last executing test programs: 16.778917839s ago: executing program 0 (id=1): futex(&(0x7f00000006c0)=0x2, 0x0, 0x2, &(0x7f0000000140)={0x77359400}, 0x0, 0x80000002) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000100)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x3938700}, {0x0, 0x3938700}}, 0x0) r0 = gettid() rt_sigaction(0x16, &(0x7f0000000080)={0x0, 0x90000003, 0x0}, 0x0, 0x8, &(0x7f0000000200)) tkill(r0, 0x16) 16.680521871s ago: executing program 2 (id=3): openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000001000000000000ea04850000007b00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1000003, 0x13, r2, 0x0) ioperm(0x284, 0x7f, 0xe3) ioperm(0x7fffffff, 0x1, 0x8) socket$netlink(0x10, 0x3, 0x0) gettid() prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r4 = dup(r3) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) r5 = syz_io_uring_setup(0x7aad, &(0x7f0000000740)={0x0, 0x1c2a, 0x10100, 0x0, 0x0, 0x0, r4}, &(0x7f0000000180)=0x0, &(0x7f00000001c0)=0x0) r8 = add_key$keyring(&(0x7f0000000180), &(0x7f00000001c0)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff) r9 = add_key$keyring(&(0x7f0000002900), &(0x7f0000002940)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffc) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r8, &(0x7f00000028c0)='asymmetric\x00', &(0x7f0000002980)=@keyring={'key_or_keyring:', r9}) keyctl$get_persistent(0x16, 0x0, r8) syz_io_uring_submit(r6, r7, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd=r3, 0x0, 0x0, 0x0, {}, 0x1}) io_uring_enter(r5, 0x2ded, 0xef92, 0x0, 0x0, 0x0) r10 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) connect$llc(r10, &(0x7f0000000180)={0x1a, 0x0, 0xf9, 0x8, 0x0, 0x0, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x3e}}, 0x10) readv(r10, &(0x7f0000000100)=[{&(0x7f0000001180)=""/4085, 0xff5}], 0x1) r11 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000340), 0xffffffffffffffff) r12 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_BEARER_GET(r12, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f0000000c40)={&(0x7f00000000c0)={0x14, r11, 0x705, 0x70bd26, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x40040}, 0x4000) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000000c0)={[0x1, 0x0, 0x7, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x5, 0x6, 0x1], 0xd5d5c004, 0x8340}) fsmount(0xffffffffffffffff, 0x0, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4040aea0, &(0x7f0000000080)=@x86={0x80, 0x4, 0x5, 0x0, 0x9, 0x5, 0x40, 0x7, 0x6, 0x4, 0xf9, 0x8, 0x0, 0x0, 0x5, 0x2, 0x4, 0x3, 0x4, '\x00', 0x4, 0x9}) 16.436729944s ago: executing program 0 (id=6): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) r0 = syz_open_dev$MSR(&(0x7f0000000140), 0x0, 0x0) read$msr(r0, &(0x7f0000002700)=""/102392, 0x18ff8) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x22400) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r2}, 0x10) syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x127081) close(r1) r3 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080), 0x0, &(0x7f0000000700)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {'wfdno', 0x3d, r3}}) r5 = openat$audio(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$SNDCTL_DSP_CHANNELS(r5, 0xc0045006, &(0x7f0000000080)=0x7f) ioctl$SNDCTL_DSP_SPEED(r5, 0xc0045002, &(0x7f00000000c0)=0x6) read$dsp(r5, &(0x7f00000011c0)=""/4117, 0x200021d5) 15.361780056s ago: executing program 2 (id=7): prlimit64(0x0, 0xe, 0x0, 0x0) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0x4008af12, &(0x7f0000000080)={0x1, 0x7f}) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000180)=""/53, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/247, &(0x7f00000000c0)=""/87, &(0x7f0000000800)=""/90}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000680)) ioctl$VHOST_SET_VRING_ERR(r0, 0x4008af22, &(0x7f00000002c0)={0x1, r1}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000340)=0x1) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r1, 0xc400941d, &(0x7f0000000380)={0x0, 0x1fffe000000}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000032680)=""/102392, 0x18ff8) pipe(0x0) epoll_create1(0x0) 15.149751533s ago: executing program 4 (id=5): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x4e20, @empty}], 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e78, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{}, 0x80}}]}, {0x2}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x800}, 0x40000) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000003c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x141) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="56c78e3c733d76697274696f2c6e6f657874656e642c6163638173733d616e792c63616368653d667363616368652c"]) chdir(&(0x7f0000000300)='./file0\x00') ioprio_set$pid(0x2, 0x0, 0x4007) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)=ANY=[], 0xf8}}, 0x0) keyctl$clear(0x7, 0xfffffffffffffffb) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x104}}, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x4e20, @local}]}, &(0x7f0000000100)=0x10) recvmsg(r0, &(0x7f00000027c0)={0x0, 0x0, 0x0}, 0x100) r5 = syz_open_dev$sndctrl(&(0x7f0000000100), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r5, 0xc1105517, &(0x7f0000000340)={{0x0, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x6, 0x0, 0x4, 0x0, 0x59, 0x0, 'syz1\x00', 0x0}) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r5, 0xc1105518, &(0x7f0000000040)={{0x0, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x1, [0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000000000000, 0x0, 0xfffffffffffffffe, 0x8, 0x0, 0x5, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x3, 0x0, 0x0, 0x7f, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x20000000, 0x0, 0x4, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x800000, 0x0, 0x101, 0x0, 0xd721, 0x0, 0x4, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x3]}) 13.367284534s ago: executing program 4 (id=8): syz_usb_connect$lan78xx(0x0, 0x3f, &(0x7f0000000040)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0x424, 0x7850, 0x0, 0x1, 0x2, 0x3, 0x1}}, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xd) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000300)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb4d, 0x9, 0x8, 0x0, 0x3}, 0x0) ioctl$TCFLSH(r0, 0x540b, 0x2) syz_pidfd_open(0x0, 0x0) getsockopt$sock_buf(r2, 0x1, 0x1a, &(0x7f00000023c0)=""/4096, &(0x7f00000033c0)=0x1000) semget$private(0x0, 0x4000000009, 0x0) mount$fuseblk(0x0, &(0x7f0000000180)='./cgroup/cgroup.procs\x00', &(0x7f00000001c0), 0x901000, 0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) write$FUSE_INIT(0xffffffffffffffff, 0x0, 0x0) r3 = socket$inet(0x2, 0x3, 0x4) socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'team_slave_0\x00'}) openat$mice(0xffffffffffffff9c, &(0x7f00000000c0), 0x7401) 12.952358873s ago: executing program 1 (id=2): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r4 = dup(r3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x13, r4, 0x2000) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x2) ioctl$KVM_PRE_FAULT_MEMORY(r2, 0xc040aed5, &(0x7f00000000c0)={0xf000, 0x118000}) 12.508590874s ago: executing program 3 (id=4): creat(&(0x7f00000002c0)='./file0\x00', 0x51) pipe2$9p(&(0x7f0000001900)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000500)=ANY=[@ANYBLOB="1500000065ffff048000000800395032303030"], 0x15) r2 = dup(r1) sendmsg$NFNL_MSG_CTHELPER_GET(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="4400000001090400000000000000000001000004300002002c00018014000300fe88000000000000000000000000000114"], 0x44}, 0x1, 0x0, 0x0, 0x10000000}, 0x8) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@cache_readahead}], [], 0x6b}}) truncate(&(0x7f0000000240)='./file0\x00', 0x206b12) openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xa2f00, 0xa3) 12.386971684s ago: executing program 2 (id=9): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) pipe(&(0x7f00000000c0)) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg(r1, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb4b, 0x9, 0x8, 0x0, 0x400003}, 0x0) syz_usb_connect(0x0, 0x5f, 0x0, 0x0) rt_sigaction(0x8, &(0x7f0000000080)={&(0x7f0000000200)="2437460f1c2bc4a2f99c9022000000c4a2f1002746c44179700d32233333a738e7c44240f29a3b470000a5c4c4a14d590c9736fe0d094e486ff5f5bb559a00000f75bed5370b1c2665d2950e000000db37", 0x88000007, 0x0}, 0x0, 0x8, &(0x7f0000000300)) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='stat\x00') lseek(r2, 0x9, 0x0) r3 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) write$6lowpan_control(0xffffffffffffffff, &(0x7f0000000180)='connect aa:aa:aa:aa:aa:11 0', 0x1b) r4 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000015c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x21}]}, @NFT_MSG_NEWSETELEM={0x30, 0x1e, 0xa, 0x105, 0x0, 0x0, {0x7, 0x0, 0x7}, [@NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x10, 0x3, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}]}]}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xb4}}, 0x0) r6 = inotify_init1(0x0) inotify_add_watch(r6, &(0x7f0000000180)='./control\x00', 0x64000ba6) inotify_add_watch(r6, &(0x7f0000000180)='./control\x00', 0xa4000960) ioctl$SNDCTL_DSP_SETFRAGMENT(r4, 0xc004500a, &(0x7f0000000000)=0xffff0018) r7 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_UNISCRNMAP(r7, 0x4b46, &(0x7f00000000c0)) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r8, 0x0, 0x40080) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_FLUSH(r9, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000680), 0x40000, 0x19) sched_setattr(r3, &(0x7f00000001c0)={0x38, 0x3, 0xc, 0x101, 0x6, 0x7, 0x6b4, 0x510000000, 0x6, 0x40}, 0x0) setsockopt$RXRPC_SECURITY_KEY(0xffffffffffffffff, 0x110, 0xffe, 0x0, 0x0) 11.77083455s ago: executing program 1 (id=10): syz_emit_vhci(&(0x7f0000002680)=ANY=[@ANYBLOB="04040a"], 0xd) 11.588967911s ago: executing program 3 (id=11): r0 = openat$dlm_control(0xffffffffffffff9c, 0x0, 0xad82, 0x0) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x1) openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000540), 0x6700, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, 0x0, 0x0) mknod(0x0, 0x8001420, 0x0) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x80000000000002, &(0x7f0000000180)=0x7a, 0x4) syz_emit_ethernet(0x3a, &(0x7f00000004c0)={@random="a579bbcb1e8e", @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x3, 0x0, 0x2c, 0x0, 0x0, 0x0, 0x4, 0x0, @empty=0xe0, @multicast1}, {0x0, 0x0, 0x18, 0x0, @wg=@data}}}}}, 0x0) bind$inet(r3, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r3, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f0000000100)='bbr\x00', 0x4) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r0) sendto$inet(r3, &(0x7f0000000300)="0906c422e0243219ff7b440e76a1b51b82ba23599f81b52c9d4db4486cec105e4b9f0f859f8a43eef6352f1e46e3145089b6a22f618ca14e288029b613a329c422481c6b7aff6806bce699cea461ecf591d9018b2a1d84e389a8d3127fd35913fe69754435c2", 0xffffffffffffffbb, 0x40040011, 0x0, 0x0) 11.225902705s ago: executing program 1 (id=12): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, 0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x84042, 0x0) r1 = socket$inet6_sctp(0xa, 0x801, 0x84) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x5, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x7, 0x81}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000440), 0x2, 0x0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) fsmount(0xffffffffffffffff, 0x0, 0x0) write$cgroup_pressure(0xffffffffffffffff, &(0x7f0000000040)={'some', 0x20, 0x17e, 0x20, 0x100002}, 0x2f) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0x141a82, 0x0) write$cgroup_int(r4, &(0x7f0000000040)=0x900, 0x12) sendmmsg$inet6(r1, &(0x7f0000000580)=[{{&(0x7f0000000140)={0xa, 0x4e20, 0x9, @private2={0xfc, 0x2, '\x00', 0x1}, 0x5}, 0x1c, &(0x7f0000000b40)=[{0x0}], 0x1}}, {{&(0x7f0000000180)={0xa, 0x4e24, 0xff, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x1}, 0x1c, &(0x7f0000000400)}}], 0x2, 0x0) r5 = syz_open_dev$loop(&(0x7f0000000080), 0x40000047ffffe, 0x1a2c42) ioctl$LOOP_CONFIGURE(r5, 0x4c0a, &(0x7f0000001ac0)={r0, 0x2000, {0x0, 0x0, 0x0, 0x1, 0x140000, 0x0, 0x0, 0x1e, 0x4, "339f020bbe82b398000000000000000000000d0ec0c1b4e9b1c4369d03748a50ceaac594b1b300000000c1c50d38ef2a565ef1e83323691c58d66500", "a9103939c787a16c1ca43f80026d1a8554fe581b59ded130e04d528539f3d3289737f0374c72a964a02447a75df8a69ea917deb7ba193b3e7772fd29f35239d2", "24431a1e770a00000000000000930606f9000000000f000000000600"}}) r6 = dup(r5) write$UHID_INPUT(r6, &(0x7f0000001c00)={0x8, {"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", 0x1000}}, 0xfffffe38) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r7 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x40, 0x0) readv(r7, &(0x7f0000000200)=[{&(0x7f00000023c0)=""/136, 0x88}], 0x1) 10.939136272s ago: executing program 0 (id=13): r0 = socket$netlink(0x10, 0x3, 0xf) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x802, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_DEVICE_ATTR(r4, 0x4018aee1, &(0x7f0000000100)=@attr_other={0x0, 0x7, 0x4000000000e, &(0x7f0000000040)=0x9}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r5 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r6, 0x8923, &(0x7f0000000000)={'veth0_vlan\x00', @random="0134014010ff"}) fcntl$addseals(r1, 0x409, 0x9) writev(r5, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[], 0x50) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount$afs(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='dyn']) renameat2(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', r0, &(0x7f0000000180)='./file5\x00', 0x3) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000004140)=ANY=[@ANYBLOB="02000000040000", @ANYBLOB="000000000000000018004a28e495d6e91be6fb1d9a20ff730e5fe4621b8768b5fa24cef6efd89d5718fc89b68d3ccbb4ca7dc7d615408663367bd98415", @ANYBLOB="1f15c2663936d0145be26d7ea8653335edd2c09ae5d13b36b3b2bc2aa842eff83a79fdd5ee1df58091818dbb6626a40810775e9d28a17419d6bd9352db10ad75b1f266d7981e716ed50c327f3f47b39900b4cbf7c9c986326f64e1ae288183b5f805cb2d8ad8c4a5500ecccf633d269f00c8cdfe3e0f667b511e50e4298f7884adc92b88f6a77285de48a88e0a92f57d1868982854595982fa60f18770cf39291bcf95ef86b88afee986d75ae1aebb530030166ea2a20e1133989ff904bd411675d89d9827261ed3044e5d1f0b114a6a434a92dd433ac0e84d55ff09fe13469fbfe12bb093f01635f55d4943abe6e949539a7dc64167b725e4c1b4cd8fcb52b989174ffb58e85ab2af3d46538d616af5adc3f936c5b86b2a0afec1039716c381200e26603dd9844570ab737cfc65bb147eab3863834ee8f971f1d23fde1d8586681f97b9fc715b9b81211ba0a3638565a6e389c01608080909f0b3a7ca675f52922e19cf40b1ef127bc79b0ea80671e74c326fe22e0115d3f3dff88f7ed2c313648d28c6fc8e218b528b56b1af9d2b4a898abf8f5638aedc49b9ccab69fc1d179f22d0b58093e67cddf2af12c8bc3016217ec8de0c2a191bdee789111014395b73a35000de9a4d44e974067e22773d569be4e0731f9347536dcb7a6ac924958cd9b299c67b09b9e0fb8673c596b53ff6b9714d5a86b833176b9b4c57b907a807e2505c73977a16a6f30fb3f821ed46256832c57df3b42e7cbbcf3de0fc09d6eb78d0e1d0afd002940fa0d4aa1e7e11e01b410d9a6f9dbee760f81329772033b1045649907c80d89e86adbd860a5ce55b9ca9a5fbef774be0b084746640a8ada57a684ac3f6e61d64eb766f5c0dfd9c4c2553c8fea17be7a2c438f2445198feab6149085e002482a655809b5fb523dad38bc22a506871a7f749e6dd32c25d12dd3cef6257aec8a684e87c380cf21d961dcc6a19997f07c655e0bfa1d7944b71281becac52b6d1cf6929abb6ed4f36b33a2340a18f1044159e623a592f0d9bfbea1fc66dd71a9118259b155984fdbea2aef572daed20d58cb441ed0ee395cfde5ac54e60d41210b71c9d42f52e05755aa937f8bfff15a68c493e9208b7b66203bcfd06cbeca3128832cb19ee48f246731a350aad250a70b950e90fa9d2bd641dd1c247f1a18a85d2b444a93bbe10616a864b811c8bf733a6bc603a7b4d515c156e73eba4fee34a2afa1df7d802c8ab9d5b68749f0f7c61112862ad790772d07ebd5a4cb305d826c0584e38b5eea90cac7c5799ad8bade81df39827c0797d3baa42f2227c27c2c40c29196586819547c2b9c0c6b07860b7d1af749c240273526f294be6395a4b6e19411d7cce4ade0533bd5b8bcfda54cca4c248223a35bf124a18c74c079e1d31d06729b9eb08cd39e58574de56c40fc96d62df67c0c2811ad641d1c6285b8107516aa6f0ffd69fc5e600d98d2d6dfe2c2b9603275406423fd0ce4c88f99e9962eb75be45102b2ff3b89fa0de79ea80eb65f5fd4583b86d88d34dcdced1282fc451b4d75cd43f88fd5bd74210a2785abd9d3e4f9101f5c6b8684cd7a8f4b4050dd999cc13339c3a98817da0396997b311c7e6c95ad8d40c9f96162b4a444fe07ef620c83757978584b19afe68e623a2960d215062622c0fddbdb0d2a029290b8587a4a155adcbd5629746eb981d6c9f0da4bcad8dcbc72942ec3c220b89a65f7d1bbd25e4f83100109e957c14e5dad53311de7a10c11fe2dcb1940763e9cffed673f943e382f05999e6d5dbf29d6f0fc529194d07ebae66e0172274d736058cb64d56de1774b3df1738a3acea60a763475c322a48c8932111ee01ec85e0e43ecd955541ba14a33cf67af40eee1709e2ae014eb017741ec62bddd8660eb5947c9911000b57ca81760f36c9bfa7bcf2fdbb7992a1e53f690f66582026a3e4b58812d93a8145c0066a20619f4597a70a5a9157182cd4cae9ff3e547f836b260ca93b4493ffb8a3ca1a7fb9cc21d8704fbf99cfdf2f710915fca25673e2f00a71a9754a51cb8c20738d79640932ef2c215cb142e7df1ca2ff27ead10b318f9700b7ca07c2b4858f9472c79d55b1c11a050870a67d6a9fec6b017fcdf9e1301abd00968b5f172ffe6b2c8f58092eb4ef96b71cca0c20045cff2b03dbd9f8571a5f331bee427ed38980f52899d8e8254f96bc5e65c2f2021ae7054f418489e645ab167c897aaef892a69955ce498cbc6035b0e38fdd777bf0d3b6860e4240168c343bb3152a079c204158acb052b7bcd2c55deafbf068cc194b9c4d51078fe7033df94e262082a0bbdf2ff56731ae5311e2e1b4a8dd62d54b02463befae273e35406d4607155d3cfffaddb8ddf55dfc56a6f80e3042d882711052edcd869af2019f13104ea63c04b19112577a98848468642e46b49ae3cc81e72bf5c63cb126a3312f364b0efa12b9dd97a96871459a274a127eb0d11d8c599b3309dec99ff510fb84ff916eb4c23671efb21acb61c853bc540db8dcc17a5b0e48e9402baa58ddfa1c3fc06b61cecf3162c349c77215c3b96dd8d89bd04a9bb2c3e265bbe372ccae14d81b8ba6ea331bf7a4e4bd986ec01adf275b048a6f1874834ae9d6ad768b5f0b24ddd3c1f96b496c9c5ce935de869cf964cd6331f34a86226fcf2529eec25f7baa40da08dd7ff963d4f0fdf2ef8f6685568150684b34ddf01df753b78e3750b07709e998767887f8c02ffd9d3f4817ef6e94b72cd25bc625bb9143031290d23f090f3c99a204e82089b78c2e56e5fe5b8da2ef8b7c6ec1f86b78a03c683af177088135dfa3d3ec078d950bd35930fec3864e77e2c5fcb91beb28ecdd6ba7d0855612af8ac057741becd5ffa10f44d09453dec0e0bed733144526fcbc6c39fc329f5f8368e2ede988adf2721bd67a3aac5e269f8804cdf61c33cf7b5709167b84749b8c215fdf0d7a6137167dfd78d41eba56862b9256359ac59dc6eeb22cc1b16a87733389db4404db53188a9c0d437bd530fed71df9974c487554404f3ebab7e8a64c37bb743fafbb47b74a79847ebde16c32dc22c48549a45879e4379ba5e30fd12f49faf1cd32bf67830f18c3e8334054816588492f0e070370142a7383cb05989c534d14b372d50d4900d5d7eebc3bf97808b3eea035729046743294de4d81ad2590475b9db75f9d26f34e4b1ba61fe6e30a2ba61927f63cbd4a089a9d44ca9cabb4e2bfd971f9e085e933129fdfb698ea32fbd1a962e97370f2a2ae58e0e2fa1bc59250ea8a8edeaa8125d16742e6394350eac919df4ee9a498bf08a970f76d20b241e1659f85a414167e5329fa3445b8197bfb1217582ad60c8ef8fcd4af290b48610445e8b491fe8e416f80cf6a4749ee8f98232e4407fd70689629823c4191cca64f5b5b960fe86a0409ab928f847796d26e372115772b2a16279957d96c131d103dbc292e62f1e8a5527acd3f135b9f616f74181c9514f99b77cf0c1113157ad1d2b6cb6af0384f9ac66de79868ca8f9dd4362342fa3737c2355398fd15015588ac51752670833603991a35ced11671c5254bbbaeb355b52b9efb92af097e5983b29fda57f4d9fc9220890cd982c97d0fa8e595033de3987a0652a9eef2318d36e3f2321976a2c7d7a10ae583d2859733544955032e1b13bb164870c41c19e723d7d1a6745abcfdc9becb30bf6e4fe5affbfd50c8718280bd4ed9800ce3d07870ef17ffed58cbe5505e8d50b27009c91f95188b0eb14d6bc73ea2202feeb02cdb7920d021b623d4eaa34388a8dbc9969a9d6c8e2b1166f1817f8d1f2e1ca5d675e0e898582bf429a2eb4653ad5f97a67346d881c6f450a4146604e555b247e57aa673506c3520b006dff3a53c0fea3373691ffe41bf31888d557e568ee49f8503dd83f16bf945b1bb41f234052ff2241a0df6f5ce9f54bbd2a97c2906fe1a106292580b2332c36d7813d23be7306f07a3b3c1a6ddc809047015eb8ea575d61691c31bbba34c3db97068c38da267fae47bd61964c360ead45cb6ee8b93a963cdf3d10ba9f22922695ed6bc6756a727448e3dffc8e331a4c497670296cc6a2331a5896df6314d5ab6925d2e8f18f615cb4a1a5200735d4a6e94a93f704ace359c1a0920a76ab932723c2f80895a733e9bf6f4586fbac54fe2dc94133bf5c98e0b78ff3df1323f28e545aa79c265e63521d288f741c32f3882229fbff67db8a7f9aab82e8d13c582911395366e2d9ea1d67d9ed4b75869a5894730612fe6cedc9182cec5b50e2929369138e70dda057b71f33bff986997245bd85498cba0184c0262d7372457bf88f90d4d77bc3c619e7c80d7ab75a0372b5ee54820e34efdab41d9597f2c971617a3cadefd84f7700574eac7e75db6da8300efc300c0a2a4bd8291cc4b3fd44797ee6d76ebbd5da91a28f33f8cba5d47de4d0859696c71d400abf72d1857bdbd2e36e52173dc1996e832da8a1e703315e5d4bce4061d824a844caf3c4c6b761525210f9f8fc343d06569f0645f23d586cced89849f44a5735a6272c79bccc977c319a0a7c4d3aa45af3d0675500562b5c0e5341e2a86a6355fa510e987e5998f1589e1b0f071678682c68fc3443d3e60304acfb6b5665cddcb7c4f9e6ff56e7b3e902c8bb80a0bb064762eef5df0c7751baab61f57152a80dcf151dcd458c45dc0c7461fa8462b38bebf483a58fd18a8639d601232cc6f83471822f32817aac1e8323dd8ed5cf339301faaf858c0ebc89ea5f948348b6997f509526eb95257fb8b3f42e2f705ef94c9d79087c219df28026998ea9ff1bb78ba7dbb4b4aafec20b55760da94509de0dba45eb8d4f51fc6c19f4cd1b01852efad7af6f546c1bc71cf553d7f72a9847c2fff23c9a110cb61e981d8fe2b236da79d593afc0e524cf7ef2bc446ecf5ecccb7e8a071907ffe6e3c5b80a33e913dcd7754c7736c8253bd6b524362ae437cbb01a9c063e9fb42e4fda93221203a409d239dd0af6aaff671d36c79503f0fd99b78c171a80d29bbbe5d1a2440c6add499bbdc766ce09030ef5a615430e1bdfc60a1ae7a491e9787fce0e266051525fed232697877c76cc39b3a77329780606b105ac5b7f7ab81814f4a2f629f07d42bcfcab3ee6fae67ea15ff30dde0560e91e509e944510722e97b566494daad981e3c972baec7ab1ad9672210b60fa7db5359f53a5567c0ebe7187f9a9f81bee34e4821b5fedde56b0c376a8c7d4955a88857639842dd53fc9c3f71be193e40144d41ffc1cc6f087558634f57f7c3bb89cc87d09098c7b66b992b44f8842db25ecaed77af16b8c84e3c2da5217cf47f5728260051dfe5e4a09739922737497f308e0108b1e60dce601068060d49c1e4640ba506140130d23f35c35f5cf11895e58334fdeb890d74d7a07ed7fec2e91370f283d7c252c7724345f0d58e7f7fb688f35b05b298022eb7269c85c29256777dac8199c12cbdb406ccf4e50a2de8fddd3d378daa6326ed1afcbfe077ba1aaa12848f46f9a24b6076dd06bfb54f35f6818e6dd75ac618a9cb80aa429c843c21d8d0dcfbe06507c5c4c23c048222e9dc165f9b72182e7d7e6aadcf4abd728dddb11c7e67ccad569dd034aadc63d5b2d5bf3f7e60b506fb30aaf7287eb3a0104430a9161990498e89e79e5acce74296b5770187058cdce277a38c4f82a5d3197e4f3ea691d668ebaee814fdccf1f22d0cd246d5a0f64725a7a012668fcfa7a9f303adbd002b7a871d9ac1fae9de0c74e5510ba9fe41100f821f3725ee23a2dd0e82b13b1d9d5c198c7345ddd9", @ANYRESDEC=r0, @ANYBLOB="000000000200"/28], 0x50) r7 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$UHID_INPUT(r7, &(0x7f0000002080)={0xfc, {"a2336848149e516d4b5e071887f70e09d038e7ff7fc6e5539b0d500a8b089b3f383563030890e0879b0a71c6e70a9b334a959b669a242f0a0af3988f7ef319520100ffe8d178708c523c921b1b3e31070d0773090acd3b78130daa61d8e8040000005802b77f07227227b7ba67e0e78657a6f5c2a874e62a9ccdc0d31a0c9f318c0da1993bd160e233df4a62179c6f30e065cd5b91cd0ae193973735b36d5b1b63dd1c00305d3f46635eb016d5b1dda98e2d749be7bd1df1fb3b231fdcdb5075a9aaa1b469c3090000000000000075271b286329d169934288fd789aa37d6e98b224fd44b65b31334ffc55cc82cd3ac32ecdb08ced6f9081b4dd0d8b38f3cd4498bee800490841bdb114f6b76383709d8f5c55432a909fda039aec54a1236e80f6a8abadea7662496bddbb42be6bfb2f17959d1f416e56c71b1931870262f5e801119242ca026bfc821e7e7daf2451138e645bb80c617669314e2fbe70de98ec76a9e40dad47f36fd9f7d0d42a4b5f1185ccdcf16ff46295d8a0fa17713c5802630933a9a34af674f3f39fe23491237c08822dec110911e893d0a8c4f677747abc360934b82910ff85bfd995083bba2987a67399eac427d145d546a40b9f6ff14ac488ec130fb3850a27af9544ae15a7e454dea05918b41243513f000000000000000a3621c56cea8d20fa911a0c41db6ebe8cac64f17679141d54b34bbc9903f1d4ab966203861b5b15a841f2b575a8bd0d78248ebe4d9a80002695104f674c2431dca141fae269cab70e9a66f3c3a9a63e9639e1f59c0ede26c6b5d74b078a5e15c31634e5ae098ce9ee70771aaa18119a867e1088334975e9f73483b6a62fa678ca14ffd9f9db2a7869d85864056526f889af43a6056080572286522449df466c632b3570243f989cce7cd9f465e41e610c20d80421d653a5520000008213b704c7fb082ff27590678ef9f190bae97909507041d860420c5664b27921b14dc1db8892fd32d0ad7bc946813591ad8deff4b05f60cea0da7710ac0000000000008000bea37ce0d0d4aa202f928d28381aab144a5d429a04a6a2b83c7068ae949ed06e288e810bac9c76600025e19c907f8ea2e2010000008271a1f5f8528f227e79c1389dbdfffe492f21579d2c15b8c70cdb1c332d86d87341432750861ec2bc3451edca194b221cfec4603d276bbaa1dfa6d4fb8a48a76eafc9a9a0270e4c10d64cd5a62427264f2377fe763c43470833ac96c45f357cbbaba8f1b1fdcc7cbb61a7cdb9744ed7f9129aede2be21ccfdc4e9134f8684b3a4f354da9a795e96334e207dff70f1988037b2ed3aaf575c0b88d8f146684078416d59fdee5325928974d12dad99dac44c3f0008047096a44002bebc2420aed92fa9b6578b4779415d4ac01b75d5495c118045651cf41c2fc48b778efa5ea5677747430af4162b987b80c3e001cd34e5c92f76cc4c24eeb8bc4e9ac2aed9e53803ed0ca4ae3a9737d214060005ea6f1783e287b3bee96e3a726eafe2fdfaa78d1f48c13b64df07847754b8400daaa69bf5c8f4350aeae9ca1207e78283cd0b20ceb360c7e658828163e2d25c4aa348561f927e88f63aa70e73a5e69b3df3495903f06572e1e007fa55a2999f596d067312f5779e8dbfdcf3427138f3d444d2639a10477f9bec4b0bbb6e3c04be68981f392203dd0ee3ef478e16dacfc5e3e03cf7ab8e3902f1b0ff034ef655b253ca509383815b1b6fc6522d4e4fdc11a48cf42d48604675fde2b94cf00500a2690891abf8ab9c015073014d9e08d4338b8780bdecd436cf0541359bafffa45237f104b96210403b2de9efed496f2730d56bd068ed211cf847535edecb7b373f78b095b68441a34cb51682a8ae4d24ad0465f3927f889b81305c038e79a7962fb385a882e8020f06c4c2ba1dd5cac7c18876da865d258734dd73583df292892448039ef799cf0630becdcce04579b5561dc825ab829827945e020c1f67ee615feb6243378e0610060f02cca4e91b2f001edb3d78fb4b55668dda93aec92a5de203717aa49c2d284acfabe262fccfcbb2b75a2183c46eb65ca8104e1b4da7fbb77ab2fc043aead87c32ab875ee7c2e7b7019c982cd3b43eaeb1a5fb135c0c7dcee8fe6516a328032f88c042891824659e9e94265c803b35ee5f83a2b210520106b8a358b50ab7a1fa89af9c251fe5294b3d1802d5676d95f160ec97b1ad94872cb2044642c37b4a6cc6c04effc1672db7e4b68d787d9a7a508ae54b3cd7369dde50e8c77d95a3d361c040babb171607caac2a3559ad4f75465f49c0d0ae3716db6e00cb11db4a5fade2a57c10238e204a67737c3b42aae501b20f7694a00f16e2d0174035a2c22656dc29880acebdbe8ddbd75c2f998d8ac2dfad2ba3a504767b6b45a45957f24d758ed024b3849cd9c30e23ef4df5c89644f48bb536f7945b59d7bcddff754413d135273ea8e75f22f216c6b9990ae71806f2c00b4025c48b75c0f73cdb9a7b8fa367b50028067e7f16f4dd569d462f4f19eacdb3ed70eeebb4483f8fd777d443e8b40427db6fe29068c0ca3d2414442e8f3a154704b0e51bc664a137b26be719f4f7c9a5678a674dfc95df80b9ce375dd649c8c704e509bd88c8e63d8c7dd67071115c8982ba46af4d6adcc9f68a75b9397b035153faf46366e7205dd8d6f37525c1a0e94610dd94323f6c15d085197149bfd6655548cfd9c52c9711937f79abb1a124f1210465483cd3b2d78378cfb85ed82e7da0f6eb6d279f2ae455925d0f6f1ba571eba281f2a654fb39ddff3b484539ff158e7c5419e037f3e3ad038f2211f1033195563c7f93cd54b9094f226e783271e1e5a2a2c10712eab625d64931cd4ffe6738d97b9b5ef828ee9fb059fc01af0e79c1e14b1d25988c69a399567c1f93768f7971d31488b8658a20878b7c1dd7ba02fc42939dde3d4a3339a65d507dc59c51097b40517705da56e9ebf0afa53282bf86dbb58c548069ff6eb95aade7cc66d7bbef724779ca1f731b3346ff177050373d79ff7b3e7f9bc0c1b4b266a8878b90baaa039d3e3b63979ac3df6e6f4859afd50238c7547a39b60810938044ae185d2ba3e00a4e73676864ae090d81eaee5ee6cf1d0ab378dd4dd891e937c2ea5410e0513005000000000000003911fab964c271550027697b52160687461602f88df165d884b36ec2b6c25a2f33c715687e9d4afb8843dd014e5c5ad8fe995754bd9cf32fce1e31919c4b2082fb0a30b9deae84bed4b2804563407308c58c89d9e99c81769177e6d594f88a4facfd4c735a20307c737afa2d60399473296b831dbd933d93994ba3064279b10ea0c5833f41f157ea2302993dbe433b1aa3a3766d5439020484f4113c4c859465c3b415c3432f81db8719539d5bf372aaaea1cc43a6c5cbe59758bfee2916580dac4b008e595f437491d87abed02cefcd9db53d94d02daee67918e5d6787463373b4b87c9050000002f7809959bc048850613d17ca51055f2f416a44fe180d2d50c312cca7cb14a2bdc331f57a9817139a206fc76957227ffff2de20a4b8e3737fbb42913777c06376f799eba367e21f94ca598705f5dcb767d6f0900d6b0f6095e53c4c4234d0c1fbe434f6ab8f43c0013ee93b83946ee7759e89d7bdd1a32d7b311711b757fe43c06d21a35810d8fe98b27faea8aa12bc8716eefc5c97c45ac33eeec964c5214bc3a9359bdea1cccab94f15e36319cb34ebcacedb82c2ed3de5a8a8f0011e8f74e82d7f96093530e76692839d7961939adfdeeeaff19d11efcafb6d546fef271e89d6cc2389e81ff58cefcce3fbf4625a7e7de40e42e07b34449e15e065cc7340002000000000000f288a4510de03dab19d26285eda89156d50dd385a60333ba5bbf5d77cd7007ad1519ad5470de3dd6d6080cafccf8a97406bb6b68a1f0c4549820a73c880f475f732ae00398e8bd1f4108b7807fb33b72685ec37a2d3f766413a60459516246e5a1d998a2017aef0948a68cf255315ab80dd349e891aef595dc4d470e8ac32a308e15fc37d06aeac289c0523f483e1ff7408c6087f1ab652f2ef91d4f2b01987b0f46da034e080000007ee8101a3934c54e24b48ec0275e2d0687dc746b0827cbf652f406c6b95f2722e58c05f752ce2126596e1cd7655b904801784c416b22f73d324678e2724f43f1fe687c7e8a60c28b82b6528341b648cdd56fed7cdcbb1575912d5ecd36dea3bca0b7427d8392c6289455e8f8d2ab2242729251ae033a9e02210e62df0546a74b333a1c48f95fd54acb5741259e8c5488efeee327415cc19451432c6f14c27693102a3cd84857cd6586fc5ca9a93eb0145fac0662ff86107f998a8ef7df8aa14046c55b03d3d47f88a8d60f7774a2ee08758897fb411a94b3c2fc5d5f0db42c0456ec015f08e5247d33ae2d35603ff8454c16f8342856935125102bb784ed7148b6ce431b63ee356b0c785f2f47b90e29389f22fc5b59a70efaea2bd40195af4486220d702e30bfc43c10ec23ea6283994a7dde4dcb61fea6b651fb1d62458d0741a12830052fcc460db043afe525629b40d7cee458e4cb5e930ed624806c43a006e3933ed07c2b8081c128ad2706f48261ff07000000000000613bc18f5a38d442768af38041efe03d152ef95ff569e76db2391f4509d7f339d92fdb4a89364949da398000000000000000d80a4fe654578376e599aff3565b1d531f30912b9945030b81ea9935fd46edb44a78f615255490a4b621501f2a9e4d24624c4dac9274118c67584f5d374755534d7f68f679c4ff516a9c861a0e7e65868fcb2bf1cb9aea4e05df72279fdb0d2b9e935c5af3cf474bed79dfc248c1f5aea4b8b32c5d295e57079d0fe662a46b7f71cd47744db86c50b704c971d90295c7b2c7439a2d78ccfa79b5fc2bff6bbf840262bf89394b3e0691953264d2700c838fa2c7b3425260f59500000000004ca7c12f45858d6284ca6270d6b2f0e58fded8a7b4a302a97bc641df07720ba2b26bbfcc807ca0abb1b44322269c21c5ec68cb068ea88067d905ea917bb03eefdaebdeabf2d0dce80997c915c8949de992587c2cb5fe36d7d3e5db21b094b8b77940b5f07722e47a08d367e5f84c96ec664b72934b99b3109af65d77e86abd6859cddf4bbae1f0930462df15fddbc48562ea3511a8065ef028cf12f14dcf6ebecd8d884836174faf1aa609e5f1ee1162dfa13bdc1fa7cfaadba85c72e9758f03a755d0be53f8d2a1dfb1c68cc164b0a0780d971a96ea2c4d4ca0398c2235980a9307b3d5bd3b01faffd0a5dbed2881a9700af561ac8c6b00000000000000f96f06817fb903729a7db6ff957697c9ede7885d94ffb0969be0daf60af93109eb1dee72e4363f51af62af6fb2a6df3bec89822a7a0b678058fa3fef86faec216eb6992162f8dcbf719c148cd2f9c55f4901203a9a8a2c3e90f3943dbc10360a1a49700d1dfbf66d69f6fbaf506c8bcce8bb0d872a02238926407a4eddd5d0fc5a752f9000", 0x1000}}, 0x1006) socket$netlink(0x10, 0x3, 0x0) ioctl$VIDIOC_SUBSCRIBE_EVENT(0xffffffffffffffff, 0x4020565a, &(0x7f0000000340)={0x3, 0x900900, 0x3}) connect$inet6(0xffffffffffffffff, &(0x7f0000000140)={0xa, 0x4e20, 0x1a86f, @remote, 0x8}, 0x1c) ioctl$VIDIOC_QUERYMENU(0xffffffffffffffff, 0xc008561c, 0x0) io_submit(0x0, 0x0, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r8, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="38000000031401002cbd7000fcdbdf250900020073797a32000000000800410073697700140033006c6f"], 0x38}, 0x1, 0x0, 0x0, 0x44}, 0x810) 6.123813235s ago: executing program 4 (id=14): socket$kcm(0x21, 0x2, 0xa) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80202, 0x0) setrlimit(0x6, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_open_dev$swradio(&(0x7f0000000200), 0x0, 0x2) socket(0x11, 0x5, 0x3) syz_open_dev$tty1(0xc, 0x4, 0x1) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x48ced787, 0xfffffffffffffffd, 0x0, 0x0, 0x1000001000, 0x49}, 0x0, &(0x7f00000002c0)={0x3ff, 0x8, 0x1, 0x9, 0x0, 0xf, 0x80000006}, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file1/file0\x00', 0x0) mkdir(&(0x7f00000020c0)='./file0\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000180)={[{@workdir={'workdir', 0x3d, './bus'}}]}) mkdir(&(0x7f0000000240)='./bus\x00', 0x0) renameat2(0xffffffffffffffff, &(0x7f00000001c0)='./file0\x00', 0xffffffffffffffff, &(0x7f0000000200)='./bus/file0\x00', 0x0) 5.833019239s ago: executing program 3 (id=15): mkdir(&(0x7f00000003c0)='./file0\x00', 0x21) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000000c0)='syzkaller\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='contention_end\x00', r2}, 0x10) r3 = syz_open_dev$loop(&(0x7f0000000100), 0x80, 0x0) ioctl$LOOP_CONFIGURE(r3, 0x4c0a, &(0x7f00000002c0)={r3, 0x0, {0x2a00, 0x80010000, 0x0, 0x8, 0x0, 0x0, 0x0, 0xe, 0x1c, "fee8a8ab780e00001ea8ffffffff0000000000000004ddb49a000000000000000000f8ff0008000000000000000000000000fcff1400", "2809e8dbe108598948f8ffd54a07c21d875397bdb22d0008b461ac00000080ffffffffffffffff0017000300", "90be8bf4bd00000000000000000000000000001000"}}) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="200000006800e97800000000000000000a0000000000000008000500", @ANYRES8=r0], 0x20}}, 0x0) ioctl$BTRFS_IOC_FS_INFO(r4, 0x8400941f, &(0x7f00000006c0)) sendmsg$nl_route(r1, &(0x7f0000004380)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="240000001800090400000000000000000a000000000000030000000008001e0001"], 0x24}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000180)=ANY=[@ANYBLOB="64000000100037040000000000002fb01c637c4c", @ANYRES32=0x0, @ANYBLOB="0000000000000000440012800e00010069703665727370616e00000030000280140006002001000000000000000000000000000214000700fc020000000000000000000000000000040012"], 0x64}}, 0x0) r5 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r5, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r5, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4) connect$inet(r5, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) shutdown(r5, 0x1) sendto$inet(r5, 0x0, 0x0, 0x805, 0x0, 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x1214040, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000300)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000140)="5500000018007f5f00fe01b2a4a2809302060000fd41fd01020400003900120002002800000019002d007fffffff0022de1330d54400009b84136ef75afb83de066a5900e1baac968300000000f2ff000001000000", 0x55}], 0x1, 0x0, 0x0, 0x7a000000}, 0x0) mkdir(&(0x7f0000000200)='./bus\x00', 0x10) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000100)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chroot(0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) r7 = syz_open_dev$tty20(0xc, 0x4, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x3, 0x3, &(0x7f0000000000)=@framed={{0x7a, 0xa, 0x0, 0xff00, 0x0, 0x71, 0x10, 0x2c}}, &(0x7f0000000480)='syzkaller\x00'}, 0x80) ioctl$KDSKBSENT(r7, 0x4b49, &(0x7f0000000140)={0xa0, "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"}) 5.647298211s ago: executing program 0 (id=16): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) fsetxattr(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="73656375af12f2cf2e3a00"], 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0x88, 0x30, 0x300, 0x0, 0x0, {}, [{0x74, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x2c, 0x1, 0x0, 0x0, {{0x8}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}, 0x88}, 0x1, 0x0, 0x0, 0x804}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$netlbl_cipso(0x0, 0xffffffffffffffff) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x23, &(0x7f0000000100)={@multicast2, @loopback}, 0xc) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$SNDCTL_DSP_CHANNELS(0xffffffffffffffff, 0xc0045006, &(0x7f0000000340)=0x10001) writev(r4, &(0x7f00000003c0)=[{&(0x7f0000000180)}], 0x1) writev(r4, &(0x7f0000000300)=[{&(0x7f00000001c0)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000d00000000000006040000000000f931", 0x38}], 0x1) r5 = openat$audio(0xffffffffffffff9c, &(0x7f00000007c0), 0x1, 0x0) ioctl$SOUND_MIXER_READ_RECSRC(r5, 0x80044dff, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x30000, 0x2, 0x11, r0, 0x0) 4.767979732s ago: executing program 1 (id=17): syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) r0 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = syz_io_uring_setup(0x8d2, &(0x7f00000000c0)={0x0, 0x0, 0x3010, 0x2, 0x39d}, &(0x7f0000000040)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) r5 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x36) ioctl$KVM_CAP_EXCEPTION_PAYLOAD(r5, 0x4068aea3, &(0x7f00000003c0)) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) io_uring_enter(r2, 0x47ba, 0x3e80, 0x0, 0x0, 0x0) 4.633682391s ago: executing program 4 (id=18): ioctl$LOOP_CONFIGURE(0xffffffffffffffff, 0x4c0a, &(0x7f00000002c0)={0xffffffffffffffff, 0x0, {0x2a00, 0x80010000, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x1d, "fee8a2ab78fc179fd1f8a0e91ddaaca7bd64c6a4b4e00d9683dda1af1ea89de2b7fb0a0100000000000000000300", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "90be8b1c551265406c7f306003d8a0f4bd00000014000800000000000000007f"}}) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000240)={0xffffffffffffffff}, 0x113, 0x1}}, 0x20) write$RDMA_USER_CM_CMD_BIND_IP(0xffffffffffffffff, &(0x7f00000003c0)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e24, 0x3, @ipv4={'\x00', '\xff\xff', @remote}, 0x10001}, r0}}, 0x30) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r3, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x802, 0x0) preadv(r4, &(0x7f00000001c0)=[{&(0x7f0000002fc0)=""/4096, 0x1000}], 0x1, 0xcfd2, 0x10001) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r5 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r5, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$TIPC_DEST_DROPPABLE(r6, 0x10f, 0x81, &(0x7f0000000080), 0x4) sendmmsg$inet(r6, &(0x7f0000001540)=[{{0x0, 0xfffffffffffffda1, 0x0}}], 0x40001b6, 0x0) close(r7) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000600)=ANY=[], 0x54}, 0x1, 0x0, 0x0, 0x40045}, 0x8010) r8 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r9 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r9, 0xc008ae88, &(0x7f0000002400)=ANY=[@ANYBLOB="0100000000000000e64c5683150000000000040000008000"]) openat$zero(0xffffff9c, &(0x7f0000000040), 0x311a00, 0x0) mbind(&(0x7f00000d4000/0xd000)=nil, 0xd000, 0x0, 0x0, 0x4, 0x8) 4.539513714s ago: executing program 2 (id=19): r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) getdents64(r0, &(0x7f0000000180)=""/169, 0xbb) lseek(r0, 0x8, 0x1) 3.591082655s ago: executing program 3 (id=20): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x10, 0x1, &(0x7f0000000100)=@raw=[@jmp={0x5, 0x0, 0x9, 0x0, 0x6, 0xfffffffffffffe88}], &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) 3.327236987s ago: executing program 2 (id=21): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=@newqdisc={0x43c, 0x24, 0x4ee4e6a52ff56541, 0x70b923, 0x80000, {0x0, 0x0, 0x0, 0x0, {0x0, 0x5}, {0xffe0, 0xb}, {0x9, 0x1}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x410, 0x2, [@TCA_TBF_BURST={0x8}, @TCA_TBF_PTAB={0x404, 0x3, [0x1ff, 0x9, 0x1, 0x6, 0xf09, 0x7ff, 0x3, 0xe, 0x468, 0xa9af, 0xa, 0xd9000, 0x4, 0x6, 0x5, 0xfffffffb, 0x401, 0xf, 0x0, 0x80000000, 0x1, 0x9, 0x0, 0x1, 0x5ea, 0x7ff, 0xc0000000, 0x2, 0x6, 0x3ff, 0x7ff, 0x5, 0xf, 0x101, 0x7, 0x723, 0x8, 0x9, 0x1221, 0x69fd, 0xfffffffe, 0x7fffffff, 0x5, 0x80, 0xe0000, 0xffff, 0xffffffff, 0x2, 0x0, 0x4, 0x39fe, 0x4, 0x80000001, 0x6, 0x7, 0x5, 0xb0e8, 0xffffff27, 0x3, 0x9, 0x7fffffff, 0x800, 0x4, 0x8001, 0x8, 0xffffff00, 0x1, 0x0, 0x8, 0x8001, 0xfffffffa, 0x0, 0x1, 0x5, 0x567, 0x3, 0x0, 0x4, 0xf1, 0x9, 0xa, 0x5f6d, 0xc202, 0x6cd3, 0x3, 0x8, 0x4, 0x1, 0x7, 0x9, 0x8, 0x3, 0x1, 0x1, 0x5, 0x9, 0x9, 0x3, 0xe, 0x7fff, 0x0, 0xc, 0xfffffffe, 0x0, 0x0, 0x0, 0x5, 0x5, 0xe6, 0x4, 0x0, 0x2, 0x1, 0x7, 0x4, 0xfffffff9, 0x4, 0x80, 0x6, 0x0, 0x800, 0xa, 0x6, 0x401, 0x8, 0xe0, 0x8, 0x400, 0x51f5, 0x7, 0x80000000, 0x0, 0xfffffffd, 0x10000, 0x6, 0x1, 0x41b8000, 0x9, 0x4, 0xff, 0x0, 0x0, 0x2c8eba50, 0x0, 0x6, 0x101, 0xc, 0x9, 0x4ff92c2d, 0x2, 0x69d92490, 0x8, 0x3, 0xfffffffa, 0x0, 0x2, 0x2, 0xfff, 0x0, 0x6, 0x6a, 0xf4c, 0x7, 0x9e7a, 0x2, 0x1, 0x1, 0x2, 0x4, 0x9, 0x0, 0x0, 0x10, 0x2280, 0x5, 0xa, 0x4, 0x8, 0xfffffff0, 0x6b90, 0x1000, 0x8614, 0xc8c, 0x2, 0xec3d, 0x10001, 0x8, 0xe8b, 0x7, 0x7, 0x0, 0x3, 0x14310000, 0x3a, 0x1, 0x7, 0x1, 0x3, 0xa6, 0x1ff, 0x7f, 0x40, 0x1, 0x7, 0x5, 0x8001, 0x0, 0x6, 0x10, 0x0, 0x5, 0x6, 0xb0cc, 0x2, 0x8, 0x6, 0x7, 0x10000, 0x4, 0x4, 0x3, 0xc5e, 0x40, 0x6, 0x69d9, 0xf60, 0x50, 0x200, 0x5, 0x0, 0xfff, 0x8, 0x802, 0x0, 0x400, 0x80000001, 0x2, 0x8, 0x0, 0x7, 0x9, 0x4, 0x80, 0xff, 0x40, 0xfffffffb, 0x4, 0x7, 0x1, 0x4, 0xd, 0xb8, 0x6, 0x2, 0x678c, 0x44]}]}}]}, 0x43c}, 0x1, 0x0, 0x0, 0x2000c061}, 0x4008000) openat$mice(0xffffffffffffff9c, &(0x7f0000000080), 0x0) r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x3, 0x822b01) write$char_usb(r0, &(0x7f0000000040)="e2", 0x918) 2.194168334s ago: executing program 1 (id=22): sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000002000)=""/102400, 0x19000) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'bond0\x00', 0x0}) setsockopt$packet_int(r1, 0x107, 0x14, &(0x7f0000000180)=0x2, 0x4) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000000)=0x3da, 0x4) sendto$packet(r1, &(0x7f00000000c0)="3f03fe7f0302140006001e0089e9aaa911d7c2290f0086dd1327c9167c643c4a1b7880610cc96655b1b141ab059b24d0fbc50df71548a3f6c5609063382a0c153cfdf9435e3ffe46", 0xe90c, 0x0, &(0x7f0000000540)={0xc9, 0x0, r2, 0x1, 0x0, 0x6, @multicast}, 0x14) 352.860126ms ago: executing program 2 (id=23): r0 = socket(0x200000100000011, 0x3, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000240)={'batadv0\x00', 0x0}) bind$packet(r0, &(0x7f0000000040)={0x11, 0xf7, r2, 0x1, 0xe, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x19}}, 0x14) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000100)=0x800b, 0x4) sendmsg$netlink(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000580)=ANY=[@ANYBLOB="34000000020000010040030000000000d96e6c8d5e85080045f0"], 0x34}], 0x1}, 0x0) 153.158537ms ago: executing program 0 (id=24): socket$inet6_mptcp(0xa, 0x1, 0x106) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010002000000000000000000000a18010000090a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a3000000000080005400000002cd40009800800014000000006c80002800c00018008000140000000032400018008000140000000070800014000000008080001400000000908000140000000080c000180080001400000000a240001800800014000000006"], 0x140}}, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$kcm(0xa, 0x922000000003, 0x11) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000200)='inet_sk_error_report\x00'}, 0x18) r3 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="48000000150081fb7059ae08060c04000aff0f11000000040011018701546fabca1b4e7d06a6bd7c493872f750375ed08a562af5745e17b8c119418f0f000000d6e74703c48f93b8", 0x48}], 0x1}, 0x0) r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(r4, 0x40505331, &(0x7f0000000100)={{}, {0xe}, 0xbf00, 0xbf}) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f00000003c0), 0x0) r5 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) r6 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r6, 0x7a7, &(0x7f0000000080)=0xb0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r6, 0x7a0, &(0x7f0000000000)={@my=0x0}) ioctl$IOCTL_VMCI_VERSION2(r5, 0x7a7, &(0x7f0000000080)=0xb0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r5, 0x7a0, &(0x7f0000000000)={@local}) ioctl$IOCTL_VMCI_NOTIFY_RESOURCE(r5, 0x7a5, &(0x7f00000000c0)={{@my=0x0}, 0x1, 0x0, 0x7ff}) socket$nl_route(0x10, 0x3, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x0, 0x0}, &(0x7f0000000100)=0xc) getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(r1, 0x84, 0x1b, 0x0, &(0x7f00000005c0)) 466.355µs ago: executing program 3 (id=25): openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000180), 0x35c, 0x0) socket$unix(0x1, 0x5, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000001280)={0x9, 0x1b, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000061d8d837000000002c2c00001811dbf3", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf09000000000000550901000000000095000000000000008500000023000000184900000400000000000000000000001800000007000000000000000200000018110000", @ANYRES32=0x1, @ANYBLOB="0000000000000000b7020000000000008500000086000000183400000100000000000000000000008520000004"], 0x0, 0x800, 0x0, 0x0, 0x41100, 0x44, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) syz_init_net_socket$ax25(0x3, 0x2, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000500)={0x26, 'hash\x00', 0x0, 0x0, 'md5-generic\x00'}, 0x73) accept4(r0, 0x0, 0x0, 0x80000) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000005100000000000000000a200000000900010073797a300000000014000000100001"], 0x48}}, 0x20050800) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x9, 0x4, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x22}, 0x94) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000380), 0xffffffffffffffff) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)=ANY=[@ANYBLOB="90000000", @ANYRES16=r2, @ANYBLOB="01000000000000000000010000000c000597ff000000000000000c0002000000000000000000040007800c000800000000000000000008000a00000000004400078008000100", @ANYRES32, @ANYBLOB="32000100", @ANYRES32=r3, @ANYBLOB="6480", @ANYRES32, @ANYBLOB='\b'], 0x90}}, 0x0) 0s ago: executing program 1 (id=26): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000240)={&(0x7f0000000200)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@volatile={0xa, 0x0, 0x0, 0x9, 0x3}]}}, &(0x7f0000000440)=""/212, 0x26, 0xd4, 0x1, 0x2, 0x10000}, 0x28) cachestat(r2, &(0x7f0000000540)={0x0, 0x200}, &(0x7f0000000580), 0x0) r3 = openat(0xffffffffffffffff, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000009c0)={0x6, 0x22, &(0x7f0000000880)=ANY=[@ANYBLOB="1811", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000090000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000b7080000000000007b8af8ff00000000b7080000020000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000000000", @ANYBLOB="0000000000000000b70500000800", @ANYRES32=r3, @ANYBLOB="00000000f7ffffff1848000007000000000000000000000018400000faffffff00", @ANYRES32=r3, @ANYBLOB="00000000000000001857000010000000000000000000000018250000", @ANYRES32, @ANYBLOB="00000000bf030000"], &(0x7f00000005c0)='syzkaller\x00', 0x101, 0x16, &(0x7f0000000600)=""/22, 0x41000, 0x10, '\x00', 0x0, 0x25, r2, 0x8, &(0x7f0000000780)={0xa, 0x1}, 0x8, 0x10, &(0x7f00000007c0)={0x4, 0x1, 0x7d, 0x10}, 0x10, 0x0, 0x0, 0x4, 0x0, &(0x7f0000000800)=[{0x2, 0x1, 0xb, 0xc}, {0x4, 0x5, 0xc, 0x5}, {0x4, 0x2, 0x4, 0x9}, {0x3, 0x1, 0xf, 0x2}], 0x10, 0x5}, 0x94) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r4 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r4, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0x3, &(0x7f0000001680)=ANY=[@ANYBLOB="1800000000030000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x1}, 0x94) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0x3, &(0x7f0000001680)=ANY=[], &(0x7f0000001700)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x9}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='mmap_lock_acquire_returned\x00', r5}, 0x10) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xa, 0x31, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00304, 0x17) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) clock_adjtime(0x0, &(0x7f0000000680)={0x19b1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x10000, 0xe5, 0x4, 0x202, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x4f, 0x0, 0x0, 0xf4b}) setsockopt$sock_linger(0xffffffffffffffff, 0x1, 0xd, &(0x7f0000000180)={0x1, 0x5}, 0x8) bind$alg(0xffffffffffffffff, 0x0, 0x0) accept4(0xffffffffffffffff, 0x0, 0x0, 0x80000) socket$inet6(0xa, 0x1, 0x100) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000700)=[{&(0x7f00000000c0)="6880a642beaf34317f0dd3122a90ad0d2b", 0x11}], 0x1}, 0x0) r6 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r6, &(0x7f0000000540)={0x0, 0xc027, &(0x7f0000000340)=[{&(0x7f00000000c0)="97eb000014006bcd9e", 0xeb97}], 0x1, 0x0, 0x0, 0x1f000000}, 0x600) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r2) sendmsg$NL80211_CMD_GET_MPP(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)={0x1c, r7, 0x301, 0x0, 0xffffffff, {{0x11}, {@val={0x8, 0x3, r1}, @void}}}, 0x1c}}, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.206' (ED25519) to the list of known hosts. [ 84.180746][ T5820] cgroup: Unknown subsys name 'net' [ 84.447640][ T5820] cgroup: Unknown subsys name 'cpuset' [ 84.482843][ T5820] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 86.480629][ T5820] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 86.986582][ T10] cfg80211: failed to load regulatory.db [ 89.543001][ T59] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 89.546813][ T5834] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 89.548148][ T5834] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 89.549758][ T5834] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 89.551439][ T5836] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 89.593478][ T5836] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 89.594351][ T5836] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 89.604318][ T5836] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 89.605137][ T5836] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 89.675927][ T5834] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 89.763416][ T5836] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 89.765160][ T5836] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 89.765956][ T5836] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 89.767902][ T5836] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 89.769735][ T5832] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 89.770226][ T5832] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 89.771707][ T5832] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 89.773763][ T5832] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 89.800584][ T5834] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 89.802995][ T5832] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 89.881588][ T5832] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 89.898716][ T5834] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 89.900220][ T5834] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 89.917295][ T5834] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 89.920205][ T5834] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 90.659095][ T5833] chnl_net:caif_netlink_parms(): no params data found [ 90.777622][ T5830] chnl_net:caif_netlink_parms(): no params data found [ 91.001691][ T5838] chnl_net:caif_netlink_parms(): no params data found [ 91.145008][ T5837] chnl_net:caif_netlink_parms(): no params data found [ 91.353231][ T5843] chnl_net:caif_netlink_parms(): no params data found [ 91.613839][ T5151] Bluetooth: hci1: command tx timeout [ 91.636329][ T5833] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.637327][ T5833] bridge0: port 1(bridge_slave_0) entered disabled state [ 91.637698][ T5833] bridge_slave_0: entered allmulticast mode [ 91.639594][ T5833] bridge_slave_0: entered promiscuous mode [ 91.773608][ T5151] Bluetooth: hci0: command tx timeout [ 91.780163][ T5833] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.780251][ T5833] bridge0: port 2(bridge_slave_1) entered disabled state [ 91.780387][ T5833] bridge_slave_1: entered allmulticast mode [ 91.807765][ T5833] bridge_slave_1: entered promiscuous mode [ 91.852375][ T5151] Bluetooth: hci3: command tx timeout [ 91.923907][ T5830] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.924074][ T5830] bridge0: port 1(bridge_slave_0) entered disabled state [ 91.924280][ T5830] bridge_slave_0: entered allmulticast mode [ 91.926897][ T5830] bridge_slave_0: entered promiscuous mode [ 91.933650][ T5151] Bluetooth: hci2: command tx timeout [ 92.012420][ T5151] Bluetooth: hci4: command tx timeout [ 92.155946][ T5830] bridge0: port 2(bridge_slave_1) entered blocking state [ 92.156111][ T5830] bridge0: port 2(bridge_slave_1) entered disabled state [ 92.156697][ T5830] bridge_slave_1: entered allmulticast mode [ 92.158652][ T5830] bridge_slave_1: entered promiscuous mode [ 92.490888][ T5833] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 92.491159][ T5838] bridge0: port 1(bridge_slave_0) entered blocking state [ 92.509077][ T5838] bridge0: port 1(bridge_slave_0) entered disabled state [ 92.509229][ T5838] bridge_slave_0: entered allmulticast mode [ 92.510993][ T5838] bridge_slave_0: entered promiscuous mode [ 92.680584][ T5833] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 92.680853][ T5838] bridge0: port 2(bridge_slave_1) entered blocking state [ 92.680984][ T5838] bridge0: port 2(bridge_slave_1) entered disabled state [ 92.681300][ T5838] bridge_slave_1: entered allmulticast mode [ 92.689435][ T5838] bridge_slave_1: entered promiscuous mode [ 92.788885][ T5830] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 92.864721][ T5837] bridge0: port 1(bridge_slave_0) entered blocking state [ 92.864914][ T5837] bridge0: port 1(bridge_slave_0) entered disabled state [ 92.865130][ T5837] bridge_slave_0: entered allmulticast mode [ 92.868388][ T5837] bridge_slave_0: entered promiscuous mode [ 93.179096][ T5830] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 93.179866][ T5837] bridge0: port 2(bridge_slave_1) entered blocking state [ 93.180027][ T5837] bridge0: port 2(bridge_slave_1) entered disabled state [ 93.180222][ T5837] bridge_slave_1: entered allmulticast mode [ 93.201204][ T5837] bridge_slave_1: entered promiscuous mode [ 93.384927][ T5843] bridge0: port 1(bridge_slave_0) entered blocking state [ 93.385093][ T5843] bridge0: port 1(bridge_slave_0) entered disabled state [ 93.385289][ T5843] bridge_slave_0: entered allmulticast mode [ 93.388592][ T5843] bridge_slave_0: entered promiscuous mode [ 93.534935][ T5833] team0: Port device team_slave_0 added [ 93.538813][ T5838] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 93.539162][ T5843] bridge0: port 2(bridge_slave_1) entered blocking state [ 93.539393][ T5843] bridge0: port 2(bridge_slave_1) entered disabled state [ 93.539601][ T5843] bridge_slave_1: entered allmulticast mode [ 93.541689][ T5843] bridge_slave_1: entered promiscuous mode [ 93.692272][ T5151] Bluetooth: hci1: command tx timeout [ 93.757544][ T5833] team0: Port device team_slave_1 added [ 93.769298][ T5838] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 93.846319][ T5830] team0: Port device team_slave_0 added [ 93.852419][ T5151] Bluetooth: hci0: command tx timeout [ 93.855650][ T5837] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 93.932379][ T5151] Bluetooth: hci3: command tx timeout [ 94.012381][ T5151] Bluetooth: hci2: command tx timeout [ 94.018702][ T5830] team0: Port device team_slave_1 added [ 94.092821][ T5151] Bluetooth: hci4: command tx timeout [ 94.277806][ T5837] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 94.525074][ T5843] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 94.614637][ T5833] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 94.614651][ T5833] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 94.614665][ T5833] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 94.617873][ T5838] team0: Port device team_slave_0 added [ 94.709039][ T5843] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 94.785698][ T5833] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 94.785717][ T5833] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 94.785744][ T5833] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 94.789783][ T5838] team0: Port device team_slave_1 added [ 94.791299][ T5830] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 94.791311][ T5830] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 94.791338][ T5830] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 94.936418][ T5837] team0: Port device team_slave_0 added [ 95.014850][ T5830] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 95.014870][ T5830] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 95.014898][ T5830] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 95.118332][ T5837] team0: Port device team_slave_1 added [ 95.199893][ T5843] team0: Port device team_slave_0 added [ 95.385116][ T5838] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 95.385135][ T5838] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 95.385162][ T5838] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 95.399152][ T5843] team0: Port device team_slave_1 added [ 95.591622][ T5838] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 95.591640][ T5838] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 95.591668][ T5838] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 95.724567][ T5837] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 95.724585][ T5837] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 95.724612][ T5837] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 95.772556][ T5151] Bluetooth: hci1: command tx timeout [ 95.932630][ T5151] Bluetooth: hci0: command tx timeout [ 96.012345][ T5151] Bluetooth: hci3: command tx timeout [ 96.016150][ T5837] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 96.016167][ T5837] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 96.016193][ T5837] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 96.029662][ T5833] hsr_slave_0: entered promiscuous mode [ 96.031205][ T5833] hsr_slave_1: entered promiscuous mode [ 96.092436][ T5151] Bluetooth: hci2: command tx timeout [ 96.146585][ T5843] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 96.146604][ T5843] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 96.146630][ T5843] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 96.172302][ T5151] Bluetooth: hci4: command tx timeout [ 96.174969][ T5830] hsr_slave_0: entered promiscuous mode [ 96.176579][ T5830] hsr_slave_1: entered promiscuous mode [ 96.177840][ T5830] debugfs: 'hsr0' already exists in 'hsr' [ 96.177948][ T5830] Cannot create hsr debugfs directory [ 96.179243][ T5843] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 96.179256][ T5843] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 96.179284][ T5843] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 96.714532][ T5838] hsr_slave_0: entered promiscuous mode [ 96.716125][ T5838] hsr_slave_1: entered promiscuous mode [ 96.716766][ T5838] debugfs: 'hsr0' already exists in 'hsr' [ 96.716792][ T5838] Cannot create hsr debugfs directory [ 97.044601][ T5837] hsr_slave_0: entered promiscuous mode [ 97.046139][ T5837] hsr_slave_1: entered promiscuous mode [ 97.047250][ T5837] debugfs: 'hsr0' already exists in 'hsr' [ 97.047276][ T5837] Cannot create hsr debugfs directory [ 97.282828][ T5843] hsr_slave_0: entered promiscuous mode [ 97.284553][ T5843] hsr_slave_1: entered promiscuous mode [ 97.286109][ T5843] debugfs: 'hsr0' already exists in 'hsr' [ 97.286134][ T5843] Cannot create hsr debugfs directory [ 97.852248][ T5151] Bluetooth: hci1: command tx timeout [ 98.012276][ T5151] Bluetooth: hci0: command tx timeout [ 98.093623][ T5151] Bluetooth: hci3: command tx timeout [ 98.172451][ T5151] Bluetooth: hci2: command tx timeout [ 98.252688][ T5151] Bluetooth: hci4: command tx timeout [ 98.836534][ T5833] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 98.871640][ T5833] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 98.910312][ T5833] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 98.973657][ T5833] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 99.135481][ T5830] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 99.191425][ T5830] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 99.224860][ T5830] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 99.284695][ T5830] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 99.436796][ T5838] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 99.473893][ T5838] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 99.547587][ T5838] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 99.614183][ T5838] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 99.799380][ T5837] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 99.836183][ T5837] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 99.888895][ T5837] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 99.961975][ T5837] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 100.120519][ T5833] 8021q: adding VLAN 0 to HW filter on device bond0 [ 100.145716][ T5843] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 100.201964][ T5843] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 100.251963][ T5843] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 100.309658][ T5843] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 100.424038][ T5833] 8021q: adding VLAN 0 to HW filter on device team0 [ 100.491189][ T1495] bridge0: port 1(bridge_slave_0) entered blocking state [ 100.491897][ T1495] bridge0: port 1(bridge_slave_0) entered forwarding state [ 100.501036][ T5830] 8021q: adding VLAN 0 to HW filter on device bond0 [ 100.565418][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 100.565869][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 100.694367][ T5830] 8021q: adding VLAN 0 to HW filter on device team0 [ 100.718800][ T5838] 8021q: adding VLAN 0 to HW filter on device bond0 [ 100.755457][ T1495] bridge0: port 1(bridge_slave_0) entered blocking state [ 100.755706][ T1495] bridge0: port 1(bridge_slave_0) entered forwarding state [ 100.816030][ T3192] bridge0: port 2(bridge_slave_1) entered blocking state [ 100.816282][ T3192] bridge0: port 2(bridge_slave_1) entered forwarding state [ 100.887460][ T5838] 8021q: adding VLAN 0 to HW filter on device team0 [ 100.930092][ T5837] 8021q: adding VLAN 0 to HW filter on device bond0 [ 100.948852][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 100.949093][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 101.020779][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 101.021053][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 101.134998][ T5837] 8021q: adding VLAN 0 to HW filter on device team0 [ 101.219771][ T1511] bridge0: port 1(bridge_slave_0) entered blocking state [ 101.220181][ T1511] bridge0: port 1(bridge_slave_0) entered forwarding state [ 101.281898][ T5843] 8021q: adding VLAN 0 to HW filter on device bond0 [ 101.298323][ T1511] bridge0: port 2(bridge_slave_1) entered blocking state [ 101.298475][ T1511] bridge0: port 2(bridge_slave_1) entered forwarding state [ 101.479858][ T5843] 8021q: adding VLAN 0 to HW filter on device team0 [ 101.567939][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 101.568161][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 101.657606][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 101.658038][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 101.820582][ T5833] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 102.149147][ T5830] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 102.196126][ T5838] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 102.636849][ T5830] veth0_vlan: entered promiscuous mode [ 102.657678][ T5838] veth0_vlan: entered promiscuous mode [ 102.764280][ T5838] veth1_vlan: entered promiscuous mode [ 102.768782][ T5830] veth1_vlan: entered promiscuous mode [ 102.870111][ T5837] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 102.960338][ T5843] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 103.016963][ T5830] veth0_macvtap: entered promiscuous mode [ 103.020088][ T5833] veth0_vlan: entered promiscuous mode [ 103.057868][ T5830] veth1_macvtap: entered promiscuous mode [ 103.060718][ T5838] veth0_macvtap: entered promiscuous mode [ 103.111022][ T5833] veth1_vlan: entered promiscuous mode [ 103.115939][ T5838] veth1_macvtap: entered promiscuous mode [ 103.185472][ T5830] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 103.247617][ T5830] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 103.249897][ T5837] veth0_vlan: entered promiscuous mode [ 103.269743][ T5838] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 103.331355][ T5838] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 103.337079][ T57] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.361489][ T57] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.365845][ T5843] veth0_vlan: entered promiscuous mode [ 103.368546][ T5837] veth1_vlan: entered promiscuous mode [ 103.397225][ T57] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.419809][ T57] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.436733][ T57] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.444437][ T5833] veth0_macvtap: entered promiscuous mode [ 103.484847][ T57] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.492003][ T57] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.494348][ T5843] veth1_vlan: entered promiscuous mode [ 103.501374][ T57] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.600523][ T5833] veth1_macvtap: entered promiscuous mode [ 103.948621][ T5833] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 104.000269][ T5837] veth0_macvtap: entered promiscuous mode [ 104.039246][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 104.039268][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 104.051161][ T5833] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 104.106326][ T5837] veth1_macvtap: entered promiscuous mode [ 104.151292][ T5843] veth0_macvtap: entered promiscuous mode [ 104.158351][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 104.158370][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 104.159919][ T13] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.171185][ T13] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.180435][ T13] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.220223][ T13] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.221007][ T5843] veth1_macvtap: entered promiscuous mode [ 104.274906][ T57] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 104.274927][ T57] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 104.367421][ T5837] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 104.471363][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 104.471386][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 104.483192][ T5837] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 104.515978][ T5843] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 104.622866][ T13] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.645775][ T5843] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 104.667380][ T13] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.690359][ T13] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.726320][ T13] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.861190][ T57] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.920074][ T5949] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 104.956181][ T57] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.973150][ T1511] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.030649][ T1511] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 105.030672][ T1511] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 105.048213][ T12] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.562245][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 105.564289][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 105.567803][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 105.786254][ T1511] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 105.786271][ T1511] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 106.089095][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 106.089117][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 106.223753][ T3192] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 106.223777][ T3192] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 106.512583][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 107.773939][ T57] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 107.773960][ T57] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 108.357459][ T1430] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 108.357481][ T1430] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 108.716697][ T5944] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 108.903723][ T5944] usb 5-1: config 1 has 0 interfaces, different from the descriptor's value: 1 [ 108.928657][ T5944] usb 5-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 108.928689][ T5944] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 108.928707][ T5944] usb 5-1: Product: syz [ 108.928720][ T5944] usb 5-1: Manufacturer: syz [ 108.928732][ T5944] usb 5-1: SerialNumber: syz [ 109.922121][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 109.946549][ T5151] Bluetooth: hci2: connection err: -111 [ 110.032469][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 110.032632][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 110.033336][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 110.033547][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 110.033699][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 110.791468][ T5999] Zero length message leads to an empty skb [ 110.983991][ T6006] @ÿ: renamed from veth0_vlan (while UP) [ 111.030841][ T6007] Invalid logical block size (8192) [ 112.431491][ T6006] lo speed is unknown, defaulting to 1000 [ 112.431565][ T6006] lo speed is unknown, defaulting to 1000 [ 112.433766][ T6006] lo speed is unknown, defaulting to 1000 [ 112.438517][ T6006] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 112.446297][ T6006] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 112.463995][ C1] vkms_vblank_simulate: vblank timer overrun [ 112.519782][ T6006] lo speed is unknown, defaulting to 1000 [ 112.521799][ T6006] lo speed is unknown, defaulting to 1000 [ 112.524456][ T6006] lo speed is unknown, defaulting to 1000 [ 112.526721][ T6006] lo speed is unknown, defaulting to 1000 [ 112.528500][ T6006] lo speed is unknown, defaulting to 1000 [ 113.144066][ T5999] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 113.144744][ T5999] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 114.042827][ T5999] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 114.237434][ T5999] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 114.237696][ T5999] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 114.333065][ T5151] Bluetooth: hci0: command 0x0c1a tx timeout [ 114.379106][ T5999] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 114.498662][ T5999] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 114.500754][ T5999] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 114.660746][ T5999] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 114.752861][ T5999] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 114.752963][ T5999] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 114.907077][ T5999] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 115.091132][ T5999] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 115.091251][ T5999] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 115.234332][ T5984] usb 5-1: USB disconnect, device number 2 [ 115.340393][ T5999] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 115.686208][ T6004] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 115.686384][ T6004] block device autoloading is deprecated and will be removed. [ 115.935420][ T6017] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 115.935618][ T6017] overlayfs: missing 'lowerdir' [ 116.267298][ T5151] Bluetooth: hci1: command 0x0c1a tx timeout [ 116.415593][ T5151] Bluetooth: hci0: command 0x0c1a tx timeout [ 116.572860][ T5151] Bluetooth: hci3: command 0x0c1a tx timeout [ 116.814136][ T5151] Bluetooth: hci2: command 0x0c1a tx timeout [ 116.816510][ T6019] ======================================================= [ 116.816510][ T6019] WARNING: The mand mount option has been deprecated and [ 116.816510][ T6019] and is ignored by this kernel. Remove the mand [ 116.816510][ T6019] option from the mount to silence this warning. [ 116.816510][ T6019] ======================================================= [ 116.891931][ T6019] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 117.133362][ T5151] Bluetooth: hci4: command 0x0c1a tx timeout [ 118.338357][ T5151] Bluetooth: hci1: command 0x0c1a tx timeout [ 118.495358][ T5151] Bluetooth: hci0: command 0x0c1a tx timeout [ 118.653117][ T5151] Bluetooth: hci3: command 0x0c1a tx timeout [ 118.892457][ T5151] Bluetooth: hci2: command 0x0c1a tx timeout [ 119.212193][ T5151] Bluetooth: hci4: command 0x0c1a tx timeout [ 120.842332][ T5834] Bluetooth: hci3: command 0x0c1a tx timeout [ 120.842392][ T5151] Bluetooth: hci1: command 0x0c1a tx timeout [ 120.972467][ T5151] Bluetooth: hci2: command 0x0c1a tx timeout [ 121.303907][ T5151] Bluetooth: hci4: command 0x0c1a tx timeout [ 121.761101][ T6051] netlink: 8 bytes leftover after parsing attributes in process `syz.0.24'. [ 121.761171][ T6051] netlink: 24 bytes leftover after parsing attributes in process `syz.0.24'. [ 121.761247][ T6051] netlink: 24 bytes leftover after parsing attributes in process `syz.0.24'. [ 121.763666][ T6049] netlink: 8 bytes leftover after parsing attributes in process `syz.3.25'. [ 121.767920][ T6049] netlink: 4 bytes leftover after parsing attributes in process `syz.3.25'. [ 121.767940][ T6049] netlink: 34 bytes leftover after parsing attributes in process `syz.3.25'. [ 121.767953][ T6049] nbd: socks must be embedded in a SOCK_ITEM attr [ 121.913742][ T6054] [ 121.913756][ T6054] ====================================================== [ 121.913764][ T6054] WARNING: possible circular locking dependency detected [ 121.913774][ T6054] syzkaller #0 Not tainted [ 121.913784][ T6054] ------------------------------------------------------ [ 121.913792][ T6054] syz.1.26/6054 is trying to acquire lock: [ 121.913804][ T6054] ffff8880b8923d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 121.913862][ T6054] [ 121.913862][ T6054] but task is already holding lock: [ 121.913870][ T6054] ffffffff8efa7228 (smc_v6_hashinfo.lock){++.+}-{3:3}, at: smc_diag_dump_proto+0x174/0x1fb0 [ 121.913918][ T6054] [ 121.913918][ T6054] which lock already depends on the new lock. [ 121.913918][ T6054] [ 121.913925][ T6054] [ 121.913925][ T6054] the existing dependency chain (in reverse order) is: [ 121.913933][ T6054] [ 121.913933][ T6054] -> #1 (smc_v6_hashinfo.lock){++.+}-{3:3}: [ 121.913961][ T6054] lock_acquire+0x120/0x360 [ 121.913988][ T6054] rt_write_lock+0x6a/0x110 [ 121.914008][ T6054] smc_hash_sk+0x8f/0x2a0 [ 121.914028][ T6054] smc_sk_init+0x5a1/0x7f0 [ 121.914046][ T6054] smc_inet_init_sock+0x4e/0xb0 [ 121.914066][ T6054] inet6_create+0xf04/0x1270 [ 121.914094][ T6054] __sock_create+0x4b3/0x9f0 [ 121.914114][ T6054] __sys_socket+0xd7/0x1b0 [ 121.914135][ T6054] __x64_sys_socket+0x7a/0x90 [ 121.914156][ T6054] do_syscall_64+0xfa/0x3b0 [ 121.914182][ T6054] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 121.914200][ T6054] [ 121.914200][ T6054] -> #0 ((softirq_ctrl.lock)){+.+.}-{3:3}: [ 121.914228][ T6054] validate_chain+0xb9b/0x2140 [ 121.914257][ T6054] __lock_acquire+0xab9/0xd20 [ 121.914281][ T6054] reacquire_held_locks+0x127/0x1d0 [ 121.914319][ T6054] lock_release+0x1b4/0x3e0 [ 121.914343][ T6054] __local_bh_enable_ip+0x10c/0x270 [ 121.914366][ T6054] sock_i_ino+0xa9/0xc0 [ 121.914393][ T6054] smc_diag_dump_proto+0xa4c/0x1fb0 [ 121.914416][ T6054] smc_diag_dump+0x59/0xa0 [ 121.914437][ T6054] netlink_dump+0x6e4/0xe90 [ 121.914458][ T6054] __netlink_dump_start+0x5cb/0x7e0 [ 121.914480][ T6054] smc_diag_handler_dump+0x178/0x210 [ 121.914502][ T6054] sock_diag_rcv_msg+0x4c9/0x600 [ 121.914524][ T6054] netlink_rcv_skb+0x205/0x470 [ 121.914546][ T6054] netlink_unicast+0x843/0xa10 [ 121.914565][ T6054] netlink_sendmsg+0x805/0xb30 [ 121.914588][ T6054] __sock_sendmsg+0x21c/0x270 [ 121.914607][ T6054] ____sys_sendmsg+0x508/0x820 [ 121.914634][ T6054] ___sys_sendmsg+0x21f/0x2a0 [ 121.914660][ T6054] __x64_sys_sendmsg+0x1a1/0x260 [ 121.914688][ T6054] do_syscall_64+0xfa/0x3b0 [ 121.914714][ T6054] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 121.914733][ T6054] [ 121.914733][ T6054] other info that might help us debug this: [ 121.914733][ T6054] [ 121.914739][ T6054] Possible unsafe locking scenario: [ 121.914739][ T6054] [ 121.914746][ T6054] CPU0 CPU1 [ 121.914752][ T6054] ---- ---- [ 121.914758][ T6054] rlock(smc_v6_hashinfo.lock); [ 121.914772][ T6054] lock((softirq_ctrl.lock)); [ 121.914787][ T6054] lock(smc_v6_hashinfo.lock); [ 121.914802][ T6054] lock((softirq_ctrl.lock)); [ 121.914816][ T6054] [ 121.914816][ T6054] *** DEADLOCK *** [ 121.914816][ T6054] [ 121.914821][ T6054] 3 locks held by syz.1.26/6054: [ 121.914833][ T6054] #0: ffff8880373d8908 (nlk_cb_mutex-SOCK_DIAG){+.+.}-{4:4}, at: __netlink_dump_start+0xfe/0x7e0 [ 121.914884][ T6054] #1: ffffffff8efa7228 (smc_v6_hashinfo.lock){++.+}-{3:3}, at: smc_diag_dump_proto+0x174/0x1fb0 [ 121.914935][ T6054] #2: ffffffff8d9a8bc0 (rcu_read_lock){....}-{1:3}, at: rt_read_lock+0x1f8/0x360 [ 121.914980][ T6054] [ 121.914980][ T6054] stack backtrace: [ 121.914991][ T6054] CPU: 1 UID: 0 PID: 6054 Comm: syz.1.26 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 121.915011][ T6054] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 121.915021][ T6054] Call Trace: [ 121.915028][ T6054] [ 121.915036][ T6054] dump_stack_lvl+0x189/0x250 [ 121.915067][ T6054] ? __pfx_dump_stack_lvl+0x10/0x10 [ 121.915096][ T6054] ? __pfx__printk+0x10/0x10 [ 121.915119][ T6054] ? print_lock_name+0xde/0x100 [ 121.915142][ T6054] print_circular_bug+0x2ee/0x310 [ 121.915163][ T6054] check_noncircular+0x134/0x160 [ 121.915198][ T6054] validate_chain+0xb9b/0x2140 [ 121.915231][ T6054] ? rcu_is_watching+0x15/0xb0 [ 121.915262][ T6054] ? trace_irq_disable+0x37/0x110 [ 121.915296][ T6054] ? preempt_schedule_irq+0xde/0x150 [ 121.915323][ T6054] ? __pfx_preempt_schedule_irq+0x10/0x10 [ 121.915353][ T6054] __lock_acquire+0xab9/0xd20 [ 121.915383][ T6054] reacquire_held_locks+0x127/0x1d0 [ 121.915413][ T6054] ? __local_bh_disable_ip+0x264/0x400 [ 121.915441][ T6054] lock_release+0x1b4/0x3e0 [ 121.915468][ T6054] ? __local_bh_enable_ip+0x100/0x270 [ 121.915496][ T6054] __local_bh_enable_ip+0x10c/0x270 [ 121.915522][ T6054] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 121.915551][ T6054] ? rt_read_unlock+0x65/0xa0 [ 121.915574][ T6054] ? sock_i_ino+0x24/0xc0 [ 121.915605][ T6054] sock_i_ino+0xa9/0xc0 [ 121.915636][ T6054] smc_diag_dump_proto+0xa4c/0x1fb0 [ 121.915659][ T6054] ? trace_sched_exit_tp+0x36/0x110 [ 121.915700][ T6054] ? __pfx_smc_diag_dump_proto+0x10/0x10 [ 121.915726][ T6054] ? __lruvec_stat_mod_folio+0x79/0x2f0 [ 121.915761][ T6054] ? __lruvec_stat_mod_folio+0x79/0x2f0 [ 121.915795][ T6054] ? rcu_is_watching+0x15/0xb0 [ 121.915826][ T6054] ? trace_irq_disable+0x37/0x110 [ 121.915850][ T6054] ? preempt_schedule_irq+0xde/0x150 [ 121.915876][ T6054] ? __pfx_preempt_schedule_irq+0x10/0x10 [ 121.915901][ T6054] ? rcu_is_watching+0x15/0xb0 [ 121.915933][ T6054] ? irqentry_exit+0x74/0x90 [ 121.915959][ T6054] ? lockdep_hardirqs_on+0x9c/0x150 [ 121.915992][ T6054] smc_diag_dump+0x59/0xa0 [ 121.916016][ T6054] netlink_dump+0x6e4/0xe90 [ 121.916042][ T6054] ? __pfx_netlink_dump+0x10/0x10 [ 121.916078][ T6054] __netlink_dump_start+0x5cb/0x7e0 [ 121.916105][ T6054] smc_diag_handler_dump+0x178/0x210 [ 121.916131][ T6054] ? __pfx_smc_diag_handler_dump+0x10/0x10 [ 121.916156][ T6054] ? __pfx_smc_diag_dump+0x10/0x10 [ 121.916180][ T6054] ? sock_diag_lock_handler+0x19/0x290 [ 121.916203][ T6054] ? sock_diag_lock_handler+0x19/0x290 [ 121.916228][ T6054] sock_diag_rcv_msg+0x4c9/0x600 [ 121.916253][ T6054] netlink_rcv_skb+0x205/0x470 [ 121.916277][ T6054] ? rcu_is_watching+0x15/0xb0 [ 121.916316][ T6054] ? __pfx_sock_diag_rcv_msg+0x10/0x10 [ 121.916341][ T6054] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 121.916370][ T6054] ? netlink_deliver_tap+0x2e/0x1b0 [ 121.916398][ T6054] netlink_unicast+0x843/0xa10 [ 121.916424][ T6054] ? __pfx_netlink_unicast+0x10/0x10 [ 121.916447][ T6054] ? netlink_sendmsg+0x642/0xb30 [ 121.916471][ T6054] ? skb_put+0x11b/0x210 [ 121.916500][ T6054] netlink_sendmsg+0x805/0xb30 [ 121.916529][ T6054] ? __pfx_netlink_sendmsg+0x10/0x10 [ 121.916558][ T6054] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 121.916579][ T6054] ? __pfx_netlink_sendmsg+0x10/0x10 [ 121.916605][ T6054] __sock_sendmsg+0x21c/0x270 [ 121.916629][ T6054] ____sys_sendmsg+0x508/0x820 [ 121.916661][ T6054] ? __pfx_____sys_sendmsg+0x10/0x10 [ 121.916695][ T6054] ? import_iovec+0x74/0xa0 [ 121.916720][ T6054] ___sys_sendmsg+0x21f/0x2a0 [ 121.916751][ T6054] ? __pfx____sys_sendmsg+0x10/0x10 [ 121.916796][ T6054] ? __fget_files+0x2a/0x420 [ 121.916824][ T6054] ? __fget_files+0x3a6/0x420 [ 121.916857][ T6054] __x64_sys_sendmsg+0x1a1/0x260 [ 121.916888][ T6054] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 121.916924][ T6054] ? __secure_computing+0xe2/0x2a0 [ 121.916958][ T6054] do_syscall_64+0xfa/0x3b0 [ 121.916986][ T6054] ? lockdep_hardirqs_on+0x9c/0x150 [ 121.917012][ T6054] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 121.917032][ T6054] ? clear_bhb_loop+0x60/0xb0 [ 121.917052][ T6054] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 121.917071][ T6054] RIP: 0033:0x7f7cac7febe9 [ 121.917089][ T6054] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 121.917107][ T6054] RSP: 002b:00007f7caaa24038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 121.917128][ T6054] RAX: ffffffffffffffda RBX: 00007f7caca36180 RCX: 00007f7cac7febe9 [ 121.917143][ T6054] RDX: 0000000000000600 RSI: 0000200000000540 RDI: 0000000000000009 [ 121.917157][ T6054] RBP: 00007f7cac881e19 R08: 0000000000000000 R09: 0000000000000000 [ 121.917170][ T6054] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 121.917182][ T6054] R13: 00007f7caca36218 R14: 00007f7caca36180 R15: 00007ffcc87c1128 [ 121.917205][ T6054]