last executing test programs: 24m19.323543462s ago: executing program 32 (id=961): openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2) r1 = memfd_create(&(0x7f00000004c0)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xe7a\x9b\x11x\x0e\xa1\xcf\x1a\x98S7\xc9\x00\x00\x00\x00\x00\x00\a\x00\x00\x00\x00\x00\x00\x04\x879\xa24\xa9am\xde\xb2\xd3\xcbZJoa\xc4\x1acB\xaa\xc1\xfb Q\xd4\xf4\x01\xa52\xe2DG\xd4\xbd{\x9f\xa9\x97\x9b@\xdbU\xb1\xe1br\xb6\x008\xe3\x10\xff\xc2\x9d\r2\x9e\x8e\x04sW\x1b\xb7\xb3\xa2\xc9&@\xca\xda\xdc\xe2/\x97X\xac\b\xb0\xc2<\x80E\x1a\xbc\xc7W\xda9VsA\xaf\xc6\x90i\xa1\xb5M\xa2\x85\xa6y\xc4J\xf1\xf7\xfcD\x95\xe3\xeb\xc7\xbc\x91\xb0\xa8\x9eo\xebF(\x9dL\x01vRk\xaacB\x04\xa7I\v\x86EZ\x96\xd5\x14O\xf8\xb5C\x1f\xb6b8b\x06A2@D\\\xe8R\xe4\xcd\xec\xcc\xd1\x0fre\xe86\xcd\xeb\xc4$\x98\x06J\xd6dD\x8d_U`ji{\xab\x97\xaf;l\x1f\xaf\xb38U\xcb\xfa\xb3j\x92\f\x81\xa0\xa2-g&\x99\x0e\x8d\x8d\x16\x05\x00\x00\x00\x00\x00\x00\x00\'\x93\xef\x1d\xa0H\xd9\xbd\xd9\xaf\x12$\x8d\x16%\x8b\x00\x88\xd1\x1eQB\x18\xc1-\xc4\x8fK\xf8\xfa\xb6\xf8\v;\xaa\x8fW\xcc\n\x17\x7f\x98\xb7\xcdqV\xd4\xf0)\xfa\x0fG\xc8\xbf\xfd\xe8>K\f\xcd+\xb0\x99Q\xba/\xa8\xb9`k\b\xd1\xcc\xfc\xeaA\"\v=\x83fC\x90%\xa1d\x91\xf8:\x16<\xad\xc2\x18\xdf\x01\xe2\x96\xfcj\xe9\xa4\x065m\x03\x05N\xb9\x1dOr\xb6\xbcP\x8fP\x8d\x89%\xf2\x12T\xd0\xc3\x15W\x9c\x87\x1b\x8c\xc9\xd9\xc6\xad\x96-d\xa2wFB\xcaB\xa5\x15\xf8,\x04\x1c*\xd98\x8bG\x90\x81`\x03\xe0\xde\x9c\x9a\x0f\x1b\x8f\xd2%*&$Wc\xb3\xa6\xc4TK1}2\xb3\xab\xf4\xb7\xb7\x85\apa\xaf\x1c\x10i\xb9\x9f\x06\xff4%\"7f \x0e\xf5Bk\r\xac\"\x13tNx\xc0$\x85\x9f', 0x3) ftruncate(r1, 0xffff) close(0x3) fcntl$addseals(r1, 0x409, 0x7) ioctl$UDMABUF_CREATE(r0, 0x40187542, &(0x7f00000001c0)={r1, 0x1, 0x0, 0x8000}) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='fdinfo/3\x00') read$FUSE(r2, &(0x7f0000000040)={0x2020}, 0x2020) 23m29.640374897s ago: executing program 33 (id=1321): sendmsg$inet(0xffffffffffffffff, &(0x7f0000001180)={0x0, 0x0, &(0x7f0000001080)=[{&(0x7f0000000040)="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", 0x394}], 0x1}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x7, 0x3, &(0x7f00000001c0)=ANY=[@ANYBLOB="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"], 0x0, 0x5, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x35}, 0x94) r0 = socket$kcm(0x11, 0x200000000000002, 0x300) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r2) recvmsg$unix(r1, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r0, 0x107, 0x12, &(0x7f00000008c0)=r3, 0x4) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x40}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r4, 0x5, 0xd50, 0xfffffffffffffee0, &(0x7f0000000000)="259a53f271a76d2608004c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 22m3.861900215s ago: executing program 34 (id=1908): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f0000000680)) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1000002, 0x13, r2, 0x0) sendmsg$SEG6_CMD_DUMPHMAC(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x24000002}, 0x801) r3 = open(&(0x7f0000000140)='./bus\x00', 0x14d27e, 0x2) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27fffff, 0x4002011, r3, 0x0) fallocate(r3, 0x0, 0x0, 0x1000f4) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000000c0)={[0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x6, 0x0, 0xfffffffffffffffd], 0x0, 0x8340}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 13m3.190507508s ago: executing program 35 (id=3814): r0 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x1000000}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000000)={&(0x7f0000b32000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000001c0)=0x40) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x5, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f00000002c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000240)={&(0x7f0000000180)={0x34, 0x2, 0x6, 0x5, 0x0, 0x0, {0x1, 0x0, 0x3}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0xd1}, @IPSET_ATTR_NETMASK={0x5, 0x14, 0x4}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x2404c822}, 0x8000) syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2) madvise(&(0x7f0000735000/0x1000)=nil, 0x1000, 0x65) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = fsopen(&(0x7f0000000140)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) r5 = fsmount(r4, 0x0, 0x0) r6 = openat$cgroup_procs(r5, &(0x7f00000001c0)='cgroup.threads\x00', 0x2, 0x0) readv(r6, &(0x7f0000000780)=[{&(0x7f0000000580)=""/225, 0xe1}, {&(0x7f0000000400)=""/102, 0x66}, {0x0}], 0x3) close_range(r3, 0xffffffffffffffff, 0x0) 8m14.775993434s ago: executing program 36 (id=4468): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)={{0x14}, [@NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x2c, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_CT_DREG={0x8, 0x1, 0x1, 0x0, 0x16}, @NFTA_CT_SREG={0x8, 0x4, 0x1, 0x0, 0x10}, @NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0x1}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x80}}, 0x0) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) getsockopt$bt_BT_RCVMTU(r2, 0x112, 0xd, &(0x7f0000000000)=0x1, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x88040, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2040, 0x0) fcntl$setlease(r4, 0x400, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000440)='fdinfo/4\x00') pread64(r0, &(0x7f0000002140)=""/17, 0x11, 0x7) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a3200000000140000001100"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) r5 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_DSTOPTS(r5, 0x29, 0x3b, &(0x7f0000000040)=ANY=[], 0x8) getsockopt$inet6_opts(r5, 0x29, 0x3b, &(0x7f0000003280)=""/76, &(0x7f00000002c0)=0x4c) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=@newlink={0x30, 0x10, 0x1, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x40810, 0x3}, [@IFLA_GROUP={0x8}, @IFLA_GSO_MAX_SIZE={0x8, 0x29, 0x10000}]}, 0x30}, 0x1, 0x0, 0x0, 0x24040051}, 0x4000000) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3c10000010004b0400004000004000007a040000", @ANYBLOB="00000000000000001c0012800b00010062726964676500000c0002800500160002000000"], 0x3c}, 0x1, 0x0, 0x0, 0x400c000}, 0x20040800) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f0000000000)={0x80, 0x0, 0x10000}) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="3800000040000701feffffff00000000017c0000040042801c0001800600060088a80000100004002524298d275c232f262d2b00040002"], 0x38}, 0x1, 0x0, 0x0, 0x48815}, 0xc000) ioctl$DRM_IOCTL_AGP_FREE(0xffffffffffffffff, 0x40206435, &(0x7f0000000080)={0x0, r7}) 3m52.776945115s ago: executing program 37 (id=5002): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0x6, 0xfa11, 0xffffffff}, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xf, 0x0, 0x0) unshare(0x8000000) r2 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) r5 = dup3(r4, r3, 0x0) r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r6, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r6, 0x4018620d, 0x0) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) writev(r2, &(0x7f00000000c0)=[{&(0x7f0000000140)='2', 0x1}], 0x1) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) r7 = syz_open_dev$vim2m(&(0x7f0000000000), 0x800, 0x2) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000000200)={0x73622a85, 0x9d9d6d0683454daa, 0x3}) ioctl$vim2m_VIDIOC_S_CTRL(r7, 0xc008561c, 0x0) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x4, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000fd3f00000000000009000000850000002e0000009500000000000000bd6482afcdfe986e9674a3c1419714961356fac4be989b4820f842475fe0388d33d8a58016b340325f9003784774c042e8b687ba0fa1e306a944f7d77c85de7e000f8abd38aa80fd0d0dc604b76770038b7c"], 0x0, 0x2, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) 3m39.829941186s ago: executing program 0 (id=5069): fsopen(&(0x7f0000000580)='overlay\x00', 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) modify_ldt$write2(0x11, &(0x7f0000000200)={0xd8a, 0x20000800, 0x2000, 0x0, 0x3, 0x1, 0x1, 0x1}, 0x10) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(0xffffffffffffffff, 0x3ba0, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, 0x0, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_MSFILTER(r3, 0x0, 0x30, &(0x7f0000000440)=ANY=[@ANYBLOB="400000000000000002004e22ac14142c000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000100000002004e20ac141410000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000926320b038d86508e357382df0ef843f4e54db3499da6b27804817"], 0x110) r4 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x22902, 0x0) ioctl$FBIOBLANK(r4, 0x4611, 0x3) ioctl$FBIO_WAITFORVSYNC(r4, 0x40044620, 0x0) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) r6 = dup(r5) r7 = socket$netlink(0x10, 0x3, 0x0) r8 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r8, 0x40045431, &(0x7f0000000140)={0x0, 0xc, 0x0, 0x0, 0xff, "810000cc2b000000000000fa25ffff00ffffff"}) r9 = syz_open_pts(r8, 0x8002) fcntl$setstatus(r2, 0x4, 0x102c00) write(r9, &(0x7f0000000000)="d5", 0xfffffedf) ioctl$TIOCSETD(r9, 0x5423, &(0x7f0000000100)=0x19) close_range(r7, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r6, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x6, @empty, 0x3}], 0x1c) 3m23.752909126s ago: executing program 38 (id=5069): fsopen(&(0x7f0000000580)='overlay\x00', 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) modify_ldt$write2(0x11, &(0x7f0000000200)={0xd8a, 0x20000800, 0x2000, 0x0, 0x3, 0x1, 0x1, 0x1}, 0x10) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(0xffffffffffffffff, 0x3ba0, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, 0x0, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_MSFILTER(r3, 0x0, 0x30, &(0x7f0000000440)=ANY=[@ANYBLOB="400000000000000002004e22ac14142c000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000100000002004e20ac141410000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000926320b038d86508e357382df0ef843f4e54db3499da6b27804817"], 0x110) r4 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x22902, 0x0) ioctl$FBIOBLANK(r4, 0x4611, 0x3) ioctl$FBIO_WAITFORVSYNC(r4, 0x40044620, 0x0) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) r6 = dup(r5) r7 = socket$netlink(0x10, 0x3, 0x0) r8 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r8, 0x40045431, &(0x7f0000000140)={0x0, 0xc, 0x0, 0x0, 0xff, "810000cc2b000000000000fa25ffff00ffffff"}) r9 = syz_open_pts(r8, 0x8002) fcntl$setstatus(r2, 0x4, 0x102c00) write(r9, &(0x7f0000000000)="d5", 0xfffffedf) ioctl$TIOCSETD(r9, 0x5423, &(0x7f0000000100)=0x19) close_range(r7, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r6, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x6, @empty, 0x3}], 0x1c) 3m14.34514428s ago: executing program 4 (id=5109): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) setsockopt$sock_linger(0xffffffffffffffff, 0x1, 0xd, 0x0, 0x0) syz_clone3(&(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, &(0x7f0000000040), 0x2}, 0xa0) readv(r1, &(0x7f0000003500)=[{&(0x7f00000002c0)=""/136, 0x88}, {&(0x7f0000001380)=""/34, 0x22}, {&(0x7f00000013c0)=""/25, 0x19}, {&(0x7f0000001400)=""/4096, 0x1000}, {0x0}, {&(0x7f0000002500)=""/4096, 0x1000}], 0x6) prctl$PR_SET_IO_FLUSHER(0x43, 0x1) open(&(0x7f0000000280)='./file0\x00', 0x2a002, 0x32) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000200)={0x38, 0xb56e2e3f2d9728b3, 0x8, 0x8001, 0x0, 0x9, 0x100000003, 0xfffffe0000000001, 0xfa11, 0x65aa}, 0x0) setsockopt$ARPT_SO_SET_ADD_COUNTERS(0xffffffffffffffff, 0x0, 0x60, &(0x7f0000000080)={'filter\x00', 0x1058, [{}, {0x0, 0x100000000000000}]}, 0x68) r2 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, 0x0, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000140)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_ctr_aes192\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, 0x0, 0x0) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, 0x0, 0x0) r4 = socket$inet6_udp(0xa, 0x2, 0x0) bind$inet6(r4, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, 0x1c) r5 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r5, 0x5423, &(0x7f00000000c0)=0xe) ioctl$TCSETSW2(r5, 0x80047437, 0x0) connect$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) close_range(r4, 0xffffffffffffffff, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000240), 0x4c00, 0x0) 3m6.681341398s ago: executing program 4 (id=5122): syz_emit_ethernet(0x0, 0x0, 0x0) utimensat(0xffffffffffffffff, 0x0, 0x0, 0x0) socket(0x10, 0x803, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000040)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$USBDEVFS_IOCTL(0xffffffffffffffff, 0xc0105512, &(0x7f0000000200)) r3 = socket(0x10, 0x3, 0x0) write(r3, &(0x7f0000000080)="1400000052004f030e789e7ee2ce2fa4ff612d27", 0x14) recvmmsg(r3, &(0x7f0000005c80)=[{{0x0, 0x0, 0x0}}], 0x344, 0x10122, 0x0) r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000000c0), 0x141041) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r4, 0xc08c5332, &(0x7f00000001c0)={0x80001009, 0x0, 0x0, 'queue0\x00', 0xfffffffc}) write$sndseq(r4, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick=0x1f4, {}, {}, @raw32={[0x2600]}}], 0xffc8) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r4, 0x408c5333, &(0x7f0000000500)={0x0, 0xe, 0x1, 'queue0\x00'}) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x1000009, 0x4082172, 0xffffffffffffffff, 0x0) socket$unix(0x1, 0x1, 0x0) connect$x25(0xffffffffffffffff, &(0x7f0000000080)={0x9, @remote={'\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc', 0x0}}, 0x12) r5 = dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$VIDIOC_LOG_STATUS(r5, 0x5646, 0x0) read$char_usb(r5, &(0x7f00000000c0)=""/192, 0xc0) 3m5.205468387s ago: executing program 4 (id=5126): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, r0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r4, 0x84, 0x13, 0x0, 0x0) bind$inet6(r4, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x80000, @loopback}, 0x1c) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, &(0x7f0000000f40)=@raw={'raw\x00', 0x8, 0x3, 0x478, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x3a8, 0xffffffff, 0xffffffff, 0x3a8, 0xffffffff, 0x3, 0x0, {[{{@uncond, 0x0, 0x1a0, 0x1c0, 0x60030000, {0x0, 0xff000000}, [@common=@inet=@recent0={{0xf8}, {0x9, 0x0, 0x24, 0x0, 'syz0\x00', 0x1}}]}, @unspec=@TRACE={0x20}}, {{@ipv6={@ipv4={'\x00', '\xff\xff', @remote}, @mcast2, [0x0, 0xff000000, 0xffffffff, 0xff], [0xff, 0x47066fef753f41fe, 0xff000000, 0xff], 'veth1_to_hsr\x00', 'bond0\x00', {0xff}, {}, 0x87, 0x2, 0x3, 0xa}, 0x0, 0x1c8, 0x1e8, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x1, 0x1, 'syz0\x00', 0xfe}}, @common=@mh={{0x28}, {"b11c", 0x1}}]}, @unspec=@NOTRACK={0x20}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4d8) io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, &(0x7f00000001c0)=[{&(0x7f00000004c0)=""/120, 0x78}], 0x1) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x5, 0x4, 0x8, 0xb, 0x0, 0xffffffffffffffff, 0xffffffff}, 0x50) sendmsg$NFT_MSG_GETCHAIN(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000480)={&(0x7f0000000280)={0x28, 0x4, 0xa, 0x801, 0x0, 0x0, {0x5, 0x0, 0x6}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x4}]}, 0x28}, 0x1, 0x0, 0x0, 0x10}, 0x24040000) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000180)={@map=r6, 0x4, 0x0, 0x62, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) sendmsg$IPSET_CMD_TYPE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='='], 0x38}}, 0x4000080) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000540)='blkio.bfq.io_service_bytes\x00', 0x275a, 0x0) write$UHID_CREATE2(r7, &(0x7f0000000180)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r7, 0x0) io_uring_enter(0xffffffffffffffff, 0x2d3e, 0x2936, 0x0, 0x0, 0x0) sendto$inet6(r4, &(0x7f0000847fff)='X', 0x34000, 0xe0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) 3m4.069713915s ago: executing program 4 (id=5129): syz_emit_ethernet(0x0, 0x0, 0x0) utimensat(0xffffffffffffffff, 0x0, 0x0, 0x0) socket(0x10, 0x803, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000040)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$USBDEVFS_IOCTL(0xffffffffffffffff, 0xc0105512, &(0x7f0000000200)) r3 = socket(0x10, 0x3, 0x0) write(r3, &(0x7f0000000080)="1400000052004f030e789e7ee2ce2fa4ff612d27", 0x14) recvmmsg(r3, &(0x7f0000005c80)=[{{0x0, 0x0, 0x0}}], 0x344, 0x10122, 0x0) r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000000c0), 0x141041) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r4, 0xc08c5332, &(0x7f00000001c0)={0x80001009, 0x0, 0x0, 'queue0\x00', 0xfffffffc}) write$sndseq(r4, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick=0x1f4, {}, {}, @raw32={[0x2600]}}], 0xffc8) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r4, 0x408c5333, &(0x7f0000000500)={0x0, 0xe, 0x1, 'queue0\x00'}) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x1000009, 0x4082172, 0xffffffffffffffff, 0x0) socket$unix(0x1, 0x1, 0x0) connect$x25(0xffffffffffffffff, &(0x7f0000000080)={0x9, @remote={'\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc', 0x0}}, 0x12) r5 = dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$VIDIOC_LOG_STATUS(r5, 0x5646, 0x0) read$char_usb(r5, &(0x7f00000000c0)=""/192, 0xc0) 3m1.480733537s ago: executing program 4 (id=5133): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$rds(0x15, 0x5, 0x0) setsockopt$SO_RDS_MSG_RXPATH_LATENCY(r0, 0x114, 0xa, 0x0, 0x0) tee(0xffffffffffffffff, 0xffffffffffffffff, 0x3, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x103) openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r2, 0x3b81, &(0x7f00000000c0)={0xc}) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0xb, 0x59032, 0xffffffffffffffff, 0x0) r3 = userfaultfd(0x801) r4 = syz_open_dev$tty1(0xc, 0x4, 0x2) write(r4, &(0x7f00000008c0)="bae2bf808214ff98d8d00b4e4aa5b63a86342a471feaedd023fe0d23081a02d33e4a469ab9d700b98dbc637a1ab17ee404dfa6c5d5a144ee", 0x38) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x200}) r5 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000200), 0x4840, 0x0) r6 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) ioctl$FUSE_DEV_IOC_CLONE(r5, 0x8004e500, &(0x7f0000000280)=r6) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x4}) r7 = socket$igmp(0x2, 0x3, 0x2) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0xfffffffa, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x2}, 0x50) ioctl$UFFDIO_COPY(r3, 0xc028aa03, &(0x7f0000000100)={&(0x7f0000a4d000/0x1000)=nil, &(0x7f0000339000/0x1000)=nil, 0x1000}) 2m58.296759123s ago: executing program 4 (id=5138): r0 = socket(0x2, 0x2, 0x1) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00', 0x0}) sched_setattr(0x0, &(0x7f0000000400)={0x38, 0x5, 0x0, 0x6, 0x0, 0x0, 0x2, 0xfffffffffffffffe}, 0x0) ioprio_set$pid(0x2, 0x0, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0xcfa42, 0x0) sendfile(r2, r2, 0x0, 0x200000) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=@deltaction={0x24, 0x31, 0x200, 0x70bd2d, 0x25dfdc02, {}, [@TCA_ACT_TAB={0x10, 0x1, [{0xc, 0x6, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x20004800}, 0x4800) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x58, 0x24, 0x400, 0x70bd2b, 0xffffffff, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff1}, {0xffff, 0xf}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x5, 0x5, 0x2, 0x3, 0x4, 0x0, 0xfffffff6, 0x8, 0x5}}}}]}, 0x58}}, 0x20040084) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="bc1b0000400007012bbd700000000000017c00000400c2800c00018006000600843b0000971b0280540214"], 0x1bbc}, 0x1, 0x0, 0x0, 0x4048011}, 0x20008054) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f00000001c0)=ANY=[@ANYRES8=r3], &(0x7f0000000040)='GPL\x00', 0x5, 0x0, 0x0, 0x40f00, 0x40, '\x00', r1, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xff}, 0x94) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0xb4) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) epoll_pwait(0xffffffffffffffff, &(0x7f00000003c0), 0x0, 0x7, 0x0, 0x0) r6 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TCSBRKP(r6, 0x5425, 0x0) r7 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r8 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r8, 0x1, r7, &(0x7f0000000300)={0xa000201c}) r9 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/partitions\x00', 0x0, 0x0) sendfile(r7, r9, 0x0, 0x20000023896) ioctl$TCSETSF(r6, 0x5404, &(0x7f0000000200)={0x0, 0xfffffffc, 0x100, 0x8000, 0x0, "7a58beca3900000000000000000000000200"}) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r10 = openat$cgroup_ro(r5, &(0x7f00000002c0)='blkio.bfq.io_service_bytes\x00', 0x275a, 0x0) write$cgroup_int(r10, &(0x7f0000000040)=0x1, 0x12) bpf$BPF_PROG_TEST_RUN_LIVE(0xa, &(0x7f0000000540)={r4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xcf}, 0x50) 2m51.178081991s ago: executing program 2 (id=5145): setsockopt$XDP_UMEM_REG(0xffffffffffffffff, 0x11b, 0x4, &(0x7f00000000c0)={0x0, 0x328000, 0x81f}, 0x20) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r1, 0x8983, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) mount(0x0, 0x0, &(0x7f0000000080)='xfs\x00', 0x2208004, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000700)={{0x14}, [@NFT_MSG_NEWRULE={0x88, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x68, 0x4, 0x0, 0x1, [{0x54, 0x1, 0x0, 0x1, @match={{0xa}, @val={0x44, 0x2, 0x0, 0x1, [@NFTA_MATCH_REV={0x8}, @NFTA_MATCH_INFO={0x2c, 0x3, "ebae551382395afa4d23edfcbe6d55b57cb15e63c15946395916e2b388abc3d6ce2316334e8278ad"}, @NFTA_MATCH_NAME={0xa, 0x1, 'limit\x00'}]}}}, {0x10, 0x1, 0x0, 0x1, @socket={{0xb}, @void}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xb0}, 0x1, 0x0, 0x0, 0x2000094}, 0x4000800) 2m49.518833656s ago: executing program 2 (id=5148): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00'}) open(0x0, 0x1, 0x104) syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x8, 0xf32}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeea, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42032, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x1000, 0x0, &(0x7f00008b5000/0x1000)=nil) socket$inet_mptcp(0x2, 0x1, 0x106) syz_open_dev$mouse(0x0, 0x6, 0x6ac000) bpf$LINK_GET_NEXT_ID(0x1f, 0x0, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x0) r4 = syz_open_dev$usbfs(&(0x7f0000000180), 0x205, 0x2581) r5 = fcntl$dupfd(r4, 0x0, r4) ioctl$USBDEVFS_SUBMITURB(r5, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000080)={0x80, 0x13, 0x0, 0x0, 0x7995}, 0x10022, 0x0, 0x0, 0x48000000, 0x0, 0x0, 0x0}) ioctl$USBDEVFS_REAPURB(r4, 0x4008550c, &(0x7f00000000c0)) 2m45.999691537s ago: executing program 2 (id=5157): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, 0x0, 0x84200, 0x0) syz_open_dev$sndmidi(0x0, 0x2, 0x141102) sched_setscheduler(0x0, 0x2, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioprio_set$uid(0x3, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x100) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mkdir(&(0x7f0000000000)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000380)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) chdir(&(0x7f0000000140)='./bus\x00') r3 = open(&(0x7f0000000040)='./file0\x00', 0x84242, 0x1df2a23c5997fad6) msgctl$IPC_SET(0x0, 0x1, 0x0) write$FUSE_CREATE_OPEN(r3, &(0x7f0000000180)={0xa0, 0x0, 0x0, {{0x4, 0x0, 0x5, 0x7, 0x3, 0xfffffffd, {0x400000080001, 0xfd, 0x20ff, 0x8, 0xe, 0xd615, 0x9, 0x3, 0xfffffffc, 0x6000, 0x0, 0x0, 0x0, 0x5, 0x7}}, {0x0, 0x13}}}, 0xa0) sendfile(r3, r3, &(0x7f0000000080), 0x7f03) 2m44.921041544s ago: executing program 2 (id=5159): setsockopt$XDP_UMEM_REG(0xffffffffffffffff, 0x11b, 0x4, &(0x7f00000000c0)={0x0, 0x328000, 0x81f}, 0x20) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, 0x0, 0x0) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r1, 0x8983, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) mount(0x0, 0x0, &(0x7f0000000080)='xfs\x00', 0x2208004, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000700)={{0x14}, [@NFT_MSG_NEWRULE={0x94, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x68, 0x4, 0x0, 0x1, [{0x54, 0x1, 0x0, 0x1, @match={{0xa}, @val={0x44, 0x2, 0x0, 0x1, [@NFTA_MATCH_REV={0x8}, @NFTA_MATCH_INFO={0x2c, 0x3, "ebae551382395afa4d23edfcbe6d55b57cb15e63c15946395916e2b388abc3d6ce2316334e8278ad"}, @NFTA_MATCH_NAME={0xa, 0x1, 'limit\x00'}]}}}, {0x10, 0x1, 0x0, 0x1, @socket={{0xb}, @void}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xbc}, 0x1, 0x0, 0x0, 0x2000094}, 0x4000800) 2m43.269960533s ago: executing program 2 (id=5162): r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000000e00)=ANY=[@ANYBLOB="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"], &(0x7f00002bf000)='syzkaller\x00', 0x4, 0xb7, &(0x7f0000000040)=""/183, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94) r2 = socket$kcm(0x29, 0x2, 0x0) socket(0xa, 0x3, 0x3a) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, &(0x7f00000005c0)='..&-^\x00', &(0x7f0000000640)='/selinux/status\x00', 0x0) socket(0x1e, 0x805, 0x0) mknod$loop(&(0x7f0000000180)='./file0\x00', 0x6000, 0x0) r6 = creat(&(0x7f00000000c0)='./file0\x00', 0x2) r7 = dup2(r6, r6) ioctl$BLKTRACESETUP(r7, 0xc0481273, &(0x7f0000000000)={'\x00', 0x40, 0xe, 0x1, 0x5, 0x10}) r8 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000004c0)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x1c, 0x1c, 0x9, [@decl_tag={0x5, 0x0, 0x0, 0x11, 0x2, 0xffffffff}, @typedef={0x7}]}, {0x0, [0x0, 0x30, 0x2e, 0x5f, 0x61, 0x30, 0x61]}}, 0x0, 0x3d, 0x0, 0x1}, 0x28) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000180)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x100a7c1, '\x00', 0x0, r8, 0x0, 0x1}, 0x50) r9 = socket$inet6(0xa, 0x803, 0x6) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f0000000180)={r9, r1}) sendmmsg$inet(r2, &(0x7f0000003e40)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000300)="db", 0x1}], 0x1}}], 0x1, 0x20000085) set_mempolicy(0x4005, &(0x7f0000000040)=0x1001, 0x4) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000001f40)=@raw={'raw\x00', 0x8, 0x3, 0x3e8, 0x248, 0x43, 0xa0, 0x248, 0x98, 0x350, 0x178, 0x178, 0x350, 0x178, 0x49, 0x0, {[{{@ip={@loopback, @local, 0x0, 0x0, 'veth0_to_bond\x00', 'ip6erspan0\x00'}, 0x12a, 0x228, 0x248, 0x0, {0x0, 0x7a010000}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x8, 0x0, 'syz0\x00'}}, @common=@unspec=@string={{0xc0}, {0x0, 0x3, 'kmp\x00', "7af8bdb4c056dc65949041982abfe9ed51b01289c0026e2e6034ed587be5f09017b907388134b0ede40eb8d493f20d534fc37f23ec524d91a7a041f36bb1d1c3ab474544c5ef3f2fa69a80a0d967ee4464257d28d31e6843bc1221dfb9a6a27ad13af7061b737fd97d94f50942c68242819c941c0b4d9ec154c7d327187e8198", 0x38, 0x2, {0x1}}}]}, @unspec=@TRACE={0x20}}, {{@uncond, 0x0, 0xe8, 0x108, 0x0, {}, [@common=@unspec=@connbytes={{0x38}, {[{0xb}]}}, @common=@set={{0x40}, {{0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x300]}}}]}, @unspec=@NOTRACK={0x20}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x448) 2m41.677408782s ago: executing program 39 (id=5138): r0 = socket(0x2, 0x2, 0x1) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00', 0x0}) sched_setattr(0x0, &(0x7f0000000400)={0x38, 0x5, 0x0, 0x6, 0x0, 0x0, 0x2, 0xfffffffffffffffe}, 0x0) ioprio_set$pid(0x2, 0x0, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0xcfa42, 0x0) sendfile(r2, r2, 0x0, 0x200000) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=@deltaction={0x24, 0x31, 0x200, 0x70bd2d, 0x25dfdc02, {}, [@TCA_ACT_TAB={0x10, 0x1, [{0xc, 0x6, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x20004800}, 0x4800) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x58, 0x24, 0x400, 0x70bd2b, 0xffffffff, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff1}, {0xffff, 0xf}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x5, 0x5, 0x2, 0x3, 0x4, 0x0, 0xfffffff6, 0x8, 0x5}}}}]}, 0x58}}, 0x20040084) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="bc1b0000400007012bbd700000000000017c00000400c2800c00018006000600843b0000971b0280540214"], 0x1bbc}, 0x1, 0x0, 0x0, 0x4048011}, 0x20008054) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f00000001c0)=ANY=[@ANYRES8=r3], &(0x7f0000000040)='GPL\x00', 0x5, 0x0, 0x0, 0x40f00, 0x40, '\x00', r1, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xff}, 0x94) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0xb4) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) epoll_pwait(0xffffffffffffffff, &(0x7f00000003c0), 0x0, 0x7, 0x0, 0x0) r6 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TCSBRKP(r6, 0x5425, 0x0) r7 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r8 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r8, 0x1, r7, &(0x7f0000000300)={0xa000201c}) r9 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/partitions\x00', 0x0, 0x0) sendfile(r7, r9, 0x0, 0x20000023896) ioctl$TCSETSF(r6, 0x5404, &(0x7f0000000200)={0x0, 0xfffffffc, 0x100, 0x8000, 0x0, "7a58beca3900000000000000000000000200"}) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r10 = openat$cgroup_ro(r5, &(0x7f00000002c0)='blkio.bfq.io_service_bytes\x00', 0x275a, 0x0) write$cgroup_int(r10, &(0x7f0000000040)=0x1, 0x12) bpf$BPF_PROG_TEST_RUN_LIVE(0xa, &(0x7f0000000540)={r4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xcf}, 0x50) 2m41.662504554s ago: executing program 2 (id=5165): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) socket$tipc(0x1e, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x0, r1, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r2 = syz_open_dev$MSR(&(0x7f0000000200), 0x0, 0x0) fsopen(&(0x7f0000000640)='ntfs3\x00', 0x0) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r3, 0xffffffffffffffff, 0x3f00000000000000) read$msr(r2, &(0x7f0000002700)=""/102392, 0x18ff8) madvise(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0xe) mlock(&(0x7f0000c00000/0x400000)=nil, 0x400000) r4 = socket(0x2b, 0x80801, 0x1) setsockopt$bt_l2cap_L2CAP_LM(r4, 0x6, 0x3, &(0x7f0000000140)=0x18, 0x4) mremap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x2000, 0x7, &(0x7f0000fff000/0x1000)=nil) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) r6 = dup(r5) write$UHID_INPUT(r6, &(0x7f0000002b40)={0xe, {"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", 0x942}}, 0x1006) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f00000000c0)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000280)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000001c0)={&(0x7f00000002c0)=@ipv6_newaddr={0x18, 0x14, 0x800, 0x70bd2a, 0x25dfdbfd, {0xa, 0x18, 0xc2, 0xfd, r7}}, 0x18}}, 0x0) madvise(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x13) sendmsg$NFT_BATCH(r6, &(0x7f00000004c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000480)={&(0x7f0000000300)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWTABLE={0x3c, 0x0, 0xa, 0x201, 0x0, 0x0, {0x5, 0x0, 0x1}, [@NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x4}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x5}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_TABLE_FLAGS={0x8}]}, @NFT_MSG_NEWTABLE={0xc4, 0x0, 0xa, 0xcf9f7abc7691a883, 0x0, 0x0, {0x1ca709045b8084c8, 0x0, 0x3}, [@NFTA_TABLE_USERDATA={0x9c, 0x6, "3a0ae0d1b7ab31acfbee0d57b551090800dada15b1fd7b0bb3a55121e0c4d372a438937b98ce4df6dc63d0f03729745614fef992ae8a2873e22c35993d14f0ac8f4d95cda5196a2f82801195786e5022024a885897e9f8e7dc85ec7444d38956c115d4b231a246ae09b57e9ee8cf11857853476aae26e7ef8dcde00c0c4d91e4c26331355ff44fccad0cfbebc6aaeb73f07f406d0a02f1c4"}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}]}, @NFT_MSG_NEWCHAIN={0x34, 0x3, 0xa, 0x801, 0x0, 0x0, {0x7, 0x0, 0x4}, [@NFTA_CHAIN_TYPE={0x8, 0x7, 'nat\x00'}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x15c}, 0x1, 0x0, 0x0, 0x41}, 0x2c091) bind(r4, &(0x7f0000000500)=@rxrpc=@in4={0x21, 0x4, 0x2, 0x10, {0x2, 0x4e23, @rand_addr=0x64010101}}, 0x80) 2m25.471568336s ago: executing program 40 (id=5165): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) socket$tipc(0x1e, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x0, r1, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r2 = syz_open_dev$MSR(&(0x7f0000000200), 0x0, 0x0) fsopen(&(0x7f0000000640)='ntfs3\x00', 0x0) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r3, 0xffffffffffffffff, 0x3f00000000000000) read$msr(r2, &(0x7f0000002700)=""/102392, 0x18ff8) madvise(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0xe) mlock(&(0x7f0000c00000/0x400000)=nil, 0x400000) r4 = socket(0x2b, 0x80801, 0x1) setsockopt$bt_l2cap_L2CAP_LM(r4, 0x6, 0x3, &(0x7f0000000140)=0x18, 0x4) mremap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x2000, 0x7, &(0x7f0000fff000/0x1000)=nil) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) r6 = dup(r5) write$UHID_INPUT(r6, &(0x7f0000002b40)={0xe, {"a2e3ad099b0d09f91b5f2f0987f70e06d038e7ff7fc6e5539b0d3d0e8b089b3f323063090810e0879b0f0a75e70a9b334d959b669a240d5b0af3988f7ef31952010afde8d178708c523c921b1b5b07070d075b0936cd3b78130daa61d8e81a3f00005802b77f07227227b7ba67e0e78657a6f5c2a874e62a9ccdc0d31a0c9f318c0da1993bd160e233df4a62179c6f30e065cd5b91cd0ae19397273ce1766769f0c91c00305d3f46635eb016d5b1dda98e2d739be7bd1df1fb3b231fdcdb5075a9aaa1b469c3090000000000000075271b286329d169934288fd789aa37d6e98b224fd44b65b31334ffc55cc82cd3ac32ecdb08ced6f9081b4dd0d8b38f3cd4498bee800490841bdb114f6b7638354a1236e80f6a8abadea7662496bddbb42be6bfb2f17959d1f416e56c71b1931870262f5e801119242ca026bfc821e7e7daf2451138e645bb80c617669314e2fbe70de98ec76a9e40dad47f36fd9f7d0d42a4b5f1185ccdcf16ff46295d8a0fa17713c5802630933a9a34af674f3f39fe23491237c08822dec110911e893d0a8c4f677747abc3609aa24b7d520c829d095083bba2987a67399eac430d145d546a40b9f6ff14ac488ec130bb3850a27af9544ae15a7e454dea05918b41243513f000000000000000a3621c56cea8d20fa911a0c41db6ebe8cac64f17679141d54b34bbc9963ac4f4bb3309603f1d4ab966203861b5b15a841f2b575a8bd0d78248ebe4d9a80002695104f674c2431dca141fae269cab70e9a66f3c3a9a63e9639e1f59c0ede26c6b5d74b078a5e15c31634e5ae098ce9ee70771aaa18119a867e1088334975e9f73483b6a62fa678ca14ffd9f9db2a7869d85864056526f889af43a6056080572286522449df466c632b3570243f989cce7cd9f465e41e610c20d80421d653a5520000008213b704c7fb082ff27590678ef9f190bae97909507041d860420c5664b27921b14dc1db8892fd32d0ad7bc946813591ad8deff4b05f60cea0da7710ac0000000000008000bea37ce0d0d4aa202f928f28381aab144a5d429a04a6a2b83c7068ae949ed06e288e810bac9c76600025e19c907f8ea2e2010000008271a1f5f8528f227e79c1389dbdfffe492f21579d2c15b8c70cdb1c332d86d87341432750861ec2bc3451edca194b221cfec4603d276bbaa1dfa6d4fb8a48a76eafc9a9a0270e4c10d64cd5a62427264f2377fe763c43470833ac96c45f357cbbaba8f1b1fdcc7cbb61a7cdb9744ed7f9129aede2be21ccfdc4e9134f8684b3a4f354da9a795e96334e207dff70f1988037b2ed3aaf575c0b2860d1b3cff57d8b6d59fdee5325928974d12dad99dac44c3f0008047096a44002bebc2420aed92fa9b6578b4779415d4ac01b75d5495c118045651cf41c2fc48b778efa5ea5677747430af4162b987b80c3e001cd34e5c92f76cc4c24eeb8bc4e9ac2aed9e53803ed0ca4ae3a9737d214060005ea6f1783e287b3bee96e3a726eafe2fdfaa78d1f48c13b64df07847754b8400daaa69bf5c8f4350aeae9ca1207e78283cd0b20ceb360c7e658828163e2d25c4aa348561f927e88f63aa70e73a5e69b3df3495903f06572e1e007fa55a2999f596d067312f5779e8dbfdcf3427138f3d444d2639a10477f9bec4b0bbb6e3c04be68981f392203dd0ee3ef478e16dacfc5e3e03cf7ab8e3902f1b0ff034ef655b253ca509383815b1b6fc6522d4e4fdc11a4f0492d48604675fde2b34cf00500a2690891abf8ab9c015073014d9e08d4338b8780bdecd436cf0541359bafffa45237f104b96210403b2de9efed496f42355bc7872c827467cfa5c4e72730d56bd068ed211cf847535edecb7b373f78b095b68441a34cb51682a8ae4d24ad0465f3927f889b813076038e79a7962fb385a882e8020f06c4c2ba1dd5cac7c18876da865d258734dd73583df292892448039ef799cf0630becdcce04579b5561dc825ab829827955e020c1f67ee615feb6243378e0610060f02cca4e91b2f001edb9754fb4b55668dda93aec92a5de203717aa49c2d284acfabe262fccfcbb2b75a2183c46eb65ca8104e1b4da7fbb77ab2fc043aead87c32ab875ee7c2e7b7019c982cd3b43eaeb1a5fb135c0c7dcee8fe6516a328032f88c042891824659e9e94265c803b35ee5f83a2b210520106b8a358b50ab7a1fa89af9c251fe5294b3d1802d5676d95f160ec97b1ad94e7475cb74642c37b4a6cc6c04effc1672db7e4b68d787d9a7a508ae54b3cd7369dde50e8c77d95a3d361c040babb171607caac2a3559ad4f75465f49c0d0ae3716db6e00cb11db4a5fade2a57c10238e204a67737c3b42aae501b20f7694a00f16e2d0174035a2c22656dc29880acebdbe8ddbd72ea4998d8ac2dfad2ba3a504767b6b45a45957f24d758ed024b3849c11d412a2a03b4047497022d9c30e23ef4df5ff754413d135273ea8e75f22f216c6b9990ae71806f2c00b4025c58b75c0f73cdb9a7b8fa367b50028067e7f16f4dd569d462f4f19eacdb3ed70eeebb4483f8fd777d443e8b40427db6fe29068c0ca3d2414442e8f3a154704b0e51bc664a137b26be719f4f7c9a5678a674dfc95df80b9ce375dd649c8c704e509bd88c8e63d8c7dd67071115c8982ba46af4d6adcc9f68a75b9397b035153faf46366e7205dd8d6f37525c1a0e94610dd94323f6c15d085197149bfd6655548cfd9c52c9711937f79abb1a124f1210465483cd3b2d78378cfb85ed82e7da0f6eb6d279f2ae455925d0f6f1ba571eba281f2a654fb39ddff3b484439ff158e7c5419e037f3e3ad038f2211f1033195563c7f93cd54b9094f226e783271e1e5a2a2c10712eab625d64931cd4ffe6738d97b9b5ef828ee9fb059fc01af0e79c1e14b1d25988c69a399567c1d93768f7971d31488b8658a20878b7c1dd7ba02fc42939dde3d4a3339a65d507dc59c51097b50517705da56e9ebf0afa53282bf86dbb58c548069ff6eb95aade7cc66d7bbef724779ca1f731b3346ff177050373d79ff7b3e7f9bc0c1b4b266a8878b90baaa039d3e3b63979ac3df6e6f4859afd50238c7547a39b60810938044ae185d2ba3e00a4e73676864af090d81eaee5ee6cf1d0ab378dd4dd891e937c2ea5410e0513005000000000000003911fab964c271550027697b52160687461602f88df165d885b36ec2b6c25a2f33c715687e9d4afb96d6861aca47da73d6f3144345f48843dd014e5c5ad8fe995754bd9cf32fce1e31919c4b2082fb0a30b9deae84bed4b28045634073c9c58c89d9e99c81769177c6d594f88a4facfd4c735a20307c737afa2d60399473296b831dbd933d93994ba3064279b10ea0c5833f41f157ea2302993dbe433b1a85ae7e69fd1a47a284f4113c4c859465c3b415c3432f81db8719539d5bf372aaaea1cc43a6c5cbe59758bfee2916580dac4b008e595f437491d87abed02cef8473b53d94d02daee67918e5d6787463183b4b87c1050000002f7809959bc048850613d17ca51055f2f416a44fe180d2d50c312cca7cb14a2bdc331f57a9817139a206fc76957227ffff2de20a4b8e3737fbb42913777c06376f799eba367e21f94ca598705f5dcb767d6f0900d6b0f6095e53c4c4234d0c1fbe434f6ab8f43c0013ee93b83946ee7759e89d7bdd1a32d7b311711b757fe43c06d21a35810d8fe98b27faea8aa12bc8716eefc5c97c45ac33eeec964c5214bc3a9359bdea1cccab94f15e36319cb34ebcacedb82c2ed3de5a8a8f0011e8f74e82d7f96093530e76692839d7961939adfdeeeaff19d11efcafb6d546fef271e89d6cc2389e81ff58cefcce3fbf4625a7e7de40e42e07b344340002000000000000f288a4510de03dab19d26285eda89156d50dd385a60333ba5bbf5d77cd7007ad1519ad5470de3dd6d6080cccf8a97406bb5a68a1f0c4549820a73c8859dde0712ae00398e8bd1f4108b7807fb33b72685ec37a2d3f766413a60459516246e5a1d998a2017aef0948a68cf255315ab80dd349e891aef595dc4d470e8ac32a308e15fc37d06aeac289c0523f483e1ff7408c6087f1ab652f2ef91d4f2b01987b0f46da034e5c3f745a7ee8101a3934c54e24b48ec0275e2d0687dc746b0827cbf652f406c6b95f2722e58c05f752ce2126596e1cd7655b904801784c416b22f73d324678e2724f43f1fe687c7e8a60c28b82b6528341b648cdd56fed7cdcb7427d8392c6289455e8f8d2ab2242729251ae033a9e02210e62df0546a74b333a1c48f95fd54acb5741259e8c5488efeee327415cc19451432c2e14c27693102a3cd84857cd6586fc5ca9a93eb0145fac0662ff86107f998a8ef7df8aa14046c55b03d3d47f88a8d60f7774a2ee08758897fb411a94b3c2fc5d5f0db42c0456ec015f08e5247d33ae2d35603ff8454c16f8342856935125102bb784ed7148b6ce431b63ec00000000000000b90e29389f22fc5b59a70efaea2bd40195af4486220d702e30bfc43c10ec23ea6283994a7dde4dcb61fea6b651fb1d62458d0741a52830052fcc460db043afe525629b40d7cee458e4cb5e930ed624806c43a006e39336d07c2b8081c128ad2706f48261f7897484c297a1a6613bc18f5a38d442768af38041efe03d152ef95ff569e76db2391f4509d7f339d92fdb4a89364949da398000000000000000d80a4fe654578376e599aff3565b1d531f30912b9945030b81ea9935fd46edb44a78f615255490a4b621501f2a9e4d24624c4dac9274118c67584f5d374755534d7f68f679c4ff516a9c861a0e7e65868fcb2bf1cb9aea4e05df72279fdb0d2b9e935c5af3cf474bed79dfc248c1f5aea4b8b32c5d295e57079d0fe662a46b7f71cd47744db86c50b704c971d90295c7b2c7439a2d78ccfa79b5fc2bff6bbf840262bf89394b3e0691953264d2700c838fa2c7b3425260f59554e502dcea39cb313b0000000000004ca7c12f45858d6284ca6270d6b2f0e58fded8a7b4a302a97bc641df07720ba2b26bbfcc807ca0abb1b44322269c21c5ec685f068ea88067d905ea917bb03eefdaebdeabf2d0dce80997c915c8949de992587c2cb5fe36d7d3e5db21b094b8b77940b5f07722e47a08d367e5f84c96ec664b72934b99b3109af65d77e86abd6859cddf4bbae1f0930462df15fddbc48562ea3511a8065ef028cf12f14dcf6ebecd8d884836174faf1aa609e5f1ee1162dfa13bdc1fa7cfaadba85c72e9758f03a755d0be53f8d2a1dfb1c68cc164b0a0780d971a96ea2c4d4ca0398c2235980a9307b3d5bd3b01faffd0a5dbed2881a9700af561ac8c6b00000000000e00f96f06817fb903729a7fb6ff957697c9ede7885d94ffb0969be0daf60af93109eb1dee72e4363f51af62af6fb2a6df3bec89822a7a0b678058fa3fef86faec216eb6992162f8dcbf719c148cd2f9c55f4901203a9a8a2c3e90f3943dbc10360a1a49700d1dfbf66d69f6fbaf506c8bcce8bb0d872a02238926407a4eddd5d0fc5a752f9000", 0x942}}, 0x1006) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f00000000c0)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000280)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000001c0)={&(0x7f00000002c0)=@ipv6_newaddr={0x18, 0x14, 0x800, 0x70bd2a, 0x25dfdbfd, {0xa, 0x18, 0xc2, 0xfd, r7}}, 0x18}}, 0x0) madvise(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x13) sendmsg$NFT_BATCH(r6, &(0x7f00000004c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000480)={&(0x7f0000000300)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWTABLE={0x3c, 0x0, 0xa, 0x201, 0x0, 0x0, {0x5, 0x0, 0x1}, [@NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x4}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x5}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_TABLE_FLAGS={0x8}]}, @NFT_MSG_NEWTABLE={0xc4, 0x0, 0xa, 0xcf9f7abc7691a883, 0x0, 0x0, {0x1ca709045b8084c8, 0x0, 0x3}, [@NFTA_TABLE_USERDATA={0x9c, 0x6, "3a0ae0d1b7ab31acfbee0d57b551090800dada15b1fd7b0bb3a55121e0c4d372a438937b98ce4df6dc63d0f03729745614fef992ae8a2873e22c35993d14f0ac8f4d95cda5196a2f82801195786e5022024a885897e9f8e7dc85ec7444d38956c115d4b231a246ae09b57e9ee8cf11857853476aae26e7ef8dcde00c0c4d91e4c26331355ff44fccad0cfbebc6aaeb73f07f406d0a02f1c4"}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}]}, @NFT_MSG_NEWCHAIN={0x34, 0x3, 0xa, 0x801, 0x0, 0x0, {0x7, 0x0, 0x4}, [@NFTA_CHAIN_TYPE={0x8, 0x7, 'nat\x00'}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x15c}, 0x1, 0x0, 0x0, 0x41}, 0x2c091) bind(r4, &(0x7f0000000500)=@rxrpc=@in4={0x21, 0x4, 0x2, 0x10, {0x2, 0x4e23, @rand_addr=0x64010101}}, 0x80) 2m18.612072564s ago: executing program 3 (id=5195): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r3, &(0x7f00000001c0)={0xa, 0x4e23, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x20}}}, 0x1c) setsockopt$sock_linger(r3, 0x1, 0x3c, &(0x7f0000000180)={0x200000000000001}, 0x8) sendmmsg$inet6(r3, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4001c00) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r4, 0x8924, &(0x7f0000000200)={'veth0_virt_wifi\x00', @local}) r5 = socket$inet6_udp(0xa, 0x2, 0x0) r6 = socket$pppl2tp(0x18, 0x1, 0x1) socket$inet6(0xa, 0x800000000000002, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$inet_udp(0x2, 0x2, 0x0) connect$pptp(0xffffffffffffffff, &(0x7f0000000080)={0x18, 0x2, {0x0, @rand_addr=0x64010102}}, 0x1e) sendmmsg$inet6(r5, &(0x7f0000002180)=[{{&(0x7f00000000c0)={0xa, 0x4e21, 0x3, @local, 0x3}, 0x1c, &(0x7f00000006c0)=[{&(0x7f0000000280)="cea8004d580cefc63f410a6d46f9431c8182c30108c6f1fb83d08513c14e9f3c8f862d84b66f4472bab3", 0x2a}, {&(0x7f0000000380)="615baee1da1f8807347acc3c53a0ac14478ab6ccbaf7e9bec260316b16039bc4b90e309d9f5a7bef097a56ed5bd256ef37e80ce3ac43dda56e0694de39af3f0d65b0227920bd4e6936aa0b517559ff10bce46c9e66c7d2f046b2b2bf607eec5549326659da070f6c3a5dd808427cef009ff22a029f389818b94d5abca8ea4895c8e429a1683e8fe5ee2a6e8684431d12e7e8f5e5de36045d32fefbbe227573114ac978fb2b686995fb095c48f61ff3f5289b9716b6d389", 0xb7}, {&(0x7f0000000500)}, {&(0x7f0000000580)="202cc177bd38206414975bffc5b19bb979ebe2182a79305541c58f27b49e008baff1cae76d35ed1ca962522d35a91a2728592cafceff6a2b121d0459932fc361a2edcfac71fb0514fdb1af808c917dfc9d2fbdee64f71e7313c26bcd7a2e437d3605b9e201466dda9a77", 0x6a}, {&(0x7f0000000600)="43eab1311c51d4a7645774e3415ebb70b484b02865956d8e761f25b97521f052bdd9a5b028301ef56486e356a3ab06b9562b73b259b2c9c3b9fc82f2ae99992e78f86b2bd7ba793ba82e12dfdf2e87a9bfb1f775d3006f827c23bfbabadcee7723bca291509dd44d968862f87128ffed577e58dc4bae175d068170ec2dac14b7df4eb57b7ede40f76aa4", 0x8a}], 0x5, &(0x7f0000000300)=ANY=[@ANYBLOB="3de1a332abcd6f884203e0b91400000000000000290000000b0000000000000200000000"], 0x18}}, {{&(0x7f0000000780)={0xa, 0x4e22, 0xf, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x2}, 0x1c, &(0x7f00000019c0)=[{&(0x7f00000008c0)="43605472deae43baf57c45fef1d8844523f927ead695781f13b72545b4a9898ec8beaadce302641210e71c8de03a166dc6d7d6128a31ce1ddc92f74a035f56d86bece8988c703dc0da439ec4834230ceb220281beff44f01cca03b64ed53bbc6daaa33158329aab2842162038666c5d661398a9021", 0x75}, {&(0x7f0000000940)="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", 0x1000}, {&(0x7f0000001940)="86b4dcdd8b60a97565afb2ccd3f96a8359d3ef97e7a16061ba9b83785b3e95aae62e939edf6290fb194ea81dd1125a0d78a2e19b3aa6850dfde9bbd5517fd11a597e9895ac4caa1d66", 0x49}], 0x3}}, {{&(0x7f0000001a00)={0xa, 0x4e20, 0x2, @remote, 0x7}, 0x1c, &(0x7f0000001c40)=[{&(0x7f0000001a40)}, {&(0x7f0000001b40)="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", 0xfc}], 0x2, &(0x7f0000001c80)=[@dontfrag={{0x14, 0x29, 0x3e, 0x5}}, @dontfrag={{0x14}}, @rthdr_2292={{0x28, 0x29, 0x39, {0x87, 0x2, 0x1, 0x0, 0x0, [@ipv4={'\x00', '\xff\xff', @multicast1}]}}}], 0x58}}, {{&(0x7f0000001d00)={0xa, 0x4e23, 0x6, @private2={0xfc, 0x2, '\x00', 0x1}, 0x2}, 0x1c, &(0x7f0000002040)=[{&(0x7f0000001d40)="198139d33e97e73cfb5bcc17f7c0156db9d6ccf27c66eb3256dff5d8f56901eff2d4b67ec4eaa5980b769c3f5bf498d2a0cdb07e55ae5bd9e5fd1c3a16765a0cbc85d7de9c187929f5bd31c227461b45de7290b9e6f9f378403790f7fb39204417f936f7f814c001842c699409d94f5871ce9e1159a7b91c8492e2e19e0e468e8c1ca9238d8a1b9d4e4e79164be69aa479909a4ba5a2b6cc49557b5322b57d276728c570bf36f376ada0b9d1f92b3706e9430f19a6cb4b5477720f56efc2df78370ccb39e205f875f1b564cdafd7010b72bafa25b9fd7ac93361caf595e27c473574c9aef85d6c2d27b9c028d660", 0xee}, {&(0x7f0000001e80)="a862f2ec59a8886c22cd0fd888e39f5a8ec23655edb41b624ff5453dea891fb7ec8784c8b6b0b13bb2889985cd863567fd395aa87fd218269abfc094061086034968bf9edd6ff40516dbc0b76843344a8843e7c59fb8b8b223aa30a35691299137210cbf19632b20a3b2bcc29bdd58bab50063c37522828caf7f0a86dd09ad3ff3cfec09cdb76625039015229bcff163dc8d95607f6559e8ec4f5a3145e019f570c5d0538e101f1730712f", 0xab}, {&(0x7f0000001f80)="85c69efe847356c540b73dd02867512ec59a0b8446e6", 0x16}, {&(0x7f0000001fc0)="e53b061ccc58e1ef767d40a78bd1d1245251983f53b14e1e978e785f7f72c1fa97f3e75b5fd5f016ee8648760cf455784ca846dc1ade091ca58be1743d3bc8e5e69a202eeb4a", 0x46}], 0x4, &(0x7f00000020c0)=ANY=[@ANYBLOB="1400000000000000290000000800000001ad890000000000480000000000000029000000040000000405000000000000c910fe8000000000000000000000000000bbc204000000010710000000010200bb0c0e00000000000000000000000000480000000000000029000000390000000c06000600000000fc010000000000000000000000000001fe8000000000000000000000000000bbfe8000000000000000000000000000bb"], 0xa8}}], 0x4, 0x4000040) r7 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000240), 0xc0001, 0x0) ioctl$PPPIOCATTCHAN(r7, 0x40047438, &(0x7f0000000340)=0x1) connect$pppl2tp(r6, &(0x7f0000000100)=@pppol2tpv3={0x18, 0x1, {0x0, r5, {0x2, 0xffff, @loopback}, 0x4}}, 0x2e) 2m17.42531407s ago: executing program 3 (id=5196): madvise(&(0x7f0000122000/0x4000)=nil, 0x4000, 0x66) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={0x0}}, 0x0) sendmsg$nl_xfrm(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000005c0)=@migrate={0xec, 0x21, 0x1, 0x0, 0xfffffffe, {{@in6=@private1, @in6=@private2={0xfc, 0x2, '\x00', 0x1}, 0xfffc, 0x0, 0x2, 0x0, 0x2, 0xe0, 0x80}, 0x2}, [@migrate={0x9c, 0x11, [{@in6=@dev={0xfe, 0x80, '\x00', 0x11}, @in6=@loopback, @in=@local, @in6=@remote, 0x3c, 0x0, 0x0, 0x0, 0xa, 0x2}, {@in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @in6=@private0, @in6=@loopback, @in=@broadcast, 0x6c, 0x1, 0x0, 0x0, 0x2, 0xa}]}]}, 0xec}, 0x1, 0x0, 0x0, 0x800}, 0x0) write(0xffffffffffffffff, &(0x7f00000000c0), 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x320, 0x0) openat$panthor(0xffffffffffffff9c, &(0x7f00000003c0), 0x2, 0x0) r4 = io_uring_setup(0x6e1e, 0x0) r5 = eventfd2(0x0, 0x0) io_uring_register$IORING_REGISTER_EVENTFD(r4, 0x4, &(0x7f0000000000)=r5, 0x1) io_uring_register$IORING_REGISTER_BUFFERS2(r4, 0xf, &(0x7f0000001580)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x20) read$eventfd(r5, &(0x7f0000000040), 0x8) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r4, 0x10, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000001a80)=[{0x0}, {0x0}, {0x0}], 0x0, 0x3}, 0x20) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_FD(0xffffffffffffffff, 0xc01864c2, &(0x7f0000000400)) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_FD(0xffffffffffffffff, 0xc01864c2, &(0x7f0000000440)) r6 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x6) ioctl$KVM_GET_XSAVE2(r6, 0x9000aecf, &(0x7f0000ffd000/0x2000)=nil) syz_open_procfs$pagemap(0x0, &(0x7f0000000600)) 2m16.371396257s ago: executing program 3 (id=5198): openat$vimc0(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) symlink(&(0x7f0000000040)='.\x00', &(0x7f0000000100)='./file0\x00') mkdir(&(0x7f00000004c0)='./bus\x00', 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCOUTQNSD(0xffffffffffffffff, 0x894b, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) shmat(0x0, &(0x7f0000ffc000/0x2000)=nil, 0x4000) mremap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1000, 0x3, &(0x7f0000fff000/0x1000)=nil) r3 = socket$tipc(0x1e, 0x2, 0x0) getsockopt$TIPC_IMPORTANCE(r3, 0x10f, 0x7f, &(0x7f0000000100), &(0x7f00000001c0)=0x4) r4 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_DEL_MIF(r4, 0x29, 0xc8, 0x0, 0xc000000) setsockopt$MRT6_ADD_MFC(r4, 0x29, 0xcc, &(0x7f0000000280)={{0xa, 0x0, 0x0, @loopback}, {0xa, 0x4, 0x0, @mcast2}, 0x0, {[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2]}}, 0x5c) r5 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x8002, 0x0) write$P9_RSTATu(r5, &(0x7f0000000780)=ANY=[@ANYBLOB="c20200007d00000005fa0000006a0000004000000000000000000000000000000010000000020000000000000000000000001f00046e6f6465767b6376666f7825ffffff8102000000000000000000000000003800704a86cec602007dfa673effeb09b5351f5bde054000000000187b8200b500003b595fcb"], 0x2c2) openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) 2m14.760341125s ago: executing program 3 (id=5201): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_open_dev$I2C(&(0x7f0000000d80), 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x9, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = openat$audio(0xffffffffffffff9c, &(0x7f0000000380), 0x149842, 0x0) write$dsp(r4, &(0x7f0000000040)='\x00', 0x1) mmap$dsp(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x100000b, 0x8012, r4, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000280)={0x0, 0x20, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="200000001000010700000000000000000a0000000c0002006e6c3830323131"], 0x20}, 0x1, 0x0, 0x0, 0x20000000}, 0x40050) syz_genetlink_get_family_id$l2tp(&(0x7f0000000500), r5) socket$inet6_tcp(0xa, 0x1, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r6, 0x8933, &(0x7f00000000c0)={'batadv0\x00', 0x0}) r8 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), r6) sendmsg$BATADV_CMD_GET_DAT_CACHE(r6, &(0x7f0000000280)={0x0, 0xf000, &(0x7f0000000240)={&(0x7f00000001c0)={0x1c, r8, 0x83625fc5352ba305, 0x0, 0x0, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r7}]}, 0x1c}}, 0x2000040) r9 = syz_genetlink_get_family_id$nbd(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="010000000000000000000100000008000100400000000c000200700f0000000000000c00060003000000000000000a000a00272d5d29212b0000140007"], 0x6c}}, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000004}, 0x4) 2m13.128833366s ago: executing program 3 (id=5203): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'virt_wifi0\x00'}) r1 = fsopen(&(0x7f0000000300)='tracefs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f00000000c0)='gid', &(0x7f0000000340)='0\x00#\x00\xd0\x00 \x00\x00qS\x00\x00\x00\x00\x00\x00\x00\x00$\xf6_\xbdI\x1c\xf2\xa9]\xcc\xe0*\xef\x05\x8d\x15\xd2h\x93\xc9\xb57\xc3\xeaEb\xf8\xe6,\xdf\xd4\xfae\x84\xcc\xd5\"d\xf0D-\x98\x9f\x81{\xfc$\xc4\xbcF\xf8\xc8\x8d\xcb\xb8\xf2\x1e\xe4\'U\xb3\xb8\xd3\xe6\xd7\x80Y\xc2\xeb\n\xb8_\xe8\x96YY\xe3\xc7\xe6\xf28\x19\xa6\xa7\xfa\xdb\x1ce\xc1\xf5O\xb1\x9f\xc5I\xect<\x8a\x00V\xcc\x03\x86J\xb2fh\x19\xee#\xcc\x0f\xed\xfea\xdc\x88\xcb%bW\xd35\xda=\xac\x1d\xae\x93\xfd\'T6\x94\n\xa4\x9cU\xc4\fA~[\xbf\x8b\x90\xfe\x04\xe7U\xf3h\x81\x14l7u\x95\x96t\x11&\x1bM_\\\x0f\xef;\x03\xa4C\xbc(Vc!a\xc1\xe39\xc6b\x905\xf8\xc9@h\x01\xf5\xcb\x88\xdf9\xaf5\xc8a:z\xe4\xcbag&67\x814\xf6}\xe10v6l\xd6,\x1e\xa0\xcc\xbf\xfdkm\b?\x839\x85N\x1c\xc1\xcb\xfc\x85\xd2\n\x02\"\xf2\x81g\x90\x01n%\x7f_\xe1.f>>\xa5\xfb\"\xab\xdb\x06\x12e\x14\x11~\x9a\bR-\x85\xc3\xa9\xe6\xf6R\x11\"\xc3\xc9\xfc\x14s X\xec\xdd\xc2qB\x85\xf0\xd7\x04\xdd<\x9a\x84\'\xa3\xf1\xd9<\xb9k*5\xac\x9a\b}\xfb\xe1\x89)\x1eU\xb4', 0x0) r2 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r2, 0xc04064a0, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0}) prlimit64(0x0, 0xe, &(0x7f0000000380)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$DRM_IOCTL_MODE_GETPLANE(r2, 0xc02064b6, 0x0) ioctl$DRM_IOCTL_MODE_GETCRTC(r2, 0xc06864a1, &(0x7f00000003c0)={0x0}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f0000000080)) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c000000070601"], 0x1c}, 0x1, 0x0, 0x0, 0x20048005}, 0x0) ioctl$F2FS_IOC_COMMIT_ATOMIC_WRITE(r0, 0xf502, 0x0) r5 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$SO_BINDTODEVICE(r5, 0x1, 0x19, &(0x7f0000000040)='veth1_virt_wifi\x00', 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newqdisc={0x30, 0x24, 0x2, 0x0, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0x10, 0x9}, {0xffff, 0xffff}, {0x0, 0x3}}, [@qdisc_kind_options=@q_pie={{0x8}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x604c011}, 0x41) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="3800000040000100feffffffffdbdf25017c0000040042800c00018006000600800a00001400028010000b800c"], 0x38}, 0x1, 0x0, 0x0, 0x48815}, 0x800c000) r7 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r7, 0x107, 0x12, &(0x7f0000000000)={0x0, 0xb007}, 0x4) r8 = dup(r5) sendmsg$inet(r8, &(0x7f0000000780)={&(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000001600)=[{&(0x7f0000000000)="be39", 0x2}], 0x1, &(0x7f0000000c80)}, 0x0) 2m11.483682556s ago: executing program 3 (id=5207): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$IPSET_CMD_GET_BYNAME(r0, 0x0, 0x4000) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) syz_emit_vhci(0x0, 0x7) openat$ptp0(0xffffffffffffff9c, 0x0, 0x0, 0x0) r3 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r3, 0x0, 0x2004000c) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000340), 0x22003, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000016c0)=ANY=[@ANYBLOB="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"], 0x510}, 0x1, 0x0, 0x0, 0x5}, 0x4) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r5 = syz_open_dev$vim2m(&(0x7f0000000000), 0x47b, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r5, 0xc008561c, &(0x7f0000000100)={0xf0f017, 0x3}) mknodat$null(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x103) r6 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0x20, 0x52, 0x1, 0x0, 0x0, {0x1c}, [@typed={0xc, 0x1, 0x0, 0x0, @u64=0x1}]}, 0x20}}, 0x0) mount$fuse(0x0, &(0x7f0000000740)='./file0\x00', &(0x7f0000000040), 0x3210001, &(0x7f0000000200)={{}, 0x2c, {'rootmode', 0x3d, 0x8000}}) lgetxattr(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)=@known='system.posix_acl_access\x00', 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1e0000006700000008000000ad00000008680100", @ANYRES32=0x1, @ANYBLOB="8100"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0300000003000000040000000500"/24, @ANYRES32, @ANYBLOB="09307d6a0e148981ad707c8109465f716c65be6e8570487e585dcd7d60c83a6c4c8361062446f4f5bc5c58562c"], 0x50) 1m55.285014687s ago: executing program 41 (id=5207): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$IPSET_CMD_GET_BYNAME(r0, 0x0, 0x4000) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) syz_emit_vhci(0x0, 0x7) openat$ptp0(0xffffffffffffff9c, 0x0, 0x0, 0x0) r3 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r3, 0x0, 0x2004000c) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000340), 0x22003, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000016c0)=ANY=[@ANYBLOB="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"], 0x510}, 0x1, 0x0, 0x0, 0x5}, 0x4) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r5 = syz_open_dev$vim2m(&(0x7f0000000000), 0x47b, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r5, 0xc008561c, &(0x7f0000000100)={0xf0f017, 0x3}) mknodat$null(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x103) r6 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0x20, 0x52, 0x1, 0x0, 0x0, {0x1c}, [@typed={0xc, 0x1, 0x0, 0x0, @u64=0x1}]}, 0x20}}, 0x0) mount$fuse(0x0, &(0x7f0000000740)='./file0\x00', &(0x7f0000000040), 0x3210001, &(0x7f0000000200)={{}, 0x2c, {'rootmode', 0x3d, 0x8000}}) lgetxattr(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)=@known='system.posix_acl_access\x00', 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1e0000006700000008000000ad00000008680100", @ANYRES32=0x1, @ANYBLOB="8100"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0300000003000000040000000500"/24, @ANYRES32, @ANYBLOB="09307d6a0e148981ad707c8109465f716c65be6e8570487e585dcd7d60c83a6c4c8361062446f4f5bc5c58562c"], 0x50) 1m35.620440306s ago: executing program 7 (id=5263): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000180)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x29, 0x14, 0x0, 0xffffffffffffffdc) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.bfq.io_wait_time_recursive\x00', 0x26e1, 0x0) r6 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r6, 0x29, 0x20, &(0x7f0000000080)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x800, 0x0, 0x2, 0x1}, 0x20) add_key$fscrypt_v1(&(0x7f00000002c0), &(0x7f0000000300)={'fscrypt:', @desc4}, &(0x7f0000000440)={0x0, "8527d2100090af54bfbca283be11c0de7af30e90937920fcba13d90af61beaa44d66a6535daf1bc35fb3af1e9197e31d26589d073c10184095fb00", 0x14}, 0x48, 0xffffffffffffffff) r7 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000700), 0x101180, 0x0) ioctl$SOUND_MIXER_WRITE_VOLUME(r7, 0xc0040d07, &(0x7f0000000040)=0x121) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, 0x7, 0x6, 0x5, 0x0, 0x0, {0x1, 0x0, 0x2}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20004080}, 0x48810) recvmsg(r8, &(0x7f000000c1c0)={0x0, 0x0, 0x0}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r6, 0x29, 0x20, &(0x7f0000000100)={@loopback, 0x0, 0x2, 0x3, 0x9, 0x0, 0xc96e}, 0x20) close(r5) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$SIOCSIFHWADDR(r5, 0x8b14, &(0x7f0000000000)={'wlan1\x00', @random="018d008dffff"}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000140)={0x2, &(0x7f0000000000)=[{0x28, 0x2, 0xfd, 0x5ae9}, {0x6, 0x0, 0x8, 0x7}]}, 0x10) sendmmsg$inet(r0, &(0x7f0000002c40)=[{{0x0, 0x0, &(0x7f0000000e80)=[{&(0x7f0000000a80)="2a73ed35", 0x732a}], 0x1}}], 0x400000000000292, 0x0) 1m34.268313374s ago: executing program 7 (id=5265): socket$inet_mptcp(0x2, 0x1, 0x106) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$team(&(0x7f0000000080), r0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000004700)={'team0\x00', 0x0}) r3 = bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r4 = getpid() ioctl$XFS_IOC_PATH_TO_HANDLE(r3, 0xc0385869, 0x0) sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r7 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_ADD_MIF(r7, 0x29, 0xca, 0x0, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x10000) r8 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x800) ioctl$SG_GET_VERSION_NUM(r8, 0x2284, &(0x7f0000000080)) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x400, 0x0, 0xffffffff, 0xffffffff, 0xd0, 0xffffffff, 0x330, 0xffffffff, 0xffffffff, 0x330, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [0xffffff00, 0xff000000], [0xffffff00], 'veth0_macvtap\x00', 'dvmrp1\x00', {0xff}, {0xff}, 0x88, 0x0, 0x3}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [0x0, 0x0, 0xffffff00], [0xff, 0x0, 0x0, 0xff000000], 'pimreg0\x00', 'gre0\x00', {}, {}, 0x0, 0x0, 0x3}, 0x0, 0x230, 0x260, 0x0, {}, [@common=@inet=@policy={{0x158}, {[{@ipv6=@private2, [0x0, 0xff000000, 0xff000000, 0xffffff00], @ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', [0x0, 0xffffffff, 0xff, 0xff000000], 0x4d5, 0x3504, 0x67, 0x0, 0x11, 0x13}, {@ipv6=@private0, [0xff000000, 0x0, 0xff, 0xff000000], @ipv4=@loopback, [0xff000000, 0x0, 0x0, 0xffffff00], 0x4d5, 0x3500, 0x5c, 0x0, 0x12, 0x6}, {@ipv4=@local, [0xffffff00, 0x0, 0x0, 0xff000000], @ipv6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [0x0, 0xffffff00, 0xffffffff, 0xff000000], 0x4d4, 0x3507, 0xc, 0x1, 0x0, 0x16}, {@ipv4=@multicast1, [0x0, 0x181ffff7f, 0xffffff00, 0xff], @ipv4=@local, [0xffffffff, 0x0, 0xff000000], 0x4d3, 0x0, 0x32, 0x1, 0x8, 0x6}], 0x2, 0x3}}, @common=@ah={{0x30}, {[0x4d4, 0x4d4], 0x84, 0x25, 0x3}}]}, @common=@unspec=@CONNMARK={0x30, 'CONNMARK\x00', 0x1, {0x0, 0xffffffff}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x460) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f0000004bc0)={0x0, 0x0, &(0x7f0000004b80)={&(0x7f00000000c0)={0x60, r1, 0x204, 0x70bd27, 0x25dfdbfe, {}, [{{0x8, 0x1, r2}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @name={{0x24}, {0x5}, {0xe, 0x4, 'broadcast\x00'}}}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x4000431}, 0x40400e4) 1m33.231965412s ago: executing program 7 (id=5268): bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) r0 = socket$inet_mptcp(0x2, 0x1, 0x106) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) connect$inet(r0, &(0x7f00000009c0)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10) writev(r0, &(0x7f0000000200)=[{&(0x7f00000000c0)='X', 0x8030000}], 0x1) shutdown(r0, 0x1) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000400)=ANY=[@ANYBLOB="18000000160001ea"], 0x78}, 0x1, 0x0, 0x0, 0x8000}, 0x0) recvmmsg(r4, &(0x7f0000002a40)=[{{0x0, 0x0, 0x0}, 0x9}], 0x1, 0x40002000, 0x0) recvmmsg(r4, &(0x7f0000002840)=[{{0x0, 0x0, 0x0}, 0xc}], 0x1, 0x60, 0x0) openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x41, 0x0) openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff8000/0x2000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) io_uring_setup(0x4fef, &(0x7f0000000040)={0x0, 0xa35e, 0x8000, 0x20000a, 0x35b}) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) ioctl$VHOST_SET_FEATURES(0xffffffffffffffff, 0x4008af00, 0x0) sendto$inet(0xffffffffffffffff, &(0x7f0000000140), 0x0, 0x0, &(0x7f0000004ff0)={0x2, 0x0, @rand_addr=0xfffffffffffffffe}, 0x10) 1m31.444173108s ago: executing program 7 (id=5269): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee6, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$MAP_CREATE(0x0, 0x0, 0x50) sched_setscheduler(0x0, 0x2, 0x0) getpid() sched_setaffinity(0x0, 0x0, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="240000006800010009000000000000000a00000000000000080001000200001004000b"], 0x24}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="1c0000006800e97800000000000000000a00000000000000040004"], 0x1c}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x24008000}, 0x4000) openat$ipvs(0xffffffffffffff9c, 0x0, 0x2, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000027c0)=@base={0x4, 0x4, 0x4, 0x10005}, 0x50) bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) dup2(0xffffffffffffffff, r6) 1m30.490077795s ago: executing program 5 (id=5271): socket$inet_mptcp(0x2, 0x1, 0x106) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$team(&(0x7f0000000080), r0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000004700)={'team0\x00', 0x0}) r3 = bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r4 = getpid() ioctl$XFS_IOC_PATH_TO_HANDLE(r3, 0xc0385869, 0x0) sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r7 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_ADD_MIF(r7, 0x29, 0xca, 0x0, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x10000) ioctl$SG_GET_VERSION_NUM(0xffffffffffffffff, 0x2284, &(0x7f0000000080)) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r8, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x400, 0x0, 0xffffffff, 0xffffffff, 0xd0, 0xffffffff, 0x330, 0xffffffff, 0xffffffff, 0x330, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [0xffffff00, 0xff000000], [0xffffff00], 'veth0_macvtap\x00', 'dvmrp1\x00', {0xff}, {0xff}, 0x88, 0x0, 0x3}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [0x0, 0x0, 0xffffff00], [0xff, 0x0, 0x0, 0xff000000], 'pimreg0\x00', 'gre0\x00', {}, {}, 0x0, 0x0, 0x3}, 0x0, 0x230, 0x260, 0x0, {}, [@common=@inet=@policy={{0x158}, {[{@ipv6=@private2, [0x0, 0xff000000, 0xff000000, 0xffffff00], @ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', [0x0, 0xffffffff, 0xff, 0xff000000], 0x4d5, 0x3504, 0x67, 0x0, 0x11, 0x13}, {@ipv6=@private0, [0xff000000, 0x0, 0xff, 0xff000000], @ipv4=@loopback, [0xff000000, 0x0, 0x0, 0xffffff00], 0x4d5, 0x3500, 0x5c, 0x0, 0x12, 0x6}, {@ipv4=@local, [0xffffff00, 0x0, 0x0, 0xff000000], @ipv6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [0x0, 0xffffff00, 0xffffffff, 0xff000000], 0x4d4, 0x3507, 0xc, 0x1, 0x0, 0x16}, {@ipv4=@multicast1, [0x0, 0x181ffff7f, 0xffffff00, 0xff], @ipv4=@local, [0xffffffff, 0x0, 0xff000000], 0x4d3, 0x0, 0x32, 0x1, 0x8, 0x6}], 0x2, 0x3}}, @common=@ah={{0x30}, {[0x4d4, 0x4d4], 0x84, 0x25, 0x3}}]}, @common=@unspec=@CONNMARK={0x30, 'CONNMARK\x00', 0x1, {0x0, 0xffffffff}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x460) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f0000004bc0)={0x0, 0x0, &(0x7f0000004b80)={&(0x7f00000000c0)={0x60, r1, 0x204, 0x70bd27, 0x25dfdbfe, {}, [{{0x8, 0x1, r2}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @name={{0x24}, {0x5}, {0xe, 0x4, 'broadcast\x00'}}}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x4000431}, 0x40400e4) 1m30.373637814s ago: executing program 7 (id=5272): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000380)=ANY=[@ANYRESDEC], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = fsopen(&(0x7f0000000200)='affs\x00', 0x1) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, 0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, 0x0, 0x0) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) open(&(0x7f0000000100)='./file0\x00', 0x12840, 0x116) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x8c, 0x0) prctl$PR_SET_MM(0x23, 0x4, &(0x7f0000ffd000/0x2000)=nil) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="240000002000010327bd7000ffdbdf2502000000000081001e000000080006"], 0x24}, 0x1, 0x0, 0x0, 0x240480d4}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[], 0x28}}, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, 0x0, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000024c0)=@newtaction={0xb4, 0x30, 0x58f, 0x0, 0x0, {}, [{0xa0, 0x1, [@m_ctinfo={0x48, 0x2, 0x0, 0x0, {{0xb}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CTINFO_ACT={0x18, 0x3, {0x80, 0x5, 0x5, 0x1, 0x2}}]}, {0x4}, {0xc}, {0xc}}}, @m_nat={0x54, 0x1, 0x0, 0x0, {{0x8}, {0x2c, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{0x0, 0x0, 0x0, 0x0, 0xfffffffd}, @local, @remote}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xb4}, 0x1, 0x0, 0x0, 0x20008000}, 0x8000) sendmmsg(r5, &(0x7f00000002c0), 0x40000000000009f, 0x0) 1m28.065857592s ago: executing program 5 (id=5273): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB="120000000000000000000001000000000210f1fbf1a177b166acb8", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r1 = shmget$private(0x0, 0x13000, 0x1, &(0x7f0000feb000/0x13000)=nil) socket$inet6_icmp(0xa, 0x2, 0x3a) r2 = shmat(r1, &(0x7f0000ff1000/0x3000)=nil, 0x400c) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="1c0000004500090000000000000100f102"], 0x1c}, 0x1, 0x0, 0x0, 0x481}, 0x50000) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1, 0x11, r4, 0x0) shmdt(r2) r5 = syz_io_uring_setup(0x3ec3, &(0x7f0000010400)={0x0, 0x86e1, 0x1, 0x8}, &(0x7f0000010080), &(0x7f0000000000), &(0x7f0000000000)) io_uring_register$IORING_REGISTER_BUFFERS(r5, 0x0, &(0x7f00000000c0)=[{0x0}, {0x0}], 0x2) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r5, 0x10, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000540), &(0x7f0000000300)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB, @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x88840, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r9, &(0x7f0000000000), 0x400000000000041, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000001e80)={0xdc, 0x0, &(0x7f0000001c80)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x78, 0x18, &(0x7f0000001980)={@ptr={0x70742a85, 0x0, &(0x7f0000000880)=""/4096, 0x1000, 0x0, 0x2d}, @ptr={0x70742a85, 0x1, &(0x7f0000001880)=""/79, 0x4f, 0x0, 0x11}, @ptr={0x70742a85, 0x0, &(0x7f0000001900)=""/123, 0x7b, 0x2, 0x24}}, &(0x7f0000001a00)={0x0, 0x28, 0x50}}}, @reply={0x40406301, {0x2, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x68, 0x18, &(0x7f0000001ac0)={@fd={0x66642a85, 0x0, r9}, @ptr={0x70742a85, 0x0, &(0x7f0000001a40)=""/42, 0x2a, 0x0, 0x26}, @ptr={0x70742a85, 0x0, 0x0, 0x0, 0x2, 0x9}}, &(0x7f0000001b40)={0x0, 0x18, 0x40}}}, @decrefs={0x40046307, 0x3}, @transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x9eb1666465971fe9, 0x0, 0x0, 0x58, 0x18, &(0x7f0000001bc0)={@ptr={0x70742a85, 0x0, &(0x7f0000001b80), 0x0, 0x2, 0x23}, @flat=@weak_binder={0x77622a85, 0x101, 0x2}, @fd={0x66642a85, 0x0, r0}}, &(0x7f0000001c40)={0x0, 0x28, 0x40}}, 0x40}], 0xfc, 0x0, &(0x7f0000001d80)="6190849a7859319ac7f17f11a960df19531cf4a64d469f8bc30f24d53dc0e4a8da4ef0f0a99613919c02fa89a0c2aa6f850afd9b7b857ca0b2ee30b3dc8a236f06922caf0361cc42431793cd8fadc7723a23b4aee40d7a4587dd5bc7856bfb091fd50d02eba32c9e12af3b596b3c0cfd35b77b2b8fcb7562830eac20af4f9cae5de0d468a31d1e470c6c9405a2a4f71d5c6dd27e7da2ba36243238dcff69dcde31cda203260adf32ecb0a0aaf7dba0862c656b7eae81ceee068c69e408e4db7a20f78c056053fbd6dad9023f4a4bbe201d008c76c7ba180345ed462b1bd9f51e12bc234716ff3aada2276307c7c4ebb60c8b8d1e326cf7580a25f821"}) syz_kvm_setup_cpu$x86(r8, r8, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@text32={0x20, 0x0}], 0x1, 0x3, 0x0, 0x0) ioctl$KVM_SET_NESTED_STATE(r8, 0x4080aebf, &(0x7f0000003680)=@vmx={0x3, 0x0, 0x2080, {0x0, 0x3000, {0x2}}, {'\x00', "00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008bc584c800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001f6f38740000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000005000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fbffffffffffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001a4900"}}) syz_usb_connect(0x3, 0x64, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000cb8be7406d04230848390102030109025200010000000009044000000e0100", @ANYRESOCT=0x0], 0x0) r10 = socket(0x10, 0x803, 0x0) sendmsg$SMC_PNETID_GET(r10, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x14}}, 0x0) getsockname$packet(r10, 0x0, &(0x7f0000000580)) sendmsg$nl_route(r10, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000080)=ANY=[@ANYBLOB="74000000100037042bbd", @ANYRES32, @ANYBLOB="080c0400040200005400128009000100626f6e64000000004400028008001c003d090000080003"], 0x74}, 0x1, 0x0, 0x0, 0x4040880}, 0x2400c050) socket$kcm(0x10, 0x8, 0x10) 1m25.77082878s ago: executing program 7 (id=5274): r0 = memfd_create(&(0x7f0000000000)='\x9d#\x00\xe6Z\x00\xafq%\xa5\x83\xa6\xb5\x00\x8dy\xf3\xb2\xe6b \x00\x00\x00\x00\x00\x00\x01\x00\x00\xf7\xffg\xf5\x12oP\xfe\xe6\xd2SLR\xa1\x00\x00\x17\x1f$^\xe1\x00\x00\x00\x00\x00\x00\a\xff;\xeb\xf1\xd0\xce\xe5\x19\x12\b\x01\xd9\xae>/\x05\x00\x00\x00\x15\x00\x00\x00\xa1\xa2\xe0g\x98\xbf*\xdcc\x12.\xb7\xbe`\'\xcb\xb6\xaf\xdc\xa0D\x93.\xf25\x957\xec\xfb\xe6|\\\xe4h\xfc\x14\x05\x00\xfd\xc7\x00\x00\x00\x00\x91\x98\x15\xec\xdb\xaa\t9\x11\xb4h$&0\xdd\x19\x86\x90\xbe\xd7\xdc\n\xcbC\x15\xfcp\x11\xdai\f{a?\xd0\xe1{\x84\xb5\x82q\x19\xacS\x88|\x99\xfd\x9eS\x80\xcb\x14G\xfa\xff\xff\xff\xff\xff\xff\xff\xcd\xf0%\x97!\xba\xe3J\xc2t\x96\xf8\xb1\xd2\x16\x8e-k\x12\xdf\xb9\xb6Pr\xd4\xb5X\\\xdbD\n\x03G\x00\x04\x00\x00\xbc\xac\x18\xba\xce\xb3%QF\x03\b\x9dh\xcb)\xf4f\x12[\xf9\r\t\xef{h\xb0\xc0:\x8f|\x8f\x06\xf8T\x826`M\x11\x1c\xb0*8\v\x1e\xcf\x03\xd3\xe8,?P\xac\x86\x13b\xa8D\x0f\x93\xab\x1c\x11\x00\xc5\x8d\x82\x9c\xd6B[\xc9\x00\xf5]\x81\xf3\xfd\x06M\xbe\xf9\xba$v\x8e\x9e\xef\xbc\x86f)\x01\xba\xdb\x9em\xe9\"\x03\x933P\x9b\xcc\x9b\f\xa7\x8f9\x988\tgC\xbc\xe0\xc5\xf4\xe0E%\xd9\xd8w\x00k\x042Y\xd9\xc5\xe59\xa95\xd1m\xd8hCuZYi\x10D\xb9\xe6\xff\x04K%yH\xe5\xf4\x8b\x03Ca8\x1e\xe9\\#\xf8O\fw\xd9\xf5cF\xcc\x1a2ex\xb4\x0fi$\x97\x81.\x02\x04m\xfbT2\xd4\"\x1e\xf0\x16\x0f\x97\xe6j}J\xca\xb8)f\xd5\xfd>\x9bU\xb0\x03Zt0\xc0b\xad\xef@o\xc1\xd6\x17T\f\xc30\xe2\x89\xf6L\x1b1\x9c\t\xa7\x80\x1b:\xbb\x04\xd7\xd1\x06\xa0\xe9\xbah\xb6\xb2\xea/{Q\xca\x14\x13\x9ajWt\xc9\xecd\r\xd5)\x1d\xaf\n\xc0\xc1\x1d}DY\x95&\xe7\xf4U\xff\xcd&\a\x9f\x1bg\xe5|~\xc1\xc5n\x12%ur\xa1\x9e`\xc2\x01\b,\x18\xaf\xccD\xdeag\xc6\xf3\xd6\x94\x9d\xae\x8bl\xee\x7fu\xe5bu\x84\x04\xb3@\xa1\xf7\xc6\x13\xf9I\xfa\x12\xfc\x96\",aT\xfd\"\x01\x92\xb1\xbf\x8a\x15\x88\xfd\x8f\x88\x87\x82\x9c:L\xd2\xb8\xfa5\x066\x82\xf3_LUr\xfa\xd2\x99d \x97c9G\x99\xe3\xcc$\x96cu\x97\xe7\xc7a\tm\xe8F\xc7j\xf8\x98\x81\xe7\xf7\xab3F\xf4\x83Mav\xd21\v\x99HG\xdfx\x1cPl\t#\xc1\x8e\xddW\x00'/679, 0x6) r1 = openat$fb0(0xffffffffffffff9c, 0x0, 0x180300, 0x0) ioctl$FBIOPUT_VSCREENINFO(r1, 0x4601, &(0x7f0000000040)={0x191, 0x258, 0x300, 0x3f, 0x2, 0x1, 0x0, 0x0, {}, {}, {}, {}, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x8, 0xe07, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x3}) sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, 0x0, 0x0) fallocate(r0, 0x0, 0x0, 0x400001) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000480)={0xffffffffffffffff, 0x0, 0x25, 0x2, @val=@uprobe_multi={0x0, 0x0, 0x0, 0x7fff, 0x0, 0x1}}, 0x40) r3 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r3, 0xaf01, 0x0) r4 = eventfd(0x0) ioctl$VHOST_SET_LOG_FD(r3, 0x4004af07, &(0x7f0000000240)=r4) ioctl$VHOST_SET_VRING_KICK(r3, 0x4008af20, &(0x7f0000000040)={0x1, r4}) mknodat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x1000, 0x103) r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x80800, 0x0) ppoll(&(0x7f00000004c0)=[{r5, 0x80}], 0x1, 0x0, 0x0, 0x0) creat(0x0, 0x181) ioctl$VHOST_SET_VRING_ADDR(r3, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000540)=""/67, 0x0, 0x4}) ioctl$VHOST_SET_VRING_ADDR(r3, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/231, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/57, 0xd000}) ioctl$VHOST_SET_MEM_TABLE(r3, 0x4008af03, &(0x7f0000000680)) kexec_load(0xd0ffbf, 0x2, &(0x7f00000002c0)=[{0x0, 0x0, 0x0, 0x10000}, {0x0}], 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VHOST_SET_VRING_ERR(r3, 0x4008af22, &(0x7f00000002c0)={0x1, r4}) ioctl$VHOST_VSOCK_SET_RUNNING(r3, 0x4004af61, &(0x7f0000000000)=0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x25, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffa}, 0x94) syz_emit_vhci(&(0x7f00000000c0)=ANY=[@ANYBLOB="040fec20720704"], 0x7) getuid() sendmsg$nl_xfrm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000540)=ANY=[@ANYBLOB="60010000100033060000000000000000fe8000000000000000000000000000bbfc01000000000000726154414a928be66fa5dd610748ebf10000000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ffffffff000000000000000000000000000004d532000000fe880000000000000000000000000001fcffffffffffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000006d000000000000000300000000000000fcffffffffffffff0000000000000000fcfffffffdffffff00000000fdffffff0000000002000400000000000000000048000200656362286369706865725f6e756c6c29000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002500080021000800010919002a68ca6a10b637ec3669d31b6f2d4011379abc4f661387bdc1000000"], 0x160}}, 0x40) 1m23.258562142s ago: executing program 5 (id=5284): syz_open_dev$usbfs(0x0, 0x1ff, 0xa401) ioctl$IOMMU_VFIO_IOMMU_GET_INFO(0xffffffffffffffff, 0x3b70, &(0x7f0000000040)={0x30}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) mbind(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x3, 0x0, 0x8000, 0x6) connect$inet6(r3, &(0x7f00000001c0)={0xa, 0x4e23, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c) r4 = socket(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r6) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r7, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x1000}, 0x3548, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x3}}}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)=@newtfilter={0x54, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {}, {}, {0xd}}, [@filter_kind_options=@f_basic={{0xa}, {0x24, 0x2, [@TCA_BASIC_EMATCHES={0x20, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xffff}}, @TCA_EMATCH_TREE_LIST={0x14, 0x2, 0x0, 0x1, [@TCF_EM_NBYTE={0x10, 0x1, 0x0, 0x0, {{}, {0x0, 0x0, 0x1}}}]}]}]}}]}, 0x54}}, 0x0) sendmmsg$inet6(r3, &(0x7f0000003cc0), 0x0, 0x4001c00) read$char_usb(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x5, 0x0, &(0x7f0000000180), &(0x7f00000002c0)='GPL\x00', 0x4, 0x0, 0x0, 0x41100, 0x3, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x6, &(0x7f0000000340)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], &(0x7f0000000380)=[{0x0, 0x5, 0x6, 0x9}, {0x3, 0x2, 0xf, 0x4}, {0x4, 0x1, 0xb, 0x8}, {0x5, 0x3, 0x6, 0x8}, {0x0, 0x5, 0x0, 0x4}, {0x4, 0x4, 0xc, 0x4}], 0x10, 0x4}, 0x94) ioctl$sock_kcm_SIOCKCMATTACH(0xffffffffffffffff, 0x89e0, 0x0) bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x18, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x1}, 0x38) 1m22.141075897s ago: executing program 5 (id=5286): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0x37, &(0x7f0000000140)={&(0x7f00000004c0)=ANY=[], 0x1c}, 0x1, 0x0, 0x0, 0x4001}, 0x4004000) r2 = dup(r0) r3 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f00000006c0), 0x100, 0x0) ioctl$IOCTL_START_ACCEL_DEV(r3, 0x40096102, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x6, @empty, 0x3}], 0x1c) sendmsg$inet6(r0, &(0x7f0000000800)={&(0x7f0000000080)={0xa, 0x4e24, 0x8, @loopback, 0x4}, 0x1c, &(0x7f0000000380)=[{&(0x7f00000000c0)="88", 0x1}], 0x1}, 0x4048043) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)='syz_tun\x00', 0x10) syz_open_dev$usbfs(0x0, 0x1ff, 0xa401) ioctl$BLKGETNRZONES(0xffffffffffffffff, 0x80041285, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) r6 = openat2$dir(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000340)={0x101000, 0x3abff4557abda158, 0x4}, 0x18) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000005c0), 0x4) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x6, 0x19, &(0x7f0000000380)=ANY=[@ANYBLOB="18020000feffffff000000000400000018110000", @ANYRES32=r7, @ANYRES64, @ANYRES32, @ANYBLOB="0000000000000000b70500000000000085000000a500000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x10, '\x00', 0x0, @xdp, r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) file_setattr(r6, &(0x7f0000000500)='./file0\x00', &(0x7f00000005c0)={0x82, 0x7, 0x7, 0x8, 0x2}, 0x18, 0x1000) syz_genetlink_get_family_id$devlink(&(0x7f00000001c0), r5) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r8, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) socket$packet(0x11, 0x2, 0x300) sendmsg$nl_route(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000540)=ANY=[@ANYBLOB="4c00000010001fff000000000100000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000240012800e00010069703665727370616e000000100002800400120006001800177b000008000a00", @ANYRES32=r8], 0x4c}, 0x1, 0x0, 0x0, 0x40001}, 0x4000) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000200)={0x0, @in={{0x2, 0x4e21, @empty}}, 0x5, 0x0, 0xf06, 0x1, 0x94, 0xffbffffb, 0x5}, 0x9c) socket$inet_sctp(0x2, 0x5, 0x84) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(0xffffffffffffffff, &(0x7f00000003c0)={0x15, 0x110, 0xfa00, {0xffffffffffffffff, 0x7, 0x0, 0x0, 0x0, @in={0x2, 0x4e21, @multicast2}, @ib={0x1b, 0xe64c, 0x10000, {"c24ab1821a495d9106bec29d29ee68ec"}, 0x0, 0x8fc, 0x1}}}, 0x118) 1m19.961949642s ago: executing program 5 (id=5288): symlink(&(0x7f0000000080)='.\x00', &(0x7f0000000000)='./file0\x00') syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000180)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeee, 0x8031, 0xffffffffffffffff, 0x4000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$xdp(0x2c, 0x3, 0x0) mmap$xdp(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x100000c, 0x11, r3, 0x100000000) inotify_init() userfaultfd(0x80001) ioctl$TIOCSPTLCK(0xffffffffffffffff, 0x40045431, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0026}]}) r6 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$int_in(r6, 0x5452, &(0x7f0000000040)=0x53c6) ioctl$SNDRV_TIMER_IOCTL_TREAD_OLD(r6, 0x40045402, &(0x7f0000000140)=0x1) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r6, 0x40505412, &(0x7f0000000380)={0x6, 0x9dc8, 0x0, 0x0, 0xf}) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r6, 0x54a2) close_range(r5, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f0000000340)={'bond0\x00', &(0x7f0000000400)=@ethtool_flash={0x28, 0x8, './file0\x00'}}) 1m19.33025484s ago: executing program 5 (id=5289): r0 = userfaultfd(0x801) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000140)={0xaa, 0x298}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) move_pages(0x0, 0x1efe, &(0x7f0000000080), 0x0, &(0x7f0000000040), 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000180), 0x400, &(0x7f0000000080)=ANY=[]) sendmsg$inet_sctp(0xffffffffffffffff, &(0x7f0000000700)={0x0, 0x0, 0x0}, 0x1) gettid() r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x180, 0x0) ioctl$TIOCGSOFTCAR(r3, 0x5414, &(0x7f0000000000)) ioctl$COMEDI_DEVCONFIG(0xffffffffffffffff, 0x40946400, 0x0) msgsnd(0x0, 0x0, 0xff, 0x0) msgrcv(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x2000) r4 = dup(0xffffffffffffffff) write$cgroup_subtree(r4, 0x0, 0x32600) r5 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00'}, 0x80) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000016c0)={r5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x4, 0x0, &(0x7f00000006c0)="d19db5e8", 0x0, 0x2, 0x0, 0x4}, 0x50) ioctl$UFFDIO_COPY(r0, 0xc028aa03, &(0x7f0000000040)={&(0x7f00002b9000/0x400000)=nil, &(0x7f00005cf000/0x4000)=nil, 0x400000, 0x2, 0x2}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) 1m9.490895914s ago: executing program 42 (id=5274): r0 = memfd_create(&(0x7f0000000000)='\x9d#\x00\xe6Z\x00\xafq%\xa5\x83\xa6\xb5\x00\x8dy\xf3\xb2\xe6b \x00\x00\x00\x00\x00\x00\x01\x00\x00\xf7\xffg\xf5\x12oP\xfe\xe6\xd2SLR\xa1\x00\x00\x17\x1f$^\xe1\x00\x00\x00\x00\x00\x00\a\xff;\xeb\xf1\xd0\xce\xe5\x19\x12\b\x01\xd9\xae>/\x05\x00\x00\x00\x15\x00\x00\x00\xa1\xa2\xe0g\x98\xbf*\xdcc\x12.\xb7\xbe`\'\xcb\xb6\xaf\xdc\xa0D\x93.\xf25\x957\xec\xfb\xe6|\\\xe4h\xfc\x14\x05\x00\xfd\xc7\x00\x00\x00\x00\x91\x98\x15\xec\xdb\xaa\t9\x11\xb4h$&0\xdd\x19\x86\x90\xbe\xd7\xdc\n\xcbC\x15\xfcp\x11\xdai\f{a?\xd0\xe1{\x84\xb5\x82q\x19\xacS\x88|\x99\xfd\x9eS\x80\xcb\x14G\xfa\xff\xff\xff\xff\xff\xff\xff\xcd\xf0%\x97!\xba\xe3J\xc2t\x96\xf8\xb1\xd2\x16\x8e-k\x12\xdf\xb9\xb6Pr\xd4\xb5X\\\xdbD\n\x03G\x00\x04\x00\x00\xbc\xac\x18\xba\xce\xb3%QF\x03\b\x9dh\xcb)\xf4f\x12[\xf9\r\t\xef{h\xb0\xc0:\x8f|\x8f\x06\xf8T\x826`M\x11\x1c\xb0*8\v\x1e\xcf\x03\xd3\xe8,?P\xac\x86\x13b\xa8D\x0f\x93\xab\x1c\x11\x00\xc5\x8d\x82\x9c\xd6B[\xc9\x00\xf5]\x81\xf3\xfd\x06M\xbe\xf9\xba$v\x8e\x9e\xef\xbc\x86f)\x01\xba\xdb\x9em\xe9\"\x03\x933P\x9b\xcc\x9b\f\xa7\x8f9\x988\tgC\xbc\xe0\xc5\xf4\xe0E%\xd9\xd8w\x00k\x042Y\xd9\xc5\xe59\xa95\xd1m\xd8hCuZYi\x10D\xb9\xe6\xff\x04K%yH\xe5\xf4\x8b\x03Ca8\x1e\xe9\\#\xf8O\fw\xd9\xf5cF\xcc\x1a2ex\xb4\x0fi$\x97\x81.\x02\x04m\xfbT2\xd4\"\x1e\xf0\x16\x0f\x97\xe6j}J\xca\xb8)f\xd5\xfd>\x9bU\xb0\x03Zt0\xc0b\xad\xef@o\xc1\xd6\x17T\f\xc30\xe2\x89\xf6L\x1b1\x9c\t\xa7\x80\x1b:\xbb\x04\xd7\xd1\x06\xa0\xe9\xbah\xb6\xb2\xea/{Q\xca\x14\x13\x9ajWt\xc9\xecd\r\xd5)\x1d\xaf\n\xc0\xc1\x1d}DY\x95&\xe7\xf4U\xff\xcd&\a\x9f\x1bg\xe5|~\xc1\xc5n\x12%ur\xa1\x9e`\xc2\x01\b,\x18\xaf\xccD\xdeag\xc6\xf3\xd6\x94\x9d\xae\x8bl\xee\x7fu\xe5bu\x84\x04\xb3@\xa1\xf7\xc6\x13\xf9I\xfa\x12\xfc\x96\",aT\xfd\"\x01\x92\xb1\xbf\x8a\x15\x88\xfd\x8f\x88\x87\x82\x9c:L\xd2\xb8\xfa5\x066\x82\xf3_LUr\xfa\xd2\x99d \x97c9G\x99\xe3\xcc$\x96cu\x97\xe7\xc7a\tm\xe8F\xc7j\xf8\x98\x81\xe7\xf7\xab3F\xf4\x83Mav\xd21\v\x99HG\xdfx\x1cPl\t#\xc1\x8e\xddW\x00'/679, 0x6) r1 = openat$fb0(0xffffffffffffff9c, 0x0, 0x180300, 0x0) ioctl$FBIOPUT_VSCREENINFO(r1, 0x4601, &(0x7f0000000040)={0x191, 0x258, 0x300, 0x3f, 0x2, 0x1, 0x0, 0x0, {}, {}, {}, {}, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x8, 0xe07, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x3}) sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, 0x0, 0x0) fallocate(r0, 0x0, 0x0, 0x400001) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000480)={0xffffffffffffffff, 0x0, 0x25, 0x2, @val=@uprobe_multi={0x0, 0x0, 0x0, 0x7fff, 0x0, 0x1}}, 0x40) r3 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r3, 0xaf01, 0x0) r4 = eventfd(0x0) ioctl$VHOST_SET_LOG_FD(r3, 0x4004af07, &(0x7f0000000240)=r4) ioctl$VHOST_SET_VRING_KICK(r3, 0x4008af20, &(0x7f0000000040)={0x1, r4}) mknodat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x1000, 0x103) r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x80800, 0x0) ppoll(&(0x7f00000004c0)=[{r5, 0x80}], 0x1, 0x0, 0x0, 0x0) creat(0x0, 0x181) ioctl$VHOST_SET_VRING_ADDR(r3, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000540)=""/67, 0x0, 0x4}) ioctl$VHOST_SET_VRING_ADDR(r3, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/231, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/57, 0xd000}) ioctl$VHOST_SET_MEM_TABLE(r3, 0x4008af03, &(0x7f0000000680)) kexec_load(0xd0ffbf, 0x2, &(0x7f00000002c0)=[{0x0, 0x0, 0x0, 0x10000}, {0x0}], 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VHOST_SET_VRING_ERR(r3, 0x4008af22, &(0x7f00000002c0)={0x1, r4}) ioctl$VHOST_VSOCK_SET_RUNNING(r3, 0x4004af61, &(0x7f0000000000)=0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x25, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffa}, 0x94) syz_emit_vhci(&(0x7f00000000c0)=ANY=[@ANYBLOB="040fec20720704"], 0x7) getuid() sendmsg$nl_xfrm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000540)=ANY=[@ANYBLOB="60010000100033060000000000000000fe8000000000000000000000000000bbfc01000000000000726154414a928be66fa5dd610748ebf10000000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0x160}}, 0x40) 1m2.990065442s ago: executing program 43 (id=5289): r0 = userfaultfd(0x801) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000140)={0xaa, 0x298}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) move_pages(0x0, 0x1efe, &(0x7f0000000080), 0x0, &(0x7f0000000040), 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000180), 0x400, &(0x7f0000000080)=ANY=[]) sendmsg$inet_sctp(0xffffffffffffffff, &(0x7f0000000700)={0x0, 0x0, 0x0}, 0x1) gettid() r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x180, 0x0) ioctl$TIOCGSOFTCAR(r3, 0x5414, &(0x7f0000000000)) ioctl$COMEDI_DEVCONFIG(0xffffffffffffffff, 0x40946400, 0x0) msgsnd(0x0, 0x0, 0xff, 0x0) msgrcv(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x2000) r4 = dup(0xffffffffffffffff) write$cgroup_subtree(r4, 0x0, 0x32600) r5 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00'}, 0x80) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000016c0)={r5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x4, 0x0, &(0x7f00000006c0)="d19db5e8", 0x0, 0x2, 0x0, 0x4}, 0x50) ioctl$UFFDIO_COPY(r0, 0xc028aa03, &(0x7f0000000040)={&(0x7f00002b9000/0x400000)=nil, &(0x7f00005cf000/0x4000)=nil, 0x400000, 0x2, 0x2}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) 39.08519405s ago: executing program 0 (id=5321): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r0, 0x0, 0x0) socket$unix(0x1, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) mount(0x0, &(0x7f0000000040)='.\x00', &(0x7f0000000080)='cgroup\x00', 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) getrlimit(0x8, &(0x7f0000000100)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000140)={'pim6reg1\x00', @link_local}) prctl$PR_SET_IO_FLUSHER(0x43, 0xfffffffffffffffd) r4 = memfd_create(&(0x7f00000005c0)='\xa3\x9fn\xb4dR\x04i5\x02\xac\xce\xe1\x88\x9d[@8\xd7\xce\x1f 9I\x7f\x15\x1d\x93=\xb5\xe7\\\'L\xe6\xd2\x8e\xbc)JtTDq\x81\xcf\x81\xba\xe51\xf5 \xc8\x10>\xc9L\x85\x17L\xbf\xcf\x91\xdfM\xf3\x02^T*\x00\x02\xb9~B\x9f\xacl\x1d3\x06o\xf8\x16H\xaa*\x02\xf7\xfb\x06\xf1\x83\x92\xa8\xc2\xcb\xae\xb0\xb4\x93\xb8\x04\xf1\x99\xc2yY+\xd9y\x8a\xd5b\xe8\"q\x1b0)\xccm\xacz\xc1\xadd\x9b6a\xf3\xdds\xbb\x88\xff\b\x85\xb3s\x00\x0e\xbcfvi\x85\xfc.|\xd4h\xec\x82o\x8e\x93\x11\xc1\xd4\xae\x05\x17=\xd9R\xd0\xd4\x90\xcf\x9b\xdc\xaeV\x88\x94\x9f\xe3\xefqi\xed\xa8w\xbe\xd0\xd0-tBl\x9e+\xd3\xed\xce\x9f\x83\x86\xf9\x12\x16Ts\x80\x13]C\xfb`\xc2`\xf7\x1a\x00\x00\x00\x00\x00\x00\x00k\xae\xcb\x1a.\xc2\x8f\xd1x4]PZ\x9e\xd5Y\xf0L\xa4\xbc\x84\xf6\x04L\xff0\x8b\\*\xf9,\xb6\r\x97\xedy\xe0\x8a\xe2\x8ck\xc6S\xc3g\xb9\x1a\xf8\x8f \x9d\x00u7\xd87\xf1E\xa4(Q\x80Fy\xb5\xe4q\xc9\xff \xd8\x9d\xad\x11\xf8m\xd3\xbc\x9e\x10D\x7f!\xca\x0ev\x15h$\x01\xdd\xe5\xce\xf8*\xb3\x01\x85\a\xe4\x00v&\x9c\xac\x9aN~o\xe5\x89\xd5\a\x9f\f\x1f\xc2e/\x8d\x1e\n\xd0_\xbd!^\xa46\xb8j\xc0x\n\xdb\xe1\xa3\xd6\xae;\r\x92@\xa5I\x88Z1F\xf0\x1at\t\xd0\x8a\x04m\x06\xf3BL\xffS\x9eY\xf4\xb0U \xf8\xd00\x88y\xebX\x92\xd5\xbb\xa1h7\xf3\xe0\x0f\xbd\x02\xe4%\xf9\xb1\x87\x8aM\xfeG\xb2L\xbd\x92-\xcd\x1f\xf4\xe1,\xb7G|\xec\"\xa2\xab\xf6\x84\xe0\xcf1\x9a\x8a)\xfa\x93J\xb9\x8d\xf3\xa8\xbe\x83\x12\xb6b\xef^\x1a\x81\xe9\xfa\x11g\nZ \xb7u\xf2\xf2\x06\x04\xb0\xb0Z\xd8\xf5\x13\xb6I', 0x2) execveat(r4, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) mremap(&(0x7f000054e000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f000022c000/0x3000)=nil) r5 = openat$audio(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$SNDCTL_DSP_RESET(r5, 0x80044dff, 0x1000000000000) sendmsg$NFULNL_MSG_CONFIG(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x1c, 0x1, 0x4, 0x201, 0x0, 0x0, {0x5}, [@NFULA_CFG_CMD={0x5, 0x1, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x31}, 0x20048808) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x80044940, 0x0) connect$unix(r6, &(0x7f0000000180)=@abs, 0x11) sendmmsg$unix(r7, 0x0, 0x0, 0x0) add_key(&(0x7f0000000040)='ceph\x00', 0x0, &(0x7f0000000000)="01fe000200373a4541062000a59ea940d2cb0b3692f5020000a00000050000000000eb000000a5e5be21c44e", 0x2c, 0xffffffffffffffff) 38.095224409s ago: executing program 0 (id=5360): syz_emit_ethernet(0x0, 0x0, 0x0) utimensat(0xffffffffffffffff, 0x0, 0x0, 0x0) socket(0x10, 0x803, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000040)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = syz_open_dev$usbfs(&(0x7f0000000480), 0x76, 0x162281) ioctl$USBDEVFS_IOCTL(r3, 0xc0105512, &(0x7f0000000200)) r4 = socket(0x10, 0x3, 0x0) write(r4, &(0x7f0000000080)="1400000052004f030e789e7ee2ce2fa4ff612d27", 0x14) recvmmsg(r4, &(0x7f0000005c80)=[{{0x0, 0x0, 0x0}}], 0x344, 0x10122, 0x0) r5 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000000c0), 0x141041) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r5, 0xc08c5332, &(0x7f00000001c0)={0x80001009, 0x0, 0x0, 'queue0\x00', 0xfffffffc}) write$sndseq(r5, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick=0x1f4, {}, {}, @raw32={[0x2600]}}], 0xffc8) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r5, 0x408c5333, &(0x7f0000000500)={0x0, 0xe, 0x1, 'queue0\x00'}) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x1000009, 0x4082172, 0xffffffffffffffff, 0x0) socket$unix(0x1, 0x1, 0x0) connect$x25(0xffffffffffffffff, &(0x7f0000000080)={0x9, @remote={'\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc', 0x0}}, 0x12) r6 = dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$VIDIOC_LOG_STATUS(r6, 0x5646, 0x0) read$char_usb(r6, &(0x7f00000000c0)=""/192, 0xc0) 36.46633553s ago: executing program 0 (id=5366): r0 = syz_open_dev$sndctrl(&(0x7f0000000440), 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) preadv(r1, &(0x7f0000000180)=[{&(0x7f00000001c0)=""/36, 0x24}], 0x1, 0x4, 0x2) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f0000000040)) r3 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040201, 0x0) r4 = syz_open_dev$sndpcmp(&(0x7f0000000200), 0x0, 0xa2c65) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000940)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x4c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x21}, @NFTA_SET_EXPR={0x10, 0x11, 0x0, 0x1, @counter={{0xc}, @void}}]}, @NFT_MSG_NEWSETELEM={0x50, 0xc, 0xa, 0x101, 0x0, 0x0, {0x7}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x24, 0x3, 0x0, 0x1, [{0x20, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_EXPR={0x14, 0x7, 0x0, 0x1, @counter={{0xc}, @val={0x4}}}]}]}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x3, 0x84}}}, 0xe4}, 0x1, 0x0, 0x0, 0xc800}, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000500)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x0, 0xa}}, 0x20) ioctl$SNDRV_PCM_IOCTL_SW_PARAMS(r4, 0xc0884113, &(0x7f0000000240)={0x1, 0x0, 0x200, 0x10001, 0xffffffffffffffff, 0x8, 0x2, 0x200, 0x4, 0x2c, 0x80000005, 0x1}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) ptrace(0x10, r6) ptrace$setregs(0xd, r6, 0x0, &(0x7f00000003c0)="18607651149d7b10b4024fbbdc08899b8f589df2dbb5d7a8d1b36cfab675cb3976ee8100e2878c9cfa178cac130eb046eda93df39ed4b41924dc225ad4028dd63defb87d698be5c749450b350a789dcfc6b2d6a696b5026d1e52f19274566d1da0f353dd65e330ebf71c5e823f2753c5fd76724828ef31b353e71805205c3dceb44cc4c7b3664e29fb") r7 = syz_open_dev$dri(&(0x7f0000000300), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_SETCRTC(r7, 0xc06864a2, 0x0) ioctl$SNDRV_PCM_IOCTL_STATUS_EXT64(r4, 0xc0984124, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_GET_COALESCE(r9, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000400)={0x0, 0x14}}, 0x0) getsockname$packet(r9, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x8f) r11 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r11, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000340)=ANY=[@ANYBLOB="3c0000001000030400000006000000005dcc0300", @ANYRES32=r10, @ANYBLOB="71e79fd800000000140012800c0001006d616376746170001400028008000500", @ANYRES32=r11], 0x3c}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)=@newtfilter={0x2c, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x74, r10, {0xffe0}, {}, {0xa, 0x1}}, [@TCA_RATE={0x6, 0x5, {0x39, 0x1}}]}, 0x2c}, 0x1, 0xf0ffffffffffff, 0x0, 0x4040940}, 0x0) kcmp$KCMP_EPOLL_TFD(r6, r2, 0x7, r5, &(0x7f0000000000)={r1, r8, 0x8}) 35.567398894s ago: executing program 0 (id=5371): syz_emit_ethernet(0x0, 0x0, 0x0) utimensat(0xffffffffffffffff, 0x0, 0x0, 0x0) socket(0x10, 0x803, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = syz_open_dev$usbfs(&(0x7f0000000480), 0x76, 0x162281) ioctl$USBDEVFS_IOCTL(r2, 0xc0105512, &(0x7f0000000200)) r3 = socket(0x10, 0x3, 0x0) write(r3, &(0x7f0000000080)="1400000052004f030e789e7ee2ce2fa4ff612d27", 0x14) recvmmsg(r3, &(0x7f0000005c80)=[{{0x0, 0x0, 0x0}}], 0x344, 0x10122, 0x0) r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000000c0), 0x141041) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r4, 0xc08c5332, &(0x7f00000001c0)={0x80001009, 0x0, 0x0, 'queue0\x00', 0xfffffffc}) write$sndseq(r4, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick=0x1f4, {}, {}, @raw32={[0x2600]}}], 0xffc8) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r4, 0x408c5333, &(0x7f0000000500)={0x0, 0xe, 0x1, 'queue0\x00'}) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x1000009, 0x4082172, 0xffffffffffffffff, 0x0) socket$unix(0x1, 0x1, 0x0) connect$x25(0xffffffffffffffff, &(0x7f0000000080)={0x9, @remote={'\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc', 0x0}}, 0x12) r5 = dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$VIDIOC_LOG_STATUS(r5, 0x5646, 0x0) read$char_usb(r5, &(0x7f00000000c0)=""/192, 0xc0) 31.669964577s ago: executing program 0 (id=5378): syz_open_dev$dri(&(0x7f0000000040), 0x1, 0x0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0x44, 0x30, 0x1, 0x0, 0x0, {}, [{0x30, 0x1, [@m_ct={0x2c, 0x2, 0x0, 0x0, {{0x7}, {0x4}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x1}}}}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) r1 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000040), 0x21041, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0x15) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r4, 0x5423, &(0x7f00000000c0)=0xf) ioctl$TCFLSH(r4, 0x400455c8, 0x400000009) ioctl$TIOCVHANGUP(r4, 0x5437, 0x0) syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0) mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f00000003c0), 0x280449d, &(0x7f0000000300)=ANY=[@ANYBLOB='fd=', @ANYRESHEX, @ANYBLOB="2c726f6f746d6f64653d30303030303030303030303030303030303034303030302c757365725f69643d31eea03ddc3caa801dd0569e3e261e9510d7b300b4a83e6b7e8c6c93750a6778986716d7b5d676d04331a198d374fb2ab25512a8407ee7a763372418fc0d3bc2", @ANYRESDEC=0x0, @ANYBLOB, @ANYRESDEC=0x0, @ANYBLOB=',\x00']) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000001b00)={0x18, 0x2e, 0x1, 0xf0bd26, 0x25dfdbfc, {0x4}, [@nested={0x4, 0xd}]}, 0x18}, 0x1, 0x0, 0x0, 0x4000d}, 0x20000000) shutdown(0xffffffffffffffff, 0x2) write(0xffffffffffffffff, 0x0, 0x0) 16.391826372s ago: executing program 8 (id=5412): socket$kcm(0x2d, 0x2, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_GET(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000940)={&(0x7f0000000000)=ANY=[@ANYRES64=0x0], 0x10}, 0x1, 0x0, 0x0, 0xa0f0d2ee7e986339}, 0x81) prlimit64(0x0, 0x6, &(0x7f0000000140)={0x8, 0x8b}, 0x0) syz_open_procfs(0x0, &(0x7f0000000700)='mounts\x00') socket$nl_route(0x10, 0x3, 0x0) socket(0x1, 0x80000, 0x3a) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x6, 0x8, 0x8001, 0x0, 0x9, 0x4, 0xfffffe0000000001, 0xfa14, 0xffffffff}, 0x0) openat$vimc2(0xffffffffffffff9c, 0x0, 0x2, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = syz_open_dev$evdev(&(0x7f0000000080), 0xa, 0x300) ioctl$EVIOCGEFFECTS(r5, 0x80044584, &(0x7f0000000200)=""/238) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000000f40)=@raw={'raw\x00', 0x8, 0x3, 0x478, 0x1c0, 0xffffffff, 0xffffffff, 0x1c0, 0xffffffff, 0x3a8, 0xffffffff, 0xffffffff, 0x3a8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@remote, @loopback, [0xff, 0x0, 0xff, 0xff], [0xffffffff, 0xff, 0xff], 'team_slave_0\x00', 'netdevsim0\x00', {}, {0xff}, 0x29, 0x3, 0x0, 0x60}, 0x0, 0x1a0, 0x1c0, 0x60030000, {0x0, 0xff000000}, [@common=@inet=@recent0={{0xf8}, {0x9, 0x2, 0x24, 0x0, 'syz0\x00'}}]}, @unspec=@TRACE={0x20}}, {{@uncond, 0x0, 0x1c8, 0x1e8, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x1, 0x1, 'syz0\x00', 0xfe}}, @common=@mh={{0x28}, {"b11c", 0x1}}]}, @unspec=@NOTRACK={0x20}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4d8) quotactl_fd$Q_GETFMT(0xffffffffffffffff, 0xffffffff80000402, 0xffffffffffffffff, 0x0) ioprio_set$pid(0x3, 0x0, 0x0) ioprio_get$uid(0x3, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r0, 0x8983, &(0x7f0000003640)={0x0, 'hsr0\x00', {0x1}, 0x7}) r6 = open(&(0x7f00000003c0)='./file0\x00', 0x48040, 0x0) finit_module(r6, 0x0, 0x2) socket$kcm(0x2, 0xa, 0x2) 15.260936285s ago: executing program 44 (id=5378): syz_open_dev$dri(&(0x7f0000000040), 0x1, 0x0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0x44, 0x30, 0x1, 0x0, 0x0, {}, [{0x30, 0x1, [@m_ct={0x2c, 0x2, 0x0, 0x0, {{0x7}, {0x4}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x1}}}}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) r1 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000040), 0x21041, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0x15) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r4, 0x5423, &(0x7f00000000c0)=0xf) ioctl$TCFLSH(r4, 0x400455c8, 0x400000009) ioctl$TIOCVHANGUP(r4, 0x5437, 0x0) syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0) mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f00000003c0), 0x280449d, &(0x7f0000000300)=ANY=[@ANYBLOB='fd=', @ANYRESHEX, @ANYBLOB="2c726f6f746d6f64653d30303030303030303030303030303030303034303030302c757365725f69643d31eea03ddc3caa801dd0569e3e261e9510d7b300b4a83e6b7e8c6c93750a6778986716d7b5d676d04331a198d374fb2ab25512a8407ee7a763372418fc0d3bc2", @ANYRESDEC=0x0, @ANYBLOB, @ANYRESDEC=0x0, @ANYBLOB=',\x00']) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000001b00)={0x18, 0x2e, 0x1, 0xf0bd26, 0x25dfdbfc, {0x4}, [@nested={0x4, 0xd}]}, 0x18}, 0x1, 0x0, 0x0, 0x4000d}, 0x20000000) shutdown(0xffffffffffffffff, 0x2) write(0xffffffffffffffff, 0x0, 0x0) 12.706087597s ago: executing program 9 (id=5420): symlink(&(0x7f0000000080)='.\x00', &(0x7f0000000000)='./file0\x00') syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000180)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeee, 0x8031, 0xffffffffffffffff, 0x4000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$xdp(0x2c, 0x3, 0x0) mmap$xdp(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x100000c, 0x11, r3, 0x100000000) inotify_init() userfaultfd(0x80001) ioctl$TIOCSPTLCK(0xffffffffffffffff, 0x40045431, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0026}]}) r6 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$int_in(r6, 0x5452, &(0x7f0000000040)=0x53c6) ioctl$SNDRV_TIMER_IOCTL_TREAD_OLD(r6, 0x40045402, &(0x7f0000000140)=0x1) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r6, 0x54a2) close_range(r5, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f0000000340)={'bond0\x00', &(0x7f0000000400)=@ethtool_flash={0x28, 0x8, './file0\x00'}}) 12.131363453s ago: executing program 9 (id=5421): r0 = openat$comedi(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/comedi4\x00', 0xa002, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) getsockopt$inet_int(r2, 0x0, 0x13, 0x0, &(0x7f0000000140)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = fsopen(&(0x7f0000000500)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0) r6 = fsmount(r5, 0x0, 0x0) fchdir(r6) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x3}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0x70, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x2}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x48, 0x4, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x4}}}, {0x30, 0x1, 0x0, 0x1, @cmp={{0x8}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_CMP_DATA={0x10, 0x3, 0x0, 0x1, [@NFTA_DATA_VALUE={0x9, 0x1, "9c979b3226"}]}, @NFTA_CMP_SREG={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_CMP_OP={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xe4}}, 0x0) mkdir(&(0x7f0000000040)='./file1\x00', 0x0) mkdir(&(0x7f00000001c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000340)='./file0\x00', &(0x7f0000000140), 0x200800, &(0x7f0000000080)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@volatile}]}) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file1/file0\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000000), 0x0, &(0x7f0000000440)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file1/file0'}}, {@upperdir={'upperdir', 0x3d, './file1/file0'}}]}) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000500)=@ipv4_newroute={0x30, 0x18, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, [@RTA_ENCAP={0x14, 0x9, 0x0, 0x1, @LWTUNNEL_IP_OPTS={0x10, 0x8, 0x0, 0x1, @LWTUNNEL_IP_OPTS_ERSPAN={0xc, 0x3, 0x0, 0x1, @LWTUNNEL_IP_OPT_ERSPAN_VER={0x5, 0x5}}}}]}, 0x30}}, 0x0) ioctl$COMEDI_INSNLIST(r0, 0x8010640b, &(0x7f0000000000)={0x1, &(0x7f0000000080)=[{0x2000000, 0x0, 0x0, 0x0, 0x10000}]}) 11.482661065s ago: executing program 1 (id=5422): getsockopt$inet_sctp_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f00000000c0)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$sock_int(r3, 0x1, 0x21, &(0x7f0000000040)=0x3, 0x4) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="14000000030101"], 0x14}, 0x1, 0x0, 0x0, 0x20000844}, 0x0) sendmsg$NFNL_MSG_ACCT_GET_CTRZERO(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000200)=ANY=[@ANYBLOB], 0x14}, 0x1, 0x0, 0x0, 0x10000}, 0x4000) close(r3) r4 = io_uring_setup(0xe6c, &(0x7f0000000080)={0x0, 0x34bc, 0x2, 0x1, 0x21}) io_uring_register$IORING_REGISTER_SYNC_CANCEL(r4, 0x18, &(0x7f0000000100)={0x4df, 0xffffffffffffffff, 0x3, {0x7, 0x9}, 0x5}, 0x1) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x4e21, @empty}, 0x10) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x8, &(0x7f0000000100), 0x4) connect$inet(0xffffffffffffffff, 0x0, 0x0) sendto$inet(0xffffffffffffffff, &(0x7f00000013c0)="bd31", 0x2, 0x0, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r5 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0) ioctl$COMEDI_DEVCONFIG(r5, 0x40946400, 0x0) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000007, 0x12, r5, 0xbc7ae000) 10.480561057s ago: executing program 1 (id=5423): r0 = socket$kcm(0x11, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = socket(0x400000000010, 0x3, 0x0) rmdir(&(0x7f0000000080)='./cgroup/../file0\x00') fsconfig$FSCONFIG_SET_BINARY(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) r5 = fsmount(0xffffffffffffffff, 0x0, 0xc) r6 = openat$cgroup_subtree(r5, &(0x7f0000000100), 0x2, 0x0) write$cgroup_subtree(r6, &(0x7f0000000980)={[{0x2d, 'pids'}]}, 0x1f) r7 = getpid() r8 = syz_pidfd_open(r7, 0x0) setns(r8, 0x24020000) socket$nl_route(0x10, 0x3, 0x0) move_mount(0xffffffffffffff9c, 0x0, 0xffffffffffffff9c, 0x0, 0x64) r9 = openat(0xffffffffffffff9c, &(0x7f0000000680)='./file1\x00', 0x143041, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, 0x0) write$UHID_INPUT(r9, &(0x7f00000021c0)={0x8, {"d093c7a9e8cc37eaf83e1340340aa5a2665a0d3428832da6fc77e1520bc983ee2dea8084b4bc01286683002339d3230996bfbc1f285426e9cbed36257db8b085b972b9bb0b3fe02690495574e22994030a73fa4c477e48edf9d58c7bf560034da548866a210f683af1c02efe3e5d2bd4fd6405bb02a5de3955322eb2f064407c1f7545596e1843ad5c9be9684ff81817d33fd9d3d526ff33292ecac87fb1a518520e91897857f40672b72fb6928eb627ebad83de041b7a2b5e811f9298b77d3a6396a67b0fc2c51f1e9f6e1c67132930d0675e38679c4e7d37623ac9f3c06561ef32cb5167b4ca24f114876d3e53d97701c5da4ff0aa68537bc0d426d25e6ace4b7affa48293649a16e1db1fb037f9afe3adf9dfb77452c697feca0ce63255c0d435c34f9f15c059288e477a3ea7448b43a273eba429bcddb6d447711af41516c13c1598dfef851a73d025b4d9281b479b3de3c675537338972f1d08c3eb7a784b61f6d3e99cd746c797abe0c19e93a4d0aa3021053088bc6e587a6c9859ebb677591d80e16000aba1be3236879ff5aedec8e68bfba46139fbbaff1003a5b7791cdc64534a879e0d3304e19990142414a919043210709b8814c95a89c441bc2f37d3053b124be8c86d37a2945cd1058f2d65e2c13a14ca328f1a5cb432498e553d990ccd9fb97b3d255f7061dea73ad4fb584760b2237988dbd74bee674c9e61f8cdfcf1c41828832456a0d99b4d12506d23d7ff3d96ddca6cbdce9866c1e548cf13f353449a5a7f33ade32fbb17422e9f3ce0ee581f51d102f76cae618c87f884872cef74cc36dc8c1b6a69d0cf342f44aac3fdbba438db3c0705b3042639ecdb63e6cc92ac3d6b77ab6f5113688ee0d359951f571642d4bea9e9b7aa458cc18e502fe5dd0659ee3f6e7bb340bc638275347845d5074acb98d8e3afef3725af209883f2cbdccbf283512fe23a97a8c1ec1729acd1937498e2c07fd6f99361ca5c2f83254178ab8c4843c898e6f015b9943d8e08e0f1843dfa9ce993f99d4d250573bf50da7ec226cd7983acac4a616295176ce1f39feca46cf027ef1283bf8ce38de1bfb8a629ec400a8edd7d1e74890e7bac000c3f43860543e83991188775e7149fe6c103b5fb69dad935ac90f1b6b02e4c5aef921792e16e77d6ef207831606b8d48a2234443e58a65aa023a0488be5ed71c99dc1fb19c61423dc73a9e80aa434e4690203e4ebc1827b5ebfed61c99d4429e41e572d46942b756846829621596a93434186f6a630624285eeed1d064013cd40e99e40fc387df96a755d224be8bcc58355a22bd9cbe8cbdd70a7fc0ec045ff8453f156221a05af2ceb410f422e2ea1248a9d93c308ea141758d3731748d508856ca3419e4c2b060f2d2a68d13b2bd7068e19c26fb2cd37132ee4b2ceeebffbbf53cb7bde0cd8a875163c37d3ffa6ab66992ac20a84d89b704379868a6e7bff130532f3db59a93531f3a4eab5d13b6bf4cf507b1bea8d8450b97a8b5dbc9d6dafa8b364516c68e0b7f3ae52f4fbcfbeb146acf3df151cf567e2af5738aa8cc406b1cac1f1b3179cdf7a09cfc56bb4f9b35c16043073d3bdd8ad98b0ca381438cdc6debaa0b8bb18d76d046a62f8d2786399b65a6824d71736dc696c89ef684025486e97162d0b485b4e6e7555890f1b0a04476702a2ef0af65dc8516cf828988fc6e355fc5a27291e310f75a24d3d0f2a483ab8c0d90f26d5b5c94e44db80242288b7e98e619464b87014fc582a4722e8eafb974876076f01c55541cc18bf89278b3ad34fedfdbc2a9579d6cc471ddcb97c02e3b0f0fafc41ff925af9468a63c4add2b8fe02724834a6601f498290d0169dbdf78817d337a4335f4e3e9ec1c97b0d032014ea73bd1e258bdad289b19b158bdb103bf99723b56e09d7b46bc9def8a000f3b2e1941e2da3db6d9016b6784e79408ec2aaa0ff6eb6b2aaa7802bc82da79486586f077ccf5124f72214367049092685485e4c05d1d6887f7d47be71718512d4614fa246194e5f8f7332c3f272599cacefcc77bb6c0b96fa6b32fad8a8dbff513d26c6cb7ea045c2f5a1dc819a83bbcf278ed575d8fba2d902f667111d81758d584bfaa7af6ec365a97f5e29f0a42a53a58d1b3c7bf7880c872bf7dfb67f61d46ef7913a88ee32eed9b7049f38b9cb3cc28188a702469230aac224fdb69027d792fee48927f7aeee6231a5b1d8169991082987681e9b263cc9ef5c43b31de254ceac20795a75c85784cf72e2e21196ec02e85ab9927560fed107b92d04920c39f1a5ddc75b07306823620b789b8d1451a72a65cc0c05d98d716d2bd86befd2e31391787be2fc10851e22b060e5f3582649dc72a3cf71d6190c6d77f1b14f03f980397d6b3d067fb82e88e1f98e450a28b8959829f006caa43d2b9e500759472565cb6c56103cae24ced02fd500d4af691751100b09daaa48793e6c87d297bce2ed6615c1d57ecaaad3dbedb623f39543d6b4d5da1fff941bd430957b2538ff78b22ad2a43b97019c53ee3e9abeb165cfacb0549953116e09c22fa36ec651c80c4c3833d5d41160ea6b53830e0ced65eda0d143b0095c1a27a65bc017564cdf09b5f481a1bf417411385127d25b121fb7aa10784928d3ad5382581f50d0ae3c2c65e9a4a1c76f2edcf1b4b8aa19e0e3fbdc4caf1441cedbde4aec501dfad3b1cab1b663e86cec2c774b78e533bb9384164251c0073dac671d983e379ae4a3018db214befc556a9751f42ca96188d4f461f367fdd9251c0f2fc9123bd39dac72be042625aee0784543f4cbee3900f6c80de80062ec71d5fa55c945389edc8da4008e0e8324317a23a36f0e86cad3d879937b5cd35d8056e05fbda84d3d586a1cd3a3663818ae0271eda8712051f2e0a50b0fac86159f043fdd8bb51b55617a2006156fa60665e4bbe1c5814722443c3ab3bf154b2a3cf53ee26ffca07f6c745ace399b88f32edcc1c396f475b0bb80908486d1310d99475e0b3d2020de41bcf67eaf4b5af1276bb2770a96f7481aabdb0ebdfe80b6e869afd9af26b27f4a4fd876fab0c5d70be0bd3e0ff0ae38248474c9e4492e82838318e65697cca8519de852c262cb2a7d0603fbed0b1129ac7b8f04760cce4171b6596859ad49be03950ef607d12f48e055742281d49ad750a20e19d869e231b4b9f5c6a120945a28e3e9dbaf508c55d8926b187879b62e8234b3eddcf0b242a617933000e6f03809d7d1f9cce8c81064001f1ed8afa1db726292c5693b90381f78b6af1936d137bb4a160ac66c0296424d38febdbb8a2c3a00e34757256abfe1102d3520321929c9f12f1829c4e720a9079002ce4da2d472f1c821831f7598e2b2e896043c7faaf9baf942af69756c94aad3a1f97bcaef9fb78c933ef3d4ae02857574a6ae05cda9e2b82746e1c464d849441b3d3224cf5ca02d79584e70df2326185389d0080475082de812d5eaddd3f79451478e7a17ba614592733abbf3fe1a5986540c6bf1c7d8a7e4fe2aae85b0a0934b2d124761bee790eb32a6e57107bc23cf1ee1e285ab126ccfd04c525f1dd131313f96545ffdbcfa2c3d6f67ba024fbff356b0049ac183c265f29bfd07ad3d69875caa58891d0e49d561bac1ed2c632fe83114833f77f51096eb9eda70a064bcab6af77fe22e7347fe1b3948847c4c92f243f64a66b9de017145da59ac2a14c39c33b6fcecf233849a74fd22778789575dbb0b7b0b3e8fc56b97bb2813ab54a09117348e728b9eb5f8ff357f0470d4785f6704d13c69cfbd91f2e50a4a92ce773b05edd049f9d4a6674c821bf15a073bb407dda18143a77e6714d1319fabe4e9bf47ff90b385058814fbef7384152202d171785ccbd4a0efe4ddce2be36fb081542d5b4486ada2e755d37ed186ff507a3261df8181a1975e9bac087de161b4ea33bfbd2a171a1fdc5108fedee5e236b787d8fc3eb5ede60fcc9f0899e4c0064b9d0e77d9b11640983862c0dd6ecdf695c334a6586c1e2bf441a68103a242a095b1bccbebd3d1760ef900ddc09f3aa62b5ddc0f5198c6185ee75ea78f2116d7651b7bfa14ccab6dbbee71f82cffb3cd44c48333fef6c4d43d41833d0d867796a83ffd5cd6fd6dd1553e9727e3478c5203b9d7f86c39bc91a97c5501dbc141a9d3260ae1310b4d4d0714c76d94eb5acff3a77d1f079a3b28fcc02c23b2b508ea09f9f1aab214830bd8f1768a6a2452947aedebc7aa8a7e7e58377e615c082ef8d3fc5d3c57ec7351342ee8a27c3e78d52528022318fe6955da2e47a7d3b9d04363a764869ede31df10a6da1cd791177a187413c7b1af1a984a9ac6e3dca2ed86880f065303f917337872f75afc87ff199c9f996a79a199be35865311468e1f5131b2d57c081743bf0736f88bf21b6e766fb4939f5196e64e45df45633cee606bd76af4305f4f45c0448c56b6519170c6cabbcb8094d6507dc3be7a6f0fca2d2d54a17edbbd0c050ea99f0c451a29f9977ed944809c5ee28e6840cd71a893ac390d7eb147da9abd049fc4a5ad86481de4ac172c5557fae95ebe4cff1119cf001e5c275e6a0c09ddbfc361bd5e9b4a4e6047c5057ca5f0a4487760ac9e9e0589032592126a3a36192467577cfd65ccdca7583b013e78c1ac30f33703f2ed0efce0103b15d26d12c31fcd16b063992db11bf763851617e285a04625880bbc8375f1295063a47b46a4a2bd368a3a77f1d4e067f977631ed89a07284641233e6c38806db9faedf117547104190534a845de9983a392670db9aea24aa33f767d63d048ba2f61cda66bb6b29f4ece14491f1527f3b06732e64d25558cd394e09b2197bc63c933a531ab26f8a6367f57ddcdc0c2f08947d747db27f95040200ff76cca9f493b9530547dd4e187791e9e10d339d796d97e02e090a30bfbee6c34cead2f72f0281131120358953d30451c00dd8c44e2ef6b4d60c0de0b01469ecad512d0f6904521ec7a13c1f9771e889fe62a678ccd0d8a7ea3f6c7c2a0cc5948beb776afdd532c4239b60eb355ba94a8ee47cee0978d5a2d7ca83bbfdff94a6318a217cb15f90e472a9aee5ea1bcaff2200f27f0ef05281e3ef9c50cea2b97d632a6eaa8dcb535cf5f9239de2610f8bd51a7416db86fed03dc5a7d2e9f5bb0d8fe78894a40f83a31354f98bf5924b0171784dde8ccdde7236cc103f14d5632aac726959d270a037b2c0d809dd8743e91789a3b345c0d33ad56db696c8f0947c5d5ed2f0285d5f55ffe8b8a2f3048dc2eab55e33a43eccaf6c74abc1ac0ccec5b7c714f11429b09dd422660e79852a4cdc64f73ea3ecba8a61772712c53b79f44e63dfad0e661cb284965cf87aa1d9bb8f4deba5fcfe4c5be3b6ca23a3a449021239263650b7e455519610b67875669ef90dc9c22c6f9b8743d1304cd0054dbae67ee662b17e5f756374a580f219d47e5ad67025f901b75b437dee365bf5e5b4e07b9125d83017f6244481e3c6457190da31f4e32d3dde3ae910bd33d053a13e5bc5e9751a8de424a16af6a3a355fbf5a06bf9470add60e5213baffdee4e1307caa9d85f7493072627a1173b127c780aa9c9c16fd969e6d2253c604b8e419a76cfdb12aa8ee46eb24c4ab4c7d75844de00bb486b2a6283d03199d3dd4d27fcf5985fbae9d69a5ba71528e0d5b599ee1256a81a932c1a9dde02a777bedcb2d434fef6dfbd7b37270ea514e6b2762c31f6d12a700fb5a3e4902f3716f1fd7ca2d8315cf6df39b65152a2c104e29a358d2a1046d6a0a4e798135f5bc6cf745e38b388cb00", 0x1000}}, 0x1006) ioctl$sock_SIOCETHTOOL(r4, 0x89ff, &(0x7f0000001440)={'bridge0\x00', &(0x7f0000000400)=@ethtool_ringparam={0x11, 0x0, 0x20040001, 0x0, 0x7, 0x0, 0x0, 0xa1}}) setsockopt$sock_attach_bpf(r0, 0x107, 0xf, &(0x7f0000000000), 0x4) 10.359414286s ago: executing program 9 (id=5424): socket$inet_sctp(0x2, 0x1, 0x84) socket$nl_route(0x10, 0x3, 0x0) openat$ptmx(0xffffffffffffff9c, 0x0, 0x100, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x0, 0xa, 0x8000, 0x0, 0xd, 0x8, 0xfffffdffffffffff, 0xfa0f, 0xffffffff}, 0x0) mremap(&(0x7f00007f1000/0x4000)=nil, 0x4000, 0x800000, 0x0, &(0x7f0000130000/0x800000)=nil) sendmsg$NL80211_CMD_SET_MULTICAST_TO_UNICAST(r1, &(0x7f0000000300)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000002c0)={&(0x7f0000000040)=ANY=[], 0x30}, 0x1, 0x0, 0x0, 0x24040001}, 0x4811) getdents(0xffffffffffffffff, &(0x7f00000003c0)=""/191, 0x76) syz_open_dev$dri(0x0, 0x1, 0x0) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) r3 = socket(0xa, 0x1, 0x0) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet6_group_source_req(r4, 0x29, 0x2e, &(0x7f0000002d00)={0x0, {{0xa, 0x4e22, 0x4001000, @mcast1, 0x3}}, {{0xa, 0x4e23, 0x5, @loopback, 0xae43}}}, 0x108) setsockopt$inet6_group_source_req(r3, 0x29, 0x2e, &(0x7f00000001c0)={0x3, {{0xa, 0x4e24, 0x2, @mcast1, 0xff7ffffd}}, {{0xa, 0x4e08, 0x4a3, @local, 0x4f1}}}, 0x108) setsockopt$inet6_MCAST_MSFILTER(r3, 0x29, 0x30, &(0x7f00000005c0)={0x3, {{0xa, 0x4e23, 0xc, @mcast1, 0xfffffff8}}, 0x0, 0x1, [{{0xa, 0x8001, 0x2, @loopback, 0x30000}}]}, 0x110) setsockopt$inet6_group_source_req(r3, 0x29, 0x2c, &(0x7f0000000180)={0x0, {{0xa, 0x4e22, 0x6ef, @mcast1, 0xfffffffd}}, {{0xa, 0x4e24, 0x21, @loopback, 0xfffffe01}}}, 0x108) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/timer_list\x00', 0x0, 0x0) io_setup(0x1, &(0x7f00000016c0)=0x0) io_submit(r6, 0x0, &(0x7f0000000140)) sendfile(r2, r5, 0x0, 0x20000023896) r7 = syz_open_dev$usbfs(&(0x7f0000000480), 0x77, 0x41341) ioctl$USBDEVFS_IOCTL(r7, 0xc0105512, &(0x7f0000000200)) ioctl$USBDEVFS_IOCTL(r7, 0xc0105512, &(0x7f0000000000)=@usbdevfs_connect) 9.462257327s ago: executing program 1 (id=5425): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000140)={0x38, 0x6, 0x9, 0xc2, 0x0, 0x2d83, 0x9, 0x100, 0x0, 0x7}, 0x0) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301) r4 = openat$audio(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) r5 = syz_open_dev$vim2m(&(0x7f0000000000), 0x3, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r5, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1}) ioctl$vim2m_VIDIOC_QBUF(r5, 0xc058560f, &(0x7f0000000180)=@multiplanar_mmap={0x0, 0x2, 0x4, 0x0, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'y)\x00'}, 0x0, 0x1, {0x0}, 0xea}) memfd_create(&(0x7f0000000300)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b\xafa\xac\x06\x9c&\xf5\xe3j\xfa\tcqM\xb8R\x86\xd9\xd2.\x9f\x12\xed\x10\f\xbd\x1a|\x8a\xbb\xda\xcfY\x98gU@\xf2M\xc0\xb5\xdf\x9a\x8d\xdb,n\xae\x0eT\x80\x8c\xfd\xd7\xb0\x94\x82t\x96\rKx\xc5\x9b\x8c\x87\x96\x8bc\xbc\xee\xcc\x9f\xe3F\x99V4\x8e;M\xa9\x823\xe3\xb3mG\x8f\xdb\xed\x1b\x05\xec\xfc\xd1\xb5\xfd\xec@\xdeU\xdd\xa4\xc1\xe4L)\x8e\xe5\x91\x8e\xd4\x89\xef\x95T\x05G\xac\xb8\xc1: )mh\xc7\xf1?\xbb\x13;\xad\x95\xd70\xb6\x0e\x7f\x84r\x0e\xbf\xc5\xf6\xd4\xdd\t\x14\x18\xf7\xefi\x93\x03\xd2\xf2\bK\"\xd2\xb5\xaa\xb8\xc8\xe0\xac\x99\xe8su\xcd\xc3E\x12\xd7\xdd\x96!\x16Tu\xe3\xf0\x84#R\xd9\xe3~Wj\xb0r\x87\'\xea\a\xcfOeK\x9daW\xf4\x87@\x9c\xf3\xf1K\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x91\xe6\xdb\xc2\xa5h\'\xdfIn\x97\x0263~\xeb\xbe(i\n\xc2k4\x7f\x12\xa9e`SOs\x8c\xb4\xe7FeQ\xc6$\x92j_U\xfa\b\xea\xb0bYkW\xc0\x05\aC{\xcc\x03T\x17\xa5Sk\x87P\xc2\x97D\xb2\xfa\x1b\x9fe\xf4\x10\x1a\xad\x92\xce\x88\x1b\xbc\xe14\x19\xaa\xd3\r\xf4\xa2\xc3\x9e=\xa0 \xe6j\xe5\x85\xf8\x97\x03\x15\xaa\x920\xdcrI\xd8\b\xfb\xc7\xe7xX\x00>d\xbb\xa71\xad\x9a\xfb\xe6\x13\x87\x93\\\xe5W-\xfc\xfd\xb8O\xb9j\xb8\xf2\x9dx\xb2\x86\xad\x92', 0x3) epoll_create1(0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)={{0x14}, [], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x28}}, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001600), 0x402, 0x0) socket$inet(0x2, 0x3, 0x3) syz_io_uring_setup(0x186, &(0x7f0000000540)={0x0, 0x3416, 0x13100, 0x1}, 0x0, 0x0, &(0x7f0000000000)) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000100)=ANY=[@ANYBLOB="3c0000001800dd8d000000000000000002000000000000060000000006001500010000001800168014000100000000000000000000003000000011"], 0x3c}}, 0x8000) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(r0, &(0x7f00000005c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000280)={&(0x7f00000004c0)=ANY=[@ANYBLOB="50000000040801080000010000000000030000003c0004800800010000000000000001400800000008000140000000020800024000000001400000000408000140ffffffff00"/80], 0x50}, 0x1, 0x0, 0x0, 0x4800}, 0x40000) ioctl$vim2m_VIDIOC_STREAMOFF(r5, 0x40045612, &(0x7f0000000080)=0x2) close_range(r4, 0xffffffffffffffff, 0x0) open_tree(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x89101) 8.938922998s ago: executing program 6 (id=5426): syz_open_dev$usbmon(&(0x7f0000000000), 0x80000001, 0x42000) ioctl$DRM_IOCTL_SYNCOBJ_QUERY(0xffffffffffffffff, 0xc01864cb, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) r1 = socket$inet6_sctp(0xa, 0x801, 0x84) sendto$inet6(r1, &(0x7f00000001c0)='O', 0x1, 0x0, &(0x7f0000000280)={0xa, 0x0, 0x0, @private2}, 0x1c) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(r1, 0x84, 0x85, &(0x7f0000000380)={0x0, @in6={{0xa, 0x0, 0x0, @private2}}}, &(0x7f00000002c0)=0x100) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000400)=@newsa={0xf0, 0x1a, 0x1, 0xfffffffe, 0x100, {{@in=@rand_addr=0x64010102, @in6=@local, 0x1, 0x717, 0x4e23, 0x5, 0xa, 0x0, 0x20, 0x3a}, {@in=@dev={0xac, 0x14, 0x14, 0x35}, 0x4d4, 0x33}, @in6=@mcast1, {0xfe, 0x1000000000000192, 0xf, 0xcbed, 0x8251c, 0x5, 0xfffffffffffffffc}, {0xffffffffffffffff, 0x0, 0x1f, 0xfffffffffffffffe}, {0xff7ffffe, 0x3fc}, 0x7e, 0x3505, 0x2, 0x1, 0x0, 0x20}}, 0xf0}, 0x1, 0x0, 0x0, 0x81}, 0x844) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=@ipv4_delroute={0x24, 0x19, 0x1, 0x70bd2d, 0x25dfdbfb, {0x2, 0x20, 0x20, 0x0, 0xff, 0x2, 0xff, 0x2, 0x1800}, [@RTA_DST={0x8, 0x1, @local}]}, 0x24}, 0x1, 0x0, 0x0, 0x44050}, 0x1000) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000000)={0x1, &(0x7f0000000040)=[{0x6, 0x80, 0x5, 0x7fff0003}]}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r5, 0xc0502100, &(0x7f0000000100)) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000040)=0x3, 0xac5) r6 = syz_clone3(&(0x7f0000000180)={0x23800000, &(0x7f0000000040)=0xffffffffffffffff, 0x0, 0x0, {0x27}, 0x0, 0x0, 0x0, 0x0}, 0x58) io_setup(0x482, &(0x7f0000000600)=0x0) r9 = eventfd(0xd7) io_submit(r8, 0x1, &(0x7f0000001300)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0x7, r7, 0x0, 0x0, 0x4000000, 0x0, 0x0, r9}]) syz_open_dev$usbfs(&(0x7f0000000140), 0x77, 0x108402) timer_create(0x4, &(0x7f0000000300)={0x0, 0x39, 0x1, @tid=r6}, &(0x7f0000000340)=0x0) timer_gettime(r10, &(0x7f0000000540)) 8.236810844s ago: executing program 8 (id=5427): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, 0x0, 0x84200, 0x0) syz_open_dev$sndmidi(0x0, 0x2, 0x141102) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioprio_set$uid(0x3, 0x0, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x100) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mkdir(&(0x7f0000000000)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000380)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) chdir(&(0x7f0000000140)='./bus\x00') r3 = open(&(0x7f0000000040)='./file0\x00', 0x84242, 0x1df2a23c5997fad6) msgctl$IPC_SET(0x0, 0x1, 0x0) write$FUSE_CREATE_OPEN(r3, &(0x7f0000000180)={0xa0, 0x0, 0x0, {{0x4, 0x0, 0x5, 0x7, 0x3, 0xfffffffd, {0x400000080001, 0xfd, 0x20ff, 0x8, 0xe, 0xd615, 0x9, 0x3, 0xfffffffc, 0x6000, 0x0, 0x0, 0x0, 0x5, 0x7}}, {0x0, 0x13}}}, 0xa0) sendfile(r3, r3, &(0x7f0000000080), 0x7f03) 8.10112502s ago: executing program 1 (id=5428): prlimit64(0x0, 0x1, 0x0, 0x0) socket$inet6(0xa, 0x6, 0x400040) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$inet_udp(0x2, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000032680)=""/102392, 0x18ff8) io_setup(0x1, &(0x7f0000000b80)=0x0) io_submit(r1, 0x0, 0x0) shmat(0x0, &(0x7f0000000000/0x4000)=nil, 0x4000) madvise(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x9) gettid() r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/crypto\x00', 0x0, 0x0) read$FUSE(r2, &(0x7f0000000200)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) r5 = socket$qrtr(0x2a, 0x2, 0x0) connect$qrtr(r5, &(0x7f0000000040)={0x2a, 0x1, 0xfffffffe}, 0xc) r6 = socket$qrtr(0x2a, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) ioctl$VIDIOC_SUBSCRIBE_EVENT(0xffffffffffffffff, 0x4020565a, &(0x7f0000000000)={0x6, 0x1, 0x2}) recvmmsg(r5, &(0x7f0000000ac0)=[{{0x0, 0xff2c, 0x0}, 0x1}], 0x40, 0x2, 0x0) connect$qrtr(r6, &(0x7f0000000040)={0x2a, 0x1, 0x4000}, 0xc) writev(r6, &(0x7f0000000340)=[{&(0x7f0000000080)="fb", 0x1}], 0x1) r7 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$FUSE_LK(r7, &(0x7f0000000100)={0x28, 0xfffffffffffffff5, r3, {{0x9, 0x800, 0x0, r4}}}, 0x28) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) 7.473258581s ago: executing program 9 (id=5429): bpf$MAP_CREATE(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="0e00000004000000080000000700000000000000", @ANYRES32, @ANYBLOB="ff0700"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000000f6453d75000000bcfaa10f7bdf33a46c244fd999187599bbdec2dc9b7a225ac49c832126c059cf0074f0429dadfe2f567289469a933e8bda7774135bfc5de7850295c85e2b0256ba7057941f2b56015b6dc8ed95c142500ffc"], 0x50) r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x2) r1 = socket$inet6(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000100), 0x103000, 0x0) ioctl$BTRFS_IOC_GET_SUPPORTED_FEATURES(r3, 0x90009427, &(0x7f0000000040)) setsockopt$netlink_NETLINK_NO_ENOBUFS(0xffffffffffffffff, 0x10e, 0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r4 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) add_key$keyring(&(0x7f0000000280), 0x0, 0x0, 0x0, 0xfffffffffffffffe) r7 = socket$key(0xf, 0x3, 0x2) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x40) sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="02030609100000000000004c9e0000000200130002000000da16c167d803f1f805000600200000000a00060000000000ff0000000000000000001ffeff0001000003f1dc7f7c6e7c0200010000000000004000020000000005000500000000000a"], 0x80}}, 0x0) sendmmsg(r7, &(0x7f0000000180), 0x400008a, 0x0) ioctl$sock_SIOCSIFVLAN_SET_VLAN_FLAG_CMD(r1, 0x8983, &(0x7f0000000100)={0x7, 'team0\x00', {0xbf}, 0x3}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000c80)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000d40)={&(0x7f0000000000)=ANY=[@ANYBLOB="48000000140009e426bd7000fcdbdf25021f00ff", @ANYRES32=r8, @ANYBLOB="0800040064010104080008000001000008000200e0"], 0x48}, 0x1, 0x0, 0x0, 0x4040014}, 0x0) sendto$inet6(r1, &(0x7f0000000000)='s', 0x10a73, 0x800, 0x0, 0x4b6ae4f95a5de35b) 6.821547047s ago: executing program 8 (id=5430): openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) socket$key(0xf, 0x3, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) madvise(&(0x7f00002e5000/0x400000)=nil, 0x400000, 0xf) bpf$TOKEN_CREATE(0x24, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x1b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) keyctl$KEYCTL_PKEY_VERIFY(0x1c, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="656e633d6f61657020686173683d626c616b6532732d3232342d67656ee77269630000000000000000000000000000000000000000000000000000a4000000000000000000000000000000000000b20d1af3f439d0039ec56bfdb0afee20c1bf8ae3d8da54058096f924b5d664b8a1c24ebff8e1a0eafac91ac7233f4a4547755599ea1265e465a70e4c1ce763192383fed95ddf76a4658d916d22b4c06609c229f96751e6d353a46b30b2ae2c29975e9ff80301e2eb4220ee72e0a30c"], 0x0, 0x0) r3 = syz_open_dev$usbfs(&(0x7f0000000000), 0x1ff, 0x2) r4 = dup(r3) r5 = syz_open_dev$dri(&(0x7f00000000c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r5, 0xc02064b2, &(0x7f0000000040)={0x1, 0x80000007, 0x20ffb}) ioctl$USBDEVFS_CONTROL(r4, 0xc0185500, &(0x7f0000000240)={0x80, 0x6, 0x103, 0x0, 0xe0, 0x0, 0x0}) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="300000001000010025bd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000080004000024000008001b"], 0x30}, 0x1, 0x0, 0x0, 0x810}, 0x0) connect$pppoe(0xffffffffffffffff, &(0x7f0000000080)={0x18, 0x0, {0x3, @empty, 'ip6_vti0\x00'}}, 0x1e) r7 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000340), 0xffffffffffffffff) sendmsg$IEEE802154_LIST_IFACE(0xffffffffffffffff, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000003c0)=ANY=[@ANYRES16=r7, @ANYBLOB="0307269da64d978edf251f"], 0x14}, 0x1, 0x0, 0x0, 0x80}, 0x20008094) syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) 6.357377619s ago: executing program 9 (id=5431): r0 = socket$kcm(0xa, 0x922000000003, 0x11) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0xc, 0x8001, 0x0, 0xc, 0x4d, 0x8, 0xfa11, 0x801}, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r5, 0x4048aecb, &(0x7f0000000180)={0x1, 0x0, [{0x0, 0x6}]}) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3400000040000701fcffffff00000100017c0000040042800c00018006000600655800001000"], 0x34}, 0x1, 0x0, 0x0, 0x4048011}, 0x8800) mknod$loop(0x0, 0xfff, 0x0) socket$nl_route(0x10, 0x3, 0x0) execve(&(0x7f0000019100)='./file0\x00', 0x0, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000002f00)='fdinfo\x00') r7 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r7, 0x107, 0x3, 0x0, 0x0) ioctl$CEC_RECEIVE(0xffffffffffffffff, 0xc0386106, &(0x7f0000000180)={0x1, 0x1, 0x0, 0x6, 0x0, 0x0, "5debca561a5fbf61048955f6f876b2ff"}) r8 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000800)={r8, r8, r8}, 0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)={'sha384\x00'}}) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) setsockopt$sock_attach_bpf(r0, 0x29, 0x24, &(0x7f00000000c0), 0x19) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r9) sendmsg$MPTCP_PM_CMD_REMOVE(r9, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)={0x1c, r10, 0x1, 0x70bd25, 0x7f, {}, [@MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80c0}, 0x20000000) 6.356446874s ago: executing program 6 (id=5432): syz_io_uring_setup(0x78de, &(0x7f00000000c0)={0x0, 0xa9ee, 0x4, 0x3, 0x8002ae}, &(0x7f0000000140), &(0x7f0000000280), &(0x7f0000000000)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) socket$inet6_icmp(0xa, 0x2, 0x3a) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fsmount(0xffffffffffffffff, 0x1, 0xfa) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r3) bind$inet6(r3, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x1}, 0x1c) listen(0xffffffffffffffff, 0x0) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r4, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) r5 = accept(r3, 0x0, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[], 0xfffffdef}}, 0x1) recvfrom(r4, &(0x7f0000000180)=""/60, 0xfffffffffffffecb, 0x4100, 0x0, 0x500) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="600000001000010400"/20, @ANYBLOB="0131010000000000400012800e00010069703665727370616e0000002c000280140005f6ff000000000000000000ffff7f00000108001500b9c20a00040012000500160001"], 0x60}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) write$cgroup_netprio_ifpriomap(0xffffffffffffffff, &(0x7f0000000100)=ANY=[@ANYBLOB="6772adfce12dc85e9c20ab"], 0x6e) 5.874778415s ago: executing program 1 (id=5433): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0xa4242, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x6) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000000940)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffffd2}, 0x48) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, 0x0) getsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000100)={@mcast1, 0x4, 0x1, 0x2, 0x0, 0xffff, 0x7}, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2}, 0x94) syz_open_dev$loop(&(0x7f0000000700), 0x10, 0x202a80) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@newqdisc={0x44, 0x24, 0x200, 0x70bd28, 0x0, {0x60, 0x0, 0x0, 0x0, {0x5, 0x10}, {0xffff, 0xffff}, {0x0, 0x9}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x14, 0x2, [@TCA_CAKE_WASH={0x8}, @TCA_CAKE_RAW={0x8, 0xc, 0x1}]}}]}, 0x44}}, 0x41) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0000000000008000280012800a00010076786c616e"], 0x50}}, 0x4000000) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_JOIN_MESH(r4, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=ANY=[], 0x28}, 0x1, 0x0, 0x0, 0x8004}, 0x0) 5.15382401s ago: executing program 8 (id=5434): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r3, 0x84, 0x13, &(0x7f0000000100)=0x7, 0x4) bind$inet6(r3, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x80000, @loopback}, 0x1c) r4 = syz_io_uring_setup(0x24fe, 0x0, &(0x7f0000000100), &(0x7f0000000140), &(0x7f0000000000)) io_uring_register$IORING_REGISTER_BUFFERS(r4, 0x0, &(0x7f00000001c0)=[{&(0x7f00000004c0)=""/120, 0x78}], 0x1) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x5, 0x4, 0x8, 0xb, 0x0, 0xffffffffffffffff, 0xffffffff}, 0x50) sendmsg$NFT_MSG_GETCHAIN(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000480)={&(0x7f0000000280)={0x28, 0x4, 0xa, 0x801, 0x0, 0x0, {0x5, 0x0, 0x6}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x4}]}, 0x28}, 0x1, 0x0, 0x0, 0x10}, 0x24040000) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000180)={@map=r5, 0x4, 0x0, 0x62, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) sendmsg$IPSET_CMD_TYPE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='='], 0x38}}, 0x4000080) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000540)='blkio.bfq.io_service_bytes\x00', 0x275a, 0x0) write$UHID_CREATE2(r6, &(0x7f0000000180)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r6, 0x0) io_uring_enter(r4, 0x2d3e, 0x2936, 0x0, 0x0, 0x0) sendto$inet6(r3, &(0x7f0000847fff)='X', 0x34000, 0xe0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) 4.53976526s ago: executing program 6 (id=5435): r0 = socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r4, 0x6, 0x16, &(0x7f0000000000)=[@mss, @sack_perm, @window={0x3, 0x7}, @mss={0x2, 0xfff}, @window={0x3, 0x0, 0x401}], 0x5) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0cc5605, &(0x7f0000000140)={0x3, @win={{0x3, 0x6, 0x9, 0x5}, 0x1, 0x3, &(0x7f0000000100)={{0x2, 0x3c, 0x8000, 0x1}, &(0x7f0000000280)={{0xffffffff, 0xfffffff8, 0x1}}}, 0x1, &(0x7f0000000840)="d01b933b50b431242f6b09e5fa4021f60b10260ad61d4cea9eec2ca978c2234ca27ae8c2ed85258fa6d76152da656c549d9055a37902adc78f5ef65d64cf7403349ade21274402b4813f53929fef3ab98df411fe2b4c9c6dbcf9bda0c9a4c6b0b345974bfd6de0b55323853ea49188fbe93efdefc2d62da610bcff5fb707c91a76eb2db2e76a3deec094a57adea21dd9df8b8821d88612da2ae1b4dc1d6ee6473045fff121fe24388c030e5c3312d151bc30f52be9307c346cf15dc3fc4f3e963042490d6c585adbacc2271ed53611e6f3aeb26f9d33a770ee8285338ded8984922918a5cd394abb85e0e3a2952038cdaae3cde5d8b1a064f93cb7accdff679df33633cdc38e205e3a3008860d65e620dec27d23f42176a24d175cf794897b9593c5166d9a1bfb65f020953a0653a84eaff8b5a59a717ace72a0bf09d0b98f2832132d4bec0216729969799a1ebbb63a15ff56c19e73933ade58cf359840d73afe199ca073e1578257fac7da9aadcf0dcf11b46d53a6da8712bd49f00ef45d9ea39a33787fd5dfb973ee90c00c9d55d3263472f4fbf9806101602d7394edac9f93a8f7527f22ec44983618ea743e51592080f81612b1eac29b44f6a82b6ebda1752ca80c0cfc97c38932786b79432737bd8b2f35d41d36019c99f4351d37b068b7618b024cf48e5e172e7f364ab3a8818762fd24635c60791b544484e26e37a34658a2ab1646e544488c8712257174d742550dc3f4fe52c8f546448e046f0517f3a1fd868c289dfca2f4e2f3685c1cba316ce27b1b562dfee3ea34772e7c772e4ebf6522c5e518937c2cc1b9f7602f250dbb0ca72770ab4a89181539d93aa68755a93aa675d098c2a6e73dc975b936e34b242473bebfcbf56e83a3409cbdfa7188b7d4a2f37836815f740f23567b49fa2ff93dac7a2d9d6f176a4cf58f80a1896d04559a38fdad02a154f2cc62cfa63994a5a7239f1c90a93e56d7e28e3aee059fb8ccf684f2663de521829a39b369a7df731c6ae339a2a88088922f72425e9d23ea3e17a0120bf6964214d3d83b118ff4408263895fceb940cc0a9da530fad9c787531e228795ed7d2ab17897b3bff4d33c838cdb937a5235a64f83616407a4198c62791b4edafe8b1c651ac51656f8c6a5109ab934988b7f28276fe1f2e1aee44a11afb56611b2dfc68cc997664922121ca43dd3654912d033d98eb95efe235b4089cf3547cee67b919f229ebf5a8449d3cd2ec8ec72e5da02dfd253f14fcaa96191be8eba24bc1603beaa93450ba9693d5c6e136e47a8211e7edfdde5a37c0d5c4429ae90a037d891056ab046bab788c3c5f40ecb388c5a708a8a0d3a09a55330461a04f69ee8a40631718f5d48bd1753251f9c5e7a79fa2e12918f96520d4112eb9c40c2f2159610489ecdc81684d195de3a1020730d56c3b5a9c084dba538eb92028676a467ef58b67edbf7891b59bf9e65cf0d49313274d2dce6545535207b48908873570384ad11c8c7899bc53049c137965250769880518351757e0d5951a75d8e4892afbaff5f72238a746810e16e740c16e02d06234b6e38cf098f7ab4c8bb83b9a9929e5846ffff2d36407969047dce8710c32dbf20a392a4d74d2546595a5666e915dabcf6472f6fab81368bddad15bbb808a64a7aec260b735a69cf6022542c02c3d5e2d875400d0ab13819036b9a5adb2950edcbdea557cd1061c36a3bc5a68edf73983a0044431e55c977a304d9d0eb0c6c4846cd2f8aced174ebf61998d2e0daee0a52680cd99181067ebf66c9dd310a80e305d81e6f51838927301638be2215614990187867bd6f4ae00e311e171fe2bec73a44b9c9fc29d326b52258364b2e52b50f0c9050fc34a83ce52bca2a1bd78b17dd830b2626beaf6e606149a248e6b9ad5329be6305724edcb531bd5d01d27cc49c04a21d633bef63ff91fba1035d57b89ce222f8c3ddcbfe40a44efe0bdf38eedca76307d14fcddce220cca9869be093d9e5bae89d9ef336e0128eeff2683e012bd839101d8fcb473b9214276d97ce321412536f2d85770d0c34879e3fd2f7ae7091d43f3066f2c1e939b3684156bbef0f6a9e00db16e32ef13327378c68e1526a8df1930ec7b65b3631bffe8c01102af2d9123b33380ed1590988df7a01f86cea2f4db0569fde4ba86ef76a140a9c854db61ed926da474f1b3ee2714b7c85ebd39d53820c10a090fa1228bdffc4e8ef39caa20287137cf9455281d2b0465d65469ea3e25e3e4794d825eebc3fb2e8d4b5aa4b21aaf8548ea87182bdaf9faa6e5614ae9a083e5ee0df3ca761c5f12b324378fb2c39bdfb8dc9cf9e44d236d229948237772de458148ec817a6028f8d49b7a331ffcc01998f1379721c201f1b32162b5b38f5f7f09b946f5a219fac689d744e63ae782e7039bb47a8f45474bb1aa14ce25dffa83a3fc990ed3130de2a3dad70be0a7faacff63fb8c0c32c6f15db93a20e754d015c3d884899104d6624d89a99fc9c14445394094bed7706334c8b1718e486959c076ff3ae368ba350e4d1e12b3c57618eb9e1b742c8d29464f76763f30debea879db28be1e57050be15c0eb18e171d7d6884495d4e313ca6b0c2ebd685471d3fcfe7313dd2461ad9e50afcd5378346464bd06faa20320c7bf95edacd41a9da5341f85a5e030a4d211e83b87ce7b6b0a531e6c12fe53c74483b86577fd41f8550de3b0b02106ea7325ebe13525d333acd6213e3f59f3337d8ea76acdc3c957bd7c6ff9f05d1cbb02d9cc6f5cd58f61ab43d4a5cc51cd5cf41b7005a2166cc6e9689270cbb6e9ac52ab2c57fcc444a63acaa67be3188ff81068cd06e51177905a4d86b2160b61475f0c02efc04d8aab1440383d4f17388b798b6850b1d4a91a2bdf8b8f261d725b0fd566609e6b88120b0caa14a47b4c755d9afe5563b66a6dbd5350a31b6aab0a284f5407d101f3e802cdb68ee5b21871d932117f4eddabef398e32be7654d36f15da96ff08d0a488aae2cd587d9cbc9f63a60a3bdf1a04ced442b06574f10c172a6345e3a3cbae4077ec833bc487517b2158fdbcd8da50887caae4197f3abb538b2c73f1301900c90bd207280232f4b630d08a3280d8083171f46afa632e1632e665625c1519e4744f120a186b731acc5aad4823830a6f979f0924b3e174b3924d1f4db47d9d43a684e4f65b406afbbce224d4c1da343c728a93de3544fbbe91889eb185aa16104391f3dc992b892781667a3e191a1c8680a304dccdadaa38d737e228dc9e148222489c1946d6ce11c7cfcbf008ad80c887ba454c73a591ac7c5488d8acc522c0ea178d4a8f5bdc2ed77a3e2be7a9df7741ea5f0a3fd77fc366d7fd0aab194a79c0338c223b0963ccdaa36266ad17ed563a24b151c106b3275fef4877ec661b72665d8d2467a83dc3a17c22cba8d6b0b798c8149f0f1ca9f8a13a3718e9d4ba4c285f04ee79ed624e85bf985b305a848bd3c50a451a062793a155817f5885f80d6c962ffa649c664fddf27b530f312fb689a86f98b0f89c18eddd43e8cff2ff7679eabd7637b2353bf7150685c5b2bf9598b36795a77d46546ee1cd050ae7ae67e948acd11e8e372f3c202f087e48746ecdc001edcdf748442a5a33ea9aeea97d31c377a9a81e7a072df3a8e7caf30bda6b8bda0ce4fdc07b6472fc23edccf226035261c1308b348abde4218fbdbd3db21b379d3f619bbd238de47c2deb34338b8c82239c5a560f0a3df1404dbb7fc365a59fbf1b48587cbedcb009c30418a0ff6147cfc6f63c532985faee9ddba2d18930baad313fd25348ecf1d02a9caaca99b9667fa385c2351ad1d34bb766c680a985b691c264cec0d2646055976400ff0c35b69362c2b6c2c7f7475fbc5f738ac7e2ae46946f56a97e7a41375ff6dbe0702e762caa5c384a173945daffc1aa4387f224cfd6f5716e89c72389f8b5dfb288a16bba9098d972fd843e6cff86e3efe0d9ddb3a6354da46a15a1838c1d972ce8bde0cb19594011149fd8a3576da55e411c3be82b8b1cd10c544c405c656836b15e5081364c4ef87c5d8947bdfd210965b1963197052b4ac6135b96a63ad3cd81430e13376beac33f8a0822954808bab42f905ef04a058fe7411f1a1deccf01e6ad41b906f2176a448da7a0117085e127baa793426b88e9cf7d0dd29a63fd63bba1bd043d8c1b002bc22a1cb7d47c220b841870be7b04859bf2cfdef7d0b13f40dd11d8ccccc89b9a75c6c703af51563931e708556976de22b73fbf4c237ae5f02470d3ae3dad1a4bfb9c0ce036a792783842153bc70531ec52715ec4d37bf66be7f71349c457c0f4485f7fb9533a6a864eabb0d596bf6d135206bec4857ef15b7608d817439c9c825c91f593be4d4eb5912d787b12f558fff1e2c172496c1bd72cdab11fddc158c8225ad2060f25fece64c6e528b393a3675d2b8f52a4ac89f2ad5d6850263c5b86e6436314eeae429b4145fce02eb32fee9abef2bd84f285eb78a639070ec40cbcdae907e410f7aa6d71884e9e03b292ceb68aca8dde63abe47a1c68c3ce9f12a6b49e9d8f58a1af7ef33ffd66d84a3e8e0f3e5708eb0808ae8ea7b5cb158b0ec38d331d99769416e5e09c2d21254986774b7e89cc1c4f51b88000adfe91bd9f631da5dd9aeef40416aad1a1128091f5063ccbc7a98b00414bdeb7e69afdfc2002bf9d28c58a53257b2178ba7818852924549ef6e3ba5246a03ce20e738c5987645bb2c21d380f46d30abd9d486eec1a16c494f0eb6e9ebd7c2bbed8d4b45c0d9245cce1821c8cf40efcfbb1a6914c4a1fecab5388e5c1ad9f391f567d01259128a6ca2b1535948c62d060039d9dcba6702869d081ac1a97ff7c0d5f552140c7cec63d156063e233a22760d1c523e0d161091b466d4d46a809bdf3be9bedfc2ef057fe48c8aee8c85d7babb36eef186526024a45d7632522f38d077668519c89c99632d49f10a6bc373eec97ffd1a57250e3a7500969787ac42799a220398f8d141eeb8ffa51fe760c60144318867b8c1c70f040419752afa5d4af0f2e2d80bcb83058839b26ae0cc6644f76619f839812d29e94f977ca94028dfa458640b3209eeb1ba1a635118c7887443778e96a7c3ea41bffe6981e006a43de6bdbf5883816b3d17526930017f5bf41fa9fdae5485f03a391b5fe13f7db060f4576fe5140927f6b65a6c24f47fc4beaf5ed3d6f39e32e648fb09427f0036ba87846393a4d03021dfc8ecefbd0292df489714b793fb9b187af5ecc7fba607dd880af877ca9f3bcdb2156924b150dcfa31c712f90638c1be750ec7437da76bae4fbd9aa4a9f4c69665f3386a5c164388ae7a51b818a248789f05892959234de78f3a6c4de614d3aea8c600113e5ec4c7637a6d2cc5e449ee8786e5dfde3f128c9d711b8992140bb0e7f99e347d1a3e4d116e8786c0fccf788606fa32e5d9a6d191b8becad472646ef380b8d8daf749fbb1b6bd0c62a6b1d74e7bef587ca0c783442c93588cd99e482b5edda9d34ab3ce4f0ec6ceb8f74e27a7a0126d54cf5ada5dcf89cfae808fd2b691b09238e1954c0875dfb27769530764f20f809ef84de5a5e8146c4d39496f182c7c0dafafbc109f0", 0x2}}) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x15, 0x10, &(0x7f0000000040)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x8}, {{0x18, 0x1, 0x1, 0x0, r5}}, {}, [@func={0x85, 0x0, 0x1, 0x0, 0xfffffff5}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000240)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x2d, '\x00', 0x0, @sk_reuseport=0x28, 0x0, 0x8300, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) r6 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000000c0), 0x581000, 0x0) setsockopt$MRT6_TABLE(r6, 0x29, 0xcf, &(0x7f0000000100), 0x4) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="3400000040000701feffffff00000000017c0000040042800c00018006000600800a0000100002800c00148008000d00bd"], 0x34}, 0x1, 0x0, 0x0, 0x48815}, 0xc000) r7 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x34, 0x34, 0x6, [@var={0x4, 0x0, 0x0, 0xe, 0x3}, @func_proto={0x0, 0x0, 0x0, 0xd, 0x4}, @typedef={0x0, 0x0, 0x0, 0x5}, @volatile={0x0, 0x0, 0x0, 0x9, 0x3}]}, {0x0, [0x0, 0x0, 0x0, 0x61]}}, 0x0, 0x52}, 0x20) r8 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) connect$bt_l2cap(r8, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) ioctl$sock_bt_hidp_HIDPCONNADD(r7, 0x400448c8, &(0x7f0000000180)={r8, r8, 0x3, 0x0, 0x0, 0x9, 0xb, 0x4c4a, 0x4, 0xc336, 0x1, 0xf, 'syz1\x00'}) 3.130195631s ago: executing program 8 (id=5436): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_open_dev$I2C(&(0x7f0000000d80), 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x9, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = openat$audio(0xffffffffffffff9c, &(0x7f0000000380), 0x149842, 0x0) write$dsp(r4, &(0x7f0000000040)='\x00', 0x1) mmap$dsp(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x100000b, 0x8012, r4, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="200000001000010700000000000000000a0000000c0002006e6c38303231"], 0x20}, 0x1, 0x0, 0x0, 0x20000000}, 0x40050) syz_genetlink_get_family_id$l2tp(&(0x7f0000000500), r5) socket$inet6_tcp(0xa, 0x1, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r6, 0x8933, &(0x7f00000000c0)={'batadv0\x00', 0x0}) r8 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), r6) sendmsg$BATADV_CMD_GET_DAT_CACHE(r6, &(0x7f0000000280)={0x0, 0xf000, &(0x7f0000000240)={&(0x7f00000001c0)={0x1c, r8, 0x83625fc5352ba305, 0x0, 0x0, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r7}]}, 0x1c}}, 0x2000040) syz_genetlink_get_family_id$nbd(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000004}, 0x4) 2.753558486s ago: executing program 6 (id=5437): r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$kcm(0x29, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_emit_ethernet(0xda, &(0x7f00000001c0)=ANY=[], 0x0) mknod$loop(&(0x7f0000000180)='./file0\x00', 0x6000, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000000)={'\x00', 0x40, 0xe, 0x1, 0x5, 0x10}) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x1}, 0x28) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) r5 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r7, 0x4090ae82, &(0x7f0000000500)={[0xb, 0x9, 0xfffffffffffffffd, 0x10000003, 0x10000, 0x3, 0x4002004c2, 0x10002, 0x9, 0x3, 0x400, 0x4, 0x89, 0xfffffffffffffffe, 0x8, 0x8b], 0x100000, 0x240046}) ioctl$KVM_RUN(r7, 0xae80, 0x0) sendmmsg$inet(r1, &(0x7f0000003e40), 0x0, 0x20000085) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000001f40)=@raw={'raw\x00', 0x8, 0x3, 0x1b8, 0x248, 0x43, 0xa0, 0x248, 0x98, 0x350, 0x178, 0x178, 0x350, 0x178, 0x49, 0x0, {[{{@ip={@loopback, @local, 0x0, 0x0, 'veth0_to_bond\x00', 'ip6erspan0\x00'}, 0x12a, 0x70, 0x90, 0x0, {0x0, 0x7a010000}}, @unspec=@TRACE={0x20}}, {{@uncond, 0x0, 0x70, 0x90}, @unspec=@NOTRACK={0x20}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x218) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x14, 0x3a, 0x301, 0x70bd20, 0xfffffffc, {0x4}}, 0x14}}, 0x0) 1.083678812s ago: executing program 6 (id=5438): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee6, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) sched_setscheduler(0x0, 0x2, 0x0) r3 = getpid() sched_setscheduler(r3, 0x2, 0x0) sched_setaffinity(0x0, 0x0, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="240000006800010009000000000000000a00000000000000080001000200001004000b"], 0x24}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="1c0000006800e97800000000000000000a00000000000000040004"], 0x1c}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x24008000}, 0x4000) openat$ipvs(0xffffffffffffff9c, 0x0, 0x2, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000027c0)=@base={0x4, 0x4, 0x4, 0x10005}, 0x50) bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) dup2(0xffffffffffffffff, r7) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="30000000400007032bbd7000fedbdf2503"], 0x30}, 0x1, 0x0, 0x0, 0x4c090}, 0xc000) 914.253976ms ago: executing program 8 (id=5439): r0 = openat$comedi(0xffffff9c, &(0x7f0000000100)='/dev/comedi0\x00', 0x101001, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$FS_IOC_READ_VERITY_METADATA(0xffffffffffffffff, 0xc0286687, &(0x7f0000000280)={0x3, 0x1, 0x7f, &(0x7f0000000080)=""/127}) setsockopt$IP_VS_SO_SET_STARTDAEMON(0xffffffffffffffff, 0x0, 0x48b, 0x0, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) socket$l2tp6(0xa, 0x2, 0x73) sendmsg$nl_xfrm(r2, &(0x7f0000000d00)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f00000009c0)=@newsa={0x120, 0x10, 0x421, 0x0, 0x0, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in=@multicast2}, {@in6=@mcast1, 0x0, 0x2b}, @in6=@empty, {}, {}, {}, 0x0, 0x0, 0x2}, [@coaddr={0x14, 0xe, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @replay_esn_val={0x1c, 0x17, {0x2000}}]}, 0x120}}, 0x0) r3 = msgget$private(0x0, 0x31) msgsnd(r3, &(0x7f00000035c0)=ANY=[@ANYBLOB="03"], 0x1b, 0x5f005e4c1fdd0237) syz_emit_ethernet(0x46, &(0x7f0000000000)=ANY=[@ANYBLOB="ffffffffffffffffffffffff86dd6060626000102c00fe8000000000000000000000000000bbfe8000000000000000000000000000aa11000001"], 0x0) socket$packet(0x11, 0x2, 0x300) syz_emit_ethernet(0x7e, &(0x7f0000000480)=ANY=[@ANYBLOB="0180c2000000aaaaaaaaaaaa8100000086dd601d200000442c00fe8000000000000000000000000000bbfe8000000000000000000000000000aa3300000e"], 0x0) r4 = socket(0xa, 0x1, 0x0) setsockopt$sock_int(r4, 0x1, 0xf, &(0x7f0000000040)=0x4, 0x4) listen(r4, 0x7f) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000340)={0xffffffffffffffff, &(0x7f0000000280), &(0x7f0000000a80)=@tcp6=r4}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000540)={{}, &(0x7f00000004c0), &(0x7f0000000500)}, 0x20) r5 = socket(0x400000000010, 0x3, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'veth1_to_team\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdc00, {0x0, 0x0, 0x0, r7, {0x0, 0x1}, {0xffff, 0xffff}, {0x0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x1, 0x8}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000a40)=@newtfilter={0x6c, 0x2c, 0xd27, 0x70bd2b, 0x25dfdbfd, {0x0, 0x0, 0x0, r7, {0x9, 0xfff3}, {}, {0x10, 0x7}}, [@filter_kind_options=@f_flow={{0x9}, {0x3c, 0x2, [@TCA_FLOW_EMATCHES={0x38, 0xb, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x2c, 0x2, 0x0, 0x1, [@TCF_EM_U32={0x1c, 0x1, 0x0, 0x0, {{0x3ff, 0x3, 0x401}, {0x7, 0x92, 0x9, 0x6}}}, @TCF_EM_META={0x58, 0x2, 0x0, 0x0, {{0x7f, 0x4, 0x8}}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x1}}]}]}}]}, 0x6c}, 0x1, 0x0, 0x0, 0x40004}, 0x2008c010) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, &(0x7f0000000140)={'comedi_bond\x00', [0x3, 0x2, 0x7fffffff, 0x8, 0x2f, 0x2006, 0xf1, 0x8, 0x80ffa, 0x2, 0x0, 0x8500, 0x1003, 0x1000004, 0xf, 0x10000, 0xffffffa8, 0x7ffffffd, 0x1ff, 0x9ea, 0x10, 0x40000, 0x8, 0x5, 0x746f, 0x8, 0x5, 0x8, 0x0, 0x4, 0x7ffd]}) 113.137336ms ago: executing program 9 (id=5440): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x22, 0x2, 0x6) sendmsg$nl_route(r3, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r3, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000400)=0x14) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) close(r5) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r6, 0x84, 0x81, &(0x7f0000000280)="1a00000002000000", 0x8) setsockopt(r6, 0x84, 0x80, &(0x7f0000000000)="1400000009000000", 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r5, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x401, @ipv4={'\x00', '\xff\xff', @empty}}], 0x1c) sendmsg$inet(r6, &(0x7f00000000c0)={&(0x7f0000000040)={0x2, 0x4e23, @loopback}, 0x10, &(0x7f0000000080)=[{&(0x7f0000000100)="ff", 0x1}], 0x1}, 0x815) setsockopt$inet_sctp6_SCTP_SET_PEER_PRIMARY_ADDR(r5, 0x84, 0x5, &(0x7f00000001c0)={0x0, @in={{0x2, 0x4c23, @remote}}}, 0x84) sendmsg$nl_route(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000480)=@newlink={0x34, 0x10, 0x439, 0x0, 0x60000, {0x0, 0x0, 0x0, r4, 0x9801}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @gre={{0x8}, {0x8, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}]}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x840}, 0x8000000) sendto$packet(r1, &(0x7f0000000180)="280320000a0014000000fbf719143baa111f43c851ffab286e16195ecf3d77cc32b6d78839980700e6669d3c865c6b96e84000050016f37fe8c0295f5c", 0x3d, 0x840, &(0x7f00000000c0)={0x11, 0x86dd, r4, 0x1, 0x2, 0x6, @random="0f6ac106c05b"}, 0x14) r7 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x1) r9 = socket$alg(0x26, 0x5, 0x0) bind$alg(r9, &(0x7f0000000380)={0x26, 'rng\x00', 0x0, 0x0, 'jitterentropy_rng\x00'}, 0x58) setsockopt$ALG_SET_KEY(r9, 0x117, 0x1, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) mkdirat(0xffffffffffffffff, &(0x7f0000000040)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) r11 = syz_open_procfs(0x0, &(0x7f0000004600)='map_files\x00') fchdir(r11) sendmmsg$unix(r10, &(0x7f0000002d80)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x408d4}}, {{&(0x7f0000000080)=@abs={0x1, 0x30, 0x30}, 0x6e, 0x0, 0x0, 0x0, 0x0, 0x4004}}], 0x2, 0x40000004) ioctl$KVM_SET_MSRS(r8, 0x4008ae89, &(0x7f00000000c0)={0x1, 0x0, [{0x948, 0x0, 0x400000000000000}]}) 48.238598ms ago: executing program 6 (id=5441): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0xc2240, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20008b}, 0x0) ioctl$TCXONC(r0, 0x540a, 0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x3) sched_setaffinity(0x0, 0xfffffffffffffd7a, &(0x7f0000000580)=0x8000000002) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f0000000400), 0x0, 0x0) read$msr(r1, &(0x7f000001aa40)=""/102392, 0x18ff8) openat$vmci(0xffffffffffffff9c, 0x0, 0x2, 0x0) syz_usb_control_io$cdc_ncm(0xffffffffffffffff, 0x0, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DESTROY(r2, &(0x7f00000019c0)={0x0, 0x0, &(0x7f0000001980)={&(0x7f0000001900)=ANY=[@ANYBLOB="640000000306010200000000000000000a0000060500010007000000050001000700000009000200"], 0x64}, 0x1, 0x0, 0x0, 0x20000000}, 0x4008080) timer_create(0x6, &(0x7f0000000340)={0x0, 0x2f, 0x5, @thr={&(0x7f0000000140)="cb8685a13703473039f3a12d86f98179ee61f0b2f0bf03c013657cfa13ab04511173d2c49361e0def2fb1c008f2054e2c05fa5d9b8e457e91d8959ac066b75b607609739cddc8ac81636abc2549d6323140360eb3d7b525c4a4d01250277704047af14442a665c33094d791e84f6a86a813b0daf", &(0x7f0000000240)="954a2ffe65b7f224cf290a4b08196a61847741041f74c1a4170e39f5c1d018219946de4fce1fb2086da0d1591e9842ff74fc2c7b6bc3178265cee27bd682b37788edfb6c70b0111c67a9332885b07cc21494a17f568d2672d44595ee933dba8b36afa949210764d3e9e4f6f4a45b592271031367485c946b92180f4b05555415d15bca2ee2b127fa3b2c9e07922f17e4ec56e2cbd3572b600947aa1bcabacb24459394590c62110d249a2dc25e46ac761c5f742673"}}, &(0x7f0000000380)) socket$key(0xf, 0x3, 0x2) r3 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000400)={'veth0_to_hsr\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x0, r4, {0x0, 0xffe1}, {0xffff, 0xffff}, {0xffe0}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x4, 0x9}}]}}]}, 0x48}}, 0xc840) sendmsg$nl_route_sched(r3, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000800)=@newtfilter={0x54, 0x2c, 0xd2b, 0x70bd2b, 0x25dfdbfb, {0x0, 0x0, 0x0, r4, {0x6}, {}, {0x7, 0xfff1}}, [@filter_kind_options=@f_u32={{0x8}, {0x28, 0x2, [@TCA_U32_SEL={0x24, 0x5, {0xd, 0x7, 0x1, 0x3d3f, 0x0, 0xfff, 0xb709, 0x58f, [{0x0, 0x20008000, 0x4, 0x1}]}}]}}]}, 0x54}, 0x1, 0x0, 0x0, 0x4084}, 0x24040084) recvmmsg$unix(r3, &(0x7f0000000580)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000002c0)=""/219, 0xdb}], 0x1}}, {{0x0, 0x0, 0x0}}], 0x2, 0x60, 0x0) bind$alg(0xffffffffffffffff, &(0x7f0000000300)={0x26, 'hash\x00', 0x0, 0x0, 'sha3-384\x00'}, 0x58) r5 = socket(0x10, 0x803, 0x0) getsockname$packet(r5, 0x0, 0x0) syz_genetlink_get_family_id$gtp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x24}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[], 0xc3}, 0x1, 0x100000000000000, 0x0, 0x2000}, 0x40400c0) r6 = socket(0x10, 0x3, 0x0) sendmmsg(r6, &(0x7f0000000000), 0x4000000000001f2, 0x0) 0s ago: executing program 1 (id=5442): setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000000)={0x0, &(0x7f0000000280)}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='&\x00\x00\x00\a'], 0x50) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r0, &(0x7f0000000000), 0xd) r1 = socket(0x15, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r3, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) openat$adsp1(0xffffffffffffff9c, &(0x7f0000000000), 0xc002, 0x0) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r5, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3fc, 0x0, 0x32}, 0x9c) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r5, 0x84, 0x72, &(0x7f00000001c0)={0x0, 0x1, 0x20}, 0xc) bind$inet6(r5, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r5, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r5, 0x84, 0x9, &(0x7f0000000a00)={0x0, @in6={{0xa, 0x4e23, 0x0, @local}}, 0x100, 0x0, 0x0, 0x0, 0x54, 0x0, 0x20}, 0x9c) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000580)=ANY=[@ANYBLOB="3400000040000701faffffff00000000017c000004004280180001"], 0x34}, 0x1, 0x0, 0x0, 0x48815}, 0xc000) getsockopt(r1, 0x200000000114, 0x2720, 0x0, &(0x7f0000000040)) syz_genetlink_get_family_id$smc(&(0x7f0000000040), r1) kernel console output (not intermixed with test programs): [ 1406.839812][T21122] bond1: (slave bridge2): failed to get link speed/duplex [ 1406.904161][T21108] bond6: (slave ip6gretap1): failed to get link speed/duplex [ 1407.003150][T21108] bond1: (slave bridge2): failed to get link speed/duplex [ 1407.064176][T21114] bond6: (slave ip6gretap1): failed to get link speed/duplex [ 1407.170890][T12182] bond1: (slave bridge2): failed to get link speed/duplex [ 1407.409869][T24545] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1407.628340][T24545] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1407.644429][T24545] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1407.762360][T24545] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1407.774140][T24545] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1407.797766][T24545] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1407.807525][T24545] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1407.830138][T24545] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1408.058799][T21108] bond6: (slave ip6gretap1): failed to get link speed/duplex [ 1408.076899][T24545] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1408.134452][T24545] 8021q: adding VLAN 0 to HW filter on device team0 [ 1408.155770][T21106] bridge0: port 1(bridge_slave_0) entered blocking state [ 1408.162867][T21106] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1408.201004][T21106] bridge0: port 2(bridge_slave_1) entered blocking state [ 1408.208146][T21106] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1409.177544][T24729] overlayfs: failed to clone upperpath [ 1409.798730][ T30] audit: type=1400 audit(1777463573.885:1612): avc: denied { write } for pid=24725 comm="syz.0.5069" name="fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 1410.079830][T24545] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1410.127672][T24545] veth0_vlan: entered promiscuous mode [ 1410.139683][T24545] veth1_vlan: entered promiscuous mode [ 1410.174473][T24545] veth0_macvtap: entered promiscuous mode [ 1410.195663][T24545] veth1_macvtap: entered promiscuous mode [ 1410.216597][T24545] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1410.219751][T24545] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1410.234405][T21122] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1410.234453][T21122] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1410.234480][T21122] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1410.234506][T21122] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1410.714301][T21122] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1410.714315][T21122] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1410.772500][T21122] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1410.772521][T21122] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1410.901410][T21122] net_ratelimit: 33 callbacks suppressed [ 1410.901426][T21122] bond1: (slave bridge2): failed to get link speed/duplex [ 1410.911193][T21108] bond6: (slave ip6gretap1): failed to get link speed/duplex [ 1411.022284][T21106] bond1: (slave bridge2): failed to get link speed/duplex [ 1411.033073][T21108] bond6: (slave ip6gretap1): failed to get link speed/duplex [ 1411.582863][T21125] bond1: (slave bridge2): failed to get link speed/duplex [ 1411.582904][T21125] bond6: (slave ip6gretap1): failed to get link speed/duplex [ 1411.703966][T21106] bond6: (slave ip6gretap1): failed to get link speed/duplex [ 1411.704071][T21106] bond1: (slave bridge2): failed to get link speed/duplex [ 1411.818543][T21122] bond1: (slave bridge2): failed to get link speed/duplex [ 1411.818585][T21106] bond6: (slave ip6gretap1): failed to get link speed/duplex [ 1412.031104][ T30] audit: type=1800 audit(1777463575.983:1613): pid=24776 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.2.5042" name="SYSV00000000" dev="tmpfs" ino=0 res=0 errno=0 [ 1413.343104][T24759] netlink: 'syz.4.5071': attribute type 13 has an invalid length. [ 1414.379852][T24816] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=24816 comm=syz.9.5077 [ 1414.385858][T24816] netlink: 'syz.9.5077': attribute type 10 has an invalid length. [ 1414.507974][ T30] audit: type=1400 audit(1777463578.295:1614): avc: denied { append } for pid=24799 comm="syz.2.5074" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 1415.104323][T24816] team0: Port device vlan0 added [ 1416.713754][T21114] net_ratelimit: 30 callbacks suppressed [ 1416.713773][T21114] bond1: (slave bridge2): failed to get link speed/duplex [ 1416.713808][T21114] bond6: (slave ip6gretap1): failed to get link speed/duplex [ 1417.377292][T12182] bond6: (slave ip6gretap1): failed to get link speed/duplex [ 1417.377401][T12182] bond1: (slave bridge2): failed to get link speed/duplex [ 1417.527593][T12182] bond1: (slave bridge2): failed to get link speed/duplex [ 1417.527642][T12182] bond6: (slave ip6gretap1): failed to get link speed/duplex [ 1417.640753][T10036] bond6: (slave ip6gretap1): failed to get link speed/duplex [ 1417.641473][T10036] bond1: (slave bridge2): failed to get link speed/duplex [ 1417.784481][T24869] overlayfs: failed to clone upperpath [ 1418.044205][T21133] bond1: (slave bridge2): failed to get link speed/duplex [ 1418.045248][T21133] bond6: (slave ip6gretap1): failed to get link speed/duplex [ 1418.930277][ T5619] Bluetooth: hci4: ACL packet for unknown connection handle 201 [ 1420.073013][T24904] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 1420.229894][T24904] overlayfs: failed lookup in lower (/, name='tracing', err=-66): unsupported object type [ 1420.230758][T24904] overlayfs: failed to look up (tracing) for ino (-66) [ 1420.371796][ T30] audit: type=1400 audit(1777463583.501:1615): avc: denied { mount } for pid=24889 comm="syz.2.5086" name="/" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 1421.600557][T24920] overlayfs: failed to clone upperpath [ 1422.120923][T24906] net_ratelimit: 32 callbacks suppressed [ 1422.120944][T24906] bond6: (slave ip6gretap1): failed to get link speed/duplex [ 1422.127372][T21122] bond1: (slave bridge2): failed to get link speed/duplex [ 1422.264897][T21110] bond1: (slave bridge2): failed to get link speed/duplex [ 1422.268041][T21110] bond6: (slave ip6gretap1): failed to get link speed/duplex [ 1423.268457][T21113] bond6: (slave ip6gretap1): failed to get link speed/duplex [ 1423.284467][T19091] bond1: (slave bridge2): failed to get link speed/duplex [ 1423.632943][T10036] bond6: (slave ip6gretap1): failed to get link speed/duplex [ 1423.635843][T21110] bond1: (slave bridge2): failed to get link speed/duplex [ 1423.898250][T21124] bond1: (slave bridge2): failed to get link speed/duplex [ 1423.898325][T21124] bond6: (slave ip6gretap1): failed to get link speed/duplex [ 1424.512311][T24943] SQUASHFS error: Failed to read block 0x0: -5 [ 1424.513101][T24943] netlink: 8 bytes leftover after parsing attributes in process `syz.9.5092'. [ 1424.574197][ T1311] ieee802154 phy0 wpan0: encryption failed: -22 [ 1424.575316][ T1311] ieee802154 phy1 wpan1: encryption failed: -22 [ 1424.878850][ T30] audit: type=1400 audit(1777463587.668:1616): avc: denied { create } for pid=24933 comm="syz.9.5092" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 1424.914981][ T30] audit: type=1400 audit(1777463588.042:1617): avc: denied { unlink } for pid=21865 comm="syz-executor" name="file0" dev="tmpfs" ino=705 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 1425.007347][T24944] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5089'. [ 1426.679869][T21866] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1426.691510][T21866] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1426.695707][T21866] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1426.719227][T21866] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1426.723524][T21866] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1427.503498][T19091] net_ratelimit: 26 callbacks suppressed [ 1427.503512][T19091] bond1: (slave bridge2): failed to get link speed/duplex [ 1427.561781][T24906] bond6: (slave ip6gretap1): failed to get link speed/duplex [ 1427.788727][ T5619] Bluetooth: hci5: unexpected event for opcode 0x58a0 [ 1427.800232][T21105] bond1: (slave bridge2): failed to get link speed/duplex [ 1427.806970][T21110] bond6: (slave ip6gretap1): failed to get link speed/duplex [ 1427.930299][T19091] bond1: (slave bridge2): failed to get link speed/duplex [ 1427.932112][T21122] bond6: (slave ip6gretap1): failed to get link speed/duplex [ 1428.061929][T21105] bond6: (slave ip6gretap1): failed to get link speed/duplex [ 1428.087186][T19091] bond1: (slave bridge2): failed to get link speed/duplex [ 1428.115368][T24978] netlink: 'syz.4.5098': attribute type 2 has an invalid length. [ 1428.226405][ T30] audit: type=1326 audit(1777463591.141:1618): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24984 comm="syz.9.5100" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f865879cdd9 code=0x0 [ 1428.375415][T21106] bond6: (slave ip6gretap1): failed to get link speed/duplex [ 1428.397112][T21110] bond1: (slave bridge2): failed to get link speed/duplex [ 1428.909917][ T5619] Bluetooth: hci1: command tx timeout [ 1428.971152][T24978] netlink: 'syz.4.5098': attribute type 2 has an invalid length. [ 1429.230972][T24961] lo speed is unknown, defaulting to 1000 [ 1429.787958][T25010] overlayfs: failed to clone upperpath [ 1430.267551][T21125] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1430.669786][T25014] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 1431.148248][ T5619] Bluetooth: hci1: command tx timeout [ 1432.313553][T24961] bridge0: port 1(bridge_slave_0) entered blocking state [ 1432.334160][T24961] bridge0: port 1(bridge_slave_0) entered disabled state [ 1432.337433][T24961] bridge_slave_0: entered allmulticast mode [ 1432.353480][T24961] bridge_slave_0: entered promiscuous mode [ 1432.362687][T24961] bridge0: port 2(bridge_slave_1) entered blocking state [ 1432.363026][T24961] bridge0: port 2(bridge_slave_1) entered disabled state [ 1432.363174][T24961] bridge_slave_1: entered allmulticast mode [ 1432.391693][T24961] bridge_slave_1: entered promiscuous mode [ 1432.529479][T24961] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1432.531689][T24961] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1432.642011][T24961] team0: Port device team_slave_0 added [ 1432.649897][T24961] team0: Port device team_slave_1 added [ 1432.751087][T24961] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1432.751105][T24961] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1432.751126][T24961] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1432.757790][T24961] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1432.757805][T24961] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1432.757828][T24961] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1432.823649][T24961] hsr_slave_0: entered promiscuous mode [ 1432.824173][T24961] hsr_slave_1: entered promiscuous mode [ 1432.824500][T24961] debugfs: 'hsr0' already exists in 'hsr' [ 1432.824517][T24961] Cannot create hsr debugfs directory [ 1433.339766][ T5619] Bluetooth: hci1: command tx timeout [ 1433.857819][T25070] tipc: Can't bind to reserved service type 1 [ 1434.374954][T21124] net_ratelimit: 29 callbacks suppressed [ 1434.374974][T21124] bond1: (slave bridge2): failed to get link speed/duplex [ 1434.379117][T21122] bond6: (slave ip6gretap1): failed to get link speed/duplex [ 1435.595863][ T5619] Bluetooth: hci1: command tx timeout [ 1436.055417][ T113] bond6: (slave ip6gretap1): failed to get link speed/duplex [ 1436.055452][ T113] bond1: (slave bridge2): failed to get link speed/duplex [ 1436.395001][T25108] netlink: 20 bytes leftover after parsing attributes in process `syz.1.5112'. [ 1437.620860][T25112] tipc: Started in network mode [ 1437.620889][T25112] tipc: Node identity ac14140f, cluster identity 4711 [ 1437.621082][T25112] tipc: New replicast peer: 255.255.255.255 [ 1437.621477][T25112] tipc: Enabled bearer , priority 10 [ 1437.622397][T21110] bond6: (slave ip6gretap1): failed to get link speed/duplex [ 1437.622431][T21110] bond1: (slave bridge2): failed to get link speed/duplex [ 1437.725484][ T30] audit: type=1400 audit(1777463600.036:1619): avc: denied { name_bind } for pid=25076 comm="syz.4.5109" src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 1437.898279][T24908] bond6: (slave ip6gretap1): failed to get link speed/duplex [ 1437.898315][T24908] bond1: (slave bridge2): failed to get link speed/duplex [ 1438.186802][T24908] bond1: (slave bridge2): failed to get link speed/duplex [ 1438.187335][T24908] bond6: (slave ip6gretap1): failed to get link speed/duplex [ 1438.690581][T17545] tipc: Node number set to 2886997007 [ 1439.247614][T24961] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 1439.325410][T24961] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1439.325870][T24961] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 1439.355593][T24961] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1439.356273][T24961] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 1439.391107][T24961] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1439.391736][T24961] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 1439.407011][T24961] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1439.583453][T25154] ubi: mtd0 is already attached to ubi16 [ 1439.763171][T21124] net_ratelimit: 14 callbacks suppressed [ 1439.763191][T21124] bond1: (slave bridge2): failed to get link speed/duplex [ 1439.764503][T21106] bond6: (slave ip6gretap1): failed to get link speed/duplex [ 1439.885705][ T113] bond6: (slave ip6gretap1): failed to get link speed/duplex [ 1439.895479][T21125] bond1: (slave bridge2): failed to get link speed/duplex [ 1440.006552][T21125] bond6: (slave ip6gretap1): failed to get link speed/duplex [ 1440.018259][T10036] bond1: (slave bridge2): failed to get link speed/duplex [ 1440.059708][T24961] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1440.172061][T24961] 8021q: adding VLAN 0 to HW filter on device team0 [ 1440.212226][T24908] bridge0: port 1(bridge_slave_0) entered blocking state [ 1440.212304][T24908] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1440.213228][T24908] bridge0: port 2(bridge_slave_1) entered blocking state [ 1440.213268][T24908] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1440.759744][T25163] 9p: Bad value for 'rfdno' [ 1440.986647][T25162] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -4 [ 1440.986687][T25162] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -4 [ 1440.986709][T25162] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 1441.042172][T24908] bond1: (slave bridge2): failed to get link speed/duplex [ 1441.061044][T24908] bond6: (slave ip6gretap1): failed to get link speed/duplex [ 1441.157229][T21125] bond1: (slave bridge2): failed to get link speed/duplex [ 1441.820839][T21125] bond6: (slave ip6gretap1): failed to get link speed/duplex [ 1442.941670][ T30] audit: type=1800 audit(1777463604.633:1620): pid=25188 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.2.5123" name="file0" dev="overlay" ino=93 res=0 errno=0 [ 1444.558624][T25213] netlink: 'syz.2.5125': attribute type 3 has an invalid length. [ 1444.558651][T25213] netlink: 'syz.2.5125': attribute type 3 has an invalid length. [ 1444.558667][T25213] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5125'. [ 1444.739228][T25218] vti0: entered promiscuous mode [ 1444.789328][T24961] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1444.794302][T25218] netlink: 32 bytes leftover after parsing attributes in process `syz.2.5125'. [ 1447.246008][T21122] net_ratelimit: 35 callbacks suppressed [ 1447.246028][T21122] bond1: (slave bridge2): failed to get link speed/duplex [ 1447.246060][T21122] bond6: (slave ip6gretap1): failed to get link speed/duplex [ 1447.459142][ T113] bond6: (slave ip6gretap1): failed to get link speed/duplex [ 1447.459183][ T113] bond1: (slave bridge2): failed to get link speed/duplex [ 1447.971393][T25262] overlayfs: failed to clone upperpath [ 1448.576469][T21125] bond1: (slave bridge2): failed to get link speed/duplex [ 1448.576510][T21125] bond6: (slave ip6gretap1): failed to get link speed/duplex [ 1448.705714][T24908] bond6: (slave ip6gretap1): failed to get link speed/duplex [ 1448.705770][T24908] bond1: (slave bridge2): failed to get link speed/duplex [ 1448.755070][T24961] veth0_vlan: entered promiscuous mode [ 1448.863349][T24961] veth1_vlan: entered promiscuous mode [ 1449.284371][T19091] bond6: (slave ip6gretap1): failed to get link speed/duplex [ 1449.284420][T19091] bond1: (slave bridge2): failed to get link speed/duplex [ 1449.376194][T24961] veth0_macvtap: entered promiscuous mode [ 1449.630880][T24961] veth1_macvtap: entered promiscuous mode [ 1449.641813][T24961] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1449.644889][T24961] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1451.058541][ T57] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1451.063383][T21125] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1451.063427][T21125] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1451.650219][T21125] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1451.913034][T25297] netlink: 'syz.4.5138': attribute type 1 has an invalid length. [ 1452.081740][ T30] audit: type=1400 audit(1777463613.425:1621): avc: denied { read } for pid=25291 comm="syz.1.5139" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 1452.330600][T21110] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1452.330619][T21110] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1453.791467][T21109] net_ratelimit: 5 callbacks suppressed [ 1453.791481][T21109] bond1: (slave bridge2): failed to get link speed/duplex [ 1453.984947][T21109] bond6: (slave ip6gretap1): failed to get link speed/duplex [ 1453.984973][T21109] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1453.984982][T21109] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1454.971401][T10036] bond6: (slave ip6gretap1): failed to get link speed/duplex [ 1455.115690][T21122] bond6: (slave ip6gretap1): failed to get link speed/duplex [ 1455.115733][T21122] bond1: (slave bridge2): failed to get link speed/duplex [ 1455.448964][T25328] netlink: 36 bytes leftover after parsing attributes in process `syz.1.5153'. [ 1456.606349][T21122] bond1: (slave bridge2): failed to get link speed/duplex [ 1456.606388][T21122] bond6: (slave ip6gretap1): failed to get link speed/duplex [ 1456.699211][ T30] audit: type=1400 audit(1777463617.807:1622): avc: denied { setopt } for pid=25333 comm="syz.1.5144" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 1456.718628][T19091] bond6: (slave ip6gretap1): failed to get link speed/duplex [ 1456.718668][T19091] bond1: (slave bridge2): failed to get link speed/duplex [ 1457.366630][T19091] bond1: (slave bridge2): failed to get link speed/duplex [ 1459.216303][T21124] net_ratelimit: 23 callbacks suppressed [ 1459.216317][T21124] bond6: (slave ip6gretap1): failed to get link speed/duplex [ 1459.216337][T21124] bond1: (slave bridge2): failed to get link speed/duplex [ 1459.334404][T24908] bond1: (slave bridge2): failed to get link speed/duplex [ 1459.334427][T24908] bond6: (slave ip6gretap1): failed to get link speed/duplex [ 1459.452556][T24906] bond6: (slave ip6gretap1): failed to get link speed/duplex [ 1459.473775][T21124] bond1: (slave bridge2): failed to get link speed/duplex [ 1459.578355][ T57] bond6: (slave ip6gretap1): failed to get link speed/duplex [ 1459.590002][T19091] bond1: (slave bridge2): failed to get link speed/duplex [ 1459.738077][T21124] bond6: (slave ip6gretap1): failed to get link speed/duplex [ 1459.742911][T19091] bond1: (slave bridge2): failed to get link speed/duplex [ 1461.063390][T25385] trusted_key: encrypted_key: insufficient parameters specified [ 1462.310331][T25410] netlink: 8 bytes leftover after parsing attributes in process `syz.9.5155'. [ 1462.399475][T25411] fuse: Bad value for 'fd' [ 1463.376113][ T30] audit: type=1800 audit(1777463623.762:1623): pid=25426 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.2.5157" name="file0" dev="overlay" ino=147 res=0 errno=0 [ 1464.570827][T21106] net_ratelimit: 48 callbacks suppressed [ 1464.570841][T21106] bond1: (slave bridge2): failed to get link speed/duplex [ 1464.631598][T21106] bond6: (slave ip6gretap1): failed to get link speed/duplex [ 1464.688793][T10036] bond1: (slave bridge2): failed to get link speed/duplex [ 1464.749327][T21106] bond6: (slave ip6gretap1): failed to get link speed/duplex [ 1464.802181][T21106] bond1: (slave bridge2): failed to get link speed/duplex [ 1464.869637][T21106] bond6: (slave ip6gretap1): failed to get link speed/duplex [ 1464.919805][T21106] bond1: (slave bridge2): failed to get link speed/duplex [ 1464.985361][T10036] bond6: (slave ip6gretap1): failed to get link speed/duplex [ 1465.053373][T21110] bond1: (slave bridge2): failed to get link speed/duplex [ 1465.198423][T19091] bond6: (slave ip6gretap1): failed to get link speed/duplex [ 1465.242337][T25453] netlink: 12 bytes leftover after parsing attributes in process `syz.9.5160'. [ 1465.889486][T25465] lo speed is unknown, defaulting to 1000 [ 1466.581140][T25469] xt_connbytes: Forcing CT accounting to be enabled [ 1466.581443][T25469] Cannot find set identified by id 0 to match [ 1466.666327][ T30] audit: type=1400 audit(1777463627.002:1624): avc: denied { write } for pid=25460 comm="syz.2.5162" name="file0" dev="tmpfs" ino=158 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 1466.666517][ T30] audit: type=1400 audit(1777463627.002:1625): avc: denied { open } for pid=25460 comm="syz.2.5162" path="/24/file0" dev="tmpfs" ino=158 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 1466.666667][ T30] audit: type=1400 audit(1777463627.002:1626): avc: denied { ioctl } for pid=25460 comm="syz.2.5162" path="/24/file0" dev="tmpfs" ino=158 ioctlcmd=0x1273 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 1466.666802][ T30] audit: type=1400 audit(1777463627.020:1627): avc: denied { ioctl } for pid=25460 comm="syz.2.5162" path="socket:[103868]" dev="sockfs" ino=103868 ioctlcmd=0x89e0 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 1467.484926][T21866] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 1467.491785][T21866] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 1467.494487][T21866] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 1467.500863][T21866] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 1467.504334][T21866] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 1467.775824][T21106] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1469.629281][T25504] netlink: 20 bytes leftover after parsing attributes in process `syz.1.5167'. [ 1469.657954][T25511] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5168'. [ 1469.661560][T21866] Bluetooth: hci6: command tx timeout [ 1469.898734][T25479] lo speed is unknown, defaulting to 1000 [ 1470.008390][T10036] net_ratelimit: 47 callbacks suppressed [ 1470.008404][T10036] bond1: (slave bridge2): failed to get link speed/duplex [ 1470.008423][T10036] bond6: (slave ip6gretap1): failed to get link speed/duplex [ 1470.104953][T24966] udevd[24966]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 1470.136775][T24867] udevd[24867]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 1470.200255][ T113] bond1: (slave bridge2): failed to get link speed/duplex [ 1470.200280][ T113] bond6: (slave ip6gretap1): failed to get link speed/duplex [ 1470.323729][ T113] bond6: (slave ip6gretap1): failed to get link speed/duplex [ 1470.323798][ T113] bond1: (slave bridge2): failed to get link speed/duplex [ 1470.589186][T25479] bridge0: port 1(bridge_slave_0) entered blocking state [ 1470.589650][T25479] bridge0: port 1(bridge_slave_0) entered disabled state [ 1470.589828][T25479] bridge_slave_0: entered allmulticast mode [ 1470.617661][T25479] bridge_slave_0: entered promiscuous mode [ 1470.625008][T25479] bridge0: port 2(bridge_slave_1) entered blocking state [ 1470.625125][T25479] bridge0: port 2(bridge_slave_1) entered disabled state [ 1470.629087][T25479] bridge_slave_1: entered allmulticast mode [ 1470.632156][T25479] bridge_slave_1: entered promiscuous mode [ 1470.654283][T25479] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1470.657019][T25479] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1470.741489][T25479] team0: Port device team_slave_0 added [ 1470.745279][T25479] team0: Port device team_slave_1 added [ 1470.793213][T25479] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1470.793226][T25479] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1470.793240][T25479] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1470.798110][T25479] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1470.798122][T25479] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1470.798136][T25479] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1470.866277][T25479] hsr_slave_0: entered promiscuous mode [ 1470.867360][T25479] hsr_slave_1: entered promiscuous mode [ 1470.873287][T25479] debugfs: 'hsr0' already exists in 'hsr' [ 1470.873308][T25479] Cannot create hsr debugfs directory [ 1471.083035][T21117] bond1: (slave bridge2): failed to get link speed/duplex [ 1471.083065][T21117] bond6: (slave ip6gretap1): failed to get link speed/duplex [ 1471.875417][T21866] Bluetooth: hci6: command tx timeout [ 1473.584179][T17541] kworker/0:8 (17541) used greatest stack depth: 17304 bytes left [ 1474.093928][ T5619] Bluetooth: hci6: command tx timeout [ 1475.226965][T25604] overlayfs: failed to clone upperpath [ 1475.409051][T21122] bond6: (slave ip6gretap1): failed to get link speed/duplex [ 1475.409091][T21122] bond1: (slave bridge2): failed to get link speed/duplex [ 1475.528475][T21122] bond1: (slave bridge2): failed to get link speed/duplex [ 1475.528501][T21122] bond6: (slave ip6gretap1): failed to get link speed/duplex [ 1475.727997][T21122] bond6: (slave ip6gretap1): failed to get link speed/duplex [ 1475.728036][T21122] bond1: (slave bridge2): failed to get link speed/duplex [ 1476.144526][T25616] xt_hashlimit: size too large, truncated to 1048576 [ 1476.206147][T25620] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5174'. [ 1476.316205][ T5619] Bluetooth: hci6: command tx timeout [ 1479.297148][T21106] bond6: (slave ip6gretap1): failed to get link speed/duplex [ 1479.297175][T21106] bond1: (slave bridge2): failed to get link speed/duplex [ 1479.418749][T21106] bond1: (slave bridge2): failed to get link speed/duplex [ 1479.418776][T21106] bond6: (slave ip6gretap1): failed to get link speed/duplex [ 1480.822937][ T30] audit: type=1400 audit(1777463640.194:1628): avc: denied { ioctl } for pid=25672 comm="syz.3.5179" path="/dev/vhost-vsock" dev="devtmpfs" ino=1274 ioctlcmd=0xaf00 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 1480.993205][ T30] audit: type=1400 audit(1777463640.428:1629): avc: denied { bind } for pid=25672 comm="syz.3.5179" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 1481.052204][T21105] net_ratelimit: 5 callbacks suppressed [ 1481.052223][T21105] bond1: (slave bridge2): failed to get link speed/duplex [ 1481.052253][T21105] bond6: (slave ip6gretap1): failed to get link speed/duplex [ 1481.175083][ T57] bond6: (slave ip6gretap1): failed to get link speed/duplex [ 1481.175136][ T57] bond1: (slave bridge2): failed to get link speed/duplex [ 1481.303747][T25682] netlink: 24 bytes leftover after parsing attributes in process `syz.9.5180'. [ 1481.664275][ T57] bond1: (slave bridge2): failed to get link speed/duplex [ 1481.664365][ T57] bond6: (slave ip6gretap1): failed to get link speed/duplex [ 1481.944011][T21106] bond6: (slave ip6gretap1): failed to get link speed/duplex [ 1481.944047][T21106] bond1: (slave bridge2): failed to get link speed/duplex [ 1482.026152][T25693] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1482.117644][T25479] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 1482.130418][T25479] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1482.130840][T25479] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 1482.169281][T25479] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1482.170187][T25479] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 1482.172648][T25700] netlink: 'syz.3.5182': attribute type 10 has an invalid length. [ 1482.213148][T25479] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1482.398953][T25703] trusted_key: encrypted_key: key user:syz not found [ 1484.819436][T21866] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1484.830891][T21866] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1484.831676][T21866] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1484.833151][T21866] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1484.833695][T21866] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1486.503959][T25754] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma? [ 1487.021685][ T5619] Bluetooth: hci0: command tx timeout [ 1487.401597][ T30] audit: type=1400 audit(1777463646.477:1630): avc: denied { mount } for pid=25757 comm="syz.9.5190" name="/" dev="devpts" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 1487.745785][T25288] bond0: (slave syz_tun): Releasing backup interface [ 1487.790827][T25700] 8021q: adding VLAN 0 to HW filter on device team0 [ 1487.796209][T25700] bond0: (slave team0): Enslaving as an active interface with an up link [ 1487.796715][T25479] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 1487.798675][T25479] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1488.125348][T21105] bond6: (slave ip6gretap1): failed to get link speed/duplex [ 1488.125402][T21105] bond1: (slave bridge2): failed to get link speed/duplex [ 1489.217338][ T5619] Bluetooth: hci0: command tx timeout [ 1489.238701][T21124] bond6: (slave ip6gretap1): failed to get link speed/duplex [ 1489.238737][T21124] bond1: (slave bridge2): failed to get link speed/duplex [ 1489.635569][T21105] bond6: (slave ip6gretap1): failed to get link speed/duplex [ 1489.635597][T21105] bond1: (slave bridge2): failed to get link speed/duplex [ 1489.645527][ T1311] ieee802154 phy1 wpan1: encryption failed: -22 [ 1489.645755][ T1311] aoe: packet could not be sent on ipvlan1. consider increasing tx_queue_len [ 1490.117617][ T30] audit: type=1800 audit(1777463648.771:1631): pid=25786 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.3.5192" name="file0" dev="overlay" ino=81 res=0 errno=0 [ 1490.182002][T21124] bond1: (slave bridge2): failed to get link speed/duplex [ 1490.182028][T21124] bond6: (slave ip6gretap1): failed to get link speed/duplex [ 1491.337505][T21122] netdevsim netdevsim4 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1491.423839][T21105] bond6: (slave ip6gretap1): failed to get link speed/duplex [ 1491.438975][ T5619] Bluetooth: hci0: command tx timeout [ 1491.544464][T25479] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1491.656316][ T30] audit: type=1400 audit(1777463650.521:1632): avc: denied { write } for pid=25801 comm="syz.3.5196" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 1491.656508][ T30] audit: type=1400 audit(1777463650.521:1633): avc: denied { write } for pid=25801 comm="syz.3.5196" name="renderD128" dev="devtmpfs" ino=626 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 1492.009623][T25479] 8021q: adding VLAN 0 to HW filter on device team0 [ 1492.050119][ T113] bridge0: port 1(bridge_slave_0) entered blocking state [ 1492.050169][ T113] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1492.051930][ T113] bridge0: port 2(bridge_slave_1) entered blocking state [ 1492.051990][ T113] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1492.072227][ T5619] Bluetooth: hci5: ACL packet for unknown connection handle 201 [ 1492.395669][T21122] netdevsim netdevsim4 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1492.699676][ T30] audit: type=1400 audit(1777463651.505:1634): avc: denied { getopt } for pid=25820 comm="syz.3.5198" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 1493.160500][T25825] overlayfs: failed to clone upperpath [ 1493.224536][T21122] netdevsim netdevsim4 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1493.285034][T25713] lo speed is unknown, defaulting to 1000 [ 1493.301446][T25479] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1493.714842][ T30] audit: type=1400 audit(1777463652.329:1635): avc: denied { watch_sb } for pid=25832 comm="syz.1.5200" path="/1120/file0" dev="tmpfs" ino=6002 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 1493.715070][ T5619] Bluetooth: hci0: command tx timeout [ 1494.532222][T21122] netdevsim netdevsim4 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1494.907954][T21124] net_ratelimit: 9 callbacks suppressed [ 1494.907991][T21124] bond1: (slave bridge2): failed to get link speed/duplex [ 1494.908245][T21124] bond6: (slave ip6gretap1): failed to get link speed/duplex [ 1495.298146][T24908] bond1: (slave bridge2): failed to get link speed/duplex [ 1495.298183][T24908] bond6: (slave ip6gretap1): failed to get link speed/duplex [ 1495.690125][T21110] bond6: (slave ip6gretap1): failed to get link speed/duplex [ 1495.690629][ T113] bond1: (slave bridge2): failed to get link speed/duplex [ 1495.807025][T25867] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5203'. [ 1497.398415][T21124] bond6: (slave ip6gretap1): failed to get link speed/duplex [ 1497.398451][T21124] bond1: (slave bridge2): failed to get link speed/duplex [ 1497.510192][T25894] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5207'. [ 1497.609580][T25902] fuse: Bad value for 'fd' [ 1498.125939][T25914] fuse: Bad value for 'fd' [ 1498.922658][T21122] bond2 (unregistering): (slave sit1): Releasing backup interface [ 1498.997738][T21122] bond7 (unregistering): (slave gretap1): Releasing active interface [ 1499.011675][T21122] bond9 (unregistering): (slave gretap2): Releasing active interface [ 1499.061290][T21122] bond4 (unregistering): (slave geneve2): Releasing active interface [ 1499.085350][T21122] bond6 (unregistering): (slave bridge0): Releasing backup interface [ 1499.085369][T21122] bridge0 (unregistering): left promiscuous mode [ 1499.085381][T21122] bridge0 (unregistering): left allmulticast mode [ 1499.207158][T21122] bond7 (unregistering): (slave bridge1): Releasing active interface [ 1499.315072][T21122] bond8 (unregistering): (slave bridge2): Releasing active interface [ 1500.366078][T21122] bond0 (unregistering): Released all slaves [ 1500.372313][T21122] bond1 (unregistering): Released all slaves [ 1500.382843][T21122] bond2 (unregistering): Released all slaves [ 1500.393463][T21122] bond3 (unregistering): Released all slaves [ 1501.209485][T21122] bond4 (unregistering): Released all slaves [ 1501.278189][T21122] bond5 (unregistering): Released all slaves [ 1501.318653][T21122] bond6 (unregistering): Released all slaves [ 1501.346474][T21122] bond7 (unregistering): Released all slaves [ 1501.366172][T21122] bond8 (unregistering): Released all slaves [ 1501.490617][T21122] bond9 (unregistering): Released all slaves [ 1501.504134][T21122] bond10 (unregistering): Released all slaves [ 1501.609997][ T30] audit: type=1400 audit(1777463659.856:1636): avc: denied { ioctl } for pid=25926 comm="syz.1.5214" path="socket:[105739]" dev="sockfs" ino=105739 ioctlcmd=0x8940 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 1501.649907][ T113] bond6: (slave ip6gretap1): failed to get link speed/duplex [ 1501.650014][ T113] bond1: (slave bridge2): failed to get link speed/duplex [ 1502.192006][T25713] bridge0: port 1(bridge_slave_0) entered blocking state [ 1502.192086][T25713] bridge0: port 1(bridge_slave_0) entered disabled state [ 1502.192202][T25713] bridge_slave_0: entered allmulticast mode [ 1502.199380][T25713] bridge_slave_0: entered promiscuous mode [ 1502.209480][T25713] bridge0: port 2(bridge_slave_1) entered blocking state [ 1502.209539][T25713] bridge0: port 2(bridge_slave_1) entered disabled state [ 1502.209693][T25713] bridge_slave_1: entered allmulticast mode [ 1502.216600][T25713] bridge_slave_1: entered promiscuous mode [ 1502.234278][T21122] : left promiscuous mode [ 1502.421725][T25479] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1502.424549][T25713] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1502.441816][T25713] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1502.498746][T21122] tipc: Disabling bearer [ 1502.500937][T21122] tipc: Left network mode [ 1502.513307][T25713] team0: Port device team_slave_0 added [ 1502.535370][T25713] team0: Port device team_slave_1 added [ 1502.668331][T25713] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1502.668349][T25713] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1502.668373][T25713] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1503.069098][T25713] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1503.069115][T25713] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1503.069155][T25713] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1503.690380][T21124] bond6: (slave ip6gretap1): failed to get link speed/duplex [ 1503.690416][T21124] bond1: (slave bridge2): failed to get link speed/duplex [ 1503.762313][T25961] lo speed is unknown, defaulting to 1000 [ 1503.946737][ T57] bond6: (slave ip6gretap1): failed to get link speed/duplex [ 1503.946774][ T57] bond1: (slave bridge2): failed to get link speed/duplex [ 1503.976388][T25713] hsr_slave_0: entered promiscuous mode [ 1503.998031][T25713] hsr_slave_1: entered promiscuous mode [ 1504.003203][T25713] debugfs: 'hsr0' already exists in 'hsr' [ 1504.003224][T25713] Cannot create hsr debugfs directory [ 1504.381570][T25479] veth0_vlan: entered promiscuous mode [ 1504.383531][T21113] bond6: (slave ip6gretap1): failed to get link speed/duplex [ 1504.383564][T21113] bond1: (slave bridge2): failed to get link speed/duplex [ 1504.408427][T25479] veth1_vlan: entered promiscuous mode [ 1504.649147][T25713] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1504.989455][T24908] bond1: (slave bridge2): failed to get link speed/duplex [ 1504.989697][T24908] bond6: (slave ip6gretap1): failed to get link speed/duplex [ 1505.261927][T25479] veth0_macvtap: entered promiscuous mode [ 1505.438901][T25479] veth1_macvtap: entered promiscuous mode [ 1505.590793][T25713] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1505.856734][T25713] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1506.005857][T25713] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1506.047244][T25479] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1506.072493][T25479] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1506.123688][ T57] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1506.123803][ T57] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1506.123891][ T57] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1506.123954][ T57] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1506.287140][T25479] ieee80211 phy50: Selected rate control algorithm 'minstrel_ht' [ 1506.410772][T19091] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1506.410789][T19091] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1506.414668][T25479] ieee80211 phy51: Selected rate control algorithm 'minstrel_ht' [ 1506.621726][T19091] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1506.621741][T19091] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1507.106793][T21124] net_ratelimit: 13 callbacks suppressed [ 1507.106813][T21124] bond1: (slave bridge2): failed to get link speed/duplex [ 1507.106845][T21124] bond6: (slave ip6gretap1): failed to get link speed/duplex [ 1507.579800][T21113] bond1: (slave bridge2): failed to get link speed/duplex [ 1508.004546][ T113] bond6: (slave ip6gretap1): failed to get link speed/duplex [ 1508.004591][ T113] bond1: (slave bridge2): failed to get link speed/duplex [ 1508.009867][T25713] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 1508.027773][T25713] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1508.033261][T25713] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 1508.370983][T25713] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1508.371523][T25713] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 1508.376319][T25713] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1508.388102][T25713] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 1508.914299][T25713] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1508.992397][T21122] batman_adv: batadv0: Removing interface: dummy0 [ 1510.234705][T21124] smbdirect: ib_dev[syz0] removed [ 1510.305832][T21113] bond1: (slave bridge2): failed to get link speed/duplex [ 1510.305867][T21113] bond6: (slave ip6gretap1): failed to get link speed/duplex [ 1510.449785][T19091] bond1: (slave bridge2): failed to get link speed/duplex [ 1510.449819][T19091] bond6: (slave ip6gretap1): failed to get link speed/duplex [ 1510.678018][T21124] bond6: (slave ip6gretap1): failed to get link speed/duplex [ 1510.737472][T25713] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1510.825433][T25713] 8021q: adding VLAN 0 to HW filter on device team0 [ 1510.876569][T21113] bridge0: port 1(bridge_slave_0) entered blocking state [ 1510.876614][T21113] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1510.883370][T21113] bridge0: port 2(bridge_slave_1) entered blocking state [ 1510.883415][T21113] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1510.927801][T26057] binder: 26056:26057 ioctl c0306201 0 returned -14 [ 1511.080666][T21122] IPVS: stop unused estimator thread 0... [ 1513.391179][T21113] net_ratelimit: 17 callbacks suppressed [ 1513.391192][T21113] bond1: (slave bridge2): failed to get link speed/duplex [ 1513.391213][T21113] bond6: (slave ip6gretap1): failed to get link speed/duplex [ 1513.506618][T21124] bond6: (slave ip6gretap1): failed to get link speed/duplex [ 1513.506648][T21124] bond1: (slave bridge2): failed to get link speed/duplex [ 1513.570463][T25713] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1513.622367][ T57] bond1: (slave bridge2): failed to get link speed/duplex [ 1513.622402][ T57] bond6: (slave ip6gretap1): failed to get link speed/duplex [ 1513.743674][ T57] bond6: (slave ip6gretap1): failed to get link speed/duplex [ 1513.743714][ T57] bond1: (slave bridge2): failed to get link speed/duplex [ 1513.797740][T21866] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1513.810410][T21866] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1513.811305][T21866] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1513.812067][T21866] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1513.812541][T21866] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1513.857853][T21124] bond1: (slave bridge2): failed to get link speed/duplex [ 1513.857876][T21124] bond6: (slave ip6gretap1): failed to get link speed/duplex [ 1514.008196][ T30] audit: type=1326 audit(1777463671.429:1637): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26099 comm="syz.1.5230" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7c94d9cdd9 code=0x7ffc0000 [ 1514.008379][ T30] audit: type=1326 audit(1777463671.429:1638): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26099 comm="syz.1.5230" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7c94d9cdd9 code=0x7ffc0000 [ 1514.008509][ T30] audit: type=1326 audit(1777463671.438:1639): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26099 comm="syz.1.5230" exe="/root/syz-executor" sig=0 arch=c000003e syscall=229 compat=0 ip=0x7f7c94d9cdd9 code=0x7ffc0000 [ 1514.008634][ T30] audit: type=1326 audit(1777463671.438:1640): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26099 comm="syz.1.5230" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7c94d9cdd9 code=0x7ffc0000 [ 1514.008776][ T30] audit: type=1326 audit(1777463671.438:1641): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26099 comm="syz.1.5230" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7c94d9cdd9 code=0x7ffc0000 [ 1514.008898][ T30] audit: type=1326 audit(1777463671.438:1642): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26099 comm="syz.1.5230" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f7c94d5d60e code=0x7ffc0000 [ 1514.009036][ T30] audit: type=1326 audit(1777463671.438:1643): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26099 comm="syz.1.5230" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7c94d9cdd9 code=0x7ffc0000 [ 1514.009199][ T30] audit: type=1326 audit(1777463671.438:1644): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26099 comm="syz.1.5230" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7c94d9cdd9 code=0x7ffc0000 [ 1514.009324][ T30] audit: type=1326 audit(1777463671.438:1645): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26099 comm="syz.1.5230" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f7c94d9cdd9 code=0x7ffc0000 [ 1514.009465][ T30] audit: type=1326 audit(1777463671.438:1646): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26099 comm="syz.1.5230" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7c94d9cdd9 code=0x7ffc0000 [ 1514.510528][ T5273] 8021q: adding VLAN 0 to HW filter on device eth1 [ 1514.847439][T25713] veth0_vlan: entered promiscuous mode [ 1514.869224][T25713] veth1_vlan: entered promiscuous mode [ 1514.904424][T25713] veth0_macvtap: entered promiscuous mode [ 1514.908545][T25713] veth1_macvtap: entered promiscuous mode [ 1514.921089][T25713] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1514.931862][T25713] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1514.949110][ T113] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1514.949208][ T113] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1514.949273][ T113] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1514.949291][ T113] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1515.101508][T25713] ieee80211 phy52: Selected rate control algorithm 'minstrel_ht' [ 1515.237577][T25713] ieee80211 phy53: Selected rate control algorithm 'minstrel_ht' [ 1515.239057][T21106] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1515.239074][T21106] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1515.843929][T21122] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1515.843945][T21122] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1515.971743][T21866] Bluetooth: hci2: command tx timeout [ 1516.333910][T26149] overlayfs: failed to clone upperpath [ 1516.603852][T26101] bridge0: port 1(bridge_slave_0) entered blocking state [ 1516.604739][T26101] bridge0: port 1(bridge_slave_0) entered disabled state [ 1516.604921][T26101] bridge_slave_0: entered allmulticast mode [ 1516.620407][T26101] bridge_slave_0: entered promiscuous mode [ 1516.630962][T26101] bridge0: port 2(bridge_slave_1) entered blocking state [ 1516.631027][T26101] bridge0: port 2(bridge_slave_1) entered disabled state [ 1516.631109][T26101] bridge_slave_1: entered allmulticast mode [ 1516.651129][T26101] bridge_slave_1: entered promiscuous mode [ 1516.745653][T26101] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1516.760267][T26101] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1517.150125][T26101] team0: Port device team_slave_0 added [ 1517.152924][T26101] team0: Port device team_slave_1 added [ 1517.196485][T26160] trusted_key: encrypted_key: key user:syz not found [ 1517.261682][T26101] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1517.261695][T26101] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1517.261709][T26101] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1517.266890][T26101] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1517.266900][T26101] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1517.266928][T26101] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1517.652750][T26165] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5235'. [ 1517.691740][T26101] hsr_slave_0: entered promiscuous mode [ 1517.692418][T26101] hsr_slave_1: entered promiscuous mode [ 1517.692759][T26101] debugfs: 'hsr0' already exists in 'hsr' [ 1517.692771][T26101] Cannot create hsr debugfs directory [ 1517.925627][ T5273] 8021q: adding VLAN 0 to HW filter on device eth2 [ 1518.183153][T21866] Bluetooth: hci2: command tx timeout [ 1518.748655][ T113] net_ratelimit: 30 callbacks suppressed [ 1518.748682][ T113] bond6: (slave ip6gretap1): failed to get link speed/duplex [ 1518.749187][ T113] bond1: (slave bridge2): failed to get link speed/duplex [ 1518.872871][T21124] bond1: (slave bridge2): failed to get link speed/duplex [ 1518.873203][T21124] bond6: (slave ip6gretap1): failed to get link speed/duplex [ 1518.984990][T21124] bond6: (slave ip6gretap1): failed to get link speed/duplex [ 1518.985288][T21124] bond1: (slave bridge2): failed to get link speed/duplex [ 1519.132091][T19091] bond1: (slave bridge2): failed to get link speed/duplex [ 1519.133965][T19091] bond6: (slave ip6gretap1): failed to get link speed/duplex [ 1520.066456][T26198] 9p: Bad value for 'wfdno' [ 1520.078480][T26198] /dev/nullb0: Can't lookup blockdev [ 1520.478749][T21866] Bluetooth: hci2: command tx timeout [ 1521.183489][T21124] bond1: (slave bridge2): failed to get link speed/duplex [ 1521.183525][T21124] bond6: (slave ip6gretap1): failed to get link speed/duplex [ 1522.189368][ T5273] 8021q: adding VLAN 0 to HW filter on device eth3 [ 1522.713106][T21866] Bluetooth: hci2: command tx timeout [ 1522.828431][ T30] kauditd_printk_skb: 21 callbacks suppressed [ 1522.828449][ T30] audit: type=1400 audit(1777463679.715:1668): avc: denied { nlmsg_read } for pid=26216 comm="syz.9.5242" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 1523.760538][T26232] bridge0: port 2(bridge_slave_1) entered disabled state [ 1523.760830][T26232] bridge0: port 1(bridge_slave_0) entered disabled state [ 1523.824874][ T5273] 8021q: adding VLAN 0 to HW filter on device eth4 [ 1524.328070][T26101] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 1524.475442][T26101] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1524.480998][T26101] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 1524.493769][T26101] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1524.500721][T26101] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 1524.522411][T26101] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1524.523729][T26101] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 1524.534225][T26101] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1524.555584][T26247] x_tables: ip6_tables: mh match: only valid for protocol 135 [ 1524.579833][T21110] net_ratelimit: 16 callbacks suppressed [ 1524.579852][T21110] bond6: (slave ip6gretap1): failed to get link speed/duplex [ 1524.579885][T21110] bond1: (slave bridge2): failed to get link speed/duplex [ 1524.720316][ C1] IPv4: Oversized IP packet from 127.0.0.1 [ 1525.381278][T19091] bond1: (slave bridge2): failed to get link speed/duplex [ 1525.381302][T19091] bond6: (slave ip6gretap1): failed to get link speed/duplex [ 1525.501400][T24908] bond6: (slave ip6gretap1): failed to get link speed/duplex [ 1525.501438][T24908] bond1: (slave bridge2): failed to get link speed/duplex [ 1525.546289][T26101] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1525.575971][T26101] 8021q: adding VLAN 0 to HW filter on device team0 [ 1525.588028][T24908] bridge0: port 1(bridge_slave_0) entered blocking state [ 1525.588074][T24908] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1525.611647][T21110] bridge0: port 2(bridge_slave_1) entered blocking state [ 1525.611723][T21110] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1525.622159][T21110] bond1: (slave bridge2): failed to get link speed/duplex [ 1525.622198][T21110] bond6: (slave ip6gretap1): failed to get link speed/duplex [ 1525.776330][T21110] bond1: (slave bridge2): failed to get link speed/duplex [ 1526.592698][T26296] overlayfs: failed to clone upperpath [ 1526.665517][T26101] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1528.004453][T26316] netdevsim netdevsim1: loading /lib/firmware/. failed with error -22 [ 1528.004491][T26316] netdevsim netdevsim1: Direct firmware load for . failed with error -22 [ 1528.004504][T26316] netdevsim netdevsim1: Falling back to sysfs fallback for: . [ 1528.977293][T26101] veth0_vlan: entered promiscuous mode [ 1528.988798][T26101] veth1_vlan: entered promiscuous mode [ 1529.147445][T26101] veth0_macvtap: entered promiscuous mode [ 1529.149568][T26101] veth1_macvtap: entered promiscuous mode [ 1529.168648][T26101] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1529.702110][T26101] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1529.726835][T21124] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1529.726885][T21124] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1529.726915][T21124] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1529.726943][T21124] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1529.967416][T24908] net_ratelimit: 45 callbacks suppressed [ 1529.967435][T24908] bond1: (slave bridge2): failed to get link speed/duplex [ 1529.967465][T24908] bond6: (slave ip6gretap1): failed to get link speed/duplex [ 1530.045768][T26101] ieee80211 phy54: Selected rate control algorithm 'minstrel_ht' [ 1530.085231][T21105] bond6: (slave ip6gretap1): failed to get link speed/duplex [ 1530.085263][T21105] bond1: (slave bridge2): failed to get link speed/duplex [ 1530.209512][T24908] bond1: (slave bridge2): failed to get link speed/duplex [ 1530.209537][T24908] bond6: (slave ip6gretap1): failed to get link speed/duplex [ 1530.264150][T24908] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1530.264204][T24908] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1530.275609][T26101] ieee80211 phy55: Selected rate control algorithm 'minstrel_ht' [ 1530.343129][T19091] bond6: (slave ip6gretap1): failed to get link speed/duplex [ 1530.343155][T19091] bond1: (slave bridge2): failed to get link speed/duplex [ 1530.433953][T24908] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1530.433968][T24908] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1530.467846][T24908] bond1: (slave bridge2): failed to get link speed/duplex [ 1530.467869][T24908] bond6: (slave ip6gretap1): failed to get link speed/duplex [ 1530.917823][T26365] netlink: 8 bytes leftover after parsing attributes in process `syz.7.5229'. [ 1530.917885][T26365] netlink: 4 bytes leftover after parsing attributes in process `syz.7.5229'. [ 1530.917986][T26365] netlink: 'syz.7.5229': attribute type 13 has an invalid length. [ 1530.918030][T26365] netlink: 'syz.7.5229': attribute type 12 has an invalid length. [ 1531.909753][T26383] overlayfs: failed to clone upperpath [ 1534.531300][ T30] audit: type=1400 audit(1777463690.670:1669): avc: denied { getopt } for pid=26403 comm="syz.9.5266" lport=6 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 1534.642343][T22179] usb 7-1: new high-speed USB device number 30 using dummy_hcd [ 1535.175016][T22179] usb 7-1: Using ep0 maxpacket: 8 [ 1535.177706][T22179] usb 7-1: unable to get BOS descriptor or descriptor too short [ 1535.178574][T22179] usb 7-1: config 5 has an invalid interface number: 18 but max is 0 [ 1535.178616][T22179] usb 7-1: config 5 has no interface number 0 [ 1535.178636][T22179] usb 7-1: config 5 interface 18 has no altsetting 0 [ 1535.182621][T22179] usb 7-1: New USB device found, idVendor=157e, idProduct=3205, bcdDevice=c9.b4 [ 1535.182647][T22179] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1535.182665][T22179] usb 7-1: Product: syz [ 1535.182680][T22179] usb 7-1: Manufacturer: syz [ 1535.182695][T22179] usb 7-1: SerialNumber: syz [ 1535.526642][ T113] net_ratelimit: 29 callbacks suppressed [ 1535.526654][ T113] bond1: (slave bridge2): failed to get link speed/duplex [ 1535.526722][ T113] bond6: (slave ip6gretap1): failed to get link speed/duplex [ 1535.798983][ T113] bond6: (slave ip6gretap1): failed to get link speed/duplex [ 1535.819710][T21124] bond1: (slave bridge2): failed to get link speed/duplex [ 1535.830755][T26399] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1535.831122][T26399] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1535.927651][T21106] bond6: (slave ip6gretap1): failed to get link speed/duplex [ 1535.934922][T24906] bond1: (slave bridge2): failed to get link speed/duplex [ 1536.723836][T24906] bond6: (slave ip6gretap1): failed to get link speed/duplex [ 1536.908465][T24906] bond1: (slave bridge2): failed to get link speed/duplex [ 1536.935115][T21105] bond6: (slave ip6gretap1): failed to get link speed/duplex [ 1537.195610][T21124] bond1: (slave bridge2): failed to get link speed/duplex [ 1538.167905][T22179] usb 7-1: Could not find all expected endpoints [ 1538.197458][T22179] usb 7-1: USB disconnect, device number 30 [ 1539.802931][T26452] 9pnet_virtio: no channels available for device syz [ 1541.771205][T21110] net_ratelimit: 16 callbacks suppressed [ 1541.771221][T21110] bond6: (slave ip6gretap1): failed to get link speed/duplex [ 1542.738532][T21110] bond1: (slave bridge2): failed to get link speed/duplex [ 1542.815485][T24906] bond6: (slave ip6gretap1): failed to get link speed/duplex [ 1542.855200][T24906] bond1: (slave bridge2): failed to get link speed/duplex [ 1542.947947][T24906] bond6: (slave ip6gretap1): failed to get link speed/duplex [ 1542.969547][T21110] bond1: (slave bridge2): failed to get link speed/duplex [ 1543.031502][T26458] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5273'. [ 1543.065073][T21110] bond6: (slave ip6gretap1): failed to get link speed/duplex [ 1543.084380][T19091] bond1: (slave bridge2): failed to get link speed/duplex [ 1543.093851][T26463] netlink: 256 bytes leftover after parsing attributes in process `syz.1.5275'. [ 1543.187176][T19091] bond6: (slave ip6gretap1): failed to get link speed/duplex [ 1543.202915][T19091] bond1: (slave bridge2): failed to get link speed/duplex [ 1543.725635][ T5747] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 1543.737151][T17543] usb 7-1: new full-speed USB device number 31 using dummy_hcd [ 1544.279693][T17543] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1544.279729][T17543] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1544.279762][T17543] usb 7-1: New USB device found, idVendor=1e7d, idProduct=319c, bcdDevice= 0.00 [ 1544.279785][T17543] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1544.301769][ T5747] usb 6-1: config 0 has an invalid interface number: 64 but max is 0 [ 1544.301799][ T5747] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1544.301818][ T5747] usb 6-1: config 0 has no interface number 0 [ 1544.304070][T17543] usb 7-1: config 0 descriptor?? [ 1544.308715][ T5747] usb 6-1: New USB device found, idVendor=046d, idProduct=0823, bcdDevice=39.48 [ 1544.308733][ T5747] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1544.308744][ T5747] usb 6-1: Product: syz [ 1544.308753][ T5747] usb 6-1: Manufacturer: syz [ 1544.308762][ T5747] usb 6-1: SerialNumber: syz [ 1544.310702][ T5747] usb 6-1: config 0 descriptor?? [ 1544.716300][T26458] netlink: 84 bytes leftover after parsing attributes in process `syz.5.5273'. [ 1544.743855][ T5747] uvcvideo 6-1:0.64: Found UVC 0.00 device syz (046d:0823) [ 1544.743878][ T5747] uvcvideo 6-1:0.64: No valid video chain found. [ 1544.755043][ T5747] usb 6-1: USB disconnect, device number 11 [ 1544.920087][T26504] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5280'. [ 1544.924344][T26467] kexec: Could not allocate control_code_buffer [ 1545.302428][T26507] netlink: 16 bytes leftover after parsing attributes in process `syz.9.5282'. [ 1545.923099][T26525] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5284'. [ 1545.928672][T26525] netlink: 12 bytes leftover after parsing attributes in process `syz.5.5284'. [ 1547.841607][T21117] net_ratelimit: 37 callbacks suppressed [ 1547.841629][T21117] bond1: (slave bridge2): failed to get link speed/duplex [ 1547.876899][T21117] bond6: (slave ip6gretap1): failed to get link speed/duplex [ 1547.884207][T26536] QAT: failed to copy from user cfg_data. [ 1548.142583][ T57] bond1: (slave bridge2): failed to get link speed/duplex [ 1548.147028][T21125] bond6: (slave ip6gretap1): failed to get link speed/duplex [ 1548.206636][T26543] netlink: 'syz.5.5286': attribute type 1 has an invalid length. [ 1548.239891][T26543] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1548.256759][T17543] usbhid 7-1:0.0: can't add hid device: -71 [ 1548.256816][T17543] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 1548.261275][T17543] usb 7-1: USB disconnect, device number 31 [ 1548.322311][T26543] bond1: (slave ip6erspan0): making interface the new active one [ 1548.332873][T26543] bond1: (slave ip6erspan0): Enslaving as an active interface with an up link [ 1548.343095][ T113] bond1: (slave bridge2): failed to get link speed/duplex [ 1548.343122][ T113] bond6: (slave ip6gretap1): failed to get link speed/duplex [ 1548.481054][T21117] bond1: (slave bridge2): failed to get link speed/duplex [ 1548.481094][T21117] bond6: (slave ip6gretap1): failed to get link speed/duplex [ 1548.599535][ T113] bond6: (slave ip6gretap1): failed to get link speed/duplex [ 1548.599582][ T113] bond1: (slave bridge2): failed to get link speed/duplex [ 1549.124237][ T30] audit: type=1400 audit(1777463704.220:1670): avc: denied { map } for pid=26559 comm="syz.5.5288" path="socket:[109650]" dev="sockfs" ino=109650 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 1549.124428][ T30] audit: type=1400 audit(1777463704.220:1671): avc: denied { read accept } for pid=26559 comm="syz.5.5288" path="socket:[109650]" dev="sockfs" ino=109650 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 1550.525576][T26573] tmpfs: Unknown parameter 'òÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿtmpfs' [ 1551.859933][ T30] audit: type=1326 audit(1777463706.897:1672): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26598 comm="syz.6.5295" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcc7e39cdd9 code=0x7ffc0000 [ 1551.860282][ T30] audit: type=1326 audit(1777463706.897:1673): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26598 comm="syz.6.5295" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcc7e39cdd9 code=0x7ffc0000 [ 1551.860313][ T30] audit: type=1326 audit(1777463706.897:1674): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26598 comm="syz.6.5295" exe="/root/syz-executor" sig=0 arch=c000003e syscall=304 compat=0 ip=0x7fcc7e39cdd9 code=0x7ffc0000 [ 1551.860345][ T30] audit: type=1326 audit(1777463706.897:1675): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26598 comm="syz.6.5295" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcc7e39cdd9 code=0x7ffc0000 [ 1551.860375][ T30] audit: type=1326 audit(1777463706.897:1676): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26598 comm="syz.6.5295" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcc7e39cdd9 code=0x7ffc0000 [ 1551.860406][ T30] audit: type=1326 audit(1777463706.897:1677): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26598 comm="syz.6.5295" exe="/root/syz-executor" sig=0 arch=c000003e syscall=42 compat=0 ip=0x7fcc7e39cdd9 code=0x7ffc0000 [ 1551.860435][ T30] audit: type=1326 audit(1777463706.897:1678): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26598 comm="syz.6.5295" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcc7e39cdd9 code=0x7ffc0000 [ 1551.860465][ T30] audit: type=1326 audit(1777463706.897:1679): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26598 comm="syz.6.5295" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcc7e39cdd9 code=0x7ffc0000 [ 1552.056425][T26604] ip6t_REJECT: ECHOREPLY is not supported [ 1553.147628][T26616] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5297'. [ 1553.418536][T24908] net_ratelimit: 40 callbacks suppressed [ 1553.418557][T24908] bond1: (slave bridge2): failed to get link speed/duplex [ 1553.433074][T24906] bond6: (slave ip6gretap1): failed to get link speed/duplex [ 1553.564927][ T113] bond1: (slave bridge2): failed to get link speed/duplex [ 1553.569888][ T113] bond6: (slave ip6gretap1): failed to get link speed/duplex [ 1553.662182][T26624] fuse: Bad value for 'fd' [ 1553.672720][ T57] bond1: (slave bridge2): failed to get link speed/duplex [ 1553.687141][T21110] bond6: (slave ip6gretap1): failed to get link speed/duplex [ 1553.791313][ T57] bond1: (slave bridge2): failed to get link speed/duplex [ 1553.801834][T21110] bond6: (slave ip6gretap1): failed to get link speed/duplex [ 1553.916732][ T57] bond1: (slave bridge2): failed to get link speed/duplex [ 1553.923064][ T57] bond6: (slave ip6gretap1): failed to get link speed/duplex [ 1555.341363][ T1311] ieee802154 phy1 wpan1: encryption failed: -22 [ 1556.263513][T26671] netlink: 12 bytes leftover after parsing attributes in process `syz.9.5305'. [ 1557.181641][T26687] overlayfs: failed to resolve './bus': -2 [ 1557.982683][T21866] Bluetooth: hci1: command 0x0406 tx timeout [ 1558.379479][T17547] IPVS: starting estimator thread 0... [ 1558.453475][ T30] kauditd_printk_skb: 1 callbacks suppressed [ 1558.453490][ T30] audit: type=1400 audit(1777463713.064:1681): avc: denied { getopt } for pid=26685 comm="syz.1.5307" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 1558.470709][T26690] IPVS: using max 58 ests per chain, 139200 per kthread [ 1558.801921][T24906] net_ratelimit: 31 callbacks suppressed [ 1558.801935][T24906] bond1: (slave bridge2): failed to get link speed/duplex [ 1558.801954][T24906] bond6: (slave ip6gretap1): failed to get link speed/duplex [ 1558.921432][ T57] bond6: (slave ip6gretap1): failed to get link speed/duplex [ 1558.921461][ T57] bond1: (slave bridge2): failed to get link speed/duplex [ 1559.058342][T24906] bond6: (slave ip6gretap1): failed to get link speed/duplex [ 1559.058383][T24906] bond1: (slave bridge2): failed to get link speed/duplex [ 1559.176299][T21110] bond1: (slave bridge2): failed to get link speed/duplex [ 1559.176337][T21110] bond6: (slave ip6gretap1): failed to get link speed/duplex [ 1559.294681][ T57] bond6: (slave ip6gretap1): failed to get link speed/duplex [ 1559.294718][ T57] bond1: (slave bridge2): failed to get link speed/duplex [ 1559.580821][T26715] netlink: 'syz.6.5311': attribute type 11 has an invalid length. [ 1561.030666][T21866] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1561.043732][T21866] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1561.049452][T21866] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1561.050125][T21866] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1561.050528][T21866] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1563.041555][ T30] audit: type=1400 audit(1777463717.359:1682): avc: denied { create } for pid=26739 comm="syz.6.5314" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 1563.046317][ T30] audit: type=1400 audit(1777463717.368:1683): avc: denied { write } for pid=26739 comm="syz.6.5314" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 1563.047215][T26723] bridge0: port 1(bridge_slave_0) entered blocking state [ 1563.048178][T26723] bridge0: port 1(bridge_slave_0) entered disabled state [ 1563.048502][T26723] bridge_slave_0: entered allmulticast mode [ 1563.127163][ T30] audit: type=1326 audit(1777463717.434:1684): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26739 comm="syz.6.5314" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcc7e39cdd9 code=0x7ffc0000 [ 1563.127350][ T30] audit: type=1326 audit(1777463717.434:1685): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26739 comm="syz.6.5314" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcc7e39cdd9 code=0x7ffc0000 [ 1563.132001][ T30] audit: type=1326 audit(1777463717.443:1686): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26739 comm="syz.6.5314" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7fcc7e39cdd9 code=0x7ffc0000 [ 1563.132221][ T30] audit: type=1326 audit(1777463717.443:1687): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26739 comm="syz.6.5314" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcc7e39cdd9 code=0x7ffc0000 [ 1563.132392][ T30] audit: type=1326 audit(1777463717.443:1688): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26739 comm="syz.6.5314" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcc7e39cdd9 code=0x7ffc0000 [ 1563.133034][T26723] bridge_slave_0: entered promiscuous mode [ 1563.135712][ T30] audit: type=1326 audit(1777463717.443:1689): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26739 comm="syz.6.5314" exe="/root/syz-executor" sig=0 arch=c000003e syscall=165 compat=0 ip=0x7fcc7e39cdd9 code=0x7ffc0000 [ 1563.145888][T26723] bridge0: port 2(bridge_slave_1) entered blocking state [ 1563.146044][T26723] bridge0: port 2(bridge_slave_1) entered disabled state [ 1563.162744][T26723] bridge_slave_1: entered allmulticast mode [ 1563.171151][T26723] bridge_slave_1: entered promiscuous mode [ 1563.344612][T26723] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1563.358062][T26723] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1563.396900][ T5619] Bluetooth: hci3: command tx timeout [ 1563.483311][T26723] team0: Port device team_slave_0 added [ 1563.506751][T26723] team0: Port device team_slave_1 added [ 1563.596504][T26723] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1563.596518][T26723] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1563.596532][T26723] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1563.597686][T26723] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1563.597695][T26723] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1563.597709][T26723] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1563.660256][ T30] audit: type=1326 audit(1777463717.930:1690): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26739 comm="syz.6.5314" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcc7e39cdd9 code=0x7ffc0000 [ 1563.716185][T26723] hsr_slave_0: entered promiscuous mode [ 1563.719036][T26723] hsr_slave_1: entered promiscuous mode [ 1563.719728][T26723] debugfs: 'hsr0' already exists in 'hsr' [ 1563.719745][T26723] Cannot create hsr debugfs directory [ 1565.061691][T26723] netdevsim netdevsim8 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1565.061859][T26723] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1565.513523][T21110] net_ratelimit: 27 callbacks suppressed [ 1565.513537][T21110] bond1: (slave bridge2): failed to get link speed/duplex [ 1565.513555][T21110] bond6: (slave ip6gretap1): failed to get link speed/duplex [ 1565.619994][ T5619] Bluetooth: hci3: command tx timeout [ 1565.657249][T26723] netdevsim netdevsim8 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1565.657917][T26723] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1565.728145][T21122] bond6: (slave ip6gretap1): failed to get link speed/duplex [ 1565.728180][T21122] bond1: (slave bridge2): failed to get link speed/duplex [ 1565.934812][T26723] netdevsim netdevsim8 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1565.934847][T26723] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1567.928458][T26793] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1567.932838][T26792] Bluetooth: hci3: command tx timeout [ 1568.024514][T26792] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 1568.102803][T26792] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 1568.114515][T26792] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 1568.121546][T26792] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 1568.122132][T24908] bond1: (slave bridge2): failed to get link speed/duplex [ 1568.122166][T24908] bond6: (slave ip6gretap1): failed to get link speed/duplex [ 1568.122290][T26792] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 1568.277639][T26723] bridge0: port 3(netdevsim0) entered disabled state [ 1568.307812][T26723] netdevsim netdevsim8 netdevsim0 (unregistering): left allmulticast mode [ 1568.307908][T26723] netdevsim netdevsim8 netdevsim0 (unregistering): left promiscuous mode [ 1568.314495][T26723] bridge0: port 3(netdevsim0) entered disabled state [ 1568.489155][T26723] netdevsim netdevsim8 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1568.489188][T26723] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1568.548726][ T113] bond1: (slave bridge2): failed to get link speed/duplex [ 1568.568950][T21125] bond6: (slave ip6gretap1): failed to get link speed/duplex [ 1568.671241][T26809] pimreg: entered allmulticast mode [ 1568.769720][T21110] bond1: (slave bridge2): failed to get link speed/duplex [ 1569.696405][T26723] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 1569.721104][T26723] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1569.721855][T26723] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 1569.730301][T26723] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1569.742836][T26723] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 1569.756500][T26723] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1569.756940][T26723] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 1569.763041][T26723] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1570.137379][T26723] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1570.150404][T26792] Bluetooth: hci3: command tx timeout [ 1570.240270][T26835] netlink: 20 bytes leftover after parsing attributes in process `syz.9.5327'. [ 1570.240406][T26835] netlink: 24 bytes leftover after parsing attributes in process `syz.9.5327'. [ 1570.579587][T26792] Bluetooth: hci7: command tx timeout [ 1570.596874][T26723] 8021q: adding VLAN 0 to HW filter on device team0 [ 1570.667497][T21125] bridge0: port 1(bridge_slave_0) entered blocking state [ 1570.667556][T21125] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1570.668480][T21125] bridge0: port 2(bridge_slave_1) entered blocking state [ 1570.668520][T21125] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1570.931661][T21117] net_ratelimit: 17 callbacks suppressed [ 1570.931683][T21117] bond1: (slave bridge2): failed to get link speed/duplex [ 1570.931705][T21117] bond6: (slave ip6gretap1): failed to get link speed/duplex [ 1571.215768][T21113] bond1: (slave bridge2): failed to get link speed/duplex [ 1571.215830][T21113] bond6: (slave ip6gretap1): failed to get link speed/duplex [ 1571.688406][T26784] bridge0: port 1(bridge_slave_0) entered blocking state [ 1571.688450][T26784] bridge0: port 1(bridge_slave_0) entered disabled state [ 1571.688610][T26784] bridge_slave_0: entered allmulticast mode [ 1571.689721][T26784] bridge_slave_0: entered promiscuous mode [ 1571.698844][T26784] bridge0: port 2(bridge_slave_1) entered blocking state [ 1571.698887][T26784] bridge0: port 2(bridge_slave_1) entered disabled state [ 1571.698993][T26784] bridge_slave_1: entered allmulticast mode [ 1571.706112][T26784] bridge_slave_1: entered promiscuous mode [ 1571.731542][T26784] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1571.736532][T26784] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1571.826059][T26784] team0: Port device team_slave_0 added [ 1571.833145][T26784] team0: Port device team_slave_1 added [ 1571.932783][T26784] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1571.932809][T26784] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1571.932832][T26784] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1571.964870][T26784] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1571.964888][T26784] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1571.964911][T26784] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1572.098694][T26784] hsr_slave_0: entered promiscuous mode [ 1572.099249][T26784] hsr_slave_1: entered promiscuous mode [ 1572.099642][T26784] debugfs: 'hsr0' already exists in 'hsr' [ 1572.099654][T26784] Cannot create hsr debugfs directory [ 1572.459223][T21110] bond6: (slave ip6gretap1): failed to get link speed/duplex [ 1572.459265][T21110] bond1: (slave bridge2): failed to get link speed/duplex [ 1572.858819][ T30] kauditd_printk_skb: 1 callbacks suppressed [ 1572.858854][ T30] audit: type=1400 audit(1777463726.530:1692): avc: denied { allowed } for pid=26879 comm="syz.6.5332" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 1572.859177][T26792] Bluetooth: hci7: command tx timeout [ 1573.355606][ T30] audit: type=1400 audit(1777463727.007:1693): avc: denied { read write } for pid=25713 comm="syz-executor" name="loop6" dev="devtmpfs" ino=653 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1573.355656][ T30] audit: type=1400 audit(1777463727.007:1694): avc: denied { open } for pid=25713 comm="syz-executor" path="/dev/loop6" dev="devtmpfs" ino=653 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1573.355689][ T30] audit: type=1400 audit(1777463727.007:1695): avc: denied { ioctl } for pid=25713 comm="syz-executor" path="/dev/loop6" dev="devtmpfs" ino=653 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1573.363161][ T30] audit: type=1400 audit(1777463727.017:1696): avc: denied { module_request } for pid=26723 comm="syz-executor" kmod="netdev-caif0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 1573.366381][ T30] audit: type=1400 audit(1777463727.017:1697): avc: denied { search } for pid=26885 comm="sed" name="resolv.conf" dev="tmpfs" ino=1777 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1573.366724][ T30] audit: type=1400 audit(1777463727.017:1698): avc: denied { read } for pid=26885 comm="sed" name="eth0.dhcp" dev="tmpfs" ino=1811 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 1573.367571][T24906] bond6: (slave ip6gretap1): failed to get link speed/duplex [ 1573.367611][T24906] bond1: (slave bridge2): failed to get link speed/duplex [ 1573.375886][ T30] audit: type=1400 audit(1777463727.017:1699): avc: denied { open } for pid=26885 comm="sed" path="/run/dhcpcd/hook-state/resolv.conf/eth0.dhcp" dev="tmpfs" ino=1811 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 1573.376317][ T30] audit: type=1400 audit(1777463727.026:1700): avc: denied { getattr } for pid=26885 comm="sed" path="/run/dhcpcd/hook-state/resolv.conf/eth0.dhcp" dev="tmpfs" ino=1811 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 1573.489126][ T30] audit: type=1400 audit(1777463727.138:1701): avc: denied { sys_module } for pid=26723 comm="syz-executor" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 1573.528236][T21117] bond1: (slave bridge2): failed to get link speed/duplex [ 1573.528274][T21117] bond6: (slave ip6gretap1): failed to get link speed/duplex [ 1575.023788][ T5619] Bluetooth: hci7: command tx timeout [ 1575.142806][T26723] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1575.484394][T26863] Process accounting resumed [ 1576.418850][T24906] net_ratelimit: 8 callbacks suppressed [ 1576.418885][T24906] bond6: (slave ip6gretap1): failed to get link speed/duplex [ 1576.504349][T21117] bond1: (slave bridge2): failed to get link speed/duplex [ 1576.531505][ T57] bond6: (slave ip6gretap1): failed to get link speed/duplex [ 1576.619271][T21105] bond1: (slave bridge2): failed to get link speed/duplex [ 1576.769271][T21124] bond6: (slave ip6gretap1): failed to get link speed/duplex [ 1576.769310][T21124] bond1: (slave bridge2): failed to get link speed/duplex [ 1576.931833][ T113] bond1: (slave bridge2): failed to get link speed/duplex [ 1576.932436][ T113] bond6: (slave ip6gretap1): failed to get link speed/duplex [ 1577.989483][T26792] Bluetooth: hci7: command tx timeout [ 1578.634843][ T113] bond6: (slave ip6gretap1): failed to get link speed/duplex [ 1578.677457][T24906] bond1: (slave bridge2): failed to get link speed/duplex [ 1579.467363][ T30] kauditd_printk_skb: 32 callbacks suppressed [ 1579.467387][ T30] audit: type=1400 audit(1777463732.388:1734): avc: denied { read } for pid=26953 comm="syz.6.5341" dev="nsfs" ino=4026533891 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 1579.467424][ T30] audit: type=1400 audit(1777463732.397:1735): avc: denied { open } for pid=26953 comm="syz.6.5341" path="net:[4026533891]" dev="nsfs" ino=4026533891 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 1579.467458][ T30] audit: type=1400 audit(1777463732.397:1736): avc: denied { create } for pid=26953 comm="syz.6.5341" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 1579.467488][ T30] audit: type=1400 audit(1777463732.397:1737): avc: denied { bind } for pid=26953 comm="syz.6.5341" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 1579.467518][ T30] audit: type=1400 audit(1777463732.407:1738): avc: denied { ioctl } for pid=26953 comm="syz.6.5341" path="socket:[110482]" dev="sockfs" ino=110482 ioctlcmd=0x48d7 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 1579.467553][ T30] audit: type=1400 audit(1777463732.407:1739): avc: denied { write } for pid=26953 comm="syz.6.5341" name="qrtr-tun" dev="devtmpfs" ino=1313 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1579.827104][ T30] audit: type=1400 audit(1777463733.062:1740): avc: denied { create } for pid=26962 comm="syz.9.5340" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 1579.944016][ T30] audit: type=1400 audit(1777463733.174:1741): avc: denied { read } for pid=26967 comm="syz.6.5342" name="binder0" dev="binder" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 1579.944355][ T30] audit: type=1400 audit(1777463733.174:1742): avc: denied { open } for pid=26967 comm="syz.6.5342" path="/dev/binderfs/binder0" dev="binder" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 1580.459278][ T30] audit: type=1400 audit(1777463733.277:1743): avc: denied { connect } for pid=26962 comm="syz.9.5340" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 1580.474426][T26973] netlink: 180 bytes leftover after parsing attributes in process `syz.6.5342'. [ 1581.663237][T26723] veth0_vlan: entered promiscuous mode [ 1581.672731][T26723] veth1_vlan: entered promiscuous mode [ 1581.842957][T26723] veth0_macvtap: entered promiscuous mode [ 1581.846216][T26723] veth1_macvtap: entered promiscuous mode [ 1581.850731][T24908] net_ratelimit: 7 callbacks suppressed [ 1581.850748][T24908] bond6: (slave ip6gretap1): failed to get link speed/duplex [ 1581.850799][T24908] bond1: (slave bridge2): failed to get link speed/duplex [ 1581.891002][T26723] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1581.904801][T26723] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1581.939613][T21117] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1581.939667][T21117] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1581.939702][T21117] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1581.939734][T21117] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1581.969888][T21117] bond1: (slave bridge2): failed to get link speed/duplex [ 1581.969925][T21117] bond6: (slave ip6gretap1): failed to get link speed/duplex [ 1582.625004][T21117] bond6: (slave ip6gretap1): failed to get link speed/duplex [ 1582.963210][T21110] bond6: (slave ip6gretap1): failed to get link speed/duplex [ 1583.653174][T26723] ieee80211 phy56: Selected rate control algorithm 'minstrel_ht' [ 1584.944214][ T30] kauditd_printk_skb: 15 callbacks suppressed [ 1584.944227][ T30] audit: type=1400 audit(2000000000.907:1759): avc: denied { create } for pid=27010 comm="syz.1.5349" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 1585.207211][T21105] bond1: (slave bridge2): failed to get link speed/duplex [ 1585.207252][T21105] bond6: (slave ip6gretap1): failed to get link speed/duplex [ 1585.225097][T21122] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1585.225116][T21122] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1585.230302][T26723] ieee80211 phy57: Selected rate control algorithm 'minstrel_ht' [ 1585.257446][T26784] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 1585.276964][T26784] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1585.283227][T26784] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 1585.318521][T26784] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1585.319831][T26784] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 1585.329579][T26784] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1585.352595][T26784] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 1585.356203][T26784] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1585.369779][T21122] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1585.369799][T21122] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1585.383945][ T30] audit: type=1400 audit(2000000001.319:1760): avc: denied { mounton } for pid=26723 comm="syz-executor" path="/root/syzkaller.ei2e4k/syz-tmp" dev="sda1" ino=2072 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 1585.389184][ T30] audit: type=1400 audit(2000000001.328:1761): avc: denied { mount } for pid=26723 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 1585.389791][ T30] audit: type=1400 audit(2000000001.328:1762): avc: denied { mounton } for pid=26723 comm="syz-executor" path="/root/syzkaller.ei2e4k/syz-tmp/newroot/dev" dev="tmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 1585.392605][ T30] audit: type=1400 audit(2000000001.328:1763): avc: denied { mount } for pid=26723 comm="syz-executor" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 1585.401708][ T30] audit: type=1400 audit(2000000001.338:1764): avc: denied { mounton } for pid=26723 comm="syz-executor" path="/root/syzkaller.ei2e4k/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 1585.402227][ T30] audit: type=1400 audit(2000000001.338:1765): avc: denied { mounton } for pid=26723 comm="syz-executor" path="/root/syzkaller.ei2e4k/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=111806 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 1585.417299][ T30] audit: type=1400 audit(2000000001.347:1766): avc: denied { unmount } for pid=26723 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 1585.419639][ T30] audit: type=1400 audit(2000000001.347:1767): avc: denied { mounton } for pid=26723 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=2784 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 1585.419857][ T30] audit: type=1400 audit(2000000001.347:1768): avc: denied { mount } for pid=26723 comm="syz-executor" name="/" dev="gadgetfs" ino=7738 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 1585.428095][T21105] bond6: (slave ip6gretap1): failed to get link speed/duplex [ 1585.428135][T21105] bond1: (slave bridge2): failed to get link speed/duplex [ 1585.570053][T26784] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1585.604767][T26784] 8021q: adding VLAN 0 to HW filter on device team0 [ 1585.609909][T21105] bridge0: port 1(bridge_slave_0) entered blocking state [ 1585.610030][T21105] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1585.616824][T21105] bridge0: port 2(bridge_slave_1) entered blocking state [ 1585.616906][T21105] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1586.776702][T26784] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1586.932053][T17547] usb 9-1: new high-speed USB device number 19 using dummy_hcd [ 1587.087796][T17547] usb 9-1: Using ep0 maxpacket: 8 [ 1587.190807][T17547] usb 9-1: unable to get BOS descriptor or descriptor too short [ 1587.244651][T26784] veth0_vlan: entered promiscuous mode [ 1587.250324][T17547] usb 9-1: config 5 has an invalid interface number: 18 but max is 0 [ 1587.250352][T17547] usb 9-1: config 5 has no interface number 0 [ 1587.250387][T17547] usb 9-1: config 5 interface 18 has no altsetting 0 [ 1587.253241][T17547] usb 9-1: New USB device found, idVendor=157e, idProduct=3205, bcdDevice=c9.b4 [ 1587.253267][T17547] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1587.253287][T17547] usb 9-1: Product: syz [ 1587.253302][T17547] usb 9-1: Manufacturer: syz [ 1587.253317][T17547] usb 9-1: SerialNumber: syz [ 1587.278726][T26784] veth1_vlan: entered promiscuous mode [ 1587.373996][T21105] net_ratelimit: 16 callbacks suppressed [ 1587.374012][T21105] bond1: (slave bridge2): failed to get link speed/duplex [ 1588.067809][T27042] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1588.069990][T27042] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1588.248625][T26784] veth0_macvtap: entered promiscuous mode [ 1588.259031][T21105] bond1: (slave bridge2): failed to get link speed/duplex [ 1588.259069][T21105] bond6: (slave ip6gretap1): failed to get link speed/duplex [ 1588.269578][T26784] veth1_macvtap: entered promiscuous mode [ 1588.887758][T26784] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1588.890735][T26784] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1588.968365][T24906] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1588.969897][T24906] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1588.969937][T24906] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1589.117797][T24906] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1589.155515][T24906] bond1: (slave bridge2): failed to get link speed/duplex [ 1589.155553][T24906] bond6: (slave ip6gretap1): failed to get link speed/duplex [ 1589.254388][T26784] ieee80211 phy58: Selected rate control algorithm 'minstrel_ht' [ 1589.311986][T24906] bond6: (slave ip6gretap1): failed to get link speed/duplex [ 1589.312029][T24906] bond1: (slave bridge2): failed to get link speed/duplex [ 1589.339663][T27076] netlink: 16 bytes leftover after parsing attributes in process `syz.1.5357'. [ 1589.428387][T21110] bond1: (slave bridge2): failed to get link speed/duplex [ 1589.428430][T21110] bond6: (slave ip6gretap1): failed to get link speed/duplex [ 1589.476855][T21110] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1589.476875][T21110] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1589.479605][T26784] ieee80211 phy59: Selected rate control algorithm 'minstrel_ht' [ 1589.527448][T21110] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1589.527469][T21110] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1589.583237][T21110] bond6: (slave ip6gretap1): failed to get link speed/duplex [ 1589.605957][T27076] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5357'. [ 1590.385451][T17547] usb 9-1: Could not find all expected endpoints [ 1590.481418][T17547] usb 9-1: USB disconnect, device number 19 [ 1590.701134][ T30] kauditd_printk_skb: 24 callbacks suppressed [ 1590.701166][ T30] audit: type=1400 audit(2000000006.288:1793): avc: denied { read } for pid=27082 comm="syz.8.5359" name="sg0" dev="devtmpfs" ino=803 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 1590.701335][ T30] audit: type=1400 audit(2000000006.288:1794): avc: denied { open } for pid=27082 comm="syz.8.5359" path="/dev/sg0" dev="devtmpfs" ino=803 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 1590.701460][ T30] audit: type=1400 audit(2000000006.288:1795): avc: denied { ioctl } for pid=27082 comm="syz.8.5359" path="/dev/sg0" dev="devtmpfs" ino=803 ioctlcmd=0x2284 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 1591.431851][ T30] audit: type=1400 audit(2000000006.981:1796): avc: denied { create } for pid=27093 comm="syz.6.5361" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 1591.436380][T27095] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5361'. [ 1591.444645][ T30] audit: type=1400 audit(2000000006.990:1797): avc: denied { map } for pid=27093 comm="syz.6.5361" path="/dev/binderfs/binder0" dev="binder" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 1591.455225][ T30] audit: type=1400 audit(2000000006.999:1798): avc: denied { map } for pid=27093 comm="syz.6.5361" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=110851 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 1591.456046][ T30] audit: type=1400 audit(2000000006.999:1799): avc: denied { read write } for pid=27093 comm="syz.6.5361" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=110851 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 1591.467253][ T30] audit: type=1400 audit(2000000007.009:1800): avc: denied { read } for pid=27093 comm="syz.6.5361" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 1591.467431][ T30] audit: type=1400 audit(2000000007.009:1801): avc: denied { open } for pid=27093 comm="syz.6.5361" path="/dev/kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 1591.467966][ T30] audit: type=1400 audit(2000000007.009:1802): avc: denied { ioctl } for pid=27093 comm="syz.6.5361" path="/dev/kvm" dev="devtmpfs" ino=84 ioctlcmd=0xae01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 1592.361839][T27110] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1592.519650][T27115] netlink: 'syz.6.5365': attribute type 10 has an invalid length. [ 1592.531708][T27115] 8021q: adding VLAN 0 to HW filter on device team0 [ 1592.536011][T27115] bond0: (slave team0): Enslaving as an active interface with an up link [ 1592.742738][T24908] net_ratelimit: 33 callbacks suppressed [ 1592.742757][T24908] bond1: (slave bridge2): failed to get link speed/duplex [ 1592.742852][T24908] bond6: (slave ip6gretap1): failed to get link speed/duplex [ 1592.755393][T27120] fuse: fd is not a fuse device [ 1592.878923][T24908] bond6: (slave ip6gretap1): failed to get link speed/duplex [ 1592.879011][T24908] bond1: (slave bridge2): failed to get link speed/duplex [ 1592.916520][T27114] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5366'. [ 1592.916547][T27114] ip6gretap0: entered promiscuous mode [ 1592.916566][T27114] ip6gretap0: entered allmulticast mode [ 1592.994941][T24908] bond1: (slave bridge2): failed to get link speed/duplex [ 1592.995076][T24908] bond6: (slave ip6gretap1): failed to get link speed/duplex [ 1593.127771][T24908] bond6: (slave ip6gretap1): failed to get link speed/duplex [ 1593.127946][T24908] bond1: (slave bridge2): failed to get link speed/duplex [ 1593.259539][T21113] bond1: (slave bridge2): failed to get link speed/duplex [ 1593.259962][T21113] bond6: (slave ip6gretap1): failed to get link speed/duplex [ 1594.316757][T27144] netlink: 20 bytes leftover after parsing attributes in process `syz.1.5372'. [ 1594.316884][T27144] netlink: 24 bytes leftover after parsing attributes in process `syz.1.5372'. [ 1595.551654][T22178] usb 7-1: new low-speed USB device number 32 using dummy_hcd [ 1595.982561][T27158] 9p: Bad value for 'wfdno' [ 1596.010965][T27158] Mount JFS Failure: -22 [ 1596.011012][T27158] jfs_mount failed w/return code = -22 [ 1596.554055][T22178] usb 7-1: config index 0 descriptor too short (expected 6427, got 27) [ 1596.554085][T22178] usb 7-1: config 0 has an invalid interface number: 21 but max is 0 [ 1596.554104][T22178] usb 7-1: config 0 has no interface number 0 [ 1596.554138][T22178] usb 7-1: config 0 interface 21 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1596.554172][T22178] usb 7-1: New USB device found, idVendor=06cd, idProduct=0202, bcdDevice=92.d4 [ 1596.554193][T22178] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1596.560957][T22178] usb 7-1: config 0 descriptor?? [ 1597.115313][ T30] kauditd_printk_skb: 118 callbacks suppressed [ 1597.115330][ T30] audit: type=1400 audit(2000000012.296:1921): avc: denied { read write } for pid=27160 comm="syz.8.5377" name="video36" dev="devtmpfs" ino=1044 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 1597.115552][ T30] audit: type=1400 audit(2000000012.296:1922): avc: denied { open } for pid=27160 comm="syz.8.5377" path="/dev/video36" dev="devtmpfs" ino=1044 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 1597.116855][ T30] audit: type=1400 audit(2000000012.296:1923): avc: denied { ioctl } for pid=27160 comm="syz.8.5377" path="/dev/video36" dev="devtmpfs" ino=1044 ioctlcmd=0x5602 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 1597.368454][ T30] audit: type=1400 audit(2000000012.539:1924): avc: denied { create } for pid=27164 comm="syz.9.5379" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 1597.387326][ T30] audit: type=1400 audit(2000000012.549:1925): avc: denied { create } for pid=27160 comm="syz.8.5377" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 1597.392392][ T30] audit: type=1400 audit(2000000012.558:1926): avc: denied { connect } for pid=27160 comm="syz.8.5377" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 1597.523516][T27175] ieee80211 phy60: Selected rate control algorithm 'minstrel_ht' [ 1597.810234][ T30] audit: type=1400 audit(2000000012.951:1927): avc: denied { create } for pid=27160 comm="syz.8.5377" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 1598.024107][ T30] audit: type=1400 audit(2000000013.147:1928): avc: denied { create } for pid=27177 comm="syz.1.5380" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 1598.043162][ T30] audit: type=1400 audit(2000000013.166:1929): avc: denied { watch } for pid=27177 comm="syz.1.5380" path="/1172" dev="tmpfs" ino=6276 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 1598.204115][T19091] net_ratelimit: 40 callbacks suppressed [ 1598.204157][T19091] bond6: (slave ip6gretap1): failed to get link speed/duplex [ 1598.204350][T19091] bond1: (slave bridge2): failed to get link speed/duplex [ 1598.456357][T21113] bond1: (slave bridge2): failed to get link speed/duplex [ 1598.468659][T19091] bond6: (slave ip6gretap1): failed to get link speed/duplex [ 1598.533813][T17545] usb 7-1: USB disconnect, device number 32 [ 1598.575507][ T57] bond1: (slave bridge2): failed to get link speed/duplex [ 1598.586268][ T30] audit: type=1400 audit(2000000013.662:1930): avc: denied { setopt } for pid=27177 comm="syz.1.5380" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 1598.596712][ T57] bond6: (slave ip6gretap1): failed to get link speed/duplex [ 1598.694968][ T113] bond1: (slave bridge2): failed to get link speed/duplex [ 1598.715817][T19091] bond6: (slave ip6gretap1): failed to get link speed/duplex [ 1598.877343][T21110] bond1: (slave bridge2): failed to get link speed/duplex [ 1598.932282][T21113] bond6: (slave ip6gretap1): failed to get link speed/duplex [ 1600.750340][T27201] x_tables: ip6_tables: mh match: only valid for protocol 135 [ 1600.990748][T27208] erofs (device nullb0): cannot find valid erofs superblock [ 1600.997327][T27208] ptrace attach of "./syz-executor exec"[25713] was attempted by ""[27208] [ 1601.269072][ T5619] Bluetooth: hci6: command 0x0406 tx timeout [ 1601.749230][T27214] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5387'. [ 1601.749291][T27214] netlink: 4 bytes leftover after parsing attributes in process `syz.6.5387'. [ 1601.749391][T27214] netlink: 'syz.6.5387': attribute type 13 has an invalid length. [ 1601.749435][T27214] netlink: 'syz.6.5387': attribute type 12 has an invalid length. [ 1603.139819][T27216] vlan2: entered promiscuous mode [ 1603.139834][T27216] bridge0: entered promiscuous mode [ 1603.185226][ T30] kauditd_printk_skb: 7 callbacks suppressed [ 1603.185243][ T30] audit: type=1400 audit(2000000017.920:1938): avc: denied { create } for pid=27213 comm="syz.9.5388" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 1603.185279][ T30] audit: type=1400 audit(2000000017.929:1939): avc: denied { ioctl } for pid=27213 comm="syz.9.5388" path="socket:[112499]" dev="sockfs" ino=112499 ioctlcmd=0x89e2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 1603.185312][ T30] audit: type=1400 audit(2000000017.929:1940): avc: denied { write } for pid=27213 comm="syz.9.5388" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=socket permissive=1 [ 1604.079269][T19091] net_ratelimit: 36 callbacks suppressed [ 1604.079282][T19091] bond1: (slave bridge2): failed to get link speed/duplex [ 1604.088530][ T57] bond6: (slave ip6gretap1): failed to get link speed/duplex [ 1604.105063][ T30] audit: type=1400 audit(2000000018.837:1941): avc: denied { write } for pid=27220 comm="syz.6.5389" name="igmp6" dev="proc" ino=4026535547 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 1604.201846][ T57] bond6: (slave ip6gretap1): failed to get link speed/duplex [ 1604.204967][ T57] bond1: (slave bridge2): failed to get link speed/duplex [ 1604.227798][T27235] overlayfs: failed to clone upperpath [ 1604.244579][ T30] audit: type=1400 audit(2000000018.968:1942): avc: denied { create } for pid=27236 comm="syz.6.5392" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 1604.245378][ T30] audit: type=1400 audit(2000000018.968:1943): avc: denied { bind } for pid=27236 comm="syz.6.5392" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 1604.317009][T21110] bond1: (slave bridge2): failed to get link speed/duplex [ 1604.327412][ T57] bond6: (slave ip6gretap1): failed to get link speed/duplex [ 1604.420055][ T30] audit: type=1400 audit(2000000019.127:1944): avc: denied { accept } for pid=27236 comm="syz.6.5392" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 1604.434728][ T57] bond1: (slave bridge2): failed to get link speed/duplex [ 1604.443365][T21113] bond6: (slave ip6gretap1): failed to get link speed/duplex [ 1604.549168][T21113] bond1: (slave bridge2): failed to get link speed/duplex [ 1604.571854][ T57] bond6: (slave ip6gretap1): failed to get link speed/duplex [ 1604.995717][T27247] netlink: 20 bytes leftover after parsing attributes in process `syz.9.5393'. [ 1605.225929][T26775] udevd[26775]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 1605.232409][T26797] udevd[26797]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 1605.347696][ T30] audit: type=1400 audit(2000000019.998:1945): avc: denied { create } for pid=27241 comm="syz.8.5394" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_scsitransport_socket permissive=1 [ 1605.916509][ T30] audit: type=1400 audit(2000000020.100:1946): avc: denied { ioctl } for pid=27252 comm="syz.1.5395" path="socket:[111418]" dev="sockfs" ino=111418 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 1605.922230][T27256] bond10: (slave dummy0): Releasing active interface [ 1606.234992][T26792] Bluetooth: hci3: Unable to find connection with handle 0x0000 [ 1606.319442][ T30] audit: type=1400 audit(2000000020.821:1947): avc: denied { read write } for pid=27260 comm="syz.8.5397" name="mouse0" dev="devtmpfs" ino=948 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 1606.597803][T27269] netlink: 16 bytes leftover after parsing attributes in process `syz.9.5398'. [ 1606.604499][T27269] fuse: fd is not a fuse device [ 1607.640721][T27280] bond0: (slave bond_slave_1): Releasing backup interface [ 1609.304951][ T30] kauditd_printk_skb: 6 callbacks suppressed [ 1609.304968][ T30] audit: type=1400 audit(2000000023.703:1954): avc: denied { setopt } for pid=27282 comm="syz.6.5402" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 1609.521135][ T57] net_ratelimit: 49 callbacks suppressed [ 1609.521157][ T57] bond1: (slave bridge2): failed to get link speed/duplex [ 1609.521189][ T57] bond6: (slave ip6gretap1): failed to get link speed/duplex [ 1609.637080][ T113] bond6: (slave ip6gretap1): failed to get link speed/duplex [ 1609.637161][ T113] bond1: (slave bridge2): failed to get link speed/duplex [ 1609.759185][T24906] bond1: (slave bridge2): failed to get link speed/duplex [ 1609.759229][T24906] bond6: (slave ip6gretap1): failed to get link speed/duplex [ 1609.780664][ T30] audit: type=1400 audit(2000000024.012:1955): avc: denied { unlink } for pid=27292 comm="syz.8.5405" name="#9c" dev="tmpfs" ino=102 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 1609.813013][ T30] audit: type=1400 audit(2000000024.181:1956): avc: denied { mount } for pid=27292 comm="syz.8.5405" name="/" dev="overlay" ino=96 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 1609.872791][T24906] bond6: (slave ip6gretap1): failed to get link speed/duplex [ 1609.872824][T24906] bond1: (slave bridge2): failed to get link speed/duplex [ 1609.999216][T21110] bond1: (slave bridge2): failed to get link speed/duplex [ 1610.020119][T21113] bond6: (slave ip6gretap1): failed to get link speed/duplex [ 1610.489940][T27304] netlink: 12 bytes leftover after parsing attributes in process `syz.9.5417'. [ 1610.925062][T27307] netlink: 20 bytes leftover after parsing attributes in process `syz.6.5407'. [ 1611.128420][T26775] udevd[26775]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 1611.141044][T26797] udevd[26797]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 1612.445218][T26792] Bluetooth: hci4: Unable to find connection with handle 0x0000 [ 1613.004302][T27329] netlink: 'syz.6.5410': attribute type 13 has an invalid length. [ 1613.452189][T27341] x_tables: ip6_tables: mh match: only valid for protocol 135 [ 1613.562495][ T30] audit: type=1400 audit(2000000027.690:1957): avc: denied { read } for pid=27348 comm="syz-executor" name="vhci" dev="devtmpfs" ino=1268 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 1613.562712][ T30] audit: type=1400 audit(2000000027.690:1958): avc: denied { open } for pid=27348 comm="syz-executor" path="/dev/vhci" dev="devtmpfs" ino=1268 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 1613.591366][ T5619] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 1613.612544][ T5619] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 1613.629915][ T5619] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 1613.654213][ T5619] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 1613.667107][ T5619] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 1613.703623][ T30] audit: type=1400 audit(2000000027.821:1959): avc: denied { mounton } for pid=27348 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 1614.122837][T27357] overlayfs: failed to resolve './file1': -2 [ 1614.612207][ T30] audit: type=1400 audit(2000000028.672:1960): avc: denied { connect } for pid=27344 comm="syz.1.5414" lport=60 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 1614.615448][ T30] audit: type=1400 audit(2000000028.672:1961): avc: denied { write } for pid=27344 comm="syz.1.5414" laddr=fe80::5443:17ff:feb5:12a1 lport=60 faddr=fe80::aa fport=20132 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 1615.259977][T27365] overlayfs: failed to clone upperpath [ 1615.895369][ T5619] Bluetooth: hci8: command tx timeout [ 1616.719168][T27359] veth17: entered promiscuous mode [ 1616.719184][T27359] veth17: entered allmulticast mode [ 1616.720155][ T57] net_ratelimit: 38 callbacks suppressed [ 1616.720166][ T57] bond1: (slave bridge2): failed to get link speed/duplex [ 1616.730865][T21113] bond6: (slave ip6gretap1): failed to get link speed/duplex [ 1616.901822][ T30] audit: type=1400 audit(2000000030.750:1962): avc: denied { mount } for pid=27372 comm="syz.9.5421" name="/" dev="ramfs" ino=113690 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 1616.942016][T27377] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 1616.942122][T27377] overlayfs: failed to set xattr on upper [ 1616.942144][T27377] overlayfs: ...falling back to redirect_dir=nofollow. [ 1616.942167][T27377] overlayfs: ...falling back to index=off. [ 1616.942188][T27377] overlayfs: ...falling back to uuid=null. [ 1616.945485][ T30] audit: type=1400 audit(2000000030.843:1963): avc: denied { mounton } for pid=27372 comm="syz.9.5421" path="/file0" dev="ramfs" ino=113691 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=dir permissive=1 [ 1617.020485][T27378] overlayfs: overlay with incompat feature 'volatile' cannot be mounted [ 1617.241739][T21110] bond1: (slave bridge2): failed to get link speed/duplex [ 1617.241785][T21110] bond6: (slave ip6gretap1): failed to get link speed/duplex [ 1617.351158][T21110] bond6: (slave ip6gretap1): failed to get link speed/duplex [ 1617.351215][T21110] bond1: (slave bridge2): failed to get link speed/duplex [ 1618.156119][ T5619] Bluetooth: hci0: command 0x0406 tx timeout [ 1618.156208][ T5619] Bluetooth: hci8: command tx timeout [ 1618.174412][ T30] audit: type=1400 audit(2000000031.527:1964): avc: denied { create } for pid=27381 comm="syz.1.5422" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 1618.174457][ T30] audit: type=1400 audit(2000000031.732:1965): avc: denied { setopt } for pid=27381 comm="syz.1.5422" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 1618.205146][T21110] bond1: (slave bridge2): failed to get link speed/duplex [ 1618.205198][T21110] bond6: (slave ip6gretap1): failed to get link speed/duplex [ 1618.382518][T21124] bond6: (slave ip6gretap1): failed to get link speed/duplex [ 1618.382573][T21124] bond1: (slave bridge2): failed to get link speed/duplex [ 1618.900162][ T30] audit: type=1400 audit(2000000032.350:1966): avc: denied { mounton } for pid=27388 comm="syz.1.5423" path="/" dev="nullfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 1619.206528][T27348] bridge0: port 1(bridge_slave_0) entered blocking state [ 1619.206647][T27348] bridge0: port 1(bridge_slave_0) entered disabled state [ 1619.206729][T27348] bridge_slave_0: entered allmulticast mode [ 1619.208705][T27348] bridge_slave_0: entered promiscuous mode [ 1619.212114][T27348] bridge0: port 2(bridge_slave_1) entered blocking state [ 1619.212215][T27348] bridge0: port 2(bridge_slave_1) entered disabled state [ 1619.212440][T27348] bridge_slave_1: entered allmulticast mode [ 1619.213870][T27348] bridge_slave_1: entered promiscuous mode [ 1619.329742][T27348] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1619.331582][T27348] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1619.499085][T27348] team0: Port device team_slave_0 added [ 1619.501334][T27348] team0: Port device team_slave_1 added [ 1619.554024][T27348] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1619.554037][T27348] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1619.554051][T27348] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1619.555218][T27348] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1619.555228][T27348] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1619.555241][T27348] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1619.583820][T27348] hsr_slave_0: entered promiscuous mode [ 1619.585961][T27348] hsr_slave_1: entered promiscuous mode [ 1619.586488][T27348] debugfs: 'hsr0' already exists in 'hsr' [ 1619.586500][T27348] Cannot create hsr debugfs directory [ 1619.834769][ T30] audit: type=1400 audit(2000000033.557:1967): avc: denied { read } for pid=27409 comm="syz.6.5426" name="usbmon9" dev="devtmpfs" ino=743 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 1619.834818][ T30] audit: type=1400 audit(2000000033.557:1968): avc: denied { open } for pid=27409 comm="syz.6.5426" path="/dev/usbmon9" dev="devtmpfs" ino=743 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 1620.332128][T26792] Bluetooth: hci8: command tx timeout [ 1620.737509][T27429] overlayfs: failed to resolve './file1': -2 [ 1621.104722][ T1311] ieee802154 phy1 wpan1: encryption failed: -22 [ 1621.247788][ T30] audit: type=1400 audit(2000000034.877:1969): avc: denied { connect } for pid=27427 comm="syz.1.5428" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 1621.248646][ T30] audit: type=1400 audit(2000000034.877:1970): avc: denied { read } for pid=27427 comm="syz.1.5428" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 1621.395136][ T30] audit: type=1400 audit(2000000035.017:1971): avc: denied { write } for pid=27427 comm="syz.1.5428" path="socket:[113841]" dev="sockfs" ino=113841 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 1621.598532][T27439] netlink: 24 bytes leftover after parsing attributes in process `syz.9.5429'. [ 1621.677698][T27440] netlink: 67 bytes leftover after parsing attributes in process `syz.9.5429'. [ 1622.090078][T24908] net_ratelimit: 13 callbacks suppressed [ 1622.090117][T24908] bond6: (slave ip6gretap1): failed to get link speed/duplex [ 1622.091150][T19091] bond1: (slave bridge2): failed to get link speed/duplex [ 1622.258349][T24908] bond1: (slave bridge2): failed to get link speed/duplex [ 1622.258416][T24908] bond6: (slave ip6gretap1): failed to get link speed/duplex [ 1622.406729][T21113] bond6: (slave ip6gretap1): failed to get link speed/duplex [ 1622.406766][T21113] bond1: (slave bridge2): failed to get link speed/duplex [ 1622.554738][T26792] Bluetooth: hci8: command tx timeout [ 1622.679931][ T30] kauditd_printk_skb: 2 callbacks suppressed [ 1622.679943][ T30] audit: type=1400 audit(2000000036.224:1974): avc: denied { read } for pid=5273 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1 [ 1622.691843][T21117] bond1: (slave bridge2): failed to get link speed/duplex [ 1622.691877][T21117] bond6: (slave ip6gretap1): failed to get link speed/duplex [ 1623.520577][T27458] openvswitch: netlink: Flow actions attr not present in new flow. [ 1623.580192][T19091] bond1: (slave bridge2): failed to get link speed/duplex [ 1623.664088][T27466] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5433'. [ 1623.664182][T27466] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5433'. [ 1623.664342][T27466] netlink: 'syz.1.5433': attribute type 13 has an invalid length. [ 1623.664400][T27466] netlink: 'syz.1.5433': attribute type 12 has an invalid length. [ 1624.820141][ T30] audit: type=1400 audit(2000000038.189:1975): avc: denied { connect } for pid=27471 comm="syz.6.5435" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 1625.618351][T27474] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci8/hci8:200/input31 [ 1625.623851][ T30] audit: type=1400 audit(2000000038.976:1976): avc: denied { read } for pid=4963 comm="acpid" name="event4" dev="devtmpfs" ino=3694 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1625.623891][ T30] audit: type=1400 audit(2000000038.976:1977): avc: denied { open } for pid=4963 comm="acpid" path="/dev/input/event4" dev="devtmpfs" ino=3694 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1625.623922][ T30] audit: type=1400 audit(2000000038.976:1978): avc: denied { ioctl } for pid=4963 comm="acpid" path="/dev/input/event4" dev="devtmpfs" ino=3694 ioctlcmd=0x4520 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1627.003524][ T30] audit: type=1400 audit(2000000040.248:1979): avc: denied { create } for pid=27479 comm="syz.6.5437" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 1627.482239][T21105] net_ratelimit: 13 callbacks suppressed [ 1627.482257][T21105] bond6: (slave ip6gretap1): failed to get link speed/duplex [ 1627.482294][T21105] bond1: (slave bridge2): failed to get link speed/duplex [ 1627.634346][T24908] bond1: (slave bridge2): failed to get link speed/duplex [ 1627.634394][T24908] bond6: (slave ip6gretap1): failed to get link speed/duplex [ 1627.646530][ T30] audit: type=1400 audit(2000000040.866:1980): avc: denied { unlink } for pid=25713 comm="syz-executor" name="file0" dev="tmpfs" ino=272 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 1628.435610][T21105] bond1: (slave bridge2): failed to get link speed/duplex [ 1628.435635][T21105] bond6: (slave ip6gretap1): failed to get link speed/duplex [ 1628.438974][T27499] comedi comedi0: Minor 3 could not be opened [ 1628.570597][T27348] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 1628.595426][T27348] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1628.596028][T27348] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 1628.609283][T27348] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1628.613542][T27348] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 1628.693674][T27348] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1628.704440][T27348] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 1628.722568][ T30] audit: type=1400 audit(2000000041.877:1981): avc: denied { create } for pid=27504 comm="syz.9.5440" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 1628.735185][T27348] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1628.806512][T24908] bond6: (slave ip6gretap1): failed to get link speed/duplex [ 1628.806550][T24908] bond1: (slave bridge2): failed to get link speed/duplex [ 1629.137540][ T31] INFO: task syz.2.5165:25473 blocked for more than 144 seconds. [ 1629.137568][ T31] Tainted: G L syzkaller #0 [ 1629.137581][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1629.137590][ T31] task:syz.2.5165 state:D stack:27288 pid:25473 tgid:25471 ppid:24545 task_flags:0x400140 flags:0x00080002 [ 1629.137649][ T31] Call Trace: [ 1629.137657][ T31] [ 1629.137669][ T31] __schedule+0x10e9/0x6820 [ 1629.137711][ T31] ? __pfx___schedule+0x10/0x10 [ 1629.137729][ T31] ? find_held_lock+0x2b/0x80 [ 1629.137749][ T31] ? schedule+0x2bf/0x390 [ 1629.137773][ T31] schedule+0xdd/0x390 [ 1629.137792][ T31] schedule_timeout+0x1b2/0x280 [ 1629.137820][ T31] ? __pfx_schedule_timeout+0x10/0x10 [ 1629.137858][ T31] ? mark_held_locks+0x40/0x70 [ 1629.137886][ T31] __down_common+0x371/0x8a0 [ 1629.137914][ T31] ? __pfx___down_common+0x10/0x10 [ 1629.137936][ T31] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 1629.137965][ T31] ? _raw_spin_lock_irqsave+0x52/0x60 [ 1629.138001][ T31] down+0x74/0xa0 [ 1629.138023][ T31] console_lock+0x5b/0xa0 [ 1629.138048][ T31] con_install+0x99/0x620 [ 1629.138075][ T31] ? __pfx_con_install+0x10/0x10 [ 1629.138103][ T31] ? __pfx_con_install+0x10/0x10 [ 1629.138127][ T31] tty_init_dev.part.0+0x9e/0x470 [ 1629.138156][ T31] tty_open+0xa63/0xfa0 [ 1629.138185][ T31] ? __pfx_tty_open+0x10/0x10 [ 1629.138209][ T31] ? chrdev_open+0x10b/0x6a0 [ 1629.138232][ T31] ? chrdev_open+0x10b/0x6a0 [ 1629.138258][ T31] ? __pfx_tty_open+0x10/0x10 [ 1629.138283][ T31] chrdev_open+0x234/0x6a0 [ 1629.138307][ T31] ? __pfx_chrdev_open+0x10/0x10 [ 1629.138333][ T31] ? fsnotify_open_perm_and_set_mode+0x17a/0xa80 [ 1629.138365][ T31] do_dentry_open+0x6d8/0x1660 [ 1629.138386][ T31] ? __pfx_chrdev_open+0x10/0x10 [ 1629.138416][ T31] vfs_open+0x82/0x3f0 [ 1629.138451][ T31] path_openat+0x208c/0x31a0 [ 1629.138484][ T31] ? __pfx_path_openat+0x10/0x10 [ 1629.138518][ T31] do_file_open+0x20e/0x430 [ 1629.138545][ T31] ? __pfx_do_file_open+0x10/0x10 [ 1629.138588][ T31] ? alloc_fd+0x476/0x790 [ 1629.138616][ T31] ? do_getname+0x191/0x390 [ 1629.138646][ T31] do_sys_openat2+0x10d/0x1e0 [ 1629.138672][ T31] ? __pfx_do_sys_openat2+0x10/0x10 [ 1629.138709][ T31] __x64_sys_openat+0x12d/0x210 [ 1629.138738][ T31] ? __pfx___x64_sys_openat+0x10/0x10 [ 1629.138776][ T31] do_syscall_64+0x10b/0xf80 [ 1629.138796][ T31] ? clear_bhb_loop+0x40/0x90 [ 1629.138821][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1629.138841][ T31] RIP: 0033:0x7f4c2c75d60e [ 1629.138857][ T31] RSP: 002b:00007f4c2d6b1b28 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 1629.138877][ T31] RAX: ffffffffffffffda RBX: 00007f4c2d6b26c0 RCX: 00007f4c2c75d60e [ 1629.138903][ T31] RDX: 0000000000000002 RSI: 00007f4c2d6b1c00 RDI: ffffffffffffff9c [ 1629.138916][ T31] RBP: 00007f4c2c832d69 R08: 0000000000000000 R09: 0000000000000000 [ 1629.138929][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1629.138941][ T31] R13: 00007f4c2ca16038 R14: 00007f4c2ca15fa0 R15: 00007ffecb36d258 [ 1629.138968][ T31] [ 1629.139041][ T31] [ 1629.139041][ T31] Showing all locks held in the system: [ 1629.139052][ T31] 1 lock held by khungtaskd/31: [ 1629.139064][ T31] #0: ffffffff8e7e54e0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x3d/0x184 [ 1629.139127][ T31] 3 locks held by kworker/u8:5/113: [ 1629.139158][ T31] 2 locks held by getty/5364: [ 1629.139169][ T31] #0: ffff8880395670a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x24/0x80 [ 1629.139218][ T31] #1: ffffc900032332e8 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x419/0x14f0 [ 1629.139283][ T31] 3 locks held by kworker/0:15/17554: [ 1629.139294][ T31] #0: ffff88813fe5b140 ((wq_completion)events){+.+.}-{0:0}, at: process_one_work+0x12d6/0x1980 [ 1629.139347][ T31] #1: ffffc900066ffd08 ((work_completion)(&data->fib_event_work)){+.+.}-{0:0}, at: process_one_work+0x973/0x1980 [ 1629.139399][ T31] #2: ffff88801ee8e230 (&data->fib_lock){+.+.}-{4:4}, at: nsim_fib_event_work+0x1b8/0x63b0 [ 1629.139471][ T31] 2 locks held by kworker/1:1/22179: [ 1629.139482][ T31] #0: ffff88813fe5b140 ((wq_completion)events){+.+.}-{0:0}, at: process_one_work+0x12d6/0x1980 [ 1629.139533][ T31] #1: ffffc900042dfd08 (console_work){+.+.}-{0:0}, at: process_one_work+0x973/0x1980 [ 1629.139587][ T31] 2 locks held by syz.0.5069/24735: [ 1629.139599][ T31] 3 locks held by kworker/u8:6/24908: [ 1629.139611][ T31] 2 locks held by syz.2.5165/25473: [ 1629.139622][ T31] #0: ffffffff8f500cc0 (tty_mutex){+.+.}-{4:4}, at: tty_open+0x539/0xfa0 [ 1629.139672][ T31] #1: ffff88806b78b1b0 (&tty->legacy_mutex){+.+.}-{4:4}, at: tty_init_dev.part.0+0x39/0x470 [ 1629.139726][ T31] 1 lock held by syz.3.5207/25894: [ 1629.139737][ T31] #0: ffffffff8f500cc0 (tty_mutex){+.+.}-{4:4}, at: ptmx_open+0x11a/0x370 [ 1629.139786][ T31] 1 lock held by syz.7.5274/26475: [ 1629.139797][ T31] #0: ffffffff8f500cc0 (tty_mutex){+.+.}-{4:4}, at: tty_open+0x539/0xfa0 [ 1629.139848][ T31] 1 lock held by syz.5.5289/26573: [ 1629.139858][ T31] #0: ffffffff8f500cc0 (tty_mutex){+.+.}-{4:4}, at: ptmx_open+0x11a/0x370 [ 1629.139908][ T31] 1 lock held by syz.0.5378/27163: [ 1629.139918][ T31] #0: ffffffff8f500cc0 (tty_mutex){+.+.}-{4:4}, at: tty_open+0x539/0xfa0 [ 1629.139970][ T31] 1 lock held by syz.0.5378/27174: [ 1629.139981][ T31] #0: ffffffff8f500cc0 (tty_mutex){+.+.}-{4:4}, at: ptmx_open+0x11a/0x370 [ 1629.140026][ T31] 1 lock held by syz-executor/27348: [ 1629.140037][ T31] #0: ffffffff9060aa20 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x30c/0x18b0 [ 1629.140086][ T31] 2 locks held by syz.9.5440/27513: [ 1629.140097][ T31] #0: ffff888034cf14e0 (sk_lock-AF_INET6){+.+.}-{0:0}, at: sctp_sendmsg+0xfd6/0x22b0 [ 1629.140144][ T31] #1: ffffffff8e7e54e0 (rcu_read_lock){....}-{1:3}, at: unwind_next_frame+0xbd/0x2090 [ 1629.140200][ T31] 1 lock held by syz.9.5440/27520: [ 1629.140211][ T31] #0: ffff888034cf14e0 (sk_lock-AF_INET6){+.+.}-{0:0}, at: sctp_setsockopt+0x593/0xb370 [ 1629.140258][ T31] 3 locks held by syz.9.5440/27523: [ 1629.140269][ T31] 2 locks held by syz.6.5441/27507: [ 1629.140281][ T31] 1 lock held by syz.6.5441/27510: [ 1629.140292][ T31] #0: ffffffff8f500cc0 (tty_mutex){+.+.}-{4:4}, at: ptmx_open+0x11a/0x370 [ 1629.140339][ T31] 1 lock held by syz.1.5442/27518: [ 1629.140350][ T31] 3 locks held by rm/27519: [ 1629.140361][ T31] [ 1629.140367][ T31] ============================================= [ 1629.140367][ T31] [ 1629.140375][ T31] NMI backtrace for cpu 0 [ 1629.140389][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT(full) [ 1629.140412][ T31] Tainted: [L]=SOFTLOCKUP [ 1629.140423][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1629.140433][ T31] Call Trace: [ 1629.140439][ T31] [ 1629.140446][ T31] dump_stack_lvl+0x100/0x190 [ 1629.140469][ T31] nmi_cpu_backtrace.cold+0x12d/0x151 [ 1629.140493][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 1629.140515][ T31] nmi_trigger_cpumask_backtrace+0x1d7/0x230 [ 1629.140546][ T31] sys_info+0x141/0x190 [ 1629.140569][ T31] watchdog+0xcb1/0x1030 [ 1629.140595][ T31] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 1629.140614][ T31] ? __pfx_watchdog+0x10/0x10 [ 1629.140635][ T31] ? __kthread_parkme+0x18c/0x230 [ 1629.140656][ T31] ? kthread+0x13a/0x450 [ 1629.140674][ T31] ? __pfx_watchdog+0x10/0x10 [ 1629.140693][ T31] kthread+0x370/0x450 [ 1629.140714][ T31] ? __pfx_kthread+0x10/0x10 [ 1629.140736][ T31] ret_from_fork+0x72b/0xd50 [ 1629.140761][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 1629.140786][ T31] ? __switch_to+0x800/0x1100 [ 1629.140813][ T31] ? __pfx_kthread+0x10/0x10 [ 1629.140835][ T31] ret_from_fork_asm+0x1a/0x30 [ 1629.140872][ T31] [ 1629.140879][ T31] Sending NMI from CPU 0 to CPUs 1: [ 1629.140902][ C1] NMI backtrace for cpu 1 [ 1629.140915][ C1] CPU: 1 UID: 0 PID: 27518 Comm: syz.1.5442 Tainted: G L syzkaller #0 PREEMPT(full) [ 1629.140934][ C1] Tainted: [L]=SOFTLOCKUP [ 1629.140939][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1629.140947][ C1] RIP: 0010:check_preemption_disabled+0x1c/0xe0 [ 1629.140966][ C1] Code: 90 90 90 90 90 90 90 90 90 90 90 90 90 90 41 54 55 53 48 83 ec 08 65 8b 1d 65 b8 80 08 65 f7 05 56 b8 80 08 ff ff ff 7f 74 0f <48> 83 c4 08 89 d8 5b 5d 41 5c c3 cc cc cc cc 9c 58 f6 c4 02 74 ea [ 1629.140979][ C1] RSP: 0018:ffffc9000750f9a0 EFLAGS: 00000046 [ 1629.140990][ C1] RAX: 0000000000000046 RBX: 0000000000000001 RCX: 0000000000000000 [ 1629.140999][ C1] RDX: 0000000000000000 RSI: ffffffff8e00fe74 RDI: ffffffff8c1c3480 [ 1629.141008][ C1] RBP: ffffffff82595955 R08: 0000000000000001 R09: 00000000000001c8 [ 1629.141017][ C1] R10: 0000000000000200 R11: 0000000000000000 R12: ffff888028b12500 [ 1629.141026][ C1] R13: ffffffff82595955 R14: 0000000000000287 R15: dffffc0000000000 [ 1629.141036][ C1] FS: 00007f7c95c606c0(0000) GS:ffff888124479000(0000) knlGS:0000000000000000 [ 1629.141051][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1629.141060][ C1] CR2: 00007fbce07e3000 CR3: 0000000064b74000 CR4: 00000000003526f0 [ 1629.141069][ C1] DR0: 0000000000000004 DR1: 0000000000000000 DR2: 0000000000000000 [ 1629.141077][ C1] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 1629.141085][ C1] Call Trace: [ 1629.141090][ C1] [ 1629.141096][ C1] ? __might_fault+0xc5/0x140 [ 1629.141115][ C1] lock_release+0x9a/0x310 [ 1629.141133][ C1] __might_fault+0x10c/0x140 [ 1629.141152][ C1] _copy_from_user+0x29/0xd0 [ 1629.141171][ C1] copy_msghdr_from_user+0x9f/0x4f0 [ 1629.141187][ C1] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 1629.141204][ C1] ? rcu_is_watching+0x12/0xc0 [ 1629.141223][ C1] ? ___sys_recvmsg+0x177/0x1a0 [ 1629.141238][ C1] ? kfree+0x1dd/0x6c0 [ 1629.141254][ C1] ? irqentry_exit+0x246/0x790 [ 1629.141270][ C1] ___sys_recvmsg+0xdd/0x1a0 [ 1629.141286][ C1] ? __pfx____sys_recvmsg+0x10/0x10 [ 1629.141306][ C1] ? __pfx___might_resched+0x10/0x10 [ 1629.141328][ C1] do_recvmmsg+0x301/0x760 [ 1629.141344][ C1] ? __pfx_do_recvmmsg+0x10/0x10 [ 1629.141362][ C1] ? do_futex+0x192/0x350 [ 1629.141385][ C1] ? __x64_sys_futex+0x34f/0x4d0 [ 1629.141405][ C1] __x64_sys_recvmmsg+0x22a/0x280 [ 1629.141425][ C1] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 1629.141446][ C1] ? rcu_is_watching+0x12/0xc0 [ 1629.141467][ C1] do_syscall_64+0x10b/0xf80 [ 1629.141481][ C1] ? clear_bhb_loop+0x40/0x90 [ 1629.141496][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1629.141510][ C1] RIP: 0033:0x7f7c94d9cdd9 [ 1629.141520][ C1] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1629.141533][ C1] RSP: 002b:00007f7c95c60028 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 1629.141545][ C1] RAX: ffffffffffffffda RBX: 00007f7c95015fa0 RCX: 00007f7c94d9cdd9 [ 1629.141555][ C1] RDX: 00000000080002c1 RSI: 0000200000000040 RDI: 0000000000000004 [ 1629.141563][ C1] RBP: 00007f7c94e32d69 R08: 0000000000000000 R09: 0000000000000000 [ 1629.141572][ C1] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000000 [ 1629.141580][ C1] R13: 00007f7c95016038 R14: 00007f7c95015fa0 R15: 00007fff461cfb18 [ 1629.141594][ C1] [ 1629.141900][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 1629.141914][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT(full) [ 1629.141939][ T31] Tainted: [L]=SOFTLOCKUP [ 1629.141945][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1629.141956][ T31] Call Trace: [ 1629.141962][ T31] [ 1629.141969][ T31] dump_stack_lvl+0x100/0x190 [ 1629.141992][ T31] vpanic+0x552/0x970 [ 1629.142010][ T31] ? __pfx_vpanic+0x10/0x10 [ 1629.142028][ T31] ? nmi_trigger_cpumask_backtrace+0x182/0x230 [ 1629.142054][ T31] ? rcu_is_watching+0x12/0xc0 [ 1629.142081][ T31] ? nmi_trigger_cpumask_backtrace+0x182/0x230 [ 1629.142111][ T31] panic+0xd1/0xe0 [ 1629.142128][ T31] ? __pfx_panic+0x10/0x10 [ 1629.142148][ T31] ? wq_watchdog_touch+0xec/0x1a0 [ 1629.142170][ T31] ? nmi_trigger_cpumask_backtrace+0x1be/0x230 [ 1629.142196][ T31] ? watchdog.cold+0x1ec/0x234 [ 1629.142216][ T31] ? watchdog+0xcc1/0x1030 [ 1629.142238][ T31] watchdog.cold+0x1fd/0x234 [ 1629.142264][ T31] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 1629.142283][ T31] ? __pfx_watchdog+0x10/0x10 [ 1629.142305][ T31] ? __kthread_parkme+0x18c/0x230 [ 1629.142326][ T31] ? kthread+0x13a/0x450 [ 1629.142346][ T31] ? __pfx_watchdog+0x10/0x10 [ 1629.142366][ T31] kthread+0x370/0x450 [ 1629.142387][ T31] ? __pfx_kthread+0x10/0x10 [ 1629.142410][ T31] ret_from_fork+0x72b/0xd50 [ 1629.142440][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 1629.142464][ T31] ? __switch_to+0x800/0x1100 [ 1629.142491][ T31] ? __pfx_kthread+0x10/0x10 [ 1629.142515][ T31] ret_from_fork_asm+0x1a/0x30 [ 1629.142552][ T31] [ 1629.142965][ T31] Kernel Offset: disabled