last executing test programs: 2m1.094370994s ago: executing program 32 (id=19): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x10, &(0x7f0000000300)=ANY=[@ANYRES8=0x0, @ANYRES16=0x0, @ANYBLOB="7da9ec523b552bedc169de61773ac78c71f341a4becb5671aee9a515c8145cb8146b90fe5150b43ce5cf9c65521112545c5b2f9e6d02705fff608a2d141e03a99a231d6c8f8dbb0507b25ac7600b6cde07805f77fb62e33205e29d90cd6a8ae3d1afd8284a9603536e990995c9c97ca7ebdeb47ecf644829dbbd4ea74b741a640bf82cb18da094cc02b6776478dfc6544cbd898ce85b894320e0df270a47efccf9061a35409fb1e564158c01486e05248cdec0cf5fb857"], &(0x7f0000000000)='GPL\x00', 0x7, 0xc4, &(0x7f0000000140)=""/186, 0x41000, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2) syz_emit_ethernet(0x2a4, &(0x7f0000000000)=ANY=[], 0x0) r3 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r3, &(0x7f0000000000)='asymmetric\x00', &(0x7f0000000180)=@keyring={'key_or_keyring:', 0x0, 0x2}) r4 = syz_init_net_socket$rose(0xb, 0x5, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r5 = dup(r4) write$6lowpan_enable(r5, &(0x7f0000000000)='0', 0xfffffd2c) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000001640)={'pim6reg1\x00', 0x1000}) r7 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IP_VS_SO_SET_STARTDAEMON(r7, 0x0, 0x48b, &(0x7f0000000040)={0x2, 'veth1_virt_wifi\x00', 0xfffffffe}, 0x18) setsockopt$IP_VS_SO_SET_STOPDAEMON(r7, 0x0, 0x48c, &(0x7f00000002c0)={0x2, 'pim6reg1\x00', 0x2}, 0x18) r8 = openat$ttyS3(0xffffff9c, &(0x7f0000000180), 0x800, 0x0) poll(&(0x7f00000015c0)=[{r7, 0x8010}, {r6, 0x20}, {r6, 0x308}, {r8, 0x2080}], 0x4, 0x7f) mount(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000080)='proc\x00', 0x1, 0x0) 1m44.755271968s ago: executing program 0 (id=55): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = socket$l2tp6(0xa, 0x2, 0x73) bind$l2tp6(r3, &(0x7f0000000100)={0xa, 0x0, 0x0, @empty}, 0x20) connect$l2tp6(r3, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0xb}, 0x20) syz_emit_ethernet(0x8e, &(0x7f0000000100)=ANY=[@ANYBLOB="aaaaaaaaaaaa1acd1f78800d86dd608a37f200587300fe2700000000000000000000000000bbfe8000000000000000000000000000aa00000000", @ANYRES8], 0x0) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x802, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r4, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x100}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) r5 = syz_open_dev$vim2m(&(0x7f0000000040), 0x7, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r5, 0xc0d05605, &(0x7f0000000080)={0x1, @vbi={0x0, 0x0, 0x0, 0x50424752}}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f00000002c0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xffffffffffffffeb, 0x18, &(0x7f00000004c0)={@flat=@binder={0x73622a85, 0x10a}, @flat=@handle={0x73682a85, 0x20a, 0x3}, @flat=@binder={0x73622a85, 0x1, 0x6}}, &(0x7f0000000200)={0x0, 0x18, 0x30}}, 0x1000}], 0xfffffffffffffe42, 0x0, 0x0}) 1m44.619610235s ago: executing program 0 (id=56): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x10, &(0x7f0000000340)=ANY=[@ANYRESHEX, @ANYRESOCT], &(0x7f0000000300)='GPL\x00', 0x8, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000380)=[{0x3, 0x0, 0xa, 0x6}], 0x10, 0x37, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) setsockopt$RDS_CANCEL_SENT_TO(0xffffffffffffffff, 0x114, 0x1, &(0x7f0000000080)={0x2, 0x52e, @remote}, 0x10) r0 = syz_open_dev$video4linux(&(0x7f0000000000), 0xfff, 0x0) ioctl$VIDIOC_SUBDEV_G_SELECTION(r0, 0xc040563d, &(0x7f0000000080)) getsockopt$SO_TIMESTAMP(0xffffffffffffffff, 0x1, 0x1d, 0x0, &(0x7f0000000040)) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r1, &(0x7f0000002540)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2) socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$IOCTL_VMCI_CTX_SET_CPT_STATE(0xffffffffffffffff, 0x7b2, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000002a00)='net/fib_trie\x00') preadv(r3, &(0x7f0000002240)=[{&(0x7f0000001180)=""/4096, 0x1000}], 0x1, 0x1000, 0x0) r4 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r4) bpf$BPF_PROG_DETACH(0x9, &(0x7f00000003c0)=ANY=[@ANYBLOB="260000000000000000ff"], 0x20) mkdir(&(0x7f0000000080)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') mkdir(&(0x7f0000000440)='./file0\x00', 0x0) openat$autofs(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) mount$bind(&(0x7f0000000100)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x101091, 0x0) open(&(0x7f0000000000)='.\x00', 0x0, 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) 1m43.422513642s ago: executing program 0 (id=65): r0 = syz_open_dev$sndmidi(&(0x7f0000000100), 0x2, 0x40080) r1 = syz_io_uring_setup(0x38fb, &(0x7f0000000300)={0x0, 0x1fffff, 0x10100, 0x20, 0x271}, &(0x7f0000000180)=0x0, &(0x7f0000000080)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000140)=@IORING_OP_MSG_RING={0x28, 0x40, 0x0, r0, 0x9, 0x0}) io_uring_enter(r1, 0x2def, 0x4000, 0x0, 0x0, 0x0) sync() syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_remote_features={{0xb, 0xb}, {0x81, 0xc9, "006a978d329db720"}}}, 0xe) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) shutdown(r5, 0x0) r6 = dup3(r5, r4, 0x0) recvmmsg(r6, &(0x7f00000004c0)=[{{0x0, 0x0, 0x0}}], 0xf00, 0x0, 0x0) ioctl$I2C_RDWR(r6, 0x707, &(0x7f0000000280)={&(0x7f0000000900)=[{0x6, 0x1, 0x40, &(0x7f0000000040)="d9168b235b618e3d84516029ce37208e320587b367c3c09502e2bc7a24de07e0f00a7aba66e5df7a8e0c455ec1ebfd0a8e0bbc74c6ded07080f7519bfceeb050"}, {0x7, 0x9c10, 0x3b, &(0x7f00000000c0)="ef80a3e83a65990f86fca1c55444763b97c4b1148f0bbcd2abbadf685cdcc9a7e0e2430ac19595a999805ab20d37843bbe16d9eb046cce2cbcebcc"}, {0x9, 0x84fbbcbe748aa24d, 0xe6, &(0x7f0000000380)="85ff21ea35d1cbb10d8624f59a3d21e7c2e6e4657616a1991d50b23e22c34f581c0c96fefd6cfa7e598eda079a8edc5e204a3c2ec9d5ab112f7432169c951fd56220f7fc01c807c1371c3ac5a0e595b08e20de58fbb191abc118555ae6dfc0b467c3eee753db0185109c59da076fff800e5a378cf3760dbe7453c236c6b4733e86fb032568c1a95f1614e01d97119cd25ecee4127363a82f82373e696b94da9ea9b9d18b564e2246d517b4770c99d8543d8307fc6ed7e9eb39ad9d34d5b8ea16a3bc95cda1c551d96367d397aa183c5d4deb9bd7ee310988a0b53fd184a3674c53833f1c4ba6"}, {0xb5ff, 0xf5e28df809492ad7, 0xfe, &(0x7f0000000480)="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"}, {0x800, 0x8000, 0x37, &(0x7f00000001c0)="d14ca794fade4d78df82ad37ff1d88a83a77360d087f13b449447b5110ca14cd0dd2a06266cf02c96972be907238b64ece3788fbfe2d75"}, {0xda, 0x2010, 0x3e, &(0x7f0000000200)="da07602aa25ecfa637d1d23e0a42b349e22de7f88efb632b4cd08ea8931f4c005894aaf41504061f866fbb22b43a055f23d04fa0fc2640d1cfa318690971"}, {0x0, 0x7400, 0xef, &(0x7f0000000580)="14c8b16d18fee2556fc8b933096ae2c4b642f694a790e16c58aa312aa7461f3146e77265df02a1648fd97932c2d57b764c5e744ccfac0adec39dfbbc63bb5f585b7eeb336bdab9e60393bc551666316d0e4a2cacea970205704c91b5623128686485fd3fcdbb7e7de618fb151358662216c1453e0719fc5ee1e37b87e1ee948d6d180068e5c1d26cef70b8083bf762f8bf8b3a8eea832e057e2149b6b558432da4ded763b1b10da21d2fc442ddd401ada15609ba8ffe605ca3dcfb337efacfb976b19686ef88734c4d910746afec513eb1488b26af40c5aeff80764f305d31ce8a0e3f35c95bb6272b27196483bf0e"}, {0xfa1b, 0x0, 0xcc, &(0x7f0000000680)="bd3b28ef933e6b21d36f48bad73970529bfd4e60c40d2f6b7b6ce48a2c45b924f51725dcf0939824d45258ac21bb00a53cf2dad5daabb89c3ed002ad57864c00af875afdb90632aebc1672248675f3e7bd1f99e9e93eef632f9dbf88e1423f581b690ca1b40968b155699c9a411ad06594f8018092d80c6a248be4a455a409dc16663e9b5e6b8a873c7e8245bd299fd59d76b4aabc7067bd2395e3f0061db3a5ce67036a9aea7a43cdaca57f7f0c6d4445688ba6dcaf230a45acecf0950e47f015d41e364a9181f19c06e070"}, {0x803, 0xb00, 0xae, &(0x7f0000000780)="fb350a017f6ec1b9c81d19da89b34a1f0f3c51b71a56eedf574a142c3b48d576e1d7ffef72d1c12564afced37406a8c818e6bb494eb959b72381807304119b00dbd82f1c84ffc1e23920fa932a7bc5d469aeadfdb5c4ac9dc8a948af926b524abb63bb0e9ca61eaaf0d9b141128683138af7ac33629a5657ed45840d8842154ca93bdf204f9748b1f892c2c147cb6bc11785c63ee9f3f8b80f0c891bbe1e8867df578cb29d10ab3a37911a412041"}, {0x9, 0x4001, 0xac, &(0x7f0000000840)="5c3419d73b764d9646d51245d21df211346f9f6daecd11a41b7cdf89c39205ecab22a05638eae07b88989aedfbe8c3ecde072e435d78b2ceaba52afabedeb3071f357268371e152e8e0146ddafbc156d7956073e62afdf56d2726bd6c037094ef628f410e9f30e23117ddeb8a6b809367b5470b19175a10858b0aed8fc1c647c4c57b56a246c92dadf08f8e93080f37b60cc5e0ca7ba2bc3358a3eef4726bb43e04893788a29e435f1535325"}], 0xa}) r7 = syz_open_dev$vcsu(0x0, 0x2, 0x40) ioctl$HIDIOCGCOLLECTIONINFO(r7, 0xc0104811, &(0x7f0000000980)={0x8, 0x1, 0x7fff, 0x4}) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=@newtaction={0x68, 0x30, 0x1, 0x0, 0x0, {}, [{0x54, 0x1, [@m_ctinfo={0x50, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_CTINFO_PARMS_CPMARK_MASK={0x8}, @TCA_CTINFO_ACT={0x18}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x68}}, 0x0) 1m28.404704365s ago: executing program 33 (id=65): r0 = syz_open_dev$sndmidi(&(0x7f0000000100), 0x2, 0x40080) r1 = syz_io_uring_setup(0x38fb, &(0x7f0000000300)={0x0, 0x1fffff, 0x10100, 0x20, 0x271}, &(0x7f0000000180)=0x0, &(0x7f0000000080)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000140)=@IORING_OP_MSG_RING={0x28, 0x40, 0x0, r0, 0x9, 0x0}) io_uring_enter(r1, 0x2def, 0x4000, 0x0, 0x0, 0x0) sync() syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_remote_features={{0xb, 0xb}, {0x81, 0xc9, "006a978d329db720"}}}, 0xe) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) shutdown(r5, 0x0) r6 = dup3(r5, r4, 0x0) recvmmsg(r6, &(0x7f00000004c0)=[{{0x0, 0x0, 0x0}}], 0xf00, 0x0, 0x0) ioctl$I2C_RDWR(r6, 0x707, &(0x7f0000000280)={&(0x7f0000000900)=[{0x6, 0x1, 0x40, &(0x7f0000000040)="d9168b235b618e3d84516029ce37208e320587b367c3c09502e2bc7a24de07e0f00a7aba66e5df7a8e0c455ec1ebfd0a8e0bbc74c6ded07080f7519bfceeb050"}, {0x7, 0x9c10, 0x3b, &(0x7f00000000c0)="ef80a3e83a65990f86fca1c55444763b97c4b1148f0bbcd2abbadf685cdcc9a7e0e2430ac19595a999805ab20d37843bbe16d9eb046cce2cbcebcc"}, {0x9, 0x84fbbcbe748aa24d, 0xe6, &(0x7f0000000380)="85ff21ea35d1cbb10d8624f59a3d21e7c2e6e4657616a1991d50b23e22c34f581c0c96fefd6cfa7e598eda079a8edc5e204a3c2ec9d5ab112f7432169c951fd56220f7fc01c807c1371c3ac5a0e595b08e20de58fbb191abc118555ae6dfc0b467c3eee753db0185109c59da076fff800e5a378cf3760dbe7453c236c6b4733e86fb032568c1a95f1614e01d97119cd25ecee4127363a82f82373e696b94da9ea9b9d18b564e2246d517b4770c99d8543d8307fc6ed7e9eb39ad9d34d5b8ea16a3bc95cda1c551d96367d397aa183c5d4deb9bd7ee310988a0b53fd184a3674c53833f1c4ba6"}, {0xb5ff, 0xf5e28df809492ad7, 0xfe, &(0x7f0000000480)="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"}, {0x800, 0x8000, 0x37, &(0x7f00000001c0)="d14ca794fade4d78df82ad37ff1d88a83a77360d087f13b449447b5110ca14cd0dd2a06266cf02c96972be907238b64ece3788fbfe2d75"}, {0xda, 0x2010, 0x3e, &(0x7f0000000200)="da07602aa25ecfa637d1d23e0a42b349e22de7f88efb632b4cd08ea8931f4c005894aaf41504061f866fbb22b43a055f23d04fa0fc2640d1cfa318690971"}, {0x0, 0x7400, 0xef, &(0x7f0000000580)="14c8b16d18fee2556fc8b933096ae2c4b642f694a790e16c58aa312aa7461f3146e77265df02a1648fd97932c2d57b764c5e744ccfac0adec39dfbbc63bb5f585b7eeb336bdab9e60393bc551666316d0e4a2cacea970205704c91b5623128686485fd3fcdbb7e7de618fb151358662216c1453e0719fc5ee1e37b87e1ee948d6d180068e5c1d26cef70b8083bf762f8bf8b3a8eea832e057e2149b6b558432da4ded763b1b10da21d2fc442ddd401ada15609ba8ffe605ca3dcfb337efacfb976b19686ef88734c4d910746afec513eb1488b26af40c5aeff80764f305d31ce8a0e3f35c95bb6272b27196483bf0e"}, {0xfa1b, 0x0, 0xcc, &(0x7f0000000680)="bd3b28ef933e6b21d36f48bad73970529bfd4e60c40d2f6b7b6ce48a2c45b924f51725dcf0939824d45258ac21bb00a53cf2dad5daabb89c3ed002ad57864c00af875afdb90632aebc1672248675f3e7bd1f99e9e93eef632f9dbf88e1423f581b690ca1b40968b155699c9a411ad06594f8018092d80c6a248be4a455a409dc16663e9b5e6b8a873c7e8245bd299fd59d76b4aabc7067bd2395e3f0061db3a5ce67036a9aea7a43cdaca57f7f0c6d4445688ba6dcaf230a45acecf0950e47f015d41e364a9181f19c06e070"}, {0x803, 0xb00, 0xae, &(0x7f0000000780)="fb350a017f6ec1b9c81d19da89b34a1f0f3c51b71a56eedf574a142c3b48d576e1d7ffef72d1c12564afced37406a8c818e6bb494eb959b72381807304119b00dbd82f1c84ffc1e23920fa932a7bc5d469aeadfdb5c4ac9dc8a948af926b524abb63bb0e9ca61eaaf0d9b141128683138af7ac33629a5657ed45840d8842154ca93bdf204f9748b1f892c2c147cb6bc11785c63ee9f3f8b80f0c891bbe1e8867df578cb29d10ab3a37911a412041"}, {0x9, 0x4001, 0xac, &(0x7f0000000840)="5c3419d73b764d9646d51245d21df211346f9f6daecd11a41b7cdf89c39205ecab22a05638eae07b88989aedfbe8c3ecde072e435d78b2ceaba52afabedeb3071f357268371e152e8e0146ddafbc156d7956073e62afdf56d2726bd6c037094ef628f410e9f30e23117ddeb8a6b809367b5470b19175a10858b0aed8fc1c647c4c57b56a246c92dadf08f8e93080f37b60cc5e0ca7ba2bc3358a3eef4726bb43e04893788a29e435f1535325"}], 0xa}) r7 = syz_open_dev$vcsu(0x0, 0x2, 0x40) ioctl$HIDIOCGCOLLECTIONINFO(r7, 0xc0104811, &(0x7f0000000980)={0x8, 0x1, 0x7fff, 0x4}) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=@newtaction={0x68, 0x30, 0x1, 0x0, 0x0, {}, [{0x54, 0x1, [@m_ctinfo={0x50, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_CTINFO_PARMS_CPMARK_MASK={0x8}, @TCA_CTINFO_ACT={0x18}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x68}}, 0x0) 1m23.019485459s ago: executing program 3 (id=196): r0 = syz_open_dev$loop(&(0x7f0000000140), 0x75f, 0xa382) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000600)='io_uring_req_failed\x00', r2, 0x0, 0x23e}, 0x18) r3 = syz_io_uring_setup(0x110, &(0x7f0000000680)={0x0, 0x2a11, 0x0, 0xfffc, 0xfffffffd}, &(0x7f00000004c0)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) r6 = openat$procfs(0xffffff9c, &(0x7f00000001c0)='/proc/bus/input/devices\x00', 0x0, 0x0) ioctl$F2FS_IOC_GARBAGE_COLLECT(r2, 0x4004f506, &(0x7f0000000280)=0x1) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r6, 0x84, 0x77, &(0x7f0000000200)=ANY=[@ANYRES32=0x0, @ANYBLOB="0700020004d00b01"], 0xc) syz_io_uring_submit(r4, r5, &(0x7f0000000180)=@IORING_OP_MKDIRAT={0x25, 0x20, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x48, 0x0, 0x1}) io_uring_enter(r3, 0x47f6, 0x0, 0x0, 0x0, 0x0) ioctl$LOOP_GET_STATUS64(r0, 0x4c05, 0x0) 1m22.968152145s ago: executing program 3 (id=197): r0 = semget$private(0x0, 0x4, 0x120) semctl$GETNCNT(r0, 0x0, 0xe, &(0x7f0000000000)=""/192) semget(0x3, 0x0, 0x3fc) r1 = socket$nl_route(0x10, 0x3, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x9, 0x8, &(0x7f0000000000)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x11, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000ffffffff000000000000000085000000a8000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r2, @ANYBLOB="0000000000000000b705000000000000850000007b00000095"], &(0x7f0000000b00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x99) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000300)={r3}, 0xc) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) renameat(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$ifreq_SIOCGIFINDEX_wireguard(r4, 0x8933, &(0x7f0000000540)={'wg1\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYRESHEX=r4, @ANYRES8=0x0, @ANYBLOB="00000000000000009c00128009000100766c616e000000008c000280060001000000000028fbff000000000000000000ff0700000c00010000000000050000000c000100000000009cfc0000580003800c00010000000000ffff00000c00010000000300000000000c0c000100ffffff7f030000000c00010000000000020000000c00010000000000000000000c000100ff0000000010000008000500"/168, @ANYRES32=r5], 0xcc}, 0x1, 0xba01}, 0x0) 1m22.798669964s ago: executing program 3 (id=200): r0 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) setsockopt$bt_rfcomm_RFCOMM_LM(r0, 0x12, 0x3, &(0x7f0000000000)=0x40, 0x4) syz_usb_connect$cdc_ncm(0x4, 0x8d, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x20, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x7b, 0x2, 0x1, 0x5, 0x10, 0xfb, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x6, 0x24, 0x6, 0x0, 0x1, "16"}, {0x5, 0x24, 0x0, 0x6}, {0xd, 0x24, 0xf, 0x1, 0x2, 0x0, 0x7, 0x9}, {0x6, 0x24, 0x1a, 0x9, 0x8}, [@dmm={0x7, 0x24, 0x14, 0x7, 0x9}, @call_mgmt={0x5, 0x24, 0x1, 0x3, 0x7}, @acm={0x4}, @dmm={0x7, 0x24, 0x14, 0x6, 0x401}, @network_terminal={0x7, 0x24, 0xa, 0x2, 0x0, 0x3, 0x7}]}, {{0x9, 0x5, 0x81, 0x3, 0x200, 0x8, 0x6, 0x4}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x200, 0x3, 0x7, 0xb6}}, {{0x9, 0x5, 0x3, 0x2, 0x200, 0x3, 0x1, 0x10}}}}}}}]}}, &(0x7f0000000380)={0xa, &(0x7f0000000100)={0xa, 0x6, 0x250, 0x8, 0x5, 0x0, 0x8, 0xa}, 0xc, &(0x7f0000000140)={0x5, 0xf, 0xc, 0x1, [@ext_cap={0x7, 0x10, 0x2, 0x1c, 0xf, 0x0, 0xf}]}, 0x5, [{0xb7, &(0x7f0000000180)=@string={0xb7, 0x3, "48a7624f82ae8594b57a1385eed9deb260cfa88be3b6441a45f59ca550ea8581e71829e50b9189cdd00311aaacc4d30aa18d35f5c57198d9bb6c2dcc90c1808b9d08033a1eb1ee3a16225167083a08446b3cc658090be3f77c4cdc1af22ef8eecd66d46b13b6a98dde7c1a31bbcf887ca7df82dfbcec5f7a1f77ced542286487be9e4777290d76ea954ecdafe7b2f88cc996d658704327ddf93fc755b5292ac8df322b1f76dba6925be00b930c12201610d89a661c"}}, {0x4, &(0x7f0000000240)=@lang_id={0x4, 0x3, 0x426}}, {0x4, &(0x7f0000000280)=@lang_id={0x4, 0x3, 0x41e}}, {0x6e, &(0x7f00000002c0)=@string={0x6e, 0x3, "b77dc195497e6b441cec92f050f72a4b8ce8aee133cf22d43f8e641e21e4f5af9e22835f79fb0d535a37ee9b79023151e6bc6b6a00750c44a80da9d86080279f219073a0108411b357150dc789dcc2367f4a9e5265614d36620b85f13259082c4a44f63a1b58fc011038ce5d"}}, {0x4, &(0x7f0000000340)=@lang_id={0x4, 0x3, 0x100a}}]}) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) getsockopt$sock_buf(r0, 0x1, 0x0, &(0x7f00000003c0)=""/4096, &(0x7f00000013c0)=0x1000) sendmsg$TIPC_NL_MEDIA_SET(0xffffffffffffffff, &(0x7f0000001740)={&(0x7f0000001400)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000001700)={&(0x7f0000001440)={0x284, 0x0, 0x20, 0x70bd2b, 0x25dfdbfd, {}, [@TIPC_NLA_BEARER={0xb0, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e20, 0xfffff800, @mcast1, 0x6}}, {0x14, 0x2, @in={0x2, 0x4e24, @broadcast}}}}, @TIPC_NLA_BEARER_PROP={0x44, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x80000001}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_WIN={0x8}]}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @l2={'eth', 0x3a, 'ip6gre0\x00'}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x6}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0xfffffff0}]}, @TIPC_NLA_LINK={0x6c, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xc99}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1fed}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1000}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x100}]}, @TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}]}]}, @TIPC_NLA_NODE={0xbc, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x7}, @TIPC_NLA_NODE_ID={0x42, 0x3, "53fb3839f52c6e7f6d17c2b7282cceac84f8bc1ba5daf25006815b119aef6c9e675f1a699f8344f40e18f7f0d545f8b9aa3d833bb18f5fe3f89e857a9967"}, @TIPC_NLA_NODE_KEY={0x3c, 0x4, {'gcm(aes)\x00', 0x14, "907f37169c09e50b353f64148440d4aa6d047e6b"}}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x3}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x80000000}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x11b7}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0xef6a}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x3}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_KEY_MASTER={0x4}]}, @TIPC_NLA_LINK={0x98, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x54, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xb}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1ff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x10}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xf}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x400}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xa0c}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xa0}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3b9}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}]}, 0x284}, 0x1, 0x0, 0x0, 0x80}, 0x0) r1 = openat$btrfs_control(0xffffff9c, &(0x7f0000001780), 0x2000, 0x0) ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0x400454d0, 0x2) syz_usb_connect$printer(0x0, 0x36, &(0x7f00000017c0)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0x20, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x4, 0x10, 0xb, [{{0x9, 0x4, 0x0, 0x6, 0x2, 0x7, 0x1, 0x2, 0x5, "", {{{0x9, 0x5, 0x1, 0x2, 0x400, 0x8, 0x1, 0x82}}, [{{0x9, 0x5, 0x82, 0x2, 0x20, 0x9, 0x6, 0x7}}]}}}]}}]}}, &(0x7f0000001a80)={0xa, &(0x7f0000001800)={0xa, 0x6, 0x300, 0xd, 0x3b, 0x0, 0x40, 0x4}, 0x37, &(0x7f0000001840)={0x5, 0xf, 0x37, 0x3, [@ext_cap={0x7, 0x10, 0x2, 0x8, 0x5, 0x0, 0x7}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x0, 0xb, 0x3, 0x3ff}, @generic={0x21, 0x10, 0x2, "0e88b83421b349167a00226fbd4b103c3c016a437f6708ec1a3b2059e809"}]}, 0x7, [{0x4, &(0x7f0000001880)=@lang_id={0x4, 0x3, 0x438}}, {0x4e, &(0x7f00000018c0)=@string={0x4e, 0x3, "4e3f12b644a9ed29ee7bcae3da020f83133fd25d54180a1f5f4703867dba47ebdefa2115f3f6970a5a92ea14507939ac54bd2372580868efbab3bec86562666c582e03b74ee46c3f311d246e"}}, {0x4, &(0x7f0000001940)=@lang_id={0x4, 0x3, 0x3401}}, {0x4, &(0x7f0000001980)=@lang_id={0x4, 0x3, 0x1809}}, {0x4, &(0x7f00000019c0)=@lang_id={0x4, 0x3, 0x83e}}, {0x4, &(0x7f0000001a00)=@lang_id={0x4, 0x3, 0x1c0a}}, {0x4, &(0x7f0000001a40)=@lang_id={0x4, 0x3, 0x820}}]}) r2 = openat$tun(0xffffff9c, &(0x7f0000001b00), 0x200143, 0x0) pwritev2(r1, &(0x7f0000002b80)=[{&(0x7f0000001b40)="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", 0x1000}, {&(0x7f0000002b40)="9c44eefb331196af1a1aa151090d37f7e9f580433e3fbc", 0x17}], 0x2, 0x91f, 0x40, 0x3) syz_usb_connect$hid(0x4, 0x36, &(0x7f0000002bc0)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0x8, 0x2133, 0x18, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x40, 0x0, 0xe7, [{{0x9, 0x4, 0x0, 0x40, 0x2, 0x3, 0x1, 0x1, 0x6, {0x9, 0x21, 0x8, 0x9, 0x1, {0x22, 0x13}}, {{{0x9, 0x5, 0x81, 0x3, 0x60, 0x1a, 0xa, 0x1}}}}}]}}]}}, &(0x7f0000002f00)={0xa, &(0x7f0000002c00)={0xa, 0x6, 0x200, 0x6c, 0x7, 0x0, 0xff, 0x5}, 0x3f, &(0x7f0000002c40)={0x5, 0xf, 0x3f, 0x4, [@ssp_cap={0x18, 0x10, 0xa, 0xf, 0x3, 0x7fff931, 0xff00, 0x3, [0xc0c0, 0x0, 0xff30]}, @wireless={0xb, 0x10, 0x1, 0xc, 0xfa381ee0fc967ae3, 0x6, 0x7f, 0xfff9, 0xa}, @ss_container_id={0x14, 0x10, 0x4, 0x1, "41a180511a3244c5eb92a3882d4327d9"}, @ptm_cap={0x3}]}, 0x7, [{0x4, &(0x7f0000002c80)=@lang_id={0x4, 0x3, 0x409}}, {0x4, &(0x7f0000002cc0)=@lang_id={0x4, 0x3, 0xc01}}, {0x4, &(0x7f0000002d00)=@lang_id={0x4, 0x3, 0x2009}}, {0xcc, &(0x7f0000002d40)=@string={0xcc, 0x3, "26e8e9d2d10ff13fc64f8388318e3fb4f74345938d2ef0b389a7aaba6a8f23038c30fa8c524586dcac1038e73eb5a7754f5769dc4db100f860f784d66c557e227ada89525e76b8e50fff2bed2aceecd66c036f8d8843732a1ca039b4bc2be5e4521cd1a983d94a147588666e055f6190c0c670a0900dca634b7b2435a7949b3db125656b5bac941ccbd26fc9f234964b1fa87aed98dab8a6d2ef8c8a18d8932a32e1e751281f1ecba6240bf0234558549c857f3961b52dead069c285c1d0bff29e5252b0f8f8542b9711"}}, {0x4, &(0x7f0000002e40)=@lang_id={0x4, 0x3, 0x409}}, {0x4, &(0x7f0000002e80)=@lang_id={0x4, 0x3, 0xc01}}, {0xa, &(0x7f0000002ec0)=@string={0xa, 0x3, "b27cc138c3b4d117"}}]}) r3 = openat$mice(0xffffff9c, &(0x7f0000002f80), 0x400000) r4 = openat$tun(0xffffff9c, &(0x7f0000002fc0), 0x52a00, 0x0) ioctl$TUNSETOFFLOAD(r4, 0x400454d0, 0x2c) r5 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) ioctl$KVM_SET_REGS(r5, 0x4090ae82, &(0x7f0000003000)={[0x10, 0x0, 0x7, 0x9, 0x3, 0xff93, 0x8, 0xffffffffffffffff, 0x2, 0x8, 0x8000, 0x200, 0x0, 0x7, 0x6, 0x80], 0x2, 0x108800}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000030c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$F2FS_IOC_RESERVE_COMPRESS_BLOCKS(r7, 0x8008f513, &(0x7f0000003100)) ioctl$SIOCSIFHWADDR(r2, 0x8924, &(0x7f0000003140)={'ip6tnl0\x00', @random="4a7f9acfc811"}) io_setup(0x2, &(0x7f0000003180)) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x24, &(0x7f0000003200)={@remote, @initdev, 0x0}, &(0x7f0000003240)=0xc) getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f0000003280)={0x0, 0x0}, &(0x7f00000032c0)=0xc) getsockopt$inet6_mreq(r1, 0x29, 0x1c, &(0x7f0000003300)={@rand_addr, 0x0}, &(0x7f0000003340)=0x14) ioctl$DRM_IOCTL_GET_CLIENT(r3, 0xc0186405, &(0x7f0000003380)={0xffffffff, 0xf, {0xffffffffffffffff}, {0xee01}, 0x9, 0x1}) sendmsg$nl_xfrm(r1, &(0x7f00000037c0)={&(0x7f00000031c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000003780)={&(0x7f00000033c0)=@newae={0x384, 0x1e, 0x300, 0x70bd26, 0x25dfdbff, {{@in=@private=0xa010101, 0x4d2, 0xa, 0x3c}, @in=@loopback, 0x1, 0x3507}, [@tfcpad={0x8}, @encap={0x1c, 0x4, {0xfffffffffffffffd, 0x4e21, 0x4e23, @in=@loopback}}, @etimer_thresh={0x8, 0xc, 0x3}, @sa={0xe0, 0x6, {{@in=@local, @in=@empty, 0x4e24, 0x0, 0x4e23, 0x0, 0x2, 0x0, 0x0, 0x87, r8, r9}, {@in6=@local, 0x4d5, 0x3c}, @in6=@ipv4={'\x00', '\xff\xff', @private=0xa010100}, {0x5, 0xfff, 0xffffffffffffffb6, 0x1, 0x9, 0xffffffffffff9326, 0xd59e, 0x7}, {0xa5, 0x3, 0xa, 0x2}, {0x4, 0xe, 0x5}, 0x70bd2a, 0x3505, 0xa}}, @proto={0x5, 0x19, 0x32}, @algo_crypt={0x99, 0x2, {{'chacha20\x00'}, 0x288, "65c4bc3d355310b1df05dd028df306d7d4d80857ae792134144dcfcd2a145330aa24e95e027abd26f4ba74cd22475b1f3e0eb3f31bd9cf60e4d68607b7ae624170e9d04f2121802acf9e5dacf4e4e990e4"}}, @sa={0xe0, 0x6, {{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @in6=@dev={0xfe, 0x80, '\x00', 0x2e}, 0x4e23, 0x90cf, 0x4e21, 0x0, 0xa, 0x20, 0x80, 0x21, r10, r11}, {@in6=@mcast1, 0x4d6, 0x84}, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, {0x6, 0x0, 0xfffffffffffffffb, 0x849, 0x2b9b, 0x5, 0x40, 0x4}, {0xd, 0xffff, 0x100000000, 0x80}, {0x0, 0x5, 0x8}, 0x70bd2a, 0x0, 0xa, 0x2, 0x7}}, @etimer_thresh={0x8, 0xc, 0x7}, @tmpl={0x84, 0x5, [{{@in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x4d3, 0xff}, 0xa, @in=@loopback, 0x34ff, 0x3, 0x2, 0x5, 0x1, 0x10001}, {{@in6=@local, 0x4d6, 0x6c}, 0xa, @in=@dev={0xac, 0x14, 0x14, 0x10}, 0x3507, 0x3, 0x2, 0x0, 0x2, 0x3, 0x2}]}, @address_filter={0x28, 0x1a, {@in6=@dev={0xfe, 0x80, '\x00', 0x1f}, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0xa, 0x5, 0x4}}]}, 0x384}, 0x1, 0x0, 0x0, 0x800}, 0x20000010) r12 = syz_genetlink_get_family_id$ethtool(&(0x7f0000003840), r1) sendmsg$ETHTOOL_MSG_RINGS_SET(r3, &(0x7f0000003900)={&(0x7f0000003800)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000038c0)={&(0x7f0000003880)={0x2c, r12, 0x400, 0x70bd25, 0x25dfdbff, {}, [@ETHTOOL_A_RINGS_RX_MINI={0x8, 0x7, 0x124f}, @ETHTOOL_A_RINGS_RX={0x8, 0x6, 0x6}, @ETHTOOL_A_RINGS_TX={0x8, 0x9, 0xfffffff9}]}, 0x2c}, 0x1, 0x0, 0x0, 0x894}, 0x20000000) sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(r1, &(0x7f0000003bc0)={&(0x7f0000003940)={0x10, 0x0, 0x0, 0x20201450}, 0xc, &(0x7f0000003b80)={&(0x7f0000003980)={0x1f8, r12, 0x10, 0x70bd25, 0x25dfdbfc, {}, [@ETHTOOL_A_PRIVFLAGS_FLAGS={0x8, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_NOMASK={0x4}]}, @ETHTOOL_A_PRIVFLAGS_HEADER={0x58, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bridge\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'xfrm0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syzkaller1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @ETHTOOL_A_PRIVFLAGS_FLAGS={0x164, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_VALUE={0x83, 0x4, "d3c287abfb6a6e1acc03f9de404b9c8dd64df5bc1e3fe54d7211b5d80b6cf64eccb9788b62730c3bc92f7a5b0c6bd3a4af66ccfe4823933ed50817a4d79464c4ee8afe48b409e7451bb7889ef9df2c4bfbcce8da2ed5d9b44cf8fbd665adf3076e953c03438e9d92e7f14ca81bc6ce357da61824ce49a730c9ac75958857e0"}, @ETHTOOL_A_BITSET_MASK={0x12, 0x5, "2c081caa75b11efeebd9dd73565d"}, @ETHTOOL_A_BITSET_MASK={0x51, 0x5, "b1693eca0aa771b3da9be904abf31a0f86a4b8af153076db24a2dc35a8956116f9141ff92f86a5115b33f3e2c80186b7c9563e9d224a26f897790983b65f98a8d9d71b70d35186a9872a54f44c"}, @ETHTOOL_A_BITSET_MASK={0x6c, 0x5, "48cb91df7185e3723243eed31610441fccdd28ee2ec9a7236c6856812db135724a48c1c4631ceadbc60c3859f7f83dc7fdb938a6d450e42793a8a47e34f14ecbcb7223eb1a19842ee085fb6eacabde8a85a97dcc15ebf9a6b362fc99c3a18e8f2833a357a4ceefe9"}, @ETHTOOL_A_BITSET_NOMASK={0x4}]}, @ETHTOOL_A_PRIVFLAGS_HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond_slave_1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}]}, 0x1f8}, 0x1, 0x0, 0x0, 0x20008000}, 0x20000000) socket$inet_sctp(0x2, 0x1, 0x84) 1m21.348582453s ago: executing program 3 (id=207): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000340)='./file0\x00', &(0x7f0000000300)='./file0/file0\x00', 0x0, 0x2101c84, 0x0) mount$bind(0x0, &(0x7f00000002c0)='./file0\x00', 0x0, 0x80000, 0x0) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={0x0, r1, 0x0, 0x200}, 0x18) r2 = syz_open_dev$dri(&(0x7f00000002c0), 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r4, 0x40045431, &(0x7f0000000140)={0x0, 0x2000000, 0x0, 0x0, 0xa, "ff00f7000000000000000000af88008300"}) r5 = syz_open_pts(r4, 0x141601) r6 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r6}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x3938700}, {0x0, 0x3938700}}, 0x0) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) write(r5, &(0x7f0000000000)="d5", 0xfffffedf) ioctl$TCSETSF(r5, 0x5404, &(0x7f0000000080)={0x0, 0x0, 0xfffffffc, 0x0, 0x0, "682341f2fd71a6a76177920ea7e60c0ac7a4a5"}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000001c0)='sched_switch\x00', r3}, 0x18) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r2, 0xc04064a0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000440)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r2, 0xc05064a7, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r7}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="480000001000030500000000000000008bff2486615d6e27b5b38a28a8c700000000", @ANYRES32=0x0, @ANYBLOB="000000000410000020001280080001007674690014000280080004006401010108000200000000000800040000000000"], 0x48}}, 0x0) r8 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) setsockopt$bt_BT_DEFER_SETUP(r8, 0x112, 0x7, 0x0, 0x0) pipe(&(0x7f0000000080)) 1m21.120223612s ago: executing program 4 (id=214): r0 = socket(0x10, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f00000000c0)={'ip6gre0\x00', &(0x7f00000009c0)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, @mcast1, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0x0, 0x2}}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000080)={'syztnl1\x00', &(0x7f0000000180)={'ip6_vti0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @dev, @empty}}) setsockopt$bt_hci_HCI_FILTER(r0, 0x0, 0x2, &(0x7f0000000180)={0x7, [0x855, 0x6], 0x9}, 0x10) 1m21.05874527s ago: executing program 4 (id=215): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) r2 = socket(0x10, 0x3, 0x4) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=@newqdisc={0x24, 0x14, 0xf0b, 0xfffffffe, 0x8, {0x2, 0x0, 0x0, 0x0, {0xd}, {0x3}, {0x4, 0x6}}}, 0x24}}, 0x0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) syz_io_uring_setup(0x239, &(0x7f0000000380)={0x0, 0x1ffffe, 0x10100, 0x0, 0x0, 0x0, r1}, &(0x7f0000000180)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x1a, 0x0, @fd_index=0x4, 0x0, 0x0, 0x0, {}, 0x1}) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={0x20, 0x52, 0x1, 0x0, 0x0, {0xa}, [@typed={0xc, 0x1, 0x0, 0x0, @u64=0xfffffffe}]}, 0x20}}, 0x0) clock_gettime(0x0, &(0x7f00000002c0)={0x0, 0x0}) clock_nanosleep(0x2, 0x0, &(0x7f0000000500)={r6, r7+10000000}, 0x0) 1m20.439448272s ago: executing program 3 (id=217): r0 = socket$nl_generic(0x10, 0x3, 0x10) socket$alg(0x26, 0x5, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), r1) sendmsg$DEVLINK_CMD_RELOAD(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x3c, r2, 0x1, 0x0, 0x0, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8}}]}, 0x3c}}, 0x0) 1m20.258519091s ago: executing program 3 (id=220): r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000780)=@raw={'raw\x00', 0x8, 0x3, 0x2b4, 0x150, 0xffffffff, 0xffffffff, 0x150, 0xffffffff, 0x220, 0xffffffff, 0xffffffff, 0x220, 0xffffffff, 0x7fffffe, 0x0, {[{{@uncond, 0x6, 0x130, 0x150, 0x0, {}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'bm\x00', "00000100cbd047da9ca965f96ad5801f0514d363ee84bb895919d9490f6785fba3c4a44f1e25ecefef2a2d6054f5260ece5ce1a56a5ef73be11d65bfe8c37674024c183ebacdf741cea92ded3a9ca54de15dd9ec8ef62f9e000000000000000000ffffff7f00", 0x7d, 0x2}}]}, @unspec=@NOTRACK={0x20}}, {{@uncond, 0x0, 0x70, 0xd0}, @common=@SET={0x60}}], {{'\x00', 0x0, 0x70, 0x94}, {0x24}}}}, 0x310) 1m20.210367265s ago: executing program 34 (id=220): r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000780)=@raw={'raw\x00', 0x8, 0x3, 0x2b4, 0x150, 0xffffffff, 0xffffffff, 0x150, 0xffffffff, 0x220, 0xffffffff, 0xffffffff, 0x220, 0xffffffff, 0x7fffffe, 0x0, {[{{@uncond, 0x6, 0x130, 0x150, 0x0, {}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'bm\x00', "00000100cbd047da9ca965f96ad5801f0514d363ee84bb895919d9490f6785fba3c4a44f1e25ecefef2a2d6054f5260ece5ce1a56a5ef73be11d65bfe8c37674024c183ebacdf741cea92ded3a9ca54de15dd9ec8ef62f9e000000000000000000ffffff7f00", 0x7d, 0x2}}]}, @unspec=@NOTRACK={0x20}}, {{@uncond, 0x0, 0x70, 0xd0}, @common=@SET={0x60}}], {{'\x00', 0x0, 0x70, 0x94}, {0x24}}}}, 0x310) 1m20.123830812s ago: executing program 4 (id=221): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000340)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = syz_io_uring_setup(0x117, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x3, 0x3a6}, &(0x7f0000000180)=0x0, &(0x7f0000000200)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000080)=0xfffffc00, 0x0, 0x4) syz_io_uring_submit(r5, r6, &(0x7f00000000c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x7, 0x0, 0x0, 0x0, 0xc}) r7 = syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00') dup(0xffffffffffffffff) r8 = openat$6lowpan_enable(0xffffff9c, &(0x7f00000001c0), 0x2, 0x0) write$6lowpan_enable(r8, &(0x7f0000000280)='1', 0x1) setsockopt$RXRPC_UPGRADEABLE_SERVICE(r7, 0x110, 0x5, 0x0, 0x0) io_uring_enter(r4, 0x47f6, 0x80ffff, 0xa, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="40000000100000000000", @ANYRES32=0x0, @ANYBLOB="000000000000000020001280daff01006272696467650000100002800000040008000000"], 0x40}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) 1m19.126173374s ago: executing program 4 (id=225): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000340)='./file0\x00', &(0x7f0000000300)='./file0/file0\x00', 0x0, 0x2101c84, 0x0) mount$bind(0x0, &(0x7f00000002c0)='./file0\x00', 0x0, 0x80000, 0x0) move_mount(0xffffffffffffffff, &(0x7f0000000380)='./file0/file0\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x167) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={0x0, r1, 0x0, 0x200}, 0x18) r2 = syz_open_dev$dri(&(0x7f00000002c0), 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r4, 0x40045431, &(0x7f0000000140)={0x0, 0x2000000, 0x0, 0x0, 0xa, "ff00f7000000000000000000af88008300"}) r5 = syz_open_pts(r4, 0x141601) r6 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r6}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x3938700}, {0x0, 0x3938700}}, 0x0) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) write(r5, &(0x7f0000000000)="d5", 0xfffffedf) ioctl$TCSETSF(r5, 0x5404, &(0x7f0000000080)={0x0, 0x0, 0xfffffffc, 0x0, 0x0, "682341f2fd71a6a76177920ea7e60c0ac7a4a5"}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000001c0)='sched_switch\x00', r3}, 0x18) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r2, 0xc04064a0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000440)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r2, 0xc05064a7, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r7}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="480000001000030500000000000000008bff2486615d6e27b5b38a28a8c700000000", @ANYRES32=0x0, @ANYBLOB="000000000410000020001280080001007674690014000280080004006401010108000200000000000800040000000000"], 0x48}}, 0x0) r8 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) setsockopt$bt_BT_DEFER_SETUP(r8, 0x112, 0x7, 0x0, 0x0) pipe(&(0x7f0000000080)) 1m17.739298906s ago: executing program 4 (id=229): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) r2 = socket(0x10, 0x3, 0x4) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=@newqdisc={0x24, 0x14, 0xf0b, 0xfffffffe, 0x8, {0x2, 0x0, 0x0, 0x0, {0xd}, {0x3}, {0x4, 0x6}}}, 0x24}}, 0x0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) syz_io_uring_setup(0x239, &(0x7f0000000380)={0x0, 0x1ffffe, 0x10100, 0x0, 0x0, 0x0, r1}, &(0x7f0000000180)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x1a, 0x0, @fd_index=0x4, 0x0, 0x0, 0x0, {}, 0x1}) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={0x20, 0x52, 0x1, 0x0, 0x0, {0xa}, [@typed={0xc, 0x1, 0x0, 0x0, @u64=0xfffffffe}]}, 0x20}}, 0x0) clock_gettime(0x0, &(0x7f00000002c0)={0x0, 0x0}) clock_nanosleep(0x2, 0x0, &(0x7f0000000500)={r6, r7+10000000}, 0x0) 1m17.479385635s ago: executing program 4 (id=236): socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet6_udplite(0xa, 0x2, 0x88) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r0 = openat$kvm(0x0, &(0x7f0000000080), 0x2382, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) r2 = socket$nl_route(0x10, 0x3, 0x0) socket$inet6_dccp(0xa, 0x6, 0x0) socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x1, 0x803, 0x0) r4 = fsopen(&(0x7f0000000040)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) r5 = fsmount(r4, 0x0, 0x0) openat(r5, &(0x7f0000000040)='./file2\x00', 0x143042, 0x0) pipe(&(0x7f0000000100)) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="4400000010000304fcffffff3f00000000000000", @ANYRES32=0x0, @ANYBLOB="a5fdad8800000000140012800b0001006970766c616e00000400028008000500", @ANYRES32=r6, @ANYBLOB="ed050901", @ANYRES32=r6, @ANYBLOB], 0x44}, 0x1, 0x300000000000000, 0x0, 0x4004}, 0x0) 1m17.454084195s ago: executing program 35 (id=236): socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet6_udplite(0xa, 0x2, 0x88) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r0 = openat$kvm(0x0, &(0x7f0000000080), 0x2382, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) r2 = socket$nl_route(0x10, 0x3, 0x0) socket$inet6_dccp(0xa, 0x6, 0x0) socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x1, 0x803, 0x0) r4 = fsopen(&(0x7f0000000040)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) r5 = fsmount(r4, 0x0, 0x0) openat(r5, &(0x7f0000000040)='./file2\x00', 0x143042, 0x0) pipe(&(0x7f0000000100)) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="4400000010000304fcffffff3f00000000000000", @ANYRES32=0x0, @ANYBLOB="a5fdad8800000000140012800b0001006970766c616e00000400028008000500", @ANYRES32=r6, @ANYBLOB="ed050901", @ANYRES32=r6, @ANYBLOB], 0x44}, 0x1, 0x300000000000000, 0x0, 0x4004}, 0x0) 1m15.227181092s ago: executing program 6 (id=249): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x18, 0x3, &(0x7f0000000940)=ANY=[@ANYBLOB="1800000008000000000000000000000095"], &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f0000000780)='contention_end\x00', r1}, 0x10) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) ioctl$SIOCX25SFACILITIES(0xffffffffffffffff, 0x89e3, &(0x7f0000000080)={0x37, 0x800000, 0x8, 0x9, 0x8000}) write$bt_hci(r2, &(0x7f0000000080)=ANY=[], 0x6) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @local, 0x8}, 0x1c) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x14e22, 0x0, @ipv4}, 0x1c) listen(r0, 0x0) r3 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r3, &(0x7f0000000480)=[{&(0x7f0000000200)="a10100001400add427323b470c45b45602067fffffff81004e220000ff0000f03ac71008000000ff00ffffffffffffffe7ee00000000000000000200000000", 0x3f}, {&(0x7f0000000700)="6b3e7b6f91fbf72b37592dfb2e782f10d31a212219d0b6b9ac88ba1055cacb205111f200c748e4499dfa670705dbac48244b46530b6f2d2f31e454c819e646dc3c0e79ff83d6ddbe65522a50c54c865c52324c061602472942d04cec7fe629e61f94f8989ec11ba49efbc93ee12d8b1dae927e122034a49baac2b26a8aedf1defeecef9872ae16d743d45818354f7cb1bf02e4f898d503e45018ed8c47f1f940c559d5056e709437ebdfb21ac14c6fa50985482d2dabcf29b5b5ae47f1f1775ee04f057a28368640d9", 0xc9}, {&(0x7f0000000800)="6ba9beaacaa0b185d98892358b66aef04e2c27b3a90f3ee68cdc7089381356ae1cda1e6090a3fcd1c1bd5ec6ce43ed8f3e53cae99fc3b102bdf84930d8eb2104c2100820913bfc7d896956179f79f5b0981e64180d199fa90bd428b478a4b88bb826ce7b31eb50564a1936a9ef50811fe9adf15695d44afa3aed4907fad7a5b2f869f4d2966e2a45e97863736c5a248aeb1e67bb84461139bb", 0x99}], 0x3) 1m15.148999229s ago: executing program 6 (id=250): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) r2 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IP_VS_SO_SET_TIMEOUT(r2, 0x0, 0x48a, &(0x7f0000000080)={0x0, 0x0, 0x800}, 0xc) sendmsg$nl_xfrm(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000540)=ANY=[@ANYBLOB="480000001e0001000000000000000000ff0200000000400000000000000000010000000000000000fc010000000000000000000000000000000000000000000008000c"], 0x48}}, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r3) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="d80000000001010400000000000000000a0000003c0001802c00018014000300fe8000000000000000000000000000aa14000400ff0100000000000000000004000000010c00028005000100000000003c0002802c00018014000300fe8000000000000000000000000000aa14000400fe8800000000000000000000000000010c0002800500010000000000080007400000000844000e802c00018014000300ff02000000000000000000000000000114000400fc01000000000000000000000000000006000340000300000c000280040001", @ANYRES8=r3], 0xd8}, 0x1, 0x0, 0x0, 0x20040080}, 0x0) r6 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), r4) sendmsg$TIPC_CMD_ENABLE_BEARER(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="01000000000000000000010000000000000001410000001c00170000001f000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x4}, 0x0) r7 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$BTRFS_IOC_GET_SUPPORTED_FEATURES(r7, 0x50009405, 0x0) ioctl$SIOCSIFHWADDR(r3, 0x8923, &(0x7f0000002280)={'syzkaller0\x00', @local}) 1m14.748447608s ago: executing program 6 (id=252): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r0 = getpid() socket$nl_netfilter(0x10, 0x3, 0xc) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) pipe2$watch_queue(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) sendmsg$alg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000100)='V', 0x1}, {&(0x7f0000000240)="b23d3405704a18d103506613ea01ae39ff53315435fa0612d85503e53e120104b5af10bb27a7120694b530043343e1e80ee6de636fdb3fdd97a16d445d6a609365de67857569688e9bd6", 0x4a}, {&(0x7f0000000140)}, {&(0x7f0000000300)="81e3233a001ff5aaaf93626c2584794c3e3d11cc0439a9d22d0fe738bca1e189bef281e1e39ed82802df680f90942429e5840fdd50ac574c30c836983daa5594aadc186a0937b22e4587d76d6efa0958f108444428207378ea3ff35a125f53f70d39acda2996fafce24fe7d53cb85836598581a6044eca08ae37517126ea446cad883050154263cc8fdaa98bb6731b44ea7c6ef45949a5cda7b9a60ba03683f0eca4a370bd5b424182185cd9a1f9ba2eab45d89828974776bf153dacd97df2433082fd72bcdfb18778d62d3c44ab592d3efb653fa94a9185a4327f4d39358dd3781de031608ce89e77b79fef09c140f611664e0cf664940ee8", 0xf9}, {&(0x7f00000007c0)="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", 0x1a3}, {&(0x7f00000001c0)="2ec753e63b3861c063a727844c5ff271b02503f4bebe9e488521fe4c362ac0f281508eb3", 0x24}], 0x6, &(0x7f0000000980)=ANY=[@ANYBLOB="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"], 0x104, 0x2004084c}, 0x40040) mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x2040000, &(0x7f0000000400)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f0000000140)='./bus\x00') mkdir(&(0x7f0000000000)='./control\x00', 0x0) open$dir(&(0x7f00000002c0)='./control/file0\x00', 0x80040, 0x0) rmdir(&(0x7f0000000040)='./control\x00') mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) connect$unix(r1, &(0x7f00000004c0)=@abs={0x1, 0x0, 0x4e23}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x400000000000041, 0x0) syz_genetlink_get_family_id$wireguard(&(0x7f0000000480), r1) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_OPENQRY(r2, 0x4b46, &(0x7f00000000c0)) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) futex(0x0, 0x2, 0x0, 0x0, 0x0, 0x43000001) socket$inet6_sctp(0xa, 0x5, 0x84) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x440041, 0x0) getpeername$packet(r1, 0x0, &(0x7f0000000640)) 1m14.429278103s ago: executing program 6 (id=255): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000340)='./file0\x00', &(0x7f0000000300)='./file0/file0\x00', 0x0, 0x2101c84, 0x0) mount$bind(0x0, &(0x7f00000002c0)='./file0\x00', 0x0, 0x80000, 0x0) move_mount(0xffffffffffffffff, &(0x7f0000000380)='./file0/file0\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x167) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={0x0, r1, 0x0, 0x200}, 0x18) r2 = syz_open_dev$dri(&(0x7f00000002c0), 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r4, 0x40045431, &(0x7f0000000140)={0x0, 0x2000000, 0x0, 0x0, 0xa, "ff00f7000000000000000000af88008300"}) r5 = syz_open_pts(r4, 0x141601) r6 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r6}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x3938700}, {0x0, 0x3938700}}, 0x0) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) write(r5, &(0x7f0000000000)="d5", 0xfffffedf) ioctl$TCSETSF(r5, 0x5404, &(0x7f0000000080)={0x0, 0x0, 0xfffffffc, 0x0, 0x0, "682341f2fd71a6a76177920ea7e60c0ac7a4a5"}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000001c0)='sched_switch\x00', r3}, 0x18) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r2, 0xc04064a0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000440)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r2, 0xc05064a7, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r7}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="480000001000030500000000000000008bff2486615d6e27b5b38a28a8c700000000", @ANYRES32=0x0, @ANYBLOB="000000000410000020001280080001007674690014000280080004006401010108000200000000000800040000000000"], 0x48}}, 0x0) r8 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) setsockopt$bt_BT_DEFER_SETUP(r8, 0x112, 0x7, 0x0, 0x0) pipe(&(0x7f0000000080)) 1m12.456831052s ago: executing program 6 (id=264): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000340)='./file0\x00', &(0x7f0000000300)='./file0/file0\x00', 0x0, 0x2101c84, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000380)='./file0/file0\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x167) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={0x0, r2, 0x0, 0x200}, 0x18) r3 = syz_open_dev$dri(&(0x7f00000002c0), 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r5, 0x40045431, &(0x7f0000000140)={0x0, 0x2000000, 0x0, 0x0, 0xa, "ff00f7000000000000000000af88008300"}) r6 = syz_open_pts(r5, 0x141601) r7 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r7}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x3938700}, {0x0, 0x3938700}}, 0x0) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) write(r6, &(0x7f0000000000)="d5", 0xfffffedf) ioctl$TCSETSF(r6, 0x5404, &(0x7f0000000080)={0x0, 0x0, 0xfffffffc, 0x0, 0x0, "682341f2fd71a6a76177920ea7e60c0ac7a4a5"}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000001c0)='sched_switch\x00', r4}, 0x18) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r3, 0xc04064a0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000440)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r3, 0xc05064a7, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r8}) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="480000001000030500000000000000008bff2486615d6e27b5b38a28a8c700000000", @ANYRES32=0x0, @ANYBLOB="000000000410000020001280080001007674690014000280080004006401010108000200000000000800040000000000"], 0x48}}, 0x0) r9 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) setsockopt$bt_BT_DEFER_SETUP(r9, 0x112, 0x7, 0x0, 0x0) pipe(&(0x7f0000000080)) 1m12.218791815s ago: executing program 6 (id=266): r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) listen(r0, 0x1ad72f7) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000940)={'macsec0\x00'}) write$UHID_CREATE2(0xffffffffffffffff, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x800}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r5, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x41}}, 0x10) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000180)={'syzkaller0\x00', 0x7101}) r6 = syz_open_dev$tty20(0xc, 0x4, 0x0) chdir(&(0x7f0000000280)='./file0\x00') ioctl$TIOCL_GETMOUSEREPORTING(r6, 0x5412, &(0x7f0000000040)=0xd) unshare(0x62040200) syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) accept4$netrom(r0, 0x0, 0x0, 0x80000) 1m12.137039452s ago: executing program 36 (id=266): r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) listen(r0, 0x1ad72f7) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000940)={'macsec0\x00'}) write$UHID_CREATE2(0xffffffffffffffff, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x800}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r5, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x41}}, 0x10) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000180)={'syzkaller0\x00', 0x7101}) r6 = syz_open_dev$tty20(0xc, 0x4, 0x0) chdir(&(0x7f0000000280)='./file0\x00') ioctl$TIOCL_GETMOUSEREPORTING(r6, 0x5412, &(0x7f0000000040)=0xd) unshare(0x62040200) syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) accept4$netrom(r0, 0x0, 0x0, 0x80000) 1m9.23901628s ago: executing program 2 (id=277): r0 = syz_open_dev$radio(&(0x7f0000000100), 0x3, 0x2) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = getpid() process_vm_readv(r2, &(0x7f0000008400)=[{&(0x7f0000000300)=""/43, 0x7ffff000}, {&(0x7f0000000480)=""/165, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x2aa, 0x0) (async) r3 = syz_open_procfs(r2, &(0x7f0000000000)='net/ip_mr_cache\x00') syz_genetlink_get_family_id$SEG6(&(0x7f0000000040), r3) (async) write$cgroup_int(r3, 0x0, 0x0) (async) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000040)=@framed, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x34, '\x00', 0x0, 0x0, r3, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000140)='contention_begin\x00', r4, 0x0, 0x9}, 0x18) (async, rerun: 64) sendmsg$nl_generic(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001280)={0x18, 0x3b, 0x707, 0x0, 0x2, {0x3, 0x7c}, [@nested={0x4, 0xc0}]}, 0x18}}, 0x0) (rerun: 64) r5 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) (async) r6 = socket$phonet_pipe(0x23, 0x5, 0x2) listen(r6, 0x8000) (async, rerun: 32) listen(r6, 0x9) (async, rerun: 32) write$UHID_INPUT(r5, &(0x7f0000001300)={0x8, {"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", 0x1000}}, 0x1006) (async) r7 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000240)={'veth1_macvtap\x00', 0x0}) (async) r9 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r9, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=@getchain={0x24, 0x11, 0x839, 0x0, 0x0, {0x0, 0x0, 0x0, r8}}, 0x24}}, 0x0) (async, rerun: 64) r10 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) (rerun: 64) sendmsg$BATADV_CMD_GET_HARDIF(r9, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x3c, r10, 0x4, 0x70bd2d, 0x25dfdbfc, {}, [@BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0xfffffff7}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x7}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x8001}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0xc0000000}]}, 0x3c}, 0x1, 0x0, 0x0, 0x10}, 0x20000040) (async) r11 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) r12 = socket$inet6_udplite(0xa, 0x2, 0x88) setitimer(0x1, &(0x7f0000000580)={{0x77359400}, {0x0, 0xea60}}, 0x0) (async) setitimer(0x1, &(0x7f0000000000)={{0x77359400}, {0x77359400}}, 0x0) (async) setsockopt$IP6T_SO_SET_REPLACE(r12, 0x29, 0x40, &(0x7f0000001680)=@raw={'raw\x00', 0x3c1, 0x3, 0x2dc, 0x0, 0x111, 0x4b4, 0xec, 0xd4feffff, 0x214, 0x202, 0x225, 0x214, 0x278, 0x3, 0x0, {[{{@ipv6={@dev={0xfe, 0x80, '\x00', 0xfc}, @empty, [], [], 'veth1_vlan\x00', 'team_slave_0\x00'}, 0x0, 0xa4, 0xec}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x81, 'syz1\x00'}}}, {{@ipv6={@empty, @ipv4={'\x00', '\xff\xff', @private=0xa010101}, [], [0x0, 0xffffffff], 'veth1_to_hsr\x00', 'erspan0\x00'}, 0x0, 0xe0, 0x128, 0x0, {}, [@common=@unspec=@limit={{0x3c}, {0x0, 0x8000000}}]}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0xa, 'syz1\x00', {0x7f}}}}], {{'\x00', 0x0, 0xa4, 0xc8}, {0x24}}}}, 0x338) (async) syz_emit_ethernet(0x83, &(0x7f0000000180)=ANY=[], 0x0) (async, rerun: 64) ioctl$TIOCPKT(r11, 0x5420, 0x0) (rerun: 64) ioctl$VIDIOC_DQEVENT(r5, 0x80785659, &(0x7f0000000000)={0x0, @frame_sync}) (async) ioctl$VIDIOC_SUBSCRIBE_EVENT(r0, 0x4020565a, &(0x7f0000000140)={0x3, 0x98f90f, 0x1}) 1m9.118900206s ago: executing program 2 (id=279): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x4e42, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) write$6lowpan_enable(r1, &(0x7f0000000300)='1', 0x1) sendmsg$NFT_BATCH(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a01080000000000000000020000000900020073797a2a0000000008000440000000000900010073797a3000000000080003400000000a14000000110001"], 0x64}}, 0x0) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_CONTEXT(r3, 0x84, 0x11, &(0x7f0000000380)={0x0, 0x5}, 0x8) sendmsg$NFT_BATCH(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[], 0x74}, 0x1, 0x0, 0x0, 0x20000080}, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x103802, 0x0) r5 = openat$incfs(0xffffffffffffff9c, &(0x7f0000000180)='.log\x00', 0x20000, 0x91) io_uring_register$IORING_UNREGISTER_BUFFERS(r5, 0x1, 0x0, 0x0) close(r4) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)) r6 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000340), r6) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', @broadcast}) r7 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x1c3842, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000040)={'rose0\x00', 0x7101}) write$cgroup_devices(r7, &(0x7f0000000100)=ANY=[@ANYBLOB="1e030800d3ff9801288547"], 0xffdd) write$cgroup_devices(r0, &(0x7f0000000140)=ANY=[@ANYBLOB="1e001400008c71ef28ff4b"], 0xffdd) 1m8.168606064s ago: executing program 2 (id=281): mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) sched_setscheduler(0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x0, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="180200004000000000000000000000008500000027000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f0000000140)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x71) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r0, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x10, 0xffffffffffffffff, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_int(r1, 0x6, 0xc, &(0x7f0000000040), &(0x7f0000000080)=0x4) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) r2 = socket(0x840000000002, 0x3, 0x100) connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10) sendmmsg$inet(r2, &(0x7f0000005240)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffdef}, 0xfffffdef}], 0x72368e, 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r3, 0x4000000000000, 0x40, &(0x7f0000000340)=@raw={'raw\x00', 0x4001, 0x3, 0x2b0, 0x138, 0x0, 0x148, 0x0, 0x148, 0x218, 0x240, 0x240, 0x218, 0x240, 0x7fffffe, 0x0, {[{{@ip={@loopback, @local, 0x0, 0x0, 'ip6gretap0\x00', 'netdevsim0\x00'}, 0x0, 0xf0, 0x138, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'lo\x00', {0x0, 0x0, 0x1ff, 0x0, 0x0, 0xed, 0x7}}}, @common=@unspec=@connlabel={{0x28}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@private1, 'ip6erspan0\x00'}}}, {{@ip={@local, @loopback, 0x0, 0x0, 'veth0_vlan\x00', 'macvtap0\x00'}, 0x0, 0xc0, 0xe0, 0x0, {}, [@inet=@rpfilter={{0x28}}, @inet=@rpfilter={{0x28, 'rpfilter\x00', 0x2}}]}, @unspec=@TRACE={0x20}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x310) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$IPVS_CMD_NEW_SERVICE(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000001c0)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="01000000000000000000010000004000018007000600666f00000800080000000000060001000200000008000500000000000c0007000000000000000000080009000000000008000b"], 0x54}}, 0x0) syz_open_procfs$userns(0x0, &(0x7f0000000000)) syz_genetlink_get_family_id$ethtool(&(0x7f0000000140), r4) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000180)={'syztnl1\x00', &(0x7f0000000300)={'sit0\x00', 0x0, 0x8000, 0x700, 0xfffffff9, 0x8, {{0x1d, 0x4, 0x1, 0x17, 0x74, 0x65, 0x0, 0x9, 0x29, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @initdev={0xac, 0x1e, 0x1, 0x0}, {[@cipso={0x86, 0x22, 0x0, [{0x2, 0x2}, {0x7, 0x5, 'EnI'}, {0x1, 0x2}, {0x0, 0x8, "1a77e46e08c1"}, {0x2, 0xb, "128805954b432fdac8"}]}, @lsrr={0x83, 0xb, 0x9e, [@loopback, @broadcast]}, @lsrr={0x83, 0xb, 0x7c, [@empty, @multicast1]}, @rr={0x7, 0x27, 0xb2, [@local, @empty, @local, @broadcast, @remote, @private=0xa010100, @remote, @multicast2, @broadcast]}, @end]}}}}}) r6 = creat(&(0x7f0000000280)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000000)={'trans=fd,', {'rfdno', 0x3d, r6}}) sendmsg$ETHTOOL_MSG_CHANNELS_GET(0xffffffffffffffff, 0x0, 0x8004) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) madvise(&(0x7f0000000000/0x600000)=nil, 0x600722, 0x19) openat$sndseq(0xffffffffffffff9c, 0x0, 0x42002) 1m7.928290471s ago: executing program 2 (id=283): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000340)='./file0\x00', &(0x7f0000000300)='./file0/file0\x00', 0x0, 0x2101c84, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000380)='./file0/file0\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x167) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={0x0, r2, 0x0, 0x200}, 0x18) r3 = syz_open_dev$dri(&(0x7f00000002c0), 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r5, 0x40045431, &(0x7f0000000140)={0x0, 0x2000000, 0x0, 0x0, 0xa, "ff00f7000000000000000000af88008300"}) r6 = syz_open_pts(r5, 0x141601) r7 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r7}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x3938700}, {0x0, 0x3938700}}, 0x0) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) write(r6, &(0x7f0000000000)="d5", 0xfffffedf) ioctl$TCSETSF(r6, 0x5404, &(0x7f0000000080)={0x0, 0x0, 0xfffffffc, 0x0, 0x0, "682341f2fd71a6a76177920ea7e60c0ac7a4a5"}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000001c0)='sched_switch\x00', r4}, 0x18) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r3, 0xc04064a0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000440)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r3, 0xc05064a7, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r8}) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="480000001000030500000000000000008bff2486615d6e27b5b38a28a8c700000000", @ANYRES32=0x0, @ANYBLOB="000000000410000020001280080001007674690014000280080004006401010108000200000000000800040000000000"], 0x48}}, 0x0) r9 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) setsockopt$bt_BT_DEFER_SETUP(r9, 0x112, 0x7, 0x0, 0x0) pipe(&(0x7f0000000080)) 1m6.788529598s ago: executing program 2 (id=290): timer_create(0x1, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004}, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) mkdir(&(0x7f00000003c0)='./file1\x00', 0x0) mount(0x0, &(0x7f0000000240)='./file1\x00', &(0x7f0000000000)='tmpfs\x00', 0x2100000, &(0x7f0000000300)='usrquota') chdir(&(0x7f0000000140)='./file1\x00') r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='freezer.parent_freezing\x00', 0x275a, 0x0) r1 = socket(0x2, 0x80805, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f0000000240)={0x0, 0x100004, 0xf642fc0797ed2193}, 0xc) r2 = socket$unix(0x1, 0x4, 0x0) recvmsg$unix(r2, &(0x7f0000000280)={&(0x7f0000000080), 0x6e, &(0x7f0000000100)=[{&(0x7f0000000400)=""/164, 0xa4}], 0x1, &(0x7f00000004c0)=[@cred={{0x18}}, @cred={{0x18}}, @cred={{0x18}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0xc}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}], 0x90}, 0x10000) quotactl_fd$Q_SETQUOTA(r0, 0xffffffff80000900, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000977000/0x4000)=nil, 0x4000, 0x4000, 0x3, &(0x7f0000ffc000/0x4000)=nil) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) mbind(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x0, 0x2) 1m6.558675163s ago: executing program 2 (id=291): r0 = syz_open_dev$I2C(&(0x7f0000000200), 0x0, 0x0) ioctl$I2C_SMBUS(r0, 0x720, &(0x7f00000002c0)={0x0, 0xfc, 0x2, &(0x7f00000008c0)={0x1b, "cc3df0b97c31c635d41f1db17008852daad3915d105cea6345c0bd492ca56f24ee"}}) openat$tun(0xffffff9c, &(0x7f0000000000), 0x240, 0x0) 1m6.501638833s ago: executing program 37 (id=291): r0 = syz_open_dev$I2C(&(0x7f0000000200), 0x0, 0x0) ioctl$I2C_SMBUS(r0, 0x720, &(0x7f00000002c0)={0x0, 0xfc, 0x2, &(0x7f00000008c0)={0x1b, "cc3df0b97c31c635d41f1db17008852daad3915d105cea6345c0bd492ca56f24ee"}}) openat$tun(0xffffff9c, &(0x7f0000000000), 0x240, 0x0) 48.768920709s ago: executing program 9 (id=415): r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) listen(r0, 0x1ad72f7) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000940)={'macsec0\x00', 0x0}) write$UHID_CREATE2(0xffffffffffffffff, 0x0, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x800}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r4 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r4, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r7 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r7, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x41}}, 0x10) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000180)={'syzkaller0\x00', 0x7101}) r8 = syz_open_dev$tty20(0xc, 0x4, 0x0) chdir(&(0x7f0000000280)='./file0\x00') ioctl$TIOCL_GETMOUSEREPORTING(r8, 0x5412, &(0x7f0000000040)=0xd) syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="300000001c00d78d40150724e490000007000000", @ANYRES32=r2, @ANYBLOB="8000a6000a0002"], 0x30}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) accept4$netrom(r0, 0x0, 0x0, 0x80000) 47.868032239s ago: executing program 9 (id=419): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x10, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x8, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000340), 0x10, 0x37, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) (async) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) getpid() socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r0, &(0x7f0000002540)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) (async) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2) r2 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r2, &(0x7f0000000040)={0x18, 0x0, {0x2, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, 'bridge_slave_0\x00'}}, 0x1e) sendmmsg(r2, &(0x7f00000035c0)=[{{0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000440)="9f8c8f6019", 0x5}, {0x0, 0x300}], 0x2}}], 0x1, 0x800) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f0000000000)) r3 = socket$xdp(0x2c, 0x3, 0x0) r4 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000080)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000100)=0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r4, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r4, 0x84, 0x76, &(0x7f0000000480)={r5}, &(0x7f00000004c0)=0x8) (async) getsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r4, 0x84, 0x76, &(0x7f0000000480)={r5}, &(0x7f00000004c0)=0x8) syz_clone3(&(0x7f0000001880)={0x100000200, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) (async) r6 = syz_clone3(&(0x7f0000001880)={0x100000200, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) tgkill(r6, r6, 0x21) (async) tgkill(r6, r6, 0x21) setsockopt$XDP_UMEM_REG(r3, 0x11b, 0x4, &(0x7f0000000040)={&(0x7f00000023c0)=""/241, 0x1115000, 0x0, 0x0, 0x2}, 0x1c) ioctl$sock_SIOCBRDELBR(r0, 0x89a1, &(0x7f0000000100)='wlan1\x00') (async) ioctl$sock_SIOCBRDELBR(r0, 0x89a1, &(0x7f0000000100)='wlan1\x00') syz_open_dev$loop(&(0x7f00000001c0), 0x0, 0x0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) (async) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) syz_open_procfs(0x0, 0x0) 47.75868474s ago: executing program 9 (id=421): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) r1 = syz_open_dev$dri(&(0x7f00000001c0), 0x0, 0xc0802) ioctl$DRM_IOCTL_MODE_ADDFB(r1, 0xc01c64ae, &(0x7f0000000380)={0x0, 0xe03, 0x0, 0x0, 0x1}) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) (async) socket$kcm(0x2, 0xa, 0x2) (async) r2 = socket$nl_rdma(0x10, 0x3, 0x14) (async) r3 = socket(0x10, 0x3, 0x0) r4 = socket$inet6_dccp(0xa, 0x6, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000007c0)=@newqdisc={0x1f8, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, r5, {}, {0xfff2, 0xa}, {0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x1c8, 0x2, {{0x10, [0xd, 0x10, 0x2, 0x5, 0xd, 0xa, 0xd, 0xa, 0x3, 0x4, 0x6, 0xb, 0xb, 0x2, 0x6, 0x8], 0x0, [0x8, 0xfffb, 0xed5, 0x8, 0x0, 0x3, 0x5, 0x3, 0x8001, 0x6, 0x7, 0x0, 0x789, 0x8001, 0xc5, 0x200], [0x9, 0x0, 0x6, 0x8, 0x7, 0x4, 0x8, 0x400, 0x4db, 0xb6, 0x3, 0x8001, 0x6605, 0x5b7f, 0x101, 0x1]}, [@TCA_MQPRIO_SHAPER={0x6, 0x2, 0x1}, @TCA_MQPRIO_MIN_RATE64={0x34, 0x3, 0x0, 0x1, [{0xc, 0x3, 0x3}, {0xc, 0x3, 0xc}, {0xc, 0x3, 0x4d89}, {0xc, 0x3, 0xffff}]}, @TCA_MQPRIO_MIN_RATE64={0x7c, 0x3, 0x0, 0x1, [{0xc, 0x3, 0x8}, {0xc, 0x3, 0x9}, {0xc, 0x3, 0x3}, {0xc, 0x3, 0xac4}, {0xc, 0x3, 0x81}, {0xc, 0x3, 0xffffffffffffffff}, {0xc, 0x3, 0x6}, {0xc, 0x3, 0x2}, {0xc, 0x3, 0x4}, {0xc}]}, @TCA_MQPRIO_MAX_RATE64={0xb8, 0x4, 0x0, 0x1, [{0xc, 0x4, 0x8}, {0xc, 0x4, 0x4}, {0xc, 0x4, 0x5}, {0xc, 0x4, 0xf02}, {0xc, 0x4, 0x18}, {0xc, 0x4, 0x8}, {0xc, 0x4, 0xc}, {0xc, 0x4, 0xe75}, {0xc, 0x4, 0x8}, {0xc, 0x4, 0x7}, {0xc, 0x4, 0x3}, {0xc, 0x4, 0x5}, {0xc, 0x4, 0x3}, {0xc, 0x4, 0x8}, {0xc, 0x4, 0x2}]}]}}}]}, 0x1f8}, 0x1, 0x0, 0x0, 0x55}, 0x4000) sendmsg$RDMA_NLDEV_CMD_RES_PD_GET(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000340)={0x18, 0x140e, 0x101, 0x70bd2a, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}]}, 0x18}, 0x1, 0x0, 0x0, 0x4000040}, 0x0) ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000000080)={'veth1_to_hsr\x00', @dev={'\xaa\xaa\xaa\xaa\xaa', 0x16}}) (async) write$tun(r0, &(0x7f0000000240)={@val={0x0, 0x800}, @val={0x2, 0x4, 0x6, 0x3, 0x80, 0x6}, @mpls={[], @ipv4=@udp={{0xe, 0x4, 0x0, 0x8, 0xfc0, 0x0, 0x0, 0x9, 0x11, 0x0, @rand_addr=0x64010102, @empty, {[@rr={0x7, 0x23, 0x40, [@local, @initdev={0xac, 0x1e, 0x0, 0x0}, @remote, @empty, @multicast2, @local, @broadcast, @local]}]}}, {0x0, 0x4e23, 0xf88, 0x0, @gue={{0x2, 0x1, 0x2, 0x6f, 0x100}, "8ea410e12234c318c71247e47c7513b57d2838d916c35d77b61f09289b4b5af9668ae592f8db026d71a967eaf781e800ec76ebefce0876a953b860664d8359677d5ad3fd80670bce812a915d117c2d32fa56d4e6f71f6c9ec2983d53e06201100251dda36b352d160fe2f9e0ed399b6127b2b0aaa499013308f51c0da8c8e5cd47e7065e06ad4231c53d70ee7be261fd5e8d0e41827cae430a797ec9bf5db4c00449259a20957d5e76b11fc133546fc0585332d2d4d1729d85935a9f7d097e48fd9f93ef1bb09d16978191dfdaee95e6cf75b8509cd37acbc172162a982ba2b021991ed06a83668ee1e4629bcfadcdc6c8e0825cd98daee7c6e2696dc212c40f4801de667698f0acb1288ba430e82174adef047132c42790afda758dc87d4089c7380fd849ef454b3c0d1dda3b5adfe049110fa95ed4b3d7eb07f3b3b0287ef66b5da462a9cf4718d22ddb4741d983309a360ac6801c8e4f47daf2acb297ae15a01701475ae6e7bbb04e6b069f55b7f5e6e371f3b107ef532ef435a46fe53aa0dcbf4a528ffe25c6fb1263e11dce253ade30c9d02aeb01808d649d043dd7e84d241d3994ce5794e492c817f3c63c0847cd3ec3c2b6504a78b2fe4108c0786e9b3166ac1fd08a79063d478cf69679868a85ae5461306db0ed7cd1db1b2473073b2e0eba621d8aa993a36f97cc77acc5d6dfa9d0823ecf40df9c0d708c5cb717124208838122a432bb5979e07bb84c19cc73f546d8af954f5901e40cf04d65609e13bbd0f4eebaa477eccd01df677b4d4fae389ed8a0e1f821baf1511af9d739c290b919f4d7143f73fa6c2a25dc91862311605e6fe52cb2585f907149cfdf2612d5aa172cfa443456618fbf6e21c54c2b3dd9f0170ab85e9ddab9760652fa4e1d80cb7669ceb47460fd95de2c2658e62616c7ae185b06a7797e5b79b1647735a395b12e4a3736ba82ab1fc1af816a0ae2a3f90430b43af5567cd01bf856c74c0b98aae12ff8e466595aabde2f425bd9954de21051b8d1be82fb595434bf7b47cd718c0d5a0f729f762aedc056fd867166c83c503cdfcbcdb30c213857292b6cca1f0544f018bc2eb690bbcea3e0cc776f6575da58529541b84eb4185d853794166b07e562894dabe7db92c4e6dfe24c2f14cb0b6dc8698665ea02f7990b0a2c6ee9cc08085c0670da051d8c20c7c69d01a31315f28185fb055563daed38a1a1ce24f0c6d407d5d96380eb35a232f154d402d91c49f021d5e430d71c87ec614e14634db139074f039aabf894b26032da972e8f75d43e828b6068f0498f54a44e5184bb2a58e8a21e7aa659a3bb8be8a7cfd9a077ae67c685015c9dcb73462f80abfaa5405e169cf6a6a4e7d7bb4e0ebd33ef099d9336e737944e8f504e147cfcb55498349f50de97ba955f3b7102e4bb25fd3b5c384610f32cdbc8f2fd2de6d3968401d11e9473af607c2415ff9432733a09e2c8fa406234e0b4d1c48e1b4e67a9d51295aae2cc9b7e00daaaafd70bc11ac5c06815cf393a27b8b6aee95ae71e7a3ecf2e29f771fc29d482ce6f45d1e00c18b94f47d79ce50ce776a9e9d8dfd9e00a27953897b441557e35df9239516d15c36bc97669572fda488cdc8207938f688fd2cd0a049599c1b131b7840339b1fd4c0225511b0071be8bfc128e8999f56b5148834ce87df586cd93162621dac860b1e22b0f849bfb7e0a18a3739bb1fa7c79f0cc72f39c1de6901c0cec38935bbd84eabd4b177439d1601bed2ab59c2b3dff65726c47ab48352a2dbb76a6fba2137c03b190a6f75716160e11a0e837874cd72b86946f00939e4b9c78736837c9778f883286598aca2c31971c6cc6e13e0ce4ea11c0dea7bc8e8c930006eaf5e4b58be6644e7ca14e97d8550f692a1ed932a6d21b78886eb06515790cac70cb4de7b78f0b0ef4c525094a0dd9f89bb29cff115caa6703065375c8b61a89b64f4e3f55e57fe7cdd86c9009979365c9ce67d91ca8cd52c3143e0a6d0d73bb6554c3a4349a4095748afa83c4a9cbc28e2fa89aca540a81578bdb77db181dda55279a987e663b04d2e4824ae9a7804ec7c2a9ed5178b633e55dfe7c6a3fbad664ef85fc55953abd94c8804dbeada3f84e87a7bf0a3524c49b1b0fe5c9f5ce4d5c8f345acd743ab0eed20cb12574bc101bf54d26cea75c9a33c471fd6fb9c99c88900661ec4fdaed5af401f03b1610bfa2e8e3c31cd0e648224f316f1408526a7a84142d15827e48a7163c0a1edce21582e6aa394ec086b42c145be3f713c7114ee044d76e020b61897b9b8b2d07773a924362d1e988ada081a425a12d600c6d2b0eeca5e2da56ebca37e607478c4435d81df82451eb9062b469576d6bb4466b708be82c9984bd9d8cfe3cf7c11cf6cda384ce027362c4380771b4cf06931810946f3cc0541a9be21e3c98c3ed8402f5ba2e07a5bf139ed2b914390180c93ab99f35d76c581aee208a1438470946c2c269f45715cf23a03f532d89327f7531a631ff85f4c12f873fc50cd99be1dc8357e751fa85a251c1232ee359d9443b9addebe356ff09f9b7e0352e437c16132d654e820c8052b9c1cd8978db920c47034952fea567aed91cfebd5c21918a01320807a5c1139388efc5f4f04b6738da53881125fa273d00502cac832a71f208b4b048d62d1b03f4977a621c19e728a57ae0725bbbf25a1b0e072a4cd156394accd34e691ad190f49a359287c5739b48922f2bbdd3830ab6390c0402012fc27a1e71894abe8effb4fd450c3c635270cec86699f06b85917f70b9fd2d7affdddf8cb4c2306f4d1cfe819ee871b26179070eb844086d5d8a3ffb6caa25a44299142e0487070ef315266db235c81fa6547c0227162d988bb00fb915ca4db14edc4a38c0d6d99a5048cbb1decba083b4b4feb7d87f82e979ebdd569407b12e4280c48a61a094d0a777bf2c9c3d34aaadbcd0e99154d47f62168d7756950ac5993faf3f52d1fabdb09dd29eb719cd41ea86584f8e973b008f87cd39dd9800a171dbf4ea6e7e5e4cc8ce999a83f11e819a2bbca53c404f37196adde1f26e630c54fd38651dc9551ed7c2406431575bbbe55f8cb54657629630530e3c414ccf92e4507d5e1516d5f62244916b65215fe6f843898b6c52cd212c910a1686c1a7c79159e8085aaafbc2540e3f1ff25d22cfa85fea4db7c2afd5512873e94cd5cf79f9edbe3de6d63d2dbf481ba2b0d602930ff7e07f9f8f6f33a878d3c3f9b072bfe0c24b49a5abe52f0bee7447c0867e1db7e1f45bcc2f129aee6ae4adcf1b64647138b7f371078627a98d8aaf0fa841b2af0bbb7e2a97770129c266dfb6b0767bb4f37e935386ace94e86b7ccca831f3c450e7156715257ee7ee0241264c4f26922c60ab037e092c1a2e049f167c1f1d9e6ad75d2d552d45e55c28579d0b1359a97ad5821f3bf4ccf8ad22caa6b6a4af6199c0182b71b6fbcccb1de3f218d78ed45e79294bcec19762ab943d331329736cabea3066f3a10fc342294bd17e94bd1d801f73ad4437fe82421298578a2da8eef37d4c97bb565ed1c6f1d464a3f2f7908f22bbd9c20dd806545c2a97cd39b42144280ed68a4aac138758128a6b2d7315589155109e94dfe335d7518d03613c430af8ab2e396176bc18a5f2d44ee017dfa976da91dfc9e60b6edec829640cec5dd78476f387a74e3b2e989f65a354d844cc339bf0631a66b164f3018147fd01ccf30f5a6a9811e37995d3fcc9718356d188f46312c4beca736499103dd0548a61d217de32fb9ca0cad8036def818ef345aaa37d7726a227cd514ee21b7045ce2566897ea75c83eafe6174982407530e435c9dc5354b1d91f5a9f509658efcf62749e37202cf8eca8fef7f2206c31d40911bea81285ce86d8cbcdbd17af356ae6fd94a6347a237b985302021bf4dcaf2f8c289cf292d0d43db05dd34e9da6fa14d994a77215ffb70dd4748204f54b657f9392a096033d9bcc05c9e0e6490598d075df1582a3d60b7a903e73fcd977fda41d19b8e55cde586b7900aa528b67bda9dde4e5246bccd2f08829d7385866b9c8b39bb52e4676a7342ccd8b39cc5cc85c7b2c43d94e75654ee4e91329c8863eb1de1b7a9b528fb12a260ea500521535ed4f0dea13613ee6db121bf7601f4269b9dfd414efeab6e07499373045873acb9e3f1529626eea6b4c3f3cf4a5d22d8010d6d5fceb7022b18c359de4140660b275f2a71f4da6aba057ff7eb1b45b4a58f1297f4f6e01beba8e8847e85ae15d0bbab687907e64592cdc9a50468dc9e4d0029455b59af3c7f3056b80ad6e853ed2c8cb8eab530e018da1ef8f9cf5dc159340fc6b29635e2e75e1c61747b3368d822f3d369810d0143acfef9a87f8d095d771d26d19e9c522bf309bb9c3ec9eb406eddbf2e2339bc2cc75db9747f591bae1c59b08a28145494d38354ad3540bf4a9ce0a34891ed2f037e0aaadf531eca48e1ee6907d4cc29c7499ab5a02e360dc4b6f6069cd5d3169fa72b5853be9ee54933085bcb60810009f9cc9fe9d8ea1ed07473226444d695f9a925d222d8a7ad4be186279d52f941456819c6f540924a2495041cc7ba56c8e594bea4fd38757e5e27f6165e7b9822a937f4074697b2c3bcdca0439d94c999253d7a191828fb9a3f17612a7627f27cbcb670fbf25e173d1916565ee5e03e887d602f08972fe9226c6276b2b3f2b623176d91db502ede3b5220892a7e2ff05e721e7403f25f4e5ab7808de338c555c4ad673d9b937b3e50a9694eee6481ddf57ec059cacb1362e3a7cd40578a2940d40bb13329ed4b7c94ee4931577e474046f007cd2afe6e49b8bcfba5a437bb780fc5621acb84ec89f71733c60abca8d5b6dbd3daa8a943f36857404fdfc122123cd1604d71f56dc5b5e816888184e293c89d573735fd7c751abfd70156ae122d5e2f027c6a036f6f45bb5bbe3e8558ac31193c660e85cfae743313944a55224a5f9623b6bb0991d906353286bbb67cd341db97f598f75bc9161291dd8ee4c3a8b7f6e65f299f1a1d1235dd14b27964d35083f649e3f04ad1b3f70d17b8e50cded53d3153ee52f442c12379dfc6717b04d13beac7601c9084e962a15b0b1f588aba53e2066f2f4813f3d9da1872ea28d1416d95fbbc2131911f0c44d1b7f65ad770b338755e33a7b1afe3d1029ba12955b01462793df0c5af59c16af21c1cbf2769111ef0c6fa5c2fa2fcbcc2583a7d9e6f6de1d38f46c855622a0b173f9bb9ba1963cacd7318364d50ef6467117e5d844e2fdb1be9a0cf590624b5d5a6a4ce9ec09feb00bba54688132719979b7ec276b221b267199f442ea9d29bfef6c06277bfbf13d735619489e756118cac2f215c01a930e956d93f9f9dbd2b391381998372f906e05957964102492aed98ef75c3a2a1c37638f27938ed96a8ff88f7500adcf9a9c87ccc97f81da57d24a50bde4e143d56f8592ef54e776627869780d833fa75fa820e07df6441c602f4f89fe8f1aff7de0b1e881ae2531b4b049eaadc959df7de81ee1a487eba255293b79824d344e0e2411c8e1cca1e126a83c69e674c7d2da63dc96cdf01018a5a85703c0d1da9779512f32648a6e7237aa00"}}}}}, 0xfce) 47.755983075s ago: executing program 9 (id=423): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x101091, 0x0) mount$bind(&(0x7f0000000340)='./file0\x00', &(0x7f0000000300)='./file0/file0\x00', 0x0, 0x2101c84, 0x0) mount$bind(0x0, &(0x7f00000002c0)='./file0\x00', 0x0, 0x80000, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000380)='./file0/file0\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x167) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={0x0, r2, 0x0, 0x200}, 0x18) r3 = syz_open_dev$dri(&(0x7f00000002c0), 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r5, 0x40045431, &(0x7f0000000140)={0x0, 0x2000000, 0x0, 0x0, 0xa, "ff00f7000000000000000000af88008300"}) r6 = syz_open_pts(r5, 0x141601) r7 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r7}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x3938700}, {0x0, 0x3938700}}, 0x0) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) write(r6, &(0x7f0000000000)="d5", 0xfffffedf) ioctl$TCSETSF(r6, 0x5404, &(0x7f0000000080)={0x0, 0x0, 0xfffffffc, 0x0, 0x0, "682341f2fd71a6a76177920ea7e60c0ac7a4a5"}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000001c0)='sched_switch\x00', r4}, 0x18) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r3, 0xc04064a0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000440)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r3, 0xc05064a7, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r8}) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="480000001000030500000000000000008bff2486615d6e27b5b38a28a8c700000000", @ANYRES32=0x0, @ANYBLOB="000000000410000020001280080001007674690014000280080004006401010108000200000000000800040000000000"], 0x48}}, 0x0) r9 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) setsockopt$bt_BT_DEFER_SETUP(r9, 0x112, 0x7, 0x0, 0x0) pipe(&(0x7f0000000080)) 46.828842846s ago: executing program 9 (id=428): setxattr$trusted_overlay_upper(0x0, &(0x7f00000001c0), 0x0, 0x835, 0x0) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'bridge0\x00'}) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioperm(0x0, 0x9, 0x5) inotify_add_watch(0xffffffffffffffff, 0x0, 0x60000c5) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000000)={@multicast1, @local}, 0xc) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_NMI(r3, 0xae9a) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x100000000, 0x0, 0x0, 0x0, 0x0, 0x2004c8, 0x8000000, 0x0, 0x10000000, 0xfffffffffffffffe, 0x1, 0x0, 0x0, 0x5]}) sendmsg$NL80211_CMD_SET_KEY(r3, &(0x7f0000000480)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000440)={&(0x7f0000000240)=ANY=[@ANYBLOB="01002abd7000fddbdf250a0000000800", @ANYRES32=0x0, @ANYBLOB="08002a606b970a26"], 0x24}, 0x1, 0x0, 0x0, 0x4004841}, 0x4810) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000240)) r4 = socket(0xa, 0x80000, 0x0) getpeername$packet(r4, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000380)=0x14) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x1e, 0x1, 0x0) connect$tipc(r6, &(0x7f0000000000)=@name={0x1e, 0x2, 0x0, {{0x1, 0x1}, 0xf2}}, 0x10) sendmsg$nl_route(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="1c0000006800e97800000000000000000a00000000000000040004000000000085619f3710112b51746bf810ae81dc2f33f850"], 0x1c}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) r7 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x208000) ioctl$SNDRV_TIMER_IOCTL_SELECT(r7, 0x40345410, &(0x7f00000083c0)={{0x1}}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r7, 0x40505412, &(0x7f00000001c0)={0x0, 0x7, 0x3ff}) 46.590580538s ago: executing program 9 (id=432): sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x20010084) r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x2, 0xd, 0x0, 0x0, 0x8, 0x0, 0x10000000, 0x0, [@sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @local}}, @sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x0, @private}}]}, 0x40}}, 0x0) syz_usb_connect(0x6, 0x24, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r2, 0x107, 0xd, &(0x7f0000000040)=@req3={0x10000, 0xffffff84, 0x10000, 0xffffff84, 0xffffffff}, 0x1c) getsockname$packet(r2, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000200)=0x14) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00'}) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r5, 0x4008ae89, &(0x7f0000000000)=ANY=[@ANYBLOB="01000000000000003a"]) socket$inet_tcp(0x2, 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) r6 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'bridge0\x00'}) r7 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_DISALLOCATE(r7, 0x5608) r8 = socket(0x10, 0x3, 0x0) sendmsg$kcm(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="2e00000010008188040f80ec59acbc0413a1f8480d0000005e140602000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x0) write(r8, &(0x7f0000000000)="2400000011005f0414f9f40700090400810000000d0000000000000008000f0001000000", 0x24) syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="040f63defa3d04"], 0x7) r9 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r9, 0x40045431, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, "7e12ddc5a89047bf00"}) 46.564667667s ago: executing program 38 (id=432): sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x20010084) r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x2, 0xd, 0x0, 0x0, 0x8, 0x0, 0x10000000, 0x0, [@sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @local}}, @sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x0, @private}}]}, 0x40}}, 0x0) syz_usb_connect(0x6, 0x24, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r2, 0x107, 0xd, &(0x7f0000000040)=@req3={0x10000, 0xffffff84, 0x10000, 0xffffff84, 0xffffffff}, 0x1c) getsockname$packet(r2, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000200)=0x14) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00'}) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r5, 0x4008ae89, &(0x7f0000000000)=ANY=[@ANYBLOB="01000000000000003a"]) socket$inet_tcp(0x2, 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) r6 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'bridge0\x00'}) r7 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_DISALLOCATE(r7, 0x5608) r8 = socket(0x10, 0x3, 0x0) sendmsg$kcm(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="2e00000010008188040f80ec59acbc0413a1f8480d0000005e140602000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x0) write(r8, &(0x7f0000000000)="2400000011005f0414f9f40700090400810000000d0000000000000008000f0001000000", 0x24) syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="040f63defa3d04"], 0x7) r9 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r9, 0x40045431, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, "7e12ddc5a89047bf00"}) 9.584227343s ago: executing program 8 (id=706): r0 = io_uring_setup(0x177f, &(0x7f0000000140)={0x0, 0xfe0e}) syz_usb_connect$hid(0x0, 0x36, &(0x7f00000002c0)=ANY=[@ANYBLOB="12010000000000108117980800000000000109022400010000000009040000020300000009210000010122290a090581ffff"], 0x0) syz_open_dev$evdev(&(0x7f00000000c0), 0x40, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_IPV6_RTHDRDSTOPTS(r1, 0x29, 0x37, &(0x7f0000000300)=ANY=[@ANYBLOB="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"], 0x60) 8.248582668s ago: executing program 8 (id=710): capset(&(0x7f0000000200)={0x19980330}, &(0x7f0000000000)={0x0, 0x8, 0xfffffffe, 0x3, 0x0, 0x1}) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@base={0x1b, 0xfff, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x2, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x8, 0x18, &(0x7f0000000140)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {0x3, 0x3, 0x3, 0x9}}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000000c0)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128l-generic\x00'}, 0x58) socket$nl_generic(0x10, 0x3, 0x10) bpf$MAP_CREATE(0x0, 0x0, 0x0) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000140)={0x0, @pix_mp={0x2000000, 0x0, 0x34324152, 0x0, 0xa, [{}, {0x10}, {}, {0x0, 0xffffffff}, {0x3}, {0x0, 0xfffffffb}, {0x2000}]}}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) syz_open_procfs(0x0, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0) openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x14d802, 0x0) r3 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r3, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0x40) r4 = openat$nullb(0xffffffffffffff9c, &(0x7f0000001000), 0x169802, 0x0) r5 = dup(r4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000006, 0x13, r5, 0x0) ioctl$BLKRRPART(r5, 0x125f, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) writev(r6, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_mreq(r7, 0x29, 0x1a, &(0x7f0000000cc0)={@initdev}, 0x0) writev(r6, &(0x7f0000000300), 0x0) 6.561534636s ago: executing program 8 (id=715): openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) (async) socket$inet6_tcp(0xa, 0x1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000b40)={0x18, 0x10, &(0x7f0000000400)=ANY=[@ANYBLOB], &(0x7f0000000080)='syzkaller\x00', 0x8, 0xac, &(0x7f0000000140)=""/172, 0x41000, 0x48, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x6) (async) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) (async) sched_setaffinity(0x0, 0x8, &(0x7f0000000740)=0x2) (async) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) (async) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) (async) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) (async) r3 = socket(0x28, 0x5, 0x0) (async) r4 = socket$inet_sctp(0x2, 0x1, 0x84) (async) r5 = syz_open_procfs(0x0, &(0x7f0000000780)='task\x00') lseek(r5, 0x8, 0x4) (async) setsockopt$IP_VS_SO_SET_ADD(r4, 0x0, 0x482, &(0x7f0000000040)={0x84, @private=0xa010101, 0x4e23, 0x3, 'sh\x00', 0x1, 0x7, 0x49}, 0x2c) r6 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADDDEST(r6, 0x0, 0x487, &(0x7f0000000000)={{0x84, @initdev={0xac, 0x1e, 0x4, 0x0}, 0x4e21, 0x3, 'lc\x00', 0x2, 0x81, 0x37}, {@rand_addr=0x64010102, 0x4e23, 0x4, 0xc3, 0x12d5c, 0x12d5c}}, 0x44) (async) sendmsg$NFT_BATCH(r3, &(0x7f0000000640)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000100)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [@NFT_MSG_DELCHAIN={0x38, 0x5, 0xa, 0x201, 0x0, 0x0, {0x5, 0x0, 0x7}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x4}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}]}, @NFT_MSG_DELFLOWTABLE={0x78, 0x18, 0xa, 0x3, 0x0, 0x0, {0x4, 0x0, 0x7}, [@NFTA_FLOWTABLE_HOOK={0x64, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_DEVS={0x2c, 0x3, 0x0, 0x1, [{0x14, 0x1, 'rose0\x00'}, {0x14, 0x1, 'wg2\x00'}]}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x7}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x8d8f}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_DEVS={0x4}]}]}, @NFT_MSG_DELOBJ={0x1b0, 0x14, 0xa, 0x301, 0x0, 0x0, {0x7, 0x0, 0x6}, [@NFTA_OBJ_USERDATA={0xad, 0x8, "d104c56948561429c58d516f803d8b154b73973c8c2193b83c75598a8d94541c9e3be9b2886ca1e728ac2e996d24db774e1fea7c7bf64b7fc06ff718fd1c1b1c913fb6bde94cc48b30f4593dae8414f16e78883182bfa448c5c78dcfc2da8bbb626f4cf9e9d762a97f4a7833feb1493fafad4dfb66d9e53f3f140d47190a10d64188f3dd753898a1a46102658f2c0e0c8ad2edd6d614c491964ed8bae2f45c4e9b2ef4e6f02556199f"}, @NFTA_OBJ_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_OBJ_USERDATA={0xc8, 0x8, "8d8cff7939e1aca95606537c9a500f7b8fd9f3cc3fd4b6fd54307a37789d19f1558cb3d267a9fcee40684e90b3d49976d70bf23b27a1d51c9f5ea07f39f38c8694baff9ed7d5c151f064116ff5164d773371312e11d98a382dc9154db2a6a80972a1202a54ac10aeaf9a174a73da1a164f9842d6a9bf96c972be849dc42d98704e2071334e3a05343ffc52b3998f47f1a04f26de3465a9f4481a382763e3a71485c227c85823dd516e57ff5cf05ebde19ff2afd503c5ebc78f97559b0b61fc3d978414d5"}, @NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x4}]}, @NFT_MSG_DELSET={0x1c, 0xb, 0xa, 0x401, 0x0, 0x0, {0x3, 0x0, 0x7}, [@NFTA_SET_KEY_TYPE={0x8, 0x4, 0x1, 0x0, 0x3}]}, @NFT_MSG_NEWSETELEM={0x20, 0xc, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}]}, @NFT_MSG_DELSET={0x90, 0xb, 0xa, 0x101, 0x0, 0x0, {0x2, 0x0, 0x1}, [@NFTA_SET_HANDLE={0xc, 0x10, 0x1, 0x0, 0x3}, @NFTA_SET_DATA_TYPE={0x8, 0x6, 0x1, 0x0, 0x7fffff80}, @NFTA_SET_HANDLE={0xc, 0x10, 0x1, 0x0, 0x3}, @NFTA_SET_TIMEOUT={0xc, 0xb, 0x1, 0x0, 0x4}, @NFTA_SET_EXPRESSIONS={0x10, 0x12, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, @ct={{0x7}, @void}}]}, @NFTA_SET_USERDATA={0x2c, 0xd, 0x1, 0x0, "eeeb275f4a9629a967740b65a529e717fd1bef2aa18833f58617e437738862f20b09b7865dcfdb76"}, @NFTA_SET_OBJ_TYPE={0x8, 0xf, 0x1, 0x0, 0x3}, @NFTA_SET_HANDLE={0xc, 0x10, 0x1, 0x0, 0x5}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0x354}, 0x1, 0x0, 0x0, 0x4040005}, 0x20000010) 6.398302059s ago: executing program 8 (id=720): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, 0x0, 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000340)='./file0\x00', &(0x7f0000000300)='./file0/file0\x00', 0x0, 0x2101c84, 0x0) mount$bind(0x0, &(0x7f00000002c0)='./file0\x00', 0x0, 0x80000, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000380)='./file0/file0\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x167) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={0x0, r2, 0x0, 0x200}, 0x18) r3 = syz_open_dev$dri(&(0x7f00000002c0), 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r5, 0x40045431, &(0x7f0000000140)={0x0, 0x2000000, 0x0, 0x0, 0xa, "ff00f7000000000000000000af88008300"}) r6 = syz_open_pts(r5, 0x141601) r7 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r7}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x3938700}, {0x0, 0x3938700}}, 0x0) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) write(r6, &(0x7f0000000000)="d5", 0xfffffedf) ioctl$TCSETSF(r6, 0x5404, &(0x7f0000000080)={0x0, 0x0, 0xfffffffc, 0x0, 0x0, "682341f2fd71a6a76177920ea7e60c0ac7a4a5"}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000001c0)='sched_switch\x00', r4}, 0x18) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r3, 0xc04064a0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000440)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r3, 0xc05064a7, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r8}) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="480000001000030500000000000000008bff2486615d6e27b5b38a28a8c700000000", @ANYRES32=0x0, @ANYBLOB="000000000410000020001280080001007674690014000280080004006401010108000200000000000800040000000000"], 0x48}}, 0x0) r9 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) setsockopt$bt_BT_DEFER_SETUP(r9, 0x112, 0x7, 0x0, 0x0) pipe(&(0x7f0000000080)) 5.567066739s ago: executing program 8 (id=724): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f0000000140)=0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000200)=0x80) r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r3 = dup(r2) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) syz_open_dev$video(0x0, 0x7ff, 0x0) r4 = syz_io_uring_setup(0x239, &(0x7f0000000380)={0x0, 0x1ffffe, 0x10100}, &(0x7f0000000180)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0, 0x0, {}, 0x1}) io_uring_enter(r4, 0x2ded, 0x4008, 0x0, 0x0, 0x22) msgget$private(0x0, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) r7 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r7, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="02020409100000000000004c9e00000002001300027f0000000000000000004105000600200000000a000000000000000005000201080f00e0001f080000000000092000000000000200010020e9ffeeffff0702000098a805000500ea0000000a"], 0x80}}, 0x0) sendmmsg(r7, &(0x7f0000000180), 0x393, 0x0) r8 = msgget$private(0x0, 0x600) semget(0x3, 0x1, 0xe) ioctl$sock_inet_SIOCSIFADDR(r3, 0x8916, &(0x7f0000000100)={'wg2\x00', {0x2, 0x4e20, @local}}) msgrcv(r8, 0x0, 0x0, 0x1, 0x1000) 5.488490153s ago: executing program 5 (id=725): r0 = syz_open_dev$usbfs(&(0x7f0000000100), 0x77, 0x101301) r1 = socket$vsock_stream(0x28, 0x1, 0x0) sendmsg$inet(r1, &(0x7f0000000b80)={0x0, 0x0, 0x0}, 0x2c8120d196112b0d) ioctl$USBDEVFS_FREE_STREAMS(r0, 0x8010550e, &(0x7f0000000200)=ANY=[]) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f0000000680)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in6=@rand_addr=' \x01\x00', @in=@local, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa9, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa00, 0x40800000000000}, 0x0, 0x6e6bc0}}, 0xb8}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000b40), 0xffffffffffffffff) getpriority(0x0, 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r3, &(0x7f0000000d80)={0x0, 0x0, &(0x7f0000000d40)={&(0x7f0000000440)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="01000000000000000000120000000800080003000000180001801400020076657468305f746f5f62617461647600080009"], 0x3c}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000080)=@migrate={0xa0, 0x21, 0x1, 0x0, 0x0, {{@in6=@local, @in6=@private2, 0x0, 0x0, 0x0, 0x0, 0xa}}, [@migrate={0x50, 0x11, [{@in=@dev, @in6=@mcast2, @in=@multicast2, @in6=@private2, 0x0, 0x0, 0x0, 0x0, 0xa, 0xa}]}]}, 0xa0}}, 0x2004c010) 5.447386973s ago: executing program 5 (id=727): mkdir(&(0x7f0000000400)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=0000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) symlink(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='./file0/../file0/file0\x00') read$FUSE(r0, &(0x7f000000e280)={0x2020, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000380)={0x50, 0x0, r1}, 0x50) syz_fuse_handle_req(r0, &(0x7f0000008280)="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", 0x2000, &(0x7f0000000a00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)={0x90, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x1000}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r0, &(0x7f00000021c0)="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", 0x2000, &(0x7f0000000b40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000007c0)={0x90, 0x0, 0x4, {0x3, 0x0, 0x9d3, 0x3, 0x8, 0x2, {0x5, 0x6, 0x81, 0x7fff, 0xf5ef, 0x1, 0xa, 0x801, 0x8, 0xa000, 0x10000, r2, 0x0, 0x9, 0x2}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) 5.388449509s ago: executing program 5 (id=728): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)={0x14, 0x2e, 0x1, 0x0, 0x0, "", [@nested={0x4}]}, 0x14}], 0x1}, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x80040, &(0x7f0000000000)) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r2 = dup(r1) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) ioctl$VHOST_SET_VRING_ADDR(r2, 0x4028af11, &(0x7f0000000340)={0x2, 0x1, &(0x7f0000000140)=""/187, &(0x7f0000000200)=""/43, &(0x7f0000000280)=""/163, 0x80a0000}) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r2, 0xc018937d, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0, {0x30}}, './file0\x00'}) 5.257640067s ago: executing program 8 (id=731): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'bridge0\x00', 0x0}) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000280)={r2, 0x11, 0x6, @broadcast}, 0x10) socket$inet6_udplite(0xa, 0x2, 0x88) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r3 = syz_open_dev$MSR(&(0x7f0000000180), 0x1400000000000, 0x0) read$msr(r3, 0x0, 0x0) r4 = socket$unix(0x1, 0x2, 0x0) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setresuid(r5, r5, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r7, 0x5452, &(0x7f0000000040)=0x8001) r8 = getpgid(0x0) fcntl$setownex(r7, 0xf, &(0x7f0000000140)={0x2, r8}) sendmmsg$unix(r6, &(0x7f0000006c40)=[{{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="11", 0x1}], 0x1}}], 0x1, 0x40015) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) socket$kcm(0x21, 0x2, 0x2) socket$kcm(0x21, 0x2, 0xa) openat$ipvs(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$TCSETSW(0xffffffffffffffff, 0x5403, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) r10 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)=@getchain={0x44, 0x11, 0x839, 0x0, 0x4, {0x0, 0x0, 0x0, r11}, [{0x8, 0xb, 0xed0f}, {0x8, 0xb, 0x8}, {0x8, 0xb, 0x2}, {0x8, 0xb, 0xfffffeff}]}, 0x44}}, 0x0) 5.257091333s ago: executing program 39 (id=731): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'bridge0\x00', 0x0}) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000280)={r2, 0x11, 0x6, @broadcast}, 0x10) socket$inet6_udplite(0xa, 0x2, 0x88) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r3 = syz_open_dev$MSR(&(0x7f0000000180), 0x1400000000000, 0x0) read$msr(r3, 0x0, 0x0) r4 = socket$unix(0x1, 0x2, 0x0) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setresuid(r5, r5, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r7, 0x5452, &(0x7f0000000040)=0x8001) r8 = getpgid(0x0) fcntl$setownex(r7, 0xf, &(0x7f0000000140)={0x2, r8}) sendmmsg$unix(r6, &(0x7f0000006c40)=[{{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="11", 0x1}], 0x1}}], 0x1, 0x40015) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) socket$kcm(0x21, 0x2, 0x2) socket$kcm(0x21, 0x2, 0xa) openat$ipvs(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$TCSETSW(0xffffffffffffffff, 0x5403, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) r10 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)=@getchain={0x44, 0x11, 0x839, 0x0, 0x4, {0x0, 0x0, 0x0, r11}, [{0x8, 0xb, 0xed0f}, {0x8, 0xb, 0x8}, {0x8, 0xb, 0x2}, {0x8, 0xb, 0xfffffeff}]}, 0x44}}, 0x0) 5.098525732s ago: executing program 5 (id=733): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, 0x0, 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000340)='./file0\x00', &(0x7f0000000300)='./file0/file0\x00', 0x0, 0x2101c84, 0x0) mount$bind(0x0, &(0x7f00000002c0)='./file0\x00', 0x0, 0x80000, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000380)='./file0/file0\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x167) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={0x0, r2, 0x0, 0x200}, 0x18) r3 = syz_open_dev$dri(&(0x7f00000002c0), 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r5, 0x40045431, &(0x7f0000000140)={0x0, 0x2000000, 0x0, 0x0, 0xa, "ff00f7000000000000000000af88008300"}) r6 = syz_open_pts(r5, 0x141601) r7 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r7}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x3938700}, {0x0, 0x3938700}}, 0x0) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) write(r6, &(0x7f0000000000)="d5", 0xfffffedf) ioctl$TCSETSF(r6, 0x5404, &(0x7f0000000080)={0x0, 0x0, 0xfffffffc, 0x0, 0x0, "682341f2fd71a6a76177920ea7e60c0ac7a4a5"}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000001c0)='sched_switch\x00', r4}, 0x18) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r3, 0xc04064a0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000440)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r3, 0xc05064a7, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r8}) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="480000001000030500000000000000008bff2486615d6e27b5b38a28a8c700000000", @ANYRES32=0x0, @ANYBLOB="000000000410000020001280080001007674690014000280080004006401010108000200000000000800040000000000"], 0x48}}, 0x0) r9 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) setsockopt$bt_BT_DEFER_SETUP(r9, 0x112, 0x7, 0x0, 0x0) pipe(&(0x7f0000000080)) 4.408503091s ago: executing program 1 (id=734): mkdir(&(0x7f0000000440)='./file1\x00', 0x0) mkdir(&(0x7f0000000440)='./file0\x00', 0x0) mount$cgroup(0x0, &(0x7f0000000700)='./file0\x00', &(0x7f0000000740), 0x0, &(0x7f0000000540)={[{@name={'name', 0x3d, '\xb0Z\xf65\'p\xa9\x9cC\x1f^\v\xae\x0eFJ\x8d\x9d\xb9\xab\f\x88\r\n\x15+\xfe\x7f\xa8\xedvF&\x15\xe2\x85\x83L)*-I\x87\xd9\x81:I\xb2\xd1|.D\xc0\x96\xeb\x80\xf0\xca\x9by\xf3\xca\xbb\x12\xe0\x00\xb4r|C\xce\xab\x9c\x86\x13'}}]}) mount(0x0, &(0x7f0000000240)='./file1\x00', &(0x7f0000000000)='tmpfs\x00', 0x0, &(0x7f0000000300)='usrquota') chdir(&(0x7f0000000140)='./file1\x00') r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='net_prio.prioidx\x00', 0x275a, 0x0) quotactl_fd$Q_SETQUOTA(r0, 0xffffffff80000802, 0x0, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x2, 0x1, 0x0, 0x0, 0x0, 0x7}) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000480)='./file0/file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) sendmsg$tipc(r0, &(0x7f00000006c0)={&(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x1, {0x1, 0x4, 0x1}}, 0x10, &(0x7f00000004c0)=[{&(0x7f00000005c0)="1fd8c713990694b3dd0a526fe7c81fe99c0ce63364e4940b7c582292163872f29ccc5bc8828af073c4d8dcda80419f77a5fb8f7b15c930f94cd595e40045758191932f25a92cea7e35b8b3657279ef911b7455651826072e2ec1d74daa6fd87489d5f8b53f53edf4f3d12c94dcbfff939dcc8ed6e08398f41d4a6367bbd9ad04b1007f7ce66540cc13e376b9e3a4fb4619964427fa466410a64af8580a5dc450efd5b539e7af0bdc05164f90c798230883b4fd785df83faec5481575cae623aa827eae9c72df1b39d247afcf437fd0902296775083eda097479fbdffd0e6104a1c2e3c8ded4ceb7cc96bde62dfc8f01ad4baa7020337f48178d0f9", 0xfb}, {&(0x7f0000000780)="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", 0x1000}, {&(0x7f0000001780)="78156bd2c386b2ad25562ebfe0c59d5f913c7e178975f400b9b7aeefd819fa9660951f6df859a62c1d71d29dfa71eb371c47491d11237bc8150265793cf0b7517a928d2163300b9b831cdf8348de6d03f1f0d7dc7db249c9c2128fa14afd307b236bb0edbd147abc7b4011eb821162329366855328978e8cbff074729726d0740d085ad0d8f449eab198c2dfd184b9f3e3138fe42e6fea84b81b3a453c77ac13d96e6470f83436a8c9e17d9d4874f9", 0xaf}, {&(0x7f0000000280)="1b0652c8bcce61bbd4b095802c960891baef807c1a37b3ed15495bafec3b1212", 0x20}, {&(0x7f0000001840)="0ffcf98267b5f0e9660e0a404b78dee54008ff100eb3460a41c5ef09541eb5a00be00b86dc804e07788a1929db5d2a3cf1961610ec2a223a49e196007b78afd0dede63281a9c7b7c977522678a34fe062959ddc35d95c75f1908f0b04f4fb8faa63cafffa2b983d978ec9b6ce5dc3499c00d6eba39cf5027b35fe496a7ec3e7e3ff1572d", 0x84}, {&(0x7f00000002c0)="3b45dcdf3dd0cbff8c24", 0xa}, {&(0x7f0000000380)="b767930c839b4eb7af914832965db54c3cd53b8258b56ded4690ee2f4b8a4f7f7b5bf95e319bca5d2e77b470d5c0734f150a175d5040fc9b5f70b6cedf462cd0fcbb8a76ffd577b3de790aea2be129edb6e267b7f06ecb96b3902ed486cfc3c1de55754b5a42e51dec", 0x69}, {&(0x7f0000001900)="b7ec02741c9cb8891f0ab514b616270fe5344d3d02b34823dd3ee90d9bec46d5417c6a01ff6c345f1b7ab5644577fe9aaa5a48f3a0e08f761beaaa79a69cfc275c6fce152eb726bddb3a2c1c43a4dd248a2e1a8cf0c3ad5d7e6d6c819fa5e6b9fb0d119539ce52be9eca8e72797cf90f5d92c69b04df7412a4b0fc8608fed5824b24c317b5ab6cb04362d7fa0179afc530ec16ad5c5c14d0d9a46d1bbce754758025783c18a740ac071afce4d71c8aa2d8c37a271ed9d0ac6d8fd1b53663a112aa139f51e5f598ea1583155deb50dae47b70438f2e9953f5cb5332ed723cee6817a809", 0xe3}, {&(0x7f0000001a00)="0587a77bf9e364cb371e65e85d69fea265781a2201321c06b8c562138fb33650ed9c1bcf50ed78bdc1f12ca19e9a36fb6d3d4213eec8a49a4597fa6aed687747efbfcff11857710be47b0ce9464b7f9cb5a959e853d57f4bcac65678bc04c750750fa2b1f33c34961c79429322bb2b7712d5a9164d3e63c429ec2183b08241e0ac146c89aeb8f97d8b26c2fb1d1f497fd993848dd4e2912e1c05ef6819", 0x9d}], 0x9, &(0x7f0000001ac0)="ec9dbed9d7e3333bc6196235b041d8e6b691da635272b14a8ea49414314ad7d9ac45fb0cf84fbaee7ece5ee8d5d2e0075ab4f7ca4b348f1730df88c21ce0a2b2489909fcb6916bfd621f19ced921361c4b49fa19bd4a2ace1ad6d29ee0c338d498d1ab9103b971c912269c12c1a6f3aa8923f632a874adfecd7b1b34993e3924be2d881048c20b36034fb2930a0f30ae1f38e62d7e642d2d96b19ff0b3a54e59bd7e3fae4e395a6824de273ae92401beef9547a4f6d17cf60f5c35d7fc2ee654a517257f0666ad2051951a3a9a5a3d9cd05188cfdf243079d46644073e58e40032e05f2b0355", 0xe6, 0x4000}, 0x40040) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) lsetxattr$trusted_overlay_nlink(&(0x7f0000000180)='./file0\x00', &(0x7f00000001c0), 0x0, 0x0, 0x2) setxattr$incfs_metadata(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, 0x0, 0x0) 4.358530276s ago: executing program 1 (id=735): r0 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, 0x0, 0x0) sendmsg$ETHTOOL_MSG_FEATURES_SET(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x480}, 0x20004000) socket$inet6_dccp(0xa, 0x6, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x80383, 0x0) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r3 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r3, 0x11b, 0x4, &(0x7f0000000040)={0x0, 0x0, 0x800, 0x0, 0x2}, 0x20) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r4}, 0x10) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x300}, 0x0, &(0x7f00000002c0)={0x3ff}, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) dup(0xffffffffffffffff) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r5 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r5, 0x6, 0x13, 0x0, 0x0) bind$inet(r5, 0x0, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) r6 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r6, &(0x7f0000032680)=""/102392, 0x18ff8) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x13, &(0x7f0000000380)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020756c2700000000090000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000060000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000010850000002d00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='kfree\x00', r7}, 0x10) close(r0) 4.278269154s ago: executing program 7 (id=736): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x48, 0x2, 0x3, 0x201, 0x0, 0x0, {0x2}, [@NFQA_CFG_FLAGS={0x8, 0x5, 0x1, 0x0, 0x15}, @NFQA_CFG_PARAMS={0x9, 0x2, {0x1}}, @NFQA_CFG_CMD={0x8, 0x1, {0x4, 0x0, 0x28}}, @NFQA_CFG_QUEUE_MAXLEN={0x8, 0x3, 0x1, 0x0, 0xe}, @NFQA_CFG_QUEUE_MAXLEN={0x8, 0x3, 0x1, 0x0, 0x3}, @NFQA_CFG_QUEUE_MAXLEN={0x8, 0x3, 0x1, 0x0, 0x5}]}, 0x48}, 0x1, 0x0, 0x0, 0xc4}, 0x4000000) ioctl$SIOCX25SCALLUSERDATA(0xffffffffffffffff, 0x89e5, &(0x7f0000000140)={0x52, "6c1acdae8f6d3b650dfca40c5e3c9017a1a98fc2edd19fa8f7f28f54be2834b1b982f1419cb12de9d74a702a6c5c25c88bb4253ac11efb68a39ea3e4818c5ab0656d6ecd08349c8957b4be81ef6653859b3fd862f60ac0c970c587334681aaf80024f2fba2dd4dc0add5389e1b9ca09aba8bdd7c66b08b34ccb1af0bfdf64930"}) r1 = syz_usb_connect$uac1(0x6, 0xfa, &(0x7f0000000200)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x8, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xe8, 0x3, 0x1, 0x1, 0x80, 0x5, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0xe, 0x4}, [@selector_unit={0xa, 0x24, 0x5, 0x6, 0x7, "1eec67b9aa"}, @input_terminal={0xc, 0x24, 0x2, 0x5, 0x101, 0x5, 0xe4, 0x8, 0x3, 0x1}, @selector_unit={0xb, 0x24, 0x5, 0x5, 0x0, "87a2d0c081a5"}, @output_terminal={0x9, 0x24, 0x3, 0x3, 0x305, 0x6, 0x1, 0x7}, @output_terminal={0x9, 0x24, 0x3, 0x5, 0x205, 0x4, 0x4, 0x1}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_ii_discrete={0x12, 0x24, 0x2, 0x2, 0x6, 0x0, 0x6, "f159fc6e364d387a9d"}]}, {{0x9, 0x5, 0x1, 0x9, 0x200, 0x98, 0x9, 0xd, {0x7, 0x25, 0x1, 0x0, 0x2, 0x800}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@as_header={0x7, 0x24, 0x1, 0x5, 0xb, 0x1}, @format_type_ii_discrete={0x11, 0x24, 0x2, 0x2, 0x1, 0x4, 0x8, "bf882da5a211d663"}, @format_type_i_continuous={0x8, 0x24, 0x2, 0x1, 0x40, 0x2, 0xa, 0x1}, @format_type_i_discrete={0xc, 0x24, 0x2, 0x1, 0x5, 0x4, 0x9, 0x2, "e73c97bd"}, @format_type_i_continuous={0xa, 0x24, 0x2, 0x1, 0x1, 0x1, 0x8, 0xd5, 'i', 'b'}, @format_type_i_discrete={0xe, 0x24, 0x2, 0x1, 0x15, 0x3, 0x2a, 0x4, "5519bfd6ae21"}]}, {{0x9, 0x5, 0x82, 0x9, 0x200, 0x7, 0x31, 0x40, {0x7, 0x25, 0x1, 0x2, 0x6, 0x7}}}}}}}]}}, &(0x7f0000000480)={0xa, &(0x7f0000000300)={0xa, 0x6, 0x310, 0xd, 0x4, 0x5, 0x40, 0x7}, 0xc, &(0x7f0000000340)={0x5, 0xf, 0xc, 0x1, [@ext_cap={0x7, 0x10, 0x2, 0x4, 0x5, 0x3, 0x80}]}, 0x2, [{0xb7, &(0x7f0000000380)=@string={0xb7, 0x3, "6330bdf9a1fb68f5936807cbed9208e1faf0c35eb915adec337ebd7e76d6300981380e3b201b3b9c1552ba420837145e5b42c85a1482a0b5dde12b9d0c5d4d9c2961ea94f4c27e6f61a3214e76b1ea54b3260fef760e07218234d01fe88410dc7930f6a3b68173a51c7d568fee2d8c42ce4e511220377c6e1cdbec642342b1b874b1d4f91c58fa3249b72e96ff6a823ec662072ab3042f83a4d90fa162a76ea2c81e219c582880b40e2d057137b58e5d16af998a62"}}, {0x4, &(0x7f0000000440)=@lang_id={0x4, 0x3, 0x1007}}]}) syz_usb_ep_write(r1, 0x2, 0x73, &(0x7f00000004c0)="ea3b1acaf5e6e8f0aea2aece936d798cded483ceaef17d25d5484ed21f479ea981438a34194413c8207dd37e8b3ec0e0f064ca486a452dbbae7e77a565f3c84731bc114b5b923cde63e1f346dea80ae3f42393556563cab640458bc23a71265744ae764b5e52469df45153b96f2747766996ab") r2 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000580), 0xffffffffffffffff) sendmsg$NLBL_MGMT_C_ADD(0xffffffffffffffff, &(0x7f0000000640)={&(0x7f0000000540), 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x14, r2, 0x100, 0x70bd27, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x4000000}, 0x80) pipe2$9p(&(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RWALK(r3, &(0x7f00000006c0)={0x7e, 0x6f, 0x1, {0x9, [{0x10, 0x0, 0x2}, {0x92, 0x3, 0x1}, {0x80, 0x0, 0x1}, {0x2, 0x4, 0x2}, {0x4, 0x3, 0x4}, {0x20, 0x3, 0x1}, {0x2, 0x3, 0x5}, {0x8, 0x4}, {0x80, 0x4, 0x1}]}}, 0x7e) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nfc(&(0x7f0000000780), 0xffffffffffffffff) sendmsg$NFC_CMD_GET_TARGET(r4, &(0x7f0000000840)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000800)={&(0x7f00000007c0)={0x14, r5, 0x300, 0x70bd29, 0x25dfdbfe, {}, ["", "", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x2004c010}, 0x1) r6 = accept4(r0, &(0x7f0000000880)=@in={0x2, 0x0, @loopback}, &(0x7f0000000900)=0x80, 0x80000) ioctl$SIOCX25SCUDMATCHLEN(r6, 0x89e7, &(0x7f0000000940)={0x16}) r7 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000009c0), r4) sendmsg$NLBL_UNLABEL_C_LIST(r4, &(0x7f0000000ac0)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000a80)={&(0x7f0000000a00)={0x54, r7, 0x400, 0x70bd2d, 0x25dfdbfb, {}, [@NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @remote}, @NLBL_UNLABEL_A_SECCTX={0x22, 0x7, 'system_u:object_r:devpts_t:s0\x00'}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}]}, 0x54}, 0x1, 0x0, 0x0, 0x40005}, 0x8000) r8 = syz_init_net_socket$ax25(0x3, 0x5, 0x1) writev(r8, &(0x7f0000002040)=[{&(0x7f0000000b00)="9e6e0d5d683ccf89a73d966a63e9741e6d7c66a4a16a6edf20efa6b86e8650dcf00b9592db2b05622b232205272559736ffbbaf495e446586fdf2eb1af98f57148814123c5d1769673efb9f1a0a7084ea90538eda67bea629b94aa48ef5a54883ab331a4b7a32bbd8904c0ba89ed74f20da745ac264e71b5174f836683a250fe7bb7e95a3b198374144a9837e7f1bf9a7405fcfa5e3f78ee46afa89b110510b2625d895fe5bfd827ecfc7768975dd6dc58c1d727a3ff2375df4cb509ad7266c9bc78baa687619527f1d44b866943298927e9aa3171e77793d9aee6e8a8b72ad3d6cbdaad9710ea86ec646e859bc9d0fc2cc907bce12b32", 0xf7}, {&(0x7f0000000c00)="674b5e82d1e6e0db1fd5a6d5b5a035e27146fe1f667ea822f41d0fce9d23ff899e5b8088b894aaacda8fe6ec478786e35f60e6105675d129f0ac6e66c811dd7a6573536f10b0e1cabe0500705076498a722fcd4ba527a042088aab71cfa949e92f101159b0b9fe0c6117984b2ab3b20f53ba4d6df91981d93c09f0aaa70869259539b9e9d8b808e1fc10acadfc60a3babb6e45a6b660ff4059c7024f", 0x9c}, {&(0x7f0000000cc0)="e29b2c22ed3f34e14810ac16622aaa439fce515e205fb8829052322f2fbb868ec26116afc6506c5f3d76d605ad3c6122ea4cf9268b5418e0ceecb4aa5993242100345f326005734cb72d552a32e4f708c1b9b3d2c0bbb19bea787a50891d25168f407ee371946bc4a2ef0c70f95191cdc6e8661ceb1939cac5", 0x79}, {&(0x7f0000000d40)="868b24f5684f266f7be5a17e4a541cdb90c86bf1024ad4a3645b79315cc08107fc576c3fd72912a448cb6cae8e835397c97ca3dc39b80a8ee92242350ad4fec7b1b0ae6e82d6c14134424396aea070c7", 0x50}, {&(0x7f0000000dc0)="e6e05492fa86771e3565b00381062b4aa358c8c2409d49e924166b1834f60cd22c8c2abc5f135c47b4c3d691f4f3056c40d16b6a073b18ffe241631f9878e6491c32d43cd42a3be83a1a35b62701c5c53feee7beacb2a99a6bb3340ad55bec448a4e7ceb0324b95d13a5ea9d24776254b0a651d09c768a", 0x77}, {&(0x7f0000000e40)="2827ce2dcda76fba371b50f1fb797949b28b95a3212ba7b05dcbb8e2721d0e24495e3929b10a218ef8d8dcba4ded2d9cca920c946e31dd82cf96d882b5d6b1856bcb6ae6ae7df841eeb96a98040c8b297cc5035323a21ad8ebf38bce3732450b095891f28243d1ad5dc4db7445f735b54a647fca051e404485168d60d0031d54df7bd47c52e691dfc9d5e1a8b3eb658acbaf3e649ffa00853cd41bb21a21ca10f497f0c98eb22e02b8aed297121b1215c3da7efd07e94c91ff7d2b70c43e1272c8d70145694ff6b20038", 0xca}, {&(0x7f0000000f40)="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", 0x1000}, {&(0x7f0000001f40)="c054c68039808b56a0b83000e1f465e3dc4b90ec82ca7f9b06a0667fd3a10e6829482d85dd71e96ed6069a10acd3c0a50afb951ab4cccd6690ba75f120264a1ed006df28178b88e85243281ed9fe0b116877f175e6ba5c49048eab9066cbc488885424e666630fb3cd82caa8624e96862322a949e538c0be3310e915eb5c4e8b0d5e5ee84d51612be254d4d2d7bd3aae3353438cfdb7cec8f74c8e22428335ae3d203ebe83d3308f1c71dfed6250a941ed24f54798bdddd158533bef9b201023a59aeb481f14a2be8b3d98c385dc99e8ec710368ddae5eeebefc4ccba96d0f6c4884eadaa2a6", 0xe6}], 0x8) r9 = syz_genetlink_get_family_id$nl802154(&(0x7f00000020c0), r4) ioctl$sock_SIOCGIFINDEX_802154(r4, 0x8933, &(0x7f0000002100)={'wpan4\x00', 0x0}) sendmsg$NL802154_CMD_GET_SEC_DEV(r4, &(0x7f0000002200)={&(0x7f0000002080)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000021c0)={&(0x7f0000002140)={0x70, r9, 0x8, 0x70bd25, 0x25dfdbff, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r10}]}, 0x70}, 0x1, 0x0, 0x0, 0x180}, 0x48010) r11 = socket$nl_generic(0x10, 0x3, 0x10) r12 = syz_genetlink_get_family_id$devlink(&(0x7f0000002280), r6) sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_GET(r11, &(0x7f00000024c0)={&(0x7f0000002240)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000002480)={&(0x7f00000022c0)={0x190, r12, 0x8, 0x70bd2d, 0x25dfdbff, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0xe}, {0x6, 0x16, 0x8}, {0x5, 0x12, 0x1}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}, {0x8}, {0x6, 0x16, 0x4}, {0x5, 0x12, 0x1}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0x5}, {0x6, 0x16, 0x4}, {0x5, 0x12, 0x1}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0xf}, {0x6, 0x16, 0x4}, {0x5, 0x12, 0x1}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x8, 0xb, 0x9}, {0x6, 0x16, 0x4}, {0x5, 0x12, 0x1}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0x6}, {0x6, 0x16, 0xfffa}, {0x5, 0x12, 0x1}}]}, 0x190}, 0x1, 0x0, 0x0, 0x40841}, 0x24008080) ioctl$FS_IOC_GETFSUUID(r8, 0x80111500, &(0x7f0000002500)) r13 = syz_genetlink_get_family_id$nl802154(&(0x7f0000002580), r4) ioctl$sock_SIOCGIFINDEX_802154(r4, 0x8933, &(0x7f00000025c0)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_GET_SEC_DEVKEY(r4, &(0x7f0000002680)={&(0x7f0000002540)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000002640)={&(0x7f0000002600)={0x30, r13, 0x800, 0x70bd2c, 0x25dfdbfc, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r14}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r10}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000000}, 0x44010) getsockname$packet(r6, &(0x7f00000026c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000002700)=0x14) bind$can_raw(r6, &(0x7f0000002740)={0x1d, r15}, 0x10) 4.197748936s ago: executing program 5 (id=737): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async, rerun: 32) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x103802, 0x0) (rerun: 32) close(r1) (async) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)) (async, rerun: 64) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', @broadcast}) (async, rerun: 64) r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x1c3842, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_SET_IRQCHIP(r4, 0x4048aec9, &(0x7f0000001480)={0x0, 0x0, @pic={0x79, 0x7, 0x1, 0xfe, 0x8f, 0x4, 0x3, 0x40, 0x4, 0xe, 0x9, 0xa7, 0xfe, 0x3, 0x30, 0xa}}) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async) write$cgroup_devices(r2, &(0x7f0000000100)=ANY=[@ANYBLOB="1e030800d3ff9801288547"], 0xffdd) (async) write$cgroup_devices(r0, &(0x7f0000000140)=ANY=[@ANYBLOB="1e001400008c71ef28ff4b"], 0xffdd) 3.846058524s ago: executing program 5 (id=738): socket$inet6_tcp(0xa, 0x1, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000b40)={0x18, 0x10, &(0x7f0000000400)=ANY=[@ANYBLOB], &(0x7f0000000080)='syzkaller\x00', 0x8, 0xac, &(0x7f0000000140)=""/172, 0x41000, 0x48, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x6) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000740)=0x2) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) rmdir(&(0x7f00000001c0)='./cgroup/../file0\x00') r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r4, 0x5423, &(0x7f00000000c0)=0xf) r5 = fcntl$dupfd(r4, 0x0, r4) ioctl$TCFLSH(r5, 0x400455c8, 0x0) ioctl$TIOCSTI(r5, 0x5412, 0x0) r6 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$IP6T_SO_SET_REPLACE(r6, 0x29, 0x40, &(0x7f0000000500)=@raw={'raw\x00', 0x3c1, 0x3, 0x2f0, 0x11c, 0xc8, 0x8, 0x11c, 0x5803, 0x228, 0x2e8, 0x2e8, 0x228, 0x2e8, 0x3, 0x0, {[{{@ipv6={@remote, @mcast1, [], [], 'geneve0\x00', 'geneve1\x00'}, 0x0, 0xec, 0x11c, 0x0, {0x0, 0x2000000000000}, [@common=@eui64={{0x24}}, @common=@inet=@ecn={{0x24}, {0x0, 0x70, 0x93, 0xe}}]}, @common=@unspec=@CONNMARK={0x30}}, {{@uncond, 0x0, 0xa4, 0x10c}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0xa4, 0xc8}, {0x24}}}}, 0x34c) tee(r2, r0, 0x2, 0xb) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000200)) 3.81484141s ago: executing program 40 (id=738): socket$inet6_tcp(0xa, 0x1, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000b40)={0x18, 0x10, &(0x7f0000000400)=ANY=[@ANYBLOB], &(0x7f0000000080)='syzkaller\x00', 0x8, 0xac, &(0x7f0000000140)=""/172, 0x41000, 0x48, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x6) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000740)=0x2) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) rmdir(&(0x7f00000001c0)='./cgroup/../file0\x00') r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r4, 0x5423, &(0x7f00000000c0)=0xf) r5 = fcntl$dupfd(r4, 0x0, r4) ioctl$TCFLSH(r5, 0x400455c8, 0x0) ioctl$TIOCSTI(r5, 0x5412, 0x0) r6 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$IP6T_SO_SET_REPLACE(r6, 0x29, 0x40, &(0x7f0000000500)=@raw={'raw\x00', 0x3c1, 0x3, 0x2f0, 0x11c, 0xc8, 0x8, 0x11c, 0x5803, 0x228, 0x2e8, 0x2e8, 0x228, 0x2e8, 0x3, 0x0, {[{{@ipv6={@remote, @mcast1, [], [], 'geneve0\x00', 'geneve1\x00'}, 0x0, 0xec, 0x11c, 0x0, {0x0, 0x2000000000000}, [@common=@eui64={{0x24}}, @common=@inet=@ecn={{0x24}, {0x0, 0x70, 0x93, 0xe}}]}, @common=@unspec=@CONNMARK={0x30}}, {{@uncond, 0x0, 0xa4, 0x10c}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0xa4, 0xc8}, {0x24}}}}, 0x34c) tee(r2, r0, 0x2, 0xb) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000200)) 3.670942375s ago: executing program 7 (id=740): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="0d00000004000000040000000500000000000000", @ANYRES32=r0, @ANYBLOB="0000000000000000000000931c77c4fb536d37000000000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) syz_genetlink_get_family_id$nfc(0x0, 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) syz_emit_ethernet(0x7f, &(0x7f0000000300)=ANY=[@ANYBLOB="ffffffffffff00230000000086dd60f2a40000492f00fe880000000000000000000000000001fe8000000000000000000000000000aa342088be0005000054812cbd3b00000800000086dd430588be00000000100000000100000000000000080022eb00000000200000000200000000000000000000000800655800000000"], 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) times(&(0x7f00000001c0)) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$netlink(r5, &(0x7f0000001f80)={0x0, 0x0, &(0x7f0000001f00)=[{&(0x7f0000002840)=ANY=[@ANYBLOB="140000002700133300000000000000"], 0x14}], 0x1}, 0x0) syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) mknod$loop(&(0x7f0000000000)='./file0\x00', 0x8, 0x1) r6 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$inet(r6, &(0x7f0000000240)={&(0x7f0000000140)={0x2, 0x4001, @local}, 0x10, 0x0}, 0x30004001) close(r6) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r8, 0xae60) ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x200) 2.47859945s ago: executing program 7 (id=741): socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) madvise(&(0x7f0000000000/0x800000)=nil, 0x800018, 0x19) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000140)={0x2, @pix_mp={0x0, 0x0, 0x34324152, 0x0, 0xa, [{}, {0x10}]}}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$usbfs(0x0, 0x201, 0x0) r1 = syz_open_dev$sndmidi(0x0, 0x2, 0x141101) dup(r1) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) mlock(&(0x7f0000ffc000/0x4000)=nil, 0x4000) setsockopt$inet_tcp_int(r2, 0x6, 0x17, &(0x7f00000000c0), 0x4) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=@migrate={0xa0, 0x21, 0x1, 0x0, 0x0, {{@in6=@private1, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0xa}}, [@migrate={0x50, 0x11, [{@in6=@empty, @in6=@remote, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0x2}]}]}, 0xa0}}, 0x0) r3 = socket$inet6(0xa, 0x3, 0x7) setsockopt$inet6_int(r3, 0x29, 0x1000000000021, &(0x7f00000005c0)=0x7fff, 0x4) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x380000, @dev}, 0x1c) sendmmsg$alg(r3, 0x0, 0x0, 0x0) r4 = socket$inet(0x2, 0x3, 0x6) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x5, 0x2f, 0x42, 0x40, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) setitimer(0x2, &(0x7f0000000240)={{0x0, 0x2710}, {r6, r7/1000+60000}}, &(0x7f0000000280)) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080), 0x0, 0x1003, r5, 0x0, 0xa00369a4}, 0x38) shutdown(r4, 0x0) recvmmsg(r4, 0x0, 0x0, 0x0, 0x0) mremap(&(0x7f0000000000/0x9000)=nil, 0xa00000, 0x600000, 0x3, &(0x7f0000a00000/0x600000)=nil) 2.458242564s ago: executing program 1 (id=742): r0 = mq_open(&(0x7f00000001c0)='eth0\xd2', 0x42, 0x0, 0x0) r1 = dup2(r0, r0) mq_notify(r1, &(0x7f0000000040)={0x20000000, 0x2e, 0x1, @thr={0x0, 0x0}}) (async) mq_notify(r1, &(0x7f0000000040)={0x20000000, 0x2e, 0x1, @thr={0x0, 0x0}}) read$FUSE(r1, 0x0, 0x0) mount$bind(0x0, 0x0, 0x0, 0x297880, 0xf0) syz_emit_ethernet(0x92, &(0x7f00000004c0)={@local, @multicast, @void, {@ipv6={0x86dd, @gre_packet={0x0, 0x6, "ee527a", 0x5c, 0x3c, 0x0, @empty, @mcast2, {[@routing={0x0, 0x2, 0x1, 0x9, 0x0, [@mcast2]}]}}}}}, 0x0) (async) syz_emit_ethernet(0x92, &(0x7f00000004c0)={@local, @multicast, @void, {@ipv6={0x86dd, @gre_packet={0x0, 0x6, "ee527a", 0x5c, 0x3c, 0x0, @empty, @mcast2, {[@routing={0x0, 0x2, 0x1, 0x9, 0x0, [@mcast2]}]}}}}}, 0x0) r2 = socket(0x2a, 0x5, 0xda) syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) (async) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$IPVS_CMD_ZERO(r2, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x78, r3, 0x800, 0x70bd27, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_DEST={0xc, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x7f00}]}, @IPVS_CMD_ATTR_DEST={0x14, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x8}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x4}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x93c}, @IPVS_CMD_ATTR_DAEMON={0x20, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x4}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @private1}]}, @IPVS_CMD_ATTR_SERVICE={0x1c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'wlc\x00'}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x8}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e24}]}]}, 0x78}, 0x1, 0x0, 0x0, 0x40000}, 0x0) 2.358024608s ago: executing program 7 (id=743): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x11, 0x8, &(0x7f0000005c00)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xffffffffffffff7e, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) socket$nl_route(0x10, 0x3, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r2 = dup(r1) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000005c0)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) personality(0x500006) mprotect(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x5) r4 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r4, 0x40345410, &(0x7f0000000080)={{0x3}}) ioctl$SNDRV_TIMER_IOCTL_START(r4, 0x54a0) ioctl$SNDRV_TIMER_IOCTL_PAUSE(r4, 0x54a3) r5 = syz_io_uring_setup(0x3bd6, &(0x7f00000002c0)={0x0, 0x4537, 0x10, 0x3, 0x302, 0x0, r2}, &(0x7f0000000180), 0x0) io_uring_enter(r5, 0x2ded, 0x4000, 0x0, 0x0, 0x0) r6 = inotify_init() syz_io_uring_setup(0x24f9, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f0000000100)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r7, r8, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r6}) inotify_add_watch(r6, &(0x7f0000000240)='.\x00', 0x400017e) creat(&(0x7f0000000100)='./file0\x00', 0x0) setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0xa, &(0x7f0000000180)=0x67e, 0x4) syz_open_dev$vbi(&(0x7f0000000280), 0x0, 0x2) openat$userio(0xffffffffffffff9c, &(0x7f0000000000), 0x8002, 0x0) r9 = signalfd(0xffffffffffffffff, &(0x7f0000000640)={[0x20000000]}, 0x8) ioctl$KVM_XEN_HVM_CONFIG(0xffffffffffffffff, 0x4038ae7a, &(0x7f0000000300)={0x1, 0x3c2, 0x0, &(0x7f0000000300)}) ioctl$KVM_XEN_HVM_CONFIG(r9, 0x4038ae7a, &(0x7f0000000180)={0x1, 0xaa4, 0x0, &(0x7f0000000340)}) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000680), 0xffffffffffffffff) 2.163939415s ago: executing program 1 (id=744): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, 0x0, 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000340)='./file0\x00', &(0x7f0000000300)='./file0/file0\x00', 0x0, 0x2101c84, 0x0) mount$bind(0x0, &(0x7f00000002c0)='./file0\x00', 0x0, 0x80000, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000380)='./file0/file0\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x167) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={0x0, r2, 0x0, 0x200}, 0x18) r3 = syz_open_dev$dri(&(0x7f00000002c0), 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r5, 0x40045431, &(0x7f0000000140)={0x0, 0x2000000, 0x0, 0x0, 0xa, "ff00f7000000000000000000af88008300"}) r6 = syz_open_pts(r5, 0x141601) r7 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r7}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x3938700}, {0x0, 0x3938700}}, 0x0) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) write(r6, &(0x7f0000000000)="d5", 0xfffffedf) ioctl$TCSETSF(r6, 0x5404, &(0x7f0000000080)={0x0, 0x0, 0xfffffffc, 0x0, 0x0, "682341f2fd71a6a76177920ea7e60c0ac7a4a5"}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000001c0)='sched_switch\x00', r4}, 0x18) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r3, 0xc04064a0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000440)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r3, 0xc05064a7, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r8}) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="480000001000030500000000000000008bff2486615d6e27b5b38a28a8c700000000", @ANYRES32=0x0, @ANYBLOB="000000000410000020001280080001007674690014000280080004006401010108000200000000000800040000000000"], 0x48}}, 0x0) r9 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) setsockopt$bt_BT_DEFER_SETUP(r9, 0x112, 0x7, 0x0, 0x0) pipe(&(0x7f0000000080)) 1.951007818s ago: executing program 0 (id=732): mkdir(&(0x7f00000009c0)='./file0\x00', 0x0) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x1000000, 0x0) mkdir(&(0x7f00000000c0)='./bus\x00', 0x0) mkdir(&(0x7f0000000000)='./file1\x00', 0x0) mkdir(&(0x7f0000000240)='./file1/file0\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000a00)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f00000001c0)='./bus\x00') openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0/file0\x00', 0x840c0, 0x12b) r0 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r0, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x41}}, 0x10) listen(r0, 0x0) recvmmsg(r0, &(0x7f0000004240)=[{{0x0, 0x0, &(0x7f0000000b40)=[{&(0x7f0000000400)=""/161, 0xa1}], 0x1}, 0x280}], 0x1, 0x40000020, 0x0) bind$tipc(r0, &(0x7f0000000040)=@nameseq={0x1e, 0x1, 0x0, {0x2, 0x0, 0x4}}, 0x10) rmdir(&(0x7f0000000380)='./file0/../file0\x00') 1.773592191s ago: executing program 7 (id=745): socket$alg(0x26, 0x5, 0x0) openat$snapshot(0xffffff9c, &(0x7f0000000080), 0x40040, 0x0) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f0000000180)={0xaa, 0x621}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x19) r2 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x10, 0xa702) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x0, 0x2000000000000069, &(0x7f0000000040)=ANY=[@ANYBLOB="180100002100000000000000000000008500000075000000a5"], 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x30, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0xfffffffffffffc85) r3 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) bind$bt_hci(r3, &(0x7f0000000000)={0x27}, 0x74) sendmmsg$unix(r3, &(0x7f0000000b00)=[{{&(0x7f00000000c0)=@file={0x0, './file0\x00'}, 0x60, 0x0}}, {{&(0x7f0000000e80)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000000740)=[{&(0x7f0000001dc0)="bb", 0xfdef}, {0x0}], 0x2}}, {{&(0x7f0000000580)=@file={0x0, './file0/file0\x00'}, 0x6e, &(0x7f00000006c0)=[{&(0x7f0000000600)='z', 0xfdef}], 0x1}}], 0x3, 0x0) socket$l2tp6(0xa, 0x2, 0x73) bpf$MAP_CREATE(0x0, &(0x7f0000000e40)=ANY=[@ANYBLOB="1200000004000000080000000800000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYBLOB='\x00'/24], 0x48) socket(0x1, 0x2, 0x0) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) syz_open_dev$cec(&(0x7f0000002340), 0x0, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) mmap$usbfs(&(0x7f0000398000/0x2000)=nil, 0x2000, 0x5, 0x110, r2, 0x3) open_tree(0xffffffffffffff9c, &(0x7f0000000200)='\x00', 0x9801) r5 = syz_open_procfs(0x0, &(0x7f0000000380)='mounts\x00') read$FUSE(r5, &(0x7f0000000780)={0x2020}, 0x2020) io_uring_enter(0xffffffffffffffff, 0x2def, 0x4000, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff) add_key$keyring(&(0x7f0000000280), &(0x7f0000000340)={'syz', 0x2}, 0x0, 0x0, 0x0) r6 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r6, 0x8982, &(0x7f0000000300)={0x0, 'vxcan1\x00'}) 1.038125923s ago: executing program 0 (id=746): openat$rfkill(0xffffffffffffff9c, 0x0, 0xc2200, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x0, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000040), 0x0, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8b24, &(0x7f0000000000)={'wlan0\x00'}) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="180000000008002b000000000000000018040000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000004300000095"], 0x0, 0x0, 0x11, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x8, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x3, &(0x7f0000000480)=ANY=[@ANYBLOB="180000000000000000000000000000000000000000000000e68bd839532e07b665d3c93dfdc6386d44d9d1fa6cbffc64f3142551e5c682c687bc113f59ef1f4fb2ce087f3cad75a65a4687940f49c02eae214087e1d3bf49ebb589124ea504375c618bb7454afb7874e522f4214e815a920e7a67587be5f9b23a82543d8f3d252635"], &(0x7f0000000000)='GPL\x00', 0x8, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000200)={0x8, 0x4}, 0x8, 0x10, &(0x7f0000000240)={0x3, 0x4, 0x3, 0x6}, 0x10, 0x0, 0x0, 0x0, &(0x7f00000016c0)=[0x1], 0x0, 0x10, 0x37, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) syz_clone(0x2800c000, &(0x7f0000000040)="1e558d908dfb", 0x6, 0x0, 0x0, &(0x7f00000015c0)="89ef1284c86555bfe69b541fc18b8f329814f57b085a9adabc2afa35de66b03f419c0cd00b1b3a660bb38d58438909") r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f0000000f00)=[{{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000540)=""/209, 0xd1}], 0x1, &(0x7f0000000680)=""/126, 0x7e}, 0xe0}, {{&(0x7f0000000700)=@hci, 0x80, &(0x7f0000000980)=[{&(0x7f0000000340)=""/1, 0x1}, {&(0x7f0000000780)=""/91, 0x5b}, {&(0x7f0000000800)=""/42, 0x2a}, {&(0x7f0000000840)=""/21, 0x15}, {&(0x7f0000000880)=""/234, 0xea}], 0x5, &(0x7f00000009c0)=""/18, 0x12}, 0x6}, {{&(0x7f0000000a00)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @ipv4={""/10, ""/2, @dev}}}}, 0x80, &(0x7f0000000dc0)=[{&(0x7f0000000a80)=""/208, 0xd0}, {&(0x7f0000000b80)=""/76, 0x4c}, {&(0x7f0000000c00)=""/203, 0xcb}, {&(0x7f0000000d00)=""/145, 0x91}], 0x4, &(0x7f0000000e00)=""/209, 0xd1}, 0x7d987cd3}], 0x3, 0x2, 0x0) sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) socket$nl_netfilter(0x10, 0x3, 0xc) 443.047291ms ago: executing program 1 (id=747): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_init_net_socket$rose(0xb, 0x5, 0x0) getsockopt$rose(r2, 0x104, 0x2, 0x0, &(0x7f0000000240)=0xfffffffffffffdea) ioctl$KVM_SET_DEVICE_ATTR_vm(r1, 0x4018aee1, &(0x7f00000000c0)=@attr_arm64={0x0, 0x0, 0x0, &(0x7f0000000080)={0x3, 0x409}}) r3 = syz_open_dev$sndctrl(&(0x7f0000001440), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r3, 0x40045532, &(0x7f0000000180)) r4 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0), 0x88602, 0x0) r5 = syz_open_dev$sndpcmp(&(0x7f0000000140), 0x0, 0xa2c65) ioctl$SNDCTL_DSP_SETFMT(r4, 0xc0045005, &(0x7f0000000080)=0x1ff) ioctl$SNDRV_PCM_IOCTL_WRITEI_FRAMES(r5, 0x400c4150, &(0x7f00000001c0)={0x0, &(0x7f0000000000)="b8", 0x1}) r6 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID(r6, 0x4008ae8a, &(0x7f0000000000)=ANY=[@ANYRES64=r6, @ANYRES32=r6]) 199.415513ms ago: executing program 7 (id=748): fsconfig$FSCONFIG_CMD_RECONFIGURE(0xffffffffffffffff, 0x7, 0x0, 0x0, 0x0) r0 = openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000300)={'ip6gre0\x00', &(0x7f00000004c0)={'syztnl2\x00', 0x0, 0x4, 0x1, 0x4, 0x5, 0x55, @loopback, @dev={0xfe, 0x80, '\x00', 0x3a}, 0x20, 0x20, 0xffff, 0x5}}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000800)=@deltfilter={0x2684, 0x2d, 0x400, 0x70bd28, 0x25dfdbff, {0x0, 0x0, 0x0, r1, {0x5, 0x9}, {0xe, 0xfff3}, {0xa, 0xfffa}}, [@filter_kind_options=@f_u32={{0x8}, {0x1c28, 0x2, [@TCA_U32_CLASSID={0x8, 0x1, {0xfff1, 0x10}}, @TCA_U32_ACT={0x138c, 0x7, [@m_nat={0x8c, 0x15, 0x0, 0x0, {{0x8}, {0x54, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{0x38, 0xd42, 0x20000000, 0x9, 0x9}, @broadcast, @dev={0xac, 0x14, 0x14, 0x42}, 0x0, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x9, 0x8, 0x2, 0x10000, 0x3}, @private=0xa010102, @loopback, 0xffffffff}}]}, {0x11, 0x6, "07553b8da2b016cc5f76347196"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x2}}}}, @m_mirred={0x1130, 0xd, 0x0, 0x0, {{0xb}, {0x104, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x6, 0x80000001, 0x3, 0x44f, 0xe7f}, 0x4}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x2, 0x3, 0x7, 0x2, 0x8}, 0x4}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x7c, 0x8, 0x4, 0x81, 0x9}, 0x2}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x3, 0x7fff, 0x2, 0xd18c, 0xfffffff1}, 0x1}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x8001, 0x101, 0x8, 0xc, 0x1}, 0x3}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x50000000, 0x8, 0x10000000, 0x3, 0xa5fd}, 0x2}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0xffffffff, 0x7, 0xffffffffffffffff, 0x400, 0xc027}, 0x2}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x3, 0x7, 0x0, 0x6, 0x8000}, 0x1}}]}, {0x1004, 0x6, "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"}, {0xc}, {0xc, 0x8, {0x2}}}}, @m_csum={0x170, 0x20, 0x0, 0x0, {{0x9}, {0xe4, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x2, 0x9127, 0x1, 0x0, 0x10}, 0x5f}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0xd, 0x5, 0x0, 0x4, 0x7b}, 0x69}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x18000, 0x5, 0x0, 0x200, 0x8}, 0x5e}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x80, 0x2, 0x10000000, 0x9, 0x4d6b7ca1}, 0x3d}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0xf, 0x7, 0xffffffffffffffff, 0x75113de0, 0x800}, 0x6a}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x6, 0xe, 0x1, 0xb, 0x101}, 0x6c}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x5, 0xa, 0x8, 0x8000, 0x9}, 0x40}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x8001, 0x1, 0x8, 0x101, 0x2}, 0x7e}}]}, {0x61, 0x6, "be8804ce9165a2d974e9228d5808526b447a7ca65afc0efcc58d2e4d2870bd742c076c22dd537931441862ec6baebfcc6a77080dd16d374a705fd1540044cae6d1e9ceccaed38eed8cbb4b745d17ccef1792274cda6dafe5b6fdfdbd7b"}, {0xc}, {0xc, 0x8, {0x3, 0x1}}}}, @m_tunnel_key={0x5c, 0xb, 0x0, 0x0, {{0xf}, {0x14, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_ENC_DST_PORT={0x6, 0x9, 0x4e23}, @TCA_TUNNEL_KEY_ENC_IPV4_SRC={0x8, 0x3, @loopback}]}, {0x19, 0x6, "aad4f21b6322cbd23f447e3669d115f7f0576a1c2d"}, {0xc}, {0xc, 0x8, {0x1, 0x3}}}}]}, @TCA_U32_CLASSID={0x8, 0x1, {0x9, 0x8}}, @TCA_U32_POLICE={0x880, 0x6, [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x400, 0xfffffff9, 0x5, 0x1, 0x3, 0x7, 0x3, 0x2, 0x8547, 0xc90f, 0x2, 0x6, 0x3c4e, 0x0, 0x6727, 0x1, 0x6, 0x3ff, 0x4, 0x7ff, 0xfa, 0x9, 0x3, 0x7, 0x5, 0x1, 0x3, 0xa, 0x8, 0x800, 0x7fff, 0x4, 0x6, 0x5, 0x0, 0x3, 0x2, 0x10, 0x3, 0xe17, 0x81, 0x4cb, 0x0, 0x8796, 0x409, 0x1, 0x861, 0x7, 0xb, 0x6, 0x10000, 0xfff, 0x7fffffff, 0x7ff, 0x7, 0xda, 0x6, 0x2, 0x9, 0x8, 0x8, 0x4cfc000, 0x9, 0xd, 0x6, 0xa8, 0xf, 0x8, 0x1, 0xa, 0x7fffffff, 0xbc27, 0xfffffffb, 0x883, 0x10000, 0x8000, 0x5, 0x1ff, 0x1, 0x8000, 0x800, 0x0, 0xb, 0xffffffff, 0x1000, 0x8, 0x1b76, 0x89, 0xd, 0xf, 0x2, 0x7, 0x5, 0x81, 0x2, 0xc, 0x8, 0x9239, 0x1, 0x0, 0x0, 0x4, 0x2, 0x6, 0xd9c5, 0x6, 0x4, 0x4, 0xffff448e, 0x400, 0x10000, 0x0, 0x5, 0x1, 0x5, 0x81, 0xfffffffc, 0xfe, 0x7, 0x8, 0x7a, 0x1ff, 0x2, 0x8, 0x0, 0x3, 0x7, 0x72e, 0x4bc, 0xfffffffa, 0x1, 0xf7, 0xfff, 0xd, 0x6, 0x5, 0x9, 0x4, 0x3, 0x5, 0x3, 0x401, 0x4, 0xfffffff9, 0x88d, 0x8, 0x5, 0x7f, 0x7f, 0x1000, 0x4, 0x2, 0x3, 0x0, 0x3, 0x7fff, 0xfffff001, 0x6, 0x1, 0x4, 0x5, 0x4, 0xffff0a69, 0xb, 0x1ff, 0x5, 0x400, 0xf, 0xb54a, 0x2, 0x7, 0x9, 0x6, 0x5, 0x3, 0x8, 0xe, 0xf, 0x4, 0x6, 0xdd, 0xdaa, 0x66, 0x7, 0x8, 0xbd, 0x6, 0x7ff, 0x1, 0x10001, 0x0, 0x800, 0xfffffa04, 0x8000, 0x4, 0x3, 0x9692, 0x0, 0x3, 0x3, 0x9, 0x7ff, 0x1, 0x5, 0xff, 0x0, 0x6, 0x10000, 0x4, 0xae2c, 0xfffffffc, 0x8, 0x5, 0x3, 0x6, 0x0, 0x3, 0xfffffff8, 0x7, 0x8, 0x3, 0x1, 0x100, 0x9, 0x8, 0xd4, 0x2, 0x0, 0x32e, 0x2, 0xfff, 0x80000000, 0x400, 0x6, 0xffffff01, 0x3, 0x4, 0x3, 0x7, 0x2, 0x80000000, 0x6, 0x1, 0x8, 0x5, 0x1, 0xe3aa, 0x6, 0xfff, 0x3, 0x0, 0x101, 0x4, 0x67d, 0x4, 0x80000000]}, @TCA_POLICE_RATE={0x404, 0x2, [0x0, 0x5211, 0x2, 0x7, 0x9, 0x9, 0x7, 0x8, 0x0, 0x8001, 0x7fff, 0x2, 0x10000, 0x6, 0x400, 0xffffffff, 0x80, 0x0, 0x2, 0x5, 0x3ff, 0x0, 0x7709, 0x101, 0x81, 0x8, 0x7, 0x0, 0xe0b6, 0x3, 0x4, 0x383, 0x9, 0x4, 0x3, 0x3, 0x101, 0x9, 0x56, 0x1, 0x2, 0x0, 0x6, 0x2, 0x9, 0xfb24, 0x1, 0x4, 0xfff, 0x80000000, 0x4, 0x6, 0x5, 0x8, 0x9, 0x7, 0x9, 0x5, 0x0, 0xf9, 0x4, 0x3ff, 0x1, 0x4, 0x44a5, 0x4, 0x1, 0x1, 0x791e, 0xfffffffc, 0x8, 0x5, 0x0, 0x8, 0x0, 0x2, 0x0, 0xfff, 0x2, 0xffffff81, 0x1000, 0x1, 0x1ff, 0x2, 0x2c3, 0x6b75ef66, 0x10001, 0xfff, 0xa0800000, 0x10000, 0x80000000, 0x7ff, 0x6, 0xffff10ca, 0x0, 0x1, 0xbcfd, 0x9, 0x800, 0xd, 0x4, 0x9, 0x7, 0x24f4ff97, 0x3, 0x1000, 0x7, 0x2c, 0xfffff000, 0x8, 0x5, 0x1, 0x7f, 0x0, 0x4, 0xa, 0x6, 0x1, 0xfffffffc, 0x7ff, 0x1, 0xa, 0xfffffffe, 0x0, 0x3, 0x40, 0xff, 0x2054, 0x6, 0x40, 0x1, 0x8001, 0xfff, 0x2, 0x6, 0xfffffffe, 0xfffff800, 0xfffffff4, 0x7fff, 0x3, 0x3, 0x7fffffff, 0xfffffffa, 0x40, 0x4, 0x8000, 0xffff, 0x4, 0x80000000, 0x977f, 0x8, 0x400, 0x8001, 0x1, 0x2, 0x800, 0x5, 0x80, 0x120000, 0x183a, 0x18, 0x800, 0x0, 0x2, 0x16, 0x2bb, 0x9, 0x4, 0x9, 0x4c1, 0x800, 0xdb, 0x10001, 0x2, 0x800, 0x1, 0x10001, 0x740, 0x9, 0x5, 0x3, 0x2, 0x7, 0x8, 0x10001, 0x2, 0x3, 0x8, 0xf, 0x0, 0x4, 0x0, 0x5, 0x9, 0xda68, 0x1000, 0x6, 0xffffffff, 0xffff, 0xcfa1, 0x8, 0xb, 0x8, 0x3, 0xf, 0x4, 0xf, 0x8, 0x8, 0x7, 0x5, 0x8, 0x1000, 0x8, 0xb8, 0x8, 0x3ff, 0x7fff, 0x5, 0xfffffffa, 0x7fff, 0x8, 0x400, 0xfff, 0xa, 0x2, 0x8, 0xdd, 0x7ff, 0xf, 0x5, 0x591, 0xff, 0x0, 0x3, 0x5, 0x8, 0x1, 0xcb, 0x6, 0x2, 0x5, 0x247b, 0x7f, 0x0, 0x7ed8, 0x2, 0x73, 0x4, 0xd6, 0x7, 0xfffffffc, 0x5, 0xffff, 0x4e, 0x9]}, @TCA_POLICE_RESULT={0x8, 0x5, 0x400}, @TCA_POLICE_RESULT={0x8, 0x5, 0x9b}, @TCA_POLICE_RATE64={0xc, 0x8, 0x3}, @TCA_POLICE_RATE64={0xc, 0x8, 0x1ff}, @TCA_POLICE_RESULT={0x8, 0x5, 0x1}, @TCA_POLICE_RESULT={0x8}, @TCA_POLICE_TBF={0x3c, 0x1, {0x4, 0x5, 0x0, 0x76b, 0x1000, {0x6, 0x3, 0xff, 0x100, 0x4, 0x8}, {0x60, 0x2, 0x7, 0x1, 0x0, 0x4}, 0x9, 0x9d9, 0x4}}]}, @TCA_U32_LINK={0x8, 0x3, 0xffffffff}]}}, @TCA_CHAIN={0x8, 0xb, 0xff}, @TCA_RATE={0x6, 0x5, {0x10, 0x4}}, @TCA_CHAIN={0x8, 0xb, 0x9}, @TCA_CHAIN={0x8, 0xb, 0x117c}, @filter_kind_options=@f_cgroup={{0xb}, {0xa04, 0x2, [@TCA_CGROUP_ACT={0x3f0, 0x1, [@m_nat={0xa4, 0x1c, 0x0, 0x0, {{0x8}, {0x7c, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{0x1, 0x8001, 0x3, 0x3, 0x8}, @initdev={0xac, 0x1e, 0x0, 0x0}, @remote, 0xff, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x7f, 0x10000, 0x0, 0x401, 0x5}, @multicast2, @initdev={0xac, 0x1e, 0x1, 0x0}, 0xff000000}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x24, 0x55, 0x4, 0x9, 0xfffffff7}, @dev={0xac, 0x14, 0x14, 0x34}, @loopback, 0xff000000, 0x1}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x2}}}}, @m_tunnel_key={0xe0, 0x16, 0x0, 0x0, {{0xf}, {0x50, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_ENC_IPV4_SRC={0x8, 0x3, @initdev={0xac, 0x1e, 0x1, 0x0}}, @TCA_TUNNEL_KEY_ENC_IPV4_DST={0x8, 0x4, @dev={0xac, 0x14, 0x14, 0x36}}, @TCA_TUNNEL_KEY_ENC_IPV4_SRC={0x8, 0x3, @empty}, @TCA_TUNNEL_KEY_ENC_IPV4_SRC={0x8, 0x3, @local}, @TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{0x89, 0xffffffff, 0x5, 0x6, 0x1000}, 0x2}}, @TCA_TUNNEL_KEY_ENC_IPV4_SRC={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0x2d}}, @TCA_TUNNEL_KEY_ENC_KEY_ID={0x8, 0x7, 0x2}]}, {0x63, 0x6, "94fa24900a7f1ada90522ec11b08fadfb3146ba259adf615c9b2708ae98e8679d490727405a183148a342a55bb0f0880fc9f50a09789158481412bdbb167e0d0c52d5538aca52ada8a31d62c988da87197855c99291d1e3d59a94a848bb2f6"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x2}}}}, @m_sample={0x124, 0x1d, 0x0, 0x0, {{0xb}, {0x34, 0x2, 0x0, 0x1, [@TCA_SAMPLE_RATE={0x8, 0x3, 0x3}, @TCA_SAMPLE_TRUNC_SIZE={0x8, 0x4, 0x7}, @TCA_SAMPLE_PSAMPLE_GROUP={0x8, 0x5, 0x98f}, @TCA_SAMPLE_PSAMPLE_GROUP={0x8}, @TCA_SAMPLE_PSAMPLE_GROUP={0x8, 0x5, 0x7}, @TCA_SAMPLE_TRUNC_SIZE={0x8, 0x4, 0x80000000}]}, {0xc5, 0x6, "f74fd6447e64384997f57b00f3575517a4d2d7fc07622ebfb464601244bea4be4365806c99a6a5cd5e26b379aa51f94e04b6a77c0aa5a611f4b55dbbfcb5050d9b7b5c2f5c18d78b0f72ec4fd9f98657ce961df5f9ced1c08f0b4da018b6f42dd9259e2ac956e80913765f34468a955a80ad1323e62f215ee7ea559018d1b2c04223b544a7a06909555c089e5e0f375211f80c01b29de2728343f4bd7107c681898a76edfb2a8af30e4f23bbbbe39b5fd53f3ec93752f9c028ac60d41b68b3d8fa"}, {0xc}, {0xc, 0x8, {0x1, 0x1}}}}, @m_ctinfo={0x144, 0x15, 0x0, 0x0, {{0xb}, {0x4c, 0x2, 0x0, 0x1, [@TCA_CTINFO_PARMS_CPMARK_MASK={0x8, 0x7, 0x65e5}, @TCA_CTINFO_PARMS_CPMARK_MASK={0x8, 0x7, 0xe33}, @TCA_CTINFO_ACT={0x18, 0x3, {0x7000000, 0x9, 0x5, 0x8, 0x3}}, @TCA_CTINFO_PARMS_DSCP_MASK={0x8, 0x5, 0x30c}, @TCA_CTINFO_PARMS_CPMARK_MASK={0x8, 0x7, 0x7}, @TCA_CTINFO_PARMS_CPMARK_MASK={0x8, 0x7, 0x9}, @TCA_CTINFO_PARMS_DSCP_STATEMASK={0x8}]}, {0xcf, 0x6, "dc62c928ceba0952c30603f8f46b50753c191da0d06634106ba2c3442f3753592e097510580af1eedbb19efa59cd226d9c2c4afc8fb6590c7b601032ac431371e5d14ca17f1d1ec0ff624c552401058283f6903816b603f6b8fa5ff41b51b6b3e032fc04ab87935fefba44d1681da1001af0311822bfee7de50d7945423d0ad16c571818b06b1fedbcb63433005fe9ea19be4fcaf7482213439e95d5988607ce429dab4c29d74e54cb3eca7feac2bc17fb0891d3a660b89b2f2f2713e8a2e71464f146f679e96ae37b469e"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x2}}}}]}, @TCA_CGROUP_EMATCHES={0x2f0, 0x3, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x8}}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x8}}, @TCA_EMATCH_TREE_LIST={0x28c, 0x2, 0x0, 0x1, [@TCF_EM_CANID={0x14, 0x1, 0x0, 0x0, {{0x0, 0x7, 0x3}, {{0x1, 0x1, 0x0, 0x1}, {0x1, 0x0, 0x1}}}}, @TCF_EM_NBYTE={0x1c, 0x1, 0x0, 0x0, {{0x9, 0x2, 0x7}, {0x0, 0xa, 0x2, "e50ebefdf3933544da2c"}}}, @TCF_EM_U32={0x1c, 0x1, 0x0, 0x0, {{}, {0x7ff, 0x2, 0x9, 0x10001}}}, @TCF_EM_CMP={0x18, 0x3, 0x0, 0x0, {{0x4, 0x1, 0x7f}, {0x0, 0x7, 0x5, 0x0, 0x2, 0x0, 0x2}}}, @TCF_EM_U32={0x1c, 0x2, 0x0, 0x0, {{0x1, 0x3, 0x4}, {0x7f4, 0x64405c8f, 0x7fffffff, 0xf5b}}}, @TCF_EM_CONTAINER={0x10, 0x3, 0x0, 0x0, {{0x1000, 0x0, 0x10}, "1ae7a8"}}, @TCF_EM_IPT={0x1c4, 0x3, 0x0, 0x0, {{0x28, 0x9, 0x7fff}, [@TCA_EM_IPT_MATCH_REVISION={0x5, 0x3, 0x7}, @TCA_EM_IPT_NFPROTO={0x5, 0x4, 0x1}, @TCA_EM_IPT_MATCH_DATA={0xc5, 0x5, "edbf4f139ad26a6ab8df36e1531113d0503dfc68d43c961d94c72db62ef35a15e08b744ea55e53bae1efffadd9a4312f9ea84e5767e16dfdaf09d01624a41f308b6e1af6469162b577a040c7c68ad76fea6d8b95daec7c0472e84171451131a9c1ad0ed4f1afb84274bdd398152b54598a8280bf1beb124b7d4a834cf225e991d918f6b44ffcb9ece085b0f7c8ae2fc20a02a8de089cfd4368105be4c4b771458012998e60ed1a9e2ddc2a25114d7966038bd38dd7ebf8ea498c35b8d6a7980906"}, @TCA_EM_IPT_MATCH_REVISION={0x5, 0x3, 0x3}, @TCA_EM_IPT_HOOK={0x8, 0x1, 0x1}, @TCA_EM_IPT_MATCH_NAME={0xb}, @TCA_EM_IPT_MATCH_DATA={0xbb, 0x5, "9d106de69643570e0b08031bb4fcf9753b88170732d968243981eb68ec531643f51a51e06fb4d3b310b6c1a2af3735c9c047ccbbba3423f59a6ddb1e8fbb340a6f6ce1e97b24da18b9e27c1992c2d8de53c318532848146c0e6e989920a4165fa7c978fc2c18410eb35e0a347487dd9cba3470d32d8a98887b86e206304bd79ee6aa1cdd05ae0e57b0ddfd18ab920815c185cbb72463b19c389e5032bac62c4a702e85744d35e31d0b65c288f3c75bf00414985e7ab6ca"}, @TCA_EM_IPT_HOOK={0x8, 0x1, 0x2}]}}, @TCF_EM_IPSET={0x10, 0x2, 0x0, 0x0, {{0x9, 0x8, 0x1ff}, {0x4, 0x3, 0x4}}}, @TCF_EM_IPSET={0x10, 0x3, 0x0, 0x0, {{0x8, 0x8, 0x1}, {0x0, 0x5, 0x6}}}, @TCF_EM_NBYTE={0x14, 0x3, 0x0, 0x0, {{0x2, 0x2, 0xfc00}, {0x1, 0x4, 0x1, "692dcb76"}}}]}, @TCA_EMATCH_TREE_LIST={0x40, 0x2, 0x0, 0x1, [@TCF_EM_CANID={0x14, 0x2, 0x0, 0x0, {{0x9, 0x7, 0x673}, {{0x2}, {0x1, 0x1, 0x0, 0x1}}}}, @TCF_EM_CANID={0x14, 0x2, 0x0, 0x0, {{0x2, 0x7, 0x7}, {{0x3, 0x1, 0x1, 0x1}, {0x3, 0x1, 0x1, 0x1}}}}, @TCF_EM_CANID={0x14, 0x3, 0x0, 0x0, {{0x4}, {{0x4}, {0x4, 0x1, 0x1, 0x1}}}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x9}}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x80}}]}, @TCA_CGROUP_EMATCHES={0x320, 0x3, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x84, 0x2, 0x0, 0x1, [@TCF_EM_CMP={0x18, 0x1, 0x0, 0x0, {{0x1, 0x1, 0x2}, {0x8000, 0xd9ea, 0x0, 0x4, 0xc, 0x0, 0x2}}}, @TCF_EM_IPT={0x30, 0x3, 0x0, 0x0, {{0x2}, [@TCA_EM_IPT_NFPROTO={0x5, 0x4, 0x7}, @TCA_EM_IPT_MATCH_NAME={0xb}, @TCA_EM_IPT_MATCH_REVISION={0x5, 0x3, 0xb}, @TCA_EM_IPT_MATCH_REVISION={0x5, 0x3, 0x7}]}}, @TCF_EM_U32={0x1c, 0x3, 0x0, 0x0, {{0xc000, 0x3, 0x5}, {0xffffffff, 0x9, 0xffff, 0x1ff}}}, @TCF_EM_U32={0x1c, 0x2, 0x0, 0x0, {{0x2, 0x3, 0x3}, {0x0, 0x0, 0x1, 0x5}}}]}, @TCA_EMATCH_TREE_LIST={0x30, 0x2, 0x0, 0x1, [@TCF_EM_U32={0x1c, 0x1, 0x0, 0x0, {{0x6, 0x3, 0x2280}, {0x10001, 0xfffffffe, 0x3, 0x3}}}, @TCF_EM_IPSET={0x10, 0x2, 0x0, 0x0, {{0x5, 0x8, 0x2}, {0x1, 0x0, 0x5}}}]}, @TCA_EMATCH_TREE_LIST={0x268, 0x2, 0x0, 0x1, [@TCF_EM_NBYTE={0x18, 0x3, 0x0, 0x0, {{0x3ff, 0x2, 0x1}, {0x7fff, 0x8, 0x1, "1ca29eb1e987233a"}}}, @TCF_EM_CANID={0x14, 0x1, 0x0, 0x0, {{0xb, 0x7, 0x6}, {{0x1, 0x0, 0x0, 0x1}, {0x2}}}}, @TCF_EM_NBYTE={0x14, 0x3, 0x0, 0x0, {{0x2, 0x2, 0xb}, {0x7, 0x4, 0x0, "5990f770"}}}, @TCF_EM_IPT={0x48, 0x1, 0x0, 0x0, {{0x6, 0x9, 0x1}, [@TCA_EM_IPT_MATCH_DATA={0x30, 0x5, "07192e813c5be289dd468f4b3a6513b6e08154aaebda353a9d08a9feccc7ea96c657cc98ea5b0bd2b0a2d2c7"}, @TCA_EM_IPT_MATCH_NAME={0xb}]}}, @TCF_EM_IPT={0x1dc, 0x1, 0x0, 0x0, {{0x7, 0x9, 0xfff}, [@TCA_EM_IPT_MATCH_NAME={0xb}, @TCA_EM_IPT_MATCH_NAME={0xb}, @TCA_EM_IPT_NFPROTO={0x5, 0x4, 0xe}, @TCA_EM_IPT_MATCH_DATA={0x9f, 0x5, "e2129d931165b4b9b4bbba381ebd9b4f279a0ecf39f95e9a2138e3ba943bbb188f1615b0d7301ab3ae14099eb6367e4d64843691ddb90ced7b0d2f21b8a1988f7089565b26a0407a8ce8e505078f756082d84e7ba390c1d3c036602463517f0c860075b2ee5379a506e3245c3efbc1e9c915c8eeef00a3b85bc7bbe7800b8830cb95638612743c305045533591600b480ee7761fc4c972a250c5a2"}, @TCA_EM_IPT_MATCH_DATA={0x103, 0x5, "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"}, @TCA_EM_IPT_MATCH_NAME={0xb}]}}]}]}]}}]}, 0x2684}, 0x1, 0x0, 0x0, 0x804}, 0x8000) r2 = syz_genetlink_get_family_id$nfc(0x0, 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sendmsg$NFC_CMD_GET_SE(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x14, r2, 0x800, 0x70bd25, 0x25dfdbfb, {}, ["", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x80}, 0xc1) syz_emit_ethernet(0x7f, &(0x7f0000000180)=ANY=[@ANYRESOCT=r0], 0x0) sched_setscheduler(0x0, 0x6, &(0x7f0000000080)) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r3, 0x8, &(0x7f0000000240)=0x2) close(0xffffffffffffffff) mount$pvfs2(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) write$6lowpan_control(r0, &(0x7f0000000000)='connect aa:aa:aa:aa:aa:10 0', 0x1b) r6 = syz_open_dev$tty1(0xc, 0x4, 0x1) r7 = dup(r6) fanotify_init(0x1, 0x800) mount$9p_fd(0x20100000, &(0x7f0000000380)='.\x00', &(0x7f00000000c0), 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r7, @ANYBLOB=',wfdno=', @ANYRESHEX, @ANYBLOB="b0a7"]) r8 = accept4$vsock_stream(r7, &(0x7f0000000440)={0x28, 0x0, 0x0, @local}, 0x10, 0x1000) setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(r8, 0x28, 0x1, &(0x7f0000000480)=0x1, 0x8) process_vm_readv(0x0, &(0x7f0000000180), 0x0, &(0x7f0000001ac0), 0x0, 0x0) timer_create(0x0, &(0x7f0000000080)={0x0, 0xd, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) 78.305329ms ago: executing program 0 (id=749): futex_waitv(0x0, 0x0, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) rt_sigtimedwait(&(0x7f0000000240)={[0x3ff, 0x10]}, &(0x7f0000000380), &(0x7f0000000280)={0x0, 0x3938700}, 0x8) r0 = syz_open_dev$video(&(0x7f0000000000), 0x485, 0x40000) ioctl$VIDIOC_S_SELECTION(r0, 0xc040565f, &(0x7f0000000080)={0x9, 0x0, 0x0, {0x4, 0x300, 0x0, 0x80000300}}) r1 = socket$nl_generic(0x10, 0x3, 0x10) socket$alg(0x26, 0x5, 0x0) r2 = openat$snapshot(0xffffff9c, &(0x7f0000000080), 0x40040, 0x0) r3 = userfaultfd(0x1) ioctl$UFFDIO_API(r3, 0xc018aa3f, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000000100)) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000080)={0x44, 0x0, &(0x7f0000000500)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000480)={@flat=@weak_binder={0x77622a85, 0xa, 0x2}, @fd={0x66642a85, 0x0, r2}, @ptr={0x70742a85, 0x1, &(0x7f0000000680)=""/131, 0x83, 0x0, 0x39}}, &(0x7f0000000280)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) r6 = dup3(r5, r4, 0x0) r7 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000002c0)='./binderfs/binder0\x00', 0x2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r7, 0x4018620d, &(0x7f0000000040)) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f00000003c0)={0xe8, 0x0, &(0x7f0000002940)=[@reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000300)={@ptr={0x70742a85, 0x0, &(0x7f00000027c0)=""/212, 0xd4, 0x2, 0x3d}, @fda={0x66646185, 0x6, 0x2, 0x32}, @flat=@handle={0x73682a85, 0x0, 0x3}}, &(0x7f0000000400)={0x0, 0x28, 0x44}}}, @reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000580)={@fd={0x66642a85, 0x0, r1}, @fda={0x66646185, 0x9, 0x1, 0x6}, @flat=@handle={0x73682a85, 0xb, 0x3}}, &(0x7f0000000440)={0x0, 0x18, 0x34}}, 0x400}, @enter_looper, @transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x48, 0x18, &(0x7f00000028c0)={@fd={0x66642a85, 0x0, r7}, @flat=@binder={0x73622a85, 0x0, 0x2}, @fd}, &(0x7f0000000740)={0x0, 0x18, 0x30}}}, @exit_looper, @exit_looper], 0x0, 0x0, 0x0}) dup3(r6, r7, 0x0) ioctl$BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f0000002a80)={0x8, 0x0, &(0x7f0000002a40)=[@release={0x40046306, 0x1}], 0x0, 0x0, 0x0}) r8 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r9 = dup(r8) write$6lowpan_enable(r9, &(0x7f0000000000)='0', 0xfffffd2c) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x9801) r10 = syz_open_procfs(0x0, &(0x7f0000000380)='mounts\x00') read$FUSE(r10, &(0x7f0000000780)={0x2020}, 0x2020) syz_io_uring_submit(0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_POLL_REMOVE={0x7, 0x5}) io_uring_enter(0xffffffffffffffff, 0x2def, 0x4000, 0x0, 0x0, 0x0) 77.985283ms ago: executing program 1 (id=750): futex_waitv(0x0, 0x0, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x171100) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) socket$kcm(0x29, 0x2, 0x0) memfd_create(&(0x7f0000000000)='e\xf4E\x88-\x00', 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'essiv(seqiv(authencesn(sha512-arm64,ecb(blowfish-generic))),sha1'}, 0x58) r3 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r3, 0x0, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) socket$inet6(0xa, 0x3, 0x8000000003c) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='sched_switch\x00'}, 0x10) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x9) sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="a000000010003b0e2a1a86eb2636037f00000000", @ANYRES32=r7, @ANYBLOB="0200000000008000800012000800010076746936"], 0xa0}}, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), 0xffffffffffffffff) mkdirat(0xffffffffffffffff, &(0x7f00000001c0)='./file0\x00', 0x80) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000280)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYRES32=0x0, @ANYRES32=r8, @ANYBLOB="01000000010000001c0012000c000100627269646765", @ANYRES64], 0x3c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000080)=@gettfilter={0x24, 0x2e, 0x1, 0x709d27, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x9, 0xffe2}, {0xf, 0x4}, {0xfff1, 0xd}}}, 0x24}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000600)=@newtfilter={0x148, 0x2c, 0xd27, 0x0, 0xffffffff, {0x0, 0x0, 0x0, r8, {}, {}, {0xd}}, [@filter_kind_options=@f_basic={{0xa}, {0x118, 0x2, [@TCA_BASIC_EMATCHES={0x114, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x28, 0x2, 0x0, 0x1, [@TCF_EM_IPT={0x14, 0x1, 0x0, 0x0, {{0x3, 0x9, 0x5}, [@TCA_EM_IPT_MATCH_REVISION={0x5, 0x3, 0x40}]}}, @TCF_EM_IPSET={0x10, 0x2, 0x0, 0x0, {{0x9, 0x8, 0x1}, {0x0, 0x5, 0x4}}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x6}}, @TCA_EMATCH_TREE_HDR={0x8}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xa}}, @TCA_EMATCH_TREE_LIST={0x1c, 0x2, 0x0, 0x1, [@TCF_EM_CMP={0x18, 0x1, 0x0, 0x0, {{0x2, 0x1, 0x3}, {0xfff, 0xffffffaa, 0x1, 0x1, 0x1, 0x2}}}]}, @TCA_EMATCH_TREE_LIST={0xac, 0x2, 0x0, 0x1, [@TCF_EM_CONTAINER={0xa8, 0x1, 0x0, 0x0, {{0x1, 0x0, 0xd}, "d627137964a9a8ed92e0da1188d9e3c7567bfc8be9c808afc5f1883efdc09c73cf7e3d4bf6c9ef874562264662d3f380beb74fd20ea2f7b6f72913fb3965cd11f71d9aa24454704e6a7babba0b00a5630c8ca0cae1165c71b1fbb86e71cbbdc069a69ed39a9c9d68055c74b50d27e0abdd736dd3b49f58ce8551abe2a41bf4b3d00bfaa90daa4ae5cb6d1a42a9965c89e3aa5d84897ed673ee2ca284"}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x6}}]}]}}]}, 0x148}, 0x1, 0x0, 0x0, 0x800}, 0x0) r9 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000040)={'veth1_to_team\x00'}) 0s ago: executing program 41 (id=750): futex_waitv(0x0, 0x0, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x171100) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) socket$kcm(0x29, 0x2, 0x0) memfd_create(&(0x7f0000000000)='e\xf4E\x88-\x00', 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'essiv(seqiv(authencesn(sha512-arm64,ecb(blowfish-generic))),sha1'}, 0x58) r3 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r3, 0x0, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) socket$inet6(0xa, 0x3, 0x8000000003c) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='sched_switch\x00'}, 0x10) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x9) sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="a000000010003b0e2a1a86eb2636037f00000000", @ANYRES32=r7, @ANYBLOB="0200000000008000800012000800010076746936"], 0xa0}}, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), 0xffffffffffffffff) mkdirat(0xffffffffffffffff, &(0x7f00000001c0)='./file0\x00', 0x80) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000280)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYRES32=0x0, @ANYRES32=r8, @ANYBLOB="01000000010000001c0012000c000100627269646765", @ANYRES64], 0x3c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000080)=@gettfilter={0x24, 0x2e, 0x1, 0x709d27, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x9, 0xffe2}, {0xf, 0x4}, {0xfff1, 0xd}}}, 0x24}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000600)=@newtfilter={0x148, 0x2c, 0xd27, 0x0, 0xffffffff, {0x0, 0x0, 0x0, r8, {}, {}, {0xd}}, [@filter_kind_options=@f_basic={{0xa}, {0x118, 0x2, [@TCA_BASIC_EMATCHES={0x114, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x28, 0x2, 0x0, 0x1, [@TCF_EM_IPT={0x14, 0x1, 0x0, 0x0, {{0x3, 0x9, 0x5}, [@TCA_EM_IPT_MATCH_REVISION={0x5, 0x3, 0x40}]}}, @TCF_EM_IPSET={0x10, 0x2, 0x0, 0x0, {{0x9, 0x8, 0x1}, {0x0, 0x5, 0x4}}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x6}}, @TCA_EMATCH_TREE_HDR={0x8}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xa}}, @TCA_EMATCH_TREE_LIST={0x1c, 0x2, 0x0, 0x1, [@TCF_EM_CMP={0x18, 0x1, 0x0, 0x0, {{0x2, 0x1, 0x3}, {0xfff, 0xffffffaa, 0x1, 0x1, 0x1, 0x2}}}]}, @TCA_EMATCH_TREE_LIST={0xac, 0x2, 0x0, 0x1, [@TCF_EM_CONTAINER={0xa8, 0x1, 0x0, 0x0, {{0x1, 0x0, 0xd}, "d627137964a9a8ed92e0da1188d9e3c7567bfc8be9c808afc5f1883efdc09c73cf7e3d4bf6c9ef874562264662d3f380beb74fd20ea2f7b6f72913fb3965cd11f71d9aa24454704e6a7babba0b00a5630c8ca0cae1165c71b1fbb86e71cbbdc069a69ed39a9c9d68055c74b50d27e0abdd736dd3b49f58ce8551abe2a41bf4b3d00bfaa90daa4ae5cb6d1a42a9965c89e3aa5d84897ed673ee2ca284"}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x6}}]}]}}]}, 0x148}, 0x1, 0x0, 0x0, 0x800}, 0x0) r9 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000040)={'veth1_to_team\x00'}) kernel console output (not intermixed with test programs): ute type 1 has an invalid length. [ 80.488059][ T6790] netlink: 224 bytes leftover after parsing attributes in process `syz.4.133'. [ 80.727896][ T39] audit: type=1800 audit(1735141181.063:24): pid=6812 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.135" name="/" dev="9p" ino=2 res=0 errno=0 [ 80.827228][ T6831] netlink: 4 bytes leftover after parsing attributes in process `syz.2.136'. [ 80.941565][ T6831] syz.2.136[6831] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 80.941611][ T6831] syz.2.136[6831] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 80.944890][ T6831] syz.2.136[6831] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 80.954962][ T6843] netlink: 4 bytes leftover after parsing attributes in process `syz.2.136'. [ 81.197983][ T833] hid-generic 0005:7FFF:0008.0004: hidraw1: BLUETOOTH HID v0.02 Device [syz1] on aa:aa:aa:aa:aa:aa [ 81.271355][ T6855] block nbd3: shutting down sockets [ 81.276443][ T6846] block nbd3: server does not support multiple connections per device. [ 81.280389][ T6846] block nbd3: NBD_DISCONNECT [ 81.282202][ T6846] block nbd3: Send disconnect failed -32 [ 81.284646][ T6846] block nbd3: Send disconnect failed -32 [ 81.749863][ T6864] netlink: 4 bytes leftover after parsing attributes in process `syz.3.143'. [ 81.755076][ T6864] netlink: 32 bytes leftover after parsing attributes in process `syz.3.143'. [ 81.914392][ T6868] netlink: 24 bytes leftover after parsing attributes in process `syz.3.145'. [ 81.950633][ T6872] netlink: 104 bytes leftover after parsing attributes in process `syz.3.147'. [ 81.985797][ T6876] netlink: 24 bytes leftover after parsing attributes in process `syz.3.148'. [ 81.988414][ T6877] netlink: 24 bytes leftover after parsing attributes in process `syz.3.148'. [ 83.011365][ T6890] random: crng reseeded on system resumption [ 83.683038][ T6904] netlink: 71 bytes leftover after parsing attributes in process `syz.3.156'. [ 84.095899][ T6916] Bluetooth: hci4: Frame reassembly failed (-84) [ 84.099935][ T45] Bluetooth: hci4: Frame reassembly failed (-84) [ 84.755193][ T5950] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 84.758982][ T5950] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 84.762374][ T5950] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 84.766159][ T5950] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 84.768634][ T5950] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 84.771554][ T5950] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 84.834585][ T6936] chnl_net:caif_netlink_parms(): no params data found [ 84.886546][ T6936] bridge0: port 1(bridge_slave_0) entered blocking state [ 84.888707][ T6936] bridge0: port 1(bridge_slave_0) entered disabled state [ 84.891088][ T6936] bridge_slave_0: entered allmulticast mode [ 84.893307][ T6936] bridge_slave_0: entered promiscuous mode [ 84.896603][ T6936] bridge0: port 2(bridge_slave_1) entered blocking state [ 84.898827][ T6936] bridge0: port 2(bridge_slave_1) entered disabled state [ 84.901257][ T6936] bridge_slave_1: entered allmulticast mode [ 84.903521][ T6936] bridge_slave_1: entered promiscuous mode [ 84.924787][ T6936] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 84.929865][ T6936] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 84.980594][ T6946] VFS: Can't find a Minix filesystem V1 | V2 | V3 on device nullb0. [ 84.981618][ T6936] team0: Port device team_slave_0 added [ 85.000845][ T1229] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 85.007461][ T6936] team0: Port device team_slave_1 added [ 85.027530][ T6936] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 85.029647][ T6936] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 85.037056][ T6936] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 85.043326][ T6936] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 85.045492][ T6936] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 85.053864][ T6936] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 85.078919][ T6936] hsr_slave_0: entered promiscuous mode [ 85.081063][ T6936] hsr_slave_1: entered promiscuous mode [ 85.083070][ T6936] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 85.085924][ T6936] Cannot create hsr debugfs directory [ 85.096734][ T1229] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 85.182370][ T1229] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 85.198508][ T6936] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 85.202983][ T6936] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 85.206193][ T6936] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 85.209344][ T6936] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 85.217774][ T6936] bridge0: port 2(bridge_slave_1) entered blocking state [ 85.219883][ T6936] bridge0: port 2(bridge_slave_1) entered forwarding state [ 85.222068][ T6936] bridge0: port 1(bridge_slave_0) entered blocking state [ 85.224129][ T6936] bridge0: port 1(bridge_slave_0) entered forwarding state [ 85.244032][ T6936] 8021q: adding VLAN 0 to HW filter on device bond0 [ 85.253707][ T1140] bridge0: port 1(bridge_slave_0) entered disabled state [ 85.256695][ T1140] bridge0: port 2(bridge_slave_1) entered disabled state [ 85.280297][ T1229] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 85.286492][ T6936] 8021q: adding VLAN 0 to HW filter on device team0 [ 85.293382][ T105] bridge0: port 1(bridge_slave_0) entered blocking state [ 85.295413][ T105] bridge0: port 1(bridge_slave_0) entered forwarding state [ 85.299888][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 85.301850][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 85.383825][ T1229] bridge_slave_1: left allmulticast mode [ 85.386808][ T1229] bridge_slave_1: left promiscuous mode [ 85.389011][ T1229] bridge0: port 2(bridge_slave_1) entered disabled state [ 85.399063][ T1229] bridge_slave_0: left allmulticast mode [ 85.401028][ T1229] bridge_slave_0: left promiscuous mode [ 85.403111][ T1229] bridge0: port 1(bridge_slave_0) entered disabled state [ 85.506669][ T6959] 9pnet_fd: Insufficient options for proto=fd [ 85.509403][ T6959] __nla_validate_parse: 3 callbacks suppressed [ 85.509415][ T6959] netlink: 20 bytes leftover after parsing attributes in process `syz.4.167'. [ 85.683504][ T1229] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 85.687274][ T1229] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 85.692664][ T1229] bond0 (unregistering): Released all slaves [ 85.702817][ T6936] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 85.833163][ T6936] veth0_vlan: entered promiscuous mode [ 85.857933][ T6936] veth1_vlan: entered promiscuous mode [ 85.869483][ T6936] veth0_macvtap: entered promiscuous mode [ 85.872780][ T6936] veth1_macvtap: entered promiscuous mode [ 85.879078][ T6936] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 85.882112][ T6936] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.884788][ T6936] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 85.887930][ T6936] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.890883][ T6936] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 85.894034][ T6936] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.897775][ T6936] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 85.903982][ T6936] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 85.906913][ T6936] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.911175][ T6936] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 85.914058][ T6936] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.916753][ T6936] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 85.921242][ T6936] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.924673][ T6936] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 85.952672][ T6936] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.955182][ T6936] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.957640][ T6936] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.960398][ T6936] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.004190][ T45] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 86.006991][ T45] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 86.012370][ T1229] hsr_slave_0: left promiscuous mode [ 86.014504][ T1229] hsr_slave_1: left promiscuous mode [ 86.017540][ T1229] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 86.020888][ T1229] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 86.023514][ T1229] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 86.025772][ T1229] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 86.051626][ T1229] veth1_macvtap: left promiscuous mode [ 86.053533][ T1229] veth0_macvtap: left promiscuous mode [ 86.055463][ T1229] veth1_vlan: left promiscuous mode [ 86.057266][ T1229] veth0_vlan: left promiscuous mode [ 86.110145][ T5958] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 86.839812][ T5958] Bluetooth: hci2: command tx timeout [ 86.976063][ T1229] team0 (unregistering): Port device team_slave_1 removed [ 87.040095][ T1229] team0 (unregistering): Port device team_slave_0 removed [ 87.043899][ T7037] fuse: Bad value for 'fd' [ 87.619767][ T1140] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 87.622041][ T1140] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 87.700784][ T7048] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 87.822404][ T7048] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 87.964099][ T7048] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 88.061283][ T7048] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 88.113140][ T7047] efs: device does not support 512 byte blocks [ 88.114993][ T7047] device does not support 512 byte blocks [ 88.114993][ T7047] [ 88.121611][ T39] audit: type=1800 audit(1735141188.463:25): pid=7049 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.181" name="SYSV00000000" dev="hugetlbfs" ino=0 res=0 errno=0 [ 88.124809][ T7049] warning: `syz.3.181' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 88.253545][ T7048] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.262475][ T7048] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.268527][ T7048] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.275582][ T7048] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.402423][ T7101] /dev/nullb0: Can't open blockdev [ 89.059819][ T5958] Bluetooth: hci2: command tx timeout [ 89.109364][ T7127] xt_CT: No such helper "syz0" [ 89.510228][ T1331] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 89.679580][ T1331] usb 7-1: Using ep0 maxpacket: 8 [ 89.682003][ T1331] usb 7-1: config 7 has an invalid interface number: 161 but max is 0 [ 89.682050][ T1331] usb 7-1: config 7 has no interface number 0 [ 89.682063][ T1331] usb 7-1: config 7 interface 161 has no altsetting 0 [ 89.686446][ T1331] usb 7-1: New USB device found, idVendor=6737, idProduct=0001, bcdDevice=4e.59 [ 89.686460][ T1331] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 89.686497][ T1331] usb 7-1: Product: syz [ 89.686506][ T1331] usb 7-1: Manufacturer: syz [ 89.686513][ T1331] usb 7-1: SerialNumber: syz [ 89.935557][ T1331] hub 7-1:7.161: bad descriptor, ignoring hub [ 89.937423][ T1331] hub 7-1:7.161: probe with driver hub failed with error -5 [ 89.942413][ T1331] cypress_m8 7-1:7.161: HID->COM RS232 Adapter converter detected [ 89.945510][ T1331] cyphidcom ttyUSB0: required endpoint is missing [ 89.971329][ T1331] usb 7-1: USB disconnect, device number 3 [ 89.973963][ T1331] cypress_m8 7-1:7.161: device disconnected [ 90.172434][ T7169] netlink: 8 bytes leftover after parsing attributes in process `syz.5.198'. [ 90.178656][ T7169] IPVS: Error joining to the multicast group [ 90.399612][ T1331] usb 8-1: new high-speed USB device number 4 using dummy_hcd [ 90.448569][ T7178] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(9) [ 90.450542][ T7178] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 90.453720][ T7178] vhci_hcd vhci_hcd.0: Device attached [ 90.629616][ T35] vhci_hcd: vhci_device speed not set [ 90.699637][ T35] usb 47-1: new full-speed USB device number 2 using vhci_hcd [ 90.719610][ T1331] usb 8-1: Using ep0 maxpacket: 32 [ 90.733665][ T1331] usb 8-1: config 1 interface 0 altsetting 6 bulk endpoint 0x1 has invalid maxpacket 1024 [ 90.736382][ T1331] usb 8-1: config 1 interface 0 altsetting 6 bulk endpoint 0x82 has invalid maxpacket 32 [ 90.739062][ T1331] usb 8-1: config 1 interface 0 has no altsetting 0 [ 90.742742][ T1331] usb 8-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 90.745197][ T1331] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 90.747373][ T1331] usb 8-1: Product: 㐁 [ 90.748523][ T1331] usb 8-1: Manufacturer: 㽎똒ꥄ⧭篮˚茏㼓巒ᡔἊ䝟蘃멽﫞ᔡગ鉚ᓪ祐갹뵔爣ࡘ뎺좾扥汦⹘뜃㽬ᴱ渤 [ 90.759579][ T1331] usb 8-1: SerialNumber: ᠉ [ 90.763300][ T7173] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 90.765386][ T7173] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 91.011635][ T1331] usblp 8-1:1.0: usblp0: USB Bidirectional printer dev 4 if 0 alt 6 proto 2 vid 0x0525 pid 0xA4A8 [ 91.047549][ T1331] usb 8-1: USB disconnect, device number 4 [ 91.065158][ T1331] usblp0: removed [ 91.069746][ T5958] Bluetooth: hci2: command tx timeout [ 91.161875][ T7179] vhci_hcd: connection reset by peer [ 91.165522][ T1229] vhci_hcd: stop threads [ 91.167317][ T1229] vhci_hcd: release socket [ 91.171491][ T1229] vhci_hcd: disconnect device [ 91.402071][ T7194] syz.2.204: vmalloc error: size 6819840, failed to allocated page array size 13320, mode:0xcc2(GFP_KERNEL|__GFP_HIGHMEM), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 91.407844][ T7194] CPU: 3 UID: 0 PID: 7194 Comm: syz.2.204 Not tainted 6.13.0-rc4-syzkaller-00012-g9b2ffa6148b1 #0 [ 91.411828][ T7194] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 91.415492][ T7194] Call Trace: [ 91.416695][ T7194] [ 91.417872][ T7194] dump_stack_lvl+0x16c/0x1f0 [ 91.419717][ T7194] warn_alloc+0x24d/0x3a0 [ 91.421422][ T7194] ? __pfx_warn_alloc+0x10/0x10 [ 91.423305][ T7194] ? __get_vm_area_node+0x1b0/0x2f0 [ 91.424937][ T7194] ? __get_vm_area_node+0x1dc/0x2f0 [ 91.427054][ T7194] __vmalloc_node_range_noprof+0x1105/0x1530 [ 91.429426][ T7194] ? compat_do_replace+0x1ae/0x750 [ 91.431223][ T7194] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 91.433629][ T7194] ? compat_do_replace+0x1ae/0x750 [ 91.435400][ T7194] vmalloc_noprof+0x6b/0x90 [ 91.436758][ T7194] ? compat_do_replace+0x1ae/0x750 [ 91.438190][ T7194] compat_do_replace+0x1ae/0x750 [ 91.439543][ T7194] ? lock_acquire.part.0+0x11b/0x380 [ 91.440969][ T7194] ? __pfx_compat_do_replace+0x10/0x10 [ 91.442472][ T7194] ? aa_get_newest_label+0x376/0x680 [ 91.443913][ T7194] ? __pfx_aa_get_newest_label+0x10/0x10 [ 91.445481][ T7194] ? bpf_lsm_capable+0x9/0x10 [ 91.446785][ T7194] ? security_capable+0x7e/0x260 [ 91.448199][ T7194] do_ebt_set_ctl+0x4af/0x580 [ 91.449530][ T7194] ? sockopt_release_sock+0x52/0x60 [ 91.451021][ T7194] ? __pfx_do_ebt_set_ctl+0x10/0x10 [ 91.452548][ T7194] ? __pfx_do_ip_setsockopt+0x10/0x10 [ 91.454105][ T7194] ? nf_sockopt_find.constprop.0+0x221/0x290 [ 91.455818][ T7194] nf_setsockopt+0x8a/0xf0 [ 91.457112][ T7194] ip_setsockopt+0xcb/0xf0 [ 91.458395][ T7194] ipv6_setsockopt+0x155/0x170 [ 91.459731][ T7194] udpv6_setsockopt+0x7d/0xd0 [ 91.461040][ T7194] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 91.462687][ T7194] do_sock_setsockopt+0x222/0x480 [ 91.464089][ T7194] ? __pfx_do_sock_setsockopt+0x10/0x10 [ 91.465608][ T7194] ? lock_acquire+0x2f/0xb0 [ 91.466893][ T7194] __sys_setsockopt+0x1a0/0x230 [ 91.468245][ T7194] __ia32_sys_setsockopt+0xbc/0x160 [ 91.469694][ T7194] ? lockdep_hardirqs_on+0x7c/0x110 [ 91.471141][ T7194] ? syscall_enter_from_user_mode_prepare+0x68/0xe0 [ 91.472992][ T7194] __do_fast_syscall_32+0x73/0x120 [ 91.474434][ T7194] do_fast_syscall_32+0x32/0x80 [ 91.475817][ T7194] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 91.477605][ T7194] RIP: 0023:0xf7f95579 [ 91.478746][ T7194] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 91.484040][ T7194] RSP: 002b:00000000f50c555c EFLAGS: 00000296 ORIG_RAX: 000000000000016e [ 91.486356][ T7194] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000000000000 [ 91.488508][ T7194] RDX: 0000000000000080 RSI: 0000000020000300 RDI: 0000000000000280 [ 91.490687][ T7194] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 91.492871][ T7194] R10: 0000000000000000 R11: 0000000000000296 R12: 0000000000000000 [ 91.495037][ T7194] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 91.497227][ T7194] [ 91.498392][ T7194] Mem-Info: [ 91.499577][ T7194] active_anon:6309 inactive_anon:333 isolated_anon:0 [ 91.499577][ T7194] active_file:3310 inactive_file:978 isolated_file:0 [ 91.499577][ T7194] unevictable:1768 dirty:258 writeback:0 [ 91.499577][ T7194] slab_reclaimable:7058 slab_unreclaimable:58244 [ 91.499577][ T7194] mapped:24022 shmem:2505 pagetables:838 [ 91.499577][ T7194] sec_pagetables:301 bounce:0 [ 91.499577][ T7194] kernel_misc_reclaimable:0 [ 91.499577][ T7194] free:94743 free_pcp:4922 free_cma:0 [ 91.512136][ T7194] Node 0 active_anon:5252kB inactive_anon:1332kB active_file:4656kB inactive_file:0kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:5140kB dirty:16kB writeback:0kB shmem:5040kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:9840kB pagetables:844kB sec_pagetables:1140kB all_unreclaimable? yes [ 91.521477][ T7194] Node 1 active_anon:19984kB inactive_anon:0kB active_file:8584kB inactive_file:3912kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:90948kB dirty:1016kB writeback:0kB shmem:4980kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:2652kB pagetables:2508kB sec_pagetables:64kB all_unreclaimable? no [ 91.531400][ T7194] Node 0 DMA free:2988kB boost:2048kB min:2808kB low:2996kB high:3184kB reserved_highatomic:0KB active_anon:220kB inactive_anon:88kB active_file:4kB inactive_file:0kB unevictable:0kB writepending:4kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:568kB local_pcp:28kB free_cma:0kB [ 91.539041][ T7194] lowmem_reserve[]: 0 273 0 0 0 [ 91.540694][ T7194] Node 0 DMA32 free:17840kB boost:0kB min:13904kB low:17380kB high:20856kB reserved_highatomic:4096KB active_anon:5032kB inactive_anon:1244kB active_file:4652kB inactive_file:0kB unevictable:3536kB writepending:12kB present:1032196kB managed:306308kB mlocked:0kB bounce:0kB free_pcp:2480kB local_pcp:1760kB free_cma:0kB [ 91.548727][ T7194] lowmem_reserve[]: 0 0 0 0 0 [ 91.550527][ T7194] Node 1 DMA32 free:357216kB boost:0kB min:47144kB low:58928kB high:70712kB reserved_highatomic:0KB active_anon:19984kB inactive_anon:0kB active_file:8584kB inactive_file:3912kB unevictable:3536kB writepending:1016kB present:1048432kB managed:948252kB mlocked:0kB bounce:0kB free_pcp:17420kB local_pcp:584kB free_cma:0kB [ 91.558735][ T7194] lowmem_reserve[]: 0 0 0 0 0 [ 91.560324][ T7194] Node 0 DMA: 65*4kB (UM) 45*8kB (UM) 30*16kB (UM) 33*32kB (UM) 9*64kB (UM) 2*128kB (M) 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 2988kB [ 91.564285][ T7194] Node 0 DMA32: 110*4kB (UMEH) 79*8kB (MEH) 84*16kB (UMEH) 76*32kB (UMEH) 55*64kB (UMEH) 20*128kB (UMEH) 3*256kB (UE) 2*512kB (U) 3*1024kB (M) 1*2048kB (U) 0*4096kB = 17840kB [ 91.569180][ T7194] Node 1 DMA32: 4*4kB (ME) 52*8kB (UME) 77*16kB (UME) 240*32kB (UME) 219*64kB (UME) 151*128kB (UME) 66*256kB (UME) 29*512kB (UM) 28*1024kB (M) 14*2048kB (UME) 55*4096kB (UM) = 357056kB [ 91.574478][ T7194] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 91.577162][ T7194] Node 0 hugepages_total=2 hugepages_free=1 hugepages_surp=0 hugepages_size=2048kB [ 91.580008][ T7194] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 91.582647][ T7194] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 91.585209][ T7194] 6795 total pagecache pages [ 91.586546][ T7194] 0 pages in swap cache [ 91.587727][ T7194] Free swap = 124028kB [ 91.588907][ T7194] Total swap = 124996kB [ 91.590452][ T7194] 524155 pages RAM [ 91.591603][ T7194] 0 pages HighMem/MovableOnly [ 91.592961][ T7194] 206675 pages reserved [ 91.594158][ T7194] 0 pages cma reserved [ 91.655824][ T7206] syz.3.207[7206] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 91.655874][ T7206] syz.3.207[7206] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 91.659273][ T7206] syz.3.207[7206] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 91.826136][ T7224] netlink: 24 bytes leftover after parsing attributes in process `syz.5.213'. [ 91.872642][ T7225] netlink: 40 bytes leftover after parsing attributes in process `syz.3.207'. [ 92.655703][ T7241] binder: 7240:7241 ioctl c0306201 0 returned -14 [ 92.755120][ T105] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 92.880230][ T105] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 92.898613][ T7246] ======================================================= [ 92.898613][ T7246] WARNING: The mand mount option has been deprecated and [ 92.898613][ T7246] and is ignored by this kernel. Remove the mand [ 92.898613][ T7246] option from the mount to silence this warning. [ 92.898613][ T7246] ======================================================= [ 92.923572][ T5950] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 92.931467][ T5950] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 92.933961][ T5950] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 92.936321][ T5950] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 92.938503][ T5950] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 92.941415][ T5950] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 92.954523][ T105] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 92.970350][ T7255] netlink: 'syz.2.219': attribute type 1 has an invalid length. [ 92.986841][ T7255] bond1: entered promiscuous mode [ 92.988361][ T7255] bond1: entered allmulticast mode [ 93.035341][ T105] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 93.072025][ T7247] chnl_net:caif_netlink_parms(): no params data found [ 93.149837][ T5958] Bluetooth: hci2: command tx timeout [ 93.173412][ T7247] bridge0: port 1(bridge_slave_0) entered blocking state [ 93.175623][ T7247] bridge0: port 1(bridge_slave_0) entered disabled state [ 93.177744][ T7247] bridge_slave_0: entered allmulticast mode [ 93.180305][ T7247] bridge_slave_0: entered promiscuous mode [ 93.186125][ T7247] bridge0: port 2(bridge_slave_1) entered blocking state [ 93.188522][ T7247] bridge0: port 2(bridge_slave_1) entered disabled state [ 93.191000][ T7247] bridge_slave_1: entered allmulticast mode [ 93.193248][ T7247] bridge_slave_1: entered promiscuous mode [ 93.249594][ T7247] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 93.259890][ T7247] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 93.263971][ T105] bridge_slave_1: left allmulticast mode [ 93.269599][ T105] bridge_slave_1: left promiscuous mode [ 93.273128][ T105] bridge0: port 2(bridge_slave_1) entered disabled state [ 93.281954][ T105] bridge_slave_0: left allmulticast mode [ 93.286005][ T105] bridge_slave_0: left promiscuous mode [ 93.296506][ T105] bridge0: port 1(bridge_slave_0) entered disabled state [ 93.654695][ T105] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 93.658429][ T105] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 93.662170][ T105] bond0 (unregistering): Released all slaves [ 93.668987][ T7272] netlink: 24 bytes leftover after parsing attributes in process `syz.2.224'. [ 93.689094][ T7247] team0: Port device team_slave_0 added [ 93.700370][ T7247] team0: Port device team_slave_1 added [ 93.732303][ T7247] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 93.734388][ T7247] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 93.742786][ T7247] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 93.748905][ T7247] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 93.751649][ T7247] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 93.759686][ T7247] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 93.817189][ T7247] hsr_slave_0: entered promiscuous mode [ 93.821494][ T7247] hsr_slave_1: entered promiscuous mode [ 93.827332][ T7247] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 93.835976][ T7247] Cannot create hsr debugfs directory [ 93.889760][ T7282] syz.4.225[7282] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 93.889810][ T7282] syz.4.225[7282] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 93.893179][ T7282] syz.4.225[7282] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 93.971392][ T7247] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 93.978959][ T7247] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 93.994063][ T105] hsr_slave_0: left promiscuous mode [ 93.996125][ T105] hsr_slave_1: left promiscuous mode [ 94.014528][ T105] veth1_macvtap: left promiscuous mode [ 94.016109][ T105] veth0_macvtap: left promiscuous mode [ 94.017710][ T105] veth1_vlan: left promiscuous mode [ 94.021833][ T105] veth0_vlan: left promiscuous mode [ 94.079268][ T7290] netlink: 40 bytes leftover after parsing attributes in process `syz.4.225'. [ 94.081022][ T7294] tmpfs: Bad value for 'mpol' [ 94.191639][ T7299] overlay: Unknown parameter 'smackfshat' [ 94.628210][ T105] team0 (unregistering): Port device team_slave_1 removed [ 94.669613][ T5958] Bluetooth: hci1: command tx timeout [ 94.695279][ T105] team0 (unregistering): Port device team_slave_0 removed [ 94.999649][ T5958] Bluetooth: hci0: command tx timeout [ 95.175884][ T7247] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 95.198643][ T7247] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 95.306267][ T7247] 8021q: adding VLAN 0 to HW filter on device bond0 [ 95.317600][ T7247] 8021q: adding VLAN 0 to HW filter on device team0 [ 95.330337][ T45] bridge0: port 1(bridge_slave_0) entered blocking state [ 95.332377][ T45] bridge0: port 1(bridge_slave_0) entered forwarding state [ 95.335713][ T45] bridge0: port 2(bridge_slave_1) entered blocking state [ 95.337829][ T45] bridge0: port 2(bridge_slave_1) entered forwarding state [ 95.356369][ T7247] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 95.359325][ T7247] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 95.491100][ T7247] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 95.652882][ T7336] netlink: 24 bytes leftover after parsing attributes in process `syz.5.235'. [ 95.783034][ T7247] veth0_vlan: entered promiscuous mode [ 95.787151][ T7247] veth1_vlan: entered promiscuous mode [ 95.799608][ T35] vhci_hcd: vhci_device speed not set [ 95.805088][ T5950] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 95.808794][ T5950] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 95.815598][ T5950] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 95.819110][ T5950] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 95.822557][ T7247] veth0_macvtap: entered promiscuous mode [ 95.824305][ T5950] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 95.826497][ T5950] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 95.842614][ T7247] veth1_macvtap: entered promiscuous mode [ 95.857655][ T105] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 95.882287][ T7247] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 95.885332][ T7247] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 95.888215][ T7247] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 95.892476][ T7247] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 95.895290][ T7247] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 95.898465][ T7247] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 95.902011][ T7247] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 95.918162][ T7247] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 95.921252][ T7247] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 95.924071][ T7247] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 95.927137][ T7247] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 95.930018][ T7247] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 95.933386][ T7247] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 95.936905][ T7247] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 95.941019][ T7247] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.943793][ T7247] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.946408][ T7247] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.948897][ T7247] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.957929][ T105] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 96.018521][ T105] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 96.033320][ T7350] chnl_net:caif_netlink_parms(): no params data found [ 96.069080][ T1139] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 96.073078][ T1139] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 96.097579][ T105] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 96.132739][ T7350] bridge0: port 1(bridge_slave_0) entered blocking state [ 96.134869][ T7350] bridge0: port 1(bridge_slave_0) entered disabled state [ 96.137117][ T7350] bridge_slave_0: entered allmulticast mode [ 96.140137][ T7350] bridge_slave_0: entered promiscuous mode [ 96.144024][ T7350] bridge0: port 2(bridge_slave_1) entered blocking state [ 96.146649][ T7350] bridge0: port 2(bridge_slave_1) entered disabled state [ 96.149890][ T7350] bridge_slave_1: entered allmulticast mode [ 96.153725][ T7350] bridge_slave_1: entered promiscuous mode [ 96.182358][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 96.184643][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 96.214668][ T7350] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 96.218522][ T7350] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 96.244490][ T7371] netlink: 4 bytes leftover after parsing attributes in process `syz.2.239'. [ 96.272339][ T7350] team0: Port device team_slave_0 added [ 96.285173][ T7350] team0: Port device team_slave_1 added [ 96.332496][ T7350] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 96.335332][ T7350] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 96.344830][ T7350] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 96.350110][ T7350] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 96.352144][ T7350] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 96.359032][ T7392] syz.5.241: attempt to access beyond end of device [ 96.359032][ T7392] nbd5: rw=0, sector=0, nr_sectors = 1 limit=0 [ 96.360533][ T7350] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 96.365308][ T7392] FAT-fs (nbd5): unable to read boot sector [ 96.419127][ T105] bridge_slave_1: left allmulticast mode [ 96.420987][ T105] bridge_slave_1: left promiscuous mode [ 96.423361][ T105] bridge0: port 2(bridge_slave_1) entered disabled state [ 96.434854][ T105] bridge_slave_0: left allmulticast mode [ 96.436531][ T105] bridge_slave_0: left promiscuous mode [ 96.438686][ T105] bridge0: port 1(bridge_slave_0) entered disabled state [ 96.533944][ T7405] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 96.782138][ T7410] Bluetooth: MGMT ver 1.23 [ 97.080095][ T5958] Bluetooth: hci0: command tx timeout [ 97.089075][ T105] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 97.092755][ T105] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 97.098129][ T105] bond0 (unregistering): Released all slaves [ 97.112356][ T7350] hsr_slave_0: entered promiscuous mode [ 97.116424][ T7350] hsr_slave_1: entered promiscuous mode [ 97.121472][ T7407] netlink: 10 bytes leftover after parsing attributes in process `syz.2.245'. [ 97.306111][ T7350] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 97.314746][ T7350] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 97.318885][ T7350] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 97.324435][ T7350] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 97.366406][ T7350] 8021q: adding VLAN 0 to HW filter on device bond0 [ 97.383914][ T7350] 8021q: adding VLAN 0 to HW filter on device team0 [ 97.395148][ T45] bridge0: port 1(bridge_slave_0) entered blocking state [ 97.397274][ T45] bridge0: port 1(bridge_slave_0) entered forwarding state [ 97.411883][ T1229] bridge0: port 2(bridge_slave_1) entered blocking state [ 97.414791][ T1229] bridge0: port 2(bridge_slave_1) entered forwarding state [ 97.518466][ T7350] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 97.626912][ T7350] veth0_vlan: entered promiscuous mode [ 97.634581][ T7350] veth1_vlan: entered promiscuous mode [ 97.647226][ T7350] veth0_macvtap: entered promiscuous mode [ 97.653613][ T7350] veth1_macvtap: entered promiscuous mode [ 97.662010][ T7350] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 97.664915][ T7350] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 97.667756][ T7350] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 97.672347][ T7350] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 97.675133][ T7350] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 97.678466][ T7350] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 97.689080][ T7350] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 97.692488][ T7350] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 97.697652][ T7350] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 97.711303][ T7350] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 97.715182][ T7350] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 97.718100][ T7350] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 97.721928][ T7350] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 97.724751][ T7350] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 97.733252][ T7350] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 97.736581][ T7350] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 97.742002][ T7350] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 97.745835][ T7350] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 97.756395][ T7350] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.759083][ T7350] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.762645][ T7350] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.765140][ T7350] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.781707][ T7449] Bluetooth: MGMT ver 1.23 [ 97.870681][ T5958] Bluetooth: hci3: command tx timeout [ 97.974072][ T7462] netlink: 4 bytes leftover after parsing attributes in process `syz.6.250'. [ 97.978197][ T7462] tipc: Enabling of bearer rejected, failed to enable media [ 98.025728][ T7415] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 98.027649][ T7415] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 98.055966][ T7415] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 98.064294][ T7415] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 98.077053][ T7415] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 98.083292][ T7415] Bluetooth: hci0: Error when powering off device on rfkill (-4) [ 98.094272][ T7415] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 98.096011][ T7415] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 98.177819][ T1140] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 98.187732][ T1140] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 98.201254][ T1135] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 98.203538][ T1135] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 98.229663][ T39] audit: type=1326 audit(1735141198.563:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7469 comm="syz.5.251" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7f50579 code=0x0 [ 98.267235][ T105] hsr_slave_0: left promiscuous mode [ 98.275458][ T105] hsr_slave_1: left promiscuous mode [ 98.278303][ T105] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 98.290246][ T105] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 98.312073][ T105] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 98.314253][ T105] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 98.380515][ T105] veth1_macvtap: left promiscuous mode [ 98.382295][ T105] veth0_macvtap: left promiscuous mode [ 98.383968][ T105] veth1_vlan: left promiscuous mode [ 98.385594][ T105] veth0_vlan: left promiscuous mode [ 98.539153][ T7491] syz.6.255[7491] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 98.539227][ T7491] syz.6.255[7491] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 98.545221][ T7491] syz.6.255[7491] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 98.782131][ T7494] netlink: 40 bytes leftover after parsing attributes in process `syz.6.255'. [ 99.513750][ T105] team0 (unregistering): Port device team_slave_1 removed [ 99.615453][ T105] team0 (unregistering): Port device team_slave_0 removed [ 99.895873][ T7514] random: crng reseeded on system resumption [ 100.999069][ T7551] netlink: 8 bytes leftover after parsing attributes in process `syz.5.265'. [ 100.999070][ T7554] netlink: 24 bytes leftover after parsing attributes in process `syz.5.265'. [ 101.008514][ T7551] netlink: 24 bytes leftover after parsing attributes in process `syz.5.265'. [ 101.064690][ T5950] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 101.070325][ T5950] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 101.072983][ T5950] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 101.076463][ T5950] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 101.080050][ T5950] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 101.082558][ T5950] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 101.158503][ T105] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 101.197182][ T7556] chnl_net:caif_netlink_parms(): no params data found [ 101.259166][ T105] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 101.314649][ T7556] bridge0: port 1(bridge_slave_0) entered blocking state [ 101.317643][ T7556] bridge0: port 1(bridge_slave_0) entered disabled state [ 101.325923][ T7556] bridge_slave_0: entered allmulticast mode [ 101.329107][ T7556] bridge_slave_0: entered promiscuous mode [ 101.344764][ T105] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 101.348766][ T7556] bridge0: port 2(bridge_slave_1) entered blocking state [ 101.352150][ T7556] bridge0: port 2(bridge_slave_1) entered disabled state [ 101.356756][ T7556] bridge_slave_1: entered allmulticast mode [ 101.359311][ T7556] bridge_slave_1: entered promiscuous mode [ 101.408088][ T7556] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 101.415172][ T7556] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 101.465738][ T105] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 101.482145][ T7556] team0: Port device team_slave_0 added [ 101.484851][ T7556] team0: Port device team_slave_1 added [ 101.507539][ T7556] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 101.510271][ T7556] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 101.517659][ T7556] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 101.521989][ T7556] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 101.524057][ T7556] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 101.532564][ T7556] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 101.566590][ T7556] hsr_slave_0: entered promiscuous mode [ 101.568808][ T7556] hsr_slave_1: entered promiscuous mode [ 101.571053][ T7556] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 101.573311][ T7556] Cannot create hsr debugfs directory [ 101.640956][ T105] bridge_slave_1: left allmulticast mode [ 101.643270][ T105] bridge_slave_1: left promiscuous mode [ 101.645620][ T105] bridge0: port 2(bridge_slave_1) entered disabled state [ 101.652530][ T105] bridge_slave_0: left allmulticast mode [ 101.654611][ T105] bridge_slave_0: left promiscuous mode [ 101.656268][ T105] bridge0: port 1(bridge_slave_0) entered disabled state [ 101.678988][ T7589] netlink: 8 bytes leftover after parsing attributes in process `syz.7.270'. [ 101.964356][ T7601] syz.5.274[7601] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 101.964403][ T7601] syz.5.274[7601] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 101.967866][ T7601] syz.5.274[7601] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 102.068327][ T105] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 102.076120][ T105] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 102.080085][ T105] bond0 (unregistering): Released all slaves [ 102.139026][ T7556] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 102.143777][ T7556] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 102.148311][ T7601] netlink: 40 bytes leftover after parsing attributes in process `syz.5.274'. [ 102.149472][ T7556] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 102.155242][ T7556] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 102.196668][ T7556] 8021q: adding VLAN 0 to HW filter on device bond0 [ 102.221838][ T7556] 8021q: adding VLAN 0 to HW filter on device team0 [ 102.224645][ T1229] bridge0: port 1(bridge_slave_0) entered blocking state [ 102.224689][ T1229] bridge0: port 1(bridge_slave_0) entered forwarding state [ 102.227657][ T69] bridge0: port 2(bridge_slave_1) entered blocking state [ 102.227682][ T69] bridge0: port 2(bridge_slave_1) entered forwarding state [ 102.241221][ T7556] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 102.344648][ T7556] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 102.495913][ T7556] veth0_vlan: entered promiscuous mode [ 102.505504][ T7556] veth1_vlan: entered promiscuous mode [ 102.534551][ T7556] veth0_macvtap: entered promiscuous mode [ 102.541422][ T7556] veth1_macvtap: entered promiscuous mode [ 102.558898][ T7556] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 102.562267][ T7556] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 102.565276][ T7556] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 102.568854][ T7556] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 102.572502][ T7556] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 102.575539][ T7556] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 102.578380][ T7556] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 102.581479][ T7556] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 102.584893][ T7556] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 102.613415][ T7556] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 102.616230][ T7556] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 102.618944][ T7556] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 102.621914][ T7556] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 102.624597][ T7556] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 102.627308][ T7556] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 102.630015][ T7556] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 102.633234][ T7556] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 102.642018][ T7556] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 102.657210][ T7556] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.659882][ T7556] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.662475][ T7556] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.665164][ T7556] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.725932][ T1135] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 102.728690][ T1135] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 102.783824][ T1174] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 102.786792][ T1174] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 102.815927][ T105] hsr_slave_0: left promiscuous mode [ 102.828810][ T105] hsr_slave_1: left promiscuous mode [ 102.835339][ T105] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 102.837620][ T105] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 102.843884][ T105] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 102.847163][ T105] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 102.869055][ T105] veth1_macvtap: left promiscuous mode [ 102.872039][ T105] veth0_macvtap: left promiscuous mode [ 102.874178][ T105] veth1_vlan: left promiscuous mode [ 102.876249][ T105] veth0_vlan: left promiscuous mode [ 103.199588][ T5958] Bluetooth: hci0: command tx timeout [ 103.886839][ T7654] netlink: 108 bytes leftover after parsing attributes in process `syz.5.278'. [ 103.892821][ T7654] netlink: 108 bytes leftover after parsing attributes in process `syz.5.278'. [ 103.896503][ T7654] netlink: 108 bytes leftover after parsing attributes in process `syz.5.278'. [ 103.903500][ T7650] isofs_fill_super: bread failed, dev=sr0, iso_blknum=32, block=32 [ 103.919465][ T7655] netlink: 4 bytes leftover after parsing attributes in process `syz.2.279'. [ 103.941267][ T7655] netlink: 4 bytes leftover after parsing attributes in process `syz.2.279'. [ 103.985741][ T105] team0 (unregistering): Port device team_slave_1 removed [ 104.067526][ T105] team0 (unregistering): Port device team_slave_0 removed [ 104.647547][ T7650] netlink: 'syz.5.278': attribute type 14 has an invalid length. [ 104.660075][ T7656] syzkaller0: entered promiscuous mode [ 104.662341][ T7656] syzkaller0: entered allmulticast mode [ 104.751673][ T7672] veth1_vlan: mtu greater than device maximum [ 104.808194][ T832] IPVS: starting estimator thread 0... [ 104.815978][ T7676] 9pnet_fd: Insufficient options for proto=fd [ 104.899619][ T7678] IPVS: using max 41 ests per chain, 98400 per kthread [ 105.014565][ T39] audit: type=1800 audit(1735141205.353:27): pid=7693 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.8.267" name="SYSV00000000" dev="hugetlbfs" ino=0 res=0 errno=0 [ 105.043016][ T7696] syz.2.283[7696] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 105.043092][ T7696] syz.2.283[7696] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 105.047553][ T7696] syz.2.283[7696] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 105.229634][ T5958] Bluetooth: hci0: command tx timeout [ 105.240779][ T7712] netlink: 40 bytes leftover after parsing attributes in process `syz.2.283'. [ 106.136589][ T7765] netlink: 4 bytes leftover after parsing attributes in process `syz.8.288'. [ 106.663766][ T5950] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 106.668149][ T5950] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 106.672416][ T5950] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 106.675552][ T5950] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 106.678290][ T5950] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 106.685543][ T5950] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 106.822228][ T7789] chnl_net:caif_netlink_parms(): no params data found [ 106.892353][ T7799] netlink: 'syz.7.294': attribute type 1 has an invalid length. [ 106.894574][ T7799] netlink: 224 bytes leftover after parsing attributes in process `syz.7.294'. [ 107.157933][ T7789] bridge0: port 1(bridge_slave_0) entered blocking state [ 107.160698][ T7789] bridge0: port 1(bridge_slave_0) entered disabled state [ 107.167914][ T7789] bridge_slave_0: entered allmulticast mode [ 107.174330][ T7789] bridge_slave_0: entered promiscuous mode [ 107.178196][ T7789] bridge0: port 2(bridge_slave_1) entered blocking state [ 107.182412][ T7789] bridge0: port 2(bridge_slave_1) entered disabled state [ 107.184493][ T7789] bridge_slave_1: entered allmulticast mode [ 107.186630][ T7789] bridge_slave_1: entered promiscuous mode [ 107.213745][ T7789] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 107.217665][ T7789] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 107.242232][ T7789] team0: Port device team_slave_0 added [ 107.247714][ T7789] team0: Port device team_slave_1 added [ 107.307801][ T7808] netlink: 'syz.8.296': attribute type 4 has an invalid length. [ 107.310778][ T5950] Bluetooth: hci0: command tx timeout [ 107.359220][ T7789] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 107.361962][ T7789] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 107.369307][ T7789] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 107.376530][ T7789] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 107.378441][ T7789] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 107.388176][ T7789] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 107.412696][ T7808] netlink: 'syz.8.296': attribute type 4 has an invalid length. [ 107.450937][ T7789] hsr_slave_0: entered promiscuous mode [ 107.453694][ T7789] hsr_slave_1: entered promiscuous mode [ 107.456033][ T7789] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 107.458211][ T7789] Cannot create hsr debugfs directory [ 107.552535][ T7789] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 107.571575][ T7789] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 107.577368][ T7789] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 107.599292][ T7789] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 107.707745][ T7789] bridge0: port 2(bridge_slave_1) entered blocking state [ 107.710568][ T7789] bridge0: port 2(bridge_slave_1) entered forwarding state [ 107.713431][ T7789] bridge0: port 1(bridge_slave_0) entered blocking state [ 107.715620][ T7789] bridge0: port 1(bridge_slave_0) entered forwarding state [ 107.753574][ T7789] 8021q: adding VLAN 0 to HW filter on device bond0 [ 107.760805][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 107.763740][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 107.884065][ T7789] 8021q: adding VLAN 0 to HW filter on device team0 [ 107.891409][ T1229] bridge0: port 1(bridge_slave_0) entered blocking state [ 107.893973][ T1229] bridge0: port 1(bridge_slave_0) entered forwarding state [ 107.910740][ T1174] bridge0: port 2(bridge_slave_1) entered blocking state [ 107.912841][ T1174] bridge0: port 2(bridge_slave_1) entered forwarding state [ 107.955695][ T7789] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 107.958666][ T7789] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 108.100583][ T7789] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 108.158135][ T7867] netlink: 12 bytes leftover after parsing attributes in process `syz.8.304'. [ 108.284487][ T7789] veth0_vlan: entered promiscuous mode [ 108.288232][ T7789] veth1_vlan: entered promiscuous mode [ 108.305270][ T7789] veth0_macvtap: entered promiscuous mode [ 108.317000][ T7789] veth1_macvtap: entered promiscuous mode [ 108.318871][ T7884] netlink: 24 bytes leftover after parsing attributes in process `syz.5.307'. [ 108.326887][ T7789] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 108.331478][ T7789] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 108.334613][ T7789] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 108.337519][ T7789] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 108.343034][ T7789] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 108.346087][ T7789] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 108.349759][ T7789] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 108.353256][ T7789] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 108.356582][ T7789] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 108.360143][ T7789] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 108.363225][ T7789] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 108.366020][ T7789] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 108.368938][ T7789] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 108.372281][ T7789] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 108.375341][ T7789] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 108.378088][ T7789] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 108.381417][ T7789] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 108.384749][ T7789] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 108.391391][ T7789] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.393884][ T7789] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.396351][ T7789] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.398813][ T7789] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.456577][ T1139] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 108.461607][ T1139] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 108.478801][ T1139] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 108.482451][ T1139] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 108.569581][ T6004] usb 12-1: new high-speed USB device number 2 using dummy_hcd [ 108.720997][ T6004] usb 12-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 108.724194][ T6004] usb 12-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 108.727028][ T6004] usb 12-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 108.732357][ T6004] usb 12-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 108.734989][ T6004] usb 12-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 108.739580][ T6004] usb 12-1: config 0 descriptor?? [ 108.749706][ T5950] Bluetooth: hci1: command tx timeout [ 109.226145][ T6004] plantronics 0003:047F:FFFF.0005: unknown main item tag 0x0 [ 109.232032][ T6004] plantronics 0003:047F:FFFF.0005: No inputs registered, leaving [ 109.252534][ T6004] plantronics 0003:047F:FFFF.0005: hiddev0,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.7-1/input0 [ 109.391531][ T5950] Bluetooth: hci0: command tx timeout [ 109.525514][ T39] audit: type=1326 audit(1735141209.863:28): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7935 comm="syz.8.317" exe="/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf7ff3579 code=0x0 [ 109.589628][ T7527] usb 12-1: USB disconnect, device number 2 [ 110.339376][ T7962] vivid-007: disconnect [ 110.628067][ T7966] overlay: Unknown parameter '/' [ 110.842524][ T5950] Bluetooth: hci1: command tx timeout [ 110.848862][ T7975] evm: overlay not supported [ 111.053043][ T7988] 9pnet_virtio: no channels available for device syz [ 111.193813][ T7961] vivid-007: reconnect [ 111.642987][ T8021] /dev/sg0: Can't lookup blockdev [ 111.643034][ T8014] /dev/sg0: Can't lookup blockdev [ 111.723424][ T8029] netlink: 4 bytes leftover after parsing attributes in process `syz.9.334'. [ 111.873090][ T8031] netlink: 4 bytes leftover after parsing attributes in process `syz.9.334'. [ 111.881926][ T8031] netdevsim netdevsim9 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 111.882199][ T7996] orangefs_mount: mount request failed with -4 [ 111.884611][ T8031] netdevsim netdevsim9 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 111.888964][ T8031] netdevsim netdevsim9 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 111.891575][ T8031] netdevsim netdevsim9 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 111.894828][ T8031] vxlan0: entered promiscuous mode [ 112.056404][ T8039] bridge0: entered promiscuous mode [ 112.058033][ T8039] bridge0: entered allmulticast mode [ 112.332841][ T8045] netlink: 'syz.5.337': attribute type 1 has an invalid length. [ 112.335946][ T8045] netlink: 224 bytes leftover after parsing attributes in process `syz.5.337'. [ 112.415389][ T8046] netlink: 'syz.5.337': attribute type 1 has an invalid length. [ 112.417719][ T8046] netlink: 224 bytes leftover after parsing attributes in process `syz.5.337'. [ 112.686706][ T8056] syz.9.339: attempt to access beyond end of device [ 112.686706][ T8056] nbd9: rw=0, sector=16, nr_sectors = 2 limit=0 [ 112.909844][ T5950] Bluetooth: hci1: command tx timeout [ 113.405976][ T8071] netlink: 8 bytes leftover after parsing attributes in process `syz.8.340'. [ 113.408498][ T8071] macsec0: entered promiscuous mode [ 113.900982][ T8087] binder: 8084:8087 ioctl c0306201 20000bc0 returned -14 [ 113.903953][ T8087] binder: 8084:8087 ioctl 8010aa02 20000240 returned -22 [ 114.989586][ T5950] Bluetooth: hci1: command tx timeout [ 115.115076][ T8137] netlink: 8 bytes leftover after parsing attributes in process `syz.8.353'. [ 115.260835][ T8143] loop9: detected capacity change from 0 to 7 [ 115.264423][ T8143] Dev loop9: unable to read RDB block 7 [ 115.266337][ T8143] loop9: unable to read partition table [ 115.268064][ T8143] loop9: partition table beyond EOD, truncated [ 115.270096][ T8143] loop_reread_partitions: partition scan of loop9 (被xڬdƤݡ [ 115.270096][ T8143] ) failed (rc=-5) [ 115.276679][ T8143] tmpfs: Unknown parameter 'usrquotaڬdƤݡ [ 115.276679][ T8143] ' [ 115.604313][ T8150] team0: Device macvlan1 is up. Set it down before adding it as a team port [ 115.669006][ T8154] netlink: 'syz.9.360': attribute type 3 has an invalid length. [ 115.672025][ T8154] netlink: 8 bytes leftover after parsing attributes in process `syz.9.360'. [ 115.729856][ T8160] netlink: 24 bytes leftover after parsing attributes in process `syz.8.362'. [ 115.956457][ T5950] Bluetooth: hci1: ACL packet for unknown connection handle 4 [ 115.971131][ T8164] netlink: 'syz.9.363': attribute type 1 has an invalid length. [ 115.982424][ T8164] bond1: entered promiscuous mode [ 115.984151][ T8164] 8021q: adding VLAN 0 to HW filter on device bond1 [ 116.248071][ T8197] netlink: 24 bytes leftover after parsing attributes in process `syz.7.365'. [ 116.536135][ T8230] netlink: 24 bytes leftover after parsing attributes in process `syz.5.372'. [ 116.709667][ T968] usb 14-1: new high-speed USB device number 2 using dummy_hcd [ 116.862955][ T968] usb 14-1: Using ep0 maxpacket: 16 [ 116.923277][ T968] usb 14-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 116.926777][ T968] usb 14-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 116.929054][ T968] usb 14-1: Product: syz [ 116.959711][ T968] usb 14-1: Manufacturer: syz [ 116.961577][ T968] usb 14-1: SerialNumber: syz [ 116.968075][ T968] r8152-cfgselector 14-1: Unknown version 0x0000 [ 116.979419][ T968] r8152-cfgselector 14-1: config 0 descriptor?? [ 117.219664][ T25] usb 13-1: new high-speed USB device number 2 using dummy_hcd [ 117.340470][ T968] r8152-cfgselector 14-1: Unknown version 0x0000 [ 117.342403][ T968] r8152-cfgselector 14-1: bad CDC descriptors [ 117.348025][ T968] r8152-cfgselector 14-1: USB disconnect, device number 2 [ 117.376561][ T25] usb 13-1: config index 0 descriptor too short (expected 23569, got 27) [ 117.380160][ T25] usb 13-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 117.384925][ T25] usb 13-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 117.388805][ T25] usb 13-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 117.392715][ T25] usb 13-1: Manufacturer: syz [ 117.395521][ T25] usb 13-1: config 0 descriptor?? [ 117.439697][ T25] rc_core: IR keymap rc-hauppauge not found [ 117.441451][ T25] Registered IR keymap rc-empty [ 117.445697][ T25] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.8/usb13/13-1/13-1:0.0/rc/rc0 [ 117.450014][ T25] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.8/usb13/13-1/13-1:0.0/rc/rc0/input10 [ 117.626950][ T8251] bridge_slave_0: left allmulticast mode [ 117.628612][ T8251] bridge_slave_0: left promiscuous mode [ 117.630673][ T8251] bridge0: port 1(bridge_slave_0) entered disabled state [ 117.635931][ T8251] bridge_slave_1: left allmulticast mode [ 117.637588][ T8251] bridge_slave_1: left promiscuous mode [ 117.639263][ T8251] bridge0: port 2(bridge_slave_1) entered disabled state [ 117.646768][ T8251] bond0: (slave bond_slave_0): Releasing backup interface [ 117.653794][ T8251] bond0: (slave bond_slave_1): Releasing backup interface [ 117.680244][ T8251] team0: Port device team_slave_0 removed [ 117.686624][ T8251] team0: Port device team_slave_1 removed [ 117.688826][ T8251] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 117.691177][ T8251] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 117.694883][ T8251] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 117.697050][ T8251] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 117.705649][ T8252] team0: Mode changed to "broadcast" [ 117.711613][ T8253] vlan0: entered promiscuous mode [ 117.716597][ T8253] team0: Port device vlan0 added [ 118.213777][ T8298] veth0_vlan: left promiscuous mode [ 118.217563][ T8298] veth0_vlan: entered promiscuous mode [ 119.409808][ T1135] team0: Port device vlan0 removed [ 119.479687][ T30] usb 14-1: new high-speed USB device number 3 using dummy_hcd [ 119.610294][ T30] usb 14-1: device descriptor read/64, error -71 [ 119.825015][ T5985] kernel write not supported for file bpf-map (pid: 5985 comm: kworker/0:5) [ 119.850673][ T30] usb 14-1: new high-speed USB device number 4 using dummy_hcd [ 120.102530][ T30] usb 14-1: device descriptor read/64, error -71 [ 120.120744][ T8384] overlayfs: missing 'lowerdir' [ 120.139423][ T5985] usb 13-1: USB disconnect, device number 2 [ 120.176983][ T8411] netlink: 16 bytes leftover after parsing attributes in process `syz.8.393'. [ 120.179576][ T8411] netlink: 16 bytes leftover after parsing attributes in process `syz.8.393'. [ 120.210682][ T30] usb usb14-port1: attempt power cycle [ 120.239085][ T8412] netlink: 8 bytes leftover after parsing attributes in process `syz.7.392'. [ 120.242826][ T8412] macsec0: entered promiscuous mode [ 120.302301][ T8414] could not allocate digest TFM handle sha256-asm [ 120.599615][ T30] usb 14-1: new high-speed USB device number 5 using dummy_hcd [ 120.630215][ T30] usb 14-1: device descriptor read/8, error -71 [ 120.879596][ T30] usb 14-1: new high-speed USB device number 6 using dummy_hcd [ 120.910035][ T30] usb 14-1: device descriptor read/8, error -71 [ 121.020327][ T30] usb usb14-port1: unable to enumerate USB device [ 121.310249][ T5958] Bluetooth: hci1: command 0x0405 tx timeout [ 121.398152][ T8488] syz.5.400[8488] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 121.398232][ T8488] syz.5.400[8488] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 121.403989][ T8488] syz.5.400[8488] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 121.576978][ T8492] netlink: 40 bytes leftover after parsing attributes in process `syz.5.400'. [ 121.660192][ T7073] usb 13-1: new high-speed USB device number 3 using dummy_hcd [ 121.735010][ T8494] Illegal XDP return value 4294967294 on prog (id 77) dev N/A, expect packet loss! [ 121.819759][ T7073] usb 13-1: Using ep0 maxpacket: 16 [ 121.825343][ T7073] usb 13-1: New USB device found, idVendor=1604, idProduct=8007, bcdDevice=af.a6 [ 121.828860][ T7073] usb 13-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 121.832303][ T7073] usb 13-1: Product: syz [ 121.834086][ T7073] usb 13-1: Manufacturer: syz [ 121.835920][ T7073] usb 13-1: SerialNumber: syz [ 121.839087][ T7073] usb 13-1: config 0 descriptor?? [ 121.859227][ C3] ata1: illegal qc_active transition (00000000->00008000) [ 122.189699][ T25] usb 12-1: new high-speed USB device number 3 using dummy_hcd [ 122.251726][ T1105] ata1: SATA link up 1.5 Gbps (SStatus 113 SControl 300) [ 122.265809][ T1105] ata1.00: configured for UDMA/100 [ 122.370205][ T8506] netlink: 4 bytes leftover after parsing attributes in process `syz.8.401'. [ 122.604510][ T8514] netlink: 8 bytes leftover after parsing attributes in process `syz.9.406'. [ 122.607020][ T8514] macsec0: entered promiscuous mode [ 122.774695][ T25] usb 12-1: Using ep0 maxpacket: 8 [ 122.779218][ T25] usb 12-1: config 0 has no interfaces? [ 122.783678][ T25] usb 12-1: New USB device found, idVendor=12d1, idProduct=fae2, bcdDevice=70.8b [ 122.787199][ T25] usb 12-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 122.790205][ T25] usb 12-1: Product: syz [ 122.791410][ T25] usb 12-1: Manufacturer: syz [ 122.792787][ T25] usb 12-1: SerialNumber: syz [ 122.797327][ T25] usb 12-1: config 0 descriptor?? [ 123.197340][ T25] usb 12-1: USB disconnect, device number 3 [ 123.575666][ T8524] netlink: 'syz.5.408': attribute type 3 has an invalid length. [ 123.580726][ T8524] netlink: 12 bytes leftover after parsing attributes in process `syz.5.408'. [ 123.607849][ T8526] netlink: 4 bytes leftover after parsing attributes in process `syz.5.409'. [ 123.639704][ T25] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 123.642164][ T25] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 123.644607][ T25] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 123.647398][ T25] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 123.650379][ T25] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 123.653150][ T25] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 123.655633][ T25] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 123.657791][ T25] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 123.660366][ T25] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 123.662516][ T25] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 123.664628][ T25] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 123.666945][ T25] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 123.670610][ T25] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 123.673788][ T25] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 123.675871][ T25] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 123.677964][ T25] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 123.680839][ T25] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 123.682913][ T25] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 123.685001][ T25] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 123.687120][ T25] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 123.689246][ T25] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 123.691870][ T25] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 123.694246][ T25] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 123.696342][ T25] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 123.698403][ T25] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 123.700623][ T25] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 123.702735][ T25] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 123.704827][ T25] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 123.707108][ T25] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 123.709600][ T25] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 123.711877][ T25] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 123.714035][ T25] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 123.718937][ T25] hid-generic 0000:0000:0000.0006: hidraw1: HID vffffff.ff Device [syz0] on syz0 [ 123.889695][ T7073] usb 10-1: new high-speed USB device number 2 using dummy_hcd [ 124.040821][ T7073] usb 10-1: config 0 has no interfaces? [ 124.042460][ T7073] usb 10-1: New USB device found, idVendor=1a34, idProduct=0802, bcdDevice= 0.00 [ 124.044967][ T7073] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 124.048248][ T7073] usb 10-1: config 0 descriptor?? [ 124.630503][ T8550] netlink: 8 bytes leftover after parsing attributes in process `syz.9.415'. [ 124.637480][ T7416] usb 13-1: USB disconnect, device number 3 [ 125.264239][ T8586] syz.9.423[8586] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 125.264356][ T8586] syz.9.423[8586] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 125.267808][ T8586] syz.9.423[8586] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 125.383104][ T8592] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 125.388866][ T8592] overlayfs: option "volatile" is meaningless in a non-upper mount, ignoring it. [ 125.408808][ T8592] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 125.464578][ T8593] netlink: 40 bytes leftover after parsing attributes in process `syz.9.423'. [ 125.933497][ T8599] netlink: 8 bytes leftover after parsing attributes in process `syz.7.427'. [ 126.511127][ T8617] vhci_hcd vhci_hcd.0: pdev(7) rhport(0) sockfd(3) [ 126.513078][ T8617] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 126.515848][ T8617] vhci_hcd vhci_hcd.0: Device attached [ 126.518092][ T8618] vhci_hcd: connection closed [ 126.518355][ T1229] vhci_hcd: stop threads [ 126.521261][ T1229] vhci_hcd: release socket [ 126.522585][ T1229] vhci_hcd: disconnect device [ 126.598103][ T5950] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 126.604280][ T5950] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 126.607916][ T5950] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 126.613367][ T5950] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 126.616035][ T5950] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 126.618451][ T5950] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 126.700450][ T1135] netdevsim netdevsim9 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 126.703519][ T1135] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 126.712207][ T7073] usb 10-1: string descriptor 0 read error: -71 [ 126.736718][ T7073] usb 10-1: USB disconnect, device number 2 [ 126.785397][ T1135] netdevsim netdevsim9 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 126.793288][ T1135] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 126.890273][ T1135] netdevsim netdevsim9 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 126.894609][ T1135] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 126.911654][ T8626] chnl_net:caif_netlink_parms(): no params data found [ 127.030440][ T1135] netdevsim netdevsim9 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 127.033704][ T1135] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 127.077966][ T8626] bridge0: port 1(bridge_slave_0) entered blocking state [ 127.080295][ T8626] bridge0: port 1(bridge_slave_0) entered disabled state [ 127.082408][ T8626] bridge_slave_0: entered allmulticast mode [ 127.084576][ T8626] bridge_slave_0: entered promiscuous mode [ 127.087210][ T8626] bridge0: port 2(bridge_slave_1) entered blocking state [ 127.089279][ T8626] bridge0: port 2(bridge_slave_1) entered disabled state [ 127.092466][ T8626] bridge_slave_1: entered allmulticast mode [ 127.094646][ T8626] bridge_slave_1: entered promiscuous mode [ 127.164015][ T8626] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 127.167693][ T8626] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 127.225519][ T8626] team0: Port device team_slave_0 added [ 127.229170][ T8626] team0: Port device team_slave_1 added [ 127.231934][ T1135] bridge_slave_1: left allmulticast mode [ 127.233577][ T1135] bridge_slave_1: left promiscuous mode [ 127.235292][ T1135] bridge0: port 2(bridge_slave_1) entered disabled state [ 127.238341][ T1135] bridge_slave_0: left allmulticast mode [ 127.240548][ T1135] bridge_slave_0: left promiscuous mode [ 127.242314][ T1135] bridge0: port 1(bridge_slave_0) entered disabled state [ 127.305939][ T8652] netlink: 7520 bytes leftover after parsing attributes in process `syz.5.439'. [ 127.373735][ T8656] gfs2: not a GFS2 filesystem [ 127.387613][ T8627] syz.8.436: attempt to access beyond end of device [ 127.387613][ T8627] nbd8: rw=4096, sector=0, nr_sectors = 1 limit=0 [ 127.391833][ T8627] XFS (nbd8): SB validate failed with error -5. [ 127.760880][ T1135] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 127.771022][ T1135] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 127.774804][ T1135] bond0 (unregistering): Released all slaves [ 127.894603][ T1135] bond1 (unregistering): Released all slaves [ 128.046201][ T8676] netlink: 8 bytes leftover after parsing attributes in process `syz.8.442'. [ 128.052321][ T8626] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 128.054915][ T8626] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 128.065169][ T8626] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 128.083938][ T8626] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 128.086175][ T8626] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 128.098526][ T8626] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 128.142803][ T8626] hsr_slave_0: entered promiscuous mode [ 128.144917][ T8626] hsr_slave_1: entered promiscuous mode [ 128.147018][ T8626] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 128.149478][ T8626] Cannot create hsr debugfs directory [ 128.300932][ T1135] hsr_slave_0: left promiscuous mode [ 128.307791][ T1135] hsr_slave_1: left promiscuous mode [ 128.315542][ T1135] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 128.325124][ T1135] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 128.334942][ T1135] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 128.347115][ T1135] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 128.383801][ T1135] veth1_macvtap: left promiscuous mode [ 128.385466][ T1135] veth0_macvtap: left promiscuous mode [ 128.387191][ T1135] veth1_vlan: left promiscuous mode [ 128.388744][ T1135] veth0_vlan: left promiscuous mode [ 128.681941][ T5958] Bluetooth: hci1: command tx timeout [ 129.233860][ T8706] mmap: syz.5.450 (8706) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 129.288096][ T1135] team0 (unregistering): Port device team_slave_1 removed [ 129.377832][ T1135] team0 (unregistering): Port device team_slave_0 removed [ 129.564512][ T8715] netlink: 24 bytes leftover after parsing attributes in process `syz.8.452'. [ 130.294667][ T8727] netlink: 8 bytes leftover after parsing attributes in process `syz.7.453'. [ 130.549565][ T8626] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 130.553289][ T8626] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 130.561208][ T8626] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 130.565168][ T8626] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 130.574740][ T8757] netlink: 4 bytes leftover after parsing attributes in process `syz.8.458'. [ 130.608064][ T8626] 8021q: adding VLAN 0 to HW filter on device bond0 [ 130.615708][ T8626] 8021q: adding VLAN 0 to HW filter on device team0 [ 130.624156][ T1140] bridge0: port 1(bridge_slave_0) entered blocking state [ 130.626225][ T1140] bridge0: port 1(bridge_slave_0) entered forwarding state [ 130.631034][ T30] usb 10-1: new low-speed USB device number 3 using dummy_hcd [ 130.632438][ T1229] bridge0: port 2(bridge_slave_1) entered blocking state [ 130.636199][ T1229] bridge0: port 2(bridge_slave_1) entered forwarding state [ 130.730957][ T8626] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 130.749456][ T8626] veth0_vlan: entered promiscuous mode [ 130.757674][ T8626] veth1_vlan: entered promiscuous mode [ 130.760662][ T5958] Bluetooth: hci1: command tx timeout [ 130.764639][ T8774] syzkaller1: entered promiscuous mode [ 130.766304][ T8774] syzkaller1: entered allmulticast mode [ 130.778673][ T8626] veth0_macvtap: entered promiscuous mode [ 130.789277][ T8626] veth1_macvtap: entered promiscuous mode [ 130.805918][ T8626] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 130.808857][ T8626] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 130.811734][ T8626] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 130.814685][ T8626] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 130.817743][ T8626] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 130.818488][ T30] usb 10-1: config 168 descriptor has 1 excess byte, ignoring [ 130.821976][ T8626] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 130.823812][ T30] usb 10-1: config 168 interface 0 altsetting 0 endpoint 0x3 is Bulk; changing to Interrupt [ 130.834758][ T30] usb 10-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 130.837320][ T30] usb 10-1: config 168 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 10 [ 130.837612][ T8626] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 130.840452][ T30] usb 10-1: config 168 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 130.841197][ T30] usb 10-1: config 168 descriptor has 1 excess byte, ignoring [ 130.847149][ T8626] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 130.847693][ T30] usb 10-1: config 168 interface 0 altsetting 0 endpoint 0x3 is Bulk; changing to Interrupt [ 130.853019][ T30] usb 10-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 130.853343][ T8626] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 130.855678][ T30] usb 10-1: config 168 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 10 [ 130.858374][ T8626] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 130.863073][ T7416] usb 13-1: new high-speed USB device number 4 using dummy_hcd [ 130.866148][ T8626] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 130.868314][ T30] usb 10-1: config 168 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 130.871449][ T8626] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 130.874570][ T30] usb 10-1: config 168 descriptor has 1 excess byte, ignoring [ 130.876655][ T8626] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 130.879248][ T30] usb 10-1: config 168 interface 0 altsetting 0 endpoint 0x3 is Bulk; changing to Interrupt [ 130.882971][ T8626] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 130.884736][ T30] usb 10-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 130.887935][ T8626] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 130.893421][ T30] usb 10-1: config 168 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 10 [ 130.893785][ T8626] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 130.896476][ T30] usb 10-1: config 168 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 130.899191][ T8626] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 130.905436][ T30] usb 10-1: string descriptor 0 read error: -22 [ 130.905548][ T8626] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 130.907292][ T30] usb 10-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 130.912354][ T30] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 130.919565][ T30] adutux 10-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 130.942968][ T1229] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 130.945173][ T1229] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 130.958781][ T1140] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 130.962339][ T1140] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 131.051486][ T7416] usb 13-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 131.053971][ T7416] usb 13-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 131.056811][ T7416] usb 13-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 131.059362][ T7416] usb 13-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 131.062446][ T7416] usb 13-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 131.066669][ T7416] usb 13-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 131.069205][ T7416] usb 13-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 131.071494][ T7416] usb 13-1: Product: syz [ 131.072678][ T7416] usb 13-1: Manufacturer: syz [ 131.075678][ T7416] cdc_wdm 13-1:1.0: skipping garbage [ 131.077185][ T7416] cdc_wdm 13-1:1.0: skipping garbage [ 131.079296][ T7416] cdc_wdm 13-1:1.0: cdc-wdm1: USB WDM device [ 131.081380][ T7416] cdc_wdm 13-1:1.0: Unknown control protocol [ 131.133153][ T8742] usb 10-1: Couldn't submit interrupt_out_urb -90 [ 131.234156][ T7416] usb 10-1: USB disconnect, device number 3 [ 131.278928][ T57] usb 13-1: USB disconnect, device number 4 [ 131.713922][ T8847] netlink: 20 bytes leftover after parsing attributes in process `syz.7.462'. [ 131.818174][ T8858] netlink: 24 bytes leftover after parsing attributes in process `syz.7.464'. [ 132.715687][ T8910] netlink: 8 bytes leftover after parsing attributes in process `syz.8.467'. [ 132.849697][ T5958] Bluetooth: hci1: command tx timeout [ 133.445858][ C3] ata1: illegal qc_active transition (00000000->80000000) [ 133.526126][ T8977] netlink: 24 bytes leftover after parsing attributes in process `syz.1.476'. [ 133.774072][ T1105] ata1: SATA link up 1.5 Gbps (SStatus 113 SControl 300) [ 133.777391][ T1105] ata1.00: configured for UDMA/100 [ 133.932378][ T9001] input: syz0 as /devices/virtual/input/input11 [ 134.282532][ T9006] netlink: 8 bytes leftover after parsing attributes in process `syz.7.480'. [ 134.909831][ T5958] Bluetooth: hci1: command tx timeout [ 134.918507][ T9034] netlink: 48 bytes leftover after parsing attributes in process `syz.7.488'. [ 134.940481][ T9] usb 10-1: new high-speed USB device number 4 using dummy_hcd [ 134.971551][ T9036] netlink: 24 bytes leftover after parsing attributes in process `syz.7.489'. [ 135.089622][ T9] usb 10-1: Using ep0 maxpacket: 8 [ 135.092862][ T9] usb 10-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 135.095733][ T9] usb 10-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 135.098525][ T9] usb 10-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 135.102363][ T9] usb 10-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 135.107712][ T9] usb 10-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 135.111550][ T9] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 135.214244][ T9042] syz.7.490[9042] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 135.214326][ T9042] syz.7.490[9042] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 135.217543][ T9042] syz.7.490[9042] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 135.320658][ T9] usb 10-1: GET_CAPABILITIES returned 0 [ 135.327415][ T9] usbtmc 10-1:16.0: can't read capabilities [ 135.339740][ T9] usb 10-1: USB disconnect, device number 4 [ 135.434564][ T9054] netlink: 40 bytes leftover after parsing attributes in process `syz.7.490'. [ 135.694485][ T9067] netlink: 4 bytes leftover after parsing attributes in process `syz.1.493'. [ 135.977969][ T9068] netlink: 8 bytes leftover after parsing attributes in process `syz.8.495'. [ 136.087663][ T9081] netlink: 24 bytes leftover after parsing attributes in process `syz.7.498'. [ 137.063591][ T5958] Bluetooth: hci1: command tx timeout [ 137.245228][ T9101] binder: binder_mmap: 9100 20001000-2000b000 bad vm_flags failed -1 [ 137.364768][ T9109] netlink: 'syz.5.505': attribute type 12 has an invalid length. [ 137.428233][ T9114] netlink: 8 bytes leftover after parsing attributes in process `syz.1.506'. [ 137.799629][ T6716] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 137.929716][ T6716] usb 6-1: device descriptor read/64, error -71 [ 138.169653][ T6716] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 138.300042][ T6716] usb 6-1: device descriptor read/64, error -71 [ 138.413830][ T6716] usb usb6-port1: attempt power cycle [ 138.703050][ T9155] netlink: 12 bytes leftover after parsing attributes in process `syz.8.510'. [ 138.749655][ T6716] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 138.783588][ T6716] usb 6-1: device descriptor read/8, error -71 [ 138.920808][ T9164] xt_NFQUEUE: number of total queues is 0 [ 139.039653][ T6716] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 139.071268][ T6716] usb 6-1: device descriptor read/8, error -71 [ 139.179728][ T6716] usb usb6-port1: unable to enumerate USB device [ 139.946519][ T9196] netlink: 'syz.8.522': attribute type 64 has an invalid length. [ 140.255919][ T9205] netlink: 'syz.8.523': attribute type 2 has an invalid length. [ 140.274507][ T9205] wireguard0: entered promiscuous mode [ 140.365413][ T39] audit: type=1800 audit(1735141240.703:29): pid=9209 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.7.524" name="SYSV00000000" dev="hugetlbfs" ino=0 res=0 errno=0 [ 140.733320][ T9214] vlan2: entered promiscuous mode [ 140.735119][ T9214] vlan2: entered allmulticast mode [ 141.211752][ T9221] ptrace attach of "/syz-executor exec"[7556] was attempted by "/syz-executor exec"[9221] [ 141.495095][ T9232] netlink: 24 bytes leftover after parsing attributes in process `syz.8.529'. [ 141.533653][ T9232] tmpfs: Bad value for 'mpol' [ 141.561646][ T9235] netlink: 24 bytes leftover after parsing attributes in process `syz.5.530'. [ 142.200415][ T9251] netlink: 8 bytes leftover after parsing attributes in process `syz.7.534'. [ 142.366210][ T9260] netlink: 72 bytes leftover after parsing attributes in process `syz.5.537'. [ 142.706649][ T9276] netlink: 8 bytes leftover after parsing attributes in process `syz.1.542'. [ 142.711325][ T9276] netlink: 4 bytes leftover after parsing attributes in process `syz.1.542'. [ 142.714919][ T9276] netlink: 5 bytes leftover after parsing attributes in process `syz.1.542'. [ 142.949580][ T9297] overlay: Unknown parameter '/' [ 142.986797][ T9297] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 143.997678][ T9330] netlink: 8 bytes leftover after parsing attributes in process `syz.1.551'. [ 144.000309][ T9330] macsec0: entered promiscuous mode [ 144.486102][ T9343] atomic_op ffff88804a37b998 conn xmit_atomic 0000000000000000 [ 144.598399][ T9351] netlink: 4 bytes leftover after parsing attributes in process `syz.1.557'. [ 145.506177][ T833] IPVS: starting estimator thread 0... [ 145.599883][ T9393] IPVS: using max 41 ests per chain, 98400 per kthread [ 145.648782][ T9397] netlink: 187320 bytes leftover after parsing attributes in process `syz.1.564'. [ 145.656426][ T9397] netlink: zone id is out of range [ 145.659620][ T9397] netlink: zone id is out of range [ 145.661098][ T9397] netlink: zone id is out of range [ 145.662590][ T9397] netlink: zone id is out of range [ 145.664069][ T9397] netlink: zone id is out of range [ 145.665546][ T9397] netlink: zone id is out of range [ 145.667213][ T9397] netlink: zone id is out of range [ 145.668727][ T9397] netlink: zone id is out of range [ 145.671102][ T9397] netlink: zone id is out of range [ 145.673523][ T9397] netlink: zone id is out of range [ 147.159442][ T9448] input: syz0 as /devices/virtual/input/input12 [ 147.310342][ T9452] 9pnet_virtio: no channels available for device [ 147.701772][ T9464] input: syz1 as /devices/virtual/input/input13 [ 147.824734][ T9474] __nla_validate_parse: 1 callbacks suppressed [ 147.824764][ T9474] netlink: 8 bytes leftover after parsing attributes in process `syz.1.578'. [ 147.973871][ T9479] netlink: 12 bytes leftover after parsing attributes in process `syz.5.582'. [ 148.661738][ T9498] vhci_hcd vhci_hcd.0: pdev(7) rhport(0) sockfd(8) [ 148.663585][ T9498] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 148.666217][ T9498] vhci_hcd vhci_hcd.0: Device attached [ 148.795998][ T9490] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 148.797857][ T9490] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 148.804330][ T9490] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 148.807407][ T9490] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 148.809114][ T9490] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 148.812384][ T9490] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 148.849594][ T6004] vhci_hcd: vhci_device speed not set [ 148.872399][ T9499] vhci_hcd: connection closed [ 148.874987][ T1229] vhci_hcd: stop threads [ 148.877552][ T1229] vhci_hcd: release socket [ 148.878961][ T1229] vhci_hcd: disconnect device [ 148.919589][ T6004] usb 51-1: new low-speed USB device number 2 using vhci_hcd [ 148.921791][ T6004] usb 51-1: enqueue for inactive port 0 [ 148.989705][ T6004] vhci_hcd: vhci_device speed not set [ 149.304350][ T9522] netlink: 8 bytes leftover after parsing attributes in process `syz.5.588'. [ 149.499960][ T9531] bridge_slave_0: left allmulticast mode [ 149.501556][ T9531] bridge_slave_0: left promiscuous mode [ 149.503116][ T9531] bridge0: port 1(bridge_slave_0) entered disabled state [ 149.507497][ T9531] bridge_slave_1: left allmulticast mode [ 149.510151][ T9531] bridge_slave_1: left promiscuous mode [ 149.513408][ T9531] bridge0: port 2(bridge_slave_1) entered disabled state [ 149.522425][ T9531] bond0: (slave bond_slave_0): Releasing backup interface [ 149.528099][ T9531] bond0: (slave bond_slave_1): Releasing backup interface [ 149.553841][ T9531] team0: Port device team_slave_0 removed [ 149.561095][ T9531] team0: Port device team_slave_1 removed [ 149.562969][ T9531] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 149.565002][ T9531] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 149.567531][ T9531] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 149.569785][ T9531] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 149.591010][ T9533] sch_tbf: burst 4398 is lower than device lo mtu (65550) ! [ 149.604630][ T9534] team0: Mode changed to "activebackup" [ 149.609314][ T9531] vlan0: entered promiscuous mode [ 149.622319][ T9531] team0: Port device vlan0 added [ 149.625777][ T9531] tipc: Started in network mode [ 149.627182][ T9531] tipc: Node identity aaaaaaaaaa1a, cluster identity 4711 [ 149.629190][ T9531] tipc: Enabled bearer , priority 0 [ 149.643977][ T9539] netlink: 8 bytes leftover after parsing attributes in process `syz.7.594'. [ 149.646502][ T9539] netlink: 8 bytes leftover after parsing attributes in process `syz.7.594'. [ 149.684744][ T9541] ntfs3(nullb0): Primary boot signature is not NTFS. [ 149.687810][ T9541] ntfs3(nullb0): try to read out of volume at offset 0x3e7ffffe00 [ 150.362721][ T5958] Bluetooth: hci0: command 0x0c1a tx timeout [ 150.640378][ T9601] input: syz0 as /devices/virtual/input/input15 [ 150.642272][ T9601] input: failed to attach handler leds to device input15, error: -6 [ 150.680072][ T7416] libceph: connect (1)[c::]:6789 error -101 [ 150.683635][ T7416] libceph: mon0 (1)[c::]:6789 connect error [ 150.742257][ T35] tipc: Node number set to 11578026 [ 150.829644][ T5950] Bluetooth: hci1: command 0x0c1a tx timeout [ 150.909883][ T9600] nbd7: detected capacity change from 0 to 14 [ 150.912783][ T6407] block nbd7: Send control failed (result -89) [ 150.915271][ T6407] block nbd7: Request send failed, requeueing [ 150.918057][ T5958] block nbd7: Receive control failed (result -32) [ 150.918456][ T6250] block nbd7: Dead connection, failed to find a fallback [ 150.918467][ T6250] block nbd7: shutting down sockets [ 150.918481][ T6250] blk_print_req_error: 120 callbacks suppressed [ 150.918487][ T6250] I/O error, dev nbd7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 150.918504][ T6250] buffer_io_error: 80 callbacks suppressed [ 150.918508][ T6250] Buffer I/O error on dev nbd7, logical block 0, async page read [ 150.940893][ T7416] libceph: connect (1)[c::]:6789 error -101 [ 150.942800][ T7416] libceph: mon0 (1)[c::]:6789 connect error [ 150.949692][ T9606] nbd7: detected capacity change from 14 to 0 [ 150.953332][ T6407] I/O error, dev nbd7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 150.956029][ T6407] Buffer I/O error on dev nbd7, logical block 0, async page read [ 150.958526][ T6407] ldm_validate_partition_table(): Disk read failed. [ 150.960714][ T6407] Dev nbd7: unable to read RDB block 0 [ 150.962239][ T6407] nbd7: unable to read partition table [ 150.964009][ T6407] nbd7: partition table beyond EOD, truncated [ 151.108108][ T9612] MINIX-fs: blocksize too small for device [ 151.115087][ T9613] MINIX-fs: blocksize too small for device [ 151.259802][ T9601] ceph: No mds server is up or the cluster is laggy [ 151.346837][ T9619] netlink: 36 bytes leftover after parsing attributes in process `syz.8.609'. [ 151.517288][ T9623] netlink: 8 bytes leftover after parsing attributes in process `syz.1.608'. [ 152.015535][ T9648] 9pnet_fd: Insufficient options for proto=fd [ 152.019214][ T9648] x_tables: ip6_tables: rpfilter match: used from hooks FORWARD, but only valid from PREROUTING [ 152.429632][ T5950] Bluetooth: hci0: command 0x0c1a tx timeout [ 152.612637][ T9660] netlink: 24 bytes leftover after parsing attributes in process `syz.8.619'. [ 152.646502][ T9662] netlink: 24 bytes leftover after parsing attributes in process `syz.7.620'. [ 152.898583][ T9671] fuse: Bad value for 'fd' [ 152.909699][ T5950] Bluetooth: hci1: command 0x0c1a tx timeout [ 153.250319][ T9715] netlink: 8 bytes leftover after parsing attributes in process `syz.7.624'. [ 153.294630][ T9714] netlink: 24 bytes leftover after parsing attributes in process `syz.8.629'. [ 153.315394][ T9724] netlink: 8 bytes leftover after parsing attributes in process `syz.5.631'. [ 153.324140][ T9724] Bluetooth: received HCILL_WAKE_UP_ACK in state 2 [ 153.330786][ T1139] Bluetooth: hci4: Frame reassembly failed (-84) [ 153.574370][ T9746] loop2: detected capacity change from 0 to 61 [ 153.589620][ T7073] usb 10-1: new full-speed USB device number 5 using dummy_hcd [ 153.618649][ T9749] netdevsim netdevsim8: Firmware load for './cgroup/../file0' refused, path contains '..' component [ 153.760775][ T7073] usb 10-1: not running at top speed; connect to a high speed hub [ 153.764644][ T7073] usb 10-1: config 1 interface 0 altsetting 8 endpoint 0x82 has invalid maxpacket 1024, setting to 64 [ 153.767783][ T7073] usb 10-1: config 1 interface 0 altsetting 8 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 153.771574][ T7073] usb 10-1: config 1 interface 0 has no altsetting 0 [ 153.775119][ T7073] usb 10-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 153.778116][ T7073] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 153.778135][ T7073] usb 10-1: Product: ⟝竤鷺덜愐྆戉ຒ㔦˂㉈槕ᖶ䕡ꃶ砑ୣ둦実苓鎏델媶竖쵣≮Ꙭ惃쀐㘔猄䡚诂엪孼꣣頍촍㵛ᥥ앰⛸ᑏЈ⯃螰窂诞枝槖缼ꍽ腛훥＿⭪逛哱喊岋즖㒵俟蝕❺謸ᐧ峘삁ꔻ᷻ⷦਕ檪꒦怹Ű麼캎簸䡦﷕ꎨ끐᨞䅻胗診賝쉧䜚톻 [ 153.778164][ T7073] usb 10-1: Manufacturer: Ђ [ 153.778177][ T7073] usb 10-1: SerialNumber: 쫟 [ 153.846723][ T9724] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 154.013321][ T9756] block nbd7: not configured, cannot reconfigure [ 154.054866][ T7073] cdc_ether 10-1:1.0: probe with driver cdc_ether failed with error -71 [ 154.063660][ T7073] usb 10-1: USB disconnect, device number 5 [ 154.245114][ T9764] loop6: detected capacity change from 0 to 524287999 [ 154.249753][ T9766] random: crng reseeded on system resumption [ 154.510144][ T5950] Bluetooth: hci0: command 0x0c1a tx timeout [ 154.999694][ T5950] Bluetooth: hci1: command 0x0c1a tx timeout [ 155.317994][ T9787] fuse: Bad value for 'fd' [ 155.400279][ T5950] Bluetooth: hci4: command 0x1003 tx timeout [ 155.403250][ T5958] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 155.584429][ T9793] batadv1: entered promiscuous mode [ 155.586499][ T9793] batadv1: entered allmulticast mode [ 155.636607][ T9796] netlink: 20 bytes leftover after parsing attributes in process `syz.1.646'. [ 155.640544][ T9796] netlink: 28 bytes leftover after parsing attributes in process `syz.1.646'. [ 155.889128][ T9801] syz.1.647: attempt to access beyond end of device [ 155.889128][ T9801] loop1: rw=4096, sector=0, nr_sectors = 1 limit=0 [ 155.893844][ T9801] XFS (loop1): SB validate failed with error -5. [ 155.963789][ T9809] x_tables: duplicate underflow at hook 3 [ 156.142893][ T9814] fuse: Bad value for 'fd' [ 156.365104][ T9827] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 156.472140][ T9827] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 156.494607][ T9838] syz.5.656[9838] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 156.494660][ T9838] syz.5.656[9838] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 156.498225][ T9838] syz.5.656[9838] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 156.549212][ T9827] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 156.644010][ T9827] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 156.676234][ T9844] netlink: 40 bytes leftover after parsing attributes in process `syz.5.656'. [ 156.767743][ T9827] netdevsim netdevsim7 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 156.787606][ T9827] netdevsim netdevsim7 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 156.801375][ T9827] netdevsim netdevsim7 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 156.822893][ T9827] netdevsim netdevsim7 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 157.069632][ T5958] Bluetooth: hci1: command 0x0c1a tx timeout [ 158.494520][ T9883] Invalid ELF header magic: != ELF [ 159.082507][ T39] audit: type=1326 audit(1735141259.423:30): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9876 comm="syz.5.666" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f50579 code=0x7fc00000 [ 159.092099][ T39] audit: type=1326 audit(1735141259.423:31): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9876 comm="syz.5.666" exe="/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf7f50579 code=0x7fc00000 [ 159.098172][ T39] audit: type=1326 audit(1735141259.423:32): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9876 comm="syz.5.666" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f50579 code=0x7fc00000 [ 159.106224][ T39] audit: type=1326 audit(1735141259.423:33): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9876 comm="syz.5.666" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f50579 code=0x7fc00000 [ 159.117611][ T39] audit: type=1326 audit(1735141259.423:34): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9876 comm="syz.5.666" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f50579 code=0x7fc00000 [ 159.124137][ T39] audit: type=1326 audit(1735141259.423:35): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9876 comm="syz.5.666" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f50579 code=0x7fc00000 [ 159.130682][ T39] audit: type=1326 audit(1735141259.423:36): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9876 comm="syz.5.666" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f50579 code=0x7fc00000 [ 159.137118][ T39] audit: type=1326 audit(1735141259.423:37): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9876 comm="syz.5.666" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f50579 code=0x7fc00000 [ 159.143541][ T39] audit: type=1326 audit(1735141259.423:38): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9876 comm="syz.5.666" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f50579 code=0x7fc00000 [ 159.158029][ T39] audit: type=1326 audit(1735141259.423:39): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9876 comm="syz.5.666" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f50579 code=0x7fc00000 [ 159.706596][ T9909] netlink: 8 bytes leftover after parsing attributes in process `syz.8.673'. [ 160.411696][ T9913] netlink: 8 bytes leftover after parsing attributes in process `syz.1.674'. [ 160.625325][ T9931] netlink: 28 bytes leftover after parsing attributes in process `syz.7.678'. [ 160.961054][ T6716] usb 10-1: new high-speed USB device number 6 using dummy_hcd [ 161.109876][ T6716] usb 10-1: Using ep0 maxpacket: 8 [ 161.113330][ T6716] usb 10-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 161.116902][ T6716] usb 10-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 161.121347][ T6716] usb 10-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 161.124448][ T6716] usb 10-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 161.128276][ T6716] usb 10-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 161.131342][ T6716] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 161.336565][ T6716] usb 10-1: GET_CAPABILITIES returned 0 [ 161.338237][ T6716] usbtmc 10-1:16.0: can't read capabilities [ 161.342707][ T6716] usb 10-1: USB disconnect, device number 6 [ 161.653920][ T9971] netlink: 8 bytes leftover after parsing attributes in process `syz.8.684'. [ 163.382951][T10032] netlink: 4 bytes leftover after parsing attributes in process `syz.8.702'. [ 163.799828][ T1331] usb 13-1: new high-speed USB device number 5 using dummy_hcd [ 163.949701][ T1331] usb 13-1: Using ep0 maxpacket: 16 [ 163.953667][ T1331] usb 13-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 163.956798][ T1331] usb 13-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 163.960616][ T1331] usb 13-1: New USB device found, idVendor=1781, idProduct=0898, bcdDevice= 0.00 [ 163.963564][ T1331] usb 13-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 163.969684][ T1331] usb 13-1: config 0 descriptor?? [ 163.974724][ T1331] input: PXRC Flight Controller Adapter as /devices/platform/dummy_hcd.8/usb13/13-1/13-1:0.0/input/input17 [ 164.176515][ T1331] usb 13-1: USB disconnect, device number 5 [ 164.192155][T10054] fuse: Bad value for 'fd' [ 164.725417][T10059] capability: warning: `syz.8.710' uses 32-bit capabilities (legacy support in use) [ 164.855873][T10067] netlink: 'syz.8.710': attribute type 4 has an invalid length. [ 165.549656][T10037] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 165.549762][ T5950] Bluetooth: hci0: command 0x0c1a tx timeout [ 165.841460][T10073] net_ratelimit: 2 callbacks suppressed [ 165.841482][T10073] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 165.854739][T10073] netlink: 'syz.7.713': attribute type 10 has an invalid length. [ 165.857565][T10073] syz_tun: entered promiscuous mode [ 166.345638][T10037] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 166.467583][T10083] fuse: Bad value for 'fd' [ 166.580334][T10093] syz.8.720[10093] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 166.580412][T10093] syz.8.720[10093] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 166.584995][T10093] syz.8.720[10093] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 166.687808][T10101] team0: Device wg2 is of different type [ 166.773757][T10104] netlink: 40 bytes leftover after parsing attributes in process `syz.8.720'. [ 167.444085][T10118] netlink: 156 bytes leftover after parsing attributes in process `syz.5.723'. [ 167.491437][T10121] netlink: 4 bytes leftover after parsing attributes in process `syz.5.725'. [ 167.551752][T10126] fuse: Bad value for 'fd' [ 167.629668][ T5950] Bluetooth: hci1: command 0x0c1a tx timeout [ 167.656414][T10131] IPVS: You probably need to specify IP address on multicast interface. [ 167.659073][T10131] IPVS: Error connecting to the multicast addr [ 167.749615][ T35] usb 12-1: new high-speed USB device number 4 using dummy_hcd [ 167.845521][ T5945] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 167.849132][ T5945] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 167.853622][ T5945] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 167.856212][ T5945] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 167.858649][ T5945] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 167.861074][ T5945] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 167.880916][T10142] syz.5.733[10142] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 167.880965][T10142] syz.5.733[10142] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 167.885231][T10142] syz.5.733[10142] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 167.909805][ T35] usb 12-1: Using ep0 maxpacket: 16 [ 167.916602][ T35] usb 12-1: New USB device found, idVendor=1604, idProduct=8007, bcdDevice=af.a6 [ 167.919006][ T35] usb 12-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 167.921384][ T35] usb 12-1: Product: syz [ 167.922518][ T35] usb 12-1: Manufacturer: syz [ 167.923734][ T35] usb 12-1: SerialNumber: syz [ 167.927613][ T35] usb 12-1: config 0 descriptor?? [ 167.936918][T10139] chnl_net:caif_netlink_parms(): no params data found [ 167.998953][T10139] bridge0: port 1(bridge_slave_0) entered blocking state [ 168.001882][T10139] bridge0: port 1(bridge_slave_0) entered disabled state [ 168.004506][T10139] bridge_slave_0: entered allmulticast mode [ 168.007213][T10139] bridge_slave_0: entered promiscuous mode [ 168.010697][T10139] bridge0: port 2(bridge_slave_1) entered blocking state [ 168.017153][T10139] bridge0: port 2(bridge_slave_1) entered disabled state [ 168.019233][T10139] bridge_slave_1: entered allmulticast mode [ 168.021621][T10139] bridge_slave_1: entered promiscuous mode [ 168.049441][T10139] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 168.053493][T10139] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 168.055878][T10151] netlink: 40 bytes leftover after parsing attributes in process `syz.5.733'. [ 168.078788][T10139] team0: Port device team_slave_0 added [ 168.082445][T10139] team0: Port device team_slave_1 added [ 168.100174][T10139] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 168.102184][T10139] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 168.110565][T10139] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 168.114313][T10139] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 168.116309][T10139] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 168.124542][T10139] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 168.149032][T10139] hsr_slave_0: entered promiscuous mode [ 168.151905][ T7417] usb 12-1: USB disconnect, device number 4 [ 168.157212][T10139] hsr_slave_1: entered promiscuous mode [ 168.171613][T10139] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 168.173791][T10139] Cannot create hsr debugfs directory [ 168.572668][T10170] cgroup: Name too long [ 169.002294][T10139] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 169.006697][T10139] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 169.021142][T10139] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 169.025730][T10139] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 169.072094][T10139] 8021q: adding VLAN 0 to HW filter on device bond0 [ 169.081547][T10139] 8021q: adding VLAN 0 to HW filter on device team0 [ 169.088198][ T7488] bridge0: port 1(bridge_slave_0) entered blocking state [ 169.090287][ T7488] bridge0: port 1(bridge_slave_0) entered forwarding state [ 169.098805][ T105] bridge0: port 2(bridge_slave_1) entered blocking state [ 169.101059][ T105] bridge0: port 2(bridge_slave_1) entered forwarding state [ 169.145165][ T7488] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 169.290154][ T7488] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 169.296023][ T5958] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 169.301469][ T5958] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 169.305498][ T5958] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 169.315437][ T5958] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 169.320889][ T5958] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 169.323286][ T5958] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 169.414656][ T7488] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 169.560301][T10231] netlink: 4 bytes leftover after parsing attributes in process `syz.7.740'. [ 169.563470][T10231] unsupported nlmsg_type 40 [ 169.856471][ T7488] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 169.907639][T10139] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 169.933347][T10139] veth0_vlan: entered promiscuous mode [ 169.942476][T10139] veth1_vlan: entered promiscuous mode [ 169.962179][T10139] veth0_macvtap: entered promiscuous mode [ 169.965692][T10139] veth1_macvtap: entered promiscuous mode [ 169.973202][T10139] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 169.976270][T10139] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 169.979145][T10139] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 169.983776][T10139] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 169.986601][T10139] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 169.992563][T10139] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 169.996033][T10139] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 169.999930][T10139] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 170.003007][T10139] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 170.005831][T10139] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 170.008775][T10139] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 170.012155][T10139] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 170.015533][T10139] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 170.018905][T10139] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 170.042163][T10139] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 170.044713][T10139] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 170.047201][T10139] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 170.053055][T10139] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 170.059878][ T5950] Bluetooth: hci0: command tx timeout [ 170.717073][ T7488] bond0 (unregistering): Released all slaves [ 170.728825][T10210] chnl_net:caif_netlink_parms(): no params data found [ 170.826411][T10275] syz.1.744[10275] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 170.826494][T10275] syz.1.744[10275] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 170.827078][ T69] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 170.830000][T10275] syz.1.744[10275] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 170.846507][ T69] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 170.887333][T10210] bridge0: port 1(bridge_slave_0) entered blocking state [ 170.889693][T10210] bridge0: port 1(bridge_slave_0) entered disabled state [ 170.892013][T10210] bridge_slave_0: entered allmulticast mode [ 170.894581][T10210] bridge_slave_0: entered promiscuous mode [ 170.900033][T10210] bridge0: port 2(bridge_slave_1) entered blocking state [ 170.902137][T10210] bridge0: port 2(bridge_slave_1) entered disabled state [ 170.907491][T10210] bridge_slave_1: entered allmulticast mode [ 170.913426][T10210] bridge_slave_1: entered promiscuous mode [ 170.966470][T10210] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 170.984512][ T1145] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 170.988148][ T1145] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 170.993503][T10210] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 171.014631][T10286] netlink: 40 bytes leftover after parsing attributes in process `syz.1.744'. [ 171.071178][ T7488] hsr_slave_0: left promiscuous mode [ 171.076926][ T7488] hsr_slave_1: left promiscuous mode [ 171.096179][ T7488] veth1_macvtap: left promiscuous mode [ 171.097825][ T7488] veth0_macvtap: left promiscuous mode [ 171.145582][T10291] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 171.168670][ T39] kauditd_printk_skb: 57 callbacks suppressed [ 171.168701][ T39] audit: type=1800 audit(1735141271.503:97): pid=10291 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.732" name="file0" dev="overlay" ino=25 res=0 errno=0 [ 171.401044][ T5950] Bluetooth: hci2: command tx timeout [ 172.041918][T10297] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 172.109641][ T5950] Bluetooth: hci0: command tx timeout [ 172.517077][T10210] team0: Port device team_slave_0 added [ 172.542487][T10210] team0: Port device team_slave_1 added [ 172.583547][T10210] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 172.585591][T10210] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 172.592909][T10210] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 172.599402][T10210] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 172.603984][T10210] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 172.611388][T10210] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 172.633896][T10210] hsr_slave_0: entered promiscuous mode [ 172.644778][T10210] hsr_slave_1: entered promiscuous mode [ 172.646843][T10210] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 172.649030][T10210] Cannot create hsr debugfs directory [ 172.690858][T10294] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 172.692718][T10294] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 172.701839][T10294] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 172.707290][T10294] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 172.710057][T10294] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 172.714096][T10294] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 173.006238][T10326] 9pnet_fd: Insufficient options for proto=fd [ 173.110486][ T5945] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 173.114012][ T5945] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 173.116906][ T5945] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 173.126544][ T5945] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 173.129006][ T5945] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 173.131723][ T5945] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 173.327657][ T7488] ref_tracker: net notrefcnt@ffff88804c125ca0 has 1/1 users at [ 173.327657][ T7488] sk_alloc+0xa93/0xb90 [ 173.327657][ T7488] inet6_create+0x380/0x1320 [ 173.327657][ T7488] __sock_create+0x335/0x8d0 [ 173.327657][ T7488] inet_ctl_sock_create+0x96/0x230 [ 173.327657][ T7488] igmp6_net_init+0x35/0x470 [ 173.327657][ T7488] ops_init+0x1df/0x5f0 [ 173.327657][ T7488] setup_net+0x21f/0x860 [ 173.327657][ T7488] copy_net_ns+0x2b4/0x6c0 [ 173.327657][ T7488] create_new_namespaces+0x3ea/0xad0 [ 173.327657][ T7488] unshare_nsproxy_namespaces+0xc0/0x1f0 [ 173.327657][ T7488] ksys_unshare+0x45d/0xa40 [ 173.327657][ T7488] __ia32_sys_unshare+0x30/0x40 [ 173.327657][ T7488] __do_fast_syscall_32+0x73/0x120 [ 173.327657][ T7488] do_fast_syscall_32+0x32/0x80 [ 173.327657][ T7488] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 173.327657][ T7488] [ 173.359284][ T7488] ------------[ cut here ]------------ [ 173.361572][ T7488] WARNING: CPU: 2 PID: 7488 at lib/ref_tracker.c:179 ref_tracker_dir_exit+0x3e3/0x680 [ 173.364262][ T7488] Modules linked in: [ 173.367643][ T7488] CPU: 2 UID: 0 PID: 7488 Comm: kworker/u32:11 Not tainted 6.13.0-rc4-syzkaller-00012-g9b2ffa6148b1 #0 [ 173.371724][ T7488] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 173.374769][ T7488] Workqueue: netns cleanup_net [ 173.376146][ T7488] RIP: 0010:ref_tracker_dir_exit+0x3e3/0x680 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 173.377854][ T7488] Code: 11 02 00 00 4d 39 f5 49 8b 06 4d 89 f7 0f 85 0e ff ff ff 48 8b 2c 24 e8 4b 33 d1 fc 48 8b 74 24 18 48 89 ef e8 3e 99 54 06 90 <0f> 0b 90 e8 35 33 d1 fc 48 8d 5d 44 be 04 00 00 00 48 89 df e8 94 [ 173.383638][ T7488] RSP: 0018:ffffc90007e3fb38 EFLAGS: 00010246 [ 173.385513][ T7488] RAX: 0000000000000000 RBX: dffffc0000000000 RCX: 0000000000000000 [ 173.387783][ T7488] RDX: 0000000000000001 RSI: ffffffff8b4cd280 RDI: 0000000000000001 [ 173.391889][ T7488] RBP: ffff88804c125ca0 R08: 0000000000000001 R09: fffffbfff2d36dc1 [ 173.394491][ T7488] R10: ffffffff969b6e0f R11: 0000000000000003 R12: ffff88804c125cf0 [ 173.396719][ T7488] R13: ffff88804c125cf0 R14: ffff88804c125cf0 R15: ffff88804c125cf0 [ 173.399424][ T7488] FS: 0000000000000000(0000) GS:ffff88802b600000(0000) knlGS:0000000000000000 [ 173.402672][ T7488] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 173.405160][ T7488] CR2: 000055f8b7104680 CR3: 000000000db7e000 CR4: 0000000000352ef0 [ 173.408034][ T7488] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 173.411190][ T7488] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 173.413754][ T7488] Call Trace: [ 173.414843][ T7488] [ 173.415793][ T7488] ? __warn+0xea/0x3c0 [ 173.417315][ T7488] ? ref_tracker_dir_exit+0x3e3/0x680 [ 173.419299][ T7488] ? report_bug+0x3c0/0x580 [ 173.420832][ T7488] ? handle_bug+0x54/0xa0 [ 173.422152][ T7488] ? exc_invalid_op+0x17/0x50 [ 173.423545][ T7488] ? asm_exc_invalid_op+0x1a/0x20 [ 173.425022][ T7488] ? ref_tracker_dir_exit+0x3e3/0x680 [ 173.426602][ T7488] ? ref_tracker_dir_exit+0x3e2/0x680 [ 173.428227][ T7488] ? __pfx_ref_tracker_dir_exit+0x10/0x10 [ 173.430108][ T7488] ? lockdep_hardirqs_on+0x7c/0x110 [ 173.431783][ T7488] ? cleanup_net+0x984/0xbd0 [ 173.433175][ T7488] cleanup_net+0x990/0xbd0 [ 173.434632][ T7488] ? __pfx_cleanup_net+0x10/0x10 [ 173.436237][ T7488] ? lock_acquire+0x2f/0xb0 [ 173.437630][ T7488] ? process_one_work+0x8bb/0x1b30 [ 173.439369][ T7488] process_one_work+0x958/0x1b30 [ 173.441295][ T7488] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 173.443239][ T7488] ? __pfx_process_one_work+0x10/0x10 [ 173.444864][ T7488] ? rcu_is_watching+0x12/0xc0 [ 173.446615][ T7488] ? assign_work+0x1a0/0x250 [ 173.448327][ T7488] worker_thread+0x6c8/0xf00 [ 173.450211][ T7488] ? __kthread_parkme+0x148/0x220 [ 173.451888][ T7488] ? __pfx_worker_thread+0x10/0x10 [ 173.453663][ T7488] kthread+0x2c1/0x3a0 [ 173.455071][ T7488] ? _raw_spin_unlock_irq+0x23/0x50 [ 173.456638][ T7488] ? __pfx_kthread+0x10/0x10 [ 173.458390][ T7488] ret_from_fork+0x45/0x80 [ 173.459805][ T7488] ? __pfx_kthread+0x10/0x10 [ 173.461262][ T7488] ret_from_fork_asm+0x1a/0x30 [ 173.462982][ T7488] [ 173.464138][ T7488] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 173.466650][ T7488] CPU: 2 UID: 0 PID: 7488 Comm: kworker/u32:11 Not tainted 6.13.0-rc4-syzkaller-00012-g9b2ffa6148b1 #0 [ 173.469764][ T7488] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 173.473378][ T7488] Workqueue: netns cleanup_net [ 173.474884][ T7488] Call Trace: [ 173.475863][ T7488] [ 173.476919][ T7488] dump_stack_lvl+0x3d/0x1f0 [ 173.478665][ T7488] panic+0x71d/0x800 [ 173.480190][ T7488] ? __pfx_panic+0x10/0x10 [ 173.481954][ T7488] ? show_trace_log_lvl+0x29d/0x3d0 [ 173.484003][ T7488] ? check_panic_on_warn+0x1f/0xb0 [ 173.486001][ T7488] ? ref_tracker_dir_exit+0x3e3/0x680 [ 173.488020][ T7488] check_panic_on_warn+0xab/0xb0 [ 173.489916][ T7488] __warn+0xf6/0x3c0 [ 173.491098][ T7488] ? ref_tracker_dir_exit+0x3e3/0x680 [ 173.492688][ T7488] report_bug+0x3c0/0x580 [ 173.493952][ T7488] handle_bug+0x54/0xa0 [ 173.495174][ T7488] exc_invalid_op+0x17/0x50 [ 173.496494][ T7488] asm_exc_invalid_op+0x1a/0x20 [ 173.497919][ T7488] RIP: 0010:ref_tracker_dir_exit+0x3e3/0x680 [ 173.499876][ T7488] Code: 11 02 00 00 4d 39 f5 49 8b 06 4d 89 f7 0f 85 0e ff ff ff 48 8b 2c 24 e8 4b 33 d1 fc 48 8b 74 24 18 48 89 ef e8 3e 99 54 06 90 <0f> 0b 90 e8 35 33 d1 fc 48 8d 5d 44 be 04 00 00 00 48 89 df e8 94 [ 173.505855][ T7488] RSP: 0018:ffffc90007e3fb38 EFLAGS: 00010246 [ 173.507986][ T7488] RAX: 0000000000000000 RBX: dffffc0000000000 RCX: 0000000000000000 [ 173.510723][ T7488] RDX: 0000000000000001 RSI: ffffffff8b4cd280 RDI: 0000000000000001 [ 173.513001][ T7488] RBP: ffff88804c125ca0 R08: 0000000000000001 R09: fffffbfff2d36dc1 [ 173.515267][ T7488] R10: ffffffff969b6e0f R11: 0000000000000003 R12: ffff88804c125cf0 [ 173.517537][ T7488] R13: ffff88804c125cf0 R14: ffff88804c125cf0 R15: ffff88804c125cf0 [ 173.519792][ T7488] ? ref_tracker_dir_exit+0x3e2/0x680 [ 173.521357][ T7488] ? __pfx_ref_tracker_dir_exit+0x10/0x10 [ 173.522989][ T7488] ? lockdep_hardirqs_on+0x7c/0x110 [ 173.524483][ T7488] ? cleanup_net+0x984/0xbd0 [ 173.525886][ T7488] cleanup_net+0x990/0xbd0 [ 173.527169][ T7488] ? __pfx_cleanup_net+0x10/0x10 [ 173.528598][ T7488] ? lock_acquire+0x2f/0xb0 [ 173.529914][ T7488] ? process_one_work+0x8bb/0x1b30 [ 173.531350][ T7488] process_one_work+0x958/0x1b30 [ 173.532777][ T7488] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 173.534373][ T7488] ? __pfx_process_one_work+0x10/0x10 [ 173.535924][ T7488] ? rcu_is_watching+0x12/0xc0 [ 173.537314][ T7488] ? assign_work+0x1a0/0x250 [ 173.538663][ T7488] worker_thread+0x6c8/0xf00 [ 173.539975][ T7488] ? __kthread_parkme+0x148/0x220 [ 173.541433][ T7488] ? __pfx_worker_thread+0x10/0x10 [ 173.542901][ T7488] kthread+0x2c1/0x3a0 [ 173.544074][ T7488] ? _raw_spin_unlock_irq+0x23/0x50 [ 173.545604][ T7488] ? __pfx_kthread+0x10/0x10 [ 173.546931][ T7488] ret_from_fork+0x45/0x80 [ 173.548217][ T7488] ? __pfx_kthread+0x10/0x10 [ 173.549580][ T7488] ret_from_fork_asm+0x1a/0x30 [ 173.550966][ T7488] [ 173.552462][ T7488] Kernel Offset: disabled [ 173.553789][ T7488] Rebooting in 86400 seconds.. VM DIAGNOSIS: 15:41:13 Registers: info registers vcpu 0 CPU#0 RAX=000000000057caa5 RBX=0000000000000000 RCX=ffffffff8b1a3819 RDX=0000000000000000 RSI=ffffffff8b4cd280 RDI=ffffffff8bb17000 RBP=fffffbfff1b52ef8 RSP=ffffffff8da07e20 R8 =0000000000000001 R9 =ffffed1005686fed R10=ffff88802b437f6b R11=0000000000000000 R12=0000000000000000 R13=ffffffff8da977c0 R14=ffffffff901ce3d0 R15=0000000000000000 RIP=ffffffff8b1a4bff RFL=00000206 [-----P-] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff88802b400000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00000000204f9000 CR3=0000000057602000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000004 00c800a400000000 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000200000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=dffffc0000000000 RBX=0000000000000001 RCX=0000000000000000 RDX=1ffff92001a45f36 RSI=ffffffff820e8742 RDI=ffffc9000d22f968 RBP=ffffc9000d22f9b0 RSP=ffffc9000d22f8f8 R8 =ffffc9000d22f99c R9 =ffffffff90bd5db4 R10=ffffc9000d22f968 R11=0000000000010e86 R12=ffffffff81852e40 R13=ffffc9000d22f968 R14=0000000000000000 R15=ffff888021918000 RIP=ffffffff8148eee8 RFL=00000a06 [-O---P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 00007f83def7f500 ffffffff 00c00000 GS =0000 ffff88802b500000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007f83df231690 CR3=00000000608ce000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=00000000fcc2c2fe Opmask01=0000000000000000 Opmask02=000000000000001f Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000004 0302000100008881 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000000000005d ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffffffffffffffff 0f0e0d0c0b0a0908 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0a002075676f0087 868a898482818388 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ff00ff0000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffffffffffffffff ffffffffffff0000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ff00ff0000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2f2f2f2f2f2f2f2f 2f2f2f2f2f2f2f2f 2f2f2f2f2f2f2f2f 2f2f2f2f2f2f2f2f ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 828183883a3d007e 7d7c605d5c5b3f3e 3d3c3b3a2d2a2928 2726242221200a09 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000000000662d 000055a71ce30020 000055a71ce30040 000000000000005b ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00733d6e6f682d5f 66690064636c6166 3d2f645f66630033 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 2 CPU#2 RAX=000000000000005d RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff85142d25 RDI=ffffffff9a667240 RBP=ffffffff9a667200 RSP=ffffc90007e3f498 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=0000000000000006 R12=0000000000000000 R13=000000000000005d R14=ffffffff85142cc0 R15=0000000000000000 RIP=ffffffff85142d4f RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff88802b600000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=000055f8b7104680 CR3=000000000db7e000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000062003 Opmask01=0000000000100000 Opmask02=000000000fffffff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000080000010015 0000000c00000028 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000e00000001 0000000000000006 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0043004400010015 0000000000000040 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000ff0000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffffffffffffff00 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2525252525252525 2525252525252525 2525252525252525 2525252525252525 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 50422064656e7761 7073203a73250050 5241006e65706f5f 667062203a732500 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 50420541404b5244 5556051f56000050 5241004b40554a5f 435547051f560000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00000000000000d1 0000000000000000 396874652f74656e 2f306d6973766564 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000071 0000000000000000 00306e6170772f74 656e2f307968702f ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000021 0000000000000000 000055f8dd6ac233 73656d5f70636864 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 725f0f4be1547661 72610f75ff7b737f 656775fbff7fffff 7f7f7d7f75777965 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000021 0000000000000000 0000000000000031 0000726565666965 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000021 0000000000000000 0000000000000031 00006d5f65636864 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 bfbfbfbfbfbfbfbf bfbfbfbfbfbfbfbf bfbfbfbfbfbfbfbf bfbf2b313423342c ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 262821df2e2e33df 3228df3232202b22 df312e232d2435bf 2324353124322431 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 4141414141414141 4141414141414141 4141414141414141 4141414141414141 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 1a1a1a1a1a1a1a1a 1a1a1a1a1a1a1a1a 1a1a1a1a1a1a1a1a 1a1a1a1a1a1a1a1a ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2020202020202020 2020202020202020 2020202020202020 2020202020202020 info registers vcpu 3 CPU#3 RAX=0000000000000002 RBX=f9f0d9a003d2eb8b RCX=ffffffff81761562 RDX=1ffff110040f45ed RSI=0000000000000008 RDI=000000009f0d9a0f RBP=0000000000000000 RSP=ffffc90003f670f8 R8 =0000000000000000 R9 =fffffbfff2d36d98 R10=ffffffff969b6cc7 R11=0000000000000001 R12=ffffed10040f45e3 R13=ffff8880207a2440 R14=0000000000000004 R15=ffff8880207a2f48 RIP=ffffffff817611d8 RFL=00000006 [-----P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff88802b700000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00000000f7f36e40 CR3=000000000db7e000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 f700585858585858 2e7a7973f73d3ff4 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 f700585858585858 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffffffffffffffff 0f0e0d0c0b0a0908 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000