last executing test programs: 3m43.97290579s ago: executing program 32 (id=666): openat$ttyS3(0xffffffffffffff9c, 0x0, 0x28000, 0x0) r0 = openat$nullb(0xffffffffffffff9c, 0x0, 0x1a5042, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000b, 0xa8011, r0, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f00000003c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x11, 0xb, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000009400000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94) r5 = dup(r1) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x26e1, 0x0) pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700) splice(r6, 0x0, r8, 0x0, 0x88000cc, 0x0) fcntl$setpipe(r7, 0x407, 0x100004) write$eventfd(r7, &(0x7f0000000240), 0xffffff14) write$UHID_INPUT(r5, &(0x7f0000001040)={0xf, {"a2e3ad21ed0d1bf91b4d090955f70e06d038e7ff7fc6e5539b0d3f0e8b089b3f390768090890e0878f0e1ac6e7049b3346959b669a240d5b67f3988f7ef319520100ffe8d178708c523c921b1b5b31070d07580936cd3b78130daa61d8e8040000005802b77f07227227b7ba67e0e78657a6f5c2a874e62a9ccdc0d31a0c9f318c0da1993bd160e233df4a62179c6f30e065cd5b91cd0ae193973735b36d5b1b63dd1c00305d3f46635eb016d5b1dda98e2d749be7bd1df1fb3b231fdcdb5075a9aaa1b469c3090000000000000075271b286329d169934288fd789aa37d6e98b224fd44b65b31334ffc55cc82cd3ac32ecdb08ced6f9081b4dd0d8b38f3cd4498bee800490841bdb114f6b76383709d8f5c55432a909fda039aec54a1236e80f6a8abadea7662496bddbb42be6bfb2f17959d1f416e56c71b1931870262f5e801119242ca026bfc821e7e7daf2451138e645bb80c617669314e2fbe70de98ec76a9e40dad47f36fd9f7d0d42a4b5f1185ccdcf16ff46295d8a0fa17713c5802630933a9a34af674f3f39fe23491237c08822dec110911e893d0a8c4f677747abc360934b82910ff85bfd995083bba2987a67399eac427d145d546a40b9f6ff14ac488ec130fb3850a27af9544ae15ffffffffffffffff1243513f000000000000000a3621c56cea8d20fa911a0c41db6ebe8cac64f17679141d54b34bbc9963ac4f4bb3309603f1d4ab966203861b5b15a841f2b575a8bd0d78248ebe4d9a80002695104f674c2431dca141fae269cab70e9a66f3c3a9a63e9639e1f59c0ede26c6b5d74b078a5e15c31634e5ae098ce9ee70771aaa18119a867e14ffd9f9db2a7869d85864056526f889af43a6056080572286522449df466c632b3570243f989cce7cd9f465e41e610c20d80421d653a5520000008213b704c7fb082ff27590678ef9f190bae97909507041d860420c5664b27921b14dc1db8892fd32d0ad7bc946813591ad8deff4b05f60cea0da7710ac0000000000008000bea37ce0d0d4aa202f928f28381aab144a5d429a04a6a2b83c7068ae949ed06e288e810bac9c76600025e19c907f8ea2e2010000008271a1f5f8528f227e79c1389dbdfffe492f21579d2c15b8c70cdb1c332d86d87341432750861ec2bc3451edca194b221cfec4603d276bbaa1dfa6d4fb8a48a76eafc9a9a0270e4c10d64cd5a62427264f2377fe763c43470833ac96c45f357cbbaba8f1b1fdcc7cbb61a7cdb9744ed7f9129aede2be21ccfdc4e9134f8684b3a4f354da9a795e96334e207dff70f1988037b2ed3aaf575c0b88d8f146684078416d59fdee5325928974d12dad99dac44c3f0008047096a44002bebc2420aed92fa9b6578b4779415d4ac01b75d5495c118045651cf41c2fc48b778efa5ea5677747430af4162b987b80c3e001cd34e5c92f76cc4c24eeb8bc4e9ac2aed9e53803ed0ca4ae3a9737d214060005ea6f1783e287b3bee96e3a726eafe2fdfaa78d1f48c13b64df07847754b8400daaa69bf5c8f4350aeae9ca1207e78283cd0b20ceb360c7e658828163e2d25c4aa348561f927e88f63aa70e73a5e69b3df3495903f06572e1e007fa55a2999f596d067312f5779e8dbfdcf3427138f3d444d2639a10477f9bec4b0bbb6e3c04be68981f392203dd0ee3ef478e16dacfc5e3e03cf7ab8e3902f1b0ff034ef655b253ca509383815b1b6fc6522d4e4fdc11a48cf42d48604675fde2b94cf00500a2690891abf8ab9c015073014d9e08d4338b8780bdecd436cf0541359bafffa45237f104b96210403b2de9efed496f423500c7872c827467cfa5c4e72730d56bd068ed211cf847535edecb7b373f78b095b68441a34cb51682a8ae4d24ad0465f3927f889b813076038e79a7962fb385a882e8020f06c4c2ba1dd5cac7c18876da865d258734dd73583df292892448039ef799cf0630becdcce04579b5561dc825ab829827945e020c1f67ee615feb6243378e0610060f02cca4e91b2f001edb3d78fb4b55668dda93aec92a5de203717aa49c2d284acfabe262fccfcbb2b75a2183c46eb65ca8104e1b4da7fbb77ab2fc043aead87c32ab875ee7c2e7b7019c982cd3b43eaeb1a5fb135c0c7dcee8fe6516a328032f88c042891824659e9e94265c803b35ee5f83a2b210520106b8a358b50ab7a1fa89af9c251fe5294b3d1802d5676d95f160ec97b1ad94872cb2044642c37b4a6cc6c04effc1672db7e4b68d787d9a7a508ae54b3cd7369dde50e8c77d95a3d361c040babb171607caac2a3559ad4f75465f49c0d0ae3716db6e00cb11db4a5fade2a57c10238e204a67737c3b42aae501b20f7694a00f16e2d0174035a2c22656dc29880acebdbe8ddbd75c2f998d8ac2dfad2ba3a504767b6b45a45957f24d758ed024b3849c11d412a2a03b4047497022d9c30e23ef4df5c89644f48bb536f7945b59d7bcddff754413d135273ea8e75f22f216c6b9990ae71806f2c00b4025c48b75c0f73cdb9a7b8fa367b50028067e7f16f4dd569d462f4f19eacdb3ed70eeebb4483f8fd777d443e8b40427db6fe29068c0ca3d2414442e8f3a154704b0e51bc664a137b26be719f4f7c9a5678a674dfc95df80b9ce375dd649c8c704e509bd88c8e63d8c7dd67071115c8982ba46af4d6adcc9f68a75b9397b035153faf46366e7205dd8d6f37525c1a0e94610dd94323f6c15d085197149bfd6655548cfd9c52c9711937f79abb1a124f1210465483cd3b2d78378cfb85ed82e7da0f6eb6d279f2ae455925d0f6f1ba571eba281f2a654fb39ddff3b484439ff158e7c5419e037f3e3ad038f2211f1033195563c7f93cd54b9094f226e783271e1e5a2a2c10712eab625d64931cd4ffe6738d97b9b5ef828ee9fb059fc01af0e79c1e14b1d25988c69a399567c1d93768f7971d31488b8658a20878b7c1dd7ba02fc42939dde3d4a3339a65d507dc59c51097b40517705da56e9ebf0afa53282bf86dbb58c548069ff6eb95aade7cc66d7bbef724779ca1f731b3346ff177050373d79ff7b3e7f9bc0c1b4b266a8878b90baaa039d3e3b63979ac3df6e6f4859afd50238c7547a39b60810938044ae185d2ba3e00a4e73676864ae090d81eaee5ee6cf1d0ab378dd4dd891e937c2ea5410e0513005000000000000003911fab964c271550027697b52160687461602f88df165d884b36ec2b6c25a2f33c715687e9d4afb96d6861aca47da73d6f3144345f48843dd014e5c5ad8fe995754bd9cf32fce1e31919c4b2082fb0a30b9deae84bed4b28045634073c9c58c89d9e99c81769177c6d594f88a4facfd4c735a20307c737afa2d60399473296b831dbd933d93994ba3064279b10ea0c5833f41f157ea2302993dbe433b1aa3a3766d5439020484f4113c4c859465c3b415c3432f81db8719539d5bf372aaaea1cc43a6c5cbe59758bfee2916580dac4b008e595f437491d87abed02cefcd9db53d94d02daee67918e5d6787463183b4b87c1050000002f7809959bc048850613d17ca51055f2f416a44fe180d2d50c312cca7cb14a2bdc331f57a9817139a206fc76957227ffff2de20a4b8e3737fbb42913777c06376f799eba367e21f94ca598705f5dcb767d6f0900d6b0f6095e53c4c4234d0c1fbe434f6ab8f43c0013ee93b83946ee7759e89d7bdd1a32d7b311711b757fe43c06d21a35810d8fe98b27faea8aa12bc8716eefc5c97c45ac33eeec964c5214bc3a9359bdea1cccab94f15e36319cb34ebcacedb82c2ed3de5a8a8f0011e8f74e82d7f96093530e76692839d7961939adfdeeeaff19d11efcafb6d546fef271e89d6cc2389e81ff58cefcce3fbf4625a7e7de40e42e07b34449e15e065cc7340002000000000000f288a4510de03dab19d26285eda89156d50dd385a60333ba5bbf5d77cd7007ad1519ad5470de3dd6d6080cafccf8a97406bb6b68a1f0c4549820a73c880f475f732ae00398e8bd1f4108b7807fb33b72685ec37a2d3f766413a60459516246e5a1d998a2017aef0948a68cf255315ab80dd349e891aef595dc4d470e8ac32a308e15fc37d06aeac289c0523f483e1ff7408c6087f1ab652f2ef91d4f2b01987b0f46da034e5c3f745a7ee8101a3934c54e24b48ec0275e2d0687dc746b0827cbf652f406c6b95f2722e58c05f752ce2126596e1cd7655b904801784c416b22f73d324678e2724f43f1fe687c7e8a60c28b82b6528341b648cdd56fed7cdcbb1575912d5ecd36dea3bca0b7427d8392c6289455e8f8d2ab2242729251ae033a9e02210e62df0546a74b333a1c48f95fd54acb5741259e8c5488efeee327415cc19451432c6f14c27693102a3cd84857cd6586fc5ca9a93eb0145fac0662ff86107f998a8ef7df8aa14046c55b03d3d47f88a8d60f7774a2ee08758897fb411a94b3c2fc5d5f0db42c0456ec015f08e5247d33ae2d35603ff8454c16f8342856935125102bb784ed7148b6ce431b63ee356b0c785f2f47b90e29389f22fc5b59a70efaea2bd40195af4486220d702e30bfc43c10ec23ea6283994a7dde4dcb61fea6b651fb1d62458d0741a12830052fcc460db043afe525629b40d7cee458e4cb5e930ed624806c43a006e39336d07c2b8081c128ad2706f48261f7897484c297a1a6613bc18f5a38d442768af38041efe03d152ef95ff569e76db2391f4509d7f339d92fdb4a89364949da398000000000000000d80a4fe654578376e599aff3565b1d531f30912b9945030b81ea9935fd46edb44a78f615255490a4b621501f2a9e4d24624c4dac9274118c67584f5d374755534d7f68f679c4ff516a9cc8036cbd65868fcb2bf1cb9aea4e05df72279fdb0d2b9e935c5af3cf474bed79dfc248c1f5aea4b8b32c5d295e57079d0fe662a46b7f71cd47744db86c50b704c971d90295c7b2c7439a2d78ccfa79b5fc2bff6bbf840262bf89394b3e0691953264d2700c838fa2c7b3425260f59554e502dcea39cb313b0000000000004ca7c12f45858d6284ca6270d6b2f0e58fded8a7b4a302a97bc641df07720ba2b26bbfcc807ca0abb1b44322269c21c5ec68cb068ea88067d905ea917bb03eefdaebdeabf2d0dce80997c915c8949de992587c2cb5fe36d7d3e5db21b094b8b77940b5f07722e47a08d367e5f84c96ec664b72934b99b3109af65d77e86abd6859cddf4bbae1f0930462df15fddbc48562ea3511a8065ef028cf12f14dcf6ebecd8d884836174faf1aa609e5f1ee1162dfa13bdc1fa7cfaadba85c72e9758f03a755d0be53f8d2a1dfb1c68cc164b0a0780d971a96ea2c4d4ca0398c2235980a9307b3d5bd3b01faffd0a5dbed2881a9700af561ac8c6b00000000000000f96f06817fb903729a7db6ff957697c9ede7885d94ffb0969be0daf60af93109eb1dee72e4363f51af62af6fb2a6df3bec89822a7a0b678058fa3fef86faec216eb6992162f8dcbf719c148cd2f9c55f4901203a9a8a2c3e90f3943dbc10360a1a49700d1dfbf66d69f6fbaf506c8bcce8bb0d872a02238926407a4eddd5d0fc5a752f90000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400", 0xf8d}}, 0x96d) 3m29.410440634s ago: executing program 33 (id=717): r0 = mmap$KVM_VCPU(&(0x7f0000ffb000/0x2000)=nil, 0x930, 0x1000002, 0x4018831, 0xffffffffffffffff, 0x0) syz_memcpy_off$KVM_EXIT_HYPERCALL(r0, 0x20, &(0x7f0000000180)="5e73663bf4082f7c6cbecbf09d6dd7be5a06dfd64563f329c16f799d1836bfc45a7badc8faed24bb77c848723a43602d1fe0d236c062e105ec77ffd00fb243c3111dda42112650cc", 0x0, 0xfe2a) 3m25.936408462s ago: executing program 34 (id=733): syz_ublk_setup_io_uring(0x20, &(0x7f0000000340)={0x0, 0x7fc8, 0x1000, 0x40002, 0x393}, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0xffffd000) syz_genetlink_get_family_id$l2tp(0x0, 0xffffffffffffffff) syz_ublk_add_dev(0xffffffffffffffff, r0, r1, r2, &(0x7f0000000400)={0x2e, 0x8, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000000c0)=@any_dev={0x3, 0x603, 0x0, 0x0, 0x1000, 0xb6a7, 0x0, 0x0, 0x28}}}, &(0x7f0000000180)=0x0) sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0x0) sendto$packet(0xffffffffffffffff, &(0x7f00000000c0)="37031c00", 0x4, 0x4000800, 0x0, 0x47) r5 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x82042, 0x0) syz_ublk_setup_queues(r5, r4, &(0x7f0000000480)={0x0, 0x18ee, 0x1000, 0x3, 0x1d2}, &(0x7f0000002680)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xb656, 0x20, 0x2, 0x342, 0x0, r5}, 0xffffffffffffffff}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x842d, 0x40, 0x2, 0x6a}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xb6d4, 0x10000, 0x1, 0x252}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xeaff, 0x8, 0x0, 0x231}}], 0x4, &(0x7f0000003900)={0x2e, 0x62, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x1, {0x9}, 0x0, r3, '\x00', {0x2003, 0xb66, 0x0, 0x0}}, 0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000040)={0x14, 0x23, 0x409, 0x70bd25, 0x25dfd3ff, {0x2}}, 0x14}, 0x1, 0x0, 0x0, 0x24040811}, 0x8410) syz_clone(0x280000, 0x0, 0x0, 0x0, 0x0, 0x0) syz_clone(0x400, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000640)="3d183e767f00214c2e5c07799ae108914ae4c2cd24a1470432a3917ac4932ba9e1c6f129861f13f430ca8eeac0f55b39cef14cc9") bind$alg(0xffffffffffffffff, &(0x7f0000000040)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_ctr_aes256\x00'}, 0x58) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000000)={0x27}, 0x74) connect$inet6(0xffffffffffffffff, &(0x7f0000000180)={0xa, 0x3, 0xc, @dev={0xfe, 0x80, '\x00', 0xd}, 0x9}, 0x1c) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) syz_clone(0x20223000, 0x0, 0x0, 0x0, 0x0, 0x0) mmap$IORING_MAP_OFF_PARAM_REGION(0x0, 0x9, 0x1, 0x20010, r6, 0x20000000) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x6) r8 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(0xffffffffffffffff, 0x40182103, &(0x7f00000003c0)={0x0, 0x1, r8, 0x1, 0x80000}) 3m25.83972361s ago: executing program 35 (id=735): openat$ttyS3(0xffffffffffffff9c, 0x0, 0x28000, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) inotify_init() r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'bridge0\x00'}) r1 = syz_open_dev$tty1(0xc, 0x4, 0x2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f00000003c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) dup(r1) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x26e1, 0x0) pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700) splice(r5, 0x0, r7, 0x0, 0x88000cc, 0x0) fcntl$setpipe(r6, 0x407, 0x100004) write$eventfd(r6, &(0x7f0000000240), 0xffffff14) 3m22.964195642s ago: executing program 36 (id=743): r0 = gettid() prctl$PR_SET_SECCOMP(0x16, 0x0, 0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5, r0}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) ioctl$SG_SET_RESERVED_SIZE(0xffffffffffffffff, 0x2275, &(0x7f0000000280)=0x80000000) r1 = userfaultfd(0x1) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f00000002c0)={0xaa, 0x100}) readv(r1, &(0x7f0000000600)=[{&(0x7f00000000c0)=""/114, 0x72}], 0x1) syz_open_dev$ttys(0xc, 0x2, 0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000800)=ANY=[@ANYBLOB="a4000000100003040003", @ANYBLOB], 0xa4}}, 0x400c044) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) read$FUSE(r2, &(0x7f0000002740)={0x2020}, 0x2020) syz_ublk_setup_io_uring(0x1d, &(0x7f00000003c0)={0x0, 0x30b7, 0x1000, 0x2, 0x1000158}, 0x0, 0x0, &(0x7f0000000080)) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x8002, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x11, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xb2, &(0x7f0000000140)=""/178, 0x1f00, 0x6f, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xb5}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0xef5}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) 3m16.130635773s ago: executing program 37 (id=757): timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000002100)=0x0) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5, r0}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xb320a000) open(&(0x7f0000000280)='.\x00', 0x0, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) fanotify_init(0x200, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000500)='.\x00', 0x0, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x1) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_PRE_FAULT_MEMORY(r4, 0xc040aed5, &(0x7f0000000040)={0x10000, 0x1f000}) fsetxattr$system_posix_acl(r1, &(0x7f0000000080)='system.posix_acl_default\x00', 0x0, 0x0, 0x1) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x8, &(0x7f00000004c0)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB="0000000000000000b703000000000000850000000c000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) read$FUSE(0xffffffffffffffff, &(0x7f0000000040)={0x2020}, 0x229) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a44, 0x1700) 2m55.883976578s ago: executing program 38 (id=815): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0xa4242, 0x0) r1 = dup(r0) ioctl$SNDCTL_DSP_SETFRAGMENT(0xffffffffffffffff, 0xc004500a, 0x0) openat$sw_sync(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder1\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, 0x0, 0x80200, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x103080, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_SET_CLOCK(r4, 0x4188aec6, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x1) ioctl$KVM_RUN(r5, 0xae80, 0x0) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nfc(0x0, r6) sendmsg$NFC_CMD_DEP_LINK_DOWN(r7, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000980)={&(0x7f0000000940)=ANY=[@ANYBLOB="01", @ANYRES16=r8, @ANYBLOB], 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x800) write$UHID_INPUT(r1, &(0x7f0000001c00)={0x8, {"b0476b76ba5d044f65271519727e4ff1ff0d12c0e6bdf3ea1f52e24f60ca698457b32832b83d7e96694c1feb5809bd67002f71e0b97c0d5270c04ffa64f63b2e18ee4b7b572fe2f4d03cad38bcd106ff12f53b443ac6fc81da518f54b9004a44859529c07a2b1b8feddc0180a0f37b13babba1dd0813b7ea56dac4b7ffe9a2ef54221439ecc55223ef2d40f4ba8108c10387ddffbaed25d41e7692bf26ddfa747a666caff49843e38c86cac7323f784a17df6beaa49c3f4a98fb4013f4e573e2ef77b0965d4bfbdf7d5eada69406ca93f422495e00addfca1518085a40f10284ff59388ecf476a12ef1a540163922098d600519ae8cf3ef544344e9d968f341af618503b455f3976b76975270e94d714302382c63de5b7c1fad1fa373b369916cb3b4d583a9ebbaeb262884d25a0e1d9fb141de60df7e64cb38b6f7167991f8fba06bffe2d49133bbb462cd8a9493177eee5f03875b15c7a92c3cd6a3fdfc64f236e14fa05a0e8d3c45f13eecd22e13528c74186dc50e0e2af44177e26bded1161e5533375508dadb83db5126cc810f4e30d4e24ec12c3b99e5220aacf42c58f2960bd43c337dbd318aeeb5c9a6cd5ffd3bf1497bb48ab7bcb32c9c33c9f5b9bc4645b96f23f9e0d826b780030444ffb925f55df587ef5ca5ea74ccd66afc7981da496d6f037efbb0b08f3f5078c60ffb4db18d1b59996bd9b1513442785bf4ece8587b39d8176dc9c735d5ea25133b2053bba227b81faab7220326f8814a9df4eba4ecc6acdd82f70b653b56a18cc9dfa4deb0a112c797ab89a51a103c3a9085d828523370c4d79d9484f4dc910735a2c9b5b85197cd9c073df7a54b40df8e1bf595bab957900c2a1a7dc40e88ed0c55c362ffbb7f88a0725a6ae73b936a639e951faf9c45ae74a2ece2f6f88e425ee41d2c60cb083a2fd6d07381908a7f629e32f89a553cf0794f54b8bdc7bd541d88464a4f80ac0b8b625a803a55de4b05a95fc7f8fc3d6d79858ccb269b7b8b21657654164a9aa29f4e8462377e9d234a41ea69841a4aaa1e5f89f9b074f6f71cb1ffaa450c3160b0e319ec81ad30101db66218b0c69f97c234465dc45849fcfd62d396f2b50ddcc0ed7dd8651431534232ab6d1186d7760770a1fc6c77553a79d0297194f794997ee47781094a76d9dccf632dcbb527b3e68950d9bb534245c7f08ae1d6ef2750292ae28e5e6dcfe2a69737dd7a1e453f3902ae90789e98c212905422099904d3bfb949bde187682a59c01aa8e6a9972a63d6aaef4d4139b10a24e063707f1aba79bd59e3f9709a873dff401d1f356c4be5e449ae0e2633a1fe50ed367fe56b0499957c3b6cabb42256547995ea998f3937d153897d1c83f1ad922d6835bdfa3b986dc6f4bd927a4ca13fbaa99b7b43758e2329d588f40fac718b16cca855468643f3818496b4915fe9a2bdd3e68889fea24bc1dfa6287a801d49a7bb84654147448550d2919e4df3a943a88cf616befea4e7a4fddb7969311c6837f9529966241be1e57ed2d773debc542986d09866905a3f63b6e1820086d52a70f039154e839da7ea852c33bf3722a048f61bbf068519e050b8788370fb130a42e9f5322dfff65b15d588f9e926b70e4530e8b66697cabb1e8514831431fa0eaecb49f9613ed5fd7bc50f897bda36d24d4296e143e2480e325ec09a77c03a07b4f86eb703085313ebeee94ef5b1cde3f6a7efd785772eb4034039f598c07819b769416a223fab824c4ac50086e78042a1ccf47b6c7ede8540cded4bd4c920ce6c2b7493a5634c5e96bb761373623ab473b121d555bfd5a8bc3f5c5418bed83ffd0d6492840550fccc0c35746370396d0190b7b1d2cadcc150877e0d197f692f97cec790c95e3d3959dc7c68aca37306c1bc13ad33848395dba5e3c9ce8090bc0e7e8312091773641be56411921e3d473321c6d8bd10b7d3f5aedd6620bcaa06474bbb298bc77297b8b5dcb9e6b33dbe676460cca825609857724cee245306d07fda287d5fe57c424c27cf9b6cf0f16d2c6a8071bd57c826d7371841cf43dab1b42421ce416d0d3a9c80bc807d2e6761e53f06b3e63c0af1b4548d820118421205f040f4ab35307871e4c7a21ff28082c29e02e89486064661898c0eb1811c70a6124c1f25d62c38794a3e87c312c870db7b60d0df8b57860c94d1a9c561b327fae3a68ce9ff4551e418eb00766f0341c5e796e3cbbbe6b4864928b966110256d5475eb1fd7b2893b60e19e859baaf23c9233a1b064771671ee2d07c151e2e99c37a116a338788052a726a8519b8335e9ff4f71d00ab634543c20ddea1bf57d4f2b797182ff19618b6974d2b69d9f052934d527a1830bf2785842f35eaf32b65b7c9fdd6f0c41756072a59c0cce0b7305740729f1daa14e0092da9d022321b726d658fcef55affa2bbf36ad788f1f423b7dfd328435b4d5df315143d8b8028ba4bea6134a3dc9720c73d5e66b8b8168752eea6b78c75f04efd9677dbe419f13f5e1c9764276a83821b710307d8f85359b34d038ff17de45e8739d4b647fd1a8d794a3273d922af3374f5d3c75b8345b9dfdabb2c0418a358921e0e73d0fe88caab1741b913673e22ff4b59afa0f653a423d9b2bb20cbf07951a349eea18a891b4f4dc6df8e42a6181284f643de5fd2924ae54f672a1920343476c67333e1e8205bf4877b1251a83f417936714edb1c6975ba7969d2fcc2e69024a4669ac2f998116ade1bd84568b8f3f1fccbe95df9ed21db77315b7469f30bfae418415d9cb5aeea627ba6811e30d56d4f4bfe5f794ea4243e3cdfad3ef55199699b8433083b6f72f95effc5f2f613cfcefaf0b94e801ebcb7095a1474ee93142b82c9bf9886617b6bf69d08c83c76cd21d4cce5872d99de8e54bbff915ab923b2d24bb3aa178dd50b44fd0eb880ef33ca51d4bf5f0fbc8ffe18afe4245397f277e4efad955baa10cf56613481253d69c02e7661714b68be0fd64f29bdafbc8b4a0b30bd6709c67fe8e8915d0479b3902b1d0169fb5486b02e966ad5d8a2bcf42ecba59177cd85e17239667f6b045d1f873ce24733ae17e2d8432709062e786a32ac925121f1b0d46c66d4fb9088f4aa0cfe2149f6c2cb5b75d45349bc88fbd47e01ea07e7cd573335aab8d389846566800dd084bc3caa95f7632719c651f2d33be0fb56347c063b3c6e3e75c5e58caeb4c37574859b78c1ed018fbeed788a4305a9ee1c1ef65a0c83a7cd717a8c08ecd4e86370ffffd6d40a89a0b1e8c15a10ad5406e867e49319ad83bfbb925d5e240b4bd44fd751e7510d5ea03a6cab95f37155d1fd69aaea1db4a1f53714eb90e669209cf634f84a50c85bdc51838ebbb545b4387790df67f0122740c2abc910cf83230394172a56c9ffda6675bb8bb39846730a1bf764aeb92407c90a194da880cb8a4efb5b57a8311d864209c7fd226b93582b6b11eec559abfbba653c0569c219d3a2e60555cb739f9d32d564f23c4e98be78aa553610822af426f961df0df2185c61ccaa22b2a6aa6fb3e917bdfb2be9c3ffb8a50821321119c4cf4917db39548abc17bfba267fa50f6af15c560a21055f967f1ca6f656ddb556f9c7e17a771eeef7e80940d1c14ddf2c27647686fd0526460036aeea395fb10abef2be2ea96c9bb380370c08d1568d30eea0f3e6b7cf8f7edc7b36d4d0affd249330707b54ee620f208d885791171eb67a25a80fcc6922e0258c9673b6576564949dfa5bed9a0299bf952aade654de16e22d54fcd391ded6adab94ff621efcd91ef69acf8dfa1b22692ba3e49cd1d3fbed6db1402065ab37e457056877977ebac33ef566f28a19b9acb67a9cc53feb156814e880b3dd5a9119ffdbc5a45c20ea375f2882575b9a28740eebf63f2895d9ffac1ec33cbdcdede98a201424d000df1efd64dd7268cc1b2366ccfb09754822dafdb1821de5e6ebee09608e82e679fafb7a5100172f26998d31d7f27c2b310f0372c3b5e888f8e6efb56074177bf6a2a5bbd9ed070ad5aaf23ce144d1ac86cad110e5916a8a57e1e7fc3d37353f84f2f6d43d92ab8b35040467f3f8b1d23fac021bbac3710edc8e2e26d794db38e48020f63e94d4b4dca3e015537a8e3008274d55f81af931a0faf1a438444b6a0489b93f7b88f81f761eae0f82e60cb0cf2745ca8c9e30d3cc189c1405b1994ed71b00d90ea7a94102916cdc915620c363d04e51eabaaca6c2814a7c1e7aaeec80bdc13135b813e6d0eea83446a5c57ec29695c302c0d8da65b61fe8ada51a36e1aff34d449f9eb70cb94931226121ab121a971c2fc070ca84272d122c1696f52fbd5ed06783abe188dcf133c4d41e10295f6ffda69fa8c5a7c0fec3425a2d60523a60d280b5ce34eac5911268172e772fefba63a6f5c6dafa9e500a5e1355fb614613f8fc1ef5e5466fa19212bcdc349a865f4cee6ea80b11a410bb6e4ad677393973e38621d25ff6c4876ef8a8d2ba651be4a78d2ba9fafadcea8eff9cca3f4ab71a0b84917794e521220dad099ac8aaf32abd162348879e4299e4d46395f9d55267b635e18ca2e2fc96146b96c8a8055130b8d8cb10cc31382df34057bd8637f86e48adc854af408226752a04df8d0362db263e0959f2bd7e8a4d33a8c4b257e19d308280baf40cced1b3cd3a86ee22df0da49d750539eee1104e99a9f8a065e5499c73125a8a8430eda7aee156821a97c237611b50f682a2cccd0969304f0a50ae98800dfb32ee1bcfeab98182c34a51e67fa5bd738c22c44fc1269ce73f464edd2f31296e92e62df51cf55798ae2e3c33c57b09f4ecd13469122095a3563f95f0a04cf58dcea4aed5e8bdda7617863cbc37a97ebadb46d679f7e30014d96d0ac7ce9484368fa5fd19cbc3d139410a2bd7ffacef1bdf76dd1d5f34d2392fcb91c7585fc1ae7d8ba2aa8ded9645d5a5e76e2279b6e0692101137da946dfbd3836476f5dad7fed70115d716dce87b5ad755e5653a709f5aa42265ec9657ed406cc9256af3628c0116b8e1d23306983e9adbc19dec354870c98e2e76566895df933a80c4c36b617db4bbda1a4ca7d6c80a43734471fc92d0bdeacfc125dddd73febd8f7ef84f221d52ae71372cee802d59013a15958e850f8fdf46d8fd3b874633daf3b1f346470456c05722258480959dd6afcffa1f3f2ca033011339c5cb85b7d1c9b5916fb8dc9c2783df64eb5cca5af83a74fe5bb259f93722842eb4ac851e71f3cfd67a39590e7f8e20f018744b9277e6eb46b5f211df5f767ef29dc9a972e14c40ea2d4624f187f301c1116d3a61adeb5c6f7ccc021ac5e18d8b40d7f1f19daf4445c06e72db8701c267c0144c92cddd49af7a87aca5aa05d0e380dd27cc780d2f7db3bef26cc4fd358543e19d73179b879f7bdc702ab405270c93a3ed64153e20b5b663773a2ad4e8e3e1e8eaf39ec80d75d02f74ff94f0e095240a564eeece4fc9bcf19bf2243c700e1dae14a1b0217013977bfa05f681abc37714fe462d0a632044ce52fdaa1c1a806b1eb4370e23ca0247e536165aa9f1c2af8adfea369ee1f4a2c7823a7baef028a1e77501db48db6aa0d7e30969f7197368db02d443803b53b2899315f7e2ba9c5ae952a3866b4ea60f3d669e0a91f7ef640cd938646bf8822fe455f0302fccf87c7fad6daf38fde038fa596b83a9fd5bf675669a6cb2bab44c6617f07950bf34edb93bbcb4174630f275dbda7a0631c4b456e5f80eb6258c1874e77d426743e478917fe44b73dc203baa2cc442b84b5818409abae99d97a28754969bd393df", 0x1000}}, 0xfffffe38) r9 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000000)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=@bridge_newneigh={0x28, 0x1c, 0x1, 0x70b529, 0x25dfdbfe, {0x7, 0x0, 0x0, r10, 0x80, 0x5e, 0x6}, [@NDA_LLADDR={0xa, 0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1b}}]}, 0x28}, 0x1, 0x0, 0x0, 0x240008d4}, 0x0) 2m53.921320395s ago: executing program 39 (id=824): syz_ublk_setup_io_uring(0x20, &(0x7f0000000340)={0x0, 0x7fc8, 0x1000, 0x40002, 0x393}, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0xffffd000) syz_genetlink_get_family_id$l2tp(0x0, 0xffffffffffffffff) syz_ublk_add_dev(0xffffffffffffffff, r0, r1, r2, &(0x7f0000000400)={0x2e, 0x8, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000000c0)=@any_dev={0x3, 0x603, 0x0, 0x0, 0x1000, 0xb6a7, 0x0, 0x0, 0x28}}}, &(0x7f0000000180)=0x0) sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0x0) sendto$packet(0xffffffffffffffff, &(0x7f00000000c0)="37031c00", 0x4, 0x4000800, 0x0, 0x47) r5 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x82042, 0x0) syz_ublk_setup_queues(r5, r4, &(0x7f0000000480)={0x0, 0x18ee, 0x1000, 0x3, 0x1d2}, &(0x7f0000002680)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xb656, 0x20, 0x2, 0x342, 0x0, r5}, 0xffffffffffffffff}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x842d, 0x40, 0x2, 0x6a}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xb6d4, 0x10000, 0x1, 0x252}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xeaff, 0x8, 0x0, 0x231}}], 0x4, &(0x7f0000003900)={0x2e, 0x62, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x1, {0x9}, 0x0, r3, '\x00', {0x2003, 0xb66, 0x0, 0x0}}, 0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000040)={0x14, 0x23, 0x409, 0x70bd25, 0x25dfd3ff, {0x2}}, 0x14}, 0x1, 0x0, 0x0, 0x24040811}, 0x8410) syz_clone(0x280000, 0x0, 0x0, 0x0, 0x0, 0x0) syz_clone(0x400, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000640)="3d183e767f00214c2e5c07799ae108914ae4c2cd24a1470432a3917ac4932ba9e1c6f129861f13f430ca8eeac0f55b39cef14cc9") bind$alg(0xffffffffffffffff, &(0x7f0000000040)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_ctr_aes256\x00'}, 0x58) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000000)={0x27}, 0x74) connect$inet6(0xffffffffffffffff, &(0x7f0000000180)={0xa, 0x3, 0xc, @dev={0xfe, 0x80, '\x00', 0xd}, 0x9}, 0x1c) syz_clone(0x20223000, 0x0, 0x0, 0x0, 0x0, 0x0) mmap$IORING_MAP_OFF_PARAM_REGION(0x0, 0x9, 0x1, 0x20010, r6, 0x20000000) r8 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000500)='/sys/kernel/kexec_crash_size', 0x202, 0x0) sendfile(r8, r8, 0x0, 0x6) r9 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) sendmsg$TIPC_NL_BEARER_ADD(r8, &(0x7f0000002500)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000024c0)={&(0x7f0000002340)={0x80, 0x0, 0x8, 0x70bd26, 0x25dfdbfd, {}, [@TIPC_NLA_NODE={0x68, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ID={0x64, 0x3, "c907821af0a1a820c8a9d270a15dbabaa1e56e30808953e62fb8fc92d00052d206e217f2dce4148877931e67d9998da21eb88975347d6c0f02b1fcf501d04c3d3332e23cd85edcaa445a27871c8cb8690379961e759cb5262f98620916a88c26"}]}, @TIPC_NLA_NODE={0x4}]}, 0x80}, 0x1, 0x0, 0x0, 0x10}, 0x8000) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r8, 0x40182103, &(0x7f00000003c0)={0x0, 0x1, r9, 0x1, 0x80000}) 2m52.57625833s ago: executing program 40 (id=832): timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xb320a000) r0 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) fcntl$lock(r0, 0x410, &(0x7f0000002080)={0x1, 0x1, 0x0, 0xfffe}) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) fanotify_init(0x200, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000500)='.\x00', 0x0, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x1) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_PRE_FAULT_MEMORY(r4, 0xc040aed5, &(0x7f0000000040)={0x10000, 0x1f000}) fsetxattr$system_posix_acl(r1, &(0x7f0000000080)='system.posix_acl_default\x00', 0x0, 0x0, 0x1) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x8, &(0x7f00000004c0)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB="0000000000000000b703000000000000850000000c000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a44, 0x1700) 2m48.637453149s ago: executing program 41 (id=839): unshare(0x6a060000) bind$unix(0xffffffffffffffff, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) listen(0xffffffffffffffff, 0x5) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000600)={0x1, 0x0, [{0x400000b0, 0x0, 0x5}]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000140)='fdinfo/3\x00') read$FUSE(r3, &(0x7f00000006c0)={0x2020}, 0x2020) writev(0xffffffffffffffff, &(0x7f0000000500), 0x0) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) syz_usb_connect(0x0, 0x36, &(0x7f0000000240)=ANY=[@ANYBLOB="120100033ca7ff1063110001bb23010203010902240001040e10830904560b02e80ef9060905030300047f580609058b03"], &(0x7f0000000ac0)={0x0, 0x0, 0x0, 0x0}) setsockopt$inet6_int(r4, 0x29, 0x4b, 0x0, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)={0x4c, 0x2, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_TYPENAME={0x13, 0x3, 'hash:net,iface\x00'}]}, 0x4c}}, 0x80e0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)={0x58, 0x9, 0x6, 0x201, 0x0, 0x0, {0x2, 0x0, 0xffff}, [@IPSET_ATTR_DATA={0x30, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0x18, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @local}}, @IPSET_ATTR_IFACE={0x14, 0x17, 'vlan0\x00'}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x58}, 0x1, 0x0, 0x0, 0x800}, 0x40c0080) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000040)}, 0x0) sendmsg$NFT_BATCH(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000540)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000000000000000000010000000900010073797a300000000048000000030a01020000000000000000010000000900030073797a320000000014000480080002400000000008000140000000000900010073797a3000000000080007006e6174005c000000060a010400000000000000000100000008000b40000000000900010073797a30000000003400048030000180080001006e6174002400028008000240679349b9080004400000000c0800034000000009080001"], 0xec}}, 0x0) r9 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_GET(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)={0x14, r9, 0x733, 0x70bd28, 0x259fdbff}, 0x14}, 0x1, 0x0, 0x0, 0x20040080}, 0x4000) 2m42.167773315s ago: executing program 42 (id=849): setns(0xc9, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000180), r0) sendmsg$TIPC_NL_NET_SET(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x34, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NET={0x20, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x1111}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x1000001}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x1000001}]}]}, 0x34}}, 0x0) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0xb, &(0x7f0000000040)=0x3, 0x4) setsockopt$IP_VS_SO_SET_STARTDAEMON(0xffffffffffffffff, 0x0, 0x1a, &(0x7f0000000240)={0x1, 'veth0_to_team\x00'}, 0x18) syz_emit_ethernet(0x46, &(0x7f00000000c0)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @remote, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x1, 0x38, 0x0, 0x0, 0xfb, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x0, 0x0, 0x3, 0x1, 0x0, {0x7, 0x4, 0x0, 0x0, 0xfffc, 0x1, 0x0, 0x0, 0x1, 0x8, @loopback, @remote, {[@cipso={0x86, 0x6}]}}}}}}}, 0x0) listns(0x0, &(0x7f0000000500)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0xa, 0x0) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)={0x58, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NODE={0x44, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x3c, 0x4, {'gcm(aes)\x00', 0x14, "000102030405060708090a0b0c0d0e0f10111213"}}, @TIPC_NLA_NODE_KEY_MASTER={0x4}]}]}, 0x58}}, 0x0) sendmsg$TIPC_NL_BEARER_ENABLE(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000400)={0x54, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_BEARER={0x40, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x1127, @loopback}}, {0x14, 0x2, @in={0x2, 0x1127, @loopback}}}}]}]}, 0x54}}, 0x0) setresgid(0xffffffffffffffff, 0x0, 0xee01) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$GIO_UNIMAP(r2, 0x4b66, &(0x7f0000000100)={0xffffff23, 0xffffffffffffffff}) r3 = socket(0xa, 0x5, 0x0) keyctl$restrict_keyring(0xa, 0x0, 0x0, &(0x7f0000000000)='id:cO2e') r4 = epoll_create1(0x80000) quotactl_fd$Q_GETINFO(0xffffffffffffffff, 0xffffffff80000502, 0xffffffffffffffff, &(0x7f0000000480)) ioctl$FS_IOC_SETFLAGS(r4, 0x40088a01, &(0x7f0000000000)=0x10) listen(r3, 0x100) sendmsg$inet_sctp(r3, &(0x7f00000000c0)={&(0x7f0000000000)=@in={0x2, 0x4e24, @loopback=0x7f00fffd}, 0x10, &(0x7f0000000080), 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="94460700000000001600840000000700e6ffa8feb9670000e6e0"], 0x18}, 0x8050) 2m38.422088508s ago: executing program 43 (id=857): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, @any, 0x4, 0x1}, 0xe) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) openat$sequencer(0xffffff9c, &(0x7f0000000140), 0x14800, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8923, 0x0) r2 = socket(0x10, 0x803, 0x0) linkat(0xffffffffffffff9c, &(0x7f00000003c0)='./cgroup\x00', 0xffffffffffffff9c, &(0x7f0000000100)='./file7\x00', 0x1000) r3 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) fcntl$lock(r3, 0x410, &(0x7f00000000c0)={0x1, 0x2, 0x1, 0x7}) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @tid=0xffffffffffffffff}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r4, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x18a42000) socket$nl_rdma(0x10, 0x3, 0x14) renameat2(0xffffffffffffff9c, &(0x7f0000000780)='./file7\x00', 0xffffffffffffff9c, &(0x7f00000007c0)='./file1\x00', 0x0) close_range(r2, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0xefd, &(0x7f0000000080)={0x0, 0xfffffffe, 0x2, 0x83, 0x3af}, 0x0, 0x0, 0x0) listen(r0, 0x3) accept4$bt_l2cap(r0, 0x0, 0x0, 0x800) 2m32.108828291s ago: executing program 44 (id=876): socket(0xa, 0x3, 0x87) socket$nl_route(0x10, 0x3, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x50) syz_emit_vhci(&(0x7f0000000300)=ANY=[@ANYBLOB="040f3f01f7d04a37f60a74b51f629a0332b0854d78ec1123e57c7ff57f1c8b1141977fb5ac0d93db53353a9f1776ef87199e5752827c1ddf2708ce41dd41fd679ecf82470cb8063f90e041b6c1d68c036918033f210aba1baa733be085"], 0x7) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mount$cgroup(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f00000001c0), 0x2010042, 0x0) r4 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000001c0), 0x180, 0x0) ioctl$SNDCTL_SYNTH_ID(r4, 0xc08c5114, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)=ANY=[@ANYBLOB], 0x290}}, 0x0) connect$can_bcm(0xffffffffffffffff, &(0x7f0000001ff0), 0x10) syz_open_dev$ndb(0x0, 0x0, 0x8180) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x3, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x18, 0x0, 0x0, 0x0, 0x80000000}, {{0x18, 0x1, 0x1, 0x0, r5}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3, 0x9, 0x0, 0x1, 0x19}}, [@snprintf={{0x5, 0x0, 0x7, 0x9, 0x0, 0x2, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9, 0xfe00}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x0, 0x90}, {0x3, 0x0, 0x6, 0xa, 0x9, 0xfe04, 0xf1}, {0x7, 0x1, 0xb, 0x7, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {}, {0x18, 0x9, 0x2, 0x0, r0}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x7, 0x0, 0x0, 0x41000, 0xc, '\x00', 0x0, @fallback=0x26, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe5}, 0x94) 2m25.570140339s ago: executing program 45 (id=887): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'syz_tun\x00'}) r1 = syz_init_net_socket$x25(0x9, 0x5, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'virt_wifi0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x4, 0x0, 0xa300}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_MACSEC_SCI={0xc, 0x1, 0x100}]}}}, @IFLA_LINK={0x8, 0x5, r3}]}, 0x48}, 0x1, 0x0, 0x0, 0x24008000}, 0x800) ioctl(r1, 0x890b, &(0x7f0000000140)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00lapb0') r4 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) write$rfkill(r4, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x3, 0xfd}, 0x8) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) read$FUSE(0xffffffffffffffff, 0x0, 0x0) syz_ublk_setup_io_uring(0x223c, 0x0, 0x0, 0x0, 0x0) socket$unix(0x1, 0x2, 0x0) timer_create(0x0, 0x0, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040), 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xb320a000) futex(&(0x7f000000cffc)=0x1, 0xd, 0x0, 0x0, 0x0, 0x0) futex(&(0x7f000000cffc)=0x1, 0xd, 0x0, 0x0, 0x0, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r5, 0x0, 0x0) syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r6 = syz_open_procfs(0x0, &(0x7f00000001c0)='fd/3\x00') ioctl$FS_IOC_ADD_ENCRYPTION_KEY(r6, 0x541b, 0x0) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x44}, 0x1, 0x0, 0x0, 0x20000881}, 0x0) 2m7.131081281s ago: executing program 46 (id=931): setns(0xc9, 0x0) socket(0x2a, 0x2, 0x9) syz_emit_ethernet(0xbe, &(0x7f0000000000)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x23}, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xc}, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "7b4b142b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af", "584cbf2649a50f2dbc43efa8698d0a881c51852e4451b57d037ad3c04594282423424d00", "bcfd56f1375461caaa2f19935e6996c7096ffeeb0300000000000064", {"9a3bfbc1f39cb307b3472eb9cdb042d2", "643fcbb2c5a57df67d544af6e8dafe09"}}}}}}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x11, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xb2, &(0x7f0000000140)=""/178, 0x1f00, 0x6f, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xb5}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) syz_open_dev$tty20(0xc, 0x4, 0x1) memfd_create(&(0x7f0000000040)='\x00', 0x8340b1aabcc04bec) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r3, &(0x7f00000002c0)={0x2, 0xc22, @remote}, 0x10) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r3, r4, 0x0, 0x20000023896) r5 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f0000000ac0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\n'], 0x98) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={r5, 0xffff0000, 0x0, 0x0, 0x0, 0x0, 0x1000000, 0x0, 0x48, 0x0, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x0, 0xffff0000}, 0x48) 2m6.581169063s ago: executing program 47 (id=936): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, @any, 0x4, 0x1}, 0xe) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) openat$sequencer(0xffffff9c, &(0x7f0000000140), 0x14800, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8923, 0x0) r2 = socket(0x10, 0x803, 0x0) linkat(0xffffffffffffff9c, &(0x7f00000003c0)='./cgroup\x00', 0xffffffffffffff9c, &(0x7f0000000100)='./file7\x00', 0x1000) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) fcntl$lock(0xffffffffffffffff, 0x410, &(0x7f00000000c0)={0x1, 0x2, 0x1, 0x7}) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @tid=0xffffffffffffffff}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r3, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x18a42000) socket$nl_rdma(0x10, 0x3, 0x14) renameat2(0xffffffffffffff9c, &(0x7f0000000780)='./file7\x00', 0xffffffffffffff9c, &(0x7f00000007c0)='./file1\x00', 0x0) close_range(r2, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0xefd, &(0x7f0000000080)={0x0, 0xfffffffe, 0x2, 0x83, 0x3af}, 0x0, 0x0, 0x0) listen(r0, 0x3) accept4$bt_l2cap(r0, 0x0, 0x0, 0x800) 2m4.843588289s ago: executing program 48 (id=944): r0 = openat(0xffffffffffffffff, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) setsockopt$bt_hci_HCI_TIME_STAMP(r0, 0x0, 0x3, 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(0xffffffffffffffff, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100), 0x80, 0x0) bind$pptp(0xffffffffffffffff, &(0x7f0000000140)={0x18, 0x2, {0x0, @local}}, 0x1e) close(0xffffffffffffffff) mount$tmpfs(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x86022, &(0x7f0000000040)=ANY=[@ANYBLOB='nr_inodes=5']) ptrace$PTRACE_SECCOMP_GET_METADATA(0x420d, 0x0, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) syz_open_dev$tty1(0xc, 0x4, 0x1) connect$unix(0xffffffffffffffff, 0x0, 0x0) setns(0xc9, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000811}, 0x480f0) bpf$MAP_CREATE(0x0, 0x0, 0x48) r3 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IPT_SO_SET_ADD_COUNTERS(r3, 0x0, 0x41, &(0x7f00000000c0)=ANY=[@ANYBLOB='nat\x00'/30], 0x44) getsockopt$EBT_SO_GET_ENTRIES(r3, 0x0, 0x81, &(0x7f00000005c0)={'broute\x00', 0x6000000, 0x4, 0x88, [0x0, 0x400004, 0x9, 0x8, 0x377, 0x8], 0x5, &(0x7f0000000200)=[{}, {}, {}, {}, {}], &(0x7f0000000400)=""/136}, &(0x7f0000000580)=0x50) 1m57.051388705s ago: executing program 49 (id=948): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) fsopen(&(0x7f00000002c0)='gfs2\x00', 0x1) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, 0x0, 0x0) bind$inet(r0, &(0x7f0000000140)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000240)={0x1, &(0x7f0000000100)=[{0x6, 0xfd, 0x0, 0xe4}]}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) r3 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000200), 0x2) r4 = memfd_create(&(0x7f0000000100)='\x80\x005\xfb\xf7u\x83%:r\xd2\xdd=\xacy\xf7\xc2\xb9x\xa4q\xc1\xea\x7f\"\xc87a_4t\xcda\x9b\x11\x11\x0e\xa1\xcf\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xbeYL&\xa6\xba\xea\x01\x98\x00\x00\x001\x8bY\xf4\x1cG%\x95\x11\xbc\xf6W\xcfI$T\b\x8c\xd5\x0eKdo\xa5\xea\x1e\x82\x02W\xeduLN\xa6MB^\xbc/&8\xfb%\xfah\b\xe9\x82\xa0\xc2\x96\x85\xf5\x1cs\x9b\\\x8a\x92\xa5~\x03S\xfd\xc1.\x01\xbd\xfbQ\xa0(\xc0\xde\xbew\bFj\x0e93\x00a\xddW\x11\xd9[\xf9\x1b\xaa@\x02\xf8\xe7\xf9\xa8xi\x880\'\x96\xc9+\v(\x83\xea\xcd\xc1\xdc\xf5k\xb0\x8e\xda#p\xe4P\xfc', 0xc) ftruncate(r4, 0x2000000) fcntl$addseals(r4, 0x409, 0x7) ioctl$UDMABUF_CREATE(r3, 0x40187542, &(0x7f00000005c0)={r4, 0x1f, 0x0, 0x1000000}) r5 = socket$inet6(0xa, 0x805, 0x0) getsockopt$bt_hci(r5, 0x84, 0x81, 0x0, &(0x7f00000010c0)) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000800)={'#! ', './file0', [{0x20, '..&^^'}, {0x20, '6'}, {0x20, '\x80\x005\xfb\xf7u\x83%:r\xd2\xdd=\xacy\xf7\xc2\xb9x\xa4q\xc1\xea\x7f\"\xc87a_4t\xcda\x9b\x11\x11\x0e\xa1\xcf\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xbeYL&\xa6\xba\xea\x01\x98\x00\x00\x001\x8bY\xf4\x1cG%\x95\x11\xbc\xf6W\xcfI$T\b\x8c\xd5\x0eKdo\xa5\xea\x1e\x82\x02W\xeduLN\xa6MB^\xbc/&8\xfb%\xfah\b\xe9\x82\xa0\xc2\x96\x85\xf5\x1cs\x9b\\\x8a\x92\xa5~\x03S\xfd\xc1.\x01\xbd\xfbQ\xa0(\xc0\xde\xbew\bFj\x0e93\x00a\xddW\x11\xd9[\xf9\x1b\xaa@\x02\xf8\xe7\xf9\xa8xi\x880\'\x96\xc9+\v(\x83\xea\xcd\xc1\xdc\xf5k\xb0\x8e\xda#p\xe4P\xfc'}, {0x20, '\x00'}]}, 0xe2) sendto$inet(r0, 0x0, 0x0, 0x200047fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) 1m50.116198759s ago: executing program 50 (id=965): syz_ublk_setup_io_uring(0x20, &(0x7f0000000340)={0x0, 0x7fc8, 0x1000, 0x40002, 0x393}, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0xffffd000) syz_genetlink_get_family_id$l2tp(0x0, 0xffffffffffffffff) syz_ublk_add_dev(0xffffffffffffffff, r0, r1, r2, &(0x7f0000000400)={0x2e, 0x8, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000000c0)=@any_dev={0x3, 0x603, 0x0, 0x0, 0x1000, 0xb6a7, 0x0, 0x0, 0x28}}}, &(0x7f0000000180)=0x0) sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0x0) sendto$packet(0xffffffffffffffff, &(0x7f00000000c0)="37031c00", 0x4, 0x4000800, 0x0, 0x47) r5 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x82042, 0x0) syz_ublk_setup_queues(r5, r4, &(0x7f0000000480)={0x0, 0x18ee, 0x1000, 0x3, 0x1d2}, &(0x7f0000002680)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xb656, 0x20, 0x2, 0x342, 0x0, r5}, 0xffffffffffffffff}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x842d, 0x40, 0x2, 0x6a}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xb6d4, 0x10000, 0x1, 0x252}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xeaff, 0x8, 0x0, 0x231}}], 0x4, &(0x7f0000003900)={0x2e, 0x62, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x1, {0x9}, 0x0, r3, '\x00', {0x2003, 0xb66, 0x0, 0x0}}, 0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000040)={0x14, 0x23, 0x409, 0x70bd25, 0x25dfd3ff, {0x2}}, 0x14}, 0x1, 0x0, 0x0, 0x24040811}, 0x8410) syz_clone(0x280000, 0x0, 0x0, 0x0, 0x0, 0x0) syz_clone(0x400, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000640)="3d183e767f00214c2e5c07799ae108914ae4c2cd24a1470432a3917ac4932ba9e1c6f129861f13f430ca8eeac0f55b39cef14cc9") bind$alg(0xffffffffffffffff, &(0x7f0000000040)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_ctr_aes256\x00'}, 0x58) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000000)={0x27}, 0x74) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) syz_clone(0x20223000, 0x0, 0x0, 0x0, 0x0, 0x0) mmap$IORING_MAP_OFF_PARAM_REGION(0x0, 0x9, 0x1, 0x20010, r6, 0x20000000) r8 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000500)='/sys/kernel/kexec_crash_size', 0x202, 0x0) sendfile(r8, r8, 0x0, 0x6) r9 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) sendmsg$TIPC_NL_BEARER_ADD(r8, &(0x7f0000002500)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000024c0)={&(0x7f0000002340)={0x80, 0x0, 0x8, 0x70bd26, 0x25dfdbfd, {}, [@TIPC_NLA_NODE={0x68, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ID={0x64, 0x3, "c907821af0a1a820c8a9d270a15dbabaa1e56e30808953e62fb8fc92d00052d206e217f2dce4148877931e67d9998da21eb88975347d6c0f02b1fcf501d04c3d3332e23cd85edcaa445a27871c8cb8690379961e759cb5262f98620916a88c26"}]}, @TIPC_NLA_NODE={0x4}]}, 0x80}, 0x1, 0x0, 0x0, 0x10}, 0x8000) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r8, 0x40182103, &(0x7f00000003c0)={0x0, 0x1, r9, 0x1, 0x80000}) 1m49.237090065s ago: executing program 51 (id=970): socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) socket$packet(0x11, 0x3, 0x300) socket$inet6(0xa, 0x800000000000002, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x3}, 0x4) r2 = socket$netlink(0x10, 0x3, 0x4) write(r2, 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0), 0x80200, 0x0) syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2000000002, 0x4000) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x8) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$inet_udp(0x2, 0x2, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@any_dev={0x4, 0x4e4, 0x0, 0x0, 0x1000, 0x9, 0x0, 0x0, 0xa4}}}, &(0x7f0000000140)=0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = dup(r5) syz_ublk_setup_queues(r6, r4, 0x0, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xd24, 0x40000, 0x0, 0x44}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5c80, 0x8000, 0x3, 0xbab}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xc14b, 0x2, 0x3, 0x33b}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x2258, 0x200, 0x0, 0xffffffff}}], 0x1, 0x0, 0x0) 1m47.68077511s ago: executing program 52 (id=973): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r0, &(0x7f0000000000), 0xfffffecc) setns(0xc9, 0x0) socket(0x2a, 0x2, 0x9) syz_emit_ethernet(0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x11, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xb2, &(0x7f0000000140)=""/178, 0x1f00, 0x6f, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xb5}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) openat$audio1(0xffffffffffffff9c, 0x0, 0x129202, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r3, &(0x7f00000002c0)={0x2, 0xc22, @remote}, 0x10) openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/timer_list\x00', 0x0, 0x0) r4 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f0000000ac0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\n'], 0x98) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={r4, 0xffff0000, 0x0, 0x0, 0x0, 0x0, 0x1000000, 0x0, 0x48, 0x0, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x0, 0xffff0000}, 0x48) 1m36.272880459s ago: executing program 1 (id=996): mmap$KVM_VCPU(&(0x7f0000ffb000/0x2000)=nil, 0x930, 0x1000002, 0x4018831, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x80801) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000ffc000/0x1000)=nil, 0x1000}, 0x9}) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000040)=0x3, 0xac5) syz_clone3(&(0x7f0000000900)={0x23800000, &(0x7f0000000040)=0xffffffffffffffff, 0x0, 0x0, {0x28}, 0x0, 0x0, 0x0, 0x0}, 0x58) io_setup(0x8, &(0x7f0000000600)=0x0) io_submit(r2, 0x1, &(0x7f0000001300)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0x6, r1, 0x0}]) 1m36.040534621s ago: executing program 53 (id=997): bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000280)={0x1, 0xffffffffffffffff}, 0x4) ioctl$BTRFS_IOC_SUBVOL_SYNC_WAIT(r0, 0x40109441, &(0x7f00000002c0)={0x200, 0x3, 0x3}) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000880)=ANY=[@ANYBLOB="180000002f00090028bd70000000000004000000040010"], 0x18}, 0x1, 0x0, 0x0, 0x42804}, 0x20000004) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x21031, 0xffffffffffffffff, 0x21d63000) bpf$MAP_CREATE(0x0, &(0x7f0000000ac0)=ANY=[@ANYBLOB="06000000040000000010000089000000e024c283", @ANYRES32, @ANYBLOB='\x00'/19, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r2 = socket$l2tp(0x2, 0x2, 0x73) r3 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_DEL(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[], 0x9}, 0x1, 0x0, 0x0, 0x14}, 0x0) setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, &(0x7f0000000380)=@filter={'filter\x00', 0x42, 0x4, 0x311, 0xffffffff, 0x1d8, 0x98, 0x98, 0xffffffff, 0xffffffff, 0x2a8, 0x2a8, 0x2a8, 0xffffffff, 0x5, 0x0, {[{{@ip={@multicast2, @multicast2, 0x0, 0x0, 'netpci0\x00', 'nr0\x00', {0xff}}, 0x74000002, 0x70, 0x98, 0x1ba, {0x46010000, 0x2c000000000000}}, @REJECT={0x28}}, {{@ip={@private=0xa010101, @multicast2, 0xff, 0x0, 'netpci0\x00', 'team_slave_1\x00'}, 0x287, 0xe0, 0x140, 0x0, {}, [@common=@unspec=@addrtype1={{0x28}, {0x4}}, @common=@unspec=@limit={{0x48}, {0xfffffffa, 0xb, 0x0, 0x0, 0x0, 0xfffffffc}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x0, [0x1278]}, {0xffff, [0x5]}}}}, {{@ip={@dev, @remote, 0x0, 0xff000000, 'veth1_to_team\x00', 'veth1_to_batadv\x00'}, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x2, [0x0, 0x3, 0x1, 0x2, 0x0, 0x5], 0x1, 0x4}, {0xffffffffffffffff, [0x7, 0x4, 0x4, 0x5], 0x6, 0x1}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3a0) ioctl$AUTOFS_IOC_ASKUMOUNT(0xffffffffffffffff, 0x80049370, &(0x7f0000000300)) getsockopt$inet_opts(r2, 0x0, 0x16, &(0x7f0000000180)=""/171, &(0x7f0000000240)=0xab) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_buf(r4, 0x0, 0x8008000000010, &(0x7f00000000c0)="170000000200010400ffbe8c5ee17688a20032e80101000a000002a257fc5ad90200bb6a880000d6c8db000000df018002000000fc0607bdff59100ac45761547a681f009cee4a5acb3da400001fb700674f00c88ebbf9315033bf79ac2dfc060115003901000000000000eaffff00000000000062068f5ee50ce5af9b1c5683ffffff02ff030000ba000840024f0298e9e90539062a80e605007f71174aa951f3c63e5a1b47b63a6323ded2231454668492f9c681a6a9fc", 0xb8) syz_emit_ethernet(0x3e, &(0x7f0000000200)=ANY=[@ANYBLOB="0380c2000000bbbbbbbbbbbb0800450000300000000000019078ac1e0001ac1414aa040090780008000045a60007006600810229100000200000e0000001"], 0x0) ioctl$OCFS2_IOC_MOVE_EXT(r1, 0x40406f06, &(0x7f0000000140)={0x33, 0x4, 0x7, 0x4}) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000200)={'veth0\x00'}) socket$inet_udp(0x2, 0x2, 0x0) r6 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl(r6, 0x8914, &(0x7f0000000040)='dummy0\x00'/40) ioctl(r6, 0x8914, &(0x7f0000000080)="64756d6d7930000000000000000000000100"/40) ioctl(r6, 0x8914, &(0x7f00000000c0)="6c6170623000000000000000000000000100"/40) ioctl(r6, 0x890b, &(0x7f0000000100)="00000000000000000000000000000000020000006c6170623000"/64) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x4000) close(0x3) 1m36.014423085s ago: executing program 1 (id=999): r0 = mmap$KVM_VCPU(&(0x7f0000ffb000/0x2000)=nil, 0x930, 0x1000002, 0x4018831, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x80801) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000ffc000/0x1000)=nil, 0x1000}, 0x9}) syz_memcpy_off$KVM_EXIT_HYPERCALL(r0, 0x20, &(0x7f0000000180)="5e73663bf4082f7c6cbecbf09d6dd7be5a06dfd64563f329c16f799d1836bfc45a7badc8faed24bb77c848723a43602d1fe0d236c062e105ec77ffd00fb243c3111dda42112650cc", 0x0, 0xfe2a) epoll_create1(0x0) add_key(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./dev\x00', &(0x7f00000000c0)='devtmpfs\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./dev/mapper/control\x00', 0x0, 0x0) socket$xdp(0x2c, 0x3, 0x0) ioctl(r2, 0xc138fd03, &(0x7f0000000000)="04000000000000000000000038010000000000000000000000000000000000000000000000000000000000000000000074") sendmsg$ETHTOOL_MSG_WOL_GET(0xffffffffffffffff, 0x0, 0x0) r3 = userfaultfd(0x801) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x1c}) syz_clone3(&(0x7f0000000900)={0x23800000, &(0x7f0000000040)=0xffffffffffffffff, 0x0, 0x0, {0x28}, 0x0, 0x0, 0x0, 0x0}, 0x58) io_setup(0x8, &(0x7f0000000600)=0x0) io_submit(r5, 0x1, &(0x7f0000001300)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0x6, r4, 0x0}]) ioctl(r2, 0xc138fd0e, &(0x7f0000000000)="040000000000000000000000380100003801") 1m35.41555559s ago: executing program 1 (id=1001): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) socket$l2tp6(0xa, 0x2, 0x73) socket$l2tp6(0xa, 0x2, 0x73) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x10) mount(&(0x7f0000000200)=@filename='mtd0\x00', &(0x7f0000000100)='./file0\x00', &(0x7f0000000300)='jffs2\x00', 0x800000, 0x0) chdir(&(0x7f0000000240)='./file0\x00') mknod$loop(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2000, 0x1) r0 = socket$inet6(0xa, 0x802, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x8, &(0x7f00000000c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3ff9, 0x0, 0x0, 0x0, 0x9}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r1}}, @call={0x85, 0x0, 0x0, 0x11}]}, &(0x7f0000000080)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./sys\x00', 0x1ff) r3 = mmap$IORING_OFF_SQES(0x0, 0x4, 0x2000006, 0x13, 0xffffffffffffffff, 0x10000000) mmap$IORING_OFF_SQ_RING(0x0, 0xd00001, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0xffff}, 0x50) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000100000c02000000000000000000000d0000000000005f"], 0x0, 0x34}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000100000000000000801800009500000000000000"], &(0x7f0000000000)='GPL\x00', 0xc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r4, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x1}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000006c0)={0xffffffffffffffff, 0x0, 0x0}, 0x10) syz_io_uring_submit(0x0, 0x0, r3, &(0x7f00000003c0)=@IORING_OP_NOP={0x0, 0x9, 0x0, r1, 0x401, 0x6, 0x7, 0x1, 0x1, {0xf001}}) mount(0x0, &(0x7f0000000340)='./sys\x00', &(0x7f0000000380)='sysfs\x00', 0x0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/class/graphics/fbcon/rotate_all\x00', 0x1, 0x0) write(r5, &(0x7f0000000000)='3', 0x1) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r2, 0x0, 0xe40, 0xe40, &(0x7f00000002c0)='\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000300)=""/8, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) setsockopt$inet6_buf(r0, 0x29, 0x2a, &(0x7f0000000040)="ff2a340ed1fe0131ffffffff1f0000021800000000000000", 0x18) setsockopt$inet6_opts(r0, 0x29, 0x37, &(0x7f0000000000)=ANY=[], 0x18) setsockopt$inet6_opts(r0, 0x29, 0x3b, &(0x7f00000002c0)=ANY=[], 0xf0) sendto$inet6(r0, &(0x7f0000000080)="dd63065cb3a4e0a7723ae2ae024cb386d21562c0564c75ad8d11289d3a29e0e0078e76e7d3bcd2b8e1cdccefeec2d39e0b744c3324f7cf678b72862e1dd3d3aada6e7a91acc3a8a6d51045a919dd85ce8acbfd23fec140c71d70867b18d9cbb22a6583756667a2c4e9d4d3a8d0ce29aacba6d250856e099d8784bc2856294c83141511378ac8021cdaeb388a18a020e2966ee0c408677b78bfef4bd118a25bd99be790248a9eebc6519701c4203a3df658abd1203448350e984331387e314080fe65a0e13083da40801363057758a9002480d510", 0xd4, 0x8000, &(0x7f0000000180)={0xa, 0x4e23, 0x4, @private0={0xfc, 0x0, '\x00', 0x1}, 0x401}, 0x1c) 1m34.781720527s ago: executing program 1 (id=1002): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./config\x00', &(0x7f0000000040)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./dev\x00', 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config/nullb/nullb1\x00', 0x1ff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./config/nullb/nullb1/zoned\x00', 0x1, 0x0) write(r0, &(0x7f0000000200)='1\n', 0x2) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./config/nullb/nullb1/power\x00', 0x1, 0x0) write(r1, &(0x7f0000000280)='1\n', 0x2) close(r1) mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./config/nvmet/subsystems/testsubsys\x00', 0x1ff) openat(0xffffffffffffff9c, &(0x7f0000000380)='./config/nvmet/subsystems/testsubsys/attr_allow_any_host\x00', 0x1, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./config/nvmet/subsystems/testsubsys/namespaces/1\x00', 0x1ff) r2 = openat(0xffffffffffffff9c, &(0x7f00000004c0)='./config/nvmet/subsystems/testsubsys/namespaces/1/device_path\x00', 0x1, 0x0) write(r2, &(0x7f0000000540)='/dev/nullb1', 0xb) r3 = openat(0xffffffffffffff9c, &(0x7f0000000580)='./config/nvmet/subsystems/testsubsys/namespaces/1/enable\x00', 0x1, 0x0) write(r3, &(0x7f0000000600)='1', 0x1) close(r3) write(0xffffffffffffffff, 0x0, 0x0) close(0xffffffffffffffff) symlinkat(&(0x7f0000000780)='./config/nvmet/subsystems/testsubsys\x00', 0xffffffffffffff9c, &(0x7f0000000800)='./config/nvmet/ports/1/subsystems/testsubsys\x00') r4 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000880), 0x2, 0x0) write(r4, &(0x7f0000000900)='transport=loop,nqn=testsubsys\n', 0x1e) close(r4) nanosleep(&(0x7f0000000940)={0x0, 0x1dcd6500}, 0x0) 1m33.869610584s ago: executing program 54 (id=1002): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./config\x00', &(0x7f0000000040)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./dev\x00', 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config/nullb/nullb1\x00', 0x1ff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./config/nullb/nullb1/zoned\x00', 0x1, 0x0) write(r0, &(0x7f0000000200)='1\n', 0x2) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./config/nullb/nullb1/power\x00', 0x1, 0x0) write(r1, &(0x7f0000000280)='1\n', 0x2) close(r1) mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./config/nvmet/subsystems/testsubsys\x00', 0x1ff) openat(0xffffffffffffff9c, &(0x7f0000000380)='./config/nvmet/subsystems/testsubsys/attr_allow_any_host\x00', 0x1, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./config/nvmet/subsystems/testsubsys/namespaces/1\x00', 0x1ff) r2 = openat(0xffffffffffffff9c, &(0x7f00000004c0)='./config/nvmet/subsystems/testsubsys/namespaces/1/device_path\x00', 0x1, 0x0) write(r2, &(0x7f0000000540)='/dev/nullb1', 0xb) r3 = openat(0xffffffffffffff9c, &(0x7f0000000580)='./config/nvmet/subsystems/testsubsys/namespaces/1/enable\x00', 0x1, 0x0) write(r3, &(0x7f0000000600)='1', 0x1) close(r3) write(0xffffffffffffffff, 0x0, 0x0) close(0xffffffffffffffff) symlinkat(&(0x7f0000000780)='./config/nvmet/subsystems/testsubsys\x00', 0xffffffffffffff9c, &(0x7f0000000800)='./config/nvmet/ports/1/subsystems/testsubsys\x00') r4 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000880), 0x2, 0x0) write(r4, &(0x7f0000000900)='transport=loop,nqn=testsubsys\n', 0x1e) close(r4) nanosleep(&(0x7f0000000940)={0x0, 0x1dcd6500}, 0x0) 1m24.657920199s ago: executing program 4 (id=1015): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000240)={0x73622a85, 0x1000, 0x1}) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1002}) r3 = socket$nl_route(0x10, 0x3, 0x0) syz_open_procfs(0x0, &(0x7f0000002440)='net/ipv6_route\x00') r4 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000200)={'batadv0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000740)=ANY=[@ANYBLOB="3c00000010000500"/20, @ANYRES32=0x0, @ANYBLOB="01000000010000001400030073797a6b616c6c65723000000000000008000a00", @ANYRES32=r5], 0x3c}}, 0x0) write(r2, &(0x7f0000000700)="ffffffffffff0011223344554305000f32001800000100112233445500112233445500ff0000", 0xfdef) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f00000000c0)='bbr', 0x3) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000000)=0x8, 0x4) connect$inet(r1, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) sendto$inet(r1, &(0x7f0000000000), 0xffffffffffffff94, 0xb, 0x0, 0x0) recvfrom$inet(r1, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0xc9100120, 0x0, 0xfffffffffffffd25) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) openat2$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) fsetxattr$security_capability(0xffffffffffffffff, &(0x7f0000000200), 0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) getpid() dup3(0xffffffffffffffff, r0, 0x0) 1m22.000581126s ago: executing program 4 (id=1018): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) rseq(&(0x7f00000004c0)={0x0, 0x0, 0x0, 0x3}, 0x20, 0x0, 0x0) r0 = fsmount(0xffffffffffffffff, 0x1, 0x8b) socket(0x10, 0x3, 0x0) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000640)='/sys/power/pm_wakeup_irq', 0x80240, 0x31840384d1ba4a81) finit_module(r1, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x14) sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="80000000000201040000000000000000020000002400028014000180080001007f00000108000200ac1414000c0002800500010000000000240003801400018008000100ac1414aa08000200ac1414bb0c0002800500010000000000240001"], 0x80}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r3, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) fanotify_init(0xef0, 0x2) r6 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r6, 0x560a, &(0x7f00000006c0)={0x4, 0x0, 0x0, 0x0, 0x132, 0x3}) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=@newlink={0x2c, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x2031}, [@IFLA_XDP={0x4}, @IFLA_GROUP={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20048054}, 0x0) getdents(0xffffffffffffffff, 0x0, 0x0) io_uring_enter(r0, 0x6d2, 0x1bec, 0x9, &(0x7f0000000000)={[0x2, 0x9]}, 0x8) 1m19.01495718s ago: executing program 4 (id=1024): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, @any, 0x4, 0x1}, 0xe) openat$sequencer(0xffffff9c, &(0x7f0000000140), 0x14800, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8923, 0x0) r1 = socket(0x10, 0x803, 0x0) linkat(0xffffffffffffff9c, &(0x7f00000003c0)='./cgroup\x00', 0xffffffffffffff9c, &(0x7f0000000100)='./file7\x00', 0x1000) open(&(0x7f0000000280)='.\x00', 0x0, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @tid=0xffffffffffffffff}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r2, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x18a42000) socket$nl_rdma(0x10, 0x3, 0x14) renameat2(0xffffffffffffff9c, &(0x7f0000000780)='./file7\x00', 0xffffffffffffff9c, &(0x7f00000007c0)='./file1\x00', 0x0) close_range(r1, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0xefd, &(0x7f0000000080)={0x0, 0xfffffffe, 0x2, 0x83, 0x3af}, 0x0, 0x0, 0x0) listen(r0, 0x3) 1m18.837265635s ago: executing program 4 (id=1025): r0 = mmap$KVM_VCPU(&(0x7f0000ffb000/0x2000)=nil, 0x930, 0x1000002, 0x4018831, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x80801) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000ffc000/0x1000)=nil, 0x1000}, 0x9}) syz_memcpy_off$KVM_EXIT_HYPERCALL(r0, 0x20, &(0x7f0000000180)="5e73663bf4082f7c6cbecbf09d6dd7be5a06dfd64563f329c16f799d1836bfc45a7badc8faed24bb77c848723a43602d1fe0d236c062e105ec77ffd00fb243c3111dda42112650cc", 0x0, 0xfe2a) r2 = epoll_create1(0x0) add_key(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./dev\x00', &(0x7f00000000c0)='devtmpfs\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./dev/mapper/control\x00', 0x0, 0x0) socket$xdp(0x2c, 0x3, 0x0) ioctl(r3, 0xc138fd03, &(0x7f0000000000)="04000000000000000000000038010000000000000000000000000000000000000000000000000000000000000000000074") syz_genetlink_get_family_id$ethtool(0x0, r3) sendmsg$ETHTOOL_MSG_WOL_GET(0xffffffffffffffff, 0x0, 0x0) userfaultfd(0x801) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000040)=0x3, 0xac5) syz_clone3(&(0x7f0000000900)={0x23800000, &(0x7f0000000040)=0xffffffffffffffff, 0x0, 0x0, {0x28}, 0x0, 0x0, 0x0, 0x0}, 0x58) io_setup(0x8, &(0x7f0000000600)=0x0) io_submit(r5, 0x1, &(0x7f0000001300)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0x6, r4, 0x0}]) ioctl(r3, 0xc138fd0e, &(0x7f0000000000)="040000000000000000000000380100003801") bpf$MAP_CREATE(0x600000000000000, &(0x7f0000000100)=ANY=[@ANYBLOB="0f000000040000000400000002000200000000003f1ff8f3693dff9b7c87a397f70ba65eea7748a943d8e2c14f6321e99c5d8e7fef8985476a"], 0x48) r6 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./dev/mapper/control\x00', 0x0, 0x0) ioctl(r6, 0xc138fd05, &(0x7f0000000000)="040000000200000000007c2fc2") epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000080)={0x10000000}) 1m18.613273174s ago: executing program 4 (id=1026): r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180), 0x109842, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) setsockopt$sock_int(r1, 0x1, 0x10, &(0x7f0000000380)=0x38800000, 0x4) sendmmsg(r1, &(0x7f0000001c00), 0x400000000000159, 0x40840) r2 = socket$l2tp6(0xa, 0x2, 0x73) r3 = getpgid(0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r6 = openat$btrfs_control(0xffffff9c, 0x0, 0x108400, 0x0) mremap(&(0x7f0000ff7000/0x4000)=nil, 0x4000, 0xe000, 0x4, &(0x7f0000ff1000/0xe000)=nil) getsockname$packet(r6, 0x0, 0x0) mprotect(&(0x7f0000ff9000/0x4000)=nil, 0x200000, 0x2) bind$l2tp6(r2, &(0x7f0000000000)={0xa, 0x0, 0x1, @empty, 0x0, 0x3}, 0x20) connect$l2tp6(r2, &(0x7f0000000f40)={0xa, 0x0, 0x0, @empty}, 0x20) ioctl$SNDCTL_DSP_GETOPTR(r0, 0x800c5012, &(0x7f0000000440)) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0xb, 0x4, &(0x7f0000000700)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x9}, [@generic={0x63, 0x1, 0x1, 0xe0}]}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x60880, 0x8, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmmsg$inet6(r2, &(0x7f0000000ac0)=[{{&(0x7f0000000180)={0xa, 0x0, 0x0, @empty}, 0x1b, 0x0}}], 0x17fd147c801ae9af, 0xff00) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r8, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r7, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_FLUSH(r9, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c0000000406010800000000000000060a0000050500010007000000"], 0x1c}, 0x1, 0x0, 0x0, 0x4002}, 0x24000000) 1m16.832407113s ago: executing program 4 (id=1030): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x3, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000003008400000000000000ff10850000000700000095"], 0x0, 0x2, 0x0, 0x0, 0x40e00, 0x5a, '\x00', 0x0, @fallback=0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) r1 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x0) write$P9_RLERRORu(r1, &(0x7f0000000280)=ANY=[], 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40e00, 0x5a, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000012c0)={r2, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)=[0x0], 0x0, 0x0, 0x1, 0x1}}, 0x40) r3 = syz_genetlink_get_family_id$mptcp(&(0x7f00000003c0), r1) sendmsg$MPTCP_PM_CMD_GET_LIMITS(r1, &(0x7f0000000480)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x1c, r3, 0x200, 0x70bd26, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x9}]}, 0x1c}, 0x1, 0x0, 0x0, 0x24040801}, 0x8040) r4 = openat$random(0xffffff9c, &(0x7f0000000100), 0x100, 0x0) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r4, 0x6612) r5 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(r5, 0x4008af60, &(0x7f0000000040)={@my=0x1}) r6 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='ns\x00') renameat2(r6, &(0x7f0000000380)='./cgroup\x00', r6, &(0x7f00000003c0)='./mnt\x00', 0x2) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x200002f, 0x10012, r1, 0x0) ioctl$KIOCSOUND(r1, 0x4b2f, 0x5) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x4, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001700000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000a40)={r7, 0x27, 0xe, 0x0, &(0x7f0000000080)="f8ad48cc02cb29dcc8007f5b88a8", 0x0, 0x4, 0xf2ffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x1e) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) mremap(&(0x7f0000000000/0x9000)=nil, 0x600002, 0x600002, 0x7, &(0x7f0000a00000/0x600000)=nil) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f0000000180)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_STATION(r8, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)={0x2c, r9, 0xb97534d5fe9704cf, 0x70bd0b, 0x25dfdc02, {{0x12}, {@val={0x8, 0x3, r10}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_STA_SUPPORTED_RATES={0x4}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4094}, 0x0) read(r0, &(0x7f0000000240)=""/246, 0xf6) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) mremap(&(0x7f0000000000/0x9000)=nil, 0x600a00, 0x200000, 0x3, &(0x7f0000a00000/0x600000)=nil) 1m16.481791422s ago: executing program 55 (id=1030): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x3, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000003008400000000000000ff10850000000700000095"], 0x0, 0x2, 0x0, 0x0, 0x40e00, 0x5a, '\x00', 0x0, @fallback=0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) r1 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x0) write$P9_RLERRORu(r1, &(0x7f0000000280)=ANY=[], 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40e00, 0x5a, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000012c0)={r2, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)=[0x0], 0x0, 0x0, 0x1, 0x1}}, 0x40) r3 = syz_genetlink_get_family_id$mptcp(&(0x7f00000003c0), r1) sendmsg$MPTCP_PM_CMD_GET_LIMITS(r1, &(0x7f0000000480)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x1c, r3, 0x200, 0x70bd26, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x9}]}, 0x1c}, 0x1, 0x0, 0x0, 0x24040801}, 0x8040) r4 = openat$random(0xffffff9c, &(0x7f0000000100), 0x100, 0x0) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r4, 0x6612) r5 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(r5, 0x4008af60, &(0x7f0000000040)={@my=0x1}) r6 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='ns\x00') renameat2(r6, &(0x7f0000000380)='./cgroup\x00', r6, &(0x7f00000003c0)='./mnt\x00', 0x2) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x200002f, 0x10012, r1, 0x0) ioctl$KIOCSOUND(r1, 0x4b2f, 0x5) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x4, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001700000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000a40)={r7, 0x27, 0xe, 0x0, &(0x7f0000000080)="f8ad48cc02cb29dcc8007f5b88a8", 0x0, 0x4, 0xf2ffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x1e) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) mremap(&(0x7f0000000000/0x9000)=nil, 0x600002, 0x600002, 0x7, &(0x7f0000a00000/0x600000)=nil) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f0000000180)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_STATION(r8, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)={0x2c, r9, 0xb97534d5fe9704cf, 0x70bd0b, 0x25dfdc02, {{0x12}, {@val={0x8, 0x3, r10}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_STA_SUPPORTED_RATES={0x4}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4094}, 0x0) read(r0, &(0x7f0000000240)=""/246, 0xf6) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) mremap(&(0x7f0000000000/0x9000)=nil, 0x600a00, 0x200000, 0x3, &(0x7f0000a00000/0x600000)=nil) 56.929017581s ago: executing program 3 (id=1077): r0 = add_key(&(0x7f00000002c0)='keyring\x00', &(0x7f0000000300)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe) socket$nl_generic(0x10, 0x3, 0x10) mkdir(&(0x7f0000000440)='./file1\x00', 0x0) mount(0x0, &(0x7f0000000900)='./file1\x00', &(0x7f00000001c0)='tmpfs\x00', 0xc0ed0000, &(0x7f00000007c0)='\x00\x00\x00\x00\x00\x00\x00\b') r1 = add_key(&(0x7f0000000980)='cifs.spnego\x00', &(0x7f0000000940)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffc) add_key(&(0x7f0000000040)='asymmetric\x00', 0x0, &(0x7f0000000200)="308205553082033da00302010202147398ea982dd02ea8b1cf57c7f297b3e61afc8c0a300d06092a864886f70d01010b050030343132303006035504030c29436572746966696361746520766572696669636174696f6e2073656c662d74657374696e67206b65793020170d3232303531383232333234315a180f32313232303432343232333234315a30343132303006035504030c29436572746966696361746520766572696669636174696f6e2073656c662d74657374696e67206b657a30820222300d06092a864886f70d01010105000382020f003082020a0282020100ccac49dd3bcab0157e846ab20a695f1c0a61823b4f2ca3952c08584bb15d99e0c3c179c2b3ebc01e6d3e541dbdb7927b4db59558b2522ec6244b7163803277a7385edb72ae6e0decfbb66d017fe95566dfbf1d76780231e8e507f8b7825c0dd4bbfba2590d2e3a78953a8b4606474446d7cd066a4113e319f6bb6e38f48301a3bf4a394fd70ae938b3f594144eddf743fd24b2493ca5f77a7cd4453d977568f1ed4c420b70ca85f3dee5882cc5beb69734ba2402cd8b869fa973ca73cf9281ee7555bb18675cff3fb5dd331b0ce978db5ccfaa5c4342df5ea96decd7d7ffe6a13a921adaaef68c6f7bd5b46e06e98fe8de093189ed0e11a1fa8ae9e964596253dad170be11d4999711cf99de0b9d947eaab852ea37db907e35bdd9fe6d0a487028ddd50d7f03809314238fb922cd7c29fef172b55c0b12cf9c15f6114c7a45258c450a34ac2d9a81ca0b1322cdeb1a38881897960881aacc8f0f8a327b7668036843bf11ba5560fd801c0d9b69b60972bc0f412f0782c6e3b21391c46d149531be19bdbcede14c74a2e0780bbb94ec4c533aa2b5841d4b657edcf7db367dbe9e3b366642667635bfbef0c13c7ce9425c24530305a86724500275ff24463b358976e670dac5518c9ae505b00bd02dd47d5775946bf90aad0e410015d04fc07f902d18488f28fe5da7cd999ebd026c8a31f31cc74be693cd42a2e46810479dfc210203010001a35d305b300c0603551d130101ff04023000300b0603551d0f040403020780301d0603551d0e04160414f58703bb33ce1b73ee02eccdee5b8817518fe3db301f0603551d23041830168014f58703bb33ce1b73ee02eccdee5b8817518fe3db300d06092a864886f70d01010b05000382020100c02e12417b738516c8db8679e8f5cd44f4c6e281235e47cbab25f11e583e317f78ad85ebfe148860f77fd226a2f4982afdba050c203312cc4d1461648193d333edc8fff178cc5f519f09d7be0d5c74fd9bdf524ac9a871253304106736d0b30bc9a14072ae417b68e6e47bd028f76de73f50fc917c9156d4dfa6bbe84d1b58aa28fac119eb112f248b7cc5a98626aa6eb79bd5f806fb02527b9c9ea1e0078b5ee4b85529f648521c1b542d46d8e571b960d145b592898a63582ab3c6b276e23c825904ae5ac4997b2e4b4657b82924b2fdee2c0da483fa652a07358b97cfbd962ed17e6cc21e87b66c7665b5b262da8be973e3db33dd133a17636a76de8d8fe04761283a83ff8fe7c7e04aa3e507cfe98c35352ee7806631bf91580ae1253d38d3a4f059344707620fbe30dd818858f028b096e582f805b71301bcfac61f8672ccf9ee8ed9d6048c246cbf0f5d3739cf45c1933ad2ed5c5879748662307e8ebbdd7aa9edca40cb6247f4b49f527f7263a8f02baf452a48196de3fbf9196669c8cc62876c532b2d6e906c543a822541cb186aa422a8a1c447d781001c15510f1aafef9fa6618cbd6b8bede6ac0eb63a4c92e60f910a0f71c7a0b90d3a175a6f35c8e7504f46e870604806828b6658e673919c123d358e46ad5af5b3db692104fdd31cdf949d56b00ad195768dec9edd0b159764ade5f26202fc9e5f56423905b3", 0x559, r1) keyctl$instantiate(0xc, r0, &(0x7f00000009c0)=ANY=[@ANYBLOB="6c6f61642064656661756c742075001f5dd6df8d3e33282d2800eefcffeb2b7af500723a204039323233333732303336383534373735383037e3c9f8ce8063c25bdadd0718ede0334127e336d686aff97a2297856460743966d66de1e37a6fd1afd311413d926430193799d657df00c8f74b50312a89e41c91687dd8006ea717b23b202a2d1beddc3caf331d2ad21e76e0ab2a736e95c43eca0fa429cd87b04ab7138f9da7e06fd5b94c05933ce2b10a9432fdc326669d6ed3"], 0x2b, r1) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, 0x0) r2 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000000)={0x7, 0xd44, 0x6}) mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x4, 0x11, r2, 0x100000) r3 = fsopen(&(0x7f0000000000)='cgroup\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r3, 0x1, &(0x7f0000000780)='none', &(0x7f00000007c0)='\x00\x00\x00\x00\x00\x00\x00\t\x00\x00\x00\x00\x00^a&\xcd\x8c.\xda|\x9ex\x00\x1d\x1cL\t\\\x15Dk\xb7\x04\xd5\x7fj\xf4H\x9d\xb2\x8b\xf7\x8a3[\xc3\x99\x14\nc\xdfV\x1bR?\xaf\xe67\xa6\x99\xcc>', 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r4, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) mremap(&(0x7f0000041000/0x2000)=nil, 0x2000, 0x2000, 0x3, &(0x7f00004c3000/0x2000)=nil) r5 = socket$kcm(0x29, 0x2, 0x0) write$cgroup_pressure(r5, &(0x7f0000000140)={'full'}, 0xfffffdef) sendmsg$kcm(r5, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x20000818) setsockopt$sock_attach_bpf(r5, 0x1, 0x7, &(0x7f0000000340), 0x4) 55.41637854s ago: executing program 3 (id=1081): sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x6, 0x8, 0x3, 0x0, 0x1, 0x7ffffffd, 0x1, 0xfa11, 0xffffffff}, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r2, &(0x7f0000000380)={0xa, 0x4e21, 0x1, @loopback, 0x400014}, 0x1c) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000000)=0x10000) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADD(r3, 0x0, 0x482, &(0x7f0000000100)={0x6, @loopback, 0x15, 0x0, 'rr\x00'}, 0x2c) setsockopt(r3, 0x0, 0x483, &(0x7f0000000300)="060000007f00000100150000000000006d6800"/44, 0x2c) setsockopt(r3, 0x0, 0x489, &(0x7f0000000400)="060000007f00000100150000000000006d6800000000000000000000000000000000000000000000000000007f000001001500"/68, 0x44) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000007c0), &(0x7f0000000340), 0xe1ce, r4, 0x0, 0xa0028000}, 0x38) r5 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0xc03, 0x0) ioctl$UI_SET_FFBIT(r5, 0x4004556b, 0x50) setsockopt(r3, 0x0, 0x488, 0x0, 0x0) setsockopt(r3, 0x0, 0x484, &(0x7f0000000600)="060000007f00000100150000000000006d6800"/44, 0x2c) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, 0x0, 0x0) setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x2, &(0x7f0000000300)=@gcm_128={{0x303}, "fc895d8eb00066c2", "c5998c867c22b401046a89606ffcf92e", "2c5be7ad", "a0ca05c0707e52f4"}, 0x28) recvfrom$inet6(r2, 0x0, 0x0, 0x317, 0x0, 0x0) splice(r2, 0x0, r1, 0x0, 0x10000008ebc, 0x0) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) 50.79977674s ago: executing program 3 (id=1093): timer_create(0x3, 0x0, &(0x7f0000000300)) prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) r0 = openat$tun(0xffffffffffffff9c, 0x0, 0xa8442, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x6) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) timer_create(0x0, &(0x7f0000000280)={0x0, 0x21}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x26, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x4}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r2, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42795000) r3 = socket$kcm(0x23, 0x5, 0x0) listen(r3, 0x800) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r4, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000f00)=[{&(0x7f0000000200)="5c00000014006b05c84e21000ab16d6e230675f811000000440002005817d30461bc24eeb556a7ef595105ea1698fa51f60a64c9f408000000e786a6d0bdbdc3d44bd70011b6c0504bb9189d9193e9bd00", 0x51}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x240040c4) r5 = socket$phonet_pipe(0x23, 0x5, 0x2) connect$phonet_pipe(r5, &(0x7f0000000040)={0x23, 0x0, 0x58}, 0x10) sendto$phonet(r5, 0x0, 0x0, 0x80, 0x0, 0x0) accept4(r3, 0x0, 0x0, 0x80000) read(0xffffffffffffffff, &(0x7f0000002180)=""/262, 0x106) timerfd_settime(0xffffffffffffffff, 0x3, 0x0, 0x0) bind$alg(0xffffffffffffffff, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000140), 0x0) 33.73615789s ago: executing program 9 (id=1103): r0 = socket$inet(0x2, 0x1, 0x6) ioctl$sock_inet_SIOCSARP(r0, 0x8955, &(0x7f0000000000)={{0x2, 0x0, @private=0xa010104}, {0x306, @broadcast}, 0xc, {0x2, 0x4e25, @multicast2}, 'team_slave_0\x00'}) mkdirat(0xffffffffffffff9c, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r1, &(0x7f0000000000)='7', 0x1) ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, 0x0) ioctl(0xffffffffffffffff, 0x3b8f, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) r3 = syz_open_procfs(0xffffffffffffffff, 0x0) mkdirat(r3, &(0x7f0000000140)='./file0\x00', 0x8) mlockall(0x2) r4 = shmget$private(0x0, 0x400000, 0x8, &(0x7f000000e000/0x400000)=nil) shmctl$SHM_LOCK(r4, 0xb) shmat(r4, &(0x7f0000ffd000/0x1000)=nil, 0x7000) shmctl$SHM_UNLOCK(r4, 0xc) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='net/arp\x00') preadv(r5, &(0x7f0000000080)=[{&(0x7f0000000b40)=""/119, 0x77}], 0x1, 0x4000ffe, 0x0) 33.735868784s ago: executing program 3 (id=1104): r0 = mmap$KVM_VCPU(&(0x7f0000ffb000/0x2000)=nil, 0x930, 0x1000002, 0x4018831, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x80801) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000ffc000/0x1000)=nil, 0x1000}, 0x9}) syz_memcpy_off$KVM_EXIT_HYPERCALL(r0, 0x20, &(0x7f0000000180)="5e73663bf4082f7c6cbecbf09d6dd7be5a06dfd64563f329c16f799d1836bfc45a7badc8faed24bb77c848723a43602d1fe0d236c062e105ec77ffd00fb243c3111dda42112650cc", 0x0, 0xfe2a) r2 = epoll_create1(0x0) add_key(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./dev\x00', &(0x7f00000000c0)='devtmpfs\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./dev/mapper/control\x00', 0x0, 0x0) socket$xdp(0x2c, 0x3, 0x0) ioctl(r3, 0xc138fd03, &(0x7f0000000000)="04000000000000000000000038010000000000000000000000000000000000000000000000000000000000000000000074") syz_genetlink_get_family_id$ethtool(0x0, r3) sendmsg$ETHTOOL_MSG_WOL_GET(0xffffffffffffffff, 0x0, 0x0) userfaultfd(0x801) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000040)=0x3, 0xac5) syz_clone3(&(0x7f0000000900)={0x23800000, &(0x7f0000000040)=0xffffffffffffffff, 0x0, 0x0, {0x28}, 0x0, 0x0, 0x0, 0x0}, 0x58) io_setup(0x8, &(0x7f0000000600)=0x0) io_submit(r5, 0x1, &(0x7f0000001300)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0x6, r4, 0x0}]) ioctl(r3, 0xc138fd0e, &(0x7f0000000000)="040000000000000000000000380100003801") bpf$MAP_CREATE(0x600000000000000, &(0x7f0000000100)=ANY=[@ANYBLOB="0f000000040000000400000002000200000000003f1ff8f3693dff9b7c87a397f70ba65eea7748a943d8e2c14f6321e99c5d8e7fef8985476a"], 0x48) r6 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./dev/mapper/control\x00', 0x0, 0x0) ioctl(r6, 0xc138fd05, &(0x7f0000000000)="040000000200000000007c2fc2") epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000080)={0x10000000}) 33.735612854s ago: executing program 3 (id=1105): socket$nl_route(0x10, 0x3, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = socket$inet_udp(0x2, 0x2, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000c40)={&(0x7f0000000c80)=ANY=[@ANYBLOB="300000001800010600000000000000002d0100000000000100000000050001002e0000000c000500010000000c000000300000001800010600000000000000002d010000000000010000000005000100fe0000000c000500010000000c"], 0xc0}}, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f0000000140)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="0207000902"], 0x10}}, 0x0) r4 = syz_open_procfs(0xffffffffffffffff, 0x0) pread64(r4, &(0x7f0000000080)=""/102356, 0x18fd4, 0x200) openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000019180)={0x1, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94) bind$inet(r1, &(0x7f00000001c0)={0x2, 0x2, @remote}, 0x10) connect$inet(r1, &(0x7f0000000480)={0x2, 0x4e23, @multicast2}, 0x10) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10}, 0x0) setsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f00000002c0)={{{@in=@multicast2, @in6=@mcast1, 0x4e20, 0x4, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x3, 0xfffffffffffffffe}, {0x0, 0x0, 0xfffffffffffffffc, 0xff}, 0x0, 0x0, 0x1}, {{@in=@dev={0xac, 0x14, 0x14, 0x3c}, 0x0, 0x32}, 0x0, @in=@private=0xa010100, 0x0, 0x2, 0x0, 0xb7, 0xfffffffe, 0xffffff7e}}, 0xe8) sendmmsg(r1, &(0x7f0000007fc0), 0x800001d, 0x1c) 33.718227149s ago: executing program 3 (id=1107): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0x100}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x1) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000000)={0x1, 0x0, [{0xa6a}]}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) mlock(&(0x7f000042d000/0x4000)=nil, 0x4000) munlockall() shmctl$IPC_INFO(0x0, 0x3, &(0x7f0000007b40)=""/99) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080), 0xffffffffffffffff) setresuid(0x0, 0xee00, 0x0) capset(&(0x7f0000000500)={0x20080522}, &(0x7f0000000200)={0x200002, 0x200003, 0x803, 0x4, 0x7}) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x1) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) r5 = getpid() process_vm_readv(r5, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x42, 0x0) sendmsg$TIPC_NL_KEY_FLUSH(r3, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000180)={&(0x7f0000000200)={0x9c, r4, 0x300, 0x70bd28, 0x25dfdbfd, {}, [@TIPC_NLA_MEDIA={0x1c, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}]}, @TIPC_NLA_PUBL={0x1c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x6}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x7fffffff}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x9}]}, @TIPC_NLA_MEDIA={0x50, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x4c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xf17f}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x10}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xf8eb}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xe}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x927}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}]}]}]}, 0x9c}, 0x1, 0x0, 0x0, 0x40}, 0x8000) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000001bc0)=[@increfs], 0x0, 0x0, 0x0}) 33.717961473s ago: executing program 56 (id=1107): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0x100}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x1) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000000)={0x1, 0x0, [{0xa6a}]}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) mlock(&(0x7f000042d000/0x4000)=nil, 0x4000) munlockall() shmctl$IPC_INFO(0x0, 0x3, &(0x7f0000007b40)=""/99) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080), 0xffffffffffffffff) setresuid(0x0, 0xee00, 0x0) capset(&(0x7f0000000500)={0x20080522}, &(0x7f0000000200)={0x200002, 0x200003, 0x803, 0x4, 0x7}) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x1) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) r5 = getpid() process_vm_readv(r5, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x42, 0x0) sendmsg$TIPC_NL_KEY_FLUSH(r3, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000180)={&(0x7f0000000200)={0x9c, r4, 0x300, 0x70bd28, 0x25dfdbfd, {}, [@TIPC_NLA_MEDIA={0x1c, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}]}, @TIPC_NLA_PUBL={0x1c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x6}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x7fffffff}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x9}]}, @TIPC_NLA_MEDIA={0x50, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x4c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xf17f}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x10}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xf8eb}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xe}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x927}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}]}]}]}, 0x9c}, 0x1, 0x0, 0x0, 0x40}, 0x8000) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000001bc0)=[@increfs], 0x0, 0x0, 0x0}) 33.692889001s ago: executing program 9 (id=1109): r0 = mmap$KVM_VCPU(&(0x7f0000ffb000/0x2000)=nil, 0x930, 0x1000002, 0x4018831, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x80801) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000ffc000/0x1000)=nil, 0x1000}, 0x9}) syz_memcpy_off$KVM_EXIT_HYPERCALL(r0, 0x20, &(0x7f0000000180)="5e73663bf4082f7c6cbecbf09d6dd7be5a06dfd64563f329c16f799d1836bfc45a7badc8faed24bb77c848723a43602d1fe0d236c062e105ec77ffd00fb243c3111dda42112650cc", 0x0, 0xfe2a) r2 = epoll_create1(0x0) add_key(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./dev\x00', &(0x7f00000000c0)='devtmpfs\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./dev/mapper/control\x00', 0x0, 0x0) socket$xdp(0x2c, 0x3, 0x0) syz_genetlink_get_family_id$ethtool(0x0, r3) sendmsg$ETHTOOL_MSG_WOL_GET(0xffffffffffffffff, 0x0, 0x0) r4 = userfaultfd(0x801) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x1c}) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000040)=0x3, 0xac5) syz_clone3(&(0x7f0000000900)={0x23800000, &(0x7f0000000040)=0xffffffffffffffff, 0x0, 0x0, {0x28}, 0x0, 0x0, 0x0, 0x0}, 0x58) io_submit(0x0, 0x1, &(0x7f0000001300)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0x6, r5, 0x0}]) ioctl(r3, 0xc138fd0e, &(0x7f0000000000)="040000000000000000000000380100003801") bpf$MAP_CREATE(0x600000000000000, &(0x7f0000000100)=ANY=[@ANYBLOB="0f000000040000000400000002000200000000003f1ff8f3693dff9b7c87a397f70ba65eea7748a943d8e2c14f6321e99c5d8e7fef8985476a"], 0x48) r6 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./dev/mapper/control\x00', 0x0, 0x0) ioctl(r6, 0xc138fd05, &(0x7f0000000000)="040000000200000000007c2fc2") epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000080)={0x10000000}) 28.276980169s ago: executing program 9 (id=1113): r0 = userfaultfd(0x80801) ioctl$UFFDIO_API(r0, 0xc018aa3f, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000040)=0x3, 0xac5) syz_clone3(&(0x7f0000000900)={0x23800000, &(0x7f0000000040)=0xffffffffffffffff, 0x0, 0x0, {0x28}, 0x0, 0x0, 0x0, 0x0}, 0x58) io_setup(0x8, &(0x7f0000000600)=0x0) io_submit(r2, 0x1, &(0x7f0000001300)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0x6, r1, 0x0}]) 28.005649818s ago: executing program 9 (id=1121): r0 = mmap$KVM_VCPU(&(0x7f0000ffb000/0x2000)=nil, 0x930, 0x1000002, 0x4018831, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x80801) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000ffc000/0x1000)=nil, 0x1000}, 0x9}) syz_memcpy_off$KVM_EXIT_HYPERCALL(r0, 0x20, &(0x7f0000000180)="5e73663bf4082f7c6cbecbf09d6dd7be5a06dfd64563f329c16f799d1836bfc45a7badc8faed24bb77c848723a43602d1fe0d236c062e105ec77ffd00fb243c3111dda42112650cc", 0x0, 0xfe2a) r2 = epoll_create1(0x0) add_key(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./dev\x00', &(0x7f00000000c0)='devtmpfs\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./dev/mapper/control\x00', 0x0, 0x0) socket$xdp(0x2c, 0x3, 0x0) ioctl(r3, 0xc138fd03, &(0x7f0000000000)="04000000000000000000000038010000000000000000000000000000000000000000000000000000000000000000000074") syz_genetlink_get_family_id$ethtool(0x0, r3) sendmsg$ETHTOOL_MSG_WOL_GET(0xffffffffffffffff, 0x0, 0x0) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x1c}) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000040)=0x3, 0xac5) syz_clone3(&(0x7f0000000900)={0x23800000, &(0x7f0000000040)=0xffffffffffffffff, 0x0, 0x0, {0x28}, 0x0, 0x0, 0x0, 0x0}, 0x58) io_setup(0x8, &(0x7f0000000600)=0x0) io_submit(r5, 0x1, &(0x7f0000001300)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0x6, r4, 0x0}]) ioctl(r3, 0xc138fd0e, &(0x7f0000000000)="040000000000000000000000380100003801") bpf$MAP_CREATE(0x600000000000000, &(0x7f0000000100)=ANY=[@ANYBLOB="0f000000040000000400000002000200000000003f1ff8f3693dff9b7c87a397f70ba65eea7748a943d8e2c14f6321e99c5d8e7fef8985476a"], 0x48) r6 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./dev/mapper/control\x00', 0x0, 0x0) ioctl(r6, 0xc138fd05, &(0x7f0000000000)="040000000200000000007c2fc2") epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000080)={0x10000000}) 28.005318055s ago: executing program 5 (id=1122): r0 = mmap$KVM_VCPU(&(0x7f0000ffb000/0x2000)=nil, 0x930, 0x1000002, 0x4018831, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x80801) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000ffc000/0x1000)=nil, 0x1000}, 0x9}) syz_memcpy_off$KVM_EXIT_HYPERCALL(r0, 0x20, &(0x7f0000000180)="5e73663bf4082f7c6cbecbf09d6dd7be5a06dfd64563f329c16f799d1836bfc45a7badc8faed24bb77c848723a43602d1fe0d236c062e105ec77ffd00fb243c3111dda42112650cc", 0x0, 0xfe2a) epoll_create1(0x0) add_key(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./dev\x00', &(0x7f00000000c0)='devtmpfs\x00', 0x0, 0x0) socket$xdp(0x2c, 0x3, 0x0) ioctl(0xffffffffffffffff, 0xc138fd03, &(0x7f0000000000)="04000000000000000000000038010000000000000000000000000000000000000000000000000000000000000000000074") syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_WOL_GET(0xffffffffffffffff, 0x0, 0x0) r2 = userfaultfd(0x801) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x1c}) syz_clone3(&(0x7f0000000900)={0x23800000, &(0x7f0000000040)=0xffffffffffffffff, 0x0, 0x0, {0x28}, 0x0, 0x0, 0x0, 0x0}, 0x58) io_setup(0x8, &(0x7f0000000600)=0x0) io_submit(r4, 0x1, &(0x7f0000001300)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0x6, r3, 0x0}]) ioctl(0xffffffffffffffff, 0xc138fd0e, &(0x7f0000000000)="040000000000000000000000380100003801") 27.772269177s ago: executing program 9 (id=1124): socket$nl_generic(0x10, 0x3, 0x10) socket$inet_udp(0x2, 0x2, 0x0) r0 = getpgid(0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) r3 = add_key$user(&(0x7f0000000080), &(0x7f0000000140)={'syz', 0x0}, &(0x7f0000000180)='5', 0x1, 0xfffffffffffffffd) keyctl$KEYCTL_MOVE(0x1e, r3, 0xfffffffffffffffb, 0xffffffffffffffff, 0x1) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000880)=ANY=[@ANYBLOB="090000000600000004000000fc07"], 0x48) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f00000003c0)="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", 0x2000, 0x0) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) writev(r5, &(0x7f00000002c0)=[{&(0x7f00000001c0)="4f3bf5835e00000000225121d6958c78cfc0e1f14f1b257f4031f897f3b12ffaada8201e50923df2bb7d50bc559759ae785f8c8564bd270f568b646cf58cb2837303a1d7ad57d8c24d461e2a9eaf1158603987f8e315e14c", 0x58}], 0x1) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000), &(0x7f0000002480), 0xce4, r4}, 0x38) bpf$MAP_UPDATE_BATCH(0x1b, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x3ff, r4, 0x0, 0x100000000000000}, 0x38) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) r7 = openat$cuse(0xffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$FUSE_NOTIFY_RESEND(r7, &(0x7f0000000100)={0x14}, 0x14) sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={0x0}}, 0x0) sendmsg$IPSET_CMD_LIST(r6, 0x0, 0x48000) ioctl$TCGETS(0xffffffffffffffff, 0x8910, &(0x7f00000002c0)) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) move_pages(0x0, 0x2064, &(0x7f0000000040)=[&(0x7f0000ff9000/0x2000)=nil], &(0x7f0000001180), &(0x7f0000000000), 0x0) 27.435399199s ago: executing program 7 (id=1126): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0xb, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) syz_emit_ethernet(0xa5, &(0x7f00000003c0)=ANY=[@ANYBLOB="ffffffffff3f54aaaaaaaaaa08004f04009700680000ff069078e000000100000000940a9b40f51983638a38890f746401010200000000ac1414aa", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="e10a0008907800801e10230c0400000000000000800000000402fe06e2d4c3d9fe06e2d4c3d90104020000003b2378b45fa666a7dcdf1525"], 0x0) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) munmap(&(0x7f0000583000/0x4000)=nil, 0x4000) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r1, 0x8983, &(0x7f0000000100)={0x0, 'erspan0\x00', {0x1}, 0x26}) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r3 = openat$ublk_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r4 = syz_ublk_setup_io_uring(0x20, &(0x7f0000000040)={0x0, 0x0, 0x100}, &(0x7f00000000c0)=0x0, &(0x7f0000000100)=0x0, &(0x7f00000004c0)=0x0) r8 = syz_ublk_add_dev(r4, r5, r6, r7, &(0x7f0000000200)={0x2e, 0x0, 0x0, r3, 0xc0207504, 0x0, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000500)=@new_dev={0x2, 0x268, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0xc4ddfbc9bba2bd9a}}}, &(0x7f00000001c0)=0x0) r11 = syz_open_dev$ublk_chdev(0x0, r8, 0x2) r12 = add_key(&(0x7f0000000000)='big_key\x00', &(0x7f0000000280)={'syz', 0x1}, &(0x7f00000002c0)="1d", 0xfe3a, 0xfffffffffffffffe) keyctl$get_keyring_id(0x0, r12, 0x1) syz_ublk_setup_queues(r11, r10, &(0x7f00000005c0)={0x0, 0x3e0e, 0x1, 0x1, 0x28e, 0x0, r4}, &(0x7f0000000b40)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x701, 0x200, 0x2, 0x23f}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x6, 0x2, 0x0, 0x32d, 0x0, r4}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x42d3, 0x8000, 0x1, 0x2db}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x118d, 0x20, 0x3fc, 0x1fe}}], 0x4, &(0x7f0000001f40)={0x2e, 0x0, 0x0, r11, 0xc0107526, 0x0, 0x20000700, 0x0, 0x1, {0x10}, 0x0, r9, '\x00', {0x3, 0xee3, 0x100104, 0x0}}, 0x0) prlimit64(r0, 0x8, &(0x7f0000000300)={0x1, 0x8}, &(0x7f0000000340)) 26.434066579s ago: executing program 7 (id=1127): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000180)={0x20, 0xff, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x2, 0x0, 0x93}, 0xe) socket(0x18, 0x5, 0x1046) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x10) connect$inet(r1, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r2 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) connect$inet(r2, &(0x7f0000000040)={0x2, 0x4e23, @remote}, 0x10) sendmmsg$inet(r2, &(0x7f0000000980)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x20000, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$nl_generic(0x10, 0x3, 0x10) sendto$inet6(r0, &(0x7f0000000300)="8b", 0x34000, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @private1}, 0x1c) chdir(&(0x7f0000000080)='./file0/file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x2c41, 0x0) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff}, 0x4000) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000180), 0x2004400, &(0x7f0000000200)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[], [], 0x6b}}) shutdown(r0, 0x1) 26.13248216s ago: executing program 9 (id=1128): socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) socket$packet(0x11, 0x3, 0x300) socket$inet6(0xa, 0x800000000000002, 0x0) prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x8, 0xf32}, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x3}, 0x4) r2 = socket$netlink(0x10, 0x3, 0x4) write(r2, 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0), 0x80200, 0x0) syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2000000002, 0x4000) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x8) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$inet_udp(0x2, 0x2, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@any_dev={0x4, 0x4e4, 0x0, 0x0, 0x1000, 0x9, 0x0, 0x0, 0xa4}}}, &(0x7f0000000140)=0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = dup(r5) syz_ublk_setup_queues(r6, r4, 0x0, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xd24, 0x40000, 0x0, 0x44}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5c80, 0x8000, 0x3, 0xbab}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xc14b, 0x2, 0x3, 0x33b}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x2258, 0x200, 0x0, 0xffffffff}}], 0x1, 0x0, 0x0) 25.999432493s ago: executing program 57 (id=1128): socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) socket$packet(0x11, 0x3, 0x300) socket$inet6(0xa, 0x800000000000002, 0x0) prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x8, 0xf32}, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x3}, 0x4) r2 = socket$netlink(0x10, 0x3, 0x4) write(r2, 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0), 0x80200, 0x0) syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2000000002, 0x4000) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x8) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$inet_udp(0x2, 0x2, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@any_dev={0x4, 0x4e4, 0x0, 0x0, 0x1000, 0x9, 0x0, 0x0, 0xa4}}}, &(0x7f0000000140)=0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = dup(r5) syz_ublk_setup_queues(r6, r4, 0x0, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xd24, 0x40000, 0x0, 0x44}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5c80, 0x8000, 0x3, 0xbab}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xc14b, 0x2, 0x3, 0x33b}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x2258, 0x200, 0x0, 0xffffffff}}], 0x1, 0x0, 0x0) 24.845849849s ago: executing program 7 (id=1131): bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0x0, @any, 0x4, 0x1}, 0xe) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) openat$sequencer(0xffffff9c, &(0x7f0000000140), 0x14800, 0x0) ioctl$SIOCSIFHWADDR(r0, 0x8923, 0x0) r1 = socket(0x10, 0x803, 0x0) linkat(0xffffffffffffff9c, &(0x7f00000003c0)='./cgroup\x00', 0xffffffffffffff9c, &(0x7f0000000100)='./file7\x00', 0x1000) open(&(0x7f0000000280)='.\x00', 0x0, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @tid=0xffffffffffffffff}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r2, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x18a42000) socket$nl_rdma(0x10, 0x3, 0x14) renameat2(0xffffffffffffff9c, &(0x7f0000000780)='./file7\x00', 0xffffffffffffff9c, &(0x7f00000007c0)='./file1\x00', 0x0) close_range(r1, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0xefd, &(0x7f0000000080)={0x0, 0xfffffffe, 0x2, 0x83, 0x3af}, 0x0, 0x0, 0x0) listen(0xffffffffffffffff, 0x3) 24.650528656s ago: executing program 7 (id=1132): r0 = mmap$KVM_VCPU(&(0x7f0000ffb000/0x2000)=nil, 0x930, 0x1000002, 0x4018831, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x80801) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000ffc000/0x1000)=nil, 0x1000}, 0x9}) syz_memcpy_off$KVM_EXIT_HYPERCALL(r0, 0x20, &(0x7f0000000180)="5e73663bf4082f7c6cbecbf09d6dd7be5a06dfd64563f329c16f799d1836bfc45a7badc8faed24bb77c848723a43602d1fe0d236c062e105ec77ffd00fb243c3111dda42112650cc", 0x0, 0xfe2a) r2 = epoll_create1(0x0) add_key(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./dev\x00', &(0x7f00000000c0)='devtmpfs\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./dev/mapper/control\x00', 0x0, 0x0) ioctl(r3, 0xc138fd03, &(0x7f0000000000)="04000000000000000000000038010000000000000000000000000000000000000000000000000000000000000000000074") syz_genetlink_get_family_id$ethtool(0x0, r3) sendmsg$ETHTOOL_MSG_WOL_GET(0xffffffffffffffff, 0x0, 0x0) r4 = userfaultfd(0x801) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x1c}) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000040)=0x3, 0xac5) syz_clone3(&(0x7f0000000900)={0x23800000, &(0x7f0000000040)=0xffffffffffffffff, 0x0, 0x0, {0x28}, 0x0, 0x0, 0x0, 0x0}, 0x58) io_submit(0x0, 0x1, &(0x7f0000001300)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0x6, r5, 0x0}]) ioctl(r3, 0xc138fd0e, &(0x7f0000000000)="040000000000000000000000380100003801") bpf$MAP_CREATE(0x600000000000000, &(0x7f0000000100)=ANY=[@ANYBLOB="0f000000040000000400000002000200000000003f1ff8f3693dff9b7c87a397f70ba65eea7748a943d8e2c14f6321e99c5d8e7fef8985476a"], 0x48) r6 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./dev/mapper/control\x00', 0x0, 0x0) ioctl(r6, 0xc138fd05, &(0x7f0000000000)="040000000200000000007c2fc2") epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000080)={0x10000000}) 24.52096438s ago: executing program 7 (id=1134): syz_ublk_setup_io_uring(0x20, &(0x7f0000000340)={0x0, 0x7fc8, 0x1000, 0x40002, 0x393}, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0xffffd000) syz_genetlink_get_family_id$l2tp(0x0, 0xffffffffffffffff) syz_ublk_add_dev(0xffffffffffffffff, r0, r1, r2, &(0x7f0000000400)={0x2e, 0x8, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000000c0)=@any_dev={0x3, 0x603, 0x0, 0x0, 0x1000, 0xb6a7, 0x0, 0x0, 0x28}}}, &(0x7f0000000180)=0x0) sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0x0) sendto$packet(0xffffffffffffffff, &(0x7f00000000c0)="37031c00", 0x4, 0x4000800, 0x0, 0x47) r5 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x82042, 0x0) syz_ublk_setup_queues(r5, r4, &(0x7f0000000480)={0x0, 0x18ee, 0x1000, 0x3, 0x1d2}, &(0x7f0000002680)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xb656, 0x20, 0x2, 0x342, 0x0, r5}, 0xffffffffffffffff}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x842d, 0x40, 0x2, 0x6a}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xb6d4, 0x10000, 0x1, 0x252}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xeaff, 0x8, 0x0, 0x231}}], 0x4, &(0x7f0000003900)={0x2e, 0x62, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x1, {0x9}, 0x0, r3, '\x00', {0x2003, 0xb66, 0x0, 0x0}}, 0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000040)={0x14, 0x23, 0x409, 0x70bd25, 0x25dfd3ff, {0x2}}, 0x14}, 0x1, 0x0, 0x0, 0x24040811}, 0x8410) syz_clone(0x400, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000640)="3d183e767f00214c2e5c07799ae108914ae4c2cd24a1470432a3917ac4932ba9e1c6f129861f13f430ca8eeac0f55b39cef14cc9") bind$alg(0xffffffffffffffff, &(0x7f0000000040)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_ctr_aes256\x00'}, 0x58) connect$inet6(0xffffffffffffffff, &(0x7f0000000180)={0xa, 0x3, 0xc, @dev={0xfe, 0x80, '\x00', 0xd}, 0x9}, 0x1c) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) syz_clone(0x20223000, 0x0, 0x0, 0x0, 0x0, 0x0) mmap$IORING_MAP_OFF_PARAM_REGION(0x0, 0x9, 0x1, 0x20010, r6, 0x20000000) r8 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000500)='/sys/kernel/kexec_crash_size', 0x202, 0x0) sendfile(r8, r8, 0x0, 0x6) sendmsg$TIPC_NL_BEARER_ADD(r8, &(0x7f0000002500)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000024c0)={&(0x7f0000002340)={0x80, 0x0, 0x8, 0x70bd26, 0x25dfdbfd, {}, [@TIPC_NLA_NODE={0x68, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ID={0x64, 0x3, "c907821af0a1a820c8a9d270a15dbabaa1e56e30808953e62fb8fc92d00052d206e217f2dce4148877931e67d9998da21eb88975347d6c0f02b1fcf501d04c3d3332e23cd85edcaa445a27871c8cb8690379961e759cb5262f98620916a88c26"}]}, @TIPC_NLA_NODE={0x4}]}, 0x80}, 0x1, 0x0, 0x0, 0x10}, 0x8000) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r8, 0x40182103, &(0x7f00000003c0)={0x0, 0x1, 0xffffffffffffffff, 0x1, 0x80000}) 24.216373326s ago: executing program 7 (id=1135): mkdir(&(0x7f00000002c0)='./file0\x00', 0x1c) ioctl$sock_ifreq(0xffffffffffffffff, 0x8993, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x1b4f02, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0) symlinkat(0x0, 0xffffffffffffff9c, 0x0) r1 = syz_io_uring_setup(0x24, &(0x7f0000000040)={0x0, 0x0, 0x800, 0x0, 0xfffffffe}, &(0x7f00000000c0)=0x0, &(0x7f00000003c0)=0x0, &(0x7f0000000140)=0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0, 0x118) r6 = inotify_init1(0x0) inotify_add_watch(r6, &(0x7f0000000200)='.\x00', 0x44000160) io_uring_register$IORING_REGISTER_BUFFERS2(r1, 0xf, &(0x7f0000000300)={0x1, 0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000001500)=""/4106, 0x100a}], 0x0}, 0x20) syz_io_uring_submit(r2, r3, r4, &(0x7f0000000600)=@IORING_OP_READV_FIXED={0x3c, 0x2, 0x0, @fd=r5, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, '\x00', 0x0}}) io_uring_enter(r1, 0x1, 0x1, 0x1, 0x0, 0x0) ioctl$TIOCVHANGUP(r0, 0x5437, 0x0) chdir(0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x275a, 0x0) syz_usb_connect(0x1, 0x371, 0x0, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setscheduler(0x0, 0x1, 0x0) openat$sequencer(0xffffffffffffff9c, 0x0, 0x80200, 0x0) r7 = syz_open_dev$sndmidi(0x0, 0x2, 0x141102) writev(r7, 0x0, 0x0) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) mkdir(0x0, 0x0) sendmsg$key(0xffffffffffffffff, 0x0, 0x0) 24.162428247s ago: executing program 58 (id=1135): mkdir(&(0x7f00000002c0)='./file0\x00', 0x1c) ioctl$sock_ifreq(0xffffffffffffffff, 0x8993, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x1b4f02, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0) symlinkat(0x0, 0xffffffffffffff9c, 0x0) r1 = syz_io_uring_setup(0x24, &(0x7f0000000040)={0x0, 0x0, 0x800, 0x0, 0xfffffffe}, &(0x7f00000000c0)=0x0, &(0x7f00000003c0)=0x0, &(0x7f0000000140)=0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0, 0x118) r6 = inotify_init1(0x0) inotify_add_watch(r6, &(0x7f0000000200)='.\x00', 0x44000160) io_uring_register$IORING_REGISTER_BUFFERS2(r1, 0xf, &(0x7f0000000300)={0x1, 0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000001500)=""/4106, 0x100a}], 0x0}, 0x20) syz_io_uring_submit(r2, r3, r4, &(0x7f0000000600)=@IORING_OP_READV_FIXED={0x3c, 0x2, 0x0, @fd=r5, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, '\x00', 0x0}}) io_uring_enter(r1, 0x1, 0x1, 0x1, 0x0, 0x0) ioctl$TIOCVHANGUP(r0, 0x5437, 0x0) chdir(0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x275a, 0x0) syz_usb_connect(0x1, 0x371, 0x0, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setscheduler(0x0, 0x1, 0x0) openat$sequencer(0xffffffffffffff9c, 0x0, 0x80200, 0x0) r7 = syz_open_dev$sndmidi(0x0, 0x2, 0x141102) writev(r7, 0x0, 0x0) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) mkdir(0x0, 0x0) sendmsg$key(0xffffffffffffffff, 0x0, 0x0) 21.707950636s ago: executing program 5 (id=1133): r0 = mmap$KVM_VCPU(&(0x7f0000ffb000/0x2000)=nil, 0x930, 0x1000002, 0x4018831, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x80801) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000ffc000/0x1000)=nil, 0x1000}, 0x9}) syz_memcpy_off$KVM_EXIT_HYPERCALL(r0, 0x20, &(0x7f0000000180)="5e73663bf4082f7c6cbecbf09d6dd7be5a06dfd64563f329c16f799d1836bfc45a7badc8faed24bb77c848723a43602d1fe0d236c062e105ec77ffd00fb243c3111dda42112650cc", 0x0, 0xfe2a) r2 = epoll_create1(0x0) add_key(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./dev\x00', &(0x7f00000000c0)='devtmpfs\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./dev/mapper/control\x00', 0x0, 0x0) socket$xdp(0x2c, 0x3, 0x0) ioctl(r3, 0xc138fd03, &(0x7f0000000000)="04000000000000000000000038010000000000000000000000000000000000000000000000000000000000000000000074") syz_genetlink_get_family_id$ethtool(0x0, r3) sendmsg$ETHTOOL_MSG_WOL_GET(0xffffffffffffffff, 0x0, 0x0) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x1c}) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000040)=0x3, 0xac5) syz_clone3(&(0x7f0000000900)={0x23800000, &(0x7f0000000040)=0xffffffffffffffff, 0x0, 0x0, {0x28}, 0x0, 0x0, 0x0, 0x0}, 0x58) io_setup(0x8, &(0x7f0000000600)=0x0) io_submit(r5, 0x1, &(0x7f0000001300)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0x6, r4, 0x0}]) ioctl(r3, 0xc138fd0e, &(0x7f0000000000)="040000000000000000000000380100003801") bpf$MAP_CREATE(0x600000000000000, &(0x7f0000000100)=ANY=[@ANYBLOB="0f000000040000000400000002000200000000003f1ff8f3693dff9b7c87a397f70ba65eea7748a943d8e2c14f6321e99c5d8e7fef8985476a"], 0x48) r6 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./dev/mapper/control\x00', 0x0, 0x0) ioctl(r6, 0xc138fd05, &(0x7f0000000000)="040000000200000000007c2fc2") epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000080)={0x10000000}) 15.755710942s ago: executing program 5 (id=1148): r0 = userfaultfd(0x80801) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xac5) syz_clone3(&(0x7f0000000900)={0x23800000, &(0x7f0000000040)=0xffffffffffffffff, 0x0, 0x0, {0x28}, 0x0, 0x0, 0x0, 0x0}, 0x58) io_setup(0x8, &(0x7f0000000600)=0x0) io_submit(r2, 0x1, &(0x7f0000001300)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0x6, r1, 0x0}]) 14.873311393s ago: executing program 5 (id=1141): r0 = mmap$KVM_VCPU(&(0x7f0000ffb000/0x2000)=nil, 0x930, 0x1000002, 0x4018831, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x80801) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000ffc000/0x1000)=nil, 0x1000}, 0x9}) syz_memcpy_off$KVM_EXIT_HYPERCALL(r0, 0x20, &(0x7f0000000180)="5e73663bf4082f7c6cbecbf09d6dd7be5a06dfd64563f329c16f799d1836bfc45a7badc8faed24bb77c848723a43602d1fe0d236c062e105ec77ffd00fb243c3111dda42112650cc", 0x0, 0xfe2a) r2 = epoll_create1(0x0) add_key(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./dev\x00', &(0x7f00000000c0)='devtmpfs\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./dev/mapper/control\x00', 0x0, 0x0) ioctl(r3, 0xc138fd03, &(0x7f0000000000)="04000000000000000000000038010000000000000000000000000000000000000000000000000000000000000000000074") syz_genetlink_get_family_id$ethtool(0x0, r3) sendmsg$ETHTOOL_MSG_WOL_GET(0xffffffffffffffff, 0x0, 0x0) r4 = userfaultfd(0x801) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x1c}) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000040)=0x3, 0xac5) syz_clone3(&(0x7f0000000900)={0x23800000, &(0x7f0000000040)=0xffffffffffffffff, 0x0, 0x0, {0x28}, 0x0, 0x0, 0x0, 0x0}, 0x58) io_submit(0x0, 0x1, &(0x7f0000001300)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0x6, r5, 0x0}]) ioctl(r3, 0xc138fd0e, &(0x7f0000000000)="040000000000000000000000380100003801") bpf$MAP_CREATE(0x600000000000000, &(0x7f0000000100)=ANY=[@ANYBLOB="0f000000040000000400000002000200000000003f1ff8f3693dff9b7c87a397f70ba65eea7748a943d8e2c14f6321e99c5d8e7fef8985476a"], 0x48) r6 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./dev/mapper/control\x00', 0x0, 0x0) ioctl(r6, 0xc138fd05, &(0x7f0000000000)="040000000200000000007c2fc2") epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000080)={0x10000000}) 14.623329928s ago: executing program 5 (id=1143): mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x1000000) r0 = userfaultfd(0x80001) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000002c0)={0xaa, 0x31d}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000000000/0x400000)=nil, 0x400000}, 0x1}) r1 = syz_open_dev$radio(&(0x7f0000000340), 0x3, 0x2) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a40)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x8000}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1, 0x0, 0x3}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0x98, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x70, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_EXTHDR_OFFSET={0x8, 0x3, 0x1, 0x0, 0x3b}, @NFTA_EXTHDR_LEN={0x8, 0x4, 0x1, 0x0, 0x22}, @NFTA_EXTHDR_TYPE={0x5, 0x2, 0x7}]}}}, {0x38, 0x1, 0x0, 0x1, @bitwise={{0xc}, @val={0x28, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_BITWISE_SREG={0x8, 0x1, 0x1, 0x0, 0x14}, @NFTA_BITWISE_DREG={0x8, 0x2, 0x1, 0x0, 0x12}, @NFTA_BITWISE_OP={0x8, 0x6, 0x1, 0x0, 0x4}, @NFTA_BITWISE_MASK={0x4}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x10c}}, 0x0) writev(r1, &(0x7f0000005200)=[{&(0x7f0000003c40)="fb", 0x1}], 0x1) r3 = socket$inet6(0xa, 0x5, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x1, &(0x7f0000001340)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x180) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r4, &(0x7f0000000000)='7', 0x1) syz_open_procfs(0xffffffffffffffff, &(0x7f00000001c0)='net\x00') openat$vimc0(0xffffff9c, &(0x7f0000000480), 0x2, 0x0) syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x30b5, 0x0, 0x2, 0x158}, &(0x7f0000000100), &(0x7f0000000280), &(0x7f0000000140)) close(0x3) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r5, 0x84, 0x80, &(0x7f0000000000)="1400000009000000", 0x8) setsockopt$inet_int(r3, 0x0, 0xf, &(0x7f0000d10ffc)=0x200, 0x4) bind$inet6(r3, &(0x7f0000000040)={0xa, 0x1, 0x10000, @dev={0xfe, 0x80, '\x00', 0x1e}, 0x6}, 0x1c) connect$inet6(r3, &(0x7f0000000140)={0xa, 0x4e21, 0x1, @loopback, 0xffff}, 0x1c) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_REM(r3, 0x84, 0x65, &(0x7f00000003c0)=[@in6={0xa, 0x0, 0xfffffffc, @local}], 0x1c) mremap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x400000, 0x3, &(0x7f0000c00000/0x400000)=nil) 14.481957199s ago: executing program 8 (id=1144): r0 = openat$ppp(0xffffffffffffff9c, 0x0, 0x82000, 0x0) ioctl$PPPIOCGNPMODE(r0, 0xc008744c, &(0x7f0000000240)={0x29, 0x2}) r1 = openat$dma_heap(0xffffffffffffff9c, 0x0, 0x42300, 0x0) syz_emit_vhci(&(0x7f00000002c0)=ANY=[@ANYBLOB="040e0c0b1c20"], 0xf) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r2, 0x29, 0x0, &(0x7f0000000200)=0xa9, 0x4) ioctl$VFAT_IOCTL_READDIR_BOTH(r1, 0x82187201, &(0x7f00000004c0)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) r3 = socket$can_raw(0x1d, 0x3, 0x1) sendmsg$can_raw(r3, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000004}, 0x10) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x1) ioctl$KVM_SET_CPUID2(r6, 0x4008ae90, &(0x7f0000000100)={0xeb, 0x0, [{0x1, 0x0, 0x5, 0x7, 0x800, 0x7fffffff, 0x2}]}) ioctl$KVM_GET_CPUID2(r6, 0xc008ae91, &(0x7f0000000000)) mprotect(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x3000002) r7 = socket$nl_crypto(0x10, 0x3, 0x15) setsockopt$inet_mreqsrc(0xffffffffffffffff, 0x0, 0x27, &(0x7f0000000280)={@multicast2, @local, @remote}, 0xc) lsetxattr$trusted_overlay_upper(0x0, 0x0, 0x0, 0x0, 0x0) r8 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_mreqsrc(r8, 0x0, 0x27, &(0x7f0000000280)={@multicast2, @local, @remote}, 0xc) setsockopt$inet_msfilter(r8, 0x0, 0x29, 0x0, 0x1c) syz_emit_ethernet(0x36, &(0x7f0000001800)={@link_local, @local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x64, 0x0, 0x4, 0x2, 0x0, @empty, @multicast2}, @timestamp_reply={0x11, 0x0, 0x0, 0xe000, 0x2, 0x10001}}}}}, 0x0) sendmsg$nl_crypto(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=ANY=[@ANYBLOB="e0000000130001002abd7000fbdbdf2561656769733132382d6165736e6900000000000000000000000000000000000000000000000000c720db9238d5c41a00000000000000000000000000000000002000"/118], 0xe0}, 0x1, 0x0, 0x0, 0x40801}, 0x10) ioctl$VHOST_SET_FEATURES(r1, 0x4008af00, &(0x7f00000001c0)=0x8000000) 13.763828452s ago: executing program 8 (id=1146): setns(0xc9, 0x0) r0 = socket$netlink(0x10, 0x3, 0x14) sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="80000000000201040000000000000000020000002400028014000180080001007f00000108000200ac1414000c0002800500010000000000240003801400018008000100ac1414aa08000200ac1414bb0c000280"], 0x80}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) gettid() fanotify_init(0xef0, 0x2) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r5, 0x560a, &(0x7f00000006c0)={0x4, 0x0, 0x0, 0x0, 0x132, 0x3}) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=@newlink={0x2c, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x2031}, [@IFLA_XDP={0x4}, @IFLA_GROUP={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20048054}, 0x0) sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="50000000050801"], 0x50}, 0x1, 0x0, 0x0, 0x20000080}, 0x4) 12.371834411s ago: executing program 8 (id=1149): mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./sys_mnt\x00', 0x1ff) socket$xdp(0x2c, 0x3, 0x0) r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) socket$nl_generic(0x10, 0x3, 0x10) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) epoll_create1(0x80000) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) r3 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r3, 0xc0184800, &(0x7f0000000300)={0x1, r2}) openat$comedi(0xffffff9c, &(0x7f00000000c0)='/dev/comedi2\x00', 0x23700, 0x0) r5 = shmget$private(0x0, 0x3000, 0x1, &(0x7f0000ffc000/0x3000)=nil) timer_create(0x2, &(0x7f0000000040)={0x0, 0x21, 0x2}, &(0x7f0000000000)=0x0) timer_settime(r6, 0x1, 0x0, 0x0) shmctl$SHM_LOCK(r5, 0xb) ioprio_set$pid(0x1, 0x0, 0x2004) ioprio_get$pid(0x2, 0x0) shmctl$SHM_LOCK(r5, 0xb) syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r1) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000480)=@bpf_tracing={0x1a, 0x11, &(0x7f0000000540)=ANY=[@ANYBLOB="ffffac9e9f5db7a3", @ANYBLOB, @ANYRES32=r4, @ANYBLOB="0000000000000000b7050000080000008500"], &(0x7f00000002c0)='syzkaller\x00', 0x3, 0x0, 0x0, 0x40f00, 0x58, '\x00', 0x0, 0x18, r2, 0x8, 0x0, 0x0, 0x10, &(0x7f00000003c0)={0x2, 0xc, 0x7cda91c1, 0x1}, 0x10, 0x23583, r1, 0x2, &(0x7f0000000400), &(0x7f0000000440)=[{0x4, 0x4, 0xd, 0x9}, {0x3, 0x2, 0x7, 0x7}], 0x10, 0xffffff4b}, 0x94) 12.335777094s ago: executing program 8 (id=1154): r0 = mmap$KVM_VCPU(&(0x7f0000ffb000/0x2000)=nil, 0x930, 0x1000002, 0x4018831, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x80801) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000ffc000/0x1000)=nil, 0x1000}, 0x9}) syz_memcpy_off$KVM_EXIT_HYPERCALL(r0, 0x20, &(0x7f0000000180)="5e73663bf4082f7c6cbecbf09d6dd7be5a06dfd64563f329c16f799d1836bfc45a7badc8faed24bb77c848723a43602d1fe0d236c062e105ec77ffd00fb243c3111dda42112650cc", 0x0, 0xfe2a) r2 = epoll_create1(0x0) add_key(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./dev\x00', &(0x7f00000000c0)='devtmpfs\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./dev/mapper/control\x00', 0x0, 0x0) socket$xdp(0x2c, 0x3, 0x0) ioctl(r3, 0xc138fd03, &(0x7f0000000000)="04000000000000000000000038010000000000000000000000000000000000000000000000000000000000000000000074") syz_genetlink_get_family_id$ethtool(0x0, r3) r4 = userfaultfd(0x801) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x1c}) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000040)=0x3, 0xac5) syz_clone3(&(0x7f0000000900)={0x23800000, &(0x7f0000000040)=0xffffffffffffffff, 0x0, 0x0, {0x28}, 0x0, 0x0, 0x0, 0x0}, 0x58) io_setup(0x8, &(0x7f0000000600)=0x0) io_submit(r6, 0x1, &(0x7f0000001300)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0x6, r5, 0x0}]) ioctl(r3, 0xc138fd0e, &(0x7f0000000000)="040000000000000000000000380100003801") bpf$MAP_CREATE(0x600000000000000, &(0x7f0000000100)=ANY=[@ANYBLOB="0f000000040000000400000002000200000000003f1ff8f3693dff9b7c87a397f70ba65eea7748a943d8e2c14f6321e99c5d8e7fef8985476a"], 0x48) r7 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./dev/mapper/control\x00', 0x0, 0x0) ioctl(r7, 0xc138fd05, &(0x7f0000000000)="040000000200000000007c2fc2") epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000080)={0x10000000}) 12.335262934s ago: executing program 5 (id=1155): r0 = userfaultfd(0x80801) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000040)=0x3, 0xac5) syz_clone3(0x0, 0x0) io_setup(0x8, &(0x7f0000000600)=0x0) io_submit(r1, 0x1, &(0x7f0000001300)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0x6, 0xffffffffffffffff, 0x0}]) 12.334949166s ago: executing program 59 (id=1155): r0 = userfaultfd(0x80801) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000040)=0x3, 0xac5) syz_clone3(0x0, 0x0) io_setup(0x8, &(0x7f0000000600)=0x0) io_submit(r1, 0x1, &(0x7f0000001300)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0x6, 0xffffffffffffffff, 0x0}]) 12.334665932s ago: executing program 8 (id=1157): syz_ublk_setup_io_uring(0x20, &(0x7f0000000340)={0x0, 0x7fc8, 0x1000, 0x40002, 0x393}, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0xffffd000) syz_genetlink_get_family_id$l2tp(0x0, 0xffffffffffffffff) syz_ublk_add_dev(0xffffffffffffffff, r0, r1, r2, &(0x7f0000000400)={0x2e, 0x8, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000000c0)=@any_dev={0x3, 0x603, 0x0, 0x0, 0x1000, 0xb6a7, 0x0, 0x0, 0x28}}}, &(0x7f0000000180)=0x0) sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0x0) r5 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x82042, 0x0) syz_ublk_setup_queues(r5, r4, &(0x7f0000000480)={0x0, 0x18ee, 0x1000, 0x3, 0x1d2}, &(0x7f0000002680)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xb656, 0x20, 0x2, 0x342, 0x0, r5}, 0xffffffffffffffff}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x842d, 0x40, 0x2, 0x6a}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xb6d4, 0x10000, 0x1, 0x252}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xeaff, 0x8, 0x0, 0x231}}], 0x4, &(0x7f0000003900)={0x2e, 0x62, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x1, {0x9}, 0x0, r3, '\x00', {0x2003, 0xb66, 0x0, 0x0}}, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000040)={0x14, 0x23, 0x409, 0x70bd25, 0x25dfd3ff, {0x2}}, 0x14}, 0x1, 0x0, 0x0, 0x24040811}, 0x8410) syz_clone(0x280000, 0x0, 0x0, 0x0, 0x0, 0x0) syz_clone(0x400, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000640)="3d183e767f00214c2e5c07799ae108914ae4c2cd24a1470432a3917ac4932ba9e1c6f129861f13f430ca8eeac0f55b39cef14cc9") bind$alg(0xffffffffffffffff, &(0x7f0000000040)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_ctr_aes256\x00'}, 0x58) connect$inet6(0xffffffffffffffff, &(0x7f0000000180)={0xa, 0x3, 0xc, @dev={0xfe, 0x80, '\x00', 0xd}, 0x9}, 0x1c) syz_clone(0x20223000, 0x0, 0x0, 0x0, 0x0, 0x0) mmap$IORING_MAP_OFF_PARAM_REGION(0x0, 0x9, 0x1, 0x20010, r6, 0x20000000) r7 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000500)='/sys/kernel/kexec_crash_size', 0x202, 0x0) sendfile(r7, r7, 0x0, 0x6) r8 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) sendmsg$TIPC_NL_BEARER_ADD(r7, &(0x7f0000002500)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000024c0)={&(0x7f0000002340)={0x80, 0x0, 0x8, 0x70bd26, 0x25dfdbfd, {}, [@TIPC_NLA_NODE={0x68, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ID={0x64, 0x3, "c907821af0a1a820c8a9d270a15dbabaa1e56e30808953e62fb8fc92d00052d206e217f2dce4148877931e67d9998da21eb88975347d6c0f02b1fcf501d04c3d3332e23cd85edcaa445a27871c8cb8690379961e759cb5262f98620916a88c26"}]}, @TIPC_NLA_NODE={0x4}]}, 0x80}, 0x1, 0x0, 0x0, 0x10}, 0x8000) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r7, 0x40182103, &(0x7f00000003c0)={0x0, 0x1, r8, 0x1, 0x80000}) 11.991021683s ago: executing program 8 (id=1158): r0 = socket$inet6(0xa, 0x80003, 0x6) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000015}, 0xc844) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) write$nci(0xffffffffffffffff, &(0x7f00000005c0)=ANY=[], 0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) mq_getsetattr(0xffffffffffffffff, &(0x7f0000000500)={0x9, 0x6, 0x5, 0x80000001}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0xa, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x8) openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0), 0x80200, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) inotify_add_watch(0xffffffffffffffff, 0x0, 0x850003d1) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000080)={0x1, 0x0, '\x00', [@enc_lim={0x4, 0x1, 0xff}]}, 0x10) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000380), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="c8010000", @ANYRES16=r4, @ANYBLOB="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"], 0x1c8}}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./file0\x00', 0x31) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000300)='devtmpfs\x00', 0x1214040, 0x0) shmctl$SHM_INFO(0x0, 0xe, &(0x7f0000000680)=""/240) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, 0x0) getdents64(0xffffffffffffffff, 0x0, 0x0) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r5, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6) 11.897308863s ago: executing program 60 (id=1158): r0 = socket$inet6(0xa, 0x80003, 0x6) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000015}, 0xc844) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) write$nci(0xffffffffffffffff, &(0x7f00000005c0)=ANY=[], 0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) mq_getsetattr(0xffffffffffffffff, &(0x7f0000000500)={0x9, 0x6, 0x5, 0x80000001}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0xa, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x8) openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0), 0x80200, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) inotify_add_watch(0xffffffffffffffff, 0x0, 0x850003d1) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000080)={0x1, 0x0, '\x00', [@enc_lim={0x4, 0x1, 0xff}]}, 0x10) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000380), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="c8010000", @ANYRES16=r4, @ANYBLOB="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"], 0x1c8}}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./file0\x00', 0x31) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000300)='devtmpfs\x00', 0x1214040, 0x0) shmctl$SHM_INFO(0x0, 0xe, &(0x7f0000000680)=""/240) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, 0x0) getdents64(0xffffffffffffffff, 0x0, 0x0) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r5, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6) 11.842166392s ago: executing program 2 (id=1159): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_int(r0, 0x6, 0x1e, 0x0, &(0x7f0000000100)) syz_emit_ethernet(0x4a, &(0x7f0000000000)={@local, @empty, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x14, 0x6, 0x0, @private0, @mcast2, {[], {{0x0, 0x4001, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x80}}}}}}}, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_MSFILTER(r1, 0x0, 0x30, 0x0, 0x310) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) r2 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) connect$can_bcm(r2, &(0x7f00000000c0)={0x1d, r3}, 0x10) sendmsg$can_bcm(r2, 0x0, 0x410) sendmsg$can_bcm(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000680)=ANY=[@ANYBLOB="0100000090020000", @ANYRES64=0x77359400, @ANYRES64=0x0, @ANYRES64=0x0, @ANYBLOB="000000000100000000000000"], 0x48}, 0x1, 0x0, 0x0, 0x24000041}, 0x8000) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$FS_IOC_GETFSMAP(r4, 0xc0c0583b, &(0x7f0000000440)={0x0, 0x0, 0x1, 0x0, '\x00', [{0x800, 0x5, 0x6, 0x401, 0x101, 0xffffffffffffff01}, {0x8, 0x7fffffff, 0x1, 0x4, 0x9, 0x3}], ['\x00']}) r5 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_PORT_UNSPLIT(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={0x14, r5, 0x731, 0x70bd2b, 0x0, {0x38}}, 0x14}, 0x1, 0x2}, 0x20000014) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r6, &(0x7f0000000000)='3', 0x4e) unshare(0x60040000) r7 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000), 0x8502, 0x0) read$FUSE(r7, 0x0, 0x0) r8 = syz_open_dev$vim2m(&(0x7f0000000000), 0x800, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r8, 0xc0cc5605, &(0x7f0000000480)={0x2, @pix={0x4, 0x8, 0x30364d54, 0x8, 0x8, 0x0, 0xf9b56075d2211bd5, 0x4, 0x1, 0x2, 0x0, 0x7}}) 11.574748431s ago: executing program 2 (id=1160): r0 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x68c81, 0x0) r2 = bpf$MAP_CREATE(0x0, 0x0, 0x48) setresuid(0xee00, 0xee00, 0x0) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000380)=@generic={0x0, 0x0, 0x8}, 0x18) r3 = io_uring_setup(0x51f4, &(0x7f00000000c0)={0x0, 0x16a0d, 0x3000, 0x1, 0x387}) io_uring_register$IORING_REGISTER_RESIZE_RINGS(r3, 0x21, &(0x7f0000000340)={0x0, 0xd8bd, 0x10, 0x3, 0x373, 0x0, r3}, 0x1) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xc, 0x4, 0x4, 0x8001, 0x0, r2, 0x72f}, 0x50) socket$inet_udp(0x2, 0x2, 0x0) connect$pppl2tp(0xffffffffffffffff, 0x0, 0x0) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000005f80)=[{{0x0, 0x0, &(0x7f0000005dc0)}}], 0x1, 0x8040) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x8000, r4}, 0x38) socket$nl_netfilter(0x10, 0x3, 0xc) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000001, 0x401d132, 0xffffffffffffffff, 0x0) syz_clone(0x2180100, 0x0, 0x0, 0x0, 0x0, 0x0) openat$vicodec0(0xffffffffffffff9c, 0x0, 0x2, 0x0) sendmsg$IPSET_CMD_DESTROY(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)={0x30, 0x3, 0x6, 0x401, 0x0, 0x0, {0x2, 0x0, 0x3}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x30}, 0x1, 0x0, 0x0, 0x1}, 0x200480d0) sendmsg$IPVS_CMD_NEW_DAEMON(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x58}, 0x1, 0x0, 0x0, 0x28000001}, 0x20008800) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) keyctl$reject(0x13, 0x0, 0xd59, 0x1, 0x0) 11.264861034s ago: executing program 2 (id=1161): r0 = socket$inet6_sctp(0xa, 0x4, 0x84) r1 = dup(r0) request_key(0x0, 0x0, &(0x7f0000000340)='\x8e\x00\x9e\xbb\x1e\x1av\xe8M\x00d\xaaI\x00\x00\x00\x00\x00\x00\t<\xe5u\xedA\xa7\aT\xdd\xd1{\xff\xcb\xdb\xb11\xc2s\xcb\xbf\x04\x00\x00\x00<\xfe\xf9\f\xe6E\b\x00\xd7\x85q\xc4\xab\xbd&\x92\x89(\xf3\"\xceJ\x19\x185\xa6- \xe6uK\xe1D\x8f\x9f\x92\xca\x93#\xf5E\xc2\x91Yl\x17\a\x02\t\x17\x7f\xc4\xde\x04\x9b\x89#\xf6&[\xd81\xb3\xdc\x00\x04\x15\x03\x17R\xd24\xeb\xb5\xc2\xff\x1bnF\x8e\xe4\'\x18\xba9.\xd4\xd9\xc6\x98\x8f\xc6D!p\xbeV\xb7x\r@\x1b5\x8br\x11\xdex\x19\x89\xdc\x1el\xcd\x13\xb6\xc2\xdb\x1fr2\x7f?\xfe\x0f\x04\x11\xc3\x8f:uXQ\x0f\v\xfc\xff\x7fL\xfb\xa8]\xd4\xd7\x13?\xe3<#\x1f\x9a\x03C\x8f\xe7\rV1\x99\xaf@Re\x18J\xb6\xee\xeeAnR\n\x8a\xe4\x1a:&\xc7\x15B\x8aG\xa4\a`\xee\xaf\x80T\xddo\xc4D^z\xbf\x1c\x87F?!k\'\xc3\xf9\xa3\xd9\x85\xb1N%\x17\f\xd0#\x05^\xf7\x11\x13\xadKb\x8ck\x10\xd3 >\t\xe0\x16\x80\x82\xb3\xcc\xc7\x05*\x9b\x0eQ\x92\xd7\xbaO\x06\xb2\xdc\xe7/\x1f\x90]IB94(evFMJ\x85\xc4S\xa8\x8b\xbe\xd3\x90\xe9\t\x00\x13\x1e\x9a\x94\x00\x00\x00\x00\x00U\xfbLA\xa6K\xd5\x0eD\xf2Y\xc3,\t4hD\xc4o\xc3\x87$\x9d6\xc8\x93\xa3\x8e:\xfe#\xa0`\xb1k\xacz\xe0\xb3\x95\x17\xdf\xc7\xc2\xedKc\xa3\xbd\xc2\x9f\x86C(/\xe3\xb2\xc6$s^\xd1vU\x9cB)ao\xf1\'', 0xffffffffffffffff) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mkdirat(0xffffffffffffff9c, 0x0, 0x187) mprotect(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x1000000) prctl$PR_SET_MM_MAP(0x23, 0xe, 0x0, 0x0) io_uring_setup(0x1b7b, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x17f) mount(0x0, &(0x7f0000000000)='./sys\x00', 0x0, 0x0, 0x0) dup(0xffffffffffffffff) openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/bus/i2c/devices/i2c-0/new_device\x00', 0x1, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xfffffffffffffffe, 0x4031, 0xffffffffffffffff, 0x7542d000) r3 = userfaultfd(0x80001) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f0000000040)={0xaa, 0x358}) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f00000002c0)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x5}) ioctl$UFFDIO_REGISTER(r3, 0xc020aa04, &(0x7f0000000000)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x0, 0x2}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x401) write(0xffffffffffffffff, &(0x7f00000001c0)='always', 0x6) setsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r1, 0x84, 0x6, 0x0, 0x0) 10.216863167s ago: executing program 2 (id=1162): madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb79100a6c52d9"], 0xfdef) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000080)={'netdevsim0\x00', &(0x7f0000000000)=@ethtool_sfeatures={0x51}}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) write(0xffffffffffffffff, &(0x7f0000000000)="240000001a005f0400f9f407000904018002200000000000000000000800010000000000", 0x24) sendmsg$SEG6_CMD_GET_TUNSRC(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000140), 0xc, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[], 0x68}, 0x1, 0x0, 0x0, 0x20000040}, 0x4008811) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x5, 0x9, 0x6, 0x0, 0xb49, 0x9, 0x8, 0x2, 0x3}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_TEST(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000500)={0x2c, 0xb, 0x6, 0x801, 0x0, 0x0, {0x6, 0x0, 0x2}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x4}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20008040}, 0x20009084) userfaultfd(0x1) writev(0xffffffffffffffff, 0x0, 0x0) r2 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x20080, 0x0) r3 = syz_open_dev$video4linux(&(0x7f0000000000), 0x0, 0x2) ioctl$VIDIOC_SUBDEV_S_FMT(r3, 0xc0585605, &(0x7f0000000100)={0x1, 0x0, {0x7, 0x1e0, 0x3014, 0x0, 0x0, 0x8, 0x1}}) sendmsg$ETHTOOL_MSG_LINKSTATE_GET(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0xfffffd86, 0x0, 0x1, 0x0, 0x0, 0x480c0}, 0x24000081) add_key$user(&(0x7f0000000200), 0x0, 0x0, 0x0, 0xfffffffffffffffd) ioctl$SNDCTL_DSP_CHANNELS(r2, 0xc0045006, &(0x7f0000000180)=0x6f) ioctl$SNDCTL_DSP_SPEED(0xffffffffffffffff, 0xc0045002, &(0x7f00000001c0)=0x2) read$FUSE(0xffffffffffffffff, &(0x7f00000063c0)={0x2020}, 0xfffffffffffffe46) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, 0x0}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) 9.841947137s ago: executing program 2 (id=1163): r0 = mmap$KVM_VCPU(&(0x7f0000ffb000/0x2000)=nil, 0x930, 0x1000002, 0x4018831, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x80801) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000ffc000/0x1000)=nil, 0x1000}, 0x9}) syz_memcpy_off$KVM_EXIT_HYPERCALL(r0, 0x20, &(0x7f0000000180)="5e73663bf4082f7c6cbecbf09d6dd7be5a06dfd64563f329c16f799d1836bfc45a7badc8faed24bb77c848723a43602d1fe0d236c062e105ec77ffd00fb243c3111dda42112650cc", 0x0, 0xfe2a) r2 = epoll_create1(0x0) add_key(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./dev\x00', &(0x7f00000000c0)='devtmpfs\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./dev/mapper/control\x00', 0x0, 0x0) socket$xdp(0x2c, 0x3, 0x0) ioctl(r3, 0xc138fd03, &(0x7f0000000000)="04000000000000000000000038010000000000000000000000000000000000000000000000000000000000000000000074") syz_genetlink_get_family_id$ethtool(0x0, r3) r4 = userfaultfd(0x801) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x1c}) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000040)=0x3, 0xac5) syz_clone3(&(0x7f0000000900)={0x23800000, &(0x7f0000000040)=0xffffffffffffffff, 0x0, 0x0, {0x28}, 0x0, 0x0, 0x0, 0x0}, 0x58) io_setup(0x8, &(0x7f0000000600)=0x0) io_submit(r6, 0x1, &(0x7f0000001300)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0x6, r5, 0x0}]) ioctl(r3, 0xc138fd0e, &(0x7f0000000000)="040000000000000000000000380100003801") bpf$MAP_CREATE(0x600000000000000, &(0x7f0000000100)=ANY=[@ANYBLOB="0f000000040000000400000002000200000000003f1ff8f3693dff9b7c87a397f70ba65eea7748a943d8e2c14f6321e99c5d8e7fef8985476a"], 0x48) r7 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./dev/mapper/control\x00', 0x0, 0x0) ioctl(r7, 0xc138fd05, &(0x7f0000000000)="040000000200000000007c2fc2") epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000080)={0x10000000}) 5.789119631s ago: executing program 0 (id=1168): r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./myproc/scsi/device_info\x00', 0x1, 0x0) write(r0, &(0x7f0000000340), 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'pimreg\x00', 0x2}) socket$packet(0x11, 0x3, 0x300) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x141842, 0x8) renameat2(0xffffffffffffff9c, &(0x7f0000000480)='./bus\x00', 0xffffffffffffff9c, &(0x7f00000004c0)='./file0\x00', 0x2) r2 = syz_open_dev$vim2m(&(0x7f0000000000), 0x47b, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r2, 0xc008561c, &(0x7f0000000040)={0xf0f002, 0x6}) r3 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) r4 = socket$inet6(0xa, 0x3, 0x3) setsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f0000000340)={{{@in6=@private1={0xfc, 0x1, '\x00', 0x1}, @in=@empty, 0x4f23, 0x0, 0x4e23, 0x2, 0xa, 0x2a11bad3d5f03f04, 0x30, 0x2f}, {0x4, 0x138, 0xfffffffffffdfffe, 0x100000000, 0xfffffffffffffffb, 0x5, 0x8, 0x7fff}, {0x4, 0xfffffffffffffffe, 0x4, 0x9}, 0x10001, 0x0, 0x1, 0x0, 0x2}, {{@in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x210000, 0x33}, 0xa, @in6=@empty, 0xfffffffe, 0x0, 0x0, 0x17, 0x0, 0x0, 0xfffffffb}}, 0xe8) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) shmctl$SHM_STAT_ANY(0x0, 0xf, 0x0) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r5 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r5, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x4000002, 0x5d031, 0xffffffffffffffff, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x40241, 0x0) ioctl$DRM_IOCTL_GEM_FLINK(0xffffffffffffffff, 0xc008640a, 0x0) ioctl$DRM_IOCTL_PANTHOR_BO_QUERY_INFO(r0, 0xc0106450, &(0x7f00000001c0)={0x0, 0x1}) move_pages(0x0, 0x1efe, &(0x7f0000000080), 0x0, &(0x7f0000000040), 0x0) 5.453057772s ago: executing program 6 (id=1169): r0 = syz_usb_connect(0x5, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="120100024286bd10b00d815522f90102030109021200019ddb10010904"], 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000340)={0x24, 0x0, &(0x7f0000000180)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0}, 0x0) r1 = syz_open_dev$I2C(&(0x7f00000000c0), 0xc, 0x88000) ioctl$I2C_SMBUS(r1, 0x720, &(0x7f0000000040)={0x1, 0x7, 0x4, &(0x7f00000017c0)={0x91, "4ec0191e5bb41b08c198884329f6dd0711762717c44bc7b7b1cc22a10010115d6d"}}) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r3, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="b700000081000000bfa30000000000000703000000feffff720af0fff8ffffff71a4f0ff0000000071101800000000001d400500000000004704000001ed00000f030000000000001d44000000000000620a00fe000000007203000000000000b5000000000000009500000000000000023bc065b58111c6dfa041b63af4a3912435f1a864a710aad58db6a693002e7f3be361917adef6ee1c8a2a4f8ef1e50becb19bc461e91a7168c50000000190f32050e436fe275daf51efd601b6bf01c8e8b1b526375ec4dd6fcd82e4fe51bef7af9aa0d7d600c095199fe3ff3128e599b0eaebbdbd732c9cc00eec363e4a8f6456e2cc21557c0afc646cb7798b3e6440c2fbdb00a3e35208b0bb0d2cd829e654400e2438ec649dc74a28610643a98d9ec21ead2ed51b104d4d91af25b845d8a7925c3109b151b8b9f75dd08d123deda88c658d42ecbf28bf7076c15b463bebc72f526d8e8afcb913466aaa7f6df70252e79166d858fcd0e06dd31af9612f2460d0b11008e59a5923906f88b53987ad1714e72ba7a54f0c33d39000d06a59ff616236fd9aa58f2477184b6a89adaf17b0a6041bdef728d236619074d6ebdfd1f5089048ddff6da40f9411fe722631cb467600ade70063e5291569b33d21dae356e1c51f03a801be8189679a16da18ec0ae564162a27afea62d84f3a10746443d6438e959532e0617d419c6bc6ea9f2bca4464f56e24e6d2105bd901204a1deeed4155617572652d950ad31928b0b0c3dc2869f478341d02d0f5ad94b081fcd507acb4b9c65fee9d5a17f48a7382f13d000000225d85ae49cee383dc5049076b989b40000000000000da60d2ae20cfb91d6a49964757cdf538f9ce2bdb1ab062cd54e67011d355d84ce97bb0c6b4a595e487efbb2d71cde2c140952f9a0f0bc6980fe78683ac5c0c31032599ddd71063be9261b2e1aab1675b34a22048ef8c126aeef5f510a8f1aded94a129e4aec6f8d9ab06faffc3a15d96c2ea3e2e04cfe031b2875353193f82ade69d0540059fe6c7fe7cd8697502c7596566d674e425da5e87e59602a9f6590521d31d3804b3e0a1053abdc31282dfb15eb6841bb64a1b304502dda787343ce3c953992e4a982f3c48153baae244e7bf37548c7f1a4cad2422ee965a38f7defbd2160242b104e20dc2d9b0c35608d402ccdd9069bd50b994fda7a9de44028d6112a0c2d21b2dc98816106dec28eaeb883418f562ae00003ea96d10f172c0374d6eed826416050000000bfe9b4a9c5a90ff59d54d1f92ecc4e95dd2d18383117c039862198899b212c55318294270a1ad10c80fef7c24d47afce829ba0f85da6d888f18ea40ab959f6074ab2a40d85d15017ab513cdc6c0e57fb1c1ca571380d7b4ead35a385e0b4a26b702396df7e0c1e02b6e4114f244a9bf93f04bf072f0861f7580e69db384ac7eeedcf2ba1a9508f9d6aba582a896a9f1ffa968eacea75caf822a7a63ba34015ea5aacb1188883ad2a3b1832371fe5bc621426d1ed0a4a99702cc1b6912a1e717d29135753208165b9cdbae2ed9dc7358f0ebadde0b727f27feeb744ddcc536cbae315c7d1fe1399562ba6824840bd2951680f6f2f9a6a8346962a350845ffa0d829e4f79adc287906943408e6df3c391e97ba48db0a5adbfd03aac93df8866fb010aec0e92bed1fe39af169d2a466f0db6f3d9436a7d55fc30511d00e10000c95265b2bd83d64a532869d701723fedcbada1ee7baa5b6a686b50f0937f778af083e055f6138a757ebd0ed91124a6b244f9acf41ac5d73a008364e0606a594817031fc2f52c8785fe0721719b3d654026c6ea08b83b123145ab5703dad844ceb201ddeb6dc5f6a903792283c42efc54fa84323afc4c10eff462c8843187f1dd48ef3fa293774d582956ff0f40b10ca94f6feeb2893c17888e1cdba94a6ea80c33ead5722c3293a493f1479531dd88261458f40d31fe8df15efaaeea831555877f9538d6ee6ba65893ff1f908ba7554ba583fef3ec7932f5954f31a878e2fae6691d1aee1da02ba516467df3e7d1daac43738012e4fee18a22da19fcdb4c2890cda1f96b952511e3a69d694d625e0b2f808890205f3a6da2819d2f9e77c7c64affa54fec0136cbafa5f6f096753b639a924599c1f69219927ea5301fff0a6063d427f0688430754c02180d61542c2571f983e9673560000000000000000005a7b57f03ca91a01ba2e30ca99e8ebc15ecb4d91675767999d146aef7799738b292fd640dfef6b04d086f737a159d7e0c6e4d81ad64a8bbca48568325b2969e2b15f36b788bce5ccdbaf75c94cb93499f6947a967a7bce14c6de4e7c0660d80010f5c653d22d490cba8c2a4ab595bf4238f18ca428dafc7ac96d404607a0000000051a2104f22e6db5a62b5089c1b45282d38864daa3ae81d6b0968d1d2867b91b7d120617d12d91db2633d6864da40b54783a17aaeb6737c323f9f98e354cc98dcfe23ad01bd1c61563e69ffe1c2c73e16e1461173f359e93d2c5e424c17998809ec8f0232b3955e052a4cecd89008f70314a0bdd491ec86a4555d89fe0120f64c62e8e3ed8bcb45202c3d4bbec8d722824c0ebca8db1ea4a003d2fbdc1f9be78537756ab5bbe4fe9af5d785d0128171c90d9900ce2532b0f9d01c4b45294fbba468df3e1b583cb4e62e754598e47df6bd06431c94bc5d047899fd219f448bf9189c65c9d91eda6b52a373803a9efe44f86909bc90addb7b9aee813df534aac4b3093c91b8068cd84990453f006694d461b76a58d88cf0f520310a1e80dc18cde98d662eee077515d0a8811922929e085392ab3d1311b8243266d87047f601fa88a0da36b9f302e8262395174328f2482d14008de83070744f143fdec90ba5a82668d5fac114c13955ad6dca5db2231d8ba14c54c47ed04a4b4ace17e357e1d6432399f87a7a14245bbd796a09313b247b95d37ff40a404bdad74bd20000000000000000000099fef7cd7af3ce64a92f95d89d125b1e641240d7e5e27a3d1f7684448c3e3822d617e205061298b939a191be4b48e169bde2cae3accc5bd40a2968b59c93d35f8e42366fdef9a2abae1cf01ce68abff28861aac8302d268569dd42e194e330c7aaa54ebbcefd23f21ce8153b9926e12e925cb56119df72c7533a48d028ad0c74e2a9478fa3be18a1a2b65079cc1c00000000000000f59dd19e8d525206c0a728cfd42193abe8130bc01a2d69841f3d7799ac04bdc590bb1c89b9c695f163e57343c9bfb59909433c9001c5f8b23e38534a538fc933cac6c2a92d038df638a0f226df9fb857bd414c2cd69985e8053e3dfa41614d7c74d04d8c2471041d17c730fad28395f8d4688898cd58b9d600c851626529bb58aa364b55e73f053450665e7b94ed1012fd7a8139166fd5e59c84f4ab279b1b99c028db4cb9680c8035f967db18de738844da7e260a830c1ffa49f5af3c15423a0e315acb82a3e89218cb314e68fda4d94aa1d815babc13b9fd336d205c5913ef67cf0216e2d81e6127bd9d7fab28800eaab2355992f8ce4cd38add4b272c0bee4076ca4847ffa691cf78fb7ec212bad3bef29f577ea7159b7f3025b3d977ff7c91024cf71126233cb8791c3c"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r4, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40000}, 0x0) msgget$private(0x0, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000240)=@newlink={0x3c, 0x10, 0xff05, 0x0, 0x0, {0x0, 0x0, 0x4a00}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @batadv={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x3c}}, 0x0) r6 = socket(0x10, 0x803, 0x8) sendmsg$IPVS_CMD_SET_INFO(r6, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x2d}, 0x1, 0x0, 0x0, 0x8801}, 0x8000) getsockname$packet(r6, &(0x7f0000000440)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000480)=0x14) r7 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r3, 0x84, 0x75, &(0x7f00000004c0)={0x0, 0x50000000}, &(0x7f0000000500)=0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r6, 0x84, 0x66, &(0x7f0000000580)={r8, 0xe6}, &(0x7f00000005c0)=0x8) add_key(&(0x7f00000000c0)='rxrpc\x00', 0x0, &(0x7f0000000080)="01000000022ee0000000006bb55a2a630bf7c045f94cd977", 0x28, 0xffffffffffffffff) openat$vhost_vsock(0xffffff9c, &(0x7f0000000400), 0x2, 0x0) sendmsg$nl_route_sched(r7, 0x0, 0x0) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r9, &(0x7f00000003c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000340)={&(0x7f0000000280)={0x50, r10, 0x300, 0x70bd2b, 0x25dfdbfd, {}, [@NLBL_UNLABEL_A_SECCTX={0x29, 0x7, 'system_u:object_r:run_init_exec_t:s0\x00'}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @multicast1}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @private=0xa010101}]}, 0x50}, 0x1, 0x0, 0x0, 0x20004000}, 0x0) 5.287588874s ago: executing program 0 (id=1171): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r0, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) openat$sequencer(0xffffff9c, &(0x7f0000000140), 0x14800, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8923, 0x0) r2 = socket(0x10, 0x803, 0x0) linkat(0xffffffffffffff9c, &(0x7f00000003c0)='./cgroup\x00', 0xffffffffffffff9c, &(0x7f0000000100)='./file7\x00', 0x1000) open(&(0x7f0000000280)='.\x00', 0x0, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @tid=0xffffffffffffffff}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r3, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x18a42000) socket$nl_rdma(0x10, 0x3, 0x14) renameat2(0xffffffffffffff9c, &(0x7f0000000780)='./file7\x00', 0xffffffffffffff9c, &(0x7f00000007c0)='./file1\x00', 0x0) close_range(r2, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0xefd, &(0x7f0000000080)={0x0, 0xfffffffe, 0x2, 0x83, 0x3af}, 0x0, 0x0, 0x0) listen(r0, 0x3) 5.285299653s ago: executing program 0 (id=1172): openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) r0 = signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x800) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = syz_io_uring_setup(0x34b8, 0x0, &(0x7f0000000100)=0x0, &(0x7f0000000080)=0x0, &(0x7f0000000180)=0x0) io_uring_register$IORING_REGISTER_PERSONALITY(r2, 0x9, 0x0, 0x0) syz_io_uring_submit(r3, r4, r5, 0x0) syz_ublk_setup_queues(r0, 0x0, &(0x7f0000019080)={0x0, 0x597f, 0x1, 0x2, 0x10d, 0x0, r0}, &(0x7f0000019180)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x2067, 0x8000, 0x3, 0x17, 0x0, r0}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xce5e, 0x10, 0x2, 0x2c4, 0x0, r0}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xecae, 0x200, 0x3, 0x11a, 0x0, r0}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x88d9, 0x800, 0x0, 0x3bd, 0x0, r0}}], 0x4, 0x0, &(0x7f000001a480)) r6 = socket$inet_udp(0x2, 0x2, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0xb, 0x59032, 0xffffffffffffffff, 0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r7, 0x6, 0x13, &(0x7f0000000100)=0x100000001, 0x4) connect$inet6(r7, &(0x7f0000000080)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r7, 0x6, 0x1f, &(0x7f00000003c0), 0x3) getsockopt$bt_hci(r7, 0x11a, 0x5, 0x0, &(0x7f0000000040)=0x7ccd4176) socket$key(0xf, 0x3, 0x2) pread64(0xffffffffffffffff, &(0x7f0000000080)=""/102356, 0x18fd4, 0x200) r8 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$nci(r8, &(0x7f00000004c0)=ANY=[], 0x102) connect$inet(r6, &(0x7f0000000480)={0x2, 0x4e23, @multicast2}, 0x10) sendmmsg(r6, &(0x7f0000007fc0), 0x800001d, 0x1c) 3.459380361s ago: executing program 6 (id=1174): openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000001500)='./dev\x00', 0x1ff) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0x1ff) r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0b000000080000000c00000003"], 0x19) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r3}, 0x38) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000080)={r2}, 0x4) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x16, 0x1d, &(0x7f0000000100)=@framed={{0x18, 0x0, 0x0, 0x0, 0xc00d100, 0x0, 0x0, 0x0, 0x100}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xb}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r2}, {}, {0x85, 0x0, 0x0, 0xb6}}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x3ff}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r2}}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @flow_dissector, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r4, 0x0, 0xe, 0x0, &(0x7f00000000c0)="9dbaac999f69835fc48373a1ee57", 0x0, 0x2f00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r5 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r5, 0x4008ae89, &(0x7f0000000200)={0x1, 0x0, [{0x40000082}]}) mount(&(0x7f00000000c0)=@filename='./dev/sda1\x00', &(0x7f0000000140)='./mnt\x00', &(0x7f0000000100)='ext4\x00', 0x8410, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) chdir(&(0x7f0000000140)='./file0\x00') openat(0xffffffffffffff9c, 0x0, 0x18d042, 0x15) socket$packet(0x11, 0x3, 0x300) bpf$BPF_PROG_ATTACH(0x8, 0x0, 0x0) socket$inet6(0xa, 0x803, 0x6) r6 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) fchown(r6, 0x0, 0xee01) mknodat$null(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0xc408, 0x103) 3.456596202s ago: executing program 0 (id=1180): r0 = openat$vcsu(0xffffff9c, &(0x7f0000000280), 0xd3e8f6c8fd92ec51, 0x0) openat$sndseq(0xffffff9c, &(0x7f0000000100), 0x40) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x3, 0x6, 0x0, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100}, 0x94) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, 0x0, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000000)={0x0, 0x0, 0x0, &(0x7f00000005c0), 0x87af, 0xffffffffffffffff, 0x4}, 0x38) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000006c0)}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000001100)={&(0x7f0000000680)=@newtfilter={0x5c, 0x2c, 0xd2b, 0x70bd29, 0x35dfdbfb, {0x0, 0x0, 0x0, 0x0, {0xffe0}, {0x0, 0xfff1}, {0x7, 0x5}}, [@filter_kind_options=@f_u32={{0x8}, {0x30, 0x2, [@TCA_U32_CLASSID={0x8, 0x1, {0xe13c7cb5123b5c20, 0xfff1}}, @TCA_U32_SEL={0x24, 0x5, {0x5, 0x6, 0x6, 0x4, 0x101, 0x5, 0x100, 0x0, [{0x2, 0x8514, 0x7, 0x1ff}]}}]}}]}, 0x5c}}, 0x24040084) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000380)={0xffffffffffffffff, 0x20, &(0x7f0000000000)={&(0x7f0000000240)=""/187, 0xbb, 0x0, &(0x7f0000000440)=""/208, 0xd0}}, 0x10) r2 = io_uring_setup(0xf06, &(0x7f00000003c0)={0x0, 0xfb6e, 0x38c1, 0x4, 0xf0}) io_uring_register$IORING_REGISTER_FILES(r2, 0x20, &(0x7f0000000000)=[r2], 0x1) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KDFONTOP_COPY(r0, 0x4b72, &(0x7f0000000c00)={0x3, 0x0, 0x1, 0x1f, 0x85, &(0x7f0000000800)}) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="5800000002060108000000000000000000000000050005000a000040050001000700000005000400000000000900020073797a310000000014000300686173683a69702c706f72742c6970"], 0x58}, 0x1, 0x0, 0x0, 0x4000010}, 0x0) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000780)=ANY=[@ANYBLOB="74000000090601020000000000000000030000000900020073797a310000000005000100070000004c0007801800018014000240fe8000000000000000000000000000aa1800148014000240fc000000000000000000000000000000060004404e1f0000050007008400000006000540"], 0x74}, 0x1, 0x0, 0x0, 0x10040003}, 0x0) r4 = socket$netlink(0x10, 0x3, 0xc) ioctl$EVIOCGRAB(0xffffffffffffffff, 0x40044590, 0x0) r5 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000340), 0x802, 0x0) ioctl$UI_DEV_SETUP(r5, 0x5501, 0x0) sendmmsg(r4, &(0x7f00000002c0), 0x40000000000009f, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x1c, 0x7, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x1c}}, 0x0) r7 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000180)=ANY=[@ANYBLOB="1201000000000040341a02080000000000010902"], 0x0) close_range(r7, 0xffffffffffffffff, 0x0) 3.242318675s ago: executing program 6 (id=1175): r0 = mmap$KVM_VCPU(&(0x7f0000ffb000/0x2000)=nil, 0x930, 0x1000002, 0x4018831, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x80801) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000ffc000/0x1000)=nil, 0x1000}, 0x9}) syz_memcpy_off$KVM_EXIT_HYPERCALL(r0, 0x20, &(0x7f0000000180)="5e73663bf4082f7c6cbecbf09d6dd7be5a06dfd64563f329c16f799d1836bfc45a7badc8faed24bb77c848723a43602d1fe0d236c062e105ec77ffd00fb243c3111dda42112650cc", 0x0, 0xfe2a) r2 = epoll_create1(0x0) add_key(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./dev\x00', &(0x7f00000000c0)='devtmpfs\x00', 0x0, 0x0) socket$xdp(0x2c, 0x3, 0x0) ioctl(0xffffffffffffffff, 0xc138fd03, &(0x7f0000000000)="04000000000000000000000038010000000000000000000000000000000000000000000000000000000000000000000074") syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_WOL_GET(0xffffffffffffffff, 0x0, 0x0) r3 = userfaultfd(0x801) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x1c}) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000040)=0x3, 0xac5) syz_clone3(&(0x7f0000000900)={0x23800000, &(0x7f0000000040)=0xffffffffffffffff, 0x0, 0x0, {0x28}, 0x0, 0x0, 0x0, 0x0}, 0x58) io_submit(0x0, 0x1, &(0x7f0000001300)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0x6, r4, 0x0}]) ioctl(0xffffffffffffffff, 0xc138fd0e, &(0x7f0000000000)="040000000000000000000000380100003801") bpf$MAP_CREATE(0x600000000000000, &(0x7f0000000100)=ANY=[@ANYBLOB="0f000000040000000400000002000200000000003f1ff8f3693dff9b7c87a397f70ba65eea7748a943d8e2c14f6321e99c5d8e7fef8985476a"], 0x48) r5 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./dev/mapper/control\x00', 0x0, 0x0) ioctl(r5, 0xc138fd05, &(0x7f0000000000)="040000000200000000007c2fc2") epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000080)={0x10000000}) 3.08232286s ago: executing program 6 (id=1176): mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x10) mount(&(0x7f0000000200)=@filename='mtd0\x00', &(0x7f0000000100)='./file0\x00', &(0x7f0000000300)='jffs2\x00', 0x800000, 0x0) mkdir(&(0x7f0000000100)='./file1\x00', 0x13b) mkdir(&(0x7f0000000000)='./bus\x00', 0x0) syz_io_uring_setup(0x34b8, &(0x7f0000000540)={0x0, 0x2730, 0x40, 0x2, 0x82}, 0x0, &(0x7f00000002c0), &(0x7f0000000240)) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x34000, 0x0) ioctl$FE_GET_PROPERTY(0xffffffffffffffff, 0x80106f53, &(0x7f0000000040)={0x30, 0x0}) openat(0xffffffffffffffff, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x4a102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mremap(&(0x7f000054e000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f000022c000/0x3000)=nil) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000740)={0xffffffffffffffff, 0xe0, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f00000001c0)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x6, &(0x7f00000005c0)=[0x0, 0x0], &(0x7f00000003c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xb8, &(0x7f0000000400)=[{}, {}], 0x10, 0x10, &(0x7f0000000440), &(0x7f0000000480), 0x8, 0xea, 0x8, 0x8, &(0x7f0000000500)}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x20, 0x4, &(0x7f00000004c0)=ANY=[@ANYBLOB="18000000000000000000000000000000a2f1a9d73d51cfdf361e93754d4bfc135f155a79fd5671662faa9d2d49f1376e9e615927c3"], &(0x7f0000000600)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0}, 0x94) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./trace\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./trace\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000200)='./trace/set_event\x00', 0x121302, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000380)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) chdir(&(0x7f0000000140)='./bus\x00') getdents64(0xffffffffffffffff, 0x0, 0x0) ioctl$VIDIOC_TRY_DECODER_CMD(0xffffffffffffffff, 0xc0485661, &(0x7f0000000900)={0x0, 0x1, @raw_data=[0x2000000, 0x0, 0x7, 0x2, 0xa38e5623, 0xf5a, 0x2, 0x1, 0xc90, 0x953, 0xffff, 0x81, 0xcb, 0x46, 0x7, 0x77]}) r2 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r2, &(0x7f00000000c0)=@nameseq={0x1e, 0x1, 0x0, {0x2, 0x0, 0x80000}}, 0x10) 2.014888678s ago: executing program 6 (id=1177): syz_init_net_socket$llc(0x1a, 0x2, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x1ed) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f00000000c0)={'ip6gre0\x00', &(0x7f0000000100)=@ethtool_pauseparam={0x29, 0x10, 0x41, 0x5}}) sendmsg$TIPC_NL_PUBL_GET(0xffffffffffffffff, 0x0, 0x18015) r1 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r1, &(0x7f0000000140)="1ba0000016001d0d89fdc5cbdd045798707bed4dca141a780f0f8e", 0xff3b, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f0000000380)=[{{0x0, 0x0, 0x0}, 0x72}, {{0x0, 0x0, 0x0}, 0x6}], 0x2, 0x10120, 0x0) request_key(0x0, 0x0, &(0x7f0000000340)='\x8e\x00\x9e\xbb\x1e\x1av\xe8M\x00d\xaaI\x00\x00\x00\x00\x00\x00\t<\xe5u\xedA\xa7\aT\xdd\xd1{\xff\xcb\xdb\xb11\xc2s\xcb\xbf\x04\x00\x00\x00<\xfe\xf9\f\xe6E\b\x00\xd7\x85q\xc4\xab\xbd&\x92\x89(\xf3\"\xceJ\x19\x185\xa6- \xe6uK\xe1D\x8f\x9f\x92\xca\x93#\xf5E\xc2\x91Yl\x17\a\x02\t\x17\x7f\xc4\xde\x04\x9b\x89#\xf6&[\xd81\xb3\xdc\x00\x04\x15\x03\x17R\xd24\xeb\xb5\xc2\xff\x1bnF\x8e\xe4\'\x18\xba9.\xd4\xd9\xc6\x98\x8f\xc6D!p\xbeV\xb7x\r@\x1b5\x8br\x11\xdex\x19\x89\xdc\x1el\xcd\x13\xb6\xc2\xdb\x1fr2\x7f?\xfe\x0f\x04\x11\xc3\x8f:uXQ\x0f\v\xfc\xff\x7fL\xfb\xa8]\xd4\xd7\x13?\xe3<#\x1f\x9a\x03C\x8f\xe7\rV1\x99\xaf@Re\x18J\xb6\xee\xeeAnR\n\x8a\xe4\x1a:&\xc7\x15B\x8aG\xa4\a`\xee\xaf\x80T\xddo\xc4D^z\xbf\x1c\x87F?!k\'\xc3\xf9\xa3\xd9\x85\xb1N%\x17\f\xd0#\x05^\xf7\x11\x13\xadKb\x8ck\x10\xd3 >\t\xe0\x16\x80\x82\xb3\xcc\xc7\x05*\x9b\x0eQ\x92\xd7\xbaO\x06\xb2\xdc\xe7/\x1f\x90]IB94(evFMJ\x85\xc4S\xa8\x8b\xbe\xd3\x90\xe9\t\x00\x13\x1e\x9a\x94\x00\x00\x00\x00\x00U\xfbLA\xa6K\xd5\x0eD\xf2Y\xc3,\t4hD\xc4o\xc3\x87$\x9d6\xc8\x93\xa3\x8e:\xfe#\xa0`\xb1k\xacz\xe0\xb3\x95\x17\xdf\xc7\xc2\xedKc\xa3\xbd\xc2\x9f\x86C(/\xe3\xb2\xc6$s^\xd1vU\x9cB)ao\xf1\'', 0xffffffffffffffff) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) mount(0x0, &(0x7f0000000340)='./sys\x00', 0x0, 0x0, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="2e00000011008188040f46ecdb4cb9cca7480ef410000000e3bd6efb440009000e000a000d000000ba8000001201", 0x2e}], 0x1}, 0x40840) write(0xffffffffffffffff, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000e, 0x20c44fb6edc09a38, 0xffffffffffffffff, 0x0) r4 = socket$xdp(0x2c, 0x3, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a00)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x801, 0x0, 0x0, {0x2}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x64, 0x9, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0x1}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x8}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x94}, @NFTA_SET_DESC={0x20, 0x9, 0x0, 0x1, [@NFTA_SET_DESC_CONCAT={0x1c, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x4}]}, {0xc, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x4}]}]}]}]}, @NFT_MSG_NEWSETELEM={0x44, 0xc, 0xa, 0x101, 0x0, 0x0, {0x2}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x18, 0x3, 0x0, 0x1, [{0x14, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0x10, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0xc, 0x1, 'H\x00\x00\x00\x00\x00\x00\x00'}]}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0xf0}}, 0x0) setsockopt$XDP_UMEM_REG(r4, 0x11b, 0x4, &(0x7f0000000080)={&(0x7f0000000000)=""/59, 0x325000, 0x800}, 0x1c) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000000000000000000050000000900010073797a30000000002c000000030a01010000000000000000050000000900010073797a30000000000900030073797a31000000004c000000060a010400000000000000000500000008080b40000000002400048020000180070001006374000014000280080002400000000608000140000000150900010073797a3000000000140000001100010000000000000002000000000a"], 0xc0}}, 0x0) 1.59657763s ago: executing program 1 (id=1164): syz_ublk_setup_io_uring(0x20, &(0x7f0000000340)={0x0, 0x7fc8, 0x1000, 0x40002, 0x393}, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0xffffd000) syz_genetlink_get_family_id$l2tp(0x0, 0xffffffffffffffff) syz_ublk_add_dev(0xffffffffffffffff, r0, r1, r2, &(0x7f0000000400)={0x2e, 0x8, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000000c0)=@any_dev={0x3, 0x603, 0x0, 0x0, 0x1000, 0xb6a7, 0x0, 0x0, 0x28}}}, &(0x7f0000000180)=0x0) sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0x0) r5 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x82042, 0x0) syz_ublk_setup_queues(r5, r4, &(0x7f0000000480)={0x0, 0x18ee, 0x1000, 0x3, 0x1d2}, &(0x7f0000002680)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xb656, 0x20, 0x2, 0x342, 0x0, r5}, 0xffffffffffffffff}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x842d, 0x40, 0x2, 0x6a}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xb6d4, 0x10000, 0x1, 0x252}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xeaff, 0x8, 0x0, 0x231}}], 0x4, &(0x7f0000003900)={0x2e, 0x62, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x1, {0x9}, 0x0, r3, '\x00', {0x2003, 0xb66, 0x0, 0x0}}, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000040)={0x14, 0x23, 0x409, 0x70bd25, 0x25dfd3ff, {0x2}}, 0x14}, 0x1, 0x0, 0x0, 0x24040811}, 0x8410) syz_clone(0x280000, 0x0, 0x0, 0x0, 0x0, 0x0) syz_clone(0x400, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000640)="3d183e767f00214c2e5c07799ae108914ae4c2cd24a1470432a3917ac4932ba9e1c6f129861f13f430ca8eeac0f55b39cef14cc9") bind$alg(0xffffffffffffffff, &(0x7f0000000040)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_ctr_aes256\x00'}, 0x58) connect$inet6(0xffffffffffffffff, &(0x7f0000000180)={0xa, 0x3, 0xc, @dev={0xfe, 0x80, '\x00', 0xd}, 0x9}, 0x1c) syz_clone(0x20223000, 0x0, 0x0, 0x0, 0x0, 0x0) mmap$IORING_MAP_OFF_PARAM_REGION(0x0, 0x9, 0x1, 0x20010, r6, 0x20000000) r7 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000500)='/sys/kernel/kexec_crash_size', 0x202, 0x0) sendfile(r7, r7, 0x0, 0x6) r8 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) sendmsg$TIPC_NL_BEARER_ADD(r7, &(0x7f0000002500)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000024c0)={&(0x7f0000002340)={0x80, 0x0, 0x8, 0x70bd26, 0x25dfdbfd, {}, [@TIPC_NLA_NODE={0x68, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ID={0x64, 0x3, "c907821af0a1a820c8a9d270a15dbabaa1e56e30808953e62fb8fc92d00052d206e217f2dce4148877931e67d9998da21eb88975347d6c0f02b1fcf501d04c3d3332e23cd85edcaa445a27871c8cb8690379961e759cb5262f98620916a88c26"}]}, @TIPC_NLA_NODE={0x4}]}, 0x80}, 0x1, 0x0, 0x0, 0x10}, 0x8000) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r7, 0x40182103, &(0x7f00000003c0)={0x0, 0x1, r8, 0x1, 0x80000}) 1.533179038s ago: executing program 0 (id=1178): r0 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000c00)={r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x59, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) mount$9p_virtio(0x0, 0x0, 0x0, 0x3200006, 0x0) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000000500)={{0x1, 0x1, 0x6b, 0xffffffffffffffff, {0x101}}, '\x00'}) getpid() r4 = syz_open_procfs(0xffffffffffffffff, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r5 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r5, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$packet_tx_ring(r6, 0x107, 0xd, &(0x7f0000019080)=@req={0x7, 0x50d, 0x0, 0x6}, 0x10) sendmsg$nl_generic(r6, 0x0, 0x4004000) getsockopt(0xffffffffffffffff, 0x200000000114, 0x2716, 0x0, &(0x7f0000000000)) r7 = syz_io_uring_setup(0x264a, &(0x7f00000190c0)={0x0, 0x8847, 0x40, 0x2, 0x266, 0x0, r4}, &(0x7f0000019140), &(0x7f0000000180), &(0x7f00000191c0)) io_uring_register$IORING_UNREGISTER_IOWQ_AFF(r7, 0x12, 0x0, 0x0) sendmsg$nl_route(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000240)=@newlink={0x40, 0x10, 0xff05, 0x8000000, 0x0, {0x0, 0x0, 0x4a00, 0x0, 0xbc2a4219f6b34c13}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @batadv={{0xb}, {0x4}}}, @IFLA_ADDRESS={0xa, 0x1, @multicast}]}, 0x40}}, 0x20000840) ioctl$sock_ifreq(0xffffffffffffffff, 0x8932, &(0x7f0000000140)={'netdevsim0\x00', @ifru_hwaddr=@remote}) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001480)={&(0x7f00000002c0)=@newqdisc={0x64, 0x24, 0x3fe3aa0262d8c583, 0xffffffff, 0x3, {0x0, 0x0, 0x0, r1, {0x0, 0x2}, {0xffff, 0xffff}, {0xffff, 0xfff1}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x34, 0x8002, [@TCA_FQ_PIE_QUANTUM={0x8, 0x7, 0x6a13}, @TCA_FQ_PIE_QUANTUM={0x8, 0x7, 0x5}, @TCA_FQ_PIE_TARGET={0x8, 0x3, 0x8}, @TCA_FQ_PIE_BETA={0x8, 0x6, 0x5}, @TCA_FQ_PIE_LIMIT={0x8, 0x1, 0x3}, @TCA_FQ_PIE_FLOWS={0x8, 0x2, 0xefa5}]}}]}, 0x64}}, 0x2000400c) 316.374762ms ago: executing program 0 (id=1179): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) request_key(0x0, 0x0, &(0x7f0000000340)='\x8e\x00\x9e\xbb\x1e\x1av\xe8M\x00d\xaaI\x00\x00\x00\x00\x00\x00\t<\xe5u\xedA\xa7\aT\xdd\xd1{\xff\xcb\xdb\xb11\xc2s\xcb\xbf\x04\x00\x00\x00<\xfe\xf9\f\xe6E\b\x00\xd7\x85q\xc4\xab\xbd&\x92\x89(\xf3\"\xceJ\x19\x185\xa6- \xe6uK\xe1D\x8f\x9f\x92\xca\x93#\xf5E\xc2\x91Yl\x17\a\x02\t\x17\x7f\xc4\xde\x04\x9b\x89#\xf6&[\xd81\xb3\xdc\x00\x04\x15\x03\x17R\xd24\xeb\xb5\xc2\xff\x1bnF\x8e\xe4\'\x18\xba9.\xd4\xd9\xc6\x98\x8f\xc6D!p\xbeV\xb7x\r@\x1b5\x8br\x11\xdex\x19\x89\xdc\x1el\xcd\x13\xb6\xc2\xdb\x1fr2\x7f?\xfe\x0f\x04\x11\xc3\x8f:uXQ\x0f\v\xfc\xff\x7fL\xfb\xa8]\xd4\xd7\x13?\xe3<#\x1f\x9a\x03C\x8f\xe7\rV1\x99\xaf@Re\x18J\xb6\xee\xeeAnR\n\x8a\xe4\x1a:&\xc7\x15B\x8aG\xa4\a`\xee\xaf\x80T\xddo\xc4D^z\xbf\x1c\x87F?!k\'\xc3\xf9\xa3\xd9\x85\xb1N%\x17\f\xd0#\x05^\xf7\x11\x13\xadKb\x8ck\x10\xd3 >\t\xe0\x16\x80\x82\xb3\xcc\xc7\x05*\x9b\x0eQ\x92\xd7\xbaO\x06\xb2\xdc\xe7/\x1f\x90]IB94(evFMJ\x85\xc4S\xa8\x8b\xbe\xd3\x90\xe9\t\x00\x13\x1e\x9a\x94\x00\x00\x00\x00\x00U\xfbLA\xa6K\xd5\x0eD\xf2Y\xc3,\t4hD\xc4o\xc3\x87$\x9d6\xc8\x93\xa3\x8e:\xfe#\xa0`\xb1k\xacz\xe0\xb3\x95\x17\xdf\xc7\xc2\xedKc\xa3\xbd\xc2\x9f\x86C(/\xe3\xb2\xc6$s^\xd1vU\x9cB)ao\xf1\'', 0xffffffffffffffff) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) lsetxattr$security_capability(&(0x7f0000000000)='./file1/file2\x00', 0x0, 0x0, 0x0, 0x1) mprotect(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x1000000) r2 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r2, 0x89f3, &(0x7f0000000300)={'syztnl2\x00', &(0x7f0000000040)={'syztnl2\x00', 0x0, 0x29, 0x84, 0x4, 0x4038a0b, 0x11, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @mcast2={0xff, 0x5}, 0x20, 0x0, 0x0, 0x4}}) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000000906010200bb33230a743bb12fa8f3f09c36dff3730000000000000007000000"], 0x14}, 0x1, 0x0, 0x0, 0x80}, 0x80) bpf$PROG_LOAD(0x5, 0x0, 0x0) pipe(&(0x7f00000000c0)) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x11, 0x0, 0x0, &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x4d}, 0x94) socket$nl_generic(0x10, 0x3, 0x10) r4 = socket(0x400000000010, 0x3, 0x0) landlock_restrict_self(0xffffffffffffffff, 0x0) r5 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40000}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000140)=@newtfilter={0x34, 0x2c, 0xd27, 0x70bd28, 0x8000, {0x0, 0x0, 0x0, r6, {0x8, 0x7}, {}, {0x8, 0x3}}, [@filter_kind_options=@f_flower={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x26044028}, 0x4000800) syz_emit_vhci(&(0x7f0000000000)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x2, 0x0, 0x10}, @l2cap_cid_le_signaling={{0xc}, @l2cap_ecred_conn_req={{0x17, 0xae, 0x8}, {0xe6, 0xf, 0x0, 0x4}}}}, 0x15) 253.406817ms ago: executing program 1 (id=1181): r0 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) connect$bt_rfcomm(r0, &(0x7f0000000040)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x3}, 0xa) shutdown(r0, 0x1) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, 0x0) r1 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) r2 = request_key(&(0x7f0000000080)='asymmetric\x00', &(0x7f0000000100)={'syz', 0x2}, 0x0, r1) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r1, &(0x7f00000000c0)='asymmetric\x00', &(0x7f0000000280)=@chain={'key_or_keyring:', r2}) add_key(&(0x7f0000000040)='asymmetric\x00', 0x0, &(0x7f0000000780)="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", 0x559, r1) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x2840, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x1) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x64, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) ioctl$KVM_SET_SREGS(r5, 0x4138ae84, &(0x7f00000001c0)={{0x2000, 0x41000, 0x8, 0x9, 0x3, 0xe4, 0x40, 0x2d, 0xff, 0x2c, 0x1a}, {0x41000, 0x2, 0xe, 0x0, 0x40, 0x5, 0x7d, 0x8, 0x58, 0x3, 0x3}, {0xdddd1000, 0xe000, 0x9, 0x5, 0x3, 0x7, 0xfa, 0x89, 0x1, 0xab, 0x5, 0x81}, {0xdddd0000, 0xffff1000, 0x3, 0x5d, 0x2, 0x43, 0x0, 0xfa, 0x80, 0x4, 0x12, 0x4}, {0xdddd0000, 0x26000, 0x8, 0x1, 0x3, 0x7, 0xab, 0x7f, 0x47, 0x83, 0xf7, 0x82}, {0xc000, 0x8000000, 0x8, 0xa0, 0xb5, 0x8, 0x1, 0xd, 0x88, 0xf, 0x1}, {0x54000, 0x2, 0x4, 0x5, 0x7, 0x2, 0x7, 0x0, 0x6, 0x7e, 0xff, 0x70}, {0xeeee8000, 0xfec00000, 0xe, 0x5, 0xf, 0x7, 0x3, 0x16, 0x2, 0x3, 0x7, 0x9}, {0xb000, 0x2e}, {0x10000, 0x3ff}, 0x80000031, 0x0, 0x6000, 0x42124, 0x6, 0x9501, 0x3000, [0x6840000000000002, 0x3, 0x91, 0xff]}) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0xd, 0xc, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006b000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000c400000095"], &(0x7f0000000080)='syzkaller\x00', 0x8, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x102}, 0x94) prlimit64(0x0, 0x1, 0x0, &(0x7f0000000140)) mount(&(0x7f00000002c0)=@nullb, &(0x7f0000000080)='./cgroup\x00', &(0x7f00000000c0)='ext4\x00', 0x10, &(0x7f0000000100)='barrier') r6 = socket$packet(0x11, 0x3, 0x300) getsockopt$packet_int(r6, 0x107, 0xc, 0x0, &(0x7f0000002000)) r7 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000180), 0x4) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={r7, 0x0, 0x4a, 0x12, &(0x7f00000001c0)="72bd324769ed36ca10593bbff6bb84a3850c7f814a022fca9178f58ad83ed05d7b3ab43d44876141ee1757589bcdf4ced491ef34fbfa2c256ffa259da47a1f23ae361bdd41b84a807094", &(0x7f0000000240)=""/18, 0x4, 0x0, 0xd0, 0x20, &(0x7f0000000300)="af21cb0035fd7a8614cce874a73a27ccad32f5796f7467514b797872136a6614c11b39593da51fba5267b20f9e5f063a0ec1f4e99c1337050fb86b291395d2dcb02728032e85e53a3d4277ea53cb1f8217e1fcef3a8692e8e3a042914a3de5bb498f43e665dc2df2f71a2aa2f004dbbb93a044eeb103631ab0513729e06bf2e1930b2e5d06a3e39f607d1741c32022b11903d440bdeb07c44178a19679053e8af3bce03c477e04328eb71ce2d2b0bf94e583b05d5f0f211f60d5512a0edc60858f5defb410ddfa625005b65a237f5090", &(0x7f0000000400)="4f3f70b78fa7ad37a284972a41dfd986a6d2bb25471701b325fff270d98855f2", 0x7, 0x0, 0x4}, 0x50) openat$kvm(0xffffffffffffff9c, 0x0, 0x20940, 0x0) r8 = gettid() sched_setscheduler(r8, 0x1, &(0x7f00000004c0)=0x7) ppoll(&(0x7f0000000180)=[{r0, 0x4000}], 0x1, 0x0, 0x0, 0x0) 77.431851ms ago: executing program 2 (id=1170): r0 = mmap$KVM_VCPU(&(0x7f0000ffb000/0x2000)=nil, 0x930, 0x1000002, 0x4018831, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x80801) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000ffc000/0x1000)=nil, 0x1000}, 0x9}) syz_memcpy_off$KVM_EXIT_HYPERCALL(r0, 0x20, &(0x7f0000000180)="5e73663bf4082f7c6cbecbf09d6dd7be5a06dfd64563f329c16f799d1836bfc45a7badc8faed24bb77c848723a43602d1fe0d236c062e105ec77ffd00fb243c3111dda42112650cc", 0x0, 0xfe2a) r2 = epoll_create1(0x0) add_key(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./dev\x00', &(0x7f00000000c0)='devtmpfs\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./dev/mapper/control\x00', 0x0, 0x0) socket$xdp(0x2c, 0x3, 0x0) ioctl(r3, 0xc138fd03, &(0x7f0000000000)="04000000000000000000000038010000000000000000000000000000000000000000000000000000000000000000000074") syz_genetlink_get_family_id$ethtool(0x0, r3) r4 = userfaultfd(0x801) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x1c}) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000040)=0x3, 0xac5) syz_clone3(&(0x7f0000000900)={0x23800000, &(0x7f0000000040)=0xffffffffffffffff, 0x0, 0x0, {0x28}, 0x0, 0x0, 0x0, 0x0}, 0x58) io_setup(0x8, &(0x7f0000000600)=0x0) io_submit(r6, 0x1, &(0x7f0000001300)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0x6, r5, 0x0}]) ioctl(r3, 0xc138fd0e, &(0x7f0000000000)="040000000000000000000000380100003801") bpf$MAP_CREATE(0x600000000000000, &(0x7f0000000100)=ANY=[@ANYBLOB="0f000000040000000400000002000200000000003f1ff8f3693dff9b7c87a397f70ba65eea7748a943d8e2c14f6321e99c5d8e7fef8985476a"], 0x48) r7 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./dev/mapper/control\x00', 0x0, 0x0) ioctl(r7, 0xc138fd05, &(0x7f0000000000)="040000000200000000007c2fc2") epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000080)={0x10000000}) 0s ago: executing program 6 (id=1182): mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x10) mount(&(0x7f0000000200)=@filename='mtd0\x00', &(0x7f0000000100)='./file0\x00', &(0x7f0000000300)='jffs2\x00', 0x800000, 0x0) mkdir(&(0x7f0000000100)='./file1\x00', 0x13b) mkdir(&(0x7f0000000000)='./bus\x00', 0x0) syz_io_uring_setup(0x34b8, &(0x7f0000000540)={0x0, 0x2730, 0x40, 0x2, 0x82}, 0x0, &(0x7f00000002c0), &(0x7f0000000240)) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x34000, 0x0) ioctl$FE_GET_PROPERTY(0xffffffffffffffff, 0x80106f53, &(0x7f0000000040)={0x30, 0x0}) openat(0xffffffffffffffff, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x4a102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mremap(&(0x7f000054e000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f000022c000/0x3000)=nil) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000740)={0xffffffffffffffff, 0xe0, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f00000001c0)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x6, &(0x7f00000005c0)=[0x0, 0x0], &(0x7f00000003c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xb8, &(0x7f0000000400)=[{}, {}], 0x10, 0x10, &(0x7f0000000440), &(0x7f0000000480), 0x8, 0xea, 0x8, 0x8, &(0x7f0000000500)}}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./trace\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./trace\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000200)='./trace/set_event\x00', 0x121302, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000380)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) chdir(0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) getdents64(r1, 0x0, 0x0) ioctl$VIDIOC_TRY_DECODER_CMD(0xffffffffffffffff, 0xc0485661, &(0x7f0000000900)={0x0, 0x1, @raw_data=[0x2000000, 0x0, 0x7, 0x2, 0xa38e5623, 0xf5a, 0x2, 0x1, 0xc90, 0x953, 0xffff, 0x81, 0xcb, 0x46, 0x7, 0x77]}) r2 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r2, &(0x7f00000000c0)=@nameseq={0x1e, 0x1, 0x0, {0x2, 0x0, 0x80000}}, 0x10) kernel console output (not intermixed with test programs): all=386 compat=1 ip=0xf707efec code=0x7ffc0000 [ 423.798902][ T43] audit: type=1326 audit(1791218722.949:6445): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12857 comm="syz.5.1042" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf707efec code=0x7ffc0000 [ 423.798990][ T43] audit: type=1326 audit(1791218722.949:6446): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12857 comm="syz.5.1042" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf707efec code=0x7ffc0000 [ 423.799177][ T43] audit: type=1326 audit(1791218722.949:6447): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12857 comm="syz.5.1042" exe="/syz-executor" sig=0 arch=40000003 syscall=192 compat=1 ip=0xf707efec code=0x7ffc0000 [ 423.802966][ T43] audit: type=1326 audit(1791218722.959:6448): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12857 comm="syz.5.1042" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf707efec code=0x7ffc0000 [ 423.803079][ T43] audit: type=1326 audit(1791218722.959:6449): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12857 comm="syz.5.1042" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf707efec code=0x7ffc0000 [ 423.804432][ T43] audit: type=1326 audit(1791218722.959:6450): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12857 comm="syz.5.1042" exe="/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf71b75eb code=0x7ffc0000 [ 423.808697][ T43] audit: type=1326 audit(1791218722.959:6451): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12857 comm="syz.5.1042" exe="/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf707efec code=0x7ffc0000 [ 423.939025][T12840] e1000e 0000:00:02.0: Interrupt Throttle Rate off [ 423.950833][T10440] e1000 0000:00:06.0 eth0: Reset adapter [ 424.057742][T12840] e1000e 0000:00:02.0: Some CPU C-states have been disabled in order to enable jumbo frames [ 424.070385][ T9925] usb 10-1: new high-speed USB device number 3 using dummy_hcd [ 424.222984][ T9925] usb 10-1: New USB device found, idVendor=0711, idProduct=0550, bcdDevice= 0.00 [ 424.237875][ T9925] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 424.237891][ T9925] usb 10-1: Product: syz [ 424.237900][ T9925] usb 10-1: Manufacturer: syz [ 424.237908][ T9925] usb 10-1: SerialNumber: syz [ 424.240698][ T5451] 8021q: adding VLAN 0 to HW filter on device eth18 [ 424.260611][ T9925] usb 10-1: USB2VGA dongle found at address 3 [ 424.265260][ T9925] usb 10-1: Allocated 8 output buffers [ 424.610068][T12858] netlink: 'syz.5.1042': attribute type 30 has an invalid length. [ 424.618767][ T5451] 8021q: adding VLAN 0 to HW filter on device eth19 [ 424.630260][T10863] usb 8-1: new full-speed USB device number 7 using dummy_hcd [ 424.689184][ T9925] usb 10-1: Failed to early initialize device [ 424.709538][ T9925] usb 10-1: USB disconnect, device number 3 [ 424.722477][ T854] e1000e 0000:00:02.0 eth1: NIC Link is Up 1000 Mbps Full Duplex, Flow Control: Rx/Tx [ 424.752977][T12760] bridge0: port 1(bridge_slave_0) entered blocking state [ 424.753022][T12760] bridge0: port 1(bridge_slave_0) entered disabled state [ 424.753082][T12760] bridge_slave_0: entered allmulticast mode [ 424.757617][T12760] bridge_slave_0: entered promiscuous mode [ 424.758808][T12760] bridge0: port 2(bridge_slave_1) entered blocking state [ 424.758851][T12760] bridge0: port 2(bridge_slave_1) entered disabled state [ 424.758906][T12760] bridge_slave_1: entered allmulticast mode [ 424.759606][T12760] bridge_slave_1: entered promiscuous mode [ 424.813236][T10863] usb 8-1: New USB device found, idVendor=056a, idProduct=0063, bcdDevice= 0.00 [ 424.813261][T10863] usb 8-1: too many configurations: 248, using maximum allowed: 8 [ 424.816430][T10863] usb 8-1: config index 0 descriptor too short (expected 28277, got 36) [ 424.816445][T10863] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 424.816454][T10863] usb 8-1: config 0 has no interfaces? [ 424.817227][T10863] usb 8-1: config index 1 descriptor too short (expected 28277, got 36) [ 424.817239][T10863] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 424.817248][T10863] usb 8-1: config 0 has no interfaces? [ 424.818003][T10863] usb 8-1: config index 2 descriptor too short (expected 28277, got 36) [ 424.818015][T10863] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 424.818023][T10863] usb 8-1: config 0 has no interfaces? [ 424.818790][T10863] usb 8-1: config index 3 descriptor too short (expected 28277, got 36) [ 424.818802][T10863] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 424.818810][T10863] usb 8-1: config 0 has no interfaces? [ 424.819592][T10863] usb 8-1: config index 4 descriptor too short (expected 28277, got 36) [ 424.819604][T10863] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 424.819613][T10863] usb 8-1: config 0 has no interfaces? [ 424.821147][T10863] usb 8-1: config index 5 descriptor too short (expected 28277, got 36) [ 424.821159][T10863] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 424.821169][T10863] usb 8-1: config 0 has no interfaces? [ 424.829678][T10863] usb 8-1: config index 6 descriptor too short (expected 28277, got 36) [ 424.829691][T10863] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 424.829700][T10863] usb 8-1: config 0 has no interfaces? [ 424.837924][T10863] usb 8-1: config index 7 descriptor too short (expected 28277, got 36) [ 424.837936][T10863] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 424.837945][T10863] usb 8-1: config 0 has no interfaces? [ 424.837958][T10863] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 424.842810][T10863] usb 8-1: config 0 descriptor?? [ 424.905498][T12760] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 424.907674][T12760] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 424.909866][ T5451] 8021q: adding VLAN 0 to HW filter on device eth20 [ 425.016890][T12760] team0: Port device team_slave_0 added [ 425.022175][T12760] team0: Port device team_slave_1 added [ 425.038211][T12760] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 425.038222][T12760] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 425.038235][T12760] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 425.039672][T12760] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 425.039726][T12760] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 425.039740][T12760] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 425.070885][T12760] hsr_slave_0: entered promiscuous mode [ 425.071495][T12760] hsr_slave_1: entered promiscuous mode [ 425.158826][T10863] usb 8-1: string descriptor 0 read error: -71 [ 425.162383][T10863] usb 8-1: USB disconnect, device number 7 [ 425.376167][ T5742] Bluetooth: hci2: command tx timeout [ 425.384082][T12760] netdevsim netdevsim8 eth5 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 425.400741][ T5451] 8021q: adding VLAN 0 to HW filter on device eth21 [ 425.624200][T12760] netdevsim netdevsim8 eth4 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 425.761040][T12918] ŖŖŖŖŖŖ: renamed from vlan0 (while UP) [ 425.825571][T12760] netdevsim netdevsim8 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 425.938974][T12760] netdevsim netdevsim8 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 426.138614][T12760] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 426.140805][T12760] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 426.141201][T12760] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 426.142972][T12760] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 426.143346][T12760] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 426.146007][T12760] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 426.146358][T12760] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 426.149021][T12760] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 426.195068][T12760] 8021q: adding VLAN 0 to HW filter on device bond0 [ 426.201955][T12760] 8021q: adding VLAN 0 to HW filter on device team0 [ 426.204359][ T7052] bridge0: port 1(bridge_slave_0) entered blocking state [ 426.204402][ T7052] bridge0: port 1(bridge_slave_0) entered forwarding state [ 426.207741][ T62] bridge0: port 2(bridge_slave_1) entered blocking state [ 426.207782][ T62] bridge0: port 2(bridge_slave_1) entered forwarding state [ 426.331196][T10475] e1000: eth0 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: RX [ 426.458543][T12760] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 426.806631][T12973] x_tables: ip_tables: TCPMSS.0 target: invalid size 8 (kernel) != (user) 16 [ 427.666366][T12760] veth0_vlan: entered promiscuous mode [ 427.669865][T12760] veth1_vlan: entered promiscuous mode [ 427.682981][T12760] veth0_macvtap: entered promiscuous mode [ 427.685549][T12760] veth1_macvtap: entered promiscuous mode [ 427.694003][T12760] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 427.697699][T12760] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 427.797590][T12989] No buffer was provided with the request [ 428.335730][T10339] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 428.336204][T10339] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 428.337991][T10339] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 428.338440][T10339] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 428.584931][ T5451] 8021q: adding VLAN 0 to HW filter on device eth10 [ 428.725332][ T8469] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 428.725352][ T8469] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 428.891726][ T8469] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 428.891740][ T8469] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 428.939393][ T5451] 8021q: adding VLAN 0 to HW filter on device eth11 [ 429.233885][ T5451] 8021q: adding VLAN 0 to HW filter on device eth12 [ 429.686305][T13034] Invalid ELF header type: 3 != 1 [ 429.711138][T13034] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 429.820804][T13034] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 430.112092][ T5451] 8021q: adding VLAN 0 to HW filter on device eth13 [ 430.340612][T13041] netlink: 'syz.8.1059': attribute type 2 has an invalid length. [ 430.340627][T13041] netlink: 'syz.8.1059': attribute type 7 has an invalid length. [ 430.345851][T13041] Uż: entered promiscuous mode [ 431.693520][ T5451] 8021q: adding VLAN 0 to HW filter on device eth14 [ 432.257867][ T5451] 8021q: adding VLAN 0 to HW filter on device eth15 [ 432.340208][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 432.698058][ T5451] 8021q: adding VLAN 0 to HW filter on device eth16 [ 433.155217][ T5451] 8021q: adding VLAN 0 to HW filter on device eth17 [ 433.428302][T13120] jffs2: notice: (13120) jffs2_build_xattr_subsystem: complete building xattr subsystem, 4 of xdatum (0 unchecked, 0 orphan) and 5 of xref (0 dead, 0 orphan) found. [ 433.641826][T13129] bond0: entered promiscuous mode [ 433.641841][T13129] bond_slave_0: entered promiscuous mode [ 433.641936][T13129] bond_slave_1: entered promiscuous mode [ 433.644618][T13129] batadv0: entered promiscuous mode [ 433.685994][T13129] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 433.796746][T13122] netlink: 260 bytes leftover after parsing attributes in process `syz.9.1068'. [ 433.811137][T13129] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 433.811151][T13129] overlayfs: failed to set xattr on upper [ 433.811156][T13129] overlayfs: ...falling back to redirect_dir=nofollow. [ 433.811160][T13129] overlayfs: ...falling back to metacopy=off. [ 433.811164][T13129] overlayfs: ...falling back to index=off. [ 433.811167][T13129] overlayfs: ...falling back to uuid=null. [ 434.731739][T13155] jffs2: notice: (13155) jffs2_build_xattr_subsystem: complete building xattr subsystem, 4 of xdatum (0 unchecked, 0 orphan) and 5 of xref (0 dead, 0 orphan) found. [ 434.940979][ T43] kauditd_printk_skb: 85 callbacks suppressed [ 434.941024][ T43] audit: type=1326 audit(1791218734.080:6537): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13153 comm="syz.9.1073" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf704efec code=0x7ffc0000 [ 434.941050][ T43] audit: type=1326 audit(1791218734.080:6538): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13153 comm="syz.9.1073" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf704efec code=0x7ffc0000 [ 434.941127][ T43] audit: type=1326 audit(1791218734.080:6539): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13153 comm="syz.9.1073" exe="/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf704efec code=0x7ffc0000 [ 434.941181][ T43] audit: type=1326 audit(1791218734.080:6540): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13153 comm="syz.9.1073" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf704efec code=0x7ffc0000 [ 434.941202][ T43] audit: type=1326 audit(1791218734.080:6541): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13153 comm="syz.9.1073" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf704efec code=0x7ffc0000 [ 434.941246][ T43] audit: type=1326 audit(1791218734.080:6542): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13153 comm="syz.9.1073" exe="/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf704efec code=0x7ffc0000 [ 434.941321][ T43] audit: type=1326 audit(1791218734.080:6543): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13153 comm="syz.9.1073" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf704efec code=0x7ffc0000 [ 434.941343][ T43] audit: type=1326 audit(1791218734.080:6544): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13153 comm="syz.9.1073" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf704efec code=0x7ffc0000 [ 434.941361][ T43] audit: type=1326 audit(1791218734.080:6545): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13153 comm="syz.9.1073" exe="/syz-executor" sig=0 arch=40000003 syscall=296 compat=1 ip=0xf704efec code=0x7ffc0000 [ 434.941460][ T43] audit: type=1326 audit(1791218734.090:6546): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13153 comm="syz.9.1073" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf704efec code=0x7ffc0000 [ 435.523407][T13165] random: crng reseeded on system resumption [ 436.234321][ T5451] 8021q: adding VLAN 0 to HW filter on device eth22 [ 436.354466][T13185] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 436.684989][T13194] kAFS: bad VL server IP address [ 437.147873][ T5451] 8021q: adding VLAN 0 to HW filter on device eth23 [ 437.855623][ T5451] 8021q: adding VLAN 0 to HW filter on device eth24 [ 437.875298][ T8476] IPVS: starting estimator thread 0... [ 437.960247][T13221] IPVS: using max 43 ests per chain, 103200 per kthread [ 438.076472][ T5451] 8021q: adding VLAN 0 to HW filter on device eth25 [ 438.428223][T13242] macsec1: entered promiscuous mode [ 438.428238][T13242] macsec1: entered allmulticast mode [ 438.545375][ T5451] 8021q: adding VLAN 0 to HW filter on device eth26 [ 439.205505][ T5451] 8021q: adding VLAN 0 to HW filter on device eth27 [ 439.623473][ T1437] ieee802154 phy0 wpan0: encryption failed: -22 [ 439.623527][ T1437] ieee802154 phy1 wpan1: encryption failed: -22 [ 439.958685][T13242] netlink: 24 bytes leftover after parsing attributes in process `syz.9.1085'. [ 439.958704][T13242] netlink: 16 bytes leftover after parsing attributes in process `syz.9.1085'. [ 439.976208][T13242] netlink: 36 bytes leftover after parsing attributes in process `syz.9.1085'. [ 440.297882][ T5451] 8021q: adding VLAN 0 to HW filter on device eth28 [ 440.446919][T13257] FAULT_INJECTION: forcing a failure. [ 440.446919][T13257] name failslab, interval 1, probability 0, space 0, times 0 [ 440.446941][T13257] CPU: 2 UID: 0 PID: 13257 Comm: syz.8.1087 Tainted: G L syzkaller #0 PREEMPT(full) [ 440.446957][T13257] Tainted: [L]=SOFTLOCKUP [ 440.446961][T13257] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 440.446967][T13257] Call Trace: [ 440.446971][T13257] [ 440.446975][T13257] dump_stack_lvl+0x100/0x190 [ 440.447051][T13257] should_fail_ex.cold+0x5/0xa [ 440.447066][T13257] should_failslab+0xc2/0x120 [ 440.447102][T13257] __kmalloc_cache_noprof+0x91/0x6d0 [ 440.447114][T13257] ? find_held_lock+0x2b/0x80 [ 440.447127][T13257] ? resv_map_alloc+0x46/0x400 [ 440.447145][T13257] resv_map_alloc+0x46/0x400 [ 440.447160][T13257] hugetlbfs_get_inode+0x385/0x700 [ 440.447174][T13257] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 440.447210][T13257] hugetlb_file_setup+0x15b/0x5b0 [ 440.447225][T13257] ksys_mmap_pgoff+0x242/0x610 [ 440.447242][T13257] ? __pfx_ksys_mmap_pgoff+0x10/0x10 [ 440.447281][T13257] __do_fast_syscall_32+0x13a/0x8b0 [ 440.447296][T13257] ? lockdep_hardirqs_on+0x7d/0x110 [ 440.447311][T13257] do_fast_syscall_32+0x32/0x70 [ 440.447326][T13257] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 440.447340][T13257] RIP: 0023:0xf702efec [ 440.447358][T13257] Code: Unable to access opcode bytes at 0xf702efc2. [ 440.447363][T13257] RSP: 002b:00000000f53fc50c EFLAGS: 00000292 ORIG_RAX: 00000000000000c0 [ 440.447374][T13257] RAX: ffffffffffffffda RBX: 0000000080000000 RCX: 0000000000ff5000 [ 440.447381][T13257] RDX: 0000000000000003 RSI: 000000000005c832 RDI: 00000000ffffffff [ 440.447387][T13257] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 440.447394][T13257] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 440.447400][T13257] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 440.447414][T13257] [ 440.701046][ T5451] 8021q: adding VLAN 0 to HW filter on device eth29 [ 440.799232][T13256] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 440.799374][T13256] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 440.819675][T13256] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 440.823687][T13256] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 440.823744][T13256] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 440.826783][T13256] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 440.833789][T13256] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 440.833841][T13256] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 440.842363][T13256] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 440.853463][T13256] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 440.853729][T13256] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 440.864944][T13256] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 441.490957][T10475] usb 13-1: new full-speed USB device number 2 using dummy_hcd [ 441.652037][T10475] usb 13-1: New USB device found, idVendor=056a, idProduct=0063, bcdDevice= 0.00 [ 441.652068][T10475] usb 13-1: too many configurations: 248, using maximum allowed: 8 [ 441.652920][T10475] usb 13-1: config index 0 descriptor too short (expected 28277, got 36) [ 441.652933][T10475] usb 13-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 441.652945][T10475] usb 13-1: config 0 has no interfaces? [ 441.653716][T10475] usb 13-1: config index 1 descriptor too short (expected 28277, got 36) [ 441.653728][T10475] usb 13-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 441.653737][T10475] usb 13-1: config 0 has no interfaces? [ 441.654687][T10475] usb 13-1: config index 2 descriptor too short (expected 28277, got 36) [ 441.654700][T10475] usb 13-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 441.654709][T10475] usb 13-1: config 0 has no interfaces? [ 441.655696][T10475] usb 13-1: config index 3 descriptor too short (expected 28277, got 36) [ 441.655712][T10475] usb 13-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 441.655724][T10475] usb 13-1: config 0 has no interfaces? [ 441.657570][T10475] usb 13-1: config index 4 descriptor too short (expected 28277, got 36) [ 441.657586][T10475] usb 13-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 441.657598][T10475] usb 13-1: config 0 has no interfaces? [ 441.658433][T10475] usb 13-1: config index 5 descriptor too short (expected 28277, got 36) [ 441.658446][T10475] usb 13-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 441.658457][T10475] usb 13-1: config 0 has no interfaces? [ 441.660740][T10475] usb 13-1: config index 6 descriptor too short (expected 28277, got 36) [ 441.660752][T10475] usb 13-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 441.660761][T10475] usb 13-1: config 0 has no interfaces? [ 441.661578][T10475] usb 13-1: config index 7 descriptor too short (expected 28277, got 36) [ 441.661590][T10475] usb 13-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 441.661599][T10475] usb 13-1: config 0 has no interfaces? [ 441.661612][T10475] usb 13-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 441.662789][T10475] usb 13-1: config 0 descriptor?? [ 441.874290][T10475] usb 13-1: string descriptor 0 read error: -71 [ 441.876330][T10475] usb 13-1: USB disconnect, device number 2 [ 442.090281][ T5742] Bluetooth: hci1: command 0x0c1a tx timeout [ 442.477690][ T43] kauditd_printk_skb: 17 callbacks suppressed [ 442.477703][ T43] audit: type=1326 audit(1791218741.630:6564): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13337 comm="syz.3.1093" exe="/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf7f65fec code=0x0 [ 442.890352][ T5742] Bluetooth: hci0: command 0x0c1a tx timeout [ 442.890405][ T5742] Bluetooth: hci2: command 0x0c1a tx timeout [ 442.890433][ T5742] Bluetooth: hci3: command 0x0c1a tx timeout [ 443.837844][T13364] netlink: 'syz.8.1096': attribute type 1 has an invalid length. [ 443.838011][T13364] netlink: 84 bytes leftover after parsing attributes in process `syz.8.1096'. [ 443.838185][T13364] netlink: 'syz.8.1096': attribute type 2 has an invalid length. [ 443.838329][T13364] netlink: 4 bytes leftover after parsing attributes in process `syz.8.1096'. [ 444.170532][ T5097] Bluetooth: hci1: command 0x0c1a tx timeout [ 444.970334][T13373] netlink: 4 bytes leftover after parsing attributes in process `syz.9.1098'. [ 444.980358][ T5097] Bluetooth: hci3: command 0x0c1a tx timeout [ 444.980381][ T5097] Bluetooth: hci2: command 0x0c1a tx timeout [ 444.980395][ T5097] Bluetooth: hci0: command 0x0c1a tx timeout [ 444.992539][ T43] audit: type=1326 audit(1791218744.140:6565): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13381 comm="syz.8.1099" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf702efec code=0x7ffc0000 [ 444.992586][ T43] audit: type=1326 audit(1791218744.140:6566): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13381 comm="syz.8.1099" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf702efec code=0x7ffc0000 [ 444.992621][ T43] audit: type=1326 audit(1791218744.140:6567): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13381 comm="syz.8.1099" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf702efec code=0x7ffc0000 [ 444.992654][ T43] audit: type=1326 audit(1791218744.140:6568): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13381 comm="syz.8.1099" exe="/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf702efec code=0x7ffc0000 [ 444.992688][ T43] audit: type=1326 audit(1791218744.140:6569): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13381 comm="syz.8.1099" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf702efec code=0x7ffc0000 [ 444.992721][ T43] audit: type=1326 audit(1791218744.140:6570): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13381 comm="syz.8.1099" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf702efec code=0x7ffc0000 [ 444.992754][ T43] audit: type=1326 audit(1791218744.140:6571): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13381 comm="syz.8.1099" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf702efec code=0x7ffc0000 [ 444.992787][ T43] audit: type=1326 audit(1791218744.140:6572): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13381 comm="syz.8.1099" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf702efec code=0x7ffc0000 [ 444.992820][ T43] audit: type=1326 audit(1791218744.140:6573): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13381 comm="syz.8.1099" exe="/syz-executor" sig=0 arch=40000003 syscall=394 compat=1 ip=0xf702efec code=0x7ffc0000 [ 445.778684][T13407] syz.9.1101: vmalloc error: size 8589938688, exceeds total pages, mode:0x400dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 445.778728][T13407] CPU: 0 UID: 0 PID: 13407 Comm: syz.9.1101 Tainted: G L syzkaller #0 PREEMPT(full) [ 445.778743][T13407] Tainted: [L]=SOFTLOCKUP [ 445.778747][T13407] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 445.778753][T13407] Call Trace: [ 445.778757][T13407] [ 445.778762][T13407] dump_stack_lvl+0x100/0x190 [ 445.778780][T13407] warn_alloc.cold+0x9e/0xb2 [ 445.778798][T13407] ? __pfx_warn_alloc+0x10/0x10 [ 445.778810][T13407] ? __kasan_kmalloc+0xaa/0xb0 [ 445.778824][T13407] ? __kmalloc_cache_noprof+0x2f8/0x6d0 [ 445.778836][T13407] ? xskq_create+0x52/0x290 [ 445.778847][T13407] ? do_sock_setsockopt+0xf3/0x1d0 [ 445.778893][T13407] ? __do_fast_syscall_32+0x13a/0x8b0 [ 445.778908][T13407] ? do_fast_syscall_32+0x32/0x70 [ 445.778930][T13407] ? xsk_setsockopt+0x743/0xab0 [ 445.778942][T13407] __vmalloc_node_range_noprof+0x123b/0x1420 [ 445.778966][T13407] ? xsk_setsockopt+0x743/0xab0 [ 445.778981][T13407] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 445.778998][T13407] ? kasan_save_track+0x14/0x30 [ 445.779013][T13407] ? __kasan_kmalloc+0xaa/0xb0 [ 445.779029][T13407] ? __kmalloc_cache_noprof+0x2f8/0x6d0 [ 445.779041][T13407] ? xskq_create+0x52/0x290 [ 445.779052][T13407] ? xsk_setsockopt+0x743/0xab0 [ 445.779062][T13407] xskq_create+0x18f/0x290 [ 445.779074][T13407] ? xsk_setsockopt+0x743/0xab0 [ 445.779086][T13407] xsk_setsockopt+0x743/0xab0 [ 445.779096][T13407] ? __pfx_aa_sk_perm+0x10/0x10 [ 445.779109][T13407] ? __pfx_xsk_setsockopt+0x10/0x10 [ 445.779119][T13407] ? find_held_lock+0x2b/0x80 [ 445.779134][T13407] ? aa_sock_opt_perm+0x114/0x1e0 [ 445.779151][T13407] ? __pfx_xsk_setsockopt+0x10/0x10 [ 445.779162][T13407] do_sock_setsockopt+0xf3/0x1d0 [ 445.779177][T13407] __sys_setsockopt+0x119/0x190 [ 445.779190][T13407] __ia32_sys_setsockopt+0xbc/0x160 [ 445.779200][T13407] ? __do_fast_syscall_32+0xb3/0x8b0 [ 445.779214][T13407] ? lockdep_hardirqs_on+0x7d/0x110 [ 445.779248][T13407] __do_fast_syscall_32+0x13a/0x8b0 [ 445.779266][T13407] do_fast_syscall_32+0x32/0x70 [ 445.779281][T13407] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 445.779295][T13407] RIP: 0023:0xf704efec [ 445.779309][T13407] Code: Unable to access opcode bytes at 0xf704efc2. [ 445.779314][T13407] RSP: 002b:00000000f543d50c EFLAGS: 00000292 ORIG_RAX: 000000000000016e [ 445.779324][T13407] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 000000000000011b [ 445.779331][T13407] RDX: 0000000000000006 RSI: 0000000080000000 RDI: 0000000000000004 [ 445.779338][T13407] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 445.779344][T13407] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 445.779350][T13407] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 445.779364][T13407] [ 445.779368][T13407] Mem-Info: [ 445.779373][T13407] active_anon:2130 inactive_anon:1790 isolated_anon:0 [ 445.779373][T13407] active_file:2568 inactive_file:16725 isolated_file:0 [ 445.779373][T13407] unevictable:1000 dirty:138 writeback:0 [ 445.779373][T13407] slab_reclaimable:7424 slab_unreclaimable:69776 [ 445.779373][T13407] mapped:23274 shmem:1224 pagetables:1542 [ 445.779373][T13407] sec_pagetables:336 bounce:0 [ 445.779373][T13407] kernel_misc_reclaimable:0 [ 445.779373][T13407] free:28880 free_pcp:12296 free_cma:0 [ 445.779402][T13407] Node 0 active_anon:216kB inactive_anon:156kB active_file:140kB inactive_file:4kB unevictable:2000kB isolated(anon):0kB isolated(file):0kB mapped:32kB dirty:4kB writeback:0kB shmem:2000kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:8672kB pagetables:1184kB sec_pagetables:1140kB all_unreclaimable? yes Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 445.779428][T13407] Node 1 active_anon:8304kB inactive_anon:7004kB active_file:10132kB inactive_file:66896kB unevictable:2000kB isolated(anon):0kB isolated(file):0kB mapped:93064kB dirty:548kB writeback:0kB shmem:2896kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:8724kB pagetables:4984kB sec_pagetables:204kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 445.779455][T13407] Node 0 DMA free:2888kB boost:2048kB min:2808kB low:2996kB high:3184kB reserved_highatomic:0kB free_highatomic:0kB active_anon:16kB inactive_anon:4kB active_file:128kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 445.779484][T13407] lowmem_reserve[]: 0 278 278 278 278 [ 445.779505][T13407] Node 0 DMA32 free:32164kB boost:28404kB min:41028kB low:44184kB high:47340kB reserved_highatomic:0kB free_highatomic:0kB active_anon:200kB inactive_anon:152kB active_file:12kB inactive_file:4kB unevictable:2000kB writepending:4kB zspages:1132kB present:1032196kB managed:284752kB mlocked:0kB bounce:0kB free_pcp:488kB local_pcp:32kB free_cma:0kB [ 445.779536][T13407] lowmem_reserve[]: 0 0 0 0 0 [ 445.779556][T13407] Node 1 DMA32 free:80468kB boost:0kB min:47140kB low:58924kB high:70708kB reserved_highatomic:0kB free_highatomic:0kB active_anon:8372kB inactive_anon:7004kB active_file:10132kB inactive_file:66896kB unevictable:2000kB writepending:548kB zspages:5364kB present:1048432kB managed:948208kB mlocked:0kB bounce:0kB free_pcp:48684kB local_pcp:19216kB free_cma:0kB [ 445.779587][T13407] lowmem_reserve[]: 0 0 0 0 0 [ 445.779604][T13407] Node 0 DMA: 122*4kB (UM) 40*8kB (UM) 16*16kB (UM) 17*32kB (UM) 12*64kB (UM) 4*128kB (M) 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 2888kB [ 445.779673][T13407] Node 0 DMA32: 1225*4kB (UME) 438*8kB (UME) 105*16kB (UM) 228*32kB (UME) 69*64kB (UME) 15*128kB (UM) 9*256kB (UM) 6*512kB (UM) 1*1024kB (M) 1*2048kB (M) 0*4096kB = 32164kB [ 445.779751][T13407] Node 1 DMA32: 129*4kB (UME) 206*8kB (ME) 65*16kB (UME) 74*32kB (UME) 162*64kB (UM) 62*128kB (UME) 31*256kB (UME) 15*512kB (UM) 22*1024kB (UME) 5*2048kB (ME) 2*4096kB (UM) = 80452kB [ 445.779843][T13407] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 445.779853][T13407] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 445.779861][T13407] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 445.779870][T13407] Node 1 hugepages_total=3 hugepages_free=3 hugepages_surp=0 hugepages_size=2048kB [ 445.779879][T13407] 22364 total pagecache pages [ 445.779883][T13407] 1825 pages in swap cache [ 445.779887][T13407] Free swap = 97456kB [ 445.779891][T13407] Total swap = 124996kB [ 445.779895][T13407] 524155 pages RAM [ 445.779899][T13407] 0 pages HighMem/MovableOnly [ 445.779903][T13407] 212075 pages reserved [ 445.779906][T13407] 0 pages cma reserved [ 446.250471][ T5742] Bluetooth: hci1: command 0x0c1a tx timeout [ 446.278457][T13418] device-mapper: ioctl: Invalid target message parameters. [ 446.278813][T13418] device-mapper: ioctl: Unable to change name on mapped device t to one that already exists: j [ 446.548299][T13424] syz_tun (unregistering): left allmulticast mode [ 446.548316][T13424] syz_tun (unregistering): left promiscuous mode [ 446.548356][T13424] bridge0: port 3(syz_tun) entered disabled state [ 447.060638][ T5097] Bluetooth: hci3: command 0x0c1a tx timeout [ 447.060687][ T5742] Bluetooth: hci2: command 0x0c1a tx timeout [ 447.194899][T10339] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 447.343653][T10339] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 447.374653][T13412] input: syz0 as /devices/virtual/input/input24 [ 447.447747][T10339] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 447.543236][T10339] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 447.780958][T10339] bridge_slave_1: left allmulticast mode [ 447.780976][T10339] bridge_slave_1: left promiscuous mode [ 447.781083][T10339] bridge0: port 2(bridge_slave_1) entered disabled state [ 447.786730][T10339] bridge_slave_0: left allmulticast mode [ 447.786746][T10339] bridge_slave_0: left promiscuous mode [ 447.786855][T10339] bridge0: port 1(bridge_slave_0) entered disabled state [ 447.914122][T10339] bond0 (unregistering): left promiscuous mode [ 447.914137][T10339] bond_slave_0: left promiscuous mode [ 447.914229][T10339] bond_slave_1: left promiscuous mode [ 447.915911][T10339] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 447.917933][T10339] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 447.918807][T10339] bond0 (unregistering): Released all slaves [ 447.950275][ T5813] netdevsim netdevsim3 eth5: set [0, 0] type 1 family 0 port 8472 - 0 [ 447.950302][ T5813] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 447.950319][ T5813] netdevsim netdevsim3 eth4: set [0, 0] type 1 family 0 port 8472 - 0 [ 447.950335][ T5813] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 448.129578][T10339] batadv0: left promiscuous mode [ 448.137414][T10339] hsr_slave_0: left promiscuous mode [ 448.137915][T10339] hsr_slave_1: left promiscuous mode [ 448.138384][T10339] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 448.138395][T10339] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 448.150241][T10339] veth1_macvtap: left promiscuous mode [ 448.150280][T10339] veth0_macvtap: left promiscuous mode [ 448.150379][T10339] veth1_vlan: left promiscuous mode [ 448.150455][T10339] veth0_vlan: left promiscuous mode [ 448.301050][T10339] team0 (unregistering): Port device team_slave_1 removed [ 448.308257][T10339] team0 (unregistering): Port device team_slave_0 removed [ 448.540577][ T5451] 8021q: adding VLAN 0 to HW filter on device eth2 [ 448.565388][T10339] IPVS: stop unused estimator thread 0... [ 448.677357][ T5451] 8021q: adding VLAN 0 to HW filter on device eth3 [ 448.831078][ T5451] 8021q: adding VLAN 0 to HW filter on device eth4 [ 449.345402][ T5451] 8021q: adding VLAN 0 to HW filter on device eth5 [ 453.053796][ T36] block nbd0: Possible stuck request ffff888027a17000: control (read@0,1024B). Runtime 360 seconds [ 453.053821][ T36] block nbd0: Possible stuck request ffff888027a171c0: control (read@1024,1024B). Runtime 360 seconds [ 453.053835][ T36] block nbd0: Possible stuck request ffff888027a17380: control (read@2048,1024B). Runtime 360 seconds [ 453.053848][ T36] block nbd0: Possible stuck request ffff888027a17540: control (read@3072,1024B). Runtime 360 seconds [ 459.609188][ T5097] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 459.613982][ T5097] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 459.619803][ T5097] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 459.625388][ T5097] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 459.626763][ T5097] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 459.677861][T13606] device-mapper: ioctl: Unable to change name on mapped device to one that already exists: j [ 459.860336][T10359] usb 13-1: new low-speed USB device number 3 using dummy_hcd [ 459.972502][T13613] bridge0: port 1(bridge_slave_0) entered blocking state [ 459.972545][T13613] bridge0: port 1(bridge_slave_0) entered disabled state [ 459.972603][T13613] bridge_slave_0: entered allmulticast mode [ 459.973449][T13613] bridge_slave_0: entered promiscuous mode [ 459.977789][T13613] bridge0: port 2(bridge_slave_1) entered blocking state [ 459.977913][T13613] bridge0: port 2(bridge_slave_1) entered disabled state [ 459.978010][T13613] bridge_slave_1: entered allmulticast mode [ 459.979335][T13613] bridge_slave_1: entered promiscuous mode [ 460.005230][T13613] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 460.007941][T13613] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 460.021149][T10359] usb 13-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 460.022151][T10359] usb 13-1: config 0 has an invalid interface number: 55 but max is 0 [ 460.022171][T10359] usb 13-1: config 0 has no interface number 0 [ 460.022200][T10359] usb 13-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 460.022218][T10359] usb 13-1: config 0 interface 55 altsetting 0 endpoint 0xE has invalid maxpacket 32, setting to 8 [ 460.022239][T10359] usb 13-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 460.022258][T10359] usb 13-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10 [ 460.022280][T10359] usb 13-1: config 0 interface 55 altsetting 0 endpoint 0x8B has invalid maxpacket 120, setting to 8 [ 460.022301][T10359] usb 13-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 460.022335][T10359] usb 13-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 460.024272][T10359] usb 13-1: config 0 descriptor?? [ 460.025571][T13612] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22 [ 460.025720][T13612] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22 [ 460.053500][T10359] ldusb 13-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 460.064391][T13613] team0: Port device team_slave_0 added [ 460.069127][T13613] team0: Port device team_slave_1 added [ 460.105000][T13613] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 460.105011][T13613] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 460.105024][T13613] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 460.105832][T13613] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 460.105843][T13613] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 460.105856][T13613] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 460.158319][T10339] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 460.191474][T13613] hsr_slave_0: entered promiscuous mode [ 460.191871][T13613] hsr_slave_1: entered promiscuous mode [ 460.192137][T13613] debugfs: 'hsr0' already exists in 'hsr' [ 460.192148][T13613] Cannot create hsr debugfs directory [ 460.225445][T10339] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 460.330802][T13613] netdevsim netdevsim7 eth9 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 460.384827][T10339] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 460.432957][T13613] netdevsim netdevsim7 eth8 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 460.469792][T10339] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 460.507944][T13613] netdevsim netdevsim7 eth7 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 460.581330][T13613] netdevsim netdevsim7 eth6 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 460.629854][T10339] bridge_slave_1: left allmulticast mode [ 460.629871][T10339] bridge_slave_1: left promiscuous mode [ 460.629973][T10339] bridge0: port 2(bridge_slave_1) entered disabled state [ 460.632063][T10339] bridge_slave_0: left allmulticast mode [ 460.632076][T10339] bridge_slave_0: left promiscuous mode [ 460.632165][T10339] bridge0: port 1(bridge_slave_0) entered disabled state [ 460.749332][T10339] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 460.757055][T10339] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 460.759522][T10339] bond0 (unregistering): Released all slaves [ 460.800309][ T5814] netdevsim netdevsim9 eth8: set [0, 0] type 1 family 0 port 8472 - 0 [ 460.820298][ T5814] netdevsim netdevsim9 eth9: set [0, 0] type 1 family 0 port 8472 - 0 [ 460.820378][ T5814] netdevsim netdevsim9 eth6: set [0, 0] type 1 family 0 port 8472 - 0 [ 460.820398][ T5814] netdevsim netdevsim9 eth7: set [0, 0] type 1 family 0 port 8472 - 0 [ 461.069713][T10339] hsr_slave_0: left promiscuous mode [ 461.071654][T10339] hsr_slave_1: left promiscuous mode [ 461.072231][T10339] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 461.073881][T10339] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 461.076758][T10339] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 461.076769][T10339] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 461.085762][T10339] veth1_macvtap: left promiscuous mode [ 461.085794][T10339] veth0_macvtap: left promiscuous mode [ 461.086672][T10339] veth1_vlan: left promiscuous mode [ 461.086762][T10339] veth0_vlan: left promiscuous mode [ 461.211977][T10339] team0 (unregistering): Port device team_slave_1 removed [ 461.216653][T10339] team0 (unregistering): Port device team_slave_0 removed [ 461.690327][ T5742] Bluetooth: hci0: command tx timeout [ 462.109862][T13613] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 462.113525][T13613] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 462.114337][T13613] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 462.117729][T13613] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 462.118465][T13613] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 462.121863][T13613] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 462.123775][T13613] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 462.127787][T13613] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 462.168802][T13613] 8021q: adding VLAN 0 to HW filter on device bond0 [ 462.177590][T13613] 8021q: adding VLAN 0 to HW filter on device team0 [ 462.182594][ T8475] bridge0: port 1(bridge_slave_0) entered blocking state [ 462.182637][ T8475] bridge0: port 1(bridge_slave_0) entered forwarding state [ 462.187517][ T7052] bridge0: port 2(bridge_slave_1) entered blocking state [ 462.187558][ T7052] bridge0: port 2(bridge_slave_1) entered forwarding state [ 462.429469][T13613] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 462.528827][T10359] usb 13-1: USB disconnect, device number 3 [ 462.540463][T10359] ldusb 13-1:0.55: LD USB Device #0 now disconnected [ 462.572380][ T43] kauditd_printk_skb: 205 callbacks suppressed [ 462.572393][ T43] audit: type=1326 audit(1791218761.730:6779): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13760 comm="syz.5.1114" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf707efec code=0x7ffc0000 [ 462.572416][ T43] audit: type=1326 audit(1791218761.730:6780): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13760 comm="syz.5.1114" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf707efec code=0x7ffc0000 [ 462.572437][ T43] audit: type=1326 audit(1791218761.730:6781): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13760 comm="syz.5.1114" exe="/syz-executor" sig=0 arch=40000003 syscall=386 compat=1 ip=0xf707efec code=0x7ffc0000 [ 462.572456][ T43] audit: type=1326 audit(1791218761.730:6782): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13760 comm="syz.5.1114" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf707efec code=0x7ffc0000 [ 462.572476][ T43] audit: type=1326 audit(1791218761.730:6783): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13760 comm="syz.5.1114" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf707efec code=0x7ffc0000 [ 462.572495][ T43] audit: type=1326 audit(1791218761.730:6784): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13760 comm="syz.5.1114" exe="/syz-executor" sig=0 arch=40000003 syscall=192 compat=1 ip=0xf707efec code=0x7ffc0000 [ 462.573303][ T43] audit: type=1326 audit(1791218761.730:6785): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13760 comm="syz.5.1114" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf707efec code=0x7ffc0000 [ 462.573355][ T43] audit: type=1326 audit(1791218761.730:6786): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13760 comm="syz.5.1114" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf707efec code=0x7ffc0000 [ 462.576349][ T43] audit: type=1326 audit(1791218761.730:6787): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13760 comm="syz.5.1114" exe="/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf71b75eb code=0x7ffc0000 [ 462.578766][ T43] audit: type=1326 audit(1791218761.730:6788): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13760 comm="syz.5.1114" exe="/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf707efec code=0x7ffc0000 [ 462.607424][T13613] veth0_vlan: entered promiscuous mode [ 462.617101][T13613] veth1_vlan: entered promiscuous mode [ 462.663190][T13613] veth0_macvtap: entered promiscuous mode [ 462.666725][T13613] veth1_macvtap: entered promiscuous mode [ 462.679650][T13613] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 462.687063][T13613] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 462.724796][ T5097] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 462.737450][ T5097] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 462.738114][ T5097] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 462.738814][ T5097] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 462.739123][ T5097] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 462.772954][ T8386] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 462.772966][ T8386] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 462.805886][ T8475] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 462.805900][ T8475] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 462.812802][T10339] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 462.814382][T10339] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 462.814978][T10339] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 462.815204][T10339] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 463.091205][T10863] usb 10-1: new high-speed USB device number 4 using dummy_hcd [ 463.204088][T13783] netlink: 14 bytes leftover after parsing attributes in process `syz.7.1110'. [ 463.241165][T10863] usb 10-1: New USB device found, idVendor=0711, idProduct=0550, bcdDevice= 0.00 [ 463.242735][T10863] usb 10-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 463.242760][T10863] usb 10-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 6 [ 463.249054][T10863] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 463.249068][T10863] usb 10-1: Product: syz [ 463.249076][T10863] usb 10-1: Manufacturer: syz [ 463.249084][T10863] usb 10-1: SerialNumber: syz [ 463.264516][T10863] sisusb 10-1:1.0: Invalid USB2VGA device [ 463.264531][T10863] sisusb 10-1:1.0: probe with driver sisusb failed with error -22 [ 463.412878][T13765] bridge0: port 1(bridge_slave_0) entered blocking state [ 463.413042][T13765] bridge0: port 1(bridge_slave_0) entered disabled state [ 463.413100][T13765] bridge_slave_0: entered allmulticast mode [ 463.413793][T13765] bridge_slave_0: entered promiscuous mode [ 463.418209][T13765] bridge0: port 2(bridge_slave_1) entered blocking state [ 463.418249][T13765] bridge0: port 2(bridge_slave_1) entered disabled state [ 463.418302][T13765] bridge_slave_1: entered allmulticast mode [ 463.419045][T13765] bridge_slave_1: entered promiscuous mode [ 463.433492][T13765] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 463.438421][T13765] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 463.452667][T13765] team0: Port device team_slave_0 added [ 463.454058][T13765] team0: Port device team_slave_1 added [ 463.470565][T13765] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 463.470575][T13765] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 463.470588][T13765] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 463.471593][T13765] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 463.471601][T13765] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 463.471613][T13765] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 463.479051][T13761] netlink: 'syz.5.1114': attribute type 30 has an invalid length. [ 463.523817][T13765] hsr_slave_0: entered promiscuous mode [ 463.524245][T13765] hsr_slave_1: entered promiscuous mode [ 463.524902][T13765] debugfs: 'hsr0' already exists in 'hsr' [ 463.524915][T13765] Cannot create hsr debugfs directory [ 463.570622][T10358] usb 10-1: USB disconnect, device number 4 [ 463.647957][T13765] netdevsim netdevsim9 eth9 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 463.726422][T13765] netdevsim netdevsim9 eth8 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 463.770594][ T5097] Bluetooth: hci0: command tx timeout [ 463.772185][T13765] netdevsim netdevsim9 eth6 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 463.872060][T13765] netdevsim netdevsim9 eth7 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 464.081578][T13765] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 464.083886][T13765] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 464.084304][T13765] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 464.088143][T13765] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 464.088519][T13765] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 464.092339][T13765] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 464.094117][T13765] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 464.102919][T13765] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 464.203411][T13765] 8021q: adding VLAN 0 to HW filter on device bond0 [ 464.208575][T13765] 8021q: adding VLAN 0 to HW filter on device team0 [ 464.224792][T13765] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 464.224805][T13765] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 464.232997][ T7052] bridge0: port 1(bridge_slave_0) entered blocking state [ 464.233044][ T7052] bridge0: port 1(bridge_slave_0) entered forwarding state [ 464.233791][ T7052] bridge0: port 2(bridge_slave_1) entered blocking state [ 464.233829][ T7052] bridge0: port 2(bridge_slave_1) entered forwarding state [ 464.651305][T13765] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 464.790880][T13765] veth0_vlan: entered promiscuous mode [ 464.794097][T13765] veth1_vlan: entered promiscuous mode [ 464.805560][T13765] veth0_macvtap: entered promiscuous mode [ 464.809975][T13765] veth1_macvtap: entered promiscuous mode [ 464.818356][T13765] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 464.821763][T13765] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 464.842672][T10339] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 464.842889][T10339] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 464.843094][T10339] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 464.843113][T10339] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 464.891277][ T5097] Bluetooth: hci1: command tx timeout [ 464.922281][ T7052] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 464.922296][ T7052] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 464.948213][ T8475] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 464.948227][ T8475] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 465.231255][T13899] device-mapper: ioctl: Invalid target message parameters. [ 465.231653][T13899] device-mapper: ioctl: Unable to change name on mapped device t to one that already exists: j [ 465.337990][T13905] device-mapper: ioctl: Invalid target message parameters. [ 465.338322][T13905] device-mapper: ioctl: Unable to change name on mapped device t to one that already exists: j [ 465.824063][ T5813] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 465.824087][ T5813] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 44497 - 0 [ 465.852561][ T5097] Bluetooth: hci0: command tx timeout [ 465.951238][ T5742] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 465.957666][ T5742] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 465.959004][ T5742] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 465.959445][ T5742] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 465.959750][ T5742] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 466.021106][ T854] usb 13-1: new high-speed USB device number 4 using dummy_hcd [ 466.095070][ T5813] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 466.095154][ T5813] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 44497 - 0 [ 466.172768][ T854] usb 13-1: New USB device found, idVendor=0711, idProduct=0550, bcdDevice= 0.00 [ 466.173890][ T854] usb 13-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 466.189666][ T854] usb 13-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 6 [ 466.197248][ T854] usb 13-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 466.197263][ T854] usb 13-1: Product: syz [ 466.197270][ T854] usb 13-1: Manufacturer: syz [ 466.197278][ T854] usb 13-1: SerialNumber: syz [ 466.224530][ T854] sisusb 13-1:1.0: Invalid USB2VGA device [ 466.224544][ T854] sisusb 13-1:1.0: probe with driver sisusb failed with error -22 [ 466.306476][ T5813] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 466.306509][ T5813] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 44497 - 0 [ 466.380025][ T5813] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 466.380047][ T5813] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 44497 - 0 [ 466.481903][T13918] netlink: 'syz.8.1125': attribute type 30 has an invalid length. [ 466.556406][ T61] usb 13-1: USB disconnect, device number 4 [ 466.582357][ T5813] dummy0: left allmulticast mode [ 466.584526][ T5813] bridge0: port 3(dummy0) entered disabled state [ 466.585776][ T5813] bridge_slave_1: left allmulticast mode [ 466.585789][ T5813] bridge_slave_1: left promiscuous mode [ 466.585885][ T5813] bridge0: port 2(bridge_slave_1) entered disabled state [ 466.587392][ T5813] bridge_slave_0: left allmulticast mode [ 466.587404][ T5813] bridge_slave_0: left promiscuous mode [ 466.587559][ T5813] bridge0: port 1(bridge_slave_0) entered disabled state [ 466.698519][ T5813] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 466.699927][ T5813] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 466.706236][ T5813] bond0 (unregistering): Released all slaves [ 466.709104][ T5813] bond1 (unregistering): Released all slaves [ 466.718382][ T5813] bond2 (unregistering): Released all slaves [ 466.801266][ T12] netdevsim netdevsim5 eth9: set [0, 0] type 1 family 0 port 8472 - 0 [ 466.801304][ T12] netdevsim netdevsim5 eth7: set [0, 0] type 1 family 0 port 8472 - 0 [ 466.801329][ T12] netdevsim netdevsim5 eth6: set [0, 0] type 1 family 0 port 8472 - 0 [ 466.801355][ T12] netdevsim netdevsim5 eth8: set [0, 0] type 1 family 0 port 8472 - 0 [ 467.001764][T13923] bridge0: port 1(bridge_slave_0) entered blocking state [ 467.001842][T13923] bridge0: port 1(bridge_slave_0) entered disabled state [ 467.001901][T13923] bridge_slave_0: entered allmulticast mode [ 467.002603][T13923] bridge_slave_0: entered promiscuous mode [ 467.014999][ T5451] 8021q: adding VLAN 0 to HW filter on device eth6 [ 467.015310][T13923] bridge0: port 2(bridge_slave_1) entered blocking state [ 467.015396][T13923] bridge0: port 2(bridge_slave_1) entered disabled state [ 467.015494][T13923] bridge_slave_1: entered allmulticast mode [ 467.016249][T13923] bridge_slave_1: entered promiscuous mode [ 467.035034][T13923] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 467.038351][T13923] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 467.082762][T13923] team0: Port device team_slave_0 added [ 467.112640][ T5813] hsr_slave_0: left promiscuous mode [ 467.142844][ T5813] hsr_slave_1: left promiscuous mode [ 467.144014][ T5813] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 467.144034][ T5813] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 467.144722][ T5813] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 467.144735][ T5813] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 467.164751][ T5813] veth1_macvtap: left promiscuous mode [ 467.164783][ T5813] veth0_macvtap: left promiscuous mode [ 467.166494][ T5813] veth1_vlan: left promiscuous mode [ 467.166552][ T5813] veth0_vlan: left promiscuous mode [ 467.445909][ T5742] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 467.449703][ T5742] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 467.462457][ T5742] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 467.467927][ T5742] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 467.468465][ T5742] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 467.900289][ T5813] team0 (unregistering): Port device team_slave_1 removed [ 467.912591][ T5813] team0 (unregistering): Port device team_slave_0 removed [ 467.930501][ T5742] Bluetooth: hci0: command tx timeout [ 468.033670][ T5742] Bluetooth: hci1: command tx timeout [ 468.413577][T13923] team0: Port device team_slave_1 added [ 468.442826][T13923] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 468.442837][T13923] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 468.442851][T13923] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 468.447956][T13923] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 468.447965][T13923] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 468.447979][T13923] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 468.513632][T13923] hsr_slave_0: entered promiscuous mode [ 468.528325][T13923] hsr_slave_1: entered promiscuous mode [ 468.528605][T13923] debugfs: 'hsr0' already exists in 'hsr' [ 468.528618][T13923] Cannot create hsr debugfs directory [ 468.664268][T13988] device-mapper: ioctl: Invalid target message parameters. [ 468.664636][T13988] device-mapper: ioctl: Unable to change name on mapped device t to one that already exists: j [ 468.696652][T13923] netdevsim netdevsim5 eth9 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 468.823013][ T5451] 8021q: adding VLAN 0 to HW filter on device eth7 [ 468.837530][T13923] netdevsim netdevsim5 eth8 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 468.889586][ T5813] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 468.957177][T13923] netdevsim netdevsim5 eth7 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 469.017973][ T5813] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 469.065686][T13923] netdevsim netdevsim5 eth6 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 469.133510][ T5813] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 469.272611][ T5813] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 469.281151][ T5097] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 469.291690][ T5097] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 469.293186][ T5097] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 469.295007][ T5097] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 469.295368][ T5097] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 469.531270][ T5742] Bluetooth: hci3: command tx timeout [ 469.556094][T13923] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 469.569219][T13923] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 469.571530][T13966] bridge0: port 1(bridge_slave_0) entered blocking state [ 469.571571][T13966] bridge0: port 1(bridge_slave_0) entered disabled state [ 469.571632][T13966] bridge_slave_0: entered allmulticast mode [ 469.572389][T13966] bridge_slave_0: entered promiscuous mode [ 469.573369][T13923] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 469.578960][T13923] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 469.579360][T13923] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 469.582468][T13923] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 469.582654][T13966] bridge0: port 2(bridge_slave_1) entered blocking state [ 469.582727][T13966] bridge0: port 2(bridge_slave_1) entered disabled state [ 469.582786][T13966] bridge_slave_1: entered allmulticast mode [ 469.583610][T13966] bridge_slave_1: entered promiscuous mode [ 469.640634][T13923] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 469.645406][T13923] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 469.666850][T13966] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 469.676518][T13966] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 469.737121][T13966] team0: Port device team_slave_0 added [ 469.738492][T13966] team0: Port device team_slave_1 added [ 469.782938][ T5814] netdevsim netdevsim9 eth8: set [0, 0] type 1 family 0 port 8472 - 0 [ 469.783976][ T12] netdevsim netdevsim9 eth6: set [0, 0] type 1 family 0 port 8472 - 0 [ 469.803577][T13966] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 469.803587][T13966] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 469.803601][T13966] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 469.804568][T13966] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 469.804577][T13966] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 469.804589][T13966] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 469.840877][ T5813] bridge_slave_1: left allmulticast mode [ 469.840899][ T5813] bridge_slave_1: left promiscuous mode [ 469.841084][ T5813] bridge0: port 2(bridge_slave_1) entered disabled state [ 469.847042][ T5813] bridge_slave_0: left allmulticast mode [ 469.847061][ T5813] bridge_slave_0: left promiscuous mode [ 469.847256][ T5813] bridge0: port 1(bridge_slave_0) entered disabled state [ 469.946312][ T5813] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 469.947877][ T5813] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 469.948654][ T5813] bond0 (unregistering): Released all slaves [ 470.005114][T13966] hsr_slave_0: entered promiscuous mode [ 470.007860][T13966] hsr_slave_1: entered promiscuous mode [ 470.008167][T13966] debugfs: 'hsr0' already exists in 'hsr' [ 470.008179][T13966] Cannot create hsr debugfs directory [ 470.014081][ T12] netdevsim netdevsim9 eth9: set [0, 0] type 1 family 0 port 8472 - 0 [ 470.104508][ T5742] Bluetooth: hci1: command tx timeout [ 470.157836][T13923] 8021q: adding VLAN 0 to HW filter on device bond0 [ 470.217105][ T5451] 8021q: adding VLAN 0 to HW filter on device eth6 [ 470.225960][T13923] 8021q: adding VLAN 0 to HW filter on device team0 [ 470.245291][ T1167] bridge0: port 1(bridge_slave_0) entered blocking state [ 470.245369][ T1167] bridge0: port 1(bridge_slave_0) entered forwarding state [ 470.250356][ T12] netdevsim netdevsim9 eth7: set [0, 0] type 1 family 0 port 8472 - 0 [ 470.265118][ T5813] hsr_slave_0: left promiscuous mode [ 470.265469][ T5813] hsr_slave_1: left promiscuous mode [ 470.265841][ T5813] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 470.265853][ T5813] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 470.266317][ T5813] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 470.266327][ T5813] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 470.269601][ T5813] veth1_macvtap: left promiscuous mode [ 470.269638][ T5813] veth0_macvtap: left promiscuous mode [ 470.269713][ T5813] veth1_vlan: left promiscuous mode [ 470.269762][ T5813] veth0_vlan: left promiscuous mode [ 470.407700][ T5813] team0 (unregistering): Port device team_slave_1 removed [ 470.415268][ T5813] team0 (unregistering): Port device team_slave_0 removed [ 470.505731][ T1167] bridge0: port 2(bridge_slave_1) entered blocking state [ 470.505814][ T1167] bridge0: port 2(bridge_slave_1) entered forwarding state [ 470.565485][T13966] netdevsim netdevsim0 eth17 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 470.599416][T14005] bridge0: port 1(bridge_slave_0) entered blocking state [ 470.599543][T14005] bridge0: port 1(bridge_slave_0) entered disabled state [ 470.599632][T14005] bridge_slave_0: entered allmulticast mode [ 470.611473][T14005] bridge_slave_0: entered promiscuous mode [ 470.616213][T14005] bridge0: port 2(bridge_slave_1) entered blocking state [ 470.616262][T14005] bridge0: port 2(bridge_slave_1) entered disabled state [ 470.616322][T14005] bridge_slave_1: entered allmulticast mode [ 470.629798][T14005] bridge_slave_1: entered promiscuous mode [ 470.659497][ T5451] 8021q: adding VLAN 0 to HW filter on device eth7 [ 470.663868][T14005] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 470.666838][T14005] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 470.713018][T14005] team0: Port device team_slave_0 added [ 470.715758][T14005] team0: Port device team_slave_1 added [ 470.766410][T14005] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 470.766427][T14005] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 470.766447][T14005] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 470.781455][T14005] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 470.781471][T14005] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 470.781491][T14005] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 470.850763][T14005] hsr_slave_0: entered promiscuous mode [ 470.851352][T14005] hsr_slave_1: entered promiscuous mode [ 470.851698][T14005] debugfs: 'hsr0' already exists in 'hsr' [ 470.851716][T14005] Cannot create hsr debugfs directory [ 471.045671][ T5813] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 471.067606][ T5451] 8021q: adding VLAN 0 to HW filter on device eth8 [ 471.117066][T13923] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 471.173479][ T5813] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 471.239380][ T5451] 8021q: adding VLAN 0 to HW filter on device eth9 [ 471.257965][ T5813] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 471.287707][T13923] veth0_vlan: entered promiscuous mode [ 471.291034][T13923] veth1_vlan: entered promiscuous mode [ 471.311351][T13923] veth0_macvtap: entered promiscuous mode [ 471.313395][T13923] veth1_macvtap: entered promiscuous mode [ 471.331623][ T5813] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 471.344804][T13923] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 471.347983][T13923] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 471.372605][T10339] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 471.372821][T10339] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 471.373094][T10339] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 471.373232][T10339] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 471.379069][ T5742] Bluetooth: hci0: command tx timeout [ 471.419514][ T7062] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 471.419526][ T7062] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 471.473622][T13966] netdevsim netdevsim0 eth16 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 471.506540][ T7062] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 471.506555][ T7062] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 471.610346][ T5742] Bluetooth: hci3: command tx timeout [ 471.627434][T14103] device-mapper: ioctl: Invalid target message parameters. [ 471.629672][T14103] device-mapper: ioctl: Unable to change name on mapped device t to one that already exists: j [ 471.643929][T13966] netdevsim netdevsim0 eth15 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 471.671671][ T5814] netdevsim netdevsim7 eth16: set [0, 0] type 1 family 0 port 8472 - 0 [ 471.671698][ T5814] netdevsim netdevsim7 eth17: set [0, 0] type 1 family 0 port 8472 - 0 [ 471.690710][T10339] netdevsim netdevsim7 eth30: set [0, 0] type 1 family 0 port 8472 - 0 [ 471.693403][ T5813] bridge_slave_1: left allmulticast mode [ 471.693417][ T5813] bridge_slave_1: left promiscuous mode [ 471.693515][ T5813] bridge0: port 2(bridge_slave_1) entered disabled state [ 471.695318][ T5813] bridge_slave_0: left allmulticast mode [ 471.695338][ T5813] bridge_slave_0: left promiscuous mode [ 471.695494][ T5813] bridge0: port 1(bridge_slave_0) entered disabled state [ 471.865624][ T5813] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 471.867162][ T5813] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 471.867961][ T5813] bond0 (unregistering): Released all slaves [ 471.910641][ T5814] netdevsim netdevsim7 eth15: set [0, 0] type 1 family 0 port 8472 - 0 [ 472.172862][ T5813] hsr_slave_0: left promiscuous mode [ 472.175394][ T5813] hsr_slave_1: left promiscuous mode [ 472.175853][ T5813] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 472.175865][ T5813] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 472.176358][ T5813] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 472.176368][ T5813] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 472.178232][ T5813] veth1_macvtap: left promiscuous mode [ 472.178272][ T5813] veth0_macvtap: left promiscuous mode [ 472.178345][ T5813] veth1_vlan: left promiscuous mode [ 472.178394][ T5813] veth0_vlan: left promiscuous mode [ 472.344128][ T5813] team0 (unregistering): Port device team_slave_1 removed [ 472.348771][ T5813] team0 (unregistering): Port device team_slave_0 removed [ 472.618916][ T5451] 8021q: adding VLAN 0 to HW filter on device eth16 [ 472.733755][ T5813] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 472.768771][ T5451] 8021q: adding VLAN 0 to HW filter on device eth17 [ 472.976759][ T5813] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 473.171593][T13966] netdevsim netdevsim0 eth14 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 473.199694][ T5813] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 473.297219][T14005] netdevsim netdevsim2 eth13 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 473.313937][ T5451] 8021q: adding VLAN 0 to HW filter on device eth15 [ 473.386429][T14005] netdevsim netdevsim2 eth12 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 473.450392][ T5742] Bluetooth: hci0: command tx timeout [ 473.464489][T14005] netdevsim netdevsim2 eth11 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 473.477632][ T5451] 8021q: adding VLAN 0 to HW filter on device eth30 [ 473.524650][ T5813] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 473.547202][T14005] netdevsim netdevsim2 eth10 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 473.691430][ T5742] Bluetooth: hci3: command tx timeout [ 473.725421][T13966] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 473.731932][T13966] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 473.732342][T13966] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 473.741821][T13966] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 473.746492][T13966] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 473.757619][T13966] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 473.772258][T13966] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 473.779256][T13966] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 473.780510][ T5814] netdevsim netdevsim5 eth10: set [0, 0] type 1 family 0 port 8472 - 0 [ 473.795311][ T12] netdevsim netdevsim5 eth11: set [0, 0] type 1 family 0 port 8472 - 0 [ 473.833344][ T5813] bridge_slave_1: left allmulticast mode [ 473.833369][ T5813] bridge_slave_1: left promiscuous mode [ 473.833534][ T5813] bridge0: port 2(bridge_slave_1) entered disabled state [ 473.835735][ T5813] bridge_slave_0: left allmulticast mode [ 473.835753][ T5813] bridge_slave_0: left promiscuous mode [ 473.835916][ T5813] bridge0: port 1(bridge_slave_0) entered disabled state [ 473.973749][ T5813] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 473.975981][ T5813] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 473.977024][ T5813] bond0 (unregistering): Released all slaves [ 474.108373][T14005] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 474.112630][T14005] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 474.113225][T14005] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 474.121021][T14005] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 474.122504][T14005] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 474.124519][T14005] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 474.125761][T14005] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 474.129878][T14005] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 474.171783][ T5814] netdevsim netdevsim5 eth13: set [0, 0] type 1 family 0 port 8472 - 0 [ 474.172472][ T5814] netdevsim netdevsim5 eth12: set [0, 0] type 1 family 0 port 8472 - 0 [ 474.239564][ T5813] hsr_slave_0: left promiscuous mode [ 474.240008][ T5813] hsr_slave_1: left promiscuous mode [ 474.247546][ T5813] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 474.247559][ T5813] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 474.248032][ T5813] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 474.248042][ T5813] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 474.262158][ T5813] veth1_macvtap: left promiscuous mode [ 474.262188][ T5813] veth0_macvtap: left promiscuous mode [ 474.262236][ T5813] veth1_vlan: left promiscuous mode [ 474.262276][ T5813] veth0_vlan: left promiscuous mode [ 474.424682][ T5813] team0 (unregistering): Port device team_slave_1 removed [ 474.429432][ T5813] team0 (unregistering): Port device team_slave_0 removed [ 474.513938][T13966] 8021q: adding VLAN 0 to HW filter on device bond0 [ 474.527226][T13966] 8021q: adding VLAN 0 to HW filter on device team0 [ 474.531271][ T1167] bridge0: port 1(bridge_slave_0) entered blocking state [ 474.531314][ T1167] bridge0: port 1(bridge_slave_0) entered forwarding state [ 474.536298][ T1167] bridge0: port 2(bridge_slave_1) entered blocking state [ 474.536346][ T1167] bridge0: port 2(bridge_slave_1) entered forwarding state [ 474.573884][T14005] 8021q: adding VLAN 0 to HW filter on device bond0 [ 474.623634][T14005] 8021q: adding VLAN 0 to HW filter on device team0 [ 474.626222][ T7062] bridge0: port 1(bridge_slave_0) entered blocking state [ 474.626267][ T7062] bridge0: port 1(bridge_slave_0) entered forwarding state [ 474.628944][ T7053] bridge0: port 2(bridge_slave_1) entered blocking state [ 474.628985][ T7053] bridge0: port 2(bridge_slave_1) entered forwarding state [ 474.668720][T14005] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 474.859952][T13966] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 474.885850][T13966] veth0_vlan: entered promiscuous mode [ 474.898476][T13966] veth1_vlan: entered promiscuous mode [ 474.917785][T13966] veth0_macvtap: entered promiscuous mode [ 474.919938][T13966] veth1_macvtap: entered promiscuous mode [ 474.933851][T13966] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 474.938124][T13966] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 474.942042][ T12] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 474.976312][ T5813] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 474.976521][ T5813] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 474.976717][ T5813] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 475.000066][ T46] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 475.000079][ T46] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 475.024301][ T7053] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 475.024329][ T7053] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 475.056893][T14005] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 475.084927][T14005] veth0_vlan: entered promiscuous mode [ 475.093867][T14005] veth1_vlan: entered promiscuous mode [ 475.113789][T14005] veth0_macvtap: entered promiscuous mode [ 475.116470][T14005] veth1_macvtap: entered promiscuous mode [ 475.129322][T14005] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 475.135635][T14005] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 475.142131][T14249] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 475.142323][T14249] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 475.150577][ T12] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 475.150602][ T12] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 475.150619][ T12] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 475.150637][ T12] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 475.226056][ T7062] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 475.226066][ T7062] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 475.237452][ T7062] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 475.237465][ T7062] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 475.263926][ T5097] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 475.271750][ T5097] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 475.283545][ T5097] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 475.284218][ T5097] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 475.284698][ T5097] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 475.530434][ T5742] Bluetooth: hci0: command tx timeout [ 475.780225][ T5742] Bluetooth: hci3: command tx timeout [ 475.808049][T14253] bridge0: port 1(bridge_slave_0) entered blocking state [ 475.809915][T14253] bridge0: port 1(bridge_slave_0) entered disabled state [ 475.809975][T14253] bridge_slave_0: entered allmulticast mode [ 475.820902][T14253] bridge_slave_0: entered promiscuous mode [ 475.824258][T14253] bridge0: port 2(bridge_slave_1) entered blocking state [ 475.824335][T14253] bridge0: port 2(bridge_slave_1) entered disabled state [ 475.824393][T14253] bridge_slave_1: entered allmulticast mode [ 475.825122][T14253] bridge_slave_1: entered promiscuous mode [ 475.855584][T14253] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 475.857157][T14253] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 475.886134][T14253] team0: Port device team_slave_0 added [ 475.887372][T14253] team0: Port device team_slave_1 added [ 475.899051][T14253] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 475.899061][T14253] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 475.899075][T14253] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 475.899917][T14253] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 475.899925][T14253] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 475.899938][T14253] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 475.900267][T10359] usb 7-1: new high-speed USB device number 16 using dummy_hcd [ 475.918489][T14253] hsr_slave_0: entered promiscuous mode [ 475.918903][T14253] hsr_slave_1: entered promiscuous mode [ 475.919220][T14253] debugfs: 'hsr0' already exists in 'hsr' [ 475.919233][T14253] Cannot create hsr debugfs directory [ 476.103708][T14253] netdevsim netdevsim5 eth13 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 476.200048][T14253] netdevsim netdevsim5 eth12 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 476.268007][T14253] netdevsim netdevsim5 eth11 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 476.342205][T14253] netdevsim netdevsim5 eth10 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 476.512358][T14253] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 476.514604][T14253] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 476.515176][T14253] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 476.518454][T14253] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 476.519039][T14253] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 476.532462][T14253] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 476.533055][T14253] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 476.534966][T14253] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 476.561949][T14253] bridge0: port 2(bridge_slave_1) entered blocking state [ 476.561996][T14253] bridge0: port 2(bridge_slave_1) entered forwarding state [ 476.562104][T14253] bridge0: port 1(bridge_slave_0) entered blocking state [ 476.562146][T14253] bridge0: port 1(bridge_slave_0) entered forwarding state [ 476.625594][T14253] 8021q: adding VLAN 0 to HW filter on device bond0 [ 476.642872][ T7053] bridge0: port 1(bridge_slave_0) entered disabled state [ 476.643826][ T7053] bridge0: port 2(bridge_slave_1) entered disabled state [ 476.657895][T14253] 8021q: adding VLAN 0 to HW filter on device team0 [ 476.664654][ T7053] bridge0: port 1(bridge_slave_0) entered blocking state [ 476.664703][ T7053] bridge0: port 1(bridge_slave_0) entered forwarding state [ 476.673825][ T7053] bridge0: port 2(bridge_slave_1) entered blocking state [ 476.673869][ T7053] bridge0: port 2(bridge_slave_1) entered forwarding state [ 477.172354][T14253] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 477.315312][T14253] veth0_vlan: entered promiscuous mode [ 477.324562][T14253] veth1_vlan: entered promiscuous mode [ 477.344579][T14253] veth0_macvtap: entered promiscuous mode [ 477.347481][T14253] veth1_macvtap: entered promiscuous mode [ 477.361853][T14253] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 477.367015][T14253] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 477.370320][ T5742] Bluetooth: hci1: command tx timeout [ 477.440997][ T5813] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 477.441024][ T5813] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 477.441041][ T5813] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 477.441059][ T5813] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 477.462229][ T7062] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 477.462241][ T7062] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 477.484776][ T8462] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 477.484789][ T8462] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 477.551809][T14352] device-mapper: ioctl: Invalid target message parameters. [ 477.552158][T14352] device-mapper: ioctl: Unable to change name on mapped device t to one that already exists: j [ 477.610321][ T5742] Bluetooth: hci0: command tx timeout [ 478.334673][ T12] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 478.396033][ T43] kauditd_printk_skb: 176 callbacks suppressed [ 478.396045][ T43] audit: type=1326 audit(1791218776.555:6965): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14370 comm="syz.2.1139" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf706efec code=0x7ffc0000 [ 478.396148][ T43] audit: type=1326 audit(1791218776.555:6966): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14370 comm="syz.2.1139" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf706efec code=0x7ffc0000 [ 478.397331][ T43] audit: type=1326 audit(1791218776.555:6967): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14370 comm="syz.2.1139" exe="/syz-executor" sig=0 arch=40000003 syscall=386 compat=1 ip=0xf706efec code=0x7ffc0000 [ 478.397357][ T43] audit: type=1326 audit(1791218776.555:6968): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14370 comm="syz.2.1139" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf706efec code=0x7ffc0000 [ 478.397377][ T43] audit: type=1326 audit(1791218776.555:6969): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14370 comm="syz.2.1139" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf706efec code=0x7ffc0000 [ 478.397661][ T43] audit: type=1326 audit(1791218776.555:6970): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14370 comm="syz.2.1139" exe="/syz-executor" sig=0 arch=40000003 syscall=192 compat=1 ip=0xf706efec code=0x7ffc0000 [ 478.398404][ T43] audit: type=1326 audit(1791218776.555:6971): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14370 comm="syz.2.1139" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf706efec code=0x7ffc0000 [ 478.398534][ T43] audit: type=1326 audit(1791218776.555:6972): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14370 comm="syz.2.1139" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf706efec code=0x7ffc0000 [ 478.458917][ T43] audit: type=1326 audit(1791218776.615:6973): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14370 comm="syz.2.1139" exe="/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf71a75eb code=0x7ffc0000 [ 478.458946][ T43] audit: type=1326 audit(1791218776.615:6974): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14370 comm="syz.2.1139" exe="/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf706efec code=0x7ffc0000 [ 478.484074][ T12] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 478.510891][ T5097] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 478.519099][ T5097] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 478.521185][ T5097] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 478.523226][ T5097] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 478.523625][ T5097] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 478.533094][T14374] device-mapper: ioctl: Invalid target message parameters. [ 478.533823][T14374] device-mapper: ioctl: Unable to change name on mapped device t to one that already exists: j [ 478.640736][ T12] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 478.737139][ T12] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 478.791377][ T5742] Bluetooth: hci2: unexpected event for opcode 0x201c [ 478.803929][T10359] usb 7-1: device descriptor read/64, error -71 [ 478.910578][ T5813] netdevsim netdevsim0 eth10: set [0, 0] type 1 family 0 port 8472 - 0 [ 478.923385][ T5814] netdevsim netdevsim0 eth11: set [0, 0] type 1 family 0 port 8472 - 0 [ 478.975276][ T12] bridge_slave_1: left allmulticast mode [ 478.975300][ T12] bridge_slave_1: left promiscuous mode [ 478.975469][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 478.978188][ T12] bridge_slave_0: left allmulticast mode [ 478.978211][ T12] bridge_slave_0: left promiscuous mode [ 478.978385][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 479.052577][T10359] usb 7-1: new high-speed USB device number 17 using dummy_hcd [ 479.098178][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 479.099617][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 479.101737][ T12] bond0 (unregistering): Released all slaves [ 479.115055][ T5451] 8021q: adding VLAN 0 to HW filter on device eth10 [ 479.187130][T14377] bridge0: port 1(bridge_slave_0) entered blocking state [ 479.187259][T14377] bridge0: port 1(bridge_slave_0) entered disabled state [ 479.187354][T14377] bridge_slave_0: entered allmulticast mode [ 479.188645][T14377] bridge_slave_0: entered promiscuous mode [ 479.191084][T14377] bridge0: port 2(bridge_slave_1) entered blocking state [ 479.191202][T14377] bridge0: port 2(bridge_slave_1) entered disabled state [ 479.191294][T14377] bridge_slave_1: entered allmulticast mode [ 479.192569][T14377] bridge_slave_1: entered promiscuous mode [ 479.202828][T10359] usb 7-1: New USB device found, idVendor=0711, idProduct=0550, bcdDevice= 0.00 [ 479.207345][T10359] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 479.207382][T10359] usb 7-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 6 [ 479.217149][T10359] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 479.217170][T10359] usb 7-1: Product: syz [ 479.217182][T10359] usb 7-1: Manufacturer: syz [ 479.217194][T10359] usb 7-1: SerialNumber: syz [ 479.228614][T10359] sisusb 7-1:1.0: Invalid USB2VGA device [ 479.228633][T10359] sisusb 7-1:1.0: probe with driver sisusb failed with error -22 [ 479.242452][ T5813] netdevsim netdevsim0 eth13: set [0, 0] type 1 family 0 port 8472 - 0 [ 479.242491][ T5813] netdevsim netdevsim0 eth12: set [0, 0] type 1 family 0 port 8472 - 0 [ 479.274855][T14377] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 479.276755][T14377] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 479.303891][T14377] team0: Port device team_slave_0 added [ 479.305793][T14377] team0: Port device team_slave_1 added [ 479.317047][T14377] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 479.317057][T14377] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 479.317070][T14377] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 479.317869][T14377] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 479.317877][T14377] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 479.317890][T14377] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 479.382694][T14377] hsr_slave_0: entered promiscuous mode [ 479.383509][T14377] hsr_slave_1: entered promiscuous mode [ 479.384084][T14377] debugfs: 'hsr0' already exists in 'hsr' [ 479.384102][T14377] Cannot create hsr debugfs directory [ 479.426591][ T12] hsr_slave_0: left promiscuous mode [ 479.427018][ T12] hsr_slave_1: left promiscuous mode [ 479.427436][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 479.427448][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 479.427843][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 479.427853][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 479.435462][ T12] veth1_macvtap: left promiscuous mode [ 479.435488][ T12] veth0_macvtap: left promiscuous mode [ 479.435540][ T12] veth1_vlan: left promiscuous mode [ 479.435571][ T12] veth0_vlan: left promiscuous mode [ 479.461555][T14371] netlink: 'syz.2.1139': attribute type 30 has an invalid length. [ 479.663760][ T12] team0 (unregistering): Port device team_slave_1 removed [ 479.669555][ T12] team0 (unregistering): Port device team_slave_0 removed [ 479.752672][ T5451] 8021q: adding VLAN 0 to HW filter on device eth11 [ 479.802294][T10430] usb 7-1: USB disconnect, device number 17 [ 479.846061][T14421] netlink: 64 bytes leftover after parsing attributes in process `syz.8.1146'. [ 479.846075][T14421] netlink: 64 bytes leftover after parsing attributes in process `syz.8.1146'. [ 479.846082][T14421] iwpm_parse_nlmsg: Invalid NULL attribute (msg type Mapping Error Msg ret = -22) [ 479.870752][T14419] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 480.068420][T14377] netdevsim netdevsim0 eth13 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 480.164144][T14377] netdevsim netdevsim0 eth12 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 480.303679][T14377] netdevsim netdevsim0 eth11 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 480.416241][T14377] netdevsim netdevsim0 eth10 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 480.571016][ T5742] Bluetooth: hci3: command tx timeout [ 480.628735][T14445] device-mapper: ioctl: Invalid target message parameters. [ 480.629303][T14445] device-mapper: ioctl: Unable to change name on mapped device t to one that already exists: j [ 480.754810][ T5786] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 480.838059][T14447] binfmt_misc: register: failed to install interpreter ./file0 [ 480.997297][ T5097] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 481.011991][ T5097] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 481.013788][ T5097] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 481.014572][ T5097] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 481.014980][ T5097] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 481.125321][T14377] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 481.137376][T14377] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 481.138007][T14377] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 481.151423][T14377] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 481.151842][T14377] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 481.156394][T14377] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 481.157066][T14377] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 481.179360][T14377] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 481.250822][ T5786] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 481.369579][ T5786] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 481.409244][T14377] 8021q: adding VLAN 0 to HW filter on device bond0 [ 481.432908][T14377] 8021q: adding VLAN 0 to HW filter on device team0 [ 481.448575][ T8462] bridge0: port 1(bridge_slave_0) entered blocking state [ 481.448621][ T8462] bridge0: port 1(bridge_slave_0) entered forwarding state [ 481.449394][ T8462] bridge0: port 2(bridge_slave_1) entered blocking state [ 481.449435][ T8462] bridge0: port 2(bridge_slave_1) entered forwarding state [ 481.458403][T14478] dlm: non-version read from control device 0 [ 481.462803][T14377] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 481.462816][T14377] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 481.478354][ T5097] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 481.488052][ T5097] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 481.489933][ T5097] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 481.499622][ T5097] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 481.500096][ T5097] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 481.545415][ T5786] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 481.863510][ T5786] bridge_slave_1: left allmulticast mode [ 481.863527][ T5786] bridge_slave_1: left promiscuous mode [ 481.863625][ T5786] bridge0: port 2(bridge_slave_1) entered disabled state [ 481.865267][ T5786] bridge_slave_0: left allmulticast mode [ 481.865279][ T5786] bridge_slave_0: left promiscuous mode [ 481.865381][ T5786] bridge0: port 1(bridge_slave_0) entered disabled state [ 481.995263][ T5786] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 482.003988][ T5786] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 482.004779][ T5786] bond0 (unregistering): Released all slaves [ 482.014809][ T5451] 8021q: adding VLAN 0 to HW filter on device eth10 [ 482.032443][ T5813] netdevsim netdevsim5 eth13: set [0, 0] type 1 family 0 port 8472 - 0 [ 482.032471][ T5813] netdevsim netdevsim5 eth11: set [0, 0] type 1 family 0 port 8472 - 0 [ 482.032488][ T5813] netdevsim netdevsim5 eth10: set [0, 0] type 1 family 0 port 8472 - 0 [ 482.032505][ T5813] netdevsim netdevsim5 eth12: set [0, 0] type 1 family 0 port 8472 - 0 [ 482.152476][T14377] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 482.171325][T14452] bridge0: port 1(bridge_slave_0) entered blocking state [ 482.171406][T14452] bridge0: port 1(bridge_slave_0) entered disabled state [ 482.171462][T14452] bridge_slave_0: entered allmulticast mode [ 482.172290][T14452] bridge_slave_0: entered promiscuous mode [ 482.176239][T14452] bridge0: port 2(bridge_slave_1) entered blocking state [ 482.176279][T14452] bridge0: port 2(bridge_slave_1) entered disabled state [ 482.176337][T14452] bridge_slave_1: entered allmulticast mode [ 482.190471][T14452] bridge_slave_1: entered promiscuous mode [ 482.232394][T14452] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 482.233682][T14452] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 482.253248][T14452] team0: Port device team_slave_0 added [ 482.254515][T14452] team0: Port device team_slave_1 added [ 482.276886][T14452] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 482.276897][T14452] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 482.276910][T14452] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 482.277731][T14452] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 482.277738][T14452] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 482.277751][T14452] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 482.279094][T14377] veth0_vlan: entered promiscuous mode [ 482.323391][ T5786] hsr_slave_0: left promiscuous mode [ 482.323819][ T5786] hsr_slave_1: left promiscuous mode [ 482.324197][ T5786] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 482.324207][ T5786] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 482.324653][ T5786] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 482.324666][ T5786] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 482.327756][ T5786] veth1_macvtap: left promiscuous mode [ 482.327815][ T5786] veth0_macvtap: left promiscuous mode [ 482.327933][ T5786] veth1_vlan: left promiscuous mode [ 482.327985][ T5786] veth0_vlan: left promiscuous mode [ 482.650477][ T5097] Bluetooth: hci3: command tx timeout [ 482.695903][ T5786] team0 (unregistering): Port device team_slave_1 removed [ 482.707393][ T5786] team0 (unregistering): Port device team_slave_0 removed [ 482.865610][ T5451] 8021q: adding VLAN 0 to HW filter on device eth11 [ 482.889055][T14377] veth1_vlan: entered promiscuous mode [ 482.894310][T14452] hsr_slave_0: entered promiscuous mode [ 482.896109][T14452] hsr_slave_1: entered promiscuous mode [ 482.896465][T14452] debugfs: 'hsr0' already exists in 'hsr' [ 482.896477][T14452] Cannot create hsr debugfs directory [ 483.050368][ T5097] Bluetooth: hci1: command tx timeout [ 483.057405][T14377] veth0_macvtap: entered promiscuous mode [ 483.059557][T14377] veth1_macvtap: entered promiscuous mode [ 483.133680][ T36] block nbd0: Possible stuck request ffff888027a17000: control (read@0,1024B). Runtime 390 seconds [ 483.133715][ T36] block nbd0: Possible stuck request ffff888027a171c0: control (read@1024,1024B). Runtime 390 seconds [ 483.133738][ T36] block nbd0: Possible stuck request ffff888027a17380: control (read@2048,1024B). Runtime 390 seconds [ 483.133761][ T36] block nbd0: Possible stuck request ffff888027a17540: control (read@3072,1024B). Runtime 390 seconds [ 483.158276][T14476] bridge0: port 1(bridge_slave_0) entered blocking state [ 483.158318][T14476] bridge0: port 1(bridge_slave_0) entered disabled state [ 483.158379][T14476] bridge_slave_0: entered allmulticast mode [ 483.159138][T14476] bridge_slave_0: entered promiscuous mode [ 483.186276][T14377] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 483.227921][T14476] bridge0: port 2(bridge_slave_1) entered blocking state [ 483.227977][T14476] bridge0: port 2(bridge_slave_1) entered disabled state [ 483.228057][T14476] bridge_slave_1: entered allmulticast mode [ 483.229057][T14476] bridge_slave_1: entered promiscuous mode [ 483.264545][T14377] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 483.296201][ T5451] 8021q: adding VLAN 0 to HW filter on device eth12 [ 483.304093][T14476] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 483.310322][ T5813] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 483.310439][ T5813] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 483.310470][ T5813] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 483.310498][ T5813] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 483.321738][T14476] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 483.343600][T14476] team0: Port device team_slave_0 added [ 483.349820][T14476] team0: Port device team_slave_1 added [ 483.382275][T14476] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 483.382292][T14476] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 483.382312][T14476] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 483.458164][T14549] device-mapper: ioctl: Invalid target message parameters. [ 483.458559][T14549] device-mapper: ioctl: Unable to change name on mapped device t to one that already exists: j [ 483.474127][T14452] netdevsim netdevsim6 eth21 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 483.516294][T14476] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 483.516303][T14476] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 483.516317][T14476] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 483.530526][ T5097] Bluetooth: hci2: command tx timeout [ 483.676773][ T5786] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 483.691955][T14476] hsr_slave_0: entered promiscuous mode [ 483.692427][T14476] hsr_slave_1: entered promiscuous mode [ 483.692729][T14476] debugfs: 'hsr0' already exists in 'hsr' [ 483.692742][T14476] Cannot create hsr debugfs directory [ 483.721128][ T46] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 483.721143][ T46] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 483.730832][ T5451] 8021q: adding VLAN 0 to HW filter on device eth13 [ 483.779853][ T5786] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 483.813851][T14452] netdevsim netdevsim6 eth20 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 483.828103][ T7053] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 483.828117][ T7053] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 483.865720][ T5786] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 483.914291][T14452] netdevsim netdevsim6 eth19 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 483.992725][ T5786] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 484.035011][T14452] netdevsim netdevsim6 eth18 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 484.086126][ T5742] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 484.094345][ T5742] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 484.095695][ T5742] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 484.097987][ T5742] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 484.099674][ T5742] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 484.214430][ T5813] netdevsim netdevsim8 eth18: set [0, 0] type 1 family 0 port 8472 - 0 [ 484.293503][ T5786] bridge_slave_1: left allmulticast mode [ 484.293520][ T5786] bridge_slave_1: left promiscuous mode [ 484.293618][ T5786] bridge0: port 2(bridge_slave_1) entered disabled state [ 484.294938][ T5786] bridge_slave_0: left allmulticast mode [ 484.294950][ T5786] bridge_slave_0: left promiscuous mode [ 484.295031][ T5786] bridge0: port 1(bridge_slave_0) entered disabled state [ 484.475757][ T5786] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 484.477306][ T5786] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 484.478179][ T5786] bond0 (unregistering): Released all slaves [ 484.483612][ T5786] bond1 (unregistering): Released all slaves [ 484.527856][T14452] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 484.534311][T14452] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 484.534692][T14452] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 484.546370][T14452] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 484.546784][T14452] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 484.559266][T14452] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 484.561720][T14452] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 484.567581][T14452] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 484.603562][ T5786] Uż: left promiscuous mode [ 484.630443][ T5814] netdevsim netdevsim8 eth20: set [0, 0] type 1 family 0 port 8472 - 0 [ 484.630494][ T5814] netdevsim netdevsim8 eth19: set [0, 0] type 1 family 0 port 8472 - 0 [ 484.630513][ T5814] netdevsim netdevsim8 eth14: set [0, 0] type 1 family 0 port 8472 - 0 [ 484.740490][ T5742] Bluetooth: hci3: command tx timeout [ 484.839652][T14476] netdevsim netdevsim1 eth25 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 485.041172][T14452] 8021q: adding VLAN 0 to HW filter on device bond0 [ 485.066023][T14452] 8021q: adding VLAN 0 to HW filter on device team0 [ 485.076546][ T5786] hsr_slave_0: left promiscuous mode [ 485.077025][ T5786] hsr_slave_1: left promiscuous mode [ 485.077399][ T5786] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 485.077410][ T5786] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 485.078740][ T5786] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 485.078777][ T5786] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 485.093871][ T5786] veth1_macvtap: left promiscuous mode [ 485.093919][ T5786] veth0_macvtap: left promiscuous mode [ 485.094015][ T5786] veth1_vlan: left promiscuous mode [ 485.094091][ T5786] veth0_vlan: left promiscuous mode [ 485.131415][ T5742] Bluetooth: hci1: command tx timeout [ 485.315459][ T5786] team0 (unregistering): Port device team_slave_1 removed [ 485.326586][ T5786] team0 (unregistering): Port device team_slave_0 removed [ 485.394538][ T1167] bridge0: port 1(bridge_slave_0) entered blocking state [ 485.394594][ T1167] bridge0: port 1(bridge_slave_0) entered forwarding state [ 485.400034][ T1167] bridge0: port 2(bridge_slave_1) entered blocking state [ 485.400081][ T1167] bridge0: port 2(bridge_slave_1) entered forwarding state [ 485.563033][T14569] bridge0: port 1(bridge_slave_0) entered blocking state [ 485.565029][T14569] bridge0: port 1(bridge_slave_0) entered disabled state [ 485.565090][T14569] bridge_slave_0: entered allmulticast mode [ 485.565865][T14569] bridge_slave_0: entered promiscuous mode [ 485.577158][T14569] bridge0: port 2(bridge_slave_1) entered blocking state [ 485.577227][T14569] bridge0: port 2(bridge_slave_1) entered disabled state [ 485.577286][T14569] bridge_slave_1: entered allmulticast mode [ 485.578007][T14569] bridge_slave_1: entered promiscuous mode [ 485.607797][T14569] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 485.609204][T14569] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 485.610576][ T5742] Bluetooth: hci2: command tx timeout [ 485.637728][T14569] team0: Port device team_slave_0 added [ 485.641390][T14569] team0: Port device team_slave_1 added [ 485.657027][T14569] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 485.657038][T14569] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 485.657052][T14569] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 485.674162][T14569] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 485.674172][T14569] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 485.674186][T14569] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 485.722407][T14569] hsr_slave_0: entered promiscuous mode [ 485.722856][T14569] hsr_slave_1: entered promiscuous mode [ 485.797422][T14452] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 485.848141][ T5786] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 485.926774][ T5786] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 485.955547][T14452] veth0_vlan: entered promiscuous mode [ 485.959723][T14452] veth1_vlan: entered promiscuous mode [ 485.984501][ T5786] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 485.989532][T14452] veth0_macvtap: entered promiscuous mode [ 485.992850][T14452] veth1_macvtap: entered promiscuous mode [ 485.998871][T14452] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 486.004080][T14452] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 486.019902][ T5451] 8021q: adding VLAN 0 to HW filter on device eth14 [ 486.097968][ T5786] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 486.150679][ T7057] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 486.150693][ T7057] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 486.166191][ T7057] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 486.166204][ T7057] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 486.170402][ T5742] Bluetooth: hci0: command tx timeout [ 486.200297][ T5813] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 486.200333][ T5813] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 486.200357][ T5813] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 486.200380][ T5813] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 486.250566][ T12] netdevsim netdevsim2 eth31: set [0, 0] type 1 family 0 port 8472 - 0 [ 486.263351][ T5786] bridge_slave_1: left allmulticast mode [ 486.283550][T14687] device-mapper: ioctl: Unable to change name on mapped device t to one that already exists: j [ 486.315345][ T5786] bridge_slave_1: left promiscuous mode [ 486.315465][ T5786] bridge0: port 2(bridge_slave_1) entered disabled state [ 486.336374][T14690] WARNING! power/level is deprecated; use power/control instead [ 486.629633][ T5786] bridge_slave_0: left allmulticast mode [ 486.629660][ T5786] bridge_slave_0: left promiscuous mode [ 486.629849][ T5786] bridge0: port 1(bridge_slave_0) entered disabled state [ 486.761993][ T5786] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 486.764968][ T5786] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 486.767198][ T5786] bond0 (unregistering): Released all slaves [ 486.782515][ T5786] bond1 (unregistering): Released all slaves [ 486.793949][ T5451] 8021q: adding VLAN 0 to HW filter on device eth18 [ 486.820509][ T5742] Bluetooth: hci3: command tx timeout [ 486.886424][T14694] dlm: non-version read from control device 0 [ 487.171971][T14476] netdevsim netdevsim1 eth24 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 487.224008][ T5742] Bluetooth: hci1: command tx timeout [ 487.431880][ T5813] netdevsim netdevsim2 eth32: set [0, 0] type 1 family 0 port 8472 - 0 [ 487.502686][ T5813] netdevsim netdevsim2 eth25: set [0, 0] type 1 family 0 port 8472 - 0 [ 487.570107][ T5813] netdevsim netdevsim2 eth21: set [0, 0] type 1 family 0 port 8472 - 0 [ 487.694853][ T5742] Bluetooth: hci2: command tx timeout [ 487.761589][ T5786] hsr_slave_0: left promiscuous mode [ 487.771326][ T5786] hsr_slave_1: left promiscuous mode [ 487.771882][ T5786] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 487.771899][ T5786] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 487.783202][ T5786] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 487.783219][ T5786] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 487.789367][ T5786] veth1_macvtap: left promiscuous mode [ 487.789405][ T5786] veth0_macvtap: left promiscuous mode [ 487.789472][ T5786] veth1_vlan: left promiscuous mode [ 487.789517][ T5786] veth0_vlan: left promiscuous mode [ 488.003368][ T5786] team0 (unregistering): Port device team_slave_1 removed [ 488.013384][ T5786] team0 (unregistering): Port device team_slave_0 removed [ 488.030294][ T9925] usb 11-1: new high-speed USB device number 2 using dummy_hcd [ 488.180290][ T9925] usb 11-1: Using ep0 maxpacket: 16 [ 488.181270][ T9925] usb 11-1: New USB device found, idVendor=0db0, idProduct=5581, bcdDevice=f9.22 [ 488.184494][ T9925] usb 11-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 488.184507][ T9925] usb 11-1: Product: syz [ 488.184515][ T9925] usb 11-1: Manufacturer: syz [ 488.184522][ T9925] usb 11-1: SerialNumber: syz [ 488.252806][ T5742] Bluetooth: hci0: command tx timeout [ 488.286022][ T5451] 8021q: adding VLAN 0 to HW filter on device eth19 [ 488.425952][ T9925] usb 11-1: dvb_usb_v2: found a 'MSI Mega Sky 55801 DVB-T USB2.0' in warm state [ 488.712854][T14702] netlink: 'syz.6.1169': attribute type 1 has an invalid length. [ 489.060931][ T9925] usb 11-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 489.061150][ T9925] dvbdev: DVB: registering new adapter (MSI Mega Sky 55801 DVB-T USB2.0) [ 489.061175][ T9925] usb 11-1: media controller created [ 489.068222][ T9925] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 489.228473][ T9925] zl10353_read_register: readreg error (reg=127, ret==-71) [ 489.247914][ T9925] dvb_usb_gl861 11-1:157.0: probe with driver dvb_usb_gl861 failed with error -5 [ 489.250413][ T9925] usb 11-1: USB disconnect, device number 2 [ 489.301023][ T5742] Bluetooth: hci1: command tx timeout [ 489.428725][T14476] netdevsim netdevsim1 eth23 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 489.481416][T14476] netdevsim netdevsim1 eth22 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 489.634101][T14476] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 489.642625][T14476] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 489.645410][T14476] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 489.655087][T14476] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 489.655527][T14476] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 489.662110][T14476] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 489.667173][T14476] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 489.673707][T14476] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 489.685416][T14569] netdevsim netdevsim2 eth32 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 489.759174][T14569] netdevsim netdevsim2 eth31 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 489.770790][ T5742] Bluetooth: hci2: command tx timeout [ 489.827831][T14762] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1180'. [ 489.839004][T14476] 8021q: adding VLAN 0 to HW filter on device bond0 [ 489.887046][T14476] 8021q: adding VLAN 0 to HW filter on device team0 [ 489.904463][ T7055] bridge0: port 1(bridge_slave_0) entered blocking state [ 489.904553][ T7055] bridge0: port 1(bridge_slave_0) entered forwarding state [ 489.924214][T14569] netdevsim netdevsim2 eth25 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 489.957800][T14766] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 489.958175][T14766] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 490.057293][ T8472] bridge0: port 2(bridge_slave_1) entered blocking state [ 490.057389][ T8472] bridge0: port 2(bridge_slave_1) entered forwarding state [ 490.095398][T14569] netdevsim netdevsim2 eth21 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 490.117582][T14770] device-mapper: ioctl: Unable to change name on mapped device t to one that already exists: j [ 490.139737][T14476] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 490.190238][T14777] jffs2: notice: (14777) jffs2_build_xattr_subsystem: complete building xattr subsystem, 4 of xdatum (0 unchecked, 0 orphan) and 5 of xref (0 dead, 0 orphan) found. [ 490.235180][ T5451] 8021q: adding VLAN 0 to HW filter on device eth20 [ 490.331001][ T5742] Bluetooth: hci0: command tx timeout [ 490.606120][T14569] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 490.613498][T14569] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 490.614034][T14569] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 490.621900][T14569] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 490.622950][T14569] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 490.634015][T14569] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 490.634587][T14569] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 490.638757][T14569] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 490.765309][T14569] 8021q: adding VLAN 0 to HW filter on device bond0 [ 490.787250][T14569] 8021q: adding VLAN 0 to HW filter on device team0 [ 490.797253][ T46] bridge0: port 1(bridge_slave_0) entered blocking state [ 490.797298][ T46] bridge0: port 1(bridge_slave_0) entered forwarding state [ 490.806136][ T46] bridge0: port 2(bridge_slave_1) entered blocking state [ 490.806183][ T46] bridge0: port 2(bridge_slave_1) entered forwarding state [ 491.022973][T14476] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 491.106497][T14476] veth0_vlan: entered promiscuous mode [ 491.146231][T14476] veth1_vlan: entered promiscuous mode [ 491.203332][T14476] veth0_macvtap: entered promiscuous mode [ 491.205182][T14476] veth1_macvtap: entered promiscuous mode [ 491.247086][T14476] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 491.258770][T14476] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 491.287396][ T12] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 491.287423][ T12] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 491.287440][ T12] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 491.287457][ T12] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 491.459703][ T1167] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 491.459724][ T1167] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 491.481776][ T7053] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 491.481795][ T7053] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 491.504382][T14569] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 491.564480][T14569] veth0_vlan: entered promiscuous mode [ 491.573297][T14569] veth1_vlan: entered promiscuous mode [ 491.626938][T14569] veth0_macvtap: entered promiscuous mode [ 491.646285][T14569] veth1_macvtap: entered promiscuous mode [ 491.721618][T14569] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 491.733676][T14569] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 491.745213][ T5786] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 491.745466][ T5786] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 491.745624][ T5786] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 491.831261][T14819] netlink: 'syz.6.1177': attribute type 10 has an invalid length. [ 492.193530][ T5786] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 492.317139][T14819] team0 (unregistering): Port device team_slave_0 removed [ 492.364975][T14819] team0 (unregistering): Port device team_slave_1 removed [ 492.417751][ T5742] Bluetooth: hci0: command tx timeout [ 492.957914][T14813] netlink: 56 bytes leftover after parsing attributes in process `syz.6.1177'. [ 492.965725][ T7053] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 492.965739][ T7053] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 493.017977][ T7055] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 493.017999][ T7055] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 493.282653][T14857] [ 493.283771][T14857] ====================================================== [ 493.286706][T14857] WARNING: possible circular locking dependency detected [ 493.289639][T14857] syzkaller #0 Tainted: G L [ 493.292300][T14857] ------------------------------------------------------ [ 493.295218][T14857] syz.1.1181/14857 is trying to acquire lock: [ 493.297788][T14857] ffff88805d4dc0b8 (&hdev->lock){+.+.}-{4:4}, at: l2cap_chan_connect+0xac/0x2110 [ 493.301591][T14857] [ 493.301591][T14857] but task is already holding lock: [ 493.304673][T14857] ffffffff90f86f60 (rfcomm_mutex){+.+.}-{4:4}, at: rfcomm_dlc_open+0x92/0xac0 [ 493.308409][T14857] [ 493.308409][T14857] which lock already depends on the new lock. [ 493.308409][T14857] [ 493.312670][T14857] [ 493.312670][T14857] the existing dependency chain (in reverse order) is: [ 493.316173][T14857] [ 493.316173][T14857] -> #2 (rfcomm_mutex){+.+.}-{4:4}: [ 493.318547][T14857] lock_acquire+0x1d1/0x380 [ 493.320146][T14857] __mutex_lock+0x1a4/0x1bd0 [ 493.321790][T14857] rfcomm_security_cfm+0x3f/0x4b0 [ 493.324187][T14857] hci_encrypt_cfm+0x18e/0x740 [ 493.326318][T14857] hci_encrypt_change_evt+0x92c/0xfb0 [ 493.328728][T14857] hci_event_packet+0x8e9/0xcd0 [ 493.330920][T14857] hci_rx_work+0x451/0xfc0 [ 493.332661][T14857] process_one_work+0xac7/0x1b10 [ 493.334320][T14857] worker_thread+0x5ef/0xe50 [ 493.336020][T14857] kthread+0x373/0x450 [ 493.337472][T14857] ret_from_fork+0x730/0xd60 [ 493.339082][T14857] ret_from_fork_asm+0x1a/0x30 [ 493.340735][T14857] [ 493.340735][T14857] -> #1 (hci_cb_list_lock){+.+.}-{4:4}: [ 493.343150][T14857] lock_acquire+0x1d1/0x380 [ 493.344739][T14857] __mutex_lock+0x1a4/0x1bd0 [ 493.346381][T14857] hci_remote_features_evt+0x485/0x9b0 [ 493.348269][T14857] hci_event_packet+0x8e9/0xcd0 [ 493.349948][T14857] hci_rx_work+0x451/0xfc0 [ 493.351584][T14857] process_one_work+0xac7/0x1b10 [ 493.353316][T14857] worker_thread+0x5ef/0xe50 [ 493.354930][T14857] kthread+0x373/0x450 [ 493.356418][T14857] ret_from_fork+0x730/0xd60 [ 493.358016][T14857] ret_from_fork_asm+0x1a/0x30 [ 493.359677][T14857] [ 493.359677][T14857] -> #0 (&hdev->lock){+.+.}-{4:4}: [ 493.361936][T14857] check_prev_add+0xeb/0xe60 [ 493.363571][T14857] __lock_acquire+0x1528/0x1f40 [ 493.365264][T14857] lock_acquire+0x1d1/0x380 [ 493.366869][T14857] __mutex_lock+0x1a4/0x1bd0 [ 493.368488][T14857] l2cap_chan_connect+0xac/0x2110 [ 493.370232][T14857] l2cap_sock_connect+0x37a/0x770 [ 493.371993][T14857] kernel_connect+0x107/0x160 [ 493.373629][T14857] rfcomm_dlc_open+0x838/0xac0 [ 493.375328][T14857] rfcomm_sock_connect+0x42c/0x690 [ 493.377137][T14857] __sys_connect_file+0x146/0x1a0 [ 493.378876][T14857] __sys_connect+0x141/0x170 [ 493.380498][T14857] __ia32_sys_connect+0x71/0xb0 [ 493.382178][T14857] __do_fast_syscall_32+0x13a/0x8b0 [ 493.383995][T14857] do_fast_syscall_32+0x32/0x70 [ 493.385684][T14857] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 493.387873][T14857] [ 493.387873][T14857] other info that might help us debug this: [ 493.387873][T14857] [ 493.390994][T14857] Chain exists of: [ 493.390994][T14857] &hdev->lock --> hci_cb_list_lock --> rfcomm_mutex [ 493.390994][T14857] [ 493.394807][T14857] Possible unsafe locking scenario: [ 493.394807][T14857] [ 493.397147][T14857] CPU0 CPU1 [ 493.398815][T14857] ---- ---- [ 493.400491][T14857] lock(rfcomm_mutex); [ 493.401797][T14857] lock(hci_cb_list_lock); [ 493.403967][T14857] lock(rfcomm_mutex); [ 493.406054][T14857] lock(&hdev->lock); [ 493.407339][T14857] [ 493.407339][T14857] *** DEADLOCK *** [ 493.407339][T14857] [ 493.409843][T14857] locks held by syz.1.1181/14857: 1, last CPU#0: [ 493.411832][T14857] #0: ffffffff90f86f60 (rfcomm_mutex){+.+.}-{4:4}, at: rfcomm_dlc_open+0x92/0xac0 [ 493.414701][T14857] [ 493.414701][T14857] stack backtrace: [ 493.416590][T14857] CPU: 0 UID: 0 PID: 14857 Comm: syz.1.1181 Tainted: G L syzkaller #0 PREEMPT(full) [ 493.419959][T14857] Tainted: [L]=SOFTLOCKUP [ 493.421311][T14857] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 493.424433][T14857] Call Trace: [ 493.425490][T14857] [ 493.426481][T14857] dump_stack_lvl+0x100/0x190 [ 493.427978][T14857] print_circular_bug.cold+0x178/0x1be [ 493.429682][T14857] check_noncircular+0x146/0x160 [ 493.431236][T14857] check_prev_add+0xeb/0xe60 [ 493.432689][T14857] __lock_acquire+0x1528/0x1f40 [ 493.434212][T14857] lock_acquire+0x1d1/0x380 [ 493.435677][T14857] ? l2cap_chan_connect+0xac/0x2110 [ 493.437479][T14857] ? __pfx___might_resched+0x10/0x10 [ 493.439163][T14857] __mutex_lock+0x1a4/0x1bd0 [ 493.440617][T14857] ? l2cap_chan_connect+0xac/0x2110 [ 493.442232][T14857] ? l2cap_chan_connect+0xac/0x2110 [ 493.443873][T14857] ? hci_get_route+0x368/0x520 [ 493.445369][T14857] ? hci_get_route+0x368/0x520 [ 493.446889][T14857] ? __pfx___mutex_lock+0x10/0x10 [ 493.448470][T14857] ? _raw_read_unlock+0x28/0x50 [ 493.449984][T14857] ? hci_get_route+0x368/0x520 [ 493.451491][T14857] ? __pfx_hci_get_route+0x10/0x10 [ 493.453082][T14857] ? reacquire_held_locks+0xdd/0x1f0 [ 493.454724][T14857] ? release_sock+0x21/0x280 [ 493.456238][T14857] ? l2cap_chan_connect+0xac/0x2110 [ 493.457855][T14857] l2cap_chan_connect+0xac/0x2110 [ 493.459430][T14857] ? __local_bh_enable_ip+0xa5/0x120 [ 493.461080][T14857] l2cap_sock_connect+0x37a/0x770 [ 493.462662][T14857] ? __pfx_l2cap_sock_connect+0x10/0x10 [ 493.464385][T14857] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 493.466273][T14857] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 493.468092][T14857] kernel_connect+0x107/0x160 [ 493.469560][T14857] ? __pfx_kernel_connect+0x10/0x10 [ 493.471187][T14857] ? timer_init_key+0x150/0x310 [ 493.472709][T14857] rfcomm_dlc_open+0x838/0xac0 [ 493.474207][T14857] ? __pfx_rfcomm_dlc_open+0x10/0x10 [ 493.475885][T14857] ? rfcomm_sock_connect+0x3e8/0x690 [ 493.477532][T14857] ? find_held_lock+0x2b/0x80 [ 493.479011][T14857] ? rfcomm_sock_connect+0x3e8/0x690 [ 493.480652][T14857] ? __local_bh_enable_ip+0xa5/0x120 [ 493.482301][T14857] rfcomm_sock_connect+0x42c/0x690 [ 493.483931][T14857] __sys_connect_file+0x146/0x1a0 [ 493.485526][T14857] __sys_connect+0x141/0x170 [ 493.486974][T14857] ? __pfx___sys_connect+0x10/0x10 [ 493.488581][T14857] __ia32_sys_connect+0x71/0xb0 [ 493.490106][T14857] ? lockdep_hardirqs_on+0x7d/0x110 [ 493.491753][T14857] __do_fast_syscall_32+0x13a/0x8b0 [ 493.493383][T14857] ? lockdep_hardirqs_on+0x7d/0x110 [ 493.495013][T14857] do_fast_syscall_32+0x32/0x70 [ 493.496699][T14857] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 493.498663][T14857] RIP: 0023:0xf706efec [ 493.499951][T14857] Code: Unable to access opcode bytes at 0xf706efc2. [ 493.501988][T14857] RSP: 002b:00000000f545d50c EFLAGS: 00000292 ORIG_RAX: 000000000000016a [ 493.504462][T14857] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000080000040 [ 493.507020][T14857] RDX: 000000000000000a RSI: 0000000000000000 RDI: 0000000000000000 [ 493.509386][T14857] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 493.511752][T14857] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 493.514133][T14857] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 493.516537][T14857] SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 493.597413][T14854] device-mapper: ioctl: Invalid target message parameters. [ 493.597808][T14854] device-mapper: ioctl: Unable to change name on mapped device t to one that already exists: j [ 493.659884][T14861] jffs2: notice: (14861) jffs2_build_xattr_subsystem: complete building xattr subsystem, 4 of xdatum (0 unchecked, 0 orphan) and 5 of xref (0 dead, 0 orphan) found. [ 493.665035][T14861] jffs2: fork failed for JFFS2 garbage collect thread: -EINTR [ 494.280390][ T12] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 494.415038][ T12] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 494.495300][ T12] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 494.552745][ T12] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 494.610574][ T5786] netdevsim netdevsim6 eth21: set [0, 0] type 1 family 0 port 8472 - 0 [ 494.628694][ T12] bridge_slave_1: left allmulticast mode [ 494.628714][ T12] bridge_slave_1: left promiscuous mode [ 494.628812][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 494.631667][ T12] bridge_slave_0: left allmulticast mode [ 494.631683][ T12] bridge_slave_0: left promiscuous mode [ 494.631781][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 494.683838][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 494.685247][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 494.686105][ T12] bond0 (unregistering): Released all slaves [ 494.693541][ T5814] netdevsim netdevsim6 eth23: set [0, 0] type 1 family 0 port 8472 - 0 [ 494.693572][ T5814] netdevsim netdevsim6 eth22: set [0, 0] type 1 family 0 port 8472 - 0 [ 494.701682][ T5814] netdevsim netdevsim6 eth24: set [0, 0] type 1 family 0 port 8472 - 0 [ 494.856940][ T12] hsr_slave_0: left promiscuous mode [ 494.857211][ T12] hsr_slave_1: left promiscuous mode [ 494.857425][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 494.857435][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 494.857696][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 494.857705][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 494.859094][ T12] veth1_macvtap: left promiscuous mode [ 494.859114][ T12] veth0_macvtap: left promiscuous mode [ 494.859146][ T12] veth1_vlan: left promiscuous mode [ 494.859170][ T12] veth0_vlan: left promiscuous mode [ 494.936450][ T5451] 8021q: adding VLAN 0 to HW filter on device eth21 [ 495.189369][ T5451] 8021q: adding VLAN 0 to HW filter on device eth23 [ 495.226126][ T12] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 495.254141][ T12] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 495.295742][ T12] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 495.309118][ T5451] 8021q: adding VLAN 0 to HW filter on device eth22 [ 495.343831][ T12] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 495.422869][ T12] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 495.433146][ T5814] netdevsim netdevsim0 eth33: set [0, 0] type 1 family 0 port 8472 - 0 [ 495.433174][ T5814] netdevsim netdevsim0 eth32: set [0, 0] type 1 family 0 port 8472 - 0 [ 495.436382][ T5451] 8021q: adding VLAN 0 to HW filter on device eth24 [ 495.440692][ T5814] netdevsim netdevsim0 eth25: set [0, 0] type 1 family 0 port 8472 - 0 [ 495.440712][ T5814] netdevsim netdevsim0 eth31: set [0, 0] type 1 family 0 port 8472 - 0 [ 495.473663][ T12] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 495.527808][ T12] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 495.543638][ T5451] 8021q: adding VLAN 0 to HW filter on device eth25 [ 495.545232][ T12] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 495.622529][ T12] bridge_slave_1: left allmulticast mode [ 495.622544][ T12] bridge_slave_1: left promiscuous mode [ 495.622624][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 495.623548][ T12] bridge_slave_0: left allmulticast mode [ 495.623558][ T12] bridge_slave_0: left promiscuous mode [ 495.623618][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 495.643127][ T12] bridge_slave_1: left allmulticast mode [ 495.643143][ T12] bridge_slave_1: left promiscuous mode [ 495.643210][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 495.643904][ T12] bridge_slave_0: left allmulticast mode [ 495.643914][ T12] bridge_slave_0: left promiscuous mode [ 495.643965][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 495.717151][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 495.718673][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 495.719533][ T12] bond0 (unregistering): Released all slaves [ 495.749123][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 495.750019][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 495.754229][ T12] bond0 (unregistering): Released all slaves [ 495.759885][ T5451] 8021q: adding VLAN 0 to HW filter on device eth31 [ 495.780274][ T5786] netdevsim netdevsim1 eth37: set [0, 0] type 1 family 0 port 8472 - 0 [ 495.780299][ T5786] netdevsim netdevsim1 eth34: set [0, 0] type 1 family 0 port 8472 - 0 [ 495.780316][ T5786] netdevsim netdevsim1 eth35: set [0, 0] type 1 family 0 port 8472 - 0 [ 495.780332][ T5786] netdevsim netdevsim1 eth36: set [0, 0] type 1 family 0 port 8472 - 0 [ 495.895490][ T5451] 8021q: adding VLAN 0 to HW filter on device eth33 [ 495.986905][ T12] hsr_slave_0: left promiscuous mode [ 495.987260][ T12] hsr_slave_1: left promiscuous mode [ 495.987482][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 495.987492][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 495.987758][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 495.987767][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 495.989297][ T12] hsr_slave_0: left promiscuous mode [ 495.989598][ T12] hsr_slave_1: left promiscuous mode [ 495.989804][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 495.989813][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 495.990050][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 495.990058][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 495.993826][ T12] veth1_macvtap: left promiscuous mode [ 495.993849][ T12] veth0_macvtap: left promiscuous mode [ 495.993890][ T12] veth1_vlan: left promiscuous mode [ 495.993923][ T12] veth0_vlan: left promiscuous mode [ 496.002437][ T12] veth1_macvtap: left promiscuous mode [ 496.002461][ T12] veth0_macvtap: left promiscuous mode [ 496.002501][ T12] veth1_vlan: left promiscuous mode [ 496.002544][ T12] veth0_vlan: left promiscuous mode [ 496.100669][ T12] team0 (unregistering): Port device team_slave_1 removed [ 496.103214][ T12] team0 (unregistering): Port device team_slave_0 removed [ 496.160419][ T12] team0 (unregistering): Port device team_slave_1 removed [ 496.162290][ T12] team0 (unregistering): Port device team_slave_0 removed [ 496.184071][ T5451] 8021q: adding VLAN 0 to HW filter on device eth32 [ 496.318812][ T5451] 8021q: adding VLAN 0 to HW filter on device eth34 [ 496.426626][ T5451] 8021q: adding VLAN 0 to HW filter on device eth35 [ 496.520112][ T5451] 8021q: adding VLAN 0 to HW filter on device eth36 [ 496.619993][ T5451] 8021q: adding VLAN 0 to HW filter on device eth37 [ 496.696827][ T12] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 496.736634][ T12] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 496.764823][ T12] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 496.814927][ T12] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 496.875170][ T5786] netdevsim netdevsim2 eth40: set [0, 0] type 1 family 0 port 8472 - 0 [ 496.879450][ T12] bridge_slave_1: left allmulticast mode [ 496.879465][ T12] bridge_slave_1: left promiscuous mode [ 496.879533][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 496.889235][ T12] bridge_slave_0: left allmulticast mode [ 496.889250][ T12] bridge_slave_0: left promiscuous mode [ 496.889324][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 496.937541][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 496.938962][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 496.939817][ T12] bond0 (unregistering): Released all slaves [ 496.970363][ T5786] netdevsim netdevsim2 eth38: set [0, 0] type 1 family 0 port 8472 - 0 [ 496.970403][ T5786] netdevsim netdevsim2 eth39: set [0, 0] type 1 family 0 port 8472 - 0 [ 496.970430][ T5786] netdevsim netdevsim2 eth41: set [0, 0] type 1 family 0 port 8472 - 0 [ 497.071784][ T5451] 8021q: adding VLAN 0 to HW filter on device eth38 [ 497.111110][ T12] hsr_slave_0: left promiscuous mode [ 497.111507][ T12] hsr_slave_1: left promiscuous mode [ 497.111894][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 497.111908][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 497.112390][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 497.112405][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 497.114865][ T12] veth1_macvtap: left promiscuous mode [ 497.114902][ T12] veth0_macvtap: left promiscuous mode [ 497.114979][ T12] veth1_vlan: left promiscuous mode [ 497.115061][ T12] veth0_vlan: left promiscuous mode [ 497.188493][ T12] team0 (unregistering): Port device team_slave_1 removed [ 497.193504][ T12] team0 (unregistering): Port device team_slave_0 removed [ 497.216608][ T5451] 8021q: adding VLAN 0 to HW filter on device eth39 [ 497.338599][ T5451] 8021q: adding VLAN 0 to HW filter on device eth40 [ 497.425682][ T5451] 8021q: adding VLAN 0 to HW filter on device eth41 [ 501.061744][ T1437] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.061783][ T1437] ieee802154 phy1 wpan1: encryption failed: -22