Warning: Permanently added '10.128.1.60' (ECDSA) to the list of known hosts. 2020/02/12 23:14:34 fuzzer started 2020/02/12 23:14:36 dialing manager at 10.128.0.26:39723 2020/02/12 23:14:36 syscalls: 2944 2020/02/12 23:14:36 code coverage: enabled 2020/02/12 23:14:36 comparison tracing: enabled 2020/02/12 23:14:36 extra coverage: enabled 2020/02/12 23:14:36 setuid sandbox: enabled 2020/02/12 23:14:36 namespace sandbox: enabled 2020/02/12 23:14:36 Android sandbox: /sys/fs/selinux/policy does not exist 2020/02/12 23:14:36 fault injection: enabled 2020/02/12 23:14:36 leak checking: CONFIG_DEBUG_KMEMLEAK is not enabled 2020/02/12 23:14:36 net packet injection: enabled 2020/02/12 23:14:36 net device setup: enabled 2020/02/12 23:14:36 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2020/02/12 23:14:36 devlink PCI setup: PCI device 0000:00:10.0 is not available 23:17:11 executing program 0: r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x10000, 0x0) inotify_add_watch(r0, &(0x7f0000000040)='./file0\x00', 0x2000000) r1 = getpgrp(0xffffffffffffffff) timer_create(0x6, &(0x7f0000000080)={0x0, 0x3a, 0x2, @tid=r1}, &(0x7f00000000c0)) r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/net/ipv4/vs/sync_version\x00', 0x2, 0x0) write$P9_RSETATTR(r2, &(0x7f0000000140)={0x7, 0x1b, 0x1}, 0x7) r3 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ocfs2_control\x00', 0x40000, 0x0) getsockopt$SO_J1939_SEND_PRIO(r3, 0x6b, 0x3, &(0x7f00000001c0), &(0x7f0000000200)=0x4) r4 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000240)='/dev/hwrng\x00', 0x200000, 0x0) ioctl$RTC_WKALM_SET(r4, 0x4028700f, &(0x7f0000000280)={0x0, 0x1, {0x16, 0x30, 0x5, 0xc, 0xa, 0x401, 0x3, 0x14c, 0x473cde911d67d5c}}) lsetxattr$security_capability(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)='security.capability\x00', &(0x7f0000000340)=@v1={0x1000000, [{0x7, 0x9}]}, 0xc, 0x2) ioctl$sock_bt_bnep_BNEPGETSUPPFEAT(r0, 0x800442d4, &(0x7f0000000380)=0xb21f) setsockopt$SO_J1939_SEND_PRIO(r0, 0x6b, 0x3, &(0x7f00000003c0)=0x3, 0x4) ioctl$CAPI_GET_MANUFACTURER(r3, 0xc0044306, &(0x7f0000000400)=0xffffffff) r5 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000440)='/dev/cachefiles\x00', 0x10100, 0x0) ioctl$KDGKBSENT(r5, 0x4b48, &(0x7f0000000480)={0x5, "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"}) statx(r0, &(0x7f0000001a80)='./file0\x00', 0x400, 0x400, &(0x7f0000001ac0)={0x0, 0x0, 0x0, 0x0, 0x0}) syz_mount_image$hfs(&(0x7f00000006c0)='hfs\x00', &(0x7f0000000700)='./file0\x00', 0x10000000000000, 0x8, &(0x7f00000019c0)=[{&(0x7f0000000740)="e74a32ab9b8e6a04c5bc361b1093c61566ba56", 0x13, 0x3}, {&(0x7f0000000780)="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", 0x1000, 0x7fff}, {&(0x7f0000001780)="9ce60574088300a275f16ccb6a7d8ed1675df751d580234c71048736a991dba53ad6074e415a3a6570b6b427914e6b8e72969e334745823a393d5d8a91", 0x3d, 0xfffffffffffffffd}, {&(0x7f00000017c0)="1248b0828104f859f477408d110e2f9220b8023f324ad80287c440aa887736ca89038102f4db662fb82215b6e9926c54551588ee5cd3816204aa9d910b8ebdc116322a490a1ad4e5b7205bd172c9d4046ae6796e811221b3ed4ea5e990691a5e1648b52c3383e563a1346b8cb93927232aaa9594fda365fe739cdbccf8d7", 0x7e, 0x1}, {&(0x7f0000001840)="5f680526dc72d2c93d04d93b9f060de9d9394e6bfb725cff8d5236445d166455c91413b8cf96b3e0d191ce8786c008559f55b5d6bec5edb1443436ecd3cb0a88dddcf86c2c4ddea82cf6fd5e1b2251e190a8c157a2d7d96d62e2c9ebd0a99d0cdf302f2edf60ad6d47dee5c0f9711c7343f52f74db1d94844de1f15d2d884d5cedd5584f565132ad700102e0499b790c23e69a8422e2c7e92fdaa588bad56fc17e8e309924", 0xa5, 0xffffffff}, {&(0x7f0000001900)="b9825ab7b74fe3f61914d62d7f98b28c60d2dc6e7d72cbb34e", 0x19, 0x3ff}, {&(0x7f0000001940)="54154cddc7a9926fb62ae17d4d983b5895f0c1d5e17737c1506a3a4f169ae21a773ee730fc27893d13c72836f91e2d836d36", 0x32, 0x2376}, {&(0x7f0000001980)="2e76726267cc", 0x6, 0x9}], 0x1, &(0x7f0000001bc0)={[{@creator={'creator', 0x3d, "5e61bc45"}}, {@part={'part', 0x3d, 0x3}}, {@session={'session', 0x3d, 0x9}}, {@part={'part'}}, {@part={'part', 0x3d, 0x5}}], [{@smackfstransmute={'smackfstransmute', 0x3d, '/dev/cachefiles\x00'}}, {@uid_eq={'uid', 0x3d, r6}}]}) r7 = openat$vimc0(0xffffffffffffff9c, &(0x7f0000001c80)='/dev/video0\x00', 0x2, 0x0) ioctl$VIDIOC_S_CROP(r7, 0x4014563c, &(0x7f0000001cc0)={0x1, {0x100, 0x8, 0x3, 0xca18}}) r8 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000001d00)='/dev/adsp1\x00', 0x280082, 0x0) ioctl$SNDCTL_DSP_SUBDIVIDE(r8, 0xc0045009, &(0x7f0000001d40)) ioctl$LOOP_GET_STATUS64(0xffffffffffffffff, 0x4c05, &(0x7f0000001d80)) ioctl$FIGETBSZ(r8, 0x2, &(0x7f0000001e80)) r9 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000001ec0)='/dev/sequencer\x00', 0x580c0, 0x0) connect$caif(r9, &(0x7f0000001f00)=@rfm={0x25, 0x20000000, "9e494b99808dcb8530987886158b00af"}, 0x18) r10 = openat(0xffffffffffffffff, &(0x7f0000001f40)='./file1\x00', 0x10000, 0xd4) ioctl$DRM_IOCTL_FREE_BUFS(r10, 0x4010641a, &(0x7f0000001fc0)={0x7, &(0x7f0000001f80)=[0x101, 0x1, 0x5, 0x5, 0x1ff, 0x7, 0x1]}) r11 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000002000)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) setsockopt$inet6_icmp_ICMP_FILTER(r11, 0x1, 0x1, &(0x7f0000002040)={0x6}, 0x4) 23:17:11 executing program 1: r0 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000040)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffa) keyctl$restrict_keyring(0x1d, r0, &(0x7f0000000080)='id_legacy\x00', &(0x7f00000000c0)='$md5sum,%@\x00') r1 = syz_open_dev$video4linux(&(0x7f0000000100)='/dev/v4l-subdev#\x00', 0xffffffffffffff6c, 0x692c3) ioctl$VIDIOC_DECODER_CMD(r1, 0xc0485660, &(0x7f0000000140)={0x1, 0x1, @stop_pts=0x1}) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) getsockopt$IP_VS_SO_GET_SERVICE(r2, 0x0, 0x483, &(0x7f0000000200), &(0x7f0000000280)=0x68) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000300)='nl80211\x00') sendmsg$NL80211_CMD_GET_STATION(r2, &(0x7f0000000400)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x50, r3, 0x10, 0x70bd27, 0x25dfdbfe, {}, [@NL80211_ATTR_STA_TX_POWER={0x6}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x4}, @NL80211_ATTR_MAC={0xa, 0x6, @dev={[], 0x33}}, @NL80211_ATTR_STA_TX_POWER_SETTING={0x5, 0x113, 0x1}, @NL80211_ATTR_STA_LISTEN_INTERVAL={0x6}, @NL80211_ATTR_STA_TX_POWER_SETTING={0x5, 0x113, 0x2}, @NL80211_ATTR_VLAN_ID={0x6, 0x11a, 0x3}]}, 0x50}, 0x1, 0x0, 0x0, 0x59}, 0x20000001) getpeername(r2, &(0x7f0000000440)=@nl=@unspec, &(0x7f00000004c0)=0x80) write$P9_RSTAT(0xffffffffffffffff, &(0x7f0000000500)={0x55, 0x7d, 0x2, {0x0, 0x4e, 0x59, 0x1, {0x40, 0x4, 0x6}, 0x82000000, 0x7ff, 0x7, 0x0, 0x8, 'keyring\x00', 0x1, '@', 0x8, 'nl80211\x00', 0xa, 'self%[ppp1'}}, 0x55) ioctl$KDGKBSENT(r2, 0x4b48, &(0x7f0000000580)={0x9, "01cf479ee8329dc17558a09aed53f46a8d34f3fe943b32bce305e85062aac22e0196d9ea78297f919ec9f884a41447bd8789946efbae9db9dff1424de4e872479a51949fe31b71b628384bd8b5e8867dacf7e0637c2b28e9683fbe37f163c915b7eccd768cef6eefb5d88da245f39730f9e366f4cfbe9db2afd00c37e1513c183cd347c5ac09861a7b7f830d3dcf5aad3475798134c4f26299f3e1dbd9a194a9f9c406ff083ecba1b73c45c131b7af5f290bf05e2cd4d233e4a209f98b52c538b8f9d5f21e56ae766f1f357117dc020833012260bd502ff389fb4e8d39ef37e2aa282acc34083e95870417c12666f7d7728cd5dd639b0f51578bcefde2f318a7c52cfcd82b75c53d6e68467c7fbb1ff2a7a8173f3bdfa0e6374f4817c85deb5088858c9f97d025cf405c388de7c93efa0c4d9a69e84b9745dd9dc577bf29e799cf71525f4ae75dcb6f76383090df0a9bfe56cd236ff7873f08c04079e527d36ff556dea7240f69333c4ac9e5f135af8619ccce8372568191fbb6d3ed45ff9653519b4d831da04a95c1431bfea17a6e0ebfeb6c16fa6cc30b78512c06b0bddb2d18f5c80a3b9d2951030374a635f394eb7ba57792a13ae2226a30e7770361b37d8df73eaf281618b8262e57ca716bfa25e2336d0f7ec6a0f1cbb22b9bc6bcfc308b410ae036f1d3e350b074ae636d915d7d2ab19b24deae298e7994cfe3bb777f"}) ioctl$RTC_WIE_ON(r2, 0x700f) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000001a40)='/dev/full\x00', 0x40000, 0x0) sendmsg$NL80211_CMD_GET_MPATH(r4, &(0x7f0000001b40)={&(0x7f0000001a80)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000001b00)={&(0x7f0000001ac0)={0x2c, r3, 0x1, 0x70bd25, 0x25dfdbfe, {}, [@NL80211_ATTR_WDEV={0xc, 0x99, {0x0, 0xffffffffffffffff}}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}]}, 0x2c}, 0x1, 0x0, 0x0, 0x41}, 0x11) close(r4) r5 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000001b80)='/proc/capi/capi20ncci\x00', 0x40, 0x0) ioctl$SNDRV_CTL_IOCTL_TLV_READ(r5, 0xc008551a, &(0x7f0000001bc0)={0x5, 0x1c, [0x6, 0x0, 0xc00000, 0x5, 0xa7, 0xffffff93, 0x8000]}) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000001d00)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000001cc0)={0xffffffffffffffff}, 0x106, 0x9}}, 0x20) write$RDMA_USER_CM_CMD_INIT_QP_ATTR(0xffffffffffffffff, &(0x7f0000001d40)={0xb, 0x10, 0xfa00, {&(0x7f0000001c00), r6, 0x800}}, 0x18) pwrite64(r2, &(0x7f0000001d80)="178b22832abadaf07f6566d43bc586931aa18bd744903cfdbafe16f4996d35b0b12b833c251620fb05ab0c649e44f36bb9e8f002c7b7b5fbb42a299c07dfcc7d283c26bf01afdbe6d5cd358efab1c2a648a17abbbff494d871773bcdc2a6a61e4640915bedadf7e4a7f8854f5ada272ba8bab381853095f6f3f04ce0c0238bb82a1be53088eb4308270ba871b182f5ceae70feb85da0924437c6be206bfaa1ea258c8f2f4554308f86caa1bf3522e0f1afc05f2c77fa47b9ab2aac843d0f0ac2a530dd03a07d549f97c3dc5aa72c9bb9842219a6cc8e5b03a1244ecee5182d02ede248ae7708afb85b8a0ba53108b38bbb43226541f486db", 0xf8, 0x0) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r5, 0x84, 0x20, &(0x7f0000001e80)=0x7, 0x4) r7 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000001ec0)='/proc/capi/capi20\x00', 0x622100, 0x0) ioctl$VHOST_SET_VRING_ENDIAN(r7, 0x4008af13, &(0x7f0000001f00)={0x1, 0x6}) r8 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000001f40)='/dev/sequencer\x00', 0x200002, 0x0) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r8, &(0x7f0000002000)={&(0x7f0000001f80)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000001fc0)={0xfffffffffffffffe}, 0x1, 0x0, 0x0, 0x5}, 0x8001) setsockopt$RXRPC_SECURITY_KEYRING(r8, 0x110, 0x2, &(0x7f0000002040)='&user,ppp1*selfselinux\x00', 0x17) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000002080)='NLBL_CIPSOv4\x00') r9 = openat$procfs(0xffffffffffffff9c, &(0x7f00000020c0)='/proc/asound/seq/clients\x00', 0x0, 0x0) ioctl$sock_inet_udp_SIOCINQ(r9, 0x541b, &(0x7f0000002100)) timer_create(0x0, &(0x7f0000002300)={0x0, 0x37, 0x4, @thr={&(0x7f0000002140)="baac90a8fb2a41d8f2fd190653e2cd0700b543d307b20ae99d224919327683d41febcfe8788737e0fe6aa116d0ed79814423fc188946e8a5ea21cac952f7a9c309e2e18f9da6191c75941b97adb57360a8c7551e967f43a660ce737b80b3456162600c1aaab1e2c04a30bbdb4c9e98db1d550de1697cb7d8b8e7719b83d8f532701c3f1393a7dbb75c67d0bf570a64a8bedc5d1f1ea06b856b204249ec398827fcf5b53767eb9b6264e8fd29909234160def7638828fe47286dab108cb", &(0x7f0000002200)="37ac6350af8ae65dd1432aeb989f463541dfde3ac4f6592f45c40b8be8649c4ca5614dde70d18a839258dd7e5110de1601566f2c3fe58f073cc53750108445ff322930044d29798fe15ce0df8ebeaa4864b231df03d6526d81adb09b8c8477c4faf00224932b3dc313b8087aa11eba8cfb2a94409afb7c068e6f685973717fbdb80ae11c8384e7d2cb77b0f90ea628394ad384a0c4bf860acb36f3480ea7fc2d0cd274da5ca689064c91ac771bfd07e5f9263d67c1d74c9b456c4a61a7dbfa9b7c42a3dcc682a9bac69b2f20138c88ae8dfb28e4459b5a6773a08935004b9040b91949fa758e"}}, &(0x7f0000002340)=0x0) timer_gettime(r10, &(0x7f0000002380)) syzkaller login: [ 257.063090][ T9521] IPVS: ftp: loaded support on port[0] = 21 [ 257.221248][ T9521] chnl_net:caif_netlink_parms(): no params data found 23:17:12 executing program 2: r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcs\x00', 0xa000, 0x0) stat(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$SIOCAX25DELUID(r0, 0x89e2, &(0x7f0000000100)={0x3, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, r1}) fcntl$setstatus(r0, 0x4, 0x24800) r2 = syz_open_dev$mice(&(0x7f0000000140)='/dev/input/mice\x00', 0x0, 0x101) write$FUSE_DIRENT(r2, &(0x7f0000000180)={0x128, 0x0, 0x2, [{0x5, 0x3ff, 0x9, 0x7, '/dev/vcs\x00'}, {0x4, 0x9, 0x9, 0x8, '/dev/vcs\x00'}, {0x5, 0xfffffffffffffffd, 0x1e, 0xd5f, 'user^selfkeyring-mime_typeeth1'}, {0x4, 0x3, 0x8, 0x5, 'usereth0'}, {0x3, 0xffff, 0x7, 0x5, '-!bdev\''}, {0x1, 0x0, 0x9, 0x3f, '/dev/vcs\x00'}, {0x1, 0x800, 0x9, 0x9e8, '/dev/vcs\x00'}]}, 0x128) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f00000002c0)={0xffffffffffffffff}) getsockopt$inet_sctp6_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000000300)={0x0, 0x401, 0x8, 0x3ff}, &(0x7f0000000340)=0x10) setsockopt$inet_sctp6_SCTP_AUTH_DEACTIVATE_KEY(r3, 0x84, 0x23, &(0x7f0000000380)={r4, 0x4}, 0x8) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/loop-control\x00', 0x40002, 0x0) ioctl$VIDIOC_QBUF(r2, 0xc058560f, &(0x7f0000000400)={0x6, 0x4, 0x4, 0x80000, 0x4, {0x0, 0x2710}, {0x4, 0x0, 0x6a, 0x3, 0x3, 0x1, "db8c753f"}, 0x1, 0x1, @userptr=0x1, 0x200, 0x0, 0xffffffffffffffff}) getsockopt$bt_sco_SCO_OPTIONS(r5, 0x11, 0x1, &(0x7f0000000480), &(0x7f00000004c0)) sendmsg$L2TP_CMD_NOOP(r5, &(0x7f00000005c0)={&(0x7f0000000500), 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x30, 0x0, 0x1, 0x70bd2d, 0x25dfdbfd, {}, [@L2TP_ATTR_IFNAME={0x14, 0x8, 'netdevsim0\x00'}, @L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x1}]}, 0x30}, 0x1, 0x0, 0x0, 0x4048800}, 0x40) r6 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000600)='/dev/sequencer\x00', 0x202000, 0x0) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, &(0x7f0000000640)={0x0, @in={{0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x19}}}, 0x5, 0x100}, &(0x7f0000000700)=0x90) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r6, 0x84, 0x7c, &(0x7f0000000740)={r7, 0x1, 0x5}, &(0x7f0000000780)=0x8) r8 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000007c0)='/dev/snapshot\x00', 0x949640, 0x0) r9 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000840)='IPVS\x00') sendmsg$IPVS_CMD_SET_SERVICE(r8, &(0x7f0000000a00)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x40008000}, 0xc, &(0x7f00000009c0)={&(0x7f0000000880)={0x120, r9, 0x800, 0x70bd27, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_DAEMON={0x6c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x8}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e23}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @broadcast}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e22}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x1}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'netpci0\x00'}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'veth1_to_hsr\x00'}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x4}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e20}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x3}, @IPVS_CMD_ATTR_DEST={0x3c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x6}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x2}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x7}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e24}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0xffff}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x4}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e22}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x5}, @IPVS_CMD_ATTR_DAEMON={0x28, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'gretap0\x00'}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e22}]}, @IPVS_CMD_ATTR_SERVICE={0x2c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x2}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e23}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x8}, @IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'dh\x00'}]}]}, 0x120}, 0x1, 0x0, 0x0, 0x4040010}, 0x800) r10 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000a40)='/dev/sequencer\x00', 0x4c0040, 0x0) ioctl$TIOCL_UNBLANKSCREEN(r10, 0x541c, &(0x7f0000000a80)) ioctl$KDSIGACCEPT(r5, 0x4b4e, 0x28) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f0000000ac0)={0x0, 0x80000, 0xffffffffffffffff}) ioctl$DRM_IOCTL_CONTROL(r11, 0x40086414, &(0x7f0000000b00)={0x1}) r12 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000b40)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_G_CTRL(r12, 0xc008561b, &(0x7f0000000b80)={0x10000, 0x3f}) r13 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000bc0)='/dev/vcsu\x00', 0x200280, 0x0) ioctl$KVM_SET_CPUID(r13, 0x4008ae8a, &(0x7f0000000c00)={0x9, 0x0, [{0x40000000, 0x5, 0x3f, 0x1000, 0x5}, {0x4, 0x4, 0x400, 0x4, 0xfff}, {0xb, 0x6, 0x1000, 0x4, 0x4}, {0x80000008, 0x100, 0x8fd4, 0x1, 0x400}, {0xd, 0x8001, 0xfff, 0x8, 0x77}, {0xc0000001, 0x373, 0x3, 0x40, 0x784}, {0xc0000000, 0xb2, 0x4a2e, 0x80, 0x7}, {0x0, 0x40, 0x4, 0x7, 0x1}, {0x7, 0x5, 0x3, 0x1, 0xffff}]}) pipe2(&(0x7f0000000d00)={0xffffffffffffffff}, 0x80800) ioctl$HCIINQUIRY(r14, 0x800448f0, &(0x7f0000000d40)={0x1, 0x1, "deadd3", 0x80, 0x92}) [ 257.274897][ T9524] IPVS: ftp: loaded support on port[0] = 21 [ 257.406616][ T9521] bridge0: port 1(bridge_slave_0) entered blocking state [ 257.414438][ T9521] bridge0: port 1(bridge_slave_0) entered disabled state [ 257.436790][ T9521] device bridge_slave_0 entered promiscuous mode [ 257.468019][ T9529] IPVS: ftp: loaded support on port[0] = 21 [ 257.476158][ T9521] bridge0: port 2(bridge_slave_1) entered blocking state [ 257.483506][ T9521] bridge0: port 2(bridge_slave_1) entered disabled state [ 257.493370][ T9521] device bridge_slave_1 entered promiscuous mode [ 257.569825][ T9521] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 257.609455][ T9521] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link 23:17:12 executing program 3: fsconfig$FSCONFIG_SET_FLAG(0xffffffffffffffff, 0x0, &(0x7f0000000000)='posixacl\x00', 0x0, 0x0) openat$apparmor_task_exec(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/attr/exec\x00', 0x2, 0x0) ioctl$VIDIOC_TRY_EXT_CTRLS(0xffffffffffffffff, 0xc0205649, &(0x7f00000000c0)={0xa10000, 0x401, 0x1, 0xffffffffffffffff, 0x0, &(0x7f0000000080)={0x9909ca, 0x1, [], @value=0x9}}) recvfrom$unix(r0, &(0x7f0000000100)=""/192, 0xc0, 0x10121, &(0x7f00000001c0)=@file={0x1, './file0\x00'}, 0x6e) mq_timedsend(r0, &(0x7f0000000240)="921429f4dd03bdef72134f961dc1d5ffff87e5e23840a5dff23f20151ca193bfd5938f8f55c6671f6faf68ea932d6b93687e593518a7835facea82bc5cc5d19817fccb565b3d4ea61fe026cfa050a59245d0a26e0dbc0d0d43a7dbbce21c19f60e560454a9c5b7fd6eda70f8362f27477e92df222a5cd89c085ca68ac19adf0b9e25f84d9d451ed8e50df703f10082cb32170e782e2f4c1782c8ad02d309d3697829ded9333ca4ebed882c46767bcd3b95208e7f172c35561e1357c3f5969c2061bf1d67d68470b688c443cd", 0xcc, 0x81, &(0x7f0000000340)={0x0, 0x1c9c380}) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000380)='/proc/bus/input/devices\x00', 0x0, 0x0) ioctl$BINDER_THREAD_EXIT(r1, 0x40046208, 0x0) ioctl$DRM_IOCTL_CONTROL(r1, 0x40086414, &(0x7f00000003c0)={0x0, 0xfff}) pread64(0xffffffffffffffff, &(0x7f0000000400)=""/130, 0x82, 0x6) fcntl$setpipe(r1, 0x407, 0x6) setxattr(&(0x7f00000004c0)='./file0\x00', &(0x7f0000000500)=@known='system.posix_acl_default\x00', &(0x7f0000000540)='\x00', 0x1, 0x2) r2 = open(&(0x7f0000000580)='./file0\x00', 0x2, 0x12) ioctl$TIOCGPTLCK(r2, 0x80045439, &(0x7f00000005c0)) syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$VIDIOC_PREPARE_BUF(0xffffffffffffffff, 0xc058565d, &(0x7f0000000600)={0x1, 0x8, 0x4, 0x0, 0xb2, {}, {0x5, 0x2, 0x5, 0x8, 0x8, 0x80, "7c71c9a0"}, 0x10000, 0x3, @fd=r1, 0x80000000, 0x0, 0xffffffffffffffff}) mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x1000001, 0x50, r3, 0x10000000) r4 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000680)='/dev/dlm-monitor\x00', 0x10da02, 0x0) ioctl$BLKBSZGET(r4, 0x80081270, &(0x7f00000006c0)) r5 = socket$l2tp(0x2, 0x2, 0x73) stat(&(0x7f0000000740)='./file0/file0\x00', &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000800)={{{@in=@loopback, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6}, 0x0, @in=@local}}, &(0x7f0000000900)=0xe8) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000940)={{{@in, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@initdev}, 0x0, @in=@loopback}}, &(0x7f0000000a40)=0xe8) getsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000a80)={{{@in=@loopback, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@loopback}, 0x0, @in=@multicast1}}, &(0x7f0000000b80)=0xe8) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000bc0)={{{@in6=@local, @in6=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@empty}, 0x0, @in=@local}}, &(0x7f0000000cc0)=0xe8) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000d00)={{{@in=@loopback, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@dev}, 0x0, @in=@multicast2}}, &(0x7f0000000e00)=0xe8) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000000e40)=0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000e80)={0x0, 0x0, 0x0}, &(0x7f0000000ec0)=0xc) fsetxattr$system_posix_acl(r5, &(0x7f0000000700)='system.posix_acl_access\x00', &(0x7f0000000f00)={{}, {0x1, 0x5}, [{0x2, 0x6, r6}, {0x2, 0x2, r7}, {0x2, 0x0, r8}, {0x2, 0x0, r9}, {0x2, 0x3, r10}, {0x2, 0x3, r11}, {0x2, 0x0, r12}, {0x2, 0x1, 0xee00}], {0x4, 0x5}, [{0x8, 0xd, r13}], {0x10, 0x4}}, 0x6c, 0x1) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(0xffffffffffffffff, 0x84, 0x7c, &(0x7f0000000f80)={0x0, 0x400, 0x3}, &(0x7f0000000fc0)=0x8) getsockopt$inet_sctp6_SCTP_RTOINFO(r1, 0x84, 0x0, &(0x7f0000001000)={r14, 0x7ff, 0x2, 0x6}, &(0x7f0000001040)=0x10) [ 257.628589][ T9524] chnl_net:caif_netlink_parms(): no params data found [ 257.695143][ T9521] team0: Port device team_slave_0 added [ 257.746584][ T9521] team0: Port device team_slave_1 added [ 257.798714][ T9521] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 257.817821][ T9521] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 257.872401][ T9521] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 257.910738][ T9534] IPVS: ftp: loaded support on port[0] = 21 23:17:12 executing program 4: r0 = add_key$user(&(0x7f0000000000)='user\x00', &(0x7f0000000040)={'syz', 0x0}, &(0x7f0000000080)="0f0a9bb3f6f6ac49277f2845aa64121876305c9763cd1bf1fcd64debee171ee19be84633f859bcac70803080f7ea6ec160806d6c7d5dc9a4c2d12d055a98e8c024bb0309ceff4a0fced5843dd5d5e773ffa026b4d248bb58635a0e348592d9a9685c04bcc5f25fa0625c39139b45a314306e8d78173e3dffc0ec3579d6ad3aa7f49734b24328fe75067142b012b7683f07096fb2916e6fcf6149dea9ba18cb66381d417109ae81918bca015c7c9212bca5ca91f5ec92a386030022e80298d7cee4843013b4e74bce9ce182ef6c2da8e485f74076", 0xd4, 0xfffffffffffffffd) r1 = add_key$user(&(0x7f0000000180)='user\x00', &(0x7f00000001c0)={'syz', 0x0}, &(0x7f0000000200)="6c4349a05e1c6059741589634dc6a33a3597f3bd8990344610da0c1ca481ea11ed78d9340b5fae17a3893bbf32bb6794a46a1a0ea30f70346636477a6f372026e1a89ad3ef0fd468860d2fa90d8f8e283f0051f95a18f9cf3986b5bbdecb6b", 0x5f, 0xfffffffffffffffe) keyctl$dh_compute(0x17, &(0x7f0000000280)={r0, r1}, &(0x7f00000002c0)=""/219, 0xdb, &(0x7f0000000440)={&(0x7f00000003c0)={'sha3-256\x00'}, &(0x7f0000000400)='i', 0x1}) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000480)={0x0, 0x0}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f00000004c0)={0x0, 0x0}) r4 = syz_open_dev$ndb(&(0x7f0000000540)='/dev/nbd#\x00', 0x0, 0x8a800) r5 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000580)='/dev/sequencer\x00', 0x4840, 0x0) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f00000005c0)={0x80000001, 0x2d, 0x1, 0xffffffffffffffff}) kcmp$KCMP_EPOLL_TFD(r2, r3, 0x7, r4, &(0x7f0000000600)={r5, r6, 0x2}) r7 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000680)={&(0x7f0000000640)='./file0\x00', 0x0, 0x8}, 0x10) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000800)={r7, &(0x7f00000006c0)="be88ac9ff4269c0f84bb96bf8c3f008c02fbe45b7a0ae11ab1162ec98b5106c43dfca67aa3dfec10f9d8b7e58d67ebbc54a14b1715d2b33e5fb0bbeede13c23b68edd11f165c33b55ebfba31999313543012b9fd8818770f5d876a358371174f65727744e1f20eb5a8d6b1a331d569a8eb6cd353a97303d329e9d4cffdb84ca04eebed4a7e42ca93f0b76025d4cd223c09660ed3d1950877d6bffdde3b96b9143fd05b9a314a64b9504fb26ea7fdab9ff4dd8c1e0af381092d06f0f3a08cec55aa6f4c77ceaa4fa2", &(0x7f00000007c0)=""/42, 0x4}, 0x20) r8 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000840)='/proc/self/net/pfkey\x00', 0x202000, 0x0) ioctl$VIDIOC_G_PARM(r8, 0xc0cc5615, &(0x7f0000000880)={0x6, @capture={0x0, 0x1, {0x5, 0x65}, 0x0, 0x4}}) r9 = creat(&(0x7f0000000980)='./file0/file0\x00', 0x10) write$apparmor_current(r9, &(0x7f00000009c0)=@hat={'permhat ', 0x2, 0x5e, ['/dev/nbd#\x00']}, 0x25) perf_event_open(&(0x7f0000000a40)={0x5, 0x70, 0x5, 0x1, 0x9, 0x3, 0x0, 0x6, 0xc0040, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x2, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0xff, 0x0, @perf_bp={&(0x7f0000000a00), 0x1a}, 0x20, 0x4, 0x3, 0x6, 0x10001, 0x9f}, r3, 0x10, 0xffffffffffffffff, 0x1) r10 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000ac0)='/dev/udmabuf\x00', 0x2) ioctl$FS_IOC_SETVERSION(r10, 0x40087602, &(0x7f0000000b00)=0x1ff) r11 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000b40)='/dev/sequencer\x00', 0x10800, 0x0) ioctl$PPPIOCNEWUNIT(r11, 0xc004743e, &(0x7f0000000b80)=0x2) clock_gettime(0x0, &(0x7f0000000bc0)={0x0, 0x0}) ioctl$VIDIOC_PREPARE_BUF(r8, 0xc058565d, &(0x7f0000000c00)={0x100, 0x7, 0x4, 0x4a495c6256172466, 0x7f, {r12, r13/1000+10000}, {0x3, 0x1, 0x1, 0x3, 0x6, 0x0, "a05681ec"}, 0xeb5, 0x1, @offset=0x672, 0xffffffff, 0x0, 0xffffffffffffffff}) write$P9_RREAD(r14, &(0x7f0000000c80)={0x100b, 0x75, 0x2, {0x1000, "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"}}, 0x100b) r15 = openat$bsg(0xffffffffffffff9c, &(0x7f0000001cc0)='/dev/bsg\x00', 0x101040, 0x0) read$alg(r15, &(0x7f0000001d00)=""/4096, 0x1000) getsockopt$sock_cred(r14, 0x1, 0x11, &(0x7f0000002d00)={0x0}, &(0x7f0000002d40)=0xc) ptrace$setsig(0x4203, r16, 0x401, &(0x7f0000002d80)={0x15, 0x7, 0x8}) r17 = openat$vsock(0xffffffffffffff9c, &(0x7f0000002e00)='/dev/vsock\x00', 0x20400, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r11, 0x84, 0x66, &(0x7f0000002e40)={0x0, 0x6}, &(0x7f0000002e80)=0x8) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r17, 0x84, 0x7b, &(0x7f0000002ec0)={r18, 0x2}, 0x8) [ 257.938303][ T9521] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 257.945287][ T9521] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 257.973337][ T9521] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 258.089813][ T9521] device hsr_slave_0 entered promiscuous mode [ 258.146332][ T9521] device hsr_slave_1 entered promiscuous mode [ 258.188872][ T9524] bridge0: port 1(bridge_slave_0) entered blocking state [ 258.205722][ T9524] bridge0: port 1(bridge_slave_0) entered disabled state [ 258.214794][ T9524] device bridge_slave_0 entered promiscuous mode [ 258.229356][ T9524] bridge0: port 2(bridge_slave_1) entered blocking state [ 258.239206][ T9524] bridge0: port 2(bridge_slave_1) entered disabled state [ 258.247802][ T9524] device bridge_slave_1 entered promiscuous mode [ 258.269917][ T9529] chnl_net:caif_netlink_parms(): no params data found 23:17:13 executing program 5: bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000200)={0xffffffffffffffff, 0xc0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=0x5, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x8, 0x3}, 0x0, 0x0, &(0x7f0000000080)={0x3, 0xd, 0x4, 0x5}, &(0x7f00000000c0)=0x7, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=0x1f}}, 0x10) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000240)=r0, 0x4) r1 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000280)='/proc/capi/capi20\x00', 0x240200, 0x0) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x6, &(0x7f00000002c0)={0x0, @in={{0x2, 0x4e23, @remote}}}, &(0x7f0000000380)=0x84) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r1, 0x84, 0x10, &(0x7f00000003c0)=@assoc_value={r2, 0x683e}, &(0x7f0000000400)=0x8) setxattr$trusted_overlay_nlink(&(0x7f0000000440)='./file0\x00', &(0x7f0000000480)='trusted.overlay.nlink\x00', &(0x7f00000004c0)={'U+', 0x3}, 0x16, 0x3) r3 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000540)='SEG6\x00') sendmsg$SEG6_CMD_SETHMAC(r1, &(0x7f0000000600)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x30, r3, 0x400, 0x70bd27, 0x25dfdbfc, {}, [@SEG6_ATTR_ALGID={0x5, 0x6, 0x4}, @SEG6_ATTR_DST={0x14, 0x1, @dev={0xfe, 0x80, [], 0xe}}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000000}, 0x40001) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000680)='TIPCv2\x00') sendmsg$TIPC_NL_NET_GET(r1, &(0x7f0000000780)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000740)={&(0x7f00000006c0)={0x50, r4, 0x800, 0x70bd26, 0x25dfdbfb, {}, [@TIPC_NLA_BEARER={0x3c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e21, 0x8100, @remote, 0x1}}, {0x14, 0x2, @in={0x2, 0x4e22, @broadcast}}}}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) fsopen(&(0x7f00000007c0)='binfmt_misc\x00', 0x0) r5 = dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r5, 0xc01864c6, &(0x7f0000000840)={&(0x7f0000000800)=[0x1, 0x7fffffff, 0x629389a, 0x4, 0xda, 0x0], 0x6, 0x800}) openat$pidfd(0xffffffffffffff9c, &(0x7f0000000880)='/proc/self\x00', 0x181000, 0x0) io_setup(0xdc5b, &(0x7f00000008c0)=0x0) clock_gettime(0x0, &(0x7f00000009c0)={0x0, 0x0}) io_pgetevents(r6, 0x4, 0x5, &(0x7f0000000900)=[{}, {}, {}, {}, {}], &(0x7f0000000a00)={r7, r8+10000000}, &(0x7f0000000a80)={&(0x7f0000000a40)={[0x8000]}, 0x8}) r9 = socket$netlink(0x10, 0x3, 0x8) getpeername$netlink(r9, &(0x7f0000000ac0), &(0x7f0000000b00)=0xc) ioctl$VIDIOC_G_EXT_CTRLS(0xffffffffffffffff, 0xc0205647, &(0x7f0000000bc0)={0x9d0000, 0x1, 0xffff, r9, 0x0, &(0x7f0000000b80)={0x99096b, 0x100, [], @p_u16=&(0x7f0000000b40)=0x1000}}) ioctl$TCXONC(r10, 0x540a, 0x3) r11 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000c00)='/proc/sys/net/ipv4/vs/sync_refresh_period\x00', 0x2, 0x0) bind$netlink(r11, &(0x7f0000000c40)={0x10, 0x0, 0x25dfdbfe, 0x100}, 0xc) r12 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000c80)='io.stat\x00', 0x0, 0x0) getsockopt$bt_sco_SCO_CONNINFO(r12, 0x11, 0x2, &(0x7f0000000cc0)=""/4096, &(0x7f0000001cc0)=0x1000) r13 = open(&(0x7f0000001d00)='./file0\x00', 0x140, 0xb) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000001d40)={0x0, @in={{0x2, 0x4e23, @remote}}, 0x7, 0x80, 0x725d, 0x6, 0x20, 0x5, 0x5b}, &(0x7f0000001e00)=0x9c) setsockopt$inet_sctp6_SCTP_MAXSEG(r13, 0x84, 0xd, &(0x7f0000001e40)=@assoc_id=r14, 0x4) r15 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000001e80)='/dev/cachefiles\x00', 0x680000, 0x0) r16 = syz_genetlink_get_family_id$batadv(&(0x7f0000001f00)='batadv\x00') sendmsg$BATADV_CMD_SET_VLAN(r15, &(0x7f0000002000)={&(0x7f0000001ec0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000001fc0)={&(0x7f0000001f40)={0x54, r16, 0x300, 0x70bd2b, 0x25dfdbfd, {}, [@BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0xd440}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x10001}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x6}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x8}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x4}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x3}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x6}]}, 0x54}, 0x1, 0x0, 0x0, 0x800}, 0x80) [ 258.335418][ T9538] IPVS: ftp: loaded support on port[0] = 21 [ 258.355068][ T9524] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 258.413160][ T9524] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 258.477152][ T9524] team0: Port device team_slave_0 added [ 258.521331][ T9524] team0: Port device team_slave_1 added [ 258.592222][ T9529] bridge0: port 1(bridge_slave_0) entered blocking state [ 258.599419][ T9529] bridge0: port 1(bridge_slave_0) entered disabled state [ 258.607264][ T9529] device bridge_slave_0 entered promiscuous mode [ 258.638515][ T9534] chnl_net:caif_netlink_parms(): no params data found [ 258.650144][ T9529] bridge0: port 2(bridge_slave_1) entered blocking state [ 258.658272][ T9529] bridge0: port 2(bridge_slave_1) entered disabled state [ 258.666328][ T9529] device bridge_slave_1 entered promiscuous mode [ 258.692118][ T9524] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 258.693521][ T9543] IPVS: ftp: loaded support on port[0] = 21 [ 258.710335][ T9524] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 258.737144][ T9524] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 258.762633][ T9529] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 258.779209][ T9524] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 258.788136][ T9524] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 258.814799][ T9524] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 258.834272][ T9529] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 258.947544][ T9524] device hsr_slave_0 entered promiscuous mode [ 258.995944][ T9524] device hsr_slave_1 entered promiscuous mode [ 259.035718][ T9524] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 259.043605][ T9524] Cannot create hsr debugfs directory [ 259.072829][ T9529] team0: Port device team_slave_0 added [ 259.100192][ T9529] team0: Port device team_slave_1 added [ 259.159618][ T9529] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 259.166853][ T9529] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 259.193616][ T9529] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 259.205179][ T9521] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 259.295014][ T9521] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 259.373725][ T9529] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 259.384998][ T9529] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 259.413896][ T9529] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 259.437790][ T9521] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 259.494008][ T9521] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 259.553534][ T9534] bridge0: port 1(bridge_slave_0) entered blocking state [ 259.562970][ T9534] bridge0: port 1(bridge_slave_0) entered disabled state [ 259.570820][ T9534] device bridge_slave_0 entered promiscuous mode [ 259.592223][ T9538] chnl_net:caif_netlink_parms(): no params data found [ 259.614976][ T9534] bridge0: port 2(bridge_slave_1) entered blocking state [ 259.623584][ T9534] bridge0: port 2(bridge_slave_1) entered disabled state [ 259.631616][ T9534] device bridge_slave_1 entered promiscuous mode [ 259.728621][ T9529] device hsr_slave_0 entered promiscuous mode [ 259.775950][ T9529] device hsr_slave_1 entered promiscuous mode [ 259.815690][ T9529] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 259.823281][ T9529] Cannot create hsr debugfs directory [ 259.848498][ T9534] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 259.885378][ T9534] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 259.953546][ T9534] team0: Port device team_slave_0 added [ 259.989689][ T9534] team0: Port device team_slave_1 added [ 259.995694][ T9524] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 260.033057][ T9524] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 260.080447][ T9524] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 260.169472][ T9524] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 260.243250][ T9538] bridge0: port 1(bridge_slave_0) entered blocking state [ 260.253714][ T9538] bridge0: port 1(bridge_slave_0) entered disabled state [ 260.262249][ T9538] device bridge_slave_0 entered promiscuous mode [ 260.277459][ T9543] chnl_net:caif_netlink_parms(): no params data found [ 260.300572][ T9534] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 260.307667][ T9534] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 260.333806][ T9534] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 260.345382][ T9538] bridge0: port 2(bridge_slave_1) entered blocking state [ 260.353417][ T9538] bridge0: port 2(bridge_slave_1) entered disabled state [ 260.361829][ T9538] device bridge_slave_1 entered promiscuous mode [ 260.388098][ T9538] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 260.397773][ T9534] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 260.404745][ T9534] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 260.431870][ T9534] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 260.458882][ T9538] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 260.521735][ T9538] team0: Port device team_slave_0 added [ 260.530022][ T9538] team0: Port device team_slave_1 added [ 260.597524][ T9534] device hsr_slave_0 entered promiscuous mode [ 260.646044][ T9534] device hsr_slave_1 entered promiscuous mode [ 260.705679][ T9534] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 260.713596][ T9534] Cannot create hsr debugfs directory [ 260.750962][ T9529] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 260.803356][ T9529] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 260.882635][ T9543] bridge0: port 1(bridge_slave_0) entered blocking state [ 260.890896][ T9543] bridge0: port 1(bridge_slave_0) entered disabled state [ 260.899713][ T9543] device bridge_slave_0 entered promiscuous mode [ 260.912670][ T9529] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 260.968125][ T9538] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 260.975110][ T9538] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 261.001899][ T9538] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 261.014915][ T9538] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 261.022042][ T9538] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 261.048153][ T9538] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 261.069498][ T9521] 8021q: adding VLAN 0 to HW filter on device bond0 [ 261.076517][ T9543] bridge0: port 2(bridge_slave_1) entered blocking state [ 261.083590][ T9543] bridge0: port 2(bridge_slave_1) entered disabled state [ 261.091998][ T9543] device bridge_slave_1 entered promiscuous mode [ 261.099127][ T9529] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 261.219577][ T9543] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 261.278761][ T9538] device hsr_slave_0 entered promiscuous mode [ 261.316225][ T9538] device hsr_slave_1 entered promiscuous mode [ 261.355884][ T9538] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 261.363470][ T9538] Cannot create hsr debugfs directory [ 261.387780][ T9543] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 261.423748][ T2770] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 261.432399][ T2770] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 261.464265][ T9521] 8021q: adding VLAN 0 to HW filter on device team0 [ 261.475467][ T9543] team0: Port device team_slave_0 added [ 261.507173][ T9543] team0: Port device team_slave_1 added [ 261.528528][ T9524] 8021q: adding VLAN 0 to HW filter on device bond0 [ 261.547795][ T2857] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 261.562651][ T2857] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 261.571679][ T2857] bridge0: port 1(bridge_slave_0) entered blocking state [ 261.578872][ T2857] bridge0: port 1(bridge_slave_0) entered forwarding state [ 261.590917][ T2857] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 261.640287][ T2857] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 261.652747][ T2857] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 261.661980][ T2857] bridge0: port 2(bridge_slave_1) entered blocking state [ 261.669146][ T2857] bridge0: port 2(bridge_slave_1) entered forwarding state [ 261.683266][ T9524] 8021q: adding VLAN 0 to HW filter on device team0 [ 261.695855][ T9543] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 261.702935][ T9543] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 261.731087][ T9543] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 261.754746][ T3135] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 261.770761][ T3135] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 261.778794][ T3135] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 261.800912][ T9543] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 261.811037][ T9543] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 261.837955][ T9543] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 261.852163][ T9534] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 261.917917][ T2867] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 261.926516][ T2867] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 261.934975][ T2867] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 261.943774][ T2867] bridge0: port 1(bridge_slave_0) entered blocking state [ 261.950928][ T2867] bridge0: port 1(bridge_slave_0) entered forwarding state [ 261.959773][ T2867] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 261.968497][ T2867] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 261.977725][ T2867] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 261.985764][ T2867] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 262.022348][ T9534] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 262.058250][ T3135] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 262.066954][ T3135] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 262.075868][ T3135] bridge0: port 2(bridge_slave_1) entered blocking state [ 262.082933][ T3135] bridge0: port 2(bridge_slave_1) entered forwarding state [ 262.090759][ T3135] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 262.099845][ T3135] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 262.108502][ T3135] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 262.125973][ T2867] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 262.134440][ T2867] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 262.156218][ T3137] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 262.168804][ T9534] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 262.232638][ T9534] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 262.303564][ T9521] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 262.317974][ T9521] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 262.358457][ T9543] device hsr_slave_0 entered promiscuous mode [ 262.407759][ T9543] device hsr_slave_1 entered promiscuous mode [ 262.475660][ T9543] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 262.483239][ T9543] Cannot create hsr debugfs directory [ 262.518282][ T2867] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 262.526964][ T2867] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 262.535154][ T2867] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 262.544043][ T2867] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 262.553490][ T2867] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 262.593358][ T3137] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 262.603075][ T3137] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 262.612714][ T3137] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 262.621313][ T3137] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 262.672492][ T9524] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 262.683769][ T9524] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 262.694479][ T2857] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 262.703326][ T2857] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 262.754412][ T9529] 8021q: adding VLAN 0 to HW filter on device bond0 [ 262.762134][ T9538] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 262.796299][ T2770] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 262.803795][ T2770] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 262.834072][ T9538] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 262.879410][ T9538] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 262.937121][ T2857] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 262.944750][ T2857] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 262.956109][ T9521] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 262.971375][ T9538] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 263.058866][ T9524] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 263.067239][ T3135] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 263.075106][ T3135] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 263.087418][ T9529] 8021q: adding VLAN 0 to HW filter on device team0 [ 263.121807][ T9543] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 263.243101][ T9543] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 263.277155][ T3137] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 263.289894][ T3137] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 263.298354][ T3137] bridge0: port 1(bridge_slave_0) entered blocking state [ 263.305448][ T3137] bridge0: port 1(bridge_slave_0) entered forwarding state [ 263.313528][ T3137] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 263.322176][ T3137] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 263.330887][ T3137] bridge0: port 2(bridge_slave_1) entered blocking state [ 263.338167][ T3137] bridge0: port 2(bridge_slave_1) entered forwarding state [ 263.345920][ T3137] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 263.354493][ T3137] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 263.363908][ T3137] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 263.388470][ T9543] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 263.427882][ T9543] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 263.484170][ T3135] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 263.509383][ T9534] 8021q: adding VLAN 0 to HW filter on device bond0 [ 263.530272][ T9521] device veth0_vlan entered promiscuous mode [ 263.554612][ T2857] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 263.563816][ T2857] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 263.574385][ T2857] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 263.583542][ T2857] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 263.593585][ T2857] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 263.605101][ T2857] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 263.613620][ T2857] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 263.659553][ T2770] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 263.668158][ T2770] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 263.678070][ T2770] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 263.687030][ T2770] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 263.695433][ T2770] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 263.705076][ T2770] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 263.713562][ T2770] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 263.722107][ T2770] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 263.730372][ T2770] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 263.746750][ T9521] device veth1_vlan entered promiscuous mode [ 263.755729][ T9534] 8021q: adding VLAN 0 to HW filter on device team0 [ 263.778186][ T2770] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 263.786595][ T2770] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 263.794480][ T2770] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 263.802875][ T2770] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 263.811411][ T2770] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 263.820113][ T2770] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 263.846740][ T9524] device veth0_vlan entered promiscuous mode [ 263.860643][ T9529] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 263.875159][ T3135] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 263.884149][ T3135] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 263.893201][ T3135] bridge0: port 1(bridge_slave_0) entered blocking state [ 263.900326][ T3135] bridge0: port 1(bridge_slave_0) entered forwarding state [ 263.909337][ T3135] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 263.918013][ T3135] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 263.926589][ T3135] bridge0: port 2(bridge_slave_1) entered blocking state [ 263.933737][ T3135] bridge0: port 2(bridge_slave_1) entered forwarding state [ 263.952222][ T9538] 8021q: adding VLAN 0 to HW filter on device bond0 [ 263.970930][ T9524] device veth1_vlan entered promiscuous mode [ 263.986741][ T3136] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 263.995401][ T3136] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 264.017733][ T3136] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 264.027610][ T3136] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 264.066905][ T9521] device veth0_macvtap entered promiscuous mode [ 264.074475][ T3136] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 264.083401][ T3136] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 264.092113][ T3136] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 264.101201][ T3136] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 264.110418][ T3136] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 264.118550][ T3136] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 264.126297][ T3136] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 264.134820][ T3136] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 264.143662][ T3136] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 264.152552][ T3136] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 264.163392][ T3136] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 264.182258][ T9521] device veth1_macvtap entered promiscuous mode [ 264.199036][ T3135] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 264.210007][ T3135] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 264.218868][ T3135] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 264.227587][ T3135] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 264.236306][ T3135] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 264.250742][ T9534] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 264.262906][ T9534] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 264.276022][ T9538] 8021q: adding VLAN 0 to HW filter on device team0 [ 264.293638][ T9529] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 264.303082][ T2770] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 264.311965][ T2770] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 264.344491][ T9521] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 264.370209][ T2867] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 264.384203][ T2867] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 264.393777][ T2867] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 264.403967][ T2867] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 264.412975][ T2867] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 264.421389][ T2867] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 264.429418][ T2867] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 264.438851][ T2867] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 264.448199][ T2867] bridge0: port 1(bridge_slave_0) entered blocking state [ 264.455262][ T2867] bridge0: port 1(bridge_slave_0) entered forwarding state [ 264.463091][ T2867] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 264.473075][ T2867] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 264.481662][ T2867] bridge0: port 2(bridge_slave_1) entered blocking state [ 264.488768][ T2867] bridge0: port 2(bridge_slave_1) entered forwarding state [ 264.499651][ T2867] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 264.515352][ T9534] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 264.535789][ T9524] device veth0_macvtap entered promiscuous mode [ 264.550637][ T9521] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 264.572897][ T3135] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 264.582360][ T3135] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 264.592064][ T3135] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 264.602181][ T3135] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 264.612926][ T3135] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 264.648895][ T9524] device veth1_macvtap entered promiscuous mode [ 264.667964][ T3136] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 264.677573][ T3136] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 264.687163][ T3136] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 264.696525][ T3136] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 264.705074][ T3136] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 264.887269][ T3136] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 264.907088][ T3136] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 264.916464][ T3136] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 264.925265][ T3136] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 264.942435][ T9543] 8021q: adding VLAN 0 to HW filter on device bond0 [ 264.955758][ T3136] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 264.964073][ T3136] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 264.991023][ T9529] device veth0_vlan entered promiscuous mode [ 265.010187][ T9538] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 265.021647][ T9538] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 265.048889][ T9524] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 265.069215][ T9524] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 265.090178][ T9524] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 265.096775][ T9558] hfs: unable to parse mount options [ 265.103759][ T3136] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 265.112568][ T3136] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 265.120931][ T3136] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 265.140088][ T3136] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 265.149432][ T3136] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 265.158604][ T3136] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 265.168511][ T3136] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 265.181931][ T3136] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready 23:17:20 executing program 0: r0 = socket(0x10, 0x803, 0x0) r1 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) ioctl$sock_SIOCGIFVLAN_SET_VLAN_FLAG_CMD(r1, 0x8982, &(0x7f00000005c0)={0x7, 'lo\x00', {0x9}}) recvmmsg(0xffffffffffffffff, &(0x7f0000005540)=[{{0x0, 0x0, &(0x7f0000000480)=[{&(0x7f00000009c0)=""/144, 0x90}], 0x1}}, {{0x0, 0x0, &(0x7f0000000a80)=[{&(0x7f0000000c80)=""/235, 0xeb}], 0x1}}], 0x2, 0x0, 0x0) sendto(r0, &(0x7f0000cfefee)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) r2 = socket$inet6(0xa, 0x5, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000c80)=ANY=[@ANYBLOB="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"], 0x458) ioctl$sock_SIOCOUTQNSD(r2, 0x894b, &(0x7f0000000100)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = fcntl$dupfd(r3, 0x0, r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) sendmsg$tipc(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000280)=@name, 0x10, 0x0, 0x0, 0x0, 0x28}, 0x0) sendmsg$OSF_MSG_REMOVE(r5, &(0x7f0000000340)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x14, 0x1, 0x5, 0x3, 0x0, 0x0, {0x5, 0x0, 0x6}}, 0x14}, 0x1, 0x0, 0x0, 0x801}, 0x8004) recvmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000880)={&(0x7f0000000b80)=@ethernet={0x0, @local}, 0x80, 0x0}, 0x0) ioctl$sock_SIOCSIFVLAN_GET_VLAN_VID_CMD(0xffffffffffffffff, 0x8983, &(0x7f00000006c0)) sendmsg$TIPC_NL_MEDIA_SET(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f00000000c0), 0xc, 0x0}, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) sendmsg$TIPC_NL_NAME_TABLE_GET(0xffffffffffffffff, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x374, &(0x7f0000000380)=[{&(0x7f0000000040)=""/95, 0x14b}, {&(0x7f0000000140)=""/85, 0x20a}, {&(0x7f0000000fc0)=""/4096, 0xf2}, {&(0x7f0000000400)=""/106, 0x2ce}, {&(0x7f0000000740)=""/73, 0x3dd}, {&(0x7f0000000200)=""/77, 0x4d}, {&(0x7f00000007c0)=""/154, 0x40d}, {&(0x7f0000000000)=""/22, 0xa}], 0x81, &(0x7f0000000600)=""/191, 0x97}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400}) r6 = socket$inet6(0xa, 0x5, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r6, 0x29, 0x40, &(0x7f0000000c80)=@filter={'filter\x00', 0x50, 0x4, 0x3f8, 0x258, 0xd0, 0x258, 0x0, 0xd0, 0x328, 0x328, 0x328, 0x328, 0x328, 0x4, 0x0, {[{{@ipv6={@mcast1, @ipv4={[], [], @local}, [], [], 'bond_slave_0\x00', 'syzkaller1\x00'}, 0x0, 0xa8, 0xd0}, @REJECT={0x28, 'REJECT\x00'}}, {{@ipv6={@dev, @mcast1, [], [], 'dummy0\x00', 'veth0_to_bond\x00'}, 0x0, 0x160, 0x188, 0x0, {}, [@common=@srh1={{0x90, 'srh\x00'}, {0x0, 0x0, 0x0, 0x0, 0x0, @dev, @ipv4={[], [], @multicast1}, @dev, [], [], [], 0x0, 0x4000}}, @common=@ipv6header={{0x28, 'ipv6header\x00'}}]}, @REJECT={0x28, 'REJECT\x00'}}, {{@ipv6={@remote, @dev, [], [], 'bridge0\x00', 'ip_vti0\x00'}, 0x0, 0xa8, 0xd0}, @REJECT={0x28, 'REJECT\x00'}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x458) ioctl$sock_SIOCETHTOOL(r6, 0x8946, &(0x7f0000000580)={'ip6_vti0\x00', &(0x7f00000008c0)=@ethtool_rxnfc={0x2d, 0xd, 0x5da, {0xe, @esp_ip4_spec={@multicast1, @broadcast, 0x2, 0x9}, {0x0, @local, 0x7ff, 0x0, [0x8, 0x2]}, @hdata="c18691bb175a441a26a192e3d017a175463ca277fe3fc078c39a936e26cf67631510bb8eb2a69d06a9e1ecf3d682450447bc4bf5", {0x0, @dev={[], 0x18}, 0x9, 0x1, [0xd6, 0x5]}, 0x3, 0x3}, 0x7, [0x670f451f, 0x7ff, 0xfffffffe, 0x100, 0x2, 0x401, 0xffff8001]}}) [ 265.202848][ T9529] device veth1_vlan entered promiscuous mode [ 265.283835][ T9524] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 265.295101][ T9524] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 265.308970][ T9524] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 265.320040][ T3136] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 265.328369][ T3136] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 265.336242][ T3136] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 265.344497][ T3136] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 265.353090][ T3136] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 265.361827][ T3136] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 265.375421][ T9569] ip6t_srh: unknown srh invflags 4000 [ 265.385054][ T9538] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 265.394663][ T3136] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 265.402860][ T3136] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 265.412655][ T3136] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 265.422123][ T3136] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 265.447676][ T9534] device veth0_vlan entered promiscuous mode [ 265.463037][ T9543] 8021q: adding VLAN 0 to HW filter on device team0 [ 265.479289][ T3136] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 265.487522][ T3136] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 265.491672][ T9568] ip6t_srh: unknown srh invflags 4000 [ 265.495347][ T3136] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 265.543824][ T9534] device veth1_vlan entered promiscuous mode [ 265.554192][ T2867] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 265.565234][ T2867] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 265.577095][ T2867] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 265.585451][ T2867] bridge0: port 1(bridge_slave_0) entered blocking state [ 265.592684][ T2867] bridge0: port 1(bridge_slave_0) entered forwarding state [ 265.600598][ T2867] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 265.609380][ T2867] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 265.620521][ T2867] bridge0: port 2(bridge_slave_1) entered blocking state [ 265.627660][ T2867] bridge0: port 2(bridge_slave_1) entered forwarding state [ 265.635706][ T2867] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready 23:17:20 executing program 0: r0 = socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0xd, 0x4, &(0x7f0000346fc8)=@framed={{}, [@alu={0x8000000201a7f19, 0x0, 0x201a7fa6, 0x3, 0x1, 0x80}]}, &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000)={0x2, 0x0, 0x0, 0xfffffffc}, 0x10}, 0x78) [ 265.745756][ T2867] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 265.753737][ T2867] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 265.768450][ T2867] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready 23:17:20 executing program 0: r0 = socket$kcm(0x2b, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000040), 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) write$cgroup_pid(r1, &(0x7f0000000100), 0x12) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40305839, &(0x7f0000000040)) [ 265.887058][ T3135] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 265.902154][ T3135] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 265.911145][ T3135] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 265.920787][ T3135] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 265.946475][ T3135] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 265.955290][ T3135] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 265.970710][ T3135] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 265.980008][ T3135] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 266.002445][ T9529] device veth0_macvtap entered promiscuous mode 23:17:20 executing program 0: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = socket$inet6(0xa, 0x5, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000c80)=@filter={'filter\x00', 0x50, 0x4, 0x3f8, 0x258, 0xd0, 0x258, 0x0, 0xd0, 0x328, 0x328, 0x328, 0x328, 0x328, 0x4, 0x0, {[{{@ipv6={@mcast1, @ipv4={[], [], @local}, [], [], 'bond_slave_0\x00', 'syzkaller1\x00'}, 0x0, 0xa8, 0xd0}, @REJECT={0x28, 'REJECT\x00'}}, {{@ipv6={@dev, @mcast1, [], [], 'dummy0\x00', 'veth0_to_bond\x00'}, 0x0, 0x160, 0x188, 0x0, {}, [@common=@srh1={{0x90, 'srh\x00'}, {0x0, 0x0, 0x0, 0x0, 0x0, @dev, @ipv4={[], [], @multicast1}, @dev, [], [], [], 0x0, 0x4000}}, @common=@ipv6header={{0x28, 'ipv6header\x00'}}]}, @REJECT={0x28, 'REJECT\x00'}}, {{@ipv6={@remote, @dev, [], [], 'bridge0\x00', 'ip_vti0\x00'}, 0x0, 0xa8, 0xd0}, @REJECT={0x28, 'REJECT\x00'}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x458) getsockopt$inet_sctp6_SCTP_NODELAY(r1, 0x84, 0x3, &(0x7f0000000000), &(0x7f0000000080)=0x4) setsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(r0, 0x84, 0x7, &(0x7f0000000040)={0xff}, 0x4) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x3, 0x0, @loopback}, 0x1c) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup3(r3, r2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) sendto$inet6(r0, &(0x7f00000000c0)='X', 0x1, 0x0, &(0x7f0000000200)={0xa, 0x3, 0x0, @loopback}, 0x1c) [ 266.043581][ T3135] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 266.052604][ T3135] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 266.112226][ T9534] device veth0_macvtap entered promiscuous mode [ 266.158371][ T9590] ip6t_srh: unknown srh invflags 4000 [ 266.182063][ T3135] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 266.191706][ T3135] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready 23:17:21 executing program 1: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x9e, 0x10, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0xc4f, 0x0, 0x0, 0x0, 0x0, 0xfff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$xdp(0x2c, 0x3, 0x0) r1 = socket$rds(0x15, 0x5, 0x0) setsockopt$RDS_FREE_MR(r1, 0x114, 0x3, &(0x7f0000000040)={{0x3, 0x2}, 0x29}, 0x10) bind$rds(r1, &(0x7f0000000180)={0x2, 0x0, @loopback}, 0x10) ioctl$sock_SIOCGPGRP(r1, 0x8904, &(0x7f00000000c0)=0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_REPLACE(0xffffffffffffffff, 0xc1105518, &(0x7f0000000240)={{0x8, 0x0, 0x6, 0xfffffff3, 'syz0\x00', 0x1ff}, 0x5, 0x100, 0x80c, r2, 0x2, 0x6, 'syz1\x00', &(0x7f0000000140)=['\x00', '\x00'], 0x2, [], [0xfff, 0x7, 0x8001, 0x80]}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = fcntl$dupfd(r3, 0x0, r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) r6 = accept4$bt_l2cap(r5, &(0x7f0000000480), &(0x7f00000004c0)=0xe, 0x80000) accept(r6, &(0x7f0000000500)=@vsock, &(0x7f0000000580)=0x80) r7 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000380)='/dev/ptmx\x00', 0x110000, 0x0) ioctl$PIO_UNIMAPCLR(r7, 0x4b68, &(0x7f00000003c0)={0x1ff, 0x6e2, 0x4}) sendmsg$rds(r1, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x3, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="48000000000000001401000001000000000000000000000000000000000000002c00000000000000", @ANYPTR=&(0x7f00000001c0)=ANY=[@ANYPTR=&(0x7f0000000100)=ANY=[@ANYBLOB="00000000fdff000000000000000000000000000000000000000000a1545f01102900"/44], @ANYBLOB="000241e0ffffff00", @ANYRES32, @ANYPTR64=&(0x7f0000000040)=ANY=[], @ANYRES32=0x0, @ANYBLOB="2bab3ceb2adb1ee85f38bfb5d8779e6726669d39891e51c82e6c4c1574fa00f34c8e404eb5", @ANYPTR=&(0x7f0000000080)=ANY=[@ANYRES64, @ANYRESHEX=r0], @ANYRESDEC], @ANYBLOB="0100000000000000000000000000000000000000000000005159791835b981c8cca2a0a9ede57439a65be84c9b35c5afac9d032b67fa73d17c4f99645ae3f4e28d"], 0x48}, 0x0) [ 266.201809][ T3135] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 266.211512][ T3135] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 266.220695][ T3135] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 266.237878][ T3135] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 266.265392][ T3135] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 266.298020][ T9534] device veth1_macvtap entered promiscuous mode [ 266.331380][ T9592] ip6t_srh: unknown srh invflags 4000 [ 266.351073][ T9538] device veth0_vlan entered promiscuous mode [ 266.370505][ T3136] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready 23:17:21 executing program 1: r0 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$KDGKBMETA(r0, 0x4b62, &(0x7f0000000080)) ioctl$UI_SET_LEDBIT(r0, 0x40045569, 0x1) r1 = socket$inet_udp(0x2, 0x2, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = fcntl$dupfd(r2, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) connect$bt_sco(r4, &(0x7f0000000040)={0x1f, @fixed={[], 0x12}}, 0x8) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff}, 0x0) r6 = syz_open_dev$video(&(0x7f0000000000)='/dev/video#\x00', 0x8447, 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r7, &(0x7f00000003c0)=ANY=[@ANYBLOB="07000000c720736c96b0b6000065ffff86c1c1"], 0x7) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff}, 0x0) r9 = syz_open_dev$video(&(0x7f0000000000)='/dev/video#\x00', 0x8447, 0x0) mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='9p\x00', 0x0, &(0x7f0000000180)={'trans=fd,', {'rfdno', 0x3d, r8}, 0x2c, {'wfdno', 0x3d, r9}}) pipe2$9p(&(0x7f0000000240), 0x0) r10 = syz_open_dev$video(&(0x7f0000000000)='/dev/video#\x00', 0x8447, 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff}, 0x0) r12 = syz_open_dev$video(&(0x7f0000000000)='/dev/video#\x00', 0x8447, 0x0) mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='9p\x00', 0x0, &(0x7f0000000180)={'trans=fd,', {'rfdno', 0x3d, r11}, 0x2c, {'wfdno', 0x3d, r12}}) mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='9p\x00', 0x2c000, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r8}, 0x2c, {'wfdno', 0x3d, r11}}) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff}, 0x0) r14 = syz_open_dev$video(&(0x7f0000000000)='/dev/video#\x00', 0x8447, 0x0) mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='9p\x00', 0x0, &(0x7f0000000180)={'trans=fd,', {'rfdno', 0x3d, r13}, 0x2c, {'wfdno', 0x3d, r14}}) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff}, 0x0) syz_open_dev$video(&(0x7f0000000000)='/dev/video#\x00', 0x8447, 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r16, &(0x7f0000000680)=ANY=[@ANYBLOB="1500000065ffff"], 0x7) mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='9p\x00', 0x1000410, &(0x7f0000000300)=ANY=[@ANYBLOB="dfba00000000", @ANYRESHEX=r5, @ANYBLOB=',wfdno=', @ANYRES16=r7, @ANYPTR64=&(0x7f00000000c0)=ANY=[@ANYRES16=r8, @ANYPTR=&(0x7f00000001c0)=ANY=[@ANYBLOB="f133b997b895db4c17c9a318dbaf5c", @ANYPTR64, @ANYRES64, @ANYPTR, @ANYPTR, @ANYRESOCT=r10], @ANYPTR64=&(0x7f0000000280)=ANY=[@ANYRESHEX=r16, @ANYRES16=r6, @ANYRES64, @ANYRES16, @ANYRES32, @ANYRES64=0x0, @ANYRESDEC=r13, @ANYPTR64, @ANYRES32=0x0, @ANYBLOB="9051d4d49f08d3e8c40b996975ff"], @ANYRES64, @ANYRES32=r15]]) r17 = syz_open_dev$video(&(0x7f0000000000)='/dev/video#\x00', 0x8447, 0x0) mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='9p\x00', 0x0, &(0x7f0000000180)={'trans=fd,', {'rfdno'}, 0x2c, {'wfdno', 0x3d, r17}}) setsockopt$IPT_SO_SET_REPLACE(r1, 0xffffff0f00000000, 0x40, &(0x7f0000000000)=ANY=[@ANYPTR64=&(0x7f0000000440)=ANY=[@ANYPTR64=&(0x7f0000000380)=ANY=[@ANYPTR, @ANYRESOCT=r1, @ANYRES32, @ANYRES64], @ANYPTR64=&(0x7f0000000640)=ANY=[@ANYBLOB="aee55e66de96f3579bb4bcd6907515150f12bd824129c8e9912e2b0e130cb30d5d9ae3df1c96f0756780e24391abd814ba7d7c0c115e1a437c7e67c9f68bb589049df8c3c4d2b6eec8e9ce1f7e414b8a6ff4cf3a567ce21b7cc1efeffc4c0f47d0b08de676f02181256ab1129526efb0dbce60b5ce208b4b436b6fd4e5be047adbe603c7351eda6c2d205212d34c14965bd0423d7c28facbc40dbeaef00a176e13f8fe2b2dc6130876291dfe26d71e3e6a03dea88ddbf583fdcad32384afee491fb35afd5a8397415be3dc99178bb450925b77338326e4f06d2edef84bf4e0a9cf5decc9ac915d0900261f4a5018c3e8d0e202ada943671876cf8542b7ba2ec77683fe09f8e5c1d0bbcdb0fbfa57d8e872d7f5dbfd76e15ebe6f6d01dd513f6378c6a5b25336ebc827479ae10fc1fe199573510be227031f72abd6f3b669e41fc8e125a3450d17e9d3838556b4dd30be697e1e330d890cf90a7ff54e3a023e63a72582af154c27cc0119033c2307158cc17d8736981c8f1d60c56afbc189afc8ab016ba5f1ff170c9dd89995356770aee6fa852fa9d00c56bb09ebe8f66088f4ab00062a3dc5039b7c520a2416c060b6a32610b5d1962bff33fa4a54d83162e32ab177dd49e3c33659b88625570dbd3f0202b5d6d17ec8aa164aa6a2bf678489b4e977f781cd758ad5ffa3b44fd9cacb9a2a2ba873c7671be4595db14eec36a1c632230191b88d8bcca7236b18bb17f80d8e98b944c1da1cbda1146eba3a889e5b9a964f1d77aec987", @ANYRESOCT, @ANYRES64=r1, @ANYRES32=r6], @ANYRES64, @ANYRES16=0x0]], 0x1) [ 266.383521][ T3136] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 266.412416][ T3136] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready 23:17:21 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000240)='/dev/vsock\x00', 0x0, 0x0) prctl$PR_SET_UNALIGN(0x6, 0x3) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000fe7000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) [ 266.442286][ T9529] device veth1_macvtap entered promiscuous mode [ 266.451621][ T9543] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 266.474055][ T9538] device veth1_vlan entered promiscuous mode [ 266.495491][ T3136] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 266.508109][ T3136] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 266.526486][ T3136] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 266.534468][ T3136] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 266.577195][ T9534] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 266.582072][ T9605] Unknown ioctl 1075883590 [ 266.596822][ T9605] Unknown ioctl 1075883590 [ 266.598682][ T9534] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 266.606869][ T9605] Unknown ioctl 1075883590 [ 266.617914][ T9605] Unknown ioctl 1075883590 23:17:21 executing program 1: recvmmsg(0xffffffffffffffff, &(0x7f0000006180)=[{{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000340)=""/167, 0xa7}, {&(0x7f0000000400)=""/209, 0xd1}, {0x0}], 0x3}}, {{&(0x7f0000000640)=@nl=@unspec, 0x80, &(0x7f0000002b00)=[{&(0x7f00000006c0)=""/1, 0x1}, {&(0x7f0000000700)=""/28, 0x1c}, {&(0x7f0000000740)=""/91, 0x5b}, {&(0x7f0000002880)=""/65, 0x41}, {&(0x7f0000002900)=""/255, 0xff}, {&(0x7f0000000900)=""/255, 0xff}, {&(0x7f00000007c0)=""/55, 0x37}], 0x7, &(0x7f0000002b80)=""/7, 0x7}}, {{&(0x7f0000002bc0)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @local}}, 0x80, &(0x7f0000002dc0)=[{&(0x7f0000002c40)=""/82, 0x52}, {&(0x7f0000002cc0)=""/236, 0xec}], 0x2}}, {{&(0x7f0000002e00)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @remote}, 0x80, &(0x7f0000002e80), 0x0, &(0x7f0000002ec0)=""/181, 0xb5}}, {{&(0x7f0000002f80)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, 0x80, &(0x7f0000005300)=[{&(0x7f0000003000)=""/183, 0xb7}, {&(0x7f00000030c0)=""/19, 0x13}, {&(0x7f0000003100)=""/25, 0x19}, {&(0x7f0000003140)=""/4096, 0x1000}, {&(0x7f0000004140)=""/4096, 0x1000}, {&(0x7f0000005140)=""/152, 0x98}, {&(0x7f0000005200)=""/115, 0x73}, {&(0x7f0000005280)=""/89, 0x59}], 0x8, &(0x7f0000005380)=""/121, 0x79}}, {{&(0x7f0000005400)=@can, 0x80, &(0x7f00000058c0)=[{&(0x7f0000005480)=""/197, 0xc5}, {&(0x7f0000005580)=""/142, 0x8e}, {&(0x7f0000005640)=""/57, 0x39}, {&(0x7f0000005680)=""/117, 0x75}, {&(0x7f0000005700)=""/154, 0x9a}, {&(0x7f00000057c0)=""/87, 0x57}, {&(0x7f0000005840)=""/47, 0x2f}, {&(0x7f0000005880)=""/23, 0x17}], 0x8, &(0x7f0000005940)=""/109, 0x6d}}, {{&(0x7f00000059c0)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @remote}, 0x80, &(0x7f0000005e00)=[{&(0x7f0000005a40)=""/188, 0xbc}, {&(0x7f0000005b00)=""/243, 0xf3}, {0x0}, {&(0x7f0000005d80)=""/42, 0x2a}, {&(0x7f0000005dc0)=""/23, 0x17}], 0x5, &(0x7f0000005e80)=""/41, 0x29}}, {{&(0x7f0000005ec0)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @mcast2}}}, 0x80, &(0x7f00000060c0)=[{&(0x7f0000005f40)=""/8, 0x8}, {&(0x7f0000006040)=""/74, 0x4a}], 0x2, &(0x7f0000000880)=""/94, 0x5e}}], 0x8, 0x0, 0x0) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010000d0700000000ff03000000000010", @ANYRES32=r4, @ANYBLOB="00000000e60000001c0012000c000100626f6e64000000000c0002000800010006000000"], 0x3c}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=@ipv6_newaddr={0x34, 0x14, 0xe7360ad5582e9f59, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r4}, [@IFA_LOCAL={0x14, 0x2, @mcast1}, @IFA_FLAGS={0x8, 0x8, 0x629}]}, 0x34}}, 0x0) getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f0000000500)={{{@in, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@dev}, 0x0, @in=@broadcast}}, &(0x7f0000000040)=0xe8) ioctl$FIGETBSZ(r2, 0x2, &(0x7f0000000080)) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000a00)={{{@in6=@local, @in=@dev={0xac, 0x14, 0x14, 0x38}, 0x4e20, 0x0, 0x4e20, 0x0, 0xa, 0x0, 0x80, 0x73, r4, r5}, {0xfffffffffffffffc, 0x7, 0x8, 0x7, 0x10001, 0xdf, 0x7, 0xfffffffffffffffc}, {0x6, 0xfffffffffffffffc, 0x4}, 0x4, 0x6e6bb4, 0x2, 0x0, 0x2, 0x1}, {{@in6=@mcast2, 0x4d4}, 0x2, @in6=@mcast1, 0x3500, 0x0, 0x0, 0x7, 0x400, 0xa}}, 0xe8) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000002e80)={0xffffffffffffffff, 0xffffffffffffffff}) socket$inet6_tcp(0xa, 0x1, 0x0) r8 = dup2(r7, r1) sendmsg$netlink(r8, &(0x7f0000028fc8)={0x0, 0x0, &(0x7f0000019000)=[{&(0x7f00000001c0)=ANY=[@ANYRES64], 0x1}], 0x1, &(0x7f0000000100)=ANY=[@ANYBLOB="14000000000000000100010001000000", @ANYRES32=r1], 0x14}, 0x0) recvmmsg(r6, &(0x7f00000038c0), 0x3fffffffffffdf5, 0x62, 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r9, &(0x7f0000000680)=ANY=[@ANYBLOB="1500000065ffff"], 0x7) write$P9_RLOPEN(r9, &(0x7f0000000000)={0x18, 0xd, 0x1, {{0x1, 0x2, 0x4}, 0x1}}, 0x18) [ 266.624890][ T9534] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 266.639610][ T9605] Unknown ioctl 1075883590 [ 266.641934][ T9534] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 266.667440][ T9605] Unknown ioctl 1075883590 [ 266.676166][ T9605] Unknown ioctl 1075883590 [ 266.687018][ T9605] Unknown ioctl 1075883590 [ 266.691772][ T9534] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 266.696267][ T9605] Unknown ioctl 1075883590 [ 266.715916][ T9605] Unknown ioctl 1075883590 [ 266.720537][ T9605] Unknown ioctl 1075883590 [ 266.737297][ T9529] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 266.752416][ T9529] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 266.763116][ T9605] Unknown ioctl 1075883590 [ 266.765537][ C1] hrtimer: interrupt took 37304 ns [ 266.773491][ T9605] Unknown ioctl 1075883590 [ 266.774522][ T9529] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 266.779704][ T9605] Unknown ioctl 1075883590 [ 266.789053][ T9529] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 266.796902][ T9605] Unknown ioctl 1075883590 [ 266.807884][ T9529] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 266.813501][ T9605] Unknown ioctl 1075883590 [ 266.819738][ T9529] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 266.822742][ T9529] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 266.826203][ T9605] Unknown ioctl 1075883590 [ 266.847049][ T3135] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 266.848098][ T9605] Unknown ioctl 1075883590 [ 266.855232][ T3135] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 266.866334][ T9605] Unknown ioctl 1075883590 [ 266.871807][ T9605] Unknown ioctl 1075883590 [ 266.878150][ T9605] Unknown ioctl 1075883590 [ 266.883025][ T9605] Unknown ioctl 1075883590 [ 266.888523][ T9605] Unknown ioctl 1075883590 [ 266.893206][ T9605] Unknown ioctl 1075883590 [ 266.894311][ T3135] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 266.901291][ T9605] Unknown ioctl 1075883590 [ 266.915834][ T3135] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 266.923469][ T3135] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 266.934895][ T3135] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 266.943888][ T3135] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 266.957411][ T9609] netlink: 'syz-executor.1': attribute type 1 has an invalid length. [ 266.993873][ T9543] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 267.019907][ T9538] device veth0_macvtap entered promiscuous mode [ 267.030461][ T3135] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 267.040983][ T3135] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 267.050646][ T3135] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 267.062664][ T9534] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 267.076462][ T9534] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 267.086662][ T9534] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 267.097359][ T9534] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 267.126494][ T9534] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 267.140468][ T9538] device veth1_macvtap entered promiscuous mode [ 267.151956][ T9608] netlink: 'syz-executor.1': attribute type 1 has an invalid length. [ 267.327060][ T9529] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 267.344420][ T9529] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 267.356035][ T9529] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 267.366994][ T9529] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 267.378087][ T9529] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 267.389950][ T9529] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 267.409869][ T9529] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 267.417465][ T3135] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 267.425505][ T3135] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 267.435068][ T3135] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 267.444132][ T3135] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 267.452943][ T3135] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 267.619641][ T9538] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 267.632370][ T9538] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 267.643677][ T9538] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 267.654255][ T9538] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 267.664145][ T9538] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 267.675428][ T9538] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 267.685348][ T9538] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 267.701436][ T9538] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 267.716442][ T9538] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 267.726553][ T2857] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 267.735228][ T2857] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 267.880752][ T9538] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 267.894349][ T9538] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 267.904790][ T9538] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 267.915462][ T9538] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 267.926061][ T9538] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 267.939534][ T9538] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 267.949466][ T9538] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 267.960057][ T9538] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 267.971385][ T9538] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 267.979263][ T3135] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 267.989675][ T3135] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 267.999117][ T3135] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 268.008385][ T3135] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 268.236063][ T3135] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 268.244516][ T3135] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 268.265302][ T3137] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 268.274195][ T3137] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 268.287080][ T9543] device veth0_vlan entered promiscuous mode [ 268.324536][ T9543] device veth1_vlan entered promiscuous mode 23:17:23 executing program 2: openat$misdntimer(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$misdntimer(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000080)='IPVS\x00') sendmsg$IPVS_CMD_NEW_DAEMON(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01120000000000000000090000003c00030014000600ff0900000020000000000000000000010800030000000000140002007663616e3000000000000000000000000800010002000000"], 0x50}}, 0x0) sendmsg$IPVS_CMD_FLUSH(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000080)={&(0x7f00000002c0)={0xd4, r1, 0x800, 0x70bd2c, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xff}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x5}, @IPVS_CMD_ATTR_DEST={0x14, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x374e}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x8}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x3f}, @IPVS_CMD_ATTR_DEST={0xc, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e23}]}, @IPVS_CMD_ATTR_SERVICE={0x14, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6}, @IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}]}, @IPVS_CMD_ATTR_DEST={0x38, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_TYPE={0x5, 0xd, 0x1}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e23}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0xa}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@empty}, @IPVS_DEST_ATTR_WEIGHT={0x30, 0x4, 0x6}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x100}, @IPVS_CMD_ATTR_SERVICE={0x28, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x6, 0x1a}}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x6c}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x3}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}]}, @IPVS_CMD_ATTR_DEST={0xc, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ADDR_FAMILY={0x0, 0xb, 0x2}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x0, 0x9, 0x4}, @IPVS_DEST_ATTR_INACT_CONNS={0x0, 0x8, 0x7fffffff}]}]}, 0xd4}, 0x1, 0x0, 0x0, 0x4008000}, 0x80880) syz_open_dev$evdev(&(0x7f0000000100)='/dev/input/event#\x00', 0xffffffff00000000, 0x180) r2 = syz_open_dev$swradio(&(0x7f0000000040)='/dev/swradio#\x00', 0x0, 0x2) ioctl$VIDIOC_ENUM_FREQ_BANDS(r2, 0xc0405665, &(0x7f0000000080)={0x80, 0x4}) ioctl$VIDIOC_ENUM_FREQ_BANDS(0xffffffffffffffff, 0xc0405665, &(0x7f0000000080)={0x80, 0x4}) 23:17:23 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x4}, 0x4008}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getpid() sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) sendmsg$inet_sctp(0xffffffffffffffff, 0x0, 0x0) openat$null(0xffffffffffffff9c, 0x0, 0x0, 0x0) open(&(0x7f0000000280)='.\x00', 0x0, 0x0) r0 = socket$inet(0x2, 0x4000000805, 0x0) r1 = socket$inet_sctp(0x2, 0x5, 0x84) geteuid() r2 = dup3(r0, r1, 0x0) sendto$inet(r2, &(0x7f0000fa3fff)='\t', 0x1, 0x20040010, &(0x7f00006f7000)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) r3 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyprintk\x00', 0x800, 0x0) ioctl$TIOCVHANGUP(r3, 0x5437, 0x0) [ 268.394550][ T3136] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 268.410303][ T3136] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 268.436909][ T3136] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 268.446060][ T3136] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 268.468006][ T9543] device veth0_macvtap entered promiscuous mode [ 268.493008][ T9543] device veth1_macvtap entered promiscuous mode [ 268.515439][ T9642] IPVS: Error joining to the multicast group [ 268.582289][ T9543] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 268.625134][ T9543] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 268.632060][ T9638] ttyprintk ttyprintk: tty_port_close_start: tty->count = 1 port count = 2 [ 268.643700][ C1] [ 268.643708][ C1] ====================================================== [ 268.643714][ C1] WARNING: possible circular locking dependency detected [ 268.643718][ C1] 5.6.0-rc1-syzkaller #0 Not tainted [ 268.643725][ C1] ------------------------------------------------------ [ 268.643731][ C1] syz-executor.0/9638 is trying to acquire lock: [ 268.643734][ C1] ffffffff89ba1160 (console_owner){-.-.}, at: vprintk_emit+0x3fd/0x700 [ 268.643749][ C1] [ 268.643754][ C1] but task is already holding lock: [ 268.643758][ C1] ffffffff8c369460 (&(&port->lock)->rlock){-.-.}, at: tty_port_close_start.part.0+0x2b/0x580 [ 268.643774][ C1] [ 268.643779][ C1] which lock already depends on the new lock. [ 268.643781][ C1] [ 268.643784][ C1] 23:17:23 executing program 4: perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$binfmt_elf64(0xffffffffffffffff, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) syz_open_dev$dri(&(0x7f00000001c0)='/dev/dri/card#\x00', 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2ac5000000012e0b3836005404b0e0301a060075f2e3ff5f163ee340b700000080000000000000fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c65400"}, 0x80) getsockname$packet(r1, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="39000000e50d0001110000000004009b7a98", @ANYRES32=r2, @ANYBLOB="00000000ffffffff0000000008000100686866000c000200080001000000bcd6bd941c5fab18edbb000012804b1511f9c506c9bdc08386c010b54fcb524d3a45e9a7d130517465ac82661b7a2b2ff934dde31b2906a3db578cbf8138f8636cdab61ad7063148cda84a51f4cc7559a81672790e1e0625b31ad49f89a76c53466eee5f2b3d7937ecd996f7e532fd15a66aee7cfb76e153a6d1241969"], 0x38}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000080), 0xc, 0x0}, 0x0) socket$nl_route(0x10, 0x3, 0x0) [ 268.643790][ C1] the existing dependency chain (in reverse order) is: [ 268.643792][ C1] [ 268.643794][ C1] -> #2 (&(&port->lock)->rlock){-.-.}: [ 268.643810][ C1] _raw_spin_lock_irqsave+0x95/0xcd [ 268.643815][ C1] tty_port_tty_get+0x24/0x100 [ 268.643820][ C1] tty_port_default_wakeup+0x16/0x40 [ 268.643824][ C1] tty_port_tty_wakeup+0x57/0x70 [ 268.643829][ C1] uart_write_wakeup+0x46/0x70 [ 268.643834][ C1] serial8250_tx_chars+0x495/0xaf0 [ 268.643839][ C1] serial8250_handle_irq.part.0+0x261/0x2b0 [ 268.643845][ C1] serial8250_default_handle_irq+0xc0/0x150 [ 268.643849][ C1] serial8250_interrupt+0xf1/0x1a0 [ 268.643855][ C1] __handle_irq_event_percpu+0x15d/0x970 [ 268.643860][ C1] handle_irq_event_percpu+0x74/0x160 [ 268.643864][ C1] handle_irq_event+0xa7/0x134 [ 268.643868][ C1] handle_edge_irq+0x25e/0x8d0 [ 268.643872][ C1] do_IRQ+0xde/0x280 [ 268.643877][ C1] ret_from_intr+0x0/0x36 [ 268.643882][ C1] _raw_spin_unlock_irqrestore+0x90/0xe0 [ 268.643886][ C1] uart_write+0x3b6/0x6f0 [ 268.643890][ C1] n_tty_write+0x40e/0x1080 [ 268.643894][ C1] tty_write+0x496/0x7f0 [ 268.643899][ C1] redirected_tty_write+0xb2/0xc0 [ 268.643904][ C1] __vfs_write+0x8a/0x110 [ 268.643908][ C1] vfs_write+0x268/0x5d0 [ 268.643912][ C1] ksys_write+0x14f/0x290 [ 268.643916][ C1] __x64_sys_write+0x73/0xb0 [ 268.643921][ C1] do_syscall_64+0xfa/0x790 [ 268.643926][ C1] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 268.643928][ C1] [ 268.643931][ C1] -> #1 (&port_lock_key){-.-.}: [ 268.643952][ C1] _raw_spin_lock_irqsave+0x95/0xcd [ 268.643956][ C1] serial8250_console_write+0x253/0x9a0 [ 268.643961][ C1] univ8250_console_write+0x5f/0x70 [ 268.643966][ C1] console_unlock+0xb7a/0xf00 [ 268.643970][ C1] vprintk_emit+0x2a0/0x700 [ 268.643974][ C1] vprintk_default+0x28/0x30 [ 268.643978][ C1] vprintk_func+0x7e/0x189 [ 268.643982][ C1] printk+0xba/0xed [ 268.643987][ C1] register_console+0x745/0xb50 [ 268.643992][ C1] univ8250_console_init+0x3e/0x4b [ 268.643996][ C1] console_init+0x461/0x67b [ 268.644001][ C1] start_kernel+0x636/0x8c5 [ 268.644006][ C1] x86_64_start_reservations+0x29/0x2b [ 268.644011][ C1] x86_64_start_kernel+0x77/0x7b [ 268.644015][ C1] secondary_startup_64+0xa4/0xb0 [ 268.644018][ C1] [ 268.644020][ C1] -> #0 (console_owner){-.-.}: [ 268.644035][ C1] __lock_acquire+0x2596/0x4a00 [ 268.644039][ C1] lock_acquire+0x190/0x410 [ 268.644044][ C1] vprintk_emit+0x43a/0x700 [ 268.644048][ C1] vprintk_default+0x28/0x30 [ 268.644053][ C1] vprintk_func+0x7e/0x189 [ 268.644056][ C1] printk+0xba/0xed [ 268.644061][ C1] tty_port_close_start.part.0+0x52a/0x580 [ 268.644065][ C1] tty_port_close+0x4e/0x100 [ 268.644068][ C1] tpk_close+0x8e/0xa4 [ 268.644071][ C1] tty_release+0x3ba/0xe90 [ 268.644075][ C1] __fput+0x2ff/0x890 [ 268.644079][ C1] ____fput+0x16/0x20 [ 268.644082][ C1] task_work_run+0x145/0x1c0 [ 268.644087][ C1] exit_to_usermode_loop+0x316/0x380 [ 268.644090][ C1] do_syscall_64+0x676/0x790 [ 268.644095][ C1] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 268.644097][ C1] [ 268.644101][ C1] other info that might help us debug this: [ 268.644103][ C1] [ 268.644106][ C1] Chain exists of: [ 268.644108][ C1] console_owner --> &port_lock_key --> &(&port->lock)->rlock [ 268.644126][ C1] [ 268.644130][ C1] Possible unsafe locking scenario: [ 268.644132][ C1] [ 268.644137][ C1] CPU0 CPU1 [ 268.644141][ C1] ---- ---- [ 268.644143][ C1] lock(&(&port->lock)->rlock); [ 268.644153][ C1] lock(&port_lock_key); [ 268.644202][ C1] lock(&(&port->lock)->rlock); [ 268.644216][ C1] lock(console_owner); [ 268.644223][ C1] [ 268.644227][ C1] *** DEADLOCK *** [ 268.644229][ C1] [ 268.644234][ C1] 2 locks held by syz-executor.0/9638: [ 268.644236][ C1] #0: ffff88808cf69198 (&tty->legacy_mutex){+.+.}, at: tty_lock+0xc7/0x130 [ 268.644252][ C1] #1: ffffffff8c369460 (&(&port->lock)->rlock){-.-.}, at: tty_port_close_start.part.0+0x2b/0x580 [ 268.644271][ C1] [ 268.644274][ C1] stack backtrace: [ 268.644281][ C1] CPU: 1 PID: 9638 Comm: syz-executor.0 Not tainted 5.6.0-rc1-syzkaller #0 [ 268.644289][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 268.644292][ C1] Call Trace: [ 268.644296][ C1] dump_stack+0x197/0x210 [ 268.644301][ C1] print_circular_bug.isra.0.cold+0x163/0x172 [ 268.644306][ C1] check_noncircular+0x32e/0x3e0 [ 268.644310][ C1] ? print_circular_bug.isra.0+0x230/0x230 [ 268.644315][ C1] ? alloc_list_entry+0xc0/0xc0 [ 268.644320][ C1] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 268.644324][ C1] ? find_first_zero_bit+0x9a/0xc0 [ 268.644328][ C1] __lock_acquire+0x2596/0x4a00 [ 268.644332][ C1] ? mark_held_locks+0xf0/0xf0 [ 268.644336][ C1] lock_acquire+0x190/0x410 [ 268.644340][ C1] ? vprintk_emit+0x3fd/0x700 [ 268.644344][ C1] vprintk_emit+0x43a/0x700 [ 268.644348][ C1] ? vprintk_emit+0x3fd/0x700 [ 268.644352][ C1] vprintk_default+0x28/0x30 [ 268.644356][ C1] vprintk_func+0x7e/0x189 [ 268.644359][ C1] printk+0xba/0xed [ 268.644364][ C1] ? kmsg_dump_rewind_nolock+0xe4/0xe4 [ 268.644369][ C1] ? tty_port_close_start.part.0+0x2b/0x580 [ 268.644374][ C1] tty_port_close_start.part.0+0x52a/0x580 [ 268.644378][ C1] tty_port_close+0x4e/0x100 [ 268.644381][ C1] tpk_close+0x8e/0xa4 [ 268.644385][ C1] ? tpk_write+0x350/0x350 [ 268.644389][ C1] tty_release+0x3ba/0xe90 [ 268.644393][ C1] ? ima_file_free+0xc9/0x430 [ 268.644410][ C1] __fput+0x2ff/0x890 [ 268.644414][ C1] ? do_tty_hangup+0x30/0x30 [ 268.644417][ C1] ____fput+0x16/0x20 [ 268.644421][ C1] task_work_run+0x145/0x1c0 [ 268.644426][ C1] exit_to_usermode_loop+0x316/0x380 [ 268.644430][ C1] do_syscall_64+0x676/0x790 [ 268.644435][ C1] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 268.644438][ C1] RIP: 0033:0x414f51 [ 268.644453][ C1] Code: 75 14 b8 03 00 00 00 0f 05 48 3d 01 f0 ff ff 0f 83 04 1b 00 00 c3 48 83 ec 08 e8 0a fc ff ff 48 89 04 24 b8 03 00 00 00 0f 05 <48> 8b 3c 24 48 89 c2 e8 53 fc ff ff 48 89 d0 48 83 c4 08 48 3d 01 [ 268.644458][ C1] RSP: 002b:00007ffcd8ec83e0 EFLAGS: 00000293 ORIG_RAX: 0000000000000003 [ 268.644469][ C1] RAX: 0000000000000000 RBX: 0000000000000008 RCX: 0000000000414f51 [ 268.644476][ C1] RDX: 0000000000000000 RSI: 0000000000000081 RDI: 0000000000000007 [ 268.644482][ C1] RBP: 0000000000000000 R08: 0000000000760f50 R09: ffffffffffffffff [ 268.644489][ C1] R10: 00007ffcd8ec84b0 R11: 0000000000000293 R12: 000000000075bf20 [ 268.644496][ C1] R13: 0000000000000003 R14: 0000000000760f58 R15: 000000000075bf2c [ 268.645755][ T9543] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 269.419858][ T9543] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 269.434005][ T9543] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 269.444704][ T9543] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 269.454722][ T9543] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 269.466498][ T9543] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 269.476387][ T9543] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 269.486931][ T9543] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 269.499064][ T9543] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 269.508282][ T9645] IPVS: Error joining to the multicast group [ 269.519554][ T3137] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 269.533836][ T3137] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 269.556423][ T3137] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 269.571511][ T3137] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 269.584158][ T9543] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 269.596125][ T9543] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 269.609777][ T9543] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 269.621436][ T9543] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 269.632373][ T9543] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 269.642966][ T9543] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 269.653060][ T9543] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 269.664685][ T9543] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 269.674657][ T9543] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 269.687043][ T9543] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 269.698888][ T9543] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 269.719174][ T3135] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 269.727785][ T3135] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready 23:17:25 executing program 3: r0 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ttyprintk\x00', 0x0, 0x0) r1 = open(&(0x7f0000000040)='./file0\x00', 0x280840, 0x100) sendmsg$IPCTNL_MSG_TIMEOUT_GET(r1, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="a8000000010801010000000000000000e5ffff070500030088000000140004800800024000000006080002400000000344000480080003400000ffff0800094000000006080002400000ffff0800044000000fff08000540000000770800044000000009080003400000c1bd080005400000000105000300210500000500030084000000050003008800000005000300010000000900010073797a31000000000600024092000000"], 0xa8}}, 0x4) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') write$vhci(r3, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) dup3(r2, r0, 0x0) 23:17:25 executing program 1: pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) write$P9_RVERSION(r1, &(0x7f0000000280)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302ed175d908c9205ed3b71ea13952fe4cbe6fe94815d4296f6e66de94f42cfa66862535188bc73114cc5b7e45adbc96ada2c96fcdf56ac7d8c5df0d6217f049413454c471de840cdf462e7b21af76c2dd85cfd2af275132f78a7a2a406f4f2c848cfe3e120ea0124ee07fabe1ab30355d1da3792ed03734c9d2311b8c492141e49bbd12988425f3e6416d98397d0c772f66625b0984a41111e8655de4c87c3ffc5a612004b19158174c2f52680b3bf2e418bc4e9b4a0b873e7f6926102d5cc7e6eebb2a8407b684607e441ca52eabfeca040254d87b627de25f8e6899de161d199468"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000000)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x26f) r3 = syz_open_dev$vcsn(&(0x7f0000000040)='/dev/vcs#\x00', 0xc4, 0x1) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff}, 0x0) r5 = syz_open_dev$video(&(0x7f0000000000)='/dev/video#\x00', 0x8447, 0x0) mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='9p\x00', 0x0, &(0x7f0000000180)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {'wfdno', 0x3d, r5}}) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY_ALL_USERS(r4, 0xc0406619, &(0x7f0000000180)={{0x3, 0x0, @identifier="d78b1d1234b271cf037d191f4b0914c8"}}) mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='9p\x00', 0x0, &(0x7f0000000400)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[{@access_uid={'access'}}]}}) 23:17:25 executing program 0: perf_event_open(&(0x7f0000000340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) io_setup(0x3, &(0x7f0000000300)=0x0) r2 = socket$inet_smc(0x2b, 0x1, 0x0) io_submit(r1, 0x2, &(0x7f0000000700)=[&(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, r2, 0x0}, &(0x7f0000000200)={0x0, 0x0, 0x8, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}]) getsockopt$inet_IP_IPSEC_POLICY(r2, 0x0, 0x10, &(0x7f00000001c0)={{{@in, @in=@broadcast}}, {{@in=@loopback}, 0x0, @in=@initdev}}, &(0x7f0000000100)=0xfe80) r3 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0xc) setreuid(0x0, 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r4, &(0x7f0000000680)=ANY=[@ANYBLOB="1500000065ffff"], 0x7) mount$overlay(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x4402c, &(0x7f0000000480)=ANY=[@ANYBLOB='upperdir=./file0,index=on,metacopy=off,lowerdir=./file0,xino=off,nfs_export=off,nfs_export=on,index=on,obj_role=nfs_export=off,smackfshat=/dev/kvm\x00,defcontext=system_u,fowner=', @ANYRES64=0x0, @ANYBLOB="2c61707072826973652c00f1bdb0aae164a75321f47d0f6b14f108d1dd1a8501844e472c51f608a99261c8ca162b4f3b7101f3ae4ee768c85ab777b468c941bc482bc81037b3ae"]) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3000003, 0x5c831, 0xffffffffffffffff, 0x0) r5 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r6 = openat$nvram(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/nvram\x00', 0x0, 0x0) socket(0x0, 0x0, 0x0) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) pipe(0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, 0x0) r7 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) creat(0x0, 0x0) fanotify_mark(0xffffffffffffffff, 0x0, 0x0, r6, &(0x7f0000000300)='./file0\x00') ioctl$VIDIOC_G_TUNER(0xffffffffffffffff, 0xc054561d, &(0x7f0000000a80)={0x0, "a6cddeb02f407e24b899d9619a4e0a53e1c62827604c39fdaa27e21bee8a0ddd", 0x28ef3037c3f0dc97, 0x0, 0x0, 0x4, 0x4, 0x0, 0x0, 0x4}) write$UHID_GET_REPORT_REPLY(0xffffffffffffffff, &(0x7f0000000440)={0xa, {0x6, 0x2, 0x40}}, 0xa) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf32(r9, &(0x7f0000000340)=ANY=[], 0xff0e) splice(r8, 0x0, r9, 0x0, 0x100000000, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000d40)={'syz0\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200], [0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1]}, 0x45c) r10 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r10, &(0x7f00001da000/0x18000)=nil, 0x0, 0xfffffe72, 0x0, 0x0, 0xa00000000000000) 23:17:25 executing program 2: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f00000001c0)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x83, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfbffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) syz_open_dev$dri(0x0, 0x43, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa10000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3b}], 0x3, 0x0, 0x0, 0x3b2) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000100)=ANY=[@ANYBLOB="9feb01001800e00000000300000000000000000903000000008e1504aef0279d6efc4c76785c5a0090a732b637b728780093d0810c77eaf7e6162351e390168e9dcab3c7e6928d9968a7b9c84b5f12683312daf4b231f7b846a095804970175504723d8815feb67089fb0e5363b167a5b1028dbc346710ad473536000000000000000000000000000000b8b5d3fecb07f9b0e7aba73c81bb3670c2a6c8098f265c0d8ef95193"], 0x0, 0x80}, 0x20) geteuid() r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x1000, &(0x7f0000000000/0x1000)=nil}) openat$mixer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/mixer\x00', 0x208800, 0x0) dup(0xffffffffffffffff) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x4, 0x0, 0xfff, 0x463, 0x0, 0xff, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x1000000], 0x1}) ioctl$KVM_RUN(r3, 0xae80, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x0, 0x31, 0xffffffffffffffff, 0x0) 23:17:25 executing program 4: perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$binfmt_elf64(0xffffffffffffffff, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) syz_open_dev$dri(&(0x7f00000001c0)='/dev/dri/card#\x00', 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2ac5000000012e0b3836005404b0e0301a060075f2e3ff5f163ee340b700000080000000000000fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c65400"}, 0x80) getsockname$packet(r1, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="39000000e50d0001110000000004009b7a98", @ANYRES32=r2, @ANYBLOB="00000000ffffffff0000000008000100686866000c000200080001000000bcd6bd941c5fab18edbb000012804b1511f9c506c9bdc08386c010b54fcb524d3a45e9a7d130517465ac82661b7a2b2ff934dde31b2906a3db578cbf8138f8636cdab61ad7063148cda84a51f4cc7559a81672790e1e0625b31ad49f89a76c53466eee5f2b3d7937ecd996f7e532fd15a66aee7cfb76e153a6d1241969"], 0x38}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000080), 0xc, 0x0}, 0x0) socket$nl_route(0x10, 0x3, 0x0) 23:17:25 executing program 5: bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000200)={0xffffffffffffffff, 0xc0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=0x5, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x8, 0x3}, 0x0, 0x0, &(0x7f0000000080)={0x3, 0xd, 0x4, 0x5}, &(0x7f00000000c0)=0x7, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=0x1f}}, 0x10) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000240)=r0, 0x4) r1 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000280)='/proc/capi/capi20\x00', 0x240200, 0x0) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x6, &(0x7f00000002c0)={0x0, @in={{0x2, 0x4e23, @remote}}}, &(0x7f0000000380)=0x84) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r1, 0x84, 0x10, &(0x7f00000003c0)=@assoc_value={r2, 0x683e}, &(0x7f0000000400)=0x8) setxattr$trusted_overlay_nlink(&(0x7f0000000440)='./file0\x00', &(0x7f0000000480)='trusted.overlay.nlink\x00', &(0x7f00000004c0)={'U+', 0x3}, 0x16, 0x3) r3 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000540)='SEG6\x00') sendmsg$SEG6_CMD_SETHMAC(r1, &(0x7f0000000600)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x30, r3, 0x400, 0x70bd27, 0x25dfdbfc, {}, [@SEG6_ATTR_ALGID={0x5, 0x6, 0x4}, @SEG6_ATTR_DST={0x14, 0x1, @dev={0xfe, 0x80, [], 0xe}}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000000}, 0x40001) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000680)='TIPCv2\x00') sendmsg$TIPC_NL_NET_GET(r1, &(0x7f0000000780)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000740)={&(0x7f00000006c0)={0x50, r4, 0x800, 0x70bd26, 0x25dfdbfb, {}, [@TIPC_NLA_BEARER={0x3c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e21, 0x8100, @remote, 0x1}}, {0x14, 0x2, @in={0x2, 0x4e22, @broadcast}}}}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) fsopen(&(0x7f00000007c0)='binfmt_misc\x00', 0x0) r5 = dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r5, 0xc01864c6, &(0x7f0000000840)={&(0x7f0000000800)=[0x1, 0x7fffffff, 0x629389a, 0x4, 0xda, 0x0], 0x6, 0x800}) openat$pidfd(0xffffffffffffff9c, &(0x7f0000000880)='/proc/self\x00', 0x181000, 0x0) io_setup(0xdc5b, &(0x7f00000008c0)=0x0) clock_gettime(0x0, &(0x7f00000009c0)={0x0, 0x0}) io_pgetevents(r6, 0x4, 0x5, &(0x7f0000000900)=[{}, {}, {}, {}, {}], &(0x7f0000000a00)={r7, r8+10000000}, &(0x7f0000000a80)={&(0x7f0000000a40)={[0x8000]}, 0x8}) r9 = socket$netlink(0x10, 0x3, 0x8) getpeername$netlink(r9, &(0x7f0000000ac0), &(0x7f0000000b00)=0xc) ioctl$VIDIOC_G_EXT_CTRLS(0xffffffffffffffff, 0xc0205647, &(0x7f0000000bc0)={0x9d0000, 0x1, 0xffff, r9, 0x0, &(0x7f0000000b80)={0x99096b, 0x100, [], @p_u16=&(0x7f0000000b40)=0x1000}}) ioctl$TCXONC(r10, 0x540a, 0x3) r11 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000c00)='/proc/sys/net/ipv4/vs/sync_refresh_period\x00', 0x2, 0x0) bind$netlink(r11, &(0x7f0000000c40)={0x10, 0x0, 0x25dfdbfe, 0x100}, 0xc) r12 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000c80)='io.stat\x00', 0x0, 0x0) getsockopt$bt_sco_SCO_CONNINFO(r12, 0x11, 0x2, &(0x7f0000000cc0)=""/4096, &(0x7f0000001cc0)=0x1000) r13 = open(&(0x7f0000001d00)='./file0\x00', 0x140, 0xb) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000001d40)={0x0, @in={{0x2, 0x4e23, @remote}}, 0x7, 0x80, 0x725d, 0x6, 0x20, 0x5, 0x5b}, &(0x7f0000001e00)=0x9c) setsockopt$inet_sctp6_SCTP_MAXSEG(r13, 0x84, 0xd, &(0x7f0000001e40)=@assoc_id=r14, 0x4) r15 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000001e80)='/dev/cachefiles\x00', 0x680000, 0x0) r16 = syz_genetlink_get_family_id$batadv(&(0x7f0000001f00)='batadv\x00') sendmsg$BATADV_CMD_SET_VLAN(r15, &(0x7f0000002000)={&(0x7f0000001ec0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000001fc0)={&(0x7f0000001f40)={0x54, r16, 0x300, 0x70bd2b, 0x25dfdbfd, {}, [@BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0xd440}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x10001}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x6}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x8}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x4}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x3}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x6}]}, 0x54}, 0x1, 0x0, 0x0, 0x800}, 0x80) [ 270.993970][ T9674] [U] ÿ€ 23:17:25 executing program 3: r0 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ttyprintk\x00', 0x0, 0x0) r1 = open(&(0x7f0000000040)='./file0\x00', 0x280840, 0x100) sendmsg$IPCTNL_MSG_TIMEOUT_GET(r1, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="a8000000010801010000000000000000e5ffff070500030088000000140004800800024000000006080002400000000344000480080003400000ffff0800094000000006080002400000ffff0800044000000fff08000540000000770800044000000009080003400000c1bd080005400000000105000300210500000500030084000000050003008800000005000300010000000900010073797a31000000000600024092000000"], 0xa8}}, 0x4) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') write$vhci(r3, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) dup3(r2, r0, 0x0) [ 271.020543][ T9679] [U] ÿ€ 23:17:25 executing program 4: r0 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ttyprintk\x00', 0x0, 0x0) r1 = open(&(0x7f0000000040)='./file0\x00', 0x280840, 0x100) sendmsg$IPCTNL_MSG_TIMEOUT_GET(r1, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="a8000000010801010000000000000000e5ffff070500030088000000140004800800024000000006080002400000000344000480080003400000ffff0800094000000006080002400000ffff0800044000000fff08000540000000770800044000000009080003400000c1bd080005400000000105000300210500000500030084000000050003008800000005000300010000000900010073797a31000000000600024092000000"], 0xa8}}, 0x4) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') write$vhci(r3, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) dup3(r2, r0, 0x0) [ 271.087405][ T9676] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 271.160849][ T9690] [U] ÿ€ 23:17:26 executing program 3: r0 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ttyprintk\x00', 0x0, 0x0) r1 = open(&(0x7f0000000040)='./file0\x00', 0x280840, 0x100) sendmsg$IPCTNL_MSG_TIMEOUT_GET(r1, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="a8000000010801010000000000000000e5ffff070500030088000000140004800800024000000006080002400000000344000480080003400000ffff0800094000000006080002400000ffff0800044000000fff08000540000000770800044000000009080003400000c1bd080005400000000105000300210500000500030084000000050003008800000005000300010000000900010073797a31000000000600024092000000"], 0xa8}}, 0x4) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') write$vhci(r3, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) dup3(r2, r0, 0x0) [ 271.245041][ T9691] [U] ÿ€ 23:17:26 executing program 4: r0 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ttyprintk\x00', 0x0, 0x0) r1 = open(&(0x7f0000000040)='./file0\x00', 0x280840, 0x100) sendmsg$IPCTNL_MSG_TIMEOUT_GET(r1, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="a8000000010801010000000000000000e5ffff070500030088000000140004800800024000000006080002400000000344000480080003400000ffff0800094000000006080002400000ffff0800044000000fff08000540000000770800044000000009080003400000c1bd080005400000000105000300210500000500030084000000050003008800000005000300010000000900010073797a31000000000600024092000000"], 0xa8}}, 0x4) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') write$vhci(r3, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) dup3(r2, r0, 0x0) 23:17:26 executing program 2: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f00000001c0)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x83, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfbffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) syz_open_dev$dri(0x0, 0x43, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa10000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3b}], 0x3, 0x0, 0x0, 0x3b2) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000100)=ANY=[@ANYBLOB="9feb01001800e00000000300000000000000000903000000008e1504aef0279d6efc4c76785c5a0090a732b637b728780093d0810c77eaf7e6162351e390168e9dcab3c7e6928d9968a7b9c84b5f12683312daf4b231f7b846a095804970175504723d8815feb67089fb0e5363b167a5b1028dbc346710ad473536000000000000000000000000000000b8b5d3fecb07f9b0e7aba73c81bb3670c2a6c8098f265c0d8ef95193"], 0x0, 0x80}, 0x20) geteuid() r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x1000, &(0x7f0000000000/0x1000)=nil}) openat$mixer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/mixer\x00', 0x208800, 0x0) dup(0xffffffffffffffff) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x4, 0x0, 0xfff, 0x463, 0x0, 0xff, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x1000000], 0x1}) ioctl$KVM_RUN(r3, 0xae80, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x0, 0x31, 0xffffffffffffffff, 0x0) 23:17:26 executing program 3: r0 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ttyprintk\x00', 0x0, 0x0) r1 = open(&(0x7f0000000040)='./file0\x00', 0x280840, 0x100) sendmsg$IPCTNL_MSG_TIMEOUT_GET(r1, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="a8000000010801010000000000000000e5ffff070500030088000000140004800800024000000006080002400000000344000480080003400000ffff0800094000000006080002400000ffff0800044000000fff08000540000000770800044000000009080003400000c1bd080005400000000105000300210500000500030084000000050003008800000005000300010000000900010073797a31000000000600024092000000"], 0xa8}}, 0x4) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') write$vhci(r3, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) dup3(r2, r0, 0x0) [ 271.351908][ T9696] [U] ÿ€ 23:17:26 executing program 0: perf_event_open(&(0x7f0000000340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) io_setup(0x3, &(0x7f0000000300)=0x0) r2 = socket$inet_smc(0x2b, 0x1, 0x0) io_submit(r1, 0x2, &(0x7f0000000700)=[&(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, r2, 0x0}, &(0x7f0000000200)={0x0, 0x0, 0x8, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}]) getsockopt$inet_IP_IPSEC_POLICY(r2, 0x0, 0x10, &(0x7f00000001c0)={{{@in, @in=@broadcast}}, {{@in=@loopback}, 0x0, @in=@initdev}}, &(0x7f0000000100)=0xfe80) r3 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0xc) setreuid(0x0, 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r4, &(0x7f0000000680)=ANY=[@ANYBLOB="1500000065ffff"], 0x7) mount$overlay(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x4402c, &(0x7f0000000480)=ANY=[@ANYBLOB='upperdir=./file0,index=on,metacopy=off,lowerdir=./file0,xino=off,nfs_export=off,nfs_export=on,index=on,obj_role=nfs_export=off,smackfshat=/dev/kvm\x00,defcontext=system_u,fowner=', @ANYRES64=0x0, @ANYBLOB="2c61707072826973652c00f1bdb0aae164a75321f47d0f6b14f108d1dd1a8501844e472c51f608a99261c8ca162b4f3b7101f3ae4ee768c85ab777b468c941bc482bc81037b3ae"]) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3000003, 0x5c831, 0xffffffffffffffff, 0x0) r5 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r6 = openat$nvram(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/nvram\x00', 0x0, 0x0) socket(0x0, 0x0, 0x0) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) pipe(0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, 0x0) r7 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) creat(0x0, 0x0) fanotify_mark(0xffffffffffffffff, 0x0, 0x0, r6, &(0x7f0000000300)='./file0\x00') ioctl$VIDIOC_G_TUNER(0xffffffffffffffff, 0xc054561d, &(0x7f0000000a80)={0x0, "a6cddeb02f407e24b899d9619a4e0a53e1c62827604c39fdaa27e21bee8a0ddd", 0x28ef3037c3f0dc97, 0x0, 0x0, 0x4, 0x4, 0x0, 0x0, 0x4}) write$UHID_GET_REPORT_REPLY(0xffffffffffffffff, &(0x7f0000000440)={0xa, {0x6, 0x2, 0x40}}, 0xa) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf32(r9, &(0x7f0000000340)=ANY=[], 0xff0e) splice(r8, 0x0, r9, 0x0, 0x100000000, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000d40)={'syz0\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200], [0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1]}, 0x45c) r10 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r10, &(0x7f00001da000/0x18000)=nil, 0x0, 0xfffffe72, 0x0, 0x0, 0xa00000000000000) [ 271.465051][ T9703] [U] ÿ€ [ 271.490069][ T9705] [U] ÿ€ 23:17:26 executing program 1: pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) write$P9_RVERSION(r1, &(0x7f0000000280)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302ed175d908c9205ed3b71ea13952fe4cbe6fe94815d4296f6e66de94f42cfa66862535188bc73114cc5b7e45adbc96ada2c96fcdf56ac7d8c5df0d6217f049413454c471de840cdf462e7b21af76c2dd85cfd2af275132f78a7a2a406f4f2c848cfe3e120ea0124ee07fabe1ab30355d1da3792ed03734c9d2311b8c492141e49bbd12988425f3e6416d98397d0c772f66625b0984a41111e8655de4c87c3ffc5a612004b19158174c2f52680b3bf2e418bc4e9b4a0b873e7f6926102d5cc7e6eebb2a8407b684607e441ca52eabfeca040254d87b627de25f8e6899de161d199468"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000000)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x26f) r3 = syz_open_dev$vcsn(&(0x7f0000000040)='/dev/vcs#\x00', 0xc4, 0x1) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff}, 0x0) r5 = syz_open_dev$video(&(0x7f0000000000)='/dev/video#\x00', 0x8447, 0x0) mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='9p\x00', 0x0, &(0x7f0000000180)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {'wfdno', 0x3d, r5}}) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY_ALL_USERS(r4, 0xc0406619, &(0x7f0000000180)={{0x3, 0x0, @identifier="d78b1d1234b271cf037d191f4b0914c8"}}) mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='9p\x00', 0x0, &(0x7f0000000400)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[{@access_uid={'access'}}]}}) 23:17:26 executing program 4: perf_event_open(&(0x7f0000000340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) io_setup(0x3, &(0x7f0000000300)=0x0) r2 = socket$inet_smc(0x2b, 0x1, 0x0) io_submit(r1, 0x2, &(0x7f0000000700)=[&(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, r2, 0x0}, &(0x7f0000000200)={0x0, 0x0, 0x8, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}]) getsockopt$inet_IP_IPSEC_POLICY(r2, 0x0, 0x10, &(0x7f00000001c0)={{{@in, @in=@broadcast}}, {{@in=@loopback}, 0x0, @in=@initdev}}, &(0x7f0000000100)=0xfe80) r3 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0xc) setreuid(0x0, 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r4, &(0x7f0000000680)=ANY=[@ANYBLOB="1500000065ffff"], 0x7) mount$overlay(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x4402c, &(0x7f0000000480)=ANY=[@ANYBLOB='upperdir=./file0,index=on,metacopy=off,lowerdir=./file0,xino=off,nfs_export=off,nfs_export=on,index=on,obj_role=nfs_export=off,smackfshat=/dev/kvm\x00,defcontext=system_u,fowner=', @ANYRES64=0x0, @ANYBLOB="2c61707072826973652c00f1bdb0aae164a75321f47d0f6b14f108d1dd1a8501844e472c51f608a99261c8ca162b4f3b7101f3ae4ee768c85ab777b468c941bc482bc81037b3ae"]) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3000003, 0x5c831, 0xffffffffffffffff, 0x0) r5 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r6 = openat$nvram(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/nvram\x00', 0x0, 0x0) socket(0x0, 0x0, 0x0) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) pipe(0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, 0x0) r7 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) creat(0x0, 0x0) fanotify_mark(0xffffffffffffffff, 0x0, 0x0, r6, &(0x7f0000000300)='./file0\x00') ioctl$VIDIOC_G_TUNER(0xffffffffffffffff, 0xc054561d, &(0x7f0000000a80)={0x0, "a6cddeb02f407e24b899d9619a4e0a53e1c62827604c39fdaa27e21bee8a0ddd", 0x28ef3037c3f0dc97, 0x0, 0x0, 0x4, 0x4, 0x0, 0x0, 0x4}) write$UHID_GET_REPORT_REPLY(0xffffffffffffffff, &(0x7f0000000440)={0xa, {0x6, 0x2, 0x40}}, 0xa) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf32(r9, &(0x7f0000000340)=ANY=[], 0xff0e) splice(r8, 0x0, r9, 0x0, 0x100000000, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000d40)={'syz0\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200], [0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1]}, 0x45c) r10 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r10, &(0x7f00001da000/0x18000)=nil, 0x0, 0xfffffe72, 0x0, 0x0, 0xa00000000000000) 23:17:26 executing program 3: r0 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ttyprintk\x00', 0x0, 0x0) r1 = open(&(0x7f0000000040)='./file0\x00', 0x280840, 0x100) sendmsg$IPCTNL_MSG_TIMEOUT_GET(r1, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="a8000000010801010000000000000000e5ffff070500030088000000140004800800024000000006080002400000000344000480080003400000ffff0800094000000006080002400000ffff0800044000000fff08000540000000770800044000000009080003400000c1bd080005400000000105000300210500000500030084000000050003008800000005000300010000000900010073797a31000000000600024092000000"], 0xa8}}, 0x4) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') dup3(r2, r0, 0x0) 23:17:26 executing program 2: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f00000001c0)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x83, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfbffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) syz_open_dev$dri(0x0, 0x43, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa10000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3b}], 0x3, 0x0, 0x0, 0x3b2) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000100)=ANY=[@ANYBLOB="9feb01001800e00000000300000000000000000903000000008e1504aef0279d6efc4c76785c5a0090a732b637b728780093d0810c77eaf7e6162351e390168e9dcab3c7e6928d9968a7b9c84b5f12683312daf4b231f7b846a095804970175504723d8815feb67089fb0e5363b167a5b1028dbc346710ad473536000000000000000000000000000000b8b5d3fecb07f9b0e7aba73c81bb3670c2a6c8098f265c0d8ef95193"], 0x0, 0x80}, 0x20) geteuid() r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x1000, &(0x7f0000000000/0x1000)=nil}) openat$mixer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/mixer\x00', 0x208800, 0x0) dup(0xffffffffffffffff) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x4, 0x0, 0xfff, 0x463, 0x0, 0xff, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x1000000], 0x1}) ioctl$KVM_RUN(r3, 0xae80, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x0, 0x31, 0xffffffffffffffff, 0x0) 23:17:26 executing program 3: r0 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ttyprintk\x00', 0x0, 0x0) r1 = open(&(0x7f0000000040)='./file0\x00', 0x280840, 0x100) sendmsg$IPCTNL_MSG_TIMEOUT_GET(r1, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="a8000000010801010000000000000000e5ffff070500030088000000140004800800024000000006080002400000000344000480080003400000ffff0800094000000006080002400000ffff0800044000000fff08000540000000770800044000000009080003400000c1bd080005400000000105000300210500000500030084000000050003008800000005000300010000000900010073797a31000000000600024092000000"], 0xa8}}, 0x4) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') dup3(r2, r0, 0x0) 23:17:26 executing program 5: bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000200)={0xffffffffffffffff, 0xc0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=0x5, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x8, 0x3}, 0x0, 0x0, &(0x7f0000000080)={0x3, 0xd, 0x4, 0x5}, &(0x7f00000000c0)=0x7, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=0x1f}}, 0x10) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000240)=r0, 0x4) r1 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000280)='/proc/capi/capi20\x00', 0x240200, 0x0) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x6, &(0x7f00000002c0)={0x0, @in={{0x2, 0x4e23, @remote}}}, &(0x7f0000000380)=0x84) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r1, 0x84, 0x10, &(0x7f00000003c0)=@assoc_value={r2, 0x683e}, &(0x7f0000000400)=0x8) setxattr$trusted_overlay_nlink(&(0x7f0000000440)='./file0\x00', &(0x7f0000000480)='trusted.overlay.nlink\x00', &(0x7f00000004c0)={'U+', 0x3}, 0x16, 0x3) r3 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000540)='SEG6\x00') sendmsg$SEG6_CMD_SETHMAC(r1, &(0x7f0000000600)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x30, r3, 0x400, 0x70bd27, 0x25dfdbfc, {}, [@SEG6_ATTR_ALGID={0x5, 0x6, 0x4}, @SEG6_ATTR_DST={0x14, 0x1, @dev={0xfe, 0x80, [], 0xe}}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000000}, 0x40001) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000680)='TIPCv2\x00') sendmsg$TIPC_NL_NET_GET(r1, &(0x7f0000000780)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000740)={&(0x7f00000006c0)={0x50, r4, 0x800, 0x70bd26, 0x25dfdbfb, {}, [@TIPC_NLA_BEARER={0x3c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e21, 0x8100, @remote, 0x1}}, {0x14, 0x2, @in={0x2, 0x4e22, @broadcast}}}}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) fsopen(&(0x7f00000007c0)='binfmt_misc\x00', 0x0) r5 = dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r5, 0xc01864c6, &(0x7f0000000840)={&(0x7f0000000800)=[0x1, 0x7fffffff, 0x629389a, 0x4, 0xda, 0x0], 0x6, 0x800}) openat$pidfd(0xffffffffffffff9c, &(0x7f0000000880)='/proc/self\x00', 0x181000, 0x0) io_setup(0xdc5b, &(0x7f00000008c0)=0x0) clock_gettime(0x0, &(0x7f00000009c0)={0x0, 0x0}) io_pgetevents(r6, 0x4, 0x5, &(0x7f0000000900)=[{}, {}, {}, {}, {}], &(0x7f0000000a00)={r7, r8+10000000}, &(0x7f0000000a80)={&(0x7f0000000a40)={[0x8000]}, 0x8}) r9 = socket$netlink(0x10, 0x3, 0x8) getpeername$netlink(r9, &(0x7f0000000ac0), &(0x7f0000000b00)=0xc) ioctl$VIDIOC_G_EXT_CTRLS(0xffffffffffffffff, 0xc0205647, &(0x7f0000000bc0)={0x9d0000, 0x1, 0xffff, r9, 0x0, &(0x7f0000000b80)={0x99096b, 0x100, [], @p_u16=&(0x7f0000000b40)=0x1000}}) ioctl$TCXONC(r10, 0x540a, 0x3) r11 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000c00)='/proc/sys/net/ipv4/vs/sync_refresh_period\x00', 0x2, 0x0) bind$netlink(r11, &(0x7f0000000c40)={0x10, 0x0, 0x25dfdbfe, 0x100}, 0xc) r12 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000c80)='io.stat\x00', 0x0, 0x0) getsockopt$bt_sco_SCO_CONNINFO(r12, 0x11, 0x2, &(0x7f0000000cc0)=""/4096, &(0x7f0000001cc0)=0x1000) r13 = open(&(0x7f0000001d00)='./file0\x00', 0x140, 0xb) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000001d40)={0x0, @in={{0x2, 0x4e23, @remote}}, 0x7, 0x80, 0x725d, 0x6, 0x20, 0x5, 0x5b}, &(0x7f0000001e00)=0x9c) setsockopt$inet_sctp6_SCTP_MAXSEG(r13, 0x84, 0xd, &(0x7f0000001e40)=@assoc_id=r14, 0x4) r15 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000001e80)='/dev/cachefiles\x00', 0x680000, 0x0) r16 = syz_genetlink_get_family_id$batadv(&(0x7f0000001f00)='batadv\x00') sendmsg$BATADV_CMD_SET_VLAN(r15, &(0x7f0000002000)={&(0x7f0000001ec0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000001fc0)={&(0x7f0000001f40)={0x54, r16, 0x300, 0x70bd2b, 0x25dfdbfd, {}, [@BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0xd440}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x10001}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x6}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x8}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x4}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x3}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x6}]}, 0x54}, 0x1, 0x0, 0x0, 0x800}, 0x80) 23:17:26 executing program 0: pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) write$P9_RVERSION(r1, &(0x7f0000000280)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302ed175d908c9205ed3b71ea13952fe4cbe6fe94815d4296f6e66de94f42cfa66862535188bc73114cc5b7e45adbc96ada2c96fcdf56ac7d8c5df0d6217f049413454c471de840cdf462e7b21af76c2dd85cfd2af275132f78a7a2a406f4f2c848cfe3e120ea0124ee07fabe1ab30355d1da3792ed03734c9d2311b8c492141e49bbd12988425f3e6416d98397d0c772f66625b0984a41111e8655de4c87c3ffc5a612004b19158174c2f52680b3bf2e418bc4e9b4a0b873e7f6926102d5cc7e6eebb2a8407b684607e441ca52eabfeca040254d87b627de25f8e6899de161d199468"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000000)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x26f) r3 = syz_open_dev$vcsn(&(0x7f0000000040)='/dev/vcs#\x00', 0xc4, 0x1) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff}, 0x0) r5 = syz_open_dev$video(&(0x7f0000000000)='/dev/video#\x00', 0x8447, 0x0) mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='9p\x00', 0x0, &(0x7f0000000180)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {'wfdno', 0x3d, r5}}) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY_ALL_USERS(r4, 0xc0406619, &(0x7f0000000180)={{0x3, 0x0, @identifier="d78b1d1234b271cf037d191f4b0914c8"}}) mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='9p\x00', 0x0, &(0x7f0000000400)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[{@access_uid={'access'}}]}}) 23:17:26 executing program 3: r0 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ttyprintk\x00', 0x0, 0x0) r1 = open(&(0x7f0000000040)='./file0\x00', 0x280840, 0x100) sendmsg$IPCTNL_MSG_TIMEOUT_GET(r1, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="a8000000010801010000000000000000e5ffff070500030088000000140004800800024000000006080002400000000344000480080003400000ffff0800094000000006080002400000ffff0800044000000fff08000540000000770800044000000009080003400000c1bd080005400000000105000300210500000500030084000000050003008800000005000300010000000900010073797a31000000000600024092000000"], 0xa8}}, 0x4) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') dup3(r2, r0, 0x0) 23:17:26 executing program 3: r0 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ttyprintk\x00', 0x0, 0x0) r1 = open(&(0x7f0000000040)='./file0\x00', 0x280840, 0x100) sendmsg$IPCTNL_MSG_TIMEOUT_GET(r1, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="a8000000010801010000000000000000e5ffff070500030088000000140004800800024000000006080002400000000344000480080003400000ffff0800094000000006080002400000ffff0800044000000fff08000540000000770800044000000009080003400000c1bd080005400000000105000300210500000500030084000000050003008800000005000300010000000900010073797a31000000000600024092000000"], 0xa8}}, 0x4) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') write$vhci(0xffffffffffffffff, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) dup3(r2, r0, 0x0) 23:17:27 executing program 2: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f00000001c0)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x83, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfbffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) syz_open_dev$dri(0x0, 0x43, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa10000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3b}], 0x3, 0x0, 0x0, 0x3b2) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000100)=ANY=[@ANYBLOB="9feb01001800e00000000300000000000000000903000000008e1504aef0279d6efc4c76785c5a0090a732b637b728780093d0810c77eaf7e6162351e390168e9dcab3c7e6928d9968a7b9c84b5f12683312daf4b231f7b846a095804970175504723d8815feb67089fb0e5363b167a5b1028dbc346710ad473536000000000000000000000000000000b8b5d3fecb07f9b0e7aba73c81bb3670c2a6c8098f265c0d8ef95193"], 0x0, 0x80}, 0x20) geteuid() r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x1000, &(0x7f0000000000/0x1000)=nil}) openat$mixer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/mixer\x00', 0x208800, 0x0) dup(0xffffffffffffffff) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x4, 0x0, 0xfff, 0x463, 0x0, 0xff, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x1000000], 0x1}) ioctl$KVM_RUN(r3, 0xae80, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x0, 0x31, 0xffffffffffffffff, 0x0) 23:17:27 executing program 3: r0 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ttyprintk\x00', 0x0, 0x0) r1 = open(&(0x7f0000000040)='./file0\x00', 0x280840, 0x100) sendmsg$IPCTNL_MSG_TIMEOUT_GET(r1, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="a8000000010801010000000000000000e5ffff070500030088000000140004800800024000000006080002400000000344000480080003400000ffff0800094000000006080002400000ffff0800044000000fff08000540000000770800044000000009080003400000c1bd080005400000000105000300210500000500030084000000050003008800000005000300010000000900010073797a31000000000600024092000000"], 0xa8}}, 0x4) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') write$vhci(0xffffffffffffffff, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) dup3(r2, r0, 0x0) 23:17:27 executing program 4: perf_event_open(&(0x7f0000000340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) io_setup(0x3, &(0x7f0000000300)=0x0) r2 = socket$inet_smc(0x2b, 0x1, 0x0) io_submit(r1, 0x2, &(0x7f0000000700)=[&(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, r2, 0x0}, &(0x7f0000000200)={0x0, 0x0, 0x8, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}]) getsockopt$inet_IP_IPSEC_POLICY(r2, 0x0, 0x10, &(0x7f00000001c0)={{{@in, @in=@broadcast}}, {{@in=@loopback}, 0x0, @in=@initdev}}, &(0x7f0000000100)=0xfe80) r3 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0xc) setreuid(0x0, 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r4, &(0x7f0000000680)=ANY=[@ANYBLOB="1500000065ffff"], 0x7) mount$overlay(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x4402c, &(0x7f0000000480)=ANY=[@ANYBLOB='upperdir=./file0,index=on,metacopy=off,lowerdir=./file0,xino=off,nfs_export=off,nfs_export=on,index=on,obj_role=nfs_export=off,smackfshat=/dev/kvm\x00,defcontext=system_u,fowner=', @ANYRES64=0x0, @ANYBLOB="2c61707072826973652c00f1bdb0aae164a75321f47d0f6b14f108d1dd1a8501844e472c51f608a99261c8ca162b4f3b7101f3ae4ee768c85ab777b468c941bc482bc81037b3ae"]) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3000003, 0x5c831, 0xffffffffffffffff, 0x0) r5 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r6 = openat$nvram(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/nvram\x00', 0x0, 0x0) socket(0x0, 0x0, 0x0) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) pipe(0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, 0x0) r7 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) creat(0x0, 0x0) fanotify_mark(0xffffffffffffffff, 0x0, 0x0, r6, &(0x7f0000000300)='./file0\x00') ioctl$VIDIOC_G_TUNER(0xffffffffffffffff, 0xc054561d, &(0x7f0000000a80)={0x0, "a6cddeb02f407e24b899d9619a4e0a53e1c62827604c39fdaa27e21bee8a0ddd", 0x28ef3037c3f0dc97, 0x0, 0x0, 0x4, 0x4, 0x0, 0x0, 0x4}) write$UHID_GET_REPORT_REPLY(0xffffffffffffffff, &(0x7f0000000440)={0xa, {0x6, 0x2, 0x40}}, 0xa) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf32(r9, &(0x7f0000000340)=ANY=[], 0xff0e) splice(r8, 0x0, r9, 0x0, 0x100000000, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000d40)={'syz0\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200], [0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1]}, 0x45c) r10 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r10, &(0x7f00001da000/0x18000)=nil, 0x0, 0xfffffe72, 0x0, 0x0, 0xa00000000000000) 23:17:27 executing program 1: pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) write$P9_RVERSION(r1, &(0x7f0000000280)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302ed175d908c9205ed3b71ea13952fe4cbe6fe94815d4296f6e66de94f42cfa66862535188bc73114cc5b7e45adbc96ada2c96fcdf56ac7d8c5df0d6217f049413454c471de840cdf462e7b21af76c2dd85cfd2af275132f78a7a2a406f4f2c848cfe3e120ea0124ee07fabe1ab30355d1da3792ed03734c9d2311b8c492141e49bbd12988425f3e6416d98397d0c772f66625b0984a41111e8655de4c87c3ffc5a612004b19158174c2f52680b3bf2e418bc4e9b4a0b873e7f6926102d5cc7e6eebb2a8407b684607e441ca52eabfeca040254d87b627de25f8e6899de161d199468"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000000)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x26f) r3 = syz_open_dev$vcsn(&(0x7f0000000040)='/dev/vcs#\x00', 0xc4, 0x1) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff}, 0x0) r5 = syz_open_dev$video(&(0x7f0000000000)='/dev/video#\x00', 0x8447, 0x0) mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='9p\x00', 0x0, &(0x7f0000000180)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {'wfdno', 0x3d, r5}}) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY_ALL_USERS(r4, 0xc0406619, &(0x7f0000000180)={{0x3, 0x0, @identifier="d78b1d1234b271cf037d191f4b0914c8"}}) mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='9p\x00', 0x0, &(0x7f0000000400)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[{@access_uid={'access'}}]}}) 23:17:27 executing program 3: r0 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ttyprintk\x00', 0x0, 0x0) r1 = open(&(0x7f0000000040)='./file0\x00', 0x280840, 0x100) sendmsg$IPCTNL_MSG_TIMEOUT_GET(r1, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="a8000000010801010000000000000000e5ffff070500030088000000140004800800024000000006080002400000000344000480080003400000ffff0800094000000006080002400000ffff0800044000000fff08000540000000770800044000000009080003400000c1bd080005400000000105000300210500000500030084000000050003008800000005000300010000000900010073797a31000000000600024092000000"], 0xa8}}, 0x4) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') write$vhci(0xffffffffffffffff, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) dup3(r2, r0, 0x0) 23:17:27 executing program 5: r0 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ttyprintk\x00', 0x0, 0x0) r1 = open(&(0x7f0000000040)='./file0\x00', 0x280840, 0x100) sendmsg$IPCTNL_MSG_TIMEOUT_GET(r1, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="a8000000010801010000000000000000e5ffff070500030088000000140004800800024000000006080002400000000344000480080003400000ffff0800094000000006080002400000ffff0800044000000fff08000540000000770800044000000009080003400000c1bd080005400000000105000300210500000500030084000000050003008800000005000300010000000900010073797a31000000000600024092000000"], 0xa8}}, 0x4) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') dup3(r2, r0, 0x0) 23:17:27 executing program 2: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f00000001c0)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x83, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfbffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) syz_open_dev$dri(0x0, 0x43, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa10000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3b}], 0x3, 0x0, 0x0, 0x3b2) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000100)=ANY=[@ANYBLOB="9feb01001800e00000000300000000000000000903000000008e1504aef0279d6efc4c76785c5a0090a732b637b728780093d0810c77eaf7e6162351e390168e9dcab3c7e6928d9968a7b9c84b5f12683312daf4b231f7b846a095804970175504723d8815feb67089fb0e5363b167a5b1028dbc346710ad473536000000000000000000000000000000b8b5d3fecb07f9b0e7aba73c81bb3670c2a6c8098f265c0d8ef95193"], 0x0, 0x80}, 0x20) geteuid() r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x1000, &(0x7f0000000000/0x1000)=nil}) openat$mixer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/mixer\x00', 0x208800, 0x0) dup(0xffffffffffffffff) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x4, 0x0, 0xfff, 0x463, 0x0, 0xff, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x1000000], 0x1}) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x0, 0x31, 0xffffffffffffffff, 0x0) 23:17:27 executing program 4: perf_event_open(&(0x7f0000000340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) io_setup(0x3, &(0x7f0000000300)=0x0) r2 = socket$inet_smc(0x2b, 0x1, 0x0) io_submit(r1, 0x2, &(0x7f0000000700)=[&(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, r2, 0x0}, &(0x7f0000000200)={0x0, 0x0, 0x8, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}]) getsockopt$inet_IP_IPSEC_POLICY(r2, 0x0, 0x10, &(0x7f00000001c0)={{{@in, @in=@broadcast}}, {{@in=@loopback}, 0x0, @in=@initdev}}, &(0x7f0000000100)=0xfe80) r3 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0xc) setreuid(0x0, 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r4, &(0x7f0000000680)=ANY=[@ANYBLOB="1500000065ffff"], 0x7) mount$overlay(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x4402c, &(0x7f0000000480)=ANY=[@ANYBLOB='upperdir=./file0,index=on,metacopy=off,lowerdir=./file0,xino=off,nfs_export=off,nfs_export=on,index=on,obj_role=nfs_export=off,smackfshat=/dev/kvm\x00,defcontext=system_u,fowner=', @ANYRES64=0x0, @ANYBLOB="2c61707072826973652c00f1bdb0aae164a75321f47d0f6b14f108d1dd1a8501844e472c51f608a99261c8ca162b4f3b7101f3ae4ee768c85ab777b468c941bc482bc81037b3ae"]) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3000003, 0x5c831, 0xffffffffffffffff, 0x0) r5 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r6 = openat$nvram(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/nvram\x00', 0x0, 0x0) socket(0x0, 0x0, 0x0) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) pipe(0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, 0x0) r7 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) creat(0x0, 0x0) fanotify_mark(0xffffffffffffffff, 0x0, 0x0, r6, &(0x7f0000000300)='./file0\x00') ioctl$VIDIOC_G_TUNER(0xffffffffffffffff, 0xc054561d, &(0x7f0000000a80)={0x0, "a6cddeb02f407e24b899d9619a4e0a53e1c62827604c39fdaa27e21bee8a0ddd", 0x28ef3037c3f0dc97, 0x0, 0x0, 0x4, 0x4, 0x0, 0x0, 0x4}) write$UHID_GET_REPORT_REPLY(0xffffffffffffffff, &(0x7f0000000440)={0xa, {0x6, 0x2, 0x40}}, 0xa) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf32(r9, &(0x7f0000000340)=ANY=[], 0xff0e) splice(r8, 0x0, r9, 0x0, 0x100000000, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000d40)={'syz0\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200], [0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1]}, 0x45c) r10 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r10, &(0x7f00001da000/0x18000)=nil, 0x0, 0xfffffe72, 0x0, 0x0, 0xa00000000000000) 23:17:27 executing program 0: pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) write$P9_RVERSION(r1, &(0x7f0000000280)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302ed175d908c9205ed3b71ea13952fe4cbe6fe94815d4296f6e66de94f42cfa66862535188bc73114cc5b7e45adbc96ada2c96fcdf56ac7d8c5df0d6217f049413454c471de840cdf462e7b21af76c2dd85cfd2af275132f78a7a2a406f4f2c848cfe3e120ea0124ee07fabe1ab30355d1da3792ed03734c9d2311b8c492141e49bbd12988425f3e6416d98397d0c772f66625b0984a41111e8655de4c87c3ffc5a612004b19158174c2f52680b3bf2e418bc4e9b4a0b873e7f6926102d5cc7e6eebb2a8407b684607e441ca52eabfeca040254d87b627de25f8e6899de161d199468"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000000)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x26f) r3 = syz_open_dev$vcsn(&(0x7f0000000040)='/dev/vcs#\x00', 0xc4, 0x1) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff}, 0x0) r5 = syz_open_dev$video(&(0x7f0000000000)='/dev/video#\x00', 0x8447, 0x0) mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='9p\x00', 0x0, &(0x7f0000000180)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {'wfdno', 0x3d, r5}}) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY_ALL_USERS(r4, 0xc0406619, &(0x7f0000000180)={{0x3, 0x0, @identifier="d78b1d1234b271cf037d191f4b0914c8"}}) mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='9p\x00', 0x0, &(0x7f0000000400)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[{@access_uid={'access'}}]}}) 23:17:27 executing program 3: r0 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ttyprintk\x00', 0x0, 0x0) r1 = open(&(0x7f0000000040)='./file0\x00', 0x280840, 0x100) sendmsg$IPCTNL_MSG_TIMEOUT_GET(r1, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="a8000000010801010000000000000000e5ffff070500030088000000140004800800024000000006080002400000000344000480080003400000ffff0800094000000006080002400000ffff0800044000000fff08000540000000770800044000000009080003400000c1bd080005400000000105000300210500000500030084000000050003008800000005000300010000000900010073797a31000000000600024092000000"], 0xa8}}, 0x4) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') write$vhci(r2, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) dup3(0xffffffffffffffff, r0, 0x0) 23:17:27 executing program 3: r0 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ttyprintk\x00', 0x0, 0x0) r1 = open(&(0x7f0000000040)='./file0\x00', 0x280840, 0x100) sendmsg$IPCTNL_MSG_TIMEOUT_GET(r1, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="a8000000010801010000000000000000e5ffff070500030088000000140004800800024000000006080002400000000344000480080003400000ffff0800094000000006080002400000ffff0800044000000fff08000540000000770800044000000009080003400000c1bd080005400000000105000300210500000500030084000000050003008800000005000300010000000900010073797a31000000000600024092000000"], 0xa8}}, 0x4) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') write$vhci(r2, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) dup3(0xffffffffffffffff, r0, 0x0) [ 273.082860][ T9782] [U] ÿ€ 23:17:27 executing program 5: pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) write$P9_RVERSION(r1, &(0x7f0000000280)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302ed175d908c9205ed3b71ea13952fe4cbe6fe94815d4296f6e66de94f42cfa66862535188bc73114cc5b7e45adbc96ada2c96fcdf56ac7d8c5df0d6217f049413454c471de840cdf462e7b21af76c2dd85cfd2af275132f78a7a2a406f4f2c848cfe3e120ea0124ee07fabe1ab30355d1da3792ed03734c9d2311b8c492141e49bbd12988425f3e6416d98397d0c772f66625b0984a41111e8655de4c87c3ffc5a612004b19158174c2f52680b3bf2e418bc4e9b4a0b873e7f6926102d5cc7e6eebb2a8407b684607e441ca52eabfeca040254d87b627de25f8e6899de161d199468"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000000)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x26f) r3 = syz_open_dev$vcsn(&(0x7f0000000040)='/dev/vcs#\x00', 0xc4, 0x1) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff}, 0x0) r5 = syz_open_dev$video(&(0x7f0000000000)='/dev/video#\x00', 0x8447, 0x0) mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='9p\x00', 0x0, &(0x7f0000000180)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {'wfdno', 0x3d, r5}}) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY_ALL_USERS(r4, 0xc0406619, &(0x7f0000000180)={{0x3, 0x0, @identifier="d78b1d1234b271cf037d191f4b0914c8"}}) mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='9p\x00', 0x0, &(0x7f0000000400)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[{@access_uid={'access'}}]}}) 23:17:28 executing program 2: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f00000001c0)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x83, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfbffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) syz_open_dev$dri(0x0, 0x43, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa10000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3b}], 0x3, 0x0, 0x0, 0x3b2) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000100)=ANY=[@ANYBLOB="9feb01001800e00000000300000000000000000903000000008e1504aef0279d6efc4c76785c5a0090a732b637b728780093d0810c77eaf7e6162351e390168e9dcab3c7e6928d9968a7b9c84b5f12683312daf4b231f7b846a095804970175504723d8815feb67089fb0e5363b167a5b1028dbc346710ad473536000000000000000000000000000000b8b5d3fecb07f9b0e7aba73c81bb3670c2a6c8098f265c0d8ef95193"], 0x0, 0x80}, 0x20) geteuid() ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x1000, &(0x7f0000000000/0x1000)=nil}) openat$mixer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/mixer\x00', 0x208800, 0x0) dup(0xffffffffffffffff) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x0, 0x31, 0xffffffffffffffff, 0x0) [ 273.262308][ T9794] [U] ÿ€ 23:17:28 executing program 3: r0 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ttyprintk\x00', 0x0, 0x0) r1 = open(&(0x7f0000000040)='./file0\x00', 0x280840, 0x100) sendmsg$IPCTNL_MSG_TIMEOUT_GET(r1, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="a8000000010801010000000000000000e5ffff070500030088000000140004800800024000000006080002400000000344000480080003400000ffff0800094000000006080002400000ffff0800044000000fff08000540000000770800044000000009080003400000c1bd080005400000000105000300210500000500030084000000050003008800000005000300010000000900010073797a31000000000600024092000000"], 0xa8}}, 0x4) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') write$vhci(r2, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) dup3(0xffffffffffffffff, r0, 0x0) 23:17:28 executing program 3: r0 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ttyprintk\x00', 0x0, 0x0) open(&(0x7f0000000040)='./file0\x00', 0x280840, 0x100) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') write$vhci(r2, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) dup3(r1, r0, 0x0) [ 273.379209][ T9806] [U] ÿ€ [ 273.480768][ T9811] [U] ÿ€ 23:17:28 executing program 1: pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) write$P9_RVERSION(r1, &(0x7f0000000280)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302ed175d908c9205ed3b71ea13952fe4cbe6fe94815d4296f6e66de94f42cfa66862535188bc73114cc5b7e45adbc96ada2c96fcdf56ac7d8c5df0d6217f049413454c471de840cdf462e7b21af76c2dd85cfd2af275132f78a7a2a406f4f2c848cfe3e120ea0124ee07fabe1ab30355d1da3792ed03734c9d2311b8c492141e49bbd12988425f3e6416d98397d0c772f66625b0984a41111e8655de4c87c3ffc5a612004b19158174c2f52680b3bf2e418bc4e9b4a0b873e7f6926102d5cc7e6eebb2a8407b684607e441ca52eabfeca040254d87b627de25f8e6899de161d199468"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000000)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x26f) r3 = syz_open_dev$vcsn(&(0x7f0000000040)='/dev/vcs#\x00', 0xc4, 0x1) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff}, 0x0) r5 = syz_open_dev$video(&(0x7f0000000000)='/dev/video#\x00', 0x8447, 0x0) mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='9p\x00', 0x0, &(0x7f0000000180)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {'wfdno', 0x3d, r5}}) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY_ALL_USERS(r4, 0xc0406619, &(0x7f0000000180)={{0x3, 0x0, @identifier="d78b1d1234b271cf037d191f4b0914c8"}}) mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='9p\x00', 0x0, &(0x7f0000000400)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[{@access_uid={'access'}}]}}) 23:17:28 executing program 3: r0 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ttyprintk\x00', 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') write$vhci(r2, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) dup3(r1, r0, 0x0) 23:17:28 executing program 2: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f00000001c0)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x83, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfbffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) syz_open_dev$dri(0x0, 0x43, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa10000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3b}], 0x3, 0x0, 0x0, 0x3b2) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000100)=ANY=[@ANYBLOB="9feb01001800e00000000300000000000000000903000000008e1504aef0279d6efc4c76785c5a0090a732b637b728780093d0810c77eaf7e6162351e390168e9dcab3c7e6928d9968a7b9c84b5f12683312daf4b231f7b846a095804970175504723d8815feb67089fb0e5363b167a5b1028dbc346710ad473536000000000000000000000000000000b8b5d3fecb07f9b0e7aba73c81bb3670c2a6c8098f265c0d8ef95193"], 0x0, 0x80}, 0x20) geteuid() ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x1000, &(0x7f0000000000/0x1000)=nil}) openat$mixer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/mixer\x00', 0x208800, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x0, 0x31, 0xffffffffffffffff, 0x0) 23:17:28 executing program 4: perf_event_open(&(0x7f0000000340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) io_setup(0x3, &(0x7f0000000300)=0x0) r2 = socket$inet_smc(0x2b, 0x1, 0x0) io_submit(r1, 0x2, &(0x7f0000000700)=[&(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, r2, 0x0}, &(0x7f0000000200)={0x0, 0x0, 0x8, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}]) getsockopt$inet_IP_IPSEC_POLICY(r2, 0x0, 0x10, &(0x7f00000001c0)={{{@in, @in=@broadcast}}, {{@in=@loopback}, 0x0, @in=@initdev}}, &(0x7f0000000100)=0xfe80) r3 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0xc) setreuid(0x0, 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r4, &(0x7f0000000680)=ANY=[@ANYBLOB="1500000065ffff"], 0x7) mount$overlay(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x4402c, &(0x7f0000000480)=ANY=[@ANYBLOB='upperdir=./file0,index=on,metacopy=off,lowerdir=./file0,xino=off,nfs_export=off,nfs_export=on,index=on,obj_role=nfs_export=off,smackfshat=/dev/kvm\x00,defcontext=system_u,fowner=', @ANYRES64=0x0, @ANYBLOB="2c61707072826973652c00f1bdb0aae164a75321f47d0f6b14f108d1dd1a8501844e472c51f608a99261c8ca162b4f3b7101f3ae4ee768c85ab777b468c941bc482bc81037b3ae"]) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3000003, 0x5c831, 0xffffffffffffffff, 0x0) r5 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r6 = openat$nvram(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/nvram\x00', 0x0, 0x0) socket(0x0, 0x0, 0x0) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) pipe(0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, 0x0) r7 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) creat(0x0, 0x0) fanotify_mark(0xffffffffffffffff, 0x0, 0x0, r6, &(0x7f0000000300)='./file0\x00') ioctl$VIDIOC_G_TUNER(0xffffffffffffffff, 0xc054561d, &(0x7f0000000a80)={0x0, "a6cddeb02f407e24b899d9619a4e0a53e1c62827604c39fdaa27e21bee8a0ddd", 0x28ef3037c3f0dc97, 0x0, 0x0, 0x4, 0x4, 0x0, 0x0, 0x4}) write$UHID_GET_REPORT_REPLY(0xffffffffffffffff, &(0x7f0000000440)={0xa, {0x6, 0x2, 0x40}}, 0xa) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf32(r9, &(0x7f0000000340)=ANY=[], 0xff0e) splice(r8, 0x0, r9, 0x0, 0x100000000, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000d40)={'syz0\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200], [0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1]}, 0x45c) ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) 23:17:28 executing program 0: pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) write$P9_RVERSION(r1, &(0x7f0000000280)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302ed175d908c9205ed3b71ea13952fe4cbe6fe94815d4296f6e66de94f42cfa66862535188bc73114cc5b7e45adbc96ada2c96fcdf56ac7d8c5df0d6217f049413454c471de840cdf462e7b21af76c2dd85cfd2af275132f78a7a2a406f4f2c848cfe3e120ea0124ee07fabe1ab30355d1da3792ed03734c9d2311b8c492141e49bbd12988425f3e6416d98397d0c772f66625b0984a41111e8655de4c87c3ffc5a612004b19158174c2f52680b3bf2e418bc4e9b4a0b873e7f6926102d5cc7e6eebb2a8407b684607e441ca52eabfeca040254d87b627de25f8e6899de161d199468"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000000)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x26f) r3 = syz_open_dev$vcsn(&(0x7f0000000040)='/dev/vcs#\x00', 0xc4, 0x1) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff}, 0x0) r5 = syz_open_dev$video(&(0x7f0000000000)='/dev/video#\x00', 0x8447, 0x0) mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='9p\x00', 0x0, &(0x7f0000000180)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {'wfdno', 0x3d, r5}}) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY_ALL_USERS(r4, 0xc0406619, &(0x7f0000000180)={{0x3, 0x0, @identifier="d78b1d1234b271cf037d191f4b0914c8"}}) mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='9p\x00', 0x0, &(0x7f0000000400)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[{@access_uid={'access'}}]}}) 23:17:28 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') write$vhci(r1, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) dup3(r0, 0xffffffffffffffff, 0x0) [ 274.039887][ T9818] [U] ÿ€ 23:17:28 executing program 5: pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) write$P9_RVERSION(r1, &(0x7f0000000280)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302ed175d908c9205ed3b71ea13952fe4cbe6fe94815d4296f6e66de94f42cfa66862535188bc73114cc5b7e45adbc96ada2c96fcdf56ac7d8c5df0d6217f049413454c471de840cdf462e7b21af76c2dd85cfd2af275132f78a7a2a406f4f2c848cfe3e120ea0124ee07fabe1ab30355d1da3792ed03734c9d2311b8c492141e49bbd12988425f3e6416d98397d0c772f66625b0984a41111e8655de4c87c3ffc5a612004b19158174c2f52680b3bf2e418bc4e9b4a0b873e7f6926102d5cc7e6eebb2a8407b684607e441ca52eabfeca040254d87b627de25f8e6899de161d199468"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000000)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x26f) r3 = syz_open_dev$vcsn(&(0x7f0000000040)='/dev/vcs#\x00', 0xc4, 0x1) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff}, 0x0) r5 = syz_open_dev$video(&(0x7f0000000000)='/dev/video#\x00', 0x8447, 0x0) mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='9p\x00', 0x0, &(0x7f0000000180)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {'wfdno', 0x3d, r5}}) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY_ALL_USERS(r4, 0xc0406619, &(0x7f0000000180)={{0x3, 0x0, @identifier="d78b1d1234b271cf037d191f4b0914c8"}}) mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='9p\x00', 0x0, &(0x7f0000000400)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[{@access_uid={'access'}}]}}) 23:17:29 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') write$vhci(r1, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) dup3(r0, 0xffffffffffffffff, 0x0) 23:17:29 executing program 2: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f00000001c0)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x83, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfbffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) syz_open_dev$dri(0x0, 0x43, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa10000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3b}], 0x3, 0x0, 0x0, 0x3b2) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000100)=ANY=[@ANYBLOB="9feb01001800e00000000300000000000000000903000000008e1504aef0279d6efc4c76785c5a0090a732b637b728780093d0810c77eaf7e6162351e390168e9dcab3c7e6928d9968a7b9c84b5f12683312daf4b231f7b846a095804970175504723d8815feb67089fb0e5363b167a5b1028dbc346710ad473536000000000000000000000000000000b8b5d3fecb07f9b0e7aba73c81bb3670c2a6c8098f265c0d8ef95193"], 0x0, 0x80}, 0x20) geteuid() ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x1000, &(0x7f0000000000/0x1000)=nil}) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x0, 0x31, 0xffffffffffffffff, 0x0) 23:17:29 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') write$vhci(r1, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) dup3(r0, 0xffffffffffffffff, 0x0) 23:17:29 executing program 4: perf_event_open(&(0x7f0000000340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) io_setup(0x3, &(0x7f0000000300)=0x0) r2 = socket$inet_smc(0x2b, 0x1, 0x0) io_submit(r1, 0x2, &(0x7f0000000700)=[&(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, r2, 0x0}, &(0x7f0000000200)={0x0, 0x0, 0x8, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}]) getsockopt$inet_IP_IPSEC_POLICY(r2, 0x0, 0x10, &(0x7f00000001c0)={{{@in, @in=@broadcast}}, {{@in=@loopback}, 0x0, @in=@initdev}}, &(0x7f0000000100)=0xfe80) r3 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0xc) setreuid(0x0, 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r4, &(0x7f0000000680)=ANY=[@ANYBLOB="1500000065ffff"], 0x7) mount$overlay(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x4402c, &(0x7f0000000480)=ANY=[@ANYBLOB='upperdir=./file0,index=on,metacopy=off,lowerdir=./file0,xino=off,nfs_export=off,nfs_export=on,index=on,obj_role=nfs_export=off,smackfshat=/dev/kvm\x00,defcontext=system_u,fowner=', @ANYRES64=0x0, @ANYBLOB="2c61707072826973652c00f1bdb0aae164a75321f47d0f6b14f108d1dd1a8501844e472c51f608a99261c8ca162b4f3b7101f3ae4ee768c85ab777b468c941bc482bc81037b3ae"]) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3000003, 0x5c831, 0xffffffffffffffff, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r5 = openat$nvram(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/nvram\x00', 0x0, 0x0) socket(0x0, 0x0, 0x0) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) pipe(0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, 0x0) r6 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) creat(0x0, 0x0) fanotify_mark(0xffffffffffffffff, 0x0, 0x0, r5, &(0x7f0000000300)='./file0\x00') ioctl$VIDIOC_G_TUNER(0xffffffffffffffff, 0xc054561d, &(0x7f0000000a80)={0x0, "a6cddeb02f407e24b899d9619a4e0a53e1c62827604c39fdaa27e21bee8a0ddd", 0x28ef3037c3f0dc97, 0x0, 0x0, 0x4, 0x4, 0x0, 0x0, 0x4}) write$UHID_GET_REPORT_REPLY(0xffffffffffffffff, &(0x7f0000000440)={0xa, {0x6, 0x2, 0x40}}, 0xa) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf32(r8, &(0x7f0000000340)=ANY=[], 0xff0e) splice(r7, 0x0, r8, 0x0, 0x100000000, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000d40)={'syz0\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200], [0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1]}, 0x45c) 23:17:29 executing program 3: r0 = openat$ttyprintk(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') write$vhci(r2, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) dup3(r1, r0, 0x0) 23:17:29 executing program 3: r0 = openat$ttyprintk(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') write$vhci(r2, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) dup3(r1, r0, 0x0) 23:17:29 executing program 1: pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) write$P9_RVERSION(r1, &(0x7f0000000280)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302ed175d908c9205ed3b71ea13952fe4cbe6fe94815d4296f6e66de94f42cfa66862535188bc73114cc5b7e45adbc96ada2c96fcdf56ac7d8c5df0d6217f049413454c471de840cdf462e7b21af76c2dd85cfd2af275132f78a7a2a406f4f2c848cfe3e120ea0124ee07fabe1ab30355d1da3792ed03734c9d2311b8c492141e49bbd12988425f3e6416d98397d0c772f66625b0984a41111e8655de4c87c3ffc5a612004b19158174c2f52680b3bf2e418bc4e9b4a0b873e7f6926102d5cc7e6eebb2a8407b684607e441ca52eabfeca040254d87b627de25f8e6899de161d199468"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000000)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x26f) r3 = syz_open_dev$vcsn(&(0x7f0000000040)='/dev/vcs#\x00', 0xc4, 0x1) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff}, 0x0) r5 = syz_open_dev$video(&(0x7f0000000000)='/dev/video#\x00', 0x8447, 0x0) mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='9p\x00', 0x0, &(0x7f0000000180)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {'wfdno', 0x3d, r5}}) mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='9p\x00', 0x0, &(0x7f0000000400)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[{@access_uid={'access'}}]}}) 23:17:29 executing program 2: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f00000001c0)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x83, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfbffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) syz_open_dev$dri(0x0, 0x43, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa10000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3b}], 0x3, 0x0, 0x0, 0x3b2) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000100)=ANY=[@ANYBLOB="9feb01001800e00000000300000000000000000903000000008e1504aef0279d6efc4c76785c5a0090a732b637b728780093d0810c77eaf7e6162351e390168e9dcab3c7e6928d9968a7b9c84b5f12683312daf4b231f7b846a095804970175504723d8815feb67089fb0e5363b167a5b1028dbc346710ad473536000000000000000000000000000000b8b5d3fecb07f9b0e7aba73c81bb3670c2a6c8098f265c0d8ef95193"], 0x0, 0x80}, 0x20) geteuid() ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x0, 0x31, 0xffffffffffffffff, 0x0) 23:17:29 executing program 0: pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) write$P9_RVERSION(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302ed175d908c9205ed3b71ea13952fe4cbe6fe94815d4296f6e66de94f42cfa66862535188bc73114cc5b7e45adbc96ada2c96fcdf56ac7d8c5df0d6217f049413454c471de840cdf462e7b21af76c2dd85cfd2af275132f78a7a2a406f4f2c848cfe3e120ea0124ee07fabe1ab30355d1da3792ed03734c9d2311b8c492141e49bbd12988425f3e6416d98397d0c772f66625b0984a41111e8655de4c87c3ffc5a612004b19158174c2f52680b3bf2e418bc4e9b4a0b873e7f6926102d5cc7e6eebb2a8407b684607e441ca52eabfeca040254d87b627de25f8e6899de161d199468"], 0x15) r1 = dup(r0) write$FUSE_BMAP(r1, &(0x7f0000000000)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r1, &(0x7f00000000c0)={0x14c}, 0x26f) syz_open_dev$vcsn(&(0x7f0000000040)='/dev/vcs#\x00', 0xc4, 0x1) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff}, 0x0) r3 = syz_open_dev$video(&(0x7f0000000000)='/dev/video#\x00', 0x8447, 0x0) mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='9p\x00', 0x0, &(0x7f0000000180)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r3}}) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY_ALL_USERS(r2, 0xc0406619, &(0x7f0000000180)={{0x3, 0x0, @identifier="d78b1d1234b271cf037d191f4b0914c8"}}) 23:17:29 executing program 4: perf_event_open(&(0x7f0000000340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) io_setup(0x3, &(0x7f0000000300)=0x0) r2 = socket$inet_smc(0x2b, 0x1, 0x0) io_submit(r1, 0x2, &(0x7f0000000700)=[&(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, r2, 0x0}, &(0x7f0000000200)={0x0, 0x0, 0x8, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}]) getsockopt$inet_IP_IPSEC_POLICY(r2, 0x0, 0x10, &(0x7f00000001c0)={{{@in, @in=@broadcast}}, {{@in=@loopback}, 0x0, @in=@initdev}}, &(0x7f0000000100)=0xfe80) r3 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0xc) setreuid(0x0, 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r4, &(0x7f0000000680)=ANY=[@ANYBLOB="1500000065ffff"], 0x7) mount$overlay(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x4402c, &(0x7f0000000480)=ANY=[@ANYBLOB='upperdir=./file0,index=on,metacopy=off,lowerdir=./file0,xino=off,nfs_export=off,nfs_export=on,index=on,obj_role=nfs_export=off,smackfshat=/dev/kvm\x00,defcontext=system_u,fowner=', @ANYRES64=0x0, @ANYBLOB="2c61707072826973652c00f1bdb0aae164a75321f47d0f6b14f108d1dd1a8501844e472c51f608a99261c8ca162b4f3b7101f3ae4ee768c85ab777b468c941bc482bc81037b3ae"]) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3000003, 0x5c831, 0xffffffffffffffff, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r5 = openat$nvram(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/nvram\x00', 0x0, 0x0) socket(0x0, 0x0, 0x0) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) pipe(0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, 0x0) r6 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) creat(0x0, 0x0) fanotify_mark(0xffffffffffffffff, 0x0, 0x0, r5, &(0x7f0000000300)='./file0\x00') ioctl$VIDIOC_G_TUNER(0xffffffffffffffff, 0xc054561d, &(0x7f0000000a80)={0x0, "a6cddeb02f407e24b899d9619a4e0a53e1c62827604c39fdaa27e21bee8a0ddd", 0x28ef3037c3f0dc97, 0x0, 0x0, 0x4, 0x4, 0x0, 0x0, 0x4}) write$UHID_GET_REPORT_REPLY(0xffffffffffffffff, &(0x7f0000000440)={0xa, {0x6, 0x2, 0x40}}, 0xa) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf32(r8, &(0x7f0000000340)=ANY=[], 0xff0e) splice(r7, 0x0, r8, 0x0, 0x100000000, 0x0) 23:17:29 executing program 3: r0 = openat$ttyprintk(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') write$vhci(r2, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) dup3(r1, r0, 0x0) 23:17:30 executing program 5: pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) write$P9_RVERSION(r1, &(0x7f0000000280)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302ed175d908c9205ed3b71ea13952fe4cbe6fe94815d4296f6e66de94f42cfa66862535188bc73114cc5b7e45adbc96ada2c96fcdf56ac7d8c5df0d6217f049413454c471de840cdf462e7b21af76c2dd85cfd2af275132f78a7a2a406f4f2c848cfe3e120ea0124ee07fabe1ab30355d1da3792ed03734c9d2311b8c492141e49bbd12988425f3e6416d98397d0c772f66625b0984a41111e8655de4c87c3ffc5a612004b19158174c2f52680b3bf2e418bc4e9b4a0b873e7f6926102d5cc7e6eebb2a8407b684607e441ca52eabfeca040254d87b627de25f8e6899de161d199468"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000000)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x26f) r3 = syz_open_dev$vcsn(&(0x7f0000000040)='/dev/vcs#\x00', 0xc4, 0x1) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff}, 0x0) r5 = syz_open_dev$video(&(0x7f0000000000)='/dev/video#\x00', 0x8447, 0x0) mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='9p\x00', 0x0, &(0x7f0000000180)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {'wfdno', 0x3d, r5}}) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY_ALL_USERS(r4, 0xc0406619, &(0x7f0000000180)={{0x3, 0x0, @identifier="d78b1d1234b271cf037d191f4b0914c8"}}) mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='9p\x00', 0x0, &(0x7f0000000400)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[{@access_uid={'access'}}]}}) 23:17:30 executing program 3: r0 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ttyprintk\x00', 0x0, 0x0) r1 = syz_open_procfs(0x0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') write$vhci(r2, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) dup3(r1, r0, 0x0) 23:17:30 executing program 3: r0 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ttyprintk\x00', 0x0, 0x0) r1 = syz_open_procfs(0x0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') write$vhci(r2, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) dup3(r1, r0, 0x0) [ 275.314119][ T9888] [U] ÿ€ 23:17:30 executing program 2: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f00000001c0)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x83, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfbffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) syz_open_dev$dri(0x0, 0x43, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa10000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3b}], 0x3, 0x0, 0x0, 0x3b2) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000100)=ANY=[@ANYBLOB="9feb01001800e00000000300000000000000000903000000008e1504aef0279d6efc4c76785c5a0090a732b637b728780093d0810c77eaf7e6162351e390168e9dcab3c7e6928d9968a7b9c84b5f12683312daf4b231f7b846a095804970175504723d8815feb67089fb0e5363b167a5b1028dbc346710ad473536000000000000000000000000000000b8b5d3fecb07f9b0e7aba73c81bb3670c2a6c8098f265c0d8ef95193"], 0x0, 0x80}, 0x20) geteuid() mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x0, 0x31, 0xffffffffffffffff, 0x0) 23:17:30 executing program 4: perf_event_open(&(0x7f0000000340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) io_setup(0x3, &(0x7f0000000300)=0x0) r2 = socket$inet_smc(0x2b, 0x1, 0x0) io_submit(r1, 0x2, &(0x7f0000000700)=[&(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, r2, 0x0}, &(0x7f0000000200)={0x0, 0x0, 0x8, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}]) getsockopt$inet_IP_IPSEC_POLICY(r2, 0x0, 0x10, &(0x7f00000001c0)={{{@in, @in=@broadcast}}, {{@in=@loopback}, 0x0, @in=@initdev}}, &(0x7f0000000100)=0xfe80) r3 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0xc) setreuid(0x0, 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r4, &(0x7f0000000680)=ANY=[@ANYBLOB="1500000065ffff"], 0x7) mount$overlay(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x4402c, &(0x7f0000000480)=ANY=[@ANYBLOB='upperdir=./file0,index=on,metacopy=off,lowerdir=./file0,xino=off,nfs_export=off,nfs_export=on,index=on,obj_role=nfs_export=off,smackfshat=/dev/kvm\x00,defcontext=system_u,fowner=', @ANYRES64=0x0, @ANYBLOB="2c61707072826973652c00f1bdb0aae164a75321f47d0f6b14f108d1dd1a8501844e472c51f608a99261c8ca162b4f3b7101f3ae4ee768c85ab777b468c941bc482bc81037b3ae"]) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3000003, 0x5c831, 0xffffffffffffffff, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r5 = openat$nvram(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/nvram\x00', 0x0, 0x0) socket(0x0, 0x0, 0x0) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) pipe(0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, 0x0) r6 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) creat(0x0, 0x0) fanotify_mark(0xffffffffffffffff, 0x0, 0x0, r5, &(0x7f0000000300)='./file0\x00') ioctl$VIDIOC_G_TUNER(0xffffffffffffffff, 0xc054561d, &(0x7f0000000a80)={0x0, "a6cddeb02f407e24b899d9619a4e0a53e1c62827604c39fdaa27e21bee8a0ddd", 0x28ef3037c3f0dc97, 0x0, 0x0, 0x4, 0x4, 0x0, 0x0, 0x4}) write$UHID_GET_REPORT_REPLY(0xffffffffffffffff, &(0x7f0000000440)={0xa, {0x6, 0x2, 0x40}}, 0xa) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf32(r8, &(0x7f0000000340)=ANY=[], 0xff0e) splice(r7, 0x0, r8, 0x0, 0x100000000, 0x0) [ 275.396024][ T9891] [U] ÿ€ 23:17:30 executing program 3: r0 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ttyprintk\x00', 0x0, 0x0) r1 = syz_open_procfs(0x0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') write$vhci(r2, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) dup3(r1, r0, 0x0) [ 275.573094][ T9905] [U] ÿ€ 23:17:30 executing program 3: r0 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ttyprintk\x00', 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') r2 = syz_open_procfs(0x0, 0x0) write$vhci(r2, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) dup3(r1, r0, 0x0) 23:17:30 executing program 1: pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) write$P9_RVERSION(r1, &(0x7f0000000280)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302ed175d908c9205ed3b71ea13952fe4cbe6fe94815d4296f6e66de94f42cfa66862535188bc73114cc5b7e45adbc96ada2c96fcdf56ac7d8c5df0d6217f049413454c471de840cdf462e7b21af76c2dd85cfd2af275132f78a7a2a406f4f2c848cfe3e120ea0124ee07fabe1ab30355d1da3792ed03734c9d2311b8c492141e49bbd12988425f3e6416d98397d0c772f66625b0984a41111e8655de4c87c3ffc5a612004b19158174c2f52680b3bf2e418bc4e9b4a0b873e7f6926102d5cc7e6eebb2a8407b684607e441ca52eabfeca040254d87b627de25f8e6899de161d199468"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000000)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x26f) r3 = syz_open_dev$vcsn(&(0x7f0000000040)='/dev/vcs#\x00', 0xc4, 0x1) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff}, 0x0) r5 = syz_open_dev$video(&(0x7f0000000000)='/dev/video#\x00', 0x8447, 0x0) mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='9p\x00', 0x0, &(0x7f0000000180)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {'wfdno', 0x3d, r5}}) mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='9p\x00', 0x0, &(0x7f0000000400)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[{@access_uid={'access'}}]}}) 23:17:30 executing program 2: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f00000001c0)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x83, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfbffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) syz_open_dev$dri(0x0, 0x43, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa10000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3b}], 0x3, 0x0, 0x0, 0x3b2) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000100)=ANY=[@ANYBLOB="9feb01001800e00000000300000000000000000903000000008e1504aef0279d6efc4c76785c5a0090a732b637b728780093d0810c77eaf7e6162351e390168e9dcab3c7e6928d9968a7b9c84b5f12683312daf4b231f7b846a095804970175504723d8815feb67089fb0e5363b167a5b1028dbc346710ad473536000000000000000000000000000000b8b5d3fecb07f9b0e7aba73c81bb3670c2a6c8098f265c0d8ef95193"], 0x0, 0x80}, 0x20) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x0, 0x31, 0xffffffffffffffff, 0x0) 23:17:30 executing program 3: r0 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ttyprintk\x00', 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') r2 = syz_open_procfs(0x0, 0x0) write$vhci(r2, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) dup3(r1, r0, 0x0) 23:17:30 executing program 4: perf_event_open(&(0x7f0000000340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) io_setup(0x3, &(0x7f0000000300)=0x0) r2 = socket$inet_smc(0x2b, 0x1, 0x0) io_submit(r1, 0x2, &(0x7f0000000700)=[&(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, r2, 0x0}, &(0x7f0000000200)={0x0, 0x0, 0x8, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}]) getsockopt$inet_IP_IPSEC_POLICY(r2, 0x0, 0x10, &(0x7f00000001c0)={{{@in, @in=@broadcast}}, {{@in=@loopback}, 0x0, @in=@initdev}}, &(0x7f0000000100)=0xfe80) r3 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0xc) setreuid(0x0, 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r4, &(0x7f0000000680)=ANY=[@ANYBLOB="1500000065ffff"], 0x7) mount$overlay(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x4402c, &(0x7f0000000480)=ANY=[@ANYBLOB='upperdir=./file0,index=on,metacopy=off,lowerdir=./file0,xino=off,nfs_export=off,nfs_export=on,index=on,obj_role=nfs_export=off,smackfshat=/dev/kvm\x00,defcontext=system_u,fowner=', @ANYRES64=0x0, @ANYBLOB="2c61707072826973652c00f1bdb0aae164a75321f47d0f6b14f108d1dd1a8501844e472c51f608a99261c8ca162b4f3b7101f3ae4ee768c85ab777b468c941bc482bc81037b3ae"]) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3000003, 0x5c831, 0xffffffffffffffff, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r5 = openat$nvram(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/nvram\x00', 0x0, 0x0) socket(0x0, 0x0, 0x0) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) pipe(0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, 0x0) r6 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) creat(0x0, 0x0) fanotify_mark(0xffffffffffffffff, 0x0, 0x0, r5, &(0x7f0000000300)='./file0\x00') ioctl$VIDIOC_G_TUNER(0xffffffffffffffff, 0xc054561d, &(0x7f0000000a80)={0x0, "a6cddeb02f407e24b899d9619a4e0a53e1c62827604c39fdaa27e21bee8a0ddd", 0x28ef3037c3f0dc97, 0x0, 0x0, 0x4, 0x4, 0x0, 0x0, 0x4}) write$UHID_GET_REPORT_REPLY(0xffffffffffffffff, &(0x7f0000000440)={0xa, {0x6, 0x2, 0x40}}, 0xa) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf32(r7, &(0x7f0000000340)=ANY=[], 0xff0e) 23:17:30 executing program 0: pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) write$P9_RVERSION(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302ed175d908c9205ed3b71ea13952fe4cbe6fe94815d4296f6e66de94f42cfa66862535188bc73114cc5b7e45adbc96ada2c96fcdf56ac7d8c5df0d6217f049413454c471de840cdf462e7b21af76c2dd85cfd2af275132f78a7a2a406f4f2c848cfe3e120ea0124ee07fabe1ab30355d1da3792ed03734c9d2311b8c492141e49bbd12988425f3e6416d98397d0c772f66625b0984a41111e8655de4c87c3ffc5a612004b19158174c2f52680b3bf2e418bc4e9b4a0b873e7f6926102d5cc7e6eebb2a8407b684607e441ca52eabfeca040254d87b627de25f8e6899de161d199468"], 0x15) r1 = dup(r0) write$FUSE_BMAP(r1, &(0x7f0000000000)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r1, &(0x7f00000000c0)={0x14c}, 0x26f) syz_open_dev$vcsn(&(0x7f0000000040)='/dev/vcs#\x00', 0xc4, 0x1) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff}, 0x0) r3 = syz_open_dev$video(&(0x7f0000000000)='/dev/video#\x00', 0x8447, 0x0) mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='9p\x00', 0x0, &(0x7f0000000180)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r3}}) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY_ALL_USERS(r2, 0xc0406619, &(0x7f0000000180)={{0x3, 0x0, @identifier="d78b1d1234b271cf037d191f4b0914c8"}}) 23:17:31 executing program 5: pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) write$P9_RVERSION(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302ed175d908c9205ed3b71ea13952fe4cbe6fe94815d4296f6e66de94f42cfa66862535188bc73114cc5b7e45adbc96ada2c96fcdf56ac7d8c5df0d6217f049413454c471de840cdf462e7b21af76c2dd85cfd2af275132f78a7a2a406f4f2c848cfe3e120ea0124ee07fabe1ab30355d1da3792ed03734c9d2311b8c492141e49bbd12988425f3e6416d98397d0c772f66625b0984a41111e8655de4c87c3ffc5a612004b19158174c2f52680b3bf2e418bc4e9b4a0b873e7f6926102d5cc7e6eebb2a8407b684607e441ca52eabfeca040254d87b627de25f8e6899de161d199468"], 0x15) r1 = dup(r0) write$FUSE_BMAP(r1, &(0x7f0000000000)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r1, &(0x7f00000000c0)={0x14c}, 0x26f) syz_open_dev$vcsn(&(0x7f0000000040)='/dev/vcs#\x00', 0xc4, 0x1) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff}, 0x0) r3 = syz_open_dev$video(&(0x7f0000000000)='/dev/video#\x00', 0x8447, 0x0) mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='9p\x00', 0x0, &(0x7f0000000180)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r3}}) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY_ALL_USERS(r2, 0xc0406619, &(0x7f0000000180)={{0x3, 0x0, @identifier="d78b1d1234b271cf037d191f4b0914c8"}}) 23:17:31 executing program 3: r0 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ttyprintk\x00', 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') r2 = syz_open_procfs(0x0, 0x0) write$vhci(r2, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) dup3(r1, r0, 0x0) 23:17:31 executing program 2: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f00000001c0)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x83, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfbffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) syz_open_dev$dri(0x0, 0x43, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa10000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3b}], 0x3, 0x0, 0x0, 0x3b2) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x0, 0x31, 0xffffffffffffffff, 0x0) 23:17:31 executing program 4: perf_event_open(&(0x7f0000000340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) io_setup(0x3, &(0x7f0000000300)=0x0) r2 = socket$inet_smc(0x2b, 0x1, 0x0) io_submit(r1, 0x2, &(0x7f0000000700)=[&(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, r2, 0x0}, &(0x7f0000000200)={0x0, 0x0, 0x8, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}]) getsockopt$inet_IP_IPSEC_POLICY(r2, 0x0, 0x10, &(0x7f00000001c0)={{{@in, @in=@broadcast}}, {{@in=@loopback}, 0x0, @in=@initdev}}, &(0x7f0000000100)=0xfe80) r3 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0xc) setreuid(0x0, 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r4, &(0x7f0000000680)=ANY=[@ANYBLOB="1500000065ffff"], 0x7) mount$overlay(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x4402c, &(0x7f0000000480)=ANY=[@ANYBLOB='upperdir=./file0,index=on,metacopy=off,lowerdir=./file0,xino=off,nfs_export=off,nfs_export=on,index=on,obj_role=nfs_export=off,smackfshat=/dev/kvm\x00,defcontext=system_u,fowner=', @ANYRES64=0x0, @ANYBLOB="2c61707072826973652c00f1bdb0aae164a75321f47d0f6b14f108d1dd1a8501844e472c51f608a99261c8ca162b4f3b7101f3ae4ee768c85ab777b468c941bc482bc81037b3ae"]) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3000003, 0x5c831, 0xffffffffffffffff, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r5 = openat$nvram(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/nvram\x00', 0x0, 0x0) socket(0x0, 0x0, 0x0) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) pipe(0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, 0x0) r6 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) creat(0x0, 0x0) fanotify_mark(0xffffffffffffffff, 0x0, 0x0, r5, &(0x7f0000000300)='./file0\x00') ioctl$VIDIOC_G_TUNER(0xffffffffffffffff, 0xc054561d, &(0x7f0000000a80)={0x0, "a6cddeb02f407e24b899d9619a4e0a53e1c62827604c39fdaa27e21bee8a0ddd", 0x28ef3037c3f0dc97, 0x0, 0x0, 0x4, 0x4, 0x0, 0x0, 0x4}) write$UHID_GET_REPORT_REPLY(0xffffffffffffffff, &(0x7f0000000440)={0xa, {0x6, 0x2, 0x40}}, 0xa) pipe(&(0x7f00000000c0)) 23:17:31 executing program 3: r0 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ttyprintk\x00', 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') write$vhci(0xffffffffffffffff, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) dup3(r1, r0, 0x0) 23:17:31 executing program 2: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f00000001c0)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x83, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfbffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) syz_open_dev$dri(0x0, 0x43, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x0, 0x31, 0xffffffffffffffff, 0x0) 23:17:31 executing program 3: r0 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ttyprintk\x00', 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') write$vhci(0xffffffffffffffff, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) dup3(r1, r0, 0x0) 23:17:31 executing program 3: r0 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ttyprintk\x00', 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') write$vhci(0xffffffffffffffff, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) dup3(r1, r0, 0x0) 23:17:31 executing program 4: perf_event_open(&(0x7f0000000340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) io_setup(0x3, &(0x7f0000000300)=0x0) r2 = socket$inet_smc(0x2b, 0x1, 0x0) io_submit(r1, 0x2, &(0x7f0000000700)=[&(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, r2, 0x0}, &(0x7f0000000200)={0x0, 0x0, 0x8, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}]) getsockopt$inet_IP_IPSEC_POLICY(r2, 0x0, 0x10, &(0x7f00000001c0)={{{@in, @in=@broadcast}}, {{@in=@loopback}, 0x0, @in=@initdev}}, &(0x7f0000000100)=0xfe80) r3 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0xc) setreuid(0x0, 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r4, &(0x7f0000000680)=ANY=[@ANYBLOB="1500000065ffff"], 0x7) mount$overlay(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x4402c, &(0x7f0000000480)=ANY=[@ANYBLOB='upperdir=./file0,index=on,metacopy=off,lowerdir=./file0,xino=off,nfs_export=off,nfs_export=on,index=on,obj_role=nfs_export=off,smackfshat=/dev/kvm\x00,defcontext=system_u,fowner=', @ANYRES64=0x0, @ANYBLOB="2c61707072826973652c00f1bdb0aae164a75321f47d0f6b14f108d1dd1a8501844e472c51f608a99261c8ca162b4f3b7101f3ae4ee768c85ab777b468c941bc482bc81037b3ae"]) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3000003, 0x5c831, 0xffffffffffffffff, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r5 = openat$nvram(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/nvram\x00', 0x0, 0x0) socket(0x0, 0x0, 0x0) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) pipe(0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, 0x0) r6 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) creat(0x0, 0x0) fanotify_mark(0xffffffffffffffff, 0x0, 0x0, r5, &(0x7f0000000300)='./file0\x00') ioctl$VIDIOC_G_TUNER(0xffffffffffffffff, 0xc054561d, &(0x7f0000000a80)={0x0, "a6cddeb02f407e24b899d9619a4e0a53e1c62827604c39fdaa27e21bee8a0ddd", 0x28ef3037c3f0dc97, 0x0, 0x0, 0x4, 0x4, 0x0, 0x0, 0x4}) write$UHID_GET_REPORT_REPLY(0xffffffffffffffff, &(0x7f0000000440)={0xa, {0x6, 0x2, 0x40}}, 0xa) 23:17:31 executing program 1: pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) write$P9_RVERSION(r1, &(0x7f0000000280)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302ed175d908c9205ed3b71ea13952fe4cbe6fe94815d4296f6e66de94f42cfa66862535188bc73114cc5b7e45adbc96ada2c96fcdf56ac7d8c5df0d6217f049413454c471de840cdf462e7b21af76c2dd85cfd2af275132f78a7a2a406f4f2c848cfe3e120ea0124ee07fabe1ab30355d1da3792ed03734c9d2311b8c492141e49bbd12988425f3e6416d98397d0c772f66625b0984a41111e8655de4c87c3ffc5a612004b19158174c2f52680b3bf2e418bc4e9b4a0b873e7f6926102d5cc7e6eebb2a8407b684607e441ca52eabfeca040254d87b627de25f8e6899de161d199468"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000000)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x26f) r3 = syz_open_dev$vcsn(&(0x7f0000000040)='/dev/vcs#\x00', 0xc4, 0x1) pipe2$9p(&(0x7f0000000240), 0x0) syz_open_dev$video(&(0x7f0000000000)='/dev/video#\x00', 0x8447, 0x0) mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='9p\x00', 0x0, &(0x7f0000000400)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[{@access_uid={'access'}}]}}) 23:17:31 executing program 2: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f00000001c0)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x83, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfbffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x0, 0x31, 0xffffffffffffffff, 0x0) 23:17:31 executing program 0: pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) write$P9_RVERSION(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302ed175d908c9205ed3b71ea13952fe4cbe6fe94815d4296f6e66de94f42cfa66862535188bc73114cc5b7e45adbc96ada2c96fcdf56ac7d8c5df0d6217f049413454c471de840cdf462e7b21af76c2dd85cfd2af275132f78a7a2a406f4f2c848cfe3e120ea0124ee07fabe1ab30355d1da3792ed03734c9d2311b8c492141e49bbd12988425f3e6416d98397d0c772f66625b0984a41111e8655de4c87c3ffc5a612004b19158174c2f52680b3bf2e418bc4e9b4a0b873e7f6926102d5cc7e6eebb2a8407b684607e441ca52eabfeca040254d87b627de25f8e6899de161d199468"], 0x15) r1 = dup(r0) write$FUSE_BMAP(r1, &(0x7f0000000000)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r1, &(0x7f00000000c0)={0x14c}, 0x26f) syz_open_dev$vcsn(&(0x7f0000000040)='/dev/vcs#\x00', 0xc4, 0x1) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff}, 0x0) r3 = syz_open_dev$video(&(0x7f0000000000)='/dev/video#\x00', 0x8447, 0x0) mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='9p\x00', 0x0, &(0x7f0000000180)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r3}}) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY_ALL_USERS(r2, 0xc0406619, &(0x7f0000000180)={{0x3, 0x0, @identifier="d78b1d1234b271cf037d191f4b0914c8"}}) 23:17:32 executing program 5: pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) write$P9_RVERSION(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302ed175d908c9205ed3b71ea13952fe4cbe6fe94815d4296f6e66de94f42cfa66862535188bc73114cc5b7e45adbc96ada2c96fcdf56ac7d8c5df0d6217f049413454c471de840cdf462e7b21af76c2dd85cfd2af275132f78a7a2a406f4f2c848cfe3e120ea0124ee07fabe1ab30355d1da3792ed03734c9d2311b8c492141e49bbd12988425f3e6416d98397d0c772f66625b0984a41111e8655de4c87c3ffc5a612004b19158174c2f52680b3bf2e418bc4e9b4a0b873e7f6926102d5cc7e6eebb2a8407b684607e441ca52eabfeca040254d87b627de25f8e6899de161d199468"], 0x15) r1 = dup(r0) write$FUSE_BMAP(r1, &(0x7f0000000000)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r1, &(0x7f00000000c0)={0x14c}, 0x26f) syz_open_dev$vcsn(&(0x7f0000000040)='/dev/vcs#\x00', 0xc4, 0x1) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff}, 0x0) r3 = syz_open_dev$video(&(0x7f0000000000)='/dev/video#\x00', 0x8447, 0x0) mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='9p\x00', 0x0, &(0x7f0000000180)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r3}}) 23:17:32 executing program 3: r0 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ttyprintk\x00', 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') write$vhci(r2, 0x0, 0x0) dup3(r1, r0, 0x0) 23:17:32 executing program 1: pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) write$P9_RVERSION(r1, &(0x7f0000000280)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302ed175d908c9205ed3b71ea13952fe4cbe6fe94815d4296f6e66de94f42cfa66862535188bc73114cc5b7e45adbc96ada2c96fcdf56ac7d8c5df0d6217f049413454c471de840cdf462e7b21af76c2dd85cfd2af275132f78a7a2a406f4f2c848cfe3e120ea0124ee07fabe1ab30355d1da3792ed03734c9d2311b8c492141e49bbd12988425f3e6416d98397d0c772f66625b0984a41111e8655de4c87c3ffc5a612004b19158174c2f52680b3bf2e418bc4e9b4a0b873e7f6926102d5cc7e6eebb2a8407b684607e441ca52eabfeca040254d87b627de25f8e6899de161d199468"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000000)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x26f) r3 = syz_open_dev$vcsn(&(0x7f0000000040)='/dev/vcs#\x00', 0xc4, 0x1) pipe2$9p(&(0x7f0000000240), 0x0) mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='9p\x00', 0x0, &(0x7f0000000400)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[{@access_uid={'access'}}]}}) 23:17:32 executing program 2: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f00000001c0)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x83, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfbffffffffffffff, 0xffffffffffffffff, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x0, 0x31, 0xffffffffffffffff, 0x0) 23:17:32 executing program 4: perf_event_open(&(0x7f0000000340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) io_setup(0x3, &(0x7f0000000300)=0x0) r2 = socket$inet_smc(0x2b, 0x1, 0x0) io_submit(r1, 0x2, &(0x7f0000000700)=[&(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, r2, 0x0}, &(0x7f0000000200)={0x0, 0x0, 0x8, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}]) getsockopt$inet_IP_IPSEC_POLICY(r2, 0x0, 0x10, &(0x7f00000001c0)={{{@in, @in=@broadcast}}, {{@in=@loopback}, 0x0, @in=@initdev}}, &(0x7f0000000100)=0xfe80) r3 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0xc) setreuid(0x0, 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r4, &(0x7f0000000680)=ANY=[@ANYBLOB="1500000065ffff"], 0x7) mount$overlay(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x4402c, &(0x7f0000000480)=ANY=[@ANYBLOB='upperdir=./file0,index=on,metacopy=off,lowerdir=./file0,xino=off,nfs_export=off,nfs_export=on,index=on,obj_role=nfs_export=off,smackfshat=/dev/kvm\x00,defcontext=system_u,fowner=', @ANYRES64=0x0, @ANYBLOB="2c61707072826973652c00f1bdb0aae164a75321f47d0f6b14f108d1dd1a8501844e472c51f608a99261c8ca162b4f3b7101f3ae4ee768c85ab777b468c941bc482bc81037b3ae"]) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3000003, 0x5c831, 0xffffffffffffffff, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r5 = openat$nvram(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/nvram\x00', 0x0, 0x0) socket(0x0, 0x0, 0x0) splice(0xffffffffffffffff, 0x0, 0xffffffff