last executing test programs: 16m53.180887819s ago: executing program 4 (id=1165): socket$kcm(0x21, 0x2, 0x2) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x1, 0x4, 0x2, 0x7}, 0x50) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a80)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x801, 0x0, 0x0, {0x1, 0x0, 0x8003}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0x70, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x48, 0x4, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x4}}}, {0x30, 0x1, 0x0, 0x1, @bitwise={{0xc}, @val={0x20, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_BITWISE_SREG={0x8, 0x1, 0x1, 0x0, 0x14}, @NFTA_BITWISE_DREG={0x8, 0x2, 0x1, 0x0, 0x12}, @NFTA_BITWISE_XOR={0x4}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xe4}}, 0x0) getpeername$netlink(r2, &(0x7f0000000340), &(0x7f0000000540)=0xc) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB, @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000000000000850000008600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x10000}, 0x28) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000180)=ANY=[], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) landlock_create_ruleset(&(0x7f0000000080)={0xc0d8, 0x1, 0x3}, 0x18, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x2, 0x4, 0x4, 0x8, 0x1014}, 0x48) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r4 = accept4(r3, 0x0, 0x0, 0x800) sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r5, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r6, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r7, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) 16m52.868038133s ago: executing program 4 (id=1171): syz_open_dev$usbmon(&(0x7f0000000080), 0x3c, 0x0) syz_usb_connect(0x0, 0x76, &(0x7f0000000000)=ANY=[@ANYBLOB="12011001000000408c0d030100010000000109026400020100803209040000000101000009240100011e0001010c2402010101000203000000092403030506000100090401000001020000090401010101020000072401010101000b2402010202100180bb0009050109c0"], 0x0) ioctl(0xffffffffffffffff, 0xc4c85512, 0x0) 16m51.600408481s ago: executing program 4 (id=1179): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000000), r0) sendmsg$IEEE802154_ASSOCIATE_REQ(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)={0x30, r1, 0x1, 0x70bd28, 0x25dfdbff, {}, [@IEEE802154_ATTR_COORD_PAN_ID={0x6, 0xa, 0x2}, @IEEE802154_ATTR_CHANNEL={0x5, 0x7, 0x1a}, @IEEE802154_ATTR_COORD_HW_ADDR={0xc, 0x9, {0xaaaaaaaaaaaa0202}}]}, 0x30}, 0x1, 0x0, 0x0, 0x40000}, 0x40088) 16m51.381106666s ago: executing program 4 (id=1182): syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000180)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, &(0x7f00000007c0), 0xfe, 0x28f, &(0x7f00000009c0)="$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") r0 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f00000001c0)=0x10) 16m50.529141675s ago: executing program 4 (id=1185): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x6, 0x3, &(0x7f0000000480)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000580)={'team_slave_0\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000004c0)={r0, r2, 0x25, 0x0, @void}, 0x10) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000001500)={'veth0_to_team\x00', &(0x7f0000000000)=@ethtool_channels={0x3d, 0xfffffffc, 0x0, 0x0, 0x3, 0x1, 0x2}}) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000d00)={0x0, 0x0}, 0x8) r4 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000200)=r3, 0x2) socket$key(0xf, 0x3, 0x2) openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r5 = socket$kcm(0x2, 0x5, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) setsockopt$sock_attach_bpf(r5, 0x1, 0x1a, 0x0, 0x0) r6 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r6, 0x107, 0xf, 0x0, 0x0) r7 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r7, 0x0, 0x0) getsockname$packet(r7, 0x0, 0x0) sendto$packet(r6, 0x0, 0x0, 0x840, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)) socket$key(0xf, 0x3, 0x2) socket$nl_netfilter(0x10, 0x3, 0xc) socket$packet(0x11, 0x3, 0x300) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x1f, 0x15, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000fcffffff000000008000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b7080000020000207b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002000000850000008200000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94) bpf$LINK_DETACH(0x22, &(0x7f0000000040)=r4, 0x4) 16m48.713230823s ago: executing program 4 (id=1208): prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000bb1000/0x3000)=nil, &(0x7f0000ff9000/0x2000)=nil, &(0x7f0000bb3000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ff0000/0x1000)=nil, &(0x7f0000f20000/0x1000)=nil, &(0x7f000000b000/0x2000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r0, 0x89f6, &(0x7f0000000080)={'bridge0\x00', &(0x7f00000000c0)=@ethtool_regs={0x12}}) 16m47.910044331s ago: executing program 32 (id=1208): prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000bb1000/0x3000)=nil, &(0x7f0000ff9000/0x2000)=nil, &(0x7f0000bb3000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ff0000/0x1000)=nil, &(0x7f0000f20000/0x1000)=nil, &(0x7f000000b000/0x2000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r0, 0x89f6, &(0x7f0000000080)={'bridge0\x00', &(0x7f00000000c0)=@ethtool_regs={0x12}}) 11m59.269801824s ago: executing program 33 (id=2878): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0xb, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) syz_emit_ethernet(0x22, &(0x7f0000000000)={@broadcast, @remote, @void, {@ipv4={0x800, @generic={{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x89, 0x0, @empty, @broadcast}}}}}, 0x0) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r1, 0x8983, &(0x7f0000000100)={0x0, 'erspan0\x00', {0x1}, 0x26}) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0xa, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000d00000000000000000000000851000000600000018000000", @ANYRES32], &(0x7f0000000040)='syzkaller\x00', 0x2, 0x0, 0x0, 0x41100, 0xc}, 0x94) mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x81c0, 0x0) execveat(0xffffffffffffff9c, &(0x7f0000000280)='./file2\x00', 0x0, 0x0, 0x0) symlink(0x0, &(0x7f0000000300)='./file0/file0\x00') symlinkat(&(0x7f0000001040)='./file0/file0\x00', 0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00') mount$nfs(&(0x7f0000000340)=')./.,\x00', &(0x7f0000000380)='./file0\x00', 0x0, 0x80000, &(0x7f0000000400)={[{}, {'erspan0\x00'}, {}, {'GPL\x00'}, {'\\@'}]}) r3 = accept4(r2, 0x0, 0x0, 0x80000) sendmmsg$alg(r3, 0x0, 0x0, 0x8040) socket$inet_mptcp(0x2, 0x1, 0x106) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x1f, 0xc, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x7313}, [@call={0x85, 0x0, 0x0, 0x11}, @printk={@lld, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0xb0}}]}, &(0x7f0000000180)='GPL\x00', 0x1, 0x0, 0x0, 0x40f00, 0x11}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) 7m15.960290922s ago: executing program 5 (id=3972): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct]}}, 0x0, 0x26}, 0x20) socket$nl_route(0x10, 0x3, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_open_dev$radio(0x0, 0x3, 0x2) syz_open_dev$vim2m(&(0x7f0000000100), 0x0, 0x2) syz_mount_image$hfsplus(&(0x7f0000000600), &(0x7f0000000640)='./file0\x00', 0x0, &(0x7f0000000040)={[{}, {@nobarrier}, {@nls={'nls', 0x3d, 'cp1251'}}]}, 0x1, 0x5c8, &(0x7f00000006c0)="$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") openat(0xffffffffffffff9c, &(0x7f0000004280)='.\x00', 0x0, 0x2) close(0xffffffffffffffff) pselect6(0x40, &(0x7f0000000240)={0x0, 0x0, 0x1ff, 0x7d, 0x0, 0x8000, 0x4, 0x1}, 0x0, 0x0, 0x0, 0x0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x72, 0x0, 0x7fff0000}]}) close_range(r1, 0xffffffffffffffff, 0x0) mount(0x0, &(0x7f0000000a00)='.\x00', &(0x7f0000000080)='hpfs\x00', 0x18800, 0x0) syz_open_dev$audion(0x0, 0x3, 0x1) 7m12.319782149s ago: executing program 5 (id=3979): r0 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f00000006c0), 0x2, 0x0) write$apparmor_exec(r0, &(0x7f0000000a40)=ANY=[@ANYBLOB='stack :'], 0xe4) socketpair$unix(0x1, 0x3, 0x0, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x6, 0x8, 0x3, 0x0, 0x9, 0x80000001, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) mlock2(&(0x7f000051a000/0x3000)=nil, 0x3000, 0x1) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00003, 0x8) r1 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x30b5, 0x0, 0x2, 0x158}, 0x0, &(0x7f0000000280)=0x0, 0x0) syz_ublk_add_dev(r1, 0x0, r2, 0x0, 0x0, 0x0) unshare(0x26020480) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup(r3) syz_ublk_setup_queues(r4, 0x0, &(0x7f0000000180)={0x0, 0x1, 0x0, 0x1, 0x255, 0x0, r1}, &(0x7f0000000500)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x200, 0x3, 0x10000002, 0x0, r4}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xffffed7c, 0x0, 0xffffffc, 0x2cb}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf910, 0x800, 0x1, 0x287, 0x0, r4}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x0, 0x100, 0x1, 0x367}}], 0x1, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x14) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(0xffffffffffffffff, 0xc05064a7, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0}) r5 = syz_open_procfs(0x0, &(0x7f0000000100)='net/mcfilter6\x00') preadv(r5, &(0x7f0000000040)=[{&(0x7f0000000000)=""/6, 0x6}], 0x1, 0x410, 0x1) 7m10.182565304s ago: executing program 5 (id=3985): sched_setscheduler(0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r0 = getpid() r1 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = fsopen(&(0x7f0000001340)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) r5 = fsmount(r4, 0x0, 0x80) r6 = openat$cgroup_procs(r5, &(0x7f00000002c0)='cgroup.procs\x00', 0x2, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) write$cgroup_pid(r6, &(0x7f0000001c00), 0x12) 7m8.962453002s ago: executing program 5 (id=3987): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x404, &(0x7f0000000480)={[{@nogrpid}, {@barrier}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x68}}, {@errors_remount}, {@nombcache}, {@quota}, {@nojournal_checksum}]}, 0x3, 0x42f, &(0x7f0000000940)="$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") r0 = socket$packet(0x11, 0x3, 0x300) r1 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) setsockopt$packet_tx_ring(r0, 0x107, 0xd, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xb, &(0x7f0000000380)=0x5, 0x4) syz_genetlink_get_family_id$ethtool(&(0x7f0000000a40), 0xffffffffffffffff) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000240)={0x1, &(0x7f0000000100)=[{0x6, 0xff, 0x7, 0x7fc00002}]}) 7m2.001197133s ago: executing program 5 (id=3999): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r4, 0xc0a85320, &(0x7f0000000440)={{0x80}, 'port1\x00', 0x72, 0x220000, 0x0, 0x8000008, 0x4, 0x2, 0x1, 0x0, 0x7cce8c743ee810df, 0xa5}) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x2, 0x7fff7ffc}]}) close_range(r5, 0xffffffffffffffff, 0x200000000000000) 6m57.425028429s ago: executing program 5 (id=4017): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x80500, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0xe) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$PPPIOCATTCHAN(r1, 0x40047438, &(0x7f0000000100)=0x1) openat$ppp(0xffffffffffffff9c, 0x0, 0x22240, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r2, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r3 = fsopen(0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) fsmount(r3, 0x0, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x20020084, 0x0, 0x0) ioctl$PPPIOCATTCHAN(r1, 0x80047453, 0x0) 6m40.332395223s ago: executing program 34 (id=4017): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x80500, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0xe) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$PPPIOCATTCHAN(r1, 0x40047438, &(0x7f0000000100)=0x1) openat$ppp(0xffffffffffffff9c, 0x0, 0x22240, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r2, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r3 = fsopen(0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) fsmount(r3, 0x0, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x20020084, 0x0, 0x0) ioctl$PPPIOCATTCHAN(r1, 0x80047453, 0x0) 5m8.151573284s ago: executing program 8 (id=4216): syz_mount_image$ext4(&(0x7f0000000200)='ext4\x00', &(0x7f0000000740)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xc000, &(0x7f00000006c0), 0x2, 0x246, &(0x7f0000000ac0)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000180), 0x40e02, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) gettimeofday(0x0, 0x0) syz_mount_image$exfat(&(0x7f00000000c0), &(0x7f0000000240)='./file0\x00', 0x2000085c, &(0x7f0000000440)=ANY=[@ANYBLOB='iocharset=ascii,discard,dmask=00000000000000000000007,uid=', @ANYRESOCT=0x0, @ANYBLOB=',discard,\x00', @ANYBLOB="f9ee7ee6616006527905abd668ea17e382e0c83dc34879c344093674bfcb9afe6942e93d2c31ef3422c5857ce514a621738e2e0ca9f3b51f9577ee83ca37bd7a2dda7be50c9438a6731ec6303c2b70c0282527857939030300203de5ad9ccf10f399d47a553c3815a8140e156f525b62a6c34f36a440f37ac333648bccb6c848db175245696642c3000000000000", @ANYRES32, @ANYRES16=0x0, @ANYRES16, @ANYRESHEX, @ANYRESHEX, @ANYRESHEX], 0xc1, 0x151a, &(0x7f0000002a80)="$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") quotactl$Q_QUOTAON(0xffffffff80000201, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x28011, 0xffffffffffffffff, 0x0) r3 = open(&(0x7f0000000140)='.\x00', 0x8000, 0x112) getdents(r3, &(0x7f0000001fc0)=""/184, 0xb8) socket$inet6_udp(0xa, 0x2, 0x0) 4m55.87725624s ago: executing program 8 (id=4236): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./pipefs\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./pipefs\x00', &(0x7f0000000100)='rpc_pipefs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42f82, 0x0) ioctl$SNDCTL_DSP_SPEED(r1, 0xc0045002, &(0x7f0000000040)=0x200) openat(0xffffffffffffff9c, 0x0, 0x2, 0x0) r2 = socket$kcm(0x29, 0x2, 0x0) r3 = memfd_create(&(0x7f0000000000)='e\xf4E\x88-\x00', 0x0) pwritev(r3, &(0x7f0000000040)=[{&(0x7f0000000480)="db", 0x1}], 0x1, 0x4000001, 0x0) sendfile(r2, r3, 0x0, 0x8000fb00) 4m48.383286707s ago: executing program 8 (id=4248): bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x1e, 0x0, 0x0) setsockopt$IP_VS_SO_SET_STARTDAEMON(r0, 0x0, 0x48b, &(0x7f0000000000)={0x1, 'veth1_to_bridge\x00', 0x20}, 0x18) getsockopt$IP_VS_SO_GET_DAEMON(r0, 0x0, 0x487, &(0x7f0000000040), &(0x7f0000000080)=0x30) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) socket$inet(0x2, 0x2, 0x2) bind$inet(0xffffffffffffffff, 0x0, 0x0) r2 = socket(0x2, 0x2, 0x1) bind$unix(r2, &(0x7f0000000000)=@abs, 0x6e) bpf$PROG_LOAD(0x5, 0x0, 0x0) write$tun(r1, 0x0, 0x33) sendfile(r1, 0xffffffffffffffff, 0x0, 0x10000) bpf$MAP_CREATE(0x0, 0x0, 0x0) 4m47.121859081s ago: executing program 8 (id=4254): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x380000c, &(0x7f0000000200)={[{@max_batch_time={'max_batch_time', 0x3d, 0x4}}, {@max_batch_time={'max_batch_time', 0x3d, 0x2}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x6a}}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}, {@debug}, {@nodioread_nolock}]}, 0x1, 0x437, &(0x7f0000000900)="$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") mknod$loop(&(0x7f0000000000)='./file0\x00', 0x6000, 0x0) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) r1 = dup2(r0, r0) r2 = syz_clone(0x80001100, &(0x7f0000000100), 0x0, &(0x7f0000000200), &(0x7f00000002c0), &(0x7f0000000300)="821736baac0c4ebd9e8c81fb0934b877eaf116a4eb105e0706e79a8d86aad4cb4fbb75b7468b249ea4f9321f5055e8d925b8d7b61763cdd6edbfaf7b1438b1c0b6752e319e0a3c7144ecdd") ioctl$BLKTRACESETUP(r1, 0xc0481273, &(0x7f0000000240)={'\x00', 0x40, 0xa, 0x3, 0x8000, 0x10, r2}) ioctl$BLKTRACESTOP(r1, 0x1275, 0x0) ioctl$BLKTRACETEARDOWN(r1, 0x1276, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000980)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240), 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="140000000000000001000000010000009f719cf27a8b8bff3b21e850754935a97f5395e82955586b1448a1f1a9f6b2f674b0f2c288771f4e6554a676af283c5b3a9bc649cb7adc94b067bc6ec624946dbfd6ee0ecea2d002c4d58a5aab66e9d58894ce1525e9fa999408c110019e551c5cae4e6c39e17fb56ec33e16de2d58441de66b8eb65a8f29fb9fa501aa98714bc6a3159cae4ea64ce3cb8b285c4d868b437164d601e2d3c7f82a9e3c72b6ce2f01b17b1dd27070a9614a891b31e558d89390a6f179875f7f22aa66abfa75c0241c612d79", @ANYRES32=r3], 0x18, 0x800}, 0xc084) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) pselect6(0x40, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x80000000000, 0x0, 0xfffffffffffff30a, 0x5}, &(0x7f0000000000)={0x1f, 0x0, 0x0, 0x0, 0x6, 0x0, 0xfffffffffffffffe, 0x9}, 0x0, 0x0, 0x0) 4m44.034942627s ago: executing program 8 (id=4261): syz_usb_connect(0x0, 0x0, 0x0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x4, &(0x7f0000000180)=@lang_id={0x4, 0x3, 0x403}}]}) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r0, &(0x7f0000000080), 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x4) r1 = fcntl$dupfd(r0, 0x0, r0) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000000)=0x1, 0x4) sendmsg$IPVS_CMD_GET_CONFIG(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[], 0x14}}, 0x4000) sendmsg$TEAM_CMD_OPTIONS_GET(r1, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000002c40)=ANY=[], 0x40c}, 0x1, 0x0, 0x0, 0x90}, 0x8000) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000240)=@gcm_128={{0x303, 0x38}, "b575c2c1c3a227b7", "799298c9493f4cbdfb5868d41337f3a2", "8df69b29", "ae7ebfdf4de38175"}, 0x28) syz_genetlink_get_family_id$mptcp(&(0x7f0000000140), r1) 4m43.920798431s ago: executing program 0 (id=4262): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./dev\x00', &(0x7f0000000100)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./mnt\x00', 0x1ff) mount(&(0x7f0000000300)=@filename='./dev/mtdblock0\x00', &(0x7f0000000200)='./mnt\x00', &(0x7f0000000400)='jffs2\x00', 0x0, &(0x7f0000000800)='rp_size=0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000700)='./dev/urandom\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, 0x0, 0x42, 0x1ff) sendfile(r1, r0, 0x0, 0x800) close(r1) close(0xffffffffffffffff) r2 = openat(0xffffffffffffff9c, &(0x7f0000001200)='./mnt/c\x00', 0x42, 0x1ff) sendfile(r2, r0, 0x0, 0x800) sendfile(0xffffffffffffffff, r0, 0x0, 0x800) close(0xffffffffffffffff) close(0xffffffffffffffff) unlinkat(0xffffffffffffff9c, &(0x7f0000001200)='./mnt/c\x00', 0x0) 4m42.625174196s ago: executing program 0 (id=4264): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./pipefs\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./pipefs\x00', &(0x7f0000000100)='rpc_pipefs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42f82, 0x0) ioctl$SNDCTL_DSP_SPEED(r1, 0xc0045002, &(0x7f0000000040)=0x200) openat(0xffffffffffffff9c, 0x0, 0x2, 0x0) r2 = socket$kcm(0x29, 0x2, 0x0) r3 = memfd_create(&(0x7f0000000000)='e\xf4E\x88-\x00', 0x0) pwritev(r3, &(0x7f0000000040)=[{&(0x7f0000000480)="db", 0x1}], 0x1, 0x4000001, 0x0) sendfile(r2, r3, 0x0, 0x8000fb00) 4m40.292544975s ago: executing program 8 (id=4271): socket$inet6_sctp(0xa, 0x5, 0x84) socket$can_j1939(0x1d, 0x2, 0x7) socket$netlink(0x10, 0x3, 0x0) r0 = openat$ppp(0xffffffffffffff9c, 0x0, 0xc0802, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000180)) r1 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x30b5, 0x0, 0x2, 0x158}, &(0x7f0000000100)=0x0, 0x0, &(0x7f0000000140)=0x0) r4 = inotify_init() r5 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) connect$can_bcm(r5, &(0x7f00000000c0)={0x1d, r6}, 0x10) sendmsg$can_bcm(r5, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)=ANY=[@ANYBLOB="01000000400800000008000000000000", @ANYRES64=0x0, @ANYRES64=0x2710, @ANYRES64=0x77359400, @ANYRES64=0x0, @ANYBLOB="0000000001"], 0x80}, 0x1, 0x0, 0x0, 0x8004}, 0x0) sendmsg$can_bcm(r5, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="010000000b0e00000300000000000000", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYBLOB="0040000001"], 0x80}}, 0x11) ioctl$TIOCGDEV(0xffffffffffffffff, 0x80045432, &(0x7f0000000300)) close_range(r4, 0xffffffffffffffff, 0x0) syz_ublk_add_dev(r1, r2, 0x0, r3, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)=0x0) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) r9 = dup(r8) syz_ublk_setup_queues(r9, r7, &(0x7f0000000180)={0x0, 0x1, 0x200, 0x3, 0x255}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xad58, 0x400, 0x2120, 0x10000004, 0x0, r9}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x11e0, 0x20, 0xfffffffe, 0xae, 0x0, r1}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf911, 0x0, 0x0, 0x1f0, 0x0, r9}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xac1b, 0x8200, 0x2, 0x200250}}], 0x1, &(0x7f0000000340)={0x2e, 0x44, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x1, {}, 0x1f, 0x0, '\x00', {0xfff6, 0x0, 0x0, 0x0}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x6, 0x0, &(0x7f0000000000)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x94) 4m37.060906744s ago: executing program 35 (id=4271): socket$inet6_sctp(0xa, 0x5, 0x84) socket$can_j1939(0x1d, 0x2, 0x7) socket$netlink(0x10, 0x3, 0x0) r0 = openat$ppp(0xffffffffffffff9c, 0x0, 0xc0802, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000180)) r1 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x30b5, 0x0, 0x2, 0x158}, &(0x7f0000000100)=0x0, 0x0, &(0x7f0000000140)=0x0) r4 = inotify_init() r5 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) connect$can_bcm(r5, &(0x7f00000000c0)={0x1d, r6}, 0x10) sendmsg$can_bcm(r5, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)=ANY=[@ANYBLOB="01000000400800000008000000000000", @ANYRES64=0x0, @ANYRES64=0x2710, @ANYRES64=0x77359400, @ANYRES64=0x0, @ANYBLOB="0000000001"], 0x80}, 0x1, 0x0, 0x0, 0x8004}, 0x0) sendmsg$can_bcm(r5, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="010000000b0e00000300000000000000", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYBLOB="0040000001"], 0x80}}, 0x11) ioctl$TIOCGDEV(0xffffffffffffffff, 0x80045432, &(0x7f0000000300)) close_range(r4, 0xffffffffffffffff, 0x0) syz_ublk_add_dev(r1, r2, 0x0, r3, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)=0x0) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) r9 = dup(r8) syz_ublk_setup_queues(r9, r7, &(0x7f0000000180)={0x0, 0x1, 0x200, 0x3, 0x255}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xad58, 0x400, 0x2120, 0x10000004, 0x0, r9}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x11e0, 0x20, 0xfffffffe, 0xae, 0x0, r1}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf911, 0x0, 0x0, 0x1f0, 0x0, r9}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xac1b, 0x8200, 0x2, 0x200250}}], 0x1, &(0x7f0000000340)={0x2e, 0x44, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x1, {}, 0x1f, 0x0, '\x00', {0xfff6, 0x0, 0x0, 0x0}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x6, 0x0, &(0x7f0000000000)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x94) 4m37.030883103s ago: executing program 0 (id=4275): r0 = socket$inet_tcp(0x2, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x2f) bpf$PROG_LOAD(0x5, 0x0, 0x0) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='bbr', 0x3) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0) recvfrom$inet(r0, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x720, 0x0, 0xfffffffffffffd25) 4m34.926371219s ago: executing program 0 (id=4291): openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x4e20, @empty}], 0x10) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000040)=[@in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}]}, &(0x7f0000000100)=0x10) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x85, &(0x7f0000000240)={0x0, @in={{0x2, 0x0, @empty}}, 0x7, 0x23}, 0x90) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_MTU={0x8, 0x4, 0x44}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000840)={r2, @in6={{0xa, 0x4e23, 0xe84, @empty, 0x129}}, 0x2, 0x2, 0x0, 0x2, 0x5, 0x8, 0x4}, 0x9c) 4m28.317958053s ago: executing program 0 (id=4303): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./sys\x00', 0x1ff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r4, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) sendmmsg$inet6(r4, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x0) 4m25.14687045s ago: executing program 0 (id=4297): openat$rtc(0xffffffffffffff9c, 0x0, 0x102, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000380)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$l2tp6(0xa, 0x2, 0x73) bind$l2tp6(r3, &(0x7f0000000040)={0xa, 0x0, 0xbf, @empty, 0x4, 0x100}, 0x20) bpf$PROG_LOAD(0x5, 0x0, 0x0) connect$l2tp6(r3, &(0x7f0000000f40)={0xa, 0x0, 0x0, @empty}, 0x20) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB], 0x7c}}, 0x0) syz_open_dev$loop(0x0, 0x3, 0x2000) sendmmsg$inet6(r3, &(0x7f0000000ac0)=[{{&(0x7f0000000180)={0xa, 0x0, 0x0, @empty}, 0x1b, 0x0, 0x0, 0x0, 0x0, 0xc0fe}}], 0x17fd147c801ae9af, 0xff14) 4m9.083799155s ago: executing program 36 (id=4297): openat$rtc(0xffffffffffffff9c, 0x0, 0x102, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000380)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$l2tp6(0xa, 0x2, 0x73) bind$l2tp6(r3, &(0x7f0000000040)={0xa, 0x0, 0xbf, @empty, 0x4, 0x100}, 0x20) bpf$PROG_LOAD(0x5, 0x0, 0x0) connect$l2tp6(r3, &(0x7f0000000f40)={0xa, 0x0, 0x0, @empty}, 0x20) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB], 0x7c}}, 0x0) syz_open_dev$loop(0x0, 0x3, 0x2000) sendmmsg$inet6(r3, &(0x7f0000000ac0)=[{{&(0x7f0000000180)={0xa, 0x0, 0x0, @empty}, 0x1b, 0x0, 0x0, 0x0, 0x0, 0xc0fe}}], 0x17fd147c801ae9af, 0xff14) 3m9.393160298s ago: executing program 2 (id=4415): syz_emit_ethernet(0x3e, &(0x7f0000000700)=ANY=[@ANYBLOB="ffffffffffffffff67907800000000ffffffff0000f3f2ba8f00e0000002e0000000"], 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000005000)=[{{0x0, 0x2a, 0x0, 0x0, &(0x7f00000000c0)=""/19, 0x13}, 0x3}], 0x4000169, 0x60, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) syz_emit_ethernet(0xbe, &(0x7f0000000000)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x23}, @remote, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "7b4b143b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af", "584cbf2649a50f2dbc43efa8698d0a881c51852e4451b57d037ad3c045942824251d7d17b5191584bcd4fbe40a23424d", "bcfd56f1375461caaa2f19935e6996c7096ffeeb0300000000000064", {"9a3bfbc1d19cb307b3472ab9cdb042d2", "643fcbb2c5a57df67d074af6e8dafe09"}}}}}}}, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000007"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x3, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018150000", @ANYRES32=r3, @ANYBLOB], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x36, 0xffffffffffffffff, 0xcc03, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r4, 0x0, 0xe, 0x0, &(0x7f0000000740)="000000000000c000ee6e3e20630c", 0x0, 0x10001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) recvmmsg(r2, &(0x7f0000001e40), 0x0, 0x100, 0x0) sendmmsg$inet(r1, 0x0, 0x0, 0x1800) r5 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000000c0)={'ipvlan0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x88, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r6, {0x0, 0xffff}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x1, [], 0x0, [0x1, 0x2, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x5c4, 0x8000, 0x0, 0x0, 0x3dc], [0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}}}]}, 0x88}}, 0x20000000) r7 = socket(0x400000000010, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0xfffbffff, {0x0, 0x0, 0x0, r6, {0x0, 0xd}, {0xffff, 0xffff}, {0xc, 0xfff3}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x1c, 0x2, [@TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x10, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x8001}]}]}, @TCA_TAPRIO_ATTR_SCHED_CLOCKID={0x8, 0x5, 0xb}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40005}, 0x8010) syz_emit_ethernet(0x32, &(0x7f0000000000)={@multicast, @empty, @void, {@ipv4={0x800, @dccp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x2f, 0x0, @dev, @multicast1}, {{0x0, 0x6558, 0x4, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, "d8621b", 0x0, "2c17a9"}}}}}}, 0x0) socket$netlink(0x10, 0x3, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x5, 0x0, 0x0, 0x60ff78ce1cb3c070}, 0x94) r8 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x7}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r8, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) setsockopt$sock_int(r0, 0x1, 0x28, &(0x7f00000000c0)=0xfe, 0x4) socket$nl_generic(0x10, 0x3, 0x10) 3m3.859930233s ago: executing program 1 (id=4421): syz_read_part_table(0x61e, &(0x7f0000000000)="$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") socket$nl_generic(0x10, 0x3, 0x10) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) epoll_create1(0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$inet(0x2, 0x2, 0x1) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_netfilter(0x10, 0x3, 0xc) mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x3, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r0, &(0x7f0000000700)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000640)=[@cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x10}}, @rights={{0x10}}, @rights={{0x10}}], 0x98}, 0x80) pipe2(0x0, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socketpair$unix(0x1, 0x2, 0x0, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000001c0)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = dup(r5) syz_ublk_setup_queues(r6, r4, &(0x7f00000004c0)={0x0, 0xbd, 0x10, 0x1, 0x7f}, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe708, 0x42, 0x1000002, 0x91, 0x0, r2}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x3b00, 0x2, 0x1, 0x3aa}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x93ea, 0x2000, 0x4003bfff, 0x2b9, 0x0, r3}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5, 0x800, 0x1, 0x26d}}], 0x1, 0x0, 0x0) 3m1.737255635s ago: executing program 2 (id=4423): syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000340)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x4000804, &(0x7f0000006300)={[{@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x2}}, {@grpid}, {@bh}, {@grpid}, {@noauto_da_alloc}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x5}}, {@init_itable_val={'init_itable', 0x3d, 0x9}}, {@init_itable}, {@usrjquota}, {@nolazytime}, {@norecovery}, {@resgid}]}, 0xfe, 0x495, &(0x7f0000000e40)="$eJzs3M9vFFUcAPDvzO6WgmIr4g8QpIpG4o+Wlh9y8KLRhIMmJnrAeKptIZVCDa2JEKLVAx4NiXfjf2E86cWoF0286t2QEMMF1Mua2Zltl2W33dIfS9vPJ5n2zczrvvedmTf75r3tBrBlDWQ/koj7I+KPiOjLV2/PMJD/unXj8tg/Ny6PJVGtvv13Ust388blsXrW+t/dl69Uq8X6thblXnkvYnRqauJCsT40e+7DoZmLl16cPDd6ZuLMxPmREyeOHtnfc3zk2KrEmcV1c+8n0/v2nHz36ptjp66+/3NSjjzuaIpjtQzkR7elZ1a7sC7b2ZCuHdh5B35dSLe6EuimUkRkp6tSa/99UYrt8/v64vXPm/P3rncFgTVTrVari9yV56rAJpbE0nl6izsFsJkUjwC159/6so7dj667/kr+AJTFfatY8j3lSPPEgUrT8+1qGoiIU3P/fp0tsUbjEAAAjb7P+j8vtOr/pfFInujJfjxQzKH0R8SDEbErIh6KiN0R8XBELe+jEfHYMstvniG5s/+TXrvr4DqQ9f9eLua2bu//pfUs/aVibWct/kpyenJq4nBxTA5FZdvpyWRieJEyfnjt9y/b7Wvs/2VLVn69L1jU49r2plH38dHZ0RUF3eD6ZxF7yxG3KtEUfxL1aZwkIvZExN67LGPyuXLbfUvHv4j2L9ux6jcRz+bnfy6a4q9L2s5PDr90fOTYUG9MTRweql8Vd/rltytvNW0q1RMrin8VZOd/R8vrfz7+/qQ3YubipbO1+dqZ5Zdx5c8v2j7TdHL9lxcGqE/uLK7/nuSd2oaeYsfHo7OzF4YjepI37tw+svBq9fV6/iz+Qwdbt/9dsXAkHo+IfRGxPyKeyB4Ki7o/GRFPRcTBReL/6dWnP1h+/OszV5rFP77U+Y/G87/8ROnsj98tHX92j2t3/o/WUoeKLZ3c/zqt4EqOHQAAAGwUae0z8Ek6mJSLdJoODuaf4d8dO9Kp6ZnZ509Pf3R+PP+sfH9U0vpIV1/DeOhwMTbc3/Da/Q37jxTjxl+VttfWB8emp8a7GDeQt/Na+5+/F+TtP/NXqdu1A9ZcPo+WdrsaQBeswjw6sEFp/7A1JYu2/8q61gVYf97/Yetq1f4/bZt78Ns1rQywrrz/w9bVQfufy3+17xUAG5P3f9i6tH/Yktr+b3zadld2u1jBtwGsTeK/4vsM75X6bP5EpPdENTZcIoll/lW54y+zWEai2pe3/2zLttbNHAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAYFP4PwAA//+dU9wM") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) symlinkat(0x0, 0xffffffffffffff9c, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f00000003c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x800000, 0x0, 0xb7, 0x0, &(0x7f00000003c0)) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xa, 0x0, 0x0) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, 0x0, 0x0) r3 = getpid() r4 = syz_pidfd_open(r3, 0x0) r5 = openat$sndseq(0xffffffffffffff9c, 0x0, 0x1) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r5, 0xc08c5332, &(0x7f0000000040)={0x7, 0x100000, 0x0, 'queue0\x00'}) close_range(r4, 0xffffffffffffffff, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x6, 0x0, 0x0) syz_open_procfs(r0, &(0x7f0000000040)='clear_refs\x00') syz_mount_image$vfat(&(0x7f0000002100), &(0x7f0000001200)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x304982f, 0x0, 0x3, 0x0, &(0x7f0000000240)) 3m1.686415611s ago: executing program 1 (id=4425): socketpair$unix(0x1, 0x1, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f0000000280), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) mkdirat(0xffffffffffffff9c, 0x0, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x1d7) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./file1/file0\x00', 0x0) mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000080)='./file1/file0\x00', 0x0, 0x1085408, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f00000003c0), 0x40, &(0x7f00000004c0)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file1/file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(0x0) unlinkat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x200) syz_open_procfs$namespace(0x0, &(0x7f00000003c0)='ns/time\x00') close(0xffffffffffffffff) openat$vcs(0xffffffffffffff9c, 0x0, 0x42, 0x0) mount$9p_fd(0x0, 0x0, &(0x7f0000000100), 0x0, 0x0) pwritev(0xffffffffffffffff, 0x0, 0x0, 0x9, 0x26d0d5f1) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x35, &(0x7f0000000000)=0x8, 0x4) mount(&(0x7f0000002200)=@rnullb, 0x0, &(0x7f0000002280)='ecryptfs\x00', 0x40, &(0x7f00000022c0)='&-\\/[/@\'.(\x00') openat$binfmt_register(0xffffffffffffff9c, &(0x7f00000025c0), 0x1, 0x0) 3m0.105575298s ago: executing program 1 (id=4428): getsockname$packet(0xffffffffffffffff, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbee7, 0x8031, 0xffffffffffffffff, 0x84c18000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) socket$inet(0x2, 0x3, 0x2) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r3, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x14, r4, 0x301, 0x70bd26, 0x25dfdbfb, {0x1c}}, 0x14}, 0x1, 0x0, 0x0, 0x90}, 0x40006) 2m58.186567375s ago: executing program 1 (id=4431): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'sha3-384\x00'}, 0x58) accept$alg(r0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) r1 = fsopen(&(0x7f00000000c0)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_SET_BINARY(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x0, 0x0) setxattr$trusted_overlay_upper(0x0, 0x0, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xb, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000020850000000400000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x9, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000100000000000000001812", @ANYRES32=r3, @ANYBLOB="0000000000000000b703000000d0df00850000001b"], 0x0, 0xfffffffe, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000000740)={r4, 0x0, 0x0}, 0x10) r5 = getpid() sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r8 = openat$cgroup_subtree(r2, &(0x7f0000000200), 0x2, 0x0) write$cgroup_subtree(r8, &(0x7f0000000180)=ANY=[@ANYBLOB="2b63707573657420b2e5c83dfc258e7527766bb1c0098c856f296620538b1021c9bd76fcf4d6"], 0x8) r9 = openat$vcs(0xffffffffffffff9c, &(0x7f00000002c0), 0x80000, 0x0) r10 = syz_open_dev$vim2m(&(0x7f0000000e40), 0x8, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r10, 0xc0405602, &(0x7f0000000000)={0x26, 0x2, 0x3, "a677c17a067fd75f4600000069aece62bd255776000000000000004000", 0x31324d59}) read$FUSE(r9, &(0x7f0000003d00)={0x2020}, 0x2020) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) 2m57.518020452s ago: executing program 2 (id=4434): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() socket$nl_route(0x10, 0x3, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) epoll_create1(0x80000) close(0x3) r3 = syz_open_procfs$namespace(0x0, &(0x7f0000000100)='ns/pid_for_children\x00') bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000480)={@cgroup=r3, 0x11, 0x0, 0x0, 0x0, 0x1000000, 0x0, 0x0, 0x0, 0x0}, 0x40) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f00000002c0)={0xffffffffffffffff, &(0x7f0000000140)='W', 0x0}, 0x20) sendmsg$NLBL_CIPSOV4_C_ADD(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000006040)={0x28, 0x0, 0x1, 0x70bd28, 0x25dfdbff, {}, [@NLBL_CIPSOV4_A_TAGLST={0x4}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}, @NLBL_CIPSOV4_A_DOI={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x20000010}, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000640)={@cgroup=r4, 0x24, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) r5 = socket$inet6(0xa, 0x1, 0x0) keyctl$clear(0x3, 0xfffffffffffffffd) setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, &(0x7f0000000580)=@raw={'raw\x00', 0x3c1, 0x3, 0x4c0, 0x300, 0x18c, 0x203, 0x0, 0x19030000, 0x3f0, 0x2e0, 0x2e0, 0x3f0, 0x2e0, 0x3, 0x0, {[{{@uncond, 0x300, 0x2d8, 0x300, 0x0, {}, [@common=@unspec=@bpf0={{0x230}, {0x13, [{0x1d}, {0x20}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0xe}, {}, {0x0, 0x0, 0x3}, {0x2}, {}, {0x0, 0x0, 0x0, 0x1}, {}, {}, {0x16}, {}, {}, {0x7}, {}, {0x0, 0x0, 0x0, 0x101}, {}, {}, {}, {}, {}, {}, {0xfffe}, {}, {}, {}, {0x0, 0xfd}, {}, {0x7a04}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x800}, {}, {0xb84, 0x0, 0x0, 0xf00}, {0x0, 0x1, 0x0, 0x3}, {}, {}, {}, {}, {0x0, 0x0, 0xfe}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0xffff}, {0x4}]}}]}, @common=@unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0x0, 0x4}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0xb, 'syz1\x00', {0x6c8}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x520) readv(0xffffffffffffffff, &(0x7f00000009c0)=[{&(0x7f0000000680)=""/48, 0x30}, {&(0x7f00000006c0)=""/237, 0xed}], 0x2) 2m56.309556387s ago: executing program 1 (id=4435): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) ioctl$SNDRV_PCM_IOCTL_DRAIN(0xffffffffffffffff, 0x4144, 0x0) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/asound/timers\x00', 0x0, 0x0) read$FUSE(r3, &(0x7f0000000480)={0x2020}, 0x2020) mknod$loop(0x0, 0x0, 0x1) syz_emit_vhci(0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) 2m54.13942308s ago: executing program 2 (id=4439): r0 = socket$kcm(0x2d, 0x2, 0x0) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x8002, 0x0) r3 = openat$null(0xffffffffffffff9c, &(0x7f0000000540), 0x1, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x5) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x81de) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r5 = syz_open_dev$MSR(&(0x7f0000000040), 0x0, 0x0) r6 = fsopen(&(0x7f0000000040)='afs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r6, 0x1, &(0x7f0000000080)='source', &(0x7f00000000c0)='%(,c\xbe\xfb/:', 0x0) read$msr(r5, &(0x7f0000000300)=""/102400, 0x19000) mount$tmpfs(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000200)=ANY=[]) syz_open_procfs(0x0, &(0x7f0000002400)='net/netstat\x00') sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000240)={0x0, 0x20}, 0x1, 0x0, 0x0, 0x4000001}, 0x880) syz_io_uring_setup(0x18d7, 0x0, 0x0, 0x0, 0x0) prlimit64(0x0, 0x7, 0x0, 0x0) sendmsg$sock(0xffffffffffffffff, 0x0, 0x0) sendfile(r3, r2, 0x0, 0x80009) ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x89e3, &(0x7f0000000180)={r0, r1}) 2m54.07405397s ago: executing program 1 (id=4440): openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x1f, 0xd, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x80}, [@call={0x85, 0x0, 0x0, 0xf}, @ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x8001}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0xa6}}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x11}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) fcntl$getownex(r0, 0x10, 0x0) ptrace$ARCH_FORCE_TAGGED_SVA(0x1e, 0x0, 0x0, 0x4004) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_open_dev$cec(0x0, 0x0, 0x549903) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000c40)={0x14, 0x3b, 0x301, 0xa70bd1d, 0x25dfdbff, {0x6}}, 0x14}, 0x1, 0x0, 0x0, 0x8010}, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000080), r2) madvise(&(0x7f0000000000/0x600000)=nil, 0x60005f, 0x67) mount$binder(0x0, &(0x7f00000021c0)='.\x00', &(0x7f0000002200), 0x1200850, &(0x7f0000002240)={[{@stats}]}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r3 = syz_open_dev$hidraw(&(0x7f0000000000), 0x0, 0x81) ioctl$HIDIOCGRAWPHYS(r3, 0x80404805, &(0x7f0000000040)) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@base={0x1, 0x42, 0x6, 0x8, 0x0, 0x1}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xc, 0x4, 0x4, 0x8001, 0x18, r4}, 0x50) sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0x0) 2m43.990234201s ago: executing program 2 (id=4452): bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c000000020303000000000000000000000100"], 0x1c}}, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000200)=0x40003) syz_clone(0x10800100, 0x0, 0x0, 0x0, 0x0, 0x0) r5 = syz_open_dev$vcsa(0x0, 0x4000000000, 0x4e8800) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./proc/mtrr\x00', 0x2, 0x0) ioctl(r6, 0x40104d05, &(0x7f0000000900)="0000010000000000000001") ioctl$UI_BEGIN_FF_ERASE(r5, 0xc00c55ca, &(0x7f00000000c0)={0xc, 0x1, 0x100}) 2m36.887006205s ago: executing program 37 (id=4440): openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x1f, 0xd, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x80}, [@call={0x85, 0x0, 0x0, 0xf}, @ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x8001}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0xa6}}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x11}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) fcntl$getownex(r0, 0x10, 0x0) ptrace$ARCH_FORCE_TAGGED_SVA(0x1e, 0x0, 0x0, 0x4004) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_open_dev$cec(0x0, 0x0, 0x549903) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000c40)={0x14, 0x3b, 0x301, 0xa70bd1d, 0x25dfdbff, {0x6}}, 0x14}, 0x1, 0x0, 0x0, 0x8010}, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000080), r2) madvise(&(0x7f0000000000/0x600000)=nil, 0x60005f, 0x67) mount$binder(0x0, &(0x7f00000021c0)='.\x00', &(0x7f0000002200), 0x1200850, &(0x7f0000002240)={[{@stats}]}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r3 = syz_open_dev$hidraw(&(0x7f0000000000), 0x0, 0x81) ioctl$HIDIOCGRAWPHYS(r3, 0x80404805, &(0x7f0000000040)) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@base={0x1, 0x42, 0x6, 0x8, 0x0, 0x1}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xc, 0x4, 0x4, 0x8001, 0x18, r4}, 0x50) sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0x0) 2m36.832047426s ago: executing program 2 (id=4460): shmat(0x0, &(0x7f000051b000/0x3000)=nil, 0x2000) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_route(0x10, 0x3, 0x0) epoll_create1(0x80000) socket$netlink(0x10, 0x3, 0x8000000004) socket$inet6(0xa, 0x80002, 0x0) r0 = io_uring_setup(0x4053, 0x0) io_uring_register$IORING_REGISTER_FILES2(r0, 0xd, &(0x7f0000000140)={0x62, 0x1, 0x0, 0x0, &(0x7f00000001c0)}, 0x20) pread64(0xffffffffffffffff, 0x0, 0x0, 0x1000000000) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000440)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0xa2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000032680)=""/102392, 0x18ff8) r2 = socket(0x40000000015, 0x5, 0x0) connect$inet(r2, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) bind$inet(r2, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x10) setsockopt$SO_TIMESTAMP(r2, 0x1, 0x40, 0x0, 0x0) prctl$PR_SCHED_CORE(0x4d, 0x1, 0x0, 0x0, 0x0) sendto$inet(r2, 0x0, 0x0, 0x0, 0x0, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) socket$inet6_udp(0xa, 0x2, 0x0) 2m21.312973777s ago: executing program 38 (id=4460): shmat(0x0, &(0x7f000051b000/0x3000)=nil, 0x2000) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_route(0x10, 0x3, 0x0) epoll_create1(0x80000) socket$netlink(0x10, 0x3, 0x8000000004) socket$inet6(0xa, 0x80002, 0x0) r0 = io_uring_setup(0x4053, 0x0) io_uring_register$IORING_REGISTER_FILES2(r0, 0xd, &(0x7f0000000140)={0x62, 0x1, 0x0, 0x0, &(0x7f00000001c0)}, 0x20) pread64(0xffffffffffffffff, 0x0, 0x0, 0x1000000000) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000440)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0xa2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000032680)=""/102392, 0x18ff8) r2 = socket(0x40000000015, 0x5, 0x0) connect$inet(r2, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) bind$inet(r2, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x10) setsockopt$SO_TIMESTAMP(r2, 0x1, 0x40, 0x0, 0x0) prctl$PR_SCHED_CORE(0x4d, 0x1, 0x0, 0x0, 0x0) sendto$inet(r2, 0x0, 0x0, 0x0, 0x0, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) socket$inet6_udp(0xa, 0x2, 0x0) 45.488540494s ago: executing program 3 (id=4623): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'sha3-384\x00'}, 0x58) accept$alg(r0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) r1 = fsopen(&(0x7f00000000c0)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_SET_BINARY(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x0, 0x0) setxattr$trusted_overlay_upper(0x0, 0x0, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xb, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000020850000000400000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x9, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000100000000000000001812", @ANYRES32=r3, @ANYBLOB="0000000000000000b703000000d0df00850000001b"], 0x0, 0xfffffffe, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000000740)={r4, 0x0, 0x0}, 0x10) r5 = getpid() sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r8 = openat$cgroup_subtree(r2, &(0x7f0000000200), 0x2, 0x0) write$cgroup_subtree(r8, &(0x7f0000000180)=ANY=[@ANYBLOB="2b63707573657420b2e5c83dfc258e7527766bb1c0098c856f296620538b1021c9bd76fcf4d65e9af1e6ed7bf4bb69e63f92ee23bd679dbfdd9f17308fe027f71ce5ff3aa055de3ff4cd53"], 0x8) r9 = openat$vcs(0xffffffffffffff9c, &(0x7f00000002c0), 0x80000, 0x0) r10 = syz_open_dev$vim2m(&(0x7f0000000e40), 0x8, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r10, 0xc0405602, &(0x7f0000000000)={0x26, 0x2, 0x3, "a677c17a067fd75f4600000069aece62bd255776000000000000004000", 0x31324d59}) read$FUSE(r9, &(0x7f0000003d00)={0x2020}, 0x2020) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) 44.28066821s ago: executing program 3 (id=4624): syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) syz_ublk_setup_io_uring(0x1402, &(0x7f0000000280)={0x0, 0x0, 0x80, 0x3, 0x20d}, &(0x7f0000000080), &(0x7f0000000540), &(0x7f0000000140)) socket$inet_udp(0x2, 0x2, 0x0) socket$netlink(0x10, 0x3, 0x8000000004) socket$nl_generic(0x10, 0x3, 0x10) socket$inet(0x2, 0x2, 0x1) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) r2 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r2, &(0x7f0000000140)=@pppol2tpin6={0x18, 0x1, {0x0, r1, 0x1, 0x0, 0x0, 0x0, {0xa, 0x0, 0x4000000, @mcast1}}}, 0x32) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r3, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYRES8=r0], 0xfffffffffffffe65}, 0x4004000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r5, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r4, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)=[@rights={{0x10}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x70}, 0x80) socketpair$unix(0x1, 0x2, 0x0, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000001c0)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) r8 = dup(r7) syz_ublk_setup_queues(r8, r6, &(0x7f00000004c0)={0x0, 0xbd, 0x200, 0x1, 0x282}, &(0x7f0000000640)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe708, 0x42, 0x0, 0x382}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x3b00, 0x800, 0x1, 0x3aa}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x93ea, 0x20, 0x4003bfff, 0x2b9}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5, 0x840, 0x1, 0x26d}}], 0x1, 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000040)=0x3, 0xac5) syz_clone3(&(0x7f0000000180)={0x23800000, &(0x7f0000000040), 0x0, 0x0, {0x27}, 0x0, 0x0, 0x0, 0x0}, 0x58) io_setup(0x8, &(0x7f0000000600)) 44.049138703s ago: executing program 3 (id=4625): request_key(0x0, 0x0, &(0x7f0000000340)='\x8e\x00\x9e\xbb\x1e\x1av\xe8M\x00d\xaaI\x00\x00\x00\x00\x00\x00\t<\xe5u\xedA\xa7\aT\xdd\xd1{\xff\xcb\xdb\xb11\xc2s\xcb\xbf\x04\x00\x00\x00<\xfe\xf9\f\xe6E\b\x00\xd7\x85q\xc4\xab\xbd&\x92\x89(\xf3\"\xceJ\x19\x185\xa6- \xe6uK\xe1D\x8f\x9f\x92\xca\x93#\xf5E\xc2\x91Yl\x17\a\x02\t\x17\x7f\xc4\xde\x04\x9b\x89#\xf6&[\xd81\xb3\xdc\x00\x04\x15\x03\x17R\xd24\xeb\xb5\xc2\xff\x1bnF\x8e\xe4\'\x18\xba9.\xd4\xd9\xc6\x98\x8f\xc6D!p\xbeV\xb7x\r@\x1b5\x8br\x11\xdex\x19\x89\xdc\x1el\xcd\x13\xb6\xc2\xdb\x1fr2\x7f?\xfe\x0f\x04\x11\xc3\x8f:uXQ\x0f\v\xfc\xff\x7fL\xfb\xa8]\xd4\xd7\x13?\xe3<#\x1f\x9a\x03C\x8f\xe7\rV1\x99\xaf@Re\x18J\xb6\xee\xeeAnR\n\x8a\xe4\x1a:&\xc7\x15B\x8aG\xa4\a`\xee\xaf\x80T\xddo\xc4D^z\xbf\x1c\x87F?!k\'\xc3\xf9\xa3\xd9\x85\xb1N%\x17\f\xd0#\x05^\xf7\x11\x13\xadKb\x8ck\x10\xd3 >\t\xe0\x16\x80\x82\xb3\xcc\xc7\x05*\x9b\x0eQ\x92\xd7\xbaO\x06\xb2\xdc\xe7/\x1f\x90]IB94(evFMJ\x85\xc4S\xa8\x8b\xbe\xd3\x90\xe9\t\x00\x13\x1e\x9a\x94\x00\x00\x00\x00\x00U\xfbLA\xa6K\xd5\x0eD\xf2Y\xc3,\t4hD\xc4o\xc3\x87$\x9d6\xc8\x93\xa3\x8e:\xfe#\xa0`\xb1k\xacz\xe0\xb3\x95\x17\xdf\xc7\xc2\xedKc\xa3\xbd\xc2\x9f\x86C(/\xe3\xb2\xc6$s^\xd1vU\x9cB)ao\xf1\'', 0xffffffffffffffff) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mkdirat(0xffffffffffffff9c, 0x0, 0x187) lsetxattr$security_capability(&(0x7f0000000000)='./file1/file2\x00', &(0x7f0000000140), 0x0, 0x0, 0x1) mprotect(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x1000000) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r1, 0x89f1, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f0000000300)={'syztnl2\x00', &(0x7f0000000040)={'syztnl2\x00', 0x0, 0x29, 0x84, 0x4, 0x4038a0b, 0x11, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @mcast2={0xff, 0x5}, 0x20, 0x0, 0x0, 0x4}}) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000003000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x3000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)={0x44, 0x2, 0x6, 0x801, 0xe4340000, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_TYPENAME={0x12, 0x3, 'hash:net,port\x00'}]}, 0x44}}, 0x2) sendmsg$IPSET_CMD_SAVE(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c0000000806010800000000000000000100000105000100070000"], 0x1c}, 0x1, 0x0, 0x0, 0x40044}, 0x48040) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000080)={0xffffffffffffffff, 0x58}, 0x10) r3 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0x972, 0x1f480, 0x2, 0x325}) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x11, 0x5, 0x0, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x4d}, 0x94) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x42, &(0x7f0000000500)=ANY=[@ANYBLOB, @ANYRES32=0x41424344, @ANYRES32=0x41424344], 0x0) madvise(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x18) io_uring_enter(r3, 0x12a, 0xffffffdc, 0x17, 0x0, 0x0) sendmsg$BATADV_CMD_GET_DAT_CACHE(0xffffffffffffffff, 0x0, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0x488d1}, 0x400c000) 43.342347874s ago: executing program 3 (id=4627): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./debug\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./debug\x00', &(0x7f00000000c0)='debugfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./debug/dynamic_debug/control\x00', 0x1, 0x0) write(r0, &(0x7f0000000140)='file drivers/md/raid5.c +p', 0x1a) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./sys\x00', 0x1ff) mount(0x0, &(0x7f00000001c0)='./sys\x00', &(0x7f0000000200)='sysfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./sys/module/md_mod/parameters/new_array\x00', 0x1, 0x0) write(r1, &(0x7f0000000280)='md0', 0x3) r2 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./sys/block/md0/md/level\x00', 0x1, 0x0) write(r2, &(0x7f0000000300)='raid5', 0x5) r3 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./sys/block/md0/md/raid_disks\x00', 0x1, 0x0) write(r3, &(0x7f0000000380)='4', 0x1) r4 = openat(0xffffffffffffff9c, &(0x7f00000003c0)='./sys/block/md0/md/chunk_size\x00', 0x1, 0x0) write(r4, &(0x7f0000000400)='4096', 0x4) r5 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./sys/block/md0/md/new_dev\x00', 0x1, 0x0) write(r5, &(0x7f0000000480)='1:0', 0x3) write(r5, &(0x7f00000004c0)='1:1', 0x3) write(r5, &(0x7f0000000500)='1:2', 0x3) write(r5, &(0x7f0000000540)='1:3', 0x3) r6 = openat(0xffffffffffffff9c, 0x0, 0x1, 0x0) write(r6, &(0x7f00000005c0), 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/block/md0/md/dev-ram1/slot\x00', 0x1, 0x0) write(r7, &(0x7f0000000640)='1', 0x1) r8 = openat(0xffffffffffffff9c, &(0x7f0000000680)='./sys/block/md0/md/dev-ram2/slot\x00', 0x1, 0x0) write(r8, &(0x7f00000006c0)='2', 0x1) write(0xffffffffffffffff, &(0x7f0000000740)='3', 0x1) r9 = openat(0xffffffffffffff9c, &(0x7f0000000780)='./sys/block/md0/md/array_state\x00', 0x1, 0x0) write(r9, &(0x7f00000007c0)='ac', 0x2) 43.193219091s ago: executing program 3 (id=4628): prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) prlimit64(0x0, 0x7, 0x0, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42795000) ioctl$TCSETS(0xffffffffffffffff, 0x545c, 0x0) landlock_restrict_self(0xffffffffffffffff, 0xc) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, 0x0, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xb320a000) r1 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) fcntl$lock(r1, 0x410, &(0x7f00000000c0)={0x1, 0x1, 0x1, 0xfffe}) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a44, 0x1700) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r2 = syz_clone(0x800000, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r2) timer_create(0x4, 0x0, 0x0) socket$igmp(0x2, 0x3, 0x2) r3 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) r4 = fcntl$dupfd(r3, 0x406, r3) read$FUSE(r4, &(0x7f0000002480)={0x2020}, 0x2020) write$tun(r4, &(0x7f0000000400)=ANY=[], 0xa2) creat(0x0, 0xd931d3864d39dcca) 43.026864089s ago: executing program 3 (id=4629): r0 = openat(0xffffffffffffffff, 0x0, 0x4c0142, 0x163) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, 0x0, 0x0) r2 = syz_init_net_socket$llc(0x1a, 0x801, 0x0) syz_open_procfs(0x0, &(0x7f0000000080)='gid_map\x00') bind$alg(0xffffffffffffffff, &(0x7f00000003c0)={0x26, 'hash\x00', 0x0, 0x0, 'tgr192\x00'}, 0x58) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$hfs(&(0x7f0000000180), &(0x7f00000000c0)='./file1\x00', 0x1000812, &(0x7f0000001800)=ANY=[@ANYBLOB="71756965742c636f6465706167653d63703836302c696f636861727365743d63703836312c00808fead042bd35dc78f7f06333a5e7165b8271e41aee85e59cbb6c2df3d4e4c16b06c73f2e3b34ac8d4813c9c3d9cee1ddb95d1bbcf504e065b3749a1cbd841e685a558598cf0db10b55885946e678d0a71877037a090000000700848879ef1604cadc1faca3aa22a576750d559c4e124d4cb7293e7393b77286fa8c6dc449eda0a03d342382e84d6d3c29ab95cc923fbe25e134d1c421320a3bffaa17fcd6b5178e322cc47133b3811e3d3bc34998dc7ed029834ad591d9d56c41063d8de2d50a2398e73ff2913a9fe8e954a4e4ca99ceb5737e57193c5f47fd63b16c8b34f256dbac0e5ebd009078df2cb1ca0151ad091adbfee5126d8a59fa5438734bc3e8cc7b7edc10716a0a9b711952cdf96586e06fbace21dc04bdb4a1a2072ce5f72cf02e5256ff74be5e07a5f8d6ec2fa867b2a353bf6ea1b533377803804a49a499d51f1cb71e1cea551598939afe8ff8e8472352e2d5193bc866c000"/396, @ANYRESOCT, @ANYRES8=0x0, @ANYBLOB="eb4df9aa36400f1596263ee4e2ba950c3777a4ec31bc2dc78cd48b646ae82f0508a43d2064587fb0b58769e71fc7b7c8e93fa8ec644b9889e92afb0c6a178d5f85790c4047947250a43c67c7b897debc120c19d2b9c218c8a1205fae81bb140f9e9a69c60fd20d07ac3643e470a4bbe559f8b777749dd02b1336813ff11343d09bebc37a1ed9bb9ced4e3264a2ead14b4350c271", @ANYRESHEX=0x0, @ANYBLOB="0affd5ece651e2a4648f9b279d8dc44bc4bd6acc0aa01a3ab56e469d3c338a26ff996b57afbe65c4eb94f6fd4cfbda2af6c85c6e135955ca0640546a2aac7bb02432e45e6d333181ee921f9f26a8ef000000000800000000000000000000000000000000000000000000000000004de9f91aeab66cc8b2197d3c00068324c7b7bd"], 0x1, 0x305, &(0x7f0000000340)="$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") r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x101041, 0xf0) syz_mount_image$vfat(&(0x7f0000000b00), &(0x7f00000005c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x81d011, 0x0, 0x1, 0x0, &(0x7f0000000140)) syz_mount_image$exfat(0x0, &(0x7f0000000100)='./bus\x00', 0x80d800, 0x0, 0x0, 0x0, &(0x7f0000000240)) mkdir(&(0x7f0000000180)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x1b8) syz_mount_image$vfat(&(0x7f00000007c0), &(0x7f0000000280)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x824851, 0x0, 0x1, 0x0, &(0x7f0000000d40)) mknod$loop(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x1) creat(&(0x7f00000009c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x44) syz_mount_image$vfat(&(0x7f0000000800), &(0x7f00000005c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x181d011, 0x0, 0x40, 0x0, &(0x7f0000000140)) mkdir(&(0x7f0000000180)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) pwrite64(r3, &(0x7f0000000140)='2', 0xfdef, 0xe7c) truncate(&(0x7f0000000100)='./file1\x00', 0x401) openat$ptp0(0xffffffffffffff9c, 0x0, 0x1a1101, 0x0) getsockname$llc(r2, 0x0, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000a40)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) 29.481274726s ago: executing program 7 (id=4637): socket$inet6_sctp(0xa, 0x5, 0x84) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$RTC_WKALM_RD(0xffffffffffffffff, 0x80287010, &(0x7f0000000000)) socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, 0x0, 0x0) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000340)={'netdevsim0\x00', 0x0}) unshare(0x1e060c80) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) r3 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000180)='/dev/comedi3\x00', 0x0, 0x0) ioctl$COMEDI_RANGEINFO(r3, 0x80106408, &(0x7f0000000280)={0xb, 0x0}) r4 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000040), 0xd01, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000003740)={r4, 0x0, 0x0, 0x1000, &(0x7f00000000c0), &(0x7f0000002600)=""/4096, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x3}, 0x50) r5 = fsopen(&(0x7f0000000100)='hugetlbfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0) r6 = fsmount(r5, 0x0, 0x0) fchdir(r6) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x42, 0x80) acct(&(0x7f00000000c0)='./file1\x00') syz_clone(0x1000, 0x0, 0x0, 0x0, 0x0, 0x0) socket$phonet_pipe(0x23, 0x5, 0x2) socket$phonet_pipe(0x23, 0x5, 0x2) 27.055228999s ago: executing program 39 (id=4629): r0 = openat(0xffffffffffffffff, 0x0, 0x4c0142, 0x163) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, 0x0, 0x0) r2 = syz_init_net_socket$llc(0x1a, 0x801, 0x0) syz_open_procfs(0x0, &(0x7f0000000080)='gid_map\x00') bind$alg(0xffffffffffffffff, &(0x7f00000003c0)={0x26, 'hash\x00', 0x0, 0x0, 'tgr192\x00'}, 0x58) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$hfs(&(0x7f0000000180), &(0x7f00000000c0)='./file1\x00', 0x1000812, &(0x7f0000001800)=ANY=[@ANYBLOB="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"/396, @ANYRESOCT, @ANYRES8=0x0, @ANYBLOB="eb4df9aa36400f1596263ee4e2ba950c3777a4ec31bc2dc78cd48b646ae82f0508a43d2064587fb0b58769e71fc7b7c8e93fa8ec644b9889e92afb0c6a178d5f85790c4047947250a43c67c7b897debc120c19d2b9c218c8a1205fae81bb140f9e9a69c60fd20d07ac3643e470a4bbe559f8b777749dd02b1336813ff11343d09bebc37a1ed9bb9ced4e3264a2ead14b4350c271", @ANYRESHEX=0x0, @ANYBLOB="0affd5ece651e2a4648f9b279d8dc44bc4bd6acc0aa01a3ab56e469d3c338a26ff996b57afbe65c4eb94f6fd4cfbda2af6c85c6e135955ca0640546a2aac7bb02432e45e6d333181ee921f9f26a8ef000000000800000000000000000000000000000000000000000000000000004de9f91aeab66cc8b2197d3c00068324c7b7bd"], 0x1, 0x305, &(0x7f0000000340)="$eJzs3U1rE1scx/HfmaRNepvbmz5cLtxltaAb0boRNxHJWxDEhWjbCMVQUSuoG1NxJaJ7974FX4QbxTegKxfiC2g3jpwzD8kkk5k0JB2D3w+Ik8n85/zPPP5PoBwB+GNdbX55d/Gb/WekkkrSy8uSJ6kqlSX9q/+qj/b2d/fbrZ2sHZVchI58GQWRZmCb7b2W+/8gudrGuYhQ3X4qq9a7DtPh+/6Vr33rvnsFJYPCuLs/hSdVwrvTfV898cyyHYwZ15lwHrPGHOpQj7VUdB4AgGLZ9/9BUPjb93wtrN89T9oIX/u/5ft/XIdFJzB1fua3Pe9/N8ryjT2//7ivuuM9N4Sz33vRKHGUluf6Ps8rKCQTBaZJH1V2h3wuF2/hzm67dW77XnvH03M1Qj0Ba3ELIXuF5mS7njI2zTBC301qRRmk5c3ZPmwOyX91zBYzDAzfEifEfDCfzE1T11vtxPVf2Tc2W5dwve9MBfmfH97eoouyWyl8bDQaDc/tKLLsGvk/eaZyellNH5EoOrDLSv5AUM/L00Wt9EUFvbuQGlCJo1ZTozajT0PaWktE2d7EV/PwLKfNvDbXzbp+6L2aPfW/Z/Pb0PA7M/GLjtkIbjR3xIP+zKc3V3b7rA+8OTq6UUuuiY9iZVjqR9nPNIwgOoevtKVLWnr45OndUrvdemAXbqcs3K/Fa+ZeSKnbFLygTndNRb4zsHH0DEyEL4Qrp5TY2Ynu0D4/cje2d9mJHPneKyG6YSfWhLziL62sa6P5se9CmtiCX5nwDn/6Y0T9fcIPJRSle9KLzgQFsXWXCcZ/rpIP631Xr9lq4VpleJ0eFWRpJZur3sM9+rbGjkdA1UT8ilv6K1lG54wNFsM6JmUc19FoY65TZ6TTo7dYD/OcDf6znA1MU591i9//AQAAAAAAAAAAAAAAAAAAZs3x/65g4dhRRfcRAAAAAAAAAAAAAAAAAAAAAIBZF8//q2j+X402/2//VCzh/L9V5cz/uzWYw8D8v2/2ZDoS8/8C0/UrAAD///8sd7M=") r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x101041, 0xf0) syz_mount_image$vfat(&(0x7f0000000b00), &(0x7f00000005c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x81d011, 0x0, 0x1, 0x0, &(0x7f0000000140)) syz_mount_image$exfat(0x0, &(0x7f0000000100)='./bus\x00', 0x80d800, 0x0, 0x0, 0x0, &(0x7f0000000240)) mkdir(&(0x7f0000000180)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x1b8) syz_mount_image$vfat(&(0x7f00000007c0), &(0x7f0000000280)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x824851, 0x0, 0x1, 0x0, &(0x7f0000000d40)) mknod$loop(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x1) creat(&(0x7f00000009c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x44) syz_mount_image$vfat(&(0x7f0000000800), &(0x7f00000005c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x181d011, 0x0, 0x40, 0x0, &(0x7f0000000140)) mkdir(&(0x7f0000000180)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) pwrite64(r3, &(0x7f0000000140)='2', 0xfdef, 0xe7c) truncate(&(0x7f0000000100)='./file1\x00', 0x401) openat$ptp0(0xffffffffffffff9c, 0x0, 0x1a1101, 0x0) getsockname$llc(r2, 0x0, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000a40)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) 27.037298789s ago: executing program 7 (id=4640): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x121800, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000680)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6364, 0x200005, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r3, {0x0, 0x10}, {0x1, 0xb}, {0xffff, 0x8}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x4, 0x10, 0x6, 0x8, 0x4fbee}, 0x13, 0x1, 0x3, 0x7, 0x10, 0x4, 0x1b, 0x18, 0x5, 0x402, {0x6, 0x8001, 0xfffffffc, 0x0, 0xffffffff, 0x5}}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x240048e4}, 0x4890) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'syzkaller0\x00', 0x0}) sendto$packet(r4, &(0x7f00000002c0)="7cd5", 0x2, 0x8000, &(0x7f0000000140)={0x11, 0x8100, r5, 0x1, 0x3, 0x6, @multicast}, 0x14) 14.277450016s ago: executing program 7 (id=4643): r0 = socket(0x10, 0x3, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000240)={'ip6tnl0\x00', &(0x7f0000000140)={'ip6_vti0\x00', 0x0, 0x29, 0xe0, 0x6, 0x8, 0x10, @loopback, @private0={0xfc, 0x0, '\x00', 0x1}, 0x8000, 0x7, 0x80, 0x7f}}) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x201) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) connect$unix(0xffffffffffffffff, 0x0, 0x0) pread64(0xffffffffffffffff, 0x0, 0x0, 0x200) socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r0, &(0x7f0000000d00), 0x2, 0x0) r3 = socket(0x10, 0x3, 0x0) write(r3, &(0x7f00000000c0)="2000000012005f0214f9f4070000fbe414019ff5526ac553f0ff49a1fc8bf60a1e00000000", 0x25) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f00000001c0)={0x10000, 0x0}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYRES64=r3, @ANYRES32=r2, @ANYBLOB="1fb41bcdb1825ea0a4b4b937f380f3316f4e1192a1b1925fd711005ef401c491393a02bcf599c818578b249d3cca97c730ec14f8eb58db2f4306f648de30eb7d508ca2c33a3860b9", @ANYRESDEC=0x0, @ANYBLOB="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"], 0x48) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f00000004c0)={r5, 0x0, 0x0}, 0x1c) recvmmsg(r3, &(0x7f00000021c0), 0x5b, 0x40, 0x0) getsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x16, 0x0, 0x0) ioctl$OCFS2_IOC_MOVE_EXT(0xffffffffffffffff, 0x40406f06, 0x0) r6 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl(r6, 0x890b, &(0x7f0000000100)="00000000000000000000000000000100020000006c61706230") mount(0x0, &(0x7f0000000040)='./cgroup\x00', 0x0, 0xc0ed0000, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='numa_maps\x00') 13.97087377s ago: executing program 6 (id=4644): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x28100, 0x0) ioctl$TIOCSETD(r0, 0x5423, 0x0) io_setup(0x40, &(0x7f0000000000)=0x0) io_submit(r1, 0x0, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) prlimit64(0x0, 0x5, 0x0, &(0x7f00000016c0)) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r3 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x4a102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r4 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000080), 0x200, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r4, 0xc0189374, &(0x7f0000000240)={{0x1, 0x1, 0x1018, 0xffffffffffffffff, {0x29}}, './file0\x00'}) ioprio_set$pid(0x2, 0x0, 0x2000) mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x100) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mkdir(&(0x7f0000000000)='./bus\x00', 0x64) socket(0x2, 0x80805, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={[{@upperdir={'upperdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@redirect_dir_off}, {@uuid_on}, {@redirect_dir_on}]}) ioctl$AUTOFS_DEV_IOCTL_VERSION(r4, 0xc0189371, &(0x7f0000000280)={{0x1, 0x1, 0x18, r5}, './file0\x00'}) r6 = open(0x0, 0x84242, 0x1df2a23c5997fad6) sendfile(r6, r6, &(0x7f0000000080), 0x7f03) fallocate(r2, 0x0, 0x1, 0x7) ioctl$TIOCVHANGUP(r0, 0x5437, 0x0) r7 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r7, 0x54a2) 11.678382721s ago: executing program 6 (id=4645): r0 = openat$vicodec0(0xffffffffffffff9c, 0x0, 0x2, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x20050840) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r1, 0x40182103, &(0x7f0000000180)={0x0, 0x0, r1, 0x800005, 0x80000}) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) r2 = socket$inet6(0xa, 0x3, 0x7) connect$inet6(r2, &(0x7f0000001940)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x9}, 0x1c) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0xa101, 0x0) openat(0xffffffffffffffff, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x4) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r3 = syz_open_dev$sndmidi(&(0x7f0000000780), 0x2, 0x143102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0x1f, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0xffff}, 0x50) r5 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000100000c02000000000000000000000d0000000000005f"], 0x0, 0x34}, 0x20) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000100000000000000801800009500000000000000"], &(0x7f0000000000)='GPL\x00', 0xc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r5, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x1}, 0x94) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000500)=@bpf_ext={0x1a, 0xf, &(0x7f00000002c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8792}, {{0x18, 0x1, 0x1, 0x0, r4}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000180)='GPL\x00', 0x7, 0x0, 0x0, 0x40f00, 0x20, '\x00', 0x0, 0x3a, r5, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x1, r6, 0x0, 0x0, 0x0, 0x10, 0x4a6}, 0x94) r7 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r7, &(0x7f0000000040)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0xb}, 0xe) sendmmsg$sock(r7, &(0x7f0000004100)=[{{0x0, 0x0, 0x0}}], 0xffffff80, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_VENDOR(r8, 0x0, 0x0) r9 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r9, 0x1, r0, &(0x7f0000000040)={0xe0002014}) r10 = socket(0x10, 0x2, 0x0) setsockopt$netlink_NETLINK_TX_RING(r10, 0x10e, 0xc, &(0x7f0000000000)={0x4}, 0x10) 10.28970593s ago: executing program 6 (id=4646): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000000)='devpts\x00', 0x38130d1, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) syz_emit_ethernet(0x22, &(0x7f00000000c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaefbbbbbbbbbb810074"], 0x0) ioctl$HCIINQUIRY(0xffffffffffffffff, 0x400448ca, 0x0) sched_getaffinity(r0, 0x8, &(0x7f0000000280)) r3 = socket$can_bcm(0x1d, 0x2, 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x0) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x404, &(0x7f0000002140)={{'fd', 0x3d, r4}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r4, &(0x7f00000021c0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r4, &(0x7f0000001dc0)={0x50, 0x0, r5, {0x7, 0x2b, 0x0, 0x2b418842, 0x6}}, 0x50) statx(0xffffffffffffff9c, &(0x7f0000000640)='./file0/file1\x00', 0x1000, 0x100, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000a80)='./file0/file0\x00', 0x0, 0x0) syz_fuse_handle_req(r4, &(0x7f0000004200)="aa8e9df36226466e888b39901e75023156b5530e75c1e203314842ea78a6048cdec3383c60dcd8fa24f6928f6e02ab1090989c59ae38dceda05af132af4546a298837c63ea70975feb0919d7f7766791d530b90d522b23c58776ac7a4035383c5a0dd90d8b766c96816631f1742a0da0ce6ddd053a05966f6b6ec22dd28a0a2636d07696a307496b0b0d8bb370227dca3c96838e556681409be388f1dfbf500f1aee82b374f4473aecbdb77cf567fece7f8ec733fa91aa92a186f9768d16d0257ef826959fb3a73e4976a019bde8a82e9bb0a0443cbb1ab2c6e8f8748489948710294efb79d70edec2271491bc1cddc9c9d2713cc3063761f2bea07f5577bbe5224302ef23adcc96cb5ecee406c7977c97d7000000006e28198954bba79006fd58b2a2b43047e7f3ead143ccb6b27043d7a7512e9d3bad0138554f4b465ab6d1cec9b40cb301ac6491ee7fcdc0588e53eb2510471de91e3e73c98f0a3cc9929eac63f477a1208a80f8c75d0a1d9edb895d675d036a1863dddea98b18c846ac253b2470324b21eaaa6e69389b91bcd470995cd6835c6fac80d5ca41b66562c910f893124cf0f20dc65d90aa0f9cd1a7c88f755aaf33875d7639ae1b7413834636de57f44302b723646257ee7456bdfee10f2eaf0c05f2cf01a115ed8ac2908827af3d85da2f1bcf53d87ee830dc5e98fcfc1a22e547ce57508f606945a7599d8e1cc0268987cb7b3d00a6bfacea7bd05430255bc8b473a071b83695783944ef856fc89906e0b44a13166309bc8cc1dbae68399e1e8e4a2ea265c1a104dd862563cdaeee2b37e72fbda323cc72360b6d4fad2fd2409397f90422bbe6e9068aaf38e18918736e6357a6caac59ae803ffbe853ff716a388423bbc93bb2d6b1222bb94c96a3bddf421288d47039fa1b73573dbed87e1f6b280f8b045f9be8e0d85f6cf416bfc0f3f4ce988aefa2382cccf39e40b2a1657814b7953d0a0aea45d50d02d66982e5269f1ededd6a9f8f9e212314a4bb5c2f4898278fd3a585c1ff60e435b186c552134e5ddb0f2cc95dac405bc4bd32ccda41b05c6a376070c8ef2d6eb3ea7fce97da8f09440d47dc5faca6271d1ce4f4201b315d1cc3fa1d4cc2baa14e4c57bafb7b5bb2e9e859505360e1738a36100dd6c2fb6610fc0ed88e452148ecd8b73517f69c28f0c979525d21ba4fef353eebb2326f48217c44a322e9f1f08f92af1ff5ee5f2dc563f1a0edb09d0646105be0c46ddc8b71301e68013e863d539af5b3a2b11f770d8c0c086988216602619ec440f98d434add23bc7f54d145260773e53121188ca179832d5c406f2b4a91045edca91232416219fade02bf6ba002352943850294b05d9a142889205e6b69336cecfe8a7cfc88688368d54b475f3915eea851334395f80b41177ed4d17d91880a22c1c0cf33a550e32fbf76505458d07ebccc4e77bafae1700c9997f6fe28452f011e370642f228bbf0e2f3dc05741127f6d73e96c073b26e730ac19cb17dfc63c0ed4b5d53ffd6e312e3e80822c8bbea3cf2914f3f8ee53fb4edde1d4507fa9d7de54eecb75132befab6bf486cb05bc8727dadac49c83bf08d9eb94621b42241f9eb8fd1e6fbf969d932a023760faa62c178b7f0a1d43adbf5c21a35a58d381442ecdfc2dcce2d11e5efae8433b14fc9fc28294ae76eaa95f38ac121f255d9b478c81a1caf5c606c34e6efa80dd3aa77cc4001b9fceebcc77a1efea7bf9f749f62c7a8bd5deb0f70c54ab5daab010cf14b2f1012516dc1639edb2d890638b73559d060be47f594f322efdd40c5945148fe1690585923488910fcb3159006f935f7d184e4b4c404ccb6e2a799cc67aa2b56a13c16e3ad92b85a12060881c1d140708ffece6965f9746ed4eef74d37424e760f4b266c80c93390523eadc65494962bed4efc86a0fead2fe25c9108c5d591770cee92f9ff2d916ba0dedc6551a47ce3a4dbc97043e588b3483f0793786fe9f32f1b79ba3f4c4ccabba52a59861c8024bcdfc8ecb0acc821160b060d5dc24f0ade14d08b56218a32a03f9eba729c02fc6b714bc72b11cc7fe47b51b3a174cfa2d8f5df80a0fd4d1dd2ed36b868b46ee5a8cc72e91b57bd05005b5142b5531650813fb5496af379f9e7b1b73c49c64dead9725af0742a41b770205390791de856715c0138ca22f134911a28d2caf22ef21049d1ba721d278bcf675317c5303cbaf96535414fd92c55d741120200d49729e01e399e4c30fa8da659654196af7991a3d294c775a610f242a56c88d542641036de7eccbd64f9f306a3920596d350637a6409f667110b46c6d85ab94df4d7b0af12318522ba1e745e7de45176789a53213b9b3d23b2599275e4f1858fdb2fd63f8c6f7990235e2fb3c4c8f215715973b60b1e56d1f061b6ff33510d08fa403559cbcc21bd141b41f1e9ab4e163a0f80a918ba13031c483931a9dcdb790ad77fbdf5634662cb75e79d986e4724f64c80203600df7ac9950330431b83777bd968a86be5698b13c37513235ac89a0a1dcb799112a86a2d96b1708e0c5e983756d8243927fc7d42be6ff4c946c0763a9745897726f38b65920363b7c32051bf9e770ab1ec140ff11fc639f36fa760afcfd6ba2f609df8cb0949f26119895b69c8ffd0836a01da1e407ba08f37a1144674f5a71b3499ffcccb21e75f19cdfb33c7eded5fa5c264784a78edc5f6de17da15317a66fea522b6e92a52efa5013797212d816c3229c7dd523e2165f9f042c3b3b16e608a1d87ab9c46c2b291bf547e1f4312913b16e39a714c24ebc5cb4f4f80bb20ce4efdf2921db45b7389fef98bd0e8aa40be16758b0d7755ab631b27c5d49225e84fea63e3f031c665851ef4ed18628b26445da2cad4741800cf72a401ad79a7462657068e0f2ee65eeb86da66890247cb45b31d3ad06ea7500eac5be65528c55bf190b0ec27673b67b36117344097a0dbb9db47a2b5144218002d14cbb98629c2ed35db5cdcf93994e3e3d1a1673ff60ec0d9bae1217ba6f39ae4ac4c9e5a19f85634f3091150c4724aaabe3bd1445cfa33fac93b86c5871ca168a728899e2e0062a596fba22b962764420f1268bb8ae0a894559c488cfce6b71aa8478964d2eef5086b2cee891ca031b6543bb7ba55006621f1d80e17abcba9f9d05fc5e61c6c4a890aba4b205f5570e7866ec4de380420c4758de63ff0f7b1acb0521e45cd9bc54df1a4614c04c524f43e86f58757eddb645bbc56a63de5bb560f56a31796dc344d58e2ff2d3fe5228d87c0439e6353943c92160fb847a172eea37ad0c22de5d1e7cd66730218832c87b73366131e29a1545b26d4c500a9afd75864b460cea1ba33a5dca6e5585e9c78a8ee3361f20e2b79489ed2ef1c935d7deeef6de0d009b72a0751929209b351331c0225c29341f5d476b278061a0a33c1e455815bbb83eebf5f5c3fe97c4b3df32846a094501a157196b6c1db1e05cec4f2dee823ebea7da05f5ee63aee1670128471465ae83defcf26aba78f18544146fcc9305ed5899965edbcf9f677c499a52d984db346c12faf02553338e6553488c29c9f3f4537a9437b5eb7382f95f9e844d27fa0b1ffc48d2b44e383b1fdb567b7f23863e8e10b6210f8031859cea410d52f99b5a8d2f218e7c92e231904b171dc077c636db15087cfb0ca6a2cd09f6b7973627a03ebfb4772daddc8ad7c9e534d8bc58cfc6d1305374b589a2a85c8a3c471c7408712ff5cfd7a50bee627d0417a5667dba71866320857cdb84e071a37e477f1b5ac16bdd464d8bf3ae31860ad19722bea1d85d1a5c09e1ab36dcd6c4bf524ed2137745e3562147081027d7852bee1ccc9563e4ff0ce72affa7002e9a066591ddf31abc4388281d98d2d88fa1c5f22cb60523e72e3d838fc6b0163fe0082ce0d8d59098363a174818113182d40cdb6367cb4a867c5aaa480c95f4a98439a2b58291fedcbfedfc3ebb41fe6b0a12fce36518ea6082fb919cdff23e3b40aa26eac8d634e03fc3a1e0fafe402c875709b15b622f35bfdd233ea8d7989ec38dfa1e5b5688d76c615b5efba62dd7d50be97b92f16c838edecd426e18dd270ddda42121d7ad8d26ec28df29580e6dcd7f968885d1cbc5f573efda890a408b45701bdf5cb2e3c54f8481710145ac1f5bdb1b53a1e9a7efd8a3ad7dad7bd0fa017e080854913beda2ccc95631a5c1da5c5afaa84bcc3f1a7041208fac9e09ef52140f142bed882b8988ea062cc8ecd7fd78fd33aeee8e8d5cc891514e3407fbb171e84e45fa14713e995513e16763424e356032ac81047c8e2bfe05dfecc510b55866d4a8696c91afd7b6b809fcf2e0f8a21834f43149d8e2b5dc5fddacb8ff9341376281e8f7d762fdb61a8e6536529b0d4d3cd8217fdb4f0b8341587737da7f50dbe4e5b7851a25d52066bd0e3ad11aed47ee02bec11d0f125cdee1f505cc5c1223d386b2fda556331cf57d8df433927cf12a5fbff853be266c5a64b6424f7b106931d312f0fd447206d21c1945579915e7e21627c7fc423a813823ce5fa2c6f3114303d0995c5706418a088535c62eda2a60c82b727c31177252f8ea025c16a3676ea0ccec24ea57e68c7e0f1b0e06f78a8ccead63eb4c0ef5c59b1d3a805644f8089e604a5bd3aa4494ff7fca02dd5894a6f02e572edd487af04ace3e37f19074325613d6f7d2af73062607b45a3c9365337a1c5e6bae9702a65f0a1b9ce75e43f6381efd9d610ad37532b62c6ab5957ded77a5d01604f67d7ccaa495266ab7fe161268b9a6156643ab6289fa0be75ac433a0204df164c02d3d0cb1b7bf0acd92ca8ff19b710b0b511820d0500fdf58f598fc611380a0f7dffce7bbc934edc967ba0094a0281750176748a4e2c99684c1c4a40258b0da77a0bfb9a4b808d5932443389f0f346dad998cee519624aeb07ea4446064282b1448bfa2e5ac3393d30b5c3865a8995869f69bab0747cfcbbd2bfd407c82e198da326f36be9a508e12d6d73fb262b37fcd7ff70b372c966b7198a9f2364012ff8127f200c079cb70d550f9483c1bf9fba69ebc961c989a82fc38cffe853e4738f33f1fa42fe7167e4bb79110f237d7e4989d2f6f4bd21905e491e2d4b6ac5a66025c11a93ab1eddcade3c3e78c270eaf6a0a6ed43df6e35bcaea9aa716d547d2136c2388379abf645e3f7cad1cc1fdc92b882729ff92b0612302970bd9ca7e36d76b2eb4d9dfe35116bb7771e448867e57026e622e1e54422b064fdb707fef339aa16fde808f622a7269b77c292c7e85fade6dcde475c2f61d71370209bc0e46ba7c7b71e41df246d283f5574205ca6b4819c63d97193eb084fd6b0c20b956cfc4b45b51fd46b2e034ff0f003179c7539fbc4e888c0633767604ed0f07beb4fe00f5a3b56ad9f3997cb49c7a8b92a719411b20874686a8a5ab462914baa85d016df99796a868af3dfa6ad98ceaaa18af2f2fad2ebf3dee1df8c8863e84ed83d6da5e283ca9cc385e0ded20531f127ff4aa974b91634d8f367154d3e23ebb04571a5a453d1265e873d00d40be7e1eb7e74529822b4c81d742c981a988fb786084cbd1e721358c7a1ea5293aa609773b890a5c9de4d1349588def4232d41fa5d7cfbc3dd130754891c304118a895268555874613e9c89c66bceea609e7ca1a914ea327db1f85a3809098e801289d8ab71997c2ad5bd1f3fd4b3c6b80667ac2b6b23b35018206dbf708284f0e0fac58d0b6d72c0d0034b6ed37b1f9931158f2443f045f65e33084ebc6aac93d8c0e3c1c52878dd3f54b9f88a40821090cdeb3bdbb61f0be16338a2a7ba0f77e9ecd5400b6f809a49eee78346c69e7ab560fcc32f2d19e665bb91fbc00e4c00838a1385d5156d1696f694027a9e6a7ef66933202012caca81c1b3ebe64976a9d000e28a6aae5d6f061c5acf8e4bca00bc5ecc547ab1664cdb2125300130a5a92abc0d36cf911fb3123034e925ea097fde14253dd3de52bf5c8a6bf01436c92dbbf5450a9b7775a981b09eab05406dae83f8ddcf898b1bace4b8487f0b4ec5b5316a9b7e3bcd6da41caa23604b3932ff3daf31bb19e74c687773bb54503f6b3ed74aef1410dc4a9a72fa05b1e120e682a7e7f9b8c7b6836fa9d8f96d16fa17975bc3dd7784f0d621d5a69038b0947d1cb47381c82c6df030fc8033dd66b380d884b12991ef5d5283e552f723aaf791bf3af581423c57b536b91e5a158695b68f7eccfd72fd2af1016e261ec863215d1df0fe756366e56fa86c4495cd9a45e83227af93a5b431c5d33fea2b3d469aab08f57b85b3a14a47d7da8ca74dae34f963cf660057466dac3937ce00060f8db8099178944aa37474a37eaef3b9ca04bd0eb1d03c25887d530cd690625f5829830851a6a58a7b411bc87aa70f26e80514799664e35c44db243d61add5bcaba3695e45e9f1a3cbf8ebdfb87571c44b9dcddc5fd422e94cbeb02bb58abd14e140829e12f7f0c7e3cc1a1bcae8429775e531710bfa504e103b17c20c329f653c015ab514fd6cf162b96d871930de99413e148fa58c1ff262a997c6ed1bc008912c6b864031dc95b5a3ad6aa3521167a62fe771baff828cafaf178539048d2e91a62ee7a50df04062422150347774db320fb535ddd4c03a8cdfc3affd253c200e1d5678ff12eb6f5bd43da636778cd2f8551295f4cbbc902322e491c5c10fee144daeaec4cc2a2f855f5312f4c8cac1155c8d3b93a5fe6a60118a0a9912b16d583582b478e4f05c375247d4cd897c49a8cfd2540833311039d9b121e5d5779d71b206d0d862b95e0eab28005f86ddd6ec514d931a521fc035eaacfd10ec5f97af541cabf08512f6c79e7e0db5217bd14aab6d3e9458018c3e59769bcb689347d7e394b469e9c9d9da2be8fc7a54b1aab301b68c1faf7ba7bfd05b8a313c902ad3733e523fd64739d9af110e39a96f1048fd6a43d13045ec71ff3d1f64a904f3878cb18f58b3b84942331ec05d3372a328a83e8aab828574313964f6f6c5af246faf2c69a95e9ceca77c0fbf303103a2d38ef6da2929a3dbccae5823f82d9a37c989154c8a760df8e7d8589daf1fd69683cadd2c7ac13e285a7661c23913912ee272797e3a0808654fd0b9f74f2fe04cb34167aa630b8aa58efc2586bef8c7c2e354d7c8d08de7d25a80b08bae8d2326d16a15d537d8baffcbbae460ce608ded63a45bdf0caf9dc335aa8d2aac03a62a9c6c62ce7c2caa9a731baa549d1880d3facdb4bee43ae27ccd5a22f143da8e7b4deb5c2a194d450eb5ff6949a950115d4e1d60fc75115346a0aaaf1400a301dcc8a04f9d2762c093f88adac799f6bd5150ca9c7d3ac1f728b88b1b0807a7407ad9b8febd89a801c9845af62bf2fc98aea4835d52871774e72b9fc07d26d55ef163833fd2f5c951ff963f43fcdaf03995cf3f14360b05be587e7a19fb760a944166b1fbd04c0d02bda8ff5d92a23c4e683db1b2823a6b02a16a7bc7963aaeeec43d97a85752fa439544127fb71d8b4fee6a09b966bc4e7be67acca35bfe4acabf18f6e9cc938c1e0af43e11754cbe7b37738019d9a162083f5f1fcdd9299921a349f1e0ee840b19fed4c0b5273d5e71ff5f1f20dbb36c89e1edbbef78de1a6229a2cd22bcf2164a1b567f7c08c6ba78ff2e53bc348dd2ab53b9deffc9cf8726feaf9cb07b4f94d189314da8c0005f3bb031e44c402339588832779790e814c707fdbe0830d53b4d35812f27e7709bee185d6d6d67a65382dcf56d567180a4a74cb05b0f7d0202bf33b88729f2bab7003264a2d67ea93d022baea74d7ca54a0081923a82e56750f22f58bc997ea57afe1bce18405383055745f0c6bfbbc514df76107b3c5d04bfe033dace72bd5bead25e736a0052b6efe7eb1153d1afe9202e227d60e4e38f5f294894d2ef9b89998194492e427442a18506e24ddcc1952354fe0250ad949be08a63b6c0e206ecbac70415c36f1bf78d7068ce8eb804561eab2540c6c984e63d1217de1242ae70a5dd457d7a96f24ad9e8a59c060a2a95e9e04a6a4429f40d47d2770e9d3ece295d748aa30a7bbd2aec570733be7855c3a789d71d94b3c86ccdd3cca3ddcb35a969e8c2d5b17ded6ab8b81b90a4206ac2ff163c04ba9886b5ec6138db5eb6ffc19201f66a1057858e564960de679b2996bb93c8d2b440fde169d1fbb5886fe673639c514c2eb8bca75f79abbb73c4a125e5f4d7d4ccd5c9fc85cedc9fe6f2b2b75ec384fa6ecec37579a70bd29b4c9893badb36e1b33cf61b07ee7d2a5550ac9f23b5fe629297efe94eb8a8c2adce65a61ddae84544fe8f81455e2d053fdf7efde38b92b0b4d3e7ff9d81f5de7d571cb4db7e059cbe1ac2153b22b57b4d45d58fa50d152efa2d85d262238ce4816e40f93b65f53b6646297f69e3dde4ae7c57e9112054cb831eca5716863196db7667674b00be7c83f900c944ea2bc8e8e6b6b335a6e9f63e6f6635f6afc0889355aa4f0b928b90f76e6f03b5d40e9a0cace6243aff4590c0ef255860401b16da288687e890b1921b8ba63860df7aad86279c89d16cc4ad1ef4633639f203724c1958fb3b6a990f555e8df8f494fbdae25b353c14fe524541347c1d7f61c349f55773575fab73df09ebd1c635ad5f93fc8e075093ec3fd8b832e5331e329c2578d1f6f7a0a44838e578fe40db7d11645c2c73e0a438a80085988294d98a4ef4c5faa593dd5a9b0dec12d8a6dfd15cc4503bb2078739f26f9c10d0b1fc2634094cfd2ff6bec88a7513debde5fcabb85fd31df8d97bcfaf247edb89cb056fc52bc06f117a3e1022a57817b9abe1793cf279e163212f501681eb9ef08e39adb9ba80ec3cd45f5ae7afc0c256a3470e8ed3ca41c5502c510f0526eab848ec5a7115a53741cf05846989b9b5fc6d2ad74fb855a852e3fc7234bb0ed8b6937167133925dbeb4313a9895860e761300a0695e03e81c2c1e3fe3f4b8c42c946b010259ffa4c1d345350020cddc8e9697fb83c22fff5190558551584368e7a270f958bc72e2624c3e45bbef318b5134f0419e725945e445993f2f176f0a21f5dba86398529fe5159d57c0d75d64f950763b52935e778b20356615409dcb088514eeba3f811e9ce6ce2bd1ba6ac932bd79f7a518959f99d52acbc2a1d0c02c70b9ea46d662d39c315b36315f4220e5dce293275050a3e6df506d0c1d7786017572cd758ba4995963fa034ecd49cadb42bb1ee280600557ce2e17488e1dd4595b8c7d4f20f420a3a01b6228d764c5069222cc93e2091fd2053f05a50eda7840c13f45c6e2a2fbc0f9de4baefb7b40ea1fb7e9d30fb1fdb8f20eafca0c7c8c61c57dfcb8e2836e8d0ce546e8e37b9fc467e1bbeab314be171573398e0c2fb032049a99acf174a857c019609e83010dda8da078a4311efcaaff62fa908dde87cec4d41078c343eec5a80c42d0146d57e9a14f2b5611be05e3b665728c14ea9536d146926fe1e8d5acf12afca415ef5ad77bdfead7ea087183962592296d3d892c64a0a3b9fc95b50f03df7f4f50f950b43a289af09ca92a01a684e5c649b8da4a3365878273a00afd14b4fa2ddaeea5007f728899ba9f5fc9d1d7893a489e56c5fb152e5f775042f4b3bab6cea9cbf9a2b91647fe3c62d3ae4b5d065460b51d51b6e91f2f4fe90a3775e6312ffc805612fee8c314ee70c92de3feefb3cda56a59ddba83757b0e85cb0ee7ad1ac608a1e6a64656d9f586afc38fd1f6474b521724532d88cd351688db077dc9d229a78f8704b21f85324bf9c697874cac5f709c6701a421ac368edda0ec3a0b90268c449acf753d7e8cab501ae3d7e04788e899ec54a2517545b68fd928fb659349e1692bdeccca648fd13a7602868c44e77ed6fd587538a74adc6acdb1ebd1816af88ece2ca64f2603428a0aa842fe86be6b2b568fd29c23433c9e3f9f0e45bd13beb22ac06eb82ae0eb2b3b328aca4abba5e72a155e2cc82ac92c4697fdb9439511c1144fe2ba36f516fa181f7f8d58af69f87a6c936d1e561fff0509819e65a681aaea445a106f8ff3dfd987e2e24e977281cb85cc5e5eb987da2d17e73dacfd9880bd14ecad13d5705643f926303b389a61fd63139577de263a5fdef1facdac0068a9471fc17ac654e88e0a0d12c8aca1e850b64a88f2382e0cf3a4e3363827a06abc1eeb87216e3447dfbf8c04080ca2fe1a08cc2e2001eb386cf02ac0d3b328bcf1de009d048a03cd955c628971c30a137dc66879cbe938390a8f63251f55e559549dd11969b637876a20bc7c6f5fe2b753923d2f0269f2082206eb2312f40654cc95bb38add159104495018a5aa7b8f5836162de9a03b6981c662f2ee02a168d530a002616c09c4cc26c2a2726711e3e25b4e3acb6dcba25fde78ecede51f01e22a2f79409c77011a599ff57d81e70dbde5fcbdc841f9af0e49e8200cd2d3c73013e0e5608ee1951ac04a111864b545e7bc2434c2474286519feaff4da07324d1b13bb16d1daa1d485bcd5466b82c9622f92664f1153d08c6e644b3d0f5902b4d749895f7763015bf0e2849703ed920a3866a260f22fe40f46c76ca6ca10ae8994505fa613a6b1aec84ee6620c25ca4d002f56ddd21b12eed5132634a3194281283fe5fdac07d2fec091dc0f748fe25c6b08cf8d4ff893e863a43c4c92fba47d86c8dfbbabbdca0cec09f732bc0b8df2a97ee7208e64512249300aa4c44c10d4c4503bd76e7b4e2c9aa2e274166ef103d5c832a760f33b5a0eae4dab922f0fec5adbf409bff956b4ce40e6157d498d46ae053f1ad73655bfb0a3dfac6b96c09bac4d07e6bd7f3ac6337f58cccc631466985f6ad680d21a5fe9a9bde4b6980c689e6e8c7a413b6e3084997c089443ffaca9be80c96ce1d9b6de074b4aecfd2db3b679a2d5cf0523aa14414699d481eace4aa397d818ff4d3e73d82031849c7e4f1f1503b636728637f87cf7a7df5472abfcb7e5d77439e1018dba49a41e1c8e63942fe0d1a426f390e8e225fee14501a34762b8d835ca14d6a3a3d8042724ea9e6b568fe0eb84306397ffa8345935e9be8642e6ffbd96e636fd16cacae5d4b88fd0aa0bfbba8221f68eabc98c67de6f9eab2cca07b096b458bbfdc7f1da0bb845a1a6e19c6da87a958acb1aad0b74d6537e97fb0673a20178cbb963f909839e49ec593ddcfc3046aa54c22e3a54148c440d1f2ba1fa7417572c629e48e6d2e07760a87581971d1edccc03c0e465d4d6321d820b3346fb516c1813585a6a8462124f91428a90ed037f40cd6f23596dc90c03825636e55a061838964213c70104ec0c5909a0c62240e93314f9b67ce8fafa115251282a6ee7a036a861d1af11919dbfa7ceb7b2260e66be6300a536e78ebdf60a6f022574b35205341f3557e409d8ecc0c2304b372605c9284aebe1b92f13051db78210df83873b0496625507cf8e1ee5e90aa66f45be75e388d6e0a021b8af3787ee06cd710719b4d06ca5ba5f87de812a660f939584ea880d3c71bc58135e612431850180ee39b707bd98aff26d2c5e4396b43daefd82b2ec1004978637b8d389cc415d628fea6f66f28664f9409448e68a2d48a0a00", 0x2000, &(0x7f0000000f40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000540)={0x90, 0x0, 0x7, {0x5, 0x3, 0xdc, 0x8, 0x3, 0x1, {0x6, 0x638, 0xfffffffffffffff8, 0x8, 0x3, 0x79, 0xfffffffe, 0x7, 0x1, 0x4000, 0x4, r6, r7, 0x7, 0x5}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r4, &(0x7f0000006200)="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", 0x2000, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x90, 0x0, 0xfffffffeffffffff, {0x5, 0x3, 0x0, 0x4000000000004, 0xfffffffd, 0x6, {0x2, 0xfff, 0x808, 0xfffffffffbd, 0x8, 0x81, 0xfaae, 0x6, 0x2, 0x4000, 0xe44, r6, r7, 0x4, 0x1000}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) connect$can_bcm(r3, &(0x7f0000001ff0), 0x10) 8.979481409s ago: executing program 6 (id=4647): mkdir(&(0x7f0000000040)='./sys_mount\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='./sys_mount\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000300), 0xa40, 0x0) ioctl$SNDCTL_SEQ_OUTOFBAND(r1, 0x40085112, &(0x7f0000000100)=@echo=0x8) r2 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r2, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) r3 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r3, 0x0, 0xc8, &(0x7f0000003d40), 0x4) setsockopt$MRT_ADD_VIF(r3, 0x0, 0xca, &(0x7f0000003d80)={0x1, 0x0, 0x0, 0x0, @vifc_lcl_addr=@local, @dev}, 0x10) sendmmsg(r2, &(0x7f0000007fc0), 0x800001d, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./sys_mount/block/nullb0/queue/scheduler\x00', 0x2, 0x0) write(r4, &(0x7f0000000200)='bfq', 0x3) r5 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./sys_mount/block/nullb0/queue/rotational\x00', 0x2, 0x0) write(r5, &(0x7f0000000280), 0x0) pread64(r0, &(0x7f0000000400), 0x8, 0x1000) socket$nl_netfilter(0x10, 0x3, 0xc) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB="00000000e8314d530005060000000700"], 0x1c}, 0x1, 0x0, 0x0, 0x4000814}, 0x48810) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x2, 0x0, 0x7fff0001}]}) pread64(r0, &(0x7f00000002c0)=""/7, 0x7, 0x9) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000ff0700000000000000000000850000002a00000018010000646c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007200000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x20, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f03, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r7}, 0xc) r8 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r8, 0x40505330, &(0x7f00000001c0)={0x800103, 0x103, 0x6, 0xe1d9, 0x6}) 7.957402586s ago: executing program 7 (id=4648): openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x2982, 0x0) syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00') syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000180), 0x2000090, 0x0) r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi2\x00', 0x20001, 0x0) socket$nl_generic(0x10, 0x3, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$nl_generic(0x10, 0x3, 0x10) socket$kcm(0xa, 0x2, 0x0) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r2, 0x107, 0xa, 0x0, 0x0) setsockopt$packet_rx_ring(r2, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x2, 0x1200, 0x3e, 0xb, 0x0, 0x2}, 0x1c) r3 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$IP_VS_SO_SET_ADD(r3, 0x0, 0x482, &(0x7f0000000140)={0x84, @rand_addr=0x64010105, 0x4e22, 0x3, 'lblc\x00', 0x1, 0x80005, 0x6f}, 0x2c) socket$kcm(0xa, 0x2, 0x0) r4 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$IP_VS_SO_SET_ADDDEST(r4, 0x0, 0x487, 0x0, 0x0) r5 = openat$ttynull(0xffffffffffffff9c, &(0x7f00000000c0), 0x88002, 0x0) ioctl$TIOCSETD(r5, 0x5423, 0x0) r6 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000000), 0x103902, 0x0) r7 = dup(r6) write$UHID_INPUT(r7, &(0x7f0000001040)={0x18, {"a2e3ad21ed6b52f99cfbf4c087f70c9b3e6ee7ff7fc6e5539b9b3b0e8b9b411b5d30091b080d29428f0e1ac6e7049b3468959b4c9a242a9b67f3988f7ef319520200ffe8d178708c523c921b1b25380a169b63d336cd3b78130daa61d8e809ea882f5802b77f07227227b7ba67e0e78657a6f5c2a874e62a9ccdc0d31a0c9f318c0da1993bd160e233df4a62179c6f309f4cff7738596ecae8707ce065cd5b91cd0ae193973735b36d5b1b63e91c00305d3f46635eb016d5b1dda98e2d749be7bd1df1fb3b231fdcdb5075a9aaa1b469c3090000000000000075271b286329d169934288fd789aa37d6e98b224fd44b65b31334ffc55cc82cd3ac32ecd03aded6f9081b4dd0d8b38f3cd4498bee800490841bdb114f6b76383709d8f5c55432a909fda039aec54a1236e80f6a8abadea7662496bddbb42be6bfb2f17959d1f416e56c71b1931870262f5e801119242ca5b6bfc821e7e7daf2451138e645bb80c617669314e2fbe70de98ec76a9e40dad47f36fd9f7d0d42a4b5f1185ccdcf16ff46295d8a0fa17713c5802630933a9a34af674f3f39fe23491237c08822dec110911e893d0a8c4f677747abc360934b82910ff85bfd995083bba2987a67399eac427d145d546a40b9f6ff14ac488ec130fb3850a27afc953854a642c57519544ae15a7e454dea05918b4124351601611c8f11baa500a3621c56cea8d20ff911a0c41db6ebe8cac64f17679141d54b34bbc9963ac4f4bb3309603f1d4ab966203861b5b15a841f2b575a8bd0d78248ebe4d9a80002695104f674c2431dca141fae269cab70e9a66f3c3a9a63e9639e1f59c0ede26c6b5d74b078a5e15c31634e5ae098ce9ee70771aaa18119a867e1088334975e9f73483b6a62fa678ca14ffd9f9db2a7869d85864056526f889af43a60560a22f1fca567e65d5e880572286522449df466c632b3570243f989cce3803f465e41e610c20d80421d653a5120000008213b704c7fb082ff27590678ef9f190bae979babc7041d860420c5664ba7921b14dc1db8892fd32d0ad7bc946813591ad8deff4b05f60cea0da7710ac0000000000008000bea37ce0d0d4aa202fd28f28381aab144a5d429a04a689b83c7068ae949ed06e288e810bac9c76600025e19c907f8ea2e2f05dd3318271a1f5f8528f227e79c1388dbdfffe492f21579d2c15b8c70cdb1c332d86d87341432750861ec2bc3451edca194b221cfec4603d276bbaa1dfa6d4fb8a48a76eefc9a9a0270e4c10d64cd5a62427264f2377fe763c43470833ac96c45f357cbbaba8f1b1fdcc7cbb61a7cdb9744ed7f9129aede2be21ccfdc4e9134f8684b3a4f354da9a795e96334e207dff70f1988037b2ed3aaf575c0b88d8f146684078416d59fdee5325928974d12dad99dac44c3f0008047096a44060bebc2420aed92fa9b6578b4779415d97b9a6d6d5495c118045651cf41c2fc48b778efa5ea5677747430af4162b987b80c3e001cd34e5c92f76cc4c24eeb8bc4e9ac2aed9e53803ed0ca4ae3a9737d214060005ea6f1783e287b3bee96e3a7288afe2fdfaa78d1f48c13b64df07847754b8400daaa69bf5c8f48fe4eae9ca1207e78283cd0b20ceb360c7e658828163e2d25c4aa348561f927e88f63aa70e73a5e69b3df3495903f06572e1e007fa55a2999f596d067312f5779e8dbfdcf3427138f3d444d2639a10477f9bec4b0bbb6e3c04be68981f392203dd0ee3ef478e16dacfc5e3e03cf7ab8e3902f1b0ff034ef655b253ca509383815b1b6fc6522d4e4fdc11a48cf42d48604675fde2b94cf02b98a269b891abf8ab9c015073014d9e08d4338b8780bdecd436cf0541359bafffa45237f104b96210403b2de9efedfd71af9444e197f47e866101496f42355bc7872c827467cfa5c4e72730d56bd068ed211cf847535edecb7b373f78b095b68441a34cb51682a8ae4d24ad0465f3927f889b813076038e79a7962fb385a882e8020f06c4c2ba1dd5cac7c18876da865d258734dd73583df292892448039ef799cf0630becdcce04579b5561dc825ab829827945e020c1f67ee615f7084a607a7eceb6243378e0610060f02cca4051c2f001edb3d78fb4b55668dda93aec92a5de203717aa49c2d284acfabe262fccfcbb2b75a2183c4e15a7b6eb65ca8104e1b4da1fbb77ab2fc043aead87c32ab875ee7c2e7b7019c902cd3b43eaeb1a5fb135c0c7dcee8fe6516a328032f88c042891824659e9e94265c803b35ee5f83a2b210520106b8a358b50ab7a1fa89af9c251fe5294b3d1802d5676d95f160ec97b1ad948741b2044642c37b4a6cc6c04effc1672db7e4b68d787d9a7a508ae54b3cd73643de50e8c77d95a3d361c040babb171607caac2a3559ad4f75465f49c0d0ae3716db6e00cb11db4a5fade2a57c1023bf70cc77737c3b42aae501b20f7694a00f16e2d0174035a2c22656dc29880acebdbe8ddbd75c2f998d8ac2dfad2ba3a504767b6b45a45957f24d758ed024b3849c11d412a2a03b4047497022d9c30e23ef4df5c89644f48bb536f7945b59d7bcddff754413d135273ea8e75f22f216c6b9990ae71806f2c00b4025c48b75c0f73c497579773767075428067e7f16f4dde374f8211fef42cb468e623daf60b3569d462f4f19eacdb3ed70eeebb4483f8fd777d443e8b40426db6fe29068c0ca3d3414442e863a154704b0e51bc664a137b26be719f4f7c9a5678a674dfc95df80b9ce375dd649c8c704e509bd88c8e63d8c7dd67071115c8982ba46af4d6adcc9f68a75b9397b035153faf46366e7205dd8d6f37525c1a0e94610dd94323f6c15d085197149bfd6655548cfd9c52c9711937f79abb1a124f1210465483cd3b2d78378cfb85ed82e7da0f6eb6d279f2ae44369ddb4581c55925d0f6f1ba471eba281f259152f85a654fb39ddff3b484439ff158e7c5419e037f3e3ad038f2211f1033195563c7f93cd54b9094f226e783271e1e5a2a2c10712eab625d64931cd4ffe6738d97b9b5ef828ee9fb059fc01af0e79c1e14b1d25988c69a399567c1d93768f7971d31488b8658a20878b7c1dd7ba02fc42939dde3d4a3339a65d507dc59c51097b405177548069ff6eb95aade7cc66d7bbef724779ca1f731b3346ff177050373d79ff7b3e7f9bc0c1b4b266a8878b90baaa039d3e3b63979ac3df6e6f4859afd50238c7547a39b60810938044ae185d2ba3e00a4e73676864ae090d81eaee5ee6cf1d0ab378dd4dd891e937c2ea5410e05130935e00785ec27e923911fab964c271556527697b52160687461602f88df165d884b36ec2b6c25a2f33c715687e9ddbfb96d6861aca47da73d6f3144345f48843dd014e5c5ad8fe995754bd9cf32fce1e7027132f2082fb0a30b9deae84bed4b28045634073c9c58c89d9e99c81769177c6d594f88a4facfd4c735a20307c737afae5336651b1b9bd522d60399473296b831dbd933d93994ba3064279b10ea0c5833f41f157ea2302993dbe433b1aa3a3766d5439020484f4113c4c859465c3b415c3432f81db8719539d5bf372aaaea1cc43a6c5cbe59758bfee29165895ac4b008e595f437491d87abed02cefcd9db53d94d02dae17b118e5d6787463181f4b87c10772d2b13f7809959bc048850613d17ca51055f2f416a44fe180d2d50c312cca7cb14a2bdc331f57a9817139a206fc76d57227ffff2de20a4b8e3737fbb42913777c06376f799eba367e21f94ca598705f5dcb767d6f84fad6b0f6095e53c4c4234d0c1fbe434f6ab8f43c0013ee93b83946ee7759e89d7bdd1a32d7b3110b932a4d02da711b757fe43c06d21e35810d8fe98b27faea8aa12bc8716eefc5c97c45ac33eeec964c5214bc3a9359bdea1cccab94f15e36319cb34ebcacedb82c2ed3de5a8a8f0011e8f74e82d7f96093530e76692839d7961939adfdeeeaff19d11efcafb6d546fef271e89d6cc238a081ff58cefcce3fbf4625a7e7de40e42e07b34449e15e065cc7348663a52190202c7af288a4510de03dab19d26285eda89156d50dd385a60333ba5bbf5d77cd7007ad1519ad5470de3dd6d6080cafccf8a97406bb6b68a1f0c4549820a73c880f475f732ae00398e8bd1f4908b7807fb33b72685ec37a2d3f766413a60459516246e5a1d998a2017aef0948a68cb0b3e35cb80dd349e891aef595dc4d470e8ac32a308e15fc37d06aeac289c0523f483e1ff7408c60edddab652f2ef91d4f2b01987b0f46da034e5c3f745a7ee8101a3934c54e24b48ec0275e2d0687dc746b0827cbf652f406c6b95f2722e58c05f752ce2126596e1cd7655b904801784c416b22f73d324678e2724f43f1fe687c7e8a60c28b82b6528341b648cdd56fed7cdcbb1575912d5ecd36dea3bca0b7427d8392c6289455e8f8d2ab2242729251ae033a9e02210e62df0546a74b333a1c48f95fd54acb5741259e8c5488efeee327415cc19451432c6f14c27693102a3cd84857cd6586fc5ca9a93eb0145fac0662ff86107f998a8ef7df8aa14046c55b03d3d47f88a8d60f7774a2ee08758897fb411a94b3c2fc5d5f0db42c0456ec014508e5247d33ae6c962d35603ff8454c16f8342856935125102bb784ed714887071f3d998efdd9923c954ab6ce431b63ee356b0c785f2f47b90e29389f22fc5b59a70efaea2bd40195af4486220d702e30bfc43c10ec23ea6283994a7dde4dcb61fea6b651fb1d62458d0741a12830052fcc460db043afe525629b40d7cee658e4cb5e930ed624806c43a006dc9336d07c2b8081c128ad2706f48261f7897084c297a1a6613bc18f5a38d442768af38041efe03d152ef95ff569e76db2391f4509d7f339d92fdb4a89364949da3932ba5c04c24a560ad80a3ce654578376e599aff3565b1d531f30912b99e6619ebe93cc0b81ea9935fd46edb44a78f615255490a4b621501f2a9e4d24624c4dac9274118c67584f5d374755534d7f68f679c4ff516a9c861a0e7e65868fcb2bf1cb9aea4e05df72279fdb0d2b9e935c5af3cf474bed79dfc248c1f5aea4b8b32c5d295e57079d0fe662a46b7f71cd47744db86c50b704c971d90295c7b2c7439a2d78ccfa79b5fc2bff6bbf840262bf89394b3e6491953264d2700c838fa2c7b34252600c9654e502dcea39cb6bc3eb69992e234b4ca7db2f45858d6284ca6270d6b2f0e58fded8a7b4a302a97bc641df07720ba2b26bbfcc807ca0abb1b44322269c21c5ec68cb068ea88067d905ea917bb03eefdaebdeabf2d0dce80997c915c8949de992587c2cb5fe36d7d3e5db21b094b8b77940b5f07722e47a08d367e5f84c96ec664b72934b99b3109af65d77e86abd6859cddf4bbae1f0930462df15fddbc48562ea3511a8065ef028cf12f14dcf6ebecd8d884836174faf1aa609e5f1ee1162dfa13bdc1fa7cfaadba85c72e9758f03a755d0be53f8d2a1dfb1c6000064b0a0780d971a96ea2c4d4ca0398c2235980a9307b3d5bd3b01faffd0a5dbed2881a9700af561ac8c7e36bb2fc4c40e9cf96f06817fb903729a7db6ff957697c9ede7885d94ff1aa70826ad01a9b03c37b0969be0daf60af93109eb1dee72e4363f51af62af6fb2a6df3bec89822a7a0b678058fa3fef86faec216eb6992162f8dcbf719c148cd2f9c55f4901203a9a8a2c3e90f3943dbc10360a1a49700d1dfbf66d69f6fbaf506c8bcce8bb0d872a02238926407a4eddd5d0fc5a752f9000", 0x100d}}, 0xfffffdef) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x1f, 0x4, &(0x7f0000000140)=ANY=[], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x13}, 0x94) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, &(0x7f00000003c0)={'pcl818\x00', [0x140, 0x2, 0x3, 0x0, 0x1, 0x2, 0x7ffd, 0x6, 0x1007, 0xf, 0x4, 0x10, 0xf8, 0x8, 0x4ce, 0x9e9b, 0x101, 0x401, 0xc, 0x8, 0x4, 0x0, 0xa, 0x9, 0xffd, 0x200000, 0xaf, 0x0, 0x10001fc, 0x0, 0x4]}) 4.564531542s ago: executing program 7 (id=4649): syz_usb_connect(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100008010bd40820514009dbb0000000109022400011b00000009040000022a3e740009058bff7f0000100109050b362f"], 0x0) r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000240), 0xc2882, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) close(r0) r2 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) connect$can_bcm(r2, &(0x7f00000000c0)={0x1d, r3}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) socketpair$unix(0x1, 0x2, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = socket$kcm(0xa, 0x2, 0x0) r5 = socket(0x2, 0x80805, 0x0) setsockopt$IP_VS_SO_SET_ADD(r5, 0x0, 0x482, &(0x7f0000000240)={0x84, @rand_addr=0x64010102, 0x4e20, 0x3, 'lblcr\x00', 0x1, 0xa7e, 0x70}, 0x2c) setsockopt$IP_VS_SO_SET_ADDDEST(r5, 0x0, 0x487, &(0x7f0000000000)={{0x84, @multicast2, 0x4f21, 0x3, 'lc\x00', 0x5, 0x8, 0x10}, {@multicast2, 0x4e20, 0x10000, 0x1, 0x48, 0xfffffffe}}, 0x44) r6 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_AUTO_ASCONF(r5, 0x84, 0x1e, &(0x7f0000000140)=0x8c93, 0x4) setsockopt$IP_VS_SO_SET_ADDDEST(r6, 0x0, 0x487, &(0x7f0000000000)={{0x84, @local, 0x4e21, 0x3, 'lc\x00', 0x34, 0x83, 0x5}, {@rand_addr=0x64010102, 0x4e23, 0x2, 0x1bd, 0x12d5c, 0x12d5c}}, 0x44) setsockopt$IP_VS_SO_SET_EDITDEST(r6, 0x0, 0x489, &(0x7f0000000380)={{0x84, @multicast1, 0x4e20, 0x3, 'ovf\x00', 0x0, 0x60000000, 0xc}, {@rand_addr=0x64010102, 0x4e23, 0x2000, 0x8, 0x48001}}, 0x44) mprotect(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x0) r7 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0x123a02, 0x0) pwritev(r7, 0x0, 0x0, 0x7, 0x1) sendmsg$sock(r4, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e20, 0x0, @dev}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) sendmsg$can_bcm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000003c0)=ANY=[@ANYBLOB="0100"/15, @ANYRES64=0x0, @ANYRES64=0x2710, @ANYRES64=0x77359400, @ANYRES64=0x0, @ANYBLOB="0000000000000000000000a59500"/24], 0x48}}, 0x410) r8 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000c40)='attr/fscreate\x00') ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r8, 0x40045532, &(0x7f0000000080)=0x3) sendmsg$can_bcm(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000680)={0x1, 0x290, 0xffffffff, {0x77359400}, {}, {}, 0x1, @can={{}, 0x4, 0x1, 0x0, 0x0, "ee6a491530f05065"}}, 0x48}, 0x1, 0x0, 0x0, 0x24000041}, 0x8000) 4.392119707s ago: executing program 6 (id=4650): madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'batadv0\x00'}) socket$rds(0x15, 0x5, 0x0) syz_open_pts(0xffffffffffffffff, 0x81) syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000140)={0x3, @raw_data="dea233684c996156af0d4bd8e3300217e750b8c97b7123d48003e7e1d3be5f710c41a1db6719881876e9bcc6e2f73c67cc6b675eb43188b5b7f9f898868de9a9c5d536d418ba283121a7565aba55a87d2a251c295f4492bbde02ad8bc8e88779f2de06f38e99172df4d45b6f13c813dee4230c204a93172922b778fef7a1f89ce876bb89d44cd705bbb28db4869dfac20d928950507a0592c02d17f51b0a627539f6e0a0bdb92004bc6252cd35e8cd106926acb583ad63a4e7e1ca17c1b6aac63fefa9dcbe429d00"}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = socket(0xa, 0x1, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x101041) write$sndseq(r4, &(0x7f00000006c0)=[{0xe, 0x0, 0x0, 0xfd, @time={0x3, 0x3}, {0xff}, {0xe}, @raw8={"1f000e0000000100"}}], 0x1c) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000340)={'lo\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="300000001c00070c2bbd70000000000002000000", @ANYRES32=r5, @ANYBLOB="4000100a14000100009a"], 0x30}, 0x1, 0x0, 0x0, 0x40000}, 0x20024090) r6 = socket$nl_route(0x10, 0x3, 0x0) openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$SYNC_IOC_MERGE(0xffffffffffffffff, 0xc0303e03, &(0x7f00000000c0)={"ff87c8551b880c0ac56cb2a58b7da498a70452043bbe00"}) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)=ANY=[], 0x6c}, 0x1, 0x0, 0x0, 0x200080c5}, 0x10) r8 = syz_open_dev$I2C(&(0x7f0000000380), 0x3, 0x400000) ioctl$I2C_PEC(r8, 0x708, 0x4) sendmsg$nl_route(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000023c0)=@newlink={0x30, 0x10, 0x1, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x41000, 0x1}, [@IFLA_GROUP={0x8}, @IFLA_TXQLEN={0x8, 0xd, 0x80}]}, 0x30}, 0x1, 0x0, 0x0, 0x24040051}, 0x24008080) 1.399156586s ago: executing program 7 (id=4651): r0 = openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) io_uring_setup(0x1b7c, 0x0) socket$inet(0x2, 0x80001, 0x84) writev(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r3, 0x89f1, &(0x7f0000000340)={'ip6tnl0\x00', 0x0}) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, 0x0) syz_pidfd_open(0x0, 0x0) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r2, 0x0, 0x20000000) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000100)="5c00000013006bcd9e3fe3dc6e48aa310b6b8703110000001f03000003000000040014000d000a000d0000009ee517d34460bc24eab556a705251e6182949a3651f60a84d0f5d1938037e786a6d0bdd7fcf50e4509c5bb5a00f69853", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x4014) write$RDMA_USER_CM_CMD_QUERY(r0, &(0x7f00000003c0)={0x13, 0x10, 0xfa00, {0x0, 0xffffffffffffffff, 0x3}}, 0x18) r5 = socket$netlink(0x10, 0x3, 0x6) r6 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_udp_encap(r6, 0x11, 0x64, &(0x7f0000000140)=0x2, 0x4) setsockopt$inet6_udp_int(r6, 0x11, 0x66, &(0x7f0000000340)=0xc6, 0x4) syz_emit_ethernet(0xd2, &(0x7f0000000900)=ANY=[@ANYBLOB="ffffffffbfff20000000000086dd600489f1009c1100"], 0x0) writev(r5, &(0x7f00000003c0)=[{0x0}], 0x1) writev(r5, &(0x7f0000000040), 0x0) 0s ago: executing program 6 (id=4652): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="54000000020603000000378150380000070000000c0007800800114000000000050085000200000005000400000000000900020073797a310000000016000300686173683a6e65742c306f72742c6e6574000000"], 0x54}, 0x13, 0x0, 0x0, 0x810}, 0x20004000) socket$inet_udp(0x2, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000050)='./sys\x00', 0x1ed) mount(0x0, &(0x7f0000000060)='./sys\x00', &(0x7f0000000070)='sysfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./sys/bus/platform/devices/pcspkr/driver_override\x00', 0x1, 0x0) write(r1, &(0x7f0000000100)='usbip-vudc\x00', 0xa) close(r1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/bus/platform/drivers/usbip-vudc/bind\x00', 0x1, 0x0) write(r2, &(0x7f0000000300)='pcspkr\x00', 0x6) close(r2) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./config\x00', 0x1ed) mount(0x0, &(0x7f0000000500)='./config\x00', &(0x7f0000000600)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000700)='./config/usb_gadget/g1\x00', 0x1ed) r3 = openat(0xffffffffffffff9c, &(0x7f0000000800)='./config/usb_gadget/g1/idVendor\x00', 0x1, 0x0) write(r3, &(0x7f0000000900)='0x1d6b\x00', 0x6) close(r3) r4 = openat(0xffffffffffffff9c, &(0x7f0000000a00)='./config/usb_gadget/g1/idProduct\x00', 0x1, 0x0) write(r4, &(0x7f0000000b00)='0x01', 0x4) close(r4) mkdirat(0xffffffffffffff9c, &(0x7f0000000c00)='./config/usb_gadget/g1/functions/uvc.usb0\x00', 0x1ed) mkdirat(0xffffffffffffff9c, 0x0, 0x1ed) symlinkat(&(0x7f0000000e00)='./config/usb_gadget/g1/functions/uvc.usb0/control/header/h\x00', 0xffffffffffffff9c, &(0x7f0000000f00)='./config/usb_gadget/g1/functions/uvc.usb0/control/class/fs/h\x00') symlinkat(&(0x7f0000001000)='./config/usb_gadget/g1/functions/uvc.usb0/control/header/h\x00', 0xffffffffffffff9c, &(0x7f0000001100)='./config/usb_gadget/g1/functions/uvc.usb0/control/class/ss/h\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000001200)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/header/h\x00', 0x1ed) mkdirat(0xffffffffffffff9c, &(0x7f0000001300)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/uncompressed/u\x00', 0x1ed) mkdirat(0xffffffffffffff9c, &(0x7f0000001400)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/uncompressed/u/360p\x00', 0x1ed) symlinkat(&(0x7f0000001500)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/uncompressed/u\x00', 0xffffffffffffff9c, &(0x7f0000001600)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/header/h/u\x00') symlinkat(&(0x7f0000001700)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/header/h\x00', 0xffffffffffffff9c, &(0x7f0000001800)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/class/fs/h\x00') kernel console output (not intermixed with test programs): uous mode [ 949.566445][ T0] NOHZ tick-stop error: local softirq work is pending, handler #82!!! [ 956.397590][T17525] loop2: detected capacity change from 0 to 1024 [ 961.356878][T17565] overlayfs: failed to clone upperpath [ 962.910887][T17573] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 962.976970][T17573] batadv_slave_1: entered promiscuous mode [ 963.777846][T17585] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4024'. [ 963.788509][T17585] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4024'. [ 963.797973][T17585] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4024'. [ 963.810442][T17585] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4024'. [ 963.825888][T17585] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4024'. [ 965.034232][T17589] fuse: Bad value for 'fd' [ 965.116478][T17589] fuse: Unknown parameter '`<0x000000000000000000000000000000000000' [ 965.456411][T17596] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4028'. [ 966.317985][T17601] bond2: entered promiscuous mode [ 966.323215][T17601] bond2: entered allmulticast mode [ 969.299756][T17625] tipc: Enabling of bearer rejected, failed to enable media [ 970.136489][ T5609] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 970.150469][ T5609] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 970.164290][ T5609] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 970.195814][ T5609] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 970.210372][ T5609] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 971.125060][ T7968] netdevsim netdevsim5 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 2816 - 0 [ 971.148339][ T7968] netdevsim netdevsim5 netdevsim3 (unregistering): unset [0, 1] type 1 family 0 port 8472 - 0 [ 971.174767][ T7968] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 973.786861][T12287] Bluetooth: hci6: command tx timeout [ 973.824877][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 975.929467][ T5609] Bluetooth: hci6: command tx timeout [ 976.748278][ T7968] netdevsim netdevsim5 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 2816 - 0 [ 976.771585][ T7968] netdevsim netdevsim5 netdevsim2 (unregistering): unset [0, 1] type 1 family 0 port 8472 - 0 [ 976.802963][ T7968] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 976.968814][T17683] netlink: 8 bytes leftover after parsing attributes in process `syz.7.4050'. [ 977.065550][T17689] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4051'. [ 977.139001][ T7968] netdevsim netdevsim5 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 2816 - 0 [ 977.149827][ T7968] netdevsim netdevsim5 netdevsim1 (unregistering): unset [0, 1] type 1 family 0 port 8472 - 0 [ 977.160686][ T7968] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 977.189342][T17693] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 977.281106][T17695] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 977.339267][T17692] bond3: entered promiscuous mode [ 977.352891][T17692] bond3: entered allmulticast mode [ 977.363534][T17688] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 977.984308][ T5609] Bluetooth: hci6: command tx timeout [ 978.509348][ T7968] netdevsim netdevsim5 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 2816 - 0 [ 978.549680][ T7968] netdevsim netdevsim5 netdevsim0 (unregistering): unset [0, 1] type 1 family 0 port 8472 - 0 [ 978.582482][ T7968] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 978.799718][T17715] oom_control is deprecated and will be removed. Please report your usecase to linux-mm-@kvack.org if you depend on this functionality. [ 978.876276][T17633] bridge0: port 1(bridge_slave_0) entered blocking state [ 978.914864][T17633] bridge0: port 1(bridge_slave_0) entered disabled state [ 978.942089][T17633] bridge_slave_0: entered allmulticast mode [ 978.974511][T17633] bridge_slave_0: entered promiscuous mode [ 979.035691][T17633] bridge0: port 2(bridge_slave_1) entered blocking state [ 979.080759][T17633] bridge0: port 2(bridge_slave_1) entered disabled state [ 979.120757][T17633] bridge_slave_1: entered allmulticast mode [ 979.150378][T17633] bridge_slave_1: entered promiscuous mode [ 979.223764][T17726] fuse: fd is not a fuse device [ 979.360033][T17633] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 979.420287][T17633] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 979.463732][T17731] fuse: fd is not a fuse device [ 979.640242][T17633] team0: Port device team_slave_0 added [ 979.686344][T17633] team0: Port device team_slave_1 added [ 980.024414][ T5609] Bluetooth: hci6: command tx timeout [ 980.116279][ T7968] bridge_slave_1: left allmulticast mode [ 980.131249][ T7968] bridge_slave_1: left promiscuous mode [ 980.137867][ T7968] bridge0: port 2(bridge_slave_1) entered disabled state [ 980.205498][ T7968] bridge_slave_0: left allmulticast mode [ 980.222473][ T7968] bridge_slave_0: left promiscuous mode [ 980.232805][ T7968] bridge0: port 1(bridge_slave_0) entered disabled state [ 980.947678][ T30] kauditd_printk_skb: 69 callbacks suppressed [ 980.947703][ T30] audit: type=1326 audit(1786111330.839:170): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17756 comm="syz.1.4070" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fdd8959e0d9 code=0x0 [ 981.166430][ T7968] bond2 (unregistering): (slave geneve2): Releasing active interface [ 981.285617][ T7968] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 981.325335][ T7968] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 981.355967][ T7968] bond0 (unregistering): Released all slaves [ 981.368962][ T7968] bond1 (unregistering): Released all slaves [ 981.414375][ T7968] bond2 (unregistering): Released all slaves [ 981.535993][T17633] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 981.542987][T17633] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 981.570170][T17633] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 991.736810][ T5267] 8021q: adding VLAN 0 to HW filter on device eth9 [ 991.746624][T17633] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 991.754826][T17633] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 991.785805][T17633] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 992.101320][T17633] hsr_slave_0: entered promiscuous mode [ 992.108502][T17633] hsr_slave_1: entered promiscuous mode [ 992.116242][T17633] debugfs: 'hsr0' already exists in 'hsr' [ 992.122024][T17633] Cannot create hsr debugfs directory [ 992.265652][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 992.273854][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 992.998428][ T5267] 8021q: adding VLAN 0 to HW filter on device eth10 [ 993.104771][ T7968] hsr_slave_0: left promiscuous mode [ 993.123554][ T7968] hsr_slave_1: left promiscuous mode [ 993.164449][ T7968] veth1_macvtap: left promiscuous mode [ 993.169923][ T7968] veth0_macvtap: left promiscuous mode [ 993.175991][ T7968] veth1_vlan: left promiscuous mode [ 993.181264][ T7968] veth0_vlan: left promiscuous mode [ 993.884244][ T7968] team0 (unregistering): Port device team_slave_1 removed [ 993.925763][ T7968] team0 (unregistering): Port device team_slave_0 removed [ 994.211359][T17633] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 994.248696][T17633] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 994.258529][T17633] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 994.294819][T17633] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 994.303040][T17633] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 994.338659][T17633] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 994.347606][T17633] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 994.397336][T17633] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 994.519931][T17633] 8021q: adding VLAN 0 to HW filter on device bond0 [ 994.563875][T17633] 8021q: adding VLAN 0 to HW filter on device team0 [ 994.581347][ T141] bridge0: port 1(bridge_slave_0) entered blocking state [ 994.588531][ T141] bridge0: port 1(bridge_slave_0) entered forwarding state [ 994.626302][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 994.633476][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 994.995359][ T5267] 8021q: adding VLAN 0 to HW filter on device eth11 [ 995.312486][T17633] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 995.719154][T17633] veth0_vlan: entered promiscuous mode [ 995.728152][ T5267] 8021q: adding VLAN 0 to HW filter on device eth12 [ 995.742496][T17633] veth1_vlan: entered promiscuous mode [ 995.799462][T17633] veth0_macvtap: entered promiscuous mode [ 995.812303][T17633] veth1_macvtap: entered promiscuous mode [ 995.838322][T17633] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 995.857164][T17633] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 995.881523][ T13] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 996.044975][ T13] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 996.091847][ T13] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 996.142931][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 996.163694][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 996.215393][ T1151] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 996.225948][ T1151] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 996.270324][ T1151] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 996.657056][ T5609] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci6/hci6:201' [ 996.669301][ T5609] CPU: 0 UID: 0 PID: 5609 Comm: kworker/u9:2 Tainted: G L syzkaller #0 PREEMPT(full) [ 996.669359][ T5609] Tainted: [L]=SOFTLOCKUP [ 996.669374][ T5609] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 996.669400][ T5609] Workqueue: hci6 hci_rx_work [ 996.669454][ T5609] Call Trace: [ 996.669466][ T5609] [ 996.669479][ T5609] dump_stack_lvl+0x100/0x190 [ 996.669527][ T5609] sysfs_warn_dup.cold+0x1c/0x28 [ 996.669589][ T5609] sysfs_create_dir_ns+0x24b/0x2b0 [ 996.669647][ T5609] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 996.669708][ T5609] ? find_held_lock+0x2b/0x80 [ 996.669767][ T5609] ? kobject_add_internal+0x25f/0x930 [ 996.669810][ T5609] ? kobject_add_internal+0x25f/0x930 [ 996.669856][ T5609] ? srso_alias_return_thunk+0x5/0xfbef5 [ 996.669904][ T5609] ? do_raw_spin_unlock+0x145/0x1e0 [ 996.669962][ T5609] kobject_add_internal+0x2c8/0x930 [ 996.670014][ T5609] kobject_add+0x16a/0x1e0 [ 996.670056][ T5609] ? __pfx_kobject_add+0x10/0x10 [ 996.670095][ T5609] ? class_to_subsys+0x10f/0x150 [ 996.670164][ T5609] ? srso_alias_return_thunk+0x5/0xfbef5 [ 996.670215][ T5609] ? srso_alias_return_thunk+0x5/0xfbef5 [ 996.670270][ T5609] ? kobject_put+0xb9/0x640 [ 996.670304][ T5609] ? _raw_spin_unlock+0x28/0x50 [ 996.670368][ T5609] device_add+0x294/0x1970 [ 996.670433][ T5609] ? __pfx_dev_set_name+0x10/0x10 [ 996.670476][ T5609] ? __pfx_device_add+0x10/0x10 [ 996.670540][ T5609] ? srso_alias_return_thunk+0x5/0xfbef5 [ 996.670587][ T5609] ? mgmt_send_event_skb+0x2fb/0x460 [ 996.670657][ T5609] hci_conn_add_sysfs+0x1a3/0x260 [ 996.670724][ T5609] le_conn_complete_evt+0x11eb/0x1f60 [ 996.670790][ T5609] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 996.670842][ T5609] ? hci_event_packet+0x186/0xcd0 [ 996.670893][ T5609] ? srso_alias_return_thunk+0x5/0xfbef5 [ 996.670957][ T5609] hci_le_conn_complete_evt+0x23c/0x3a0 [ 996.671015][ T5609] ? skb_pull_data+0x15f/0x1e0 [ 996.671062][ T5609] hci_le_meta_evt+0x34a/0x5f0 [ 996.671121][ T5609] ? __pfx_hci_le_conn_complete_evt+0x10/0x10 [ 996.671179][ T5609] hci_event_packet+0x51c/0xcd0 [ 996.671220][ T5609] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 996.671268][ T5609] ? __pfx_hci_event_packet+0x10/0x10 [ 996.671309][ T5609] ? srso_alias_return_thunk+0x5/0xfbef5 [ 996.671346][ T5609] ? kcov_remote_start+0x384/0x670 [ 996.671377][ T5609] ? lockdep_hardirqs_on+0x78/0x100 [ 996.671418][ T5609] ? srso_alias_return_thunk+0x5/0xfbef5 [ 996.671462][ T5609] hci_rx_work+0x451/0xfc0 [ 996.671508][ T5609] process_one_work+0xa23/0x1940 [ 996.671554][ T5609] ? __pfx_process_one_work+0x10/0x10 [ 996.671581][ T5609] ? srso_alias_return_thunk+0x5/0xfbef5 [ 996.671629][ T5609] ? srso_alias_return_thunk+0x5/0xfbef5 [ 996.671670][ T5609] worker_thread+0x5ef/0xe50 [ 996.671714][ T5609] ? kthread+0x13a/0x450 [ 996.671766][ T5609] ? __pfx_worker_thread+0x10/0x10 [ 996.671799][ T5609] kthread+0x370/0x450 [ 996.671844][ T5609] ? __pfx_kthread+0x10/0x10 [ 996.671893][ T5609] ret_from_fork+0x72b/0xd50 [ 996.671934][ T5609] ? __pfx_ret_from_fork+0x10/0x10 [ 996.671975][ T5609] ? srso_alias_return_thunk+0x5/0xfbef5 [ 996.672010][ T5609] ? __switch_to+0x800/0x10f0 [ 996.672056][ T5609] ? __switch_to_asm+0x39/0x70 [ 996.672096][ T5609] ? __pfx_kthread+0x10/0x10 [ 996.672145][ T5609] ret_from_fork_asm+0x1a/0x30 [ 996.672206][ T5609] [ 996.672262][ T5609] kobject: kobject_add_internal failed for hci6:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 1001.792905][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 1002.315619][ T5609] Bluetooth: hci6: failed to register connection device [ 1004.491495][T17880] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4074'. [ 1012.543341][T17947] loop2: detected capacity change from 0 to 128 [ 1012.557937][T17956] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4100'. [ 1012.874894][T17957] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1012.904916][T17947] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 1012.932650][T17953] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -4 [ 1012.942019][T17953] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -4 [ 1012.952039][T17953] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 1013.174114][T17947] hpfs: filesystem error: improperly stopped [ 1013.203270][T17947] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 1013.251865][T17947] hpfs: You really don't want any checks? You are crazy... [ 1013.287181][T17947] hpfs: Code page index out of array [ 1013.302877][T17949] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1013.319880][T17947] hpfs: code page support is disabled [ 1013.428868][T17947] hpfs: hpfs_map_4sectors(): unaligned read [ 1013.455622][T17964] fuse: fd is not a fuse device [ 1013.474498][T17947] hpfs: hpfs_map_4sectors(): unaligned read [ 1013.498280][T17947] hpfs: filesystem error: unable to find root dir [ 1013.727251][T17970] netlink: 8 bytes leftover after parsing attributes in process `syz.8.4102'. [ 1013.758572][T17970] netlink: 8 bytes leftover after parsing attributes in process `syz.8.4102'. [ 1013.770308][T17970] netlink: 8 bytes leftover after parsing attributes in process `syz.8.4102'. [ 1013.783170][T17970] netlink: 8 bytes leftover after parsing attributes in process `syz.8.4102'. [ 1014.356734][T17947] hpfs: hpfs_map_4sectors(): unaligned read [ 1017.639064][T18011] loop8: detected capacity change from 0 to 2048 [ 1019.125688][T18011] loop8: detected capacity change from 0 to 4096 [ 1019.209316][T18011] ntfs3(loop8): Failed to load $Extend (-22). [ 1019.223459][T18011] ntfs3(loop8): Failed to initialize $Extend. [ 1021.677390][T18053] fuse: fd is not a fuse device [ 1022.413406][T18070] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4121'. [ 1022.445204][T18070] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4121'. [ 1022.456956][T18070] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4121'. [ 1022.470025][T18070] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4121'. [ 1022.482655][T18070] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4121'. [ 1025.061476][T18085] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1025.443013][T18074] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1025.614636][T18078] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1030.063845][T18135] loop7: detected capacity change from 0 to 2048 [ 1032.644096][T18182] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1032.731656][ T30] audit: type=1326 audit(1786111382.612:171): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18171 comm="syz.2.4161" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f69d419e0d9 code=0x0 [ 1032.797603][T18174] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1032.900030][T18174] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1037.750146][T18245] kAFS: unable to lookup cell 'ÿ' [ 1038.329087][T18256] netlink: 20 bytes leftover after parsing attributes in process `syz.8.4170'. [ 1039.895101][T18262] CIFS: Attempting to mount //127.0.0.1/share [ 1039.907341][T18262] CIFS: VFS: Error connecting to socket. Aborting operation. [ 1039.930310][T18262] CIFS: VFS: cifs_mount failed w/return code = -4 [ 1042.988981][T18293] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1043.030299][T18296] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1043.186431][T18288] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1044.350703][T14061] usb 8-1: new high-speed USB device number 10 using dummy_hcd [ 1044.399562][T18288] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1045.605536][T14061] usb 8-1: config 220 has an invalid interface number: 76 but max is 2 [ 1045.640173][T14061] usb 8-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 1045.867465][T14061] usb 8-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 1045.878707][T14061] usb 8-1: config 220 has no interface number 2 [ 1045.886890][T14061] usb 8-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 1045.903470][T14061] usb 8-1: config 220 interface 0 has no altsetting 0 [ 1045.910264][T14061] usb 8-1: config 220 interface 76 has no altsetting 0 [ 1045.918531][T14061] usb 8-1: config 220 interface 1 has no altsetting 0 [ 1046.384899][T14061] usb 8-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 1047.122130][T14061] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1047.130210][T14061] usb 8-1: Product: syz [ 1047.134430][T14061] usb 8-1: Manufacturer: syz [ 1047.149001][T14061] usb 8-1: can't set config #220, error -71 [ 1047.158538][T14061] usb 8-1: USB disconnect, device number 10 [ 1047.810931][T18331] netlink: 'syz.3.4191': attribute type 2 has an invalid length. [ 1047.904689][T18333] overlayfs: failed to clone upperpath [ 1048.908805][T18339] loop7: detected capacity change from 0 to 1024 [ 1049.055516][T18339] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1051.883721][T13716] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1052.780568][T18389] binder: 18378:18389 ioctl c0046209 0 returned -22 [ 1053.704356][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 1053.713342][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 1054.647816][T14044] usb 8-1: new high-speed USB device number 11 using dummy_hcd [ 1055.005088][ T30] audit: type=1326 audit(1786111404.823:172): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18397 comm="syz.0.4220" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f249d39e0d9 code=0x7ffc0000 [ 1055.153050][T14044] usb 8-1: Using ep0 maxpacket: 16 [ 1056.549429][ T30] audit: type=1326 audit(1786111404.823:173): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18397 comm="syz.0.4220" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f249d39e0d9 code=0x7ffc0000 [ 1057.097712][T18402] loop8: detected capacity change from 0 to 8 [ 1057.107561][T18402] SQUASHFS error: lzo decompression failed, data probably corrupt [ 1057.115430][T18402] SQUASHFS error: Failed to read block 0x91: -5 [ 1057.121706][T18402] SQUASHFS error: Unable to read metadata cache entry [8f] [ 1057.128901][T18402] SQUASHFS error: Unable to read inode 0x11f [ 1057.203709][ T30] audit: type=1326 audit(1786111404.843:174): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18397 comm="syz.0.4220" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f249d35e90e code=0x7ffc0000 [ 1057.334321][ T30] audit: type=1326 audit(1786111404.843:175): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18397 comm="syz.0.4220" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f249d39e0d9 code=0x7ffc0000 [ 1057.470885][ T30] audit: type=1326 audit(1786111404.843:176): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18397 comm="syz.0.4220" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f249d39e0d9 code=0x7ffc0000 [ 1058.702653][ T30] audit: type=1326 audit(1786111404.853:177): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18397 comm="syz.0.4220" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f249d39e0d9 code=0x7ffc0000 [ 1058.804815][ T30] audit: type=1326 audit(1786111404.863:178): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18397 comm="syz.0.4220" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f249d39e0d9 code=0x7ffc0000 [ 1058.807705][T14044] usb 8-1: unable to get BOS descriptor or descriptor too short [ 1060.618454][ T30] audit: type=1326 audit(1786111404.863:179): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18397 comm="syz.0.4220" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f249d39e0d9 code=0x7ffc0000 [ 1061.257120][T14044] usb 8-1: unable to read config index 0 descriptor/start: -71 [ 1061.264972][T14044] usb 8-1: can't read configurations, error -71 [ 1062.709306][T18437] binder: 18433:18437 ioctl c0046209 0 returned -22 [ 1064.893007][T18460] xt_hashlimit: size too large, truncated to 1048576 [ 1064.900976][T18454] netlink: 'syz.0.4237': attribute type 2 has an invalid length. [ 1065.400884][T18447] smpboot: CPU 1 is now offline [ 1067.967048][T18468] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4227'. [ 1068.480745][T18451] smpboot: Booting Node 0 Processor 1 APIC 0x1 [ 1072.592141][T18493] loop8: detected capacity change from 0 to 128 [ 1072.651060][T18493] EXT4-fs (loop8): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 1072.683414][T18493] ext4 filesystem being mounted at /26/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 1074.266236][T17633] EXT4-fs (loop8): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1078.736368][T18529] jffs2: notice: (18529) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 1079.077924][T18529] jffs2: fork failed for JFFS2 garbage collect thread: -EINTR [ 1080.325155][T18546] loop2: detected capacity change from 0 to 32768 [ 1080.559301][T18546] (syz.2.4245,18546,1):ocfs2_block_check_validate:400 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 1080.573595][T18546] (syz.2.4245,18546,1):ocfs2_block_check_validate:400 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 1080.616455][T18546] JBD2: Ignoring recovery information on journal [ 1080.744407][T18546] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 1081.597772][T18563] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 1081.816312][T18566] IPVS: sync thread started: state = MASTER, mcast_ifn = veth1_to_bridge, syncid = 32, id = 0 [ 1081.927658][T18556] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 1082.901262][ T5618] ocfs2: Unmounting device (7,2) on (node local) [ 1083.195403][T18579] loop8: detected capacity change from 0 to 512 [ 1083.300220][T18579] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode [ 1083.352688][T18579] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c018, mo2=0082] [ 1083.378729][T18579] System zones: 1-12 [ 1083.413159][T18579] EXT4-fs (loop8): 1 truncate cleaned up [ 1083.467919][T18579] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1085.417458][T18606] jffs2: notice: (18606) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 1085.643654][T17633] EXT4-fs error (device loop8): ext4_lookup:1785: inode #14: comm syz-executor: invalid fast symlink length 39 [ 1085.720892][T17633] EXT4-fs error (device loop8): ext4_lookup:1785: inode #14: comm syz-executor: invalid fast symlink length 39 [ 1085.878604][T18619] MTD: Couldn't look up './dev/mtdblock0': -2 [ 1086.186322][ T30] audit: type=1326 audit(1786111436.045:180): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18616 comm="syz.1.4256" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdd8959e0d9 code=0x7ffc0000 [ 1086.741078][ T30] audit: type=1326 audit(1786111436.045:181): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18616 comm="syz.1.4256" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdd8959e0d9 code=0x7ffc0000 [ 1086.789375][ T30] audit: type=1326 audit(1786111436.055:182): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18616 comm="syz.1.4256" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7fdd8955e90e code=0x7ffc0000 [ 1086.960898][ T30] audit: type=1326 audit(1786111436.055:183): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18616 comm="syz.1.4256" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdd8959e0d9 code=0x7ffc0000 [ 1086.990889][ T30] audit: type=1326 audit(1786111436.065:184): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18616 comm="syz.1.4256" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdd8959e0d9 code=0x7ffc0000 [ 1087.016178][ T30] audit: type=1326 audit(1786111436.065:185): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18616 comm="syz.1.4256" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fdd8959e0d9 code=0x7ffc0000 [ 1087.070607][ T30] audit: type=1326 audit(1786111436.075:186): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18616 comm="syz.1.4256" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdd8959e0d9 code=0x7ffc0000 [ 1087.172810][ T30] audit: type=1326 audit(1786111436.075:187): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18616 comm="syz.1.4256" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdd8959e0d9 code=0x7ffc0000 [ 1088.999288][T17633] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1092.095038][T18652] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 1092.118099][T18652] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 1092.142776][ T5954] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1092.154530][T18652] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 1092.179897][T18652] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 1092.215949][T18652] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 1092.338841][T18652] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 1092.397216][T18652] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 1092.412074][T18652] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 1092.426078][T18652] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 1092.469027][T18652] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 1093.104686][ T5954] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1093.131881][T18667] MTD: Couldn't look up './dev/mtdblock0': -2 [ 1094.717222][ T5609] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1094.746127][ T5609] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1094.759747][ T5609] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1094.771956][ T5609] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1094.796261][ T5609] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1094.875493][ T5954] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1095.028171][T18699] MTD: Couldn't look up './dev/mtdblock0': -2 [ 1095.343765][ T30] audit: type=1326 audit(1786111445.225:188): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18690 comm="syz.7.4280" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff78a59e0d9 code=0x7ffc0000 [ 1096.068969][ T30] audit: type=1326 audit(1786111445.225:189): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18690 comm="syz.7.4280" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff78a59e0d9 code=0x7ffc0000 [ 1096.601901][ T30] audit: type=1326 audit(1786111445.225:190): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18690 comm="syz.7.4280" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7ff78a55e90e code=0x7ffc0000 [ 1096.786918][ T30] audit: type=1326 audit(1786111445.225:191): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18690 comm="syz.7.4280" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff78a59e0d9 code=0x7ffc0000 [ 1096.804758][T18716] loop2: detected capacity change from 0 to 512 [ 1096.872508][ T30] audit: type=1326 audit(1786111445.225:192): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18690 comm="syz.7.4280" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff78a59e0d9 code=0x7ffc0000 [ 1097.044038][ T5609] Bluetooth: hci4: command tx timeout [ 1097.059837][ T30] audit: type=1326 audit(1786111445.225:193): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18690 comm="syz.7.4280" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7ff78a59e0d9 code=0x7ffc0000 [ 1097.085393][ T30] audit: type=1326 audit(1786111445.225:194): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18690 comm="syz.7.4280" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff78a59e0d9 code=0x7ffc0000 [ 1097.185423][T18716] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 1097.874217][ T30] audit: type=1326 audit(1786111445.225:195): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18690 comm="syz.7.4280" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff78a59e0d9 code=0x7ffc0000 [ 1098.055527][T18716] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c018, mo2=0082] [ 1098.077331][T18716] System zones: 1-12 [ 1098.171823][T18716] EXT4-fs (loop2): 1 truncate cleaned up [ 1098.216204][T18716] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1098.259665][ T5954] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1100.233321][ T5609] Bluetooth: hci4: command tx timeout [ 1100.405864][ T5618] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1102.451387][ T5609] Bluetooth: hci4: command tx timeout [ 1104.425139][ T5954] bridge_slave_1: left allmulticast mode [ 1104.443066][ T5954] bridge_slave_1: left promiscuous mode [ 1104.469272][ T5954] bridge0: port 2(bridge_slave_1) entered disabled state [ 1104.497132][ T5609] Bluetooth: hci4: command tx timeout [ 1104.553642][ T5954] bridge_slave_0: left allmulticast mode [ 1104.578784][ T5954] bridge_slave_0: left promiscuous mode [ 1104.605301][ T5954] bridge0: port 1(bridge_slave_0) entered disabled state [ 1105.713254][ T5954] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1105.810370][ T5954] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1105.849657][ T5954] bond0 (unregistering): Released all slaves [ 1106.103124][ T5267] 8021q: adding VLAN 0 to HW filter on device eth13 [ 1106.148687][ T5954] IPVS: stopping master sync thread 18566 ... [ 1110.355345][T18845] overlayfs: failed to clone upperpath [ 1111.905724][T18859] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4309'. [ 1115.139229][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 1115.164240][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 1117.566899][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 1119.255219][ T5954] hsr_slave_0: left promiscuous mode [ 1119.281355][ T5954] hsr_slave_1: left promiscuous mode [ 1119.289677][ T5954] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1120.132166][ T5954] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1120.295422][ T5954] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1120.355515][ T5954] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1120.474621][ T5954] veth1_macvtap: left promiscuous mode [ 1120.493568][ T5954] veth0_macvtap: left promiscuous mode [ 1120.515642][ T5954] veth1_vlan: left promiscuous mode [ 1120.538635][ T5954] veth0_vlan: left promiscuous mode [ 1120.596898][T18910] netlink: 48 bytes leftover after parsing attributes in process `syz.3.4335'. [ 1120.605885][T18910] openvswitch: netlink: Flow key attr not present in new flow. [ 1121.016144][T12287] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 1121.033475][T12287] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 1121.041821][T12287] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 1121.052279][T12287] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 1121.075800][T12287] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 1121.941627][ T5954] team0 (unregistering): Port device team_slave_1 removed [ 1121.997937][ T5954] team0 (unregistering): Port device team_slave_0 removed [ 1123.138389][ T5609] Bluetooth: hci6: command tx timeout [ 1123.685727][T18931] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4325'. [ 1125.143871][ T5267] 8021q: adding VLAN 0 to HW filter on device eth14 [ 1125.217462][ T5609] Bluetooth: hci6: command tx timeout [ 1125.626266][T15336] bond1: (slave syz_tun): Removing an active aggregator [ 1125.633978][T15336] bond1: (slave syz_tun): Releasing backup interface [ 1127.631477][ T5609] Bluetooth: hci6: command tx timeout [ 1129.695764][ T5609] Bluetooth: hci6: command tx timeout [ 1132.570577][T18685] bridge0: port 1(bridge_slave_0) entered blocking state [ 1132.605773][T18685] bridge0: port 1(bridge_slave_0) entered disabled state [ 1132.640730][T18685] bridge_slave_0: entered allmulticast mode [ 1132.674044][T18685] bridge_slave_0: entered promiscuous mode [ 1132.685559][T14044] usb 8-1: new high-speed USB device number 13 using dummy_hcd [ 1132.696658][T18685] bridge0: port 2(bridge_slave_1) entered blocking state [ 1132.719609][T18685] bridge0: port 2(bridge_slave_1) entered disabled state [ 1132.737267][T18685] bridge_slave_1: entered allmulticast mode [ 1132.758099][T18685] bridge_slave_1: entered promiscuous mode [ 1132.865656][T14044] usb 8-1: Using ep0 maxpacket: 8 [ 1132.897049][T14044] usb 8-1: New USB device found, idVendor=2770, idProduct=9120, bcdDevice=6c.77 [ 1132.933263][T14044] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=239 [ 1132.975304][T14044] usb 8-1: Product: syz [ 1132.986858][T14044] usb 8-1: Manufacturer: syz [ 1132.999499][T14044] usb 8-1: SerialNumber: syz [ 1133.032041][ T5954] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1133.072636][ T5954] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1133.103055][T14044] usb 8-1: config 0 descriptor?? [ 1133.135103][T14044] gspca_main: sq905-2.14.0 probing 2770:9120 [ 1133.454263][ T5267] 8021q: adding VLAN 0 to HW filter on device eth15 [ 1133.504490][T18685] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1133.550349][T18685] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1133.838979][T14044] gspca_sq905: sq905_command: usb_control_msg failed 2 (-110) [ 1134.815510][T14044] sq905 8-1:0.0: probe with driver sq905 failed with error -110 [ 1134.827344][T14044] usb 8-1: USB disconnect, device number 13 [ 1135.149504][ T5338] usb 3-1: new high-speed USB device number 34 using dummy_hcd [ 1135.741112][ T5954] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1135.793725][ T5954] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1135.942910][T18685] team0: Port device team_slave_0 added [ 1135.968526][ T5338] usb 3-1: device descriptor read/64, error -71 [ 1135.989675][T18685] team0: Port device team_slave_1 added [ 1136.039647][T18685] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1136.046685][T18685] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1136.072659][T18685] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1136.088475][T18685] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1136.095551][T18685] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1136.121572][T18685] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1136.225336][ T5338] usb 3-1: new high-speed USB device number 35 using dummy_hcd [ 1138.181344][ T5338] usb 3-1: device descriptor read/64, error -71 [ 1138.299981][ T5338] usb usb3-port1: attempt power cycle [ 1138.861646][ T5954] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1138.881557][ T5954] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1139.432850][T18685] hsr_slave_0: entered promiscuous mode [ 1139.440591][T18685] hsr_slave_1: entered promiscuous mode [ 1139.550038][T19080] overlayfs: failed to clone upperpath [ 1140.208490][T19085] netlink: 'syz.2.4354': attribute type 11 has an invalid length. [ 1140.216450][T19085] netlink: 36 bytes leftover after parsing attributes in process `syz.2.4354'. [ 1140.264038][ T30] audit: type=1326 audit(1786111490.158:196): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19086 comm="syz.1.4357" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fdd8959e0d9 code=0x0 [ 1141.418092][ T5954] netdevsim netdevsim0 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1141.429981][ T5954] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1141.741464][T19095] wlan0 speed is unknown, defaulting to 1000 [ 1141.747887][T19095] wlan0 speed is unknown, defaulting to 1000 [ 1141.757909][ T5267] 8021q: adding VLAN 0 to HW filter on device eth16 [ 1141.802240][T19095] wlan0 speed is unknown, defaulting to 1000 [ 1141.809587][T19095] smbdirect: ib_dev[syz1]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 1141.824535][T19095] smbdirect: ib_dev[syz1]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 1141.841482][T19095] smbdirect: ib_dev[syz1]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 1141.862006][T19095] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 1141.901267][T19101] o2cb: This node has not been configured. [ 1141.908058][T19101] o2cb: Cluster check failed. Fix errors before retrying. [ 1141.915227][T19101] (syz.1.4359,19101,1):user_dlm_register:674 ERROR: status = -22 [ 1141.922970][T19101] (syz.1.4359,19101,1):dlmfs_mkdir:437 ERROR: Error -22 could not register domain "file0" [ 1141.952699][T19095] wlan0 speed is unknown, defaulting to 1000 [ 1141.961492][T19095] wlan0 speed is unknown, defaulting to 1000 [ 1141.970258][T19095] wlan0 speed is unknown, defaulting to 1000 [ 1141.978410][T19095] wlan0 speed is unknown, defaulting to 1000 [ 1141.987905][T19095] wlan0 speed is unknown, defaulting to 1000 [ 1141.996098][T19095] wlan0 speed is unknown, defaulting to 1000 [ 1142.004197][T19095] wlan0 speed is unknown, defaulting to 1000 [ 1143.214941][T18915] bridge0: port 1(bridge_slave_0) entered blocking state [ 1143.236581][T18915] bridge0: port 1(bridge_slave_0) entered disabled state [ 1143.257456][T18915] bridge_slave_0: entered allmulticast mode [ 1143.271615][T18915] bridge_slave_0: entered promiscuous mode [ 1143.292163][T18915] bridge0: port 2(bridge_slave_1) entered blocking state [ 1143.311163][T18915] bridge0: port 2(bridge_slave_1) entered disabled state [ 1143.326082][T18915] bridge_slave_1: entered allmulticast mode [ 1143.334396][T18915] bridge_slave_1: entered promiscuous mode [ 1143.980622][T18915] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1144.079453][T18915] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1144.379099][T18915] team0: Port device team_slave_0 added [ 1144.390293][T18685] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 1145.359492][T18685] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1145.877833][T18685] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 1146.007275][T18685] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1146.097415][T18915] team0: Port device team_slave_1 added [ 1151.113898][T18685] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 1151.213600][T18685] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1151.248634][T18685] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 1151.366715][T18685] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1151.375502][T18915] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1151.385806][T18915] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1151.425750][T18915] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1151.714637][T19156] loop7: detected capacity change from 0 to 512 [ 1153.804844][T19156] netlink: 36 bytes leftover after parsing attributes in process `syz.7.4371'. [ 1153.880633][T12287] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1153.897349][T12287] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1153.905474][T12287] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1153.917277][T12287] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1153.925295][T12287] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1154.668729][ T5954] dummy0: left allmulticast mode [ 1154.684391][ T5954] dummy0: left promiscuous mode [ 1154.694503][ T5954] bridge0: port 3(dummy0) entered disabled state [ 1154.960264][ T5954] bridge_slave_1: left allmulticast mode [ 1154.969769][ T5954] bridge_slave_1: left promiscuous mode [ 1155.035000][T19176] overlayfs: failed to clone upperpath [ 1155.050335][ T5954] bridge0: port 2(bridge_slave_1) entered disabled state [ 1155.389580][ T5954] bridge_slave_0: left allmulticast mode [ 1155.395741][ T5954] bridge_slave_0: left promiscuous mode [ 1155.403663][ T5954] bridge0: port 1(bridge_slave_0) entered disabled state [ 1156.118225][T12287] Bluetooth: hci2: command tx timeout [ 1157.687088][ T5954] bond2 (unregistering): (slave geneve2): Releasing active interface [ 1157.955967][ T5954] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1158.039149][ T5954] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1158.086596][ T5954] bond0 (unregistering): Released all slaves [ 1158.184588][T12287] Bluetooth: hci2: command tx timeout [ 1158.199978][ T5954] bond1 (unregistering): Released all slaves [ 1158.365329][ T5954] bond2 (unregistering): Released all slaves [ 1158.395292][ T5954] bond3 (unregistering): Released all slaves [ 1158.515532][T18685] kthread_run failed with err -4 [ 1158.551415][T18915] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1158.572269][T18915] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1158.619806][T18915] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1159.422504][T19217] loop2: detected capacity change from 0 to 4096 [ 1159.430144][T19217] ntfs3: Unknown parameter '@' [ 1159.774507][T18915] hsr_slave_0: entered promiscuous mode [ 1159.786212][T18915] hsr_slave_1: entered promiscuous mode [ 1159.805777][T18915] debugfs: 'hsr0' already exists in 'hsr' [ 1159.813089][T18915] Cannot create hsr debugfs directory [ 1159.829611][ T5954] tipc: Left network mode [ 1160.872679][T12287] Bluetooth: hci2: command tx timeout [ 1162.800750][T19299] overlayfs: failed to clone upperpath [ 1162.901122][T12287] Bluetooth: hci2: command tx timeout [ 1164.098537][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 1165.515839][T19323] overlay: Unknown parameter '/' [ 1165.627514][T19324] overlayfs: overlapping lowerdir path [ 1166.003960][ T5267] 8021q: adding VLAN 0 to HW filter on device eth17 [ 1166.485657][T19164] wlan0 speed is unknown, defaulting to 1000 [ 1169.488675][ T5267] 8021q: adding VLAN 0 to HW filter on device eth18 [ 1169.707006][T19386] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1169.897332][ T5338] usb 8-1: new low-speed USB device number 14 using dummy_hcd [ 1170.039030][T19164] bridge0: port 1(bridge_slave_0) entered blocking state [ 1170.046788][T19164] bridge0: port 1(bridge_slave_0) entered disabled state [ 1170.054735][T19164] bridge_slave_0: entered allmulticast mode [ 1170.062933][T19164] bridge_slave_0: entered promiscuous mode [ 1170.075206][ T5338] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1170.301425][ T5338] usb 8-1: New USB device found, idVendor=1163, idProduct=0200, bcdDevice=e1.32 [ 1170.310611][ T5338] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1170.322333][ T5338] usb 8-1: config 0 descriptor?? [ 1170.346450][ T5954] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1170.354466][ T5954] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1170.386489][ T5954] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1170.457012][ T5954] veth1_macvtap: left promiscuous mode [ 1170.462628][ T5954] veth0_macvtap: left promiscuous mode [ 1170.468724][ T5954] veth1_vlan: left promiscuous mode [ 1170.485300][ T5954] veth0_vlan: left promiscuous mode [ 1173.217871][ T5338] usb 8-1: string descriptor 0 read error: -71 [ 1173.487521][ T5338] cypress_m8 8-1:0.0: DeLorme Earthmate USB converter detected [ 1174.461385][ T5338] earthmate ttyUSB0: required endpoint is missing [ 1174.495617][ T5338] usb 8-1: USB disconnect, device number 14 [ 1174.504652][ T5338] cypress_m8 8-1:0.0: device disconnected [ 1174.728289][ T5954] team0 (unregistering): Port device team_slave_1 removed [ 1174.776477][ T5954] team0 (unregistering): Port device team_slave_0 removed [ 1176.045524][T19164] bridge0: port 2(bridge_slave_1) entered blocking state [ 1176.052830][T19164] bridge0: port 2(bridge_slave_1) entered disabled state [ 1176.060755][T19164] bridge_slave_1: entered allmulticast mode [ 1176.069469][T19164] bridge_slave_1: entered promiscuous mode [ 1176.574979][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 1176.635742][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 1176.854292][T19164] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1176.868634][T19164] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1177.637803][ T5267] 8021q: adding VLAN 0 to HW filter on device eth19 [ 1177.656754][T19164] team0: Port device team_slave_0 added [ 1177.673222][T19164] team0: Port device team_slave_1 added [ 1177.702802][T19164] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1177.709815][T19164] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1177.736121][T19164] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1177.868723][T18915] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 1177.997525][T18915] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1178.008579][T19164] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1178.015970][T19164] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1178.043473][T19164] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1178.055102][T18915] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 1178.229883][T18915] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1178.253912][T18915] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 1178.288616][T18915] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1178.320170][T18915] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 1178.419395][T18915] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1178.435717][T19164] hsr_slave_0: entered promiscuous mode [ 1178.446267][T19164] hsr_slave_1: entered promiscuous mode [ 1178.452640][T19164] debugfs: 'hsr0' already exists in 'hsr' [ 1178.466083][T19164] Cannot create hsr debugfs directory [ 1178.901386][T18915] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1178.937839][T18915] 8021q: adding VLAN 0 to HW filter on device team0 [ 1178.955438][ T7341] bridge0: port 1(bridge_slave_0) entered blocking state [ 1178.962607][ T7341] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1178.989012][ T6407] bridge0: port 2(bridge_slave_1) entered blocking state [ 1178.996182][ T6407] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1179.445145][ T5267] 8021q: adding VLAN 0 to HW filter on device eth20 [ 1181.086803][T19508] overlayfs: failed to clone upperpath [ 1182.504829][T19510] loop7: detected capacity change from 0 to 4096 [ 1182.521395][T19510] ntfs3: Unknown parameter '@' [ 1183.145913][ T5609] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1183.162540][ T5609] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1183.172708][ T5609] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1183.186004][ T5609] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1183.205066][ T5609] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1185.546196][T12287] Bluetooth: hci4: command tx timeout [ 1187.615963][T12287] Bluetooth: hci4: command tx timeout [ 1188.723387][T19553] overlayfs: failed to clone upperpath [ 1189.093922][T19561] loop2: detected capacity change from 0 to 512 [ 1189.611717][T19561] EXT4-fs: Ignoring removed bh option [ 1189.700304][ T5609] Bluetooth: hci4: command tx timeout [ 1189.994205][T19561] EXT4-fs error (device loop2): ext4_iget_extra_inode:5179: inode #15: comm syz.2.4423: corrupted in-inode xattr: e_value size too large [ 1191.341091][T19561] loop2: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 1191.342156][ C1] EXT4-fs (loop2): error count since last fsck: 1 [ 1191.357763][ C1] EXT4-fs (loop2): initial error at time 1786111541: ext4_iget_extra_inode:5179: inode 15 [ 1191.367729][ C1] EXT4-fs (loop2): last error at time 1786111541: ext4_iget_extra_inode:5179: inode 15 [ 1191.610832][T19561] EXT4-fs error (device loop2): ext4_orphan_get:1402: comm syz.2.4423: couldn't read orphan inode 15 (err -117) [ 1191.782831][ T5609] Bluetooth: hci4: command tx timeout [ 1191.789994][T19561] loop2: lost filesystem error report for type 5 error -117 [ 1191.795398][T19561] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1191.882841][ T5954] bridge_slave_1: left allmulticast mode [ 1191.888594][ T5954] bridge_slave_1: left promiscuous mode [ 1191.894750][ T5954] bridge0: port 2(bridge_slave_1) entered disabled state [ 1192.099066][ T5618] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1192.109632][ T5954] bridge_slave_0: left allmulticast mode [ 1192.115506][ T5954] bridge_slave_0: left promiscuous mode [ 1192.121435][ T5954] bridge0: port 1(bridge_slave_0) entered disabled state [ 1193.857272][T19610] netlink: 'syz.3.4437': attribute type 1 has an invalid length. [ 1194.227018][ T5954] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1195.490438][ T5954] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1195.537417][ T5954] bond0 (unregistering): Released all slaves [ 1196.506489][T19516] wlan0 speed is unknown, defaulting to 1000 [ 1196.536320][T19164] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 1196.796802][T19164] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1196.808924][T19164] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 1197.331153][T19164] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1197.577444][ T0] NOHZ tick-stop error: local softirq work is pending, handler #82!!! [ 1197.783582][ T5954] hsr_slave_0: left promiscuous mode [ 1197.806770][T19634] kAFS: unable to lookup cell '(,c¾û/' [ 1197.822084][ T5954] hsr_slave_1: left promiscuous mode [ 1197.828305][ T5954] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1197.955549][ T5954] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1204.240217][ T5954] team0 (unregistering): Port device team_slave_1 removed [ 1205.112116][ T5954] team0 (unregistering): Port device team_slave_0 removed [ 1205.573010][T19164] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 1206.287721][T19164] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1206.296162][T19164] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 1206.421153][T19164] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1207.618373][T19164] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1207.675512][T19164] 8021q: adding VLAN 0 to HW filter on device team0 [ 1207.715578][T19256] bridge0: port 1(bridge_slave_0) entered blocking state [ 1207.722735][T19256] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1207.733659][T19256] bridge0: port 2(bridge_slave_1) entered blocking state [ 1207.740783][T19256] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1209.445831][T19516] bridge0: port 1(bridge_slave_0) entered blocking state [ 1209.453677][T19516] bridge0: port 1(bridge_slave_0) entered disabled state [ 1209.483338][T19516] bridge_slave_0: entered allmulticast mode [ 1209.519763][T19516] bridge_slave_0: entered promiscuous mode [ 1210.167087][T19516] bridge0: port 2(bridge_slave_1) entered blocking state [ 1210.184426][T19516] bridge0: port 2(bridge_slave_1) entered disabled state [ 1210.191752][T19516] bridge_slave_1: entered allmulticast mode [ 1210.199820][T19516] bridge_slave_1: entered promiscuous mode [ 1210.372707][T19516] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1210.389296][T19516] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1210.975120][T19742] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4452'. [ 1213.568305][T19516] team0: Port device team_slave_0 added [ 1213.628193][T19516] team0: Port device team_slave_1 added [ 1213.667141][T19516] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1213.676034][T19516] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1213.724948][T19516] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1213.754916][T19516] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1213.771001][T19516] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1213.823285][ T5609] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 1213.839669][ T5609] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 1213.849720][ T5609] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 1213.859706][ T5609] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 1213.868396][ T5609] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 1213.873578][T19516] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1214.030936][T19516] hsr_slave_0: entered promiscuous mode [ 1214.038052][T19516] hsr_slave_1: entered promiscuous mode [ 1214.092389][T19164] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1215.464790][T12287] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 1215.491342][T12287] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 1215.501516][T12287] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 1215.511410][T12287] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 1215.521499][T12287] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 1216.040834][ T5609] Bluetooth: hci6: command tx timeout [ 1217.611500][ T5609] Bluetooth: hci7: command tx timeout [ 1217.669568][T19760] wlan0 speed is unknown, defaulting to 1000 [ 1218.091036][ T5609] Bluetooth: hci6: command tx timeout [ 1219.690653][ T5609] Bluetooth: hci7: command tx timeout [ 1220.170559][ T5609] Bluetooth: hci6: command tx timeout [ 1221.463573][T19853] FAT-fs (nbd7): unable to read boot sector [ 1221.773545][ T5609] Bluetooth: hci7: command tx timeout [ 1222.260554][ T5609] Bluetooth: hci6: command tx timeout [ 1222.579546][T19792] wlan0 speed is unknown, defaulting to 1000 [ 1223.015739][T19903] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4469'. [ 1223.865535][ T5609] Bluetooth: hci7: command tx timeout [ 1226.651246][T19760] bridge0: port 1(bridge_slave_0) entered blocking state [ 1226.668708][T19760] bridge0: port 1(bridge_slave_0) entered disabled state [ 1226.690900][T19760] bridge_slave_0: entered allmulticast mode [ 1226.712842][T19760] bridge_slave_0: entered promiscuous mode [ 1226.726653][T19760] bridge0: port 2(bridge_slave_1) entered blocking state [ 1226.734547][T19760] bridge0: port 2(bridge_slave_1) entered disabled state [ 1226.742755][T19760] bridge_slave_1: entered allmulticast mode [ 1226.752966][T19760] bridge_slave_1: entered promiscuous mode [ 1226.861706][T19760] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1226.923267][T19760] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1227.070369][T19946] xfrm0: entered allmulticast mode [ 1227.170051][T19760] team0: Port device team_slave_0 added [ 1227.197396][T19760] team0: Port device team_slave_1 added [ 1228.424451][T12287] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1228.443371][T12287] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1228.451603][T12287] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1228.468505][T12287] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1228.480469][T12287] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1229.253028][T19971] loop7: detected capacity change from 0 to 256 [ 1229.355399][T19971] exFAT-fs (loop7): error, no upcase table entry. Please run fsck [ 1229.448030][T19971] exFAT-fs (loop7): Filesystem has been set read-only [ 1229.748766][T19971] exFAT-fs (loop7): failed to test first cluster bit of root dir(5) [ 1229.785133][T19760] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1229.815099][T19760] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1230.110961][T19760] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1230.678965][ T5609] Bluetooth: hci2: command tx timeout [ 1231.481860][T20004] exFAT-fs (loop7): start_clu is invalid cluster(0x400) [ 1231.602577][T19760] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1231.627474][T19760] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1231.679958][T19760] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1232.475934][T19516] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 1232.548956][T19516] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1232.573046][T19516] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 1232.590228][T14068] usb 8-1: new high-speed USB device number 15 using dummy_hcd [ 1232.730862][ T5609] Bluetooth: hci2: command tx timeout [ 1233.095723][T19516] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1233.137497][T19516] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 1233.185877][T19516] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1233.214402][T19516] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 1233.303825][T19516] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1233.385933][T19760] hsr_slave_0: entered promiscuous mode [ 1233.403246][T19760] hsr_slave_1: entered promiscuous mode [ 1233.411317][T19760] debugfs: 'hsr0' already exists in 'hsr' [ 1233.417080][T19760] Cannot create hsr debugfs directory [ 1233.491831][T14068] usb 8-1: Using ep0 maxpacket: 32 [ 1233.663993][T14068] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1233.692583][T14068] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1233.705819][T14068] usb 8-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 1233.716964][T14068] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1234.261726][T14068] usb 8-1: config 0 descriptor?? [ 1234.422639][T19516] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1234.453812][T19963] wlan0 speed is unknown, defaulting to 1000 [ 1234.523293][T20051] overlay: Unknown parameter '/' [ 1234.810200][ T5609] Bluetooth: hci2: command tx timeout [ 1235.078285][T14068] hid_parser_main: 448 callbacks suppressed [ 1235.078316][T14068] ft260 0003:0403:6030.000A: unknown main item tag 0x0 [ 1235.092102][T14068] ft260 0003:0403:6030.000A: unknown main item tag 0x0 [ 1235.815569][T19792] bridge0: port 1(bridge_slave_0) entered blocking state [ 1235.823124][T19792] bridge0: port 1(bridge_slave_0) entered disabled state [ 1235.831881][T19792] bridge_slave_0: entered allmulticast mode [ 1235.843844][T19792] bridge_slave_0: entered promiscuous mode [ 1235.865009][T14068] ft260 0003:0403:6030.000A: chip code: 0000 0000 [ 1235.966922][T19516] 8021q: adding VLAN 0 to HW filter on device team0 [ 1236.009307][T19792] bridge0: port 2(bridge_slave_1) entered blocking state [ 1236.027422][T19792] bridge0: port 2(bridge_slave_1) entered disabled state [ 1236.038906][T19792] bridge_slave_1: entered allmulticast mode [ 1236.041289][T20062] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4493'. [ 1236.142932][T19792] bridge_slave_1: entered promiscuous mode [ 1236.149001][T14068] ft260 0003:0403:6030.000A: USB HID v0.00 Device [HID 0403:6030] on usb-dummy_hcd.7-1/input0 [ 1236.356203][T14068] ft260 0003:0403:6030.000A: failed to retrieve status: -32, no wakeup [ 1236.395692][T14068] ft260 0003:0403:6030.000A: failed to retrieve status: -32 [ 1236.583780][T20060] usb 8-1: reset high-speed USB device number 15 using dummy_hcd [ 1236.718383][T20070] mmap: syz.3.4495 (20070) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 1236.773826][T19792] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1236.808910][T19243] bridge0: port 1(bridge_slave_0) entered blocking state [ 1236.816049][T19243] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1236.847565][T20018] ft260 0003:0403:6030.000A: ft260_hid_output_report_check_status: failed to start transfer, ret -38 [ 1236.900205][ T5609] Bluetooth: hci2: command tx timeout [ 1236.992310][T19792] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1237.189956][T19243] bridge0: port 2(bridge_slave_1) entered blocking state [ 1237.197161][T19243] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1237.290561][T19234] bridge_slave_1: left allmulticast mode [ 1237.296294][T19234] bridge_slave_1: left promiscuous mode [ 1237.302704][T19234] bridge0: port 2(bridge_slave_1) entered disabled state [ 1237.375078][T19234] bridge_slave_0: left allmulticast mode [ 1237.381553][T19234] bridge_slave_0: left promiscuous mode [ 1237.389347][T19234] bridge0: port 1(bridge_slave_0) entered disabled state [ 1237.739732][T19234] bridge_slave_1: left allmulticast mode [ 1237.745531][T19234] bridge_slave_1: left promiscuous mode [ 1237.751397][T19234] bridge0: port 2(bridge_slave_1) entered disabled state [ 1237.841778][T19234] bridge_slave_0: left allmulticast mode [ 1237.847695][T19234] bridge_slave_0: left promiscuous mode [ 1237.855488][T19234] bridge0: port 1(bridge_slave_0) entered disabled state [ 1238.012781][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 1238.022797][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 1238.471924][T19234] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1238.550270][T19234] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1238.592925][T19234] bond0 (unregistering): Released all slaves [ 1239.061552][T19234] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1239.191721][T19234] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1239.321414][T19234] bond0 (unregistering): Released all slaves [ 1239.745526][T19792] team0: Port device team_slave_0 added [ 1240.004270][T19516] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1240.017444][T19516] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1240.127333][T19792] team0: Port device team_slave_1 added [ 1240.751412][T19792] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1240.771100][T19792] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1240.921314][T19792] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1241.045260][T19792] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1241.074239][T19792] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1241.192641][T19792] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1241.429424][T19234] hsr_slave_0: left promiscuous mode [ 1241.519465][T19234] hsr_slave_1: left promiscuous mode [ 1241.525885][T19234] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1241.561339][T19234] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1241.584363][T20109] netlink: 1752 bytes leftover after parsing attributes in process `syz.3.4501'. [ 1241.691697][T20018] ft260 0003:0403:6030.000A: failed to reset I2C controller: -32 [ 1241.719520][T19234] hsr_slave_0: left promiscuous mode [ 1241.730393][T19234] hsr_slave_1: left promiscuous mode [ 1241.755365][T19234] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1241.792337][ T30] audit: type=1800 audit(1786111591.693:197): pid=20111 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.7.4502" name="memory_backed" dev="configfs" ino=62410 res=0 errno=0 [ 1241.814569][ T30] audit: type=1800 audit(1786111591.693:198): pid=20111 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.7.4502" name="zoned" dev="configfs" ino=62411 res=0 errno=0 [ 1241.836925][T19234] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1241.850735][ T30] audit: type=1800 audit(1786111591.743:199): pid=20111 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.7.4502" name="power" dev="configfs" ino=62417 res=0 errno=0 [ 1241.875398][T20111] null_blk: my_zoned_dev: using native zone append [ 1241.916992][T20111] null_blk: disk my_zoned_dev created [ 1242.159093][T12287] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1242.178962][T12287] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1242.188221][T12287] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1242.203188][T12287] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1242.211100][T12287] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1242.320580][T20119] loop7: detected capacity change from 0 to 16 [ 1242.328720][T20119] erofs: Unknown parameter 'x' [ 1242.487474][T14068] usb 8-1: USB disconnect, device number 15 [ 1242.641372][T19234] team0 (unregistering): Port device team_slave_1 removed [ 1242.703506][T19234] team0 (unregistering): Port device team_slave_0 removed [ 1243.191375][T19234] team0 (unregistering): Port device team_slave_1 removed [ 1243.260411][T19234] team0 (unregistering): Port device team_slave_0 removed [ 1245.163981][ T5609] Bluetooth: hci1: command tx timeout [ 1245.487782][T19792] hsr_slave_0: entered promiscuous mode [ 1245.506344][T19792] hsr_slave_1: entered promiscuous mode [ 1245.537968][T19792] debugfs: 'hsr0' already exists in 'hsr' [ 1245.589935][T19792] Cannot create hsr debugfs directory [ 1246.492242][ T5267] 8021q: adding VLAN 0 to HW filter on device eth1 [ 1246.794277][T20164] overlayfs: workdir and upperdir must be separate subtrees [ 1247.251832][ T5609] Bluetooth: hci1: command tx timeout [ 1247.530877][T20116] wlan0 speed is unknown, defaulting to 1000 [ 1247.555905][T19963] bridge0: port 1(bridge_slave_0) entered blocking state [ 1247.563395][T19963] bridge0: port 1(bridge_slave_0) entered disabled state [ 1247.571553][T19963] bridge_slave_0: entered allmulticast mode [ 1247.597764][T19963] bridge_slave_0: entered promiscuous mode [ 1247.628220][T19963] bridge0: port 2(bridge_slave_1) entered blocking state [ 1247.636356][T19963] bridge0: port 2(bridge_slave_1) entered disabled state [ 1247.644138][T19963] bridge_slave_1: entered allmulticast mode [ 1247.652588][T19963] bridge_slave_1: entered promiscuous mode [ 1247.701950][T19963] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1247.875491][T19963] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1248.673607][T19963] team0: Port device team_slave_0 added [ 1248.703641][T19963] team0: Port device team_slave_1 added [ 1248.763899][T19963] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1248.771403][T19963] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1248.867496][T19963] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1249.294180][ T5609] Bluetooth: hci1: command tx timeout [ 1249.984755][T19963] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1249.999475][T19963] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1251.197716][T19963] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1251.531122][ T5609] Bluetooth: hci1: command tx timeout [ 1251.876650][T19963] hsr_slave_0: entered promiscuous mode [ 1251.905155][T19963] hsr_slave_1: entered promiscuous mode [ 1251.922431][T19963] debugfs: 'hsr0' already exists in 'hsr' [ 1251.939102][T19963] Cannot create hsr debugfs directory [ 1252.128921][T20064] usb 8-1: new high-speed USB device number 16 using dummy_hcd [ 1252.288960][T20064] usb 8-1: Using ep0 maxpacket: 8 [ 1252.365376][T20064] usb 8-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1252.388794][T20064] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1252.407260][T20064] usb 8-1: config 16 interface 0 altsetting 0 has an endpoint descriptor with address 0xB6, changing to 0x86 [ 1252.443941][T20064] usb 8-1: config 16 interface 0 altsetting 0 endpoint 0x86 has invalid maxpacket 55305, setting to 1024 [ 1252.480320][T20064] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x86 has invalid maxpacket 1024 [ 1252.492511][T20064] usb 8-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1252.511262][T20064] usb 8-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1252.532842][T20064] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1252.775799][T20064] usb 8-1: GET_CAPABILITIES returned 0 [ 1252.792631][T20064] usbtmc 8-1:16.0: can't read capabilities [ 1252.968847][T20208] netlink: 1752 bytes leftover after parsing attributes in process `syz.3.4513'. [ 1252.987167][T20193] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1252.998301][T20193] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1253.777073][T20064] usb 8-1: USB disconnect, device number 16 [ 1254.358028][T20211] netdevsim netdevsim3: loading /lib/firmware/. failed with error -22 [ 1254.366481][T20211] netdevsim netdevsim3: Direct firmware load for . failed with error -22 [ 1254.375010][T20211] netdevsim netdevsim3: Falling back to sysfs fallback for: . [ 1254.803917][T20116] bridge0: port 1(bridge_slave_0) entered blocking state [ 1254.817044][T20116] bridge0: port 1(bridge_slave_0) entered disabled state [ 1254.825875][T20116] bridge_slave_0: entered allmulticast mode [ 1254.839931][T20116] bridge_slave_0: entered promiscuous mode [ 1254.849739][T20116] bridge0: port 2(bridge_slave_1) entered blocking state [ 1254.857056][T20116] bridge0: port 2(bridge_slave_1) entered disabled state [ 1254.866001][T20116] bridge_slave_1: entered allmulticast mode [ 1254.874723][T20116] bridge_slave_1: entered promiscuous mode [ 1255.133704][T20218] Process accounting resumed [ 1255.363186][T20116] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1255.430299][T20116] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1255.544912][T19760] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 1255.640606][T19760] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1255.659760][T19760] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 1255.778210][T19760] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1255.925242][T20116] team0: Port device team_slave_0 added [ 1255.955166][T20116] team0: Port device team_slave_1 added [ 1256.056358][T19760] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 1256.057628][T20255] configfs-gadget.g1 gadget.32: uvc: uvc_function_bind() [ 1256.073237][T20255] udc usbip-vudc.0: failed to start g1: -19 [ 1256.092542][T20255] UDC core: g1: couldn't find an available UDC or it's busy [ 1256.192089][T20256] overlayfs: failed to clone upperpath [ 1256.859490][T19760] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1256.887501][T19760] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 1256.983917][T19760] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1257.131682][T20116] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1257.139194][T20116] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1257.165907][T20116] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1257.312599][T20116] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1257.319665][T20116] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1257.352044][T20116] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1257.679787][T19792] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 1257.703329][T19792] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1257.711670][T19792] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 1257.763361][T19792] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1258.070060][T19234] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1258.250604][T20116] hsr_slave_0: entered promiscuous mode [ 1258.292733][T20116] hsr_slave_1: entered promiscuous mode [ 1258.316706][T20116] debugfs: 'hsr0' already exists in 'hsr' [ 1258.324709][T20116] Cannot create hsr debugfs directory [ 1258.624432][T19760] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1258.641500][T19760] 8021q: adding VLAN 0 to HW filter on device team0 [ 1258.680523][T19760] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1258.691524][T19760] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1258.709886][T19792] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 1258.819559][T19792] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1258.904981][T20288] vlan3: entered allmulticast mode [ 1258.986794][T20288] bond0: entered allmulticast mode [ 1259.072163][T20288] bond_slave_0: entered allmulticast mode [ 1259.133141][T20288] bond_slave_1: entered allmulticast mode [ 1259.430615][T19256] bridge0: port 1(bridge_slave_0) entered blocking state [ 1259.437762][T19256] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1259.447295][T19256] bridge0: port 2(bridge_slave_1) entered blocking state [ 1259.454418][T19256] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1259.869570][T20310] loop7: detected capacity change from 0 to 32768 [ 1259.903855][T20310] ocfs2: Mounting device (7,7) on (node local, slot 0) with ordered data mode. [ 1259.995183][T19792] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 1260.034903][T19792] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1260.111063][T20317] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1260.905721][ T30] audit: type=1800 audit(1786111610.494:200): pid=20323 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.7.4525" name="file1" dev="loop7" ino=17059 res=0 errno=0 [ 1261.393769][T13716] ocfs2: Unmounting device (7,7) on (node local) [ 1261.487302][T19234] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1262.095768][T20353] CacheFiles: No cache directory specified [ 1262.824773][T19234] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1263.040867][T20357] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1264.364129][T19234] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1264.474636][T19792] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1264.627691][T19792] 8021q: adding VLAN 0 to HW filter on device team0 [ 1264.811516][T19272] bridge0: port 1(bridge_slave_0) entered blocking state [ 1264.818722][T19272] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1264.928826][T19760] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1264.952018][T19272] bridge0: port 2(bridge_slave_1) entered blocking state [ 1264.959201][T19272] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1266.194772][T20399] syz_tun: left allmulticast mode [ 1266.251115][T19792] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1266.510875][T19234] bridge_slave_1: left allmulticast mode [ 1266.516596][T19234] bridge_slave_1: left promiscuous mode [ 1266.548413][T19234] bridge0: port 2(bridge_slave_1) entered disabled state [ 1266.696170][T19234] bridge_slave_0: left allmulticast mode [ 1266.714007][T19234] bridge_slave_0: left promiscuous mode [ 1266.726272][T19234] bridge0: port 1(bridge_slave_0) entered disabled state [ 1266.931669][T19234] bridge_slave_1: left allmulticast mode [ 1266.946626][T19234] bridge_slave_1: left promiscuous mode [ 1266.952516][T19234] bridge0: port 2(bridge_slave_1) entered disabled state [ 1267.019313][T19234] bridge_slave_0: left allmulticast mode [ 1267.025152][T19234] bridge_slave_0: left promiscuous mode [ 1267.032341][T19234] bridge0: port 1(bridge_slave_0) entered disabled state [ 1268.086849][T19234] pimreg: left allmulticast mode [ 1268.961538][T20436] netdevsim netdevsim7: loading /lib/firmware/. failed with error -22 [ 1268.970574][T20436] netdevsim netdevsim7: Direct firmware load for . failed with error -22 [ 1268.979252][T20436] netdevsim netdevsim7: Falling back to sysfs fallback for: . [ 1269.360754][T20436] Process accounting resumed [ 1269.491242][T20442] zram0: detected capacity change from 0 to 8 [ 1269.679207][T19234] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1269.733530][T19234] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1269.744884][T20444] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 1269.770949][T19234] bond0 (unregistering): Released all slaves [ 1270.139595][T19234] bond1 (unregistering): (slave geneve2): Releasing active interface [ 1270.299904][T19234] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1270.368301][T19234] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1270.409605][T19234] bond0 (unregistering): Released all slaves [ 1270.422399][T19234] bond1 (unregistering): Released all slaves [ 1270.441222][T19234] bond2 (unregistering): Released all slaves [ 1270.460682][T19234] bond3 (unregistering): Released all slaves [ 1270.510285][T20423] pim6reg: entered allmulticast mode [ 1270.516285][T20425] pim6reg: left allmulticast mode [ 1270.963168][T20460] futex_wake_op: syz.3.4547 tries to shift op by 144; fix this program [ 1271.912376][T19760] veth0_vlan: entered promiscuous mode [ 1271.989623][T19760] veth1_vlan: entered promiscuous mode [ 1272.115639][T19760] veth0_macvtap: entered promiscuous mode [ 1272.182025][T19234] IPVS: stopping master sync thread 10721 ... [ 1272.271834][T19760] veth1_macvtap: entered promiscuous mode [ 1272.687900][T19760] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1273.832754][T20116] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 1273.929660][T20116] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1273.938254][T20116] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 1273.980482][T20116] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1274.017409][T19760] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1274.231701][T12287] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1274.251617][T12287] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1274.266229][T12287] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1274.326108][T20116] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 1274.340101][T12287] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1274.365091][T12287] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1274.435880][T20116] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1275.158551][T20116] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 1275.214571][T20116] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1275.248389][T20512] netlink: 16 bytes leftover after parsing attributes in process `syz.3.4554'. [ 1275.502419][ T5609] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1275.544347][ T5609] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1275.563520][ T5609] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1275.588302][ T5609] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1275.600583][ T5609] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1276.120195][T19963] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 1276.375768][T19963] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1276.412512][ T5609] Bluetooth: hci4: command tx timeout [ 1276.700733][T19963] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 1276.771366][T19963] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1276.795377][T19963] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 1276.855843][T19963] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1277.688679][ T5609] Bluetooth: hci5: command tx timeout [ 1278.497395][ T5609] Bluetooth: hci4: command tx timeout [ 1278.609501][T19963] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 1278.664325][T19963] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1278.707049][T20494] wlan0 speed is unknown, defaulting to 1000 [ 1279.767832][ T5609] Bluetooth: hci5: command tx timeout [ 1280.807137][ T5609] Bluetooth: hci4: command tx timeout [ 1280.827353][T19234] hsr_slave_0: left promiscuous mode [ 1281.031123][T19234] hsr_slave_1: left promiscuous mode [ 1281.078722][T19234] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1281.132799][T19234] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1281.394399][T20610] netdevsim netdevsim3: loading /lib/firmware/. failed with error -22 [ 1281.402732][T20610] netdevsim netdevsim3: Direct firmware load for . failed with error -22 [ 1281.411386][T20610] netdevsim netdevsim3: Falling back to sysfs fallback for: . [ 1281.488131][T19234] hsr_slave_0: left promiscuous mode [ 1281.519074][T19234] hsr_slave_1: left promiscuous mode [ 1281.589872][T19234] veth1_macvtap: left promiscuous mode [ 1281.595491][T19234] veth0_macvtap: left promiscuous mode [ 1281.602235][T19234] veth1_vlan: left promiscuous mode [ 1281.608717][T19234] veth0_vlan: left promiscuous mode [ 1281.847475][ T5609] Bluetooth: hci5: command tx timeout [ 1282.339542][T20610] Process accounting resumed [ 1282.887351][ T5609] Bluetooth: hci4: command tx timeout [ 1283.077782][T19234] team0 (unregistering): Port device team_slave_1 removed [ 1283.129304][T19234] team0 (unregistering): Port device team_slave_0 removed [ 1283.997992][ T5609] Bluetooth: hci5: command tx timeout [ 1284.668808][T19234] team0 (unregistering): Port device team_slave_1 removed [ 1284.717973][T19234] team0 (unregistering): Port device team_slave_0 removed [ 1285.028226][T20648] vlan2: entered allmulticast mode [ 1285.033386][T20648] bond0: entered allmulticast mode [ 1285.038563][T20648] bond_slave_0: entered allmulticast mode [ 1285.044278][T20648] bond_slave_1: entered allmulticast mode [ 1285.050036][T20648] netdevsim netdevsim3 netdevsim1: entered allmulticast mode [ 1285.086782][T20522] wlan0 speed is unknown, defaulting to 1000 [ 1286.613986][T20116] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1286.642449][T20671] netdevsim netdevsim7: loading /lib/firmware/. failed with error -22 [ 1286.712356][T20671] netdevsim netdevsim7: Direct firmware load for . failed with error -22 [ 1286.728493][T20671] netdevsim netdevsim7: Falling back to sysfs fallback for: . [ 1286.822113][T19963] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1287.123269][T20116] 8021q: adding VLAN 0 to HW filter on device team0 [ 1287.150021][T19963] 8021q: adding VLAN 0 to HW filter on device team0 [ 1287.223143][T20672] pim6reg1: entered promiscuous mode [ 1287.229202][T20672] pim6reg1: entered allmulticast mode [ 1287.314647][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 1287.321865][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1287.333936][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 1287.341142][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1287.357716][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 1287.364901][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1287.606103][T20702] netlink: 'syz.3.4572': attribute type 21 has an invalid length. [ 1287.700835][T20494] bridge0: port 1(bridge_slave_0) entered blocking state [ 1287.712498][T20494] bridge0: port 1(bridge_slave_0) entered disabled state [ 1287.721642][T20494] bridge_slave_0: entered allmulticast mode [ 1287.734245][T20494] bridge_slave_0: entered promiscuous mode [ 1287.751083][T20494] bridge0: port 2(bridge_slave_1) entered blocking state [ 1287.758712][T20494] bridge0: port 2(bridge_slave_1) entered disabled state [ 1287.768696][T20494] bridge_slave_1: entered allmulticast mode [ 1287.779765][T20494] bridge_slave_1: entered promiscuous mode [ 1287.853843][T20702] netlink: 'syz.3.4572': attribute type 1 has an invalid length. [ 1287.862115][T20702] netlink: 144 bytes leftover after parsing attributes in process `syz.3.4572'. [ 1287.994759][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 1288.001985][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1288.082936][T20494] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1288.106994][T20711] fuse: Bad value for 'fd' [ 1288.135732][T20494] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1288.231604][T19234] IPVS: stop unused estimator thread 0... [ 1288.431227][T20494] team0: Port device team_slave_0 added [ 1288.469099][T20494] team0: Port device team_slave_1 added [ 1288.520050][T20522] bridge0: port 1(bridge_slave_0) entered blocking state [ 1288.527852][T20522] bridge0: port 1(bridge_slave_0) entered disabled state [ 1288.535611][T20522] bridge_slave_0: entered allmulticast mode [ 1288.544442][T20522] bridge_slave_0: entered promiscuous mode [ 1288.553997][T20522] bridge0: port 2(bridge_slave_1) entered blocking state [ 1288.575374][T20522] bridge0: port 2(bridge_slave_1) entered disabled state [ 1288.584790][T20522] bridge_slave_1: entered allmulticast mode [ 1288.595288][T20522] bridge_slave_1: entered promiscuous mode [ 1288.834245][T20494] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1288.994925][T20728] RDS: rds_bind could not find a transport for ::ffff:100.1.1.2, load rds_tcp or rds_rdma? [ 1289.636645][T20494] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1289.704716][T20494] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1289.795954][T20522] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1289.909316][T12287] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 1289.922657][T12287] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 1289.935027][T12287] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 1289.943580][T12287] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 1289.955584][T12287] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 1292.583280][T20494] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1292.603108][T20494] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1292.693636][T20494] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1292.741404][T20522] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1293.047657][T12287] Bluetooth: hci6: command tx timeout [ 1294.104142][T20494] hsr_slave_0: entered promiscuous mode [ 1294.884614][T20494] hsr_slave_1: entered promiscuous mode [ 1294.921463][T20522] team0: Port device team_slave_0 added [ 1294.939820][T20522] team0: Port device team_slave_1 added [ 1295.130284][T12287] Bluetooth: hci6: command tx timeout [ 1296.974021][T20522] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1297.007758][T20522] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1297.086390][T20522] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1297.100028][T20522] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1297.107354][T20522] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1297.133869][T20522] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1297.208905][T12287] Bluetooth: hci6: command tx timeout [ 1297.590664][T20522] hsr_slave_0: entered promiscuous mode [ 1297.608441][T20522] hsr_slave_1: entered promiscuous mode [ 1297.619033][T20522] debugfs: 'hsr0' already exists in 'hsr' [ 1297.631172][T20522] Cannot create hsr debugfs directory [ 1297.646535][T20732] wlan0 speed is unknown, defaulting to 1000 [ 1298.487754][T20116] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1299.200243][T20832] Cannot find set identified by id 65535 to match [ 1299.291762][T12287] Bluetooth: hci6: command tx timeout [ 1299.448634][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 1299.463989][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 1300.443674][T20857] dlm: no local IP address has been set [ 1300.451631][T20857] dlm: cannot start dlm midcomms -107 [ 1300.481361][ T5267] 8021q: adding VLAN 0 to HW filter on device eth4 [ 1300.562715][T20857] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2 [ 1300.602152][T20732] bridge0: port 1(bridge_slave_0) entered blocking state [ 1300.612090][T20732] bridge0: port 1(bridge_slave_0) entered disabled state [ 1300.619952][T20732] bridge_slave_0: entered allmulticast mode [ 1300.629112][T20732] bridge_slave_0: entered promiscuous mode [ 1300.663407][T20732] bridge0: port 2(bridge_slave_1) entered blocking state [ 1300.684694][T20732] bridge0: port 2(bridge_slave_1) entered disabled state [ 1300.702799][T20732] bridge_slave_1: entered allmulticast mode [ 1300.712514][T20732] bridge_slave_1: entered promiscuous mode [ 1300.821058][T19234] bridge_slave_1: left allmulticast mode [ 1300.830989][T19234] bridge_slave_1: left promiscuous mode [ 1300.838081][T19234] bridge0: port 2(bridge_slave_1) entered disabled state [ 1300.877150][T19234] bridge_slave_0: left allmulticast mode [ 1300.889365][T19234] bridge_slave_0: left promiscuous mode [ 1300.901362][T19234] bridge0: port 1(bridge_slave_0) entered disabled state [ 1301.056931][T19234] bridge_slave_1: left allmulticast mode [ 1301.062701][T19234] bridge_slave_1: left promiscuous mode [ 1301.069051][T19234] bridge0: port 2(bridge_slave_1) entered disabled state [ 1301.118415][T19234] bridge_slave_0: left allmulticast mode [ 1301.124200][T19234] bridge_slave_0: left promiscuous mode [ 1301.132210][T19234] bridge0: port 1(bridge_slave_0) entered disabled state [ 1302.327319][T19234] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1302.401121][T19234] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1302.457692][ T5609] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1302.472053][T19234] bond0 (unregistering): Released all slaves [ 1302.472918][ T5609] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1302.497004][ T5609] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1302.507568][ T5609] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1302.515335][ T5609] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1302.938651][T19234] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1303.006568][T19234] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1303.038276][T19234] bond0 (unregistering): Released all slaves [ 1303.377265][T20732] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1303.416772][T20732] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1304.387083][T20732] team0: Port device team_slave_0 added [ 1304.646113][T12287] Bluetooth: hci2: command tx timeout [ 1305.204667][T20732] team0: Port device team_slave_1 added [ 1306.725742][T12287] Bluetooth: hci2: command tx timeout [ 1308.096619][T19234] hsr_slave_0: left promiscuous mode [ 1308.107554][T19234] hsr_slave_1: left promiscuous mode [ 1308.113533][T19234] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1308.146328][T19234] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1308.146329][T20980] Bluetooth: MGMT ver 1.23 [ 1308.188683][T20980] Bluetooth: hci0: Opcode 0x0401 failed: -22 [ 1308.295708][T19234] hsr_slave_0: left promiscuous mode [ 1308.324929][T20983] netdevsim netdevsim7: loading /lib/firmware/. failed with error -22 [ 1308.333284][T20983] netdevsim netdevsim7: Direct firmware load for . failed with error -22 [ 1308.336445][T19234] hsr_slave_1: left promiscuous mode [ 1308.342283][T20983] netdevsim netdevsim7: Falling back to sysfs fallback for: . [ 1308.348625][T19234] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1308.362334][T19234] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1308.407466][T19234] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1308.414910][T19234] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1308.535782][T19234] veth1_macvtap: left promiscuous mode [ 1308.541348][T19234] veth0_macvtap: left promiscuous mode [ 1308.547131][T19234] veth1_vlan: left promiscuous mode [ 1308.552430][T19234] veth0_vlan: left promiscuous mode [ 1308.805893][T12287] Bluetooth: hci2: command tx timeout [ 1309.006275][T19234] team0 (unregistering): Port device team_slave_1 removed [ 1309.057239][T19234] team0 (unregistering): Port device team_slave_0 removed [ 1309.576907][T19234] team0 (unregistering): Port device team_slave_1 removed [ 1309.617855][T19234] team0 (unregistering): Port device team_slave_0 removed [ 1309.827453][T20494] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 1309.942401][T20494] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1310.106420][T20732] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1310.113397][T20732] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1310.140603][T20732] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1310.162433][T20732] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1310.188304][T20732] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1310.216391][T20732] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1310.377283][T20494] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 1310.486787][T20494] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1310.774182][T20494] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 1310.885738][T12287] Bluetooth: hci2: command tx timeout [ 1310.898063][T20494] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1310.935424][T20494] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 1310.967991][T21000] FAT-fs (nbd7): unable to read boot sector [ 1311.163134][T20494] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1311.937162][T20896] wlan0 speed is unknown, defaulting to 1000 [ 1312.620915][T20732] hsr_slave_0: entered promiscuous mode [ 1312.627950][T20732] hsr_slave_1: entered promiscuous mode [ 1312.634493][T20732] debugfs: 'hsr0' already exists in 'hsr' [ 1312.641064][T20732] Cannot create hsr debugfs directory [ 1313.807179][T20522] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 1313.937230][T20522] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1313.977044][T20522] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 1314.132295][T20522] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1315.862978][T20494] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1315.980450][T20494] 8021q: adding VLAN 0 to HW filter on device team0 [ 1315.996980][ T30] audit: type=1804 audit(1786111665.867:201): pid=21073 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.4605" name="bus" dev="ramfs" ino=68007 res=1 errno=0 [ 1316.019873][T20522] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 1316.059901][T20522] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1316.068994][T20522] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 1316.127858][T20522] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1316.204651][ T5954] bridge0: port 1(bridge_slave_0) entered blocking state [ 1316.211809][ T5954] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1317.361669][T12147] bridge0: port 2(bridge_slave_1) entered blocking state [ 1317.368832][T12147] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1317.399837][T20896] bridge0: port 1(bridge_slave_0) entered blocking state [ 1317.407146][T20896] bridge0: port 1(bridge_slave_0) entered disabled state [ 1317.414391][T20896] bridge_slave_0: entered allmulticast mode [ 1317.422573][T20896] bridge_slave_0: entered promiscuous mode [ 1317.435502][T20896] bridge0: port 2(bridge_slave_1) entered blocking state [ 1317.442755][T20896] bridge0: port 2(bridge_slave_1) entered disabled state [ 1317.450317][T20896] bridge_slave_1: entered allmulticast mode [ 1317.458284][T20896] bridge_slave_1: entered promiscuous mode [ 1317.552215][T20896] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1317.836883][T20896] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1318.683225][T20896] team0: Port device team_slave_0 added [ 1318.700018][T20896] team0: Port device team_slave_1 added [ 1322.184969][T20896] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1322.202275][T20896] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1322.232455][T20896] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1322.306778][T20896] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1322.316764][T20896] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1322.343728][T20896] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1322.604878][ T30] audit: type=1326 audit(1786111672.478:202): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21121 comm="syz.7.4617" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7ff78a59e0d9 code=0x0 [ 1323.092040][T20896] hsr_slave_0: entered promiscuous mode [ 1323.099858][T20896] hsr_slave_1: entered promiscuous mode [ 1323.109039][T20896] debugfs: 'hsr0' already exists in 'hsr' [ 1323.116748][T20896] Cannot create hsr debugfs directory [ 1323.400828][ T30] audit: type=1326 audit(1786111673.308:203): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21134 comm="syz.3.4620" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feca319e0d9 code=0x7ffc0000 [ 1323.452603][ T30] audit: type=1326 audit(1786111673.308:204): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21134 comm="syz.3.4620" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feca319e0d9 code=0x7ffc0000 [ 1323.510165][ T30] audit: type=1326 audit(1786111673.308:206): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21134 comm="syz.3.4620" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7feca319e0d9 code=0x7ffc0000 [ 1323.541172][ T30] audit: type=1326 audit(1786111673.308:205): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21134 comm="syz.3.4620" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feca319e0d9 code=0x7ffc0000 [ 1323.576476][ T30] audit: type=1326 audit(1786111673.308:207): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21134 comm="syz.3.4620" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feca319e0d9 code=0x7ffc0000 [ 1323.624737][ T30] audit: type=1326 audit(1786111673.308:208): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21134 comm="syz.3.4620" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feca319e0d9 code=0x7ffc0000 [ 1323.655683][ T30] audit: type=1326 audit(1786111673.308:209): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21134 comm="syz.3.4620" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feca319e0d9 code=0x7ffc0000 [ 1323.681490][ T30] audit: type=1326 audit(1786111673.308:210): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21134 comm="syz.3.4620" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feca319e0d9 code=0x7ffc0000 [ 1323.709141][ T30] audit: type=1326 audit(1786111673.308:211): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21134 comm="syz.3.4620" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7feca319e0d9 code=0x7ffc0000 [ 1323.974760][T20732] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 1324.129577][T20732] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1324.142249][T20732] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 1324.289320][T20732] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1324.314691][T20732] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 1325.132479][T20732] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1325.144847][T20732] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 1325.278820][T20732] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1325.348221][T20522] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1325.516937][T20522] 8021q: adding VLAN 0 to HW filter on device team0 [ 1325.600564][T20494] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1325.638493][T19272] bridge0: port 1(bridge_slave_0) entered blocking state [ 1325.645685][T19272] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1325.794038][T19277] bridge0: port 2(bridge_slave_1) entered blocking state [ 1325.801213][T19277] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1326.030524][T19261] bridge_slave_1: left allmulticast mode [ 1326.044746][T19261] bridge_slave_1: left promiscuous mode [ 1326.058394][T19261] bridge0: port 2(bridge_slave_1) entered disabled state [ 1326.180293][T19261] bridge_slave_0: left allmulticast mode [ 1326.200976][T19261] bridge_slave_0: left promiscuous mode [ 1326.216166][T19261] bridge0: port 1(bridge_slave_0) entered disabled state [ 1326.349465][T21177] netlink: 4 bytes leftover after parsing attributes in process `syz.7.4626'. [ 1326.374751][T19261] bridge_slave_1: left allmulticast mode [ 1326.380457][T19261] bridge_slave_1: left promiscuous mode [ 1326.387119][T19261] bridge0: port 2(bridge_slave_1) entered disabled state [ 1326.408561][T21179] netlink: 28 bytes leftover after parsing attributes in process `syz.7.4626'. [ 1326.456060][T19261] bridge_slave_0: left allmulticast mode [ 1326.461733][T19261] bridge_slave_0: left promiscuous mode [ 1326.474832][T19261] bridge0: port 1(bridge_slave_0) entered disabled state [ 1326.985354][T19261] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1327.045108][T19261] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1327.088326][T19261] bond0 (unregistering): Released all slaves [ 1327.279953][T19261] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1327.355203][T19261] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1327.396299][T19261] bond0 (unregistering): Released all slaves [ 1327.874639][T19261] hsr_slave_0: left promiscuous mode [ 1327.915602][T19261] hsr_slave_1: left promiscuous mode [ 1327.921557][T19261] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1327.955172][T19261] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1328.114667][T19261] hsr_slave_0: left promiscuous mode [ 1328.154589][T19261] hsr_slave_1: left promiscuous mode [ 1328.160792][T19261] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1328.205733][T19261] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1328.657154][T19261] team0 (unregistering): Port device team_slave_1 removed [ 1328.705249][T19261] team0 (unregistering): Port device team_slave_0 removed [ 1329.146829][T19261] team0 (unregistering): Port device team_slave_1 removed [ 1329.195384][T19261] team0 (unregistering): Port device team_slave_0 removed [ 1329.501145][T20732] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1329.592783][T20494] veth0_vlan: entered promiscuous mode [ 1329.620560][T20494] veth1_vlan: entered promiscuous mode [ 1329.663313][T21192] netdevsim netdevsim7: loading /lib/firmware/. failed with error -22 [ 1329.677072][T21192] netdevsim netdevsim7: Direct firmware load for . failed with error -22 [ 1329.678549][T20732] 8021q: adding VLAN 0 to HW filter on device team0 [ 1329.693891][T21192] netdevsim netdevsim7: Falling back to sysfs fallback for: . [ 1329.821308][T19277] bridge0: port 1(bridge_slave_0) entered blocking state [ 1329.828470][T19277] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1329.860376][T19256] bridge0: port 2(bridge_slave_1) entered blocking state [ 1329.867551][T19256] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1329.921770][T20494] veth0_macvtap: entered promiscuous mode [ 1330.064888][T20494] veth1_macvtap: entered promiscuous mode [ 1330.257299][T20494] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1330.350316][T20494] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1330.432530][T20522] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1330.493060][T20896] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 1330.579476][T20896] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1330.609413][T20896] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 1330.658794][T20896] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1330.672349][T20896] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 1330.755801][T20896] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1330.775221][T20896] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 1330.802715][T20896] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1330.824342][T19243] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1331.375479][T19268] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1332.093029][T19268] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1332.104899][ T5954] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1332.122369][T19268] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1332.293798][T19230] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1332.341010][T19230] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1332.355685][T19277] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1332.390975][T20896] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1332.497093][T20896] 8021q: adding VLAN 0 to HW filter on device team0 [ 1332.547809][T19277] bridge0: port 1(bridge_slave_0) entered blocking state [ 1332.554993][T19277] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1332.613693][T19277] bridge0: port 2(bridge_slave_1) entered blocking state [ 1332.620887][T19277] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1332.696997][T21252] netlink: 20 bytes leftover after parsing attributes in process `syz.6.4459'. [ 1332.732821][T20522] veth0_vlan: entered promiscuous mode [ 1333.342876][T21252] team0 (unregistering): Port device team_slave_0 removed [ 1335.149498][T21252] team0 (unregistering): Port device team_slave_1 removed [ 1335.560799][T20732] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1336.342186][T21270] block nbd0: shutting down sockets [ 1336.351463][ T5609] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1336.365677][ T5609] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1336.374983][ T5609] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1336.387880][ T5609] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1336.396776][ T5609] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1336.871213][T20732] veth0_vlan: entered promiscuous mode [ 1338.666058][ T5609] Bluetooth: hci1: command tx timeout [ 1339.050676][T20732] veth1_vlan: entered promiscuous mode [ 1340.237230][T21313] loop6: detected capacity change from 0 to 2048 [ 1340.359967][T21313] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1340.743863][ T5609] Bluetooth: hci1: command tx timeout [ 1340.838966][T20896] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1341.063450][T20732] veth0_macvtap: entered promiscuous mode [ 1341.118524][T20732] veth1_macvtap: entered promiscuous mode [ 1342.765402][T12287] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1342.780127][T12287] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1342.811163][T12287] Bluetooth: hci1: command tx timeout [ 1342.816897][T12287] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1342.831602][T12287] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1342.839393][T12287] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1342.982660][T20732] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1343.011836][T20732] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1343.813750][T19233] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1343.843692][T19233] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1343.914590][T19230] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1343.967442][T21283] wlan0 speed is unknown, defaulting to 1000 [ 1344.098408][T19268] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1344.584464][T21341] syzkaller0: entered promiscuous mode [ 1344.590047][T21341] syzkaller0: entered allmulticast mode [ 1344.894694][ T5609] Bluetooth: hci1: command tx timeout [ 1344.898643][T12287] Bluetooth: hci3: command tx timeout [ 1346.963803][T12287] Bluetooth: hci3: command tx timeout [ 1348.912556][ T5609] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1348.927006][ T5609] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1348.943919][ T5609] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1348.952613][ T5609] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1348.961900][ T5609] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1349.043527][T12287] Bluetooth: hci3: command tx timeout [ 1351.043956][T12287] Bluetooth: hci5: command tx timeout [ 1351.123699][T12287] Bluetooth: hci3: command tx timeout [ 1353.125030][T12287] Bluetooth: hci5: command tx timeout [ 1354.814818][ T5267] 8021q: adding VLAN 0 to HW filter on device eth5 [ 1355.203608][T12287] Bluetooth: hci5: command tx timeout [ 1356.833966][T21410] overlayfs: workdir and upperdir must be separate subtrees [ 1357.282867][T12287] Bluetooth: hci5: command tx timeout [ 1358.206699][ T5267] 8021q: adding VLAN 0 to HW filter on device eth6 [ 1358.621998][T20896] veth0_vlan: entered promiscuous mode [ 1358.817044][T20896] veth1_vlan: entered promiscuous mode [ 1359.156413][T20896] veth0_macvtap: entered promiscuous mode [ 1359.300767][T21338] wlan0 speed is unknown, defaulting to 1000 [ 1359.816788][ T30] kauditd_printk_skb: 40 callbacks suppressed [ 1359.816838][ T30] audit: type=1326 audit(1786111709.580:252): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21426 comm="syz.6.4646" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f763d39e0d9 code=0x7ffc0000 [ 1360.372010][T20896] veth1_macvtap: entered promiscuous mode [ 1360.431373][T20896] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1360.535640][T20896] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1360.543731][ T30] audit: type=1326 audit(1786111709.580:253): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21426 comm="syz.6.4646" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f763d39e0d9 code=0x7ffc0000 [ 1360.570770][ T30] audit: type=1326 audit(1786111709.590:254): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21426 comm="syz.6.4646" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f763d35e90e code=0x7ffc0000 [ 1360.643205][ T30] audit: type=1326 audit(1786111709.590:255): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21426 comm="syz.6.4646" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f763d39e0d9 code=0x7ffc0000 [ 1360.722672][ T30] audit: type=1326 audit(1786111709.600:256): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21426 comm="syz.6.4646" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f763d39e0d9 code=0x7ffc0000 [ 1360.750530][ T30] audit: type=1326 audit(1786111709.600:257): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21426 comm="syz.6.4646" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f763d39e0d9 code=0x7ffc0000 [ 1360.776301][ T30] audit: type=1326 audit(1786111709.610:258): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21426 comm="syz.6.4646" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f763d39e0d9 code=0x7ffc0000 [ 1360.814083][ T30] audit: type=1326 audit(1786111709.610:259): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21426 comm="syz.6.4646" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f763d39e0d9 code=0x7ffc0000 [ 1360.872660][ T30] audit: type=1326 audit(1786111709.610:260): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21426 comm="syz.6.4646" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=204 compat=0 ip=0x7f763d39e0d9 code=0x7ffc0000 [ 1360.892904][T19272] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1360.902249][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 1360.913013][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 1360.944346][ T30] audit: type=1326 audit(1786111709.610:261): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21426 comm="syz.6.4646" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f763d39e0d9 code=0x7ffc0000 [ 1361.083488][T19272] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1361.097598][T21445] syz_tun: entered allmulticast mode [ 1361.518825][ T13] bridge_slave_1: left allmulticast mode [ 1361.525166][ T13] bridge_slave_1: left promiscuous mode [ 1361.533508][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 1361.594916][ T13] bridge_slave_0: left allmulticast mode [ 1361.600619][ T13] bridge_slave_0: left promiscuous mode [ 1361.607148][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 1364.641685][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1364.668857][ T5609] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 1364.686697][ T5609] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 1364.694782][ T5609] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 1364.704396][ T5609] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 1364.716653][ T5609] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 1364.902943][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1364.924023][ T13] bond0 (unregistering): Released all slaves [ 1364.963317][T21380] wlan0 speed is unknown, defaulting to 1000 [ 1364.979322][T21441] syz_tun: left allmulticast mode [ 1364.995539][ T5267] 8021q: adding VLAN 0 to HW filter on device eth7 [ 1365.012460][T19233] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1365.283296][ T1110] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1365.522447][ T5338] usb 8-1: new high-speed USB device number 17 using dummy_hcd [ 1366.226050][ T13] hsr_slave_0: left promiscuous mode [ 1366.266568][ T13] hsr_slave_1: left promiscuous mode [ 1366.291484][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1366.341622][ T5338] usb 8-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1366.360354][ T5338] usb 8-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 1366.370794][ T5338] usb 8-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1366.371700][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1366.381806][ T5338] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1366.429046][T21476] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22 [ 1366.485986][ T13] veth0_vlan: left promiscuous mode [ 1366.805459][ T5609] Bluetooth: hci6: command tx timeout [ 1366.921088][ T5338] usb 8-1: Quirk or no altset; falling back to MIDI 1.0 [ 1367.292980][ T13] team0 (unregistering): Port device team_slave_1 removed [ 1367.334752][ T13] team0 (unregistering): Port device team_slave_0 removed [ 1367.489914][T21476] IPVS: ip_vs_add_dest(): lower threshold is higher than upper threshold [ 1367.519262][T20095] usb 8-1: USB disconnect, device number 17 [ 1367.986388][T21489] bridge0: port 2(bridge_slave_1) entered disabled state [ 1367.994108][T21489] bridge0: port 1(bridge_slave_0) entered disabled state [ 1368.559354][T21518] netlink: 'syz.7.4651': attribute type 10 has an invalid length. [ 1368.571536][T21518] netlink: 40 bytes leftover after parsing attributes in process `syz.7.4651'. [ 1368.699384][T21489] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1368.716546][T21489] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1368.882233][ T5609] Bluetooth: hci6: command tx timeout [ 1369.638677][T21524] [ 1369.641020][T21524] ====================================================== [ 1369.648020][T21524] WARNING: possible circular locking dependency detected [ 1369.655027][T21524] syzkaller #0 Tainted: G L [ 1369.660986][T21524] ------------------------------------------------------ [ 1369.667983][T21524] syz.6.4652/21524 is trying to acquire lock: [ 1369.674040][T21524] ffffffff901cc728 (gadget_subsys.su_mutex){+.+.}-{4:4}, at: uvcg_streaming_header_allow_link+0x7c/0x650 [ 1369.685314][T21524] [ 1369.685314][T21524] but task is already holding lock: [ 1369.692673][T21524] ffff8880528cd900 (&sb->s_type->i_mutex_key#47){++++}-{4:4}, at: configfs_symlink+0x3c0/0x11f0 [ 1369.703166][T21524] [ 1369.703166][T21524] which lock already depends on the new lock. [ 1369.703166][T21524] [ 1369.713559][T21524] [ 1369.713559][T21524] the existing dependency chain (in reverse order) is: [ 1369.722562][T21524] [ 1369.722562][T21524] -> #2 (&sb->s_type->i_mutex_key#47){++++}-{4:4}: [ 1369.731295][T21524] lock_acquire+0x1b9/0x370 [ 1369.736343][T21524] down_write+0x8b/0x1f0 [ 1369.741131][T21524] configfs_depend_item_unlocked+0xf3/0x6a0 [ 1369.747551][T21524] usbg_make_tpg+0x261/0x620 [ 1369.752675][T21524] target_fabric_make_tpg+0xab/0x8c0 [ 1369.758501][T21524] configfs_mkdir+0x51e/0xb70 [ 1369.763711][T21524] vfs_mkdir+0x361/0x850 [ 1369.768483][T21524] filename_mkdirat+0x48b/0x5e0 [ 1369.773875][T21524] __x64_sys_mkdirat+0x89/0xc0 [ 1369.779187][T21524] do_syscall_64+0x115/0x870 [ 1369.784315][T21524] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1369.790733][T21524] [ 1369.790733][T21524] -> #1 (&opts->dep_lock){+.+.}-{4:4}: [ 1369.798402][T21524] lock_acquire+0x1b9/0x370 [ 1369.803436][T21524] __mutex_lock+0x1a4/0x1bd0 [ 1369.808567][T21524] tcm_set_name+0x29/0xb0 [ 1369.813427][T21524] function_make+0x21c/0x3f0 [ 1369.818555][T21524] configfs_mkdir+0x51e/0xb70 [ 1369.823763][T21524] vfs_mkdir+0x361/0x850 [ 1369.828532][T21524] filename_mkdirat+0x48b/0x5e0 [ 1369.833923][T21524] __x64_sys_mkdirat+0x89/0xc0 [ 1369.839232][T21524] do_syscall_64+0x115/0x870 [ 1369.844360][T21524] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1369.850777][T21524] [ 1369.850777][T21524] -> #0 (gadget_subsys.su_mutex){+.+.}-{4:4}: [ 1369.859050][T21524] check_prev_add+0xeb/0xe60 [ 1369.864167][T21524] __lock_acquire+0x136c/0x1a40 [ 1369.869543][T21524] lock_acquire+0x1b9/0x370 [ 1369.874574][T21524] __mutex_lock+0x1a4/0x1bd0 [ 1369.879701][T21524] uvcg_streaming_header_allow_link+0x7c/0x650 [ 1369.886394][T21524] configfs_symlink+0x540/0x11f0 [ 1369.891861][T21524] vfs_symlink+0x178/0x4d0 [ 1369.896802][T21524] filename_symlinkat+0x2a6/0x560 [ 1369.902372][T21524] __x64_sys_symlinkat+0x9c/0xe0 [ 1369.907856][T21524] do_syscall_64+0x115/0x870 [ 1369.913006][T21524] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1369.919425][T21524] [ 1369.919425][T21524] other info that might help us debug this: [ 1369.919425][T21524] [ 1369.929640][T21524] Chain exists of: [ 1369.929640][T21524] gadget_subsys.su_mutex --> &opts->dep_lock --> &sb->s_type->i_mutex_key#47 [ 1369.929640][T21524] [ 1369.944367][T21524] Possible unsafe locking scenario: [ 1369.944367][T21524] [ 1369.951800][T21524] CPU0 CPU1 [ 1369.957148][T21524] ---- ---- [ 1369.962498][T21524] lock(&sb->s_type->i_mutex_key#47); [ 1369.967970][T21524] lock(&opts->dep_lock); [ 1369.974906][T21524] lock(&sb->s_type->i_mutex_key#47); [ 1369.982905][T21524] lock(gadget_subsys.su_mutex); [ 1369.987944][T21524] [ 1369.987944][T21524] *** DEADLOCK *** [ 1369.987944][T21524] [ 1369.996070][T21524] 2 locks held by syz.6.4652/21524: [ 1370.001256][T21524] #0: ffff88801e3d2450 (sb_writers#35){.+.+}-{0:0}, at: filename_create+0x10d/0x400 [ 1370.010803][T21524] #1: ffff8880528cd900 (&sb->s_type->i_mutex_key#47){++++}-{4:4}, at: configfs_symlink+0x3c0/0x11f0 [ 1370.021743][T21524] [ 1370.021743][T21524] stack backtrace: [ 1370.027626][T21524] CPU: 1 UID: 0 PID: 21524 Comm: syz.6.4652 Tainted: G L syzkaller #0 PREEMPT(full) [ 1370.027675][T21524] Tainted: [L]=SOFTLOCKUP [ 1370.027688][T21524] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 1370.027708][T21524] Call Trace: [ 1370.027719][T21524] [ 1370.027732][T21524] dump_stack_lvl+0x100/0x190 [ 1370.027771][T21524] print_circular_bug.cold+0x178/0x1c7 [ 1370.027829][T21524] check_noncircular+0x146/0x160 [ 1370.027872][T21524] check_prev_add+0xeb/0xe60 [ 1370.027907][T21524] ? __pfx_stack_trace_save+0x10/0x10 [ 1370.027985][T21524] __lock_acquire+0x136c/0x1a40 [ 1370.028028][T21524] ? kmem_cache_free+0x127/0x6b0 [ 1370.028079][T21524] lock_acquire+0x1b9/0x370 [ 1370.028117][T21524] ? uvcg_streaming_header_allow_link+0x7c/0x650 [ 1370.028168][T21524] ? __pfx___might_resched+0x10/0x10 [ 1370.028212][T21524] __mutex_lock+0x1a4/0x1bd0 [ 1370.028262][T21524] ? uvcg_streaming_header_allow_link+0x7c/0x650 [ 1370.028312][T21524] ? uvcg_streaming_header_allow_link+0x7c/0x650 [ 1370.028360][T21524] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1370.028402][T21524] ? __lock_acquire+0x49f/0x1a40 [ 1370.028444][T21524] ? __pfx___mutex_lock+0x10/0x10 [ 1370.028504][T21524] ? __pfx___might_resched+0x10/0x10 [ 1370.028541][T21524] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1370.028583][T21524] ? make_vfsgid+0xf1/0x140 [ 1370.028631][T21524] ? uvcg_streaming_header_allow_link+0x7c/0x650 [ 1370.028679][T21524] uvcg_streaming_header_allow_link+0x7c/0x650 [ 1370.028728][T21524] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1370.028770][T21524] ? inode_permission+0x374/0x620 [ 1370.028806][T21524] ? mntput_no_expire+0xe7/0x220 [ 1370.028857][T21524] configfs_symlink+0x540/0x11f0 [ 1370.028902][T21524] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1370.028948][T21524] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1370.028990][T21524] ? security_inode_permission+0xbf/0x250 [ 1370.029034][T21524] ? __pfx_configfs_symlink+0x10/0x10 [ 1370.029079][T21524] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1370.029125][T21524] vfs_symlink+0x178/0x4d0 [ 1370.029161][T21524] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1370.029207][T21524] filename_symlinkat+0x2a6/0x560 [ 1370.029266][T21524] ? __pfx_filename_symlinkat+0x10/0x10 [ 1370.029324][T21524] ? strncpy_from_user+0x19d/0x2d0 [ 1370.029375][T21524] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1370.029418][T21524] ? do_getname+0x191/0x390 [ 1370.029455][T21524] __x64_sys_symlinkat+0x9c/0xe0 [ 1370.029513][T21524] do_syscall_64+0x115/0x870 [ 1370.029565][T21524] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1370.029602][T21524] RIP: 0033:0x7f763d39e0d9 [ 1370.029628][T21524] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1370.029663][T21524] RSP: 002b:00007f763e2e2028 EFLAGS: 00000246 ORIG_RAX: 000000000000010a [ 1370.029694][T21524] RAX: ffffffffffffffda RBX: 00007f763d625fa0 RCX: 00007f763d39e0d9 [ 1370.029718][T21524] RDX: 0000200000001600 RSI: ffffffffffffff9c RDI: 0000200000001500 [ 1370.029741][T21524] RBP: 00007f763d435024 R08: 0000000000000000 R09: 0000000000000000 [ 1370.029764][T21524] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 1370.029785][T21524] R13: 00007f763d626038 R14: 00007f763d625fa0 R15: 00007ffc17844308 [ 1370.029820][T21524] [ 1370.374129][T21518] bridge0: port 3(dummy0) entered blocking state [ 1370.380515][T21518] bridge0: port 3(dummy0) entered disabled state [ 1370.386972][T21518] dummy0: entered allmulticast mode [ 1370.393007][T21518] dummy0: entered promiscuous mode [ 1370.398425][T21518] bridge0: port 3(dummy0) entered blocking state [ 1370.404802][T21518] bridge0: port 3(dummy0) entered forwarding state [ 1370.431524][T19243] netdevsim netdevsim6 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1370.442294][T19243] netdevsim netdevsim6 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1370.451734][T19243] netdevsim netdevsim6 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1370.497559][T21283] bridge0: port 1(bridge_slave_0) entered blocking state [ 1370.504740][T21283] bridge0: port 1(bridge_slave_0) entered disabled state [ 1370.511959][T21283] bridge_slave_0: entered allmulticast mode [ 1370.519135][T21283] bridge_slave_0: entered promiscuous mode [ 1370.526918][T21283] bridge0: port 2(bridge_slave_1) entered blocking state [ 1370.534025][T21283] bridge0: port 2(bridge_slave_1) entered disabled state [ 1370.541170][T21283] bridge_slave_1: entered allmulticast mode [ 1370.548166][T21283] bridge_slave_1: entered promiscuous mode [ 1370.672660][T19261] netdevsim netdevsim6 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1370.712087][T21459] wlan0 speed is unknown, defaulting to 1000 [ 1370.962115][ T5609] Bluetooth: hci6: command tx timeout [ 1371.286478][ T5267] 8021q: adding VLAN 0 to HW filter on device eth1 [ 1372.174051][ T5267] 8021q: adding VLAN 0 to HW filter on device eth2 [ 1372.558750][T19277] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1372.777619][T19277] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1372.812938][ T5267] 8021q: adding VLAN 0 to HW filter on device eth3 [ 1372.987022][T19277] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1373.133255][T19277] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1373.188991][ T5267] 8021q: adding VLAN 0 to HW filter on device eth8 [ 1373.989724][T19277] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1374.089277][T19277] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1374.253615][T19277] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1374.395024][T19277] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1374.725921][T19277] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1374.876631][T19277] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1375.024854][T19277] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1375.183591][T19277] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1375.463283][T19277] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1375.622683][T19277] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1375.855734][T19277] bond0: (slave netdevsim1): Releasing backup interface [ 1375.875414][T19277] netdevsim netdevsim3 netdevsim1 (unregistering): left allmulticast mode [ 1375.885708][T19277] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1376.027794][T19277] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1376.322194][T19277] dummy0: left allmulticast mode [ 1376.327242][T19277] dummy0: left promiscuous mode [ 1376.333255][T19277] bridge0: port 3(dummy0) entered disabled state [ 1376.412169][T19277] bridge_slave_1: left allmulticast mode [ 1376.417815][T19277] bridge_slave_1: left promiscuous mode [ 1376.423741][T19277] bridge0: port 2(bridge_slave_1) entered disabled state [ 1376.482963][T19277] bridge_slave_0: left allmulticast mode [ 1376.488606][T19277] bridge_slave_0: left promiscuous mode [ 1376.494340][T19277] bridge0: port 1(bridge_slave_0) entered disabled state [ 1376.593627][T19277] bridge_slave_1: left allmulticast mode [ 1376.599280][T19277] bridge_slave_1: left promiscuous mode [ 1376.605050][T19277] bridge0: port 2(bridge_slave_1) entered disabled state [ 1376.672284][T19277] bridge_slave_0: left allmulticast mode [ 1376.677951][T19277] bridge_slave_0: left promiscuous mode [ 1376.683823][T19277] bridge0: port 1(bridge_slave_0) entered disabled state [ 1376.821856][T19277] bridge_slave_1: left allmulticast mode [ 1376.827526][T19277] bridge_slave_1: left promiscuous mode [ 1376.833311][T19277] bridge0: port 2(bridge_slave_1) entered disabled state [ 1376.892308][T19277] bridge_slave_0: left allmulticast mode [ 1376.898003][T19277] bridge_slave_0: left promiscuous mode [ 1376.903833][T19277] bridge0: port 1(bridge_slave_0) entered disabled state [ 1377.021911][T19277] bridge_slave_1: left allmulticast mode [ 1377.027608][T19277] bridge_slave_1: left promiscuous mode [ 1377.033410][T19277] bridge0: port 2(bridge_slave_1) entered disabled state [ 1377.112423][T19277] bridge_slave_0: left allmulticast mode [ 1377.118097][T19277] bridge_slave_0: left promiscuous mode [ 1377.124010][T19277] bridge0: port 1(bridge_slave_0) entered disabled state [ 1377.233657][T19277] bridge_slave_1: left allmulticast mode [ 1377.239331][T19277] bridge_slave_1: left promiscuous mode [ 1377.245070][T19277] bridge0: port 2(bridge_slave_1) entered disabled state [ 1377.322473][T19277] bridge_slave_0: left allmulticast mode [ 1377.328158][T19277] bridge_slave_0: left promiscuous mode [ 1377.333933][T19277] bridge0: port 1(bridge_slave_0) entered disabled state [ 1377.433839][T19277] bridge_slave_1: left allmulticast mode [ 1377.439522][T19277] bridge_slave_1: left promiscuous mode [ 1377.445683][T19277] bridge0: port 2(bridge_slave_1) entered disabled state [ 1377.512281][T19277] bridge_slave_0: left allmulticast mode [ 1377.517933][T19277] bridge_slave_0: left promiscuous mode [ 1377.524258][T19277] bridge0: port 1(bridge_slave_0) entered disabled state [ 1378.022071][T19277] bond2 (unregistering): (slave ip6gretap1): Releasing active interface [ 1378.103731][T19277] bond1 (unregistering): (slave geneve2): Releasing active interface [ 1378.272489][T19277] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1378.291835][T19277] bond_slave_0: left allmulticast mode [ 1378.332011][T19277] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1378.351906][T19277] bond_slave_1: left allmulticast mode [ 1378.357919][T19277] bond0 (unregistering): Released all slaves [ 1378.411996][T19277] bond1 (unregistering): Released all slaves [ 1378.423441][T19277] bond2 (unregistering): Released all slaves [ 1378.434764][T19277] bond3 (unregistering): Released all slaves [ 1378.481811][T19277] bond0 (unregistering): Released all slaves [ 1378.551213][T19277] bond0 (unregistering): Released all slaves [ 1378.792120][T19277] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1378.862070][T19277] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1378.872651][T19277] bond0 (unregistering): Released all slaves [ 1379.044091][T19277] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1379.112725][T19277] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1379.162890][T19277] bond0 (unregistering): Released all slaves [ 1379.462072][T19277] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1379.501918][T19277] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1379.522662][T19277] bond0 (unregistering): Released all slaves