last executing test programs: 2m7.823027357s ago: executing program 32 (id=1438): syz_open_dev$vim2m(&(0x7f0000000000), 0x200000006, 0x2) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008a}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(0xffffffffffffffff, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @dev}, 0x2}}, 0x2e) connect$pppl2tp(0xffffffffffffffff, &(0x7f00000000c0)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x2, 0x3}}, 0x26) ioctl$PPPIOCGL2TPSTATS(0xffffffffffffffff, 0x80047453, 0xffffffffffffffff) ioctl$NS_GET_PARENT(0xffffffffffffffff, 0xb702, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=@newtaction={0x78, 0x30, 0x1, 0x0, 0x25dfdbfb, {}, [{0x64, 0x1, [@m_ife={0x60, 0x1, 0x0, 0x0, {{0x8}, {0x38, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x4}, 0x1}}, @TCA_IFE_DMAC={0xa, 0x3, @multicast}, @TCA_IFE_SMAC={0xa, 0x4, @broadcast}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x78}, 0x1, 0x0, 0x0, 0x10}, 0x40000c0) 2m0.587286178s ago: executing program 33 (id=1470): r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f0000000400)={0x18, 0x0, {0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xa}, 'lo\x00'}}, 0x1e) ioctl$PPPIOCGCHAN(r0, 0x80047437, &(0x7f0000001f00)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f00000002c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-twofish-3way\x00'}, 0x58) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000000040)="00000097c3199945e3eadae14708c82ec713c20000", 0x15) 1m33.187569002s ago: executing program 34 (id=1581): sendmsg$IPSET_CMD_TEST(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x1c, 0xb, 0x6, 0x801, 0x0, 0x0, {0x6, 0x0, 0x2}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}}, 0x4800) syz_emit_ethernet(0x46, &(0x7f0000000000)={@local, @broadcast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0xb, 0x0, 0x0, 0x3, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2f, 0x0, @broadcast=0xac14140a, @multicast1}, "040022ebffffffff"}}}}}, 0x0) sendmsg$NFT_MSG_GETSET(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000040)={&(0x7f0000000340)={0x2e0, 0xa, 0xa, 0x2, 0x0, 0x0, {0x5}, [@NFTA_SET_KEY_TYPE={0x8, 0x4, 0x1, 0x0, 0x1}, @NFTA_SET_DATA_LEN={0x8, 0x7, 0x1, 0x0, 0x11}, @NFTA_SET_EXPRESSIONS={0x54, 0x12, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, @limit={{0xa}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_LIMIT_BURST={0x8, 0x3, 0x1, 0x0, 0xbb}]}}}, {0x34, 0x1, 0x0, 0x1, @flow_offload={{0x11}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_FLOW_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOW_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}}}]}, @NFTA_SET_TIMEOUT={0xc, 0xb, 0x1, 0x0, 0x19}, @NFTA_SET_KEY_TYPE={0x8, 0x4, 0x1, 0x0, 0x1}, @NFTA_SET_EXPRESSIONS={0x244, 0x12, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @counter={{0xc}, @val={0x10, 0x2, 0x0, 0x1, [@NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x5}]}}}, {0x10, 0x1, 0x0, 0x1, @meta={{0x9}, @void}}, {0xc, 0x1, 0x0, 0x1, @osf={{0x8}, @void}}, {0x10, 0x1, 0x0, 0x1, @hash={{0x9}, @void}}, {0x74, 0x1, 0x0, 0x1, @quota={{0xa}, @val={0x64, 0x2, 0x0, 0x1, [@NFTA_QUOTA_FLAGS={0x8}, @NFTA_QUOTA_FLAGS={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_QUOTA_CONSUMED={0xc, 0x4, 0x1, 0x0, 0x3ff}, @NFTA_QUOTA_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_QUOTA_BYTES={0xc, 0x1, 0x1, 0x0, 0x3}, @NFTA_QUOTA_CONSUMED={0xc, 0x4, 0x1, 0x0, 0x7fffffffffffffff}, @NFTA_QUOTA_BYTES={0xc, 0x1, 0x1, 0x0, 0xfff}, @NFTA_QUOTA_CONSUMED={0xc, 0x4, 0x1, 0x0, 0x7fffffff}, @NFTA_QUOTA_BYTES={0xc, 0x1, 0x1, 0x0, 0x9}]}}}, {0x14, 0x1, 0x0, 0x1, @immediate={{0xe}, @void}}, {0x12c, 0x1, 0x0, 0x1, @match={{0xa}, @val={0x11c, 0x2, 0x0, 0x1, [@NFTA_MATCH_INFO={0xda, 0x3, "0aab1774c678783aa2c30718bd213ebfbc27c132bc0f866a0adc81914f5add59c304392e6153155f3b9dae6b66740459da034b0b9d402e15e37cb4d643bb1c98e44f5efb41d8b7e69a0a3902719135c65e1dcae1c234e992d7cb024e01ec9b8d7f7bf708a203c045b012b367c7a7978e189f914f050dc710a208f3291e9b1f8ef04da34c30d76479648380d4eae797601003533c910d5cd2684bceb872d78857a148627dd0fc2a7ccc710653647e3432040b4fffb398296f6730037965127bd97741ac12fd4c4417f2610d2027b292edd6a9dcec9a01"}, @NFTA_MATCH_NAME={0xb, 0x1, 'helper\x00'}, @NFTA_MATCH_REV={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_MATCH_REV={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_MATCH_NAME={0xb, 0x1, 'string\x00'}, @NFTA_MATCH_NAME={0xb, 0x1, 'string\x00'}, @NFTA_MATCH_REV={0x8}]}}}, {0x20, 0x1, 0x0, 0x1, @dup_ipv4={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_DUP_SREG_ADDR={0x8, 0x1, 0x1, 0x0, 0x8}, @NFTA_DUP_SREG_ADDR={0x8, 0x1, 0x1, 0x0, 0x1}]}}}, {0x10, 0x1, 0x0, 0x1, @match={{0xa}, @void}}, {0x10, 0x1, 0x0, 0x1, @limit={{0xa}, @void}}]}, @NFTA_SET_DATA_LEN={0x8, 0x7, 0x1, 0x0, 0x1d}, @NFTA_SET_DATA_TYPE={0x8, 0x6, 0x1, 0x0, 0xffffff00}]}, 0x2e0}, 0x1, 0x0, 0x0, 0x4}, 0x40004) 1m16.042209225s ago: executing program 35 (id=1629): r0 = syz_usb_connect$hid(0x2, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000000000400306000600000000a1b583ba555c279b000000090400000103000000092100000101220700090581030000000000"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x5, &(0x7f0000006680)) iopl(0x3) rt_sigsuspend(0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x5, 0x0) read$msr(r1, &(0x7f0000019680)=""/102384, 0x18ff0) pipe2$watch_queue(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) r3 = semget$private(0x0, 0x4000000009, 0x0) r4 = creat(&(0x7f0000000140)='./file0\x00', 0x200065) close(r4) mount$bind(0x0, 0x0, 0x0, 0x100000, 0x0) open(0x0, 0x20c00, 0xd) execve(&(0x7f0000000380)='./file0\x00', 0x0, &(0x7f0000000540)={[&(0x7f0000000500)='\x00']}) semop(r3, 0x0, 0x0) semctl$GETZCNT(r3, 0x0, 0xf, 0x0) r5 = openat$kvm(0xffffff9c, &(0x7f0000000040), 0x123402, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r7, 0x4008ae89, &(0x7f00000000c0)=ANY=[@ANYBLOB="010000000000000081000040"]) keyctl$KEYCTL_WATCH_KEY(0x20, 0x0, r2, 0x5a) r8 = add_key$keyring(&(0x7f0000000140), &(0x7f0000000180)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) semctl$GETALL(r3, 0x0, 0xd, &(0x7f0000000300)=""/194) add_key(&(0x7f00000000c0)='cifs.idmap\x00', &(0x7f0000000100)={'syz', 0x0}, 0x0, 0x0, r8) syz_usb_control_io(r0, &(0x7f0000000400)={0x2c, &(0x7f0000000000)={0x0, 0x0, 0x7, {0x7, 0x0, "5a7da32917"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) 1m12.912732656s ago: executing program 36 (id=1645): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x8, 0xc, 0xffffffff, 0x1, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0x2, 0x4, 0x4, 0x143, 0x1014, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x5, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xfffffffffffffec2, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000ffb000/0x2000)=nil, 0x2000}, 0x1}) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r2 = accept4$netrom(0xffffffffffffffff, 0x0, &(0x7f0000000040), 0x0) getsockopt$netrom_NETROM_T4(r2, 0x103, 0x6, &(0x7f0000000080)=0xada, &(0x7f0000000140)=0x4) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r1, 0xf, 0x0, 0x0, 0x0, 0x0, 0x3f00, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x3}, 0x50) 1m12.012593146s ago: executing program 37 (id=1651): r0 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000300), 0x16b080, 0x0) ioctl$PIO_FONTRESET(r0, 0x4b6d, 0x0) r1 = socket(0x400000000010, 0x3, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = userfaultfd(0x80001) r4 = gettid() r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) mount(&(0x7f0000000040)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000100)='.\x00', &(0x7f0000002280)='vxfs\x00', 0x8000, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r7, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000600)=[@text64={0x40, 0x0}], 0x1, 0x74, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'batadv_slave_0\x00'}) ioctl$KVM_RUN(r7, 0xae80, 0x0) prlimit64(r4, 0x0, &(0x7f00000000c0)={0x1, 0xe}, &(0x7f0000000200)) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f0000000140)) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000000340)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x3}) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18010000000000000000000000100000850000007b00000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000240)='netlink_extack\x00', r8}, 0x10) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r9, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000007900)={&(0x7f0000000cc0)=@newtaction={0xa4, 0x30, 0x216822a75a8bdd29, 0x0, 0x0, {}, [{0x90, 0x1, [@m_skbmod={0x5c, 0x1, 0x0, 0x0, {{0xb}, {0x30, 0x2, 0x0, 0x1, [@TCA_SKBMOD_ETYPE={0x6}, @TCA_SKBMOD_PARMS={0x24}]}, {0x4}, {0xc}, {0xc}}}, @m_mpls={0x30, 0x2, 0x0, 0x0, {{0x9}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}}, 0x0) syz_io_uring_setup(0x0, &(0x7f0000000280), &(0x7f0000c57000), 0x0) ioctl$UFFDIO_ZEROPAGE(r3, 0xc018aa06, &(0x7f0000000380)={{&(0x7f00007db000/0x2000)=nil, 0x2000}}) socket$netlink(0x10, 0x3, 0x0) r10 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x18, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r11, {0x0, 0xa}, {0xffff, 0xffff}, {0xf, 0xf}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x0) socket$inet6(0xa, 0x0, 0x1) 1m9.205353872s ago: executing program 38 (id=1660): r0 = socket(0x11, 0x2, 0x1) socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000000)) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) read$FUSE(0xffffffffffffffff, &(0x7f0000002c00)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xffffffffffffffdd) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) r3 = syz_open_procfs(r2, &(0x7f0000000080)='uid_map\x00') r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r0) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) getpriority(0x1, 0x0) quotactl$Q_QUOTAON(0xffffffff80000201, 0x0, 0x0, 0x0) sendmsg$NL80211_CMD_START_SCHED_SCAN(r0, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="01040000", @ANYRES16=r4, @ANYBLOB="00042cbd7000fddbdf254b00000008000300", @ANYRES32=r5, @ANYBLOB="0c0099000e000000710000000600eb00030000000600eb00030000000a0006000802110000000000040087000800dc00bd000000"], 0x50}, 0x1, 0x0, 0x0, 0x4004}, 0x20000800) preadv(r3, &(0x7f0000002bc0)=[{&(0x7f00000002c0)=""/67, 0x43}, {&(0x7f0000000940)=""/4096, 0x1000}], 0x2, 0x0, 0x3) 1m7.473784347s ago: executing program 39 (id=1667): r0 = socket(0x2a, 0x3, 0xfffffffe) r1 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/card1/oss_mixer\x00', 0x8000, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000040), 0x10) mmap(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x100000c, 0x10, 0xffffffffffffffff, 0x8de50000) sync_file_range(0xffffffffffffffff, 0xfa60, 0xda98, 0x0) r3 = socket$pptp(0x18, 0x1, 0x2) bind$pptp(r3, &(0x7f0000000080)={0x18, 0x2, {0x1, @private=0xa010102}}, 0x1e) fsync(r3) r4 = open(&(0x7f00000000c0)='./file0\x00', 0x50002, 0x104) sendmsg$RDMA_NLDEV_CMD_SET(r4, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x2c, 0x1402, 0x200, 0x70bd2b, 0x25dfdbfd, "", [@RDMA_NLDEV_ATTR_DEV_NAME={0x9, 0x2, 'syz2\x00'}, @RDMA_NLDEV_ATTR_DEV_DIM={0x5, 0x54, 0x1}, @RDMA_NLDEV_ATTR_DEV_DIM={0x5, 0x54, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000}, 0x4) ioctl$SNDRV_CTL_IOCTL_ELEM_LOCK(r4, 0x40405514, &(0x7f0000000200)={0x0, 0x1, 0xc, 0x7cbb}) sendmsg$OSF_MSG_REMOVE(r0, &(0x7f0000000e80)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000e40)={&(0x7f0000000280)={0xbb8, 0x1, 0x5, 0x401, 0x0, 0x0, {0x0, 0x0, 0x4}, [{{0x254, 0x1, {{0x2, 0x8}, 0x1, 0x14, 0x3, 0x9, 0x13, 'syz0\x00', "ed70511987d437975e60eb32752bc4a8fcd1e6f767f91048040e92d1a6d6b762", "42633bb92a7b1888c379d05893ad1da86010b50a3c7f41122ad6b00e9cb67b90", [{0x1, 0x3, {0x6, 0x4}}, {0x100, 0x6, {0x1, 0x9}}, {0x9, 0x1, {0x2, 0xf}}, {0x5, 0xae, {0x0, 0x10000}}, {0x7, 0x8bd6, {0x2, 0x48c}}, {0x3, 0x0, {0x3}}, {0x0, 0x7, {0x1}}, {0x5, 0x4, {0x2, 0xffffffff}}, {0x97b, 0x3, {0x1, 0x7}}, {0x6, 0x0, {0x0, 0x2}}, {0x3, 0xf876, {0x3}}, {0xe, 0x8, {0x2, 0xd}}, {0x4, 0x2, {0x0, 0x8}}, {0x8a66, 0x7, {0x0, 0x8}}, {0x2, 0x1815, {0x0, 0x3}}, {0x2, 0x8, {0x1, 0x7}}, {0x5, 0xb36, {0x0, 0x52ab}}, {0xfffa, 0x2, {0x2, 0x85}}, {0xffff, 0x7, {0x2, 0x7}}, {0x5d, 0x3, {0x1, 0xf}}, {0x4, 0x7fff, {0x0, 0x386e}}, {0x800, 0x2, {0x0, 0x9}}, {0x1, 0x69c3, {0x0, 0xffff8001}}, {0x9, 0x0, {0x3, 0xfed4}}, {0xff81, 0x0, {0x2, 0x800}}, {0x7fff, 0x7, {0x0, 0x101}}, {0xfff8, 0x3, {0x0, 0x8}}, {0x7, 0xfff1, {0x1, 0x9}}, {0xdf, 0x5}, {0x4, 0x7fff, {0x3, 0x7f}}, {0x8, 0x0, {0x0, 0x40}}, {0x0, 0x1ff, {0x2, 0x7ff}}, {0x6, 0x6, {0x1, 0x5}}, {0x6, 0x2, {0x1, 0x6}}, {0x4, 0xfffb}, {0x7f, 0x6, {0x3, 0x10000}}, {0x401, 0x4, {0x2, 0x4}}, {0x0, 0xfff2, {0x3, 0xe}}, {0xbffb, 0x8001, {0x2, 0x3}}, {0x8, 0x1, {0x2, 0x5}}]}}}, {{0x254, 0x1, {{0x3, 0x2}, 0x7, 0x0, 0xeee2, 0x7, 0x13, 'syz0\x00', "f5eeac5e2e15615fe28ff91492a44337097d173457881b79f8b7f2c80c4a465c", "2c399606992fcae1e9ff2296a224af1d1180c8eaff228cecb8098da3e08e32a1", [{0x9, 0x400, {0x0, 0xffffff80}}, {0x6, 0xf, {0x3, 0xb}}, {0x7, 0x7, {0x0, 0xfff}}, {0xad, 0x100, {0x3, 0x81}}, {0x0, 0x4, {0x1, 0xc83}}, {0xf231, 0x4, {0x2, 0x4}}, {0x1b0, 0x6, {0x0, 0x7}}, {0x9814, 0x8001, {0x3, 0x7}}, {0x5, 0x1ff, {0x3, 0x800}}, {0x0, 0x15a, {0x2, 0xfff}}, {0xa, 0x4376, {0x1, 0x2}}, {0x8, 0x8, {0x0, 0x6}}, {0x1, 0x9d2, {0x2, 0x81}}, {0x5, 0x5, {0x0, 0x2}}, {0x7f, 0x6, {0x3, 0x4}}, {0x5, 0x4, {0x1, 0x80}}, {0x5, 0x2, {0x2, 0x7}}, {0x81, 0x65be, {0x0, 0x7}}, {0x200, 0x802, {0x3, 0x2}}, {0x6, 0x5, {0x3, 0x9}}, {0x3, 0x4, {0x2, 0x4}}, {0x1, 0xd, {0x6fc1fc409de71416, 0x4}}, {0x2, 0x4000, {0x3, 0x400}}, {0xfff, 0x8000, {0x2, 0x800}}, {0xfed, 0xced, {0x3, 0x8}}, {0x5, 0x5, {0x1, 0xfffffffc}}, {0x0, 0x8, {0x2}}, {0x7, 0x76ba, {0x2, 0x5}}, {0x81, 0x4, {0x1, 0x9}}, {0x10e, 0x3, {0x2, 0x3}}, {0x91, 0x7, {0x3, 0x6}}, {0x6, 0x5, {0x2, 0x659}}, {0xf, 0xb5ad, {0x1, 0x8}}, {0x8, 0xfff, {0x3, 0x2fb36661}}, {0x0, 0x7f, {0x0, 0x30}}, {0x4, 0x7, {0x2, 0x3}}, {0x7ff, 0x8, {0x1, 0x9}}, {0x90, 0x2, {0x0, 0x274aa6c6}}, {0x6, 0x1, {0x3, 0x1}}, {0x0, 0x2, {0x3, 0x4}}]}}}, {{0x254, 0x1, {{0x3, 0x8000}, 0xea, 0x35, 0xff00, 0x1, 0x6, 'syz0\x00', "04a0d6a199c6f859056fb0e6e2e32973f5a8f278d1f01ba4bce420e1aa219f4c", "dec6c3996ea6484d4781024ecddc5741a0c3aca539bb44c80bcbdac635ca9db9", [{0x3, 0x1, {0x3, 0x80000000}}, {0xff, 0x1, {0x3, 0x8}}, {0x31, 0x1, {0x2}}, {0x59d1, 0x9, {0x2, 0x9}}, {0x1, 0x7, {0x0, 0x100}}, {0x5, 0x5418, {0x1, 0x9}}, {0x2, 0xf3, {0x1, 0x69}}, {0xe000, 0x8, {0x1}}, {0xfe01, 0xfff, {0x2, 0xffff8000}}, {0xa, 0x4, {0x1, 0x3b0}}, {0x2, 0x7ff, {0x3, 0x4}}, {0x43ad, 0x9, {0x3, 0x7}}, {0x2, 0xfff, {0x3, 0xf}}, {0x8, 0x4, {0x1, 0x9875}}, {0x6, 0x8b5, {0x1, 0x7}}, {0x80, 0xe, {0x0, 0x80000001}}, {0x4, 0xfffd, {0x2, 0x9088}}, {0x3, 0x8, {0x1, 0x9}}, {0x5, 0x4, {0x1, 0x3}}, {0x1000, 0xb, {0x1, 0x3}}, {0x7, 0xe, {0x2, 0x6}}, {0x3, 0x9, {0x0, 0xfffffe00}}, {0x200, 0x2, {0x1, 0x1000}}, {0xfffe, 0x0, {0x3, 0x7}}, {0x81, 0x1, {0x2}}, {0x3ff, 0xffff, {0x2, 0xf05}}, {0x200, 0x7, {0x0, 0xffffffff}}, {0x3, 0x1ff, {0x3, 0x4}}, {0x4, 0xffb0, {0x2, 0x4}}, {0x7, 0x1, {0x2, 0x7cd}}, {0x1, 0x5, {0x1, 0x7}}, {0x1, 0xe7d0, {0x3, 0x5}}, {0x401, 0x9, {0x1, 0x1}}, {0x8, 0x1, {0x2, 0x9}}, {0x161c, 0x9, {0x1, 0x10000}}, {0x1, 0x6, {0x1, 0x17a}}, {0x1, 0x3f, {0x2, 0xffff}}, {0x115, 0x81, {0x2, 0x3ff}}, {0x2, 0x2, {0x2}}, {0x0, 0xa3b6, {0x2, 0x9}}]}}}, {{0x254, 0x1, {{0x1, 0x1}, 0x3, 0x4, 0x400, 0x8, 0x6, 'syz1\x00', "fe24d04f8a33231da7105289735f90f16b437ed799b1c0feb1469dc0070d9fb8", "7c12aef492dc85a09899b5ddcf6934a1c320f1280775f720f527a93aa0ffe99f", [{0xfffe, 0x2, {0x3}}, {0x2, 0x1, {0x0, 0xffffffff}}, {0x0, 0x8, {0x2, 0x101}}, {0x8000, 0xfff, {0x2, 0xe32}}, {0x1, 0x4, {0x2, 0x800}}, {0x7, 0xff, {0x1, 0x5}}, {0x31, 0x3, {0x3, 0x1}}, {0x0, 0xffff, {0x1}}, {0x8, 0x7, {0x1, 0xf632}}, {0x3, 0x2, {0x0, 0x1}}, {0x1, 0x0, {0x3, 0x29}}, {0x2, 0x3, {0x2, 0x2}}, {0x401, 0x5, {0x3, 0xc06}}, {0x7, 0x1, {0x3, 0x4}}, {0x4, 0x5, {0x1, 0x7}}, {0xce6c, 0x100, {0x1, 0xfffffffa}}, {0xb, 0x1ff, {0x0, 0x82f4}}, {0xc, 0x1, {0x3, 0x10}}, {0x1, 0x5, {0x0, 0x8359}}, {0x1000, 0x9, {0x2, 0xa}}, {0x5, 0x7ff, {0x0, 0x9}}, {0x6, 0x200, {0x1, 0x7}}, {0x7, 0x7, {0x2, 0x29}}, {0x6, 0x4, {0x2, 0x5}}, {0xff81, 0x6, {0x2}}, {0x4, 0xfff, {0x0, 0xfffffffd}}, {0x6, 0x8d4, {0x1, 0x7}}, {0x5, 0x7, {0x1, 0x6}}, {0x10, 0x2, {0x3, 0x2}}, {0x4, 0x5, {0x0, 0x5}}, {0x40, 0x2, {0x3, 0x7}}, {0x0, 0x6, {0x2}}, {0x10, 0x1000, {0x6, 0x101}}, {0xffc0, 0x6, {0x3, 0x6}}, {0x400, 0x1, {0x2, 0x40}}, {0x91f, 0x3, {0x3, 0x100}}, {0x5, 0x4, {0x2, 0x1}}, {0x1, 0x5}, {0x3, 0xd, {0x1, 0x1}}, {0x5, 0x5b, {0x0, 0xff}}]}}}, {{0x254, 0x1, {{0x1}, 0xba, 0xcf, 0xe3, 0x0, 0x9, 'syz0\x00', "e7b9761135f15cfd20e78d8a234b099a8674c5898f8a2a32bf4fe52d778a5f6f", "8ad409623f85a65491102e183a6507970858b2605ef28c4e81cbfc1c4f3e9e7a", [{0x8, 0x62cf, {0x2, 0xffff}}, {0x4, 0x2e, {0x0, 0x4}}, {0x8, 0x1, {0x1, 0x2}}, {0xfff, 0x2, {0x3, 0xc}}, {0x4808, 0x7ff, {0x3, 0x9}}, {0xe, 0x100, {0x1}}, {0x8, 0x6, {0x0, 0x6}}, {0x1, 0x1, {0x2f25d0039eba65ee, 0x2}}, {0x2, 0xff38, {0x1, 0x9}}, {0x68, 0x7fff}, {0x7, 0x40, {0x1, 0xffffffff}}, {0x8, 0x5, {0x1, 0xb}}, {0x6, 0xe04, {0x1, 0xfffffff0}}, {0xaf0, 0x1000, {0x1, 0x2}}, {0x81, 0x7f, {0x1, 0x8}}, {0x0, 0x4, {0x0, 0x9}}, {0xffff, 0x5, {0x1, 0x7ff}}, {0x3, 0x7fff, {0x2, 0x80000000}}, {0x5, 0xb4b, {0x0, 0xb}}, {0x8, 0xffed, {0x1}}, {0xe, 0x3, {0x1, 0x40}}, {0x0, 0x9}, {0xd3d, 0x4, {0x0, 0x8001}}, {0x6, 0xfff, {0x3, 0x3}}, {0xd3e, 0x3, {0x1, 0x80000001}}, {0xd6, 0x3, {0x1, 0x1}}, {0x400, 0x700, {0x3, 0xfffffff8}}, {0x3, 0xe, {0x0, 0xf}}, {0x401, 0x7, {0x3, 0x800}}, {0x9, 0x9, {0x2, 0x9}}, {0xfffb, 0x0, {0x2, 0x1}}, {0x40, 0xca7, {0x0, 0x7}}, {0x8000, 0x2, {0x1}}, {0x280, 0x2, {0x0, 0x1}}, {0x40, 0x700, {0x2}}, {0x5, 0x6, {0x3, 0x7}}, {0x0, 0x10, {0x2, 0x8000000}}, {0x2, 0xb, {0x1, 0x80000000}}, {0x1, 0x7f, {0x1, 0x9}}, {0x7, 0x35d, {0x2, 0x62d}}]}}}]}, 0xbb8}, 0x1, 0x0, 0x0, 0x20060000}, 0x10) r5 = openat$urandom(0xffffffffffffff9c, &(0x7f0000001000), 0x121202, 0x0) r6 = socket$netlink(0x10, 0x3, 0x6) r7 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$NS_GET_OWNER_UID(r4, 0xb704, &(0x7f0000001240)=0x0) ioctl$TIOCGPGRP(r4, 0x540f, &(0x7f0000001280)=0x0) r10 = syz_open_dev$MSR(&(0x7f00000012c0), 0x6, 0x0) r11 = socket$nl_crypto(0x10, 0x3, 0x15) ioctl$vim2m_VIDIOC_EXPBUF(r4, 0xc0405610, &(0x7f0000001300)={0x4, 0x7, 0x3, 0x880, 0xffffffffffffffff}) fcntl$getownex(r4, 0x10, &(0x7f0000002780)={0x0, 0x0}) ioctl$DRM_IOCTL_GET_CLIENT(r4, 0xc0286405, &(0x7f00000027c0)={0x7, 0x401, {}, {0xee01}, 0x5, 0x80}) getresgid(&(0x7f0000002800)=0x0, &(0x7f0000002840), &(0x7f0000002880)) r16 = syz_clone3(&(0x7f0000002b80)={0x10004800, &(0x7f00000028c0), &(0x7f0000002900), &(0x7f0000002940), {0x9}, &(0x7f0000002980)=""/213, 0xd5, &(0x7f0000002a80)=""/134, &(0x7f0000002b40)=[0xffffffffffffffff, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0], 0x6, {r4}}, 0x58) r17 = getuid() ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r4, 0xc018937b, &(0x7f0000002c00)={{0x1, 0x1, 0x18, r1, {0xee00, 0xee01}}, './file0\x00'}) r19 = gettid() stat(&(0x7f0000003a80)='./file0\x00', &(0x7f0000003ac0)={0x0, 0x0, 0x0, 0x0, 0x0}) sendmmsg$unix(r4, &(0x7f0000008180)=[{{0x0, 0x0, &(0x7f0000000fc0)=[{&(0x7f0000000ec0)="aabb6fb3e20ce2fdcdb6b5c57f988cfc", 0x10}, {&(0x7f0000000f00)="1df798ebdc50ae6f2e639c4ea4297c6255408b34acb219b4e77f440707466b1b79347551e5da314a49f2fdc17ded12387df0d9e42ec63bf8441dc8346069e760fd0dba45f6f79bb35dd35f36d644004de58088241a7d3fe30c727f0095d05ddf231a6e227cb83631195ddb07f57a65d5189cbf5d10c90a0ac8bf46452145c676e192debe589f9f8cb9db7af09a2c3f1c3f57", 0x92}], 0x2, &(0x7f0000001040)=[@rights={{0x20, 0x1, 0x1, [r5, r2, r3, r3]}}, @rights={{0x30, 0x1, 0x1, [r2, r2, r1, r6, r7, r1, r3, r4]}}], 0x50, 0x20040801}}, {{&(0x7f00000010c0)=@abs={0x1, 0x0, 0x4e20}, 0x6e, &(0x7f0000001200)=[{&(0x7f0000001140)="7f5cb6328bb567384cd3e5be13581991923dcce8e0793b58bec943d9e53b6586439d8d1babf052c927e866946d92452e2585bfd8a98507f71fe1a8d9a1e8b3bced5c299365feb315064c83b021f60c024e895812c2756c5f8ea6a2d06f18bea9b945903ec93e2aecccadc152f057593f8b71bf8acec252b949e9d8288bd3a51f4c5aeb493caf2475283aae24eef409571e91e1cf18f25b565cfa27ecc9b4b266df70eb31c03602bebc603ef61414ed4b02ac5b8a5b1fd0e3753610d4", 0xbc}], 0x1, &(0x7f0000001340)=[@cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff, r8, 0xee01}}}, @cred={{0x1c, 0x1, 0x2, {r9, 0xffffffffffffffff, 0xee00}}}, @rights={{0x20, 0x1, 0x1, [r2, 0xffffffffffffffff, r10, r11]}}, @rights={{0x14, 0x1, 0x1, [r12]}}], 0x78, 0x800}}, {{0x0, 0x0, &(0x7f0000002700)=[{&(0x7f00000013c0)="ba8209a6281b75095a6048b03d16d0340b6662d235a8e67e5472d69fe661a9d2355f6185f78d38be431338937a33211b", 0x30}, {&(0x7f0000001400)="0d5e93693a1593533b6432f241b62969c105f1dfddd237524df8ad84bf29eb88abdf", 0x22}, {&(0x7f0000001440)="485b1d3bfc444a689414821c608c7ea4ca414c9cac682a32c39e4f2b7388f1f2f5bfa7d3d3ee536f4247b43e83300adf7d5b7d69908221969e2027632fcd6bbea38534f441fb53835041d82b79c36c8b682bdc52a352ad952d296d54dba3b44af522846300cf686529d3d8677fb3217dedbce1319f98e9341497f52e78011c543acfe104beca74ccc02176a86aa273fc35dddcf9f5e95e7808e5ecf7aeb727e70389655f28103e2b9defc9201cda5791dda9", 0xb2}, {&(0x7f0000001500)="7a15a0494c15467311fcee44b31e12f316fb0c9992aaff605154d7d01e99bf057ace3c176385e644d037bec63b33193c54d50acf44827f36f2f867ed2a9a9fbf1554e84eb977f21918b4544932c6f8efc81d9d7dd2a4cd3b1d860fdc3528cafd4e35a2c2d3a0f4dbea5a41f7838b3674d4f3fdd7e3eba917bdc4a1176be8e181f8dc4879996645205248fd3ad3b877907c4cd6480400974e608ea2c161419532381067709c448586031f8b5c4ca11362783a44efdf37202d30d917e1ffeb68efb1cb69f8228f9290cc", 0xc9}, {&(0x7f0000001600)="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", 0x1000}, {&(0x7f0000002600)="20def063b2b5ec342318446d89aa185746c0d71678f99b83c329322b551449e314d8086860460ae27a45c8f017e4c4dca78e117ea0e2b2bfa7b4f7e085d6da9a0a0d640c876bc8f679bd48af8bfd5d4f331e8eb5a79c1ea6166dd4b6f5c8e4fce58c6b34ad484aa8862f248bdfef46b6fdf18ee379ea92346c64c0cbe5e20b4196391f496667e50915bbfb2bf53bcfb8f3f34def78fb2c9cf84e7888abe1e0596abe9f432d1ed0af7a29304adf41cc21a43c4382ac98150898ab019e395ac8f810f59c48919a4b98d11e6524eb", 0xcd}], 0x6, &(0x7f0000002c40)=[@cred={{0x1c, 0x1, 0x2, {r13, r14, r15}}}, @cred={{0x1c, 0x1, 0x2, {r16, r17, r18}}}], 0x40, 0x400c0}}, {{&(0x7f0000002c80)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000003440)=[{&(0x7f0000002d00)="07ddc45f8b13e38c5a9731a4ae377e5e95244a87c8d6caf154488ebd45aa0bab7ecaf09d5657859ec0b73626b2f4cf5a56eebb19b9a6c42effbddf21c0bf7bb35a8b153cc424e2027a9b3316653d22f9abcb8805e228db29eb8d34e862dae4c0e36a8c0d23768faa1e1937cac1872493569e543f4cf9d23496f2e1f54d0e0267f71e6208439d0fbe8d27c2e6765b1edf237f15041be211e5377b8de2aa5a6feacf592658fb522b03f1cfec8cfe3809fb7224c59d2dd27393a50971174972169504b0", 0xc2}, {&(0x7f0000002e00)="f223c0318fb91ee23432bda9e3453ebc1ae67323abfaeb4df624da646dcbe4d8a35753920e2004037f7e7a0c24f230c8dd7c6ab95f8b86087b8e39c802fdba0283b60c33bd0e3b35662eb783d2c2a66bcdaa1daba3fe998ab84c3a5ac119855680c9bd3f43c089e9e2a359240775d27eafc2433e03e555f7616ff98ba1cefde6da4a0072826a7736c95826b5f8c56f05bd34d89ec22cce62fe0e415fd0b75e24c9516335abb08fae186853b2c70d", 0xae}, {&(0x7f0000002ec0)="2f6989e3661f96c51bffd5d7f72c1c9c57e1993011b9d2d92a7f98b08b26f2565a43fd90f8b2c159a8c1b0250de03936f2dd532b9a516c9702907c253982660c0e7270e9e8de7fdeed796f2153b791aea411247fd89bb494dc", 0x59}, {&(0x7f0000002f40)="785af183cb4f9522158e2fa2ce31859100592ec361fe4e4f6a20371f811077124fc6c91bbd10c82671d44ad5c077e99508e18f837b1d7c8a9e1b2258b64e7b79eb143734a2c7266eed83c53e183176ebb54382d18d498f2c29fd44a7d40a7a403c6da88c852236a62899f2f61a11578ceb56695cfded227cc1b85d0105e618575e9ab5017e2396c3259c3a898c5f0479575183e9498e6fd067db05e15ca465a9587f34efbba5abc369f539b9c4e61da36563dd54f7ef21bf091813661f72ee91f0b0d2e0cb579f", 0xc7}, {&(0x7f0000003040)="794d8c840baded504bd459d4de30a75eefe453548d382bef081560de6a8713fc2c5057e6fa09335df9f6b62d8ba8b3aa65a3714417c4609fb063e33b03067425aab6fbd3650ad0bcf80042587657098ce94e81f1b19a951c3c40a99979dc32147ba70950699d6a4a19f51eafe0b4b36f0c54d1329bae3236b403172026eea1e88d39eebafed50f99065bf4d456e08dd0b8f8fcc215bb29715d6844b0f58a1777f3698138774624141000df173156aa2c187070263549bdb434e6c7b64dae03c933eb3bcde81511611d6c0eb2e0a4fe5b02", 0xd1}, {&(0x7f0000003140)="32c620c31e2e06f5326d6af193521b", 0xf}, {&(0x7f0000003180)="2fae00fdadfae96c4d53d7dc13e8ee9275e312a09836f30715017a825fab13bc8ed68a1de13eda09f1889ad174427cd01cf30d80adf7970bff095cfe25b32545974fb95a78958a1a17c21594a30aae078e02b628603f10f1c74a6f81a3471b0ef17c3c08457d6b14c047fed4369484f131c21252443fe96f0acae6921032", 0x7e}, {&(0x7f0000003200)="ce532e1efdc4132e9eab7e378676a320d15628678e98c893324efacd4053ef65c4e559143c9ffe89567d698096827730001dd1aa89f76c6ebd72872a825316155835bf6693005faa4f96747af84ac70dee2fce10a83ea22bf501d8e85abb3e2b4d37af034441ecca2622e939b747d32a4895c0333420ce28c49a1b", 0x7b}, {&(0x7f0000003280)="e709a294ab7796215b6bae99675c95f7a1ecd83a8520e3a111053f49f1ed6a74d9e9df400f8ebbb2b4bf730380687702715644d70940770100a52c11273178bbd422a0dd560e1cc8ffe604eab9a28a5d7dc4cb3f74002459f310517bd97bc1ad136b6c57ae1781ff1a0adbb08ff392d80cbec35d0760e4f7bde639958b58414171417c976c27227090cdfaae39e79d6a42ad84e3b40c8884d7105aef0364318fa90019c80d55f2364c72f9d6bf3fe405b48e1628c99418421423330c793de6a0523328005f2a21e100f8580bf479db1ce9325199df58e070327326f6a0c5e396b51126e34e7df05df112384ad30b8409ee75df504ed02a32e3d457", 0xfb}, {&(0x7f0000003380)="388d566d31a489948914ad9fe1bd96ddb0722559670ad95c6c2039d25f181a9fd4db1bb5fcd81a9d513a4c3d1eafba1823b4318d1ec507c6db69b67ef25e3f4e508d13d273b0e5bb211c005ba7955137643fdc9740cee44c418a32f17957057008098c2cc5c9ec6fe990a646e72d8fc1695422f67d0defe40b89151b855e0f3a064e66e249e13e453aede845810b09cdd5125e654ffc4464bf2d6f9a2af9d4ed0de20192", 0xa4}], 0xa, 0x0, 0x0, 0x10}}, {{&(0x7f0000003500)=@abs={0x1, 0x0, 0x4e21}, 0x6e, &(0x7f0000003a00)=[{&(0x7f0000003580)="7a7a065af3f630ca1e6d46002c025c2208430dc1d7d114467b459f1490ebcadfeb1b26909a98b78680b7dc1df49fd11fa42e273c87b687684e4bdc16b9f023603217145f736eb35a38648a7028bc3951c1e0a726afbd568b034e128bf6836a1169e71831c6877d8f27716d5ccbcb8869d49213ea9be80ae5cbe9c2dbf365413ff79814d362df7fc5cec94b08c834dca0dc98f79524b85c6734e31adcf045c5f5c33007324c497e2cec467a6d9cf6e18ae0b49b67aaf564674be9d010fa95e590d91bf936423e02368d9baa97c048881f05c6873c78a5abba5322b5473a931456a8", 0xe1}, {&(0x7f0000003680)="a934fe42a60b602cbe137484e49b5f4a8ba7cdd1dcdf80a38ab4ed15fe6a54bb26a48b036659aa4d80eeda46706d0cdf66b2ba8dd27e523dbd133cf1ae61844e33184eabb2a3670fa45ee67919d2b991d2481c9b3a8d4060f404fac023095fb7e687d04f76a43e13632be9fa2071fc19130284dc23cd7ccd844cf045cafec64878e2e657ea2d6ff38b", 0x89}, {&(0x7f0000003740)="06e3c3351af9d9166e7f52dd8f3ff27f099a76aaa0ad0fee3349da1fcd069e8b12031d1dc2d8bfcf139ef37eeb9c8b3cb180d184ec92e901f1c86d2e8a8f26828ca0e17957a5b1890548b39ba66f55f9a58088778360f23c82e93a0a5c38b4954af13fae68d05cc73e5477144d3e3be75e531715504a", 0x76}, {&(0x7f00000037c0)="0f44d247963baaa7dfa1c1664175cd26f24ceb5faf8dcb8a54a468d6b76d97be4bc91149d09b1ba5c0d4a8de1d2298f24a6433639c733856aa745a4649fc9bcc17b83f26029448fa7b3696ac98684af01663947f3f89df4e06df9c9365affbf88523e3fd8e2ae953311c99d6923e1178c40a2212f90d637427ccef1044cda34a6acda9d0e06ef889d7c09d1a8d28629c894200df56cdc7912c745dcdd27f59ce", 0xa0}, {&(0x7f0000003880)="7c605f96ad30d6fd6128165d39105f9310f166d0a32662908c7533f7339e0e1c3a24ed4d1c59a78042421dec4f035363b2f4a1906aa5d2a801d534d8fb72a57f672fd82a8cb8", 0x46}, {&(0x7f0000003900)="8d45bd2545c42e709e77ab2d5fc5a28de7952a918a5c3f482adf178055e93ccdadb24d3fbaeb34170d8cfedaaf11ed0ae46d6113a15fe9e1413a6d8026bb4e5e3b1fb8808e5cc3a72f6075369ef617e6e054af349de2247cebbb79ffdee7ec00", 0x60}, {&(0x7f0000003980)="bd825ef3d23b583c857c05e0cbabdb0e56504321a8f4c36d7bad506a4361368bdb7928ad98eaa42854a8ec423d6196a46b22128a10ec407dd1810633a2cad2a0219ca88bbc0dd21d5a0d25f3b66838", 0x4f}], 0x7, &(0x7f0000005cc0)=[@cred={{0x1c, 0x1, 0x2, {r19, r20, 0xee01}}}, @rights={{0x1c, 0x1, 0x1, [r2, r2, r3]}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [r2]}}, @rights={{0x2c, 0x1, 0x1, [r3, r0, r0, 0xffffffffffffffff, r3, r3, r4]}}], 0xa8, 0x2}}, {{&(0x7f0000005d80)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000005e40)=[{&(0x7f0000005e00)="3adfee089d3eae5077a2a1bb99b9fc5bc4ab67754c5fe743a79204abb23063b7d31acd17f43737194da45f0154a68a0de5001c263e6b", 0x36}], 0x1, &(0x7f00000080c0)=[@rights={{0x2c, 0x1, 0x1, [r3, r3, r4, r4, r0, r2, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [r3]}}, @cred={{0x1c}}, @rights={{0x28, 0x1, 0x1, [r3, r1, r3, r0, r1, r1]}}], 0xb0, 0x24040061}}], 0x6, 0x0) 52.535615008s ago: executing program 9 (id=1669): r0 = socket$inet6(0xa, 0x3, 0xff) mknod(&(0x7f0000000080)='./bus\x00', 0x1000, 0x5) io_uring_enter(0xffffffffffffffff, 0x567, 0x0, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0}, 0x18) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x9) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = syz_io_uring_setup(0x76a6, &(0x7f000000a9c0)={0x0, 0xfffffffe, 0x80}, &(0x7f000000aa40), &(0x7f000000aa80)) r4 = socket(0x10, 0x2, 0x0) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000480)=ANY=[@ANYBLOB="14000000", @ANYRES16=r6, @ANYBLOB="010000000000000000000500000088b0097801e1e89b3e657a5c158e0a5604dea1972fc8462dc819d85cc3cc8f05339b515c05067900c035ae6599c8fdea2e61afb3b9e096eaa4ed854a49c8fa641db140b6dde490270b4ff67d59b8162658aba3927faaf232e2140b68e0f3607224c9bf32bfba3d9a9a8e913b6e14e7a59c7bd93bb3f9035c49f853e3fe01214cdb3c75baae868518f24eb4f1dcbf097ef325e41d2c29ae8867eae189f7ab094eb0ad988d"], 0x14}}, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r4, 0x89f1, &(0x7f00000000c0)={'ip6tnl0\x00', &(0x7f0000000000)={'ip6gre0\x00', 0x0, 0x2f, 0x8, 0x0, 0x1000, 0x18, @private0={0xfc, 0x0, '\x00', 0x1}, @mcast2={0xff, 0x3}, 0x0, 0x8, 0xd60, 0x80000001}}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[], 0x50}}, 0x0) io_uring_register$IORING_REGISTER_FILES2(r3, 0x6, 0x0, 0x3e) r7 = getpid() sched_setscheduler(r7, 0x2, 0x0) futex(&(0x7f000000cffc)=0x1, 0x6, 0x0, 0x0, 0x0, 0x0) futex(&(0x7f000000cffc)=0x1, 0x6, 0x0, 0x0, 0x0, 0x0) sendto$inet6(r0, 0x0, 0xfffffffffffffd2f, 0x300, &(0x7f0000000080)={0xa, 0x0, 0x0, @mcast2}, 0x1c) openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000000), 0x404000, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001380)={0x10, 0x3, &(0x7f0000000280)=ANY=[@ANYBLOB="18003c1a4fba54249a428fa720a7963b31000001f6ffff000000000000000095000000000000006a66272096a428861ab030662b99d5b5b4ebb480a0b870b4ec95d88193a3fd622b5c0db3ec33ef6356b7ddbf6d13b572b6b5f5abc62a7799d55a0000"], &(0x7f00000000c0)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1, @void, @value}, 0x94) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000040)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000300)="ab29d9281830990100010000000000bc979ae4df57144c51a3391625b8b5354134b06ef1355506aeae96e3f097503998f375a054fe53ea51e89a11506532991d60e1c65cc18dbe99369be03e492fb5feff067bb6f7f7c3ee1720000000054a63ac58225ed0502f5ac8999e0cd29b7450e741f04aeadf1774a5dbb3726ac1b6ad97d802d5fa0200f0769421fb965c73d6854e2a3ac844a3769f8449908ea5e2b2da1ff6119aeb26ac20000000000000600095491ae2c0cb2690cba61dae7a17740e8112ff188919c6e2e3d59ea16d625317c0d52a8d649dd0231a2a054863edba4aafe94b75510c648d29d7f9e48a43b8cb7d3c5a1e3ea67f87538140f8d633a54bceb8800000007ea147d3b26e903f608b6ab1844ea7cf630d828118bba0f0f85e2e6316ae1ed9a2a7d08a05c170cb76bf111930df0cfa60f7768571afdefe82a95296cee7c010f748a97046efcc774e7d85edbd5058104fef4942fb4430da89f67d1fea33bf2acfb704a610b3738b393eed8633fc8e8f6309322069", 0x17c}], 0x1, 0x0, 0x0, 0x900}}], 0x1, 0x0) 51.497833801s ago: executing program 9 (id=1672): mkdir(&(0x7f00000020c0)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000280), 0x0, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount$bind(&(0x7f00000000c0)='.\x00', &(0x7f0000000080)='./file0/file0/file0\x00', 0x0, 0x80700a, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='net/sctp\x00') open_tree(r1, &(0x7f0000000640)='\x00', 0x89901) 51.079676178s ago: executing program 9 (id=1673): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) creat(&(0x7f0000000080)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x120) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_NMI(r3, 0xae9a) io_submit(0x0, 0x1, &(0x7f0000001d00)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x8, 0x0, 0xffffffffffffffff, 0x0}]) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x100000000, 0x0, 0x0, 0x0, 0x0, 0x2004c8, 0x8000000, 0x0, 0x0, 0xfffffffffffffffe]}) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x4e22, @local}, 0x10) connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @remote}, 0x10) syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x802) r4 = syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0xaee2, 0x0, 0x2, 0xbfdffffc}, &(0x7f0000000000)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r5, r6, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r4, 0x47f6, 0x0, 0x0, 0x0, 0x0) syz_emit_ethernet(0x72, &(0x7f0000000a00)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x26}, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x64, 0x0, 0x4000, 0x0, 0x6, 0x0, @remote, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x2, 0x8, 0x10, 0x0, 0x0, 0x0, {[@timestamp={0x8, 0xa, 0x0, 0x52802da8}]}}, {"c9baa2ca6047607f4d2085bc00030a1c92aa2f3d5548aaf32090d3adf316eece17c3e07dade19d82557dd37bdcd3795b"}}}}}}, 0x0) 48.707293049s ago: executing program 9 (id=1677): bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x48) pipe2(0x0, 0x4080) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0xd000}) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) msgsnd(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='\x00'], 0x8, 0x800) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$KVM_RUN(r3, 0xae80, 0x700) 48.098222014s ago: executing program 40 (id=1677): bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x48) pipe2(0x0, 0x4080) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0xd000}) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) msgsnd(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='\x00'], 0x8, 0x800) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$KVM_RUN(r3, 0xae80, 0x700) 41.553351978s ago: executing program 3 (id=1698): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000005c0)=@newlink={0x3c, 0x10, 0x403, 0x1, 0xa5dfdbfe, {0x0, 0x0, 0x0, 0x0, 0x8000}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_PACKETS_PER_SLAVE={0x8, 0x14, 0x9}]}}}]}, 0x3c}, 0x1, 0xba01, 0x0, 0x40045}, 0x810) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x3, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="180000000000000000000000000000008500000061000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffbfffb702000008000000b703000000000000850000007b00000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) r2 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r2, &(0x7f0000000040)={0x28, 0x0, 0x0, @local}, 0x10) listen(r2, 0x0) r3 = socket(0x28, 0x5, 0x0) connect$vsock_stream(r3, &(0x7f0000000080), 0x10) sendmmsg(r3, &(0x7f0000000100)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000000)="1b", 0x40000}], 0x1}}], 0x1, 0x24008094) accept4$unix(r2, 0x0, 0x0, 0x0) socket$inet(0x2, 0x4000000000000001, 0x0) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r5}, 0x10) pselect6(0x40, &(0x7f00000001c0)={0x1, 0x0, 0x3, 0x0, 0x0, 0x0, 0x4}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x5f8, 0x0, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0xc, 0x1a}, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) syz_open_dev$MSR(&(0x7f0000001140), 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r1, 0x0, 0xe, 0x0, &(0x7f0000000900)="e02742e8680d85ff9782762f86dd", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 39.753268003s ago: executing program 8 (id=1707): socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000026c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) socket$inet6_tcp(0xa, 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x11, 0x8, &(0x7f00000017c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xffffffffffffff7e, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1200000002000000040000000600000000000000", @ANYRES32, @ANYBLOB='\x00!\x00\x00\x00\x00\x00', @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x1f, 0xb, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1d, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) pipe(&(0x7f0000000240)) socket$unix(0x1, 0x1, 0x0) socket$unix(0x1, 0x1, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='blkio.bfq.io_queued\x00', 0x275a, 0x0) syz_init_net_socket$bt_rfcomm(0x1f, 0x3, 0x3) socket$xdp(0x2c, 0x3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="02000000040000000400000008"], 0x48) socket$nl_generic(0x10, 0x3, 0x10) socket$kcm(0x11, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x1f, 0x2, &(0x7f0000000400)=ANY=[@ANYBLOB="850000000800000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0xa9) socket$inet_icmp(0x2, 0x2, 0x1) socket$netlink(0x10, 0x3, 0xb) openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x101842, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000180)=ANY=[@ANYBLOB="5c00fcff", @ANYRES16=r1, @ANYBLOB="010000000000000000001400000008000a00fc00000018000180140002006e657464657673696d300000000000000800080000fcffff08000900fc000000080011000700000008000e00800000000800", @ANYRES64=r0], 0x5c}, 0x1, 0x0, 0x0, 0x800}, 0x0) 39.540601769s ago: executing program 8 (id=1708): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='fdinfo\x00') fchdir(r1) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="640000000206030004000000000000000000000005000100070000000900020073797a300000000014000780050015000400000008001240000000000500050002000000050004000000000015000300686173683a69702c706f72742c6e6574"], 0x64}}, 0x10000) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x20200, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r3, 0xc00caee0, &(0x7f0000000000)={0x4, 0xffffffffffffffff, 0x1}) 39.425716544s ago: executing program 8 (id=1709): r0 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) sendmsg$802154_raw(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)="711f464eb50cd5279ce3dbfadd", 0xd}}, 0x40) setsockopt$inet_MCAST_MSFILTER(0xffffffffffffffff, 0x0, 0x30, 0x0, 0x310) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000100)='./file0/../file0/../file0\x00', &(0x7f0000000080)='mqueue\x00', 0x0, 0x0) mkdir(0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x1050c2, 0x1ff) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = dup(r1) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100008200040000000000"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xe, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000003, 0x28031, 0xffffffffffffffff, 0x8000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = openat$binfmt_register(0xffffff9c, &(0x7f0000000000), 0x1, 0x0) write$binfmt_register(r6, &(0x7f0000000040)={0x3a, 'syz3', 0x3a, 'E', 0x3a, 0xe65, 0x3a, 'E', 0x3a, 'syz1', 0x3a, './file0'}, 0x2c) write$UHID_INPUT(r2, &(0x7f0000002080)={0xf, {"a2e3ad21e08eeb661b5d350987f70e06d038e7ff7fc6e5539b0d650e8b089b3f363b68090890e0878f0e1ac6e7049b3b48959b649a240d5b67f3988f7ef319520100ffe8d178708c523c921b1b5b31070d07410936cd3b78130daa61d8e8040000005802b77f07227227b7ba67e0e78657a6f5c2a874e62a9ccdc0d31a0c9f318c0da1993bd160e233df4a62179c6f30e065cd5b91cd0ae193973735b36d5b1b63dd1c00305d3f46635eb016d5b1dda98e2d749be7bd1df1fb3b231fdcdb5075a9aaa1b469c3090000000000000075271b286329d169934288fd789aa37d6e98b224fd44b65b31334ffc55cc82cd3ac32ecdb08ced6f9081b4dd0d8b38f3cd4498bee800490841bdb114f6b76383709d8f5c554336909fda039aec54a1236e80f6a8abadea7662496bddbb42be6bfb2f17959d1f416e56c71b1931870262f5e801119242ca026bfc821e7e7daf2451138e645bb80c617669314e2fbe70de98ec76a9e40dad47f36fd9f7d0d42a4b5f1185ccdcf16ff46295d8a0fa17713c5802630933a9a34af674f3f39fe23491237c08822dec110911e893d0a8c4f6777478bc360934b82910ff85bfd995083bba2987a67399eac427d145d546a40b9f6ff14ac488ec130fb3850a27af9544ae15ffffffffffffffff1243513f000000000000000a3621c56cea8d20fa911a0c41db6ebe8cac64f17679141d54b34bbc9963ac4f4bb3309603f1d4ab966203861b5b15a841f2b575a8bd0d78248ebe4d9a80002695104f674c2431dca141fae269cab70e9a66f3c3a9a63e9639e1f59c0ede26c6b5d74b078a5e15c31634e5ae098ce9ee70771aaa18119a867e14ffd9f9db2a7869d85864056526f889af43a6056080572286522449df466c632b3570243f989cce7cd9f465e41e610c20d80421d653a5520000008213b704c7fb082ff27590678ef9f190bae97909507041d860420c5664b27921b14dc1db8892fd32d0ad7bc946813591ad8deff4b05f60cea0da7710ac0000000000008000bea37ce0d0d4aa202f928f28381aab144a5dc29a04a6a2b83c7068ae949ed06e288e810bac9c76600025e19c907f6435f7590000008271a1f5f8528f227e79c1389dbdfffe492f21579d2c15b8c70cdb1c332d86d87341432750861ec2bc3451edca194b221cfec4603d276bbaa1dfa6d4fb8a48a76eafc9a9a0270e4c10d64cd5a62427264f2377fe763c43470833ac96c45f357cbbaba8f1b1fdcc7cbb61a7cdb9744ed7f9129aede2be21ccfdc4e9134f8684b3a4f354da9a795e96334e207dff70f1988037b2ed3aaf575c0b88d8f146684078416d59fdee5325928974d12dad99dac44c3f0008047096a44002bebc2420aed92fa9b6578b4779415d4ac01b75d5495c118045651cf41c2fc48b778efa5ea5677747430af4162b987b80c3e001cd34e5c92f76cc4c24eeb8bc4e9ac2aed9a53803ed0ca4ae3a9737d214060005ea6f1783e287b3bee96e3a726eafe2fdfaa78d1f48c13b64df07847754b8400daaa69bf5c8f4350aeae9ca1207e78283cd0b20ceb360c7e658828163e2d25c4aa348561f927e88f63aa70e73a5e69b3df3495903f06572e1e007fa55a2999f596d067312f5779e8dbfdcf3427138f3d444d2639a10477f9bec4b0bbb6e3c04be68981f392203dd0ee3ef478e16dacfc5e3e03cf7ab8e3902f1b0ff034ef655b253ca509383815b1b6fc6522d4e4fdc11a48cf42d48604675fde2b94cf00500a2690891abf8ab9c015073014d9e08d4338b8780bdecd436cf0541359bafffa45237f104b96210403b2de9efed496f423500c7872c827467cfa5c4e72730d56bd068ed211cf847535edecb7b373f78b095b68441a34cb51682a8ae4d24ad0465f3927f889b813076a882e8020f06c4c2ba1dd5cac7c18876da865d258734dd73583df292892448039ef799cf0630becdcce04579b5561dc825ab829827945e020c1f67ee615feb6243378e0610060f02da93aec92a5de203717aa49c2d284acfabe262fccfcbb2b75a2183c46eb65ca8104e1b4da7fbb77ab2fc043aead87c32ab875ee7c2e7b7019c982cd3b43eaeb1a5fb135c0c7dcee8fe6516a328032f88c042891824659e9e94265c803b35ee5f83a2b210520106b8a358b50ab7a1fa89af9c251fe5294b3d1802d5676d95f160ec97b1ad94872cb2044642c37b4a6cc6c04effc1672db7e4b68d787d9a7a508ae54b3cd7369dde50e8c77d95a3d361c040babb171607caac2a3559ad4f75465f49c0d0ae3716db6e00cb11db4a5fade2a57c10238e204a67737c3b42aae501b20f7694a00f16e2d0174035a2c22656dc29880acebdbe8ddbd75c2f998d8ac2dfad2ba3a504767b6b45a45957f24d758ed024b3849c11d412a2a03b4047497022d9c30e23ef4df5c89644f48bb536f7945b59d7bcddff754413d135273ea8e75f22f216c6b9990ae71806f2c00b4025c48b75c0f73cdb9a7b8fa367b50028067e7f16f4dd569d462f4f19eacdb3ed70eeebb4e8b40427db6fe29068c0ca3d2414442e8f3a154704b0e51bc664a137b26be719f4f7c9a5678a674dfc95df80b9ce375dd649c8c704e509bd88c8e63d8c7dd67071115c8982ba46af4d6adcc9f68a75b9397b035153faf46366e7205dd8d6f37525c1a0e94610dd94323f6c15d085197149bfd6655548cfd9c52c9711937f79abb1a124f1210465483cd3b2d78378cfb85ed82e7da0f6eb6d279f2ae455925d0f6f1ba571eba281f2a654fb39ddff3b484439ff158e7c5419e037f3e3ad038f2211f1033195563c7f93cd54b9094f226e783271e1e5a2a2c10712eab625d64931cd4ffe6738d97b9b5ef828ee9fb059fc01af0e79c1e14b1d25988c69a399567c1d93768f7971d31488b8658a20878b7c1dd7ba02fc42939dde3d4a3339a65d507dc59c51097b40517705da56e9ebf0afa53282bf86dbb58c548069ff6eb95aade7cc66d7bbef724779ca1f731b3346ff177050373d79ff7b3e7f9bc0c1b4b266a8878b90baaa039d3e3b63979ac3df6e6f4859afd50238c7547a39b60810938044ae185d2ba3e00a4e73676864ae090d0300000000000000b378dd4dd891e937c2ea5410e0513005000000000000003911fab964c271550027697b52160687461602f88df165d884b36ec2b6c25a2f33c715687e9d4afb96d6861aca47da73d6f3144345f48843dd014e5c5ad8fe995754bd9cf32fce1e31919c4b2082fb0a30b9deae84bed4b28045634073c9c58c89d9e99c81769177c6d594f88a4facfd4c735a20307c737afa2d60399473296b831dbd933d93994ba3064279b10ea0c5833f41f157ea2302993dbe433b1aa3a3766d5439020484f4113c4c859465c3b415c3432f81db8719539d5bf372aaaea1cc43a6c5cbe59758bfee2916580dac4b008e595f437491d87abed02cefcd9db53d94d02daee67918e5d678746383074c6bc1050000002f7809959bc048850613d17ca51055f2f416a44fe180d2d50c312cca7cb14a2bdc331f57a9817139a206fc76957227ffff2de20a4b8e3737fbb42913777c06376f799eba367e21f94ca598705f5dcb767d6f0900d6b0f6095e53c4c4234d0c1fbe434f6ab8f43c0013ee93b83946ee7759e89d7bdd1a32d7b311711b757fe43c06d21a35810d8fe98b27faea8aa12bc8716eefc5c97c45ac33eeec964c5214bc3a9359bdea1cccab94f15e36319cb34ebcacedb82c2ed3de5a8a8f0011e8f74e82d7f96093530e76692839d7961939adfdeeeaff19d11efcafb6d546fef271e89d6cc2389e81ff58cefcce3fbf4625a7e7de40e42e07b3c7340002000000000000f288a4510de03dab19d26285eda89156d50dd385a60333ba5bbf5d77cd7007ad1519ad5470de3dd6d6080cafccf8a97406bb6b68a1f0c4549820a73c880f475f732ae00398e8bd1f4108b7807fb33b72685ec37a2d3f766413a60459516246e5a1d998a2017aef0948a68cf255315ab80dd349e891aef595dc4d470e8ac32a308e15fc37d06aeac289c0523f483e1ff7408c6087f1ab652f2ef91d4f2b01987b0f46da034e5c3f745a7ee8101a3934c54e24b48ec0275e2d0687dc746b0827cbf652f406c6b95f2722e58c05f752ce2126596e1cd7655b904801784c416b22f73d324678e2724f43f1fe687c7e8a60c28b82b6528341b648cdd56fed7cdcbb1575912d5ecd36dea3bca0b7427d8392c6289455e8f8d2ab2242729251ae033a9e02210e62df0546a74b333a1c48f95fd54acb5741259e8c5488efeee327415cc19451432c6f14c27693102a3cd84857cd6586fc5ca9a93eb0145fac0662ff86107f998a8ef7df8aa14046c55b03d3d47f88a8d60f7774a2ee08758897fb411a94b3c2fc5d5f0da42c0456ec015f08e5247d33ae2d35603ff8454c16f8342856935125102bb784ed7148b6ce431b63ee356b0c785f2f47b90e29389f22fc5b59a70efaea2bd40195af4486220d702e30bfc43c10ec23ea6283994a7dde4dcb61fea6b651fb1d62458d0741a12830052fcc460db043afe525629b40d7cee458e4cb5e930ed624806c43a006e39336d07c2b8081c128ad2706f48261f7897484c297a1a6613bc18f5a38d442768af38041efe03d152ef95ff569e76db2391f4509d7f339d92fdb4a89364949da398000000000000000d80a4fe654578376e599aff3565b1d531f30912b9945030b81ea9935fd46edb44a78f615255490a4b621501f2a9e4d24624c4dac9274118c67584f5d374755534d7f68f679c4ff516a9cc8036cbd65868fcb2bf1cb9aea4e05df72279fdb0d2b9e935c5af3cf474bed79dfc248c1f5aea4b8b32c5d295e57079d0fe662a46b7f71cd47744db86c50b704c971d90295c7b2c7439a2d78ccfa79b5fc2bff6bbf840262bf89394b3e0691953264d2700c838fa2c7b3425260f59554e502dcea39cb313b0000000000004ca7c12f45858d6284ca6270d6b2f0e58fded8a7b4a302a97bc641df07720ba2b26bbfcc807ca0abb1b44322269c21c5ec68cb068ea88067d905ea917bb03eefdaebdeabf2d0dce80997c915c8949de992587c2cb5fe36d7d3e5db21b094b8b77940b5f07722e47a08d367e5f84c96ec664b72934b99b3109af65d77e86abd6859cddf4bbae1f0930462df15fddbc48562ea3511a8065ef028cf12f14dcf6ebecd8d884836174faf1aa609e5f1ee1162dfa13bdc1fa7cfaadba85c72e9758f03a755d0be53f8d2a1dfb1c68cc164b0a0780d971a96ea2c4d4ca0398c2235980a9307b3d5bd3b01faffd0a5dbed2881a9700af561ac8c6b00000000000000f96f06817fb903729a7db6ff957697c9ede7885d94ffb0969be0daf60af93109eb1dee72e4363f51af62af6fb2a6df3bec89822a7a0b678058fa3fef86faec216eb6992162f8dcbf719c148cd2f9c55f4901203a9a8a2c3e90f3943dbc10360a1a49700d1dfbf66d69f6fbaf506c8bcce8bb0d872a02238926407a4eddd5d0fc5a752f90000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000400", 0x1000}}, 0x1006) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x21, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r7}, &(0x7f0000000000), &(0x7f0000000040)}, 0x20) r8 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', 0x0, 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r8, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r8, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r8, &(0x7f0000000240)={0x50, 0x0, r9, {0x7, 0x1f, 0x0, 0x202}}, 0x50) syz_fuse_handle_req(r8, &(0x7f0000008380)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f7ffffffffffffff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000018000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000052e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffea000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001d00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)={0x6c, 0x0, 0x4b2c}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 38.420423081s ago: executing program 8 (id=1710): mkdir(&(0x7f00000020c0)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000280), 0x0, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='./file0/../file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x89101a, 0x0) mount$bind(&(0x7f00000000c0)='.\x00', &(0x7f0000000080)='./file0/file0/file0\x00', 0x0, 0x80700a, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='net/sctp\x00') open_tree(r1, &(0x7f0000000640)='\x00', 0x89901) 38.349493156s ago: executing program 8 (id=1711): r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) ioctl$RTC_EPOCH_SET(r0, 0x4008700e, 0x4) r1 = syz_open_dev$I2C(&(0x7f0000000040), 0x0, 0x0) ioctl$I2C_SMBUS(r1, 0x720, &(0x7f0000000000)={0x1, 0x4, 0x5, &(0x7f0000000080)={0x17, "90f541f144d76e03c7b2986e7fe528299000"}}) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000200)='/sys/power/pm_wakeup_irq', 0x0, 0x0) io_setup(0x6, &(0x7f0000003b80)=0x0) io_submit(r3, 0x1, &(0x7f0000003d80)=[&(0x7f0000003cc0)={0x0, 0x0, 0x0, 0x0, 0x0, r2, &(0x7f0000003bc0)="c6", 0x1, 0x800}]) r4 = socket$kcm(0x10, 0x0, 0x0) r5 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r5}, &(0x7f0000bbdffc)=0x0) r7 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_SET(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="100000001614010000000010000c0000"], 0x10}}, 0x0) timer_getoverrun(r6) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) futex(&(0x7f000000cffc)=0x1, 0x86, 0x2, 0x0, 0x0, 0xfffffffc) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) r10 = ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r10, 0x4008ae89, &(0x7f00000000c0)=ANY=[@ANYBLOB="0100000000000800580001c0"]) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r11 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) ioctl$KVM_GET_NESTED_STATE(r2, 0xc080aebe, &(0x7f0000000980)={{0x0, 0x0, 0x80}}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000500)={&(0x7f0000000080)='percpu_create_chunk\x00', r11}, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f00000002c0)={'batadv0\x00', 0x0}) bpf$TOKEN_CREATE(0x24, &(0x7f00000003c0)={0x0, r2}, 0x8) bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@bloom_filter={0x1e, 0x1, 0x8, 0x0, 0x4, 0xffffffffffffffff, 0x7, '\x00', r12, r2, 0x0, 0x3, 0x2, 0x6, @void, @value, @void, @value}, 0x50) sendmsg$kcm(r4, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d80000001c0081064e81f782db44b9040a1d08040000000000000aa1180002000607002603600e12080b0f0000810401a8001605200001400200000803604e0cfab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee422fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef5d2defd5ccae8d3fb7c27a1059ae31c60e2234d732", 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x0) 38.262501685s ago: executing program 3 (id=1713): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000600)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(camellia)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'crc32-generic\x00'}, 0x58) r2 = accept4(r1, 0x0, 0x0, 0x0) sendto$packet(r2, &(0x7f0000000340)="55e061bc", 0xfdef, 0x804, 0x0, 0x0) r3 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCSERGETLSR(r3, 0x5459, &(0x7f0000000000)) r4 = accept4(r0, 0x0, 0x0, 0x80000) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r4) sendmsg$alg(r4, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000ec0)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x4000000) sendmsg$OSF_MSG_ADD(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000f00)={0x1060, 0x0, 0x5, 0x101, 0x0, 0x0, {0x1, 0x0, 0x8}, [{{0x254, 0x1, {{0x2, 0x8000}, 0x3, 0xee, 0x0, 0xfff, 0x18, 'syz1\x00', "ef5a5f1df5e07af7d6994cae2731416ff5d918dcf7ac181546eef160448f3f43", "1e129120ab3dbe8c53fbc95564d021647f6443e84569e78260592d70a9964a86", [{0x81, 0x76, {0x2, 0x1}}, {0x8, 0x9e1b, {0x1, 0x22687814}}, {0x7, 0x9, {0x2, 0x2}}, {0x32b, 0x3, {0x1, 0x2}}, {0x8c46, 0x1, {0x0, 0xb9}}, {0x8, 0x2, {0x1, 0x7}}, {0x4, 0x705, {0x3, 0xe}}, {0x6, 0x7fff}, {0x3, 0x3, {0x3, 0xc}}, {0x2, 0x28, {0x2, 0xb108}}, {0x83d, 0x0, {0x1, 0x8}}, {0x6, 0x3, {0x0, 0xf44}}, {0x6, 0x7, {0x3, 0x3ff}}, {0xfff0, 0x9, {0x3, 0x2}}, {0x3, 0x8001, {0x3, 0xfffffff9}}, {0x7, 0x6, {0x0, 0x1ff}}, {0x7, 0x9, {0x1, 0x3}}, {0x0, 0x0, {0x1, 0x821}}, {0x8, 0x4, {0x3, 0x6}}, {0x8, 0x4, {0x2, 0xf}}, {0x3, 0x3, {0xa1978957fe7e506b, 0xfff}}, {0xf, 0x5, {0x1, 0x80}}, {0x5, 0x834, {0x2, 0x9000}}, {0x31c, 0x9, {0x0, 0x6}}, {0x4, 0x8, {0x0, 0x25d}}, {0x0, 0x5, {0x1, 0xde7}}, {0x0, 0x0, {0x1}}, {0x7, 0x3, {0x3, 0x4}}, {0x8, 0x633, {0x0, 0x80c7}}, {0x4, 0xffff, {0x2, 0xb}}, {0x4, 0x3, {0x1}}, {0x5, 0x9, {0x1, 0x8001}}, {0x86cc, 0xa, {0x0, 0x1}}, {0x6, 0x4, {0x3, 0x7ff}}, {0x8, 0x7, {0x1, 0x6}}, {0x7, 0xff, {0x0, 0x7}}, {0x9, 0x6489, {0x0, 0x101}}, {0xff, 0xa6, {0x1, 0x5}}, {0x3, 0x4, {0x3, 0xfffffff9}}, {0x0, 0x400, {0x0, 0x40}}]}}}, {{0x254, 0x1, {{0x1, 0xf}, 0x0, 0xf1, 0x6, 0x7, 0x21, 'syz0\x00', "c0263924cc51a1577522b2ab0bac67394f1604a23aaeda4dffd786e0327b882e", "cbab775334331427757ef53745eca63e7926a294a4c3e7ce873f364d55022e86", [{0xb7, 0x6, {0x1, 0x1}}, {0xfb7, 0x960d, {0x1, 0x6}}, {0xfff8, 0x1, {0x2, 0x6}}, {0xc, 0x5af, {0x2, 0x2}}, {0x3, 0xe70, {0x3, 0xc}}, {0x3, 0x1, {0x3, 0x7}}, {0x7, 0x200, {0x2, 0xf780}}, {0x2, 0x4, {0x1, 0x7ff}}, {0x8001, 0x7fff, {0x1, 0x2}}, {0x6, 0x2, {0x1, 0x459}}, {0xda, 0x3, {0x2, 0x10000}}, {0x7, 0x8000, {0x3, 0x7}}, {0x4, 0x7, {0x2, 0x9}}, {0x6, 0x3, {0x0, 0x100}}, {0x7, 0x5, {0x0, 0x401}}, {0xfff8, 0x1, {0x2, 0x8}}, {0x1000, 0x7f, {0x2, 0x1}}, {0xfff, 0x4, {0x1, 0x46e}}, {0x9b, 0x1ff, {0x2, 0x48}}, {0x80, 0xf9, {0x0, 0x8}}, {0x0, 0xf000, {0x1, 0xa62}}, {0x1, 0x8000, {0x2, 0x1ff}}, {0x80, 0x9, {0x1, 0x2}}, {0xe3f1, 0x4, {0x0, 0xfffffff6}}, {0x5, 0x8, {0x3, 0x3ff}}, {0x7, 0x4}, {0x0, 0x8, {0x3, 0x64c5}}, {0x57, 0x7f, {0x3, 0x56}}, {0x1, 0x1, {0x1, 0xfffffffa}}, {0x3, 0x5, {0x2, 0x5}}, {0xf1, 0x0, {0x2, 0x6e7}}, {0x3, 0x4, {0x0, 0x3}}, {0xaf, 0x0, {0x3, 0xfb}}, {0x5, 0x5d, {0x1, 0x10001}}, {0x0, 0x10, {0x3, 0x2}}, {0x2, 0x6, {0x3, 0x362}}, {0x4, 0x9, {0x0, 0x7f}}, {0x1200, 0x899, {0x1, 0x9}}, {0xfff9, 0x2, {0x0, 0x6}}, {0x2, 0x4, {0x0, 0x7}}]}}}, {{0x254, 0x1, {{0x1, 0x9}, 0x9, 0x1c, 0x4, 0x2, 0xf, 'syz1\x00', "62387818708c9d812c250e38c7c44a9b5ea1f917c72b7b97b3d0b04b8c79a27e", "faa63a11551575d4d3275086e2744aab998b1417d0757b275a9e8d0cd9cd3990", [{0x4fa4, 0x24, {0x0, 0x9}}, {0x8, 0x3d0a, {0x3, 0x8}}, {0x1, 0x2, {0x2, 0x276}}, {0x8, 0xffff, {0x2, 0x1}}, {0x8, 0xc, {0x0, 0xe6}}, {0x0, 0x2d, {0x2, 0x2}}, {0x3ff, 0x5, {0x0, 0x4}}, {0x7, 0x8, {0x2, 0x10001}}, {0x1, 0x5, {0x1, 0xb}}, {0x6, 0xfffd, {0x3, 0x5}}, {0x336, 0xfe00, {0x1a19ed73ae8d201e, 0x6}}, {0x1, 0x7, {0x2, 0x5}}, {0x8, 0x4, {0x1, 0x8}}, {0x54, 0x80, {0x1, 0xffffffff}}, {0x100, 0x401, {0x2}}, {0x5, 0xfd, {0x3, 0xfffffff7}}, {0x5, 0x9, {0x1, 0x4}}, {0x897, 0x4, {0x1, 0xe}}, {0xcc6, 0x8, {0x3, 0x5}}, {0xf001, 0x2, {0x2}}, {0xef9, 0x4, {0x1, 0x9}}, {0x101, 0x725, {0x2, 0x40}}, {0x8, 0x0, {0x1, 0x1}}, {0x3277, 0xd, {0x2, 0x5}}, {0x1, 0x8, {0x1, 0x49}}, {0x0, 0x9, {0x1, 0xa}}, {0xd2, 0x40, {0x3, 0x98}}, {0x0, 0x6, {0x2, 0x7}}, {0x5c8, 0x10, {0x3, 0x9b}}, {0xf39c, 0x40, {0x1, 0x2}}, {0x47, 0xf, {0x0, 0x10000}}, {0x200, 0x4000, {0x2, 0x6}}, {0x2f6a, 0xfff, {0x2, 0x10001}}, {0xe, 0xff, {0x1}}, {0x1, 0x9b, {0x1}}, {0xfffa, 0xfff, {0x2, 0x800}}, {0x8, 0x8, {0x2, 0x8}}, {0x0, 0xc, {0x2, 0x40}}, {0xc58, 0x3, {0x2, 0x6f}}, {0x1ff, 0x7, {0x0, 0x1}}]}}}, {{0x254, 0x1, {{0x3, 0x8000}, 0x9, 0x1, 0x7, 0x0, 0x3, 'syz0\x00', "35c792ff787ac5de8de56848f40262c9f62a49e1b735b03b8910fbb60a4d1339", "6fc17c35a44a36b88efe6ca599e71fce20a56a2e20eb468b5829f2001b9d3360", [{0x9000, 0x7, {0x2, 0x4}}, {0xffff, 0x8001, {0x1, 0xff}}, {0x5, 0x5, {0x3, 0x3}}, {0x6, 0x0, {0x0, 0x7}}, {0x7, 0x6, {0x2, 0x6}}, {0x8, 0x1ff, {0x2, 0x7}}, {0x3ff, 0x2, {0x0, 0x2}}, {0x3, 0xf8a5, {0x1, 0x5}}, {0x2, 0x2, {0x2, 0xffffffff}}, {0x2, 0xf, {0x7, 0x401}}, {0x2, 0x7, {0x0, 0x8}}, {0x1, 0x9, {0x1, 0x100}}, {0x0, 0x100, {0x3, 0x80000001}}, {0xd, 0x401, {0x2, 0x8001}}, {0xf, 0x7, {0x1, 0x13ad}}, {0xfff, 0x1, {0x2, 0x5}}, {0x401, 0x9, {0x1, 0xb}}, {0x4, 0x9, {0x2, 0x5}}, {0x1, 0x2, {0x2, 0x9}}, {0x7ff, 0x83f, {0x0, 0x3}}, {0x3, 0x8, {0x3, 0x2}}, {0x0, 0x0, {0x1, 0x5}}, {0x800, 0x1f, {0x3, 0x8}}, {0x0, 0x200, {0x1, 0xc2}}, {0x6, 0x1ff, {0x1, 0xff}}, {0x9ec2, 0x2, {0x0, 0x6}}, {0x2, 0x4, {0x0, 0x2}}, {0x81, 0x8, {0x0, 0x7}}, {0xb84, 0x4, {0x3, 0x9}}, {0x0, 0x8, {0x0, 0xb}}, {0x11, 0x6, {0x1, 0x7ff}}, {0x4, 0x3, {0x3, 0xfff}}, {0x3, 0x8, {0x3, 0x1}}, {0x4, 0x1, {0x0, 0x2}}, {0x3, 0x0, {0x1, 0x3}}, {0x9, 0xc700, {0x7, 0x3}}, {0xff, 0x8, {0x2, 0x8000}}, {0x1ff, 0x2, {0x2, 0xa68}}, {0x6, 0x0, {0x1, 0xba}}, {0x4, 0xfff9, {0x0, 0xfff}}]}}}, {{0x254, 0x1, {{0x0, 0x600000}, 0x9, 0x0, 0xa, 0x1, 0x0, 'syz0\x00', "9186f1354a8dd129ddb5031dfc71b5f1a7f0b3fa0bb3863f72056cb248b88a11", "6c56d3ab119e274c5b2f3b72f27acfb0efd12448281f0bb9fc1c1666e8bea45d", [{0x7fff, 0x28, {0x3, 0x2}}, {0x6, 0x1, {0x1, 0x8000}}, {0xac, 0x34, {0x1, 0x401}}, {0x9, 0x34, {0x1, 0x19}}, {0x8f, 0x43, {0x1, 0x3}}, {0xff, 0x81, {0x3}}, {0xb, 0x1, {0x2, 0x9}}, {0xf4, 0x10, {0x2, 0x2}}, {0xbafe, 0x2, {0x0, 0x4}}, {0x9, 0xff, {0x3, 0x3}}, {0x3, 0x3d5, {0x3, 0xa841}}, {0x6, 0x1, {0x0, 0x200}}, {0x9, 0x0, {0x2, 0x400}}, {0xf800, 0xfe00, {0x1, 0x401}}, {0x2, 0x7, {0x0, 0x7}}, {0x877, 0x3, {0x1, 0x4}}, {0x3, 0x10, {0x0, 0x4}}, {0x173e, 0x1, {0x3, 0x6}}, {0x1, 0xd79, {0x2, 0x3}}, {0x9, 0xa, {0x2, 0x2}}, {0x1ff, 0x3, {0x2, 0x10000}}, {0x2, 0x0, {0x2, 0x4}}, {0x1, 0x1, {0x0, 0x537e}}, {0x6, 0x8, {0x1, 0x2}}, {0x9a, 0x80, {0x2}}, {0x3, 0x9, {0x1, 0x800}}, {0x3, 0x2, {0x0, 0x4000000}}, {0x0, 0x29, {0x1, 0x5}}, {0x3, 0x6, {0x0, 0x10000}}, {0x64, 0xfffb, {0x2, 0x6}}, {0x40, 0x7, {0x0, 0x9}}, {0x401, 0x6, {0x0, 0xff}}, {0x1, 0xff, {0x2, 0x6}}, {0x4, 0x5, {0x1, 0x3}}, {0x0, 0xfa0, {0x1, 0x615}}, {0xd8, 0x8, {0x2, 0x9}}, {0x7, 0xc, {0x1, 0xffffff01}}, {0x3ff, 0x3, {0x1, 0x6}}, {0x5746, 0x1000, {0x0, 0x4}}, {0x9, 0x9, {0x0, 0xe5}}]}}}, {{0x254, 0x1, {{0x1, 0x8}, 0x7, 0xd0, 0x5, 0x0, 0xe, 'syz1\x00', "04c801ebd0abf98f2c27b66be92da035d15257c20d01fb60030c2b40e20c4171", "cfee1f72d77156a3f4d63b04a30dea931587e672924e7b518aa8db54b343f020", [{0x1, 0x4, {0x1, 0x4}}, {0x1, 0x1, {0x2, 0x4}}, {0x9, 0x5, {0x2, 0x5}}, {0x3, 0x0, {0x0, 0x9}}, {0x3d32, 0x8, {0x1, 0x1}}, {0xef2b, 0x200, {0x1, 0x81}}, {0xfff9, 0xbe0, {0x0, 0x80}}, {0x3ff, 0x7, {0x2}}, {0x10, 0x101, {0x0, 0x6}}, {0x6, 0x6, {0x1, 0x3}}, {0x7f, 0x8001, {0x1, 0xd92}}, {0x6, 0x7, {0x7, 0x9}}, {0x80, 0x10, {0x3, 0xfffffffc}}, {0x6bc8, 0x6, {0x1, 0x9}}, {0x4, 0x1001, {0x3, 0x6}}, {0x6, 0x7, {0x3, 0x5}}, {0x8, 0x2, {0x1}}, {0x6, 0x6, {0x3, 0x1}}, {0x6, 0x8, {0x3, 0x8}}, {0x4, 0x4, {0x0, 0x9}}, {0x7, 0x6, {0x0, 0xa}}, {0x1, 0x3, {0x0, 0xffff}}, {0x7, 0x1, {0x0, 0x6}}, {0xffff, 0x2, {0x3, 0x20000000}}, {0x1, 0x800, {0x1, 0x3}}, {0xa78, 0x0, {0x3, 0x6}}, {0xfff, 0xef, {0x3, 0x8}}, {0x9, 0x5, {0x3, 0x9eb}}, {0x2, 0x2, {0x0, 0x6}}, {0xaf4, 0x1, {0x2, 0x5}}, {0x1, 0x3, {0x2, 0x606a209d}}, {0x3, 0x0, {0x1, 0xfffffffb}}, {0x7ff, 0x0, {0x1, 0x488}}, {0x6, 0xfe00, {0x4, 0x80}}, {0x7f, 0x91e6, {0x3, 0x7}}, {0x5, 0x7ff, {0x3, 0x7}}, {0x733a, 0x5, {0x1, 0x4}}, {0x65, 0x8, {0x2, 0x94}}, {0xf54, 0x0, {0x1, 0x100}}, {0xfffe, 0xff00, {0x0, 0x2}}]}}}, {{0x254, 0x1, {{0x2, 0x4}, 0x80, 0xf, 0xffc0, 0xd, 0xc, 'syz1\x00', "c701956ffd542356935994802ee8d7d2c40a689fff629306c5fcb2cb2a7cffbb", "bfe09f9bff13aebe7cd6dfa28e8ecbd5a800003e059d6adba7ce002377ea6bcd", [{0x6, 0x3, {0x4efce84060adf4a6, 0x6}}, {0x401, 0x9, {0x3, 0xfffffe00}}, {0x200, 0x33e, {0x1, 0x9}}, {0x6c, 0x8, {0x0, 0xbcd}}, {0xfc00, 0x7, {0x1, 0x1}}, {0x3, 0xc, {0x0, 0x4}}, {0x400, 0x3ff, {0x2, 0xd4}}, {0x5, 0x0, {0x2, 0x8}}, {0xf, 0x2, {0x1, 0x13d80917}}, {0x1, 0xf, {0x3, 0x2}}, {0x4, 0x7f, {0x1, 0x80000000}}, {0x57c9, 0x8, {0x2, 0x8}}, {0x1ff, 0x1400, {0x3, 0x1}}, {0x9, 0x100, {0x0, 0x1}}, {0x9, 0x401, {0x2, 0x101}}, {0x6, 0x6, {0x0, 0x10000}}, {0x7fff, 0x2, {0x3, 0xf}}, {0x4, 0x5, {0x3, 0x2}}, {0x3, 0x2, {0x1, 0x3ff}}, {0x4, 0x7, {0x3}}, {0x0, 0x5, {0x0, 0x80000000}}, {0xa, 0xff, {0x3, 0xfffffffb}}, {0x800, 0x6, {0x0, 0x9}}, {0x10, 0x0, {0x1, 0x3}}, {0x7, 0x8, {0x2, 0x1}}, {0x4, 0xb, {0x1, 0x60e}}, {0x19, 0xfffc, {0x2, 0x8}}, {0x800, 0xff, {0x0, 0xf}}, {0x4, 0x7, {0x0, 0x1}}, {0x100, 0x3, {0x2, 0x6cb}}, {0x7, 0xfffe, {0x3, 0x1}}, {0xfc01, 0x775, {0x3, 0x2}}, {0x2, 0x6, {0x0, 0x4}}, {0x4, 0x9, {0x0, 0xc2}}, {0x800, 0x2, {0x3, 0x8000}}, {0x9, 0x7ff, {0x2, 0x5}}, {0xfbff, 0xa7, {0x2, 0x6}}, {0x6, 0x1, {0xb8b55ed8d68c71af, 0x501}}, {0x4, 0x3, {0x2, 0x6}}, {0x1000, 0x8000, {0x0, 0x5}}]}}}]}, 0x1060}, 0x1, 0x0, 0x0, 0x20040080}, 0x4040800) 37.822308333s ago: executing program 3 (id=1715): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000140)) ioctl$PPPIOCSPASS(r0, 0x40107447, &(0x7f0000000100)={0x2, &(0x7f00000000c0)=[{0x50, 0x2, 0x0, 0x4}, {0x6, 0xff, 0x10}]}) write$ppp(r0, &(0x7f0000000280)="0148", 0x2) 37.557731622s ago: executing program 8 (id=1717): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='freezer.state\x00', 0x275a, 0x0) write$UHID_CREATE2(r0, &(0x7f00000000c0)=ANY=[@ANYRES8=0x0, @ANYRESDEC=r0, @ANYRES8], 0x118) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) r2 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000000), 0x402, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0x4, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r1, 0x84, 0x22, 0x0, &(0x7f0000000180)) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r0, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) r6 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000340)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$KEYCTL_MOVE(0x1e, r6, 0xfffffffffffffffe, r6, 0x0) r7 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r8 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000240), r0) sendmsg$IPVS_CMD_GET_CONFIG(r2, &(0x7f0000000580)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000400)={&(0x7f00000005c0)=ANY=[@ANYBLOB="b0000000", @ANYRES16=r8, @ANYBLOB="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"], 0xb0}, 0x1, 0x0, 0x0, 0x44000}, 0x40004) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1d, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) sync() socket(0x10, 0x2, 0x0) bind$packet(r0, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x8, 0x6, @multicast}, 0x14) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0xd, 0xc, &(0x7f0000000800)=ANY=[@ANYBLOB="1800ef0000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8fffffcb703000008000000b70400000000000085000000030000009500000000000000af4b9a19bf54e8d87fbb63956e513faec377280d4c54d9897591", @ANYRES32=r8], 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @void, @value}, 0x94) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r9, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="300000003d00090000000800000800000100000004000000100001800c001080080002007f00000108000200", @ANYRES32, @ANYBLOB="801ebe34aa276445ddc02613216e3ae6781a620559cfc1752effe992a125e295f020f7025886b50550e8327afc"], 0x30}, 0x1, 0x0, 0x0, 0x4000001}, 0x4000000) ioctl$IOCTL_VMCI_QUEUEPAIR_DETACH(r7, 0x7aa, 0x0) 37.199746314s ago: executing program 41 (id=1717): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='freezer.state\x00', 0x275a, 0x0) write$UHID_CREATE2(r0, &(0x7f00000000c0)=ANY=[@ANYRES8=0x0, @ANYRESDEC=r0, @ANYRES8], 0x118) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) r2 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000000), 0x402, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0x4, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r1, 0x84, 0x22, 0x0, &(0x7f0000000180)) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r0, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) r6 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000340)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$KEYCTL_MOVE(0x1e, r6, 0xfffffffffffffffe, r6, 0x0) r7 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r8 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000240), r0) sendmsg$IPVS_CMD_GET_CONFIG(r2, &(0x7f0000000580)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000400)={&(0x7f00000005c0)=ANY=[@ANYBLOB="b0000000", @ANYRES16=r8, @ANYBLOB="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"], 0xb0}, 0x1, 0x0, 0x0, 0x44000}, 0x40004) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1d, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) sync() socket(0x10, 0x2, 0x0) bind$packet(r0, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x8, 0x6, @multicast}, 0x14) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0xd, 0xc, &(0x7f0000000800)=ANY=[@ANYBLOB="1800ef0000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8fffffcb703000008000000b70400000000000085000000030000009500000000000000af4b9a19bf54e8d87fbb63956e513faec377280d4c54d9897591", @ANYRES32=r8], 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @void, @value}, 0x94) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r9, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="300000003d00090000000800000800000100000004000000100001800c001080080002007f00000108000200", @ANYRES32, @ANYBLOB="801ebe34aa276445ddc02613216e3ae6781a620559cfc1752effe992a125e295f020f7025886b50550e8327afc"], 0x30}, 0x1, 0x0, 0x0, 0x4000001}, 0x4000000) ioctl$IOCTL_VMCI_QUEUEPAIR_DETACH(r7, 0x7aa, 0x0) 37.177344996s ago: executing program 3 (id=1720): mkdir(&(0x7f00000020c0)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000280), 0x0, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='./file0/../file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x89101a, 0x0) mount$bind(&(0x7f00000000c0)='.\x00', &(0x7f0000000080)='./file0/file0/file0\x00', 0x0, 0x80700a, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='net/sctp\x00') open_tree(r1, &(0x7f0000000640)='\x00', 0x89901) 37.158742327s ago: executing program 4 (id=1721): r0 = socket$inet_sctp(0x2, 0x5, 0x84) shutdown(r0, 0x0) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)}, &(0x7f0000000280)=0x10) ioctl$BTRFS_IOC_DEFAULT_SUBVOL(0xffffffffffffffff, 0x40089413, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0xffffffffffffff73) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) socket$inet_udp(0x2, 0x2, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f00000001c0)={0xa, 0xfffc, 0x0, @mcast1, 0x5}, 0x1c) syz_emit_ethernet(0x3e, &(0x7f0000000200)=ANY=[@ANYBLOB="0180c2030000aaaaaaaaaa0086dd6001010000081100fd020000000000000000000000000000ff02000000000000000000000000001100000e2290fa5088"], 0x0) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7a, 0x4) bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10) sendto$inet(r2, 0x0, 0x0, 0x240007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x25, &(0x7f0000000180)=0x30a, 0x4) sendmmsg$inet(r2, &(0x7f0000000200)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000300)="23004e4ee760d48ddc6b7a1ebfc6e0276028840fb20d5233e81c802684e8ac1dc195296ffaaeace75a07a653ee918f67beb970cd36769470f7acb5cd5becfa3839cec05a81f9488931e0a9ba9a246f45fee8b5240bd1e078539b56973bfbbee5a1ba32a8e685e6ba2eb3b2f23ed9f40e3fa0314d66c08124d87ab191f366ab6686fa6ae3831f6c72f830cfebee53d4e0cc4b8af9", 0x94}], 0x1}}], 0x1, 0x0) recvfrom$inet(r2, 0x0, 0x0, 0x12020, 0x0, 0x0) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) sendto$inet(r2, &(0x7f00000012c0)="09268a927f1f6588b967481241ba7860fcfaf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0x20c8, 0x0, 0x0, 0x21) r3 = socket$kcm(0x2, 0x1000000000000002, 0x0) setsockopt$sock_attach_bpf(r3, 0x88, 0x67, 0x0, 0x0) sendmsg$inet(r3, &(0x7f00000000c0)={&(0x7f0000000080)={0x2, 0x4e20, @multicast2}, 0x10, &(0x7f00000001c0)=[{&(0x7f0000000580)="466a27e9b1", 0x5}], 0x1, &(0x7f0000000100)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x10}, @private=0xa010102}}}], 0x20}, 0x0) 36.665534986s ago: executing program 3 (id=1722): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0xffffff7a) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000140)={0x2, @pix_mp={0x7, 0x0, 0x34324152, 0x0, 0xb, [{}, {}, {0x20000000}, {0x2000}, {}, {}, {0x0, 0xfffffffe}, {0x1}]}}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) r1 = syz_init_net_socket$llc(0x1a, 0x3, 0x0) setsockopt$llc_int(r1, 0x10c, 0x8, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$sock_netdev_private(0xffffffffffffffff, 0x8949, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x40000) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x20000000) sendmsg$NFT_BATCH(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a70000000060a0b0400000000000000000200000044000480400001800a0001006d6174636800000030000280080002400000000118000300c6a41d106c72000000000000000000ff010000000a0001006f776e65720000000900010073797a3000c3bf000900020073797a32"], 0x98}, 0x1, 0x0, 0x0, 0x40000}, 0x40480d0) 36.473745187s ago: executing program 4 (id=1723): socket$nl_generic(0x10, 0x3, 0x10) socket$kcm(0x23, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r1, 0x29, 0x1a, &(0x7f0000000000)=0x6, 0x4) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001680)=ANY=[@ANYBLOB="60000000100001040100"/20, @ANYRES32=0x0, @ANYBLOB="7b130000000000003800128008000100677470002c00028008", @ANYRES32, @ANYBLOB="080003000800000008000100", @ANYRES32=r1], 0x60}}, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 36.338043851s ago: executing program 3 (id=1725): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) r2 = socket(0x2, 0x80805, 0x0) setsockopt$inet_sctp6_SCTP_MAXSEG(r2, 0x84, 0xd, &(0x7f00000000c0), 0x4) connect$inet(r1, &(0x7f0000000480)={0x2, 0xfffd, @multicast1}, 0x10) sendmmsg(r1, &(0x7f0000007fc0), 0x800001d, 0x0) r3 = socket$kcm(0x10, 0x2, 0x0) syz_usb_connect(0x0, 0x2d, &(0x7f0000003080)=ANY=[@ANYBLOB="120100004107f540f30c75939e1a0000000109021b0001"], 0x0) sendmsg$kcm(r3, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000040)="2e00000011008188040f80ec59acbc0413a1f8480b0000005e140602000000000e0027001000000002800000121f", 0x2e}], 0x1}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0b0000000f000000cc0002000600000005"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000200), &(0x7f0000000240), 0x4af, r6}, 0x38) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000700)={0x0, &(0x7f0000000540)=""/245, &(0x7f00000000c0), &(0x7f0000000680), 0x2, r6}, 0x38) r7 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)={0x2c, 0x140f, 0x1, 0x70bd2c, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x1}, @RDMA_NLDEV_ATTR_CHARDEV_TYPE={0x9, 0x45, 'issm\x00'}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x41}, 0x8000) 35.980439678s ago: executing program 42 (id=1725): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) r2 = socket(0x2, 0x80805, 0x0) setsockopt$inet_sctp6_SCTP_MAXSEG(r2, 0x84, 0xd, &(0x7f00000000c0), 0x4) connect$inet(r1, &(0x7f0000000480)={0x2, 0xfffd, @multicast1}, 0x10) sendmmsg(r1, &(0x7f0000007fc0), 0x800001d, 0x0) r3 = socket$kcm(0x10, 0x2, 0x0) syz_usb_connect(0x0, 0x2d, &(0x7f0000003080)=ANY=[@ANYBLOB="120100004107f540f30c75939e1a0000000109021b0001"], 0x0) sendmsg$kcm(r3, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000040)="2e00000011008188040f80ec59acbc0413a1f8480b0000005e140602000000000e0027001000000002800000121f", 0x2e}], 0x1}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0b0000000f000000cc0002000600000005"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000200), &(0x7f0000000240), 0x4af, r6}, 0x38) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000700)={0x0, &(0x7f0000000540)=""/245, &(0x7f00000000c0), &(0x7f0000000680), 0x2, r6}, 0x38) r7 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)={0x2c, 0x140f, 0x1, 0x70bd2c, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x1}, @RDMA_NLDEV_ATTR_CHARDEV_TYPE={0x9, 0x45, 'issm\x00'}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x41}, 0x8000) 35.955029373s ago: executing program 4 (id=1727): bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1700000007"], 0x50) sendto$packet(0xffffffffffffffff, &(0x7f0000000000)='1', 0x1, 0x0, 0x0, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x6, 0x8b}, 0x0) setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000040)=0xffffffffffffffff, 0x4) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) syz_open_procfs(0x0, &(0x7f0000000080)='net/fib_trie\x00') syz_open_dev$vcsu(0x0, 0x8001, 0x400) r1 = socket$kcm(0x10, 0x2, 0x0) syz_emit_ethernet(0xbe, &(0x7f00000004c0)=ANY=[@ANYBLOB="ffffffffffff0000012200008848000000004a0500ac0067000080029078ac1e0001e0000002b90d35900ab0155356dfa5b5aeeebf7cfdcb9c320d6317cd2f6700034a0194040000000017059078e0000002534cc61a450fdca1f05450a0b42b79046bd86aa7ab56da60fa1109e25c303edf215ce3b0b49baf750ec8c27eac2be9b4e07f806f1ab8746e87eba34edb6daccb28b80c1c9c5ab16e69060e3b0cac639fe3dccbfa5d633ed654ad4297e3cf855cff5ab4d1fff63a543b0d947153b41c6c4f0943c79aa11be8c80c6168bfcede2fb68f3e8914888e0000000000000000"], 0x0) syz_io_uring_setup(0x39, &(0x7f0000001800)={0x0, 0xfffffffe, 0x1000}, &(0x7f0000000240), &(0x7f0000001880)) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="1200000004000000040000001200000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/21], 0x48) bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0) recvfrom$inet6(0xffffffffffffffff, 0x0, 0x0, 0x40032143, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x4000103d1) recvmsg(r1, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x0) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[@ANYBLOB="364000002600913e"], 0xfe33) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWTABLE={0x2c, 0x0, 0xa, 0x3, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x24, 0x9, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x2}, [@NFTA_SET_ID={0x8}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x1f}]}, @NFT_MSG_NEWSETELEM={0x8c, 0xc, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x60, 0x3, 0x0, 0x1, [{0x5c, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_EXPRESSIONS={0x50, 0xb, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @connlimit={{0xe}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_CONNLIMIT_COUNT={0x8}]}}}, {0x2c, 0x1, 0x0, 0x1, @limit={{0xa}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_LIMIT_RATE={0xc, 0x1, 0x1, 0x0, 0x5}, @NFTA_LIMIT_UNIT={0xc}]}}}]}]}]}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x10}}, 0x104}}, 0x0) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6) r3 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000007c0), 0x0, 0x0) ioctl$SNDCTL_SYNTH_MEMAVL(r3, 0xc004510e, 0x0) write$binfmt_misc(r2, &(0x7f0000000000), 0xd) 35.246014547s ago: executing program 4 (id=1730): mkdir(&(0x7f00000020c0)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000280), 0x0, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='./file0/../file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x89101a, 0x0) mount$bind(&(0x7f00000000c0)='.\x00', &(0x7f0000000080)='./file0/file0/file0\x00', 0x0, 0x80700a, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='net/sctp\x00') open_tree(r1, &(0x7f0000000640)='\x00', 0x89901) 35.023617657s ago: executing program 4 (id=1732): r0 = inotify_init1(0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'bridge0\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000240)=ANY=[@ANYBLOB="280000001e00431b000000000000000007000000", @ANYRESHEX=r3, @ANYBLOB="01040a5cb97c40c6fd1a67ab40425181079cc4644874a164ffbbed987aff3e2d3fd5", @ANYRES32=r5, @ANYBLOB], 0x28}}, 0x0) r6 = socket$tipc(0x1e, 0x5, 0x0) r7 = socket(0x25, 0x5, 0x0) connect$inet(r7, &(0x7f0000000200)={0x25, 0x4e20, @loopback}, 0x10) bind$tipc(r6, &(0x7f0000000180)=@id={0x1e, 0x3, 0x0, {0x4e21, 0x3}}, 0x10) fchmodat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0xfffffe13) mknodat$null(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xb0a54e68b1cd2fdb, 0x103) inotify_add_watch(r0, &(0x7f0000000440)='.\x00', 0x12000021) mkdir(&(0x7f0000000040)='./file1\x00', 0x169) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@workdir={'workdir', 0x3d, '.'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f0000000140)='./bus\x00') syz_io_uring_setup(0x82e, &(0x7f0000000300)={0x0, 0x0, 0x10100}, &(0x7f0000000100)=0x0, &(0x7f0000000080)=0x0) syz_io_uring_submit(r8, r9, &(0x7f00000001c0)=@IORING_OP_RECVMSG={0xa, 0x20, 0x3, 0xffffffffffffffff, 0x0, &(0x7f00000000c0)={0x0, 0x0, 0x0}}) 34.518012507s ago: executing program 4 (id=1733): bind$nfc_llcp(0xffffffffffffffff, 0x0, 0x0) syz_usb_connect(0x5, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0xd6, 0x3, 0x92, 0x20, 0x4fc, 0x204, 0x6767, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0xbf, 0x0, 0x2, 0x6d, 0xa0, 0xd8, 0x0, [], [{{0x9, 0x5, 0x2, 0x2, 0x200, 0xfe}}, {{0x9, 0x5, 0x82, 0xa, 0x200, 0x0, 0x0, 0x5}}]}}]}}]}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, 0x0) r0 = syz_open_dev$vcsa(&(0x7f0000000040), 0x1, 0x2) writev(r0, &(0x7f0000000c40)=[{0x0}, {&(0x7f00000005c0)="c21cfb", 0x3}, {&(0x7f00000007c0)}, {&(0x7f0000000900), 0x4000}], 0xe) syz_genetlink_get_family_id$nfc(&(0x7f0000000080), 0xffffffffffffffff) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)) r1 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000003f40)=@acquire={0x134, 0x17, 0x1, 0x0, 0x0, {{@in6=@mcast2, 0x1, 0x32}, @in=@loopback, {@in6=@private0, @in=@local}, {{@in=@empty, @in6=@private0, 0x4e20, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xee00}, {}, {0xfffffffffffffffc}}, 0x0, 0x0, 0x0, 0x70bd2a}, [@mark={0xc, 0x15, {0x35075a, 0x352}}]}, 0x134}, 0x1, 0x0, 0x0, 0x4000}, 0x40014) ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f00000000c0)=0x0) bind$nfc_llcp(0xffffffffffffffff, &(0x7f0000000240)={0x27, r3, 0x0, 0x0, 0x0, 0x0, "d9298498abdba7f061bd1ca44c226af5160e961711a07760760beeab11e88509de7f1939e8abfe0055acc8ef039a5be42200000000000000000100", 0x38}, 0x60) openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r5) sendmsg$NFC_CMD_DEV_UP(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x1c, r6, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r4}]}, 0x1c}}, 0x0) sendmsg$NLBL_UNLABEL_C_STATICREMOVE(r5, &(0x7f0000000a80)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000a40)={&(0x7f0000000600)={0x144, 0x0, 0x8, 0x70bd25, 0x25dfdbfd, {}, [@NLBL_UNLABEL_A_SECCTX={0x25, 0x7, 'system_u:object_r:getty_etc_t:s0\x00'}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @empty}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'batadv_slave_1\x00'}, @NLBL_UNLABEL_A_SECCTX={0x2b, 0x7, 'system_u:object_r:wireless_device_t:s0\x00'}, @NLBL_UNLABEL_A_SECCTX={0x29, 0x7, 'system_u:object_r:hostname_exec_t:s0\x00'}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'veth0_vlan\x00'}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @dev={0xfe, 0x80, '\x00', 0x2f}}, @NLBL_UNLABEL_A_SECCTX={0x29, 0x7, 'system_u:object_r:bsdpty_device_t:s0\x00'}, @NLBL_UNLABEL_A_SECCTX={0x2b, 0x7, 'system_u:object_r:gpg_helper_exec_t:s0\x00'}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'pimreg\x00'}]}, 0x144}, 0x1, 0x0, 0x0, 0x20000090}, 0x20014008) sendmsg$NFC_CMD_START_POLL(r5, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)={0x24, r6, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r4}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0xffffffff}]}, 0x24}}, 0x0) sendmsg$NFC_CMD_ACTIVATE_TARGET(r5, &(0x7f0000000780)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000800)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010023010000341d00001c00000008000100", @ANYRES32=r4, @ANYBLOB="08000400000000000800030001000000"], 0x2c}}, 0x0) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nfc(&(0x7f0000000040), r7) r9 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r9, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_FW_DOWNLOAD(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)={0x24, r8, 0x1, 0x70bd2d, 0x0, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r10}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r4}]}, 0x24}, 0x1, 0x0, 0x0, 0x6008801}, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f0000000100)) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f0000000140)) add_key$user(&(0x7f0000002100), &(0x7f0000002180)={'syz', 0x1}, &(0x7f00000021c0)='\x00', 0x1, 0xfffffffffffffffe) add_key$user(&(0x7f0000002300), &(0x7f0000002340)={'syz', 0x3}, &(0x7f0000000100)="370c099069effa43de3e1404db09b4ce1ef77bde4b371532dd16447c1b13403656c86711f6e750026f23029a50d44299c7bf5c78dc5efae2d041016160e8bef7b30c05e298aa9572540dd950307987eef2115e1bcf512bea3410ca5a9e9f827e4b13490dbbd4fc5a45e0738b959acafd2c12863045265bcbc2c9426ac3f614746b436fe86a72dc642dd67d970604a69b4f22cd0076beedc18056ab4bea4c825b69a7a77adcd5488684872b1bb9eb84586549e11b080468668e8fd0e52ce0705a", 0xc0, 0xffffffffffffffff) 34.287107459s ago: executing program 43 (id=1733): bind$nfc_llcp(0xffffffffffffffff, 0x0, 0x0) syz_usb_connect(0x5, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0xd6, 0x3, 0x92, 0x20, 0x4fc, 0x204, 0x6767, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0xbf, 0x0, 0x2, 0x6d, 0xa0, 0xd8, 0x0, [], [{{0x9, 0x5, 0x2, 0x2, 0x200, 0xfe}}, {{0x9, 0x5, 0x82, 0xa, 0x200, 0x0, 0x0, 0x5}}]}}]}}]}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, 0x0) r0 = syz_open_dev$vcsa(&(0x7f0000000040), 0x1, 0x2) writev(r0, &(0x7f0000000c40)=[{0x0}, {&(0x7f00000005c0)="c21cfb", 0x3}, {&(0x7f00000007c0)}, {&(0x7f0000000900), 0x4000}], 0xe) syz_genetlink_get_family_id$nfc(&(0x7f0000000080), 0xffffffffffffffff) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)) r1 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000003f40)=@acquire={0x134, 0x17, 0x1, 0x0, 0x0, {{@in6=@mcast2, 0x1, 0x32}, @in=@loopback, {@in6=@private0, @in=@local}, {{@in=@empty, @in6=@private0, 0x4e20, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xee00}, {}, {0xfffffffffffffffc}}, 0x0, 0x0, 0x0, 0x70bd2a}, [@mark={0xc, 0x15, {0x35075a, 0x352}}]}, 0x134}, 0x1, 0x0, 0x0, 0x4000}, 0x40014) ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f00000000c0)=0x0) bind$nfc_llcp(0xffffffffffffffff, &(0x7f0000000240)={0x27, r3, 0x0, 0x0, 0x0, 0x0, "d9298498abdba7f061bd1ca44c226af5160e961711a07760760beeab11e88509de7f1939e8abfe0055acc8ef039a5be42200000000000000000100", 0x38}, 0x60) openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r5) sendmsg$NFC_CMD_DEV_UP(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x1c, r6, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r4}]}, 0x1c}}, 0x0) sendmsg$NLBL_UNLABEL_C_STATICREMOVE(r5, &(0x7f0000000a80)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000a40)={&(0x7f0000000600)={0x144, 0x0, 0x8, 0x70bd25, 0x25dfdbfd, {}, [@NLBL_UNLABEL_A_SECCTX={0x25, 0x7, 'system_u:object_r:getty_etc_t:s0\x00'}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @empty}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'batadv_slave_1\x00'}, @NLBL_UNLABEL_A_SECCTX={0x2b, 0x7, 'system_u:object_r:wireless_device_t:s0\x00'}, @NLBL_UNLABEL_A_SECCTX={0x29, 0x7, 'system_u:object_r:hostname_exec_t:s0\x00'}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'veth0_vlan\x00'}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @dev={0xfe, 0x80, '\x00', 0x2f}}, @NLBL_UNLABEL_A_SECCTX={0x29, 0x7, 'system_u:object_r:bsdpty_device_t:s0\x00'}, @NLBL_UNLABEL_A_SECCTX={0x2b, 0x7, 'system_u:object_r:gpg_helper_exec_t:s0\x00'}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'pimreg\x00'}]}, 0x144}, 0x1, 0x0, 0x0, 0x20000090}, 0x20014008) sendmsg$NFC_CMD_START_POLL(r5, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)={0x24, r6, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r4}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0xffffffff}]}, 0x24}}, 0x0) sendmsg$NFC_CMD_ACTIVATE_TARGET(r5, &(0x7f0000000780)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000800)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010023010000341d00001c00000008000100", @ANYRES32=r4, @ANYBLOB="08000400000000000800030001000000"], 0x2c}}, 0x0) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nfc(&(0x7f0000000040), r7) r9 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r9, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_FW_DOWNLOAD(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)={0x24, r8, 0x1, 0x70bd2d, 0x0, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r10}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r4}]}, 0x24}, 0x1, 0x0, 0x0, 0x6008801}, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f0000000100)) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f0000000140)) add_key$user(&(0x7f0000002100), &(0x7f0000002180)={'syz', 0x1}, &(0x7f00000021c0)='\x00', 0x1, 0xfffffffffffffffe) add_key$user(&(0x7f0000002300), &(0x7f0000002340)={'syz', 0x3}, &(0x7f0000000100)="370c099069effa43de3e1404db09b4ce1ef77bde4b371532dd16447c1b13403656c86711f6e750026f23029a50d44299c7bf5c78dc5efae2d041016160e8bef7b30c05e298aa9572540dd950307987eef2115e1bcf512bea3410ca5a9e9f827e4b13490dbbd4fc5a45e0738b959acafd2c12863045265bcbc2c9426ac3f614746b436fe86a72dc642dd67d970604a69b4f22cd0076beedc18056ab4bea4c825b69a7a77adcd5488684872b1bb9eb84586549e11b080468668e8fd0e52ce0705a", 0xc0, 0xffffffffffffffff) 33.982863904s ago: executing program 5 (id=1736): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) connect$vsock_stream(0xffffffffffffffff, 0x0, 0x0) connect$vsock_stream(0xffffffffffffffff, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x8002, 0x20) madvise(&(0x7f00001f2000/0x2000)=nil, 0x2000, 0x2) r3 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r3, 0x4010ae67, &(0x7f0000000000)={0x2, 0x102000, 0x1}) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0xf401, 0x400, 0x0, 0x32}, 0x9c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x9, &(0x7f0000000200)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x0, 0x0, 0x0, 0x8a}, 0x9c) sendto$inet6(r4, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) shutdown(r4, 0x2) 32.974005273s ago: executing program 5 (id=1737): r0 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) setsockopt$nfc_llcp_NFC_LLCP_RW(r0, 0x118, 0x0, &(0x7f0000000040)=0x5, 0x4) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_HOPOPTS(r1, 0x29, 0x36, &(0x7f0000000040)=ANY=[], 0x8) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0xffff, 0x0, @empty, 0x5}, 0xfffffffffffffe60) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000080)='bridge0\x00', 0x10) sendmmsg$inet6(r1, &(0x7f0000000140)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)="82", 0x1}, {&(0x7f0000000180)="1800", 0x2}, {&(0x7f00000020c0)="7b6b3b3c245e84686c499fa7c4f78ad4ea1435644583c18771", 0x19}], 0x3}}], 0x1, 0x4804) r2 = syz_open_procfs(0x0, &(0x7f0000000200)='cmdline\x00') preadv(r2, &(0x7f0000000000)=[{&(0x7f00000000c0)=""/223, 0xdf}], 0x1, 0xfffff62d, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@base={0xe, 0x4, 0x4, 0x3, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0xb, 0xf, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r3}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, {{0x5, 0x0, 0x3}, {0x95, 0x0, 0x0, 0x700}}, [], {{0x5, 0x1, 0x5, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0xf00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r4 = accept$unix(0xffffffffffffffff, 0x0, &(0x7f0000000000)) connect$unix(r4, &(0x7f0000000080)=@file={0x1, './file0\x00'}, 0x6e) 32.932268592s ago: executing program 5 (id=1738): r0 = syz_usb_connect(0x3, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000795d6c08450c3e616dc4010203010902120001000000000904"], 0x0) r1 = socket(0x40000000015, 0x5, 0x0) bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e21, 0xffffffff, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, 0x1c) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000400)={0x2c, &(0x7f0000000040)=ANY=[], 0x0, 0x0, 0x0, 0x0}) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000000)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_sha256\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, 0x0, 0x0) prctl$PR_SET_CHILD_SUBREAPER(0x24, 0x1) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000800)={0x84, &(0x7f0000000280)=ANY=[@ANYBLOB="00008000000012"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 30.800892173s ago: executing program 5 (id=1739): mkdir(&(0x7f00000020c0)='./file0\x00', 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='./file0/../file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x89101a, 0x0) mount$bind(&(0x7f00000000c0)='.\x00', &(0x7f0000000080)='./file0/file0/file0\x00', 0x0, 0x80700a, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='net/sctp\x00') open_tree(r1, &(0x7f0000000640)='\x00', 0x89901) 30.711292013s ago: executing program 5 (id=1740): prctl$PR_SET_DUMPABLE(0x4, 0x2) prctl$PR_MCE_KILL_GET(0x22) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = dup(r0) ioctl$TIOCL_SETSEL(r1, 0x541c, &(0x7f0000001900)={0x2, {0x2, 0x0, 0x0, 0x101}}) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$SCSI_IOCTL_GET_IDLUN(r1, 0x5382, &(0x7f0000000100)) sendmsg$IPSET_CMD_FLUSH(r2, &(0x7f0000000040)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000140)={0x14, 0x4, 0x6, 0x606, 0x0, 0x0, {0x2, 0x0, 0x13}}, 0x14}, 0x1, 0x0, 0x0, 0x4000000}, 0x800) 29.474177196s ago: executing program 5 (id=1741): openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x800}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000000300)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) sched_setscheduler(r0, 0x5, &(0x7f0000000000)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/mcfilter\x00') openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_XRUN(0xffffffffffffffff, 0x4148, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x88580, 0x0) ioctl$TIOCSETD(r4, 0x5423, &(0x7f00000000c0)=0xf) ioctl$FS_IOC_FSGETXATTR(r4, 0x400455cb, 0x0) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000240), r5) sendmsg$NLBL_CIPSOV4_C_ADD(r5, &(0x7f0000000200)={0x0, 0x9000000, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010000000000000000000100000008000100040000002c00048005000300010000000500030080ffffff05000300000000000500030080ffffff0500030080ffffff0800020003"], 0x50}}, 0x0) connect$bt_l2cap(0xffffffffffffffff, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) 29.32033257s ago: executing program 44 (id=1741): openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x800}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000000300)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) sched_setscheduler(r0, 0x5, &(0x7f0000000000)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/mcfilter\x00') openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_XRUN(0xffffffffffffffff, 0x4148, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x88580, 0x0) ioctl$TIOCSETD(r4, 0x5423, &(0x7f00000000c0)=0xf) ioctl$FS_IOC_FSGETXATTR(r4, 0x400455cb, 0x0) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000240), r5) sendmsg$NLBL_CIPSOV4_C_ADD(r5, &(0x7f0000000200)={0x0, 0x9000000, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010000000000000000000100000008000100040000002c00048005000300010000000500030080ffffff05000300000000000500030080ffffff0500030080ffffff0800020003"], 0x50}}, 0x0) connect$bt_l2cap(0xffffffffffffffff, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) 26.549971739s ago: executing program 1 (id=1743): r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x75, 0x1c, 0x1, 0x10, 0xfe6, 0x9800, 0xd19a, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x29, 0x2, 0x2, 0xb4, 0x8c, 0xbb, 0x0, [], [{{0x9, 0x5, 0x4, 0x2, 0x10, 0x0, 0xfa}}, {{0x9, 0x5, 0x82, 0x2, 0x40}}]}}]}}]}}, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000000)={0x34, &(0x7f0000000280)={0x40, 0x11, 0x6, "27343b4ae87c"}, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='attr/fscreate\x00') prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) r2 = syz_open_dev$vim2m(&(0x7f0000000180), 0xffffffff, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r2, 0xc0405602, &(0x7f0000000140)={0x11, 0x1, 0x1, "7e0efe3287fdaced3d4fd6e8c46a2ca55aab2500000000b482b200", 0x31435641}) r3 = fcntl$getown(r1, 0x9) capset(&(0x7f0000000900)={0x19980330, r3}, &(0x7f0000000940)={0x4, 0x5d5, 0xfffffff9, 0x2, 0x7, 0xb12}) r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') r5 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r5, 0x29, 0x2a, 0x0, 0x0) write$cgroup_pid(r4, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) setitimer(0x2, &(0x7f0000000040)={{0x0, 0x2710}, {0x0, 0x2710}}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x9071, 0xffffffffffffffff, 0x0) getitimer(0x2, &(0x7f00000001c0)) r6 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000980)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x1e7d, 0x31ce, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x7}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r6, 0x0, 0x0) request_key(&(0x7f0000000000)='asymmetric\x00', &(0x7f0000001ffb)={'syz', 0x1, 0xc}, &(0x7f0000001fee)='R\x10rust\xe3c*sgrVex:D%', 0x0) syz_usb_control_io$hid(r6, &(0x7f0000000340)={0x24, 0x0, 0x0, &(0x7f0000000740)=ANY=[@ANYBLOB='\x00\"'], 0x0}, 0x0) syz_usb_control_io(r6, &(0x7f0000000240)={0x2c, &(0x7f0000000080)=ANY=[@ANYBLOB="0009d4000000d4309780f97fd41e4aa0fe241b648a654c52396331354eb16f231982e1d4ad10dbbef71a91434915ca87fb6e5a6fc498d9ab20b601396859610902b02ddd55f0f122ba502254f90347e9482e10266855653163f9b015796ada05c4ccf976a3c6bad01eaee2e58bfc80d2d457a2691543b1021c18e871b6a80f4d9f94f7ac1e2b17a1ec9eb628d804e3678c082dc51053158c9f249932c8a25b0c7e2e546be3d32f1d3ac6476ae1c3c5327c4c60ec2f2a231a60dab3fad03228b641e827b455366f6429eea4fb61880b81777133ecf9dea44bcb97"], &(0x7f0000000180)={0x0, 0x3, 0x2a, @string={0x2a, 0x3, "f2fba7452740af75cf39462c281335883cd866cb8d7acf363e2acf7f0732ca90bbeda80fc1bee7de"}}, &(0x7f00000002c0)={0x0, 0xf, 0xfc, {0x5, 0xf, 0xfc, 0x4, [@ss_container_id={0x14, 0x10, 0x4, 0x4, "a70fd506acb45f45b4f0b23f3b9f96c4"}, @generic={0x80, 0x10, 0x77429ac80c642af7, "1fecf5f294a10c00889ba2b2582f1c44edeaea12edc1c2ba2b3e00e56d1d21f4a07b167516ec03abc65b4c2f4906c572fbbbb0ec38087905015094c12755ed71aa7882cc530596e5f8a1543544ab96cf055c7abe48b32a2cf9dcf85fba163f8fc212fbc470dea4a97411eb967ddc0562cb5b402c7715fee8bf487e5ec0"}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x8, 0x9, 0x37, 0x3}, @generic={0x59, 0x10, 0xa, "bb655dc744a9add0c21e8256f427e0f70d767d0c911ee887bf6dd56f2f0ea57888cd7466be3b657ad530091d345f200ffc57ca9fb4bf6f1b3e43b63f3fd87bae9537d55e8baa04cc9989522d9a834232028117ff61cc"}]}}, &(0x7f00000001c0)={0x20, 0x29, 0xf, {0xf, 0x29, 0x5, 0x3, 0x5, 0x88, "853dcfd4", "3f08dc49"}}, &(0x7f0000000200)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0xfa, 0xf, 0x5b, 0x0, 0xf, 0x26a, 0x1ff}}}, &(0x7f0000000840)={0x84, &(0x7f0000000400)={0x20, 0x18, 0x47, "e6b32539c38493a94b93e0202c0e4b6b33bd1d96c4c30f69f91136b3066f02c7fb9faa31666248078f60df9ca50b9ef69d0317bee0d525d1eb9d8967749b1d695c882348048160"}, &(0x7f0000000480)={0x0, 0xa, 0x1, 0xbc}, &(0x7f00000004c0)={0x0, 0x8, 0x1, 0xc9}, &(0x7f0000000500)={0x20, 0x0, 0x4, {0x2, 0x1}}, &(0x7f0000000540)={0x20, 0x0, 0x4, {0x6929feb5689e60e5, 0x10}}, &(0x7f0000000580)={0x40, 0x7, 0x2, 0x2}, &(0x7f00000005c0)={0x40, 0x9, 0x1, 0xf9}, &(0x7f0000000600)={0x40, 0xb, 0x2, "feb0"}, &(0x7f0000000640)={0x40, 0xf, 0x2, 0x1}, &(0x7f0000000680)={0x40, 0x13, 0x6, @remote}, &(0x7f00000006c0)={0x40, 0x17, 0x6, @local}, &(0x7f0000000700)={0x40, 0x19, 0x2, "89df"}, &(0x7f0000000740)={0x40, 0x1a, 0x2, 0xbf3}, &(0x7f0000000780)={0x40, 0x1c, 0x1, 0x40}, &(0x7f00000007c0)={0x40, 0x1e, 0x1, 0x7}, &(0x7f0000000800)={0x40, 0x21, 0x1, 0x4}}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) 21.686322793s ago: executing program 1 (id=1744): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000005c0)=@newlink={0x3c, 0x10, 0x403, 0x1, 0xa5dfdbfe, {0x0, 0x0, 0x0, 0x0, 0x8000}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_PACKETS_PER_SLAVE={0x8, 0x14, 0x9}]}}}]}, 0x3c}, 0x1, 0xba01, 0x0, 0x40045}, 0x810) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x3, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="180000000000000000000000000000008500000061000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffbfffb702000008000000b703000000000000850000007b00000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) r1 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r1, &(0x7f0000000040)={0x28, 0x0, 0x0, @local}, 0x10) listen(r1, 0x0) r2 = socket(0x28, 0x5, 0x0) connect$vsock_stream(r2, &(0x7f0000000080), 0x10) sendmmsg(r2, &(0x7f0000000100)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000000)="1b", 0x40000}], 0x1}}], 0x1, 0x24008094) accept4$unix(r1, 0x0, 0x0, 0x0) socket$inet(0x2, 0x4000000000000001, 0x0) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r4}, 0x10) pselect6(0x40, &(0x7f00000001c0)={0x1, 0x0, 0x3, 0x0, 0x0, 0x0, 0x4}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x5f8, 0x0, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) r5 = syz_open_dev$MSR(&(0x7f0000001140), 0x0, 0x0) read$msr(r5, &(0x7f0000002700)=""/102392, 0x18ff8) 19.054287963s ago: executing program 1 (id=1745): bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000006c0)=ANY=[], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000004000000b703000000000000850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0xe8381, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f00000001c0)={0x10001, 0xc, 0x100000, 0x2000, &(0x7f0000126000/0x2000)=nil}) r3 = dup(r2) ioctl$KVM_SET_VAPIC_ADDR(r3, 0x4008ae93, &(0x7f00000002c0)=0x10000) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r4 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs2/custom0\x00', 0x1003, 0x0) ioctl$BINDER_GET_FROZEN_INFO(r5, 0xc00c620f, &(0x7f0000000080)={r4}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r6 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000240)='/proc/sys/vm/compact_memory\x00', 0x1, 0x0) writev(r6, &(0x7f00000000c0)=[{&(0x7f0000000140)='2', 0x1}], 0x1) r7 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r7, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r7, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x0, @local}]}, &(0x7f0000000240)=0x10) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r7, 0x84, 0x7b, &(0x7f00000003c0)={r8, 0x1}, 0x8) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r9, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r10, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r9, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r11 = syz_open_procfs(0x0, &(0x7f0000000000)='net/if_inet6\x00') lseek(r11, 0x1000000, 0x0) 18.023723624s ago: executing program 1 (id=1746): mkdir(&(0x7f00000020c0)='./file0\x00', 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='./file0/../file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x89101a, 0x0) mount$bind(&(0x7f00000000c0)='.\x00', &(0x7f0000000080)='./file0/file0/file0\x00', 0x0, 0x80700a, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='net/sctp\x00') open_tree(r1, &(0x7f0000000640)='\x00', 0x89901) 17.90149107s ago: executing program 1 (id=1747): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0xf30, 0x111, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x3, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) name_to_handle_at(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1002) syz_usb_control_io$hid(r0, 0x0, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) getsockopt$packet_int(r1, 0x107, 0x12, 0x0, &(0x7f0000000200)) 15.134394918s ago: executing program 1 (id=1748): munmap(&(0x7f0000002000/0x4000)=nil, 0x4000) openat$kvm(0xffffffffffffff9c, 0x0, 0x280001, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000005c0)={'vcan0\x00'}) bind$can_raw(r1, &(0x7f0000000100), 0x10) bind$can_raw(r1, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_emit_vhci(&(0x7f00000002c0)=ANY=[@ANYBLOB="03c800cea5ed08fed91a15"], 0xd2) prlimit64(0x0, 0xe, 0x0, 0x0) prlimit64(0x0, 0x1, 0x0, 0x0) ioprio_set$pid(0x3, 0x0, 0x0) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, 0x0) syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_sniff_subrate={{0x2e, 0xb}, {0x1, 0xc8, 0x2, 0x0, 0x80, 0x1}}}, 0xe) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r2, 0x7a7, &(0x7f0000000080)=0x10000) 14.880100294s ago: executing program 45 (id=1748): munmap(&(0x7f0000002000/0x4000)=nil, 0x4000) openat$kvm(0xffffffffffffff9c, 0x0, 0x280001, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000005c0)={'vcan0\x00'}) bind$can_raw(r1, &(0x7f0000000100), 0x10) bind$can_raw(r1, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_emit_vhci(&(0x7f00000002c0)=ANY=[@ANYBLOB="03c800cea5ed08fed91a15"], 0xd2) prlimit64(0x0, 0xe, 0x0, 0x0) prlimit64(0x0, 0x1, 0x0, 0x0) ioprio_set$pid(0x3, 0x0, 0x0) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, 0x0) syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_sniff_subrate={{0x2e, 0xb}, {0x1, 0xc8, 0x2, 0x0, 0x80, 0x1}}}, 0xe) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r2, 0x7a7, &(0x7f0000000080)=0x10000) 7.596760567s ago: executing program 6 (id=1759): r0 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$BLKZEROOUT(r0, 0x127f, &(0x7f0000000040)={0x100, 0x1}) r1 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) recvmmsg(r1, &(0x7f0000006600)=[{{&(0x7f0000000080)=@nl=@proc, 0x80, &(0x7f0000002340)=[{&(0x7f0000000100)=""/49, 0x31}, {&(0x7f0000000140)=""/10, 0xa}, {&(0x7f0000000180)=""/4096, 0x1000}, {&(0x7f0000001180)=""/131, 0x83}, {&(0x7f0000001240)=""/156, 0x9c}, {&(0x7f0000001300)=""/34, 0x22}, {&(0x7f0000001340)=""/4096, 0x1000}], 0x7}, 0x4}, {{0x0, 0x0, &(0x7f00000036c0)=[{&(0x7f00000023c0)=""/224, 0xe0}, {&(0x7f00000024c0)=""/212, 0xd4}, {&(0x7f00000025c0)=""/4096, 0x1000}, {&(0x7f00000035c0)=""/231, 0xe7}], 0x4, &(0x7f0000003700)=""/151, 0x97}, 0x8}, {{&(0x7f00000037c0)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, 0x80, &(0x7f0000004bc0)=[{&(0x7f0000003840)=""/78, 0x4e}, {&(0x7f00000038c0)=""/191, 0xbf}, {&(0x7f0000003980)}, {&(0x7f00000039c0)=""/4096, 0x1000}, {&(0x7f00000049c0)=""/216, 0xd8}, {&(0x7f0000004ac0)=""/208, 0xd0}], 0x6, &(0x7f0000004c40)=""/171, 0xab}, 0x9}, {{&(0x7f0000004d00)=@vsock={0x28, 0x0, 0x0, @hyper}, 0x80, &(0x7f0000004ec0)=[{&(0x7f0000004d80)=""/100, 0x64}, {&(0x7f0000004e00)=""/40, 0x28}, {&(0x7f0000004e40)=""/124, 0x7c}], 0x3, &(0x7f0000004f00)=""/9, 0x9}, 0x94}, {{&(0x7f0000004f40)=@alg, 0x80, &(0x7f0000005100)=[{&(0x7f0000004fc0)=""/225, 0xe1}, {&(0x7f00000050c0)=""/27, 0x1b}], 0x2, &(0x7f0000005140)=""/241, 0xf1}, 0x1}, {{&(0x7f0000005240)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, 0x80, &(0x7f0000005400)=[{&(0x7f00000052c0)=""/93, 0x5d}, {&(0x7f0000005340)=""/152, 0x98}], 0x2, &(0x7f0000005440)=""/29, 0x1d}, 0x2}, {{&(0x7f0000005480)=@hci, 0x80, &(0x7f0000006500)=[{&(0x7f0000005500)=""/4096, 0x1000}], 0x1, &(0x7f0000006540)=""/188, 0xbc}, 0x8}], 0x7, 0x40000000, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000067c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_UNMAP$ALL(r0, 0x3b86, &(0x7f0000006800)={0x18, r3}) fanotify_mark(0xffffffffffffffff, 0x20, 0x8000008, r0, &(0x7f0000006840)='./file0\x00') r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0xa, 0x40010, r0, 0x0) r5 = mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x3000000, 0x4000010, r0, 0x10000000) r6 = openat$cgroup_procs(r0, &(0x7f0000006880)='tasks\x00', 0x2, 0x0) r7 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r4, r5, &(0x7f00000068c0)=@IORING_OP_SPLICE={0x1e, 0x14, 0x0, @fd_index=0x1, 0x9, {0x0, r6}, 0x7, 0x1, 0x1, {0x0, r7, r1}}) write$UHID_CREATE2(r0, &(0x7f0000006900)={0xb, {'syz1\x00', 'syz1\x00', 'syz1\x00', 0xca, 0x1, 0x4, 0x7, 0xd, 0x2, "eebce19448f2285b6de4f0b068c0c708466cf68d690e81ce10a3b1667d1b7da6d74a07ef7fc1ea5ab2e35602c5918f585c79c687dd38bdc6bc4a13499f668bc6ec0d6499ef036c0fb4a48b877edc6ccec847f540a876c135208f6fbd319a61b890b1d1e7d4501937a6aed8920feb09da4d47e52790c2c3a89bb0617fa66e108983552fd0dab69a3c6c92209bf4a814c51cb6f2b1cc0284582f42c3bca6f8fc8facb2a56d6d09fe3aba6b9933dfeeb56d1f2fbe4eb92adfb28b0ef3ecf5ea55bc92e6d3aefaeac3dc548e"}}, 0x1e2) ioctl$TIOCGSID(r0, 0x5429, &(0x7f0000006b00)=0x0) syz_pidfd_open(r8, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000006b40)={0xc}) r9 = syz_genetlink_get_family_id$batadv(&(0x7f0000006bc0), r2) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r0, &(0x7f0000006c80)={&(0x7f0000006b80)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000006c40)={&(0x7f0000006c00)={0x34, r9, 0x200, 0x70bd27, 0x25dfdbff, {}, [@BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x65}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_ORIG_INTERVAL={0x8}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0xb}]}, 0x34}, 0x1, 0x0, 0x0, 0x8015}, 0x4000000) prlimit64(0xffffffffffffffff, 0xb, 0x0, &(0x7f0000006cc0)) r10 = accept4$inet6(r0, &(0x7f0000006d00)={0xa, 0x0, 0x0, @private1}, &(0x7f0000006d40)=0x1c, 0x800) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000006dc0)={&(0x7f0000006d80)='f2fs_fallocate\x00', r0, 0x0, 0x7}, 0x18) mount_setattr(r0, &(0x7f0000006e00)='./file0\x00', 0x8000, &(0x7f0000006e40)={0x80, 0x8, 0x120000, {r0}}, 0x20) ioctl$IOMMU_VFIO_IOAS$CLEAR(r0, 0x3b88, &(0x7f0000006e80)={0xc}) getsockopt$X25_QBITINCL(0xffffffffffffffff, 0x106, 0x1, &(0x7f0000006ec0), &(0x7f0000006f00)=0x4) chdir(&(0x7f0000006f40)='./file0\x00') shutdown(r10, 0x1) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000006f80)={0xffffff23, 0x5, 0x7fff, 0x5, 0x9}, 0x14) sendmsg$802154_raw(r1, &(0x7f00000070c0)={&(0x7f0000006fc0)={0x24, @none={0x0, 0x1}}, 0x14, &(0x7f0000007080)={&(0x7f0000007000)="5d3188a13dae7d91494406611b8010b834dae0b8f49843adf53dba24d743c6c1a5f9d59efe285aa6f310ca6653f3e8159ada884b538b3d1c936f3f6a2c87e61d922f46f8e92464b708b2661f4173913f30c69945dd0cb4d155ee4b15781833be9b9ac9f917970192075ca352adf08970c1f664a50ce4", 0x76}, 0x1, 0x0, 0x0, 0x4008891}, 0x20008000) io_uring_enter(r0, 0x4293, 0x7191, 0xc, &(0x7f0000007100)={[0x8]}, 0x8) ioctl$BLKIOOPT(r0, 0x1279, &(0x7f0000007140)) 7.356192282s ago: executing program 2 (id=1761): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r0 = getpid() r1 = creat(&(0x7f0000000100)='./file0\x00', 0x158) r2 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r2, 0xab00, r3) r4 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) ioctl$NBD_SET_FLAGS(r4, 0xab0a, 0x1000001000104) ioctl$NBD_SET_SOCK(r4, 0xab00, r3) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)={0x6c, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x2c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast2=0xe0000001}, {0x8, 0x2, @dev}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x3}]}, 0x6c}}, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r7 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r7, &(0x7f0000019680)=""/102392, 0x18ff8) socket$nl_generic(0x10, 0x3, 0x10) r8 = socket$alg(0x26, 0x5, 0x0) bind$alg(r8, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r8, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) r9 = accept4(r8, 0x0, 0x0, 0x0) sendmsg$nl_route_sched_retired(r9, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000012100), 0xe078}}, 0x0) recvmmsg(r9, &(0x7f0000000180)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000500)=""/229, 0xe5}], 0x1}}], 0x2, 0x60, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)={0x68, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast2=0xe0000001}, {0x8, 0x2, @dev}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}, @CTA_NAT_SRC={0x4}]}, 0x68}}, 0x0) ioctl$NBD_DO_IT(r2, 0xab03) close_range(r1, 0xffffffffffffffff, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) 6.605743575s ago: executing program 6 (id=1762): socket$nl_generic(0x10, 0x3, 0x10) socket$kcm(0x23, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r1, 0x29, 0x1a, &(0x7f0000000000)=0x6, 0x4) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001680)=ANY=[@ANYBLOB="60000000100001040100"/20, @ANYRES32=0x0, @ANYBLOB="7b130000000000003800128008000100677470002c00028008", @ANYRES32, @ANYBLOB="080003000800000008000100", @ANYRES32=r1], 0x60}}, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 6.566441774s ago: executing program 2 (id=1763): mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x300000b, 0x200000005c831, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, 0x0, 0x0) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000201b4510fc0428155d6d01020301090212000100000000090401"], 0x0) syz_usb_control_io(r1, 0x0, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff}) mmap$IORING_OFF_SQ_RING(&(0x7f0000f81000/0x3000)=nil, 0x3000, 0x0, 0x30, r2, 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r1, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x1fb7) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0xe) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00304, 0x17) 5.237700314s ago: executing program 7 (id=1765): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000002c0), r0) r2 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2) ioctl$KVM_RUN(r2, 0xae80, 0x0) sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000000100000008000100020000001c000480050003000100000005000300800000000500030006000000080002"], 0x40}}, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="0900000007000000010001000900000000000000", @ANYRES32, @ANYBLOB="00000000000000000000000000000000000000008541dbe32d71bf362655495e41337b745167fe1e5fb528e608345c264c3bd890052bb3", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000700000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8a10ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r5 = mq_open(&(0x7f000084dff0)='z\xbf\x17', 0x6e93ebbbcc0884f2, 0x0, 0x0) ppoll(&(0x7f0000000100)=[{r5}], 0x1, 0x0, 0x0, 0x0) r6 = syz_io_uring_setup(0x239, &(0x7f0000000200)={0x0, 0xcd0c, 0x10100}, &(0x7f0000000180)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r7, r8, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r6, 0x2def, 0x0, 0x0, 0x0, 0x0) r9 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) prlimit64(r9, 0x0, 0x0, 0x0) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000300)=0x0) rt_tgsigqueueinfo(r9, r10, 0x32, &(0x7f0000000500)={0x1e, 0x2d, 0x7}) mq_timedsend(r5, 0x0, 0x0, 0x0, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) socket(0x3, 0x25c24643fc1335b9, 0x3) r11 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r11, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000240)=0x14) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000001c0)={r3, &(0x7f0000000180)="5fa9817d01c195fde377bc7b7ebe0c0d7ba1413e22f8fd2c3e0a25b19a1c6a484f4aee887f644d9d55e2dd5e106f7828f5c77d4ba29f40ef6d41f1e0", &(0x7f0000000400)=@buf="6ed46bd3fc85886d777f26adf897579b630a323c1dca431d9cb14cfc10a2886fe049ce7b34ba66a84b9e5c387ee49be6c8fdcb9c03328606b6ab10e044a04518c8491e26c2d081a237c4347b87840545314a108dced652538e6302414f15a573ca33c27b1a506ab2bea3a033eb522a15d15b61ef05264d81390813cc14ad124357df66a30bbcd99e15d4167b538cfd19b4e8202f23d3f4b851c6275cbf50d7f6f706c08e572d8d27c7634c886123eec45ab9e900ceacb48974287cddc3545b7f6d5b7017dfcd2e", 0x1}, 0x20) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) syz_genetlink_get_family_id$net_dm(&(0x7f0000000000), r0) 5.199305128s ago: executing program 6 (id=1766): r0 = syz_usb_connect(0x0, 0x1cb, &(0x7f0000000540)=ANY=[@ANYBLOB="12010000122f0d4071040403dfe4000000010902b901010000003f0904"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a58000000160a03020002000000000000020000000900020073797a30000000000900010073797a30000000002c00038008000140000000000800024000000000180003801400010073797a5f74756e00000000000000000014000000110001"], 0x80}}, 0x0) syz_emit_ethernet(0x26, &(0x7f0000000040)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x38}, @empty, @val={@val={0x88a8, 0x6, 0x0, 0x2}, {0x8100, 0x0, 0x1, 0x1}}, {@can={0xc, {{0x3, 0x1, 0x0, 0x1}, 0x4, 0x0, 0x0, 0x0, "e54f0de08ece29c7"}}}}, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6770c000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r5, 0x5423, &(0x7f0000000000)=0x15) ioctl$TCSETS(r5, 0xc0384707, &(0x7f0000000040)={0x1, 0x0, 0x0, 0x0, 0x0, "3eccd8f9d20000000000001000000200000500"}) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0006}]}) close_range(r6, 0xffffffffffffffff, 0x0) arch_prctl$ARCH_SHSTK_STATUS(0x5005, &(0x7f0000000000)) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) 4.502260118s ago: executing program 2 (id=1768): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000480)={0x2000000, 0x18, 0xfa00, {0x0, 0x0, 0x2}}, 0x20) 4.340911251s ago: executing program 7 (id=1769): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000040)={0x5, 0x0, 0x0, &(0x7f0000000000)='syzkaller\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) r0 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet6_mreq(r0, 0x29, 0x1b, &(0x7f0000000100)={@remote}, 0x14) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'virt_wifi0\x00', 0x0}) setsockopt$inet6_mreq(r0, 0x29, 0x1b, &(0x7f0000000000)={@remote, r1}, 0x14) close(0x3) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl(r2, 0x8b2a, &(0x7f0000000040)) 4.337621777s ago: executing program 2 (id=1770): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000e5ffff1701000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000007000000850000000600000085000000080000009500000000000000"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000140)={'pim6reg1\x00', 0x1}) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000100)={'pim6reg1\x00', @link_local}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='qdisc_destroy\x00', r2}, 0x10) close(r1) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, 0x0, 0x0) memfd_secret(0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe1000/0x18000)=nil, &(0x7f0000000200)=[@textreal={0x8, 0x0}], 0x1, 0x34, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r4 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000380)=0x2) r7 = socket(0x1a, 0x6, 0x9) setsockopt$IP_VS_SO_SET_ADD(r7, 0x0, 0x482, &(0x7f0000000040)={0x100000011, @private=0xa010501, 0x4e23, 0x0, 'none\x00', 0x0, 0x80000}, 0x2c) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, &(0x7f0000000000)={0x11, @loopback, 0x0, 0x0, 'wlc\x00', 0x0, 0x0, 0x4b}, 0x2c) r8 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) connect$bt_l2cap(r8, &(0x7f0000000040)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe) getsockopt$bt_BT_CHANNEL_POLICY(r8, 0x112, 0x4, 0x0, &(0x7f00000000c0)) 4.225494485s ago: executing program 0 (id=1771): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) r1 = socket$alg(0x26, 0x5, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x0, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) accept4(r0, &(0x7f0000000340)=@l2tp={0x2, 0x0, @remote}, &(0x7f00000003c0)=0x80, 0x800) r3 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r3, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty, 0x10}, 0x1c) setsockopt$inet6_udp_encap(r3, 0x11, 0x64, &(0x7f0000000180)=0x2, 0x4) syz_emit_ethernet(0x32, &(0x7f0000000400)=ANY=[@ANYBLOB="ffffffffffff0180c2000020241730a7e8030838e86e8922e000000000119078000000000000000000014e20001090788203000000000000"], 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x11, 0x4, &(0x7f0000000240)=ANY=[@ANYRES32=r2], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='rxrpc_recvmsg\x00', r4}, 0x10) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x18, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='rxrpc_recvmsg\x00', r5}, 0x10) r6 = socket$kcm(0x21, 0x2, 0x2) recvmsg$kcm(r6, &(0x7f0000001a80)={0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000140)="28ad6efae0f85bf81d7dc5fcfcf9c11f30cd6d41334cc30c2ff9629f5b45136ae723edad8439801f6a6fb5b618010573e7ec7d277b2f4491af113771aadc45005f4b0bc8c56ff5ea91353f38f065563f909129d6f3ea15c18253bfabe8f0472df12f38cfceffefde92c9a3795e13dd1426bc275069a7d15d6f00d1b8bc04", 0x7e) r7 = socket$packet(0x11, 0x3, 0x300) socketpair(0x1, 0x800, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000d6a9cc2ffd8870be371f5d754121277e691a18bdad60b135bdb36ac4a60b8bc9146a3ab51e7e5c9b227696197f1d179d4f12291ba1e16d580561e420cfa858cd168c1e91fd91f9361ad028d504555d43ba29d938545dba13"], 0x48) r9 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0) write$binfmt_aout(0xffffffffffffffff, &(0x7f00000005c0)=ANY=[], 0xff2e) ioctl$TCSETS(r9, 0x40045431, &(0x7f0000000100)) r10 = syz_open_pts(r9, 0x8000) r11 = epoll_create(0x1) epoll_ctl$EPOLL_CTL_ADD(r11, 0x1, r10, &(0x7f0000000040)) r12 = dup3(r10, r9, 0x0) ioctl$TCXONC(r12, 0x540a, 0x3) creat(&(0x7f00000001c0)='./file0\x00', 0x27) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) bind$packet(r7, &(0x7f0000000000)={0x11, 0x0, r13, 0x1, 0x0, 0x6, @link_local}, 0x14) sendto$inet6(r7, &(0x7f0000000280)="02042700", 0x4, 0x800, 0x0, 0x0) 4.160216025s ago: executing program 7 (id=1772): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)={0x1c, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}}, 0x0) 3.885968305s ago: executing program 7 (id=1773): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000d40)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TID_CONFIG(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)={0x30, r1, 0xc31, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_TID_CONFIG={0x14, 0x11d, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x22}]}, {0x14}]}]}, 0x30}}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_CTHELPER_NEW(r4, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000540)={0x70, 0x0, 0x9, 0x305, 0x0, 0x0, {}, [@NFCTH_NAME={0x9, 0x1, 'syz1\x00'}, @NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x8}}, @NFCTH_TUPLE={0x3c, 0x2, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private1={0xfc, 0x1, '\x00', 0x1}}, {0x14, 0x4, @remote}}}]}, @NFCTH_PRIV_DATA_LEN={0x8}]}, 0x70}}, 0x0) r5 = syz_usb_connect(0x2, 0x24, &(0x7f0000000440)=ANY=[@ANYBLOB="12011f00abbe6740e9174e8b089c000000010902120001000000000904000000ff"], 0x0) syz_usb_control_io(r5, &(0x7f00000000c0)={0x2c, &(0x7f0000000540)=ANY=[@ANYBLOB="200e25000000255f"], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r5, 0x0, 0x0) syz_usb_control_io$hid(r5, &(0x7f0000000200)={0x24, &(0x7f0000000100)={0x20, 0xd, 0xc8, {0xc8, 0x1, "194e6e8c0ce0ca68dab6f6c2049f51f261e74f858881aa29539c5ec96dc5dbc069025c4f92a6e140cac18cac88e95cd0a3267e82a0d865f4dfe482dce706c0395245e746db2cd2535b7c1412c0712c85d4e775ea04be7c1dd2b3ec0a2a0c8bee34107ffa944324ff2f6ae3ae1e1ae1bddd76353cd585a1028cb1f44f53fb5910ea87d3deb21da6dbcb4371722253023b595821b00c9c9462b7c32e396f6b7cf4423657ce619a0cfbe8a0b69e29ed0375bffd2843eae62556db4a6b0bbea4eb9ca25b956b49fb"}}, &(0x7f0000000000)={0x0, 0x3, 0xb, @string={0xb, 0x3, "7dbb2cb833b60c1833"}}, &(0x7f00000004c0)={0x0, 0x22, 0x5, {[@main=@item_4={0x3, 0x0, 0xc, "15ecdab9"}]}}, &(0x7f0000000080)={0x0, 0x21, 0x9, {0x9, 0x21, 0xa12, 0x3, 0x1, {0x22, 0x7d9}}}}, &(0x7f0000000480)={0x2c, &(0x7f0000000240)={0x20, 0xf, 0x1f, "84ab5222391a96785cb0cdbcba6cb6da685e48665d3aa75d20b15b1104ff45"}, &(0x7f0000000280)={0x0, 0xa, 0x1}, &(0x7f00000002c0)={0x0, 0x8, 0x1, 0x9}, &(0x7f0000000300)={0x20, 0x1, 0xc2, "1d7501a1ba23107b70304a2007d10e932eccbc35f2d2f90bd061e86b08095437083a5c03645a0d6846cf26885d26a9e9b33f3a9e5608cc279a1cc35a0ca8ac804e2375e94b07c86160b09d59d4691d6861532042424383f0a0dfc6c2ce2fdc31c4dbcfa1365433b44c9b07c1caca9d93ff2bf3e54874b0bf930e35294d8ff5f0c4b9b7c5243f17748878523160a1f9f688026a1b6749c0f5a78fc81a9ce2d0b6c58e13c85492cd1f2c6747dde300d7baaccb6e205ff6e6013642efe3a272bc7b492c"}, &(0x7f0000000400)={0x20, 0x3, 0x1, 0x3}}) 3.885404132s ago: executing program 0 (id=1774): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x74, 0x0, 0x0) r3 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x301) ioctl$USBDEVFS_CONTROL(r3, 0xc0185500, &(0x7f0000000000)={0x20, 0x1, 0x80, 0x3d, 0x0, 0x6, 0x0}) ioctl$KVM_RUN(r2, 0xae80, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r4, &(0x7f0000010000/0x18000)=nil, &(0x7f0000000040)=[@textreal={0x8, &(0x7f0000000080)="0f009e5300cd0066b8004000000f23d00f21f866350000000e0f23f80f01cb0f01d566f466b9f00a000066b85d5c14bb66ba12b978260f3066b95b02000066b80000000066ba010000000f30f00fbba402000fc76d25", 0x56}], 0x1, 0x4, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 2.704616855s ago: executing program 6 (id=1775): socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0xe1}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000040)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x2000000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2) mkdirat(0xffffffffffffff9c, 0x0, 0x1c0) unshare(0x4000280) landlock_create_ruleset(&(0x7f0000000180)={0x100, 0x0, 0x80ffff}, 0x18, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) r3 = socket$kcm(0x10, 0x2, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r4, 0x8982, &(0x7f0000000400)={0x0, 'batadv0\x00', {0x8}}) sendmsg$kcm(r3, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000000)="2e00000010008188e6b62aa73f72cc9f0ba1f848140000005e140602000000000e000a000f000000028000001294", 0x2e}], 0x1}, 0x0) sendmsg$AUDIT_USER_AVC(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000100)={&(0x7f00000002c0)={0x74, 0x453, 0x100, 0x70bd29, 0x25dfdbfe, "35166148fd596b75be0050ef17fb78e66f06f81d6b6d7c07f336ade1762b6e643de1986b39229867aaf1dd36d80b246820a472959af68819258975d0d129d6e010f0352e7bc66c5269d7d9cace2fe32f222b7ab411f71db4e6a6d6e0d2a851ff22d0", ["", "", "", "", ""]}, 0x74}, 0x1, 0x0, 0x0, 0x4000000}, 0x40000) mremap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x4000, 0x3, &(0x7f0000005000/0x4000)=nil) munmap(&(0x7f0000002000/0x1000)=nil, 0x1000) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r5 = memfd_create(&(0x7f0000000500)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf#2\x99\x1e\xa1`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\f<\x8f\xc1\x99\x89r\xe1?\xbdu\x98\xc3\xf8\xd2Q#\xc6g\xa0\x85\xd6G\x85\x11X\x8d,\x02\xd45\xb8\xca\x97\x9d\xcb\x1e\x80\xd6\xd5>N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec\x8aog\x87BR\x9d\xad\xd4FcB\xda\x95\xc3\xdd\x9d\x8f\x1a\xce\x18\x80\"j\xe1\xba\x1e\x97uX\xccv\xd6\vcz\x92A^\xbc\xceF\xf7\xe5:\xaf\xc5~\xbcJ e\r\x88c\x9d\xb92\xb6i4zq\xb3c\x0f\xb2t\x93\xf2E6b\xfa\xcdJ5\xe3W]`4\xd8D\x05\v\xfc)\xca\xedQ\xd0]Ot\'\xc2tDF\xf9\xa7\xb5(\x83\xa5\x0f\x1d\x1d\x06Dg\x13>\x19\xe85#\aaT\x89=\x104\xd5\x85l\x96\x91\xea\x172P\xb3:\xadZ\xbc\xbe\x00\xf0\x14\x96\xd9M\xd7\x88QZs\xb2\xe1+$jfQodH\x05/y`~7\x16\x02\x00(v\xe6`\"6\xfcgC\xb5\xf0\x13.zj\xc5bj+@\x00\x00\x00\x00\x00\x00\x00.\xd4`=z\xd1n\x8d\x8f\xa5hS\x8e[\xb3\xa3\x87\xb9\xe2_Z\x11\xef\xc2]V\xf3\x03\x94\xb9\xe1\xa68\x8d\\\xe5\xef\xacpM\xf0\xa6\x04\x10\xb7\xc0t\x83\\\xf7\x12k\x9f\x10\xd5Z\x19\xc1\xc1\x80\\o\x97\xce=U\xdd\xaa\x1b\x05\x14\x13\xa6\xbd#\xde\x04\xe6$\xec$3\xf6\x97\xc6\xeaSL\xb7A72M\x88k@\xe5\xa3\n&\x1e\xc84\xa9\xe2\xccM\x906\x95xQ-2p\xd62\'\xec\x0f\x13;I\x95fE_\r\xe7\t!A\x05\xe4\x8f\x9e0\xf8/T\x18\xf7\xa1\x9f\xde1\xd5\x80<\xf5\b\xa9\xec\x85\xaeW\xb3\xd8#)bn \xfb\xf2\x88\xfaR\xff\xdd\x80\x96_\xec5\xf0\x1c\a\x8a\x80\x00@=\r8u+%f:\x1e\x82\xfap\xf6\x89\xea\xba\xe3\xbbM%F\xdb\\\xd1eJJ*\xc67\xca\x03\xa3\xf7(\xbb\xecN\xd4\xe7\xf2:u\x8a\b\xd5\v\xca\xfd\\\xd6\xe3\x05\xb3\x03\xd5\xe0\xd2\xf2{\'\x8b\xdf\xa1\xbe}\xb2\xe4y\xbb\xe6\x1f\x10c\xf5WQ\x82\x04\x01C\x83,\x90\x1a\xfa\x8e\x17\x89\xe2\xedX\x8d\rmq\t\xb5$\xb4\x9b\x92z\xd6/-\x13,\xb5%\x8eM/\x04\xa7\x7f\x1b\x85\xf1\xa4X\x17\xbb\x1cR14\xfb!\b\x10\xe8\xb2\xd41gK\xe4\xea\xe39d\bL\xe5\x1b\xbd[\x9bWD:\r&\xe9\vn^\xcc\x86\xe3\xce1>3{\xaa{\xbd0P\x9f\xa68\xf5\x82\xb8\x9aD\x9c{\xe6\xf8\xcbD\xb5aJ\xb0\x92\x89\xbc\x82\x1ch\x89\xe7\xdd]q,\xec\xc4\xa5\x93\xe5,\x0e,>/\xaf|\xf0\x01V\x7f\xc9?\xba\x16\xe4$+}5dy\xb1\xef\xf1m\xa5\x94d9\xaf\xcfq\x8b=\x026\xef\r\x91\x18\xc5\xb6\xb9fM\x8ayZ\xbcd\xa5\x8a\x88\x98\xc3\xfc`\xa6\xba\x1f\x17\v$\x88g\xb4\xad\b\xc1\xddW\xa6\xc1\xb7\xb0\xa3\x84Q\x13GoU\xe2\xb7\x03\x9c\xd5\x0f\xa8\x0ef\"\x15\x82\xe7\xbd\xf8\xca\x10f\xfe6h\xe9\xc3\xc2\xa0O:\xac~\x1a\xf7\xbeF\xbe\xe5\xf0\x81\xd6&\xc00x0}) sendmsg$NL802154_CMD_NEW_SEC_DEVKEY(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000100)={0x44, r1, 0x1, 0xfffffffd, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r2}, @NL802154_ATTR_SEC_DEVKEY={0x28, 0x2f, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0x100000000000000}}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8}, @NL802154_DEVKEY_ATTR_ID={0x10, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_MODE={0x8}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x4}]}]}]}, 0x44}}, 0x0) 1.206127232s ago: executing program 6 (id=1778): bind$nfc_llcp(0xffffffffffffffff, 0x0, 0x0) syz_usb_connect(0x5, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0xd6, 0x3, 0x92, 0x20, 0x4fc, 0x204, 0x6767, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0xbf, 0x0, 0x2, 0x6d, 0xa0, 0xd8, 0x0, [], [{{0x9, 0x5, 0x2, 0x2, 0x200, 0xfe}}, {{0x9, 0x5, 0x82, 0xa, 0x200, 0x0, 0x0, 0x5}}]}}]}}]}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, 0x0) r0 = syz_open_dev$vcsa(&(0x7f0000000040), 0x1, 0x2) syz_genetlink_get_family_id$nfc(&(0x7f0000000080), 0xffffffffffffffff) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)) r1 = syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000003f40)=@acquire={0x134, 0x17, 0x1, 0x0, 0x0, {{@in6=@mcast2, 0x1, 0x32}, @in=@loopback, {@in6=@private0, @in=@local}, {{@in=@empty, @in6=@private0, 0x4e20, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xee00}, {}, {0xfffffffffffffffc}}, 0x0, 0x0, 0x0, 0x70bd2a}, [@mark={0xc, 0x15, {0x35075a, 0x352}}]}, 0x134}, 0x1, 0x0, 0x0, 0x4000}, 0x40014) ioctl$IOCTL_GET_NCIDEV_IDX(r2, 0x0, &(0x7f00000000c0)=0x0) bind$nfc_llcp(r1, &(0x7f0000000240)={0x27, r4, 0x0, 0x0, 0x0, 0x0, "d9298498abdba7f061bd1ca44c226af5160e961711a07760760beeab11e88509de7f1939e8abfe0055acc8ef039a5be42200000000000000000100", 0x38}, 0x60) openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r6) sendmsg$NFC_CMD_DEV_UP(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x1c, r7, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r5}]}, 0x1c}}, 0x0) sendmsg$NLBL_UNLABEL_C_STATICREMOVE(r6, &(0x7f0000000a80)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000a40)={&(0x7f0000000600)={0x144, 0x0, 0x8, 0x70bd25, 0x25dfdbfd, {}, [@NLBL_UNLABEL_A_SECCTX={0x25, 0x7, 'system_u:object_r:getty_etc_t:s0\x00'}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @empty}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'batadv_slave_1\x00'}, @NLBL_UNLABEL_A_SECCTX={0x2b, 0x7, 'system_u:object_r:wireless_device_t:s0\x00'}, @NLBL_UNLABEL_A_SECCTX={0x29, 0x7, 'system_u:object_r:hostname_exec_t:s0\x00'}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'veth0_vlan\x00'}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @dev={0xfe, 0x80, '\x00', 0x2f}}, @NLBL_UNLABEL_A_SECCTX={0x29, 0x7, 'system_u:object_r:bsdpty_device_t:s0\x00'}, @NLBL_UNLABEL_A_SECCTX={0x2b, 0x7, 'system_u:object_r:gpg_helper_exec_t:s0\x00'}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'pimreg\x00'}]}, 0x144}, 0x1, 0x0, 0x0, 0x20000090}, 0x20014008) sendmsg$NFC_CMD_START_POLL(r6, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)={0x24, r7, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r5}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0xffffffff}]}, 0x24}}, 0x0) sendmsg$NFC_CMD_ACTIVATE_TARGET(r6, &(0x7f0000000780)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000800)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010023010000341d00001c00000008000100", @ANYRES32=r5, @ANYBLOB="08000400000000000800030001000000"], 0x2c}}, 0x0) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nfc(&(0x7f0000000040), r8) r10 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r10, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_FW_DOWNLOAD(r8, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)={0x24, r9, 0x1, 0x70bd2d, 0x0, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r11}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r5}]}, 0x24}, 0x1, 0x0, 0x0, 0x6008801}, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f0000000100)) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f0000000140)) add_key$user(&(0x7f0000002100), &(0x7f0000002180)={'syz', 0x1}, &(0x7f00000021c0)='\x00', 0x1, 0xfffffffffffffffe) add_key$user(&(0x7f0000002300), &(0x7f0000002340)={'syz', 0x3}, &(0x7f0000000100)="370c099069effa43de3e1404db09b4ce1ef77bde4b371532dd16447c1b13403656c86711f6e750026f23029a50d44299c7bf5c78dc5efae2d041016160e8bef7b30c05e298aa9572540dd950307987eef2115e1bcf512bea3410ca5a9e9f827e4b13490dbbd4fc5a45e0738b959acafd2c12863045265bcbc2c9426ac3f614746b436fe86a72dc642dd67d970604a69b4f22cd0076beedc18056ab4bea4c825b69a7a77adcd5488684872b1bb9eb84586549e11b080468668e8fd0e52ce0705a", 0xc0, 0xffffffffffffffff) 1.194349231s ago: executing program 0 (id=1779): openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) socket$qrtr(0x2a, 0x2, 0x0) r0 = syz_io_uring_setup(0x497, &(0x7f0000000400)={0x0, 0x707b, 0x0, 0x4, 0x288}, &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) io_uring_enter(r0, 0x3516, 0x95ffffff, 0x0, 0x0, 0x0) 1.159253046s ago: executing program 2 (id=1780): openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143042, 0x52) syz_open_dev$sg(0x0, 0x0, 0x8002) io_setup(0x6, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x1, './file1\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) userfaultfd(0x80001) mount(0x0, &(0x7f0000000240)='.\x00', 0x0, 0x0, 0x0) socket(0x2c, 0x4, 0x1) syz_open_procfs(r0, 0x0) ioperm(0x2, 0xcd, 0x8) set_mempolicy_home_node(&(0x7f0000349000/0xa000)=nil, 0xa000, 0x0, 0x0) 1.023927279s ago: executing program 7 (id=1781): openat$vim2m(0xffffffffffffff9c, &(0x7f0000000440), 0x2, 0x0) memfd_create(&(0x7f0000000380)='/dev/loop#\x00', 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.swap.current\x00', 0x275a, 0x0) socket$key(0xf, 0x3, 0x2) syz_open_dev$tty20(0xc, 0x4, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r1, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r1, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[0x0], 0x40000012}) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r4 = socket(0x10, 0x3, 0x0) ioctl$F2FS_IOC_RELEASE_VOLATILE_WRITE(r3, 0xf504, 0x0) write(r4, &(0x7f0000000000)="240000001e00ff3bd90ea7eff078000000000000000000000000000008000f0016040000", 0x24) bind$bt_l2cap(r4, &(0x7f0000000040)={0x1f, 0x4ce, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x7656}, 0xe) socket$netlink(0x10, 0x3, 0x0) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) socket$xdp(0x2c, 0x3, 0x0) syz_io_uring_setup(0x15b8, &(0x7f00000002c0)={0x0, 0x423d, 0x10000, 0x0, 0x145, 0x0, r0}, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) ioctl$DRM_IOCTL_MODE_ATOMIC(r1, 0xc03864bc, &(0x7f0000000180)={0x0, 0x1, &(0x7f0000000340)=[r2], &(0x7f0000000280)=[0x1], &(0x7f0000000200), &(0x7f0000000240), 0x0, 0x7f}) 962.436693ms ago: executing program 0 (id=1782): r0 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r0, &(0x7f0000000000)={&(0x7f0000000080)=@rxrpc=@in4={0x21, 0xa7ff, 0x2, 0x10, {0x2, 0x4e22, @dev}}, 0x8c, &(0x7f0000000140)=[{&(0x7f0000000ac0)="ee", 0xfffffdef}], 0x1, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000000040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b57000000860f5878c37ffe36e1165814d435be5b317c6c8189587d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988ab013f40afe403041323110f62055394412158e7a3adb148d641aa40d4ab077fe34232aa8b31851466d0998a61d7da0c86d70000001010"], 0x10b8}, 0xff4c) 800.529774ms ago: executing program 7 (id=1783): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000180)={0xc, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000100)={0xffffffffffffffff, 0x0, &(0x7f0000000440)=""/219, 0x4}, 0x20) bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="1900000004000000040000000900000000000000", @ANYRES32=0x1, @ANYBLOB="9da42f8fd6ef7b58414ee85489f35582d5240000491b", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$MAP_GET_NEXT_KEY(0x2, 0x0, 0x0) bpf$MAP_GET_NEXT_KEY(0x2, 0x0, 0x0) bpf$TOKEN_CREATE(0x24, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000900)={'bridge0\x00', @remote}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r5, 0x89a1, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mkdir(&(0x7f0000000300)='./file0\x00', 0xd6) mq_open(0x0, 0x0, 0x0, &(0x7f0000000180)={0x2, 0x80000000001}) r6 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000200)={r6, r6, r6}, &(0x7f0000000040)=""/213, 0xd5, &(0x7f0000000280)={&(0x7f0000000140)={'sha1-avx2\x00'}}) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x3, &(0x7f0000000900)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r8 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000001580), 0x0, 0x0) pread64(r8, &(0x7f0000000180)=""/39, 0x27, 0x2b) r9 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(r8, 0x6, &(0x7f0000000180)={0x4000000, 0x0, &(0x7f0000000100)=[r7, r7, r7, r7, r7, r7, r7, r9]}, 0x8) 756.164875ms ago: executing program 0 (id=1784): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) (async) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000200)={{0x1, 0xffffffffffffffff}, &(0x7f00000000c0), &(0x7f0000000100)='%ps \x00'}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000240)={r0}, 0x4) (async) mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x0) execve(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f0000000040)={0xa, 0xe22}, 0x1c) r2 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r2, &(0x7f0000000040)={0x2, 0x4e22, @empty}, 0x67) (async) r3 = open(&(0x7f0000000300)='.\x00', 0xa000, 0x124) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)) (async) mkdirat(r3, &(0x7f0000000340)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) (async) r4 = open(&(0x7f0000000300)='.\x00', 0x0, 0x145) r5 = fanotify_init(0xf00, 0x0) fanotify_mark(r5, 0x1, 0x50000038, r4, 0x0) r6 = open(&(0x7f0000000300)='.\x00', 0x0, 0xc4) renameat2(r6, &(0x7f0000000180)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x2) 730.676397ms ago: executing program 9 (id=1749): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket(0x2, 0x80805, 0x0) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[], 0x44}}, 0x0) getsockopt$inet_sctp6_SCTP_MAX_BURST(r2, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000300)=0x8) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(r1, 0x84, 0x1a, &(0x7f0000000080)={r3}, &(0x7f0000000200)=0x8) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_TSINFO_GET(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000000000000001d00000020000180140002006e657464657673696d30000000000000080003"], 0x34}}, 0x0) openat$vimc2(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) 718.435µs ago: executing program 0 (id=1785): syz_open_dev$hidraw(&(0x7f0000000080), 0x6, 0x101000) syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000090000082502000000000000000109025c00020100f92a0904000001020900000524060001053408fa6e0d240f0100000000000d000a0006471a010000190581"], 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) openat$6lowpan_control(0xffffff9c, &(0x7f0000000e40), 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x200, 0x70bd2b, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7b, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) socket$packet(0x11, 0x2, 0x300) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f0000000280), 0x0, 0x2, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000480)={0x26, 'hash\x00', 0x0, 0x0, 'nhpoly1305-generic\x00'}, 0x58) r3 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r3, 0xaf01, 0x0) socket$igmp6(0xa, 0x3, 0x2) ioctl$VHOST_SET_VRING_ADDR(r3, 0x4028af11, &(0x7f0000000300)={0x1, 0x0, 0x0, &(0x7f0000001600)=""/78, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r3, 0x4008af03, &(0x7f0000003380)) r4 = eventfd2(0x0, 0x0) ioctl$VHOST_SET_VRING_ERR(r3, 0x4008af22, &(0x7f00000001c0)={0x0, r4}) ioctl$VHOST_SET_VRING_ADDR(r3, 0x4028af11, &(0x7f0000000240)={0x0, 0x0, 0x0, &(0x7f0000001d00)=""/176, 0x0}) ioctl$VHOST_SET_VRING_KICK(r3, 0x4008af20, &(0x7f0000000000)={0x0, r4}) ioctl$VHOST_VSOCK_SET_RUNNING(r3, 0x4004af61, &(0x7f00000000c0)=0x1) ioctl$VHOST_VSOCK_SET_GUEST_CID(r3, 0x4008af60, &(0x7f0000000140)={@my=0x1}) socket$vsock_stream(0x28, 0x1, 0x0) socket$netlink(0x10, 0x3, 0x0) 0s ago: executing program 9 (id=1786): keyctl$reject(0x14, 0x0, 0x1ffffffe, 0x6, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)={0x3c, 0x3d, 0x107, 0x70bd29, 0x0, {0x4, 0x7c}, [@typed={0x4}, @nested={0x24, 0x1, 0x0, 0x1, [@nested={0x18, 0xc8, 0x0, 0x1, [@typed={0x8, 0x2a, 0x0, 0x0, @fd=r0}, @typed={0xc, 0xb2, 0x0, 0x0, @u64=0x9}]}, @typed={0x8, 0x138, 0x0, 0x0, @uid}]}]}, 0x3c}}, 0x0) r1 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r1, &(0x7f0000000540)={0x28, 0x0, 0x0, @local}, 0x10) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r3 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r2, &(0x7f0000000040)=ANY=[@ANYBLOB="034886dd010000000000140000006000000001002f00fe88a43de1a400000000000000007d01ff02000000000000000000000000000112"], 0xfdef) listen(r1, 0x0) r4 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r4, &(0x7f0000000040)={0x28, 0x0, 0x0, @local}, 0x10) writev(r4, &(0x7f00000002c0)=[{&(0x7f0000000080)='?', 0x20000081}], 0x2) shutdown(r4, 0x1) r5 = syz_open_procfs(0x0, &(0x7f00000000c0)='setgroups\x00') preadv(r5, &(0x7f00000001c0)=[{&(0x7f0000000180)=""/60, 0x3c}], 0x1, 0x2c, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="300000001900090000000000000000001c140000fe0000010000000014001200", @ANYRESHEX=r6], 0x30}}, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000300)=ANY=[@ANYRES16=r5, @ANYRES64, @ANYRES8=r1, @ANYBLOB="5010000090780000"], 0x0) setsockopt$sock_linger(r4, 0x1, 0xd, &(0x7f0000000140)={0x1, 0x7}, 0x8) kernel console output (not intermixed with test programs): ve_1 [ 516.125549][T11840] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 516.147585][T11840] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 516.170405][T11840] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 516.179475][T11840] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 516.245056][ T8] usb 2-1: New USB device found, idVendor=1645, idProduct=0008, bcdDevice=cf.36 [ 516.256084][ T8] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 516.269443][ T8] usb 2-1: config 0 descriptor?? [ 516.299726][ T1155] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 516.319725][ T1155] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 516.349273][ T7283] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 516.358517][ T7283] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 516.453393][ T9] usb 1-1: new high-speed USB device number 64 using dummy_hcd [ 516.493734][ T970] gs_usb 7-1:0.0: Configuring for 1 interfaces [ 516.500705][ T8] kaweth 2-1:0.0: Firmware present in device. [ 516.510902][ T8] kaweth 2-1:0.0: Error reading configuration (-71), no net device created [ 516.526608][ T8] kaweth 2-1:0.0: probe with driver kaweth failed with error -5 [ 516.550605][ T8] usb 2-1: USB disconnect, device number 51 [ 516.613247][ T9] usb 1-1: Using ep0 maxpacket: 16 [ 516.624464][ T9] usb 1-1: config 8 has an invalid interface number: 39 but max is 0 [ 516.632641][ T9] usb 1-1: config 8 has no interface number 0 [ 516.659388][ T9] usb 1-1: config 8 interface 39 altsetting 1 has an endpoint descriptor with address 0xDF, changing to 0x8F [ 516.672200][ T9] usb 1-1: config 8 interface 39 altsetting 1 endpoint 0x8F has invalid wMaxPacketSize 0 [ 516.682323][ T9] usb 1-1: config 8 interface 39 altsetting 1 bulk endpoint 0x8F has invalid maxpacket 0 [ 516.687255][T12005] ALSA: mixer_oss: invalid OSS volume '' [ 516.692329][ T9] usb 1-1: config 8 interface 39 has no altsetting 0 [ 516.707625][ T9] usb 1-1: New USB device found, idVendor=05ac, idProduct=c704, bcdDevice=62.77 [ 516.717643][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 516.725829][ T9] usb 1-1: Product: syz [ 516.730031][ T9] usb 1-1: Manufacturer: syz [ 516.734716][ T9] usb 1-1: SerialNumber: syz [ 516.906512][ T970] gs_usb 7-1:0.0: Couldn't get extended bit timing const for channel 0 (-EPROTO) [ 516.916643][ T970] gs_usb 7-1:0.0: probe with driver gs_usb failed with error -71 [ 516.930949][ T970] usb 7-1: USB disconnect, device number 6 [ 517.370908][T12000] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 517.396986][T12000] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 517.665155][ T9] ipheth 1-1:8.39: ipheth_get_macaddr: usb_control_msg: -110 [ 517.683548][ T9] ipheth 1-1:8.39: probe with driver ipheth failed with error -110 [ 517.908844][ T202] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 517.925211][ T202] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 518.247327][ T202] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 518.269744][ T5866] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 518.274656][ T202] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 518.354760][ T970] usb 1-1: USB disconnect, device number 64 [ 518.416247][ T29] kauditd_printk_skb: 27 callbacks suppressed [ 518.416561][ T29] audit: type=1400 audit(1739512896.917:1322): avc: denied { accept } for pid=12023 comm="syz.7.1634" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 518.510471][ T5866] usb 7-1: config index 0 descriptor too short (expected 23569, got 27) [ 518.527735][ T5866] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 518.605205][ T5866] usb 7-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 518.617760][ T5866] usb 7-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 518.647831][ T5866] usb 7-1: Manufacturer: syz [ 518.740064][ T5866] usb 7-1: config 0 descriptor?? [ 518.760751][ T53] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 518.778696][ T53] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 518.793007][ T53] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 518.800696][ T202] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 518.822100][ T53] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 518.835711][ T53] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 518.844467][ T53] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 518.851738][ T202] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 518.925003][ T5866] rc_core: IR keymap rc-hauppauge not found [ 518.930977][ T5866] Registered IR keymap rc-empty [ 518.981790][ T5866] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/rc/rc0 [ 519.065177][ T202] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 519.104301][ T202] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 519.180114][ T5866] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/rc/rc0/input38 [ 519.774428][ T202] bridge_slave_1: left allmulticast mode [ 519.779227][ T9901] usb 7-1: USB disconnect, device number 7 [ 519.782297][ T202] bridge_slave_1: left promiscuous mode [ 519.825625][ T202] bridge0: port 2(bridge_slave_1) entered disabled state [ 519.945032][ T202] bridge_slave_0: left allmulticast mode [ 519.950754][ T202] bridge_slave_0: left promiscuous mode [ 519.983467][ T202] bridge0: port 1(bridge_slave_0) entered disabled state [ 520.044838][T12046] netlink: 'syz.2.1641': attribute type 1 has an invalid length. [ 520.062625][T12047] netlink: 'syz.7.1640': attribute type 2 has an invalid length. [ 520.086008][ T29] audit: type=1400 audit(1739512898.597:1323): avc: denied { getopt } for pid=12045 comm="syz.2.1641" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 520.129477][T12047] netlink: 'syz.7.1640': attribute type 1 has an invalid length. [ 520.205202][T12050] netlink: 'syz.2.1642': attribute type 1 has an invalid length. [ 520.213295][T12050] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1642'. [ 520.376418][ T8] usb 8-1: new full-speed USB device number 2 using dummy_hcd [ 520.563191][ T8] usb 8-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 520.579538][ T8] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 520.614357][ T8] usb 8-1: config 0 descriptor?? [ 520.765289][ T202] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 520.777703][ T202] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 520.791114][ T202] bond0 (unregistering): Released all slaves [ 520.804106][ T202] bond1 (unregistering): Released all slaves [ 520.820930][T12027] wlan0 speed is unknown, defaulting to 1000 [ 520.831153][T12044] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 520.851600][T12055] IPv6: NLM_F_REPLACE set, but no existing node found! [ 520.866277][T12044] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 520.879818][ T8] [drm] vendor descriptor length:25 data:25 5f 00 00 00 00 00 00 00 00 00 [ 520.891019][ T8] [drm:udl_init] *ERROR* Unrecognized vendor firmware descriptor [ 520.954472][T11039] Bluetooth: hci4: command tx timeout [ 521.116379][ T8] [drm] Initialized udl 0.0.1 for 8-1:0.0 on minor 2 [ 521.126119][ T8] [drm] Initialized udl on minor 2 [ 521.270808][T12027] chnl_net:caif_netlink_parms(): no params data found [ 521.619937][ T53] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 521.635088][ T53] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 521.645948][ T53] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 521.653914][ T53] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 521.662422][ T53] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 521.672888][ T53] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 521.710127][ T29] audit: type=1400 audit(1739512900.217:1324): avc: denied { write } for pid=12070 comm="syz.2.1650" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 521.745352][T12027] bridge0: port 1(bridge_slave_0) entered blocking state [ 521.752597][T12027] bridge0: port 1(bridge_slave_0) entered disabled state [ 521.752971][ T8] udl 8-1:0.0: [drm] *ERROR* Read EDID byte 2 failed err ffffffb9 [ 521.773633][T12027] bridge_slave_0: entered allmulticast mode [ 521.781181][T12027] bridge_slave_0: entered promiscuous mode [ 521.793851][ T8] udl 8-1:0.0: [drm] Cannot find any crtc or sizes [ 521.812179][ T5817] udl 8-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 521.831661][ T8] usb 8-1: USB disconnect, device number 2 [ 521.841535][ T5817] udl 8-1:0.0: [drm] Cannot find any crtc or sizes [ 521.860455][T12027] bridge0: port 2(bridge_slave_1) entered blocking state [ 521.889939][T12027] bridge0: port 2(bridge_slave_1) entered disabled state [ 521.908925][T12027] bridge_slave_1: entered allmulticast mode [ 521.919100][T12027] bridge_slave_1: entered promiscuous mode [ 521.958545][ T202] hsr_slave_0: left promiscuous mode [ 521.971781][ T202] hsr_slave_1: left promiscuous mode [ 522.013397][ T202] veth1_macvtap: left promiscuous mode [ 522.023070][ T202] veth1_vlan: left promiscuous mode [ 522.028880][ T202] veth0_vlan: left promiscuous mode [ 522.323209][T11039] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 522.336841][T11039] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 522.351334][T11039] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 522.383578][T11039] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 522.391160][T11039] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 522.399616][T11039] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 522.639285][T12084] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1655'. [ 523.037566][T11039] Bluetooth: hci4: command tx timeout [ 523.152700][ T202] team0 (unregistering): Port device team_slave_1 removed [ 523.221755][ T202] team0 (unregistering): Port device team_slave_0 removed [ 523.753404][T11039] Bluetooth: hci0: command tx timeout [ 524.072187][T12069] wlan0 speed is unknown, defaulting to 1000 [ 524.074686][T12027] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 524.089839][T12084] vlan0: entered promiscuous mode [ 524.098089][T12084] A link change request failed with some changes committed already. Interface vlan0 may have been left with an inconsistent configuration, please check. [ 524.134330][T12027] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 524.336384][T12027] team0: Port device team_slave_0 added [ 524.396980][T12027] team0: Port device team_slave_1 added [ 524.534895][T12094] netlink: 12 bytes leftover after parsing attributes in process `syz.7.1659'. [ 524.553275][T11039] Bluetooth: hci3: command tx timeout [ 524.581524][T12027] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 524.595674][T12027] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 524.640716][T12027] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 524.657972][T12076] wlan0 speed is unknown, defaulting to 1000 [ 524.672097][T12027] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 524.679606][T12027] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 524.707244][T12027] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 524.727577][ T202] IPVS: stop unused estimator thread 0... [ 524.824798][T12069] chnl_net:caif_netlink_parms(): no params data found [ 524.898340][T12099] input: syz1 as /devices/virtual/input/input39 [ 524.918717][T12027] hsr_slave_0: entered promiscuous mode [ 524.926954][T12027] hsr_slave_1: entered promiscuous mode [ 524.933346][T12027] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 524.941044][T12027] Cannot create hsr debugfs directory [ 525.044669][T12069] bridge0: port 1(bridge_slave_0) entered blocking state [ 525.051969][T12069] bridge0: port 1(bridge_slave_0) entered disabled state [ 525.063412][T12069] bridge_slave_0: entered allmulticast mode [ 525.070132][T12069] bridge_slave_0: entered promiscuous mode [ 525.098480][ T53] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 525.111957][ T53] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 525.113808][ T5828] Bluetooth: hci4: command tx timeout [ 525.125228][ T5828] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 525.134925][ T5828] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 525.152407][ T5828] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 525.161594][ T5828] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 525.197987][T12069] bridge0: port 2(bridge_slave_1) entered blocking state [ 525.205569][T12069] bridge0: port 2(bridge_slave_1) entered disabled state [ 525.212846][T12069] bridge_slave_1: entered allmulticast mode [ 525.219570][T12069] bridge_slave_1: entered promiscuous mode [ 525.275445][ T202] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 525.330564][T12069] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 525.356757][T12069] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 525.393379][ T202] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 525.532747][ T202] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 525.558683][T12069] team0: Port device team_slave_0 added [ 525.565218][T12105] wlan0 speed is unknown, defaulting to 1000 [ 525.581339][T12069] team0: Port device team_slave_1 added [ 525.632454][ T202] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 525.656596][T12076] chnl_net:caif_netlink_parms(): no params data found [ 525.707658][T12069] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 525.720714][T12069] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 525.747361][T12069] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 525.762546][T12069] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 525.769661][T12069] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 525.799925][T12069] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 525.838299][ T5828] Bluetooth: hci0: command tx timeout [ 525.979513][T12076] bridge0: port 1(bridge_slave_0) entered blocking state [ 525.986982][T12076] bridge0: port 1(bridge_slave_0) entered disabled state [ 526.001229][T12076] bridge_slave_0: entered allmulticast mode [ 526.008174][T12076] bridge_slave_0: entered promiscuous mode [ 526.038531][T12027] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 526.092434][T12076] bridge0: port 2(bridge_slave_1) entered blocking state [ 526.100639][T12076] bridge0: port 2(bridge_slave_1) entered disabled state [ 526.108848][T12076] bridge_slave_1: entered allmulticast mode [ 526.141703][T12076] bridge_slave_1: entered promiscuous mode [ 526.166882][T12027] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 526.270859][T12027] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 526.300016][T12069] hsr_slave_0: entered promiscuous mode [ 526.312150][T12069] hsr_slave_1: entered promiscuous mode [ 526.319236][T12069] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 526.327083][T12069] Cannot create hsr debugfs directory [ 526.339976][T12076] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 526.352813][T12027] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 526.377547][T12076] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 526.397481][ T202] bridge_slave_1: left allmulticast mode [ 526.403326][ T202] bridge_slave_1: left promiscuous mode [ 526.409067][ T202] bridge0: port 2(bridge_slave_1) entered disabled state [ 526.439123][ T202] bridge_slave_0: left allmulticast mode [ 526.453310][ T202] bridge_slave_0: left promiscuous mode [ 526.459136][ T202] bridge0: port 1(bridge_slave_0) entered disabled state [ 526.653350][ T5828] Bluetooth: hci3: command tx timeout [ 526.796945][T11039] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 526.834405][T11039] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 526.846139][T11039] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 526.862837][T11039] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 526.875076][T11039] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 526.882679][T11039] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 527.207188][T11039] Bluetooth: hci2: command tx timeout [ 527.208967][ T5828] Bluetooth: hci4: command tx timeout [ 527.253197][ T202] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 527.267241][ T202] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 527.282237][ T202] bond0 (unregistering): Released all slaves [ 527.352788][T12076] team0: Port device team_slave_0 added [ 527.372826][T12076] team0: Port device team_slave_1 added [ 527.498913][T12105] chnl_net:caif_netlink_parms(): no params data found [ 527.576650][T12076] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 527.588878][T12076] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 527.620061][T12076] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 527.680421][T12126] wlan0 speed is unknown, defaulting to 1000 [ 527.680800][T12076] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 527.693737][T12076] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 527.720604][T12076] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 527.912282][ T202] hsr_slave_0: left promiscuous mode [ 527.917757][T11039] Bluetooth: hci0: command tx timeout [ 527.931528][ T202] hsr_slave_1: left promiscuous mode [ 527.937472][ T202] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 527.948931][ T202] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 527.956894][ T202] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 527.970491][ T202] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 527.988654][ T202] veth1_macvtap: left promiscuous mode [ 527.994479][ T202] veth0_macvtap: left promiscuous mode [ 528.000012][ T202] veth1_vlan: left promiscuous mode [ 528.005348][ T202] veth0_vlan: left promiscuous mode [ 528.713231][T11039] Bluetooth: hci3: command tx timeout [ 528.759891][ T202] team0 (unregistering): Port device team_slave_1 removed [ 528.847897][ T202] team0 (unregistering): Port device team_slave_0 removed [ 528.953266][T11039] Bluetooth: hci1: command tx timeout [ 529.302826][T11039] Bluetooth: hci2: command tx timeout [ 529.738258][T12076] hsr_slave_0: entered promiscuous mode [ 529.744638][T12076] hsr_slave_1: entered promiscuous mode [ 529.750613][T12076] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 529.759337][T12076] Cannot create hsr debugfs directory [ 529.875339][T12027] 8021q: adding VLAN 0 to HW filter on device bond0 [ 529.882597][T12069] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 529.915133][T12105] bridge0: port 1(bridge_slave_0) entered blocking state [ 529.922370][T12105] bridge0: port 1(bridge_slave_0) entered disabled state [ 529.931215][T12105] bridge_slave_0: entered allmulticast mode [ 529.938670][T12105] bridge_slave_0: entered promiscuous mode [ 529.946647][T12105] bridge0: port 2(bridge_slave_1) entered blocking state [ 529.954991][T12105] bridge0: port 2(bridge_slave_1) entered disabled state [ 529.962317][T12105] bridge_slave_1: entered allmulticast mode [ 529.969136][T12105] bridge_slave_1: entered promiscuous mode [ 529.980189][T12069] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 530.006807][T11039] Bluetooth: hci0: command tx timeout [ 530.009232][T12069] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 530.078169][T12069] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 530.132360][T12105] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 530.164269][T12105] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 530.190457][T12027] 8021q: adding VLAN 0 to HW filter on device team0 [ 530.276379][T12105] team0: Port device team_slave_0 added [ 530.287439][T12105] team0: Port device team_slave_1 added [ 530.302013][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 530.309252][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 530.372767][T12076] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 530.409582][T12105] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 530.417261][T12105] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 530.444262][T12105] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 530.461554][T12105] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 530.468586][T12105] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 530.496069][T12105] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 530.539200][T12076] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 530.581305][ T7283] bridge0: port 2(bridge_slave_1) entered blocking state [ 530.588443][ T7283] bridge0: port 2(bridge_slave_1) entered forwarding state [ 530.618980][T12105] hsr_slave_0: entered promiscuous mode [ 530.626021][T12105] hsr_slave_1: entered promiscuous mode [ 530.632024][T12105] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 530.641117][T12105] Cannot create hsr debugfs directory [ 530.703538][T12076] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 530.737542][T12126] chnl_net:caif_netlink_parms(): no params data found [ 530.781889][T12076] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 530.793427][T11039] Bluetooth: hci3: command tx timeout [ 530.908701][ T202] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 530.974225][T12069] 8021q: adding VLAN 0 to HW filter on device bond0 [ 531.040802][T12069] 8021q: adding VLAN 0 to HW filter on device team0 [ 531.053289][T11039] Bluetooth: hci1: command tx timeout [ 531.101645][ T202] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 531.141568][T12126] bridge0: port 1(bridge_slave_0) entered blocking state [ 531.149477][T12126] bridge0: port 1(bridge_slave_0) entered disabled state [ 531.160224][T12126] bridge_slave_0: entered allmulticast mode [ 531.167063][T12126] bridge_slave_0: entered promiscuous mode [ 531.230206][ T202] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 531.248107][ T7283] bridge0: port 1(bridge_slave_0) entered blocking state [ 531.255224][ T7283] bridge0: port 1(bridge_slave_0) entered forwarding state [ 531.263733][ T7283] bridge0: port 2(bridge_slave_1) entered blocking state [ 531.270804][ T7283] bridge0: port 2(bridge_slave_1) entered forwarding state [ 531.281296][T12126] bridge0: port 2(bridge_slave_1) entered blocking state [ 531.289630][T12126] bridge0: port 2(bridge_slave_1) entered disabled state [ 531.297115][T12126] bridge_slave_1: entered allmulticast mode [ 531.305200][T12126] bridge_slave_1: entered promiscuous mode [ 531.368011][T11039] Bluetooth: hci2: command tx timeout [ 531.373315][ T202] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 531.432943][T12126] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 531.529176][T12105] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 531.550968][T12126] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 531.566666][T12076] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 531.625939][T12105] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 531.646711][T12076] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 531.664365][T12076] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 531.702008][T12126] team0: Port device team_slave_0 added [ 531.718981][T12126] team0: Port device team_slave_1 added [ 531.748242][T12076] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 531.791094][T12105] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 531.860916][T12126] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 531.869620][T12126] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 531.895973][T12126] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 531.957173][T12105] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 531.971997][T12126] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 531.982998][T12126] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 532.012066][T12126] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 532.065653][ T202] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 532.165633][ T202] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 532.227457][T12027] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 532.286344][T12126] hsr_slave_0: entered promiscuous mode [ 532.292858][T12126] hsr_slave_1: entered promiscuous mode [ 532.300423][T12126] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 532.317459][T12126] Cannot create hsr debugfs directory [ 532.344862][ T202] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 532.502153][ T202] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 532.549665][T12069] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 532.630157][T12105] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 532.647622][T12105] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 532.668671][T12105] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 532.693126][T12105] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 532.772798][T12076] 8021q: adding VLAN 0 to HW filter on device bond0 [ 532.868113][T12027] veth0_vlan: entered promiscuous mode [ 532.920269][ T202] bridge_slave_1: left allmulticast mode [ 532.930399][ T202] bridge_slave_1: left promiscuous mode [ 532.936696][ T202] bridge0: port 2(bridge_slave_1) entered disabled state [ 532.948616][ T202] bridge_slave_0: left allmulticast mode [ 532.954743][ T202] bridge_slave_0: left promiscuous mode [ 532.960538][ T202] bridge0: port 1(bridge_slave_0) entered disabled state [ 532.970209][ T202] bridge_slave_1: left allmulticast mode [ 532.976683][ T202] bridge_slave_1: left promiscuous mode [ 532.982423][ T202] bridge0: port 2(bridge_slave_1) entered disabled state [ 532.993961][ T202] bridge_slave_0: left allmulticast mode [ 532.999673][ T202] bridge_slave_0: left promiscuous mode [ 533.007100][ T202] bridge0: port 1(bridge_slave_0) entered disabled state [ 533.123715][T11039] Bluetooth: hci1: command tx timeout [ 533.433715][T11039] Bluetooth: hci2: command tx timeout [ 534.026571][ T202] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 534.037844][ T202] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 534.048410][ T202] bond0 (unregistering): Released all slaves [ 534.291528][ T202] bond1 (unregistering): Released all slaves [ 534.306186][ T202] bond2 (unregistering): Released all slaves [ 534.557133][ T202] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 534.567810][ T202] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 534.577907][ T202] bond0 (unregistering): Released all slaves [ 534.597511][T12076] 8021q: adding VLAN 0 to HW filter on device team0 [ 534.695076][T12027] veth1_vlan: entered promiscuous mode [ 534.879567][ T35] bridge0: port 1(bridge_slave_0) entered blocking state [ 534.886874][ T35] bridge0: port 1(bridge_slave_0) entered forwarding state [ 534.920270][ T35] bridge0: port 2(bridge_slave_1) entered blocking state [ 534.927416][ T35] bridge0: port 2(bridge_slave_1) entered forwarding state [ 534.958577][T12105] 8021q: adding VLAN 0 to HW filter on device bond0 [ 535.061323][T12027] veth0_macvtap: entered promiscuous mode [ 535.095772][T12069] veth0_vlan: entered promiscuous mode [ 535.112563][T12027] veth1_macvtap: entered promiscuous mode [ 535.149778][T12105] 8021q: adding VLAN 0 to HW filter on device team0 [ 535.193323][T11039] Bluetooth: hci1: command tx timeout [ 535.311992][T12069] veth1_vlan: entered promiscuous mode [ 535.321563][T12027] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 535.332357][T12027] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 535.342427][T12027] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 535.352909][T12027] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 535.364044][T12027] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 535.374569][T12027] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 535.384585][T12027] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 535.395049][T12027] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 535.407976][T12027] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 535.421704][ T35] bridge0: port 1(bridge_slave_0) entered blocking state [ 535.429044][ T35] bridge0: port 1(bridge_slave_0) entered forwarding state [ 535.446825][ T35] bridge0: port 2(bridge_slave_1) entered blocking state [ 535.454041][ T35] bridge0: port 2(bridge_slave_1) entered forwarding state [ 535.475305][T12126] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 535.490664][T12126] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 535.551169][T12126] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 535.578083][T12027] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 535.607873][T12027] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 535.622777][T12027] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 535.633551][T12027] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 535.643446][T12027] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 535.653885][T12027] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 535.666903][T12027] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 535.683571][T12126] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 535.732161][ T202] hsr_slave_0: left promiscuous mode [ 535.748783][ T202] hsr_slave_1: left promiscuous mode [ 535.770575][ T202] hsr_slave_0: left promiscuous mode [ 535.776766][ T202] hsr_slave_1: left promiscuous mode [ 535.782454][ T202] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 535.790181][ T202] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 535.798491][ T202] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 535.806398][ T202] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 535.829831][ T202] veth1_macvtap: left promiscuous mode [ 535.835494][ T202] veth0_macvtap: left promiscuous mode [ 535.841326][ T202] veth1_vlan: left promiscuous mode [ 535.846748][ T202] veth0_vlan: left promiscuous mode [ 535.858354][ T202] veth1_macvtap: left promiscuous mode [ 535.864007][ T202] veth0_macvtap: left promiscuous mode [ 535.869534][ T202] veth1_vlan: left promiscuous mode [ 535.874782][ T202] veth0_vlan: left promiscuous mode [ 537.950955][ T202] team0 (unregistering): Port device team_slave_1 removed [ 538.034512][ T202] team0 (unregistering): Port device team_slave_0 removed [ 538.857358][T12027] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 538.881712][T12027] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 538.892123][T12027] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 538.913120][T12027] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 539.008329][T12076] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 539.131710][T12069] veth0_macvtap: entered promiscuous mode [ 539.239377][T12069] veth1_macvtap: entered promiscuous mode [ 539.280944][T12069] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 539.293506][T12069] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 539.304103][T12069] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 539.314778][T12069] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 539.325059][T12069] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 539.335583][T12069] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 539.345661][T12069] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 539.356221][T12069] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 539.377862][T12069] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 539.470497][T12126] 8021q: adding VLAN 0 to HW filter on device bond0 [ 539.532317][T12069] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 539.545476][T12069] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 539.556102][T12069] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 539.566843][T12069] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 539.577333][T12069] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 539.588369][T12069] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 539.622765][T12069] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 539.649860][T12069] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 539.659226][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 539.669468][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 539.679418][T12069] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 539.691939][T12069] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 539.702054][T12069] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 539.717881][T12076] veth0_vlan: entered promiscuous mode [ 539.754647][T12076] veth1_vlan: entered promiscuous mode [ 539.809352][T12105] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 539.847821][T12126] 8021q: adding VLAN 0 to HW filter on device team0 [ 539.890362][ T1155] bridge0: port 1(bridge_slave_0) entered blocking state [ 539.897630][ T1155] bridge0: port 1(bridge_slave_0) entered forwarding state [ 539.906076][ T7287] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 539.923628][ T7283] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 539.931579][ T7287] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 539.943119][ T7283] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 539.972164][ T202] IPVS: stop unused estimator thread 0... [ 539.990168][T12076] veth0_macvtap: entered promiscuous mode [ 540.009645][ T1155] bridge0: port 2(bridge_slave_1) entered blocking state [ 540.016880][ T1155] bridge0: port 2(bridge_slave_1) entered forwarding state [ 540.068913][T12076] veth1_macvtap: entered promiscuous mode [ 540.088889][ T1155] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 540.118662][ T1155] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 540.138105][T12076] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 540.168753][T12076] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 540.189722][T12076] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 540.201254][T12076] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 540.217799][T12076] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 540.229228][T12076] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 540.242656][T12076] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 540.253653][T12076] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 540.263693][T12076] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 540.274266][T12076] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 540.285492][T12076] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 540.311768][T12076] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 540.342062][T12076] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 540.362905][T12076] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 540.378885][T12076] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 540.405729][T12076] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 540.417713][T12076] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 540.427690][T12076] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 540.438278][ T9901] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 540.446026][T12076] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 540.461723][T12076] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 540.644030][ T9901] usb 9-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 540.655190][ T9901] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 540.673380][ T9901] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 540.683411][ T9901] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 540.697907][ T9901] usb 9-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 540.707466][ T9901] usb 9-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 540.716520][ T9901] usb 9-1: Manufacturer: syz [ 540.726665][ T9901] usb 9-1: config 0 descriptor?? [ 541.158848][ T9901] appleir 0003:05AC:8243.0023: unknown main item tag 0x0 [ 541.167227][ T9901] appleir 0003:05AC:8243.0023: No inputs registered, leaving [ 541.172689][ T202] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 541.176354][ T9901] appleir 0003:05AC:8243.0023: hiddev0,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.8-1/input0 [ 541.198759][ T202] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 541.209840][ T202] bond0 (unregistering): Released all slaves [ 541.234441][T12076] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 541.251555][T12076] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 541.273350][T12076] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 541.282108][T12076] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 541.358358][T12105] veth0_vlan: entered promiscuous mode [ 541.515708][T12126] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 541.552887][ T9901] usb 9-1: USB disconnect, device number 2 [ 541.643627][T12105] veth1_vlan: entered promiscuous mode [ 541.679275][T12105] veth0_macvtap: entered promiscuous mode [ 541.700926][T12105] veth1_macvtap: entered promiscuous mode [ 541.731039][T12105] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 541.758824][T12105] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 541.771298][T12105] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 541.782097][T12105] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 541.792092][T12105] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 541.802842][T12105] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 541.817742][T12105] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 541.832972][T12105] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 541.846367][T12105] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 541.858219][T12105] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 541.868168][T12105] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 541.881941][T12105] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 541.892866][T12105] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 541.905894][T12105] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 541.926147][T12105] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 541.937156][T12105] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 541.947685][T12105] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 541.958675][T12105] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 541.969828][T12105] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 541.979808][T12105] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 541.990416][T12105] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 542.000547][T12105] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 542.011132][T12105] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 542.022999][T12105] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 542.075539][T12105] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 542.085903][T12105] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 542.095852][T12105] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 542.114380][T12105] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 542.157205][ T7301] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 542.172660][ T7301] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 542.382152][ T202] hsr_slave_0: left promiscuous mode [ 542.399132][ T202] hsr_slave_1: left promiscuous mode [ 542.406932][T11039] Bluetooth: hci4: unexpected event 0x03 length: 17 > 11 [ 542.415506][ T202] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 542.432970][ T202] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 542.500600][ T202] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 542.587142][ T202] veth1_macvtap: left promiscuous mode [ 542.592868][ T202] veth0_macvtap: left promiscuous mode [ 542.601410][ T202] veth1_vlan: left promiscuous mode [ 542.608554][ T202] veth0_vlan: left promiscuous mode [ 543.234251][ T202] team0 (unregistering): Port device @ removed [ 543.629743][T12202] overlayfs: failed to resolve './file0': -2 [ 544.147585][ T202] team0 (unregistering): Port device team_slave_1 removed [ 544.226920][ T202] team0 (unregistering): Port device team_slave_0 removed [ 544.483474][T11039] Bluetooth: hci4: command tx timeout [ 545.106569][ T51] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 545.120295][ T51] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 545.194265][ T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 545.202164][ T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 545.245308][T12126] veth0_vlan: entered promiscuous mode [ 545.310342][ T7318] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 545.310671][T12126] veth1_vlan: entered promiscuous mode [ 545.323064][ T7318] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 545.486142][T12213] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 545.715477][T12126] veth0_macvtap: entered promiscuous mode [ 545.741070][T12126] veth1_macvtap: entered promiscuous mode [ 545.855855][T12126] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 545.903747][T12126] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 545.926074][T12126] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 545.967430][T12126] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 546.014027][T12126] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 546.057459][T12126] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 546.096672][T12126] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 546.133326][T12126] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 546.194868][T12126] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 546.217869][T12126] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 546.263142][T12126] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 546.305331][T12126] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 546.336360][T12126] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 546.457330][T12126] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 546.500520][T12126] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 546.500617][T12126] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 546.500663][T12126] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 546.500915][T12126] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 546.500955][T12126] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 546.501119][T12126] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 546.501158][T12126] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 546.501290][T12126] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 546.501329][T12126] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 546.501487][T12126] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 546.501525][T12126] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 546.534677][T12126] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 546.537667][ T5828] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 546.554618][ T5828] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 546.560525][ T53] Bluetooth: hci4: command tx timeout [ 546.633573][ T5828] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 546.699198][ T5828] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 546.709582][ T5828] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 546.716998][ T5828] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 546.774677][T12126] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 546.813431][T12126] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 546.833609][T12126] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 546.851920][T12126] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 547.402300][ T202] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 547.502130][T12219] wlan0 speed is unknown, defaulting to 1000 [ 547.576474][ T53] Bluetooth: hci2: unexpected event 0x03 length: 17 > 11 [ 547.956788][ T202] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 548.039332][ T29] audit: type=1400 audit(1739512926.547:1325): avc: denied { bind } for pid=12231 comm="syz.3.1682" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 548.069523][ T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 548.110699][ T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 548.175051][ T202] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 548.236358][T12232] wlan0 speed is unknown, defaulting to 1000 [ 548.302948][ T202] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 548.369199][ T7318] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 548.381054][ T7318] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 548.514832][T12219] chnl_net:caif_netlink_parms(): no params data found [ 548.800160][ T53] Bluetooth: hci0: command tx timeout [ 549.144511][T12219] bridge0: port 1(bridge_slave_0) entered blocking state [ 549.148020][T12248] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1668'. [ 549.258964][T12219] bridge0: port 1(bridge_slave_0) entered disabled state [ 549.266467][T12219] bridge_slave_0: entered allmulticast mode [ 549.272970][T12219] bridge_slave_0: entered promiscuous mode [ 549.888136][ T53] Bluetooth: hci2: command tx timeout [ 549.895901][T12219] bridge0: port 2(bridge_slave_1) entered blocking state [ 549.919619][T12248] netlink: 44 bytes leftover after parsing attributes in process `syz.5.1668'. [ 549.930096][T12219] bridge0: port 2(bridge_slave_1) entered disabled state [ 549.930425][T12219] bridge_slave_1: entered allmulticast mode [ 549.943579][T12219] bridge_slave_1: entered promiscuous mode [ 550.022959][ T202] bridge_slave_1: left allmulticast mode [ 550.035312][ T202] bridge_slave_1: left promiscuous mode [ 550.041116][ T202] bridge0: port 2(bridge_slave_1) entered disabled state [ 550.049796][T12162] usb 5-1: new full-speed USB device number 44 using dummy_hcd [ 550.121284][ T202] bridge_slave_0: left allmulticast mode [ 550.127163][ T202] bridge_slave_0: left promiscuous mode [ 550.128001][T12259] netlink: 260 bytes leftover after parsing attributes in process `syz.3.1686'. [ 550.134087][ T202] bridge0: port 1(bridge_slave_0) entered disabled state [ 550.242560][T12162] usb 5-1: device descriptor read/64, error -71 [ 550.359018][ T9901] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 550.493380][T12162] usb 5-1: new full-speed USB device number 45 using dummy_hcd [ 550.522813][ T9901] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 550.541705][ T9901] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 550.552444][ T9901] usb 6-1: New USB device found, idVendor=0f30, idProduct=0111, bcdDevice= 0.00 [ 550.586926][ T9901] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 550.595081][ T5866] usb 4-1: new high-speed USB device number 59 using dummy_hcd [ 550.625958][ T9901] usb 6-1: config 0 descriptor?? [ 550.643333][T12162] usb 5-1: device descriptor read/64, error -71 [ 550.754136][T12162] usb usb5-port1: attempt power cycle [ 550.763271][ T5866] usb 4-1: Using ep0 maxpacket: 32 [ 550.789606][ T5866] usb 4-1: New USB device found, idVendor=0458, idProduct=706e, bcdDevice=35.64 [ 550.807061][ T5866] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 550.820689][ T5866] usb 4-1: config 0 descriptor?? [ 550.891221][ T53] Bluetooth: hci0: command tx timeout [ 551.051780][ T29] audit: type=1400 audit(1739512929.557:1326): avc: denied { getopt } for pid=12256 comm="syz.5.1687" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 551.052032][ T9901] pantherlord 0003:0F30:0111.0024: hidraw0: USB HID v0.03 Device [HID 0f30:0111] on usb-dummy_hcd.5-1/input0 [ 551.087719][ T9901] pantherlord 0003:0F30:0111.0024: no output reports found [ 551.107938][ T9901] usb 4-1: USB disconnect, device number 59 [ 551.142310][ T202] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 551.153179][T12162] usb 5-1: new full-speed USB device number 46 using dummy_hcd [ 551.161666][ T202] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 551.172741][ T202] bond0 (unregistering): Released all slaves [ 551.179787][T12162] usb 5-1: device descriptor read/8, error -71 [ 551.204796][T12255] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 551.232826][T12219] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 551.262369][T12219] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 551.284313][ T5866] usb 6-1: USB disconnect, device number 2 [ 551.411829][T12219] team0: Port device team_slave_0 added [ 551.424084][ T29] audit: type=1400 audit(1739512929.937:1327): avc: denied { create } for pid=12269 comm="syz.8.1691" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=atmsvc_socket permissive=1 [ 551.434616][T12270] ucma_write: process 25 (syz.8.1691) changed security contexts after opening file descriptor, this is not allowed. [ 551.450131][T12162] usb 5-1: new full-speed USB device number 47 using dummy_hcd [ 551.458550][T12219] team0: Port device team_slave_1 added [ 551.514439][T12162] usb 5-1: device descriptor read/8, error -71 [ 551.539735][T12270] xt_CT: No such helper "netbios-ns" [ 551.582589][T12219] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 551.607734][T12219] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 551.624184][T12162] usb usb5-port1: unable to enumerate USB device [ 551.829588][T12219] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 551.842722][T12219] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 551.849996][T12219] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 551.876363][T12219] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 551.918575][ T53] Bluetooth: hci2: command tx timeout [ 552.027822][ T29] audit: type=1400 audit(1739512930.467:1328): avc: denied { bind } for pid=12273 comm="syz.8.1692" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 552.366089][T12286] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1696'. [ 552.392077][T12286] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1696'. [ 552.467595][ T202] hsr_slave_0: left promiscuous mode [ 552.471530][T12292] 9pnet_fd: Insufficient options for proto=fd [ 552.481883][ T202] hsr_slave_1: left promiscuous mode [ 552.489047][ T202] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 552.497429][ T202] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 552.507731][ T202] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 552.585021][ T202] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 552.622527][ T202] veth1_macvtap: left promiscuous mode [ 552.646377][ T202] veth0_macvtap: left promiscuous mode [ 552.652037][ T202] veth1_vlan: left promiscuous mode [ 552.659898][ T202] veth0_vlan: left promiscuous mode [ 552.963190][ T53] Bluetooth: hci0: command tx timeout [ 553.055754][ T29] audit: type=1400 audit(1739512931.567:1329): avc: denied { watch } for pid=12310 comm="syz.8.1703" path=2F6D656D66643A2D42D59A707070F00884A26D202864656C6574656429 dev="tmpfs" ino=1321 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 554.367538][ T202] team0 (unregistering): Port device team_slave_1 removed [ 554.493245][ T202] team0 (unregistering): Port device team_slave_0 removed [ 555.058969][ T53] Bluetooth: hci0: command tx timeout [ 555.651302][T12219] hsr_slave_0: entered promiscuous mode [ 555.658170][T12219] hsr_slave_1: entered promiscuous mode [ 555.672090][T12219] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 555.681737][T12219] Cannot create hsr debugfs directory [ 555.698415][T12294] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 555.699844][T12299] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 555.723976][T12317] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1705'. [ 556.103832][ T29] audit: type=1400 audit(1739512934.597:1330): avc: denied { ioctl } for pid=12341 comm="syz.3.1713" path="/dev/ptyqa" dev="devtmpfs" ino=129 ioctlcmd=0x5459 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bsdpty_device_t tclass=chr_file permissive=1 [ 556.469986][T12356] FAULT_INJECTION: forcing a failure. [ 556.469986][T12356] name failslab, interval 1, probability 0, space 0, times 0 [ 556.495070][T12356] CPU: 0 UID: 0 PID: 12356 Comm: syz.5.1716 Not tainted 6.14.0-rc2-syzkaller-00056-gab68d7eb7b1a #0 [ 556.495107][T12356] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 556.495116][T12356] Call Trace: [ 556.495123][T12356] [ 556.495131][T12356] dump_stack_lvl+0x16c/0x1f0 [ 556.495165][T12356] should_fail_ex+0x50a/0x650 [ 556.495188][T12356] ? fs_reclaim_acquire+0xae/0x150 [ 556.495213][T12356] should_failslab+0xc2/0x120 [ 556.495233][T12356] kmem_cache_alloc_node_noprof+0x72/0x3c0 [ 556.495252][T12356] ? __alloc_skb+0x2b1/0x380 [ 556.495275][T12356] __alloc_skb+0x2b1/0x380 [ 556.495290][T12356] ? __pfx___alloc_skb+0x10/0x10 [ 556.495309][T12356] ? __pfx_netlink_autobind.isra.0+0x10/0x10 [ 556.495332][T12356] netlink_alloc_large_skb+0x69/0x130 [ 556.495351][T12356] netlink_sendmsg+0x689/0xd70 [ 556.495372][T12356] ? __pfx_netlink_sendmsg+0x10/0x10 [ 556.495395][T12356] ____sys_sendmsg+0xaaf/0xc90 [ 556.495417][T12356] ? copy_msghdr_from_user+0x10b/0x160 [ 556.495437][T12356] ? __pfx_____sys_sendmsg+0x10/0x10 [ 556.495468][T12356] ___sys_sendmsg+0x135/0x1e0 [ 556.495487][T12356] ? __pfx____sys_sendmsg+0x10/0x10 [ 556.495513][T12356] ? __pfx_lock_release+0x10/0x10 [ 556.495534][T12356] ? trace_lock_acquire+0x14e/0x1f0 [ 556.495557][T12356] ? __fget_files+0x206/0x3a0 [ 556.495577][T12356] __sys_sendmsg+0x16e/0x220 [ 556.495595][T12356] ? __pfx___sys_sendmsg+0x10/0x10 [ 556.495627][T12356] do_syscall_64+0xcd/0x250 [ 556.495648][T12356] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 556.495673][T12356] RIP: 0033:0x7fd62ef8cde9 [ 556.495687][T12356] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 556.495702][T12356] RSP: 002b:00007fd62fd8d038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 556.495718][T12356] RAX: ffffffffffffffda RBX: 00007fd62f1a5fa0 RCX: 00007fd62ef8cde9 [ 556.495728][T12356] RDX: 0000000004000000 RSI: 0000400000000780 RDI: 0000000000000004 [ 556.495737][T12356] RBP: 00007fd62fd8d090 R08: 0000000000000000 R09: 0000000000000000 [ 556.495746][T12356] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 556.495754][T12356] R13: 0000000000000000 R14: 00007fd62f1a5fa0 R15: 00007fffb1702fd8 [ 556.495773][T12356] [ 556.500801][T12356] netlink: 36 bytes leftover after parsing attributes in process `syz.5.1716'. [ 556.748899][T12356] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1716'. [ 557.151855][ T29] audit: type=1400 audit(1739512935.657:1331): avc: denied { ioctl } for pid=12364 comm="syz.5.1719" path="socket:[39283]" dev="sockfs" ino=39283 ioctlcmd=0x9439 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 557.711925][T12369] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1723'. [ 557.722095][T12369] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1723'. [ 557.985532][ T5828] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 557.998711][ T5828] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 558.022681][ T5828] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 558.024454][T12219] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 558.053347][ T5828] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 558.077451][ T5828] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 558.086168][ T5828] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 558.106708][T12219] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 558.395344][T12383] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=16384 sclass=netlink_route_socket pid=12383 comm=syz.4.1727 [ 558.410132][T12383] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2560 sclass=netlink_route_socket pid=12383 comm=syz.4.1727 [ 558.424324][T12383] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2569 sclass=netlink_route_socket pid=12383 comm=syz.4.1727 [ 558.438427][T12383] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2572 sclass=netlink_route_socket pid=12383 comm=syz.4.1727 [ 558.508572][T12219] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 558.744176][T12219] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 558.917582][T12373] wlan0 speed is unknown, defaulting to 1000 [ 558.939969][T12219] 8021q: adding VLAN 0 to HW filter on device bond0 [ 558.991677][T12219] 8021q: adding VLAN 0 to HW filter on device team0 [ 559.061668][ T29] audit: type=1400 audit(1739512937.567:1332): avc: denied { ioctl } for pid=12389 comm="syz.5.1731" path="socket:[39556]" dev="sockfs" ino=39556 ioctlcmd=0x89f1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 559.107049][T11039] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 559.122643][T11039] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 559.140030][T11039] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 559.148286][T11039] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 559.157199][T11039] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 559.179064][T11039] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 559.215913][T12395] netlink: 'syz.5.1731': attribute type 39 has an invalid length. [ 559.228814][ T970] IPVS: starting estimator thread 0... [ 559.240858][ T7287] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 559.335494][T12396] IPVS: using max 55 ests per chain, 132000 per kthread [ 559.359527][ T29] audit: type=1400 audit(1739512937.867:1333): avc: denied { shutdown } for pid=12389 comm="syz.5.1731" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 559.458697][ T7301] bridge0: port 1(bridge_slave_0) entered blocking state [ 559.465892][ T7301] bridge0: port 1(bridge_slave_0) entered forwarding state [ 559.488734][ T7301] bridge0: port 2(bridge_slave_1) entered blocking state [ 559.495907][ T7301] bridge0: port 2(bridge_slave_1) entered forwarding state [ 559.569167][ T7287] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 559.714880][ T7287] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 559.895255][ T7287] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 559.946268][T12392] wlan0 speed is unknown, defaulting to 1000 [ 559.991625][ T53] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 560.010646][ T53] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 560.029909][ T53] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 560.051032][ T53] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 560.073728][ T53] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 560.082366][ T53] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 560.194184][T12373] chnl_net:caif_netlink_parms(): no params data found [ 560.313983][ T53] Bluetooth: hci3: command tx timeout [ 560.931328][T12373] bridge0: port 1(bridge_slave_0) entered blocking state [ 560.939623][T12373] bridge0: port 1(bridge_slave_0) entered disabled state [ 560.947110][T12373] bridge_slave_0: entered allmulticast mode [ 560.954480][T12373] bridge_slave_0: entered promiscuous mode [ 560.977318][ T7287] bridge_slave_1: left allmulticast mode [ 560.993139][ T7287] bridge_slave_1: left promiscuous mode [ 561.002056][ T7287] bridge0: port 2(bridge_slave_1) entered disabled state [ 561.019607][ T7287] bridge_slave_0: left allmulticast mode [ 561.041182][ T7287] bridge_slave_0: left promiscuous mode [ 561.047319][ T7287] bridge0: port 1(bridge_slave_0) entered disabled state [ 561.050825][ T29] audit: type=1400 audit(1739512939.557:1334): avc: denied { setopt } for pid=12418 comm="syz.5.1737" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 561.281055][ T53] Bluetooth: hci4: command tx timeout [ 561.383206][ T5917] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 561.543267][ T5917] usb 6-1: Using ep0 maxpacket: 8 [ 561.552398][ T5917] usb 6-1: New USB device found, idVendor=0c45, idProduct=613e, bcdDevice=c4.6d [ 561.561946][ T5917] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 561.570144][ T5917] usb 6-1: Product: syz [ 561.574679][ T5917] usb 6-1: Manufacturer: syz [ 561.579336][ T5917] usb 6-1: SerialNumber: syz [ 561.586841][ T5917] usb 6-1: config 0 descriptor?? [ 561.606161][ T5917] gspca_main: sonixj-2.14.0 probing 0c45:613e [ 561.706381][ T7287] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 561.720022][ T7287] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 561.730307][ T7287] bond0 (unregistering): Released all slaves [ 561.740888][T12373] bridge0: port 2(bridge_slave_1) entered blocking state [ 561.748084][T12373] bridge0: port 2(bridge_slave_1) entered disabled state [ 561.777095][T12373] bridge_slave_1: entered allmulticast mode [ 561.784859][T12373] bridge_slave_1: entered promiscuous mode [ 561.883966][T12373] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 561.971732][T12373] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 561.997523][T12402] wlan0 speed is unknown, defaulting to 1000 [ 562.014017][T12392] chnl_net:caif_netlink_parms(): no params data found [ 562.060580][T12373] team0: Port device team_slave_0 added [ 562.074015][T12373] team0: Port device team_slave_1 added [ 562.163167][ T53] Bluetooth: hci2: command tx timeout [ 562.175851][T12373] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 562.182939][T12373] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 562.210173][T12373] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 562.248412][T12219] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 562.272561][T12373] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 562.280220][T12373] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 562.317320][T12373] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 562.371669][ T7287] hsr_slave_0: left promiscuous mode [ 562.378283][ T7287] hsr_slave_1: left promiscuous mode [ 562.390227][ T7287] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 562.397806][ T53] Bluetooth: hci3: command 0x041b tx timeout [ 562.412147][ T7287] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 562.429356][ T7287] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 562.438255][ T7287] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 562.460668][ T7287] veth1_macvtap: left promiscuous mode [ 562.466909][ T7287] veth0_macvtap: left promiscuous mode [ 562.472517][ T7287] veth1_vlan: left promiscuous mode [ 562.477921][ T7287] veth0_vlan: left promiscuous mode [ 562.675257][ T5917] gspca_sonixj: reg_w1 err -71 [ 562.713788][ T5917] sonixj 6-1:0.0: probe with driver sonixj failed with error -71 [ 562.725119][ T5917] usb 6-1: USB disconnect, device number 3 [ 563.259397][ T7287] team0 (unregistering): Port device team_slave_1 removed [ 563.348938][ T7287] team0 (unregistering): Port device team_slave_0 removed [ 563.356997][ T5828] Bluetooth: hci4: command tx timeout [ 564.082725][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 564.233236][ T5828] Bluetooth: hci2: command tx timeout [ 564.306159][T12392] bridge0: port 1(bridge_slave_0) entered blocking state [ 564.313461][T12392] bridge0: port 1(bridge_slave_0) entered disabled state [ 564.320708][T12392] bridge_slave_0: entered allmulticast mode [ 564.327822][T12392] bridge_slave_0: entered promiscuous mode [ 564.375102][T12373] hsr_slave_0: entered promiscuous mode [ 564.384437][T12373] hsr_slave_1: entered promiscuous mode [ 564.390920][T12373] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 564.400445][T12373] Cannot create hsr debugfs directory [ 564.409947][T12392] bridge0: port 2(bridge_slave_1) entered blocking state [ 564.417195][T12392] bridge0: port 2(bridge_slave_1) entered disabled state [ 564.424684][T12392] bridge_slave_1: entered allmulticast mode [ 564.431315][T12392] bridge_slave_1: entered promiscuous mode [ 564.473496][ T5828] Bluetooth: hci3: command 0x041b tx timeout [ 564.545092][T12392] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 564.572704][T12392] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 564.769369][T12392] team0: Port device team_slave_0 added [ 564.786263][T12392] team0: Port device team_slave_1 added [ 564.821281][T12219] veth0_vlan: entered promiscuous mode [ 564.866946][T12402] chnl_net:caif_netlink_parms(): no params data found [ 564.889534][T12219] veth1_vlan: entered promiscuous mode [ 564.922938][T12392] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 564.931179][T12392] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 564.957593][T12392] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 564.982740][T12392] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 564.991222][T12392] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 565.001636][ T53] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 565.025954][T12392] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 565.031592][ T53] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 565.054168][ T53] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 565.068912][ T53] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 565.081261][ T53] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 565.088856][ T53] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 565.154002][T12219] veth0_macvtap: entered promiscuous mode [ 565.227579][T12373] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 565.252099][T12219] veth1_macvtap: entered promiscuous mode [ 565.265830][T12392] hsr_slave_0: entered promiscuous mode [ 565.272191][T12392] hsr_slave_1: entered promiscuous mode [ 565.289188][T12392] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 565.302199][T12392] Cannot create hsr debugfs directory [ 565.348918][ T7287] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 565.386708][T12402] bridge0: port 1(bridge_slave_0) entered blocking state [ 565.394505][T12402] bridge0: port 1(bridge_slave_0) entered disabled state [ 565.401807][T12402] bridge_slave_0: entered allmulticast mode [ 565.409761][T12402] bridge_slave_0: entered promiscuous mode [ 565.419682][T12402] bridge0: port 2(bridge_slave_1) entered blocking state [ 565.426974][T12402] bridge0: port 2(bridge_slave_1) entered disabled state [ 565.434450][T12402] bridge_slave_1: entered allmulticast mode [ 565.442266][T12402] bridge_slave_1: entered promiscuous mode [ 565.448222][ T5828] Bluetooth: hci4: command tx timeout [ 565.477871][T12373] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 565.572836][ T7287] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 565.645642][T12373] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 565.659392][T12433] wlan0 speed is unknown, defaulting to 1000 [ 565.669345][T12402] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 565.680277][T12219] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 565.691417][T12219] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 565.701834][T12219] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 565.715228][T12219] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 565.725452][T12219] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 565.735960][T12219] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 565.746065][T12219] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 565.757532][T12219] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 565.767590][T12219] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 565.778035][T12219] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 565.789213][T12219] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 565.822642][ T7287] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 565.839448][T12402] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 565.911204][T12373] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 565.937599][T12219] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 565.949021][T12219] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 565.959131][T12219] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 565.970277][T12219] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 565.980547][T12219] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 565.991063][T12219] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 566.001222][T12219] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 566.011721][T12219] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 566.022352][T12219] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 566.032835][T12219] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 566.044106][T12219] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 566.110363][ T7287] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 566.176213][T12402] team0: Port device team_slave_0 added [ 566.184536][T12219] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 566.194145][T12219] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 566.202829][T12219] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 566.211725][T12219] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 566.244750][T12402] team0: Port device team_slave_1 added [ 566.291859][T12402] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 566.299898][T12402] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 566.327080][T12402] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 566.339810][T12402] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 566.343215][ T5828] Bluetooth: hci2: command tx timeout [ 566.346974][T12402] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 566.381727][T12402] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 566.455909][T12402] hsr_slave_0: entered promiscuous mode [ 566.462069][T12402] hsr_slave_1: entered promiscuous mode [ 566.474273][T12402] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 566.481859][T12402] Cannot create hsr debugfs directory [ 566.553284][ T5828] Bluetooth: hci3: command 0x041b tx timeout [ 566.657739][T12373] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 566.682682][T12373] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 566.730481][ T7287] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 566.786933][T12373] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 566.826693][ T7287] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 566.859034][T12433] chnl_net:caif_netlink_parms(): no params data found [ 566.872450][T12373] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 566.955875][ T7287] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 566.999468][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 567.013156][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 567.061056][ T7287] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 567.142399][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 567.158280][T12433] bridge0: port 1(bridge_slave_0) entered blocking state [ 567.170355][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 567.176231][T12433] bridge0: port 1(bridge_slave_0) entered disabled state [ 567.186282][T12433] bridge_slave_0: entered allmulticast mode [ 567.192950][T12433] bridge_slave_0: entered promiscuous mode [ 567.199367][ T5828] Bluetooth: hci1: command tx timeout [ 567.215620][T12433] bridge0: port 2(bridge_slave_1) entered blocking state [ 567.223564][T12433] bridge0: port 2(bridge_slave_1) entered disabled state [ 567.230997][T12433] bridge_slave_1: entered allmulticast mode [ 567.240945][T12433] bridge_slave_1: entered promiscuous mode [ 567.410735][T12433] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 567.429085][T12433] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 567.513341][ T5828] Bluetooth: hci4: command tx timeout [ 567.554651][T12433] team0: Port device team_slave_0 added [ 567.597317][T12433] team0: Port device team_slave_1 added [ 567.726213][ T7287] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 567.748131][T12433] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 567.759537][T12433] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 567.786621][T12433] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 567.793336][ T970] usb 2-1: new high-speed USB device number 52 using dummy_hcd [ 567.811383][T12433] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 567.821134][T12433] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 567.849269][T12433] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 567.864465][T12373] 8021q: adding VLAN 0 to HW filter on device bond0 [ 567.895690][ T7287] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 567.956867][T12433] hsr_slave_0: entered promiscuous mode [ 567.964388][T12433] hsr_slave_1: entered promiscuous mode [ 567.970869][T12433] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 567.979131][T12433] Cannot create hsr debugfs directory [ 567.994825][ T970] usb 2-1: Using ep0 maxpacket: 16 [ 568.019999][ T970] usb 2-1: config 0 has an invalid interface number: 41 but max is 0 [ 568.028347][ T970] usb 2-1: config 0 has no interface number 0 [ 568.036265][ T7287] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 568.046685][ T970] usb 2-1: config 0 interface 41 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 568.058689][ T970] usb 2-1: config 0 interface 41 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 568.072854][ T970] usb 2-1: config 0 interface 41 has no altsetting 0 [ 568.081826][ T970] usb 2-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 568.091264][ T970] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 568.094396][T12373] 8021q: adding VLAN 0 to HW filter on device team0 [ 568.115774][ T970] usb 2-1: Product: syz [ 568.120003][ T970] usb 2-1: Manufacturer: syz [ 568.129477][ T970] usb 2-1: SerialNumber: syz [ 568.139053][ T970] usb 2-1: config 0 descriptor?? [ 568.145246][T12448] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 568.152546][T12448] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 568.194744][ T7287] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 568.244734][T12392] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 568.264777][ T7301] bridge0: port 1(bridge_slave_0) entered blocking state [ 568.271962][ T7301] bridge0: port 1(bridge_slave_0) entered forwarding state [ 568.290799][T12392] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 568.302808][T12392] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 568.340095][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 568.347295][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 568.382238][T12392] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 568.383518][T12448] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 568.393622][ T5828] Bluetooth: hci2: command tx timeout [ 568.426390][T12448] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 568.538230][T12402] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 568.550836][T12402] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 568.608763][T12402] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 568.621507][ T7287] bridge_slave_1: left allmulticast mode [ 568.627563][ T7287] bridge_slave_1: left promiscuous mode [ 568.633454][ T5828] Bluetooth: hci3: command 0x041b tx timeout [ 568.650787][ T7287] bridge0: port 2(bridge_slave_1) entered disabled state [ 568.659666][ T7287] bridge_slave_0: left allmulticast mode [ 568.665904][ T7287] bridge_slave_0: left promiscuous mode [ 568.675534][ T7287] bridge0: port 1(bridge_slave_0) entered disabled state [ 568.687327][ T7287] bridge_slave_1: left allmulticast mode [ 568.693377][ T7287] bridge_slave_1: left promiscuous mode [ 568.699071][ T7287] bridge0: port 2(bridge_slave_1) entered disabled state [ 568.709129][ T7287] bridge_slave_0: left allmulticast mode [ 568.715497][ T7287] bridge_slave_0: left promiscuous mode [ 568.721215][ T7287] bridge0: port 1(bridge_slave_0) entered disabled state [ 568.730416][ T7287] bridge_slave_1: left allmulticast mode [ 568.736594][ T7287] bridge_slave_1: left promiscuous mode [ 568.742363][ T7287] bridge0: port 2(bridge_slave_1) entered disabled state [ 568.752051][ T7287] bridge_slave_0: left allmulticast mode [ 568.758744][ T7287] bridge_slave_0: left promiscuous mode [ 568.764620][ T7287] bridge0: port 1(bridge_slave_0) entered disabled state [ 569.075414][ T29] audit: type=1326 audit(1739512947.567:1335): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12447 comm="syz.1.1743" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f96fe58cde9 code=0x0 [ 569.226559][ T970] CoreChips 2-1:0.41 (unnamed net_device) (uninitialized): sr_get_phy_addr : Error reading PHYID register:ffffffe0 [ 569.283292][ T5828] Bluetooth: hci1: command tx timeout [ 569.950060][T12450] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 569.969899][T12450] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 570.424133][ T7287] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 570.437937][ T7287] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 570.447818][ T7287] bond0 (unregistering): Released all slaves [ 570.708664][ T7287] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 570.720739][ T7287] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 570.732707][ T7287] bond0 (unregistering): Released all slaves [ 570.991910][ T7287] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 571.002579][ T7287] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 571.019665][ T7287] bond0 (unregistering): Released all slaves [ 571.041565][T12402] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 571.364434][ T5828] Bluetooth: hci1: command tx timeout [ 571.741335][T12392] 8021q: adding VLAN 0 to HW filter on device bond0 [ 571.820584][T12433] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 571.878687][T12433] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 571.890579][T12433] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 571.902494][T12433] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 571.924443][T12392] 8021q: adding VLAN 0 to HW filter on device team0 [ 571.940106][T12373] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 572.037888][ T7301] bridge0: port 1(bridge_slave_0) entered blocking state [ 572.045110][ T7301] bridge0: port 1(bridge_slave_0) entered forwarding state [ 572.117690][ T1155] bridge0: port 2(bridge_slave_1) entered blocking state [ 572.124851][ T1155] bridge0: port 2(bridge_slave_1) entered forwarding state [ 572.149866][ T970] CoreChips 2-1:0.41 (unnamed net_device) (uninitialized): Failed to send software reset:ffffffb9 [ 572.166303][ T970] CoreChips 2-1:0.41 (unnamed net_device) (uninitialized): Failed to reset PHY: -71 [ 572.195755][ T970] CoreChips 2-1:0.41: probe with driver CoreChips failed with error -71 [ 572.211716][ T970] usb 2-1: USB disconnect, device number 52 [ 572.251611][T12402] 8021q: adding VLAN 0 to HW filter on device bond0 [ 572.334529][T12402] 8021q: adding VLAN 0 to HW filter on device team0 [ 572.380712][T12373] veth0_vlan: entered promiscuous mode [ 572.430108][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 572.437278][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 572.491472][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 572.498713][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 572.622181][T12433] 8021q: adding VLAN 0 to HW filter on device bond0 [ 572.695785][T12373] veth1_vlan: entered promiscuous mode [ 572.759133][T12433] 8021q: adding VLAN 0 to HW filter on device team0 [ 572.861404][ T7287] hsr_slave_0: left promiscuous mode [ 572.870387][ T7287] hsr_slave_1: left promiscuous mode [ 572.877280][ T7287] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 572.887061][ T7287] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 572.896496][ T7287] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 572.908190][ T7287] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 572.922492][ T7287] hsr_slave_0: left promiscuous mode [ 572.933675][ T7287] hsr_slave_1: left promiscuous mode [ 572.945526][ T7287] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 572.953690][ T7287] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 572.962282][ T7287] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 572.971913][ T7287] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 572.990291][ T7287] hsr_slave_0: left promiscuous mode [ 573.000265][ T7287] hsr_slave_1: left promiscuous mode [ 573.010994][ T7287] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 573.019670][ T7287] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 573.031968][ T7287] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 573.041973][ T7287] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 573.087970][ T7287] veth1_macvtap: left promiscuous mode [ 573.098685][ T7287] veth0_macvtap: left promiscuous mode [ 573.104628][ T7287] veth1_vlan: left promiscuous mode [ 573.110047][ T7287] veth0_vlan: left promiscuous mode [ 573.120753][ T7287] veth1_macvtap: left promiscuous mode [ 573.126617][ T7287] veth0_macvtap: left promiscuous mode [ 573.132424][ T7287] veth1_vlan: left promiscuous mode [ 573.137984][ T7287] veth0_vlan: left promiscuous mode [ 573.149309][ T7287] veth1_macvtap: left promiscuous mode [ 573.155214][ T7287] veth0_macvtap: left promiscuous mode [ 573.161014][ T7287] veth1_vlan: left promiscuous mode [ 573.166497][ T7287] veth0_vlan: left promiscuous mode [ 573.433247][ T5828] Bluetooth: hci1: command tx timeout [ 574.247873][ T7287] team0 (unregistering): Port device team_slave_1 removed [ 574.337252][ T7287] team0 (unregistering): Port device team_slave_0 removed [ 576.131726][ T7287] team0 (unregistering): Port device team_slave_1 removed [ 576.214323][ T7287] team0 (unregistering): Port device team_slave_0 removed [ 577.721485][ T7287] team0 (unregistering): Port device team_slave_1 removed [ 577.807789][ T7287] team0 (unregistering): Port device team_slave_0 removed [ 578.702145][ T51] bridge0: port 1(bridge_slave_0) entered blocking state [ 578.709316][ T51] bridge0: port 1(bridge_slave_0) entered forwarding state [ 578.775568][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 578.782700][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 578.830842][T12373] veth0_macvtap: entered promiscuous mode [ 578.880064][T12392] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 578.895695][T12373] veth1_macvtap: entered promiscuous mode [ 578.949059][T12433] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 579.008650][T12373] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 579.056319][T12373] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 579.083588][T12373] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 579.102100][T12373] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 579.125256][T12373] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 579.136109][T12373] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 579.147325][T12373] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 579.177092][T12373] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 579.224569][T12373] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 579.234954][T12373] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 579.245629][T12373] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 579.255694][T12373] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 579.283087][T12373] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 579.304748][T12373] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 579.336088][T12373] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 579.353179][T12373] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 579.374615][T12373] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 579.393238][T12373] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 579.507375][T12433] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 579.681772][T12402] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 579.781695][ T53] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 579.794971][ T53] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 579.804545][ T53] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 579.809511][T12392] veth0_vlan: entered promiscuous mode [ 579.839150][ T53] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 579.853881][ T53] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 579.861202][ T53] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 579.861225][ T7318] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 579.887166][ T7318] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 579.927808][T12392] veth1_vlan: entered promiscuous mode [ 580.087684][T12402] veth0_vlan: entered promiscuous mode [ 580.111311][ T7301] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 580.120426][ T7301] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 580.152329][T12402] veth1_vlan: entered promiscuous mode [ 580.191250][T12392] veth0_macvtap: entered promiscuous mode [ 580.254864][T12487] wlan0 speed is unknown, defaulting to 1000 [ 580.271492][T12392] veth1_macvtap: entered promiscuous mode [ 580.346984][T12402] veth0_macvtap: entered promiscuous mode [ 580.395799][T12392] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 580.419159][T12392] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 580.430262][T12392] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 580.442031][T12392] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 580.452092][T12392] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 580.463419][T12392] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 580.473796][T12392] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 580.484486][T12392] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 580.496145][T12392] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 580.507538][T12402] veth1_macvtap: entered promiscuous mode [ 580.534709][ T7287] IPVS: stop unused estimator thread 0... [ 580.540825][T12433] veth0_vlan: entered promiscuous mode [ 580.589758][T12392] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 580.600695][T12392] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 580.617581][T12392] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 580.628482][T12392] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 580.638703][T12392] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 580.649294][T12392] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 580.659222][T12392] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 580.670200][T12392] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 580.681083][T12392] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 580.711193][T12392] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 580.722353][T12392] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 580.731311][T12392] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 580.740537][T12392] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 580.758312][T12433] veth1_vlan: entered promiscuous mode [ 580.770764][T12402] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 580.782388][T12402] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 580.797588][T12402] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 580.808651][T12402] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 580.821272][T12402] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 580.832443][T12402] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 580.844261][T12402] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 580.854881][T12402] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 580.864818][T12402] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 580.879836][T12402] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 580.890819][T12402] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 580.948532][T12402] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 580.961054][T12402] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 580.972559][T12402] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 580.986910][T12402] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 580.996883][T12402] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 581.007863][T12402] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 581.017758][T12402] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 581.028277][T12402] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 581.038547][T12402] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 581.049185][T12402] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 581.059963][T12402] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 581.127515][ T7287] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 581.149231][T12433] veth0_macvtap: entered promiscuous mode [ 581.157441][T12487] chnl_net:caif_netlink_parms(): no params data found [ 581.194083][T12433] veth1_macvtap: entered promiscuous mode [ 581.202980][T12402] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 581.212612][T12402] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 581.222713][T12402] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 581.231510][T12402] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 581.300614][ T7287] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 581.401265][T12487] bridge0: port 1(bridge_slave_0) entered blocking state [ 581.410402][T12487] bridge0: port 1(bridge_slave_0) entered disabled state [ 581.418473][T12487] bridge_slave_0: entered allmulticast mode [ 581.428647][T12487] bridge_slave_0: entered promiscuous mode [ 581.527558][ T7287] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 581.546997][T12487] bridge0: port 2(bridge_slave_1) entered blocking state [ 581.557108][T12487] bridge0: port 2(bridge_slave_1) entered disabled state [ 581.565194][T12487] bridge_slave_1: entered allmulticast mode [ 581.571987][T12487] bridge_slave_1: entered promiscuous mode [ 581.606567][ T7307] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 581.614694][ T7307] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 581.643741][ T7287] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 581.672219][T12433] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 581.683442][T12433] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 581.694142][T12433] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 581.704772][T12433] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 581.714751][T12433] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 581.725363][T12433] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 581.735287][T12433] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 581.745950][T12433] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 581.756441][T12433] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 581.767088][T12433] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 581.778300][T12433] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 581.789180][T12433] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 581.800225][T12433] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 581.810064][T12487] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 581.847599][T12487] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 581.875209][T12433] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 581.886072][T12433] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 581.897616][T12433] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 581.908224][T12433] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 581.919064][T12433] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 581.934907][T12433] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 581.945135][T12433] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 581.956355][T12433] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 581.966548][T12433] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 581.977433][T12433] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 581.987353][T12433] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 581.999975][ T53] Bluetooth: hci0: command tx timeout [ 582.007380][T12433] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 582.018477][T12433] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 582.028845][T12433] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 582.037634][T12433] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 582.046639][T12433] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 582.055389][T12433] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 582.084683][ T7318] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 582.097696][ T7318] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 582.149986][ T7318] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 582.151707][T12487] team0: Port device team_slave_0 added [ 582.158449][ T7318] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 582.177880][T12487] team0: Port device team_slave_1 added [ 582.242689][T12487] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 582.252665][T12487] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 582.283502][T12487] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 582.323783][ T7318] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 582.341693][ T7318] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 582.363631][T12487] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 582.370667][T12487] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 582.411834][T12487] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 582.435684][ T7287] bridge_slave_1: left allmulticast mode [ 582.441574][ T7287] bridge_slave_1: left promiscuous mode [ 582.583244][ T7287] bridge0: port 2(bridge_slave_1) entered disabled state [ 582.595268][ T7287] bridge_slave_0: left allmulticast mode [ 582.600981][ T7287] bridge_slave_0: left promiscuous mode [ 582.617223][ T7287] bridge0: port 1(bridge_slave_0) entered disabled state [ 582.735131][ T5869] IPVS: starting estimator thread 0... [ 582.779667][T12518] IPVS: set_ctl: invalid protocol: 108 172.20.20.187:20002 [ 582.878493][T12523] 9pnet_virtio: no channels available for device syz [ 582.993584][T12521] IPVS: using max 25 ests per chain, 60000 per kthread [ 583.056689][T12524] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1734'. [ 583.145337][T12524] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1734'. [ 583.883411][ T5911] usb 7-1: new high-speed USB device number 8 using dummy_hcd [ 584.023481][ T7287] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 584.035817][ T5911] usb 7-1: config 0 has an invalid interface number: 81 but max is 0 [ 584.035992][ T7287] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 584.051130][ T5911] usb 7-1: config 0 has no interface number 0 [ 584.059131][ T5911] usb 7-1: config 0 interface 81 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 584.062120][ T7287] bond0 (unregistering): Released all slaves [ 584.070467][ T5911] usb 7-1: config 0 interface 81 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 584.076860][ T5828] Bluetooth: hci0: command tx timeout [ 584.090006][ T5911] usb 7-1: config 0 interface 81 has no altsetting 0 [ 584.102369][ T5911] usb 7-1: New USB device found, idVendor=056a, idProduct=033b, bcdDevice= 0.00 [ 584.106348][ T7287] bond1 (unregistering): Released all slaves [ 584.117694][ T5911] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 584.172389][ T5911] usb 7-1: config 0 descriptor?? [ 584.365146][ T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 584.375839][ T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 584.402338][ T29] audit: type=1400 audit(1739512962.907:1336): avc: denied { getopt } for pid=12541 comm="syz.0.1755" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 584.455414][T12487] hsr_slave_0: entered promiscuous mode [ 584.471737][T12487] hsr_slave_1: entered promiscuous mode [ 584.479063][T12487] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 584.521086][T12487] Cannot create hsr debugfs directory [ 584.767002][ T5911] wacom 0003:056A:033B.0025: unknown main item tag 0xe [ 584.851286][ T5911] wacom 0003:056A:033B.0025: Unknown device_type for 'HID 056a:033b'. Assuming pen. [ 584.901367][ T5911] wacom 0003:056A:033B.0025: hidraw0: USB HID v0.40 Device [HID 056a:033b] on usb-dummy_hcd.6-1/input81 [ 584.917035][ T5911] input: Wacom Intuos S 2 Pen as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.81/0003:056A:033B.0025/input/input44 [ 585.176297][ T8] usb 7-1: USB disconnect, device number 8 [ 585.242588][ T7301] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 585.266223][ T7301] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 585.420212][ T7287] hsr_slave_0: left promiscuous mode [ 585.427345][ T7287] hsr_slave_1: left promiscuous mode [ 585.443701][ T7287] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 585.451266][ T7287] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 585.483382][ T7287] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 585.490950][ T7287] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 585.535453][ T7287] veth1_macvtap: left promiscuous mode [ 585.541060][ T7287] veth0_macvtap: left promiscuous mode [ 585.556935][ T7287] veth1_vlan: left promiscuous mode [ 585.578503][ T7287] veth0_vlan: left promiscuous mode [ 586.024722][T12564] netlink: 26 bytes leftover after parsing attributes in process `syz.2.1758'. [ 586.177676][ T5828] Bluetooth: hci0: command tx timeout [ 586.538037][T12567] ieee802154 phy0 wpan0: encryption failed: -22 [ 586.598962][ T29] audit: type=1400 audit(1739512965.107:1337): avc: denied { map } for pid=12568 comm="syz.2.1760" path="/dev/bus/usb/003/001" dev="devtmpfs" ino=727 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 586.625657][ T29] audit: type=1400 audit(1739512965.107:1338): avc: denied { execute } for pid=12568 comm="syz.2.1760" path="/dev/bus/usb/003/001" dev="devtmpfs" ino=727 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 587.273499][ T5828] block nbd2: Receive control failed (result -32) [ 587.300337][ T5828] block nbd2: Receive control failed (result -32) [ 587.390111][T12572] block nbd2: shutting down sockets [ 587.543778][T12575] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1762'. [ 587.561204][T12575] netlink: 40 bytes leftover after parsing attributes in process `syz.6.1762'. [ 587.634062][ T7287] team0 (unregistering): Port device team_slave_1 removed [ 587.734432][ T7287] team0 (unregistering): Port device team_slave_0 removed [ 587.804749][ T5911] usb 3-1: new high-speed USB device number 60 using dummy_hcd [ 587.984812][ T5911] usb 3-1: Using ep0 maxpacket: 16 [ 588.007455][ T5911] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 588.032709][ T5911] usb 3-1: config 0 has no interface number 0 [ 588.057809][ T5911] usb 3-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=6d.5d [ 588.067277][ T5911] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 588.075756][ T5911] usb 3-1: Product: syz [ 588.080236][ T5911] usb 3-1: Manufacturer: syz [ 588.085223][ T5911] usb 3-1: SerialNumber: syz [ 588.092407][ T5911] usb 3-1: config 0 descriptor?? [ 588.104642][ T5911] gspca_main: spca1528-2.14.0 probing 04fc:1528 [ 588.257412][ T5828] Bluetooth: hci0: command tx timeout [ 588.775540][T12556] IPv6: Can't replace route, no match found [ 588.924560][ T5911] gspca_spca1528: reg_w err -71 [ 588.943644][ T5911] spca1528 3-1:0.1: probe with driver spca1528 failed with error -71 [ 588.956352][ T5911] usb 3-1: USB disconnect, device number 60 [ 589.173412][ T970] usb 7-1: new high-speed USB device number 9 using dummy_hcd [ 589.359659][ T970] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 589.378746][ T970] usb 7-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 589.391559][ T970] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 589.421935][ T970] usb 7-1: config 0 descriptor?? [ 589.454360][ T970] pwc: Askey VC010 type 2 USB webcam detected. [ 589.618734][T12487] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 589.647270][T12487] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 589.685795][T12487] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 589.720135][T12487] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 589.888441][ T970] pwc: recv_control_msg error -32 req 02 val 2b00 [ 589.902639][ T970] pwc: recv_control_msg error -32 req 02 val 2700 [ 589.911551][ T970] pwc: recv_control_msg error -32 req 02 val 2c00 [ 589.926169][ T29] audit: type=1400 audit(1739512968.427:1339): avc: denied { read } for pid=12598 comm="syz.0.1771" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 589.990310][T12487] 8021q: adding VLAN 0 to HW filter on device bond0 [ 590.006312][T12487] 8021q: adding VLAN 0 to HW filter on device team0 [ 590.066869][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 590.074090][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 590.185014][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 590.192172][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 590.411397][ T970] pwc: recv_control_msg error -71 req 04 val 1000 [ 590.474666][T12609] netlink: 'syz.7.1773': attribute type 2 has an invalid length. [ 590.545346][ T970] pwc: recv_control_msg error -71 req 04 val 1300 [ 590.568283][ T970] pwc: recv_control_msg error -71 req 04 val 1400 [ 590.687014][T12609] netlink: 'syz.7.1773': attribute type 1 has an invalid length. [ 590.703611][ T970] pwc: recv_control_msg error -71 req 02 val 2000 [ 590.710460][ T970] pwc: recv_control_msg error -71 req 02 val 2100 [ 590.718167][ T970] pwc: recv_control_msg error -71 req 04 val 1500 [ 590.733603][ T970] pwc: recv_control_msg error -71 req 02 val 2500 [ 590.741174][ T970] pwc: recv_control_msg error -71 req 02 val 2400 [ 590.751665][ T970] pwc: recv_control_msg error -71 req 02 val 2600 [ 590.771138][ T970] pwc: recv_control_msg error -71 req 02 val 2900 [ 590.785258][ T970] pwc: recv_control_msg error -71 req 02 val 2800 [ 590.802420][ T970] pwc: recv_control_msg error -71 req 04 val 1100 [ 590.827899][ T970] pwc: recv_control_msg error -71 req 04 val 1200 [ 590.846525][ T970] pwc: Registered as video103. [ 590.869942][ T970] input: PWC snapshot button as /devices/platform/dummy_hcd.6/usb7/7-1/input/input48 [ 590.907502][ T970] usb 7-1: USB disconnect, device number 9 [ 590.963194][ T5911] usb 8-1: new full-speed USB device number 3 using dummy_hcd [ 591.007171][T12487] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 591.137231][ T5911] usb 8-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 591.157418][ T5911] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 591.177844][ T5911] usb 8-1: config 0 descriptor?? [ 591.271560][T12487] veth0_vlan: entered promiscuous mode [ 591.290930][T12487] veth1_vlan: entered promiscuous mode [ 591.391182][ T5911] [drm] vendor descriptor length:25 data:25 5f 00 00 00 00 00 00 00 00 00 [ 591.391469][T12487] veth0_macvtap: entered promiscuous mode [ 591.404819][ T5911] [drm:udl_init] *ERROR* Unrecognized vendor firmware descriptor [ 591.489728][T12487] veth1_macvtap: entered promiscuous mode [ 591.542598][T12487] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 591.562114][T12487] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 591.625206][ T5911] [drm] Initialized udl 0.0.1 for 8-1:0.0 on minor 2 [ 591.631955][ T5911] [drm] Initialized udl on minor 2 [ 591.645803][T12487] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 591.795046][T12629] netlink: 'syz.6.1775': attribute type 10 has an invalid length. [ 592.305132][T12487] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 592.333354][T12487] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 592.357870][T12487] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 592.380514][T12487] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 592.391872][T12487] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 592.409468][T12487] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 592.422682][T12487] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 592.432931][T12487] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 592.444426][ T5911] udl 8-1:0.0: [drm] *ERROR* Read EDID byte 1 failed err ffffffb9 [ 592.452583][T12487] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 592.462676][ T5911] udl 8-1:0.0: [drm] Cannot find any crtc or sizes [ 592.476905][ T8] udl 8-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 592.486456][T12487] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 592.495194][ T5911] usb 8-1: USB disconnect, device number 3 [ 592.501914][ T8] udl 8-1:0.0: [drm] Cannot find any crtc or sizes [ 592.528778][T12629] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 592.540561][T12629] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 592.566586][T12487] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 592.590204][T12487] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 592.600670][T12487] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 592.631907][T12487] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 592.643391][T12487] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 592.654075][T12487] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 592.664113][T12487] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 592.674758][T12487] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 592.684745][T12487] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 592.696899][T12487] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 592.707400][T12487] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 592.718066][T12487] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 592.730416][T12487] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 592.738457][T12635] IPv6: Can't replace route, no match found [ 592.758768][T12487] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 592.767820][T12487] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 592.776916][T12487] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 592.786351][T12487] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 592.835698][ T29] audit: type=1400 audit(1739512971.347:1340): avc: denied { write } for pid=12638 comm="syz.0.1779" path="socket:[45081]" dev="sockfs" ino=45081 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 592.986876][ T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 593.006643][ T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 593.103611][ T7318] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 593.111511][ T7318] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 593.123218][ T8] usb 7-1: new high-speed USB device number 10 using dummy_hcd [ 593.285754][ T8] usb 7-1: Using ep0 maxpacket: 32 [ 593.299323][ T8] usb 7-1: config 0 has an invalid interface number: 191 but max is 0 [ 593.318322][ T8] usb 7-1: config 0 has no interface number 0 [ 593.329468][ T8] usb 7-1: New USB device found, idVendor=04fc, idProduct=0204, bcdDevice=67.67 [ 593.347208][ T8] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 593.371628][ T8] usb 7-1: Product: syz [ 593.381292][ T8] usb 7-1: Manufacturer: syz [ 593.391859][ T8] usb 7-1: SerialNumber: syz [ 593.407047][ T8] usb 7-1: config 0 descriptor?? [ 593.421181][ T8] spcp8x5 7-1:0.191: SPCP8x5 converter detected [ 593.431559][ T8] usb 7-1: SPCP8x5 converter now attached to ttyUSB0 [ 593.595988][T12662] bridge0: port 2(bridge_slave_1) entered disabled state [ 593.609075][T12662] bridge0: port 1(bridge_slave_0) entered disabled state [ 593.617272][T12662] bridge0: entered allmulticast mode [ 594.079426][T12674] openvswitch: netlink: Key type 200 is out of range max 32 [ 594.213198][ T29] audit: type=1400 audit(1739512972.717:1341): avc: denied { shutdown } for pid=12672 comm="syz.9.1786" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 594.243021][T12672] Oops: general protection fault, probably for non-canonical address 0xdffffc0000000003: 0000 [#1] PREEMPT SMP KASAN NOPTI [ 594.255844][T12672] KASAN: null-ptr-deref in range [0x0000000000000018-0x000000000000001f] [ 594.264243][T12672] CPU: 1 UID: 0 PID: 12672 Comm: syz.9.1786 Not tainted 6.14.0-rc2-syzkaller-00056-gab68d7eb7b1a #0 [ 594.274993][T12672] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 594.285044][T12672] RIP: 0010:__lock_acquire+0xe4/0x3c40 [ 594.290501][T12672] Code: 08 84 d2 0f 85 15 14 00 00 44 8b 0d ea 0e cc 0e 45 85 c9 0f 84 b4 0e 00 00 48 b8 00 00 00 00 00 fc ff df 4c 89 e2 48 c1 ea 03 <80> 3c 02 00 0f 85 96 2c 00 00 49 8b 04 24 48 3d a0 d7 82 93 0f 84 [ 594.310106][T12672] RSP: 0018:ffffc90002f57988 EFLAGS: 00010006 [ 594.316330][T12672] RAX: dffffc0000000000 RBX: 0000000000000001 RCX: 0000000000000000 [ 594.324279][T12672] RDX: 0000000000000003 RSI: 1ffff920005eaf43 RDI: 0000000000000018 [ 594.332227][T12672] RBP: 0000000000000000 R08: 0000000000000001 R09: 0000000000000001 [ 594.340175][T12672] R10: ffffffff90623917 R11: 0000000000000006 R12: 0000000000000018 [ 594.348123][T12672] R13: ffff8880674f4880 R14: 0000000000000000 R15: 0000000000000000 [ 594.356072][T12672] FS: 000055557b939500(0000) GS:ffff8880b8700000(0000) knlGS:0000000000000000 [ 594.364980][T12672] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 594.371541][T12672] CR2: 00007f973bc01000 CR3: 000000006acda000 CR4: 00000000003526f0 [ 594.379492][T12672] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 594.387448][T12672] DR3: 0000000000000080 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 594.395408][T12672] Call Trace: [ 594.398668][T12672] [ 594.401596][T12672] ? die_addr+0x3b/0xa0 [ 594.405760][T12672] ? exc_general_protection+0x155/0x230 [ 594.411303][T12672] ? asm_exc_general_protection+0x26/0x30 [ 594.417008][T12672] ? __lock_acquire+0xe4/0x3c40 [ 594.421844][T12672] ? find_held_lock+0x2d/0x110 [ 594.426587][T12672] ? __pfx_mark_lock+0x10/0x10 [ 594.431331][T12672] ? __queue_work+0x431/0x1080 [ 594.436091][T12672] ? __pfx_lock_release+0x10/0x10 [ 594.441099][T12672] ? __pfx___lock_acquire+0x10/0x10 [ 594.446279][T12672] lock_acquire.part.0+0x11b/0x380 [ 594.451375][T12672] ? add_wait_queue+0x45/0x230 [ 594.456121][T12672] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 594.461735][T12672] ? rcu_is_watching+0x12/0xc0 [ 594.466476][T12672] ? trace_lock_acquire+0x14e/0x1f0 [ 594.471654][T12672] ? add_wait_queue+0x45/0x230 [ 594.476413][T12672] ? lock_acquire+0x2f/0xb0 [ 594.480899][T12672] ? add_wait_queue+0x45/0x230 [ 594.485652][T12672] _raw_spin_lock_irqsave+0x3a/0x60 [ 594.490843][T12672] ? add_wait_queue+0x45/0x230 [ 594.495589][T12672] add_wait_queue+0x45/0x230 [ 594.500160][T12672] virtio_transport_release+0x644/0xa40 [ 594.505710][T12672] ? find_held_lock+0x2d/0x110 [ 594.510456][T12672] ? __pfx_virtio_transport_release+0x10/0x10 [ 594.516504][T12672] ? __pfx_lock_release+0x10/0x10 [ 594.521514][T12672] ? __pfx_woken_wake_function+0x10/0x10 [ 594.527126][T12672] ? mark_held_locks+0x9f/0xe0 [ 594.531870][T12672] ? __local_bh_enable_ip+0xa4/0x120 [ 594.537323][T12672] __vsock_release+0x109/0x580 [ 594.542073][T12672] ? __pfx_down_write+0x10/0x10 [ 594.546916][T12672] vsock_release+0x99/0x130 [ 594.551405][T12672] __sock_release+0xb0/0x270 [ 594.555992][T12672] ? __pfx_sock_close+0x10/0x10 [ 594.560832][T12672] sock_close+0x1c/0x30 [ 594.564978][T12672] __fput+0x3ff/0xb70 [ 594.568952][T12672] ? _raw_spin_unlock_irq+0x23/0x50 [ 594.574137][T12672] task_work_run+0x14e/0x250 [ 594.578719][T12672] ? __pfx_task_work_run+0x10/0x10 [ 594.583811][T12672] ? __pfx___do_sys_close_range+0x10/0x10 [ 594.589514][T12672] syscall_exit_to_user_mode+0x27b/0x2a0 [ 594.595129][T12672] do_syscall_64+0xda/0x250 [ 594.599614][T12672] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 594.605492][T12672] RIP: 0033:0x7f09fdd8cde9 [ 594.609889][T12672] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 594.629476][T12672] RSP: 002b:00007ffd0ec64ca8 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 594.637883][T12672] RAX: 0000000000000000 RBX: 0000000000091079 RCX: 00007f09fdd8cde9 [ 594.645850][T12672] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 [ 594.653801][T12672] RBP: 00007f09fdfa7ba0 R08: 0000000000000001 R09: 000000150ec64f9f [ 594.661762][T12672] R10: 00007f09fdc00000 R11: 0000000000000246 R12: 00007f09fdfa5fac [ 594.669710][T12672] R13: 00007f09fdfa5fa0 R14: ffffffffffffffff R15: 00007ffd0ec64dc0 [ 594.677677][T12672] [ 594.680674][T12672] Modules linked in: [ 594.684586][T12672] ---[ end trace 0000000000000000 ]--- [ 594.690020][T12672] RIP: 0010:__lock_acquire+0xe4/0x3c40 [ 594.695475][T12672] Code: 08 84 d2 0f 85 15 14 00 00 44 8b 0d ea 0e cc 0e 45 85 c9 0f 84 b4 0e 00 00 48 b8 00 00 00 00 00 fc ff df 4c 89 e2 48 c1 ea 03 <80> 3c 02 00 0f 85 96 2c 00 00 49 8b 04 24 48 3d a0 d7 82 93 0f 84 [ 594.715075][T12672] RSP: 0018:ffffc90002f57988 EFLAGS: 00010006 [ 594.721171][T12672] RAX: dffffc0000000000 RBX: 0000000000000001 RCX: 0000000000000000 [ 594.729142][T12672] RDX: 0000000000000003 RSI: 1ffff920005eaf43 RDI: 0000000000000018 [ 594.737217][T12672] RBP: 0000000000000000 R08: 0000000000000001 R09: 0000000000000001 [ 594.745300][T12672] R10: ffffffff90623917 R11: 0000000000000006 R12: 0000000000000018 [ 594.753258][T12672] R13: ffff8880674f4880 R14: 0000000000000000 R15: 0000000000000000 [ 594.761209][T12672] FS: 000055557b939500(0000) GS:ffff8880b8700000(0000) knlGS:0000000000000000 [ 594.770119][T12672] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 594.776684][T12672] CR2: 00007f973bc01000 CR3: 000000006acda000 CR4: 00000000003526f0 [ 594.784646][T12672] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 594.792599][T12672] DR3: 0000000000000080 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 594.800574][T12672] Kernel panic - not syncing: Fatal exception [ 594.806874][T12672] Kernel Offset: disabled [ 594.811179][T12672] Rebooting in 86400 seconds..