last executing test programs: 37m34.068594773s ago: executing program 32 (id=18): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-camellia-aesni-avx2\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) r4 = accept4(r3, 0x0, 0x0, 0x0) sendmsg$nl_route_sched_retired(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000012100), 0xe078}}, 0x0) recvmmsg(r4, &(0x7f0000000180)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000580)=""/230, 0xe6}], 0x1}, 0x2000000}], 0x1, 0x101, 0x0) 37m22.349251707s ago: executing program 33 (id=32): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000040)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000000000ea04850000005000000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='sched_switch\x00', r3}, 0x10) getitimer(0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYRES8=r0, @ANYRES32, @ANYRESDEC=0x0], 0x48) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_buf(r4, 0x0, 0x8008000000010, &(0x7f00000000c0)="17000000020001000003be8c5ee1768810003308030300ecff3f000000030000980000000098fc5ad9485bbb6a880000d6c8db0000dba67e06000000e28900000200df018000000000f50607bdff59100ac45761547a681f009cee4a5acb3da400001fb700674f00c88ebbf9315033bf79ac2dff060115003901000000000000ea000000000000000002ffff02dfccebf6ba000840024f0298e9e90554062a80e605007f71174aa951f3c63e5c83f1ba2112ce68bf17a6e0", 0x11a) 37m18.33109489s ago: executing program 34 (id=38): sched_setscheduler(0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000007c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0x6) ioctl$VHOST_SET_VRING_BASE(r0, 0x4008af12, &(0x7f0000000080)={0x1, 0x7f}) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000180)=""/53, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/247, &(0x7f00000000c0)=""/87, &(0x7f0000000800)=""/90}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000880)={0x2, 0x0, [{0x0, 0x73, &(0x7f0000000940)=""/115}, {0x1, 0x1001, &(0x7f0000002380)=""/4097}]}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000340)=0x1) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r0, 0xc400941d, &(0x7f0000000380)={0x0, 0x3ff, 0x5}) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) 34m58.692459793s ago: executing program 35 (id=195): r0 = getpgrp(0xffffffffffffffff) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = socket$inet6(0xa, 0x80003, 0x6) connect$inet6(r4, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmmsg(r4, &(0x7f0000000480), 0x2e9, 0x0) 33m10.302733871s ago: executing program 36 (id=312): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet6_IPV6_RTHDR(r0, 0x29, 0x39, &(0x7f0000000080)=ANY=[@ANYBLOB="00020201"], 0x18) r1 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) syz_genetlink_get_family_id$nl80211(0x0, r4) inotify_add_watch(r4, &(0x7f0000000240)='./file0\x00', 0x1000000) sendmsg$nl_route(r1, 0x0, 0x0) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r5, &(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8822d55593a2179}, 0xc) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="3c010000190001000000000000000000e0000001000000000000000000000000fe8000000000000000000000000000aa4e220000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000104000000000000feffffffffffffff030000000000000000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001000000000000008400050020010000000000000000000000000000000000002b00000000000000000000000000000000000000000500000000000002000700000000000000000000000000e00000020000000000000000000000004000000033"], 0x13c}, 0x1, 0x0, 0x0, 0x20000000}, 0x20040880) sendmmsg$inet6(r0, &(0x7f0000000a80)=[{{&(0x7f0000000200)={0xa, 0x4e20, 0x4d7, @private2={0xfc, 0x2, '\x00', 0x1}, 0x3}, 0x1c, &(0x7f0000000900)=[{&(0x7f0000000400)="fc", 0x1}], 0x1}}], 0x1, 0x4c040) 33m7.991200578s ago: executing program 37 (id=314): r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) writev(0xffffffffffffffff, 0x0, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f00000002c0), r4) shmctl$SHM_INFO(0x0, 0xe, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) 33m4.147588189s ago: executing program 38 (id=317): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r4 = syz_io_uring_setup(0xa0, &(0x7f0000000100)={0x0, 0x200089bd, 0x80, 0x1, 0x385}, &(0x7f0000000240)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000300)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r5, r6, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x40, 0x2007, @fd=r3, 0xc000000, &(0x7f00000000c0)=[{&(0x7f0000001600)=""/4096, 0x1000}], 0x1, 0x1e}) io_uring_enter(r4, 0x32dc, 0x0, 0xe, 0x0, 0x0) 31m48.150543258s ago: executing program 39 (id=399): ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x1000, 0xfffffffffffffffd}) openat$binderfs(0xffffffffffffff9c, 0x0, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_io_uring_setup(0x118d7, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) sendmmsg$inet(r2, 0x0, 0x0, 0x2000c844) r3 = socket$netlink(0x10, 0x3, 0x0) writev(r3, &(0x7f00000003c0)=[{&(0x7f0000000280)="390000001300034700bb65e1", 0xc}], 0x1) r4 = socket$inet(0x2, 0x1, 0x0) bind$inet(r4, 0x0, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000e15000)={0x2, 0x4e20, @multicast2}, 0x10) ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, 0x0) unshare(0x62040200) 31m44.477962287s ago: executing program 40 (id=404): syz_mount_image$hfsplus(&(0x7f0000000100), &(0x7f00000002c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2010094, &(0x7f0000000040)=ANY=[@ANYRES16=0x0, @ANYRESOCT, @ANYRESHEX=0x0], 0x1, 0x6fd, &(0x7f0000000700)="$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") creat(&(0x7f0000002240)='./file0\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x103}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) rt_sigqueueinfo(r0, 0x3a, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) creat(&(0x7f0000000200)='./file0\x00', 0x109) 31m19.679037564s ago: executing program 41 (id=428): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000000)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, 0x0) r3 = syz_init_net_socket$x25(0x9, 0x5, 0x0) listen(r3, 0x0) connect$x25(r3, &(0x7f0000000040)={0x9, @remote={'\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc', 0x0}}, 0x12) 29m21.819228863s ago: executing program 42 (id=539): ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x1) creat(0x0, 0xecf86c37d53049cc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, 0x0, &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = dup(r3) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000006c0)=ANY=[@ANYBLOB="640000000206030000000000fffff0000000000016000300686173683a6e65742c706f72742c6e6574000000050004000000000005000500020000000900020073797a3200000000050001000700000014000780080013400000000008001240"], 0x64}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) sendmsg$IPSET_CMD_DESTROY(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)={0x1c, 0x3, 0x6, 0x101, 0x0, 0x0, {0x2, 0x0, 0xa}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40841}, 0x4) syz_io_uring_setup(0x10d, 0x0, &(0x7f0000000340), 0x0) 28m56.224572988s ago: executing program 43 (id=552): r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f0000000180)="2000000012005f0214f9f4070000fbe40a0000000000", 0x41d) creat(0x0, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x4, 0x45, 0x1488, 0xffffffffffffffff, 0x5}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000260018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000300000207b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r5}, 0x10) recvmmsg(r0, &(0x7f00000021c0), 0x5b, 0x40, 0x0) 28m30.645378046s ago: executing program 44 (id=588): setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x20, 0x0, 0x300) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000002100), 0x280449c, &(0x7f0000000340)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) write$FUSE_NOTIFY_DELETE(r2, &(0x7f0000000300)={0x2a, 0x6, 0x0, {0x1, 0x0, 0x1, 0x2, '\x00', 0x8}}, 0x2a) 26m45.850302672s ago: executing program 45 (id=700): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x2, 0x0, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r3, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe3}]}, 0x10) sendto$inet(r3, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendmmsg$inet(r3, &(0x7f0000004a80), 0x0, 0x400c0) setsockopt$sock_int(r3, 0x1, 0x8, &(0x7f0000000480)=0x1df9, 0x4) sendto$inet(r3, &(0x7f0000000580)="17", 0x1d4c, 0x10048095, 0x0, 0x0) 24m50.825833602s ago: executing program 46 (id=802): openat2$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x105000, 0x190, 0x20}, 0x18) socket$inet6(0xa, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) ioctl$RTC_UIE_OFF(0xffffffffffffffff, 0x7004) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) syz_open_dev$dri(&(0x7f0000000240), 0xd21, 0x4000) r2 = socket$vsock_stream(0x28, 0x1, 0x0) sendmsg(r2, 0x0, 0x4000042) write$proc_mixer(0xffffffffffffffff, &(0x7f0000000180)=ANY=[@ANYBLOB='SYNTH \'Mic\' 00000000000000000000\nIGAIN \'Capture Volume\' 00000000000000000000\nVOLUME\nLINE\nMONITOR\nCD'], 0x86) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(0xffffffffffffffff, 0x40045532, &(0x7f00000000c0)=0x5) r3 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040201, 0x0) ioctl$SNDCTL_DSP_GETOSPACE(r3, 0x8010500c, &(0x7f0000000040)) ioctl$SNDCTL_DSP_POST(r3, 0x5008, 0x0) 24m30.221270912s ago: executing program 47 (id=812): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000802000074"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000040000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-cast6-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) mkdir(&(0x7f0000000040)='./file1\x00', 0x0) syz_emit_ethernet(0x1f, 0x0, 0x0) statx(0xffffffffffffffff, 0x0, 0x1000, 0x200, 0x0) 23m57.089832897s ago: executing program 48 (id=845): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x20040844) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='hugetlb.1GB.usage_in_bytes\x00', 0x275a, 0x0) mkdir(0x0, 0x0) r3 = openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000200), 0x2, 0x0) rmdir(&(0x7f0000000240)='./cgroup/../file0\x00') lseek(r3, 0x93, 0x3) write$binfmt_script(r2, &(0x7f00000004c0), 0x208e24b) r4 = socket$unix(0x1, 0x2, 0x0) getpeername$unix(r4, &(0x7f00000000c0), &(0x7f0000000140)=0x6e) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) cachestat(r2, &(0x7f0000000040), &(0x7f000009de80), 0x0) 22m44.610305466s ago: executing program 49 (id=888): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x9, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020207025000000000020"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x20000050) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x4010, 0x0, 0x0) syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) prctl$PR_MCE_KILL(0x35, 0x1, 0x2) r3 = epoll_create1(0x80000) socket$nl_route(0x10, 0x3, 0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r3, 0x0) 22m40.504438668s ago: executing program 50 (id=893): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_OPENAT2={0x1c, 0x8, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x23456}) io_uring_enter(0xffffffffffffffff, 0x708, 0x41e3, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$tipc(0x1e, 0x2, 0x0) socket$tipc(0x1e, 0x5, 0x0) r3 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r3, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x3, 0x4}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r3, 0x10f, 0x87, &(0x7f0000000040)={0x42, 0x1}, 0x10) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x37, 0x7fffffff}]}) close_range(r4, 0xffffffffffffffff, 0x0) 22m5.352321557s ago: executing program 51 (id=919): creat(&(0x7f0000000340)='./file0\x00', 0x28) open(0x0, 0x108843, 0x98) socket$packet(0x11, 0x3, 0x300) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) statx(0xffffffffffffff9c, 0x0, 0x100, 0xb38dcf3f7bb4b8a7, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000002900)=@raw={'raw\x00', 0x3c1, 0x3, 0x4e0, 0x340, 0x18c, 0x203, 0x0, 0x19030000, 0x410, 0x2e0, 0x2e0, 0x410, 0x2e0, 0x7fffffe, 0x0, {[{{@uncond, 0x300, 0x2d8, 0x340, 0x0, {0x1000000}, [@common=@unspec=@bpf0={{0x230}, {0x13, [{}, {0x20}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0xe}, {}, {0x2, 0x0, 0x3}, {0x2}, {}, {0x0, 0x0, 0x0, 0x1}, {}, {}, {0x16}, {}, {}, {0x7}, {}, {0x0, 0x0, 0x0, 0x101}, {}, {}, {}, {}, {}, {}, {0xfffe}, {}, {}, {}, {0x0, 0xfd}, {}, {0x7a04}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x81}, {}, {0xb84, 0x0, 0x0, 0xf00}, {0x0, 0x1, 0x0, 0x3}, {0x9}, {}, {}, {}, {}, {}, {}, {0xf5}, {}, {}, {}, {}, {}, {}, {}, {}, {0x4}]}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0xa, 0x7, 0xffffffff, 0x6, 'snmp_trap\x00', 'syz0\x00', {0x9}}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@inet=@SYNPROXY={0x28, 'SYNPROXY\x00', 0x0, {0x12, 0x5, 0x22}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x540) bpf$PROG_LOAD(0x5, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000280)='./cgroup\x00', 0x0, 0x0) 22m0.908065703s ago: executing program 52 (id=924): socket$kcm(0x11, 0x2, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) socket$inet6(0xa, 0x3, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x0, 0x0) r1 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) r2 = socket$inet6(0xa, 0x3, 0xff) connect$inet6(r2, &(0x7f0000000200)={0xa, 0x0, 0xfffffffd, @empty}, 0x1c) r3 = dup(r2) r4 = open(&(0x7f00000000c0)='./file0\x00', 0x1298c2, 0x0) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=@updpolicy={0xfc, 0x19, 0x1, 0x70bd2d, 0x0, {{@in6=@loopback, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa, 0x30, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xc, 0x0, 0xc, 0x3, 0xffffffffffffffff}, {0x0, 0xa00, 0x407ffffffffffe, 0x800000000000002}, 0x1, 0x0, 0x1}, [@tmpl={0x44, 0x5, [{{@in6=@ipv4={'\x00', '\xff\xff', @multicast2}, 0x0, 0x3c}, 0x2, @in=@empty, 0x3504, 0x4, 0x3, 0x0, 0x0, 0xfffffffe, 0x20000}]}]}, 0xfc}}, 0x0) ftruncate(r4, 0x200004) sendfile(r3, r4, 0x0, 0x80001d00c0d1) ioctl$USBDEVFS_SETINTERFACE(0xffffffffffffffff, 0x80085504, 0x0) sendmsg$NL80211_CMD_JOIN_MESH(r0, 0x0, 0x80) 21m12.251178332s ago: executing program 53 (id=968): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r0, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000180), 0x20801, 0x0) write$rfkill(r1, &(0x7f0000000100)={0x0, 0x2, 0x3, 0x1}, 0x8) read$char_usb(0xffffffffffffffff, 0x0, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f00000000c0)=0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r2, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) fchdir(0xffffffffffffffff) syz_clone3(0x0, 0x0) mount_setattr(0xffffffffffffffff, 0x0, 0x8000, 0x0, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) sendmsg$inet6(r3, 0x0, 0xc4) syz_open_dev$dri(0x0, 0x1, 0x0) r4 = openat$audio(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) read$dsp(r4, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) 21m0.288559506s ago: executing program 54 (id=986): socket$alg(0x26, 0x5, 0x0) syz_open_dev$usbfs(&(0x7f0000000000), 0x76, 0x0) epoll_create1(0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x800001000088}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x5, &(0x7f0000000040)=0x29) prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x80000, 0x0, 0x0, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) add_key(&(0x7f00000001c0)='asymmetric\x00', 0x0, &(0x7f0000000240)="ff", 0x1, 0xffffffffffffffff) prctl$PR_SET_MM_MAP(0x23, 0xe, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0xe0c81) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r4, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00', 0x32a}) 20m58.250650056s ago: executing program 55 (id=987): socket$unix(0x1, 0x1, 0x0) r0 = getpgrp(0xffffffffffffffff) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = socket$unix(0x1, 0x2, 0x0) bind$unix(r4, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) connect$unix(0xffffffffffffffff, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x20040084) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) 20m56.547645575s ago: executing program 56 (id=993): syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) r0 = openat$rtc(0xffffffffffffff9c, &(0x7f00000012c0), 0x8000, 0x0) ioctl$RTC_PIE_OFF(r0, 0x7006) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0xfffffffffffffcfe, &(0x7f00000000c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_init_net_socket$x25(0x9, 0x5, 0x0) setsockopt$X25_QBITINCL(r1, 0x106, 0x1, 0x0, 0x0) r2 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) mount$9p_virtio(0x0, &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, 0x0) r3 = io_uring_setup(0x1d34, &(0x7f0000000300)={0x0, 0x5779, 0x2, 0x0, 0xd4}) syz_io_uring_setup(0x49e, &(0x7f0000000380)={0x0, 0x388e, 0x400, 0x0, 0x8019d, 0x0, r3}, 0x0, &(0x7f0000000440)) syz_open_dev$vim2m(&(0x7f0000000180), 0x0, 0x2) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) 19m49.575460419s ago: executing program 57 (id=1043): r0 = signalfd4(0xffffffffffffffff, &(0x7f0000000100)={[0x3ffffffe]}, 0x8, 0x80000) readv(r0, &(0x7f0000000640)=[{&(0x7f0000000180)=""/169, 0xfffffd51}], 0x1) signalfd4(r0, &(0x7f0000000000)={[0x5]}, 0x8, 0x80000) pread64(r0, &(0x7f0000000080)=""/104, 0x68, 0xb) r1 = io_uring_setup(0x3c92, &(0x7f0000000100)={0x0, 0x76b4, 0x800, 0x0, 0xffffffff}) mknod(&(0x7f0000000040)='./file0\x00', 0x8001420, 0x0) r2 = creat(&(0x7f0000000340)='./file0\x00', 0x10) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000740)=ANY=[@ANYRESHEX=r3, @ANYRES32=r4, @ANYBLOB="0008000007500500340012800b00010062726964676500002400028005001900020000000c002300", @ANYRESOCT=r2, @ANYRES16=r0, @ANYRES32=r1, @ANYBLOB="5a4f0c3fc5b9359870680000f746071f6c1812c9c1b99e820ff1368d8236e23f0f4882d75fa66210d74fd42312f7012521bde4234492dafa6f6bd72e6546fa7551b70003bcf184b710b73884b130a721ac62a96594e942498774a9c7baf5165b6ee953c36e71706323180897b5f1bf2f506e0016e600923413f9ddca7e932dc07c222bfa1e7eaab64b9b27df845ec370954c78ce5fd275823dd70516e6a0d109fda38b51eccb7f05595ae6a174c4804e3253f43f120dec04cb6c2a98e511ff38624382854d2e714cf583e389bba24894a30ac9fb0bf3ddfa50ff6b2d9a91ba91914c45465fa849c27eb67a1e370f3984d5da02fc1f0fa21b2974b280364ab75dbcec3922cb189fc8b165d0e40d0222f9fab22c45d615382c4b4820de65bccd9b642b03c33f99e1f97eead385a15658095722171245435770c284d31d56069be009dec8414e3984e67e5f33477fdf66c1826299e83e6a554fe697b89fca82286058b3eef444d977a73313b5746ee42a6a7e2851a38398042510ed36d6722e5bdc7505a7bb31a3e464ad68a8b11811c905282abfa6ecd89ae0eb5bde81a0b69b541eb67e8fc713d069cc6a377d64b47bca0e7f1b2a04a5502623227a236847616a1d17a6503eb7f8a21b27330ea521aa7780b72fa574ef5975ec9c4167304f9e6c1ff6d3e3a9c6ce53f06b079e09ca35606f06"], 0x54}, 0x1, 0x0, 0x0, 0x800}, 0x0) open$dir(&(0x7f0000000000)='./file0\x00', 0x1, 0x0) socket$inet(0x2, 0x5, 0x0) unshare(0x20000400) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, &(0x7f0000000400)=0x1, 0x4) r5 = syz_open_dev$sndctrl(&(0x7f0000000100), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r5, 0xc1105517, &(0x7f0000000340)={{0x0, 0x0, 0x0, 0x0, 'syz0\x00', 0x4000}, 0x6, 0x0, 0x4, 0x0, 0x0, 0x2, 'syz1\x00', 0x0}) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r5, 0x40405515, &(0x7f0000000040)={{0x0, 0x0, 0x0, 0x0, 'syz0\x00', 0x4000}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x401, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x1, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000000, 0x0, 0x0, 0x0, 0x2, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000000004, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x7ad, 0x0, 0x0, 0xc7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x7fff, 0x7, 0x0, 0x8]}) close_range(r1, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0x14, 0x0, &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2c, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 19m5.804760334s ago: executing program 58 (id=1096): r0 = socket(0x11, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000005c0)={'ip6gretap0\x00'}) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000000)=0xe9, 0x4) sendmsg$netlink(r0, 0x0, 0x20040051) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000000000ea04850000005000000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffff79}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10) socket(0x28, 0x5, 0x0) r2 = syz_io_uring_setup(0x4f6, &(0x7f0000000380)={0x0, 0xc81d, 0x10, 0x4, 0x2cf}, 0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(0x0, 0x0, 0x0) io_uring_enter(r2, 0x47b2, 0x10f9, 0x82, 0x0, 0x48) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80202, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) syz_mount_image$hfsplus(&(0x7f00000000c0), &(0x7f00000007c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x10000, &(0x7f0000000480)=ANY=[@ANYBLOB="6e6c733d6370313235302c6e6f626172726965722c63726561746f723dbd3c66f52c7569643d", @ANYRESHEX=0x0, @ANYBLOB=',force,umask=000000005,\x00'/38], 0x3, 0x6a9, &(0x7f0000002080)="$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") mkdir(&(0x7f0000000000)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0xa8) statfs(&(0x7f0000000300)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', &(0x7f0000000380)=""/224) 17m28.573050344s ago: executing program 59 (id=1187): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x800001000088}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x5, &(0x7f0000000040)=0x29) prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3) openat$sndseq(0xffffffffffffff9c, 0x0, 0x28200) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x80000, 0x0, 0x0, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @tracing=0x1c, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0xfffffffd, 0x3}, 0x8}, 0x94) r4 = inotify_init() inotify_add_watch(r4, &(0x7f0000000000)='.\x00', 0x400017e) read$FUSE(r4, &(0x7f0000001fc0)={0x2020}, 0x2020) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r5 = openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r5, &(0x7f00000001c0), 0x12) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000400)={0xffffffffffffffff, 0x3, 0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 15m59.320335413s ago: executing program 60 (id=1263): syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) r0 = openat$rtc(0xffffffffffffff9c, &(0x7f00000012c0), 0x8000, 0x0) ioctl$RTC_PIE_OFF(r0, 0x7006) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setaffinity(0x0, 0xfffffffffffffcfe, &(0x7f00000000c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_init_net_socket$x25(0x9, 0x5, 0x0) setsockopt$X25_QBITINCL(r1, 0x106, 0x1, 0x0, 0x0) r2 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x1) mount$9p_virtio(0x0, &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, 0x0) r3 = io_uring_setup(0x1d34, &(0x7f0000000300)={0x0, 0x5779, 0x2, 0x0, 0xd4}) syz_io_uring_setup(0x49e, &(0x7f0000000380)={0x0, 0x388e, 0x400, 0x0, 0x8019d, 0x0, r3}, 0x0, &(0x7f0000000440)) syz_open_dev$vim2m(&(0x7f0000000180), 0x0, 0x2) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) 15m31.287648305s ago: executing program 61 (id=1292): connect$unix(0xffffffffffffffff, 0x0, 0x0) r0 = socket$l2tp6(0xa, 0x2, 0x73) bind$l2tp6(r0, &(0x7f0000000000)={0xa, 0x0, 0x1, @empty, 0x0, 0x3}, 0x20) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x61709000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) connect$l2tp6(r0, &(0x7f0000000f40)={0xa, 0x0, 0x0, @empty}, 0x20) sendmmsg$inet6(r0, &(0x7f0000000ac0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x2404f715) syz_emit_vhci(0x0, 0x15) close(0xffffffffffffffff) socket$inet6_tcp(0xa, 0x1, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x567742, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x1, 0x2, 0x3a0, 0x5}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000300)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1800, r4}, 0x38) bpf$MAP_GET_NEXT_KEY(0x15, 0x0, 0x0) 12m40.105157033s ago: executing program 62 (id=1437): openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x2) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80202, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$vsock_stream(0x28, 0x1, 0x0) r1 = syz_open_dev$usbfs(&(0x7f00000002c0), 0xc, 0x101b01) ioctl$USBDEVFS_DISCONNECT_CLAIM(r1, 0x8108551b, &(0x7f0000002600)={0x0, 0x2, "5a77bd318786aeb879ca62cdab2a02fa560186d85b25a5665a3247e500f61681905db88235f8a5447dd2a2ed6e91626f068881e50f68530c2b21a100efb76cba37ff3111d6847e0cba68f6222103472bc55704cdb72b4b996ed82ccb1eaae27969d008ba7d34201113d806726615380fe65a6a0a72e19c2b60bd6276fd8bb6363d10f70da60fd53ded22c87eb2be010e4a62fb73c33424b437bb192c9d06ea6ed00083fe5c5ca033dfce0a82575ef14eee686be0fc58bbf5993943aea3a9ca1864f0a35d6cc38fca32ad6b39905a9727d2001457df7be7e1aefe3635b2ee97c143f28def4b73905ca14d90d1f61e00"}) ioctl$USBDEVFS_FORBID_SUSPEND(r1, 0x5521) r2 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r2, &(0x7f0000000040)={0x18, 0x0, {0x1, @remote, 'ip6gre0\x00'}}, 0x1e) ioctl$PPPOEIOCSFWD(r2, 0x80047453, &(0x7f00000000c0)={0x18, 0x0, {0x1, @remote, 'veth0_to_team\x00'}}) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0xf, 0x0, 0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) ioctl$TCSETAF(r3, 0x5408, &(0x7f0000000180)={0xcf4a, 0x4cc, 0x6, 0x9dff, 0x1, "8003e3ffff072000"}) write$binfmt_aout(r3, &(0x7f00000006c0)=ANY=[], 0xff2e) ioctl$TCSETS(r3, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x3, 0x7fff, 0x16, "b0bf2ebb48c849ac0000000003000018bfff40"}) r4 = syz_open_pts(r3, 0x0) r5 = dup3(r4, r3, 0x0) ioctl$TIOCSTI(r5, 0x5412, &(0x7f0000000000)=0xff) 12m29.739259935s ago: executing program 63 (id=1448): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYBLOB="170000005500e50100000000000000", @ANYRES32=0x0, @ANYBLOB="20000100", @ANYRES32=0x0, @ANYBLOB="0100fe0f000002ff000000f2d2baad0812a2771e000000000000000086dd000078d5c49e72ca5fa34d3ada38633edcee00"], 0x38}, 0x1, 0xffe}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$nl_generic(0x10, 0x3, 0x10) socket$inet6_sctp(0xa, 0x1, 0x84) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x240, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r3, 0x6, 0xe, &(0x7f0000000300)={@in6={{0xa, 0x4e24, 0x200, @private2={0xfc, 0x2, '\x00', 0x1}, 0x4ac2d78a}}, 0x0, 0x0, 0x3f, 0x0, "ee8b0e650926a96ecc136e7fb980e989db9e8bf9b93129488f651a8de213eb94cd46e19d9c65a018444a131f4da58ae36556dd38ea6c029607462029add09240005c6776267517308a3d40aa1c788df6"}, 0xd8) connect$inet6(r3, &(0x7f0000000100)={0xa, 0x0, 0x0, @loopback, 0xfffffffd}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r3, 0x11a, 0x1, &(0x7f00000001c0)=@gcm_256={{0x304}, "6ae04425ace3f60c", "acba84f0a6731f234db1cc7f3f382ad796bd667cb12ea99509873931d2873103", "0f9dafb4", "ec3fff9afd96e6c0"}, 0x38) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r3, 0x6, 0x14, &(0x7f0000000040)=0x2, 0x4) writev(r3, &(0x7f0000000080)=[{&(0x7f00000002c0)="ec", 0xfdef}], 0x1) shutdown(r3, 0x1) 11m54.414976203s ago: executing program 64 (id=1470): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', 0xffffffffffffffff, 0x0, 0x7}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) setpriority(0x1, 0x0, 0xffffffffffff8001) 11m44.996344514s ago: executing program 65 (id=1466): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0/file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x3ffffffffffff32, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) madvise(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0xf) mlock(&(0x7f00006e5000/0x3000)=nil, 0x3000) madvise(&(0x7f0000f0f000/0x2000)=nil, 0x2000, 0x15) r3 = shmat(0x0, &(0x7f0000ff1000/0x3000)=nil, 0x400c) shmdt(r3) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$UHID_INPUT(r4, &(0x7f0000001040)={0xfc, {"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", 0x1000}}, 0x1006) syz_genetlink_get_family_id$nl802154(0x0, 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_CHANNEL(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40}, 0x20040000) 11m43.648259635s ago: executing program 66 (id=1472): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001800ff0f0000000000000000850000006d0000008500000008"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000400)=0x6) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x1, 0x5, &(0x7f0000001000)=ANY=[], &(0x7f00000000c0)='syzkaller\x00', 0x5, 0x0, 0x0, 0x40f00, 0x20, '\x00', 0x0, @fallback=0x22}, 0x94) r5 = socket$kcm(0x29, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0xfffffffffffffdbf) socket$vsock_stream(0x28, 0x1, 0x0) syz_mount_image$fuse(0x0, &(0x7f0000001040)='./file2\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r6 = fspick(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0) fsconfig$FSCONFIG_SET_FD(r6, 0x5, &(0x7f0000000780)='\x00', 0x0, r6) socket$kcm(0x2, 0x1, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r5, 0x89e0, &(0x7f0000000040)={0xffffffffffffffff, r4}) r7 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x72, 0x0, 0x7fff0000}]}) close_range(r7, 0xffffffffffffffff, 0x0) 11m41.234672722s ago: executing program 67 (id=1474): socket(0x10, 0x803, 0x0) creat(&(0x7f00000002c0)='./file0\x00', 0x0) socket$igmp(0x2, 0x3, 0x2) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r5 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) r6 = open$dir(&(0x7f0000000080)='./file0\x00', 0xc402, 0x80) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r6, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000003bc0)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000}, 0x94) write$P9_RVERSION(r5, &(0x7f0000000c40)=ANY=[], 0x13) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000003c0)={r7, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000280)='./file0\x00', &(0x7f0000000300)=[0x5], &(0x7f0000000180), 0x0, 0x1, 0x1}}, 0x40) mmap$xdp(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x2000006, 0x12, r4, 0x2000000) 10m9.004392514s ago: executing program 6 (id=1559): r0 = socket$isdn_base(0x22, 0x3, 0x0) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) close(0xffffffffffffffff) socket$inet6(0xa, 0x2, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000ac0)={'syz0\x00', {0x7, 0xfff7, 0x100, 0x4}, 0x19, [0xd7b3, 0x2, 0x7, 0x3, 0x80, 0x1, 0x7, 0xfffffff8, 0x4a, 0x40, 0x60d, 0x7, 0x3, 0x98, 0x8, 0x8, 0x8, 0x8, 0x10, 0x8, 0xfffff801, 0x9, 0xe9, 0x5, 0x101, 0x8, 0x3, 0x6aa1, 0x95, 0x2, 0x100, 0x2, 0x983, 0xf4, 0x24, 0x7f, 0x4, 0x8b60, 0x7, 0x1, 0x9, 0x7, 0x1, 0x7, 0x51, 0x10001, 0x6, 0x8, 0x9c, 0x9, 0x9, 0x3, 0x1, 0xf2, 0x9658, 0x7fff, 0x9, 0x1, 0x9, 0x9, 0x8, 0x7, 0x6, 0x1], [0x1, 0x3, 0x5, 0xff, 0x10001, 0x496e, 0x6, 0x2, 0x10, 0x400, 0x1, 0x7fffffff, 0x1, 0x10001, 0x8000, 0xfffffff7, 0x80000001, 0xe44, 0x5, 0x8, 0xe, 0x4, 0x10000, 0x3, 0x7fff, 0x3, 0x3, 0x100, 0x0, 0x6, 0xe, 0x6, 0xb, 0x3, 0x3, 0x9, 0x0, 0x7, 0x40, 0x5, 0x1000, 0x5, 0x9, 0x6, 0x1, 0x7, 0x7, 0x100, 0xdc, 0x2, 0x2, 0x0, 0x6, 0x1, 0x4369, 0x3, 0x2c8, 0x0, 0x6, 0x4, 0x5, 0x10, 0x6, 0xed600], [0x0, 0x9, 0x2, 0x70, 0xfffffffc, 0x40, 0x800, 0x7ff, 0xb, 0x5, 0x80000001, 0x8, 0x3, 0x5, 0x0, 0x6, 0x9, 0x4, 0x8, 0xfffffff8, 0x8, 0x9c5b, 0x6, 0x2, 0x5, 0x8, 0x3ff, 0x29b7367c, 0x3, 0x3, 0xd, 0x3, 0x0, 0x6, 0xfffffffa, 0x7, 0x7, 0x1000, 0x6, 0xfffffffc, 0x9, 0x400, 0xfffffffc, 0x8, 0x3, 0x3, 0x6f20, 0x7, 0x5, 0x10, 0x1, 0xfff, 0x8, 0x94, 0x80000000, 0x8, 0x80000001, 0xff, 0xa, 0x9, 0x2, 0x7f, 0x3, 0xb], [0x0, 0xc7, 0xffff, 0x80b9, 0x100, 0x0, 0x9, 0x6, 0x8214, 0x3, 0x45cc8c1f, 0xbe, 0x8, 0x2, 0x81, 0xfffffffd, 0xfffffffc, 0x3, 0x7, 0x5, 0x9, 0x4, 0xfffffff9, 0x4, 0x101, 0x8, 0x2daf, 0x3, 0x4, 0x1, 0x6, 0x3, 0x3, 0x0, 0x10001, 0x2b, 0xff, 0x1, 0x4, 0x270e, 0x4, 0xf, 0x0, 0x3, 0x8000, 0xc9, 0xb0, 0x6, 0x7, 0x0, 0x2, 0xe649, 0x1dff, 0x8, 0x5, 0xb, 0x5, 0x2, 0x1, 0x846f, 0x5a000000, 0x2574, 0x458f, 0x1]}, 0x45c) r5 = syz_open_dev$tty1(0xc, 0x4, 0x4) r6 = dup(r5) ioctl$TIOCL_SETSEL(r6, 0x541c, 0x0) ioctl$TIOCL_SETSEL(r6, 0x541c, &(0x7f0000000000)={0x2, {0x2, 0x107, 0x100, 0x100, 0x1, 0x4000}}) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$printer(0xffffffffffffffff, 0x0, 0x0) ioctl$IMGETCOUNT(r0, 0x80044943, &(0x7f0000000000)) 10m4.299768654s ago: executing program 6 (id=1568): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r3, &(0x7f0000000000)={0xa, 0x8000002}, 0x1c) sendto$inet6(r3, 0x0, 0x0, 0x22004001, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @loopback}, 0x1c) shutdown(r3, 0x1) splice(r3, 0x0, r2, 0x0, 0x2, 0x0) setsockopt$inet6_MCAST_MSFILTER(0xffffffffffffffff, 0x29, 0x30, &(0x7f00000005c0)={0x8, {{0xa, 0x4e21, 0x5, @loopback, 0x1bd62b42}}, 0x1, 0x2, [{{0xa, 0x4e24, 0x2, @remote, 0x7ff}}, {{0xa, 0x4e23, 0x5, @rand_addr=' \x01\x00', 0xdb6}}]}, 0x190) r4 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_TX_RING(r4, 0x11b, 0x3, &(0x7f0000000380)=0x20000, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)) mount$tmpfs(0x0, 0x0, &(0x7f0000000580), 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x802, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r5 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r5, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) bpf$MAP_CREATE(0x0, 0x0, 0x0) setsockopt$XDP_UMEM_COMPLETION_RING(r4, 0x11b, 0x6, &(0x7f0000000180)=0x20, 0x4) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000140)={0x3, &(0x7f0000000000)=[{0x28, 0x2, 0xfd, 0x5ae9}, {0x28, 0x7f, 0x4, 0x38c5741b}, {0x6, 0x0, 0x7, 0x7}]}, 0x10) sendmmsg$inet(r0, &(0x7f0000002c40)=[{{0x0, 0x0, &(0x7f0000000e80)=[{&(0x7f0000000a80)="2a73ed35", 0x732a}], 0x1}}], 0x400000000000292, 0x0) 9m58.831080964s ago: executing program 68 (id=1553): sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4040044) memfd_create(0x0, 0x3) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r2 = syz_open_dev$dri(&(0x7f00000008c0), 0x1, 0x400) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r2, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r2, 0xc06864a1, &(0x7f0000000d40)={0x0, 0x0, r3, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r2, 0xc06864ce, &(0x7f0000000340)={r4, 0x0, 0x0, 0x0, 0x1, [0x0], [0x0, 0x7], [0x0, 0x80000002, 0x2], [0x0, 0x0, 0x1, 0x1]}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000140)={0x3ff, 0x2, 0x806}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r1, 0xc00c642d, &(0x7f0000000080)={r5, 0x0, 0xffffffffffffffff}) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x14) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r2, 0xc00c642e, &(0x7f0000000300)={0x0, 0x0, r6}) close_range(r0, 0xffffffffffffffff, 0x0) openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB], 0x48) bpf$PROG_LOAD(0x2, 0x0, 0x0) 9m49.730851822s ago: executing program 0 (id=1585): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) signalfd4(r1, &(0x7f00000000c0)={[0xe]}, 0x8, 0x80800) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200000}) syz_init_net_socket$ax25(0x3, 0x3, 0xce) r3 = io_uring_setup(0x6668, &(0x7f0000000440)={0x0, 0x9759, 0x0, 0x3, 0x115}) io_uring_register$IORING_REGISTER_BUFFERS(r3, 0x0, &(0x7f0000000640)=[{0x0}], 0x178) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x3, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="6a0ac4ff02000000711069000322"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x2}, 0x94) io_uring_register$IORING_REGISTER_FILES(r3, 0x1e, &(0x7f0000000000)=[r3], 0x1) r4 = landlock_create_ruleset(&(0x7f0000000040)={0x4010, 0x3}, 0x18, 0x0) landlock_add_rule$LANDLOCK_RULE_NET_PORT(r4, 0x2, &(0x7f0000000240)={0x3, 0x3}, 0x0) syz_io_uring_setup(0x223d, &(0x7f0000000100)={0x0, 0x57d9, 0x100, 0x0, 0x1cd}, 0x0, &(0x7f00000001c0)) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000100)) 9m48.187488624s ago: executing program 69 (id=1568): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r3, &(0x7f0000000000)={0xa, 0x8000002}, 0x1c) sendto$inet6(r3, 0x0, 0x0, 0x22004001, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @loopback}, 0x1c) shutdown(r3, 0x1) splice(r3, 0x0, r2, 0x0, 0x2, 0x0) setsockopt$inet6_MCAST_MSFILTER(0xffffffffffffffff, 0x29, 0x30, &(0x7f00000005c0)={0x8, {{0xa, 0x4e21, 0x5, @loopback, 0x1bd62b42}}, 0x1, 0x2, [{{0xa, 0x4e24, 0x2, @remote, 0x7ff}}, {{0xa, 0x4e23, 0x5, @rand_addr=' \x01\x00', 0xdb6}}]}, 0x190) r4 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_TX_RING(r4, 0x11b, 0x3, &(0x7f0000000380)=0x20000, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)) mount$tmpfs(0x0, 0x0, &(0x7f0000000580), 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x802, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r5 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r5, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) bpf$MAP_CREATE(0x0, 0x0, 0x0) setsockopt$XDP_UMEM_COMPLETION_RING(r4, 0x11b, 0x6, &(0x7f0000000180)=0x20, 0x4) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000140)={0x3, &(0x7f0000000000)=[{0x28, 0x2, 0xfd, 0x5ae9}, {0x28, 0x7f, 0x4, 0x38c5741b}, {0x6, 0x0, 0x7, 0x7}]}, 0x10) sendmmsg$inet(r0, &(0x7f0000002c40)=[{{0x0, 0x0, &(0x7f0000000e80)=[{&(0x7f0000000a80)="2a73ed35", 0x732a}], 0x1}}], 0x400000000000292, 0x0) 9m44.367186449s ago: executing program 70 (id=1573): r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) getpriority(0x0, r1) socket$inet6_tcp(0xa, 0x1, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x20000000, '\x00', 0x0, 0x0}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) 9m42.259780233s ago: executing program 0 (id=1591): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x20000000, '\x00', 0x0, 0x0}, 0x50) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, {}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x8}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x7, 0x1, 0xb, 0x7, 0x8}, {0x7, 0x0, 0x0, 0x7}, {}, {}, {}, {0x18, 0x8, 0x2, 0x0, r0}, {}, {0x46, 0x0, 0x0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x5, 0x0, 0xb, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000680)={r2, 0xe0, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f0000001200)=[0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x13, 0x8, 0x0, 0x0}}, 0x10) 9m40.673761837s ago: executing program 0 (id=1593): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r0}, 0x38) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="1800"/14, @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r1, 0x0, 0x3}, 0x18) symlinkat(0x0, 0xffffffffffffff9c, 0x0) r2 = open(&(0x7f00009e1000)='./file0\x00', 0x149040, 0x10) fcntl$setlease(r2, 0x400, 0x2) sendmmsg(r2, &(0x7f0000001800)=[{{&(0x7f0000000380)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x2, 0x3, 0x1, 0x4, {0xa, 0x4e22, 0x7ff, @remote, 0xff}}}, 0x80, &(0x7f0000001780)=[{&(0x7f0000000580)="8252a3ca2de767a3b68022303fabdfa131b7e8833d4fa6056a3d69c07c6849fe2f949253f02af2ea4b66d1180134ba5bb10fa4493a7f8c0b43435fc005c5da5dae99702fd1968d1e1d26d187c7abbf662c708f902ec3f3e6df75782b700127a1f7bff9c0a47639a5ef496812c922cfd4914aba979af22e2d8d227f098068ce1325cafeca007f45b42b213f01ce7c1a95a32807638342099ad9dec9ef9ff2d0c53dd441a2d16221c5854737c63ff54a497b116f4779e40b19cfc5e19aebe284889cc2ec", 0xc3}, {&(0x7f00000001c0)="d27007b8db3667b9", 0x8}, {&(0x7f0000000680)="f60b6abb8f8c49c1be4e562d736d4ffa5c363f940f16bcaf31b106ca2f5fc6e6bec55c83dc7a49928bda6bc1e996ded203185d74ecf71b1c0493716cd3a03e5d4ca352246a74decfb47540ef75d5de3ad13900e6ef5d0acd8ec3d678d6e719381d5cb3c15f3e215e8f78256587ff42e1879c2dd351a9087842a8f06ec03d265cf619b34fea0d2b9676de74bfe880b22364b23396207a41f5dbc85363fc96c298b0cedf73736e32de528d5f1858d7319a78633d9aa54f340f3629cc45147d739134bb495d40da9a294a892076d2a88c8394a6567b316aecff86e57d3da960e60902d79b897879c09ffd50fabd7b63487bdee209453cd43d482160ce8b1895e3cd58976a6a111f5ebfa84f9e79ec97b19519f9b3e1ba14999066d0854810e23e8e4c28c2d374edb9448af2de42477ad88cc91e6019b85131fa2fd6b1fb93ddc5eb7d41205fd6a2e8ce8b23140431f1ec42ffc8253342aa597fe41bddb98d5aa8dad2439e75c675ef1e38a709e8051056aa492aefab1965daee7f997ab9b14a825b177ef22994d4bb5992aba7b66e83bf7800c0479ab68dc4abb8a61e1f9f8ab1690be8f0823d26e57f5f9b45bcacfac5562b04bf0a655eb998b06a8f93d2b389403ec19ebc26b192786ff62f921f712c0d02648de0ea5ef7c0fbd251cc3638d5fc1325d41a6e174a6177b2567e644a57a602c37b11c21d690907101a1d8c4ff49335757cfb736a625fc72ae1365a2bbaadcb2397e9b0c54b7ffeaa1e1a94813bda9d7c7df5ea55ee775a566f7818d61f13d0eef925f43973007b5031d38c91f6eafb11984425d220f7dcc9c293801b7987d7f6e8293146a9a1a9c28ace5315c8e34e6a84b4c08b6b17ce3a485026dd55041112d8ae8b822420d03e713947ccf71570a6aecc2562f765c9eb5a6450901d867374f3df20b0f1bfed03177b57ade10c1b52e5b20e945d7921f99694f47dc482a30ccfdfe047f4734235141ba3c633e3b3dec51f4987bd4911d5d01792149511dd6c94ef662e2ad4215f65efcf46ce2227b5b378ee16f46e9f6f913a4ce85b39ae46bbf594b00d252aca15521427e20875e236ef80f5fcbb97662972f5bee96df67210224aa87a98899470f5b4cebdef691580d7c44aef95091f20f0c22104d080f3f7ae60d754755dd79318d8ffdf21ea6b78719fb4d87150760dac37d40cd4cd0556d519621a4257aa55da2963e8d21f4160f949900552f0483c776605abe1dc014c3ec8591cd2e754825833656ba12dd3e54c9c45c7ae12ae81b9b41f58c033d1bf671d575d263b7ae6ee42167b9ac894d3c981097e7de30108486c43efe0d54086275c67144194ffb223ef9c5797c642829555cf652c1b4c1d1a2cfa707c0ea38ade8423753ce28b8f8161156fac90d09529c42288bc7fc816d4738ebfcee36e4f6906b2c2ad14bd8f30c5fe5166229ec9f91c792f6cc17087c24dda7d0d0c34ec9b4e3a8eac2626fafb267fff282e942f36d4dd20ea8fb8268f67e1dbbf54f7f56b35bc0aea675bec5628971d17f5550e65c5ab39cb28b356f86330a6e1e5657c3a8f08bee0826a939afc2b67424a4900ca3f7bc2e26d39e1af06e411b4f5b62b10bf941004fc0e62d1f8a2df485d59f73793b7d1762857cc9a2f53783b9026f9da860f4543ff44820e4baa0a53d2cb16e4393e4e39effe0e660abc9e5390b0be05102baa283f6ed05b5e35273e4b59f547b3c87ee27cdd50d90044a168aa9ef00e1879f0356b8d8564e6230fe123bc6faf417c883e273df0e0127e9ce32183afb5d9b5e175c097436e81549bdb21c8215efe632ce3a6aa5283ad8a80f573f17ea94010ed71a1d68b2b8880bd31ecd25336220b839f82f73d8c0fbb90dc94c3849665feb1414af5a7f5d635040274076fe4812a2aa95af895393f83d1cc5db14ba315d3d064963d056a1f46391bc31b55fd308bc45647abdd8858e5995eb45a6c4b72ba144b77dd2e967dc3d37bca768ef05aae2919241dff24f2fc72603c5407580fe72d2e4ebc70a5990e7562a70898988e5f8196b90df1b9e2577fd75929a02f475481a6e445d837caf38ebd95f1aa0795167d9b707ce536610916033f9897bea1d09a6537fe36833e6ce6cf3c90eb8c53df2803e4ed4639843fe443b2e2238c069ea2c4b90e2b32f68e196478f54d31be5832c477c8dfb0b17135701ca8f07dc612a5c0e258ce412005214737f686d379a63d08bdbff0b825f9fccbd477b1d8599847662a12799fa27f6820ad2aed49b8eebb310a60ca1a849504e871c471759643d73e67e9295a3790eaf36b26aa681c444092d41dff52459c54464fb0b6a337be38ea7d42a60308580ec7f3e391412892a4a4039d6d957759832772c0e1c4ad65999175107327bc101367b64ab9cd0348b255e1a4b4d3d63fef5ac8234328a04d4003014da8ede54a99c92159f3e0ab0937eedfc5f4de1bdba88474c102699ca51a7aaad34dddd84051735d37d02a757247c3bc039965d7b6a876f5356a719c9923274767fb92e48f92b70fc8c75dcb55d892c2c77436ee95e1aa1536fb5e5c6981723247243de5d9af80c911efa44644f5219e3331cf85c26dcce627049e4d69dca9964323d7dc34da20884326f254e2d76fa31af28b1e3e638aa45ddfc6fe99637cc84ece4b6e1f7026b092236fd9c2277de9b96dd7e4b7865ee5e9d0ea780ab6e268604988d203ce4118a3e6d9aebb5dbbe1baceb6be9834a28b7879f740dad4ee99ab9243cb7c5bf82fe2a463eed70ef38a0a49b2ab8edc711901edcfa1d4ad4992e60fd31a0f5bb3751d2174b464a388aeded601d37ea94e238ea5659bc054aecb0d5c72a2ef5672fa02b15c18c5bf3f97a9f83fd94aa18dc7658fdf12a2a0957f2ca933734d194f7f8ecdf9d11d30dd353821dee96366ece0aff80eb14cfbbcd79bff3f297d52779cc03e9174d904f1ee177e8547fcdcef1961cf9074e0aa2c20d4b76f3b6c91aa5cd1b3587e756dc096dd7da716c1788d03acd02d91f7a6907ecf4ce91938a3db7ff18e9e1f305edb45a8ff80bda3908ccfa110e9827e830ad6b7fa8ddc06ffbd546cbd4a91b61373a159196e81cfcea3b8ca7c3f72f62188cd5a5a713627b9e2cc78c132e5fb0cde4f63c517d8d064cdbda1573ba7c51675dcb365804395824798c3690a14e1668267923854706e55ab632cc05932ec4f20ca55e1de59e1469c31b5cfcef73f64574b38a3d4cb2517c933dcc65ec2b157344f0bd0b44fedb257d881329228c5f7823934007f7363a7e173c3b66e461120312add250729832c8845d390a417e93ada82cc7a1a1ad101c6389e2ada378f54afc43cf456c6986f3a27e98c4502bba46730b9398e26e3e387dfc74350f1a19cb428916f6137a9788756ca099c836a8a6958f2053b7efbe2b9127b50ea08a0a3902269e6e5596d245a9ebe45562e789f223d078680504ad2e5e4580a0ab46d5fa9b7c431f5a35cef56e7dfbcd0214966c4a3c0e678af99b25d3fac3fbfcb4878d52d1daf343648f6155fe01131fece43002f498a4a38c9f3673169aee215cac3cfe2b01b0b573eaf6e4f49066f1490a731db990ca0778e84d214abac0fa8cb2efd02de7b6e50261d47abd83fb436d0a4e13f99bd7b432c5fcc59c651d467d50e8a6849071a8ece161dff94376ad2ea99cf1001def986d2d15016eb382b646c9706e7df3e1d0a7144fbc8eafb42a0f6ceeb58bc7ccea16726379fb6c89ee8a3512394daedaddb3f336216acc0156d217fd1ed496f59c59d9558374ed9bbe97e26620557322fb8d1727f79500cc4c40d9292a8a0ef2de1365c3dbb6d4fba37d8a4bff7f477c2ece1f42fb798b0897f212df686346c47b61be9f303b80c4ec7c8dae494f0aaffb05375314fcd4b5ef02a23bd7e2c9e6cd8c7d5c5b670ca94af82d819b729d76650378748d3efb33f99283e6429fb1e9ddb26e26738cb8978653618758b350a43c83070514bd6dd910bb5aa7d61c8f5543eb4f3dbe80313e67a4c468095a51a0111c574f890c2d165b5ce58751da19d7888e479794ac0ee6a57220b6325f1e037dacc6f0306e5b92f6bc8c3e33e8bb30a42213b78d78f48bdf4f72b1ef62971ccbc54beffb9d149f063df258a58945960108321a626cc1b06268e52aaaf125098dcf225db2bc7f2f1a42458a92e7f724c00b998ab1da32b435319bc56ce9df7b5c65170832647b35276db40d57930839ea6cf69d3f6fbe9a22b1cd55687f595a3f12ea23fbd0c5490b8523132d7992b29fb930c88ad9fb853fe94ba46266411f8d9fc217384fcc7f80c4fa415213ea927b0231d6ca0def967adf8d1f5295af1c2f9ca7dc946f59baac1ccfbbb3572aeb9dd7a8daffe8a95a9da838ad79b10fd2c9d35c953bbfa3412b4bd4c75ca1fef52cb052da5613ea5e62f789e3a2638adf5b73852c8c3502f02faff53e6fc329257c55f9f84afb2f562fb99c5c6c1baf903316068e65017447f8e99d96bb7b4a4b4f81b2017c50aa5b0c6716a8ed45fafe82f26a1203b5e37edf1c05e63ab8d0cd66bae433cc763f3565d3c2a40896d9c7cbe45b5619519e6cb3a220414134b6c991ced880f3aefe69bf5c7ffd4af66de5fded9327f80b61056c3aaeec29ff74e5a418787da8e97c73e0edfb4368909c8e3fa6e1286d9b9647d60912663e71692f32e363adde1d3b7fed1b00f9b0999019609a553d40551677989daee572996a2a8dde3bd8081534363739cb08fabdf715e0d52acdd7d49e986d3fe4008033a7cd5f472fb80c4858ee4948dd7049ea186408a524d0194157e3e0e6eddc73644d5881b999f8b944cc995381274df1c07755b8735b0ea5a8d440018a617268eb70e37b8253c51ea64febecbd41a6e10d2b6b67a6d14b0da966f5b7e1ee7873071d838cca9a0ece029c88e0ffc2383558bc4e7a3dab2492281935f1e201f69cb3c77df9dfabe8df0ded6dbc36640fb3d851728eddbec42e183df497b1b52576909c7efe2ff80584c9bbd37e416549dd5f0902b4d6762b2a281886c626789e2b6fb56c99d93192f2a04fdb7971ce7f501decb59449eba61", 0xe00}, {&(0x7f0000001680)="f606c8f6734ec733150fcde0e48d1fec929e1a976e81589665c4320f8f782f54aa3647304e3fb79ace1501f03d95be1729ce9123f7c0fec767e27e11fd329bc17659644c9253e7ba5896f434c9b810984b1a6136f30b49594cff476d185b79616360d1cba239caeb444455004cb233da9e65379d844dd659a765d68da6ba1dbf4810f59aeb5092301be780db6f9a95469198632c1997200a33ee04e87ec8fb743745e34c60314e4ca45794f789360899f76b71b806b85865b81c8bf62b36a9910799a2ac93cbe97d187fa6a5a2a926609c9fb3c442027cdc6a7a4674a4e9eb566f42837298e1efe8545d90cead4ec55cb6d01eaf", 0xf4}, {&(0x7f0000000300)="c0dd121bad111141a0fc903c7cb66d7a0fae35eed5de8e39eedbeea91938", 0x1e}, {&(0x7f0000000400)="1cefdc8419eb84602e6f134751bc69da73b7e45b16add60f90df6ee86630adb05335bda6c11e6d0f6c48914ed988f9a0f786a827930a816a0300769ce5cbfccaab8ba37dda884872e74b5d76608331a01aac3cbe238b94573c4507bb4d25e06cdc354f012cf7eb172486080a2067527406c088a0", 0x74}, {&(0x7f0000000480)="9bb2ec4d2bdd0b960b208734ef504e93", 0x10}, {0x0}], 0x8}}], 0x1, 0x2004c849) r3 = fsopen(&(0x7f0000000040)='cgroup2\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) r4 = fsmount(r3, 0x0, 0x82) fchdir(r4) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) unlinkat(r4, &(0x7f0000000140)='./file0\x00', 0x200) r5 = syz_genetlink_get_family_id$mptcp(&(0x7f0000001880), r2) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r4, &(0x7f0000001940)={&(0x7f0000001840)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000001900)={&(0x7f00000018c0)={0x1c, r5, 0xa18, 0x70bd25, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x9}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x200008c0) r6 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_SET_BINARY(r6, 0x6, 0x0, 0x0, 0x0) r7 = fsmount(r6, 0x0, 0x0) r8 = openat$cgroup_subtree(r7, &(0x7f0000000040), 0x2, 0x0) write$cgroup_subtree(r8, &(0x7f0000000080)={[{0x2d, 'pids'}]}, 0x6) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000002c0)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x0, 0x0, 0x2}}, 0x0, 0x1a}, 0x28) getpeername$packet(0xffffffffffffffff, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000140)=0x14) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000180)={{0x1, 0x1, 0x18, r0, {0x100}}, './file0\x00'}) 9m22.862826187s ago: executing program 0 (id=1607): socket$inet6_mptcp(0xa, 0x1, 0x106) openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x598080, 0x184) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f00000000c0)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x45bc5459, 0xfffffe0000000001, 0xfa11, 0x3}, 0x0) unshare(0x2040400) r2 = fsopen(&(0x7f0000000440)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) fsmount(r2, 0x0, 0x0) r3 = openat$vimc0(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$VIDIOC_ENUM_FRAMESIZES(r3, 0xc02c564a, &(0x7f0000001b00)={0x0, 0x34325842, 0x1, @discrete={0x1, 0x100}}) write$USERIO_CMD_SEND_INTERRUPT(0xffffffffffffffff, &(0x7f0000000140)={0x2, 0x1}, 0x2) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) bind$inet6(0xffffffffffffffff, 0x0, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240"], 0x7c}, 0x1, 0x0, 0x0, 0x4048000}, 0x44450) sendmsg$NFT_BATCH(r4, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x4048010) bpf$PROG_LOAD(0x5, &(0x7f0000019240)={0x14, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = syz_open_procfs(0x0, &(0x7f00000190c0)='net/ip_tables_targets\x00') pread64(r5, &(0x7f0000000080)=""/102356, 0x18fd4, 0xc2a) 9m17.717277569s ago: executing program 2 (id=1599): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETENCODER(0xffffffffffffffff, 0xc01464a6, 0x0) syz_open_dev$dri(&(0x7f0000000280), 0x1, 0x0) r4 = io_uring_setup(0xfc6, &(0x7f00000002c0)={0x0, 0x6c02, 0x0, 0x0, 0x20000004}) r5 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r5, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x7}, 0x1c) listen(r5, 0xfffffffc) socket$inet_mptcp(0x2, 0x1, 0x106) r6 = socket$inet(0x2b, 0x801, 0x0) connect$inet(r6, 0x0, 0x0) close_range(r4, r5, 0x0) 9m7.570631077s ago: executing program 71 (id=1607): socket$inet6_mptcp(0xa, 0x1, 0x106) openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x598080, 0x184) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f00000000c0)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x45bc5459, 0xfffffe0000000001, 0xfa11, 0x3}, 0x0) unshare(0x2040400) r2 = fsopen(&(0x7f0000000440)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) fsmount(r2, 0x0, 0x0) r3 = openat$vimc0(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$VIDIOC_ENUM_FRAMESIZES(r3, 0xc02c564a, &(0x7f0000001b00)={0x0, 0x34325842, 0x1, @discrete={0x1, 0x100}}) write$USERIO_CMD_SEND_INTERRUPT(0xffffffffffffffff, &(0x7f0000000140)={0x2, 0x1}, 0x2) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) bind$inet6(0xffffffffffffffff, 0x0, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240"], 0x7c}, 0x1, 0x0, 0x0, 0x4048000}, 0x44450) sendmsg$NFT_BATCH(r4, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x4048010) bpf$PROG_LOAD(0x5, &(0x7f0000019240)={0x14, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = syz_open_procfs(0x0, &(0x7f00000190c0)='net/ip_tables_targets\x00') pread64(r5, &(0x7f0000000080)=""/102356, 0x18fd4, 0xc2a) 9m2.411997057s ago: executing program 72 (id=1599): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETENCODER(0xffffffffffffffff, 0xc01464a6, 0x0) syz_open_dev$dri(&(0x7f0000000280), 0x1, 0x0) r4 = io_uring_setup(0xfc6, &(0x7f00000002c0)={0x0, 0x6c02, 0x0, 0x0, 0x20000004}) r5 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r5, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x7}, 0x1c) listen(r5, 0xfffffffc) socket$inet_mptcp(0x2, 0x1, 0x106) r6 = socket$inet(0x2b, 0x801, 0x0) connect$inet(r6, 0x0, 0x0) close_range(r4, r5, 0x0) 8m59.735500652s ago: executing program 9 (id=1623): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() ptrace$PTRACE_SECCOMP_GET_METADATA(0x420d, r0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000faff0000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000007100000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r3, 0x0, 0x5}, 0x18) openat(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x0, 0x0) r4 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r5 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r5, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r5, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x0, r6, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r5, 0xc06864ce, &(0x7f0000000440)={r7, 0x2, 0x0, 0x7, 0x0, [0x0], [0x0, 0x0, 0x4], [0x0, 0x0, 0x0, 0x4]}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r4, 0xc02064b2, &(0x7f0000000140)={0x3ff, 0x2, 0xb5}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r4, 0xc00c642d, &(0x7f0000000080)={r8, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r5, 0xc00c642e, &(0x7f0000000300)={0x0, 0x0, r9}) 8m58.330393465s ago: executing program 9 (id=1625): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="1805000000000000000000004b64ffec8500000075000000040000000700000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x0, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000300), 0xffffffffffffffff) socket$nl_rdma(0x10, 0x3, 0x14) mq_open(&(0x7f0000000040)='!se\xf7ih,\x17i\xacP\xe6lNnuxselinux\x00', 0x6e93ebbbcc0884f2, 0x2, 0x0) setsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x39, &(0x7f0000000140)="ff02040000ff", 0x6) connect$inet6(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff9000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r4 = io_uring_setup(0xb, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x3, 0xc1}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1600000004"], 0x50) io_uring_enter(r4, 0x4095, 0x7721, 0x16, 0x0, 0x0) 8m55.456870166s ago: executing program 9 (id=1627): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, 0x0) r1 = socket$nl_sock_diag(0x10, 0x3, 0x4) r2 = socket$nl_generic(0x10, 0x3, 0x10) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r3 = socket(0x1d, 0x2, 0x6) bind$inet(r3, &(0x7f00000000c0)={0x1d, 0x4e20, @loopback}, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f000001b700)=""/102392, 0x18ff8) r5 = openat$iommufd(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r5, 0x3b81, 0x0) ioctl$IOMMU_TEST_OP_MD_CHECK_REFS(r5, 0x3ba0, &(0x7f0000000040)={0x48, 0x4, 0x0, 0x0, 0x0, 0x0, 0x2}) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x881, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_CREATE(r2, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x620b}, 0x0) sendmsg$TCPDIAG_GETSOCK(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000480)=ANY=[@ANYBLOB="700000001200030200"/18, @ANYRES32=0x0], 0x70}}, 0x0) syz_init_net_socket$netrom(0x6, 0x5, 0x0) 8m52.44457039s ago: executing program 9 (id=1630): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=@newtaction={0xe94, 0x30, 0x25, 0x0, 0x0, {}, [{0xe80, 0x1, [@m_pedit={0xe7c, 0x1, 0x0, 0x0, {{0xa}, {0xe50, 0x2, 0x0, 0x1, [@TCA_PEDIT_KEYS_EX={0x2c, 0x5, 0x0, 0x1, [{0x14, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_HTYPE={0x6}]}, {0x14, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}]}]}, @TCA_PEDIT_PARMS_EX={0xe20, 0x4, {{{}, 0x2}, [{}, {}, {0x0, 0x5, 0x0, 0x0, 0x0, 0xffffffff}, {0x0, 0x4}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, {}, {0x0, 0x800}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x40000}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, {}, {0x0, 0x0, 0xf}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1000}, {0xfffffffd}, {}, {}, {}, {0x0, 0x0, 0x6}, {}, {0xffffffff}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x10}, {0x0, 0x3}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x4}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0xfffffffe}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, {0x3c}, {}, {}, {0x0, 0x0, 0x20000000}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x4}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0xfffffffe}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, {0x5, 0x0, 0x0, 0x0, 0x2}, {}, {0x0, 0x0, 0x0, 0x0, 0xffff}, {0x8}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x8}], [{0x0, 0x1}, {}, {}, {0x4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x2}, {}, {}, {}, {}, {}, {0x2}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x4}]}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xe94}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0200000004000000020000000c0000000014"], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00'}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000002000000b7030000e8ffff05850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x26, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000a00)={&(0x7f0000000d00)='sched_switch\x00', r1}, 0x10) r2 = socket$inet6(0xa, 0x3, 0xff) connect$inet6(r2, &(0x7f0000000200)={0xa, 0x0, 0xfffffffd, @empty}, 0x1c) r3 = dup(r2) r4 = open(&(0x7f00000000c0)='./file0\x00', 0x1298c2, 0x0) ftruncate(r4, 0x200004) sendfile(r3, r4, 0x0, 0x80001d00c0d1) r5 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="38000000031401002cbd7000fcdbdf250900020073797a32000000000800410073697700140033006c6f"], 0x38}, 0x1, 0x0, 0x0, 0x8040044}, 0x810) sendmsg$RDMA_NLDEV_CMD_DELLINK(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000640)=ANY=[@ANYBLOB="18000000041401002dbd7000fedbdf250800010000000000ba30b28e994c1a08d1ca4eb6b8b4889cdd4e786eb807e04eb88b935d78"], 0x18}, 0x1, 0x0, 0x0, 0x671ec167a4b72164}, 0x0) r6 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000400)='mm_collapse_huge_page_swapin\x00', 0xffffffffffffffff, 0x0, 0x7}, 0x18) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000340)={@fallback=r5, 0x35, 0x0, 0x6, &(0x7f0000000140), 0x0, 0x0, &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0], &(0x7f00000001c0), &(0x7f0000000300)=[0x0, 0x0, 0x0], 0x0}, 0x40) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000380)=ANY=[@ANYRES32=r6, @ANYRES32, @ANYBLOB="30000000eb4b1e9991d6010000", @ANYRES32, @ANYBLOB, @ANYRES32, @ANYBLOB, @ANYRES64=r7], 0x20) bpf$BPF_PROG_DETACH(0x9, 0x0, 0x20) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r8, 0x6, 0xe, &(0x7f0000000300)={@in6={{0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}}, 0x0, 0x0, 0x16, 0x0, "0af5a212a1bd3bbda613efd9c8b4965dca66db42f66a86e5781cf86717055a7c1d1408407e5a774ef95f2fc1b947e00f000000123f2f1d34b0882e83d41b67cb9ff147c6d33a097d2269351b3ed300"}, 0xd8) setsockopt$inet6_tcp_TCP_MD5SIG(r8, 0x6, 0xe, &(0x7f0000000200)={@in6={{0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x3d}}}, 0x0, 0x0, 0x11, 0x0, "a1c1dd75a68473ba07d945c3b03e10950cd4b347113e55eb4285bf274bca67efbff2fdf98328de9434031348589bf28046d14810000000e3ffffff00"}, 0xd8) r9 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r9, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000000c0)=@gettaction={0x30, 0x32, 0x6dd711a25f4cb68b, 0x0, 0x0, {}, [@action_dump_flags=@TCA_ROOT_TIME_DELTA={0x8, 0x4, 0x100}, @action_gd=@TCA_ACT_TAB={0x14, 0x1, [{0x10, 0x1, 0x0, 0x0, @TCA_ACT_KIND={0xa, 0x1, 'pedit\x00'}}]}]}, 0x30}}, 0x0) 8m35.278587077s ago: executing program 73 (id=1630): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=@newtaction={0xe94, 0x30, 0x25, 0x0, 0x0, {}, [{0xe80, 0x1, [@m_pedit={0xe7c, 0x1, 0x0, 0x0, {{0xa}, {0xe50, 0x2, 0x0, 0x1, [@TCA_PEDIT_KEYS_EX={0x2c, 0x5, 0x0, 0x1, [{0x14, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_HTYPE={0x6}]}, {0x14, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}]}]}, @TCA_PEDIT_PARMS_EX={0xe20, 0x4, {{{}, 0x2}, [{}, {}, {0x0, 0x5, 0x0, 0x0, 0x0, 0xffffffff}, {0x0, 0x4}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, {}, {0x0, 0x800}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x40000}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, {}, {0x0, 0x0, 0xf}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1000}, {0xfffffffd}, {}, {}, {}, {0x0, 0x0, 0x6}, {}, {0xffffffff}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x10}, {0x0, 0x3}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x4}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0xfffffffe}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, {0x3c}, {}, {}, {0x0, 0x0, 0x20000000}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x4}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0xfffffffe}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, {0x5, 0x0, 0x0, 0x0, 0x2}, {}, {0x0, 0x0, 0x0, 0x0, 0xffff}, {0x8}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x8}], [{0x0, 0x1}, {}, {}, {0x4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x2}, {}, {}, {}, {}, {}, {0x2}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x4}]}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xe94}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0200000004000000020000000c0000000014"], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00'}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000002000000b7030000e8ffff05850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x26, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000a00)={&(0x7f0000000d00)='sched_switch\x00', r1}, 0x10) r2 = socket$inet6(0xa, 0x3, 0xff) connect$inet6(r2, &(0x7f0000000200)={0xa, 0x0, 0xfffffffd, @empty}, 0x1c) r3 = dup(r2) r4 = open(&(0x7f00000000c0)='./file0\x00', 0x1298c2, 0x0) ftruncate(r4, 0x200004) sendfile(r3, r4, 0x0, 0x80001d00c0d1) r5 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="38000000031401002cbd7000fcdbdf250900020073797a32000000000800410073697700140033006c6f"], 0x38}, 0x1, 0x0, 0x0, 0x8040044}, 0x810) sendmsg$RDMA_NLDEV_CMD_DELLINK(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000640)=ANY=[@ANYBLOB="18000000041401002dbd7000fedbdf250800010000000000ba30b28e994c1a08d1ca4eb6b8b4889cdd4e786eb807e04eb88b935d78"], 0x18}, 0x1, 0x0, 0x0, 0x671ec167a4b72164}, 0x0) r6 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000400)='mm_collapse_huge_page_swapin\x00', 0xffffffffffffffff, 0x0, 0x7}, 0x18) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000340)={@fallback=r5, 0x35, 0x0, 0x6, &(0x7f0000000140), 0x0, 0x0, &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0], &(0x7f00000001c0), &(0x7f0000000300)=[0x0, 0x0, 0x0], 0x0}, 0x40) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000380)=ANY=[@ANYRES32=r6, @ANYRES32, @ANYBLOB="30000000eb4b1e9991d6010000", @ANYRES32, @ANYBLOB, @ANYRES32, @ANYBLOB, @ANYRES64=r7], 0x20) bpf$BPF_PROG_DETACH(0x9, 0x0, 0x20) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r8, 0x6, 0xe, &(0x7f0000000300)={@in6={{0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}}, 0x0, 0x0, 0x16, 0x0, "0af5a212a1bd3bbda613efd9c8b4965dca66db42f66a86e5781cf86717055a7c1d1408407e5a774ef95f2fc1b947e00f000000123f2f1d34b0882e83d41b67cb9ff147c6d33a097d2269351b3ed300"}, 0xd8) setsockopt$inet6_tcp_TCP_MD5SIG(r8, 0x6, 0xe, &(0x7f0000000200)={@in6={{0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x3d}}}, 0x0, 0x0, 0x11, 0x0, "a1c1dd75a68473ba07d945c3b03e10950cd4b347113e55eb4285bf274bca67efbff2fdf98328de9434031348589bf28046d14810000000e3ffffff00"}, 0xd8) r9 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r9, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000000c0)=@gettaction={0x30, 0x32, 0x6dd711a25f4cb68b, 0x0, 0x0, {}, [@action_dump_flags=@TCA_ROOT_TIME_DELTA={0x8, 0x4, 0x100}, @action_gd=@TCA_ACT_TAB={0x14, 0x1, [{0x10, 0x1, 0x0, 0x0, @TCA_ACT_KIND={0xa, 0x1, 'pedit\x00'}}]}]}, 0x30}}, 0x0) 5m2.220791847s ago: executing program 4 (id=1848): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000009780)={0x2020}, 0x2020) syz_open_procfs(0x0, &(0x7f0000000700)='mounts\x00') timer_create(0x0, 0x0, 0x0) sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x15) bind$netlink(r3, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r4 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$uinput_user_dev(r4, &(0x7f0000000a00)={'syz1\x00', {0x9, 0x7, 0x5, 0x5}, 0x3f, [0x9, 0x2, 0x18, 0x2, 0x2, 0x400, 0x80000000, 0x0, 0x8, 0x0, 0x20000006, 0x2, 0xfffffffb, 0x39, 0x747d5e13, 0x800, 0xfffffb9a, 0xfffffffe, 0x0, 0xfffffffb, 0x2004, 0x3, 0x0, 0xf250, 0x80, 0x4800, 0x300000, 0x7, 0xe, 0x4623f, 0x0, 0x10001, 0x1ff, 0x8000, 0x7, 0x3, 0xc, 0x3, 0xba55, 0x8da8, 0x2, 0x200, 0xfffffffe, 0x400, 0xe, 0x4, 0x2, 0x6, 0x8, 0x9, 0x1, 0x199d, 0x6, 0x80, 0x5, 0xffffffff, 0x4, 0x6, 0x1000, 0x5, 0x35, 0x8, 0xa, 0x5], [0x7, 0x1e, 0x3, 0x8000, 0xfffffffd, 0x3, 0x0, 0x200025, 0x7, 0xfffffffc, 0x8, 0x7fff, 0x72c, 0x1c32, 0x3, 0x5, 0x10000, 0x3fe, 0x7ffd, 0x3, 0x1, 0x297, 0x5, 0x0, 0x981, 0x0, 0x0, 0x3ff, 0x0, 0xfffffffe, 0x0, 0x1000001, 0x10, 0xfffffff9, 0xfffffffd, 0x7, 0x1, 0xffffffff, 0x6, 0x8, 0x800, 0xffff, 0x6, 0x96, 0x9, 0x2, 0x0, 0x200, 0x401, 0xc, 0x2, 0x379, 0x9, 0x10, 0x5, 0x7, 0x6, 0x2, 0x1, 0x1, 0x5, 0x7, 0x200, 0x3], [0x401, 0x8000c584, 0x5, 0xcd3, 0x7, 0x1f, 0x404, 0x4, 0x4008, 0xc, 0x7, 0x9, 0xe8b, 0x5, 0x80000001, 0x8, 0x3f92, 0x1000, 0x0, 0x10, 0x1, 0xfffffff9, 0x7, 0x1000, 0x80040101, 0x5, 0x4, 0x5, 0x200003, 0x6, 0x5, 0x80, 0x9, 0x7ffe, 0x10000, 0x0, 0x3, 0x2, 0x3, 0x6d7e, 0x9, 0x8, 0x3, 0x3ff, 0x20000006, 0x1, 0x95e, 0xffffffff, 0x3ff, 0xe, 0x6, 0x100fffd, 0x2005, 0x9, 0x4, 0xea, 0x9, 0x20000005, 0x3, 0xd9, 0x0, 0x7d, 0x401, 0x5], [0x108e, 0x10002, 0x3, 0x3, 0x88, 0x2, 0xffffff80, 0x4, 0x50, 0x2, 0x763, 0xb, 0x402, 0x1, 0x5, 0x1000, 0x7f, 0x5, 0x3fa6, 0x4, 0x0, 0x5, 0x3, 0x4, 0x4e47, 0x4, 0x3, 0x4, 0x200, 0x2851, 0x3b, 0x20000001, 0x5, 0x5, 0xfffff734, 0x5, 0x4, 0x20008, 0x8a5, 0x82, 0x44, 0x409, 0x3, 0x4, 0x4, 0xe, 0x4, 0xffffffff, 0x7fff, 0xffff8a36, 0xfffffff8, 0x401, 0x3, 0x200, 0x7, 0x1f3, 0xfffffffd, 0x5, 0xe, 0x101, 0xf, 0xf, 0x136, 0x6]}, 0x45c) ioctl$UI_DEV_CREATE(r4, 0x5501) readv(r4, &(0x7f0000001240)=[{&(0x7f00000012c0)=""/41, 0x29}], 0x1) 4m55.902501957s ago: executing program 4 (id=1854): r0 = bpf$MAP_CREATE(0x0, 0x0, 0x48) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) setrlimit(0x8, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000cc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) setreuid(0xee01, 0x0) ioctl$RTC_UIE_ON(0xffffffffffffffff, 0x7003) ioctl$RTC_AIE_ON(0xffffffffffffffff, 0x7001) ioctl$RTC_SET_TIME(0xffffffffffffffff, 0x4024700a, 0x0) bpf$MAP_LOOKUP_BATCH(0x19, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x7, r0}, 0x38) bpf$MAP_CREATE(0x0, 0x0, 0x50) r5 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000140)={0xffffffffffffffff, 0x0, 0x25, 0x4, @void}, 0x10) write$RDMA_USER_CM_CMD_CREATE_ID(r5, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000000)={0xffffffffffffffff}, 0x111, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r5, 0x0, 0x0) write$RDMA_USER_CM_CMD_DESTROY_ID(r5, &(0x7f0000000f80)={0x1, 0x10, 0xfa00, {&(0x7f00000001c0), r6}}, 0x18) 4m54.506348839s ago: executing program 4 (id=1856): r0 = syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$rxrpc(0x21, 0x2, 0xa) bind$rxrpc(r1, &(0x7f0000000100)=@in6={0x21, 0x3, 0x2, 0x1c, {0xa, 0x4e22, 0x9, @ipv4={'\x00', '\xff\xff', @rand_addr=0x4}, 0x3}}, 0x24) r2 = syz_io_uring_setup(0x497, &(0x7f0000000580)={0x0, 0x8000717e, 0x100, 0x0, 0x14d}, &(0x7f0000000140)=0x0, &(0x7f0000000200)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0, 0x0, 0x0, 0x0, {0x3}}) io_uring_enter(r2, 0x3516, 0x0, 0x0, 0x0, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r6 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r6, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) dup3(0xffffffffffffffff, r5, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_mount_image$cramfs(&(0x7f0000000040), &(0x7f0000000000)='./file1\x00', 0x2200400, &(0x7f0000000080)=ANY=[@ANYRES8=0x0], 0xfe, 0x160, &(0x7f0000000200)="$eJzs0M+LEnEYx/H3d+brKKRYZCBBKXTIksAf1C3CiSQhGyi6dBJs+gGKkVDeUqJbB6Grh9q9Lgv7F+jqYdlFL7v/xF68LezRZWbcXZb1P9jndZvP830+D8yLp7OM4tzzVvPrN7fddj+k3zjV8tvD4bDk5RZ0ti7Mg/ejEnxGM9Iw74EXT2Lw8UvDNeqthvc9L0EYsK8tc5rx03t2QtPTkCfYz9yD8S3/ncHlzC0S8vdua7DjQZYDFv/hvgX2jSDz+o4AE5SylsfumPyuZFM3FXQG2c2NvdfT3cqjh8/cP4Vy/0E0aWZ/whq2iuxMPh2Yy63ZtPrKqTqzYqHwpJjLGzze9wu7ffTL6Hd4r0B7fQZ+n0Xyrn4HvxT89W/Nt1UMGP87dprhs3/d/WGmQaUG9VoytF5LXDcwM9qbLFjBnxBZNRJCCCGEEEIIIYQQQgghhBBCCHHVnQQAAP//A2lTBA==") getdents(0xffffffffffffffff, &(0x7f0000001fc0)=""/184, 0xb8) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000540)={0x2c, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) 4m42.416267057s ago: executing program 6 (id=1648): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, 0x0, 0x0, 0x2, 0x0, 0x0, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000faff0000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000007100000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r3, 0x0, 0x5}, 0x18) syz_open_dev$evdev(&(0x7f0000000040), 0x2, 0x0) r4 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r5 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r5, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r5, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x0, r6, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r5, 0xc06864ce, &(0x7f0000000440)={r7, 0x2, 0x0, 0x7, 0x0, [0x0], [0x0, 0x0, 0x4], [0x0, 0x0, 0x0, 0x4]}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r4, 0xc02064b2, &(0x7f0000000140)={0x3ff, 0x2, 0xb5}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r4, 0xc00c642d, &(0x7f0000000080)={r8, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r5, 0xc00c642e, &(0x7f0000000300)={0x0, 0x0, r9}) 4m42.389122216s ago: executing program 4 (id=1870): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) setsockopt$sock_linger(0xffffffffffffffff, 0x1, 0x3c, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x6, &(0x7f0000000000)=0x9, 0x4) getsockopt$inet6_tcp_int(r1, 0x6, 0x17, 0x0, &(0x7f00000001c0)) sched_setscheduler(0x0, 0x6, &(0x7f00000000c0)=0x2) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001000)=ANY=[@ANYBLOB="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"/2574], &(0x7f0000000140)='GPL\x00'}, 0x48) r3 = socket$kcm(0x2, 0x1, 0x0) sendmsg$inet(r3, &(0x7f0000000fc0)={&(0x7f0000000000)={0x2, 0x4001, @remote}, 0x10, 0x0}, 0x20000811) r4 = socket$kcm(0x29, 0x2, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, 0x0, &(0x7f0000000140)='GPL\x00'}, 0x94) socket$kcm(0x2, 0x1, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r4, 0x89e0, &(0x7f0000000040)={r3, r2}) close(r4) r6 = syz_pidfd_open(0x0, 0x0) pidfd_getfd(r6, r5, 0x0) fsopen(&(0x7f0000000300)='tracefs\x00', 0x0) r7 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$FUSE_NOTIFY_INVAL_ENTRY(r7, &(0x7f0000001fc0)={0x42, 0x3, 0x0, {0x0, 0x21, 0x0, '/proc/sys/net/ipv4/vs/secure_tcp\x00'}}, 0x42) 4m40.204887314s ago: executing program 6 (id=1860): madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000005c0), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0, 0x13}], 0x2) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) syz_io_uring_setup(0x5e9, &(0x7f0000000480)={0x0, 0x9e6e, 0x1000, 0x2}, &(0x7f0000000040)=0x0, &(0x7f0000000240)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, 0x0, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_SENDMSG={0x9, 0x40, 0x0, r2, 0x0, 0x0, 0x0, 0x20000044}) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, 0x0, &(0x7f0000000000)='syzkaller\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r6}, 0x18) r7 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x3, 0x3, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r9 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000340)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000ac0)={r8, r9}, 0xc) socketpair$nbd(0x1, 0x1, 0x0, 0x0) recvmsg(0xffffffffffffffff, 0x0, 0x40002002) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000000)={r8, r7}, 0xc) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000100)={r8, r5}, 0xc) syz_clone(0xa0001000, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0) ioctl$SNDCTL_SEQ_NRMIDIS(r0, 0x8004510b, &(0x7f0000000080)) 4m40.203796531s ago: executing program 4 (id=1862): r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) getpriority(0x0, r1) socket$inet6_tcp(0xa, 0x1, 0x0) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x20000000, '\x00', 0x0, 0x0}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) msgrcv(0x0, 0x0, 0xfffffffffffffeac, 0x1, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8}, {{}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, {}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x8}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x7, 0x1, 0xb, 0x7, 0x8}, {0x7, 0x0, 0x0, 0x7}, {}, {}, {}, {0x18, 0x8, 0x2, 0x0, r4}, {}, {0x46, 0x0, 0x0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x5, 0x0, 0xb, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_GET(r6, 0x0, 0x110) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000680)={r5, 0xe0, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f0000001200)=[0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x13, 0x8, 0x0, 0x0}}, 0x10) syz_open_procfs$pagemap(0xffffffffffffffff, 0x0) 4m38.292568303s ago: executing program 4 (id=1864): ioctl$VIDIOC_S_OUTPUT(0xffffffffffffffff, 0xc004562f, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, 0x0, 0x0, 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) accept4$netrom(0xffffffffffffffff, 0x0, 0x0, 0x800) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r3 = syz_io_uring_setup(0x111, &(0x7f00000000c0)={0x0, 0x24ad, 0x10000, 0x1, 0x1de}, &(0x7f00000029c0)=0x0, &(0x7f0000000000)=0x0) r6 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) fcntl$notify(r6, 0x402, 0x8000001f) syz_io_uring_submit(r4, r5, &(0x7f0000001040)=@IORING_OP_CLOSE={0x13, 0x0, 0x0, r6, 0x0, 0x0, 0x0, 0x0, 0x1}) io_uring_enter(r3, 0x1733, 0x6323, 0x20, 0x0, 0x0) 4m35.494153313s ago: executing program 6 (id=1867): r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) getpriority(0x0, r1) socket$inet6_tcp(0xa, 0x1, 0x0) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x20000000, '\x00', 0x0, 0x0}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) msgrcv(0x0, 0x0, 0xfffffffffffffeac, 0x1, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r5}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, {}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x8}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x7, 0x1, 0xb, 0x7, 0x8}, {0x7, 0x0, 0x0, 0x7}, {}, {}, {}, {0x18, 0x8, 0x2, 0x0, r4}, {}, {0x46, 0x0, 0x0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x5, 0x0, 0xb, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000680)={r6, 0xe0, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f0000001200)=[0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x13, 0x8, 0x0, 0x0}}, 0x10) syz_open_procfs$pagemap(0xffffffffffffffff, 0x0) 4m32.789625113s ago: executing program 6 (id=1872): r0 = open(&(0x7f00009e1000)='./file0\x00', 0x60940, 0x0) setsockopt$inet6_int(r0, 0x29, 0xb, 0x0, 0x0) fcntl$setlease(r0, 0x400, 0x2) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f00000000c0)={0x3, 0x1000}, 0x4) setsockopt$packet_int(r1, 0x107, 0xa, &(0x7f0000000080)=0x1, 0x4) setsockopt$packet_rx_ring(r1, 0x107, 0x5, &(0x7f0000003180)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x7ff, 0xf84, 0x3}, 0x1c) r2 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r2, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="6000000002060103000000000000000000000004050001000700000013000300686173683a6e65742c696661636500000900020073797a30000000000500040000000000050005000a00000014000780050015000000000008001240"], 0x60}}, 0x0) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x4, &(0x7f00000003c0)=ANY=[@ANYBLOB="18010000008000000000000000000004850000006d00000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xc, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000380)='kfree\x00', r5}, 0x18) sendmsg$IPSET_CMD_DESTROY(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)={0x1c, 0x3, 0x6, 0x101, 0x0, 0x0, {0x1}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x38000016) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='memory.events\x00', 0x7a05, 0x1700) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r6, &(0x7f0000000b00)={'#! ', '', [{0x20, ' \x15'}, {}], 0xa, "78e9"}, 0xa) mmap$IORING_OFF_SQ_RING(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x0, 0x12, r6, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000059000000"], 0x0}, 0x94) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000940)=ANY=[@ANYBLOB="140000001000010400000000000000000100000a74000000060a0b04000000000000000002000008400004803c000180080001006c6f670030000280060004400001000008000340fffffffa0a0002407d5def2e21000000080003400000000806000140000100000900010073797a30000000000900020073797a320000000008000b4000"], 0x9c}, 0x1, 0x0, 0x0, 0x8010}, 0x0) close_range(r3, 0xffffffffffffffff, 0x0) 4m22.092347436s ago: executing program 74 (id=1864): ioctl$VIDIOC_S_OUTPUT(0xffffffffffffffff, 0xc004562f, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, 0x0, 0x0, 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) accept4$netrom(0xffffffffffffffff, 0x0, 0x0, 0x800) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r3 = syz_io_uring_setup(0x111, &(0x7f00000000c0)={0x0, 0x24ad, 0x10000, 0x1, 0x1de}, &(0x7f00000029c0)=0x0, &(0x7f0000000000)=0x0) r6 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) fcntl$notify(r6, 0x402, 0x8000001f) syz_io_uring_submit(r4, r5, &(0x7f0000001040)=@IORING_OP_CLOSE={0x13, 0x0, 0x0, r6, 0x0, 0x0, 0x0, 0x0, 0x1}) io_uring_enter(r3, 0x1733, 0x6323, 0x20, 0x0, 0x0) 4m16.692898337s ago: executing program 75 (id=1872): r0 = open(&(0x7f00009e1000)='./file0\x00', 0x60940, 0x0) setsockopt$inet6_int(r0, 0x29, 0xb, 0x0, 0x0) fcntl$setlease(r0, 0x400, 0x2) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f00000000c0)={0x3, 0x1000}, 0x4) setsockopt$packet_int(r1, 0x107, 0xa, &(0x7f0000000080)=0x1, 0x4) setsockopt$packet_rx_ring(r1, 0x107, 0x5, &(0x7f0000003180)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x7ff, 0xf84, 0x3}, 0x1c) r2 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r2, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="6000000002060103000000000000000000000004050001000700000013000300686173683a6e65742c696661636500000900020073797a30000000000500040000000000050005000a00000014000780050015000000000008001240"], 0x60}}, 0x0) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x4, &(0x7f00000003c0)=ANY=[@ANYBLOB="18010000008000000000000000000004850000006d00000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xc, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000380)='kfree\x00', r5}, 0x18) sendmsg$IPSET_CMD_DESTROY(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)={0x1c, 0x3, 0x6, 0x101, 0x0, 0x0, {0x1}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x38000016) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='memory.events\x00', 0x7a05, 0x1700) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r6, &(0x7f0000000b00)={'#! ', '', [{0x20, ' \x15'}, {}], 0xa, "78e9"}, 0xa) mmap$IORING_OFF_SQ_RING(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x0, 0x12, r6, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000059000000"], 0x0}, 0x94) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000940)=ANY=[@ANYBLOB="140000001000010400000000000000000100000a74000000060a0b04000000000000000002000008400004803c000180080001006c6f670030000280060004400001000008000340fffffffa0a0002407d5def2e21000000080003400000000806000140000100000900010073797a30000000000900020073797a320000000008000b4000"], 0x9c}, 0x1, 0x0, 0x0, 0x8010}, 0x0) close_range(r3, 0xffffffffffffffff, 0x0) 3m34.173492511s ago: executing program 8 (id=1926): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) socket(0xa, 0x3, 0x3a) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = syz_open_dev$usbfs(&(0x7f0000000080), 0xf, 0x8041) ioctl$USBDEVFS_ALLOC_STREAMS(r3, 0x8008551c, &(0x7f0000000400)=ANY=[@ANYBLOB="4a9800000a00000081ec00000486060b830eeaa1144eb44e4c8ac08e6a6eac4a860fdc1851ddab64fe213700008c63f0c84444fdb3d33f1cee37d289ff436030da41bf010000005b3b3b09551036"]) mkdir(&(0x7f0000000000)='./file0\x00', 0x2) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000200)=ANY=[@ANYRESHEX=r4, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB, @ANYRESDEC=0x0]) read$FUSE(r4, &(0x7f0000006840)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r4, &(0x7f0000004200)={0x50, 0x0, r5}, 0x50) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006780)={0x90}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, 0x0) r6 = open(&(0x7f00000001c0)='./file0/file0\x00', 0x2, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) lseek(r6, 0x0, 0x2) 3m31.363252107s ago: executing program 8 (id=1928): bind$unix(0xffffffffffffffff, 0x0, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000001180), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000000), 0x0, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$IOCTL_VMCI_VERSION2(0xffffffffffffffff, 0x7a7, &(0x7f0000000080)=0xb0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(0xffffffffffffffff, 0x7a0, &(0x7f0000000000)={@my=0x0}) recvmsg(r0, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, 0x0, 0x0) r2 = getpgrp(0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r4 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r4, 0x1, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0xb, 0xd, 0x200cc, 0x6, 0x5}, 0x48) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000700)={0x0, 0x0, 0x0, 0x0, 0x2, r6}, 0x38) setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x11a, 0x1, &(0x7f0000000480)=@gcm_256={{0x303}, "000200", "e123c5876ff425b1ebe250a8486be34705f4f827ae60ecb65e528248d5552bff", "7e25837b", "15d0db2c77179e1a"}, 0x3) sendmsg$tipc(r1, &(0x7f0000000240)={0x0, 0xfffffff5, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) 3m29.368835288s ago: executing program 8 (id=1930): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) signalfd4(r1, &(0x7f00000000c0)={[0xe]}, 0x8, 0x80800) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200000}) r3 = io_uring_setup(0x6668, &(0x7f0000000440)={0x0, 0x9759, 0x0, 0x3, 0x115}) io_uring_register$IORING_REGISTER_BUFFERS(r3, 0x0, &(0x7f0000000640)=[{0x0}], 0x178) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x3, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="6a0ac4ff02000000711069000322"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x2}, 0x94) io_uring_register$IORING_REGISTER_FILES(r3, 0x1e, &(0x7f0000000000)=[r3], 0x1) r4 = landlock_create_ruleset(&(0x7f0000000040)={0x4010, 0x3}, 0x18, 0x0) landlock_add_rule$LANDLOCK_RULE_NET_PORT(r4, 0x2, &(0x7f0000000240)={0x3, 0x3}, 0x0) syz_io_uring_setup(0x223d, &(0x7f0000000100)={0x0, 0x57d9, 0x100, 0x0, 0x1cd}, 0x0, &(0x7f00000001c0)) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r5, 0x8933, &(0x7f0000000100)) 3m11.722222881s ago: executing program 8 (id=1943): sendmsg$BATADV_CMD_GET_MCAST_FLAGS(0xffffffffffffffff, 0x0, 0x200488c2) bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000004180)='/proc/mdstat\x00', 0x0, 0x0) preadv2(r3, &(0x7f0000004140)=[{&(0x7f0000000040)=""/4096, 0x1000}], 0x1, 0x33, 0x4, 0x0) r4 = socket$caif_stream(0x25, 0x1, 0x1) ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f0000000100)={'virt_wifi0\x00', 0x0}) timer_create(0x0, 0x0, 0x0) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) r6 = syz_io_uring_setup(0x497, &(0x7f0000000180)={0x0, 0x4885, 0x100, 0x3, 0x1d}, &(0x7f00000000c0)=0x0, &(0x7f0000000600)=0x0) io_uring_register$IORING_REGISTER_PBUF_RING(r6, 0x16, &(0x7f0000000040)={0x0, 0x0, 0x1}, 0x1) syz_memcpy_off$IO_URING_METADATA_GENERIC(r7, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r7, r8, &(0x7f00000002c0)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x20, 0x10, r5, 0x0, 0x0, 0x0, 0x40002202, 0x1, {0x1}}) 3m8.886178602s ago: executing program 8 (id=1948): r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x20000000, '\x00', 0x0, 0x0}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) msgrcv(0x0, 0x0, 0xfffffffffffffeac, 0x1, 0x0) sendmsg$IPCTNL_MSG_TIMEOUT_GET(0xffffffffffffffff, 0x0, 0x110) syz_open_procfs$pagemap(0xffffffffffffffff, 0x0) 3m7.292482639s ago: executing program 8 (id=1937): socket$netlink(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000480)=0x7) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$xdp(0x2c, 0x3, 0x0) mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x81c0, 0x0) execveat(0xffffffffffffff9c, 0x0, 0x0, 0x0, 0x0) socket$kcm(0xa, 0x3, 0x3a) r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r3, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r3, 0x3ba0, &(0x7f0000000100)={0x48, 0x2, r4}) ioctl$IOMMU_HWPT_ALLOC$TEST(r3, 0x3b89, 0x0) close(r3) 3m4.177487799s ago: executing program 5 (id=1940): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff0000", @ANYRES32=r0, @ANYBLOB="0000000004000000b705000008000000850000006a00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94) socket$pppl2tp(0x18, 0x1, 0x1) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) getsockopt$inet_int(0xffffffffffffffff, 0x11, 0xe, 0x0, 0x0) epoll_create1(0x80000) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r1, 0x0, 0x7}, 0x18) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r2 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r2, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$inet_udp(0x2, 0x2, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xb, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000200)='sched_switch\x00', r4}, 0x18) getpid() bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) prctl$PR_GET_SPECULATION_CTRL(0x23, 0x5, 0x7fffffffeff3) socket(0x10, 0x803, 0x0) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSIGACCEPT(r5, 0x5607, 0x4) ioctl$VT_ACTIVATE(r5, 0x5606, 0x4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0, r3}, 0x18) ioctl$SNDRV_TIMER_IOCTL_PAUSE(0xffffffffffffffff, 0x54a3) 3m0.805767254s ago: executing program 5 (id=1947): openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB], &(0x7f00000001c0)='GPL\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000580)='sched_switch\x00', r0}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x9) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000180)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0x0, @any, 0x0, 0x1}, 0xe) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000040)={0x44, 0x2, 0x6, 0x3, 0x0, 0x1f00, {0xd}, [@IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x44}}, 0x0) r6 = socket$netlink(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, 0x7, 0x6, 0x801, 0x0, 0x0, {0x5, 0x0, 0x2}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x24000840}, 0x4800) sendmmsg(r6, &(0x7f00000002c0), 0x0, 0x400c800) bpf$PROG_LOAD(0x5, 0x0, 0x0) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x2042, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) 2m58.02573644s ago: executing program 5 (id=1951): r0 = socket$inet_sctp(0x2, 0x1, 0x84) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$inet_udp_encap(0xffffffffffffffff, 0x11, 0x64, 0x0, 0x0) bind$inet(0xffffffffffffffff, &(0x7f00000001c0)={0x2, 0x4e24, @empty}, 0x10) syz_emit_ethernet(0x86, &(0x7f0000000300)={@local, @broadcast, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x78, 0x68, 0x0, 0x1, 0x88, 0x0, @remote, @local}, {0xfdfe, 0x4e24, 0x64, 0x0, @wg=@response={0x2, 0x2, 0x4, "a91e619d0e585fa4bfd47e5d1735f8420effb231577a95bf6747e87846e78914", "c12879e7cdfdddba37eee8e9ed774310", {"4055eb6ba23931509939391a5f781bb8", "97e1894bc0534ad35f01dfc6d1daa28a"}}}}}}}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r4 = syz_clone(0x400, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r4) ptrace(0x8, r4) r5 = syz_pidfd_open(r4, 0x0) process_mrelease(r5, 0x700000000000000) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, 0x0, 0x40448d4) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x4e22, @empty}, 0x10) setsockopt$inet_sctp_SCTP_INITMSG(r0, 0x84, 0x2, &(0x7f0000000040)={0x400, 0x6, 0x10, 0x3}, 0x8) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000000140)={0x0, 0x2}, 0x8) r7 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r7, &(0x7f0000000140)=[{0x0}], 0x1) sendto$inet(r0, 0x0, 0x0, 0x2000c8d4, &(0x7f00000000c0)={0x2, 0x4e22, @local}, 0x10) 2m56.729690457s ago: executing program 5 (id=1954): r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x3e, &(0x7f0000000240)=0x9, 0x4) bind$llc(r0, &(0x7f0000000040)={0x1a, 0x0, 0x0, 0x54}, 0x10) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/resume', 0x149a82, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x3, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r2, 0x0, 0x400000000007fe}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000001340)=@abs={0x0, 0x0, 0x104e24}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$IPSET_CMD_TEST(r1, &(0x7f0000000300)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x28, 0xb, 0x6, 0x101, 0x0, 0x0, {0x3, 0x0, 0x6}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x3}]}, 0x28}}, 0x20000055) socket$kcm(0x10, 0x3, 0x10) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x5dd93000) syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000380)='./file1\x00', 0xe, &(0x7f0000000540)={[{@init_itable}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x1ff}}, {}, {@noblock_validity}]}, 0x3, 0x451, &(0x7f0000000f80)="$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") mkdir(&(0x7f0000000080)='./bus\x00', 0x0) r6 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r6, 0x800c6613, &(0x7f0000000100)=@v1={0x0, @adiantum, 0x0, @desc1}) chdir(&(0x7f00000003c0)='./bus\x00') openat$binderfs(0xffffffffffffff9c, &(0x7f0000000340)='./binderfs2/custom0\x00', 0x0, 0x0) write$cgroup_int(r1, &(0x7f0000000040)=0x1c8, 0xfdef) 2m53.10203334s ago: executing program 5 (id=1957): syz_emit_ethernet(0x7a, &(0x7f0000000bc0)={@random="1fd286df0c43", @multicast, @void, {@ipv6={0x86dd, @gre_packet={0x1, 0x6, "f1fca8", 0x44, 0x2f, 0x1, @private2={0xfc, 0x2, '\x00', 0x1}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', {[], {{0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x880b, 0x0, 0x3}, {0x1, 0x0, 0x1}, {0x0, 0x0, 0x1}, {0x8, 0x88be, 0x0, {{0x5, 0x1, 0xb, 0x3, 0x0, 0x1, 0x6}, 0x1, {0x3}}}, {0x8, 0x22eb, 0x1, {{0x9, 0x2, 0x6, 0x2, 0x0, 0x2, 0x5, 0x1c}, 0x2, {0x6, 0x29, 0x2, 0x19, 0x0, 0x0, 0x0, 0x1}}}, {0x8, 0x6558, 0x2}}}}}}}, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r4, 0x6, 0xe, &(0x7f0000000740)={@in6={{0xa, 0x4e23, 0x7, @loopback, 0x3}}, 0x0, 0x0, 0x7, 0x0, "2431d0edd9b36cb74d7df7671eacf04be3b08353efa3641776f56c7556fd3713097bd0072577bc6fefb4cdc9e94e420b0ea4fbc5b07a32056eff5e6c42784b46ddab72b1b8fc87f208ad6db80d8dfe25"}, 0xd8) bind$inet6(r4, &(0x7f0000000140)={0xa, 0x4e22}, 0x1c) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB], 0x48) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) lsetxattr$security_capability(&(0x7f0000000080)='./cgroup/cgroup.procs\x00', &(0x7f0000000700), &(0x7f0000000040)=@v3={0x3000000, [{0x8, 0x8000}, {0x2, 0x2}], 0xee00}, 0x18, 0x1) creat(&(0x7f0000000000)='./cgroup/cgroup.procs\x00', 0xf21963aaf523cb02) listen(r4, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r4, 0x6, 0xe, &(0x7f00000001c0)={@in6={{0xa, 0x0, 0xfffffffe, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x8}}, 0x0, 0x0, 0x41, 0x0, "aeb81d8ee3a82d67eea9e5bdf2247481041a5b9cddbc936efc471c56ae3d5f6945d296a285858a891a3b4e7bff572ef69992da867f406182d70f47773434b8349435f2ad628d62a3b45bb98872fb1900"}, 0xd8) socket(0x11, 0x2, 0x0) unshare(0x600) 2m53.064085986s ago: executing program 0 (id=1887): r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) getpriority(0x0, r1) socket$inet6_tcp(0xa, 0x1, 0x0) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x20000000, '\x00', 0x0, 0x0}, 0x50) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) msgrcv(0x0, 0x0, 0xfffffffffffffeac, 0x1, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r5}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, {}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x8}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x7, 0x1, 0xb, 0x7, 0x8}, {0x7, 0x0, 0x0, 0x7}, {}, {}, {}, {0x18, 0x8, 0x2, 0x0, r4}, {}, {0x46, 0x0, 0x0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x5, 0x0, 0xb, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_GET(r7, 0x0, 0x110) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000680)={r6, 0xe0, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f0000001200)=[0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x13, 0x8, 0x0, 0x0}}, 0x10) syz_open_procfs$pagemap(0xffffffffffffffff, 0x0) 2m48.309045218s ago: executing program 76 (id=1937): socket$netlink(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000480)=0x7) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$xdp(0x2c, 0x3, 0x0) mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x81c0, 0x0) execveat(0xffffffffffffff9c, 0x0, 0x0, 0x0, 0x0) socket$kcm(0xa, 0x3, 0x3a) r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r3, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r3, 0x3ba0, &(0x7f0000000100)={0x48, 0x2, r4}) ioctl$IOMMU_HWPT_ALLOC$TEST(r3, 0x3b89, 0x0) close(r3) 2m48.293316219s ago: executing program 0 (id=1959): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) bpf$PROG_LOAD(0x5, 0x0, 0x0) sched_setscheduler(r1, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, &(0x7f0000000b40)='source', &(0x7f0000000040)='c:::\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) getrusage(0x0, 0x0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r2, 0x560a, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x20, 0x132, 0xc000}) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x8ef, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe) r3 = syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4) openat$proc_mixer(0xffffffffffffff9c, 0x0, 0x28800, 0x0) ioctl$sock_bt_bnep_BNEPCONNADD(r3, 0x400442c8, &(0x7f00000001c0)={r0, 0x1, 0x2}) fallocate(0xffffffffffffffff, 0x20, 0x4, 0x10000) syz_mount_image$nilfs2(&(0x7f0000000180), &(0x7f0000000f00)='./file0\x00', 0x3210052, &(0x7f00000005c0)={[{@errors_remount_ro}, {@errors_continue}, {@errors_continue}, {@errors_continue}, {@norecovery}, {@errors_remount_ro}, {@errors_remount_ro}, {@order_relaxed}], [], 0x2c}, 0x1, 0xf01, &(0x7f0000001e40)="$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") syz_mount_image$msdos(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x200040c, &(0x7f0000000200)=ANY=[], 0x0, 0x263, &(0x7f0000000340)="$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") 2m48.18209683s ago: executing program 5 (id=1960): ioctl$F2FS_IOC_RELEASE_VOLATILE_WRITE(0xffffffffffffffff, 0xf504, 0x0) r0 = socket$kcm(0x11, 0x2, 0x0) setsockopt$sock_attach_bpf(r0, 0x107, 0x14, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) getpeername$qrtr(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, 0x0, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) fcntl$addseals(r3, 0x409, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000008c0)={'bridge_slave_1\x00'}) sendmsg$nl_xfrm(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="c400000019000100fcffffff00000000ac14142c000000000000000000000000fe8000000000000000000000000000aa4e2200004e2400000a000060000000006ad85c5eb0d459af252f4c763dd639a87c18ccabc252069a64ea01edd2643f7ce2302c", @ANYRES32=0x0, @ANYRES32=0x0], 0xc4}}, 0x8044) r5 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r5, &(0x7f00000000c0)=[{&(0x7f0000000000)="580000001400192340834b80040d8c560a067fbc45ff810500000000000058000b480400945f6400947e570028925a01000000000000008000f0fffeffe809000000fff5dd000000100001000c081000418e00000004fcff", 0x58}], 0x1) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000440)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x4e24, 0x9, @rand_addr=' \x01\x00', 0x80000000}}, 0x80, 0x0, 0x0, 0x0, 0x10b8}, 0x20000000) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) socket(0x10, 0x80003, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000300)={'lo\x00'}) 2m32.46167687s ago: executing program 77 (id=1959): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) bpf$PROG_LOAD(0x5, 0x0, 0x0) sched_setscheduler(r1, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, &(0x7f0000000b40)='source', &(0x7f0000000040)='c:::\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) getrusage(0x0, 0x0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r2, 0x560a, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x20, 0x132, 0xc000}) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x8ef, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe) r3 = syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4) openat$proc_mixer(0xffffffffffffff9c, 0x0, 0x28800, 0x0) ioctl$sock_bt_bnep_BNEPCONNADD(r3, 0x400442c8, &(0x7f00000001c0)={r0, 0x1, 0x2}) fallocate(0xffffffffffffffff, 0x20, 0x4, 0x10000) syz_mount_image$nilfs2(&(0x7f0000000180), &(0x7f0000000f00)='./file0\x00', 0x3210052, &(0x7f00000005c0)={[{@errors_remount_ro}, {@errors_continue}, {@errors_continue}, {@errors_continue}, {@norecovery}, {@errors_remount_ro}, {@errors_remount_ro}, {@order_relaxed}], [], 0x2c}, 0x1, 0xf01, &(0x7f0000001e40)="$eJzs3U1sHNUdAPA368/EJl4DBQMlpNCKQMEOSdSmtyBQj4hL76CQ0AhDUUMPRHyYHhCVEEWKOFVIpeJCqZQitRKoUoV6antq1VtPqBcqVakU1EupEldx3qx3X/Ky64k9+/X7SX+/ffNm5/8f23FmZmffBmBsNTa+Hj68VITwzidnHn35qeK3l5bd1Vpj38bXIvaaIYSptn6RbO+zuODC+ZeOXa0twsGNr2U/PHau9dy5EMJa2Bc+Dc3w4crqFx+8+8j+j16fveWt08+8skO735LuBwAAjKKzf179+33//NMDi1+e3Xs0zLSWl8fnzdifi8f9B+KBcnm83Aid/aIt2k0n603EaCTrTSTrTSZ5JjP5ppLtTGXWm+6Sb6Jt2dX2EwAAAIZReV7bDEVjuaPfaCwvXz7vv+Szheli+bmTqydO9alQAAAAoLL/vLpx060Q2xa7Q/9rEEIIIYQQQox8rA1ADZsxMwA1dIn1hX5fgQAAAADGTTpf2BXWtnemrtbWmr3lP/dw4+rPh21Q9++//MOV//3X/MUBAKC6UT2aLPerPI4u5zFI5xGcSJ631eP/RrKdyS3WmZtXcFjmG8zVmX5fB1Wu/q3+HPslV386H+agytWfztM5qHL1z9RcR1W5+mdrrqOqXP27aq6jqlz9u2uuo6pc/XM111FVrv75muuoKlf/DTXXUVWu/j0111FVrv5hua02V3+z5jqqytW/WHMdVeXqv/HaTzszKP8/5Oq/qeY6qsrVf3PNdfTLnbEtvw97k/H28+f0nG5YzvEAAABg3P3X/H9CiDGP1l09A1CLEEKI0YwZ/9cIIQYgXu3blQcAAABgUJTvCyhfH1uPyvGJLuOTXcanuoxPdxmf6TIOAAAAhPC7N07c9nax+T7/3Hx42fmskvnwynmjyvmXtjpPRTof4Vbn47veec+uN/+wzFsGAADAeCm+++nF+x9974XFL8/uPdp29nsxnu+W84BOxmsDH8d+eV/AfNIvynPoo515Gpn10usDN+S29/h17igAAACMsfL8vRmKxnLbeXczNBrLy5vn40thqjhxcvX4gdgvP5/ljwtTM5eWP1Rz3QAAAEDvNs/3r37+P9e6oX66WH7u5OqJU5d75XWDpTDVaL8usLC5vGi/LtBMlh/MLD8U++Xnd35/YdfG8uVjP1h9apv3HQAAAMbFqRdPP/Pk6urxH3rggQcetB70+y8TAACw3T7//MzUjw7N//7y+/83578r3/+/L/abcW6/v8QVyvsEyvcBXPF+/Sc68yzk1nu+c71mst5EjHT+wdm27YS2+QbL5y3m8jU7tzOdyTeX5JtP8qXzFEwm65f59iTL0/kJy/UWkuXpPIyTSY4iyX93AAAAgLyVF559fuXUi6cfPPnsk08ff/r4c4cOHvnOkSMHHvr2Qysb9/WvtN/dDwAAAAyjzZt++10JAAAAAAAAAAAAAAAAAAAAjK86Pk6s3/sIAAAA4+7fr4YQ1oQQmbj8EZj9r0MIIYQQontMDEANQoiBjfX19JPmAQAAAHbWhfMvHWtvr7BWbGu+1taal5uLMW/Zzj/4t8VLUa527uHO6yW7t7Uaxl3dv//yD1f+91/b3vyz5YOe//41OjdwtFree1d+udSe//bJHvOn+/94tfz7k/z3ht7yr7+X5H+iWv77kvy72/MXW9j/56vlvz/mX4r9/fe05b/m97/z5z8T23I/dvWY/5vJ/j8Ves2f7H+zx4SJB2J+ABhHjX4XsEPKo4TyOHou9sv9jYebIb37YavH/41kO5PXXXnndsvjoFtjvzxemk/ylrZa/1zn9n6+p2KdqWG5qyRX/3b9HHdarv6pmuuoKlf/dM11VJWrf6bmOqrK1T9bcx1V5erv9Ty033L1D8t15Vz9czXXUVWu/vma66gqV/8NNddRVa7+rR6H9Euu/oWa66gqV3/Fy2q1y9W/WHMdVeXqv7HmOqrK1X9TzXVUlav/5prr6Jc7Yps7Hy7PPxfiWNlvJv2Zq3wvR/XaAgAAAAybf5n/T4gBjvhKcs15/9f3/RZCCCGEEGJoYvP2z/7Xcs1YX+/ftQf6b2ffzQzAoPL3f7z5+Y+36j//b21rHfSHf/9cS3kPf5H0SxNdxie7jE91GZ9OxtPf15ku4zcl212PyvGbu4x/pcv4ni7jt3YZX+oyfluX8du7jN/RZRwAAIDxcEtsnR8CAADA6Hr5Vx+/+Zt7nzi/+OXZvUfD9BXzzh+I/Zn42vobsZ/Oe1+aiq/5/zj2fxHbP8T2H8n67j8BAACAnVd+TozX/wEAAGB0lZ9T6vwfAAAARtdibJ3/AwAAwOi6MbbO/wEAAGCEFbNXXxzb8rrA3bHtdV4/AGDwfTW2d8Z2b2zviu3XYlseB9wT26/XVB8AsH1+9r2fHHm72Jzv/1AyfiEuL9srrF2+UlA0Omfy3xXb3bH9Ro/1pJ8H0Gv+0p4e8+xU/oXrzA8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAjI7GxtfDh5eKEN755MyjP51+86+Xlt3VWmPfxtci9pohhKnW88rRzf6v44oXzr90rL29GNsiHAxFKFrLw2PnWpnmQghrYV/4NDTDhyurX3zw7iP7P3p99pa3Tj/zyg5+Czr2DwAAAEbR/wMAAP//sMYaCg==") syz_mount_image$msdos(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x200040c, &(0x7f0000000200)=ANY=[], 0x0, 0x263, &(0x7f0000000340)="$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") 2m32.18660924s ago: executing program 78 (id=1960): ioctl$F2FS_IOC_RELEASE_VOLATILE_WRITE(0xffffffffffffffff, 0xf504, 0x0) r0 = socket$kcm(0x11, 0x2, 0x0) setsockopt$sock_attach_bpf(r0, 0x107, 0x14, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) getpeername$qrtr(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, 0x0, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) fcntl$addseals(r3, 0x409, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000008c0)={'bridge_slave_1\x00'}) sendmsg$nl_xfrm(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="c400000019000100fcffffff00000000ac14142c000000000000000000000000fe8000000000000000000000000000aa4e2200004e2400000a000060000000006ad85c5eb0d459af252f4c763dd639a87c18ccabc252069a64ea01edd2643f7ce2302c", @ANYRES32=0x0, @ANYRES32=0x0], 0xc4}}, 0x8044) r5 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r5, &(0x7f00000000c0)=[{&(0x7f0000000000)="580000001400192340834b80040d8c560a067fbc45ff810500000000000058000b480400945f6400947e570028925a01000000000000008000f0fffeffe809000000fff5dd000000100001000c081000418e00000004fcff", 0x58}], 0x1) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000440)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x4e24, 0x9, @rand_addr=' \x01\x00', 0x80000000}}, 0x80, 0x0, 0x0, 0x0, 0x10b8}, 0x20000000) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) socket(0x10, 0x80003, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000300)={'lo\x00'}) 50.21290683s ago: executing program 3 (id=2059): syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) r2 = getpgrp(0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r4 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r4, 0x1, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000007040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a030000000000000000000a00ecff0800010073797a300000000074000000160a010100000000000000000a00000008000740000000014000038008000140000000002c000380140001006e657464657673696d300000000000001400010076657468305f766c616e00000000000008000240000000070900010073797a30000000"], 0xbc}}, 0x0) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000f40)=[@cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x60}, 0x10040) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000003c0), 0x50) r6 = socket$inet_sctp(0x2, 0x5, 0x84) r7 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0xa0301, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r7, 0xc004500a, 0x0) ioctl$SNDCTL_DSP_GETODELAY(r7, 0x80045017, &(0x7f0000000000)) r8 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r8, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x1c, &(0x7f0000000000)=[@in6={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x9}]}, &(0x7f00000002c0)=0x10) getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r6, 0x84, 0x75, 0x0, &(0x7f0000000140)) 48.155927185s ago: executing program 3 (id=2060): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) signalfd4(r1, &(0x7f00000000c0)={[0xe]}, 0x8, 0x80800) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200000}) r3 = io_uring_setup(0x6668, &(0x7f0000000440)={0x0, 0x9759, 0x0, 0x3, 0x115}) io_uring_register$IORING_REGISTER_BUFFERS(r3, 0x0, &(0x7f0000000640)=[{0x0}], 0x178) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x3, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="6a0ac4ff02000000711069000322"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x2}, 0x94) io_uring_register$IORING_REGISTER_FILES(r3, 0x1e, &(0x7f0000000000)=[r3], 0x1) r4 = landlock_create_ruleset(&(0x7f0000000040)={0x4010, 0x3}, 0x18, 0x0) landlock_add_rule$LANDLOCK_RULE_NET_PORT(r4, 0x2, &(0x7f0000000240)={0x3, 0x3}, 0x0) syz_io_uring_setup(0x223d, &(0x7f0000000100)={0x0, 0x57d9, 0x100, 0x0, 0x1cd}, 0x0, &(0x7f00000001c0)) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r5, 0x8933, &(0x7f0000000100)) 31.947325747s ago: executing program 2 (id=1958): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000faff0000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000007100000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r3, 0x0, 0x5}, 0x18) syz_open_dev$evdev(0x0, 0x40002, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r1, 0x8983, 0x0) io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, 0x0, 0x0) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x1e, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, 0x0, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) syz_io_uring_setup(0x110, &(0x7f0000000380)={0x0, 0xfffffff8, 0x0, 0x2}, &(0x7f00000007c0), &(0x7f0000000800)) r4 = socket$kcm(0x2, 0x200000000000001, 0x106) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r5 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) openat$cgroup_ro(r5, &(0x7f0000000140)='cgroup.stat\x00', 0x275a, 0x0) sendmsg$inet(r4, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x0, @remote}, 0x10, 0x0}, 0x3000c041) r6 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r6, &(0x7f0000000000)={0x0, 0x258, &(0x7f0000000140)=[{&(0x7f0000000280)="89000000120081ae08060cdc030ec0007f03e3f70000000000e2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec08120800030006010000bdad446b9bbc7a46e3988285dcdf12f21308f868fece01955fed0009d78f0a947ee2b49e33538afa8af92347514f0b56a20ff27fff", 0x89}], 0x1}, 0x0) 31.911411095s ago: executing program 3 (id=2075): mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mkdir(&(0x7f00000000c0)='./bus\x00', 0x0) mkdir(&(0x7f0000000440)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000a00)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) r0 = open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) mknodat$loop(r0, &(0x7f0000001600)='./file1\x00', 0x0, 0x0) chdir(&(0x7f00000003c0)='./bus\x00') linkat(r0, &(0x7f0000000100)='./file1\x00', r0, &(0x7f0000000240)='./file0\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) splice(r0, &(0x7f0000000400)=0x7, r0, &(0x7f0000000480)=0x86, 0x2, 0xb) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f00000002c0)=@framed, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) connect$unix(r0, 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(0xffffffffffffffff, 0xc4c85512, &(0x7f0000000a40)={{0x2, 0x0, 0x40, 0x5, 'syz0\x00', 0x10000003}, 0x0, [0x0, 0xfffffffffffffffe, 0xfffffffffffffffe, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0xffffffffffffff52, 0x5, 0x1, 0x8000000000000000, 0x8, 0x0, 0x4000000000000, 0xfffffffffffffffe, 0xfffffffffffffff7, 0x0, 0xfffffffffffffff5, 0x0, 0x0, 0x3, 0x0, 0x9, 0x9, 0x2, 0x0, 0x7fffffff, 0x85, 0x3, 0x0, 0xb9e4, 0x0, 0x100000000000000, 0xfffffffffffffffe, 0x0, 0xfffffffffffffffb, 0x6, 0x6, 0x0, 0x3, 0x61, 0x9, 0xfffffffffffffc, 0x8, 0xfffffffffffffffe, 0x0, 0x0, 0x200000000000, 0x1, 0xfffffffffffffff8, 0x0, 0x0, 0x4, 0xc000000000000000, 0xfffffffffffffffc, 0x0, 0x0, 0x7, 0x0, 0xcb, 0xfffffffffffffffc, 0x0, 0x200, 0x9, 0x5, 0xffff, 0xfffffffffffffff8, 0x5, 0x0, 0x0, 0x10001, 0xebc, 0x0, 0x4000000000000, 0x74c, 0x6, 0x6, 0x400000000067, 0x7, 0x10000000, 0x7fffffff, 0x401, 0x0, 0x1, 0x76e, 0x0, 0x4, 0x5, 0x4, 0x0, 0x1, 0x1, 0xf32, 0x9, 0x2001, 0x0, 0x0, 0x0, 0xa562, 0x0, 0x80000005, 0xffffffffffffffff, 0x0, 0x5, 0x8, 0x1, 0x0, 0x2, 0xfffffffffffffffe, 0x0, 0x6, 0xfffffffffffffffb, 0x0, 0x0, 0x8, 0x0, 0x7, 0x4, 0x1553, 0x40, 0x0, 0x1, 0x0, 0xf65]}) unlink(&(0x7f00000002c0)='./file0\x00') symlink(&(0x7f0000000000)='.\x00', &(0x7f0000000040)='./file0\x00') rename(&(0x7f0000000080)='./file0/file0\x00', &(0x7f0000000140)='./file1\x00') 29.731824988s ago: executing program 2 (id=2063): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000200)=0x474c, 0x4) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r0, &(0x7f0000000480)={0x2, 0x4e22, @multicast1}, 0x10) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x9, 0x3, 0x10004, 0x5}, 0x50) r2 = getpgrp(0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r4 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r4, 0x1, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) sendmsg$netlink(0xffffffffffffffff, 0x0, 0x0) openat$ptp0(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) io_setup(0x8, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x14, &(0x7f0000000580)=ANY=[@ANYBLOB="1802000008000000000000000000000018010000786c6c2500000000070000007b1af8ff00000000bfa10000000000000701", @ANYRES32=r1], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) alarm(0x81) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000500)={'veth1\x00', &(0x7f0000000200)=@ethtool_per_queue_op={0x4b, 0xf, [0x1, 0x1, 0x107fff, 0x10, 0x4, 0x9, 0xa4, 0xffb, 0x7, 0xb6b, 0x800c1, 0x4, 0x1, 0x3, 0x9, 0xff, 0x1000, 0xc, 0x3, 0x3, 0x80000001, 0xfffffffa, 0x0, 0x1, 0x9, 0x4, 0x7, 0x5, 0x100000, 0x762, 0x3, 0x63c, 0xe, 0x6, 0x100, 0x6, 0x1bfe, 0xb, 0x40, 0x40bed4, 0x8, 0xffffffff, 0x3, 0x0, 0x11000, 0x8, 0x5, 0x79b, 0x5, 0x1, 0x7f, 0x4, 0xa, 0x7, 0xf, 0x101, 0xa, 0x1fa0860a, 0x7, 0xa9, 0x81, 0x2, 0x180000, 0x4003, 0x8b, 0x5, 0x2af, 0x3, 0x5, 0x2, 0x1, 0x9, 0x6, 0x7, 0x4009, 0x0, 0x4, 0x100002, 0x8, 0x752, 0x0, 0x3, 0x0, 0x10000, 0x3f6, 0xffffffff, 0x6, 0x6, 0x9, 0x80000000, 0xfdffffff, 0x2, 0xfffffffe, 0x84, 0x100, 0x5, 0x252, 0x81, 0xb, 0x4, 0x20006, 0xc50, 0x2, 0xb, 0x2, 0xd9a, 0xc8, 0x2a2, 0xfffffffd, 0x3, 0x2, 0x5, 0x8, 0x0, 0x4, 0x2, 0x40, 0x8, 0x20004, 0x4, 0x401, 0x66cd, 0x8, 0x8, 0x5, 0x1fc, 0x1ff, 0xffffffff]}}) poll(&(0x7f0000000000), 0x20000000000000b5, 0x9) 25.655172915s ago: executing program 2 (id=2066): bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0xc, &(0x7f0000000800)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000a48500000004000000850000000f00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bind$inet(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) lstat(&(0x7f0000000180)='./file2\x00', &(0x7f0000000300)) r3 = syz_open_dev$vbi(0x0, 0x0, 0x2) dup(r3) syz_emit_vhci(0x0, 0x0) syz_emit_vhci(&(0x7f00000001c0)=ANY=[@ANYBLOB="ff18f53f259bfa4fc90410c9bed5"], 0x7) syz_emit_vhci(&(0x7f0000000380)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x1, 0x1, 0xfffffffffffffd88}, @l2cap_cid_le_signaling={{}, @l2cap_ecred_conn_rsp={{0x18, 0x1}, {0x5952, 0x7f, 0x421, 0x6, [0x2, 0xff, 0x6, 0x3ff, 0x553d, 0x7fff]}}}}, 0x2b) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0xfe, 0x7fff0006}]}) r5 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000240), 0xa2003, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r5, 0xc0184800, &(0x7f0000000100)={0x20004, r4, 0x2}) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x8, &(0x7f0000000440)) inotify_add_watch(0xffffffffffffffff, 0x0, 0xc00) r6 = syz_open_dev$dri(&(0x7f0000000280), 0x1ff, 0x140) close_range(r6, 0xffffffffffffffff, 0x0) 25.647780609s ago: executing program 7 (id=2069): socket$netlink(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000480)=0x7) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$xdp(0x2c, 0x3, 0x0) mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x81c0, 0x0) execveat(0xffffffffffffff9c, 0x0, 0x0, 0x0, 0x0) socket$kcm(0xa, 0x3, 0x3a) r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r3, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r3, 0x3ba0, &(0x7f0000000100)={0x48, 0x2, r4, 0x0, 0x0, 0x0, 0x0}) ioctl$IOMMU_HWPT_ALLOC$NONE(r3, 0x3b89, &(0x7f0000000180)={0x28, 0x1, r5, r4, 0x0, 0x0, 0x0, 0x0, 0x0}) close(r3) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$lock(r6, 0x24, &(0x7f0000000040)={0x2, 0x2, 0x1, 0x7}) syz_mount_image$msdos(&(0x7f00000003c0), &(0x7f0000000340)='.\x00', 0x126a4b5, &(0x7f0000004140)=ANY=[@ANYRES16, @ANYRES64, @ANYRES16, @ANYRES16, @ANYRESDEC, @ANYRES16, @ANYRES16, @ANYRES32, @ANYRESHEX=0x0, @ANYRES32], 0x5, 0x0, &(0x7f0000000000)) 24.454814811s ago: executing program 7 (id=2070): syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x3000000, &(0x7f00000006c0), 0x1, 0x513, &(0x7f0000000c40)="$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") prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) io_getevents(0x0, 0x3, 0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000fd0f00000700"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r4}, 0x10) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) fgetxattr(r5, &(0x7f00000003c0)=ANY=[], 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r3}, 0x0, &(0x7f0000000080)=r4}, 0x20) r6 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r6, &(0x7f0000000340)=@nameseq={0x1e, 0x1, 0x3, {0x43}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r6, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x0, 0x3, 0x3}, 0x10) sendmsg$tipc(r6, &(0x7f00000005c0)={&(0x7f0000000000), 0x10, &(0x7f0000000480)=[{0x0}], 0x1}, 0x0) timer_create(0x0, 0x0, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={0x0, r7, 0x0, 0x4}, 0x18) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x0) quotactl$Q_GETNEXTQUOTA(0xffffffff80000901, &(0x7f0000000000)=@loop={'/dev/loop', 0x0}, 0x0, 0xffffffffffffffff) 24.325555907s ago: executing program 1 (id=2071): socket$kcm(0x2, 0x3, 0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) socket$kcm(0x11, 0x3, 0x0) socket$inet6(0xa, 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000a80)) socket$inet_udp(0x2, 0x2, 0x0) userfaultfd(0x1) socket$nl_netfilter(0x10, 0x3, 0xc) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0x0) socket$nl_route(0x10, 0x3, 0x0) r0 = socket(0x200000000000011, 0x4000000000080002, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(0xffffffffffffffff, 0x4010640d, &(0x7f0000000000)={0x14, 0x2}) sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYRES32, @ANYRES16=0x0, @ANYRES8=r0], 0x1c}, 0x1, 0x0, 0x0, 0x20000844}, 0x48885) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1400000007"], 0x50) pwrite64(0xffffffffffffffff, &(0x7f0000000000)='L', 0x1, 0x7ffffffe) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r1, &(0x7f0000000000), 0xd) 22.862244973s ago: executing program 1 (id=2072): r0 = bpf$MAP_CREATE(0x0, 0x0, 0x48) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) setrlimit(0x8, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000cc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x8e383, 0x0) setreuid(0xee01, 0x0) r5 = openat$rtc(0xffffffffffffff9c, 0x0, 0x140, 0x0) ioctl$RTC_UIE_ON(r5, 0x7003) ioctl$RTC_AIE_ON(r5, 0x7001) ioctl$RTC_SET_TIME(r5, 0x4024700a, 0x0) bpf$MAP_LOOKUP_BATCH(0x19, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0), 0x0, 0x7, r0}, 0x38) bpf$MAP_CREATE(0x0, 0x0, 0x50) r6 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_IP(r6, &(0x7f0000000340)={0x3, 0x40, 0xfa00, {{0xa, 0x4e23, 0x7ee, @empty, 0x1}, {0xa, 0x4e21, 0x8, @dev={0xfe, 0x80, '\x00', 0x37}, 0x108}, 0xffffffffffffffff, 0xb}}, 0x48) syz_emit_ethernet(0x7a, &(0x7f00000002c0)={@local, @local, @void, {@ipv6={0x86dd, @gre_packet={0x0, 0x6, '\x00', 0x44, 0x2f, 0x0, @remote, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, {[], {{0x0, 0x0, 0x1, 0x0, 0x2, 0x1, 0x0, 0x1, 0x880b, 0x0, 0xfffe}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x57}, {}, {0x8, 0x88be, 0x0, {{0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}}}}}}}}}, 0x0) 21.45614189s ago: executing program 1 (id=2076): syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) r2 = getpgrp(0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r4 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r4, 0x1, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000007040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a030000000000000000000a00ecff0800010073797a300000000074000000160a010100000000000000000a00000008000740000000014000038008000140000000002c000380140001006e657464657673696d300000000000001400010076657468305f766c616e00000000000008000240000000070900010073797a30000000"], 0xbc}}, 0x0) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000f40)=[@cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x60}, 0x10040) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000003c0), 0x50) r6 = socket$inet_sctp(0x2, 0x5, 0x84) r7 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0xa0301, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r7, 0xc004500a, 0x0) ioctl$SNDCTL_DSP_GETODELAY(r7, 0x80045017, &(0x7f0000000000)) r8 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r8, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x1c, &(0x7f0000000000)=[@in6={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x9}]}, &(0x7f00000002c0)=0x10) getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r6, 0x84, 0x75, 0x0, &(0x7f0000000140)) 21.455385423s ago: executing program 7 (id=2077): munmap(&(0x7f0000002000/0x1000)=nil, 0x1000) bpf$MAP_CREATE(0x0, 0x0, 0xfffffffffffffddf) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x800, &(0x7f0000000700), 0xff, 0x49b, &(0x7f0000001040)="$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") r0 = creat(&(0x7f0000000280)='./bus\x00', 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000340)=@file={0x0, './file1/file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000200)=@framed, &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r4}, 0x10) pwritev2(r0, &(0x7f00000015c0)=[{&(0x7f0000000080)="ec", 0x1}], 0x1, 0xfffff, 0x0, 0x0) r5 = open(&(0x7f0000000200)='./bus\x00', 0x44000, 0x0) finit_module(r5, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) syz_mount_image$hfsplus(&(0x7f0000000100), &(0x7f0000000000)='./bus\x00', 0x8081, &(0x7f0000000300)=ANY=[@ANYRESOCT=r3], 0xbd, 0x6f4, &(0x7f00000023c0)="$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") mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) socketpair$unix(0x1, 0x2, 0x0, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0) syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x8, &(0x7f0000000240)=ANY=[@ANYRES32=0x0, @ANYRESOCT, @ANYRESDEC], 0x1, 0x5505, &(0x7f0000002480)="$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") r6 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x181242, 0x148) pwrite64(r6, &(0x7f0000000140)='2', 0xfdef, 0xfecc) 19.188337107s ago: executing program 1 (id=2078): r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = syz_io_uring_setup(0x49a, 0x0, 0x0, 0x0) r5 = syz_io_uring_setup(0x598, &(0x7f0000000240)={0x0, 0x2000b728, 0x3180, 0x8000, 0xb}, &(0x7f0000000180)=0x0, &(0x7f0000000140)=0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@metacopy_on}]}) mknodat$loop(0xffffffffffffffff, &(0x7f00000002c0)='./file1\x00', 0x10, 0x0) chdir(&(0x7f00000003c0)='./bus\x00') linkat(0xffffffffffffffff, &(0x7f0000000100)='./file1\x00', 0xffffffffffffffff, 0x0, 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000a00)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000600)='./file1\x00', 0x2) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, 0x0, 0x0, 0x4) r8 = syz_open_dev$vim2m(&(0x7f0000000040), 0xffffffffffffffff, 0x2) syz_io_uring_submit(r6, r7, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x40, 0x4000, @fd=r8, 0x1, 0x0, 0x0, 0x16, 0x1}) io_uring_enter(r5, 0x627, 0x4c1, 0x43, 0x0, 0x30) io_uring_enter(r4, 0x628, 0xc88d, 0x43, 0x0, 0x0) 18.965294715s ago: executing program 3 (id=2079): bind$bt_l2cap(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x6, 0x7, &(0x7f0000006680)) openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/custom1\x00', 0x800, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x4084) r1 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000000), 0x21182, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x3, 0x0) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={0xffffffffffffffff, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x4c) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, 0x0, 0x0, 0x5, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$TIOCNXCL(r1, 0x540d) ptrace(0x10, r2) r3 = socket$l2tp(0x2, 0x2, 0x73) bind$inet(r3, &(0x7f0000000080)={0x2, 0x0, @multicast1}, 0x10) connect$inet(r3, &(0x7f0000000200)={0x2, 0x4e22, @local}, 0x10) sendmmsg$inet(r3, &(0x7f0000000900)=[{{0x0, 0x20, 0x0}, 0x700}], 0x40000cf, 0x0) openat$udambuf(0xffffffffffffff9c, 0x0, 0x2) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000000a40)=@raw={'raw\x00', 0x9, 0x3, 0x28c, 0x0, 0xffffffff, 0xffffffff, 0x148, 0xffffffff, 0x278, 0xffffffff, 0xffffffff, 0x278, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@loopback, @loopback, [0x0, 0xffffffff, 0xff000000, 0xffffffff], [0xffffffff, 0xff000000, 0xffffffff], 'wg2\x00', 'gretap0\x00', {}, {0xff}, 0x87, 0x4, 0x9, 0x12}, 0x0, 0xa4, 0x100}, @common=@inet=@HMARK={0x5c, 'HMARK\x00', 0x0, {@ipv4=@multicast2, [0xff000000, 0x0, 0xffffffff, 0xff], 0x4e22, 0x4e22, 0x4e23, 0x4e23, 0x1, 0x4, 0x98, 0x7, 0x6}}}, {{@uncond, 0x0, 0xa4, 0xc4}, @unspec=@TRACE={0x20}}], {{'\x00', 0x0, 0xa4, 0xc8}, {0x24}}}}, 0x2e8) 15.639334557s ago: executing program 3 (id=2080): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="1805000000000000000000004b64ffec8500000075000000040000000700000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180), 0x800, 0x0) r5 = syz_io_uring_setup(0xd2, &(0x7f0000000480)={0x0, 0x0, 0x100, 0x0, 0x335}, &(0x7f0000000080)=0x0, &(0x7f0000000840)=0x0) inotify_add_watch(0xffffffffffffffff, &(0x7f0000000040)='./cgroup.cpu/cgroup.procs\x00', 0x6000d16) lsetxattr$security_capability(0x0, 0x0, 0x0, 0x0, 0x1) munmap(&(0x7f0000001000/0x3000)=nil, 0x3000) r8 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r8, 0x0, 0x0) setsockopt$SO_TIMESTAMPING(r8, 0x1, 0x25, &(0x7f0000000040)=0x2263, 0x41) connect$inet(r8, &(0x7f0000001bc0)={0x2, 0x4e23, @loopback}, 0x10) sendto(r8, &(0x7f0000000740)='P', 0x1, 0x48044, 0x0, 0x0) sendto$inet(r8, 0x0, 0x0, 0x52, 0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r6, r7, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r4, 0xffffffffffffffff, &(0x7f0000000900)=[{&(0x7f0000001800)=""/200, 0xc8}, {0x0}], 0x2}) io_uring_enter(r5, 0x47ba, 0x636d, 0x0, 0x0, 0x0) 15.552676978s ago: executing program 7 (id=2090): prlimit64(0x0, 0xe, &(0x7f0000000600)={0x9, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = userfaultfd(0x80001) syz_open_dev$tty20(0xc, 0x4, 0x1) r4 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r4, &(0x7f0000000000)={0xa, 0xe22, 0x0, @empty}, 0x7d) r5 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r5, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @rand_addr, 0xfffffe7d}, 0x1c) setsockopt$SO_BINDTODEVICE(r5, 0x1, 0x19, &(0x7f0000000000)='macvlan1\x00', 0x10) r6 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$TCPDIAG_GETSOCK(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=ANY=[@ANYBLOB="540000001200010000000000000000000a03000000004e2200000100ffff0000000000000000000000000000000000000000000000000000d99b7ee881798bd57605e5c10393c2b2ddda696081f7f03618e319d2b9b1350683f0c7994e0bb441f778c48efb9257a02c73af9cbfd95b19851d39e3be151152a0fa7ae1130754c5251c122e9a34d9577cf2449d8a48cd70981beab532ecee0883c8f96a11a384f423cbbe830ddb9faa5b7acefc55dfc5dfd0f44380718d1f0b2632335d4f4763c7d8228ee8f8b4ec4a8220ae8908488224d6505e09cedd7c40e3e58e5b1aebed0f3c244893d218359331fc17c295ed12bf9f5bf89a112dd14b699c6adc387326d070fc2b3d05e3c24582d9f8a4b53c870a338df4a68dacd7e3039384f850a4bd9e7c73d5c85094dd4ac691e3f032c26862eaf16d63ca477e7fd7329984b8c57058824173783a9e", @ANYRES32=0x0, @ANYBLOB="0500000003000000080000000000"], 0x54}}, 0x20004010) getsockopt$inet_sctp6_SCTP_AUTO_ASCONF(0xffffffffffffffff, 0x84, 0x1e, &(0x7f0000000100), 0x0) ioctl$UFFDIO_API(r3, 0xc018aa3f, 0x0) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000000140)={{&(0x7f0000ff2000/0xe000)=nil, 0xe000}, 0x2}) mlock(&(0x7f0000ffc000/0x4000)=nil, 0x4000) r7 = socket(0x10, 0x2, 0x0) write(r7, &(0x7f0000000040)="1c0000001a009b8a140000003b9b301f00"/27, 0x1b) recvmmsg(r7, &(0x7f0000002880)=[{{0x0, 0x0, 0x0}, 0x3}, {{0x0, 0x0, &(0x7f0000002740)}, 0x10001}], 0x2, 0x0, &(0x7f00000001c0)={0x77359400}) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r8 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000002180)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) close_range(r8, 0xffffffffffffffff, 0x0) 14.885428963s ago: executing program 2 (id=2081): syz_mount_image$hfsplus(&(0x7f00000000c0), &(0x7f0000000080)='./file1\x00', 0x80, &(0x7f0000000300)=ANY=[@ANYBLOB='nobarrier,gid=', @ANYRESHEX=0x0, @ANYBLOB="2c6465636f6d706f73652c666f7263652c666f7263652c756d61736b3d30303030303030303030303030303030303030303031302c6e6c733d64656661756c742c00d4023937168c6a03faba6a3338c76bbb2cc123a1966858d8147d2c8f6696a3afb73a4233a7d6d17cbf793d9f3d5dc088fadadfdb7688c6a99fb22e09bb9b1fbe01fd94fae1e35f93fdbc2d26ac49430c71a16ad073e2416238a4b5f8c9877c553b2690fd7148fad9a9579680000d1a5caad58758c05f80c742dfc96510890d6ab62c3d6bc97ea00353e76f0f436500c88ef1b3ec52d6d1b6189c2c09e76160176ee4c21e9bcebdcac3565569f673575a04183f4095c2743d1547baa170a07fb5b39c0af610bbf13953ecb5e354858f41aa5b7bf2fbde", @ANYRESDEC, @ANYRESDEC], 0x44, 0x6f7, &(0x7f0000001f80)="$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") bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, 0x2}, 0x94) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000006c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_MAX_THREADS(r0, 0x40046205, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000001a80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000480)='{'}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() process_vm_writev(r1, &(0x7f0000000040)=[{&(0x7f0000000480)=""/173, 0xad}, {&(0x7f0000000540)=""/220, 0xdc}], 0x2, &(0x7f0000000880)=[{&(0x7f0000000640)=""/217, 0xd9}, {&(0x7f0000000180)=""/109, 0x6d}, {&(0x7f0000000740)=""/65, 0x41}, {&(0x7f00000007c0)=""/153, 0x99}], 0x4, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$unix(0x1, 0x5, 0x0) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="5c01000010000100feffffff00010000fe880000000000000000000000000001fc010000000000000000000000000001000107144e230005000000003a000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ff020000000000000000000000000001000004d46c00000020010000000000000000000000000002000000000000000092010000000000000600000000000000ffff0000000000001c250800000000000200000000000000f8ffffffffffffff0000000000000000ff09000000ffffff00000000000000001f00000000000000feffffffffffffff02000000fcffffff000000002abd700004350000020001002000000000000000480003006465666c6174650000ff00"/202], 0x15c}, 0x1, 0x0, 0x0, 0x8801}, 0x0) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000740)=@newsa={0x140, 0x1a, 0x1, 0xfffffffe, 0x100, {{@in=@initdev={0xac, 0x1e, 0x1, 0x0}, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x1, 0x717, 0x4e23, 0x5, 0xa, 0x0, 0x20, 0x3a}, {@in6=@mcast2, 0x4d4, 0x6c}, @in6=@private2={0xfc, 0x2, '\x00', 0x1}, {0xfe, 0x1000000000000192, 0x9ba3, 0xffff, 0x8251c, 0x5, 0xfffffffffffffffc, 0x4}, {0xffffffffffffffff, 0x2, 0x1f, 0xfffffffffffffffe}, {0xfffffffe, 0x3fc}, 0x7e, 0x3505, 0x2, 0x1, 0x0, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}, @XFRMA_IF_ID={0x8, 0x1f, 0x2}]}, 0x140}}, 0x844) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x10, 0x4, 0x8, 0x8}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x6, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r7}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x800000}, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x6, 0x0, 0xd, 0x9, 0x0, 0x0, 0xffffff1f}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x7, 0x1, 0xb, 0x7, 0x2}, {0x7, 0x0, 0x0, 0x8, 0x0, 0x0, 0xfffffdff}, {0x7, 0x1, 0xb, 0x4, 0x9}, {}, {0x4, 0x0, 0x6}, {0x18, 0x2}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x5}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$nl_generic(0x10, 0x3, 0x10) 2.512132793s ago: executing program 9 (id=1976): mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mkdir(&(0x7f00000000c0)='./bus\x00', 0x0) mkdir(&(0x7f0000000440)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000a00)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) r0 = open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) mknodat$loop(r0, &(0x7f0000001600)='./file1\x00', 0x0, 0x0) chdir(&(0x7f00000003c0)='./bus\x00') linkat(r0, &(0x7f0000000100)='./file1\x00', r0, &(0x7f0000000240)='./file0\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000240)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f00000002c0)=@framed, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) connect$unix(r0, 0x0, 0x0) unlink(&(0x7f00000002c0)='./file0\x00') symlink(&(0x7f0000000000)='.\x00', &(0x7f0000000040)='./file0\x00') rename(&(0x7f0000000080)='./file0/file0\x00', &(0x7f0000000140)='./file1\x00') 2.509864289s ago: executing program 2 (id=2093): r0 = syz_open_dev$dri(&(0x7f0000000080), 0xb, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) unshare(0x8000000) r3 = semget$private(0x0, 0x4000, 0x0) socket$nl_generic(0x10, 0x3, 0x10) madvise(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0xc) r4 = userfaultfd(0x80801) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000ffc000/0x1000)=nil, 0x1000}, 0x3}) r5 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$EBT_SO_SET_ENTRIES(r5, 0x0, 0x80, &(0x7f00000000c0)=@filter={'filter\x00', 0xe, 0x88, 0x90, [0x0, 0x80000580, 0x800005b0, 0x800005e0], 0x0, 0x0, &(0x7f0000000580)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe, 0x88}, {0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xffffffffffffffff, 0x8800}]}, 0x108) ioctl$UFFDIO_UNREGISTER(r4, 0x8010aa01, &(0x7f0000000000)={&(0x7f0000ffc000/0x3000)=nil, 0x3000}) semctl$SETVAL(r3, 0x1, 0x10, &(0x7f0000000100)=0xffffd44f) semctl$SETALL(0x0, 0x0, 0x11, &(0x7f0000000740)) ioctl$MEDIA_IOC_ENUM_LINKS(0xffffffffffffffff, 0xc01c7c02, 0x0) semctl$SETALL(0x0, 0x0, 0x11, &(0x7f00000001c0)=[0xd, 0x200, 0xf89]) semctl$IPC_INFO(0x0, 0x0, 0x3, 0x0) ioctl$MEDIA_IOC_ENUM_ENTITIES(0xffffffffffffffff, 0xc1007c01, 0x0) ioctl$MEDIA_IOC_ENUM_LINKS(0xffffffffffffffff, 0xc01c7c02, &(0x7f0000000040)={0x80000000, &(0x7f0000000000), &(0x7f00000001c0)}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x1, 0x1, &(0x7f0000000d00)=ANY=[@ANYBLOB="cc747748500b4f2c1fa976377a90f64d3fdcb9d1dccba29bf1f81d17a6"], &(0x7f0000000040)='GPL\x00', 0x7, 0x0, 0x0, 0x0, 0xa0}, 0x94) mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x300000f, 0x810, r0, 0x100000) 2.503164539s ago: executing program 1 (id=2094): openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x42, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=@newtfilter={0x40, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {}, {0xd}}, [@filter_kind_options=@f_basic={{0xa}, {0x10, 0x2, [@TCA_BASIC_EMATCHES={0xc, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xffff}}]}]}}]}, 0x40}}, 0x0) sendmsg$NFT_MSG_GETSETELEM(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[], 0x80}}, 0x8000) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, 0x0, 0x20044000) r5 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r5) ptrace$pokeuser(0x6, r5, 0x388, 0x41d9fda7) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="1e00000000000000ca0000000300000000000000", @ANYRES32=0x1, @ANYBLOB="00000000080000000000000000000000d254e86ab8862db32a000000002df51900000000", @ANYRES32=0x0, @ANYRES32], 0x50) close(0x3) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x18, 0x22, &(0x7f00000006c0)=@ringbuf={{0x18, 0x2}, {{0x18, 0x1, 0x1, 0x0, r6}, {0x7, 0x0, 0x2}, {}, {0x85, 0x0, 0x0, 0x59}}, {}, [@map_val={0x18, 0x4, 0x2, 0x0, r1, 0x0, 0x0, 0x0, 0x3156}, @ldst={0x2, 0x3, 0x2, 0x8, 0x6, 0xffffffffffffffff, 0x10}, @ringbuf_query, @jmp={0x5, 0x1, 0x6, 0x0, 0x7, 0xffffffffffffffc0, 0x1}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r6}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}, @btf_id={0x18, 0x5, 0x3, 0x0, 0x4}]}, &(0x7f0000000c80)='syzkaller\x00'}, 0x94) sendmsg$ETHTOOL_MSG_RINGS_GET(0xffffffffffffffff, 0x0, 0x1) socket(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="1b00000000000000f3ae993a8d000000000080", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) 2.493854323s ago: executing program 7 (id=2095): ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, 0x0) ioctl$SNDRV_TIMER_IOCTL_PARAMS(0xffffffffffffffff, 0x40505412, 0x0) ioctl$SNDRV_TIMER_IOCTL_START(0xffffffffffffffff, 0x54a0) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(0xffffffffffffffff, 0x54a2) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)={0x73622a85, 0x101, 0x1}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000280)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r4 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0x3, &(0x7f0000000740)=@framed, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r7}, 0x18) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f00000002c0)={0x73622a85, 0x10a}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000e00)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000300)={0x4c, 0x0, &(0x7f0000000540)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x58, 0x18, &(0x7f00000007c0)={@flat, @ptr={0x70742a85, 0x0, &(0x7f0000000640)=""/198, 0xc6, 0x0, 0x5}, @flat=@weak_handle={0x77682a85, 0x1001}}, &(0x7f0000000200)={0x0, 0x18, 0x40}}}], 0x0, 0x0, 0x0}) 2.487428814s ago: executing program 3 (id=2096): pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f0000000700)='./file1\x00', 0x0, &(0x7f00000012c0), 0xfe, 0x244, &(0x7f0000000400)="$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") r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101842, 0x0) ioctl$FS_IOC_SETFLAGS(r2, 0x40086602, &(0x7f00000005c0)) r3 = openat(0xffffffffffffff9c, &(0x7f0000000980)='./file1\x00', 0x42, 0xc2) pwrite64(r3, &(0x7f0000000080)="cc", 0x1, 0x200980) ioctl$EXT4_IOC_MIGRATE(r2, 0x6609) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000002c0)='contention_begin\x00', r4, 0x0, 0xd}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x4, 0x80}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000540)=0x4) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r5 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r5, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_init_net_socket$x25(0x9, 0x5, 0x0) r6 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) r7 = openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r6, r7, 0x0, 0x20000023896) setsockopt$IPT_SO_SET_REPLACE(r7, 0x0, 0x40, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00'}, 0x10) vmsplice(r1, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'veth1_vlan\x00'}) splice(r0, 0x0, 0xffffffffffffffff, 0x0, 0x10d00, 0xf) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0x1, 0x100008, 0x4, 0x8, 0x1, 0xffffffffffffffff, 0x400000}, 0x50) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000180)={r8, &(0x7f0000000000), 0x0}, 0x20) ptrace(0x10, 0x0) 659.311213ms ago: executing program 9 (id=2082): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000200)=0x474c, 0x4) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r0, &(0x7f0000000480)={0x2, 0x4e22, @multicast1}, 0x10) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x9, 0x3, 0x10004, 0x5}, 0x50) r2 = getpgrp(0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r4 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r4, 0x1, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) sendmsg$netlink(0xffffffffffffffff, 0x0, 0x0) openat$ptp0(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) io_setup(0x8, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x14, &(0x7f0000000580)=ANY=[@ANYBLOB="1802000008000000000000000000000018010000786c6c2500000000070000007b1af8ff00000000bfa10000000000000701", @ANYRES32=r1], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) alarm(0x81) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000500)={'veth1\x00', &(0x7f0000000200)=@ethtool_per_queue_op={0x4b, 0xf, [0x1, 0x1, 0x107fff, 0x10, 0x4, 0x9, 0xa4, 0xffb, 0x7, 0xb6b, 0x800c1, 0x4, 0x1, 0x3, 0x9, 0xff, 0x1000, 0xc, 0x3, 0x3, 0x80000001, 0xfffffffa, 0x0, 0x1, 0x9, 0x4, 0x7, 0x5, 0x100000, 0x762, 0x3, 0x63c, 0xe, 0x6, 0x100, 0x6, 0x1bfe, 0xb, 0x40, 0x40bed4, 0x8, 0xffffffff, 0x3, 0x0, 0x11000, 0x8, 0x5, 0x79b, 0x5, 0x1, 0x7f, 0x4, 0xa, 0x7, 0xf, 0x101, 0xa, 0x1fa0860a, 0x7, 0xa9, 0x81, 0x2, 0x180000, 0x4003, 0x8b, 0x5, 0x2af, 0x3, 0x5, 0x2, 0x1, 0x9, 0x6, 0x7, 0x4009, 0x0, 0x4, 0x100002, 0x8, 0x752, 0x0, 0x3, 0x0, 0x10000, 0x3f6, 0xffffffff, 0x6, 0x6, 0x9, 0x80000000, 0xfdffffff, 0x2, 0xfffffffe, 0x84, 0x100, 0x5, 0x252, 0x81, 0xb, 0x4, 0x20006, 0xc50, 0x2, 0xb, 0x2, 0xd9a, 0xc8, 0x2a2, 0xfffffffd, 0x3, 0x2, 0x5, 0x8, 0x0, 0x4, 0x2, 0x40, 0x8, 0x20004, 0x4, 0x401, 0x66cd, 0x8, 0x8, 0x5, 0x1fc, 0x1ff, 0xffffffff]}}) poll(&(0x7f0000000000), 0x20000000000000b5, 0x9) 658.848628ms ago: executing program 7 (id=2083): r0 = syz_open_dev$usbfs(&(0x7f0000000080), 0x75, 0x109301) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[], 0x34}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r2}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, 0x0, 0x0) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000001a300)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$phonet_pipe(0x23, 0x5, 0x2) sendmsg$TCPDIAG_GETSOCK(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000580)=ANY=[@ANYBLOB="e00100001200000429bd7000ffdbdf2525000a7f4e244e24feffffff06000000e7fe00000f00000007000000a100000007000000fdffffff", @ANYRES32=0x0, @ANYBLOB="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"], 0x1e0}, 0x1, 0x0, 0x0, 0x80}, 0x2000005c) ioctl$sock_inet_SIOCSIFPFLAGS(0xffffffffffffffff, 0x8934, &(0x7f0000000040)={'wlan0\x00'}) r6 = socket$rxrpc(0x21, 0x2, 0xa) setsockopt$RXRPC_EXCLUSIVE_CONNECTION(r6, 0x110, 0x3) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000600)={{}, &(0x7f0000000580)=0x2, &(0x7f00000005c0)=r1}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000002500)={{}, &(0x7f0000002480), &(0x7f00000024c0)=r1}, 0x20) ioctl$USBDEVFS_FREE_STREAMS(r0, 0x8008551d, &(0x7f0000000000)=ANY=[@ANYBLOB="0101ecfd82"]) 0s ago: executing program 1 (id=2084): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) signalfd4(r1, &(0x7f00000000c0)={[0xe]}, 0x8, 0x80800) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200000}) syz_init_net_socket$ax25(0x3, 0x3, 0xce) r3 = io_uring_setup(0x6668, &(0x7f0000000440)={0x0, 0x9759, 0x0, 0x3, 0x115}) io_uring_register$IORING_REGISTER_BUFFERS(r3, 0x0, &(0x7f0000000640)=[{0x0}], 0x178) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x3, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="6a0ac4ff02000000711069000322"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x2}, 0x94) io_uring_register$IORING_REGISTER_FILES(r3, 0x1e, &(0x7f0000000000)=[r3], 0x1) r4 = landlock_create_ruleset(&(0x7f0000000040)={0x4010, 0x3}, 0x18, 0x0) landlock_add_rule$LANDLOCK_RULE_NET_PORT(r4, 0x2, &(0x7f0000000240)={0x3, 0x3}, 0x0) syz_io_uring_setup(0x223d, &(0x7f0000000100)={0x0, 0x57d9, 0x100, 0x0, 0x1cd}, 0x0, &(0x7f00000001c0)) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) socket$nl_route(0x10, 0x3, 0x0) kernel console output (not intermixed with test programs): 48 [ 1977.868686][T17645] Bluetooth: hci3: command tx timeout [ 1977.918813][T17869] loop4: p1 p3 p4 [ 1977.918813][T17869] p1: [ 1977.931414][T17869] loop4: p4 size 589824 extends beyond EOD, truncated [ 1978.064557][T17872] loop3: detected capacity change from 0 to 512 [ 1978.151966][ T5194] loop4: p1 p3 p4 [ 1978.151966][ T5194] p1: [ 1978.174735][T17872] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0007-000000000000 r/w without journal. Quota mode: writeback. [ 1978.197263][ T5194] loop4: p4 size 589824 extends beyond EOD, truncated [ 1978.322744][T15044] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1978.332789][T15044] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1978.340813][T15044] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1978.349037][T15044] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1978.368239][T15044] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1978.635691][T17880] Quota error (device loop3): do_check_range: Getting block 67108864 out of range 0-5 [ 1979.281408][T16455] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0007-000000000000. [ 1979.336914][T17828] udevd[17828]: inotify_add_watch(7, /dev/loop4p1, 10) failed: No such file or directory [ 1979.407001][T17885] input: syz1 as /devices/virtual/input/input29 [ 1979.536780][T17829] udevd[17829]: inotify_add_watch(7, /dev/loop4p3, 10) failed: No such file or directory [ 1979.661669][T17691] udevd[17691]: inotify_add_watch(7, /dev/loop4p4, 10) failed: No such file or directory [ 1979.924084][T17886] udevd[17886]: inotify_add_watch(7, /dev/loop4p5, 10) failed: No such file or directory [ 1979.977072][T15044] Bluetooth: hci3: command tx timeout [ 1980.097843][T17702] udevd[17702]: inotify_add_watch(7, /dev/loop4p1, 10) failed: No such file or directory [ 1980.102781][T17828] udevd[17828]: inotify_add_watch(7, /dev/loop4p3, 10) failed: No such file or directory [ 1980.113551][T17829] udevd[17829]: inotify_add_watch(7, /dev/loop4p4, 10) failed: No such file or directory [ 1980.148825][T17887] udevd[17887]: inotify_add_watch(7, /dev/loop4p5, 10) failed: No such file or directory [ 1980.453062][T15044] Bluetooth: hci4: command tx timeout [ 1982.058242][T17893] input: syz1 as /devices/virtual/input/input30 [ 1982.174674][T17645] Bluetooth: hci3: command tx timeout [ 1982.533377][T17645] Bluetooth: hci4: command tx timeout [ 1983.888385][T17904] loop1: detected capacity change from 0 to 128 [ 1983.924425][T17904] omfs: sysblock number (f784317bf884317b) is out of range [ 1984.543622][T17909] block nbd3: shutting down sockets [ 1984.609416][T17645] Bluetooth: hci4: command tx timeout [ 1985.734121][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 1985.740582][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 1986.276333][ T37] team0 (unregistering): Port device team_slave_1 removed [ 1986.711041][T17645] Bluetooth: hci4: command tx timeout [ 1986.807240][ T37] team0 (unregistering): Port device team_slave_0 removed [ 1988.988812][T17936] input: syz1 as /devices/virtual/input/input32 [ 1989.719878][T17939] input: syz1 as /devices/virtual/input/input33 [ 1991.081425][T17949] 9pnet_fd: Insufficient options for proto=fd [ 1997.007956][T17978] input: syz1 as /devices/virtual/input/input34 [ 1999.629478][ T37] team0 (unregistering): Port device team_slave_1 removed [ 2000.492287][ T37] team0 (unregistering): Port device team_slave_0 removed [ 2001.035485][T17991] input: syz1 as /devices/virtual/input/input35 [ 2007.890256][T15109] lo speed is unknown, defaulting to 1000 [ 2007.896719][T15109] infiniband syz2: ib_query_port failed (-19) [ 2008.131219][T15044] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 2008.156581][T15044] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 2008.166700][T15044] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 2008.175140][T15044] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 2008.187773][T15044] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 2010.288293][T15044] Bluetooth: hci8: command tx timeout [ 2010.407253][T18037] input: syz1 as /devices/virtual/input/input36 [ 2012.463955][T15044] Bluetooth: hci8: command tx timeout [ 2015.433701][T17645] Bluetooth: hci8: command tx timeout [ 2015.742886][T18067] loop1: detected capacity change from 0 to 16 [ 2015.755999][T18067] MTD: Attempt to mount non-MTD device "/dev/loop1" [ 2017.488797][T17645] Bluetooth: hci8: command tx timeout [ 2019.711437][T17852] chnl_net:caif_netlink_parms(): no params data found [ 2020.467630][T17877] chnl_net:caif_netlink_parms(): no params data found [ 2021.825785][T18080] loop3: detected capacity change from 0 to 8 [ 2021.872000][T18080] SQUASHFS error: xz decompression failed, data probably corrupt [ 2021.879841][T18080] SQUASHFS error: Failed to read block 0x108: -5 [ 2021.886175][T18080] SQUASHFS error: Unable to read metadata cache entry [106] [ 2021.893674][T18080] SQUASHFS error: Unable to read inode 0x11f [ 2022.797488][T18015] chnl_net:caif_netlink_parms(): no params data found [ 2023.938115][T17852] bridge0: port 1(bridge_slave_0) entered blocking state [ 2023.947035][T17852] bridge0: port 1(bridge_slave_0) entered disabled state [ 2023.955744][T17852] bridge_slave_0: entered allmulticast mode [ 2023.964070][T17852] bridge_slave_0: entered promiscuous mode [ 2025.200273][T18097] bridge0: entered promiscuous mode [ 2025.419844][T17852] bridge0: port 2(bridge_slave_1) entered blocking state [ 2025.442941][T17852] bridge0: port 2(bridge_slave_1) entered disabled state [ 2025.458442][T17852] bridge_slave_1: entered allmulticast mode [ 2025.468560][T17852] bridge_slave_1: entered promiscuous mode [ 2026.252469][ T37] IPVS: stop unused estimator thread 0... [ 2026.261860][T17877] bridge0: port 1(bridge_slave_0) entered blocking state [ 2026.294280][T17877] bridge0: port 1(bridge_slave_0) entered disabled state [ 2026.308771][T17877] bridge_slave_0: entered allmulticast mode [ 2026.320201][T17877] bridge_slave_0: entered promiscuous mode [ 2027.679701][T17877] bridge0: port 2(bridge_slave_1) entered blocking state [ 2027.686885][T17877] bridge0: port 2(bridge_slave_1) entered disabled state [ 2027.698724][T17877] bridge_slave_1: entered allmulticast mode [ 2028.015595][T17877] bridge_slave_1: entered promiscuous mode [ 2028.256020][T17852] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2028.355330][T17852] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2030.639542][T18015] bridge0: port 1(bridge_slave_0) entered blocking state [ 2030.647757][T18015] bridge0: port 1(bridge_slave_0) entered disabled state [ 2030.678130][T18015] bridge_slave_0: entered allmulticast mode [ 2030.712558][T18015] bridge_slave_0: entered promiscuous mode [ 2030.731800][T18015] bridge0: port 2(bridge_slave_1) entered blocking state [ 2030.741087][T18015] bridge0: port 2(bridge_slave_1) entered disabled state [ 2030.748285][T18015] bridge_slave_1: entered allmulticast mode [ 2030.756852][T18015] bridge_slave_1: entered promiscuous mode [ 2030.776336][T17877] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2030.792906][T17852] team0: Port device team_slave_0 added [ 2030.851852][T17877] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2030.890457][T17852] team0: Port device team_slave_1 added [ 2034.974300][T18015] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2035.281998][T17877] team0: Port device team_slave_0 added [ 2035.336698][T17877] team0: Port device team_slave_1 added [ 2035.859245][T18015] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2035.923886][ T37] bridge_slave_1: left allmulticast mode [ 2035.969486][ T37] bridge_slave_1: left promiscuous mode [ 2035.993681][T18153] loop3: detected capacity change from 0 to 4096 [ 2036.045707][ T37] bridge0: port 2(bridge_slave_1) entered disabled state [ 2036.120276][T15044] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 2036.129462][T15044] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 2036.142015][T15044] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 2036.150428][T15044] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 2036.158065][T15044] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 2036.168902][ T37] bridge_slave_0: left allmulticast mode [ 2036.174562][ T37] bridge_slave_0: left promiscuous mode [ 2036.187668][T18160] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 2036.200468][T18153] NILFS (loop3): corrupt root inode [ 2038.050299][ T37] bridge0: port 1(bridge_slave_0) entered disabled state [ 2038.062242][ T37] bridge_slave_1: left allmulticast mode [ 2038.067902][ T37] bridge_slave_1: left promiscuous mode [ 2038.138789][ T37] bridge0: port 2(bridge_slave_1) entered disabled state [ 2038.229830][ T37] bridge_slave_0: left allmulticast mode [ 2038.235510][ T37] bridge_slave_0: left promiscuous mode [ 2038.252191][ T37] bridge0: port 1(bridge_slave_0) entered disabled state [ 2038.276001][ T37] bridge_slave_1: left allmulticast mode [ 2038.288599][T17645] Bluetooth: hci0: command tx timeout [ 2038.309370][ T37] bridge_slave_1: left promiscuous mode [ 2038.325014][ T37] bridge0: port 2(bridge_slave_1) entered disabled state [ 2038.404526][ T37] bridge_slave_0: left allmulticast mode [ 2038.418515][ T37] bridge_slave_0: left promiscuous mode [ 2038.424274][ T37] bridge0: port 1(bridge_slave_0) entered disabled state [ 2038.522714][ T37] bridge_slave_1: left allmulticast mode [ 2038.548964][ T37] bridge_slave_1: left promiscuous mode [ 2038.554724][ T37] bridge0: port 2(bridge_slave_1) entered disabled state [ 2038.662514][ T37] bridge_slave_0: left allmulticast mode [ 2038.668196][ T37] bridge_slave_0: left promiscuous mode [ 2038.708732][ T37] bridge0: port 1(bridge_slave_0) entered disabled state [ 2038.761332][ T37] bridge_slave_1: left allmulticast mode [ 2038.794881][ T37] bridge_slave_1: left promiscuous mode [ 2038.830095][ T37] bridge0: port 2(bridge_slave_1) entered disabled state [ 2038.859730][ T37] bridge_slave_0: left allmulticast mode [ 2038.865392][ T37] bridge_slave_0: left promiscuous mode [ 2038.877086][ T37] bridge0: port 1(bridge_slave_0) entered disabled state [ 2039.038037][T15044] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 2039.068984][T15044] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 2039.081362][T15044] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 2039.089732][T15044] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 2039.098768][T15044] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 2039.270213][ T37] bond0 (unregistering): Released all slaves [ 2039.928260][T18180] loop4: detected capacity change from 0 to 8 [ 2040.157779][T18180] SQUASHFS error: xz decompression failed, data probably corrupt [ 2040.165799][T18180] SQUASHFS error: Failed to read block 0x108: -5 [ 2040.172325][T18180] SQUASHFS error: Unable to read metadata cache entry [106] [ 2040.179696][T18180] SQUASHFS error: Unable to read inode 0x11f [ 2040.370358][T15044] Bluetooth: hci0: command tx timeout [ 2040.462732][ T37] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2040.770693][ T37] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2040.820005][ T37] bond0 (unregistering): Released all slaves [ 2041.324438][T18187] loop4: detected capacity change from 0 to 40427 [ 2041.359360][T18187] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12 [ 2041.367157][T18187] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 2041.548951][T15044] Bluetooth: hci2: command tx timeout [ 2041.574177][T18187] F2FS-fs (loop4): invalid crc value [ 2041.879503][T18187] F2FS-fs (loop4): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 2042.044268][T18187] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 2042.051534][T18187] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 2043.696240][T15044] Bluetooth: hci0: command tx timeout [ 2043.696269][ T8628] Bluetooth: hci2: command 0x041b tx timeout [ 2043.851364][ T37] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2043.909007][ T37] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2043.983712][ T37] bond0 (unregistering): Released all slaves [ 2044.221007][T18204] input: syz1 as /devices/virtual/input/input37 [ 2045.812021][T17645] Bluetooth: hci2: command 0x041b tx timeout [ 2045.818267][T17645] Bluetooth: hci0: command tx timeout [ 2048.333562][ T8628] Bluetooth: hci2: command 0x041b tx timeout [ 2048.340882][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 2048.347153][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 2048.680268][ T37] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2048.760885][ T37] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2048.821128][T18224] 9pnet_fd: Insufficient options for proto=fd [ 2048.883240][ T37] bond0 (unregistering): Released all slaves [ 2049.747336][ T37] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2049.820421][ T37] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2049.855235][ T37] bond0 (unregistering): Released all slaves [ 2050.190231][T18226] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 2050.196270][T18226] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 2050.953854][ T8628] Bluetooth: hci2: command 0x041b tx timeout [ 2050.954837][T18226] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 2050.981575][T18226] Bluetooth: hci5: Error when powering off device on rfkill (-4) [ 2051.007415][ T37] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2051.164561][T18226] Bluetooth: hci7: Opcode 0x0c1a failed: -4 [ 2051.195159][T18226] Bluetooth: hci7: Error when powering off device on rfkill (-4) [ 2051.215886][ T37] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2051.277667][ T37] bond0 (unregistering): Released all slaves [ 2051.299297][T18226] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 2051.305434][T18226] Bluetooth: hci4: Error when powering off device on rfkill (-4) [ 2051.571523][T18226] Bluetooth: hci8: Opcode 0x0c1a failed: -4 [ 2051.584638][T18226] Bluetooth: hci8: Error when powering off device on rfkill (-4) [ 2051.717561][T18226] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 2051.725504][T18226] Bluetooth: hci0: Error when powering off device on rfkill (-4) [ 2051.786406][T18226] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 2051.793631][T18226] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 2051.935739][T18015] team0: Port device team_slave_0 added [ 2051.995281][ T37] hsr_slave_0: left promiscuous mode [ 2052.020781][ T37] hsr_slave_1: left promiscuous mode [ 2052.056771][ T37] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2052.092032][ T37] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2052.434343][ T37] hsr_slave_0: left promiscuous mode [ 2052.498324][ T37] hsr_slave_1: left promiscuous mode [ 2052.574504][ T37] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2052.663717][ T37] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2052.869873][ T37] hsr_slave_0: left promiscuous mode [ 2052.986325][ T37] hsr_slave_1: left promiscuous mode [ 2053.056757][ T37] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2053.199353][ T37] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2054.461831][ T37] hsr_slave_0: left promiscuous mode [ 2054.496537][ T37] hsr_slave_1: left promiscuous mode [ 2054.519371][ T37] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2054.889384][T18247] loop1: detected capacity change from 0 to 40427 [ 2055.174214][T18247] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 2055.189052][T18247] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 2055.497514][T18247] F2FS-fs (loop1): invalid crc value [ 2055.509162][ T37] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2056.829066][T18247] F2FS-fs (loop1): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 2057.062189][T18247] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 2057.071537][T18247] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 2062.799501][ T37] team0 (unregistering): Port device team_slave_1 removed [ 2063.113028][ T37] team0 (unregistering): Port device team_slave_0 removed [ 2065.330721][ T37] team0 (unregistering): Port device team_slave_1 removed [ 2065.579635][T18301] Bluetooth: MGMT ver 1.23 [ 2065.692896][ T37] team0 (unregistering): Port device team_slave_0 removed [ 2067.029696][ T37] team0 (unregistering): Port device team_slave_1 removed [ 2067.054917][ T37] team0 (unregistering): Port device team_slave_0 removed [ 2067.539808][ T37] team0 (unregistering): Port device team_slave_1 removed [ 2067.577382][ T37] team0 (unregistering): Port device team_slave_0 removed [ 2069.767655][ T8628] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 2069.779405][ T8628] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 2069.788400][ T8628] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 2069.796619][ T8628] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 2069.805720][ T8628] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 2069.831553][T17645] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 2069.839758][T17645] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 2069.852703][T17645] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 2069.873499][T17645] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 2069.881269][T17645] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 2070.011484][T18015] team0: Port device team_slave_1 added [ 2070.199799][T18327] trusted_key: encrypted_key: insufficient parameters specified [ 2071.979459][T17645] Bluetooth: hci3: command tx timeout [ 2074.067912][T17645] Bluetooth: hci3: command tx timeout [ 2074.839912][T18158] chnl_net:caif_netlink_parms(): no params data found [ 2076.568885][T17645] Bluetooth: hci3: command tx timeout [ 2078.611761][T17645] Bluetooth: hci3: command tx timeout [ 2079.128851][T18158] bridge0: port 1(bridge_slave_0) entered blocking state [ 2079.221465][T18158] bridge0: port 1(bridge_slave_0) entered disabled state [ 2079.366379][T18158] bridge_slave_0: entered allmulticast mode [ 2079.395009][T18158] bridge_slave_0: entered promiscuous mode [ 2079.411919][T18158] bridge0: port 2(bridge_slave_1) entered blocking state [ 2079.421540][T18158] bridge0: port 2(bridge_slave_1) entered disabled state [ 2079.438635][T18158] bridge_slave_1: entered allmulticast mode [ 2079.456034][T18158] bridge_slave_1: entered promiscuous mode [ 2079.945257][T18323] chnl_net:caif_netlink_parms(): no params data found [ 2080.097419][T18169] chnl_net:caif_netlink_parms(): no params data found [ 2080.492153][T18158] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2080.638139][T18158] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2081.108012][T18375] loop1: detected capacity change from 0 to 32768 [ 2081.115660][T18375] btrfs: Deprecated parameter 'usebackuproot' [ 2081.121791][T18375] BTRFS warning: 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead [ 2081.189511][T18375] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.1832 (18375) [ 2081.732190][T18375] BTRFS info (device loop1): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 2081.742432][T18375] BTRFS info (device loop1): using crc32c (crc32c-lib) checksum algorithm [ 2082.763126][ T6330] BTRFS warning (device loop1): checksum verify failed on logical 5337088 mirror 1 wanted 0xe63dbdda found 0xc926492d level 0 [ 2082.858543][T18403] input: syz1 as /devices/virtual/input/input38 [ 2083.426063][T18375] BTRFS error (device loop1): failed to load root extent [ 2083.433983][T18375] BTRFS warning (device loop1): try to load backup roots slot 1 [ 2083.443924][T10248] BTRFS warning (device loop1): checksum verify failed on logical 5324800 mirror 1 wanted 0x9f73850b found 0x80379423 level 0 [ 2083.457061][T18375] BTRFS warning (device loop1): couldn't read tree root [ 2083.464063][T18375] BTRFS warning (device loop1): try to load backup roots slot 2 [ 2083.473441][T10248] BTRFS error (device loop1): level verify failed on logical 5255168 mirror 1 wanted 0 found 1 [ 2083.483862][T18375] BTRFS warning (device loop1): couldn't read tree root [ 2083.490982][T18375] BTRFS warning (device loop1): try to load backup roots slot 3 [ 2083.530018][T18375] BTRFS info (device loop1): rebuilding free space tree [ 2083.551926][T18375] BTRFS info (device loop1): checking UUID tree [ 2083.558900][T18375] BTRFS info (device loop1): enabling ssd optimizations [ 2083.565882][T18375] BTRFS info (device loop1): turning off barriers [ 2083.572495][T18375] BTRFS info (device loop1): turning on sync discard [ 2083.579332][T18375] BTRFS info (device loop1): enabling free space tree [ 2083.586106][T18375] BTRFS info (device loop1): force clearing of disk cache [ 2083.593271][T18375] BTRFS info (device loop1): enabling auto defrag [ 2083.599758][T18375] BTRFS info (device loop1): trying to use backup root at mount time [ 2083.607864][T18375] BTRFS info (device loop1): use zlib compression, level 3 [ 2083.608819][T18169] bridge0: port 1(bridge_slave_0) entered blocking state [ 2083.615326][T18375] BTRFS info (device loop1): max_inline set to 0 [ 2083.700136][T18169] bridge0: port 1(bridge_slave_0) entered disabled state [ 2083.717811][T18169] bridge_slave_0: entered allmulticast mode [ 2083.746198][T18169] bridge_slave_0: entered promiscuous mode [ 2083.779161][T18169] bridge0: port 2(bridge_slave_1) entered blocking state [ 2083.796585][T18169] bridge0: port 2(bridge_slave_1) entered disabled state [ 2083.820157][T18169] bridge_slave_1: entered allmulticast mode [ 2085.298983][T18169] bridge_slave_1: entered promiscuous mode [ 2085.331913][T18158] team0: Port device team_slave_0 added [ 2087.413293][T16766] BTRFS info (device loop1): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 2087.464435][T18158] team0: Port device team_slave_1 added [ 2087.491212][T18323] bridge0: port 1(bridge_slave_0) entered blocking state [ 2087.500470][T18323] bridge0: port 1(bridge_slave_0) entered disabled state [ 2087.507748][T18323] bridge_slave_0: entered allmulticast mode [ 2087.563102][T18323] bridge_slave_0: entered promiscuous mode [ 2087.705275][T18323] bridge0: port 2(bridge_slave_1) entered blocking state [ 2087.715897][T18323] bridge0: port 2(bridge_slave_1) entered disabled state [ 2087.745775][T18323] bridge_slave_1: entered allmulticast mode [ 2088.030690][T18323] bridge_slave_1: entered promiscuous mode [ 2088.050618][T18169] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2088.960533][T18323] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2089.019516][T18169] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2089.067027][T18158] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2089.075335][T18158] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2089.128578][T18158] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2089.143077][T18323] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2089.191413][T18158] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2089.198386][T18158] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2089.226162][T18158] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2089.272300][T18169] team0: Port device team_slave_0 added [ 2089.337799][T18169] team0: Port device team_slave_1 added [ 2089.406268][T18323] team0: Port device team_slave_0 added [ 2089.419810][T18323] team0: Port device team_slave_1 added [ 2090.208631][T18169] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2090.375156][T18169] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2090.403591][T18169] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2090.543726][T18169] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2090.554538][T18169] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2090.581792][T18169] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2092.373343][T18158] hsr_slave_0: entered promiscuous mode [ 2092.391605][T18158] hsr_slave_1: entered promiscuous mode [ 2092.412055][T18158] debugfs: 'hsr0' already exists in 'hsr' [ 2092.417850][T18158] Cannot create hsr debugfs directory [ 2092.433765][T18323] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2092.468090][T18323] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2092.668241][T18323] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2092.753673][T18323] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2092.803625][T18323] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2092.918590][T18323] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2093.070005][ T37] bridge_slave_1: left allmulticast mode [ 2093.075668][ T37] bridge_slave_1: left promiscuous mode [ 2093.097223][ T37] bridge0: port 2(bridge_slave_1) entered disabled state [ 2093.180662][ T37] bridge_slave_0: left allmulticast mode [ 2093.250271][ T37] bridge_slave_0: left promiscuous mode [ 2093.261818][ T37] bridge0: port 1(bridge_slave_0) entered disabled state [ 2093.282727][ T37] bridge_slave_1: left allmulticast mode [ 2093.288375][ T37] bridge_slave_1: left promiscuous mode [ 2093.294351][ T37] bridge0: port 2(bridge_slave_1) entered disabled state [ 2093.315300][ T37] bridge_slave_0: left allmulticast mode [ 2093.323248][ T37] bridge_slave_0: left promiscuous mode [ 2093.332232][ T37] bridge0: port 1(bridge_slave_0) entered disabled state [ 2093.358081][ T37] bridge_slave_1: left allmulticast mode [ 2093.458675][ T37] bridge_slave_1: left promiscuous mode [ 2093.464497][ T37] bridge0: port 2(bridge_slave_1) entered disabled state [ 2093.490783][ T37] bridge_slave_0: left allmulticast mode [ 2093.508835][ T37] bridge_slave_0: left promiscuous mode [ 2093.515016][ T37] bridge0: port 1(bridge_slave_0) entered disabled state [ 2093.678763][ T37] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2093.700788][ T37] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2093.741026][ T37] bond0 (unregistering): Released all slaves [ 2093.951697][ T37] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2093.983257][ T37] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2094.014769][ T37] bond0 (unregistering): Released all slaves [ 2094.259081][ T37] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2094.329348][ T37] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2094.377512][ T8628] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 2094.378416][ T37] bond0 (unregistering): Released all slaves [ 2094.393067][ T8628] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 2094.409418][ T8628] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 2094.420229][ T8628] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 2094.440257][ T8628] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 2096.626096][ T8628] Bluetooth: hci4: command tx timeout [ 2098.638571][T18169] hsr_slave_0: entered promiscuous mode [ 2098.658904][T18169] hsr_slave_1: entered promiscuous mode [ 2098.665349][T18169] debugfs: 'hsr0' already exists in 'hsr' [ 2098.678497][T18169] Cannot create hsr debugfs directory [ 2098.688583][ T8628] Bluetooth: hci4: command tx timeout [ 2098.734842][T18323] hsr_slave_0: entered promiscuous mode [ 2098.762388][T18323] hsr_slave_1: entered promiscuous mode [ 2098.789515][T18323] debugfs: 'hsr0' already exists in 'hsr' [ 2098.805455][T18323] Cannot create hsr debugfs directory [ 2099.229030][ T37] team0 (unregistering): Port device team_slave_1 removed [ 2099.348303][ T37] team0 (unregistering): Port device team_slave_0 removed [ 2101.268491][ T8628] Bluetooth: hci4: command tx timeout [ 2101.436486][T17645] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 2101.445097][T17645] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 2101.452987][T17645] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 2101.472386][T17645] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 2101.480188][T17645] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 2101.900103][ T37] team0 (unregistering): Port device team_slave_1 removed [ 2102.071064][T18488] input: syz1 as /devices/virtual/input/input39 [ 2102.345240][ T37] team0 (unregistering): Port device team_slave_0 removed [ 2103.380657][ T8628] Bluetooth: hci4: command tx timeout [ 2103.569850][T17645] Bluetooth: hci0: command tx timeout [ 2104.050489][ T37] team0 (unregistering): Port device team_slave_1 removed [ 2104.129216][ T37] team0 (unregistering): Port device team_slave_0 removed [ 2105.363042][T18505] loop4: detected capacity change from 0 to 16 [ 2105.401294][T18505] MTD: Attempt to mount non-MTD device "/dev/loop4" [ 2105.684410][T17645] Bluetooth: hci0: command tx timeout [ 2106.303923][T18511] loop3: detected capacity change from 0 to 256 [ 2107.040419][T18510] autofs: Unknown parameter 'xa2Až‘¬„‘Ù2Éç³Ñã½÷÷{3ƒ´šÑ­ºû;G{Ç^F½žÄÂz¬ÇI­Xˆ¡GQêÅëò~' [ 2107.845239][T17645] Bluetooth: hci0: command tx timeout [ 2108.601184][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 2108.610814][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 2109.888666][T17645] Bluetooth: hci0: command tx timeout [ 2110.938093][T18453] chnl_net:caif_netlink_parms(): no params data found [ 2111.070693][T18483] chnl_net:caif_netlink_parms(): no params data found [ 2111.197880][T18453] bridge0: port 1(bridge_slave_0) entered blocking state [ 2111.205496][T18453] bridge0: port 1(bridge_slave_0) entered disabled state [ 2111.212882][T18453] bridge_slave_0: entered allmulticast mode [ 2111.220751][T18453] bridge_slave_0: entered promiscuous mode [ 2111.269987][T18453] bridge0: port 2(bridge_slave_1) entered blocking state [ 2111.277188][T18453] bridge0: port 2(bridge_slave_1) entered disabled state [ 2111.285252][T18453] bridge_slave_1: entered allmulticast mode [ 2111.296590][T18453] bridge_slave_1: entered promiscuous mode [ 2111.383148][T18453] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2111.404775][T18483] bridge0: port 1(bridge_slave_0) entered blocking state [ 2111.422465][T18483] bridge0: port 1(bridge_slave_0) entered disabled state [ 2111.432107][T18483] bridge_slave_0: entered allmulticast mode [ 2111.439904][T18483] bridge_slave_0: entered promiscuous mode [ 2111.449968][T18453] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2111.474286][T18483] bridge0: port 2(bridge_slave_1) entered blocking state [ 2111.482551][T18483] bridge0: port 2(bridge_slave_1) entered disabled state [ 2111.489829][T18483] bridge_slave_1: entered allmulticast mode [ 2111.499523][T18483] bridge_slave_1: entered promiscuous mode [ 2111.578081][T18453] team0: Port device team_slave_0 added [ 2111.584373][T18323] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 2111.603421][T18483] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2111.616532][T18453] team0: Port device team_slave_1 added [ 2111.623024][T18323] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 2111.635809][T18483] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2111.663148][T18323] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 2111.688043][ T37] bridge_slave_1: left allmulticast mode [ 2111.693988][ T37] bridge_slave_1: left promiscuous mode [ 2111.699996][ T37] bridge0: port 2(bridge_slave_1) entered disabled state [ 2111.710684][ T37] bridge_slave_0: left allmulticast mode [ 2111.716313][ T37] bridge_slave_0: left promiscuous mode [ 2111.722200][ T37] bridge0: port 1(bridge_slave_0) entered disabled state [ 2111.734700][ T37] bridge_slave_1: left allmulticast mode [ 2111.740396][ T37] bridge_slave_1: left promiscuous mode [ 2111.746093][ T37] bridge0: port 2(bridge_slave_1) entered disabled state [ 2111.755475][ T37] bridge_slave_0: left allmulticast mode [ 2111.761156][ T37] bridge_slave_0: left promiscuous mode [ 2111.766851][ T37] bridge0: port 1(bridge_slave_0) entered disabled state [ 2111.874707][ T37] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2111.886205][ T37] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2111.897102][ T37] bond0 (unregistering): Released all slaves [ 2112.017767][ T37] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2112.029485][ T37] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2112.042563][ T37] bond0 (unregistering): Released all slaves [ 2112.071279][T18323] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 2112.096140][T18453] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2112.103624][T18453] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2112.146907][T18453] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2112.164979][T18453] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2112.173823][T18453] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2112.215150][T18453] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2112.242659][T18483] team0: Port device team_slave_0 added [ 2112.252933][T18483] team0: Port device team_slave_1 added [ 2112.267626][ T37] hsr_slave_0: left promiscuous mode [ 2112.274036][ T37] hsr_slave_1: left promiscuous mode [ 2112.280063][ T37] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2112.287722][ T37] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2112.297174][ T37] hsr_slave_0: left promiscuous mode [ 2112.303864][ T37] hsr_slave_1: left promiscuous mode [ 2112.310853][ T37] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2112.320044][ T37] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2112.417130][ T37] team0 (unregistering): Port device team_slave_1 removed [ 2112.445047][ T37] team0 (unregistering): Port device team_slave_0 removed [ 2112.696596][ T37] team0 (unregistering): Port device team_slave_1 removed [ 2112.740778][ T37] team0 (unregistering): Port device team_slave_0 removed [ 2112.980607][T18483] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2112.987580][T18483] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2113.017590][T18483] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2113.066250][T18483] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2113.074601][T18483] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2113.101480][T18483] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2113.123111][T18453] hsr_slave_0: entered promiscuous mode [ 2113.130012][T18453] hsr_slave_1: entered promiscuous mode [ 2113.137555][T18453] debugfs: 'hsr0' already exists in 'hsr' [ 2113.143492][T18453] Cannot create hsr debugfs directory [ 2113.285418][T18483] hsr_slave_0: entered promiscuous mode [ 2113.292451][T18483] hsr_slave_1: entered promiscuous mode [ 2113.299018][T18483] debugfs: 'hsr0' already exists in 'hsr' [ 2113.304733][T18483] Cannot create hsr debugfs directory [ 2113.681952][T18453] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 2113.695349][T18453] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 2113.746650][T18453] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 2113.762509][T18323] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2113.771704][T18453] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 2113.811357][T18323] 8021q: adding VLAN 0 to HW filter on device team0 [ 2113.851542][ T1100] bridge0: port 1(bridge_slave_0) entered blocking state [ 2113.858724][ T1100] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2113.892450][T17365] bridge0: port 2(bridge_slave_1) entered blocking state [ 2113.899630][T17365] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2114.163775][T18453] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2114.220615][T18453] 8021q: adding VLAN 0 to HW filter on device team0 [ 2114.237975][T10247] bridge0: port 1(bridge_slave_0) entered blocking state [ 2114.245136][T10247] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2114.287851][T10247] bridge0: port 2(bridge_slave_1) entered blocking state [ 2114.295029][T10247] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2114.340447][T18483] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 2114.365938][T18483] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 2114.404598][T18483] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 2114.445602][T18483] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 2114.587431][T18323] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2114.716198][T18483] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2114.766651][T18483] 8021q: adding VLAN 0 to HW filter on device team0 [ 2114.804959][ T1100] bridge0: port 1(bridge_slave_0) entered blocking state [ 2114.812158][ T1100] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2114.864439][ T1100] bridge0: port 2(bridge_slave_1) entered blocking state [ 2114.871638][ T1100] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2115.166341][T18453] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2115.361997][T18323] veth0_vlan: entered promiscuous mode [ 2115.393022][T18323] veth1_vlan: entered promiscuous mode [ 2115.495277][T18323] veth0_macvtap: entered promiscuous mode [ 2115.526986][T18323] veth1_macvtap: entered promiscuous mode [ 2115.573173][T18483] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2115.621354][T18323] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2115.651951][T18323] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2115.685595][ T6196] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2115.719778][ T6196] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2115.760390][ T6196] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2115.796057][ T6196] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2116.008699][T10247] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2116.016556][T10247] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2116.102161][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2116.119707][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2116.154060][T18453] veth0_vlan: entered promiscuous mode [ 2116.189366][T18453] veth1_vlan: entered promiscuous mode [ 2116.345858][T18453] veth0_macvtap: entered promiscuous mode [ 2116.405723][T18453] veth1_macvtap: entered promiscuous mode [ 2118.212309][T18453] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2118.238251][T18483] veth0_vlan: entered promiscuous mode [ 2118.281219][T18453] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2118.315134][ T1100] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2118.337048][ T1100] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2118.381577][ T1100] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2118.402913][T18483] veth1_vlan: entered promiscuous mode [ 2118.432508][ T1100] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2120.472095][T18632] loop3: detected capacity change from 0 to 16 [ 2120.518756][T18632] erofs (device loop3): mounted with root inode @ nid 36. [ 2122.105882][T18483] veth0_macvtap: entered promiscuous mode [ 2123.033165][T18483] veth1_macvtap: entered promiscuous mode [ 2123.044681][ T6330] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2123.067841][T18483] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2123.103014][ T6330] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2123.252537][T18483] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2123.511092][ T6165] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2125.882203][ T6165] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2125.971315][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2126.009089][ T6165] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2126.035835][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2126.100447][ T6165] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2128.545281][T18681] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1874'. [ 2129.605143][ T8628] Bluetooth: hci0: command 0x0405 tx timeout [ 2129.781753][ T31] audit: type=1800 audit(2129.704:69): pid=18691 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.1875" name="SYSV00000000" dev="hugetlbfs" ino=0 res=0 errno=0 [ 2130.840115][T10247] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2131.532976][T10247] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2133.749112][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2133.756968][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2133.875268][T18702] fuse: Unknown parameter 'use00000000000000000000' [ 2134.195120][T18705] loop7: detected capacity change from 0 to 22 [ 2134.205179][T18705] MTD: Attempt to mount non-MTD device "/dev/loop7" [ 2134.258947][T18705] romfs: Mounting image 'rom 637cf1fa' through the block layer [ 2138.358275][T17645] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 2138.373705][T17645] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 2138.382334][T17645] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 2138.391502][T17645] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 2138.411005][T17645] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 2140.556453][T17645] Bluetooth: hci2: command tx timeout [ 2142.323007][T18750] loop3: detected capacity change from 0 to 512 [ 2142.434456][T18750] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 2142.610825][T17645] Bluetooth: hci2: command tx timeout [ 2142.989118][T18750] EXT4-fs (loop3): 1 truncate cleaned up [ 2143.028698][T18750] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 2143.092903][T18749] syz.3.1886 (pid 18749) is setting deprecated v1 encryption policy; recommend upgrading to v2. [ 2143.232838][T18749] block device autoloading is deprecated and will be removed. [ 2143.273075][T18728] chnl_net:caif_netlink_parms(): no params data found [ 2143.610826][T16455] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 2143.894201][T18759] 9pnet_fd: Insufficient options for proto=fd [ 2144.404788][ T8628] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 2144.413954][ T8628] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 2144.422517][ T8628] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 2144.431463][ T8628] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 2144.439213][ T8628] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 2146.700373][ T8628] Bluetooth: hci6: command tx timeout [ 2146.711134][T17645] Bluetooth: hci2: command tx timeout [ 2147.886198][ T7854] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2149.002242][T17645] Bluetooth: hci2: command tx timeout [ 2149.007692][ T8628] Bluetooth: hci6: command tx timeout [ 2149.187926][ T7854] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2149.294826][T18728] bridge0: port 1(bridge_slave_0) entered blocking state [ 2149.339979][T18728] bridge0: port 1(bridge_slave_0) entered disabled state [ 2149.347312][T18728] bridge_slave_0: entered allmulticast mode [ 2149.377911][T18728] bridge_slave_0: entered promiscuous mode [ 2149.620050][T18728] bridge0: port 2(bridge_slave_1) entered blocking state [ 2149.627211][T18728] bridge0: port 2(bridge_slave_1) entered disabled state [ 2149.634642][T18728] bridge_slave_1: entered allmulticast mode [ 2149.651272][T18728] bridge_slave_1: entered promiscuous mode [ 2150.739811][T18798] ptrace attach of "./syz-executor exec"[18799] was attempted by "./syz-executor exec"[18798] [ 2151.088532][ T8628] Bluetooth: hci6: command tx timeout [ 2151.793848][T18809] netlink: 12 bytes leftover after parsing attributes in process `syz.8.1894'. [ 2152.272266][ T7854] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2152.383431][T18728] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2152.431116][T18728] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2152.456060][ T31] audit: type=1800 audit(2152.434:70): pid=18809 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.8.1894" name="regulatory.db" dev="sda1" ino=448 res=0 errno=0 [ 2152.456552][T18809] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -4 [ 2152.489152][T18809] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -4 [ 2152.498750][T18809] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 2153.462250][ T8628] Bluetooth: hci6: command tx timeout [ 2156.997314][ T7854] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2157.075347][T18728] team0: Port device team_slave_0 added [ 2157.111698][T18728] team0: Port device team_slave_1 added [ 2157.259077][T18835] random: crng reseeded on system resumption [ 2157.351131][T18728] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2157.358113][T18728] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2157.458661][T18728] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2157.491551][T18728] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2157.518778][T18728] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2157.608553][T18728] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2157.954061][T18728] hsr_slave_0: entered promiscuous mode [ 2157.999423][T18728] hsr_slave_1: entered promiscuous mode [ 2158.005832][T18728] debugfs: 'hsr0' already exists in 'hsr' [ 2158.044169][T18728] Cannot create hsr debugfs directory [ 2158.733395][T18843] Restarting kernel threads ... [ 2158.739508][T18843] Done restarting kernel threads. [ 2158.982105][ T7854] bridge_slave_1: left allmulticast mode [ 2158.987788][ T7854] bridge_slave_1: left promiscuous mode [ 2158.995882][ T7854] bridge0: port 2(bridge_slave_1) entered disabled state [ 2159.005871][ T7854] bridge_slave_0: left allmulticast mode [ 2159.013259][ T7854] bridge_slave_0: left promiscuous mode [ 2159.019569][ T7854] bridge0: port 1(bridge_slave_0) entered disabled state [ 2159.971454][T18867] vxfs: WRONG superblock magic 00000000 at 1 [ 2159.979916][T18867] vxfs: WRONG superblock magic 00000000 at 8 [ 2159.985963][T18867] vxfs: can't find superblock. [ 2160.679152][T18866] loop7: detected capacity change from 0 to 16 [ 2160.689033][T18866] MTD: Attempt to mount non-MTD device "/dev/loop7" [ 2165.964746][T18878] input: syz1 as /devices/virtual/input/input40 [ 2166.180930][T18880] loop3: detected capacity change from 0 to 32768 [ 2166.195310][T18880] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.1904 (18880) [ 2166.221511][T18880] BTRFS info (device loop3): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 2166.231720][T18880] BTRFS info (device loop3): using sha256 (sha256-lib) checksum algorithm [ 2166.372050][T18880] BTRFS info (device loop3): enabling ssd optimizations [ 2166.379113][T18880] BTRFS info (device loop3): turning on async discard [ 2166.388572][T18880] BTRFS info (device loop3): enabling free space tree [ 2167.360917][ T31] audit: type=1804 audit(2166.894:71): pid=18903 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.3.1904" name="/newroot/112/bus/bus" dev="loop3" ino=263 res=1 errno=0 [ 2169.530380][T16455] BTRFS info (device loop3): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 2169.894827][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 2169.901479][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 2174.097298][T18947] loop7: detected capacity change from 0 to 512 [ 2174.179850][T18947] EXT4-fs: Ignoring removed i_version option [ 2174.290576][ T7854] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2174.393409][T18947] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 2174.504573][ T7854] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2175.222454][ T7854] bond0 (unregistering): Released all slaves [ 2175.864644][T18958] 9pnet_fd: Insufficient options for proto=fd [ 2176.755841][T18757] chnl_net:caif_netlink_parms(): no params data found [ 2176.809259][T18453] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 2177.540809][T18970] loop3: detected capacity change from 0 to 8 [ 2178.132565][T18966] Bluetooth: MGMT ver 1.23 [ 2178.253793][T18970] SQUASHFS error: xz decompression failed, data probably corrupt [ 2178.264246][T18970] SQUASHFS error: Failed to read block 0x108: -5 [ 2178.270638][T18970] SQUASHFS error: Unable to read metadata cache entry [106] [ 2178.277912][T18970] SQUASHFS error: Unable to read inode 0x11f [ 2184.994534][T19001] usb usb5: usbfs: process 19001 (syz.8.1926) did not claim interface 0 before use [ 2185.015685][T19001] fuse: Unknown parameter '0x0000000000000007' [ 2187.372840][T18757] bridge0: port 1(bridge_slave_0) entered blocking state [ 2188.989859][T18757] bridge0: port 1(bridge_slave_0) entered disabled state [ 2188.997145][T18757] bridge_slave_0: entered allmulticast mode [ 2189.314078][T18757] bridge_slave_0: entered promiscuous mode [ 2189.448125][ T7854] hsr_slave_0: left promiscuous mode [ 2189.638501][ T7854] hsr_slave_1: left promiscuous mode [ 2189.665100][ T7854] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2189.692818][ T7854] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2189.744545][ T7854] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2189.774310][ T7854] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2189.955558][ T7854] veth1_macvtap: left promiscuous mode [ 2189.978166][ T7854] veth0_macvtap: left promiscuous mode [ 2190.002409][ T7854] veth1_vlan: left promiscuous mode [ 2190.018619][ T7854] veth0_vlan: left promiscuous mode [ 2193.320822][ T7854] team0 (unregistering): Port device team_slave_1 removed [ 2193.361216][ T7854] team0 (unregistering): Port device team_slave_0 removed [ 2193.708248][T18757] bridge0: port 2(bridge_slave_1) entered blocking state [ 2193.716412][T18757] bridge0: port 2(bridge_slave_1) entered disabled state [ 2193.727164][T18757] bridge_slave_1: entered allmulticast mode [ 2193.735483][T18757] bridge_slave_1: entered promiscuous mode [ 2193.839384][T18757] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2193.865828][T18757] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2193.953777][T18757] team0: Port device team_slave_0 added [ 2193.967707][T18757] team0: Port device team_slave_1 added [ 2194.022751][T18757] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2194.031172][T18757] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2194.061017][T18757] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2194.085819][T18757] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2194.092833][T18757] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2194.118792][T18757] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2194.155050][ T7854] IPVS: stop unused estimator thread 0... [ 2194.304910][T18757] hsr_slave_0: entered promiscuous mode [ 2194.315902][T18757] hsr_slave_1: entered promiscuous mode [ 2194.322715][T18757] debugfs: 'hsr0' already exists in 'hsr' [ 2194.328679][T18757] Cannot create hsr debugfs directory [ 2194.427293][ T7854] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2194.563962][ T7854] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2194.651405][ T7854] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2194.736202][ T7854] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2194.758314][T18728] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 2194.807144][T18728] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 2194.840867][T18728] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 2194.890506][T18728] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 2195.116176][ T7854] bridge_slave_1: left allmulticast mode [ 2195.127152][ T7854] bridge_slave_1: left promiscuous mode [ 2195.136271][ T7854] bridge0: port 2(bridge_slave_1) entered disabled state [ 2195.145972][ T7854] bridge_slave_0: left allmulticast mode [ 2195.152127][ T7854] bridge_slave_0: left promiscuous mode [ 2195.160416][ T7854] bridge0: port 1(bridge_slave_0) entered disabled state [ 2195.479997][ T7854] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2195.497586][ T7854] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2195.510600][ T7854] bond0 (unregistering): Released all slaves [ 2195.720475][T18728] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2195.745441][T18728] 8021q: adding VLAN 0 to HW filter on device team0 [ 2195.763416][ T50] bridge0: port 1(bridge_slave_0) entered blocking state [ 2195.770534][ T50] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2195.810611][ T50] bridge0: port 2(bridge_slave_1) entered blocking state [ 2195.817710][ T50] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2196.002067][T18728] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 2196.035758][ T7854] hsr_slave_0: left promiscuous mode [ 2196.042510][ T7854] hsr_slave_1: left promiscuous mode [ 2196.049087][ T7854] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2196.056466][ T7854] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2196.064627][ T7854] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2196.072357][ T7854] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2196.105977][ T7854] veth1_macvtap: left promiscuous mode [ 2196.118529][ T7854] veth0_macvtap: left promiscuous mode [ 2196.124158][ T7854] veth1_vlan: left promiscuous mode [ 2196.140128][ T7854] veth0_vlan: left promiscuous mode [ 2196.748601][ T7854] team0 (unregistering): Port device team_slave_1 removed [ 2196.851568][ T7854] team0 (unregistering): Port device team_slave_0 removed [ 2196.935594][ T8628] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 2196.945680][ T8628] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 2196.956659][ T8628] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 2196.964917][ T8628] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 2196.974347][ T8628] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 2198.237782][T18757] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 2198.253334][T18757] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 2198.282473][T18757] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 2198.358092][T18757] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 2198.682046][T18757] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2198.713042][T18757] 8021q: adding VLAN 0 to HW filter on device team0 [ 2198.750842][T19081] chnl_net:caif_netlink_parms(): no params data found [ 2198.885820][T17365] bridge0: port 1(bridge_slave_0) entered blocking state [ 2198.892972][T17365] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2198.998863][T17365] bridge0: port 2(bridge_slave_1) entered blocking state [ 2199.006026][T17365] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2199.013604][ T8628] Bluetooth: hci3: command tx timeout [ 2199.165876][T19081] bridge0: port 1(bridge_slave_0) entered blocking state [ 2199.174290][T19081] bridge0: port 1(bridge_slave_0) entered disabled state [ 2199.184687][T19081] bridge_slave_0: entered allmulticast mode [ 2199.193837][T19081] bridge_slave_0: entered promiscuous mode [ 2199.203425][T19081] bridge0: port 2(bridge_slave_1) entered blocking state [ 2199.210658][T19081] bridge0: port 2(bridge_slave_1) entered disabled state [ 2199.217834][T19081] bridge_slave_1: entered allmulticast mode [ 2199.225836][T19081] bridge_slave_1: entered promiscuous mode [ 2199.315468][T19081] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2199.355944][T19081] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2199.446417][T19081] team0: Port device team_slave_0 added [ 2199.483619][T19081] team0: Port device team_slave_1 added [ 2199.589912][T19081] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2199.597346][T19081] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2199.625160][T19081] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2199.647581][T19081] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2199.654868][T19081] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2199.683341][T19081] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2199.743794][ T7854] bridge_slave_1: left allmulticast mode [ 2199.758453][ T7854] bridge_slave_1: left promiscuous mode [ 2199.764186][ T7854] bridge0: port 2(bridge_slave_1) entered disabled state [ 2199.790223][ T7854] bridge_slave_0: left allmulticast mode [ 2199.795850][ T7854] bridge_slave_0: left promiscuous mode [ 2199.802741][ T7854] bridge0: port 1(bridge_slave_0) entered disabled state [ 2200.236811][ T7854] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2200.249146][ T7854] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2200.259558][ T7854] bond0 (unregistering): Released all slaves [ 2200.393350][ T7854] hsr_slave_0: left promiscuous mode [ 2200.414065][ T7854] hsr_slave_1: left promiscuous mode [ 2200.429669][ T7854] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2200.441729][ T7854] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2200.784442][ T7854] team0 (unregistering): Port device team_slave_1 removed [ 2200.841259][ T7854] team0 (unregistering): Port device team_slave_0 removed [ 2201.088904][ T8628] Bluetooth: hci3: command tx timeout [ 2201.217760][T19081] hsr_slave_0: entered promiscuous mode [ 2201.224699][T19081] hsr_slave_1: entered promiscuous mode [ 2201.231189][T19081] debugfs: 'hsr0' already exists in 'hsr' [ 2201.236962][T19081] Cannot create hsr debugfs directory [ 2201.747841][T18757] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2201.875060][T18757] veth0_vlan: entered promiscuous mode [ 2201.901464][T18757] veth1_vlan: entered promiscuous mode [ 2201.997719][T18757] veth0_macvtap: entered promiscuous mode [ 2202.025615][T18757] veth1_macvtap: entered promiscuous mode [ 2202.084661][T18757] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2202.107558][T19081] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 2202.127191][T19081] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 2202.167923][T18757] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2202.190006][T19081] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 2202.227486][T19081] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 2202.536508][T19081] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2202.600729][T19081] 8021q: adding VLAN 0 to HW filter on device team0 [ 2202.635178][T17645] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 2202.645826][T17645] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 2202.655664][T17645] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 2202.664187][T17645] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 2202.665798][ T6228] bridge0: port 1(bridge_slave_0) entered blocking state [ 2202.678273][ T6228] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2202.690227][T17645] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 2202.745471][ T6228] bridge0: port 2(bridge_slave_1) entered blocking state [ 2202.752642][ T6228] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2203.170127][ T8628] Bluetooth: hci3: command tx timeout [ 2203.337359][T19081] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2203.379575][T19182] chnl_net:caif_netlink_parms(): no params data found [ 2203.718066][T19182] bridge0: port 1(bridge_slave_0) entered blocking state [ 2203.725606][T19182] bridge0: port 1(bridge_slave_0) entered disabled state [ 2203.739458][T19182] bridge_slave_0: entered allmulticast mode [ 2203.746885][T19182] bridge_slave_0: entered promiscuous mode [ 2203.773210][T19182] bridge0: port 2(bridge_slave_1) entered blocking state [ 2203.780801][T19182] bridge0: port 2(bridge_slave_1) entered disabled state [ 2203.788659][T19182] bridge_slave_1: entered allmulticast mode [ 2203.798570][T19182] bridge_slave_1: entered promiscuous mode [ 2203.931279][T19182] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2203.966759][T19182] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2204.084326][T19182] team0: Port device team_slave_0 added [ 2204.113393][T19182] team0: Port device team_slave_1 added [ 2204.250107][T19182] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2204.257078][T19182] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2204.298545][T19182] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2204.317389][T19182] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2204.324840][T19182] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2204.356011][T19182] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2204.377848][ T7720] bridge_slave_1: left allmulticast mode [ 2204.383689][ T7720] bridge_slave_1: left promiscuous mode [ 2204.389991][ T7720] bridge0: port 2(bridge_slave_1) entered disabled state [ 2204.402500][ T7720] bridge_slave_0: left allmulticast mode [ 2204.408148][ T7720] bridge_slave_0: left promiscuous mode [ 2204.414515][ T7720] bridge0: port 1(bridge_slave_0) entered disabled state [ 2204.733916][ T7720] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2204.744987][ T7720] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2204.756318][ T7720] bond0 (unregistering): Released all slaves [ 2204.768603][ T8628] Bluetooth: hci2: command tx timeout [ 2204.867220][T19081] veth0_vlan: entered promiscuous mode [ 2204.901479][ T7720] hsr_slave_0: left promiscuous mode [ 2204.907618][ T7720] hsr_slave_1: left promiscuous mode [ 2204.914616][ T7720] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2204.924427][ T7720] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2204.933413][ T7720] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2204.941351][ T7720] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2204.965639][ T7720] veth1_macvtap: left promiscuous mode [ 2204.977587][ T7720] veth0_macvtap: left promiscuous mode [ 2204.983847][ T7720] veth1_vlan: left promiscuous mode [ 2204.992030][ T7720] veth0_vlan: left promiscuous mode [ 2205.248806][ T8628] Bluetooth: hci3: command tx timeout [ 2205.552524][ T7720] team0 (unregistering): Port device team_slave_1 removed [ 2205.589215][ T7720] team0 (unregistering): Port device team_slave_0 removed [ 2205.927700][T19182] hsr_slave_0: entered promiscuous mode [ 2205.934234][T19182] hsr_slave_1: entered promiscuous mode [ 2205.946059][T19182] debugfs: 'hsr0' already exists in 'hsr' [ 2205.959963][T19182] Cannot create hsr debugfs directory [ 2205.971746][T19081] veth1_vlan: entered promiscuous mode [ 2206.255593][T19081] veth0_macvtap: entered promiscuous mode [ 2206.326059][T19081] veth1_macvtap: entered promiscuous mode [ 2206.367332][T19081] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2206.414887][T19081] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2206.464130][ T1150] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2206.489233][ T1150] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2206.498014][ T1150] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2206.523275][ T1150] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2206.695555][ T1150] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2206.719875][ T1150] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2206.800779][ T50] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2206.818032][ T50] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2206.848934][ T8628] Bluetooth: hci2: command tx timeout [ 2206.887295][T19182] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 2206.916985][T19182] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 2207.010264][T19182] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 2207.044184][T19182] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 2208.574002][T19254] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 2209.103749][ T8628] Bluetooth: hci2: command tx timeout [ 2209.440531][T19182] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2209.466997][T19182] 8021q: adding VLAN 0 to HW filter on device team0 [ 2209.496102][T17365] bridge0: port 1(bridge_slave_0) entered blocking state [ 2209.503279][T17365] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2209.598193][ T7720] bridge0: port 2(bridge_slave_1) entered blocking state [ 2209.605337][ T7720] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2211.344230][T17645] Bluetooth: hci2: command tx timeout [ 2214.603679][T19182] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2215.351100][T19323] netlink: 12 bytes leftover after parsing attributes in process `syz.7.1941'. [ 2217.617450][T19182] veth0_vlan: entered promiscuous mode [ 2217.631798][T19182] veth1_vlan: entered promiscuous mode [ 2217.779908][T19182] veth0_macvtap: entered promiscuous mode [ 2217.858247][T19182] veth1_macvtap: entered promiscuous mode [ 2217.954373][T19182] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2217.999541][T19182] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2218.322730][ T6110] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2220.393951][T17645] Bluetooth: hci4: command 0x0406 tx timeout [ 2220.608574][ T6110] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2220.617439][ T6110] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2220.939088][ T6110] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2224.157602][T10245] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2224.280416][T10245] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2224.811659][T19350] loop5: detected capacity change from 0 to 512 [ 2224.848653][T19350] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 2224.891272][T19350] EXT4-fs (loop5): 1 truncate cleaned up [ 2224.899019][T19350] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 2225.094164][ T74] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2225.129240][ T74] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2225.710470][T19081] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 2230.368497][T17645] Bluetooth: hci0: command 0x0405 tx timeout [ 2230.831777][T17645] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 2230.848009][T17645] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 2230.856245][T17645] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 2230.865868][T17645] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 2230.880602][T17645] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 2231.345910][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 2231.357827][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 2232.307929][T19385] loop7: detected capacity change from 0 to 16 [ 2232.339168][T19385] erofs (device loop7): mounted with root inode @ nid 36. [ 2232.367216][T19384] erofs (device loop7): bogus lookback distance 1388 @ lcn 42 of nid 36 [ 2232.399541][T19384] erofs (device loop7): read error -117 @ 43 of nid 36 [ 2232.410178][T19384] erofs (device loop7): bogus lookback distance 1388 @ lcn 42 of nid 36 [ 2232.418706][T19384] erofs (device loop7): read error -117 @ 43 of nid 36 [ 2233.008812][T17645] Bluetooth: hci6: command tx timeout [ 2233.580155][T19379] chnl_net:caif_netlink_parms(): no params data found [ 2235.294670][T17645] Bluetooth: hci6: command tx timeout [ 2236.224911][ T31] audit: type=1800 audit(2236.204:72): pid=19405 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.7.1964" name="SYSV00000000" dev="hugetlbfs" ino=0 res=0 errno=0 [ 2237.328501][T17645] Bluetooth: hci6: command tx timeout [ 2238.530368][T19379] bridge0: port 1(bridge_slave_0) entered blocking state [ 2238.553753][T19379] bridge0: port 1(bridge_slave_0) entered disabled state [ 2238.610997][T19379] bridge_slave_0: entered allmulticast mode [ 2238.685415][T19416] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(8) [ 2238.692185][T19416] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 2238.700952][T19416] vhci_hcd vhci_hcd.0: Device attached [ 2239.444115][T15039] usb 40-1: SetAddress Request (2) to port 0 [ 2239.477481][T15039] usb 40-1: new SuperSpeed USB device number 2 using vhci_hcd [ 2239.515464][T17645] Bluetooth: hci6: command tx timeout [ 2239.887615][T19417] vhci_hcd: connection reset by peer [ 2240.339238][ T6110] vhci_hcd vhci_hcd.3: stop threads [ 2240.450179][ T6110] vhci_hcd vhci_hcd.3: release socket [ 2240.469332][T19379] bridge_slave_0: entered promiscuous mode [ 2240.569412][ T6110] vhci_hcd vhci_hcd.3: disconnect device [ 2241.231539][ T12] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2241.465952][T19379] bridge0: port 2(bridge_slave_1) entered blocking state [ 2241.501318][T19379] bridge0: port 2(bridge_slave_1) entered disabled state [ 2241.633166][T19434] loop7: detected capacity change from 0 to 512 [ 2242.307856][T19379] bridge_slave_1: entered allmulticast mode [ 2242.324872][T19379] bridge_slave_1: entered promiscuous mode [ 2242.367632][T19434] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 2242.409349][T19434] EXT4-fs (loop7): 1 truncate cleaned up [ 2242.416504][T19434] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 2242.866035][T18453] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 2242.887404][T19435] loop0: detected capacity change from 0 to 4096 [ 2244.894401][T19448] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 2244.905824][T19435] NILFS (loop0): corrupt root inode [ 2244.918764][T19449] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1960'. [ 2244.939403][T15039] usb 40-1: device descriptor read/8, error -110 [ 2245.356386][T19454] loop7: detected capacity change from 0 to 2048 [ 2245.676528][T19454] UDF-fs: error (device loop7): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 2245.713675][T19454] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 2245.928464][ T12] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2245.968461][T15039] usb usb40-port1: attempt power cycle [ 2246.387259][T19379] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2246.716817][T15039] usb usb40-port1: unable to enumerate USB device [ 2247.705089][T19379] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2249.436949][ T8628] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 2249.450271][ T8628] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 2249.458107][ T8628] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 2249.471306][ T8628] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 2249.509167][ T8628] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 2249.662002][T19470] Bluetooth: MGMT ver 1.23 [ 2249.710894][ T8628] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 2249.728610][ T8628] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 2249.745941][ T8628] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 2249.753895][ T8628] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 2249.769315][ T8628] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 2251.100651][ T12] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2251.628454][T17645] Bluetooth: hci0: command tx timeout [ 2251.917112][T19482] loop7: detected capacity change from 0 to 8 [ 2251.953588][T17645] Bluetooth: hci7: command tx timeout [ 2252.376927][T19482] SQUASHFS error: xz decompression failed, data probably corrupt [ 2252.385077][T19482] SQUASHFS error: Failed to read block 0x108: -5 [ 2252.391460][T19482] SQUASHFS error: Unable to read metadata cache entry [106] [ 2252.398800][T19482] SQUASHFS error: Unable to read inode 0x11f [ 2253.648499][T17645] Bluetooth: hci0: command tx timeout [ 2253.872458][ T12] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2253.969942][T17645] Bluetooth: hci7: command tx timeout [ 2254.331984][T19379] team0: Port device team_slave_0 added [ 2257.568942][ T8628] Bluetooth: hci7: command tx timeout [ 2257.576059][T17645] Bluetooth: hci0: command tx timeout [ 2258.866207][T19379] team0: Port device team_slave_1 added [ 2259.182578][T19501] netlink: set zone limit has 4 unknown bytes [ 2259.549377][T19379] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2259.556354][T19379] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2259.707743][ T8628] Bluetooth: hci7: command tx timeout [ 2259.707761][T15044] Bluetooth: hci0: command tx timeout [ 2259.728620][T19379] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2259.882022][T19379] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2259.899858][T19379] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2260.015928][T19379] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2261.187444][T19379] hsr_slave_0: entered promiscuous mode [ 2261.219702][T19379] hsr_slave_1: entered promiscuous mode [ 2261.253276][T19379] debugfs: 'hsr0' already exists in 'hsr' [ 2261.268424][T19379] Cannot create hsr debugfs directory [ 2261.609377][ T12] bridge_slave_1: left allmulticast mode [ 2261.615162][ T12] bridge_slave_1: left promiscuous mode [ 2261.648858][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 2261.662322][ T12] bridge_slave_0: left allmulticast mode [ 2261.667978][ T12] bridge_slave_0: left promiscuous mode [ 2261.674084][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 2266.278772][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2266.301696][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2266.320638][ T12] bond0 (unregistering): Released all slaves [ 2271.651773][T19572] usb usb5: usbfs: process 19572 (syz.1.1993) did not claim interface 0 before use [ 2271.679140][T19572] fuse: Unknown parameter '0x0000000000000007' [ 2272.379753][T15459] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 2272.569336][T19467] chnl_net:caif_netlink_parms(): no params data found [ 2272.597613][T19471] chnl_net:caif_netlink_parms(): no params data found [ 2272.888856][T15459] usb 4-1: config 0 has no interfaces? [ 2272.908319][T15459] usb 4-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 2273.023279][T19581] input: syz1 as /devices/virtual/input/input42 [ 2273.670944][T15459] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2273.683076][T15459] usb 4-1: Product: syz [ 2273.687730][T15459] usb 4-1: Manufacturer: syz [ 2273.692416][T15459] usb 4-1: SerialNumber: syz [ 2273.706824][T15459] usb 4-1: config 0 descriptor?? [ 2274.636827][T19580] loop1: detected capacity change from 0 to 131072 [ 2276.463220][T19580] F2FS-fs (loop1): Unable to read 1th superblock [ 2276.471279][T19580] F2FS-fs (loop1): Unable to read 2th superblock [ 2276.664470][ T5834] usb 4-1: USB disconnect, device number 7 [ 2276.808582][ T12] hsr_slave_0: left promiscuous mode [ 2276.838988][ T12] hsr_slave_1: left promiscuous mode [ 2276.845087][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2276.862095][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2276.899365][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2276.906749][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2276.948147][ T12] veth1_macvtap: left promiscuous mode [ 2276.978867][ T12] veth0_macvtap: left promiscuous mode [ 2276.999794][ T12] veth1_vlan: left promiscuous mode [ 2277.005224][ T12] veth0_vlan: left promiscuous mode [ 2278.056118][ T12] team0 (unregistering): Port device team_slave_1 removed [ 2278.272266][ T12] team0 (unregistering): Port device team_slave_0 removed [ 2292.380936][ T8628] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 2292.391127][ T8628] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 2292.399207][ T8628] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 2292.407248][ T8628] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 2292.424111][ T8628] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 2292.776017][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 2292.786097][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 2293.931071][T19699] input: syz1 as /devices/virtual/input/input43 [ 2294.016289][T19471] bridge0: port 1(bridge_slave_0) entered blocking state [ 2294.057086][T19471] bridge0: port 1(bridge_slave_0) entered disabled state [ 2294.180372][T19471] bridge_slave_0: entered allmulticast mode [ 2294.232597][T19471] bridge_slave_0: entered promiscuous mode [ 2294.291239][T19471] bridge0: port 2(bridge_slave_1) entered blocking state [ 2294.331533][T19471] bridge0: port 2(bridge_slave_1) entered disabled state [ 2294.351781][T19471] bridge_slave_1: entered allmulticast mode [ 2294.360141][T19471] bridge_slave_1: entered promiscuous mode [ 2294.637876][ T8628] Bluetooth: hci2: command tx timeout [ 2295.632960][T19467] bridge0: port 1(bridge_slave_0) entered blocking state [ 2295.665743][T19467] bridge0: port 1(bridge_slave_0) entered disabled state [ 2295.752495][T19467] bridge_slave_0: entered allmulticast mode [ 2295.792642][T19467] bridge_slave_0: entered promiscuous mode [ 2296.255898][T19728] input: syz1 as /devices/virtual/input/input44 [ 2296.993061][T19731] binder: 19725:19731 ioctl c0306201 0 returned -14 [ 2297.497682][ T8628] Bluetooth: hci2: command tx timeout [ 2297.551811][T19467] bridge0: port 2(bridge_slave_1) entered blocking state [ 2297.570492][T19467] bridge0: port 2(bridge_slave_1) entered disabled state [ 2297.586554][T19467] bridge_slave_1: entered allmulticast mode [ 2297.600480][T19467] bridge_slave_1: entered promiscuous mode [ 2299.128059][T19471] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2301.194356][ T8628] Bluetooth: hci2: command tx timeout [ 2301.219423][T19471] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2301.343811][T19467] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2301.680457][T19467] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2302.700363][T19471] team0: Port device team_slave_0 added [ 2302.934608][T19760] input: syz1 as /devices/virtual/input/input45 [ 2303.229851][T19471] team0: Port device team_slave_1 added [ 2303.248920][ T8628] Bluetooth: hci2: command tx timeout [ 2304.505272][T19774] vhci_hcd vhci_hcd.0: pdev(7) rhport(0) sockfd(8) [ 2304.511830][T19774] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 2304.520001][T19774] vhci_hcd vhci_hcd.0: Device attached [ 2304.898826][T15542] usb 48-1: SetAddress Request (2) to port 0 [ 2304.910882][T15542] usb 48-1: new SuperSpeed USB device number 2 using vhci_hcd [ 2305.336638][T19775] vhci_hcd: connection reset by peer [ 2305.456093][ T6110] vhci_hcd vhci_hcd.7: stop threads [ 2305.533964][ T6110] vhci_hcd vhci_hcd.7: release socket [ 2305.617110][ T6110] vhci_hcd vhci_hcd.7: disconnect device [ 2305.961128][T19467] team0: Port device team_slave_0 added [ 2306.037442][T19471] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2306.044855][T19471] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2308.326954][T19471] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2308.341758][T19467] team0: Port device team_slave_1 added [ 2309.205613][ T12] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2309.980561][T19797] overlayfs: failed to resolve './file1': -2 [ 2311.144979][T15542] usb 48-1: device descriptor read/8, error -110 [ 2311.158868][T19471] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2311.183988][T19471] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2311.348485][T19471] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2311.476924][T15044] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 2311.495095][T15044] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 2311.504357][T15044] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 2311.529121][T15044] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 2311.563441][T15044] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 2311.619412][T15542] usb usb48-port1: attempt power cycle [ 2312.039782][ T8628] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 2312.051293][ T8628] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 2312.060841][ T8628] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 2312.102805][ T8628] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 2312.114071][ T8628] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 2312.304380][T15542] usb usb48-port1: unable to enumerate USB device [ 2312.636620][ T12] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2313.658446][ T8628] Bluetooth: hci3: command tx timeout [ 2313.679587][ T12] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2314.338536][ T8628] Bluetooth: hci6: command tx timeout [ 2314.372725][ T12] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2315.001696][T19691] chnl_net:caif_netlink_parms(): no params data found [ 2317.144334][ T8628] Bluetooth: hci3: command tx timeout [ 2317.144346][T15044] Bluetooth: hci6: command tx timeout [ 2317.626898][T19839] input: syz1 as /devices/virtual/input/input46 [ 2317.811396][T19844] binder: 19840:19844 ioctl c0306201 0 returned -14 [ 2318.879012][T19851] dlm: no local IP address has been set [ 2318.884945][T19851] dlm: cannot start dlm midcomms -107 [ 2319.168858][T15044] Bluetooth: hci6: command tx timeout [ 2319.178835][T15044] Bluetooth: hci3: command tx timeout [ 2320.056149][T19691] bridge0: port 1(bridge_slave_0) entered blocking state [ 2320.064555][T19691] bridge0: port 1(bridge_slave_0) entered disabled state [ 2321.088535][T19863] netlink: 32 bytes leftover after parsing attributes in process `syz.7.2037'. [ 2321.120470][T17508] IPVS: starting estimator thread 0... [ 2321.213856][T19691] bridge_slave_0: entered allmulticast mode [ 2321.241586][T19691] bridge_slave_0: entered promiscuous mode [ 2321.248498][T19864] IPVS: using max 25 ests per chain, 60000 per kthread [ 2321.248746][ T8628] Bluetooth: hci6: command tx timeout [ 2321.260906][T15044] Bluetooth: hci3: command tx timeout [ 2321.273736][T19691] bridge0: port 2(bridge_slave_1) entered blocking state [ 2321.281010][T19691] bridge0: port 2(bridge_slave_1) entered disabled state [ 2321.288288][T19691] bridge_slave_1: entered allmulticast mode [ 2321.297373][T19691] bridge_slave_1: entered promiscuous mode [ 2322.010427][T19870] loop1: detected capacity change from 0 to 164 [ 2322.402848][T19871] loop1: detected capacity change from 0 to 2048 [ 2322.691868][T19814] Alternate GPT is invalid, using primary GPT. [ 2322.698314][T19814] loop1: p2 p3 p7 [ 2322.769514][T19871] loop1: unable to read partition table [ 2322.775412][T19871] loop_reread_partitions: partition scan of loop1 () failed (rc=-5) [ 2323.042358][T19691] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2323.072813][T19757] udevd[19757]: inotify_add_watch(7, /dev/loop1p7, 10) failed: No such file or directory [ 2323.073621][T19814] udevd[19814]: inotify_add_watch(7, /dev/loop1p3, 10) failed: No such file or directory [ 2323.097929][T19691] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2323.099460][T19875] udevd[19875]: inotify_add_watch(7, /dev/loop1p2, 10) failed: No such file or directory [ 2323.587524][T19691] team0: Port device team_slave_0 added [ 2323.629014][T19691] team0: Port device team_slave_1 added [ 2323.873942][ T12] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2324.697140][T19801] chnl_net:caif_netlink_parms(): no params data found [ 2327.361705][ T12] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2327.443977][T19691] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2327.470214][T19691] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2327.528604][T19691] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2327.835206][T19691] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2327.857911][T19691] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2327.934007][T19691] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2328.271196][T19900] 8021q: adding VLAN 0 to HW filter on device bond1 [ 2328.452636][ T12] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2328.834024][ T12] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2328.966209][T19806] chnl_net:caif_netlink_parms(): no params data found [ 2331.460109][T19691] hsr_slave_0: entered promiscuous mode [ 2331.596332][T19915] loop1: detected capacity change from 0 to 2048 [ 2331.611736][T19915] UDF-fs: error (device loop1): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 2331.900313][T19691] hsr_slave_1: entered promiscuous mode [ 2331.906798][T19691] debugfs: 'hsr0' already exists in 'hsr' [ 2331.914188][T19691] Cannot create hsr debugfs directory [ 2331.928755][T19801] bridge0: port 1(bridge_slave_0) entered blocking state [ 2331.934472][T19915] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 2331.937008][T19801] bridge0: port 1(bridge_slave_0) entered disabled state [ 2332.027971][T19801] bridge_slave_0: entered allmulticast mode [ 2332.038336][T19801] bridge_slave_0: entered promiscuous mode [ 2332.112617][T19801] bridge0: port 2(bridge_slave_1) entered blocking state [ 2332.137277][T19801] bridge0: port 2(bridge_slave_1) entered disabled state [ 2332.153408][T19801] bridge_slave_1: entered allmulticast mode [ 2332.177268][T19801] bridge_slave_1: entered promiscuous mode [ 2332.722091][T19801] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2332.807240][T19801] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2334.105723][T19933] loop3: detected capacity change from 0 to 16 [ 2334.137563][T19933] MTD: Attempt to mount non-MTD device "/dev/loop3" [ 2337.914910][T19945] loop1: detected capacity change from 0 to 512 [ 2337.970245][T19801] team0: Port device team_slave_0 added [ 2337.975965][T19806] bridge0: port 1(bridge_slave_0) entered blocking state [ 2338.030336][T19806] bridge0: port 1(bridge_slave_0) entered disabled state [ 2338.041403][T19945] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 2338.058779][T19806] bridge_slave_0: entered allmulticast mode [ 2338.066899][T19806] bridge_slave_0: entered promiscuous mode [ 2338.219845][T19801] team0: Port device team_slave_1 added [ 2339.607419][T19806] bridge0: port 2(bridge_slave_1) entered blocking state [ 2339.617712][T16766] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 2339.640402][T19806] bridge0: port 2(bridge_slave_1) entered disabled state [ 2339.693138][T19806] bridge_slave_1: entered allmulticast mode [ 2339.916635][T19806] bridge_slave_1: entered promiscuous mode [ 2340.731801][ T12] bridge_slave_1: left allmulticast mode [ 2340.741439][ T12] bridge_slave_1: left promiscuous mode [ 2340.747786][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 2340.779234][ T12] bridge_slave_0: left allmulticast mode [ 2340.785052][ T12] bridge_slave_0: left promiscuous mode [ 2340.797739][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 2340.812724][ T12] bridge_slave_1: left allmulticast mode [ 2340.823981][ T12] bridge_slave_1: left promiscuous mode [ 2340.830703][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 2340.844628][ T12] bridge_slave_0: left allmulticast mode [ 2340.852873][ T12] bridge_slave_0: left promiscuous mode [ 2340.861338][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 2340.891364][ T12] bridge_slave_1: left allmulticast mode [ 2340.897576][ T12] bridge_slave_1: left promiscuous mode [ 2340.904606][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 2340.921499][ T12] bridge_slave_0: left allmulticast mode [ 2340.927817][ T12] bridge_slave_0: left promiscuous mode [ 2340.935864][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 2341.254555][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2341.265707][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2341.276731][ T12] bond0 (unregistering): Released all slaves [ 2341.668313][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2341.679995][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2341.691029][ T12] bond0 (unregistering): Released all slaves [ 2342.011294][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2342.026049][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2342.036886][ T12] bond0 (unregistering): Released all slaves [ 2342.071850][T19806] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2342.094149][T19801] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2342.138445][T19801] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2342.198488][T19801] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2342.361883][T19806] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2342.400048][T19801] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2342.410697][T19801] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2342.450570][T19801] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2342.471280][T19975] loop3: detected capacity change from 0 to 1024 [ 2345.216399][T19988] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2054'. [ 2345.712627][ T9629] hfsplus: b-tree write err: -5, ino 4 [ 2347.744065][T19806] team0: Port device team_slave_0 added [ 2347.877751][T19801] hsr_slave_0: entered promiscuous mode [ 2347.912972][T19801] hsr_slave_1: entered promiscuous mode [ 2347.931955][T19801] debugfs: 'hsr0' already exists in 'hsr' [ 2347.953236][T19801] Cannot create hsr debugfs directory [ 2348.105035][T19806] team0: Port device team_slave_1 added [ 2350.770411][T19806] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2350.777388][T19806] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2350.836844][T19806] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2352.858054][T19806] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2352.865550][T19806] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2352.914901][T19806] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2353.183533][T15044] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 2353.210086][T15044] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 2353.222675][T15044] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 2353.243968][T15044] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 2353.258412][T15044] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 2353.731780][ T12] hsr_slave_0: left promiscuous mode [ 2353.758711][ T12] hsr_slave_1: left promiscuous mode [ 2353.769068][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2353.802909][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2353.835094][ T12] hsr_slave_0: left promiscuous mode [ 2353.849982][ T12] hsr_slave_1: left promiscuous mode [ 2353.856106][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2353.879890][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2353.888025][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2353.908606][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2353.931658][ T12] hsr_slave_0: left promiscuous mode [ 2353.949622][ T12] hsr_slave_1: left promiscuous mode [ 2353.955737][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2353.978758][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2353.999774][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2354.007160][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2354.091295][ T12] veth1_macvtap: left promiscuous mode [ 2354.096866][ T12] veth0_macvtap: left promiscuous mode [ 2354.118644][ T12] veth1_vlan: left promiscuous mode [ 2354.123989][ T12] veth0_vlan: left promiscuous mode [ 2354.150697][ T12] veth1_macvtap: left promiscuous mode [ 2354.156243][ T12] veth0_macvtap: left promiscuous mode [ 2354.162363][ T12] veth1_vlan: left promiscuous mode [ 2354.167696][ T12] veth0_vlan: left promiscuous mode [ 2354.213834][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 2354.228432][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 2354.994112][ T12] team0 (unregistering): Port device team_slave_1 removed [ 2355.071122][ T12] team0 (unregistering): Port device team_slave_0 removed [ 2355.412428][T15044] Bluetooth: hci0: command tx timeout [ 2356.092144][ T12] team0 (unregistering): Port device team_slave_1 removed [ 2356.255356][ T12] team0 (unregistering): Port device team_slave_0 removed [ 2357.498652][T15044] Bluetooth: hci0: command tx timeout [ 2358.064119][ T12] team0 (unregistering): Port device team_slave_1 removed [ 2358.153318][ T12] team0 (unregistering): Port device team_slave_0 removed [ 2359.016334][T19806] hsr_slave_0: entered promiscuous mode [ 2359.030678][T19806] hsr_slave_1: entered promiscuous mode [ 2359.037329][T19806] debugfs: 'hsr0' already exists in 'hsr' [ 2359.043946][T19806] Cannot create hsr debugfs directory [ 2359.570562][T15044] Bluetooth: hci0: command tx timeout [ 2360.372171][T20021] chnl_net:caif_netlink_parms(): no params data found [ 2360.643795][T20021] bridge0: port 1(bridge_slave_0) entered blocking state [ 2360.651077][T20021] bridge0: port 1(bridge_slave_0) entered disabled state [ 2360.658216][T20021] bridge_slave_0: entered allmulticast mode [ 2360.667802][T20021] bridge_slave_0: entered promiscuous mode [ 2360.677776][T20021] bridge0: port 2(bridge_slave_1) entered blocking state [ 2360.685123][T20021] bridge0: port 2(bridge_slave_1) entered disabled state [ 2360.692346][T20021] bridge_slave_1: entered allmulticast mode [ 2360.699892][T20021] bridge_slave_1: entered promiscuous mode [ 2360.781973][T20021] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2360.799948][T20021] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2360.861107][T20021] team0: Port device team_slave_0 added [ 2360.890412][T20021] team0: Port device team_slave_1 added [ 2361.030264][T20021] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2361.037227][T20021] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2361.067517][T20021] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2361.102513][T20021] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2361.109553][T20021] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2361.137948][T20021] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2361.293249][T19801] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 2361.319826][T20021] hsr_slave_0: entered promiscuous mode [ 2361.326551][T20021] hsr_slave_1: entered promiscuous mode [ 2361.333396][T20021] debugfs: 'hsr0' already exists in 'hsr' [ 2361.340073][T20021] Cannot create hsr debugfs directory [ 2361.350150][T19801] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 2361.416030][T19801] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 2361.457277][T19801] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 2361.649896][T15044] Bluetooth: hci0: command tx timeout [ 2361.699226][T19806] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 2361.737870][ T6196] bridge_slave_1: left allmulticast mode [ 2361.743841][ T6196] bridge_slave_1: left promiscuous mode [ 2361.750466][ T6196] bridge0: port 2(bridge_slave_1) entered disabled state [ 2361.764494][ T6196] bridge_slave_0: left allmulticast mode [ 2361.771556][ T6196] bridge_slave_0: left promiscuous mode [ 2361.777362][ T6196] bridge0: port 1(bridge_slave_0) entered disabled state [ 2361.788701][ T6196] bridge_slave_1: left allmulticast mode [ 2361.794335][ T6196] bridge_slave_1: left promiscuous mode [ 2361.800115][ T6196] bridge0: port 2(bridge_slave_1) entered disabled state [ 2361.809510][ T6196] bridge_slave_0: left allmulticast mode [ 2361.815151][ T6196] bridge_slave_0: left promiscuous mode [ 2361.821991][ T6196] bridge0: port 1(bridge_slave_0) entered disabled state [ 2361.833217][ T6196] bridge_slave_1: left allmulticast mode [ 2361.838938][ T6196] bridge_slave_1: left promiscuous mode [ 2361.844640][ T6196] bridge0: port 2(bridge_slave_1) entered disabled state [ 2361.853742][ T6196] bridge_slave_0: left allmulticast mode [ 2361.860551][ T6196] bridge_slave_0: left promiscuous mode [ 2361.867769][ T6196] bridge0: port 1(bridge_slave_0) entered disabled state [ 2361.986308][ T6196] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2362.003594][ T6196] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2362.014817][ T6196] bond0 (unregistering): Released all slaves [ 2362.106360][ T6196] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2362.118199][ T6196] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2362.129950][ T6196] bond0 (unregistering): Released all slaves [ 2362.241965][ T6196] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2362.257170][ T6196] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2362.268004][ T6196] bond0 (unregistering): Released all slaves [ 2362.285353][T19806] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 2362.296663][T19806] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 2362.327050][T19806] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 2362.483050][ T6196] hsr_slave_0: left promiscuous mode [ 2362.489893][ T6196] hsr_slave_1: left promiscuous mode [ 2362.495789][ T6196] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2362.505043][ T6196] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2362.513022][ T6196] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2362.529548][ T6196] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2362.726713][ T6196] team0 (unregistering): Port device team_slave_1 removed [ 2362.773886][ T6196] team0 (unregistering): Port device team_slave_0 removed [ 2362.995846][ T6196] team0 (unregistering): Port device team_slave_1 removed [ 2363.026727][ T6196] team0 (unregistering): Port device team_slave_0 removed [ 2363.185982][ T6196] team0 (unregistering): Port device team_slave_1 removed [ 2363.213731][ T6196] team0 (unregistering): Port device team_slave_0 removed [ 2363.631653][T19801] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2363.674265][T19801] 8021q: adding VLAN 0 to HW filter on device team0 [ 2363.719786][ T37] bridge0: port 1(bridge_slave_0) entered blocking state [ 2363.726947][ T37] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2363.820916][ T37] bridge0: port 2(bridge_slave_1) entered blocking state [ 2363.828087][ T37] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2364.020880][T19806] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2364.029876][T20021] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 2364.084048][T20021] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 2364.137626][T20021] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 2364.211738][T19801] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 2364.227041][T20021] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 2364.345207][T19806] 8021q: adding VLAN 0 to HW filter on device team0 [ 2364.392162][ T6228] bridge0: port 1(bridge_slave_0) entered blocking state [ 2364.399390][ T6228] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2364.422020][ T6228] bridge0: port 2(bridge_slave_1) entered blocking state [ 2364.429210][ T6228] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2364.779554][T20021] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2364.831403][T20021] 8021q: adding VLAN 0 to HW filter on device team0 [ 2364.863522][ T37] bridge0: port 1(bridge_slave_0) entered blocking state [ 2364.870693][ T37] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2364.903939][T19801] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2364.917520][ T37] bridge0: port 2(bridge_slave_1) entered blocking state [ 2364.924701][ T37] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2365.325006][T19806] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2365.482378][T20021] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2365.633603][T20021] veth0_vlan: entered promiscuous mode [ 2365.698833][T20021] veth1_vlan: entered promiscuous mode [ 2365.838740][T20021] veth0_macvtap: entered promiscuous mode [ 2365.846644][T19801] veth0_vlan: entered promiscuous mode [ 2365.881337][T20021] veth1_macvtap: entered promiscuous mode [ 2365.913419][T19801] veth1_vlan: entered promiscuous mode [ 2365.995289][T20021] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2366.047458][T19801] veth0_macvtap: entered promiscuous mode [ 2366.067769][T20021] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2366.087879][T19801] veth1_macvtap: entered promiscuous mode [ 2366.114159][T14520] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2366.125188][T14520] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2366.156297][T14520] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2366.182599][T19801] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2366.192269][T14520] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2366.222052][T19801] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2366.301034][ T7854] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2366.333825][ T7854] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2366.381570][ T7854] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2366.392076][ T7854] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2366.434266][ T6196] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2366.455006][ T6196] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2366.502811][T19806] veth0_vlan: entered promiscuous mode [ 2366.521951][ T66] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2366.542867][ T66] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2366.547688][T19806] veth1_vlan: entered promiscuous mode [ 2366.686085][ T7854] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2366.710513][ T7854] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2367.881480][ T66] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2368.528917][ T66] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2368.606759][T19806] veth0_macvtap: entered promiscuous mode [ 2368.618055][T19806] veth1_macvtap: entered promiscuous mode [ 2368.709478][T19806] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2368.865331][T19806] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2368.988621][T17365] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2369.080605][T17365] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2369.160108][T17365] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2369.806914][T20222] loop1: detected capacity change from 0 to 2048 [ 2369.932477][T20222] UDF-fs: error (device loop1): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 2369.973378][T20222] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 2372.374370][T20227] dlm: no local IP address has been set [ 2372.380110][T20227] dlm: cannot start dlm midcomms -107 [ 2373.096755][T17365] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2374.021792][ T8628] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 2374.045774][ T8628] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 2374.062493][ T8628] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 2374.171035][ T8628] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 2374.197401][ T8628] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 2374.595091][T20244] loop7: detected capacity change from 0 to 512 [ 2374.699594][T20244] EXT4-fs (loop7): blocks per group (95) and clusters per group (32768) inconsistent [ 2374.719012][T20246] Bluetooth: MGMT ver 1.23 [ 2374.920375][ T8628] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 2375.001432][ T8628] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 2375.010028][ T8628] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 2375.018082][ T8628] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 2375.026271][ T8628] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 2376.369673][ T8628] Bluetooth: hci2: command tx timeout [ 2377.408491][ T8628] Bluetooth: hci7: command tx timeout [ 2377.418847][T20257] loop7: detected capacity change from 0 to 512 [ 2377.471661][T20257] EXT4-fs error (device loop7): ext4_orphan_get:1391: inode #15: comm syz.7.2077: inode has both inline data and extents flags [ 2379.451114][ T8628] Bluetooth: hci2: command tx timeout [ 2379.487388][T20257] EXT4-fs error (device loop7): ext4_orphan_get:1394: comm syz.7.2077: couldn't read orphan inode 15 (err -117) [ 2379.508505][ T8628] Bluetooth: hci7: command tx timeout [ 2379.544527][T20257] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 2380.834944][ T31] audit: type=1804 audit(2380.144:73): pid=20270 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.7.2077" name="/newroot/67/file0/bus" dev="loop7" ino=18 res=1 errno=0 [ 2381.315938][ T31] audit: type=1800 audit(2380.144:74): pid=20270 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.7.2077" name="bus" dev="loop7" ino=18 res=0 errno=0 [ 2381.384448][T18453] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 2381.488448][ T8628] Bluetooth: hci2: command tx timeout [ 2381.585230][ T8628] Bluetooth: hci7: command tx timeout [ 2382.617957][T17365] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2382.735598][T20233] chnl_net:caif_netlink_parms(): no params data found [ 2383.578577][ T8628] Bluetooth: hci2: command tx timeout [ 2383.648565][ T8628] Bluetooth: hci7: command tx timeout [ 2385.862150][T20288] loop2: detected capacity change from 0 to 1024 [ 2386.184406][T17365] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2386.477038][T20296] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2081'. [ 2386.692854][T17365] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2386.870421][T17365] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2386.997041][T20247] chnl_net:caif_netlink_parms(): no params data found [ 2387.020449][T20233] bridge0: port 1(bridge_slave_0) entered blocking state [ 2387.034682][T14520] hfsplus: b-tree write err: -5, ino 4 [ 2387.050127][T20233] bridge0: port 1(bridge_slave_0) entered disabled state [ 2387.732390][T20299] overlayfs: failed to resolve './file1': -2 [ 2389.008724][T20233] bridge_slave_0: entered allmulticast mode [ 2389.016691][T20233] bridge_slave_0: entered promiscuous mode [ 2389.103004][T20233] bridge0: port 2(bridge_slave_1) entered blocking state [ 2389.118510][T20233] bridge0: port 2(bridge_slave_1) entered disabled state [ 2389.125777][T20233] bridge_slave_1: entered allmulticast mode [ 2389.134434][T20233] bridge_slave_1: entered promiscuous mode [ 2389.252242][T20233] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2389.307846][T20233] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2389.463537][T20247] bridge0: port 1(bridge_slave_0) entered blocking state [ 2389.471942][T20247] bridge0: port 1(bridge_slave_0) entered disabled state [ 2389.480774][T20247] bridge_slave_0: entered allmulticast mode [ 2389.491706][T20247] bridge_slave_0: entered promiscuous mode [ 2389.504099][T20233] team0: Port device team_slave_0 added [ 2389.520718][T20247] bridge0: port 2(bridge_slave_1) entered blocking state [ 2389.530554][T20247] bridge0: port 2(bridge_slave_1) entered disabled state [ 2389.537824][T20247] bridge_slave_1: entered allmulticast mode [ 2389.547545][T20247] bridge_slave_1: entered promiscuous mode [ 2389.580658][T20233] team0: Port device team_slave_1 added [ 2389.640302][T17365] bridge_slave_1: left allmulticast mode [ 2389.646026][T17365] bridge_slave_1: left promiscuous mode [ 2389.652919][T17365] bridge0: port 2(bridge_slave_1) entered disabled state [ 2389.663603][T17365] bridge_slave_0: left allmulticast mode [ 2389.669723][T17365] bridge_slave_0: left promiscuous mode [ 2389.675553][T17365] bridge0: port 1(bridge_slave_0) entered disabled state [ 2390.030753][T17365] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2390.043179][T17365] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2390.058272][T17365] bond0 (unregistering): Released all slaves [ 2390.115505][T20247] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2390.133194][T20247] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2390.154829][T20233] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2390.170570][T20233] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2390.199035][T20233] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2390.225421][T20233] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2390.236309][T20233] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2390.262547][T20233] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2390.297054][T20247] team0: Port device team_slave_0 added [ 2390.309875][T17365] hsr_slave_0: left promiscuous mode [ 2390.316027][T17365] hsr_slave_1: left promiscuous mode [ 2390.322397][T17365] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2390.330794][T17365] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2390.339654][T17365] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2390.347088][T17365] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2390.366922][T17365] veth1_macvtap: left promiscuous mode [ 2390.372803][T17365] veth0_macvtap: left promiscuous mode [ 2390.378669][T17365] veth1_vlan: left promiscuous mode [ 2390.384022][T17365] veth0_vlan: left promiscuous mode [ 2390.788126][T17365] team0 (unregistering): Port device team_slave_1 removed [ 2390.825498][T17365] team0 (unregistering): Port device team_slave_0 removed [ 2391.188046][T20247] team0: Port device team_slave_1 added [ 2391.272156][T20247] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2391.280009][T20247] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2391.307812][T20247] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2391.345692][T20233] hsr_slave_0: entered promiscuous mode [ 2391.352371][T20233] hsr_slave_1: entered promiscuous mode [ 2391.361211][T20233] debugfs: 'hsr0' already exists in 'hsr' [ 2391.366984][T20233] Cannot create hsr debugfs directory [ 2391.373824][T20247] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2391.382235][T20247] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2391.408695][T20247] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2391.516501][T20247] hsr_slave_0: entered promiscuous mode [ 2391.531909][T20247] hsr_slave_1: entered promiscuous mode [ 2391.538140][T20247] debugfs: 'hsr0' already exists in 'hsr' [ 2391.545055][T20247] Cannot create hsr debugfs directory [ 2391.775195][T20233] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2391.853690][T20233] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2391.926666][T20233] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2392.007931][T20233] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2392.098994][T17365] bridge_slave_1: left allmulticast mode [ 2392.104678][T17365] bridge_slave_1: left promiscuous mode [ 2392.111569][T17365] bridge0: port 2(bridge_slave_1) entered disabled state [ 2392.121328][T17365] bridge_slave_0: left allmulticast mode [ 2392.126958][T17365] bridge_slave_0: left promiscuous mode [ 2392.138617][T17365] bridge0: port 1(bridge_slave_0) entered disabled state [ 2392.435542][T17365] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2392.446771][T17365] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2392.457622][T17365] bond0 (unregistering): Released all slaves [ 2392.761112][T17365] hsr_slave_0: left promiscuous mode [ 2392.767104][T17365] hsr_slave_1: left promiscuous mode [ 2392.774528][T17365] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2392.781985][T17365] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2392.792141][T17365] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2392.799598][T17365] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2392.819576][T17365] veth1_macvtap: left promiscuous mode [ 2392.825098][T17365] veth0_macvtap: left promiscuous mode [ 2392.831005][T17365] veth1_vlan: left promiscuous mode [ 2392.836301][T17365] veth0_vlan: left promiscuous mode [ 2393.241196][T17365] team0 (unregistering): Port device team_slave_1 removed [ 2393.279471][T17365] team0 (unregistering): Port device team_slave_0 removed [ 2393.800733][T20233] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 2393.831309][T20233] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 2393.900142][T20233] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 2393.926212][T20233] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 2394.004122][T20247] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 2394.032177][T20247] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 2394.050402][T20247] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 2394.071236][T20247] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 2394.241711][T20233] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2394.285449][T20233] 8021q: adding VLAN 0 to HW filter on device team0 [ 2394.303060][T17365] bridge0: port 1(bridge_slave_0) entered blocking state [ 2394.310229][T17365] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2394.363019][T17365] bridge0: port 2(bridge_slave_1) entered blocking state [ 2394.370150][T17365] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2394.404426][T20247] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2394.482139][T20247] 8021q: adding VLAN 0 to HW filter on device team0 [ 2394.506966][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 2394.514199][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2394.553476][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 2394.560724][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2394.885787][T20233] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2395.048086][T20247] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2395.457397][T20233] veth0_vlan: entered promiscuous mode [ 2395.473458][T20233] veth1_vlan: entered promiscuous mode [ 2395.517880][T20233] veth0_macvtap: entered promiscuous mode [ 2395.545531][T20233] veth1_macvtap: entered promiscuous mode [ 2395.583182][T20233] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2395.600566][T20233] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2395.620828][T10245] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2395.632013][T10245] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2395.646551][T10245] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2395.670218][T10245] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2395.817104][T20247] veth0_vlan: entered promiscuous mode [ 2395.859218][T20247] veth1_vlan: entered promiscuous mode [ 2395.889452][T14520] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2395.897418][T14520] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2395.977072][T20247] veth0_macvtap: entered promiscuous mode [ 2396.002983][T20247] veth1_macvtap: entered promiscuous mode [ 2396.015800][T14520] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2396.037241][T14520] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2396.058247][T20247] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2396.090438][T20247] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2396.115344][ T12] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2396.165387][ T12] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2396.229856][ T6079] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2396.323614][T20381] loop3: detected capacity change from 0 to 128 [ 2396.395462][ T6079] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2398.440132][T20381] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 2398.786385][T20381] [ 2398.788736][T20381] ====================================================== [ 2398.795751][T20381] WARNING: possible circular locking dependency detected [ 2398.802770][T20381] syzkaller #0 Tainted: G L [ 2398.808746][T20381] ------------------------------------------------------ [ 2398.815758][T20381] syz.3.2096/20381 is trying to acquire lock: [ 2398.821826][T20381] ffff8880ad74c610 (sb_internal){.+.+}-{0:0}, at: evict+0x3c2/0xad0 [ 2398.829902][T20381] [ 2398.829902][T20381] but task is already holding lock: [ 2398.837258][T20381] ffff8880ad74eb98 (&sbi->s_writepages_rwsem){++++}-{0:0}, at: ext4_ext_migrate+0x39c/0x1ee0 [ 2398.847492][T20381] [ 2398.847492][T20381] which lock already depends on the new lock. [ 2398.847492][T20381] [ 2398.857882][T20381] [ 2398.857882][T20381] the existing dependency chain (in reverse order) is: [ 2398.866882][T20381] [ 2398.866882][T20381] -> #1 (&sbi->s_writepages_rwsem){++++}-{0:0}: [ 2398.875326][T20381] ext4_writepages+0x224/0x7d0 [ 2398.880615][T20381] do_writepages+0x27a/0x600 [ 2398.885733][T20381] __writeback_single_inode+0x168/0x14a0 [ 2398.891890][T20381] writeback_single_inode+0x425/0x10f0 [ 2398.897876][T20381] write_inode_now+0x170/0x1e0 [ 2398.903164][T20381] iput.part.0+0x815/0x1190 [ 2398.908211][T20381] iput+0x35/0x40 [ 2398.912387][T20381] ext4_xattr_block_set+0x67c/0x3640 [ 2398.918214][T20381] ext4_expand_extra_isize_ea+0x1442/0x1ab0 [ 2398.924657][T20381] __ext4_expand_extra_isize+0x346/0x480 [ 2398.930827][T20381] __ext4_mark_inode_dirty+0x544/0x840 [ 2398.936813][T20381] ext4_evict_inode+0x713/0x1730 [ 2398.942282][T20381] evict+0x3c2/0xad0 [ 2398.946719][T20381] iput.part.0+0x621/0x1190 [ 2398.951763][T20381] iput+0x35/0x40 [ 2398.955935][T20381] ext4_orphan_cleanup+0x731/0x11e0 [ 2398.961664][T20381] ext4_fill_super+0x7ec1/0xb570 [ 2398.967136][T20381] get_tree_bdev_flags+0x38c/0x620 [ 2398.972774][T20381] vfs_get_tree+0x8e/0x330 [ 2398.977734][T20381] path_mount+0x7bf/0x23a0 [ 2398.982688][T20381] __x64_sys_mount+0x293/0x310 [ 2398.987988][T20381] do_syscall_64+0xcd/0xf80 [ 2398.993034][T20381] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2398.999452][T20381] [ 2398.999452][T20381] -> #0 (sb_internal){.+.+}-{0:0}: [ 2399.006775][T20381] __lock_acquire+0x1669/0x2890 [ 2399.012177][T20381] lock_acquire+0x179/0x330 [ 2399.017207][T20381] ext4_evict_inode+0xccd/0x1730 [ 2399.022670][T20381] evict+0x3c2/0xad0 [ 2399.027103][T20381] iput.part.0+0x621/0x1190 [ 2399.032148][T20381] iput+0x35/0x40 [ 2399.036325][T20381] ext4_ext_migrate+0xc6f/0x1ee0 [ 2399.041796][T20381] __ext4_ioctl+0x1de3/0x4220 [ 2399.047004][T20381] __x64_sys_ioctl+0x18e/0x210 [ 2399.052299][T20381] do_syscall_64+0xcd/0xf80 [ 2399.057344][T20381] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2399.063762][T20381] [ 2399.063762][T20381] other info that might help us debug this: [ 2399.063762][T20381] [ 2399.073975][T20381] Possible unsafe locking scenario: [ 2399.073975][T20381] [ 2399.081410][T20381] CPU0 CPU1 [ 2399.086760][T20381] ---- ---- [ 2399.092111][T20381] lock(&sbi->s_writepages_rwsem); [ 2399.097316][T20381] lock(sb_internal); [ 2399.103913][T20381] lock(&sbi->s_writepages_rwsem); [ 2399.111635][T20381] rlock(sb_internal); [ 2399.115790][T20381] [ 2399.115790][T20381] *** DEADLOCK *** [ 2399.115790][T20381] [ 2399.123918][T20381] 3 locks held by syz.3.2096/20381: [ 2399.129104][T20381] #0: ffff8880ad74c420 (sb_writers#4){.+.+}-{0:0}, at: __ext4_ioctl+0x1db1/0x4220 [ 2399.138474][T20381] #1: ffff88808bc65a80 (&sb->s_type->i_mutex_key#11){++++}-{4:4}, at: __ext4_ioctl+0x1ddb/0x4220 [ 2399.149168][T20381] #2: ffff8880ad74eb98 (&sbi->s_writepages_rwsem){++++}-{0:0}, at: ext4_ext_migrate+0x39c/0x1ee0 [ 2399.159829][T20381] [ 2399.159829][T20381] stack backtrace: [ 2399.165710][T20381] CPU: 1 UID: 0 PID: 20381 Comm: syz.3.2096 Tainted: G L syzkaller #0 PREEMPT(full) [ 2399.165759][T20381] Tainted: [L]=SOFTLOCKUP [ 2399.165772][T20381] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 2399.165793][T20381] Call Trace: [ 2399.165804][T20381] [ 2399.165816][T20381] dump_stack_lvl+0x116/0x1f0 [ 2399.165871][T20381] print_circular_bug+0x275/0x340 [ 2399.165912][T20381] check_noncircular+0x146/0x160 [ 2399.165957][T20381] __lock_acquire+0x1669/0x2890 [ 2399.166005][T20381] lock_acquire+0x179/0x330 [ 2399.166044][T20381] ? evict+0x3c2/0xad0 [ 2399.166097][T20381] ? __pfx___might_resched+0x10/0x10 [ 2399.166129][T20381] ? srso_alias_return_thunk+0x5/0xfbef5 [ 2399.166174][T20381] ext4_evict_inode+0xccd/0x1730 [ 2399.166212][T20381] ? evict+0x3c2/0xad0 [ 2399.166261][T20381] ? __pfx_inode_wait_for_writeback+0x10/0x10 [ 2399.166306][T20381] ? srso_alias_return_thunk+0x5/0xfbef5 [ 2399.166351][T20381] ? __pfx_ext4_evict_inode+0x10/0x10 [ 2399.166390][T20381] ? srso_alias_return_thunk+0x5/0xfbef5 [ 2399.166436][T20381] ? __pfx_ext4_evict_inode+0x10/0x10 [ 2399.166475][T20381] evict+0x3c2/0xad0 [ 2399.166525][T20381] ? srso_alias_return_thunk+0x5/0xfbef5 [ 2399.166569][T20381] ? __pfx_evict+0x10/0x10 [ 2399.166619][T20381] ? srso_alias_return_thunk+0x5/0xfbef5 [ 2399.166665][T20381] ? srso_alias_return_thunk+0x5/0xfbef5 [ 2399.166712][T20381] iput.part.0+0x621/0x1190 [ 2399.166768][T20381] iput+0x35/0x40 [ 2399.166819][T20381] ext4_ext_migrate+0xc6f/0x1ee0 [ 2399.166861][T20381] ? srso_alias_return_thunk+0x5/0xfbef5 [ 2399.166903][T20381] ? __pfx_ext4_ext_migrate+0x10/0x10 [ 2399.166940][T20381] ? srso_alias_return_thunk+0x5/0xfbef5 [ 2399.166982][T20381] ? down_write+0x14d/0x200 [ 2399.167017][T20381] ? srso_alias_return_thunk+0x5/0xfbef5 [ 2399.167063][T20381] __ext4_ioctl+0x1de3/0x4220 [ 2399.167109][T20381] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 2399.167148][T20381] ? srso_alias_return_thunk+0x5/0xfbef5 [ 2399.167191][T20381] ? __pfx___ext4_ioctl+0x10/0x10 [ 2399.167239][T20381] ? srso_alias_return_thunk+0x5/0xfbef5 [ 2399.167282][T20381] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 2399.167325][T20381] ? srso_alias_return_thunk+0x5/0xfbef5 [ 2399.167367][T20381] ? do_vfs_ioctl+0x128/0x14f0 [ 2399.167399][T20381] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 2399.167437][T20381] ? srso_alias_return_thunk+0x5/0xfbef5 [ 2399.167478][T20381] ? find_held_lock+0x2b/0x80 [ 2399.167529][T20381] ? srso_alias_return_thunk+0x5/0xfbef5 [ 2399.167570][T20381] ? hook_file_ioctl_common+0x144/0x410 [ 2399.167614][T20381] ? srso_alias_return_thunk+0x5/0xfbef5 [ 2399.167654][T20381] ? __fget_files+0x20e/0x3c0 [ 2399.167700][T20381] ? __pfx_ext4_ioctl+0x10/0x10 [ 2399.167744][T20381] __x64_sys_ioctl+0x18e/0x210 [ 2399.167777][T20381] do_syscall_64+0xcd/0xf80 [ 2399.167832][T20381] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2399.167867][T20381] RIP: 0033:0x7f194b18f749 [ 2399.167893][T20381] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 2399.167926][T20381] RSP: 002b:00007f194bfbf038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2399.167957][T20381] RAX: ffffffffffffffda RBX: 00007f194b3e5fa0 RCX: 00007f194b18f749 [ 2399.167980][T20381] RDX: 0000000000000000 RSI: 0000000000006609 RDI: 0000000000000006 [ 2399.168002][T20381] RBP: 00007f194b213f91 R08: 0000000000000000 R09: 0000000000000000 [ 2399.168023][T20381] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2399.168045][T20381] R13: 00007f194b3e6038 R14: 00007f194b3e5fa0 R15: 00007ffde47eac98 [ 2399.168080][T20381] SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 2400.302702][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2400.304374][T20247] ieee80211 phy114: Selected rate control algorithm 'minstrel_ht' [ 2400.318062][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2402.606537][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2402.698364][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2403.460739][T20272] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 2404.001922][ T6228] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2404.121086][ T6228] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2404.451048][ T6228] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2404.541815][ T6228] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2404.728247][ T6228] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2404.829831][ T6228] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2404.932730][ T6228] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2405.016318][ T6228] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2405.168701][ T6228] bridge_slave_1: left allmulticast mode [ 2405.177401][ T6228] bridge_slave_1: left promiscuous mode [ 2405.188480][ T6228] bridge0: port 2(bridge_slave_1) entered disabled state [ 2405.200053][ T6228] bridge_slave_0: left allmulticast mode [ 2405.205717][ T6228] bridge_slave_0: left promiscuous mode [ 2405.228717][ T6228] bridge0: port 1(bridge_slave_0) entered disabled state [ 2405.250279][ T6228] bridge_slave_1: left allmulticast mode [ 2405.255949][ T6228] bridge_slave_1: left promiscuous mode [ 2405.268783][ T6228] bridge0: port 2(bridge_slave_1) entered disabled state [ 2405.309906][ T6228] bridge_slave_0: left allmulticast mode [ 2405.315565][ T6228] bridge_slave_0: left promiscuous mode [ 2405.328789][ T6228] bridge0: port 1(bridge_slave_0) entered disabled state [ 2405.582808][ T6228] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2405.596302][ T6228] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2405.609998][ T6228] bond0 (unregistering): Released all slaves [ 2405.703588][ T6228] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2405.713904][ T6228] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2405.724184][ T6228] bond0 (unregistering): Released all slaves [ 2406.138844][ T6228] hsr_slave_0: left promiscuous mode [ 2406.144699][ T6228] hsr_slave_1: left promiscuous mode [ 2406.150549][ T6228] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2406.157926][ T6228] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2406.181122][ T6228] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2406.188699][ T6228] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2406.199706][ T6228] hsr_slave_0: left promiscuous mode [ 2406.207010][ T6228] hsr_slave_1: left promiscuous mode [ 2406.214363][ T6228] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2406.221926][ T6228] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2406.229791][ T6228] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2406.237167][ T6228] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2406.256298][ T6228] veth1_macvtap: left promiscuous mode [ 2406.261900][ T6228] veth0_macvtap: left promiscuous mode [ 2406.267514][ T6228] veth1_vlan: left promiscuous mode [ 2406.274156][ T6228] veth0_vlan: left promiscuous mode [ 2406.280923][ T6228] veth1_macvtap: left promiscuous mode [ 2406.286427][ T6228] veth0_macvtap: left promiscuous mode [ 2406.292803][ T6228] veth1_vlan: left promiscuous mode [ 2406.298082][ T6228] veth0_vlan: left promiscuous mode [ 2406.595390][ T6228] team0 (unregistering): Port device team_slave_1 removed [ 2406.626269][ T6228] team0 (unregistering): Port device team_slave_0 removed [ 2406.846573][ T6228] team0 (unregistering): Port device team_slave_1 removed [ 2406.876520][ T6228] team0 (unregistering): Port device team_slave_0 removed [ 2407.484421][ T6228] IPVS: stop unused estimator thread 0... [ 2407.610047][ T6228] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2407.656932][ T6228] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2407.716963][ T6228] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2407.785318][ T6228] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2407.886020][ T6228] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2407.944384][ T6228] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2408.015204][ T6228] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2408.070993][ T6228] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2408.184356][ T6228] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2408.237233][ T6228] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2408.311641][ T6228] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2408.359308][ T6228] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2408.459156][ T6228] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2408.519567][ T6228] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2408.610143][ T6228] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2408.656622][ T6228] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2408.759128][ T6228] bridge_slave_1: left allmulticast mode [ 2408.767777][ T6228] bridge_slave_1: left promiscuous mode [ 2408.773992][ T6228] bridge0: port 2(bridge_slave_1) entered disabled state [ 2408.786035][ T6228] bridge_slave_0: left allmulticast mode [ 2408.792057][ T6228] bridge_slave_0: left promiscuous mode [ 2408.797743][ T6228] bridge0: port 1(bridge_slave_0) entered disabled state