764.821597][T10549] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 768.011257][T11198] loop4: detected capacity change from 0 to 8 [ 768.051825][T11198] SQUASHFS error: xz decompression failed, data probably corrupt [ 768.059603][T11198] SQUASHFS error: Failed to read block 0x108: -5 [ 768.066002][T11198] SQUASHFS error: Unable to read metadata cache entry [106] [ 768.073352][T11198] SQUASHFS error: Unable to read inode 0x11f [ 769.625913][ T8382] IPVS: stop unused estimator thread 0... [ 772.587664][ T5629] Bluetooth: hci6: Controller not accepting commands anymore: ncmd = 0 [ 772.604910][ T5629] Bluetooth: hci6: Injecting HCI hardware error event [ 772.618070][ T5629] Bluetooth: hci6: hardware error 0x00 [ 773.295953][ T8382] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 775.167155][ T8382] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 775.192273][ T5629] Bluetooth: hci6: Opcode 0x0c03 failed: -110 [ 775.215451][T11283] loop3: detected capacity change from 0 to 512 [ 775.258034][T11283] ext2: Bad value for 'stripe' [ 775.821645][T11293] gfs2: not a GFS2 filesystem [ 775.853853][T11293] hpfs: Bad magic ... probably not HPFS [ 776.755518][T11283] binder: 11281:11283 ioctl 4018620d 0 returned -22 [ 778.201636][ T8382] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 779.749451][T11324] loop3: detected capacity change from 0 to 128 [ 779.826856][T11324] qnx6: block size(2066842815) > page size(4096) not supported by filesystem [ 779.836232][T11324] qnx6: unable to set blocksize [ 779.928773][T11324] binder: 11321:11324 ioctl c0306201 0 returned -14 [ 781.527766][T11339] loop2: detected capacity change from 0 to 2048 [ 781.604995][T11339] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 783.702591][ T8382] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 784.005346][T11371] loop4: detected capacity change from 0 to 8 [ 784.016020][T11371] SQUASHFS error: xz decompression failed, data probably corrupt [ 784.024792][T11371] SQUASHFS error: Failed to read block 0x108: -5 [ 784.031444][T11371] SQUASHFS error: Unable to read metadata cache entry [106] [ 784.038746][T11371] SQUASHFS error: Unable to read inode 0x11f [ 784.399863][T10970] bridge0: port 1(bridge_slave_0) entered blocking state [ 784.409547][ T5631] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 784.428176][ T5631] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 784.436558][ T5631] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 784.441083][T10970] bridge0: port 1(bridge_slave_0) entered disabled state [ 784.445688][ T5631] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 784.470582][T10970] bridge_slave_0: entered allmulticast mode [ 784.483001][ T5631] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 784.648935][T11346] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1314: group 0, block bitmap and bg descriptor inconsistent: 25 vs 281 free clusters [ 784.651435][T10970] bridge_slave_0: entered promiscuous mode [ 784.748397][ T9662] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 784.791660][T11372] workqueue: Failed to create a rescuer kthread for wq "wg-crypt-™ú:‡/": -EINTR [ 785.558832][T10994] bridge0: port 1(bridge_slave_0) entered blocking state [ 785.667038][T10994] bridge0: port 1(bridge_slave_0) entered disabled state [ 785.703250][T10994] bridge_slave_0: entered allmulticast mode [ 785.747242][T10994] bridge_slave_0: entered promiscuous mode [ 785.788279][T10994] bridge0: port 2(bridge_slave_1) entered blocking state [ 785.809765][T10994] bridge0: port 2(bridge_slave_1) entered disabled state [ 785.854641][T10994] bridge_slave_1: entered allmulticast mode [ 786.153475][ T5629] Bluetooth: hci4: unexpected event for opcode 0x042c [ 786.524606][ T5629] Bluetooth: hci1: command tx timeout [ 786.609657][T10994] bridge_slave_1: entered promiscuous mode [ 786.699633][T11026] bridge0: port 1(bridge_slave_0) entered blocking state [ 786.766559][T11026] bridge0: port 1(bridge_slave_0) entered disabled state [ 786.809275][T11026] bridge_slave_0: entered allmulticast mode [ 786.861194][T11026] bridge_slave_0: entered promiscuous mode [ 786.918172][T11026] bridge0: port 2(bridge_slave_1) entered blocking state [ 786.946934][T11026] bridge0: port 2(bridge_slave_1) entered disabled state [ 786.984100][T11026] bridge_slave_1: entered allmulticast mode [ 787.014296][T11026] bridge_slave_1: entered promiscuous mode [ 787.033528][T11386] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 787.205482][T10994] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 787.256981][T10994] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 787.933889][T11407] loop3: detected capacity change from 0 to 8 [ 788.088084][T11407] SQUASHFS error: xz decompression failed, data probably corrupt [ 788.097821][T11407] SQUASHFS error: Failed to read block 0x108: -5 [ 788.104271][T11407] SQUASHFS error: Unable to read metadata cache entry [106] [ 788.111610][T11407] SQUASHFS error: Unable to read inode 0x11f [ 788.443618][T10994] team0: Port device team_slave_0 added [ 788.610781][ T5629] Bluetooth: hci1: command tx timeout [ 790.444969][ T5631] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 790.458853][ T5631] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 790.469256][ T5631] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 790.497055][ T5631] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 790.508361][ T5631] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 790.544115][T11026] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 790.558979][T11026] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 790.604195][T11026] team0: Port device team_slave_0 added [ 790.740649][ T5629] Bluetooth: hci1: command tx timeout [ 790.795372][T11427] loop2: detected capacity change from 0 to 8 [ 790.812497][T11427] SQUASHFS error: xz decompression failed, data probably corrupt [ 790.820266][T11427] SQUASHFS error: Failed to read block 0x108: -5 [ 790.826617][T11427] SQUASHFS error: Unable to read metadata cache entry [106] [ 790.834137][T11427] SQUASHFS error: Unable to read inode 0x11f [ 790.867139][T11026] team0: Port device team_slave_1 added [ 791.155200][T11026] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 791.184563][T11026] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 791.251944][T11435] loop3: detected capacity change from 0 to 2048 [ 791.270069][T11026] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 791.310538][T11435] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 791.829735][T11026] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 792.010654][T11026] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 792.390413][T11026] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 792.807740][ T5631] Bluetooth: hci1: command tx timeout [ 792.843901][ T5631] Bluetooth: hci0: command tx timeout [ 794.842649][T10594] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 794.921300][ T5631] Bluetooth: hci0: command tx timeout [ 796.109943][ T5629] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 796.125761][ T5629] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 796.134500][ T5629] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 796.144870][ T5629] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 796.155243][ T5629] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 797.123208][ T5629] Bluetooth: hci0: command tx timeout [ 797.839188][ T8382] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 797.955975][T11375] virt_wifi0 speed is unknown, defaulting to 1000 [ 798.201528][ T5629] Bluetooth: hci2: command tx timeout [ 798.351215][ T8382] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 798.865119][T11493] loop2: detected capacity change from 0 to 8 [ 798.879420][T11493] SQUASHFS error: xz decompression failed, data probably corrupt [ 798.890861][T11493] SQUASHFS error: Failed to read block 0x108: -5 [ 798.897199][T11493] SQUASHFS error: Unable to read metadata cache entry [106] [ 798.904722][T11493] SQUASHFS error: Unable to read inode 0x11f [ 798.969074][T11503] futex_wake_op: syz.3.982 tries to shift op by 144; fix this program [ 799.171329][ T5629] Bluetooth: hci0: command tx timeout [ 800.248499][ T8382] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 800.282491][ T5629] Bluetooth: hci2: command tx timeout [ 801.216645][T11423] virt_wifi0 speed is unknown, defaulting to 1000 [ 802.991220][ T5629] Bluetooth: hci2: command tx timeout [ 803.996617][ T8382] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 804.344802][T11460] virt_wifi0 speed is unknown, defaulting to 1000 [ 804.497279][ T5282] 8021q: adding VLAN 0 to HW filter on device eth2 [ 805.001247][ T5631] Bluetooth: hci2: command tx timeout [ 805.218369][T11375] bridge0: port 1(bridge_slave_0) entered blocking state [ 805.226472][T11375] bridge0: port 1(bridge_slave_0) entered disabled state [ 805.238419][T11375] bridge_slave_0: entered allmulticast mode [ 805.258366][T11375] bridge_slave_0: entered promiscuous mode [ 805.315692][ T8382] bridge_slave_1: left allmulticast mode [ 805.326296][ T8382] bridge_slave_1: left promiscuous mode [ 805.341734][ T8382] bridge0: port 2(bridge_slave_1) entered disabled state [ 805.365954][ T8382] bridge_slave_0: left allmulticast mode [ 805.373000][ T8382] bridge_slave_0: left promiscuous mode [ 805.380876][ T8382] bridge0: port 1(bridge_slave_0) entered disabled state [ 805.413486][ T8382] bridge_slave_1: left allmulticast mode [ 805.419210][ T8382] bridge_slave_1: left promiscuous mode [ 805.435856][ T8382] bridge0: port 2(bridge_slave_1) entered disabled state [ 805.454517][ T8382] bridge_slave_0: left allmulticast mode [ 805.460219][ T8382] bridge_slave_0: left promiscuous mode [ 805.466405][ T8382] bridge0: port 1(bridge_slave_0) entered disabled state [ 805.560949][ T5629] Bluetooth: hci5: command 0x0406 tx timeout [ 805.753190][ T8382] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 805.765056][ T8382] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 805.775454][ T8382] bond0 (unregistering): Released all slaves [ 805.892671][ T8382] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 805.916094][ T8382] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 805.926215][ T8382] bond0 (unregistering): Released all slaves [ 805.944114][T11375] bridge0: port 2(bridge_slave_1) entered blocking state [ 805.951626][T11375] bridge0: port 2(bridge_slave_1) entered disabled state [ 805.958821][T11375] bridge_slave_1: entered allmulticast mode [ 805.975175][T11375] bridge_slave_1: entered promiscuous mode [ 806.036399][ T5282] 8021q: adding VLAN 0 to HW filter on device eth3 [ 806.058623][ T8382] tipc: Left network mode [ 806.238842][T11375] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 806.265059][T11375] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 806.535072][T11375] team0: Port device team_slave_0 added [ 806.556245][T11375] team0: Port device team_slave_1 added [ 806.704144][T11375] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 806.711778][T11375] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 806.743906][T11375] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 806.817486][T11375] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 806.825020][T11375] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 806.858152][T11375] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 806.983730][ T5282] 8021q: adding VLAN 0 to HW filter on device eth4 [ 807.009026][T11423] bridge0: port 1(bridge_slave_0) entered blocking state [ 807.026955][T11423] bridge0: port 1(bridge_slave_0) entered disabled state [ 807.039882][T11423] bridge_slave_0: entered allmulticast mode [ 807.052135][T11423] bridge_slave_0: entered promiscuous mode [ 807.093259][ T8382] hsr_slave_0: left promiscuous mode [ 807.100072][ T8382] hsr_slave_1: left promiscuous mode [ 807.109282][ T8382] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 807.116962][ T8382] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 807.125367][ T8382] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 807.135510][ T8382] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 807.152368][ T8382] hsr_slave_0: left promiscuous mode [ 807.158849][ T8382] hsr_slave_1: left promiscuous mode [ 807.165886][ T8382] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 807.183407][ T8382] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 807.196116][ T8382] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 807.206031][ T8382] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 807.226180][ T8382] veth1_macvtap: left promiscuous mode [ 807.231912][ T8382] veth0_macvtap: left promiscuous mode [ 807.237521][ T8382] veth1_vlan: left promiscuous mode [ 807.248751][ T8382] veth0_vlan: left promiscuous mode [ 807.257616][ T8382] veth1_macvtap: left promiscuous mode [ 807.264143][ T8382] veth0_macvtap: left promiscuous mode [ 807.269963][ T8382] veth1_vlan: left promiscuous mode [ 807.275532][ T8382] veth0_vlan: left promiscuous mode [ 807.727178][ T8382] team0 (unregistering): Port device team_slave_1 removed [ 807.745246][ T8382] team0 (unregistering): Port device team_slave_0 removed [ 807.964129][ T1310] ieee802154 phy1 wpan1: encryption failed: -22 [ 808.071286][ T8382] team0 (unregistering): Port device team_slave_1 removed [ 808.106283][ T8382] team0 (unregistering): Port device team_slave_0 removed [ 808.253591][T11423] bridge0: port 2(bridge_slave_1) entered blocking state [ 808.260888][T11423] bridge0: port 2(bridge_slave_1) entered disabled state [ 808.269552][T11423] bridge_slave_1: entered allmulticast mode [ 808.277406][T11423] bridge_slave_1: entered promiscuous mode [ 808.332244][ T5282] 8021q: adding VLAN 0 to HW filter on device eth21 [ 808.426351][T11423] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 808.457153][T11423] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 808.494541][T11460] bridge0: port 1(bridge_slave_0) entered blocking state [ 808.511399][T11460] bridge0: port 1(bridge_slave_0) entered disabled state [ 808.520030][T11460] bridge_slave_0: entered allmulticast mode [ 808.538237][T11460] bridge_slave_0: entered promiscuous mode [ 808.589520][T11375] hsr_slave_0: entered promiscuous mode [ 808.620230][T11375] hsr_slave_1: entered promiscuous mode [ 808.631946][T11375] debugfs: 'hsr0' already exists in 'hsr' [ 808.643284][T11375] Cannot create hsr debugfs directory [ 808.655976][T11460] bridge0: port 2(bridge_slave_1) entered blocking state [ 808.677006][T11460] bridge0: port 2(bridge_slave_1) entered disabled state [ 808.696314][T11460] bridge_slave_1: entered allmulticast mode [ 808.714755][T11460] bridge_slave_1: entered promiscuous mode [ 808.750748][T11423] team0: Port device team_slave_0 added [ 808.819578][T11423] team0: Port device team_slave_1 added [ 808.914103][T11423] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 808.921356][T11423] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 808.956581][T11423] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 808.973452][T11460] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 809.007337][T11423] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 809.015685][T11423] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 809.070498][T11423] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 809.088281][T11460] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 809.194862][T11460] team0: Port device team_slave_0 added [ 809.209192][ T5282] 8021q: adding VLAN 0 to HW filter on device eth22 [ 809.228427][ T8382] IPVS: stop unused estimator thread 0... [ 809.274485][T11460] team0: Port device team_slave_1 added [ 809.375495][T11423] hsr_slave_0: entered promiscuous mode [ 809.382867][T11423] hsr_slave_1: entered promiscuous mode [ 809.389214][T11423] debugfs: 'hsr0' already exists in 'hsr' [ 809.403468][T11423] Cannot create hsr debugfs directory [ 809.445300][T11460] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 809.455441][T11460] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 809.482320][T11460] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 809.505552][ T8382] bridge_slave_1: left allmulticast mode [ 809.512095][ T8382] bridge_slave_1: left promiscuous mode [ 809.517922][ T8382] bridge0: port 2(bridge_slave_1) entered disabled state [ 809.529922][ T8382] bridge_slave_0: left allmulticast mode [ 809.536050][ T8382] bridge_slave_0: left promiscuous mode [ 809.543041][ T8382] bridge0: port 1(bridge_slave_0) entered disabled state [ 809.559301][ T8382] bridge_slave_1: left allmulticast mode [ 809.567038][ T8382] bridge_slave_1: left promiscuous mode [ 809.574023][ T8382] bridge0: port 2(bridge_slave_1) entered disabled state [ 809.585654][ T8382] bridge_slave_0: left allmulticast mode [ 809.591450][ T8382] bridge_slave_0: left promiscuous mode [ 809.598719][ T8382] bridge0: port 1(bridge_slave_0) entered disabled state [ 809.618864][ T8382] bridge_slave_0: left allmulticast mode [ 809.624746][ T8382] bridge_slave_0: left promiscuous mode [ 809.630535][ T8382] bridge0: port 1(bridge_slave_0) entered disabled state [ 809.747217][ T8382] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 809.760310][ T8382] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 809.774700][ T8382] bond0 (unregistering): Released all slaves [ 809.866820][ T8382] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 809.884463][ T8382] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 809.897567][ T8382] bond0 (unregistering): Released all slaves [ 809.993931][ T8382] bond0 (unregistering): Released all slaves [ 810.028335][T11460] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 810.045774][T11460] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 810.087259][T11460] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 810.137497][ T5282] 8021q: adding VLAN 0 to HW filter on device eth23 [ 810.256965][ T8382] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 810.266340][ T8382] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 810.318167][ T8382] team0 (unregistering): Port device team_slave_1 removed [ 810.349356][ T8382] team0 (unregistering): Port device team_slave_0 removed [ 810.570267][ T8382] team0 (unregistering): Port device team_slave_0 removed [ 810.945314][ T5282] 8021q: adding VLAN 0 to HW filter on device eth24 [ 811.158300][T11460] hsr_slave_0: entered promiscuous mode [ 811.165755][T11460] hsr_slave_1: entered promiscuous mode [ 811.173258][T11460] debugfs: 'hsr0' already exists in 'hsr' [ 811.178995][T11460] Cannot create hsr debugfs directory [ 812.168817][T11460] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 812.316924][T11460] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 812.404602][T11460] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 812.509570][T11460] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 812.756105][T11375] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 812.786752][T11375] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 812.804524][T11375] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 812.820115][T11375] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 812.834146][T11375] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 812.847252][T11375] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 812.881949][T11375] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 812.896107][T11375] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 813.018646][T11423] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 813.046192][T11423] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 813.066792][T11423] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 813.096357][T11423] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 813.115203][T11423] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 813.132557][T11423] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 813.193927][T11423] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 813.208516][T11423] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 813.363536][T11460] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 813.376306][T11460] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 813.393005][T11460] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 813.405095][T11460] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 813.431438][T11460] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 813.446627][T11460] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 813.476519][T11460] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 813.507132][T11460] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 813.533038][T11375] 8021q: adding VLAN 0 to HW filter on device bond0 [ 813.611253][T11375] 8021q: adding VLAN 0 to HW filter on device team0 [ 813.637830][ T49] bridge0: port 1(bridge_slave_0) entered blocking state [ 813.644984][ T49] bridge0: port 1(bridge_slave_0) entered forwarding state [ 813.686862][ T5974] bridge0: port 2(bridge_slave_1) entered blocking state [ 813.694078][ T5974] bridge0: port 2(bridge_slave_1) entered forwarding state [ 813.736904][T11423] 8021q: adding VLAN 0 to HW filter on device bond0 [ 813.807032][T11423] 8021q: adding VLAN 0 to HW filter on device team0 [ 813.846199][ T8382] bridge0: port 1(bridge_slave_0) entered blocking state [ 813.853363][ T8382] bridge0: port 1(bridge_slave_0) entered forwarding state [ 813.919344][ T8382] bridge0: port 2(bridge_slave_1) entered blocking state [ 813.926557][ T8382] bridge0: port 2(bridge_slave_1) entered forwarding state [ 813.983802][T11460] 8021q: adding VLAN 0 to HW filter on device bond0 [ 814.053500][T11460] 8021q: adding VLAN 0 to HW filter on device team0 [ 814.079518][ T49] bridge0: port 1(bridge_slave_0) entered blocking state [ 814.086718][ T49] bridge0: port 1(bridge_slave_0) entered forwarding state [ 814.118746][ T8375] bridge0: port 2(bridge_slave_1) entered blocking state [ 814.125967][ T8375] bridge0: port 2(bridge_slave_1) entered forwarding state [ 815.164039][T11375] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 815.420351][T11423] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 815.527910][T11460] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 816.078137][T11375] veth0_vlan: entered promiscuous mode [ 816.109120][T11375] veth1_vlan: entered promiscuous mode [ 816.245158][T11375] veth0_macvtap: entered promiscuous mode [ 816.263701][T11423] veth0_vlan: entered promiscuous mode [ 816.296107][T11375] veth1_macvtap: entered promiscuous mode [ 816.306991][T11423] veth1_vlan: entered promiscuous mode [ 816.348516][T11375] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 816.438830][T11375] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 816.527152][T11460] veth0_vlan: entered promiscuous mode [ 816.546570][ T49] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 816.587332][ T49] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 816.597337][ T49] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 816.610064][T11423] veth0_macvtap: entered promiscuous mode [ 816.622662][ T49] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 816.649636][T11423] veth1_macvtap: entered promiscuous mode [ 816.659890][T11460] veth1_vlan: entered promiscuous mode [ 816.787571][T11423] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 816.826182][T11423] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 816.887378][ T8382] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 816.899060][ T8382] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 816.914120][T11460] veth0_macvtap: entered promiscuous mode [ 816.936914][ T8382] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 816.946009][ T5882] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 816.954170][ T5882] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 816.965143][ T8382] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 817.013128][T11460] veth1_macvtap: entered promiscuous mode [ 817.077299][ T5974] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 817.102129][ T5974] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 817.195292][T11460] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 817.230324][T11460] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 817.278293][ T5882] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 817.313054][ T5882] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 817.366450][ T5882] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 817.397667][ T5882] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 817.761094][T11801] loop4: detected capacity change from 0 to 256 [ 817.776459][T11801] exfat: Deprecated parameter 'utf8' [ 818.411190][ T5768] IPVS: starting estimator thread 0... [ 818.844183][T11803] IPVS: using max 22 ests per chain, 52800 per kthread [ 818.935595][T11801] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0xe3865569, utbl_chksum : 0xe619d30d) [ 818.986424][ T37] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 819.040820][ T37] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 820.210021][ T5974] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 820.235128][ T5974] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 820.830393][T11818] loop7: detected capacity change from 0 to 2048 [ 820.878334][ T49] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 820.931599][ T49] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 821.071491][T11818] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 821.127357][T11822] loop4: detected capacity change from 0 to 512 [ 821.737204][ T5974] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 821.813660][ T5974] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 821.862718][T11822] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 821.961945][T11822] ext4 filesystem being mounted at /39/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 823.191041][T11825] EXT4-fs error (device loop7): ext4_mb_generate_buddy:1314: group 0, block bitmap and bg descriptor inconsistent: 25 vs 281 free clusters [ 824.752793][T10549] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 825.547935][T11375] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 825.564780][T11847] loop5: detected capacity change from 0 to 2048 [ 826.444912][T11847] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 828.198623][T11857] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1314: group 0, block bitmap and bg descriptor inconsistent: 25 vs 281 free clusters [ 829.494410][T11423] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 831.863078][T11892] loop5: detected capacity change from 0 to 128 [ 835.520971][ T24] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 837.017536][T11912] loop5: detected capacity change from 0 to 2048 [ 837.154718][T11912] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 838.718332][T11920] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1314: group 0, block bitmap and bg descriptor inconsistent: 25 vs 281 free clusters [ 839.430250][T11934] hub 1-0:1.0: USB hub found [ 839.437576][T11934] hub 1-0:1.0: 1 port detected [ 843.391159][T11423] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 843.914541][T11956] loop7: detected capacity change from 0 to 1024 [ 845.632655][T11956] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 845.807489][T11953] netlink: 68 bytes leftover after parsing attributes in process `syz.2.1022'. [ 846.947125][T11963] configfs-gadget.g1 gadget.32: HOST MAC 9e:18:66:dc:ba:fc [ 847.024506][T11375] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 847.107253][T11963] configfs-gadget.g1 gadget.32: MAC b2:85:66:01:fa:ab [ 847.226857][T11963] configfs-gadget.g1 gadget.32: uvc: uvc_function_bind() [ 847.244946][T11963] Oops: general protection fault, probably for non-canonical address 0xdffffc00000000ec: 0000 [#1] SMP KASAN NOPTI [ 847.257054][T11963] KASAN: null-ptr-deref in range [0x0000000000000760-0x0000000000000767] [ 847.265487][T11963] CPU: 1 UID: 0 PID: 11963 Comm: syz.8.1020 Not tainted syzkaller #0 PREEMPT(full) [ 847.274880][T11963] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 847.284946][T11963] RIP: 0010:uvcg_video_init.cold+0x5f/0x135 [ 847.290863][T11963] Code: e0 2a 80 3c 02 00 74 08 48 89 df e8 0a cf 24 01 48 8b 2b b8 ff ff 37 00 48 c1 e0 2a 48 8d bd 60 07 00 00 48 89 fa 48 c1 ea 03 <80> 3c 02 00 0f 85 b1 00 00 00 48 8d bd 90 07 00 00 b8 ff ff 37 00 [ 847.310482][T11963] RSP: 0018:ffffc90004507878 EFLAGS: 00010212 [ 847.316559][T11963] RAX: dffffc0000000000 RBX: ffff88807fcc6840 RCX: ffffc90006e42000 [ 847.324536][T11963] RDX: 00000000000000ec RSI: ffffffff815510f6 RDI: 0000000000000760 [ 847.332510][T11963] RBP: 0000000000000000 R08: 0000000000000007 R09: fffffffffffff000 [ 847.340483][T11963] R10: fffffffffffffffc R11: 0000000000000000 R12: ffff88807fcc68a0 [ 847.348454][T11963] R13: 0000000000000006 R14: ffff88807fcc66a0 R15: ffff88807d45a528 [ 847.356427][T11963] FS: 00007fdce79a06c0(0000) GS:ffff888123edc000(0000) knlGS:0000000000000000 [ 847.365366][T11963] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 847.371954][T11963] CR2: 0000001b2de23ffc CR3: 0000000053980000 CR4: 0000000000350ef0 [ 847.379928][T11963] Call Trace: [ 847.383202][T11963] [ 847.386135][T11963] uvc_function_bind+0x136e/0x1939 [ 847.391268][T11963] ? __pfx_uvc_function_bind+0x10/0x10 [ 847.396741][T11963] usb_add_function+0x219/0x890 [ 847.401616][T11963] ? composite_dev_prepare+0x1d1/0x420 [ 847.407104][T11963] ? srso_alias_return_thunk+0x5/0xfbef5 [ 847.412842][T11963] configfs_composite_bind+0xd83/0x1960 [ 847.418415][T11963] ? kernfs_create_link+0x1bd/0x240 [ 847.423629][T11963] gadget_bind_driver+0x28c/0xbf0 [ 847.428668][T11963] ? srso_alias_return_thunk+0x5/0xfbef5 [ 847.434327][T11963] ? __pfx_gadget_bind_driver+0x10/0x10 [ 847.439884][T11963] really_probe+0x241/0xa60 [ 847.444407][T11963] __driver_probe_device+0x20e/0x450 [ 847.449716][T11963] driver_probe_device+0x4a/0x140 [ 847.454760][T11963] __driver_attach+0x21f/0x5b0 [ 847.459550][T11963] ? __pfx___driver_attach+0x10/0x10 [ 847.464853][T11963] bus_for_each_dev+0x13e/0x1d0 [ 847.469715][T11963] ? __pfx_bus_for_each_dev+0x10/0x10 [ 847.475095][T11963] ? bus_add_driver+0x2b5/0x5b0 [ 847.479959][T11963] ? srso_alias_return_thunk+0x5/0xfbef5 [ 847.485614][T11963] bus_add_driver+0x305/0x5b0 [ 847.490310][T11963] driver_register+0x1e2/0x360 [ 847.495096][T11963] ? srso_alias_return_thunk+0x5/0xfbef5 [ 847.500750][T11963] usb_gadget_register_driver_owner+0x132/0x210 [ 847.507009][T11963] gadget_dev_desc_UDC_store+0x1b0/0x2e0 [ 847.512668][T11963] configfs_write_iter+0x302/0x4e0 [ 847.517813][T11963] vfs_write+0x6ac/0x1050 [ 847.522159][T11963] ? __pfx_configfs_write_iter+0x10/0x10 [ 847.527826][T11963] ? __pfx_vfs_write+0x10/0x10 [ 847.532621][T11963] ksys_write+0x12a/0x250 [ 847.536968][T11963] ? __pfx_ksys_write+0x10/0x10 [ 847.541834][T11963] ? srso_alias_return_thunk+0x5/0xfbef5 [ 847.547486][T11963] do_syscall_64+0x115/0x870 [ 847.552096][T11963] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 847.557996][T11963] RIP: 0033:0x7fdce6b9de99 [ 847.562412][T11963] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 847.582028][T11963] RSP: 002b:00007fdce79a0028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 847.590452][T11963] RAX: ffffffffffffffda RBX: 00007fdce6e25fa0 RCX: 00007fdce6b9de99 [ 847.598439][T11963] RDX: 000000000000000c RSI: 0000200000001f00 RDI: 0000000000000004 [ 847.606412][T11963] RBP: 00007fdce6c33eaf R08: 0000000000000000 R09: 0000000000000000 [ 847.614387][T11963] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 847.622358][T11963] R13: 00007fdce6e26038 R14: 00007fdce6e25fa0 R15: 00007ffd5851a2d8 [ 847.630347][T11963] [ 847.633359][T11963] Modules linked in: [ 847.639726][T11963] ---[ end trace 0000000000000000 ]--- [ 847.708498][T11963] RIP: 0010:uvcg_video_init.cold+0x5f/0x135 [ 847.840688][T11963] Code: e0 2a 80 3c 02 00 74 08 48 89 df e8 0a cf 24 01 48 8b 2b b8 ff ff 37 00 48 c1 e0 2a 48 8d bd 60 07 00 00 48 89 fa 48 c1 ea 03 <80> 3c 02 00 0f 85 b1 00 00 00 48 8d bd 90 07 00 00 b8 ff ff 37 00 [ 848.125667][T11963] RSP: 0018:ffffc90004507878 EFLAGS: 00010212 [ 848.279276][T12008] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(6) [ 848.285936][T12008] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 848.364818][T11963] RAX: dffffc0000000000 RBX: ffff88807fcc6840 RCX: ffffc90006e42000 [ 848.522710][T11963] RDX: 00000000000000ec RSI: ffffffff815510f6 RDI: 0000000000000760 [ 848.549901][T12008] vhci_hcd vhci_hcd.0: Device attached [ 848.625846][T11963] RBP: 0000000000000000 R08: 0000000000000007 R09: fffffffffffff000 [ 848.654723][T11963] R10: fffffffffffffffc R11: 0000000000000000 R12: ffff88807fcc68a0 [ 849.113662][T11963] R13: 0000000000000006 R14: ffff88807fcc66a0 R15: ffff88807d45a528 [ 849.180676][ T9007] usb 40-1: SetAddress Request (2) to port 0 [ 849.304882][T11963] FS: 00007fdce79a06c0(0000) GS:ffff888123ddc000(0000) knlGS:0000000000000000 [ 849.323385][T11963] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 849.342282][ T9007] usb 40-1: new SuperSpeed USB device number 2 using vhci_hcd [ 849.757223][T12010] vhci_hcd: connection closed [ 849.783471][ T37] vhci_hcd vhci_hcd.3: stop threads [ 849.790085][ T24] IPVS: starting estimator thread 0... [ 849.854037][T11963] CR2: 00007f9add3baff8 CR3: 0000000053980000 CR4: 0000000000350ef0 [ 849.875045][ T37] vhci_hcd vhci_hcd.3: release socket [ 849.914661][ T37] vhci_hcd vhci_hcd.3: disconnect device [ 849.926308][T11963] Kernel panic - not syncing: Fatal exception [ 849.932653][T11963] Kernel Offset: disabled [ 849.937023][T11963] Rebooting in 86400 seconds..