last executing test programs: 15.189474682s ago: executing program 3 (id=28): socket$netlink(0x10, 0x3, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) socket$inet(0xa, 0x801, 0x84) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x8000) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) bind$vsock_stream(0xffffffffffffffff, &(0x7f0000000300)={0x28, 0x0, 0x0, @local}, 0x10) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000080), 0x141402) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r1, 0xc0505405, &(0x7f00000000c0)={0x3}) 12.858691379s ago: executing program 1 (id=31): mkdir(&(0x7f0000000100)='./control\x00', 0x184) open$dir(&(0x7f00000002c0)='./control/file0\x00', 0xa42c3, 0x220) open(&(0x7f00000000c0)='./control\x00', 0x573382, 0x113) r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_VMCI_NOTIFY_RESOURCE(r0, 0x7a5, 0x0) rmdir(&(0x7f0000000280)='./control\x00') prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x8) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000500)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3fc, 0x0, 0x32}, 0x9c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x9, &(0x7f0000000000)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x0, 0x0, 0x0, 0x8a}, 0x9c) bind$inet6(r4, &(0x7f0000000480)={0xa, 0x4e23, 0x0, @empty, 0x4000000}, 0x1c) sendto$inet6(r4, &(0x7f0000847fff)='X', 0x1, 0x800, &(0x7f000005ffe4)={0xa, 0x4e27, 0x3, @private1, 0xfffffffc}, 0x1c) r5 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r5, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000380)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10) getsockopt$inet_sctp_SCTP_MAX_BURST(r5, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000001080)=0x8) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r5, 0x84, 0x7c, &(0x7f0000001100)={r6, 0x6, 0xee8}, &(0x7f0000001140)=0x8) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x9, &(0x7f00000003c0)={r7, @in6={{0xa, 0x4e22, 0x3b, @mcast2, 0x6}}, 0x0, 0xfff, 0x1902c5ca, 0x3, 0x54}, 0x9c) 11.498423491s ago: executing program 4 (id=32): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f00000001c0)=@nat={'nat\x00', 0x19, 0x4, 0x12e, [0x200000001340, 0x0, 0x0, 0x200000001576, 0x2000000016b4], 0x0, 0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="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"]}, 0x233) chdir(&(0x7f0000000100)='./file0\x00') ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x1, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r2, 0x0, 0x0) r3 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) r4 = syz_open_dev$loop(&(0x7f0000000200), 0x4, 0x0) ioctl$BLKPG(r4, 0x1269, &(0x7f00000000c0)={0x1, 0x0, 0x98, &(0x7f0000000140)={0x4, 0x200000000, 0x4000a}}) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$BTRFS_IOC_FS_INFO(0xffffffffffffffff, 0x8400941f, 0x0) r5 = socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$inet6(r5, &(0x7f0000000080)={&(0x7f0000000040)={0xa, 0x4c20, 0x80000000, @mcast1, 0x101}, 0x1c, 0x0, 0x0, &(0x7f0000000580)=ANY=[@ANYRES16], 0xfffffffffffffe5c}, 0x4084) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) rseq(0x0, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r6 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r6, &(0x7f0000019680)=""/102392, 0x18ff8) madvise(&(0x7f0000bfd000/0x400000)=nil, 0x400000, 0x1) r7 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TIOCSSOFTCAR(r7, 0x5453, 0x0) io_submit(0x0, 0x0, 0x0) openat$uinput(0xffffffffffffff9c, &(0x7f0000000240), 0x800, 0x0) syz_io_uring_setup(0x10d, 0x0, 0x0, 0x0) 11.033625501s ago: executing program 2 (id=33): r0 = socket$inet_tcp(0x2, 0x1, 0x0) mmap$binder(&(0x7f00008eb000/0x5000)=nil, 0x5000, 0x1, 0x11, 0xffffffffffffffff, 0x1000) r1 = syz_io_uring_setup(0x10d, &(0x7f0000000380)={0x0, 0x0, 0x80, 0xfffffffd}, &(0x7f0000000340)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_SHUTDOWN={0x22, 0x9}) io_uring_enter(r1, 0x3516, 0x0, 0x0, 0x0, 0x0) r4 = mq_open(&(0x7f000084dff0)='\xa1sxt\x1a\x00\x00\x00\x00\x00\x00\x00\x01\x88\xbdd', 0x6e93ebbbcc0884f2, 0x100, &(0x7f0000000300)={0x0, 0x1, 0x3}) mq_timedsend(r4, 0x0, 0x0, 0x0, 0x0) mq_timedsend(r4, 0x0, 0x0, 0x0, 0x0) mq_timedreceive(r4, &(0x7f0000000180)=""/204, 0xcc, 0x0, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @empty}, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r5, 0x1, 0x22, &(0x7f00000018c0), 0x4) recvmsg(r5, &(0x7f00000003c0)={0x0, 0x0, 0x0}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r6 = getpid() sched_setscheduler(r6, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r7, &(0x7f000057eff8)=@file={0x0, './file3\x00'}, 0x6e) sendmmsg$unix(r8, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r7, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$inet_tcp_int(r0, 0x6, 0x12, &(0x7f0000000040)=0x1ff, 0x4) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000400)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0xe9c}]}, 0x10) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @loopback}, 0x10) sendmsg$inet(r0, &(0x7f00000015c0)={0x0, 0x14, &(0x7f0000001600)=[{&(0x7f0000000240)=' ', 0xffffff1f}], 0x12}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0d00000004000000040000000500000400000000", @ANYRES32, @ANYBLOB="fdffffff00"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000000000004960bae26d700c050000000000000000cceb9019cc0a969d2651f33525a62789b329b116c0df34fdc634b6eff78ce3a19ef6b5c3fdc0c660892a9935a7e60fb483afde92e2a0dc8366d88f0bfc8a82d07cedd2d4b377ff01530008ed5c10b8e5fcc7"], 0x50) 10.89595142s ago: executing program 3 (id=34): r0 = syz_open_dev$I2C(&(0x7f0000000100), 0x0, 0x0) preadv(r0, &(0x7f0000000180)=[{&(0x7f0000002200)=""/4096, 0x1000}, {0x0}], 0x2, 0x8, 0x0) 9.985170097s ago: executing program 3 (id=36): r0 = syz_io_uring_setup(0xd2, &(0x7f0000000480), &(0x7f0000000040)=0x0, &(0x7f0000000080)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0, 0x0, 0x0, 0x0, {0xffff}}) io_uring_enter(r0, 0x47ba, 0x0, 0x0, 0x0, 0x0) 9.228828467s ago: executing program 2 (id=37): syz_open_procfs(0x0, &(0x7f00000000c0)='net/igmp6\x00') mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) prlimit64(r0, 0x6, &(0x7f0000000140)={0x5, 0x4}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000002000)=""/102400, 0x19000) syz_open_dev$vim2m(0x0, 0x10000, 0x2) pipe2$watch_queue(0x0, 0x80) sendmsg$TIPC_CMD_GET_NODES(0xffffffffffffffff, 0x0, 0x84) syz_io_uring_setup(0x3ef0, 0x0, 0x0, 0x0) socket$unix(0x1, 0x1, 0x0) socket$l2tp6(0xa, 0x2, 0x73) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_io_uring_setup(0x497, &(0x7f00000000c0)={0x0, 0x7079, 0x400, 0x3, 0x288}, &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r5, r6, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) io_uring_enter(r4, 0x3516, 0x0, 0x0, 0x0, 0x0) r7 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000240)='numa_maps\x00') read$FUSE(r7, &(0x7f0000002140)={0x2020}, 0x2020) r8 = socket$rds(0x15, 0x5, 0x0) bind$rds(r8, &(0x7f0000000180)={0x2, 0x4e21, @empty}, 0x10) 9.153995511s ago: executing program 4 (id=38): openat$dsp(0xffffffffffffff9c, 0x0, 0x101a02, 0x0) openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000), 0x40001, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) semget(0x1, 0x3, 0x204) io_setup(0x6, 0x0) r0 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000400)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r4 = syz_open_dev$vbi(&(0x7f0000000080), 0x1, 0x2) ioctl$VIDIOC_S_OUTPUT(r4, 0xc004562f, &(0x7f00000000c0)=0x1) ioctl$VIDIOC_S_DV_TIMINGS(r4, 0xc0845657, &(0x7f00000001c0)={0x0, @bt={0x2d0, 0x7c1, 0x1, 0x1, 0xd59f80, 0xc, 0x5, 0x6, 0x81, 0xc, 0x3, 0xe6e, 0x5, 0x1, 0x35, 0x0, {0x4, 0x8001}, 0x3, 0xa3}}) bind$nfc_llcp(r0, &(0x7f0000000640)={0x27, 0x0, 0x0, 0x0, 0x0, 0x0, "d9298498abdba7f061bd1ca44c226af5160e961711a07760760beeab91e8ff0055e5c0d48bd63ffdb93bd43a847a1597c8ef03da5be62200", 0x37}, 0x60) r5 = syz_io_uring_setup(0xd2, &(0x7f0000000480), &(0x7f0000000040)=0x0, &(0x7f0000000080)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r6, r7, &(0x7f0000000200)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0, 0x0, 0x0, 0x0, {0xffff}}) io_uring_enter(r5, 0x47ba, 0x0, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000080)={0x8000000000000001, 0xffffffff7fffffff}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r8 = getpid() socket(0x15, 0x5, 0x0) sched_setscheduler(r8, 0x2, &(0x7f0000000480)=0x7) 7.990195513s ago: executing program 3 (id=40): pipe2$9p(&(0x7f0000000000), 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x0, 0x0, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) sendmsg$IPVS_CMD_GET_SERVICE(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={0x0}, 0x1, 0x0, 0x0, 0x4000014}, 0x0) syz_open_dev$sndctrl(&(0x7f0000000100), 0x0, 0x0) socket$can_raw(0x1d, 0x3, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = syz_open_dev$usbfs(0x0, 0x74, 0x101301) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r2, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='./file0/../file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x891018, 0x0) mount$bind(0x0, &(0x7f0000000140)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f00000002c0)='./file0/file0\x00', &(0x7f0000000240)='./file0/../file0\x00', 0x0, 0x101091, 0x0) 7.983683024s ago: executing program 1 (id=41): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @void, @value}, 0x94) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x0, 0x0) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f00000001c0)=0x5) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000580)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x10001, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4, 0x4, 0x0, @void, @value, @void, @value}, 0x50) r5 = socket(0x10, 0x3, 0x0) r6 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000080)={'veth0_virt_wifi\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2004c084}, 0x40000d0) r8 = creat(&(0x7f00000002c0)='./file0\x00', 0x60) write$binfmt_script(r8, &(0x7f0000000b00)={'#! ', './bus', [{0x20, ','}, {0x20, '\t\x1b\x1c\x1e\xc3h$\xb0^\x05\xdfn{q\xac\xca\'\xef\xb0*\x11\xdb\xecb\xfd$pY\x1cD\xd4\xf3\x98\xc6\xa1\x88\x9c\xe4\r9!\a\x12\xa9\x18\x93C\v79?L\x98e\f\xb5\x0f8\tH\xa8l\r\xfb\xd6>G\xf5\x0f\x04\x00\xc9ty\xdaJ\x00\x00\x00\x00\x00\x00\x00\x00\xb7kb%\x9b\x1c\xd3\xd2yb8\x99\x8d/WM\x0eL\x1b\xb7\xa0\xc4\xfb)\xf7J$\xa6O\x9d\xe7\x8c\x16s\xa8\xad\xc4\xd6\x94K\f\xb1U\xd2\'\xa3\xc3\x98~\x13X\x98X\x86\xdf\v\xf6\xf2\xa3\xc0#%b\x98r)\x83\xa2\x8b&\xbe-\x05\x89\x15l\x05.d\xe8h\xec\xd2\xc0\xa2\x99\xff]\xdd)A\x10\\\beM \xf0\x7f\"\x8c\xf0\xa6*\\WAV\x9d\x00\x15x\xe0~8\xfc\x95\x1eM\xe4JO\v\x18\xa9Z7\xb6\xa0{\x00)\'\xc3\x82@\x92\x97Q\xb1?\b\xdat\xae\xcc\xc3?\x96i\x17\xcf\x9f^\xf8!A4}\t\x97`\xe1\xf4\x05b\x8c\xb4\xa5\xd0\xfa\xeb;\x142\t\xbb\xbf\xf2\xa5D\xc6q\x10\xdb\xed\xe2\x85JWw\x13\xa1\xb0\x1b\xbe\x8a,C\x99\xd2K\xf3\xb2\x82\x99\x8e\xd4\x8e\xa2\xf2b\x15\xb4\x89\xbf\x8ao@\xab\xb9\xad\xd6\xcc\xa5\x84R\x1e\xb4\n\xe0\xec\xa9\x1d,X\xd3o\x8a\xd8\xa7Z\xe7\x82\xcc6\x04\vT\x1d\xd3\xd9\x94sw\b\xa5\x12\xb1\xa4\x0e\x00\x7fm6\x9b\x1cD$\xfd\xccF\xae\xc9\xde\t\x03\xcd\xed\x89\xc6\xe4\x12\xa8Q%\xe2\x8a\x96\xd3\x86\xe3\xb0\xbc\x06u\x15\xabO-+\x0fR\xfdO\xee\xd8\x19i\xf5\xf7\xbe\x19\xe1\xd0\x11\xe1\xc0I\xe8\x89KZ\x82\x04'}, {0x20, '\x00{aU<7*g\xa0W\x110\xba\'\xd8\xad\xe4\x87\x0f\xbd\x0f\x1d\xfd\xbf]8\x0e\x1d\t\x12\xa2L\xb6i\x03\r\bYK8\xc9c\x99S\xc9\xed\x8b|\xc8r\n\x80\x04!\x80j\x9f\xb6s\xed1\x96\xc5\x16\x0f|hw\xd7z<\xe3\xaa\aKMP\xf8\xc7\xea\xcf\x90\xad\xbf\xc1:\x96\xa1\x8a\xb7)m\x9e\xc81\x85qL\x06\x81\x85\x1d\xd2\xc7\xe9\xe8V\xc4\x88I\xdb\xdd\xb1\x98yC\v\x9d\x1e\xad\xcbQA\x83\xd2e\xfekH\xe2\x86\x01;+\xea,a\x94\xce\xb0hcP,'}]}, 0x3c1) bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="1e0000000001000008000000fcffffff40010000", @ANYRES32=r4, @ANYBLOB="144000"/20, @ANYRES32=r7, @ANYRES32=r8, @ANYBLOB="03000000030000000100"/28], 0x50) r9 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r9, 0x3ba0, &(0x7f0000000380)={0x48}) ioctl$sock_inet_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000080)={'veth1_to_batadv\x00', {0x2, 0x0, @loopback}}) mount(&(0x7f00000000c0)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000000)='./cgroup\x00', &(0x7f0000000080)='affs\x00', 0x8008, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) 6.335745708s ago: executing program 1 (id=42): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = inotify_init1(0x0) inotify_add_watch(r1, &(0x7f0000000000)='.\x00', 0x2000775) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) write$binfmt_elf64(r2, &(0x7f0000000980)=ANY=[@ANYBLOB="7f454c4600000006010000000000000003003e000000000003000000000000004000000000000000980100000000000002000000000038000200000002000000000000600300000008000000000000000d00000000000000ed08000000000000f0ffffffffffffff0000000000000000080000000000000003000000cff5ffff800300000000000001000000000000000500000000000000ff"], 0x5b0) connect$tipc(r2, &(0x7f0000000240)=@name={0x1e, 0x2, 0x0, {{0x0, 0x3}}}, 0x10) close(r2) execveat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0, 0x0, 0x0) syz_usb_connect(0x2, 0x9a2, &(0x7f0000000280)=ANY=[@ANYBLOB="12010000d0241710d8050a81b892000000010902900902000000000904"], 0x0) r3 = open_tree(0xffffffffffffff9c, 0x0, 0x89901) sendmsg$nl_route(r2, &(0x7f00000004c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x40004e0}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)=@getrule={0x14, 0x22, 0x10, 0x0, 0x25dfdbff, {}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4001}, 0x0) io_uring_register$IORING_REGISTER_PBUF_RING(r3, 0x16, 0x0, 0x1) ioctl$EVIOCGMASK(r3, 0x80104592, &(0x7f0000000040)={0x12, 0xe2, &(0x7f0000000100)="456baf349a23dd36881592283b329fb6752ae48b6597f51afbc435092e8cf0dfd75bcb3686d87b3dbdac324dc680b7607e6e1e971ad6f7ef27e3a80de37a15425037c6f818a788b79bdf7918c9f956965648cf5074abaf25090c4b07fec30b5ed01e1212baf0539ccb582cad1c0a563183835ebb64c41f228b47eadaa0005e4076b2c18ca50d3ed43ceebd03d6ebd4ebf2fcd854e5cd8263102d8a032ad56ccc6c5871e76766a749f7f15879e744b9ac164befba6e7bed3d4a0164e9635c227bb61a44a754b620b65f1ad35d7d816034f233043ed397c69b971471a8998817c37e75"}) r4 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r4, 0x0, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=@newlink={0x20, 0x10, 0x20, 0x0, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x8, 0x1220}}, 0x20}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, 0x0) writev(0xffffffffffffffff, &(0x7f00000003c0)=[{&(0x7f0000000080)="3a4ca99c3c149272a1c1a9973ccb7ba6ae971dcfbec2c42de7604983f2c26ad2e240", 0x22}, {0x0}], 0x2) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=@newlink={0x58, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x4000}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GENEVE_ID={0x8, 0x1, 0x1}, @IFLA_GENEVE_TTL={0x5, 0x3, 0x5}]}}}, @IFLA_IFNAME={0x14, 0x3, 'geneve1\x00'}]}, 0x58}}, 0x2000000) syz_usb_connect(0x0, 0x24, &(0x7f0000000100)=ANY=[@ANYBLOB="03010000ac0fce405d0502904431000000010902120001000080040904"], 0x0) 6.312798412s ago: executing program 2 (id=43): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xb, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='sys_enter\x00', r0}, 0x10) syz_clone3(&(0x7f0000003c80)={0x88001000, 0x0, 0x0, 0x0, {0x1a}, 0x0, 0x0, 0x0, 0x0}, 0x58) r1 = syz_open_dev$I2C(&(0x7f0000000100), 0x0, 0x0) preadv(r1, &(0x7f0000000180)=[{&(0x7f0000002200)=""/4096, 0x1000}, {0x0}], 0x2, 0x8, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000030000000000000100000000000000000700000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x4, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) truncate(&(0x7f0000000180)='./file0\x00', 0x8fff5) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r3, &(0x7f0000002d80)={0x0, 0x0, &(0x7f0000002d40)={&(0x7f0000000000)=ANY=[@ANYBLOB="300000000203010200000000000000000000000009000200000000470200000008000340000000000800010001"], 0x30}}, 0x0) sendmsg$NFQNL_MSG_CONFIG(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2000000002030500000000000000000000000000090002000000000b02"], 0x20}}, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000012c0)={r2, 0x0, 0x30, 0xe1515f8735398fb, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f00000002c0)=[0x8fff5], 0x0, 0x0, 0x1f, 0x1}}, 0x3c) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) bpf$MAP_CREATE(0x0, 0x0, 0x48) socketpair$unix(0x1, 0x1, 0x0, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1600000000000000040000000100000000000000", @ANYRES32=0x1, @ANYBLOB='\x00@\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='kfree_skb\x00', r5}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0f00000004000000040000001200000000000000", @ANYRES32, @ANYBLOB="000000006c2a782376506159a4bb90c2c434d12e00"/36, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) socket$can_j1939(0x1d, 0x2, 0x7) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x18, &(0x7f0000000440)=0x1, 0x4) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan1\x00'}) ioctl$F2FS_IOC_RESERVE_COMPRESS_BLOCKS(r6, 0x8008f513, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) set_mempolicy_home_node(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x2, 0x0) 6.050351772s ago: executing program 3 (id=45): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xb, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='sys_enter\x00', r0}, 0x10) syz_clone3(&(0x7f0000003c80)={0x88001000, 0x0, 0x0, 0x0, {0x1a}, 0x0, 0x0, 0x0, 0x0}, 0x58) r1 = syz_open_dev$I2C(&(0x7f0000000100), 0x0, 0x0) preadv(r1, &(0x7f0000000180)=[{&(0x7f0000002200)=""/4096, 0x1000}, {0x0}], 0x2, 0x8, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000030000000000000100000000000000000700000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x4, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) truncate(&(0x7f0000000180)='./file0\x00', 0x8fff5) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r3, &(0x7f0000002d80)={0x0, 0x0, &(0x7f0000002d40)={&(0x7f0000000000)=ANY=[@ANYBLOB="300000000203010200000000000000000000000009000200000000470200000008000340000000000800010001"], 0x30}}, 0x0) sendmsg$NFQNL_MSG_CONFIG(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2000000002030500000000000000000000000000090002000000000b02"], 0x20}}, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000012c0)={r2, 0x0, 0x30, 0xe1515f8735398fb, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f00000002c0)=[0x8fff5], 0x0, 0x0, 0x1f, 0x1}}, 0x3c) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) bpf$MAP_CREATE(0x0, 0x0, 0x48) socketpair$unix(0x1, 0x1, 0x0, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1600000000000000040000000100000000000000", @ANYRES32=0x1, @ANYBLOB='\x00@\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='kfree_skb\x00', r5}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0f00000004000000040000001200000000000000", @ANYRES32, @ANYBLOB="000000006c2a782376506159a4bb90c2c434d12e00"/36, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) socket$can_j1939(0x1d, 0x2, 0x7) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x18, &(0x7f0000000440)=0x1, 0x4) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan1\x00'}) ioctl$F2FS_IOC_RESERVE_COMPRESS_BLOCKS(r6, 0x8008f513, 0x0) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$net_dm(&(0x7f0000000300), r7) set_mempolicy_home_node(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x2, 0x0) 5.377106422s ago: executing program 2 (id=46): pipe2$9p(&(0x7f0000000000), 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x0, 0x0, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) sendmsg$IPVS_CMD_GET_SERVICE(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={0x0}, 0x1, 0x0, 0x0, 0x4000014}, 0x0) socket$can_raw(0x1d, 0x3, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = syz_open_dev$usbfs(0x0, 0x74, 0x101301) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r2, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='./file0/../file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x891018, 0x0) mount$bind(0x0, &(0x7f0000000140)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f00000002c0)='./file0/file0\x00', &(0x7f0000000240)='./file0/../file0\x00', 0x0, 0x101091, 0x0) 5.358902331s ago: executing program 3 (id=47): socket$inet6(0xa, 0x1, 0x8010000000000084) ioctl$VIDIOC_S_SELECTION(0xffffffffffffffff, 0xc040565f, &(0x7f0000000940)={0xa, 0x100, 0x2, {0x8000, 0x1000, 0x4, 0x870}}) write$binfmt_elf64(0xffffffffffffffff, 0x0, 0x0) socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000400)=0x6) getpid() r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000040), 0x309a00, 0x0) ioctl$KVM_GET_TSC_KHZ(r0, 0xaea3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = timerfd_create(0x1, 0x80800) timerfd_settime(r1, 0x1, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000080)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000480)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$inet_sctp(0x2, 0x5, 0x84) r5 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r5, 0x84, 0x1f, &(0x7f00000002c0)={0x0, @in={{0x2, 0x4e21, @multicast1}}}, 0x90) r6 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$EBT_SO_SET_COUNTERS(r6, 0x0, 0x81, &(0x7f0000000040)={'broute\x00', 0x0, 0x0, 0x0, [], 0x0, 0x0}, 0x78) 3.916039132s ago: executing program 32 (id=47): socket$inet6(0xa, 0x1, 0x8010000000000084) ioctl$VIDIOC_S_SELECTION(0xffffffffffffffff, 0xc040565f, &(0x7f0000000940)={0xa, 0x100, 0x2, {0x8000, 0x1000, 0x4, 0x870}}) write$binfmt_elf64(0xffffffffffffffff, 0x0, 0x0) socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000400)=0x6) getpid() r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000040), 0x309a00, 0x0) ioctl$KVM_GET_TSC_KHZ(r0, 0xaea3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = timerfd_create(0x1, 0x80800) timerfd_settime(r1, 0x1, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000080)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000480)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$inet_sctp(0x2, 0x5, 0x84) r5 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r5, 0x84, 0x1f, &(0x7f00000002c0)={0x0, @in={{0x2, 0x4e21, @multicast1}}}, 0x90) r6 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$EBT_SO_SET_COUNTERS(r6, 0x0, 0x81, &(0x7f0000000040)={'broute\x00', 0x0, 0x0, 0x0, [], 0x0, 0x0}, 0x78) 3.886288618s ago: executing program 2 (id=50): r0 = syz_io_uring_setup(0xd2, &(0x7f0000000480), &(0x7f0000000040)=0x0, &(0x7f0000000080)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0, 0x0, 0x0, 0x0, {0xffff}}) io_uring_enter(r0, 0x47ba, 0x0, 0x0, 0x0, 0x0) 3.814708773s ago: executing program 4 (id=51): socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r2, 0x0, 0x1, 0x0) vmsplice(r2, &(0x7f00000005c0)=[{&(0x7f0000000180)="04", 0x1}], 0x1, 0x6) ioctl$sock_inet_udp_SIOCINQ(r2, 0x541b, 0x0) write(r0, 0x0, 0x0) r3 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000300)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x38e38e38e38e5f9, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep1(r3, 0x82, 0xc, &(0x7f00000007c0)={[{0x8, 0x4e00, "00eb13301b974cbd"}]}) sendmsg$L2TP_CMD_TUNNEL_GET(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40040}, 0x20040000) r4 = socket(0x10, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="a000000010003b0e2a1a86eb2636037f00000000", @ANYRES32=r5, @ANYBLOB="0200000000008000800012000800010076746936740002"], 0xa0}}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f00000000c0)={'erspan0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newtaction={0x4c, 0x30, 0xcac229faa96ee7df, 0x0, 0x0, {}, [{0x38, 0x1, [@m_ife={0x34, 0x1, 0x0, 0x0, {{0x8}, {0xc, 0x2, 0x0, 0x1, [@TCA_IFE_TYPE={0x6, 0x5, 0x1}]}, {0x4}, {0xc, 0x4, {0x1}}, {0xc}}}]}]}, 0x4c}}, 0x0) sendmsg$nl_route(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="480000001c00110c0000001400000f0007000000", @ANYRES32=r7, @ANYBLOB="800202000a0002"], 0x48}}, 0x0) r8 = socket(0x10, 0x6, 0x0) sendmmsg(r8, &(0x7f0000000000), 0x400000000000235, 0x0) r9 = syz_open_dev$vcsa(&(0x7f0000000380), 0x7b95b611, 0x802) write(r9, &(0x7f0000000140)="f5", 0x5) 3.600935654s ago: executing program 2 (id=52): gettid() timer_create(0x2, &(0x7f0000000080)={0x0, 0x21, 0x800000000004, @thr={&(0x7f0000000200)="0f06c2867275c645583e22b575661ad5e92b7b3d6ef0f039a90c040839173ef90ba5d892d5532617eb1b733aa83290e07e08067d6af720ce3a34769d3c674301911f92ed705698ee48db4be8edc98d2c85b0f86c9a9a862f3465a88504d18a950b631f187eae6d3a0e3a66d09eaaeb4c089b808a0bbc48794a5e625d549834c8a671bf43fa92100a61ac3a966e59c792d3f36191cfc3282c43c19692f6c79cf1af3a146c2febe0cefcea048053fbd1f36b300fbaee4f2b9404", &(0x7f0000000140)="1b76157ce10d739a4bb8440a3a4c11ea6aef8acf67689a35d5fb90701d6a8ef16589a9142523a5dbcb57c3b0d28b63620bf3924ce21dcec2ed"}}, &(0x7f0000000040)=0x0) socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = dup(r2) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x3) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x4b, 0x0, 0x0) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) ioctl$KVM_RUN(r4, 0xae80, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x4000, 0x0) r5 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r5, 0xc0285700, &(0x7f0000000100)={0x1, "ff0f000000000000f5a72d866b0000000000f0ffdefe00"}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x0, &(0x7f0000000380)}) r6 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r6, 0xc0184800, &(0x7f0000000100)={0x3, r6}) timer_settime(r0, 0x1, &(0x7f00000000c0)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) ptrace(0x10, 0x0) r8 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r8, 0x5423, &(0x7f0000000080)=0x7) ioctl$TIOCSLCKTRMIOS(r8, 0x5457, &(0x7f00000001c0)) ptrace$cont(0x9, 0x0, 0x100, 0x7f) ioctl$DMA_BUF_SET_NAME_A(r7, 0x40086203, &(0x7f00000001c0)='\x02\x00\x00\x00\x05\x00\x00\x00-control\x00') openat$tun(0xffffffffffffff9c, 0x0, 0x1231e0, 0x0) r9 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_int(r9, 0x0, 0x18, 0x0, 0x0) ioctl$DMA_BUF_IOCTL_SYNC(r7, 0x40086200, &(0x7f0000000540)=0x1) 3.21726461s ago: executing program 33 (id=52): gettid() timer_create(0x2, &(0x7f0000000080)={0x0, 0x21, 0x800000000004, @thr={&(0x7f0000000200)="0f06c2867275c645583e22b575661ad5e92b7b3d6ef0f039a90c040839173ef90ba5d892d5532617eb1b733aa83290e07e08067d6af720ce3a34769d3c674301911f92ed705698ee48db4be8edc98d2c85b0f86c9a9a862f3465a88504d18a950b631f187eae6d3a0e3a66d09eaaeb4c089b808a0bbc48794a5e625d549834c8a671bf43fa92100a61ac3a966e59c792d3f36191cfc3282c43c19692f6c79cf1af3a146c2febe0cefcea048053fbd1f36b300fbaee4f2b9404", &(0x7f0000000140)="1b76157ce10d739a4bb8440a3a4c11ea6aef8acf67689a35d5fb90701d6a8ef16589a9142523a5dbcb57c3b0d28b63620bf3924ce21dcec2ed"}}, &(0x7f0000000040)=0x0) socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = dup(r2) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x3) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x4b, 0x0, 0x0) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) ioctl$KVM_RUN(r4, 0xae80, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x4000, 0x0) r5 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r5, 0xc0285700, &(0x7f0000000100)={0x1, "ff0f000000000000f5a72d866b0000000000f0ffdefe00"}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x0, &(0x7f0000000380)}) r6 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r6, 0xc0184800, &(0x7f0000000100)={0x3, r6}) timer_settime(r0, 0x1, &(0x7f00000000c0)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) ptrace(0x10, 0x0) r8 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r8, 0x5423, &(0x7f0000000080)=0x7) ioctl$TIOCSLCKTRMIOS(r8, 0x5457, &(0x7f00000001c0)) ptrace$cont(0x9, 0x0, 0x100, 0x7f) ioctl$DMA_BUF_SET_NAME_A(r7, 0x40086203, &(0x7f00000001c0)='\x02\x00\x00\x00\x05\x00\x00\x00-control\x00') openat$tun(0xffffffffffffff9c, 0x0, 0x1231e0, 0x0) r9 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_int(r9, 0x0, 0x18, 0x0, 0x0) ioctl$DMA_BUF_IOCTL_SYNC(r7, 0x40086200, &(0x7f0000000540)=0x1) 3.113063536s ago: executing program 1 (id=54): r0 = socket$nl_generic(0x10, 0x3, 0x10) timerfd_settime(0xffffffffffffffff, 0x0, &(0x7f0000000040)={{0x77359400}, {0x0, 0x989680}}, 0x0) r1 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) r2 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000300), 0x2842, 0x0) io_setup(0x2, &(0x7f00000002c0)=0x0) io_submit(r3, 0x1, &(0x7f0000002600)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0x4, r2, 0x0}]) bind$bt_hci(r1, &(0x7f0000000000)={0x27}, 0x74) sendmmsg$unix(r1, &(0x7f0000000b00)=[{{&(0x7f00000000c0)=@file={0x0, './file0\x00'}, 0x6e, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = openat$audio1(0xffffffffffffff9c, &(0x7f00000000c0), 0x20000, 0x0) ioctl$SOUND_MIXER_READ_STEREODEVS(r5, 0x80044dfb, &(0x7f0000000100)) r6 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), r4) sendmsg$NLBL_MGMT_C_ADDDEF(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)={0x1c, r6, 0x1, 0x0, 0xfffffffe, {}, [@NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8801}, 0x0) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) fanotify_mark(0xffffffffffffffff, 0x200, 0x8000001, 0xffffffffffffffff, &(0x7f0000000240)='./file0\x00') sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000180)={0x5c, r7, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_FRAME={0x40, 0x33, @action={{{}, {0x2}, @broadcast, @device_a, @initial, {0x0, 0x400}}, @sp_mp_confirm={0xf, 0x2, {0x1, @random=0x9, {}, @void, @val={0x2d, 0x1a, {0x2, 0x1, 0x4, 0x0, {0x10, 0x1acc, 0x0, 0xab, 0x0, 0x0, 0x1, 0x0, 0x1}, 0x6, 0x6, 0x5}}}}}}]}, 0x5c}, 0x1, 0x0, 0x0, 0xc0}, 0x0) 2.8928788s ago: executing program 0 (id=55): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) ioctl$TUNATTACHFILTER(r0, 0x401054d5, &(0x7f0000000480)={0x1, &(0x7f00000004c0)=[{0x6, 0x7}]}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$BTRFS_IOC_SYNC(r0, 0x9408, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) r2 = socket$can_raw(0x1d, 0x3, 0x1) read(r2, &(0x7f0000000180)=""/223, 0xdf) openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) (async) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) (async) ioctl$TUNATTACHFILTER(r0, 0x401054d5, &(0x7f0000000480)={0x1, &(0x7f00000004c0)=[{0x6, 0x7}]}) (async) openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) (async) ioctl$BTRFS_IOC_SYNC(r0, 0x9408, 0x0) (async) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) (async) socket$can_raw(0x1d, 0x3, 0x1) (async) read(r2, &(0x7f0000000180)=""/223, 0xdf) (async) 2.276839623s ago: executing program 0 (id=56): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xb, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='sys_enter\x00', r0}, 0x10) syz_clone3(&(0x7f0000003c80)={0x88001000, 0x0, 0x0, 0x0, {0x1a}, 0x0, 0x0, 0x0, 0x0}, 0x58) r1 = syz_open_dev$I2C(&(0x7f0000000100), 0x0, 0x0) preadv(r1, &(0x7f0000000180)=[{&(0x7f0000002200)=""/4096, 0x1000}, {0x0}], 0x2, 0x8, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000030000000000000100000000000000000700000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x4, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) truncate(&(0x7f0000000180)='./file0\x00', 0x8fff5) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r3, &(0x7f0000002d80)={0x0, 0x0, &(0x7f0000002d40)={&(0x7f0000000000)=ANY=[@ANYBLOB="300000000203010200000000000000000000000009000200000000470200000008000340000000000800010001"], 0x30}}, 0x0) sendmsg$NFQNL_MSG_CONFIG(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2000000002030500000000000000000000000000090002000000000b02"], 0x20}}, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000012c0)={r2, 0x0, 0x30, 0xe1515f8735398fb, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f00000002c0)=[0x8fff5], 0x0, 0x0, 0x1f, 0x1}}, 0x3c) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) bpf$MAP_CREATE(0x0, 0x0, 0x48) socketpair$unix(0x1, 0x1, 0x0, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1600000000000000040000000100000000000000", @ANYRES32=0x1, @ANYBLOB='\x00@\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='kfree_skb\x00', r5}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0f00000004000000040000001200000000000000", @ANYRES32, @ANYBLOB="000000006c2a782376506159a4bb90c2c434d12e00"/36, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) socket$can_j1939(0x1d, 0x2, 0x7) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x18, &(0x7f0000000440)=0x1, 0x4) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan1\x00'}) ioctl$F2FS_IOC_RESERVE_COMPRESS_BLOCKS(r6, 0x8008f513, 0x0) set_mempolicy_home_node(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x2, 0x0) 2.250100731s ago: executing program 1 (id=57): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) gettid() timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r3 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r3, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10) r4 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r4, 0x10f, 0x87, &(0x7f0000000180)={0x42, 0x0, 0x2}, 0x10) r5 = open(&(0x7f0000000180)='./bus\x00', 0x0, 0x0) ioctl$EXT4_IOC_GET_ES_CACHE(r5, 0xc020660b, 0x0) write$P9_RLERRORu(r5, &(0x7f0000000040)={0xd, 0x7, 0x2, {{}, 0x5}}, 0xd) sendmsg$tipc(r4, &(0x7f0000000540)={&(0x7f00000001c0)=@name={0x1e, 0x2, 0x3, {{0x42}}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x20004809}, 0x10) 2.041627941s ago: executing program 0 (id=58): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) gettid() timer_create(0x0, 0x0, &(0x7f0000bbdffc)) r3 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r3, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10) r4 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r4, 0x10f, 0x87, &(0x7f0000000180)={0x42, 0xfff5, 0x2}, 0x10) sendmsg$tipc(r4, &(0x7f0000000540)={&(0x7f00000001c0)=@name={0x1e, 0x2, 0x3, {{0x42}}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x20004809}, 0x10) 916.953057ms ago: executing program 1 (id=59): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0) rmdir(&(0x7f0000000240)='./file0\x00') getdents64(r4, 0x0, 0x0) r5 = socket(0x400000000010, 0x3, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r8 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NLBL_CALIPSO_C_REMOVE(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x24, r8, 0x800, 0x70bd25, 0x25dfdbfe, {}, [@NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x3}]}, 0x24}, 0x1, 0x0, 0x0, 0x81}, 0x40004) sendmsg$nl_route_sched(r5, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newtfilter={0x3c, 0x2c, 0xd27, 0x70bd28, 0x0, {0x0, 0x0, 0x0, r7, {0xf000, 0xffff}, {}, {0x7}}, [@filter_kind_options=@f_route={{0xa}, {0xc, 0x2, [@TCA_ROUTE4_CLASSID={0x8, 0x1, {0x4}}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x80}, 0x20000800) 916.502662ms ago: executing program 4 (id=60): mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff017f000e0800395032303030"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18, 0x0, 0x0, {0x1}}, 0x18) write$FUSE_DIRENTPLUS(r2, &(0x7f00000003c0)=ANY=[@ANYBLOB="b0"], 0xb0) write$FUSE_GETXATTR(r2, &(0x7f00000000c0)={0x18}, 0x18) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000002280)={{'fd', 0x3d, r3}, 0x2c, {'rootmode', 0x3d, 0x8000}}) read$FUSE(r3, &(0x7f0000002300)={0x2020, 0x0, 0x0}, 0x206e) write$FUSE_LK(r2, &(0x7f0000000340)={0x28, 0x0, r4, {{0x2, 0x0, 0x1}}}, 0x28) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@cache_fscache}]}}) r5 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x0) write$FUSE_IOCTL(r5, &(0x7f0000000180)={0x20, 0x0, 0x0, {0x6, 0x0, 0x8e4, 0x3}}, 0x20) 845.170619ms ago: executing program 0 (id=61): r0 = syz_io_uring_setup(0xd2, &(0x7f0000000480), &(0x7f0000000040)=0x0, &(0x7f0000000080)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0, 0x0, 0x0, 0x0, {0xffff}}) io_uring_enter(r0, 0x47ba, 0x0, 0x0, 0x0, 0x0) 589.707353ms ago: executing program 0 (id=62): setresuid(0xee01, 0x0, 0x0) ftruncate(0xffffffffffffffff, 0xfe) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) r0 = socket$unix(0x1, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x810, r0, 0x9a6dc000) r1 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000040)={0x0, 0x0}, &(0x7f00000000c0)=0xc) mount$bpf(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f00000003c0), 0x46, &(0x7f0000000480)={[{@uid={'uid', 0x3d, r2}}]}) newfstatat(0xffffffffffffff9c, &(0x7f00000004c0)='.\x00', &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) keyctl$get_persistent(0x16, r3, 0x0) stat(&(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000000340)=0x0) mount$bpf(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000001c0), 0x2004008, &(0x7f0000000380)={[{@mode={'mode', 0x3d, 0x48}}, {@mode={'mode', 0x3d, 0x58b}}, {@mode={'mode', 0x3d, 0xb949}}, {@uid={'uid', 0x3d, r2}}, {@uid={'uid', 0x3d, r3}}, {@mode={'mode', 0x3d, 0x1d}}, {@gid={'gid', 0x3d, r4}}, {@mode={'mode', 0x3d, 0x85}}, {@mode={'mode', 0x3d, 0x5}}], [{@audit}, {@fowner_eq={'fowner', 0x3d, r5}}]}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r8 = socket$inet6(0xa, 0x3, 0x7) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r8, 0x29, 0x20, &(0x7f0000000100)={@loopback={0x0, 0x7ffffffff000}, 0x800, 0x0, 0x1, 0x0, 0x0, 0xffff}, 0x20) connect$unix(r6, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'bond0\x00', 0x0}) sendto$packet(0xffffffffffffffff, &(0x7f00000002c0)="05031600d3fc140000004788031c09102c28", 0xfce0, 0x4, &(0x7f0000000140)={0x11, 0x0, r9, 0x1, 0x0, 0x6, @multicast}, 0x14) getpeername$packet(0xffffffffffffffff, &(0x7f0000001600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000bc0)=0x14) sendmmsg$inet6(r8, &(0x7f00000021c0)=[{{&(0x7f0000000580)={0xa, 0x4e24, 0x9, @local, 0x6f}, 0x1c, &(0x7f0000000740)=[{&(0x7f00000005c0)="d7", 0x1}, {&(0x7f0000000600)="17716b8026ade2ce691fb4bae9f8a4eeaebbe7cc98e504dac4a71706054bdef81c4918732afbedeb9bcc0150037a46c879a03fe9791ea13bd61cb503e33602ae48f9720a9365916d0d663244d2428eb6eaa3f07a1b16d88001e0cc84f303a280070c62e436d0ef8b82ea66ef56e6", 0x6e}, {&(0x7f0000000680)="3c07e999ca9e700ff4841e2360354762eb1ba97aa49eed65963b6399c3ec8d5e22e8d5491e58e85a487ecc83fe6ba808de177a99ec15103599e928488aa63a26aaf66b957be715a5416a1ac47bbf68fe28ff86c7f9a9ce18a8fb3e0c71c18f5dcab0bb77c0777bc2143af8bdce3edefe9eb166c52c8981892df472048ac02f565a7b1b9d231688ffba99863d83157caae2c2e7e849b60cfb130bd5f3cca8a0842f6a903d94ad75e7eb", 0xa9}], 0x3, &(0x7f0000000780)=[@hopopts={{0xe0, 0x29, 0x36, {0x67, 0x18, '\x00', [@enc_lim={0x4, 0x1, 0xe}, @generic={0x0, 0x8e, "11d311e8d948b0535d5982fa2a0a3d2a31a7ee167581f35473e3bc35c084af5224ab65f9638a54c4274564176ff72a4f83006f8557cd19390f200bbc69501d703206bdf13887d34cca4cc8970b251d44037c805df90c46d86fd02bba9031d996fae9f58ed5e3479379f97a682646f3f32ca7e11aeed1159453caad975df435a0e49235926d20034bd00e01805693"}, @calipso={0x7, 0x18, {0x2, 0x4, 0x9, 0x7, [0x9, 0x57]}}, @ra={0x5, 0x2, 0x5}, @pad1, @jumbo={0xc2, 0x4, 0x9}, @pad1, @enc_lim={0x4, 0x1, 0x2}, @pad1, @pad1]}}}, @hoplimit_2292={{0x14, 0x29, 0x8, 0x1}}, @tclass={{0x14, 0x29, 0x43, 0x3}}], 0x110}}, {{&(0x7f00000008c0)={0xa, 0x4e24, 0xff, @mcast1, 0x7}, 0x1c, &(0x7f0000000b40)=[{&(0x7f0000000900)="9052404c3f4e7ad3a90f0cf23a6d9b55e7b4403714b55003507ad2dd9e24d0bbcf9cf02b411c1446208e44f5ace5646815855ce3c0d81e8752ddae6ccffa4002cd1fb3e50a095a10f3e2554a0c4da3d8f61bd34a5947c8cdaa08", 0x5a}, {&(0x7f0000000980)="08051eb3111c1ce674601b743040156beab5869a35e45d01abdcd453d49ccdc70f5f84c65c2e7c9a2299cf29fcdc53072d68d92a4ba08e4f86fbe3497ad8", 0x3e}, {&(0x7f00000009c0)="1f11eae46e48bdba", 0x8}, {&(0x7f0000000a00)="e21846cd5018640197841a62241ef00b693b26f5f5deffd084c40e8640ce8c800c8a6ed0f40ed3dce9cf3eca761188af838ebd3e3445ea6c4c1e032eba19e9173b8db3385caa227cba76ea3069b65dc89469894decfe5d6723aa1cb0adccc8f8595487f2ee1703828fd90746e91c927ca54d1963fbfcf820976fb7f78b3013178a728facdd03ce5a8002b657cb9d9d74150048806c15bbc391a0f907d6611e42eb63ebefe477ebe48f079b2ec1155624ff", 0xb1}, {&(0x7f0000000ac0)="b4ed270860ab10df06bdafb8d103cb9ac6ed235beb7c6c", 0x17}, {&(0x7f0000000b00)="8ee21d289e2593d73314ac09f645dbf38d27b12e1fc8f21a9daef7", 0x1b}], 0x6, &(0x7f0000000c00)=[@dstopts_2292={{0x128, 0x29, 0x4, {0xff, 0x21, '\x00', [@generic={0x5, 0xf7, "0588b31050a770c03c62ab0049606de4ddcd1487b429c102240336a135d5349d410b9aacf23cd5b603bd001afc44d301456c804d1564f0dcb5296125e76ad7d3c4cc9f5a581b287c0826647a39de99f3001d1d8b2f7d6b063b4b9550dfc2604cac7d9e8abaa898a36a0aa3807b38dcdf4d7a2c3a533443c8134e63dfe52946b5b22b680165bda02095d1f0446042d9a7d1e9865bedd548c36391c67ba5cbabc4575d7ffa48deb5d7470cb72942fa49c766b02a8c50580561929bf53f083e24db46e9a895bf6530f2f2b6b20ad5dc4897bfc5300a0d298bafa2ef6a81bdc04c17be88680f3b1c2613d48489fbedb8708fc9ce6463456ad5"}, @hao={0xc9, 0x10, @mcast1}]}}}, @hoplimit_2292={{0x14}}, @pktinfo={{0x24, 0x29, 0x32, {@mcast2}}}], 0x168}}, {{0x0, 0x0, &(0x7f0000000e00)=[{&(0x7f0000000d80)="c9b35a7d89cb522d30fbe469d76e0eb9bc3b6bba919fece86effc6d9a37e131d84e15872509c67054f77124144e3e3913a4f330a65224ac883a3d2f373b8104575641d4ce1b0bab80c3d1196b2d38c63fa5177477bafd19c8e9524e3bf985fe8a35000fcea658d49", 0x68}], 0x1, &(0x7f0000000e40)=[@hopopts_2292={{0xd8, 0x29, 0x36, {0x11, 0x17, '\x00', [@enc_lim={0x4, 0x1, 0x18}, @generic={0x80, 0xad, "60ddd68b0370722963fbfbbf3be9f8604296f4c014dcc2dc473e24340a149165a46677137cf385a9ad8d5481b2f9c197182c222f063b1164b34956edb3aa2a6c4b008f4bf64422989c1a5b7ff239db3ec2026f89250583501d6f93419a45be7f586a97a03082a531cec10de391f4d976c4fd0bd03b43449727c3fea0d454a809de0f79580a00388c5cf11cc5338c249fd7e9dd936dbc12190c08fc02e6ecd1e874b0d67adf7595b0f5f86b702d"}, @padn={0x1, 0x9, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}]}}}, @rthdrdstopts={{0x38, 0x29, 0x37, {0x3b, 0x3, '\x00', [@ra={0x5, 0x2, 0xafea}, @hao={0xc9, 0x10, @private2={0xfc, 0x2, '\x00', 0x1}}, @ra={0x5, 0x2, 0x5}, @padn={0x1, 0x3, [0x0, 0x0, 0x0]}]}}}, @hoplimit_2292={{0x14, 0x29, 0x8, 0x7}}, @dstopts_2292={{0x168, 0x29, 0x4, {0x0, 0x29, '\x00', [@calipso={0x7, 0x10, {0x1, 0x2, 0x4, 0xffff, [0x8]}}, @calipso={0x7, 0x10, {0x3, 0x2, 0x4, 0x8, [0x2]}}, @calipso={0x7, 0x10, {0x0, 0x2, 0xd4, 0x0, [0xbc4]}}, @pad1, @calipso={0x7, 0x18, {0x3, 0x4, 0x2, 0x9, [0x3, 0x8]}}, @generic={0xf4, 0x4d, "cb578a316bf9b185481a463214ec04141de916a6e41a6a5b00ac22fb98048602195fee836de43828657c4a6adc3f0846be1ac12c80dbaa93615c03229933fe520ae7b466faa974891a79b1aaa9"}, @generic={0x1, 0x62, "182ac33bffe08646f04c70b6957145a3a9d9382ce18d86fed3a442783e7f3bdd25e06bcff4027465157795b66db4d0cca302eefcddc1f94c3fdd65377c5e3e561671509592753f2cdcf43d519fd682c96fc769038a17b5756fb87c55000000000000"}, @ra, @calipso={0x7, 0x40, {0x0, 0xe, 0x8, 0x8, [0xffffffffff000000, 0x4, 0x6, 0x8, 0x100, 0x4, 0xc24]}}]}}}], 0x290}}, {{&(0x7f0000001100)={0xa, 0x4e21, 0x3ff, @private2={0xfc, 0x2, '\x00', 0x1}, 0x4}, 0x1c, &(0x7f0000001240)=[{&(0x7f0000001140)="54450fe4123121e3c14de1eaa9ed86190d7d6657bfe70bf3f9461df7da73ca464a2c774c99865ffb41e46fbdd297b5b12a8938e7e20efce4314c2a743aedf0775f5cbedf072d5bd5167cf130e9cbee85b0c6de977ed3bf222e0f73251f964b26f9f7a8c02227ccbc52fdac0fdeafbd8256ae2cddd8a4693e8c3b92c13df013113b2ab1fb7d964ef448bb75b0d4683e8ea3ce41b157a8cc5163c13c3962eb9906565ea8d384b05b9851783aee2f54e54e2d4b9c7aca285551349be8574ab5efa9666239bdcaed179c1ba2bde69b6331cc3bfa30248176590f7b7131da165d20355358", 0xe2}], 0x1, &(0x7f00000012c0)=[@hoplimit={{0x14, 0x29, 0x34, 0x6}}, @hoplimit_2292={{0x14, 0x29, 0x8, 0x7fffffff}}, @tclass={{0x14, 0x29, 0x43, 0xfffffff7}}, @pktinfo={{0x24, 0x29, 0x32, {@local}}}, @hoplimit_2292={{0x14, 0x29, 0x8, 0x1}}, @rthdr={{0x88, 0x29, 0x39, {0x2e, 0xe, 0x1, 0x7, 0x0, [@remote, @dev={0xfe, 0x80, '\x00', 0xa}, @remote, @private1, @ipv4={'\x00', '\xff\xff', @broadcast}, @local, @empty]}}}, @rthdr_2292={{0x38, 0x29, 0x39, {0x2f, 0x4, 0x2, 0x0, 0x0, [@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @ipv4={'\x00', '\xff\xff', @local}]}}}, @pktinfo={{0x24, 0x29, 0x32, {@dev={0xfe, 0x80, '\x00', 0x17}, r9}}}], 0x170}}, {{&(0x7f0000001440)={0xa, 0x4e23, 0x5, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x8}, 0x1c, &(0x7f00000015c0)=[{&(0x7f0000001480)="9794aae549d9cb24961d727c67f08120a8ba931d12e2c1849242e3465c6336c64ea63e3fea306dd112bd379157a5c4f0b81176e78deeb08d0862c27e7072f6", 0x3f}, {&(0x7f00000014c0)="47ee466bf67a5880c13ba206f3f583cbde34ad721c477ed8d727b091c7c6c4f4e4798e8ab0c0a39754380eaf94316c9e69687b3f990b13a180dceb962360c13028338278e38cfd4e6fc9392f445b730bfbaa2c82089ae499ef0f8ae302f6b4fb3076605d846ce7f9e91d2c9643e40f342211483476e6b7728edbd19bb1ce06b2315b5577b8a792d7f5ff78b60a5e787fbf293821456a6110a00626ca6b802c1fa6ee9e78d6bee5e33c5900776254ca5e8144faad6e0e3ca5b87030e41d0619011ce45f0be722655d4c02db49e575434a", 0xd0}], 0x2, &(0x7f0000001680)=[@hoplimit_2292={{0x14, 0x29, 0x8, 0x89f}}, @tclass={{0x14, 0x29, 0x43, 0x1}}, @dontfrag={{0x14, 0x29, 0x3e, 0x3}}, @pktinfo={{0x24, 0x29, 0x32, {@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, r10}}}, @rthdrdstopts={{0x38, 0x29, 0x37, {0x2, 0x3, '\x00', [@padn={0x1, 0x6, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @hao={0xc9, 0x10, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}]}}}, @hopopts_2292={{0x208, 0x29, 0x36, {0x16, 0x3d, '\x00', [@generic={0xa, 0xa8, "83b3a4a079f8d1b46670956632ad3070cb355458bc9c81588f0e5a3ddd55c56c29ca22655476d92f87637920194152d7656f813b841ca38af02d4d0a55ef4411b8fba7d96b46c223aa9d3b0ffc6349cbfcd160ec7bd06dfc19aa0dcb88d0c375a8e87f900fe0c6b85689090598ee682c261d9426454023a4166ee6b449f0da538e9977c2069a3c876eaa533b6f8fc23fdaed18b1bb87fb81d7a3f5c42b09459794eb48573ccd48b0"}, @ra={0x5, 0x2, 0x7}, @generic={0x40, 0xef, "2872ed11cdc02e6c675324c32032736a20b50c8a2155f05db5ac6f0105c18745a5f0e509206ed666ba522c8011444606cc49afaf207ea87a0c77ca4af2efd6260dee9120eeb83f91bca50b2b484c00d6e759cd1488135aa699deefe017da66c79e0ff450a10238456a680222da194874adf83f1cfc0bcae5b788eb993c19f56346211dcdcf6f9b71c113120776753107e781bf9d9f6a51d3c71c39688d6f9f2f3ba69c3928ecd09ffa9e030b80f51ee76fd76494eaa7d69b724452937ea3f0d110eeecd901ec92963cd8f5604dd982b94b1e4f42f0ee4f2d8ac962187c79b8bb966dfecf07d8a75688ab5d07835c95"}, @padn={0x1, 0x5, [0x0, 0x0, 0x0, 0x0, 0x0]}, @calipso={0x7, 0x18, {0x3, 0x4, 0x0, 0x4, [0x45b01b91, 0x3]}}, @pad1, @calipso={0x7, 0x18, {0x1, 0x4, 0x5, 0x6, [0xb0, 0x33f]}}, @hao={0xc9, 0x10, @mcast1}]}}}, @flowinfo={{0x14, 0x29, 0xb, 0x46f9}}], 0x2c8}}, {{0x0, 0x0, &(0x7f0000001b40)=[{&(0x7f0000001980)}, {&(0x7f00000019c0)="6007e82e0fba08a10dd8587aa694d7651a7198332fdd9ff99146a9321553739f23fb44939cb2d1179ed6b1f27c8e2add5900f4a0bedcfca323d726d714ffc8a787768fba3df77ac6c6db", 0x4a}, {&(0x7f0000001a40)="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", 0xfd}], 0x3}}, {{0x0, 0x0, &(0x7f0000001fc0)=[{&(0x7f0000001b80)="d0253edabb9ff5d23ea6e828ed07f1a028a03d25c3285ccb730db0b529e87a8a4f85fdaf23ce5b5b2b6c2be7b86fce0680d8f2b934d8a0036912e9af72adb13e977f1ae1ca9cadb324f2354c8eee3660eb1d6520d5958ceff880aabeeccdd9dca603d9ec079e19a5af78ab52799117fa217a7a34", 0x74}, {&(0x7f0000001c00)="368f2690fdb312e59bda2b69b247c1fbafb3aab73a94e667eadae7af040170fa249ed48e33bda86f96ea59c8477029aa8ece45241d4ac550bd5d24c879cf8dc90e827223627bb6feab2f659ba2964fc514961c06e605dbe47c0d1c640966228c403cad5e81839ae736752883dc131a9c89693eb6fbdffa6667877cb1d2ac067770be51b62c5f546714a97ec5b550a9c66ed139610c16a3a6d65dfe35f8e35dadcd2bb8", 0xa3}, {&(0x7f0000001cc0)}, {&(0x7f0000001d00)="395bcf1bc4bdbaa274a6220429c90b75cee321b0803b6d310c1de8b91196c8cefa2097ceb5d7fb77294027e877193427ce52bc125b906289515af066172128457d22284eebe4638d75645e91628fc391c6cd144da0c9ea95f18056b458e002fc9b39", 0x62}, {&(0x7f0000001d80)="bfb0b4fc647ff43944b22599bfea3b7a445e034bc21fb00daeb167822c4ca91e2f5568c6e64b2b05b2cdb3d237f6148c4ebde9d1934f170609402efe685ea77d0b7eec94ff301861a7b9c580f8058602d3be1d38530efd7cdfc7df521032436d4ee86b6e22918537cd66f1bbccaa5e58171f7f950a0fc39006ea8c60f973974533dc8d8d9d70d7604e663a9073a869", 0x8f}, {&(0x7f0000001e40)="700f304516ae1237b6619a6cfad21cd10b2c3d323efdc7dfaec1e25cbf27d11e9f0ee1fa6acb0789e47d9d981352af08b878bf1527cf811812b4f9e1c4811835727bd0287f2f468e054d0d2c78b15062a0303983dd6e09c150e5bb47eb7747afd79a2519877add191316c47c", 0x6c}, {&(0x7f0000001ec0)="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", 0xfc}], 0x7, &(0x7f0000002040)=[@rthdrdstopts={{0x130, 0x29, 0x37, {0x11, 0x22, '\x00', [@generic={0xf2, 0x89, "2e3233ead678a4ecf5e1a36c5ca7b8efa8ec5bedce8a0bd613529c60c5fc453ab249dde6e726cfc7898cbfad363806a23994b2470207c7bc6f5542caf9c4c89e3be5edb7313ea8aa1aa09b56942c4307d53e72921a3628dc6cdc53dc252592a600ce34e8a09b51944b4ccf14ab346409d1396c8b275b00fb5936884298a06a45eb768114d12e63ca0e"}, @padn={0x1, 0x9, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @generic={0x4b, 0x61, "9248247a8fa6b21711767a35569b13932ab973e1550509112105caca2f4a10f6843ed6b92282a31887f944ef91ee886ce150bfcf0ad4c6b578f657ae647a064cc3e37125353ae2461bdbb79737f1f38b525a8c7e86707dd92ca66b4acb8cbcb34b"}, @enc_lim={0x4, 0x1, 0x79}, @padn={0x1, 0x3, [0x0, 0x0, 0x0]}, @calipso={0x7, 0x10, {0x2, 0x2, 0x3, 0x3, [0x3]}}]}}}, @dontfrag={{0x14, 0x29, 0x3e, 0xb8c}}, @tclass={{0x14}}, @flowinfo={{0x14, 0x29, 0xb, 0x2}}], 0x178}}], 0x7, 0x40) r11 = syz_open_dev$radio(&(0x7f0000000000), 0xffffffffffffffff, 0x2) ioctl$VIDIOC_S_EXT_CTRLS(r11, 0xc0205649, &(0x7f0000000080)={0x0, 0x1, 0x7, 0xffffffffffffffff, 0x0, &(0x7f00000000c0)={0x98f90a, 0x78, '\x00', @string=&(0x7f0000000040)=0x4}}) 556.373676ms ago: executing program 4 (id=63): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x441, 0x0) write$binfmt_aout(r0, &(0x7f00000000c0)=ANY=[], 0xff2e) ioctl$TCXONC(r0, 0x540a, 0x2) ioctl$TCXONC(r0, 0x540a, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0x3) 220.961981ms ago: executing program 0 (id=64): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000e40)=ANY=[@ANYBLOB="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"/3576], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x2e) r1 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$sock_linger(r1, 0x1, 0x3c, &(0x7f0000000100)={0x3ffd, 0xe}, 0x38) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x5}, 0x1c) setsockopt$inet6_IPV6_HOPOPTS(r1, 0x29, 0x36, &(0x7f0000001440)=ANY=[@ANYBLOB="0017"], 0xc0) sendmmsg$inet6(r1, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4000000) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000005000000020000000010"], 0x48) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000a80)={'dummy0\x00', 0x0}) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000180)=ANY=[@ANYBLOB="4c0000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000240012800b0001006d616373656300001400028005000d000000000005000c000000000008000500", @ANYRES32=r4], 0x4c}}, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000010007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kfree\x00', r6}, 0x10) setsockopt$inet6_IPV6_RTHDR(r1, 0x29, 0x39, 0x0, 0x0) r7 = openat$binfmt(0xffffffffffffff9c, 0x0, 0x41, 0x1ff) write$binfmt_elf64(r7, &(0x7f0000001c40)=ANY=[@ANYBLOB="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"/1199], 0x4ac) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='rcu_utilization\x00', r0, 0x0, 0x2}, 0x18) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="0100000042000000060000000800000000000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000000000000000000000000000000000000000000000000002a3c078744e4d12365f12180c1e2305db37b3c7d314ba9618ed8eab82665610f992c19adf49e29dc873c2f528ffd33c4b9b835d7a88e8be3afca21a14f02634420f88271b6fed17ac97bcf01b54166dfd28bcc234e7a3b932b613943bedb810e5e319dbe832ae7e6e7dbdb08eb5647a2494d54268ddcbaf95d"], 0x48) r9 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="0c00000004000000040000000180000000000000", @ANYRES32=r8, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000000000000000000000000000000000000000000000000006a4f0b885783d2496000a44867fee9dda97dc55a852736156735a4098099a9acb649e98f6560568da2166d0e8be09a327249090fd02521b58112f2dbd9c09505f2963665c99126"], 0x50) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x8000, r9}, 0x38) 0s ago: executing program 4 (id=65): r0 = socket$nl_generic(0x10, 0x3, 0x10) timerfd_settime(0xffffffffffffffff, 0x0, &(0x7f0000000040)={{0x77359400}, {0x0, 0x989680}}, 0x0) r1 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) r2 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000300), 0x2842, 0x0) io_setup(0x2, &(0x7f00000002c0)=0x0) io_submit(r3, 0x1, &(0x7f0000002600)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0x4, r2, 0x0}]) bind$bt_hci(r1, &(0x7f0000000000)={0x27}, 0x74) sendmmsg$unix(r1, &(0x7f0000000b00)=[{{&(0x7f00000000c0)=@file={0x0, './file0\x00'}, 0x6e, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = openat$audio1(0xffffffffffffff9c, &(0x7f00000000c0), 0x20000, 0x0) ioctl$SOUND_MIXER_READ_STEREODEVS(r5, 0x80044dfb, &(0x7f0000000100)) r6 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), r4) sendmsg$NLBL_MGMT_C_ADDDEF(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)={0x1c, r6, 0x1, 0x0, 0xfffffffe, {}, [@NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8801}, 0x0) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) fanotify_mark(0xffffffffffffffff, 0x200, 0x8000001, 0xffffffffffffffff, &(0x7f0000000240)='./file0\x00') sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000180)={0x5c, r7, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_FRAME={0x40, 0x33, @action={{{}, {0x2}, @broadcast, @device_a, @initial, {0x0, 0x400}}, @sp_mp_confirm={0xf, 0x2, {0x1, @random=0x9, {}, @void, @val={0x2d, 0x1a, {0x2, 0x1, 0x4, 0x0, {0x10, 0x1acc, 0x0, 0xab, 0x0, 0x0, 0x1, 0x0, 0x1}, 0x6, 0x6, 0x5}}}}}}]}, 0x5c}, 0x1, 0x0, 0x0, 0xc0}, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.85' (ED25519) to the list of known hosts. [ 82.132732][ T5816] cgroup: Unknown subsys name 'net' [ 82.295478][ T5816] cgroup: Unknown subsys name 'cpuset' [ 82.304040][ T5816] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 83.882951][ T5816] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 86.541336][ T5832] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 86.570559][ T5845] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 86.579978][ T5848] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 86.596831][ T5836] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 86.602406][ T5848] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 86.604579][ T5836] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 86.612940][ T5848] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 86.633145][ T5836] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 86.640447][ T5836] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 86.652005][ T5848] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 86.660115][ T5836] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 86.667811][ T5848] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 86.680122][ T5845] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 86.689236][ T5845] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 86.693225][ T5849] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 86.698699][ T5845] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 86.703599][ T5836] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 86.711470][ T5845] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 86.720086][ T5836] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 86.732508][ T5849] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 86.740111][ T5836] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 86.745710][ T55] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 86.753837][ T5836] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 86.766543][ T55] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 86.774010][ T55] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 87.493747][ T5835] chnl_net:caif_netlink_parms(): no params data found [ 87.512762][ T5826] chnl_net:caif_netlink_parms(): no params data found [ 87.618904][ T5837] chnl_net:caif_netlink_parms(): no params data found [ 87.672887][ T5827] chnl_net:caif_netlink_parms(): no params data found [ 87.846385][ T5834] chnl_net:caif_netlink_parms(): no params data found [ 87.890986][ T5826] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.901091][ T5826] bridge0: port 1(bridge_slave_0) entered disabled state [ 87.908756][ T5826] bridge_slave_0: entered allmulticast mode [ 87.916761][ T5826] bridge_slave_0: entered promiscuous mode [ 87.968006][ T5826] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.977782][ T5826] bridge0: port 2(bridge_slave_1) entered disabled state [ 87.985492][ T5826] bridge_slave_1: entered allmulticast mode [ 87.992727][ T5826] bridge_slave_1: entered promiscuous mode [ 88.019423][ T5827] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.026905][ T5827] bridge0: port 1(bridge_slave_0) entered disabled state [ 88.034236][ T5827] bridge_slave_0: entered allmulticast mode [ 88.042716][ T5827] bridge_slave_0: entered promiscuous mode [ 88.050554][ T5835] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.057803][ T5835] bridge0: port 1(bridge_slave_0) entered disabled state [ 88.065716][ T5835] bridge_slave_0: entered allmulticast mode [ 88.073223][ T5835] bridge_slave_0: entered promiscuous mode [ 88.120950][ T5837] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.128603][ T5837] bridge0: port 1(bridge_slave_0) entered disabled state [ 88.135913][ T5837] bridge_slave_0: entered allmulticast mode [ 88.143447][ T5837] bridge_slave_0: entered promiscuous mode [ 88.152895][ T5827] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.160121][ T5827] bridge0: port 2(bridge_slave_1) entered disabled state [ 88.167466][ T5827] bridge_slave_1: entered allmulticast mode [ 88.175150][ T5827] bridge_slave_1: entered promiscuous mode [ 88.182262][ T5835] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.189415][ T5835] bridge0: port 2(bridge_slave_1) entered disabled state [ 88.197358][ T5835] bridge_slave_1: entered allmulticast mode [ 88.204618][ T5835] bridge_slave_1: entered promiscuous mode [ 88.240074][ T5837] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.249793][ T5837] bridge0: port 2(bridge_slave_1) entered disabled state [ 88.257060][ T5837] bridge_slave_1: entered allmulticast mode [ 88.264972][ T5837] bridge_slave_1: entered promiscuous mode [ 88.309503][ T5826] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 88.355351][ T5827] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 88.380050][ T5826] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 88.419253][ T5827] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 88.431106][ T5835] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 88.445229][ T5835] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 88.466530][ T5834] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.474403][ T5834] bridge0: port 1(bridge_slave_0) entered disabled state [ 88.481554][ T5834] bridge_slave_0: entered allmulticast mode [ 88.489306][ T5834] bridge_slave_0: entered promiscuous mode [ 88.501333][ T5837] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 88.514133][ T5837] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 88.557576][ T5834] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.564954][ T5834] bridge0: port 2(bridge_slave_1) entered disabled state [ 88.572851][ T5834] bridge_slave_1: entered allmulticast mode [ 88.579888][ T5834] bridge_slave_1: entered promiscuous mode [ 88.627687][ T5826] team0: Port device team_slave_0 added [ 88.637613][ T5826] team0: Port device team_slave_1 added [ 88.675060][ T5827] team0: Port device team_slave_0 added [ 88.684575][ T5835] team0: Port device team_slave_0 added [ 88.716824][ T5834] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 88.728863][ T5837] team0: Port device team_slave_0 added [ 88.738132][ T5837] team0: Port device team_slave_1 added [ 88.744257][ T55] Bluetooth: hci1: command tx timeout [ 88.746967][ T5827] team0: Port device team_slave_1 added [ 88.758960][ T5835] team0: Port device team_slave_1 added [ 88.778856][ T5834] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 88.821883][ T5838] Bluetooth: hci0: command tx timeout [ 88.827529][ T5838] Bluetooth: hci3: command tx timeout [ 88.831829][ T5836] Bluetooth: hci4: command tx timeout [ 88.838527][ T55] Bluetooth: hci2: command tx timeout [ 88.859058][ T5826] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 88.866406][ T5826] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 88.892392][ T5826] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 88.906204][ T5826] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 88.913220][ T5826] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 88.940250][ T5826] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 88.974238][ T5827] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 88.981224][ T5827] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 89.007904][ T5827] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 89.036461][ T5827] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 89.043461][ T5827] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 89.069861][ T5827] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 89.099881][ T5837] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 89.107120][ T5837] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 89.133126][ T5837] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 89.145816][ T5837] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 89.152822][ T5837] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 89.178763][ T5837] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 89.190802][ T5835] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 89.198231][ T5835] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 89.224634][ T5835] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 89.259015][ T5834] team0: Port device team_slave_0 added [ 89.271321][ T5835] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 89.278354][ T5835] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 89.304459][ T5835] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 89.330448][ T5834] team0: Port device team_slave_1 added [ 89.363517][ T5834] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 89.370512][ T5834] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 89.396545][ T5834] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 89.436713][ T5826] hsr_slave_0: entered promiscuous mode [ 89.443339][ T5826] hsr_slave_1: entered promiscuous mode [ 89.465478][ T5834] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 89.472545][ T5834] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 89.498745][ T5834] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 89.539368][ T5827] hsr_slave_0: entered promiscuous mode [ 89.546265][ T5827] hsr_slave_1: entered promiscuous mode [ 89.552666][ T5827] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 89.560379][ T5827] Cannot create hsr debugfs directory [ 89.630105][ T5837] hsr_slave_0: entered promiscuous mode [ 89.636610][ T5837] hsr_slave_1: entered promiscuous mode [ 89.643041][ T5837] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 89.650614][ T5837] Cannot create hsr debugfs directory [ 89.676013][ T5835] hsr_slave_0: entered promiscuous mode [ 89.683218][ T5835] hsr_slave_1: entered promiscuous mode [ 89.689381][ T5835] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 89.697114][ T5835] Cannot create hsr debugfs directory [ 89.792960][ T5834] hsr_slave_0: entered promiscuous mode [ 89.799416][ T5834] hsr_slave_1: entered promiscuous mode [ 89.806800][ T5834] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 89.814479][ T5834] Cannot create hsr debugfs directory [ 90.298077][ T5826] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 90.318468][ T5826] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 90.333209][ T5826] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 90.353408][ T5826] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 90.406810][ T5835] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 90.420385][ T5835] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 90.450629][ T5835] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 90.468819][ T5835] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 90.532070][ T5837] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 90.543345][ T5837] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 90.553867][ T5837] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 90.588723][ T5837] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 90.666801][ T5834] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 90.709285][ T5834] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 90.721013][ T5834] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 90.749903][ T5826] 8021q: adding VLAN 0 to HW filter on device bond0 [ 90.762906][ T5834] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 90.822339][ T55] Bluetooth: hci1: command tx timeout [ 90.878137][ T5826] 8021q: adding VLAN 0 to HW filter on device team0 [ 90.892740][ T3032] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.900032][ T3032] bridge0: port 1(bridge_slave_0) entered forwarding state [ 90.903480][ T55] Bluetooth: hci3: command tx timeout [ 90.910820][ T5836] Bluetooth: hci0: command tx timeout [ 90.913342][ T5844] Bluetooth: hci4: command tx timeout [ 90.920106][ T5827] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 90.924329][ T5838] Bluetooth: hci2: command tx timeout [ 90.939944][ T5827] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 90.960142][ T5827] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 90.974046][ T5827] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 90.992878][ T1341] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.000009][ T1341] bridge0: port 2(bridge_slave_1) entered forwarding state [ 91.100169][ T5835] 8021q: adding VLAN 0 to HW filter on device bond0 [ 91.127665][ T5826] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 91.177049][ T5835] 8021q: adding VLAN 0 to HW filter on device team0 [ 91.234565][ T53] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.241765][ T53] bridge0: port 1(bridge_slave_0) entered forwarding state [ 91.270326][ T5837] 8021q: adding VLAN 0 to HW filter on device bond0 [ 91.290102][ T1341] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.297332][ T1341] bridge0: port 2(bridge_slave_1) entered forwarding state [ 91.358081][ T5837] 8021q: adding VLAN 0 to HW filter on device team0 [ 91.413112][ T5826] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 91.448319][ T53] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.455486][ T53] bridge0: port 1(bridge_slave_0) entered forwarding state [ 91.496964][ T1137] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.504171][ T1137] bridge0: port 2(bridge_slave_1) entered forwarding state [ 91.519490][ T5835] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 91.553266][ T5834] 8021q: adding VLAN 0 to HW filter on device bond0 [ 91.592122][ T5827] 8021q: adding VLAN 0 to HW filter on device bond0 [ 91.689701][ T5834] 8021q: adding VLAN 0 to HW filter on device team0 [ 91.701118][ T5827] 8021q: adding VLAN 0 to HW filter on device team0 [ 91.737052][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.744267][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 91.785642][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.792969][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 91.804675][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.811958][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 91.822828][ T5826] veth0_vlan: entered promiscuous mode [ 91.857986][ T5826] veth1_vlan: entered promiscuous mode [ 91.869574][ T976] cfg80211: failed to load regulatory.db [ 91.898797][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.905981][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 92.019844][ T5835] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 92.174447][ T5826] veth0_macvtap: entered promiscuous mode [ 92.218307][ T5826] veth1_macvtap: entered promiscuous mode [ 92.276332][ T5826] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 92.334857][ T5826] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 92.367678][ T5826] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.392977][ T5826] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.407091][ T5826] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.427040][ T5826] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.481382][ T5837] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 92.608545][ T5827] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 92.680411][ T5834] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 92.709132][ T1137] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.723225][ T5837] veth0_vlan: entered promiscuous mode [ 92.729390][ T1137] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.814889][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.824504][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.829629][ T5835] veth0_vlan: entered promiscuous mode [ 92.841446][ T5837] veth1_vlan: entered promiscuous mode [ 92.885163][ T5835] veth1_vlan: entered promiscuous mode [ 92.903118][ T5838] Bluetooth: hci1: command tx timeout [ 92.935639][ T5827] veth0_vlan: entered promiscuous mode [ 92.970626][ T5834] veth0_vlan: entered promiscuous mode [ 92.982477][ T5838] Bluetooth: hci4: command tx timeout [ 92.986082][ T5844] Bluetooth: hci3: command tx timeout [ 92.987907][ T5838] Bluetooth: hci0: command tx timeout [ 92.993456][ T5844] Bluetooth: hci2: command tx timeout [ 93.029623][ T5834] veth1_vlan: entered promiscuous mode [ 93.060365][ T5827] veth1_vlan: entered promiscuous mode [ 93.087177][ T5837] veth0_macvtap: entered promiscuous mode [ 93.090788][ T5826] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 93.113945][ T5835] veth0_macvtap: entered promiscuous mode [ 93.129483][ T5834] veth0_macvtap: entered promiscuous mode [ 93.141380][ T5837] veth1_macvtap: entered promiscuous mode [ 93.164914][ T5834] veth1_macvtap: entered promiscuous mode [ 93.187813][ T5835] veth1_macvtap: entered promiscuous mode [ 93.264782][ T5827] veth0_macvtap: entered promiscuous mode [ 93.285777][ T5835] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 93.298547][ T5835] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 93.312881][ T5835] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 93.321617][ T5837] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 93.337388][ T5837] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 93.349271][ T5837] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 93.361108][ T5837] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 93.373565][ T5837] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 93.384105][ T5827] veth1_macvtap: entered promiscuous mode [ 93.395431][ T5834] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 93.414318][ T5834] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 93.424633][ T5834] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 93.439715][ T5834] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 93.450047][ T5834] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 93.461007][ T5834] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 93.477580][ T5834] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 93.506225][ T5837] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 93.524332][ T5837] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 93.541070][ T5837] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 93.561501][ T5835] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 93.582276][ T5835] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 93.598300][ T5835] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 93.609300][ T5835] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 93.627760][ T5835] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 93.667325][ T5837] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.679966][ T5837] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.692126][ T5837] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.701325][ T5837] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.714591][ T5834] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 93.725582][ T5834] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 93.735694][ T5834] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 93.746274][ T5834] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 93.758393][ T5834] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 93.768987][ T5834] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 93.786940][ T5834] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 93.844343][ T5922] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 93.973212][ T5835] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.011212][ T5835] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.093793][ T5835] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.154044][ T5835] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.377741][ T5827] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 94.392924][ T5827] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 94.407969][ T5827] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 94.418796][ T5827] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 94.435263][ T5827] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 94.446927][ T5827] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 94.460119][ T5827] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 94.473914][ T5827] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 94.503504][ T5827] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 94.519242][ T5827] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 94.529938][ T5827] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 94.539890][ T5827] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 94.550548][ T5827] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 94.560470][ T5827] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 94.570958][ T5827] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 94.580915][ T5827] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 94.591582][ T5827] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 94.611170][ T5827] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 94.658257][ T5834] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.679762][ T5834] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.692027][ T5834] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.700829][ T5834] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.796293][ T5827] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.806987][ T5827] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.817548][ T5827] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.827009][ T5827] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.981934][ T5838] Bluetooth: hci1: command tx timeout [ 95.062708][ T5838] Bluetooth: hci0: command tx timeout [ 95.073282][ T5838] Bluetooth: hci2: command tx timeout [ 95.073400][ T55] Bluetooth: hci3: command tx timeout [ 95.078908][ T5838] Bluetooth: hci4: command tx timeout [ 95.242257][ T1341] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.250139][ T1341] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.334999][ T1098] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.343438][ T1098] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.395411][ T1137] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.404061][ T1137] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.486000][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.493675][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.510604][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.518704][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.631089][ T1098] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.657854][ T1098] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.681287][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.709721][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.890718][ T1137] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.962132][ T5937] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 96.170417][ T1137] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 97.893324][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 98.194425][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 98.296823][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 99.048977][ T5964] FAULT_INJECTION: forcing a failure. [ 99.048977][ T5964] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 99.082999][ T5964] CPU: 0 UID: 0 PID: 5964 Comm: syz.2.13 Not tainted 6.14.0-syzkaller-11270-g08733088b566 #0 PREEMPT(full) [ 99.083029][ T5964] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 99.083048][ T5964] Call Trace: [ 99.083056][ T5964] [ 99.083065][ T5964] dump_stack_lvl+0x241/0x360 [ 99.083108][ T5964] ? __pfx_dump_stack_lvl+0x10/0x10 [ 99.083135][ T5964] ? __pfx__printk+0x10/0x10 [ 99.083173][ T5964] should_fail_ex+0x424/0x570 [ 99.083202][ T5964] _copy_to_user+0x31/0xb0 [ 99.083223][ T5964] simple_read_from_buffer+0xc4/0x170 [ 99.083255][ T5964] proc_fail_nth_read+0x1ef/0x260 [ 99.083278][ T5964] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 99.083301][ T5964] ? rw_verify_area+0x246/0x630 [ 99.083321][ T5964] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 99.083342][ T5964] vfs_read+0x21f/0xb90 [ 99.083374][ T5964] ? __pfx___mutex_lock+0x10/0x10 [ 99.083398][ T5964] ? __pfx_vfs_read+0x10/0x10 [ 99.083441][ T5964] ? __fget_files+0x2a/0x420 [ 99.083472][ T5964] ? __fget_files+0x39d/0x420 [ 99.083514][ T5964] ? __fget_files+0x2a/0x420 [ 99.083552][ T5964] ksys_read+0x19d/0x2d0 [ 99.083595][ T5964] ? __pfx_ksys_read+0x10/0x10 [ 99.083623][ T5964] ? do_syscall_64+0xb6/0x230 [ 99.083650][ T5964] do_syscall_64+0xf3/0x230 [ 99.083673][ T5964] ? clear_bhb_loop+0x45/0xa0 [ 99.083697][ T5964] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 99.083721][ T5964] RIP: 0033:0x7f3ceab8bb7c [ 99.083743][ T5964] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 99.083760][ T5964] RSP: 002b:00007f3ceb915030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 99.083781][ T5964] RAX: ffffffffffffffda RBX: 00007f3ceada5fa0 RCX: 00007f3ceab8bb7c [ 99.083796][ T5964] RDX: 000000000000000f RSI: 00007f3ceb9150a0 RDI: 000000000000001d [ 99.083820][ T5964] RBP: 00007f3ceb915090 R08: 0000000000000000 R09: 0000000000000000 [ 99.083832][ T5964] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 99.083843][ T5964] R13: 0000000000000000 R14: 00007f3ceada5fa0 R15: 00007ffe974bd868 [ 99.083893][ T5964] [ 100.187516][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 100.196467][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 100.205274][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 100.214314][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 100.222914][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 100.250965][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 100.852239][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 100.937105][ T5986] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 101.293346][ T5986] warning: `syz.0.18' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 101.691433][ T5987] tipc: Started in network mode [ 101.704907][ T5987] tipc: Node identity 4, cluster identity 4711 [ 101.787842][ T5995] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 101.834325][ T5883] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 101.915688][ T5987] tipc: Node number set to 4 [ 102.659990][ T5979] ALSA: mixer_oss: invalid OSS volume '' [ 102.689822][ T5883] usb 3-1: device descriptor read/64, error -71 [ 103.049545][ T6004] can0: slcan on ttyS3. [ 103.835641][ T5883] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 103.954666][ T5997] can0 (unregistered): slcan off ttyS3. [ 104.792372][ T5838] Bluetooth: hci3: Controller not accepting commands anymore: ncmd = 0 [ 104.803933][ T5838] Bluetooth: hci3: Injecting HCI hardware error event [ 104.813907][ T55] Bluetooth: hci3: hardware error 0x00 [ 106.878603][ T6032] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 108.329542][ T6039] syzkaller1: entered promiscuous mode [ 108.342736][ T6039] syzkaller1: entered allmulticast mode [ 108.509316][ T55] Bluetooth: hci3: Opcode 0x0c03 failed: -110 [ 111.844988][ T6077] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 112.984906][ T55] Bluetooth: hci0: Controller not accepting commands anymore: ncmd = 0 [ 112.995634][ T55] Bluetooth: hci0: Injecting HCI hardware error event [ 113.003676][ T55] Bluetooth: hci0: hardware error 0x00 [ 113.230849][ T6082] process 'syz.1.42' launched './file1' with NULL argv: empty string added [ 113.665244][ T6089] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 114.211737][ T5883] usb 2-1: new full-speed USB device number 2 using dummy_hcd [ 114.265348][ T5939] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 114.453435][ T5883] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 114.585238][ T5883] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 114.667510][ T5883] usb 2-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 114.730598][ T5883] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 114.828456][ T5939] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 114.933967][ T5883] usb 2-1: config 0 descriptor?? [ 114.989405][ T5883] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 115.012002][ T5883] dvb-usb: bulk message failed: -22 (3/0) [ 115.059854][ T5883] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 115.104490][ T5939] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 115.106759][ T5883] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 115.151863][ T5883] usb 2-1: media controller created [ 115.160204][ T5883] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 115.187181][ T5939] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 115.221797][ T55] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 115.228879][ T5883] dvb-usb: bulk message failed: -22 (6/0) [ 115.240106][ T5883] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 115.250471][ T6093] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 115.265868][ T5883] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.1/usb2/2-1/input/input5 [ 115.287819][ T5883] dvb-usb: schedule remote query interval to 150 msecs. [ 115.296841][ T6093] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 115.313067][ T5883] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 115.473072][ T5883] dvb-usb: bulk message failed: -22 (1/0) [ 115.489414][ T5883] dvb-usb: error while querying for an remote control event. [ 115.548388][ T5883] usb 2-1: USB disconnect, device number 2 [ 115.675988][ T5883] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 115.815304][ T5939] bridge_slave_1: left allmulticast mode [ 115.827178][ T5939] bridge_slave_1: left promiscuous mode [ 115.843084][ T5939] bridge0: port 2(bridge_slave_1) entered disabled state [ 115.880652][ T5939] bridge_slave_0: left allmulticast mode [ 115.901810][ T5939] bridge_slave_0: left promiscuous mode [ 115.911464][ T5939] bridge0: port 1(bridge_slave_0) entered disabled state [ 115.981774][ T10] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 116.138352][ T5838] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 116.147735][ T5838] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 116.156203][ T5838] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 116.163859][ T10] usb 5-1: too many configurations: 249, using maximum allowed: 8 [ 116.194765][ T5838] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 116.202936][ T5838] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 116.217144][ T10] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 116.253924][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 116.292931][ T10] usb 5-1: Product: syz [ 116.304935][ T10] usb 5-1: Manufacturer: syz [ 116.330015][ T10] usb 5-1: SerialNumber: syz [ 116.396393][ T10] usb 5-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 116.467696][ T5885] usb 5-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 116.591494][ T5838] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 116.601362][ T5838] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 116.611081][ T5838] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 116.619986][ T5838] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 116.631980][ T5838] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 116.727722][ T5939] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 116.741295][ T5939] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 116.752041][ T5939] bond0 (unregistering): Released all slaves [ 117.041173][ T6099] netlink: 8 bytes leftover after parsing attributes in process `syz.4.51'. [ 117.066962][ T6099] erspan0: vlans aren't supported yet for dev_uc|mc_add() [ 117.140564][ T10] usb 5-1: USB disconnect, device number 2 [ 117.539309][ T5939] hsr_slave_0: left promiscuous mode [ 117.545051][ T5885] ath9k_htc 5-1:1.0: ath9k_htc: Target is unresponsive [ 117.589072][ T5939] hsr_slave_1: left promiscuous mode [ 117.595056][ T5885] ath9k_htc: Failed to initialize the device [ 117.599548][ T5939] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 117.605144][ T10] usb 5-1: ath9k_htc: USB layer deinitialized [ 117.623228][ T5939] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 117.720440][ T5939] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 117.762998][ T5939] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 117.903796][ T5939] veth1_macvtap: left promiscuous mode [ 117.940008][ T5939] veth0_macvtap: left promiscuous mode [ 117.977549][ T5939] veth1_vlan: left promiscuous mode [ 118.264809][ T55] Bluetooth: hci3: command tx timeout [ 118.410925][ T5939] veth0_vlan: left promiscuous mode [ 118.745878][ T55] Bluetooth: hci4: command tx timeout [ 119.459678][ T5939] team0 (unregistering): Port device team_slave_1 removed [ 119.503978][ T5939] team0 (unregistering): Port device team_slave_0 removed [ 119.862625][ T5494] [ 119.865028][ T5494] ============================================ [ 119.871190][ T5494] WARNING: possible recursive locking detected [ 119.877335][ T5494] 6.14.0-syzkaller-11270-g08733088b566 #0 Not tainted [ 119.884089][ T5494] -------------------------------------------- [ 119.890231][ T5494] dhcpcd/5494 is trying to acquire lock: [ 119.895856][ T5494] ffff888079eecd30 (&dev->lock){+.+.}-{4:4}, at: lapbeth_device_event+0x766/0xa20 [ 119.905103][ T5494] [ 119.905103][ T5494] but task is already holding lock: [ 119.912488][ T5494] ffff88805b534d30 (&dev->lock){+.+.}-{4:4}, at: dev_change_flags+0x120/0x270 [ 119.921413][ T5494] [ 119.921413][ T5494] other info that might help us debug this: [ 119.929473][ T5494] Possible unsafe locking scenario: [ 119.929473][ T5494] [ 119.936931][ T5494] CPU0 [ 119.940216][ T5494] ---- [ 119.943492][ T5494] lock(&dev->lock); [ 119.947482][ T5494] lock(&dev->lock); [ 119.951469][ T5494] [ 119.951469][ T5494] *** DEADLOCK *** [ 119.951469][ T5494] [ 119.959611][ T5494] May be due to missing lock nesting notation [ 119.959611][ T5494] [ 119.967925][ T5494] 2 locks held by dhcpcd/5494: [ 119.972684][ T5494] #0: ffffffff900e59c8 (rtnl_mutex){+.+.}-{4:4}, at: devinet_ioctl+0x34e/0x1d80 [ 119.981844][ T5494] #1: ffff88805b534d30 (&dev->lock){+.+.}-{4:4}, at: dev_change_flags+0x120/0x270 [ 119.991176][ T5494] [ 119.991176][ T5494] stack backtrace: [ 119.997062][ T5494] CPU: 0 UID: 0 PID: 5494 Comm: dhcpcd Not tainted 6.14.0-syzkaller-11270-g08733088b566 #0 PREEMPT(full) [ 119.997082][ T5494] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 119.997092][ T5494] Call Trace: [ 119.997099][ T5494] [ 119.997107][ T5494] dump_stack_lvl+0x241/0x360 [ 119.997132][ T5494] ? __pfx_dump_stack_lvl+0x10/0x10 [ 119.997153][ T5494] ? __pfx__printk+0x10/0x10 [ 119.997178][ T5494] ? print_lock+0x171/0x1a0 [ 119.997197][ T5494] print_deadlock_bug+0x2be/0x2d0 [ 119.997216][ T5494] validate_chain+0x928/0x24e0 [ 119.997235][ T5494] ? stack_depot_save_flags+0x44/0x940 [ 119.997254][ T5494] ? stack_depot_save_flags+0x44/0x940 [ 119.997274][ T5494] ? look_up_lock_class+0x7b/0x170 [ 119.997292][ T5494] ? register_lock_class+0x54/0x330 [ 119.997318][ T5494] __lock_acquire+0xad5/0xd80 [ 119.997336][ T5494] lock_acquire+0x116/0x2f0 [ 119.997350][ T5494] ? lapbeth_device_event+0x766/0xa20 [ 119.997377][ T5494] __mutex_lock+0x1a5/0x10c0 [ 119.997395][ T5494] ? lapbeth_device_event+0x766/0xa20 [ 119.997420][ T5494] ? ref_tracker_alloc+0x316/0x4c0 [ 119.997440][ T5494] ? lapbeth_device_event+0x766/0xa20 [ 119.997461][ T5494] ? rcu_is_watching+0x15/0xb0 [ 119.997480][ T5494] ? __pfx___mutex_lock+0x10/0x10 [ 119.997502][ T5494] ? __raw_spin_lock_init+0x45/0x100 [ 119.997524][ T5494] lapbeth_device_event+0x766/0xa20 [ 119.997548][ T5494] notifier_call_chain+0x1a5/0x3f0 [ 119.997569][ T5494] __dev_notify_flags+0x209/0x410 [ 119.997587][ T5494] ? __pfx___dev_notify_flags+0x10/0x10 [ 119.997601][ T5494] ? __dev_change_flags+0x517/0x700 [ 119.997616][ T5494] ? __pfx___mutex_lock+0x10/0x10 [ 119.997633][ T5494] ? __pfx___dev_change_flags+0x10/0x10 [ 119.997649][ T5494] ? __pfx___mutex_lock+0x10/0x10 [ 119.997668][ T5494] netif_change_flags+0xf0/0x1a0 [ 119.997685][ T5494] dev_change_flags+0x146/0x270 [ 119.997710][ T5494] devinet_ioctl+0xea4/0x1d80 [ 119.997738][ T5494] ? __pfx_devinet_ioctl+0x10/0x10 [ 119.997761][ T5494] ? get_user_ifreq+0x1bb/0x200 [ 119.997781][ T5494] inet_ioctl+0x3d9/0x4f0 [ 119.997798][ T5494] ? __pfx_inet_ioctl+0x10/0x10 [ 119.997814][ T5494] ? lockdep_hardirqs_on+0x9d/0x150 [ 119.997838][ T5494] ? tomoyo_path_number_perm+0x215/0x790 [ 119.997866][ T5494] sock_do_ioctl+0x15a/0x490 [ 119.997889][ T5494] ? __pfx_sock_do_ioctl+0x10/0x10 [ 119.997912][ T5494] ? __asan_memset+0x23/0x50 [ 119.997929][ T5494] ? smack_file_ioctl+0x2a7/0x3b0 [ 119.997965][ T5494] sock_ioctl+0x644/0x900 [ 119.997984][ T5494] ? __pfx_sock_ioctl+0x10/0x10 [ 119.998002][ T5494] ? __sys_socket+0x209/0x3c0 [ 119.998027][ T5494] ? __pfx_sock_ioctl+0x10/0x10 [ 119.998045][ T5494] __se_sys_ioctl+0xf1/0x160 [ 119.998063][ T5494] do_syscall_64+0xf3/0x230 [ 119.998081][ T5494] ? clear_bhb_loop+0x45/0xa0 [ 119.998098][ T5494] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 119.998113][ T5494] RIP: 0033:0x7f9498fa8d49 [ 119.998128][ T5494] Code: 5c c3 48 8d 44 24 08 48 89 54 24 e0 48 89 44 24 c0 48 8d 44 24 d0 48 89 44 24 c8 b8 10 00 00 00 c7 44 24 b8 10 00 00 00 0f 05 <41> 89 c0 3d 00 f0 ff ff 76 10 48 8b 15 ae 60 0d 00 f7 d8 41 83 c8 [ 119.998141][ T5494] RSP: 002b:00007ffdfb364568 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 119.998157][ T5494] RAX: ffffffffffffffda RBX: 00007f9498eda6c0 RCX: 00007f9498fa8d49 [ 119.998173][ T5494] RDX: 00007ffdfb374758 RSI: 0000000000008914 RDI: 0000000000000012 [ 119.998183][ T5494] RBP: 00007ffdfb384918 R08: 00007ffdfb374718 R09: 00007ffdfb3746c8 [ 119.998194][ T5494] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 119.998203][ T5494] R13: 00007ffdfb374758 R14: 0000000000000028 R15: 0000000000008914 [ 119.998220][ T5494] SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 120.406874][ T55] Bluetooth: hci3: command tx timeout [ 120.823802][ T55] Bluetooth: hci4: command tx timeout [ 121.228507][ T5826] syz-executor (5826) used greatest stack depth: 18800 bytes left