last executing test programs: 8m43.276053778s ago: executing program 0 (id=1051): r0 = getpid() r1 = openat$uhid(0xffffff9c, &(0x7f0000000280), 0x2, 0x0) r2 = epoll_create1(0x0) kcmp$KCMP_EPOLL_TFD(r0, r0, 0x7, r1, &(0x7f0000000340)={r2, 0xffffffffffffffff, 0x8}) (fail_nth: 2) 8m43.130871289s ago: executing program 0 (id=1052): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'dummy0\x00'}) r1 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@newtaction={0x14, 0x30, 0x53b, 0x0, 0x0, {0x9}}, 0x14}}, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) bind$tipc(0xffffffffffffffff, &(0x7f0000000200)=@name={0x1e, 0x2, 0x0, {{0x40, 0x4}, 0x1}}, 0x10) syz_open_dev$sg(&(0x7f0000000000), 0x5, 0x10000) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) connect$unix(r3, &(0x7f0000000140)=@abs={0x0, 0x0, 0x4e23}, 0x6e) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000480)=@newtaction={0x100, 0x32, 0x400, 0x0, 0x4, {0x9}, [{0xec, 0x1, [@m_tunnel_key={0xe8, 0x5, 0x0, 0x0, {{0xf}, {0x20, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_ENC_KEY_ID={0x8, 0x7, 0xffffffff}, @TCA_TUNNEL_KEY_ENC_IPV6_SRC={0x14, 0x5, @private0={0xfc, 0x0, '\x00', 0x1}}]}, {0x9a, 0x6, "ee906aa16d997d8e6828a6bc6f6b898ffdd8f0fd454ff34de0cd8c0ced98c52c86015072f88abc212cc6659358b95a84fa643dff9f828779c2575f998bdb3dbe5598e91108e81b6c98932703191906631daa3ce056c9b1963dda6c826aa89db715768d7cc0d3a71811e6bce336abc11b7204b92b6586c9b98406edf2b9c6a04ae998c89ce888f05af9f5a39c106140836ca5e739efaf"}, {0xffffffffffffffd0}, {0xc, 0x8, {0x2, 0x1}}}}]}]}, 0x100}}, 0x811) write$UHID_CREATE2(r2, &(0x7f0000000340)=ANY=[@ANYBLOB="0b00000073797a310000000000000000000000000000000000000000000000010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a31000000000000000000000000000000000000009b1f739a56eb5495000000000000000000000000000000000000000000000000000000000000000000170000000200000004000000ff0100009a0e0000479f0b5ce6407db5608547a20b19aa548c8d84a90a4c9e"], 0x12f) r4 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(r4, 0x10e, 0x5, &(0x7f0000000040)=0x8, 0x4) r5 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r5, 0x29, 0x2a, &(0x7f0000000200)={0x3, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x4e23, 0x0, @remote}}}, 0x108) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) setsockopt$inet6_group_source_req(r5, 0x29, 0x2f, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x400000, @mcast1={0xff, 0x7}}}, {{0xa, 0x4e24, 0x0, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x80000}}}, 0x108) close(r5) modify_ldt$write(0x1, &(0x7f0000000580)={0x0, 0x20000800, 0x400, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1}, 0x10) modify_ldt$write2(0x11, &(0x7f0000000800)={0x7, 0x1000, 0x4000, 0x0, 0x2}, 0x10) socket$netlink(0x10, 0x3, 0x0) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r6, 0x5423, &(0x7f0000000000)=0x15) ioctl$TCSETS(r6, 0x404c4701, &(0x7f0000000040)={0x1, 0x0, 0x0, 0x400000, 0x14, "3eccd8000000000000000010000000040100"}) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) creat(&(0x7f0000000080)='./file0/file1\x00', 0x90) 8m43.060846851s ago: executing program 0 (id=1053): getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socket$igmp6(0xa, 0x3, 0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = dup(r3) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=ANY=[@ANYBLOB="640000000206030000000000fffff0000000000016000300686173683a6e65742c706f72742c6e6574000000050004000000000005000500020000000900020073797a3200000000050001000700000014000780080013400000000008001240"], 0x64}}, 0x0) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r5, 0x84, 0x9, &(0x7f0000000140)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3f8, 0x0, 0x32}, 0x9c) unlink(0x0) bind$inet6(r5, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r5, &(0x7f0000847fff)='X', 0xfee4, 0xf000000, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_clone3(&(0x7f00000003c0)={0x385200080, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x0, {r6}}, 0x58) 8m41.812574946s ago: executing program 0 (id=1060): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="050000002f000000420000004000230000000000f58d95f93c82147a1a653163ffe6942a668e3ec8329820f66926c08b78fc80be0e9a85cee9d26112af324846a5717263fe73da682573c44163f69cbc0b55b9982e467ddcef01ab3d81ee1bb99bec545749f48068344314007ec34249676d9f4a8fe6d53862edb0619df9560797c4a314ff8cdc0c16b75f78d3ca4c56032683745b4886cc5250c24e", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080), &(0x7f0000000080), 0x1003, r0, 0x0, 0xa00369a4}, 0x38) syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) connect$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x15}}, 0x10) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000140)={0x1fd, 0x1, 0x6000, 0x2000, &(0x7f0000bd3000/0x2000)=nil}) r3 = getpid() sched_setaffinity(r3, 0x8, &(0x7f0000000240)=0x2) syz_open_procfs(r3, &(0x7f0000000240)='sessionid\x00') r4 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2) ioctl$KVM_GET_VCPU_EVENTS(r4, 0x4048aecb, &(0x7f0000000180)) r5 = socket$nl_generic(0x10, 0x3, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file1\x00', 0xfe) mount(0x0, &(0x7f0000000240)='./file1\x00', &(0x7f0000000000)='tmpfs\x00', 0x4, &(0x7f0000000300)='Vsrquota') chdir(&(0x7f0000000080)='./file1\x00') r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='net_prio.prioidx\x00', 0x275a, 0x0) quotactl_fd$Q_SETQUOTA(r6, 0xffffffff80000800, 0x0, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x2, 0x3, 0x0, 0x6, 0x7fffffff}) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mkdir(&(0x7f00000000c0)='./bus\x00', 0x0) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000a00)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f00000001c0)='./bus\x00') utime(&(0x7f0000000000)='./file0\x00', 0x0) r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_ro(r7, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000540)={'wlan0\x00'}) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='devpts\x00', 0x0, 0x0) 8m41.560653336s ago: executing program 0 (id=1061): socket$inet6(0xa, 0x3, 0x3) listen(0xffffffffffffffff, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) r0 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7fffffff, 0x400, 0x1, 0xd, 0x1, 0x6, 0x6}, 0x1c) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x18, 0x5, &(0x7f00000000c0)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000000b40)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000100), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x14) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r2, 0x1f2f, 0xf, 0x3253, &(0x7f00000007c0)="9f44948721919580684010a40800", 0x0, 0x241, 0x0, 0xb1, 0x0, &(0x7f0000000700)="389ceff69d08b0af1cc71b6262d50660bbaf31a7f8cd6a6f911beb65d5fe6b54bf21a66489121f24fefd198059288c9b735e1898e77a7469489a249292c02a72bc193a3008ebdbf4e9dd4ee8fcceef55402c913c8dd0ebece1330aaa93ece835c5044a246a5967e3acd7c950b3b19f351830e545eb9bc3a9c6dd22ce97f1f857cfe8b68a2370b69ea336006b589368f92deb68f3dfc6f2bfee09f8342da437fce5dcdf658e453e3132bb42067575318c39"}, 0x23) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) r3 = syz_open_dev$tty20(0xc, 0x4, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket(0x10, 0x3, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000340), r6) getsockname$packet(r6, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r7, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000a80)=@delchain={0x34, 0x2e, 0x1, 0x0, 0xfffdffff, {0x0, 0x0, 0x0, r7, {0xffff, 0x3}, {0xd, 0xffff}, {0x0, 0x8}}, [@filter_kind_options=@f_flow={{0x9}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x20044040}, 0x0) ioctl$KDMKTONE(r3, 0x4b30, 0x9a3) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r8 = dup(0xffffffffffffffff) write$6lowpan_enable(r8, &(0x7f0000000000)='0', 0xfffffd2c) r9 = syz_io_uring_setup(0x1c57, &(0x7f0000000300)={0x0, 0x40ac, 0x10000, 0x2, 0x3e, 0x0, r8}, &(0x7f0000000180)=0x0, &(0x7f00000001c0)=0x0) openat$binder_debug(0xffffff9c, &(0x7f0000000200)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) syz_io_uring_submit(r10, r11, &(0x7f0000000140)=@IORING_OP_POLL_ADD) io_uring_enter(r9, 0x2def, 0x4000, 0x0, 0x0, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(0xffffffffffffffff, 0x4010640d, &(0x7f0000000000)={0x1, 0x2}) syz_open_dev$hidraw(&(0x7f0000000080), 0x9ce, 0x167343) 8m41.300144116s ago: executing program 0 (id=1062): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_FEATURES_SET(r0, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000340)={0x40, r1, 0x8d61ddcfedb48df, 0x0, 0x0, {}, [@ETHTOOL_A_FEATURES_WANTED={0x14, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x10, 0x3, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x6}]}]}]}, @ETHTOOL_A_FEATURES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dummy0\x00'}]}]}, 0x40}}, 0x0) acct(&(0x7f0000000000)='./file0\x00') r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x2) ioctl$KVM_SET_NESTED_STATE(r4, 0x4080aebf, 0x0) socket$rds(0x15, 0x5, 0x0) 8m41.231816109s ago: executing program 32 (id=1062): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_FEATURES_SET(r0, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000340)={0x40, r1, 0x8d61ddcfedb48df, 0x0, 0x0, {}, [@ETHTOOL_A_FEATURES_WANTED={0x14, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x10, 0x3, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x6}]}]}]}, @ETHTOOL_A_FEATURES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dummy0\x00'}]}]}, 0x40}}, 0x0) acct(&(0x7f0000000000)='./file0\x00') r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x2) ioctl$KVM_SET_NESTED_STATE(r4, 0x4080aebf, 0x0) socket$rds(0x15, 0x5, 0x0) 7m22.696699874s ago: executing program 3 (id=1475): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) getsockopt$inet6_int(r1, 0x29, 0x49, 0x0, &(0x7f00000001c0)) sendmsg$nl_route(r0, 0x0, 0x40800) openat$cgroup_root(0xffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)={0x3c8, 0x2d, 0x1, 0x70bd28, 0x5dfdbfe, {0x6}, [@nested={0x3b4, 0xdd, 0x0, 0x1, [@typed={0x5, 0x1f, 0x0, 0x0, @str='\x00'}, @generic="7ed13bd363bd9f48bd256ea4f941bab5329f5b43da9b06791ab31739ae5db3fea34567f92cc5fe1719aae652a8bdc7b41e92472f9efcce2243687c48d1df1fbebce6d5a9a8ad7112616c3ae2901ffd0c88d85dec5796aae1827e32c8a129493cdad79b6d9b7492200e5f16f1c573e68773030cd76d51f213a97cc433063970a84b1f24458d0b035cc582e4e59cc17434c42d3e3fb6846b6a3c9ae9a65eb4030963d38ba9fcaef0adf567e42e831f0a93d56a337a8b8924044a7f9a9d11d83b5d4cf3f82aae2cfaff23ecac7850eabc18e02792cafe7df34f6ef914466acbfa07a29118d0b97f0a44a0", @generic="fabb7c4414f8b2d63f9c6d1ce4bbe27dcba9321d50449a2c8fd5a42f39d28a7376043a222dcdeb4e85076ed213c0c7e32014f7d04c57b982ae7dfbc028df99498dd3cd04", @nested={0x1ff, 0xfe, 0x0, 0x1, [@nested={0x4, 0x14d}, @generic="be1ed31515f87453a3e3540c05b350a0e2b2217eb5f9bfbf2bcc0a33affa0a290bf67d07099206f17671a3ef1b9942bf776e9bc49cdbe34bbf63f56ebb0f1fa2b487bcdbb3b772fb85068a770bb0561294c5bf3a9957f155c456964a9c2e0f3aeea31e4a08eebc06a1a9c769bff003e4d14e4c31332bcf02609acffdee428b", @nested={0x4, 0x14}, @typed={0x8, 0xb1, 0x0, 0x0, @u32=0x2}, @generic="7d145f55b2fe330e1dea2fd3fbfa1eb65f8d8a8f33f9a9368808fe315c86f6d7bd5a726d821f55ff036f3daeeb413c87c9171aef5eb8f301786b6654eb5c13023c96317d1b6de950653a22566977dc797289a28e11c44174118004e66062d592ae941c4babc4867413dd1cf7462dc18bdc42f081ff76458f764612ab4e71750f87ab62396b2b5f1b6fa7a6392914be4145a4dbba08354b58709d69ed33b2eca5ca16598b51fa7593ee02f23dde52871efd599bfa727359d02eaf38e81e12c34c7656de38a6dfc9b3b0ad2df47db08e6cb645489444c994a20e443cfcdffe62fac214c018bb9fd30f38", @nested={0x4, 0x1b}, @typed={0x4, 0x6}, @typed={0x5, 0xef, 0x0, 0x0, @str='\x00'}, @generic="1f81f16202e4e3ad95220863ddb013922336a7069175ce33adcbcf134d29b29c37ad0e2de9ff1901d6073fdf86cc76e859a359562849a7622c84bdff02201fb92d9b0a2bcbbe6d441ed225bcf34a511d7202441eb70f7a3e4f68fb0920a0a3b3c0277f004cff52462aa42c4330ddfc4e807d61"]}, @generic="3ac4ef5d11a6f2126f936fc6163c253bb4ec38bff4756df50cd7f7660a96bee45d27ffa7bc84eabd4eda9a36400545fe60d53e9e75d19686b19cfb075e3704a6c3300fa4a08f425a0f689a0c6dc2b2ca898da216ae04e9eccb03f963b86325f09913dac49107b8d9e4b71f65b77b8521d98922", @typed={0x5, 0xe2, 0x0, 0x0, @str='\x00'}]}]}, 0x3c8}, 0x1, 0x0, 0x0, 0x20044080}, 0x20000086) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) getsockopt$bt_BT_FLUSHABLE(r4, 0x112, 0x8, 0x0, &(0x7f0000000080)) sendmsg$netlink(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000001ac0)=[{&(0x7f0000000000)=ANY=[], 0x114}], 0x1}, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) fsetxattr(r5, &(0x7f0000000140)=ANY=[@ANYBLOB="62747248732eb78c2b0000000057a526e62a974f225443d33da9fd142ab8cb1ded4ff3b428b9c08a5848fc78187c5b45"], 0x0, 0x0, 0x0) r6 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$UI_SET_SWBIT(r6, 0x4004556d, 0x4) openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/bus/input/devices\x00', 0x0, 0x0) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x15, 0x2, &(0x7f0000000100)=@raw=[@ldst={0x1, 0x3, 0x3, 0x0, 0x1, 0x13}, @jmp={0x5, 0x0, 0x9}], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x28, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) fgetxattr(r5, &(0x7f0000000000)=@known='trusted.overlay.upper\x00', 0x0, 0x80000) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000180)={@fallback=r7, 0x33, 0x0, 0x641, &(0x7f0000000040)=[0x0], 0x1, 0x0, 0x0, &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0}, 0xa4) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000200)={@fallback=r1, r5, 0x0, 0x3000, 0x0, @value, @void, @void, @void, r8}, 0x20) 7m22.640241959s ago: executing program 3 (id=1477): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f0000000700), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_SEC_KEY(r0, 0x0, 0x80) 7m22.639747688s ago: executing program 3 (id=1478): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x8, 0x4, 0x4, 0x9, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0xa, 0x8, &(0x7f0000000240)=ANY=[@ANYBLOB="1809000000000000000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7030000070000008500000021000000b700000000"], &(0x7f0000000640)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x0, 0xe, 0x0, &(0x7f0000000900)="e02742e8680d85ff9782762f0800", 0x0, 0xe8a2, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="240000001a000b842cbdd800fcdbdf25ff008088fd00fd040004000008001900", @ANYBLOB], 0x24}, 0x1, 0x0, 0x0, 0x810}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), r4) syz_emit_ethernet(0x2a, &(0x7f0000000040)={@local, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x1, 0x0, @empty, @multicast1}, @echo}}}}, 0x0) sendmsg$MPTCP_PM_CMD_SET_LIMITS(r3, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000400)={0x1c, r5, 0x1, 0x70bd25, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x8000000}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20040000}, 0x900) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r6, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @empty}, 0x1c) sendto$inet6(r6, &(0x7f0000847fff)='X', 0x34000, 0x1008, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001800ff0f0000000000000000850000006d000000850000000800000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) openat$vnet(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r7 = syz_open_dev$sndmidi(&(0x7f0000000100), 0x2, 0x141121) r8 = dup(r7) write$6lowpan_enable(r8, &(0x7f0000000000)='0', 0xfffffd2c) r9 = syz_io_uring_setup(0x6d8d, &(0x7f0000000300)={0x0, 0x40ac, 0x10000, 0x2, 0x3f, 0x0, r8}, &(0x7f0000000180)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r10, r11, &(0x7f0000000140)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r7}) io_uring_enter(r9, 0x2def, 0x4000, 0x0, 0x0, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) 7m21.385805133s ago: executing program 3 (id=1485): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) getsockopt$inet6_int(r1, 0x29, 0x49, 0x0, &(0x7f00000001c0)) sendmsg$nl_route(r0, 0x0, 0x40800) openat$cgroup_root(0xffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)={0x3c8, 0x2d, 0x1, 0x70bd28, 0x5dfdbfe, {0x6}, [@nested={0x3b4, 0xdd, 0x0, 0x1, [@typed={0x5, 0x1f, 0x0, 0x0, @str='\x00'}, @generic="7ed13bd363bd9f48bd256ea4f941bab5329f5b43da9b06791ab31739ae5db3fea34567f92cc5fe1719aae652a8bdc7b41e92472f9efcce2243687c48d1df1fbebce6d5a9a8ad7112616c3ae2901ffd0c88d85dec5796aae1827e32c8a129493cdad79b6d9b7492200e5f16f1c573e68773030cd76d51f213a97cc433063970a84b1f24458d0b035cc582e4e59cc17434c42d3e3fb6846b6a3c9ae9a65eb4030963d38ba9fcaef0adf567e42e831f0a93d56a337a8b8924044a7f9a9d11d83b5d4cf3f82aae2cfaff23ecac7850eabc18e02792cafe7df34f6ef914466acbfa07a29118d0b97f0a44a0", @generic="fabb7c4414f8b2d63f9c6d1ce4bbe27dcba9321d50449a2c8fd5a42f39d28a7376043a222dcdeb4e85076ed213c0c7e32014f7d04c57b982ae7dfbc028df99498dd3cd04", @nested={0x1ff, 0xfe, 0x0, 0x1, [@nested={0x4, 0x14d}, @generic="be1ed31515f87453a3e3540c05b350a0e2b2217eb5f9bfbf2bcc0a33affa0a290bf67d07099206f17671a3ef1b9942bf776e9bc49cdbe34bbf63f56ebb0f1fa2b487bcdbb3b772fb85068a770bb0561294c5bf3a9957f155c456964a9c2e0f3aeea31e4a08eebc06a1a9c769bff003e4d14e4c31332bcf02609acffdee428b", @nested={0x4, 0x14}, @typed={0x8, 0xb1, 0x0, 0x0, @u32=0x2}, @generic="7d145f55b2fe330e1dea2fd3fbfa1eb65f8d8a8f33f9a9368808fe315c86f6d7bd5a726d821f55ff036f3daeeb413c87c9171aef5eb8f301786b6654eb5c13023c96317d1b6de950653a22566977dc797289a28e11c44174118004e66062d592ae941c4babc4867413dd1cf7462dc18bdc42f081ff76458f764612ab4e71750f87ab62396b2b5f1b6fa7a6392914be4145a4dbba08354b58709d69ed33b2eca5ca16598b51fa7593ee02f23dde52871efd599bfa727359d02eaf38e81e12c34c7656de38a6dfc9b3b0ad2df47db08e6cb645489444c994a20e443cfcdffe62fac214c018bb9fd30f38", @nested={0x4, 0x1b}, @typed={0x4, 0x6}, @typed={0x5, 0xef, 0x0, 0x0, @str='\x00'}, @generic="1f81f16202e4e3ad95220863ddb013922336a7069175ce33adcbcf134d29b29c37ad0e2de9ff1901d6073fdf86cc76e859a359562849a7622c84bdff02201fb92d9b0a2bcbbe6d441ed225bcf34a511d7202441eb70f7a3e4f68fb0920a0a3b3c0277f004cff52462aa42c4330ddfc4e807d61"]}, @generic="3ac4ef5d11a6f2126f936fc6163c253bb4ec38bff4756df50cd7f7660a96bee45d27ffa7bc84eabd4eda9a36400545fe60d53e9e75d19686b19cfb075e3704a6c3300fa4a08f425a0f689a0c6dc2b2ca898da216ae04e9eccb03f963b86325f09913dac49107b8d9e4b71f65b77b8521d98922", @typed={0x5, 0xe2, 0x0, 0x0, @str='\x00'}]}]}, 0x3c8}, 0x1, 0x0, 0x0, 0x20044080}, 0x20000086) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) getsockopt$bt_BT_FLUSHABLE(r4, 0x112, 0x8, 0x0, &(0x7f0000000080)) sendmsg$netlink(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000001ac0)=[{&(0x7f0000000000)=ANY=[], 0x114}], 0x1}, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) fsetxattr(r5, &(0x7f0000000140)=ANY=[@ANYBLOB="62747248732eb78c2b0000000057a526e62a974f225443d33da9fd142ab8cb1ded4ff3b428b9c08a5848fc78187c5b45"], 0x0, 0x0, 0x0) r6 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$UI_SET_SWBIT(r6, 0x4004556d, 0x4) openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/bus/input/devices\x00', 0x0, 0x0) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x15, 0x2, &(0x7f0000000100)=@raw=[@ldst={0x1, 0x3, 0x3, 0x0, 0x1, 0x13}, @jmp={0x5, 0x0, 0x9}], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x28, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) fgetxattr(r5, &(0x7f0000000000)=@known='trusted.overlay.upper\x00', 0x0, 0x80000) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000180)={@fallback=r7, 0x33, 0x0, 0x641, &(0x7f0000000040)=[0x0], 0x1, 0x0, 0x0, &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0}, 0xa4) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000200)={@fallback=r1, r5, 0x0, 0x3000, 0x0, @value, @void, @void, @void, r8}, 0x20) 7m21.297619844s ago: executing program 3 (id=1487): syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=ANY=[@ANYBLOB="300000003e000701fcfffffffddbdf25017c00001000"], 0x30}, 0x1, 0x0, 0x0, 0x488c0}, 0xc000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x1000009, 0x114}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) r2 = syz_open_dev$usbfs(&(0x7f0000000480), 0x77, 0x141341) ioctl$USBDEVFS_IOCTL(r2, 0xc0105512, &(0x7f0000000200)=@usbdevfs_driver={0x0, 0xfffffff8, &(0x7f00000003c0)}) mount$fuse(0x0, 0x0, 0x0, 0x2b38094, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) socketpair(0x6, 0x800, 0x10101, 0x0) sendmmsg(r3, 0x0, 0x0, 0x20004004) r4 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x102) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, 0x0) mkdir(0x0, 0x40) mkdirat(0xffffffffffffff9c, 0x0, 0x0) r5 = open(&(0x7f0000000140)='./file1\x00', 0x321803, 0xa2) mknodat$loop(r5, 0x0, 0x0, 0x0) lsetxattr$trusted_overlay_origin(0x0, 0x0, 0x0, 0x0, 0x1) ioctl$AUTOFS_IOC_PROTOSUBVER(r4, 0x40049366, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) 7m20.230099823s ago: executing program 3 (id=1491): bind$alg(0xffffffffffffffff, &(0x7f0000000300)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-serpent-avx\x00'}, 0x58) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x802, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_open_dev$evdev(0x0, 0x0, 0x60000) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000200)='sched_switch\x00'}, 0x18) futex(0x0, 0x85, 0x0, 0x0, 0x0, 0xc5fffffd) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000080)="722e1b084fd7306381a70e6e2624681fb1329582928ba4daa26e552c3aa96be6f68ed1a5c5229706e830d7b11efe", 0x2e) syz_open_procfs(0x0, 0x0) prctl$PR_SET_NAME(0xf, 0x0) r2 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r2, &(0x7f0000000a00)=[{{&(0x7f0000000140)={0xa, 0xfffc, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, 0x1c, &(0x7f0000001900)=[{&(0x7f0000000280)="ad", 0x1}], 0x1}}, {{&(0x7f00000001c0)={0xa, 0x4e20, 0x79, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x3}, 0x1c, &(0x7f0000000880)=[{&(0x7f0000000200)="ec", 0x1}], 0x1}}], 0x2, 0x0) r3 = socket$netlink(0x10, 0x3, 0x4) writev(r3, &(0x7f0000000080)=[{&(0x7f0000000e40)="480000001400190d09004beafd0d36020a8447000b4e230f00004e20a2bc560119d7004f19dfb7f393d7359031033f817f00000000000000000101ff05c00e030002000000ffff01", 0x48}], 0x1) syz_genetlink_get_family_id$devlink(&(0x7f00000000c0), r3) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r4, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6) write(r4, &(0x7f0000000100)="52000300010007", 0x7) r5 = syz_genetlink_get_family_id$smc(&(0x7f0000000000), 0xffffffffffffffff) r6 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$SMC_PNETID_ADD(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="01000000000000000200020000000900010073797a320000fdff0800030073797a3200000000"], 0x2c}}, 0xc800) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000680)=ANY=[], 0x50) io_setup(0x6, &(0x7f0000001380)) 7m5.21911095s ago: executing program 33 (id=1491): bind$alg(0xffffffffffffffff, &(0x7f0000000300)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-serpent-avx\x00'}, 0x58) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x802, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_open_dev$evdev(0x0, 0x0, 0x60000) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000200)='sched_switch\x00'}, 0x18) futex(0x0, 0x85, 0x0, 0x0, 0x0, 0xc5fffffd) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000080)="722e1b084fd7306381a70e6e2624681fb1329582928ba4daa26e552c3aa96be6f68ed1a5c5229706e830d7b11efe", 0x2e) syz_open_procfs(0x0, 0x0) prctl$PR_SET_NAME(0xf, 0x0) r2 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r2, &(0x7f0000000a00)=[{{&(0x7f0000000140)={0xa, 0xfffc, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, 0x1c, &(0x7f0000001900)=[{&(0x7f0000000280)="ad", 0x1}], 0x1}}, {{&(0x7f00000001c0)={0xa, 0x4e20, 0x79, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x3}, 0x1c, &(0x7f0000000880)=[{&(0x7f0000000200)="ec", 0x1}], 0x1}}], 0x2, 0x0) r3 = socket$netlink(0x10, 0x3, 0x4) writev(r3, &(0x7f0000000080)=[{&(0x7f0000000e40)="480000001400190d09004beafd0d36020a8447000b4e230f00004e20a2bc560119d7004f19dfb7f393d7359031033f817f00000000000000000101ff05c00e030002000000ffff01", 0x48}], 0x1) syz_genetlink_get_family_id$devlink(&(0x7f00000000c0), r3) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r4, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6) write(r4, &(0x7f0000000100)="52000300010007", 0x7) r5 = syz_genetlink_get_family_id$smc(&(0x7f0000000000), 0xffffffffffffffff) r6 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$SMC_PNETID_ADD(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="01000000000000000200020000000900010073797a320000fdff0800030073797a3200000000"], 0x2c}}, 0xc800) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000680)=ANY=[], 0x50) io_setup(0x6, &(0x7f0000001380)) 6m24.148806185s ago: executing program 5 (id=1730): bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{0x1}, &(0x7f0000000000), &(0x7f0000000040)}, 0x1c) r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$SOCK_DIAG_BY_FAMILY(r0, &(0x7f0000002340)={0x0, 0x0, &(0x7f0000002300)={&(0x7f0000000040)={0x48, 0x15, 0x51d, 0x70bd2a, 0x25dfdbff, {0x2, 0x1}, [@INET_DIAG_REQ_BYTECODE={0x31, 0x1, "89cbe6000f614752b2d3239bd54ade00d8e72e7a46ff77b1085dc3968bd2750871a079f3fc4bb52f2f95d3598c"}]}, 0x48}, 0x1, 0x0, 0x0, 0x4004004}, 0x4488c) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000300)={'batadv0\x00', 0x0}) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x3000004, 0x3032, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r2, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a70000000060a010400000000000000000200000044000480400001800e000100627974656f726465720000002c000280080001400000001008000240000000000800044000000014080003400000000008000540000000a10900010073797a30000000000900020073797a3200000000140200000000000000000000000000000000000a"], 0x98}}, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r2, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000002380)=[0x0], 0x1}) r4 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000100)='memory.events.local\x00', 0x275a, 0x0) write$UHID_CREATE2(r4, &(0x7f0000000180)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r4, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000004c0)={{0x1, 0xffffffffffffffff}, &(0x7f0000000440), &(0x7f0000000480)}, 0x1c) r6 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000500)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1, 0x80000000, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x4, 0x4, 0x0, @void, @value, @void, @value}, 0x50) r7 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="1b0000000000000000000000f9ffffff00000000", @ANYRES32, @ANYBLOB="0300"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="05000000000000000400000000000000000000000000000001000000"], 0x50) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) r9 = socket$rxrpc(0x21, 0x2, 0xa) fcntl$getflags(r9, 0x3) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x20, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r10 = openat$binder_debug(0xffffff9c, &(0x7f0000000600)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000700)={0x18, 0x9, &(0x7f0000000800)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x8001, 0xd8, &(0x7f0000000200)=""/216, 0x41000, 0x42, '\x00', r1, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000003c0)={0x4, 0x1}, 0x8, 0x10, &(0x7f0000000400)={0x5, 0x7, 0xfffffff9, 0x7}, 0x10, 0x0, 0x0, 0x8, &(0x7f0000000640)=[r4, r5, r6, r7, r8, r10], &(0x7f0000000680)=[{0x5, 0x1, 0xb, 0x4}, {0x3, 0x5, 0x4, 0x8}, {0x0, 0x2, 0x6}, {0x1, 0x5, 0x5, 0x2}, {0x5, 0x3, 0x3, 0x9}, {0x3, 0x3, 0xb, 0x1}, {0x4, 0x2, 0xd, 0x7}, {0x403, 0x4, 0xf, 0x6}], 0x10, 0x2479, @void, @value}, 0x94) r11 = socket$inet6_sctp(0xa, 0x801, 0x84) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={0x0}, 0x18) r12 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0), 0x240, 0x0) ioctl$TIOCSETD(r12, 0x5423, &(0x7f00000000c0)=0xf) ioctl$TCFLSH(r12, 0x400455c8, 0x2) ioctl$TIOCSTI(r12, 0x5412, &(0x7f0000000040)=0x33) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r11, 0x84, 0x6f, &(0x7f0000000140)={0x0, 0x54, &(0x7f0000000340)=[@in6={0xa, 0x4e23, 0x10000, @private0, 0x2}, @in6={0xa, 0x4e23, 0x8, @local, 0x3}, @in6={0xa, 0x4e23, 0x1bc9, @dev={0xfe, 0x80, '\x00', 0x38}, 0x7}]}, &(0x7f0000000180)=0xc) 6m24.030479138s ago: executing program 5 (id=1732): syz_open_procfs$namespace(0xffffffffffffffff, 0x0) r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={r0, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa) bpf$TOKEN_CREATE(0x24, &(0x7f0000000100), 0x8) r1 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000004c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={r1, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa) r2 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r2, &(0x7f0000000000)=[{0x0}], 0x1) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r3) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r3, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r4, 0xfffffffc) r5 = socket$inet_mptcp(0x2, 0x1, 0x106) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r6 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r7 = dup(r6) write$6lowpan_enable(r7, &(0x7f0000000000)='0', 0xffffffffffffff0b) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x14, 0x22, 0x301, 0x270bd24, 0x25dfdbfd, {0x1}}, 0x14}}, 0x0) connect$inet(r5, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r9, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)={0x30, r10, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x6}]}]}, 0x30}, 0x1, 0x0, 0x0, 0xaa34a4cfdf933201}, 0x10) r11 = socket$nl_generic(0x10, 0x3, 0x10) userfaultfd(0x801) r12 = syz_genetlink_get_family_id$mptcp(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r11, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000200)={0x20, r12, 0x1, 0x0, 0x0, {0x7}, [@MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x1}]}]}, 0x20}}, 0x0) 6m23.71173523s ago: executing program 5 (id=1736): r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) r2 = openat$cgroup_procs(r0, &(0x7f00000001c0)='cgroup.procs\x00', 0x2, 0x0) preadv(r1, &(0x7f0000000080)=[{&(0x7f0000000300)=""/4096, 0x1000}], 0x1, 0x7, 0x8000) pread64(r2, &(0x7f0000001840)=""/4096, 0x1000, 0x1) mknod$loop(&(0x7f0000000140)='./file0\x00', 0x8fff, 0x0) setrlimit(0x9, &(0x7f0000000000)={0x8, 0x4}) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(r3, 0x40505331, &(0x7f0000000100)={{}, {0xe}, 0xbf00, 0xbf}) socket$inet6_sctp(0xa, 0x1, 0x84) move_pages(0x0, 0x0, &(0x7f0000000040), &(0x7f0000000040), &(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x0) execve(&(0x7f0000000180)='./file0\x00', 0x0, &(0x7f0000000800)) 6m23.668756917s ago: executing program 5 (id=1739): syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000200)={0x0, 0x7}, 0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000000)={0x0, 0xcc}, 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000280)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) sendmmsg$inet6(r0, &(0x7f0000001000)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback, 0x280020}, 0x1c, &(0x7f00000000c0)=[{&(0x7f0000000180)="c6", 0x1}], 0x1}}], 0x1, 0x20008050) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xf}, {0xffff, 0xffff}, {0xfff0, 0xf}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x20048845}, 0x20000000) sendmsg$nl_route_sched(r2, &(0x7f00000002c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x64000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000380)=@deltclass={0x84, 0x29, 0x10, 0x70bd29, 0x25dfdbfe, {0x0, 0x0, 0x0, r4, {0x1}, {0x10, 0x1}, {0x7, 0x9}}, [@tclass_kind_options=@c_drr={{0x8}, {0xc, 0x2, @TCA_DRR_QUANTUM={0x8}}}, @TCA_RATE={0x6, 0x5, {0x1, 0x80}}, @tclass_kind_options=@c_taprio={0xb}, @tclass_kind_options=@c_tbf={0x8}, @TCA_RATE={0x6, 0x5, {0x4, 0x2c}}, @tclass_kind_options=@c_ingress={0xc}, @TCA_RATE={0x6, 0x5, {0x1c, 0xba}}, @TCA_RATE={0x6, 0x5, {0x3, 0x4}}, @tclass_kind_options=@c_ingress={0xc}]}, 0x84}, 0x1, 0x0, 0x0, 0x40000}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x9, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) r7 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r7, 0x6, 0x0, 0x0, 0x0) r8 = fsmount(r7, 0x1, 0x0) fchdir(r8) getrandom(&(0x7f0000000240)=""/286, 0xffffff9a, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000600)=@deltfilter={0x24, 0x2d, 0x5, 0x70bd2a, 0x25dfdbf9, {0x0, 0x0, 0x0, r4, {0x0, 0x9}, {0x2, 0xf}, {0x1, 0xfff2}}}, 0x24}, 0x1, 0x0, 0x0, 0x4}, 0x0) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f0000000040)=ANY=[@ANYRES32=0x0, @ANYRES16=r0], 0x1000f) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='clear_refs\x00') 6m22.415496027s ago: executing program 5 (id=1744): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x81c0, 0xfffffffd) execve(&(0x7f0000000000)='./file2\x00', 0x0, 0x0) mkdir(&(0x7f0000000080)='./file1\x00', 0x0) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, 0x0) mkdir(&(0x7f0000000440)='./file0\x00', 0x0) mount$bind(&(0x7f0000000100)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x101091, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$DRM_IOCTL_AUTH_MAGIC(r1, 0x40046411, &(0x7f0000000000)=0x1) read$msr(r1, &(0x7f00000024c0)=""/4096, 0x1000) shmctl$IPC_STAT(0x0, 0x2, 0x0) r2 = shmget(0x1, 0x4000, 0x200, &(0x7f0000ff8000/0x4000)=nil) shmat(r2, &(0x7f0000ff8000/0x5000)=nil, 0x7000) shmctl$IPC_RMID(r2, 0x0) stat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='hugetlb.1GB.rsvd.usage_in_bytes\x00', 0x275a, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000380)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x4, [@array={0x0, 0x0, 0x0, 0x3, 0x0, {0x7, 0x2, 0x5}}, @fwd={0x2}]}, {0x0, [0x5f, 0x61]}}, 0x0, 0x40, 0x0, 0x0, 0x7fffffff, 0x0, @void, @value}, 0x28) write$cgroup_subtree(r3, &(0x7f0000000100)=ANY=[], 0x32600) read$FUSE(r3, &(0x7f0000000140)={0x2020, 0x0, 0x0}, 0x2020) pipe2(&(0x7f0000001cc0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) r7 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r7, 0x1, 0x11, &(0x7f0000000040)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) mount$9p_fd(0x0, &(0x7f0000000000)='.\x00', &(0x7f0000000080), 0x0, &(0x7f0000000500)={'trans=fd,', {'rfdno', 0x3d, r5}, 0x2c, {'wfdno', 0x3d, r6}, 0x2c, {[{@access_uid={'access', 0x3d, r8}}]}}) write$FUSE_CREATE_OPEN(r5, &(0x7f0000002180)={0xa0, 0xffffffffffffffda, r4, {{0x4, 0x1, 0x6, 0xe, 0x0, 0xfffffff8, {0x3, 0x4, 0x3, 0x1, 0x4, 0x6, 0x80000004, 0x8000, 0x5, 0x8000, 0x80, r8, r9, 0x4, 0xdb}}, {0x0, 0x14}}}, 0x97) r10 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0xfd, 0x0, 0x7fffffff}]}) r11 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r11, 0xc0184800, &(0x7f0000000100)={0x4, r10}) ioctl$DMA_BUF_IOCTL_SYNC(r12, 0x40086200, &(0x7f0000000040)=0x2) getresgid(&(0x7f00000000c0), &(0x7f0000000100), &(0x7f0000000140)) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000180)) 6m22.179670886s ago: executing program 5 (id=1745): r0 = syz_open_dev$hidraw(&(0x7f0000000080), 0x0, 0x9300) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) dup2(r0, 0xffffffffffffffff) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000800)={[{@index_on}]}) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x9, 0x2, 0x56d, 0x2, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x3, &(0x7f0000000200)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x1}}, &(0x7f0000000080)='syzkaller\x00', 0x5, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='contention_end\x00', r2}, 0x10) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000600), &(0x7f0000001f80), 0xfffffffb, r1}, 0x38) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000005c0)={r1}, 0x4) r3 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x20880) r4 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') r5 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r5, 0x29, 0x2e, &(0x7f0000000080)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @empty}}}, 0x108) setsockopt$inet6_group_source_req(r5, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0xfffe, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @empty}}}, 0x108) syz_usb_connect(0x2e24f48d2571b715, 0x4af, &(0x7f0000000840)=ANY=[@ANYBLOB="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"], &(0x7f0000000600)={0xa, &(0x7f0000000340)={0xa, 0x6, 0x110, 0x7, 0x6, 0x3, 0x20, 0x8}, 0x17, &(0x7f0000000380)={0x5, 0xf, 0x17, 0x2, [@ext_cap={0x7, 0x10, 0x2, 0x14, 0xd, 0x5, 0x18}, @wireless={0xb, 0x10, 0x1, 0xc, 0x30, 0x9, 0x9, 0x9, 0x9}]}, 0x3, [{0x4, &(0x7f00000003c0)=@lang_id={0x4, 0x3, 0x443}}, {0xf0, &(0x7f0000000400)=@string={0xf0, 0x3, "c3477fe876523d20be26368589b394e25215f8880caf84894183efd5501d7cc7ce35db98b573d8711b201ce2dbed0765273bd83a9e1910e52984258327263cc06478e3e97ca1b3b0b9c72180ec2a234bc64b5c746a18b80b19f5b65bade06b0408051e034da906e121583c83bb075501e52fb721f10f9c222c1a60021fcc5baf54ab69492622c8c18cc197b702eed9b2607f01fc02bd1006a63c6c02e43620d971cf4c2b25fdd6734600658951e24ab11dff0966d4f4e951abdc2211d41f92c9cb1652baaa88e8b4798afac95fbeffd5999359159df4b67fde0bb80793c902c890ed1248ae2dbb3094b03ded93fe"}}, {0xa3, &(0x7f0000000500)=@string={0xa3, 0x3, "3570da708ab924cb500b210faa81f349e4c6fd48cf2c6c3b72d74bf9b73737d98d40e805858bf9c944426252b43c8677f51944b510d7e7c5157dde509b74ef829f295b272b3fa69c628fc27c0bd6936e8197c94837a8f8907f1a9f4d139999108a1333fbda2750aae29b38cc931cff843fc9a7fbd4a298267f4921f4f64a738671f3d292d87843439558f846de41f838e23030c0b7d39a70a14684b05ac78ea07c"}}]}) bind$inet(r5, &(0x7f0000000140)={0x2, 0x4e22, @remote}, 0x10) mount$9p_fd(0x0, &(0x7f0000000100)='.\x00', &(0x7f0000000040), 0x0, &(0x7f0000000f80)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r3, @ANYBLOB=',wfdno=', @ANYRESHEX=r4]) 6m7.050031069s ago: executing program 34 (id=1745): r0 = syz_open_dev$hidraw(&(0x7f0000000080), 0x0, 0x9300) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) dup2(r0, 0xffffffffffffffff) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000800)={[{@index_on}]}) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x9, 0x2, 0x56d, 0x2, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x3, &(0x7f0000000200)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x1}}, &(0x7f0000000080)='syzkaller\x00', 0x5, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='contention_end\x00', r2}, 0x10) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000600), &(0x7f0000001f80), 0xfffffffb, r1}, 0x38) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000005c0)={r1}, 0x4) r3 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x20880) r4 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') r5 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r5, 0x29, 0x2e, &(0x7f0000000080)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @empty}}}, 0x108) setsockopt$inet6_group_source_req(r5, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0xfffe, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @empty}}}, 0x108) syz_usb_connect(0x2e24f48d2571b715, 0x4af, &(0x7f0000000840)=ANY=[@ANYBLOB="12010002b800132072052813c7b90102030109029d04010e084001090412010e1de1f90809582f6e30762fbfd90924020200000e00dc0b240201000305042736160f2402010801010114e626c62da16e0905020c00000c84010725010104020009050b100800ff0ff9ae03e470d8bfb4fc8cd2bac4eab4b30aec1a39eab25fcd1819b2ce3c7488ef59120413c7a52d11cdef7b4a0c793d09ac592278e91c2faec4ca3b6bd31c8b78b4a20d490a43790b7599ba56e4c18e35dfb467f2d6d4c7744256783b6888df9ee6e023efaa348abc1715f1dfc4ab21f16358d24401a53f99d70ab92910fc3b3cb1a077bfc6cad6d17f913fa4d2399ac63e7f2ccc6fce0d0d8e8eaad68a45507a51cd88f8a8700513b6e63e3b31a132e7580905020d40000704400725010307000209050208ff03010f400825010107030007250186f9020009050d01200008810836217f5e861024fb566d95b863b555138d32b9919c5ec1e8e0b0f5ab61beff25ae68052d9772a851197c8a550be6c49027f7c370993b0725010202000009050014200003250103fc02007a0787f4e026e16acada722967fdbf3eae133669df670419b8c32b0999b94b712c88305dd1190b857c9c3be955bde730f8dcafff35a43ee916e020648d68aec6deb000ad9d0dfe55b1aead95de89ee20cecd51af916a5bf02b29a7a6f27a0996d8a4e81811e31fba75d9d49749ecc3f831083011a6742a72b62d09050101400005044007250180054c00c022cdbf88d2da313a3d7c0ed48861f71eff90577a78852eaafe137e1b73f8b50cf4efab3d4cbfcaf00d3d42b23d6af0e2d35caec6cb1d1adce14a09e8718ba4272ac5b5aecc9ed7cd9807d82267a393083400d6a44fce32aba6c283bdd54065395c0146d9ce516fdd905967a22f6171956be2582dbfecf7fad048847f1034953f251c55a2e581a542df7eb41edb792fccd99bebe2146758ba75fce5f7d822c56a873175b48ab3e19042976ef571d4b5c96f1ebbd7db70fdde19dfdc23c279760905800000040108058f08df303c3cd19b0166ad582dae519525b68112084f3546b98ff3ee8c31bede6d4af8f4c989d60235d8549230af30f53c4549fbe24ecf27e49c3f5bf54b611b7a9479cefeb81bc9058d300e377972e18e6e6fa944bfcb7e795b8d6cfe2b93ed609b43925bd3743323477353f25b02ee16f933118946d5c3614866d3d4e335c514ee80fa1269fc2506d1e86bbd410a0905010008040810062b234c5f6858561e548e53b9aa942e341fe7ec324e85c0f0943328e8b2982795ef01a678697416d2e5f85b2824abffacb3f2e8fbd552410b3377789465097d3e3a928349affb8be11ccf1f627766137d64406009050e0c000409010f5328bc41064141b39847e4df8a8654a6cce4b9cf380e4404c3ac172b719ee61f5660fef7ba3b5e8018945051a97d710bb85723cf8fd518ef872cc7f39a5c2007fe9fc575a85c452de3137ed7758bef2acf04e5072501820a090009050f0310000902802f028e321ead214dc490a5b453ce8a7b45ade78f03706c32a85c2a2f27c3ce0b59977727d7d93597a729b65a277797190b39e3553de21b977f31c9ee73148b466a8153f085e9d29609050b10200009046f09050f1010000301000725010005f4000725018000070009050202ff0306"], &(0x7f0000000600)={0xa, &(0x7f0000000340)={0xa, 0x6, 0x110, 0x7, 0x6, 0x3, 0x20, 0x8}, 0x17, &(0x7f0000000380)={0x5, 0xf, 0x17, 0x2, [@ext_cap={0x7, 0x10, 0x2, 0x14, 0xd, 0x5, 0x18}, @wireless={0xb, 0x10, 0x1, 0xc, 0x30, 0x9, 0x9, 0x9, 0x9}]}, 0x3, [{0x4, &(0x7f00000003c0)=@lang_id={0x4, 0x3, 0x443}}, {0xf0, &(0x7f0000000400)=@string={0xf0, 0x3, "c3477fe876523d20be26368589b394e25215f8880caf84894183efd5501d7cc7ce35db98b573d8711b201ce2dbed0765273bd83a9e1910e52984258327263cc06478e3e97ca1b3b0b9c72180ec2a234bc64b5c746a18b80b19f5b65bade06b0408051e034da906e121583c83bb075501e52fb721f10f9c222c1a60021fcc5baf54ab69492622c8c18cc197b702eed9b2607f01fc02bd1006a63c6c02e43620d971cf4c2b25fdd6734600658951e24ab11dff0966d4f4e951abdc2211d41f92c9cb1652baaa88e8b4798afac95fbeffd5999359159df4b67fde0bb80793c902c890ed1248ae2dbb3094b03ded93fe"}}, {0xa3, &(0x7f0000000500)=@string={0xa3, 0x3, "3570da708ab924cb500b210faa81f349e4c6fd48cf2c6c3b72d74bf9b73737d98d40e805858bf9c944426252b43c8677f51944b510d7e7c5157dde509b74ef829f295b272b3fa69c628fc27c0bd6936e8197c94837a8f8907f1a9f4d139999108a1333fbda2750aae29b38cc931cff843fc9a7fbd4a298267f4921f4f64a738671f3d292d87843439558f846de41f838e23030c0b7d39a70a14684b05ac78ea07c"}}]}) bind$inet(r5, &(0x7f0000000140)={0x2, 0x4e22, @remote}, 0x10) mount$9p_fd(0x0, &(0x7f0000000100)='.\x00', &(0x7f0000000040), 0x0, &(0x7f0000000f80)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r3, @ANYBLOB=',wfdno=', @ANYRESHEX=r4]) 1m25.555803621s ago: executing program 1 (id=3107): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000540)=ANY=[@ANYBLOB="140000f51000010000000000000000000000000a20000000000a01030000000000000000010000010900010073797a310000000054000000030a01040000000000000000010000000900030073797a31000000000900010073797a3100000000280004800800014000000005080002401b2fd2c51400030069703667726530"], 0xc4}, 0x1, 0x0, 0x0, 0x20004000}, 0x0) 1m25.496326861s ago: executing program 1 (id=3108): socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0xb, 0x59032, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x801) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000200)) r2 = userfaultfd(0x801) ioctl$UFFDIO_CONTINUE(r2, 0xc020aa07, &(0x7f0000000080)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r3 = dup(r0) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd=r0, 0x0, 0x0, 0x0, {}, 0x1}) io_uring_enter(0xffffffffffffffff, 0x2ded, 0x4000, 0x0, 0x0, 0x0) r4 = syz_init_net_socket$ax25(0x3, 0x5, 0x0) listen(r4, 0x0) accept4(r4, 0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) bind$inet6(0xffffffffffffffff, 0x0, 0x0) listen(0xffffffffffffffff, 0xfffffffc) openat$cdrom(0xffffff9c, &(0x7f0000000000), 0x0, 0x0) socket$inet(0x2, 0x4000000000080001, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0x94, 0x30, 0x1, 0x0, 0x0, {}, [{0x80, 0x1, [@m_ct={0x44, 0x1d, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x38, 0x1, 0x0, 0x0, {{0x8}, {0x10, 0x2, 0x0, 0x1, [@TCA_IFE_SMAC={0xa, 0x4, @remote}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x94}, 0x1, 0x0, 0x0, 0x804}, 0x0) r5 = syz_open_dev$usbmon(&(0x7f00000005c0), 0x0, 0x0) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x2000001, 0x13, r5, 0x1e67e000) unshare(0x22020600) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f00000000c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0xb, [@fwd={0xc}]}, {0x0, [0x5f, 0x0, 0x61, 0x61, 0x61, 0x0, 0x61, 0x5f, 0x5f]}}, &(0x7f0000000100)=""/254, 0x2f, 0xfe, 0x1, 0x1, 0x0, @void, @value}, 0x28) bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="1900000004001c00040000000200000000000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) epoll_create1(0x0) 1m24.556860274s ago: executing program 1 (id=3111): unshare(0x62040200) sched_setaffinity(0x0, 0x8, &(0x7f0000000080)=0x2) r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_LIST_LESSEES(r0, 0xc01064d1, &(0x7f0000000040)={0x1, 0x0, &(0x7f0000000080)=[0x0]}) r1 = openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', 0x0, 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB]) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0xc, &(0x7f0000000740)=@framed={{0x18, 0x2, 0x0, 0x0, 0xfffffffe}, [@printk={@lli, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x401}}, @call={0x85, 0x0, 0x0, 0xa0}]}, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x0, 0x2100, 0x0, &(0x7f0000000100), 0x0, 0x1008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) r3 = socket(0x1d, 0x2, 0x6) pipe(&(0x7f0000000000)={0xffffffffffffffff}) splice(r4, 0x0, r3, 0x0, 0xc, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) syz_fuse_handle_req(r1, 0x0, 0x0, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000001a00)='./file1\x00', 0xc0, 0x61) r5 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) ioctl$NBD_CLEAR_SOCK(r5, 0xab04) 1m23.646782666s ago: executing program 1 (id=3114): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) mkdir(&(0x7f0000000440)='./file1\x00', 0x0) (async) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000100)='autofs\x00', 0x0, &(0x7f0000000400)) (async) chdir(&(0x7f0000000700)='./file1\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) (async) r2 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000840), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r2, 0xc0189378, &(0x7f0000000c00)={{0x1, 0x1, 0x18, r1, {0xffffffffffffffff}}, './file0\x00'}) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000040)={0x2, {0x2, 0x0, 0x0, 0x0, 0x320}}) r4 = inotify_init1(0x800) (async) r5 = syz_clone(0x80, 0x0, 0x0, 0x0, 0x0, 0x0) fcntl$setown(r4, 0x8, r5) (async) fcntl$getownex(r4, 0x10, &(0x7f0000000140)={0x0, 0x0}) syz_open_procfs(r6, &(0x7f0000000400)='fd/4\x00') move_pages(r6, 0x8, &(0x7f0000000000)=[&(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil], &(0x7f0000000080)=[0x4, 0x401, 0xa378, 0x9, 0x9, 0x3], &(0x7f00000000c0)=[0x0, 0x0], 0x2) ioctl$sock_inet_tcp_SIOCOUTQ(r3, 0x5411, &(0x7f0000000180)) 1m23.646416253s ago: executing program 1 (id=3115): r0 = epoll_create1(0x0) r1 = epoll_create1(0x0) r2 = fcntl$dupfd(r0, 0x0, r0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f0000000040)) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000004cc311ec8500000075000000a70000000800000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f00000005c0)='mm_migrate_pages\x00', r3}, 0x10) r4 = socket(0x23, 0x5, 0x0) connect$pppl2tp(r4, &(0x7f0000000940)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x4e22, @multicast1}, 0x2, 0x0, 0x3, 0x4}}, 0x2e) connect$inet(0xffffffffffffffff, 0x0, 0x0) socket(0x2b, 0x1, 0x1) r5 = openat$autofs(0xffffffffffffff9c, &(0x7f00000006c0), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r5, 0xc018937e, &(0x7f0000000700)={{0xffffff1f, 0x1, 0x18}, './file0\x00'}) bind$alg(0xffffffffffffffff, 0x0, 0x0) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r6, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @empty}, 0x1c) sendto$inet6(r6, 0x0, 0x0, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) openat$vnet(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r7 = syz_open_dev$sndmidi(&(0x7f0000000100), 0x2, 0x141121) r8 = dup(r7) write$6lowpan_enable(r8, &(0x7f0000000000)='0', 0xfffffd2c) r9 = syz_io_uring_setup(0x6d8a, &(0x7f0000000300)={0x0, 0x40ac, 0x10000, 0x2, 0x3f, 0x0, r8}, &(0x7f0000000180)=0x0, &(0x7f00000001c0)=0x0) capset(&(0x7f0000000000)={0x20080522}, 0x0) syz_io_uring_submit(r10, r11, &(0x7f0000000140)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r7}) io_uring_enter(r9, 0x2def, 0x4000, 0x0, 0x0, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x2000003, 0x97052, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000126000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, 0x2) 1m22.186836371s ago: executing program 1 (id=3116): mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mkdir(0x0, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f00000002c0)={0xa, 0x4e24}, 0x1c) sendmmsg$inet6(r0, 0x0, 0x0, 0xc8040) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000140)={0x2, @raw_data="dea233684c996156af0d4bd8e3300217e750b8c97b7123d48003e7e1d3be5f710c41a1db6719881876e9bcc6e2f73c67cc6b675eb43188b5b7f9f898868de9a9c5d536d418ba283121a73a5aba55a87d2a2525295f4492bbde02ad8bc8e88779f2de06f38e99172df4d45b6f13c813dee4230c204a93172922b778fef7a1f89ce876bb89d44cd705bbb28db4869dfac20d928950507acd92c02d17f51b0a627539f6e0a0bdb92004bc6252cd35e8cd100962db9a83ad63a4e7e1ca17c1b6aac63fefa9bebdbe429d"}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r2, 0x0, 0x2a, &(0x7f0000000180)={0xfffffffe, {{0x2, 0x0, @empty}}}, 0x84) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x48}}, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'bridge0\x00'}) close(r2) socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet_group_source_req(r2, 0x0, 0x2e, &(0x7f0000000a00)={0x2, {{0x2, 0x2000, @dev={0xac, 0x14, 0x14, 0x1b}}}, {{0x2, 0x0, @empty}}}, 0x104) sendmmsg(r0, &(0x7f00000092c0), 0x4ff, 0x7ffffff7) 1m22.067604327s ago: executing program 35 (id=3116): mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mkdir(0x0, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f00000002c0)={0xa, 0x4e24}, 0x1c) sendmmsg$inet6(r0, 0x0, 0x0, 0xc8040) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000140)={0x2, @raw_data="dea233684c996156af0d4bd8e3300217e750b8c97b7123d48003e7e1d3be5f710c41a1db6719881876e9bcc6e2f73c67cc6b675eb43188b5b7f9f898868de9a9c5d536d418ba283121a73a5aba55a87d2a2525295f4492bbde02ad8bc8e88779f2de06f38e99172df4d45b6f13c813dee4230c204a93172922b778fef7a1f89ce876bb89d44cd705bbb28db4869dfac20d928950507acd92c02d17f51b0a627539f6e0a0bdb92004bc6252cd35e8cd100962db9a83ad63a4e7e1ca17c1b6aac63fefa9bebdbe429d"}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r2, 0x0, 0x2a, &(0x7f0000000180)={0xfffffffe, {{0x2, 0x0, @empty}}}, 0x84) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x48}}, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'bridge0\x00'}) close(r2) socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet_group_source_req(r2, 0x0, 0x2e, &(0x7f0000000a00)={0x2, {{0x2, 0x2000, @dev={0xac, 0x14, 0x14, 0x1b}}}, {{0x2, 0x0, @empty}}}, 0x104) sendmmsg(r0, &(0x7f00000092c0), 0x4ff, 0x7ffffff7) 48.746882974s ago: executing program 6 (id=3014): socket$inet(0x2, 0xa, 0x8) r0 = socket$kcm(0x11, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000200)={&(0x7f0000001340)=@hci={0x1f, 0xfffc, 0x47}, 0x80, 0x0}, 0x0) getsockopt$sock_buf(r0, 0x1, 0x1c, 0x0, &(0x7f0000000100)=0xffffffffffffff5c) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [], {0x14}}, 0x1cc}, 0x1, 0x0, 0x0, 0x40894}, 0x4) socket$inet(0x2, 0xa, 0x8) (async) socket$kcm(0x11, 0x2, 0x0) (async) sendmsg$kcm(r0, &(0x7f0000000200)={&(0x7f0000001340)=@hci={0x1f, 0xfffc, 0x47}, 0x80, 0x0}, 0x0) (async) getsockopt$sock_buf(r0, 0x1, 0x1c, 0x0, &(0x7f0000000100)=0xffffffffffffff5c) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async) sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [], {0x14}}, 0x1cc}, 0x1, 0x0, 0x0, 0x40894}, 0x4) (async) 40.712887448s ago: executing program 6 (id=3014): socket$inet(0x2, 0xa, 0x8) r0 = socket$kcm(0x11, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000200)={&(0x7f0000001340)=@hci={0x1f, 0xfffc, 0x47}, 0x80, 0x0}, 0x0) getsockopt$sock_buf(r0, 0x1, 0x1c, 0x0, &(0x7f0000000100)=0xffffffffffffff5c) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [], {0x14}}, 0x1cc}, 0x1, 0x0, 0x0, 0x40894}, 0x4) socket$inet(0x2, 0xa, 0x8) (async) socket$kcm(0x11, 0x2, 0x0) (async) sendmsg$kcm(r0, &(0x7f0000000200)={&(0x7f0000001340)=@hci={0x1f, 0xfffc, 0x47}, 0x80, 0x0}, 0x0) (async) getsockopt$sock_buf(r0, 0x1, 0x1c, 0x0, &(0x7f0000000100)=0xffffffffffffff5c) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async) sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [], {0x14}}, 0x1cc}, 0x1, 0x0, 0x0, 0x40894}, 0x4) (async) 32.76863213s ago: executing program 6 (id=3014): socket$inet(0x2, 0xa, 0x8) r0 = socket$kcm(0x11, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000200)={&(0x7f0000001340)=@hci={0x1f, 0xfffc, 0x47}, 0x80, 0x0}, 0x0) getsockopt$sock_buf(r0, 0x1, 0x1c, 0x0, &(0x7f0000000100)=0xffffffffffffff5c) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [], {0x14}}, 0x1cc}, 0x1, 0x0, 0x0, 0x40894}, 0x4) socket$inet(0x2, 0xa, 0x8) (async) socket$kcm(0x11, 0x2, 0x0) (async) sendmsg$kcm(r0, &(0x7f0000000200)={&(0x7f0000001340)=@hci={0x1f, 0xfffc, 0x47}, 0x80, 0x0}, 0x0) (async) getsockopt$sock_buf(r0, 0x1, 0x1c, 0x0, &(0x7f0000000100)=0xffffffffffffff5c) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async) sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [], {0x14}}, 0x1cc}, 0x1, 0x0, 0x0, 0x40894}, 0x4) (async) 22.705100741s ago: executing program 6 (id=3014): socket$inet(0x2, 0xa, 0x8) r0 = socket$kcm(0x11, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000200)={&(0x7f0000001340)=@hci={0x1f, 0xfffc, 0x47}, 0x80, 0x0}, 0x0) getsockopt$sock_buf(r0, 0x1, 0x1c, 0x0, &(0x7f0000000100)=0xffffffffffffff5c) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [], {0x14}}, 0x1cc}, 0x1, 0x0, 0x0, 0x40894}, 0x4) socket$inet(0x2, 0xa, 0x8) (async) socket$kcm(0x11, 0x2, 0x0) (async) sendmsg$kcm(r0, &(0x7f0000000200)={&(0x7f0000001340)=@hci={0x1f, 0xfffc, 0x47}, 0x80, 0x0}, 0x0) (async) getsockopt$sock_buf(r0, 0x1, 0x1c, 0x0, &(0x7f0000000100)=0xffffffffffffff5c) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async) sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [], {0x14}}, 0x1cc}, 0x1, 0x0, 0x0, 0x40894}, 0x4) (async) 14.651399504s ago: executing program 6 (id=3014): socket$inet(0x2, 0xa, 0x8) r0 = socket$kcm(0x11, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000200)={&(0x7f0000001340)=@hci={0x1f, 0xfffc, 0x47}, 0x80, 0x0}, 0x0) getsockopt$sock_buf(r0, 0x1, 0x1c, 0x0, &(0x7f0000000100)=0xffffffffffffff5c) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [], {0x14}}, 0x1cc}, 0x1, 0x0, 0x0, 0x40894}, 0x4) socket$inet(0x2, 0xa, 0x8) (async) socket$kcm(0x11, 0x2, 0x0) (async) sendmsg$kcm(r0, &(0x7f0000000200)={&(0x7f0000001340)=@hci={0x1f, 0xfffc, 0x47}, 0x80, 0x0}, 0x0) (async) getsockopt$sock_buf(r0, 0x1, 0x1c, 0x0, &(0x7f0000000100)=0xffffffffffffff5c) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async) sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [], {0x14}}, 0x1cc}, 0x1, 0x0, 0x0, 0x40894}, 0x4) (async) 11.363991967s ago: executing program 4 (id=3431): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x1, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r0}, 0x10) r1 = openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000440)={0x0, 0x18, 0xfa00, {0x4, &(0x7f00000000c0), 0x106, 0x5}}, 0x20) r2 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000240)=ANY=[@ANYBLOB="010000000000000001000000000000000000000000000000001b0300ff"]) openat$vicodec1(0xffffff9c, &(0x7f0000000200), 0x2, 0x0) r3 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='xprt_reserve\x00', r4, 0x0, 0x1}, 0x18) sendmsg$netlink(r3, 0x0, 0x0) ioctl$KVM_SET_NESTED_STATE(r2, 0x4080aebf, &(0x7f0000000300)={{0x3, 0x0, 0x80, {0x8080000, 0x80a0000}}, "f4cbeeb756336fcf354a429bfd496c66a6a4f391a9710cc234e0a8d04e9d6d0d53390ee30ef2ba18224437ed8df5c86b9713586059380fc7d773e3a3f0d06dfacb4acf381f5a5b537f66d15928472559b84684003d398f5d3bc1bca7aee5c39385bcd0062388842a1eaa099803119b61ff83003f7dfba2c0081223274eff7a2fe580a4233b21c1829a03dd7c60a1cce7bc783a2ab74c41b5b598332818dcd14c49c5352c4ce77bae6006bf89e7ac74ca18139fa0243743969692640b3ecf1fd9ae1ba224a2da12419f6733c466e8594b045b350c62c05176928fc37ee273864fde3aef1171730108a4b3eac583bdeb123252b2ff8c7f3183f5a3dd7872b3a7922e0cb24688273f7d64877ce789e7c6405bfedd12bc33c53738fd2d3de169dd9ad605bbab8f58618c9c170cae78c480438d87a12131be8e0014fb95b5f3ee54525ec93dbb3f06fb2c75edf5fd47bcc118c8c618c1b61109a9ce992441f83f42a0e7324e433d3cca61b0a96e60b650b5d42f5b8175311f8d2002407270ffdbea88bcc6a5920bc94d06851686c84224396f3ee2ec94676d3295ca98ddded2fa62603fe47d33f58a2594831df881623b18ebe95a00db267532b00ffcb501528c69632365d447ebcf2ecaab61d8727c7d2eb6bb0531c380961147d83686024682999e46db6a2ef4c0b29732fc75d72d0fdaba29a525a7a9e42342cc848034b93187170c0dffbe330ff955ddb4c4dce051c653da2db1f47992b9a6e71e05e31d9966123b59433f2ebe4e2faa307af9bd6d6569b81180f67c62a1d434ef19e88b2a49ddb4af972623054c5896b993b31388dd5d96f991aa6a37c151d37a5884eae88db6e4b77d6ef526e13ff31134228b64a5e844dbc3f8b549fffe41597abdfe235d080e3e3e9068eb37b0653a2dff65c846819b1427feca1a90247a69ba7699af1f04b90d1a0ceec2c1b1fc9bf20626f7531aa7c4e5ba6c84e761553fc4a76626cf9da7b9602464aba0515a1994b913eded69e623a452428d9037ddce882671f6ac133660296ce44118ab4bb5b3e6a3126a55168005227b3575673066258eb4ff5c23805ed1728f249283498b0e67e12dfba02bacae23f676a690e842bf02ab002b756e7c5153cf8bd4580e1be26ccc77e46a6d7166a5008034e1be6eaf5c6c44bd43a3a722f1697d6a46871eb49ca5773c7b3066ae24a6548841fb73320667ba1a0c6a484019d1aab525d85061e16cb129e9b4c1c93aa2ba5e193c214e158b69ff7cee0086535116d59c154e08f2817f66eb90af5f704ef6ec4cabfaef20eeba1ba54bd9cf6605c54706126f6701335bc8e8cbd1ced11ef86b8f4a20ddea4568983b4df60822f736e5970ac4a07af71cfbfff9292e9143f2cba391cc8a9495fd76a92f8bb6b01b8f94154e6397cb4bab66eaf623f590da17d7e244289485e00673a93a93b3fbaca0caf98529e788c9cceb457d803af7e7c2d5a27fff8d60f44a911f05fff39af3254151f1c0b43c80d9b6e67aa03fd1e9e0d2ac8f941d29ef65152a46d79f5a66b21867dd3446dd6c47fee6e8c94eccd58dbf37cb08536ece2d8e49892f25e2339faa66f6c04f12572e0ef4391b3db9ac8b509d43de347f7bd3c36542f701f8f9f1ea094ab71a0c83f0d3b78d6ff603b5f3ea0a8b2e36931cca5c1a9a27d582769a4f82053fae03a8cc17b19edd843a9ec6171b806af452eac111ac9f4940c4f8ff385fa07f43684fea51dc1610efbd6cf63427f084819f9e5525093d38b9977d7ba230ddbeccf05ddc7f12be568a81cbacb40e7e08da317b6ab01ff8102fe3539cc8d37e372fbb7d34201a6e1f4e208093011f3949d04eae986a93fedea49fa388142fbb14b9a04ee2b47843aa513628835c1e2079e726322deded47a30d2413028b1e62427ac13c59bb2cab4bf91a90dc1a48ce03c2fadcc86a7e45ba3bdef1671009c2d96f349cc9cdbaf538521c58d92f92a8b6c2fa1283a37c718a6f0c4480e35eb8264a00f6603e31d6a99d01782ed2a978f91387504134765faf606080203a722840cbdb0b59468c81484b7cd7fedc4bf6374515bdc2d881f9def756e454ebf06ce24c610313abc56d6884e27f56197580ef95ced24e6640dc9d6440d341934a75f877031e0440b6b89ca9088d6ac74d2acddfbbaa7881caeb8dbd8f4713b3c67ee60a0e8c43537bf1c6e24ddcbf2c13f45c227424156f6e1176424556652a0ce3dac4c76ba99763bc2d70e8916e2ba5fb46a94e9ec58ce304fa5b6dc5bc99aa82b84432d29917e3113c34e83beae5d047f7c85bc8af02f5c05e46a5bb5ad5a071b58b8cc6c70ee8ff80b223a0c60a9008503a647f2de9d3b9e9d245419a2b21535cf243d4c96a1e1db05c59ed172d72f2d65039650c8b8409750303b49095b0ddbed680ce4f281d40ad7b35ed4057057b7cae99099aa3cfbba62a7f1b8164d30b454a9d43cbb7129d3798a3e135f12fcea062c834c779eebd6e617dd36960632c9bfb18bfa506f4b0d3a01a33be4b1f78ab8c94ce7a1edadd8e1f1fa3ddedcd8dd8d08787c22920a770c75c565e2e34317338f4d09eeff2c5318bda4c141ecc9237c5715f76f1867e0033ae3c8b8d1b916579631c91b3d59c76c5ed64349f0964c836062a1dd74a3a8e7b26197acb18b25ceabf9d82b80ff44020878404be630776b24590e9ca70150e7ec739bd7a0fe941043925315a0dc6a31f55acb4f5c5a4c1f1894633a52c7e0a1ffac99db84c9a3a832570c2b6b1c22ad4705b793590b56d988c92213936cf038f94dfcfd863b39fb8b34838cd6dd77c8b6c9dfd491adfeab04a63d75498070dc383594b140d89ce405c20e748289d0d44dc24c594aa5619a0592872f84f975a70d9aba612d85c40224c5af31c65a31033213a6d31745f448797ed1506a023290af61e7f28e305d2ee8d4a5f4423ff9ec6acb0414f9a177ed43b087b645d5b49140a3165899fbc280697c0c6b6ce24e34107f0cfd50214086998675d476b71457e53582c81cad64483e07eace8c3d7f81ec239cd404afebd6b7703f0fea9d6d68efc46b018b2c029ebd65a0057dce75853d52d63c95ee9ae0970e3bd94173b368cb1c4d75af10b4d0f8f4ed217a927d978e5b663483b05df6d55be88a5c8eef612105a41497c877dc8603c9517f99416a94aefb56f4a193e2c7f7a5720ccee8a9f2c32a88d516b194f30774caa0d82da53041d856c676a7b1115268a0565d9f96631f351388680a6530665b3f602c49b5d256a4156ef9633c0f19b82115c131f4620619273acf00ddd903290e4c2464ea92678835233284f6f32590272e15a9742a8e1a2701d3b79460903816a21ccbcc6e87391c9b53bb740c63cc6ba67a1c5fd74c63bee4eada19c3713863724fa9165213045f90fa3a6cb0ba3a7cc8f339f547421680171be36b13b15f3e3c3db61b1db10657dabea859a4a4c4c86d6dc1a069060ba7f5ac4631226019692318e0024f0e564e1bfb942533aac251d5238a200915f827bfa98ef9f0ad8769899080e7e961419a550f339c3594906062c0813dde20769c4598b1e7851b0d564e7700de04ce0286d32135ca295631d792818a1d41da2d6d107a2eda082d7dd3cc790ad69c2ab29e1edf41932e5279fe9c605542f3cf442a5098f4fe7082969efe9d99f8ce41daaad5297a15741678629ecd009d102718d90dc0169ac9019a22a0fee9e74666d754cc737dbd26f7cfcd0017b3d96728e866a26f55e049bba592b5d77d4e638e2f8b04e9234398a4c1a265b4e058883a15828ffe19134166be7cbcc2efa4b05b6700318f09372b9b77a503f0cef6be3419a0539d3f11c5a10031babb91d22f65f36bc93632dfc7983480204760c537c1c672eb7033d23d2e694e8f54a5765395fa0cc7ab70366a2fbd6206f6f960ac5472ccc657ade101d59a0e2ed845be80a45d1c8ae08958e5b0e45ed9f1efcbfa4233b19797f22ebf0687bc7a00290878b80ea11d6e60f435f0a7ca52abea2bec404f5a6696bbd796f7b3e987eddae9f1ff2648dbf47bcce61604a35de7379cbbf8cabfc186be6d1cf8d1294acc6240eef87def4fa57127ed21b1f08030955d068b8a5fccd6d8ae1382272fe959cd96200b3e476005ab64f9f1dcbb63f7dbef447ca55a4a05b70c56b1b31dc6da9f72b0006f48b514f51c48d18ddc8256471a22da7278e3e92369c753b219b1dfcd3d7df750a4f40f114b75921cb6abc70b692e8324e846a3400650f00ba6dfd95db2e84c21676d15dcf48c67ab3241b949fcb87a260128ab0693f7b95df9afbd021721b2ac4d7b6ea14295c6adf76bf088beb49c5c52c8c121abb8ff2a0767ba042eca40804fad3bcd35d981586cd00430222e60dfce5a9c5851a1bd5a216ad393c39d2dea94599a32e16c375826ba191bb90a788b6bd19ddbf0d7f37c432a6eb53c5ace7fadd0f740e7c35ed073bad4d9a41b1c659e597e8f89455b057e798b172187b919a93f1e6a07008d70c3903eacc16574358ee064f41bf78090db48fde09a212f278a83c41b3b12df1441eac777bfa9d8d97d08cbafce1dd3043ecb7c4d8d710a2f3eec61965a518710c23175a92456565df30459ef5af71b24d29e29156ef75e0e29c169e6d8ab2292615bb021d5fd0dcea15586392e6b3ad45805316e0a581f8a579021d2323f6f5e61fa7ea3c04b3b52ffdaba8076f3a60868a30dd2a824b7f81598fb90e943ed8f5a4ed87f4bf090c37bcfe11dfa6432cfe7b1857a83c8186da769dad2c2816f2f6128644430180ffaa0ebf78b34c6f64586feffc7ac5d6785064c6ae6c1b1cc5246450a2aaf8e9e701745d3260fee5b0b5a83d3ed426c29bd830cca62b579fd25582a53a6f371c703703feae600feb47708a16b189eb08bbd01736c21ea31fc33feb2808a9c92ebeee90142312833f4086f0e5d0856b827c8291289f39cffcfd3847f50d94418fb69fc05b50fb9dc88b6fa1c0f1bd93f94adcdf8afced95cc3c688ca6a0869eb9cb8583f88664d8a5e40594bfb32e1e65c5683c65a9271ffe91766be4c4b80e4ca987e30c39ba985e1891041c7ac11c79bd0570eebf5f609105ca42fbe76f13b49a03eb8d8f1f1d94f945f23ac9b678811f82081acd59a520f6511a10b82230dee299652606eca7bef68cf2e2a7b65f2c44d761f9d4a110b64fda17787be8c48a9ba5dd76e069fc0ebc3c9f05928f4f01eee2d430318ff8146b7eb5eb3f61bb33be8182f652c1472d42e803bbe1744215c6b6d1a62cc523856db2111cd1423174bf79e9f5f6cf9ddae3f5e5d77ccd56b0299cfd05229f4871477b333e80123631db621a7a21348f7f54e4d0f968260fd22a4990a7fcc10475d4c4738c8d0714d65138e22ecbbb669ed9f1f86ab04298903273c2c4ac3892caea02b20b3aaeccacfd96f5f7618b0550427e2d2fbd9bc9b140974dfd71ded30a6b3ca95eaec0278258ee4b0ee46ed013de2eacd451d6e4f497371a8afb1ad147bb0f01f5582886546c35da6bacb40d536576a430f15da428835c9b83492ae39da41534dc1fab69145b4282090044dc713cda0bf4a2fd34430cf435978574a8d403612927f952985b38aae0e510d7d22513e6960c947ce3420d341e2f227bd73a23546e47ffe3f441c0d476495a783487dddda20e979718aac5233f986111ec63fe4846888275b63db19df930662185f826efb97113a6d4d20a0b2ec0a578d361d4d6890b68a0427f0a2d483f070cac4be55fdb25167910cfa7696ea44d6eda2addc51a00147971577ec387e5d72f77d250dbe783", "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"}) timer_create(0x8, &(0x7f00000002c0)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) mknod(&(0x7f0000000040)='./file0\x00', 0x8001420, 0x0) open$dir(&(0x7f0000000000)='./file0\x00', 0x0, 0x10) creat(&(0x7f0000000440)='./file0\x00', 0x0) close(0x5) 10.570695747s ago: executing program 4 (id=3433): socket$nl_generic(0x10, 0x3, 0x10) socket(0x10, 0x3, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) openat$vmci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) epoll_create1(0x0) socket(0x200000000000011, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x109000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) socket$can_raw(0x1d, 0x3, 0x1) socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, &(0x7f0000000100)={'batadv_slave_1\x00'}) socket$nl_route(0x10, 0x3, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x90}}, 0x0) 9.206644691s ago: executing program 4 (id=3437): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000240)={'pimreg\x00'}) unshare(0x6a040000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) unshare(0x10000c00) sendmsg$nl_xfrm(r0, 0x0, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="18050000000000fe000000004b64ffec850000007d000000040000000700000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x18) bind$alg(r1, 0x0, 0x0) r3 = accept4(r1, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f00000005c0)="ad00"/16, 0x10) sendmmsg$alg(r3, &(0x7f0000007c40)=[{0x0, 0x0, &(0x7f0000002fc0)=[{&(0x7f0000007180)="c54e3bc126f94457f17fe97287645915bab0a9bc33446ec55f76797f551c758a779f1b45dd9c218783601a881fb3c53a718bb2c5d2c280a109606bb4a75d21797f358df1af983363ff97ebf63262edf9a74cd73c0bd9e4d9e13cb83e15771af34d4d80ee8d7316b08d534cfdb6fba358018e7ff9ee0411e3d92847ccd0ede023436b0ff410d62aa6b76a593d425e2958b7fff02b", 0x94}, {&(0x7f0000007240)="6449f9775c2faa82d800b73c857e4c15a8c9a9b431333109698f69f63b2d5f635f5efb1321752a0b245544add9888f78a6e6d6ea5f1d1285c26230c2dec88a02db08bc11111f93fe073a200d9d83ba5ba5ad7b63c407810da2c5f428e5f4b783a5835f656be873d8115096dc7590cf80a14cefb2c5ae496f8fc84326ac8fa0590790430439a2e18bbdffb03d510c733200b0cfcaa104229ffceefe71e9bb2234196d870b804d74ae", 0xa8}, {&(0x7f0000007300)="fb71e375124c21377f3a93a2a9ad060007ec2c0e2469d842a3892de404c63baafdb6c4fc1897399c231747f6bcb515901323aa4e7a1f7dd58a4946e9e551f2ce2621f8c6a1fbc1ffa508a6aae02357464cfb933c1c5072d8", 0x58}, {&(0x7f0000008000)="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", 0x17d}], 0x4, &(0x7f0000007480)=[@assoc={0x10, 0x117, 0x4, 0x81}, @iv={0x60, 0x117, 0x2, 0x4d, "65c7245f59e438fb93c79f1be75dcff3dfe0175e0ad63ab91d427b3fcf5e1741adcf6c08bc6513e82aae763a2a270dea07b143d415cf95b2a0a66090f7b3ff984e58945c2a43a6ea2fea02bb1f"}, @iv={0xa4, 0x117, 0x2, 0x93, "c52087507221f9155db1eb5868d852780bfd535633f177847c98dc5d9ec380937ea950f61f3ed19a6fac527df7f422bef431037952cf18ee1fab10f58d30ad0df7b9a676c43b7e5fb8a2888e4234ce664866931c5d052db0682b753c93331619161aedbb0d9005961d4eed23bce3a602c5edab3091e462a8923618e39df2afd61abb67ffb222ee50cd3e79f659edfa580c7945"}, @iv={0xc4, 0x117, 0x2, 0xb4, "3672a32c327246d854209ad2b96f33c71a9113f3e643858b18aa1eac6621aed916766df6c688e2db6747f00f752b5f60d1640ab831785e8be7fcd8e3a65308078cfeb635dab4dcf2755f376a858199d088bd37a5cef40fb47154d3ec0336a23bf18e7841a2228f9dbca6432e7ceba3773f3a264c3a7493e13a07b27cdd864f206557b8bb449131940d08f0c56d387b8ea80f4a296fb76dd1ce8f7e5230a193e2da6618257cbfb0bf559a300df0372b2c27d84a23"}, @assoc={0x10, 0x117, 0x4, 0x10}], 0x1e8}, {0x0, 0x0, &(0x7f00000033c0)=[{&(0x7f0000007680)="e6c712e9848b954ae19fe2480e6335b1e4fc20838bf381b6007dcf36517a9f4f8a3c4ace2505adcce1e9fccd6ff8749612a1ed5e318dd7e4ba2e50e0a049508efd54c49cb3a0a262e3eeb63d899b610642314502c4586d616b90eb208fd52de5d9b450647d9fdd2d45fea76e0ec59bcced04a4057209acb41f277e706c218eb6d66fcf1a3914b6", 0x87}, {&(0x7f0000007740)="a21d376e37863178ade867f86aa81cb89fdab26fc1488a0da34f8c6d5e6e61f643e0db3633d408dfecfd4e43eb216d688ed5d0db72d301c66721d162d51ae8cadbe75c89d9829a33fa14f049d5bbd75cce299e8f77d2bec06499de7bbcd641c226457028947b0d79b67372af58a3f2c56a1b7bd11657c24cde8132e2725dc3c4e19ffa3e4fe039d11f7bc1d603a04835f6153a85e7b249c05abf470b8600605174ef7423140efcdcb941c248c3a1fde5624e9c87e6934223967a8fdf9bce9d61a4141c1fa9093186e206d1", 0xcb}], 0x2, &(0x7f0000008180)=ANY=[@ANYBLOB="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"], 0x11c, 0x20008010}, {0x0, 0x0, &(0x7f0000007ac0)=[{&(0x7f0000007980)="ca39e94e9fa78fd0436f679166cce88babbf187778682fc6533cf9ccb79273024c8f9c7250e4f6877e95fd12f4ef828b17be9d30c70681cff06319d0cf079af5c067c77ae3e96fb0b9ec19caaa964fb0050754ad3375230df866af4c2f1d", 0x5e}, {&(0x7f0000007a00)="f6b7a8ceb3db898cd4cec7b7d35d7bc23526b754be99a670d3dbd8846aa903af53000fc45816ec5b4d77da638de47fa0ac5453266fb908655d4fcf700ec5c6c53791d6bb6fd6bc1bdb42e1acbe31860624d4ffb536bfeca8adea88fc50c3045f4481e8058d0c", 0x66}, {&(0x7f0000007a80)="92d53787d1eeb689a8ba99e1303b9692529ae58ab65134df0c011cb553f3", 0x1e}], 0x3, &(0x7f0000007b00)=[@op={0x10}, @op={0x10, 0x117, 0x3, 0x1}, @op={0x10, 0x117, 0x3, 0x1}, @op={0x10, 0x117, 0x3, 0x1}, @op={0x10, 0x117, 0x3, 0x1}, @assoc={0x10, 0x117, 0x4, 0x5}, @assoc={0x10, 0x117, 0x4, 0x6}, @assoc={0x10, 0x117, 0x4, 0x3}], 0x80, 0x40}, {0x0, 0x0, &(0x7f0000007bc0)=[{&(0x7f0000007b80)="151d81c1fa9d5f", 0x7}], 0x1, &(0x7f0000007c00)=[@assoc={0x10, 0x117, 0x4, 0x7}, @op={0x10, 0x117, 0x3, 0x1}, @op={0x10, 0x117, 0x3, 0xd688708705a4cd8d}], 0x30, 0x20000000}], 0x4, 0x10) recvmmsg(r3, &(0x7f0000007840)=[{{&(0x7f0000000400)=@in={0x2, 0x0, @local}, 0x80, &(0x7f0000000580)=[{&(0x7f0000000280)=""/59, 0x3b}, {&(0x7f0000000480)=""/54, 0x36}, {&(0x7f0000000500)=""/12, 0xc}, {&(0x7f0000000600)=""/177, 0xb1}, {0x0}], 0x5, &(0x7f0000005780)=""/141, 0x8d}, 0x9}, {{&(0x7f0000000800)=@nfc, 0x80, &(0x7f0000000c00)=[{&(0x7f0000000880)=""/34, 0x22}, {&(0x7f00000008c0)=""/162, 0xa2}, {&(0x7f0000000980)=""/7, 0x7}, {&(0x7f00000009c0)=""/71, 0x47}, {&(0x7f0000000a40)=""/73, 0x49}, {&(0x7f0000000b40)=""/173, 0xad}], 0x6, &(0x7f0000000c40)=""/161, 0xa1}, 0x7}, {{0x0, 0x0, &(0x7f0000002f80)=[{&(0x7f0000000d00)=""/4096, 0x1000}, {&(0x7f0000007f00)=""/224, 0xe0}, {&(0x7f0000001e00)=""/43, 0x2b}, {&(0x7f0000001e40)=""/203, 0xcb}, {&(0x7f0000001f40)=""/35, 0x23}, {&(0x7f0000001f80)=""/4082, 0xff2}], 0x6, &(0x7f0000002fc0)}, 0x3}, {{&(0x7f0000003000)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @broadcast}}}, 0x80, &(0x7f0000003300)=[{&(0x7f0000003080)=""/237, 0xed}, {&(0x7f0000003180)=""/163, 0xa3}, {&(0x7f0000003240)=""/71, 0x47}, {&(0x7f00000032c0)=""/50, 0x32}], 0x4}, 0x97}, {{&(0x7f0000003340)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, 0x80, &(0x7f0000003480)=[{&(0x7f00000033c0)}, {&(0x7f0000003400)=""/77, 0x4d}], 0x2}}, {{0x0, 0x0, &(0x7f00000044c0)=[{&(0x7f00000034c0)=""/4096, 0x1000}], 0x1, &(0x7f0000004500)=""/122, 0x7a}, 0x5}, {{0x0, 0x0, &(0x7f0000005740)=[{&(0x7f0000004580)=""/4096, 0x1000}, {&(0x7f0000005580)=""/108, 0x6c}, {&(0x7f0000005600)=""/140, 0x8c}, {&(0x7f00000056c0)=""/85, 0x55}], 0x4, &(0x7f0000001d00)=""/184, 0xb8}, 0xfe9}, {{&(0x7f0000005840)=@alg, 0x80, &(0x7f0000005ac0)=[{&(0x7f00000058c0)=""/230, 0xe6}, {&(0x7f00000059c0)=""/102, 0x66}, {&(0x7f0000005a40)=""/126, 0x7e}], 0x3}}, {{&(0x7f0000005b00)=@qipcrtr, 0x80, &(0x7f0000005dc0)=[{&(0x7f0000007040)=""/65, 0x41}, {&(0x7f0000005bc0)=""/1, 0x1}, {&(0x7f0000005c00)=""/110, 0x6e}, {&(0x7f0000005c80)=""/36, 0x24}, {&(0x7f0000005cc0)=""/83, 0x53}, {&(0x7f0000005d40)=""/30, 0x1e}, {&(0x7f0000005d80)=""/27, 0x1b}], 0x7, &(0x7f0000005e00)=""/46, 0x2e}}, {{0x0, 0x0, &(0x7f0000007000)=[{&(0x7f0000005e40)=""/4096, 0x1000}, {&(0x7f0000006e40)=""/162, 0xa2}, {&(0x7f0000006f00)=""/107, 0x6b}, {&(0x7f0000006f80)=""/120, 0x78}], 0x4}, 0x8}], 0xa, 0x0, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r6, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) r7 = syz_open_dev$cec(&(0x7f0000000000), 0x0, 0x12b001) ioctl$CEC_ADAP_S_LOG_ADDRS(r7, 0xc05c6104, &(0x7f0000000740)={"524ebce3", 0x5, 0x5, 0x81, 0x3, 0x16dc, "0d0767fcf850456f2290e729cf77f1", "abd3fea5", "44b4dd9e", "ad2e21d3", ["d4150c57d062e240fbe214a9", "850f3d04d42a1661562d034e", "82bc0bcad17be13050ccc10d", "6631cbd8c92f5461e2ea90f9"]}) ioctl$CEC_TRANSMIT(r7, 0xc0386105, &(0x7f00000003c0)={0x0, 0xffffffffffffffff, 0x6, 0x6, 0xe30, 0x3ff, "c2a0da871813beebb98f6cd3bde10363", 0x8, 0x9, 0x9, 0x2, 0x0, 0x0, 0xfc}) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000140)=0x14) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r8, @ANYBLOB="01000000000000001c0012000c000100626f6e64"], 0x3c}}, 0x0) setsockopt$sock_int(r4, 0x1, 0x2e, &(0x7f00000000c0)=0x7, 0x4) sendmsg$DCCPDIAG_GETSOCK(r4, &(0x7f00000004c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000280)=ANY=[], 0x50}, 0x1, 0x0, 0x0, 0x10}, 0xc855) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x4, 0x3032, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) unshare(0xc000000) socket$inet6(0xa, 0x3, 0x8000000003c) 8.764807036s ago: executing program 4 (id=3441): mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mkdir(0x0, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000380)={0xa, 0x14e24}, 0x1c) connect$inet6(r0, 0x0, 0x0) sendmmsg$inet6(r0, 0x0, 0x0, 0xc8040) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000140)={0x2, @raw_data="dea233684c996156af0d4bd8e3300217e750b8c97b7123d48003e7e1d3be5f710c41a1db6719881876e9bcc6e2f73c67cc6b675eb43188b5b7f9f898868de9a9c5d536d418ba283121a73a5aba55a87d2a2525295f4492bbde02ad8bc8e88779f2de06f38e99172df4d45b6f13c813dee4230c204a93172922b778fef7a1f89ce876bb89d44cd705bbb28db4869dfac20d928950507acd92c02d17f51b0a627539f6e0a0bdb92004bc6252cd35e8cd100962db9a83ad63a4e7e1ca17c1b6aac63fefa9bebdbe429d"}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r2, 0x0, 0x2a, &(0x7f0000000180)={0xfffffffe, {{0x2, 0x0, @empty}}}, 0x84) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x48}}, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'bridge0\x00'}) close(r2) socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet_group_source_req(r2, 0x0, 0x2e, &(0x7f0000000a00)={0x2, {{0x2, 0x2000, @dev={0xac, 0x14, 0x14, 0x1b}}}, {{0x2, 0x0, @empty}}}, 0x104) sendmmsg(r0, &(0x7f00000092c0), 0x4ff, 0x7ffffff7) 7.936364328s ago: executing program 4 (id=3444): openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0x14, 0x30, 0x1}, 0x14}, 0x1, 0x0, 0x0, 0x804}, 0x10000800) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) socket$packet(0x11, 0x2, 0x300) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000300)={'syztnl2\x00', &(0x7f0000000040)={'syztnl2\x00', 0x0, 0x4, 0xfe, 0x2, 0x4038a09, 0x4, @loopback={0xe0}, @mcast2={0xff, 0x5}, 0x0, 0x0, 0x0, 0x5}}) syz_open_dev$sndctrl(&(0x7f0000000000), 0x1, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000000)='net/fib_triestat\x00') preadv(r4, &(0x7f00000001c0)=[{&(0x7f0000001200)=""/4096, 0x1000}], 0x1, 0x0, 0x6) 7.015818209s ago: executing program 2 (id=3446): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x0, 0x0) r0 = open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0x0) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) connect$inet(r1, &(0x7f00000009c0)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10) sendmmsg(r1, &(0x7f0000002f00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) recvmmsg(r1, &(0x7f0000003e40)=[{{0x0, 0x0, &(0x7f0000003bc0)=[{&(0x7f0000003a00)=""/190, 0xbe}], 0x1}}], 0x1, 0x40000121, 0x0) fcntl$setsig(r0, 0xa, 0x13) fcntl$setlease(r0, 0x400, 0x0) timer_create(0x7, &(0x7f00000000c0)={0x0, 0x12}, &(0x7f0000000280)) timer_settime(0x0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) truncate(&(0x7f0000000040)='./file0\x00', 0x0) 6.91099492s ago: executing program 6 (id=3014): socket$inet(0x2, 0xa, 0x8) r0 = socket$kcm(0x11, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000200)={&(0x7f0000001340)=@hci={0x1f, 0xfffc, 0x47}, 0x80, 0x0}, 0x0) getsockopt$sock_buf(r0, 0x1, 0x1c, 0x0, &(0x7f0000000100)=0xffffffffffffff5c) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [], {0x14}}, 0x1cc}, 0x1, 0x0, 0x0, 0x40894}, 0x4) socket$inet(0x2, 0xa, 0x8) (async) socket$kcm(0x11, 0x2, 0x0) (async) sendmsg$kcm(r0, &(0x7f0000000200)={&(0x7f0000001340)=@hci={0x1f, 0xfffc, 0x47}, 0x80, 0x0}, 0x0) (async) getsockopt$sock_buf(r0, 0x1, 0x1c, 0x0, &(0x7f0000000100)=0xffffffffffffff5c) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async) sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [], {0x14}}, 0x1cc}, 0x1, 0x0, 0x0, 0x40894}, 0x4) (async) 5.522335591s ago: executing program 7 (id=3449): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000240)={'pimreg\x00'}) unshare(0x6a040000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) unshare(0x10000c00) sendmsg$nl_xfrm(r0, 0x0, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="18050000000000fe000000004b64ffec850000007d000000040000000700000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x18) bind$alg(r1, 0x0, 0x0) r3 = accept4(r1, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f00000005c0)="ad00"/16, 0x10) sendmmsg$alg(r3, &(0x7f0000007c40)=[{0x0, 0x0, &(0x7f0000002fc0)=[{&(0x7f0000007180)="c54e3bc126f94457f17fe97287645915bab0a9bc33446ec55f76797f551c758a779f1b45dd9c218783601a881fb3c53a718bb2c5d2c280a109606bb4a75d21797f358df1af983363ff97ebf63262edf9a74cd73c0bd9e4d9e13cb83e15771af34d4d80ee8d7316b08d534cfdb6fba358018e7ff9ee0411e3d92847ccd0ede023436b0ff410d62aa6b76a593d425e2958b7fff02b", 0x94}, {&(0x7f0000007240)="6449f9775c2faa82d800b73c857e4c15a8c9a9b431333109698f69f63b2d5f635f5efb1321752a0b245544add9888f78a6e6d6ea5f1d1285c26230c2dec88a02db08bc11111f93fe073a200d9d83ba5ba5ad7b63c407810da2c5f428e5f4b783a5835f656be873d8115096dc7590cf80a14cefb2c5ae496f8fc84326ac8fa0590790430439a2e18bbdffb03d510c733200b0cfcaa104229ffceefe71e9bb2234196d870b804d74ae", 0xa8}, {&(0x7f0000007300)="fb71e375124c21377f3a93a2a9ad060007ec2c0e2469d842a3892de404c63baafdb6c4fc1897399c231747f6bcb515901323aa4e7a1f7dd58a4946e9e551f2ce2621f8c6a1fbc1ffa508a6aae02357464cfb933c1c5072d8", 0x58}, {&(0x7f0000008000)="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", 0x17d}], 0x4, &(0x7f0000007480)=[@assoc={0x10, 0x117, 0x4, 0x81}, @iv={0x60, 0x117, 0x2, 0x4d, "65c7245f59e438fb93c79f1be75dcff3dfe0175e0ad63ab91d427b3fcf5e1741adcf6c08bc6513e82aae763a2a270dea07b143d415cf95b2a0a66090f7b3ff984e58945c2a43a6ea2fea02bb1f"}, @iv={0xa4, 0x117, 0x2, 0x93, "c52087507221f9155db1eb5868d852780bfd535633f177847c98dc5d9ec380937ea950f61f3ed19a6fac527df7f422bef431037952cf18ee1fab10f58d30ad0df7b9a676c43b7e5fb8a2888e4234ce664866931c5d052db0682b753c93331619161aedbb0d9005961d4eed23bce3a602c5edab3091e462a8923618e39df2afd61abb67ffb222ee50cd3e79f659edfa580c7945"}, @iv={0xc4, 0x117, 0x2, 0xb4, "3672a32c327246d854209ad2b96f33c71a9113f3e643858b18aa1eac6621aed916766df6c688e2db6747f00f752b5f60d1640ab831785e8be7fcd8e3a65308078cfeb635dab4dcf2755f376a858199d088bd37a5cef40fb47154d3ec0336a23bf18e7841a2228f9dbca6432e7ceba3773f3a264c3a7493e13a07b27cdd864f206557b8bb449131940d08f0c56d387b8ea80f4a296fb76dd1ce8f7e5230a193e2da6618257cbfb0bf559a300df0372b2c27d84a23"}, @assoc={0x10, 0x117, 0x4, 0x10}], 0x1e8}, {0x0, 0x0, &(0x7f00000033c0)=[{&(0x7f0000007680)="e6c712e9848b954ae19fe2480e6335b1e4fc20838bf381b6007dcf36517a9f4f8a3c4ace2505adcce1e9fccd6ff8749612a1ed5e318dd7e4ba2e50e0a049508efd54c49cb3a0a262e3eeb63d899b610642314502c4586d616b90eb208fd52de5d9b450647d9fdd2d45fea76e0ec59bcced04a4057209acb41f277e706c218eb6d66fcf1a3914b6", 0x87}, {&(0x7f0000007740)="a21d376e37863178ade867f86aa81cb89fdab26fc1488a0da34f8c6d5e6e61f643e0db3633d408dfecfd4e43eb216d688ed5d0db72d301c66721d162d51ae8cadbe75c89d9829a33fa14f049d5bbd75cce299e8f77d2bec06499de7bbcd641c226457028947b0d79b67372af58a3f2c56a1b7bd11657c24cde8132e2725dc3c4e19ffa3e4fe039d11f7bc1d603a04835f6153a85e7b249c05abf470b8600605174ef7423140efcdcb941c248c3a1fde5624e9c87e6934223967a8fdf9bce9d61a4141c1fa9093186e206d1", 0xcb}], 0x2, &(0x7f0000008180)=ANY=[@ANYBLOB="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"], 0x11c, 0x20008010}, {0x0, 0x0, &(0x7f0000007ac0)=[{&(0x7f0000007980)="ca39e94e9fa78fd0436f679166cce88babbf187778682fc6533cf9ccb79273024c8f9c7250e4f6877e95fd12f4ef828b17be9d30c70681cff06319d0cf079af5c067c77ae3e96fb0b9ec19caaa964fb0050754ad3375230df866af4c2f1d", 0x5e}, {&(0x7f0000007a00)="f6b7a8ceb3db898cd4cec7b7d35d7bc23526b754be99a670d3dbd8846aa903af53000fc45816ec5b4d77da638de47fa0ac5453266fb908655d4fcf700ec5c6c53791d6bb6fd6bc1bdb42e1acbe31860624d4ffb536bfeca8adea88fc50c3045f4481e8058d0c", 0x66}, {&(0x7f0000007a80)="92d53787d1eeb689a8ba99e1303b9692529ae58ab65134df0c011cb553f3", 0x1e}], 0x3, &(0x7f0000007b00)=[@op={0x10}, @op={0x10, 0x117, 0x3, 0x1}, @op={0x10, 0x117, 0x3, 0x1}, @op={0x10, 0x117, 0x3, 0x1}, @op={0x10, 0x117, 0x3, 0x1}, @assoc={0x10, 0x117, 0x4, 0x5}, @assoc={0x10, 0x117, 0x4, 0x6}, @assoc={0x10, 0x117, 0x4, 0x3}], 0x80, 0x40}, {0x0, 0x0, &(0x7f0000007bc0)=[{&(0x7f0000007b80)="151d81c1fa9d5f", 0x7}], 0x1, &(0x7f0000007c00)=[@assoc={0x10, 0x117, 0x4, 0x7}, @op={0x10, 0x117, 0x3, 0x1}, @op={0x10, 0x117, 0x3, 0xd688708705a4cd8d}], 0x30, 0x20000000}], 0x4, 0x10) recvmmsg(r3, &(0x7f0000007840)=[{{&(0x7f0000000400)=@in={0x2, 0x0, @local}, 0x80, &(0x7f0000000580)=[{&(0x7f0000000280)=""/59, 0x3b}, {&(0x7f0000000480)=""/54, 0x36}, {&(0x7f0000000500)=""/12, 0xc}, {&(0x7f0000000600)=""/177, 0xb1}, {0x0}], 0x5, &(0x7f0000005780)=""/141, 0x8d}, 0x9}, {{&(0x7f0000000800)=@nfc, 0x80, &(0x7f0000000c00)=[{&(0x7f0000000880)=""/34, 0x22}, {&(0x7f00000008c0)=""/162, 0xa2}, {&(0x7f0000000980)=""/7, 0x7}, {&(0x7f00000009c0)=""/71, 0x47}, {&(0x7f0000000a40)=""/73, 0x49}, {&(0x7f0000000b40)=""/173, 0xad}], 0x6, &(0x7f0000000c40)=""/161, 0xa1}, 0x7}, {{0x0, 0x0, &(0x7f0000002f80)=[{&(0x7f0000000d00)=""/4096, 0x1000}, {&(0x7f0000007f00)=""/224, 0xe0}, {&(0x7f0000001e00)=""/43, 0x2b}, {&(0x7f0000001e40)=""/203, 0xcb}, {&(0x7f0000001f40)=""/35, 0x23}, {&(0x7f0000001f80)=""/4082, 0xff2}], 0x6, &(0x7f0000002fc0)}, 0x3}, {{&(0x7f0000003000)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @broadcast}}}, 0x80, &(0x7f0000003300)=[{&(0x7f0000003080)=""/237, 0xed}, {&(0x7f0000003180)=""/163, 0xa3}, {&(0x7f0000003240)=""/71, 0x47}, {&(0x7f00000032c0)=""/50, 0x32}], 0x4}, 0x97}, {{&(0x7f0000003340)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, 0x80, &(0x7f0000003480)=[{&(0x7f00000033c0)}, {&(0x7f0000003400)=""/77, 0x4d}], 0x2}}, {{0x0, 0x0, &(0x7f00000044c0)=[{&(0x7f00000034c0)=""/4096, 0x1000}], 0x1, &(0x7f0000004500)=""/122, 0x7a}, 0x5}, {{0x0, 0x0, &(0x7f0000005740)=[{&(0x7f0000004580)=""/4096, 0x1000}, {&(0x7f0000005580)=""/108, 0x6c}, {&(0x7f0000005600)=""/140, 0x8c}, {&(0x7f00000056c0)=""/85, 0x55}], 0x4, &(0x7f0000001d00)=""/184, 0xb8}, 0xfe9}, {{&(0x7f0000005840)=@alg, 0x80, &(0x7f0000005ac0)=[{&(0x7f00000058c0)=""/230, 0xe6}, {&(0x7f00000059c0)=""/102, 0x66}, {&(0x7f0000005a40)=""/126, 0x7e}], 0x3}}, {{&(0x7f0000005b00)=@qipcrtr, 0x80, &(0x7f0000005dc0)=[{&(0x7f0000007040)=""/65, 0x41}, {&(0x7f0000005bc0)=""/1, 0x1}, {&(0x7f0000005c00)=""/110, 0x6e}, {&(0x7f0000005c80)=""/36, 0x24}, {&(0x7f0000005cc0)=""/83, 0x53}, {&(0x7f0000005d40)=""/30, 0x1e}, {&(0x7f0000005d80)=""/27, 0x1b}], 0x7, &(0x7f0000005e00)=""/46, 0x2e}}, {{0x0, 0x0, &(0x7f0000007000)=[{&(0x7f0000005e40)=""/4096, 0x1000}, {&(0x7f0000006e40)=""/162, 0xa2}, {&(0x7f0000006f00)=""/107, 0x6b}, {&(0x7f0000006f80)=""/120, 0x78}], 0x4}, 0x8}], 0xa, 0x0, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r6, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) r7 = syz_open_dev$cec(&(0x7f0000000000), 0x0, 0x12b001) ioctl$CEC_ADAP_S_LOG_ADDRS(r7, 0xc05c6104, &(0x7f0000000740)={"524ebce3", 0x5, 0x5, 0x81, 0x3, 0x16dc, "0d0767fcf850456f2290e729cf77f1", "abd3fea5", "44b4dd9e", "ad2e21d3", ["d4150c57d062e240fbe214a9", "850f3d04d42a1661562d034e", "82bc0bcad17be13050ccc10d", "6631cbd8c92f5461e2ea90f9"]}) ioctl$CEC_TRANSMIT(r7, 0xc0386105, &(0x7f00000003c0)={0x0, 0xffffffffffffffff, 0x6, 0x6, 0xe30, 0x3ff, "c2a0da871813beebb98f6cd3bde10363", 0x8, 0x9, 0x9, 0x2, 0x0, 0x0, 0xfc}) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000140)=0x14) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r8, @ANYBLOB="01000000000000001c0012000c000100626f6e64"], 0x3c}}, 0x0) setsockopt$sock_int(r4, 0x1, 0x2e, &(0x7f00000000c0)=0x7, 0x4) sendmsg$DCCPDIAG_GETSOCK(r4, &(0x7f00000004c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000280)=ANY=[], 0x50}, 0x1, 0x0, 0x0, 0x10}, 0xc855) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x4, 0x3032, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) unshare(0xc000000) socket$inet6(0xa, 0x3, 0x8000000003c) 5.521819811s ago: executing program 2 (id=3450): unshare(0x62040200) sched_setaffinity(0x0, 0x8, &(0x7f0000000080)=0x2) r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_LIST_LESSEES(r0, 0xc01064d1, &(0x7f0000000040)={0x1, 0x0, &(0x7f0000000080)=[0x0]}) openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', 0x0, 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB]) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0xc, &(0x7f0000000740)=@framed={{0x18, 0x2, 0x0, 0x0, 0xfffffffe}, [@printk={@lli, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x401}}, @call={0x85, 0x0, 0x0, 0xa0}]}, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x0, 0x2100, 0x0, &(0x7f0000000100), 0x0, 0x1008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) r2 = socket(0x1d, 0x2, 0x6) pipe(&(0x7f0000000000)={0xffffffffffffffff}) splice(r3, 0x0, r2, 0x0, 0xc, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000001a00)='./file1\x00', 0xc0, 0x61) r4 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) mount(&(0x7f0000000500)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000004a00)='./file1\x00', &(0x7f0000000040)='udf\x00', 0x8007, 0x0) ioctl$NBD_CLEAR_SOCK(r4, 0xab04) 5.203344372s ago: executing program 7 (id=3451): socket$inet6_udplite(0xa, 0x2, 0x88) ioprio_set$pid(0x1, 0x0, 0x2007) ioprio_get$pid(0x1, 0x0) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000440), 0x2, 0x0) get_mempolicy(0x0, &(0x7f0000005a80), 0x9, &(0x7f0000ffc000/0x4000)=nil, 0x4) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000140)={0xffffffffffffffff}, 0x106, 0x9}}, 0x20) bind$alg(0xffffffffffffffff, &(0x7f0000000300)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-serpent-avx\x00'}, 0x58) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x802, 0x0) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x1000006, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r3 = socket$inet_udp(0x2, 0x2, 0x0) r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') getdents64(r4, &(0x7f0000000340)=""/79, 0x4f) getdents(r4, 0x0, 0x3b) bind$inet(r3, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) r5 = syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0xaee2, 0x0, 0x2, 0xbfdffffc}, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r6, r7, 0x0) io_uring_enter(r5, 0x47f6, 0x0, 0x2, 0x0, 0x0) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f00000000c0)={0xe, 0x18, 0xfa00, @id_tos={&(0x7f0000000080), r1, 0x0, 0x3, 0x1}}, 0x20) openat$autofs(0xffffff9c, &(0x7f0000000100), 0x200000, 0x0) openat$autofs(0xffffff9c, &(0x7f0000000180), 0x410042, 0x0) syz_open_dev$sndctrl(0x0, 0x0, 0x0) 4.523208721s ago: executing program 2 (id=3452): socket$nl_netfilter(0x10, 0x3, 0xc) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x804}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0x9, 0x9, 0x2, 0x9, 0x2, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x1, 0x0, 0x0, @void, @value, @void, @value}, 0x48) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x2, 0x8f}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = socket$igmp(0x2, 0x3, 0x2) ioctl$sock_inet_SIOCSARP(r1, 0x8955, &(0x7f0000000340)={{0x2, 0x0, @broadcast}, {0x0, @link_local}, 0xa, {0x2, 0x800, @multicast2}, 'wg0\x00'}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socket$igmp6(0xa, 0x3, 0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) ioctl$VHOST_SET_LOG_FD(0xffffffffffffffff, 0x4004af07, &(0x7f0000000280)) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet6_sctp(0xa, 0x1, 0x84) r4 = openat$audio(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r4, 0xc004500a, &(0x7f0000000240)=0x7) r5 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r5, 0x29, 0x20, &(0x7f00000000c0)={@private2, 0x0, 0x0, 0x103, 0x1}, 0x20) close(r5) ioctl$SNDCTL_DSP_CHANNELS(r4, 0xc0045006, &(0x7f00000001c0)=0x2) ioctl$SNDCTL_DSP_SPEED(r4, 0xc0045002, &(0x7f00000000c0)) read$dsp(r4, &(0x7f0000000300)=""/79, 0x4f) 4.313622784s ago: executing program 7 (id=3453): openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x802, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_open_dev$evdev(0x0, 0x0, 0x60000) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$OSF_MSG_ADD(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="081500000005110400000000000000000100000554"], 0x1508}, 0x1, 0x0, 0x0, 0x24000080}, 0x0) bind$inet(0xffffffffffffffff, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f00000001c0)={{{@in6=@private2, @in=@multicast2, 0x0, 0x0, 0x1, 0x0, 0x0, 0x80, 0x0, 0x2c, 0x0, 0xffffffffffffffff}, {0x0, 0x0, 0x400000000, 0x8, 0x0, 0x7fffffffffffffff, 0x0, 0xffffffff}, {0x0, 0x4000000, 0x1}, 0x0, 0xfffffffe}, {{@in6=@mcast1}, 0x0, @in=@multicast1, 0x3507, 0x0, 0x0, 0x0, 0xfffffffe, 0x4000000}}, 0xe4) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x1) ioctl$KVM_SET_VCPU_EVENTS(r4, 0x4400ae8f, 0x0) socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x8, 0x1c, &(0x7f00000004c0)=ANY=[@ANYBLOB="1808000060000000001e00000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bc0908000000000035090100000000009500000000070000b7020000000000007b9a00fe000000006609000000000000dbaaf0ff50000000bf8620000000000007080000f8ffffffbfa400000000000007040000f0ffffff770000000800000018220000", @ANYRES32, @ANYBLOB="0000000000000000b7050000080000004608f0ff76000000bf9800000000000056080000010000008500000007000000b7000000000000009500000000000000"], &(0x7f0000000980)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0x0, 0xf00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) socket$nl_netfilter(0x10, 0x3, 0xc) r5 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r5, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) bind$inet(r5, &(0x7f0000000080)={0x2, 0x4e21, @multicast2}, 0x10) connect$inet(r5, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r5, 0x6, 0x16, &(0x7f0000000240)=[@mss={0x2, 0x8}, @sack_perm, @timestamp, @sack_perm, @window, @window={0x3, 0x0, 0xfffc}, @timestamp, @timestamp], 0x5b) setsockopt$inet_tcp_TCP_CONGESTION(r5, 0x6, 0xd, &(0x7f0000000140)='cdg\x00', 0x4) setsockopt$inet_tcp_TCP_REPAIR(r5, 0x6, 0x13, &(0x7f00000001c0), 0xc7) sendto$inet(r5, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x11) recvfrom$inet(r5, 0x0, 0x0, 0x700, 0x0, 0x0) bind$x25(r0, &(0x7f0000000100)={0x9, @remote={'\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc', 0x3}}, 0x12) 3.081576451s ago: executing program 7 (id=3454): mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mkdir(0x0, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000380)={0xa, 0x14e24}, 0x1c) connect$inet6(r0, &(0x7f00000002c0)={0xa, 0x4e24}, 0x1c) sendmmsg$inet6(r0, 0x0, 0x0, 0xc8040) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r2, 0x0, 0x2a, &(0x7f0000000180)={0xfffffffe, {{0x2, 0x0, @empty}}}, 0x84) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x48}}, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'bridge0\x00'}) close(r2) socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet_group_source_req(r2, 0x0, 0x2e, &(0x7f0000000a00)={0x2, {{0x2, 0x2000, @dev={0xac, 0x14, 0x14, 0x1b}}}, {{0x2, 0x0, @empty}}}, 0x104) sendmmsg(r0, &(0x7f00000092c0), 0x4ff, 0x7ffffff7) 2.276268071s ago: executing program 2 (id=3455): socket$nl_generic(0x10, 0x3, 0x10) socket(0x10, 0x3, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) openat$vmci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) epoll_create1(0x0) socket(0x200000000000011, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x109000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) socket$can_raw(0x1d, 0x3, 0x1) socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, &(0x7f0000000100)={'batadv_slave_1\x00'}) socket$nl_route(0x10, 0x3, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[], 0x90}}, 0x0) 1.281205423s ago: executing program 7 (id=3456): openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/mdstat\x00', 0x0, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{}, 0xdf}}]}, {0x4}, {0xc, 0x7, {0x1}}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x10000800) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, 0x0, 0x0) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) setsockopt$packet_rx_ring(0xffffffffffffffff, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a}, 0x1c) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb703000008000000b703000000000020850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) r5 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r5, 0x89f1, &(0x7f00000003c0)={'ip6gre0\x00', &(0x7f00000000c0)={'syztnl2\x00', 0x0, 0x2d, 0x0, 0x0, 0xcbf, 0xc, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @private1, 0x700, 0x8, 0x101, 0xd66}}) r6 = syz_open_procfs(0x0, &(0x7f0000000000)='net/fib_triestat\x00') preadv(r6, &(0x7f00000001c0)=[{&(0x7f0000001200)=""/4096, 0x1000}], 0x1, 0x0, 0x6) 1.156290436s ago: executing program 2 (id=3457): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendmmsg$inet(r0, &(0x7f0000000cc0)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f00000003c0)='TS', 0x2}], 0x1}}, {{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000e80)="5be3b011e1", 0x5}], 0x1}}], 0x2, 0xc0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x2, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x8002, 0x0) write$P9_RSTATu(r4, 0x0, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000040000000030a01080000000000000000010040000900030073797a320000000014000480080002400000000008000140000000000900010073797a300000000088000000060a010400000000000000000100000008000b40000000000900010073797a3000000000600004805c0001800b0001007470726f787900004c000280"], 0x110}}, 0x40040) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) r6 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r6, 0x29, 0x2a, &(0x7f0000fca000)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) setsockopt$inet6_MCAST_JOIN_GROUP(r6, 0x29, 0x2a, &(0x7f0000000180)={0x0, {{0xa, 0x0, 0x0, @mcast2}}}, 0x88) setsockopt$inet6_group_source_req(r6, 0x29, 0x2e, &(0x7f0000000040)={0x1, {{0xa, 0x0, 0x0, @mcast1}}, {{0xa, 0x0, 0x0, @empty}}}, 0x108) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000100)={'wlan0\x00'}) socket$inet6_mptcp(0xa, 0x1, 0x106) 1.156092873s ago: executing program 4 (id=3448): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFPFLAGS(0xffffffffffffffff, 0x8934, &(0x7f0000000040)={'wlan0\x00'}) ioctl(r0, 0x8b25, &(0x7f0000000040)) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18060000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000003000000b703000000000000850000007300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6317ce6203c2"], 0xfdef) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000b80)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="180000000200000000"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5, @void, @value}, 0x94) syz_init_net_socket$ax25(0x3, 0x3, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000), 0x481, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000005c0)={'dummy0\x00'}) socket$netlink(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r3 = dup(r2) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd74) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300), 0xe0801, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x25, 0x0, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x7, 0x13, r6, 0x0) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, 0x0) openat$zero(0xffffff9c, 0x0, 0x440102, 0x0) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000002a00), 0x800, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000000)={'pimreg\x00', 0x2}) r8 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_VIF(r8, 0x0, 0xca, &(0x7f00000002c0)={0x1, 0x4, 0x0, 0x0, @vifc_lcl_addr=@initdev={0xac, 0x1e, 0x0, 0x0}, @dev={0xac, 0x14, 0x14, 0x27}}, 0x10) r9 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_DELLINK(r9, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000100)={0x18, 0x1404, 0x1, 0x70bd2d, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x18}, 0x1, 0x0, 0x0, 0x671ec167a4b72164}, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) 99.660888ms ago: executing program 7 (id=3458): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000240)={'pimreg\x00'}) unshare(0x6a040000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) unshare(0x10000c00) sendmsg$nl_xfrm(r0, 0x0, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="18050000000000fe000000004b64ffec850000007d000000040000000700000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x18) bind$alg(r1, 0x0, 0x0) r3 = accept4(r1, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f00000005c0)="ad00"/16, 0x10) sendmmsg$alg(r3, &(0x7f0000007c40)=[{0x0, 0x0, &(0x7f0000002fc0)=[{&(0x7f0000007180)="c54e3bc126f94457f17fe97287645915bab0a9bc33446ec55f76797f551c758a779f1b45dd9c218783601a881fb3c53a718bb2c5d2c280a109606bb4a75d21797f358df1af983363ff97ebf63262edf9a74cd73c0bd9e4d9e13cb83e15771af34d4d80ee8d7316b08d534cfdb6fba358018e7ff9ee0411e3d92847ccd0ede023436b0ff410d62aa6b76a593d425e2958b7fff02b", 0x94}, {&(0x7f0000007240)="6449f9775c2faa82d800b73c857e4c15a8c9a9b431333109698f69f63b2d5f635f5efb1321752a0b245544add9888f78a6e6d6ea5f1d1285c26230c2dec88a02db08bc11111f93fe073a200d9d83ba5ba5ad7b63c407810da2c5f428e5f4b783a5835f656be873d8115096dc7590cf80a14cefb2c5ae496f8fc84326ac8fa0590790430439a2e18bbdffb03d510c733200b0cfcaa104229ffceefe71e9bb2234196d870b804d74ae", 0xa8}, {&(0x7f0000007300)="fb71e375124c21377f3a93a2a9ad060007ec2c0e2469d842a3892de404c63baafdb6c4fc1897399c231747f6bcb515901323aa4e7a1f7dd58a4946e9e551f2ce2621f8c6a1fbc1ffa508a6aae02357464cfb933c1c5072d8", 0x58}, {&(0x7f0000008000)="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", 0x17d}], 0x4, &(0x7f0000007480)=[@assoc={0x10, 0x117, 0x4, 0x81}, @iv={0x60, 0x117, 0x2, 0x4d, "65c7245f59e438fb93c79f1be75dcff3dfe0175e0ad63ab91d427b3fcf5e1741adcf6c08bc6513e82aae763a2a270dea07b143d415cf95b2a0a66090f7b3ff984e58945c2a43a6ea2fea02bb1f"}, @iv={0xa4, 0x117, 0x2, 0x93, "c52087507221f9155db1eb5868d852780bfd535633f177847c98dc5d9ec380937ea950f61f3ed19a6fac527df7f422bef431037952cf18ee1fab10f58d30ad0df7b9a676c43b7e5fb8a2888e4234ce664866931c5d052db0682b753c93331619161aedbb0d9005961d4eed23bce3a602c5edab3091e462a8923618e39df2afd61abb67ffb222ee50cd3e79f659edfa580c7945"}, @iv={0xc4, 0x117, 0x2, 0xb4, "3672a32c327246d854209ad2b96f33c71a9113f3e643858b18aa1eac6621aed916766df6c688e2db6747f00f752b5f60d1640ab831785e8be7fcd8e3a65308078cfeb635dab4dcf2755f376a858199d088bd37a5cef40fb47154d3ec0336a23bf18e7841a2228f9dbca6432e7ceba3773f3a264c3a7493e13a07b27cdd864f206557b8bb449131940d08f0c56d387b8ea80f4a296fb76dd1ce8f7e5230a193e2da6618257cbfb0bf559a300df0372b2c27d84a23"}, @assoc={0x10, 0x117, 0x4, 0x10}], 0x1e8}, {0x0, 0x0, &(0x7f00000033c0)=[{&(0x7f0000007680)="e6c712e9848b954ae19fe2480e6335b1e4fc20838bf381b6007dcf36517a9f4f8a3c4ace2505adcce1e9fccd6ff8749612a1ed5e318dd7e4ba2e50e0a049508efd54c49cb3a0a262e3eeb63d899b610642314502c4586d616b90eb208fd52de5d9b450647d9fdd2d45fea76e0ec59bcced04a4057209acb41f277e706c218eb6d66fcf1a3914b6", 0x87}, {&(0x7f0000007740)="a21d376e37863178ade867f86aa81cb89fdab26fc1488a0da34f8c6d5e6e61f643e0db3633d408dfecfd4e43eb216d688ed5d0db72d301c66721d162d51ae8cadbe75c89d9829a33fa14f049d5bbd75cce299e8f77d2bec06499de7bbcd641c226457028947b0d79b67372af58a3f2c56a1b7bd11657c24cde8132e2725dc3c4e19ffa3e4fe039d11f7bc1d603a04835f6153a85e7b249c05abf470b8600605174ef7423140efcdcb941c248c3a1fde5624e9c87e6934223967a8fdf9bce9d61a4141c1fa9093186e206d1", 0xcb}], 0x2, &(0x7f0000008180)=ANY=[@ANYBLOB="10000000170100000400000007000000ec0000001701000002000000db00000072847c594bf8b0956c4a34c7d80c4723a1a21bf02e3852706e2e0205e842f822e0c670862730925b715cf54f652907336cc24ec9ca11d26ee1dbb363eaf3c1bc19057bd527d2a1cd01d53b705028daa5177d1bc717f1b9f2aca1cbce68ced8b68adb30e293ee36a2407c8c323ec6acb85fadfe8f1de4eee8888fb874e8d60665a80d255dde67fa274caf778cb5744e4fd08fc344f9c98162b70cbcaf9b45112f559cd16eb00d92ba0b3ca3fdc072626de924daa14b30bf5f96079b7e62510fcfdef466b56d72a4e29532dcb877c891169a055291f207d14f892c34001000000017017ec33402221cf3591f0be80000040000000700000010000000"], 0x11c, 0x20008010}, {0x0, 0x0, &(0x7f0000007ac0)=[{&(0x7f0000007980)="ca39e94e9fa78fd0436f679166cce88babbf187778682fc6533cf9ccb79273024c8f9c7250e4f6877e95fd12f4ef828b17be9d30c70681cff06319d0cf079af5c067c77ae3e96fb0b9ec19caaa964fb0050754ad3375230df866af4c2f1d", 0x5e}, {&(0x7f0000007a00)="f6b7a8ceb3db898cd4cec7b7d35d7bc23526b754be99a670d3dbd8846aa903af53000fc45816ec5b4d77da638de47fa0ac5453266fb908655d4fcf700ec5c6c53791d6bb6fd6bc1bdb42e1acbe31860624d4ffb536bfeca8adea88fc50c3045f4481e8058d0c", 0x66}, {&(0x7f0000007a80)="92d53787d1eeb689a8ba99e1303b9692529ae58ab65134df0c011cb553f3", 0x1e}], 0x3, &(0x7f0000007b00)=[@op={0x10}, @op={0x10, 0x117, 0x3, 0x1}, @op={0x10, 0x117, 0x3, 0x1}, @op={0x10, 0x117, 0x3, 0x1}, @op={0x10, 0x117, 0x3, 0x1}, @assoc={0x10, 0x117, 0x4, 0x5}, @assoc={0x10, 0x117, 0x4, 0x6}, @assoc={0x10, 0x117, 0x4, 0x3}], 0x80, 0x40}, {0x0, 0x0, &(0x7f0000007bc0)=[{&(0x7f0000007b80)="151d81c1fa9d5f", 0x7}], 0x1, &(0x7f0000007c00)=[@assoc={0x10, 0x117, 0x4, 0x7}, @op={0x10, 0x117, 0x3, 0x1}, @op={0x10, 0x117, 0x3, 0xd688708705a4cd8d}], 0x30, 0x20000000}], 0x4, 0x10) recvmmsg(r3, &(0x7f0000007840)=[{{&(0x7f0000000400)=@in={0x2, 0x0, @local}, 0x80, &(0x7f0000000580)=[{&(0x7f0000000280)=""/59, 0x3b}, {&(0x7f0000000480)=""/54, 0x36}, {&(0x7f0000000500)=""/12, 0xc}, {&(0x7f00000006c0)=""/65, 0x41}], 0x4, &(0x7f0000005780)=""/141, 0x8d}, 0x9}, {{&(0x7f0000000800)=@nfc, 0x80, &(0x7f0000000c00)=[{&(0x7f0000000880)=""/34, 0x22}, {&(0x7f00000008c0)=""/162, 0xa2}, {&(0x7f0000000980)=""/7, 0x7}, {&(0x7f00000009c0)=""/71, 0x47}, {&(0x7f0000000a40)=""/73, 0x49}, {&(0x7f0000000b40)=""/173, 0xad}], 0x6, &(0x7f0000000c40)=""/161, 0xa1}, 0x7}, {{0x0, 0x0, &(0x7f0000002f80)=[{&(0x7f0000000d00)=""/4096, 0x1000}, {&(0x7f0000007f00)=""/224, 0xe0}, {&(0x7f0000001e00)=""/43, 0x2b}, {&(0x7f0000001e40)=""/203, 0xcb}, {&(0x7f0000001f40)=""/35, 0x23}, {&(0x7f0000001f80)=""/4082, 0xff2}], 0x6, &(0x7f0000002fc0)}, 0x3}, {{&(0x7f0000003000)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @broadcast}}}, 0x80, &(0x7f0000003300)=[{&(0x7f0000003080)=""/237, 0xed}, {&(0x7f0000003180)=""/163, 0xa3}, {&(0x7f0000003240)=""/71, 0x47}, {&(0x7f00000032c0)=""/50, 0x32}], 0x4}, 0x97}, {{&(0x7f0000003340)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, 0x80, &(0x7f0000003480)=[{&(0x7f00000033c0)}, {&(0x7f0000003400)=""/77, 0x4d}], 0x2}}, {{0x0, 0x0, &(0x7f00000044c0)=[{&(0x7f00000034c0)=""/4096, 0x1000}], 0x1, &(0x7f0000004500)=""/122, 0x7a}, 0x5}, {{0x0, 0x0, &(0x7f0000005740)=[{&(0x7f0000004580)=""/4096, 0x1000}, {&(0x7f0000005580)=""/108, 0x6c}, {&(0x7f0000005600)=""/140, 0x8c}, {&(0x7f00000056c0)=""/85, 0x55}], 0x4, &(0x7f0000001d00)=""/184, 0xb8}, 0xfe9}, {{&(0x7f0000005840)=@alg, 0x80, &(0x7f0000005ac0)=[{&(0x7f00000058c0)=""/230, 0xe6}, {&(0x7f00000059c0)=""/102, 0x66}, {&(0x7f0000005a40)=""/126, 0x7e}], 0x3}}, {{&(0x7f0000005b00)=@qipcrtr, 0x80, &(0x7f0000005dc0)=[{&(0x7f0000007040)=""/65, 0x41}, {&(0x7f0000005bc0)=""/1, 0x1}, {&(0x7f0000005c00)=""/110, 0x6e}, {&(0x7f0000005c80)=""/36, 0x24}, {&(0x7f0000005cc0)=""/83, 0x53}, {&(0x7f0000005d40)=""/30, 0x1e}, {&(0x7f0000005d80)=""/27, 0x1b}], 0x7, &(0x7f0000005e00)=""/46, 0x2e}}, {{0x0, 0x0, &(0x7f0000007000)=[{&(0x7f0000005e40)=""/4096, 0x1000}, {&(0x7f0000006e40)=""/162, 0xa2}, {&(0x7f0000006f00)=""/107, 0x6b}, {&(0x7f0000006f80)=""/120, 0x78}], 0x4}, 0x8}], 0xa, 0x0, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r6, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) r7 = syz_open_dev$cec(&(0x7f0000000000), 0x0, 0x12b001) ioctl$CEC_ADAP_S_LOG_ADDRS(r7, 0xc05c6104, &(0x7f0000000740)={"524ebce3", 0x5, 0x5, 0x81, 0x3, 0x16dc, "0d0767fcf850456f2290e729cf77f1", "abd3fea5", "44b4dd9e", "ad2e21d3", ["d4150c57d062e240fbe214a9", "850f3d04d42a1661562d034e", "82bc0bcad17be13050ccc10d", "6631cbd8c92f5461e2ea90f9"]}) ioctl$CEC_TRANSMIT(r7, 0xc0386105, &(0x7f00000003c0)={0x0, 0xffffffffffffffff, 0x6, 0x6, 0xe30, 0x3ff, "c2a0da871813beebb98f6cd3bde10363", 0x8, 0x9, 0x9, 0x2, 0x0, 0x0, 0xfc}) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000140)=0x14) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r8, @ANYBLOB="01000000000000001c0012000c000100626f6e64"], 0x3c}}, 0x0) setsockopt$sock_int(r4, 0x1, 0x2e, &(0x7f00000000c0)=0x7, 0x4) sendmsg$DCCPDIAG_GETSOCK(r4, &(0x7f00000004c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000280)=ANY=[], 0x50}, 0x1, 0x0, 0x0, 0x10}, 0xc855) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x4, 0x3032, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) unshare(0xc000000) socket$inet6(0xa, 0x3, 0x8000000003c) 0s ago: executing program 2 (id=3459): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x1, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r0}, 0x10) r1 = openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000440)={0x0, 0x18, 0xfa00, {0x4, &(0x7f00000000c0), 0x106, 0x5}}, 0x20) r2 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000240)=ANY=[@ANYBLOB="010000000000000001000000000000000000000000000000001b0300ff"]) openat$vicodec1(0xffffff9c, &(0x7f0000000200), 0x2, 0x0) r3 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='xprt_reserve\x00', r4, 0x0, 0x1}, 0x18) sendmsg$netlink(r3, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400048c0}, 0x0) ioctl$KVM_SET_NESTED_STATE(r2, 0x4080aebf, &(0x7f0000000300)={{0x3, 0x0, 0x80, {0x8080000, 0x80a0000}}, "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", "482f8ebe94303088028889733bc3fe2b7f5001f39ef80ea65e790cfc9a1b41b9715e377847fc793b0d7b6bd54d5aef90af791a30a1efd4bfb64d4fceb423768e4bbca89a8493ccb39fc9d15b68e9ffa94daf6768d43de289fc2fa931ae9e3c25271acc30416861d5e13c7fd5f264b6b2cf47f882c4b6a309a119f59cf3dd71d3b8de40c4ae3fb5f7c9762df74e2fc55ac5db725b251cca39cdc7153716fe5e0f391921ce4aeb6b2f8362f5551df75b22b44fa29a20015e1fa99f9e4dd817d176a42086ce2bbf5e36f077dbdbf9d2ced992538c018182eda6164ad7916b80abb60836dbd475042a911afdf77cac6747edcf48905f6574ea49be20c39c96ce6b2a9af37cc8a9851fa0be4d841a6795c7d70baa4909dfc9bfb0dce75983dc61d2d055c8e1a8ef5ffc847b23ed998aa12f180baa41664402631814ff73d5858ff380c2223cdfdcd9819fa9b8ff5a0862ef238be2b29ffc10981cf51df7001804b2b1eae5fc64dab311ecf438d807e06ec5bf7d1565db15b03974b410e95426c848aa490661827ede88eac4b01aebf41b64c640edb9ac70624d085d401a5ee8abd3edde2277f6a44fff67dee3fbf257c268736b7b9b2bce8fc7dc6c5d6deaf81a2c9e2ea984392094aa32230ac8c5462ab02dae4f006bde02928349d70de77075b511e7c771bc23fc5927c96ab91f904e74ec76ddac252eee38b16ff8a006134480f1b2f38729c177604e4806664b1e0c85a8db38edac2fcb0a18c7ae07f52d0e6999e216d80aaf589d2184b37165eb7da452db831120b0fb0b476adafe12af03b2ffbf7419e5b4b3dc8df5da1974eaff014afe85aa21b60c5153ef85a083ebae9337521aa046d02c989ba57f9132c316303102ebd89a5ce95a6f66013572232228371db58eacd78eeb47ef1fe536ae1658f82464370271529e3e38137ecf0e6aaab083e9883e3f3c15ecd22e9b8347e755219c458b4b3387d9fc978714a99093e7908d37acdd932f65a918ec335f4eaeccfbe5262c49efc39d4b4c19a7bca3b8fe680cef13afab93fa5cfa77ce5c1635cf7bec5a2297d8ed3527eedfa1cf1eef5dae0698abf711991dbc14644dbdfe6f663541558ea72b1f9609ede6543e62f0822ac96106186c8e01fb8fa28900c8fce7fcec6e18598c9cfeb36b5c45dce59633ad89b7578624da8d26456157ab7af6f0814750d37e5a9efc9badb876b04255299b3e7b4e54a7d6ad0fa1749f0818b2859ee29c2380108fdc7582fe026d9496e786fae394c8f9586dd593539abf14533a33e15f1cd2af3ba6004663f56ac5a2961b1b604313dbf2f248f6376e8732fe8e36923589844ed7590b09c92fb487f9993f0799a965ff4473ce346f8ff518565264a5f212c18dcda319b9014059279759160247a9aa2878ae62fc67049bd7077f3e56c59b8411f89c579c15d5b608ea22ad9e6350c7e7d855130ae9d2f8918762c92aa1c37a86d8768a1a814e46d82a0d95dec58fae3cd552ba14b6ac9b69131d3079c9cde41aff124ad29d8af9757e0dcfc35e2b3c56e6c3c81d257cd52b5a83aa8b35dd86745d8cfc1ee5686aeffae8a374cf7994f5baed44a2130495bcc7fe04d42b287d1fb2ee74bea869cc16824c67b5baa6d2d9adb06128f364eeeb38e9c3090b0444c405a0d7b0926649c2c652faa7fa44d0858cc99cda60d7e06ac6ed95a0c582f91f2c46e1cd97bb5935c536e050337c59b1e673fe8a9afcf2cbb82b9b2be034054f59b4dacf6ae1b217418d701a339fea50781493399e37ef70808f7e7a39491bfdc7b6e6757a37130682b80227de03dbc127e46f8638981c9e5e0cbff229af844ec0d5ec9a1f93638c7917ef00d77f57aaeb828e764de09df5a526f3bc0b0f7e71da209ed3bb724f53687b2a208d787878145b0cc1a1faa02e45fafa29e5f504298b0db2a8bff59bc489088942372cee209219a0616ca366d9553029f90277a4b48cc4da2bf65267853ff1c766db43940b20ad7e1647a932c9fe7f39d6cd14326fd7611cbe6ed049851ee6727a6191291e522ce539073de040b3479a4b7b789f6f8127765551111a3593622b10ef192ad0cc3ce7566d9fd30cbb64187c74b38ce88e5cf5fd8d089089b23e257ebfa82e5ebc2f482e6a29f60652746ecf36054e25f7795bf62e09fd92079babdfbd4d250def0fad1ee3026a1194b84a38b06251b31a32ee38b5ec2016379e13599c8faec9c28e095c2914acbadfddbde212990c244d053b8fb7a708344ebb293b65b538f71f3c1c06d7574a57d3a6d1efbc118a70156cf8219758038a51f3985e7aacdcdc7f9f189b7ab887222752332b05b1b3c7961c3421afb27b91e7eb0eef88b1b37a0646d890d791bc7aa3706b9133bf5e941d6b801ca0411eb0d7cd429702096a18339f7f423b43fca309c971a857e70686ab4e4acba2722cdb2856bc69c4106d5a5cc6c98a59e6cee134983757396d38dcbf41fb90bf3ab655582319d323478c3a99ef85e9617cf3c97375483182046d34fe94dfda94b4ecbc594d1c6914078bdaee9353bbce0e73c37f9c3c7161b76d5254d1dd44d93d372f4775097db50a13382619bd8834a8b7d841d2c9f38da2de087e9c5e743ddc2ced474ff8f081fde98539e13ed9c7a61788c4cc35638480b2ffad06b2973dea5dcc0fd5ceb0f397d3b15584f230bab3f6619611e6c20dfffb9db26c39372fde44003a16520aaa5c5b9f49249281024da720b8dba719fe07228d9aa419940327e524f6cd90f80aab3873ef2a2d2216417064abd1f7288d0633f626e5483e37d60885ac920ba8d4450798a04cafb76f084c820b514fbfe069c4fa1e36f1c0ddc06c0dd3fcfe129bce79598a3d584339f203b4d591fae7e855b7649cb6aef3b9aa0112afe5f0aac3ab23bf60e4cde71775f59f04f49897e1b3760d0165e9a5cde8440626abad2b8a8b87398f3b274ae4ac49f39460f27e3142f3a1941b164b91c5316a176751899cbc009a37c6cbc99d34e37f62b61f2ff6cf22e1fe94d86de2c4381f246fabf3b0a98ea20f5a249699a7fbf2845a0e7f12454aeee443bda81ddaca2effaa6a8251bcc8bd2bbbc8634cdb9823def7f865a4b781a9a484b44a280a81f6dce1160ccf37fe42cab7abf1eb4d7fb8cbc8bd4c0a941c4ee0e74cc47a19ccc257432f72d569e3b2953e80c3f7bef92fd8dfbe115a880d9eb4d46e5f69ea9a346d1a41d77094e3ca40f7c7c9529a3b107d3e8d31d1fa6297c40b5af98457a3da821829fcf0526eea041bf8e936b64e0adb218d4792c932ce0eabaf6f5a44511df6c15d5da84f0ed3d3cbf0438c9bca799e5d03e698c368467b8acbe7849b02a116ad3315c6be7c8d91190477c7858ea5e06099d48d09f0ff2e17a0607e8af03dcc7e1f343682aa11745250a67c5588b8bb60e10dab1dfce273ec9ffdd3d1d743678ed7c389267d7007a2ccf250d5b30c01c89df82530c4465a8a30064079c9e073d6e87a628e3dba8ae35e7bf0409346c212459b8d8236ab497c4fe8db49198f8e9a78b0e4dd4671d2d3170677717b63d33e053d71d006951fcf75b0a13bbe33462bea686eb62756c2475670ac110b520f143440de93227e6f5a8ccaf138bf31de0e3797dd0a6d51c1f22d703af5bc4eab7a40b602244994cf4c5a30bf3f3bfa9de7ca628d9a61d31abe621e78a6c65d6f46803ec66c492c0ac58cce04f8a99d759c6f9eb4111df284d3cd04d9884fd73311941b6a7d2218433f0cbe21c8983e8ad00b5c80b0c951e3fcffb7d67329f531641600e8ad8fab775ef71d8ec05caf64698b6c9932578b1e9a3783aa1cc46ba4590c09057cc7128c1ded5eb7823fcb74535139b526cafc0c2554cd3a24f82b969305df4a856f3b4f62504040295fb7b66e05f6441b2445066d13e890d73b9ee99d198bf52ecc2bb5907b35e0429f7a0d3dc157f9398e3251e732c28c3a5f9d2b3f918e20ef60ccdb77917f7b2e07e73426210377ddd6ec361a4b771871f08af99b5b412bf9584e390db6a78a07b71491dbec161fe6d7ded3501051eeb96f14da5bf825ea9a3815a7881ecc0912da3477b11ef0d2aa378a24d28fde683f0927dc02ce419916a8e2fddecc515c7d62d2f05c0d856ed96727343c28437470d3736018189d25b27ed8fc936c59fc27911fb68fc1be50f680627768a183b9583afa0c674f24300179d315ea82bb1fadbedb19d86ed2c78209592c9195b5e34527202c0d27df43a525f913ac86d2572b61c4aab5c83b61f497e48ea009cc96c8e21b18977cb01340fe9832a56be6ba681ba22cc160a3b1739fd3cd8182cb0a944ea143aa36e687be80e8bd81ed733b551ad37313b9f41c5daaeaaf39f382c00f75cafa79c1ae86ae881f69850326c131017f24724c3f1f726b2b2150132e19056a8b5297185de7267bf6ad4800b18dadecb540c4c466db12f0fb5dfef9cadd1565ea48acf1fc84f529a6e5b09c80162771e735149aac4b07686ad42b4f074719cb0e4c301210a9b86e36738e6ce883b06a705b2a7ba537878599965fb2e400c284016536cd882a9a238a270336a57c62f6af977c0604354df4fea6e2ef5b446e85f2edaef4d94fea9b4d983850b77d7b84b2f13769a78f0cf709f613645c4681209229c0b6b0e8f0a00f4286be978df3774684a30315e36bcc1d33692915037fd4bffc38cb662079852cf1bbdf394e495fc2f495e4eb0c52bb8c0e114f28973481b06778f203798b99fa4d007a33ab1fc72b39ff6f06caabf38e8d7d6e93fefcd0ea1d3efd426eec9d20bb9c85f470b98078c913ee12977558ccdde00b8cebec4a18f5d153e4563bdecc72ee7d74f9e4fd991069b069da5ae260c13028b5f207b26b829155c6a6a455a1778ad3da0eff2d5dea394732f68096418683df5ba1f3c544cb54506640709d2d22b42bbcf7dbf6fcb28327a0336124475cb6e29ee58589d3b266bd9f1bde2ff2dd72344cd8a741754efa3463b2b711cf89c17cc42751efe4ca09d58f5a0ee4f49c626d6083d7a0d622eb7e07a769521777e30a77f0c7ee84aed4c833175d3ee107b52548c2c25bed976b0b92e829d2b2bd8770c27f756a8ccf1b742791314bcf3994e4a753f9f82b662fb453f8116f279a57cc11fc8e3bdfc2b5b08347c9432534f86329fc199ffcac7de1aeb50dbf6aa13d689088bf5ac323fffa75d1175e164ecb5346e206c0be2caec56f4201268e0565713d846eaff713d1183617627a4ce5c457e9e6f387d7ddced0753811cf76f28bb9ece0798a80f403972e587277438a87356c098ea8050990bb2c78316bfa2c1b7f09d15dc53fa8a480ab965d080af7f937f8c6566dbfe74c1309a68348041d2d7a7b65a4b68ea5610add1b21ed855df6a9007592c14a0f46af0c16e0a77b534e476d2308d8060df073a9a1caf37a1bad8986dae7768600b4d8fd810b5ce5c3f61169b747b4489c8c445b7c83776beb0d3eed3e03275bc339c30333883a42e29ef12a28738c22ec1de09d449820b2ae58ef590474d4c083c6cb94ef13e6778e5d0e67a8d0d99b3577e401273b39b1258177b6d9e8814f5807eb06c78ca46d279df3eb7b64b627371fb23ffbdbfb748e7f981d5d4b9ae8f782d8e3e10af107c9545855e5b7dea415da103f61d5318b12787f29a560f15394e3152ea4b13e54249514215954a69dd75c75116757fddde9a99079eecff6d6a9590d5a0678bdc93a1fae290079c1ef503d12b9aefb24c08ff007887a9301a0c7ed94015eb16274083d514af33ad78d9f5facf07db30ec92f7f0b3e481a058b8a3590"}) timer_create(0x8, &(0x7f00000002c0)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) mknod(&(0x7f0000000040)='./file0\x00', 0x8001420, 0x0) open$dir(&(0x7f0000000000)='./file0\x00', 0x0, 0x10) creat(&(0x7f0000000440)='./file0\x00', 0x0) close(0x5) kernel console output (not intermixed with test programs): 0 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 662.909517][T18057] RSP: 002b:00000000f50e555c EFLAGS: 00000296 ORIG_RAX: 0000000000000165 [ 662.909533][T18057] RAX: ffffffffffffffda RBX: 0000000000000018 RCX: 00000000800003c0 [ 662.909544][T18057] RDX: 0000000000000038 RSI: 0000000000000000 RDI: 0000000000000000 [ 662.909554][T18057] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 662.909564][T18057] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 662.909574][T18057] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 662.909597][T18057] [ 663.058683][ T7660] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 663.066873][ T7660] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 663.072387][ T7660] bond0 (unregistering): Released all slaves [ 663.108279][T18039] team_slave_0: left promiscuous mode [ 663.118608][T18039] team0: Port device team_slave_0 removed [ 663.122935][T18039] team_slave_1: left promiscuous mode [ 663.131499][T18039] team0: Port device team_slave_1 removed [ 663.146808][T18039] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 663.176013][T18039] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 663.192534][T18039] bond1: (slave ip6gretap1): Removing an active aggregator [ 663.206767][T18039] bond1: (slave ip6gretap1): Releasing backup interface [ 663.208994][T18039] bond1: (slave ip6gretap1): the permanent HWaddr of slave - 5a:b7:bb:41:f0:0c - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts [ 663.219481][T18039] bond1: (slave veth3): Releasing backup interface [ 663.228040][T18039] bond4: (slave veth7): Releasing backup interface [ 663.630449][ T7660] hsr_slave_0: left promiscuous mode [ 663.635000][ T7660] hsr_slave_1: left promiscuous mode [ 663.637081][ T7660] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 663.639404][ T7660] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 663.642523][ T7660] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 663.644946][ T7660] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 663.670586][ T7660] veth1_macvtap: left promiscuous mode [ 663.673155][ T7660] veth0_macvtap: left promiscuous mode [ 663.675630][ T7660] veth1_vlan: left promiscuous mode [ 663.677852][ T7660] veth0_vlan: left promiscuous mode [ 663.692636][T18074] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3085'. [ 663.782438][ T29] vhci_hcd: vhci_device speed not set [ 664.592395][ T5957] Bluetooth: hci2: command tx timeout [ 664.677106][ T7660] team0 (unregistering): Port device team_slave_1 removed [ 664.786072][ T7660] team0 (unregistering): Port device team_slave_0 removed [ 665.486496][T18074] workqueue: Failed to create a rescuer kthread for wq "bond6": -EINTR [ 665.645263][T18085] netlink: 5280 bytes leftover after parsing attributes in process `syz.2.3086'. [ 665.690787][T18022] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 665.708338][T18022] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 665.714887][T18022] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 665.721077][T18022] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 665.828529][T18022] 8021q: adding VLAN 0 to HW filter on device bond0 [ 665.840947][T18022] 8021q: adding VLAN 0 to HW filter on device team0 [ 665.848495][ T1136] bridge0: port 1(bridge_slave_0) entered blocking state [ 665.851567][ T1136] bridge0: port 1(bridge_slave_0) entered forwarding state [ 665.861728][ T1136] bridge0: port 2(bridge_slave_1) entered blocking state [ 665.864799][ T1136] bridge0: port 2(bridge_slave_1) entered forwarding state [ 666.297439][T18022] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 666.437507][T18117] random: crng reseeded on system resumption [ 666.490806][T18022] veth0_vlan: entered promiscuous mode [ 666.499190][T18022] veth1_vlan: entered promiscuous mode [ 666.672619][ T5957] Bluetooth: hci2: command tx timeout [ 666.723123][T18022] veth0_macvtap: entered promiscuous mode [ 666.729748][T18022] veth1_macvtap: entered promiscuous mode [ 666.763024][T18022] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 666.774588][T18022] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 666.796271][T18022] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 666.799505][T18022] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 666.802464][T18022] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 666.805153][T18022] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 666.869105][ T1141] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 666.872144][ T1141] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 666.895185][ T8014] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 666.898575][ T8014] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 667.322427][ C3] net_ratelimit: 11 callbacks suppressed [ 667.322446][ C3] batman_adv: batadv0: Local translation table size (96) exceeds maximum packet size (-320); Ignoring new local tt entry: aa:aa:aa:aa:aa:17 [ 668.121755][ T79] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 668.500088][T18149] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3096'. [ 668.533593][T18149] 8021q: adding VLAN 0 to HW filter on device bond0 [ 668.630116][T18153] autofs4:pid:18153:check_dev_ioctl_version: ioctl control interface version mismatch: kernel(1.1), user(4294967071.1), cmd(0xc018937e) [ 668.636707][T18153] autofs4:pid:18153:validate_dev_ioctl: invalid device control module version supplied for cmd(0xc018937e) [ 668.809700][T18159] loop2: detected capacity change from 0 to 7 [ 668.814050][ C3] blk_print_req_error: 25 callbacks suppressed [ 668.814068][ C3] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 668.819609][ C3] buffer_io_error: 25 callbacks suppressed [ 668.819620][ C3] Buffer I/O error on dev loop2, logical block 0, async page read [ 668.825327][ C2] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 668.829142][ C2] Buffer I/O error on dev loop2, logical block 0, async page read [ 668.832517][ C3] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 668.835315][ C3] Buffer I/O error on dev loop2, logical block 0, async page read [ 668.838115][ C3] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 668.841319][ C3] Buffer I/O error on dev loop2, logical block 0, async page read [ 668.845111][ C3] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 668.848150][ C3] Buffer I/O error on dev loop2, logical block 0, async page read [ 668.851696][ C3] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 668.855472][ C3] Buffer I/O error on dev loop2, logical block 0, async page read [ 668.859827][ C3] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 668.863560][ C3] Buffer I/O error on dev loop2, logical block 0, async page read [ 668.867130][T16362] ldm_validate_partition_table(): Disk read failed. [ 668.870360][ C3] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 668.874069][ C3] Buffer I/O error on dev loop2, logical block 0, async page read [ 668.878710][ C3] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 668.882512][ C3] Buffer I/O error on dev loop2, logical block 0, async page read [ 668.886390][ C3] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 668.889679][ C3] Buffer I/O error on dev loop2, logical block 0, async page read [ 668.893702][T16362] Dev loop2: unable to read RDB block 0 [ 668.898584][T16362] loop2: unable to read partition table [ 668.901170][T16362] loop2: partition table beyond EOD, truncated [ 668.926705][T18159] ldm_validate_partition_table(): Disk read failed. [ 668.930707][T18159] Dev loop2: unable to read RDB block 0 [ 668.942043][T18159] loop2: unable to read partition table [ 668.945415][T15715] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 668.950516][T15715] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 668.957632][T15715] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 668.976041][T15715] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 668.981612][T15715] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 669.057105][T18159] loop2: partition table beyond EOD, truncated [ 669.059167][T18159] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 669.082096][T18165] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3100'. [ 669.085411][T18165] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3100'. [ 669.093822][T18165] team0: entered promiscuous mode [ 669.095451][T18165] team_slave_0: entered promiscuous mode [ 669.097350][T18165] team_slave_1: entered promiscuous mode [ 669.100923][T18165] team0: left promiscuous mode [ 669.104355][T18165] team_slave_0: left promiscuous mode [ 669.108998][T18165] team_slave_1: left promiscuous mode [ 669.189217][T18162] chnl_net:caif_netlink_parms(): no params data found [ 669.195255][ T5353] ldm_validate_partition_table(): Disk read failed. [ 669.214300][ T5353] Dev loop2: unable to read RDB block 0 [ 669.218762][ T5353] loop2: unable to read partition table [ 669.220705][ T5353] loop2: partition table beyond EOD, truncated [ 669.308815][T18162] bridge0: port 1(bridge_slave_0) entered blocking state [ 669.311361][T18162] bridge0: port 1(bridge_slave_0) entered disabled state [ 669.313996][T18162] bridge_slave_0: entered allmulticast mode [ 669.316605][T18162] bridge_slave_0: entered promiscuous mode [ 669.319665][T18162] bridge0: port 2(bridge_slave_1) entered blocking state [ 669.322054][T18162] bridge0: port 2(bridge_slave_1) entered disabled state [ 669.324705][T18162] bridge_slave_1: entered allmulticast mode [ 669.327378][T18162] bridge_slave_1: entered promiscuous mode [ 669.363525][T18162] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 669.370365][T18162] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 669.430831][T18162] team0: Port device team_slave_0 added [ 669.442461][T18162] team0: Port device team_slave_1 added [ 669.500732][T18162] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 669.504804][T18162] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 669.516947][T18162] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 669.522769][T18162] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 669.525629][T18162] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 669.535880][T18162] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 669.757901][T18162] hsr_slave_0: entered promiscuous mode [ 669.760311][T18162] hsr_slave_1: entered promiscuous mode [ 669.762448][T18162] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 669.764886][T18162] Cannot create hsr debugfs directory [ 669.799094][ T79] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 670.137393][T18189] netlink: 52 bytes leftover after parsing attributes in process `syz.4.3104'. [ 670.320410][ T79] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 670.448161][ T79] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 670.976482][ T79] bridge_slave_1: left allmulticast mode [ 670.980896][ T79] bridge_slave_1: left promiscuous mode [ 670.985860][ T79] bridge0: port 2(bridge_slave_1) entered disabled state [ 670.989954][ T79] bridge_slave_0: left allmulticast mode [ 670.991787][ T79] bridge_slave_0: left promiscuous mode [ 670.994057][ T5957] Bluetooth: hci2: command tx timeout [ 670.996923][ T79] bridge0: port 1(bridge_slave_0) entered disabled state [ 671.004811][T18213] sctp: [Deprecated]: syz.4.3110 (pid 18213) Use of struct sctp_assoc_value in delayed_ack socket option. [ 671.004811][T18213] Use struct sctp_sack_info instead [ 671.443326][ T79] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 671.449729][ T79] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 671.458511][ T79] bond0 (unregistering): Released all slaves [ 671.915280][ T79] hsr_slave_0: left promiscuous mode [ 671.918405][ T79] hsr_slave_1: left promiscuous mode [ 671.920947][ T79] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 671.924649][ T79] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 671.928357][ T79] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 671.931438][ T79] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 671.983695][ T79] veth1_macvtap: left promiscuous mode [ 671.986103][ T79] veth0_macvtap: left promiscuous mode [ 671.988608][ T79] veth1_vlan: left promiscuous mode [ 671.990938][ T79] veth0_vlan: left promiscuous mode [ 672.804117][ T79] team0 (unregistering): Port device team_slave_1 removed [ 672.896558][ T79] team0 (unregistering): Port device team_slave_0 removed [ 673.074618][ T5957] Bluetooth: hci2: command tx timeout [ 673.784173][T18162] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 673.964116][T18162] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 673.986336][T18162] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 674.019997][T18162] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 674.121046][T18162] 8021q: adding VLAN 0 to HW filter on device bond0 [ 674.148373][T18162] 8021q: adding VLAN 0 to HW filter on device team0 [ 674.169485][ T8014] bridge0: port 1(bridge_slave_0) entered blocking state [ 674.172645][ T8014] bridge0: port 1(bridge_slave_0) entered forwarding state [ 674.183984][ T8014] bridge0: port 2(bridge_slave_1) entered blocking state [ 674.187084][ T8014] bridge0: port 2(bridge_slave_1) entered forwarding state [ 674.202754][T15715] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 674.214175][T15715] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 674.218238][T15715] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 674.227353][T15715] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 674.230929][T15715] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 674.540681][ T8014] bond0 (unregistering): Released all slaves [ 674.579407][T18162] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 675.038460][T18250] chnl_net:caif_netlink_parms(): no params data found [ 675.102682][T18162] veth0_vlan: entered promiscuous mode [ 675.110223][T18162] veth1_vlan: entered promiscuous mode [ 675.152604][T15715] Bluetooth: hci2: command tx timeout [ 675.190966][T18250] bridge0: port 1(bridge_slave_0) entered blocking state [ 675.196841][T18250] bridge0: port 1(bridge_slave_0) entered disabled state [ 675.199971][T18250] bridge_slave_0: entered allmulticast mode [ 675.209149][T18250] bridge_slave_0: entered promiscuous mode [ 675.216909][T18250] bridge0: port 2(bridge_slave_1) entered blocking state [ 675.219221][T18250] bridge0: port 2(bridge_slave_1) entered disabled state [ 675.222075][T18250] bridge_slave_1: entered allmulticast mode [ 675.231679][T18250] bridge_slave_1: entered promiscuous mode [ 675.295591][T18250] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 675.307846][T18162] veth0_macvtap: entered promiscuous mode [ 675.318517][T18250] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 675.379494][T18162] veth1_macvtap: entered promiscuous mode [ 675.430725][T18250] team0: Port device team_slave_0 added [ 675.443755][T18250] team0: Port device team_slave_1 added [ 675.485481][T18162] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 675.490312][T18162] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 675.507366][T18284] FAULT_INJECTION: forcing a failure. [ 675.507366][T18284] name failslab, interval 1, probability 0, space 0, times 0 [ 675.512834][T18284] CPU: 2 UID: 0 PID: 18284 Comm: syz.2.3123 Not tainted 6.15.0-syzkaller #0 PREEMPT(full) [ 675.512854][T18284] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 675.512865][T18284] Call Trace: [ 675.512871][T18284] [ 675.512879][T18284] dump_stack_lvl+0x16c/0x1f0 [ 675.512907][T18284] should_fail_ex+0x512/0x640 [ 675.512932][T18284] ? kmem_cache_alloc_node_noprof+0x5e/0x3b0 [ 675.512952][T18284] should_failslab+0xc2/0x120 [ 675.512969][T18284] kmem_cache_alloc_node_noprof+0x71/0x3b0 [ 675.512988][T18284] ? __alloc_skb+0x2b2/0x380 [ 675.513013][T18284] __alloc_skb+0x2b2/0x380 [ 675.513031][T18284] ? __pfx___alloc_skb+0x10/0x10 [ 675.513050][T18284] ? __pfx_netlink_autobind.isra.0+0x10/0x10 [ 675.513079][T18284] netlink_alloc_large_skb+0x69/0x130 [ 675.513100][T18284] netlink_sendmsg+0x6a1/0xdd0 [ 675.513122][T18284] ? __pfx_netlink_sendmsg+0x10/0x10 [ 675.513147][T18284] ? __import_iovec+0x1c8/0x660 [ 675.513170][T18284] ____sys_sendmsg+0xa95/0xc70 [ 675.513199][T18284] ? __pfx_____sys_sendmsg+0x10/0x10 [ 675.513223][T18284] ? get_compat_msghdr+0x11a/0x170 [ 675.513255][T18284] ___sys_sendmsg+0x134/0x1d0 [ 675.513278][T18284] ? __pfx____sys_sendmsg+0x10/0x10 [ 675.513331][T18284] __sys_sendmsg+0x16d/0x220 [ 675.513353][T18284] ? __pfx___sys_sendmsg+0x10/0x10 [ 675.513385][T18284] ? rcu_is_watching+0x12/0xc0 [ 675.513405][T18284] __do_fast_syscall_32+0x73/0x120 [ 675.513434][T18284] do_fast_syscall_32+0x32/0x80 [ 675.513459][T18284] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 675.513480][T18284] RIP: 0023:0xf7fe7579 [ 675.513493][T18284] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 675.513509][T18284] RSP: 002b:00000000f510655c EFLAGS: 00000296 ORIG_RAX: 0000000000000172 [ 675.513527][T18284] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000800002c0 [ 675.513538][T18284] RDX: 0000000000000080 RSI: 0000000000000000 RDI: 0000000000000000 [ 675.513548][T18284] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 675.513557][T18284] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 675.513568][T18284] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 675.513590][T18284] [ 675.516937][T18250] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 675.591580][T18250] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 675.600155][T18250] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 675.619008][T18288] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3125'. [ 675.621836][T18162] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 675.625946][T18162] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 675.628726][T18162] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 675.631419][T18162] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 675.638149][T18250] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 675.642113][T18250] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 675.657958][T18250] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 675.735611][T18250] hsr_slave_0: entered promiscuous mode [ 675.738805][T18250] hsr_slave_1: entered promiscuous mode [ 675.904160][ T7660] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 675.907137][ T7660] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 675.929332][ T1136] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 675.935401][ T1136] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 675.996100][T18250] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 676.003114][T18250] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 676.011115][T18250] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 676.017583][T18250] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 676.120712][T18250] 8021q: adding VLAN 0 to HW filter on device bond0 [ 676.133671][T18250] 8021q: adding VLAN 0 to HW filter on device team0 [ 676.136037][T18291] erspan0: entered promiscuous mode [ 676.138279][T18291] erspan0: entered allmulticast mode [ 676.146826][ T8014] bridge0: port 1(bridge_slave_0) entered blocking state [ 676.149097][ T8014] bridge0: port 1(bridge_slave_0) entered forwarding state [ 676.149356][T18291] netlink: 'syz.4.3126': attribute type 10 has an invalid length. [ 676.163239][ T8014] bridge0: port 2(bridge_slave_1) entered blocking state [ 676.165546][ T8014] bridge0: port 2(bridge_slave_1) entered forwarding state [ 676.272993][T15715] Bluetooth: hci4: command tx timeout [ 676.307694][T18296] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3127'. [ 676.327377][T18250] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 676.532577][T18250] veth0_vlan: entered promiscuous mode [ 676.551078][T18250] veth1_vlan: entered promiscuous mode [ 676.584590][T18250] veth0_macvtap: entered promiscuous mode [ 676.590533][T18250] veth1_macvtap: entered promiscuous mode [ 676.610434][T18250] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 676.619041][T18250] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 676.626487][T18250] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 676.636832][T18250] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 676.640465][T18250] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 676.644841][T18250] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 676.706898][ T8014] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 676.710788][ T8014] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 676.740019][ T8014] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 676.743658][ T8014] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 677.189820][ T8014] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 677.409719][ T6010] hid-generic 00A0:0008:0003.000C: unknown main item tag 0x0 [ 677.413254][ T6010] hid-generic 00A0:0008:0003.000C: unknown main item tag 0x0 [ 677.417726][ T6010] hid-generic 00A0:0008:0003.000C: unknown main item tag 0x0 [ 677.423307][ T6010] hid-generic 00A0:0008:0003.000C: unknown main item tag 0x0 [ 677.431525][ T6010] hid-generic 00A0:0008:0003.000C: unknown main item tag 0x0 [ 677.438401][ T6010] hid-generic 00A0:0008:0003.000C: unknown main item tag 0x0 [ 677.445095][ T6010] hid-generic 00A0:0008:0003.000C: unknown main item tag 0x0 [ 677.452810][ T6010] hid-generic 00A0:0008:0003.000C: unknown main item tag 0x0 [ 677.460500][ T6010] hid-generic 00A0:0008:0003.000C: unknown main item tag 0x0 [ 677.468230][ T6010] hid-generic 00A0:0008:0003.000C: unknown main item tag 0x0 [ 677.474837][ T6010] hid-generic 00A0:0008:0003.000C: unknown main item tag 0x0 [ 677.481440][ T6010] hid-generic 00A0:0008:0003.000C: unknown main item tag 0x0 [ 677.500548][ T6010] hid-generic 00A0:0008:0003.000C: hidraw0: HID v0.05 Device [syz1] on syz0 [ 677.863275][T18330] netlink: 72 bytes leftover after parsing attributes in process `syz.2.3134'. [ 677.924062][T18333] autofs4:pid:18333:check_dev_ioctl_version: ioctl control interface version mismatch: kernel(1.1), user(4294967071.1), cmd(0xc018937e) [ 677.926052][ T5957] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 677.928548][T18333] autofs4:pid:18333:validate_dev_ioctl: invalid device control module version supplied for cmd(0xc018937e) [ 677.933241][ T5957] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 677.938261][ T5957] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 677.945384][ T5957] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 677.948143][ T5957] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 678.056128][T18340] netlink: 5280 bytes leftover after parsing attributes in process `syz.4.3136'. [ 678.089756][T18341] netlink: 12 bytes leftover after parsing attributes in process `syz.7.3133'. [ 678.235068][ T8014] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 678.252891][T18341] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3133'. [ 678.327251][ T8014] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 678.365245][ T5957] Bluetooth: hci4: command tx timeout [ 678.373045][T18332] chnl_net:caif_netlink_parms(): no params data found [ 678.418812][ T8014] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 678.488442][T18332] bridge0: port 1(bridge_slave_0) entered blocking state [ 678.490991][T18332] bridge0: port 1(bridge_slave_0) entered disabled state [ 678.494508][T18332] bridge_slave_0: entered allmulticast mode [ 678.497393][T18332] bridge_slave_0: entered promiscuous mode [ 678.505631][T18332] bridge0: port 2(bridge_slave_1) entered blocking state [ 678.508105][T18332] bridge0: port 2(bridge_slave_1) entered disabled state [ 678.510416][T18332] bridge_slave_1: entered allmulticast mode [ 678.514439][T18332] bridge_slave_1: entered promiscuous mode [ 678.584823][T18332] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 678.589511][T18332] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 678.660339][T18332] team0: Port device team_slave_0 added [ 678.676188][T18332] team0: Port device team_slave_1 added [ 678.711800][T18332] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 678.714340][T18332] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 678.725447][T18332] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 678.756724][T18332] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 678.759155][T18332] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 678.769184][T18332] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 678.780981][ T8014] bridge_slave_1: left allmulticast mode [ 678.783134][ T8014] bridge_slave_1: left promiscuous mode [ 678.785622][ T8014] bridge0: port 2(bridge_slave_1) entered disabled state [ 678.789404][ T8014] bridge_slave_0: left allmulticast mode [ 678.791196][ T8014] bridge_slave_0: left promiscuous mode [ 678.802503][ T8014] bridge0: port 1(bridge_slave_0) entered disabled state [ 679.583784][ T8014] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 679.602576][ T8014] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 679.616176][ T8014] bond0 (unregistering): Released all slaves [ 679.774225][T18332] hsr_slave_0: entered promiscuous mode [ 679.777020][T18332] hsr_slave_1: entered promiscuous mode [ 679.779243][T18332] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 679.781605][T18332] Cannot create hsr debugfs directory [ 680.032555][ T5957] Bluetooth: hci2: command tx timeout [ 680.356130][T18372] Bluetooth: MGMT ver 1.23 [ 680.432946][T15715] Bluetooth: hci4: command tx timeout [ 680.577934][ T8014] hsr_slave_0: left promiscuous mode [ 680.581413][ T8014] hsr_slave_1: left promiscuous mode [ 680.585075][ T8014] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 680.589350][ T8014] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 680.592930][ T8014] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 680.595698][ T8014] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 680.661324][ T8014] veth1_macvtap: left promiscuous mode [ 680.665864][ T8014] veth0_macvtap: left promiscuous mode [ 680.668263][ T8014] veth1_vlan: left promiscuous mode [ 680.670426][ T8014] veth0_vlan: left promiscuous mode [ 681.615500][ T8014] team0 (unregistering): Port device team_slave_1 removed [ 681.755984][ T8014] team0 (unregistering): Port device team_slave_0 removed [ 682.127668][T15715] Bluetooth: hci2: command tx timeout [ 682.442387][T15715] Bluetooth: hci0: command 0x0c1a tx timeout [ 682.447004][ T5957] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 682.513698][ T5957] Bluetooth: hci4: command tx timeout [ 682.522555][T18401] syzkaller0: left promiscuous mode [ 682.524593][T18401] syzkaller0: left allmulticast mode [ 683.067466][T18332] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 683.077104][T18416] macsec0: entered promiscuous mode [ 683.078972][T18332] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 683.090513][T18332] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 683.107386][T18332] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 683.146153][T18426] syzkaller0: entered promiscuous mode [ 683.148307][T18426] syzkaller0: entered allmulticast mode [ 684.194671][ T5957] Bluetooth: hci2: command tx timeout [ 684.802608][T18332] 8021q: adding VLAN 0 to HW filter on device bond0 [ 684.811531][T18332] 8021q: adding VLAN 0 to HW filter on device team0 [ 684.819712][ T8005] bridge0: port 1(bridge_slave_0) entered blocking state [ 684.821940][ T8005] bridge0: port 1(bridge_slave_0) entered forwarding state [ 684.830045][ T8014] bridge0: port 2(bridge_slave_1) entered blocking state [ 684.832561][ T8014] bridge0: port 2(bridge_slave_1) entered forwarding state [ 684.868968][T18332] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 684.873812][T18332] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 685.034764][T18332] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 685.190263][T18332] veth0_vlan: entered promiscuous mode [ 685.196415][T18332] veth1_vlan: entered promiscuous mode [ 685.217943][T18332] veth0_macvtap: entered promiscuous mode [ 685.222136][T18332] veth1_macvtap: entered promiscuous mode [ 685.231611][T18332] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 685.240826][T18332] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 685.249284][T18332] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 685.253521][T18332] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 685.257643][T18332] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 685.264559][T18332] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 685.416821][T18267] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 685.419845][T18267] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 685.624963][ T1141] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 685.627489][ T1141] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 685.956181][T18569] pim6reg1: entered promiscuous mode [ 685.957895][T18569] pim6reg1: entered allmulticast mode [ 687.545393][T15715] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 687.557368][T15715] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 687.563872][T15715] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 687.567880][T15715] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 687.572654][T15715] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 688.006523][T18592] pim6reg1: entered promiscuous mode [ 688.008231][T18592] pim6reg1: entered allmulticast mode [ 688.011669][T18596] veth1_macvtap: left promiscuous mode [ 688.014140][T18596] macsec0: entered promiscuous mode [ 688.056949][T18267] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 688.175136][T18609] pim6reg1: entered promiscuous mode [ 688.176865][T18609] pim6reg1: entered allmulticast mode [ 688.275989][T18267] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 688.390836][T18598] chnl_net:caif_netlink_parms(): no params data found [ 688.627950][T18598] bridge0: port 1(bridge_slave_0) entered blocking state [ 688.634051][T18598] bridge0: port 1(bridge_slave_0) entered disabled state [ 688.636580][T18598] bridge_slave_0: entered allmulticast mode [ 688.643068][T18598] bridge_slave_0: entered promiscuous mode [ 688.647108][T18598] bridge0: port 2(bridge_slave_1) entered blocking state [ 688.649900][T18598] bridge0: port 2(bridge_slave_1) entered disabled state [ 688.652823][T18598] bridge_slave_1: entered allmulticast mode [ 688.663111][T18598] bridge_slave_1: entered promiscuous mode [ 688.739672][T18598] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 688.764188][T18598] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 688.856299][T18598] team0: Port device team_slave_0 added [ 688.864314][T18598] team0: Port device team_slave_1 added [ 688.926208][T18598] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 688.928561][T18598] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 688.937859][T18598] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 688.942102][T18598] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 688.945573][T18598] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 688.955839][T18598] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 689.006123][T18598] hsr_slave_0: entered promiscuous mode [ 689.008539][T18598] hsr_slave_1: entered promiscuous mode [ 689.010555][T18598] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 689.013181][T18598] Cannot create hsr debugfs directory [ 689.293207][T18696] random: crng reseeded on system resumption [ 689.322980][T18697] netlink: 5280 bytes leftover after parsing attributes in process `syz.4.3258'. [ 689.586869][T18267] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 689.632654][ T5957] Bluetooth: hci2: command tx timeout [ 690.045173][T18267] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 690.262416][T18267] bridge_slave_1: left allmulticast mode [ 690.264516][T18267] bridge_slave_1: left promiscuous mode [ 690.271824][T18267] bridge0: port 2(bridge_slave_1) entered disabled state [ 690.357500][ T1415] ieee802154 phy1 wpan1: encryption failed: -22 [ 690.396547][T18267] bridge_slave_0: left allmulticast mode [ 690.398367][T18267] bridge_slave_0: left promiscuous mode [ 690.400214][T18267] bridge0: port 1(bridge_slave_0) entered disabled state [ 690.723369][T18267] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 690.729526][T18267] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 690.734914][T18267] bond0 (unregistering): Released all slaves [ 690.988519][T18716] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3263'. [ 690.991399][T18716] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3263'. [ 690.997555][T18716] bridge0: entered promiscuous mode [ 690.999938][T18716] bridge0: left promiscuous mode [ 691.135993][T18267] hsr_slave_0: left promiscuous mode [ 691.138605][T18267] hsr_slave_1: left promiscuous mode [ 691.141172][T18267] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 691.149162][T18267] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 691.153153][T18267] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 691.156152][T18267] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 691.205442][T18267] veth1_macvtap: left promiscuous mode [ 691.207184][T18267] veth0_macvtap: left promiscuous mode [ 691.208912][T18267] veth1_vlan: left promiscuous mode [ 691.210508][T18267] veth0_vlan: left promiscuous mode [ 691.720229][ T5957] Bluetooth: hci2: command tx timeout [ 691.941274][T18723] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3265'. [ 692.588066][T18267] team0 (unregistering): Port device team_slave_1 removed [ 692.693063][T18267] team0 (unregistering): Port device team_slave_0 removed [ 693.487446][T18598] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 693.492689][T18598] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 693.504038][T18598] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 693.515586][T18598] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 693.631737][T18742] mac80211_hwsim hwsim29 wlan1: entered allmulticast mode [ 693.719079][T18743] batman_adv: batadv0: Interface deactivated: dummy0 [ 693.721837][T18743] batman_adv: batadv0: Removing interface: dummy0 [ 693.734547][T18743] bridge_slave_0: left allmulticast mode [ 693.736310][T18743] bridge_slave_0: left promiscuous mode [ 693.738135][T18743] bridge0: port 1(bridge_slave_0) entered disabled state [ 693.742522][T18743] bridge_slave_1: left allmulticast mode [ 693.744276][T18743] bridge_slave_1: left promiscuous mode [ 693.746022][T18743] bridge0: port 2(bridge_slave_1) entered disabled state [ 693.751121][T18743] bond0: (slave bond_slave_0): Releasing backup interface [ 693.767240][T18743] bond0: (slave bond_slave_1): Releasing backup interface [ 693.770542][T18744] netlink: 'syz.2.3270': attribute type 10 has an invalid length. [ 693.785790][T18743] team0: Port device team_slave_0 removed [ 693.795343][ T5957] Bluetooth: hci2: command tx timeout [ 693.800355][T18743] team0: Port device team_slave_1 removed [ 693.803596][T18743] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 693.807165][T18743] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 693.811414][T18743] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 693.814361][T18743] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 693.827948][T18743] bond0: (slave macvlan2): Releasing backup interface [ 693.834966][T18743] batadv0: left promiscuous mode [ 693.851137][T18744] mac80211_hwsim hwsim29 wlan1: left allmulticast mode [ 693.855093][T18744] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 693.862954][T18598] 8021q: adding VLAN 0 to HW filter on device bond0 [ 693.913097][T18598] 8021q: adding VLAN 0 to HW filter on device team0 [ 693.944308][T18598] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 693.947459][T18598] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 693.966909][ T1136] bridge0: port 1(bridge_slave_0) entered blocking state [ 693.969508][ T1136] bridge0: port 1(bridge_slave_0) entered forwarding state [ 693.975363][ T1136] bridge0: port 2(bridge_slave_1) entered blocking state [ 693.977950][ T1136] bridge0: port 2(bridge_slave_1) entered forwarding state [ 694.039247][T18751] random: crng reseeded on system resumption [ 694.173715][T18598] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 694.420553][T18598] veth0_vlan: entered promiscuous mode [ 694.434998][T18598] veth1_vlan: entered promiscuous mode [ 694.466290][T18598] veth0_macvtap: entered promiscuous mode [ 694.479019][T18598] veth1_macvtap: entered promiscuous mode [ 694.492145][T18598] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 694.501167][T18598] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 694.509892][T18598] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 694.517157][T18598] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 694.520617][T18598] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 694.524172][T18598] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 694.571968][ T8004] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 694.581733][ T8004] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 694.598663][ T1141] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 694.601049][ T1141] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 695.783772][T18780] binder: 18779:18780 ioctl c0306201 0 returned -14 [ 695.826773][T18781] bio_check_eod: 2 callbacks suppressed [ 695.826788][T18781] syz.7.3276: attempt to access beyond end of device [ 695.826788][T18781] nbd7: rw=0, sector=64, nr_sectors = 1 limit=0 [ 695.833041][T18781] syz.7.3276: attempt to access beyond end of device [ 695.833041][T18781] nbd7: rw=0, sector=256, nr_sectors = 1 limit=0 [ 695.838535][T18781] UDF-fs: error (device nbd7): udf_read_tagged: read failed, block=256, location=256 [ 695.842031][T18781] syz.7.3276: attempt to access beyond end of device [ 695.842031][T18781] nbd7: rw=0, sector=512, nr_sectors = 1 limit=0 [ 695.851456][T18781] UDF-fs: error (device nbd7): udf_read_tagged: read failed, block=512, location=512 [ 695.856726][T18781] syz.7.3276: attempt to access beyond end of device [ 695.856726][T18781] nbd7: rw=0, sector=64, nr_sectors = 2 limit=0 [ 695.862122][T18781] syz.7.3276: attempt to access beyond end of device [ 695.862122][T18781] nbd7: rw=0, sector=512, nr_sectors = 2 limit=0 [ 695.867287][T18781] UDF-fs: error (device nbd7): udf_read_tagged: read failed, block=256, location=256 [ 695.871310][T18781] syz.7.3276: attempt to access beyond end of device [ 695.871310][T18781] nbd7: rw=0, sector=1024, nr_sectors = 2 limit=0 [ 695.876633][T18781] UDF-fs: error (device nbd7): udf_read_tagged: read failed, block=512, location=512 [ 695.880819][T18781] syz.7.3276: attempt to access beyond end of device [ 695.880819][T18781] nbd7: rw=0, sector=64, nr_sectors = 4 limit=0 [ 695.886538][T18781] syz.7.3276: attempt to access beyond end of device [ 695.886538][T18781] nbd7: rw=0, sector=1024, nr_sectors = 4 limit=0 [ 695.891376][T18781] UDF-fs: error (device nbd7): udf_read_tagged: read failed, block=256, location=256 [ 695.895305][T18781] syz.7.3276: attempt to access beyond end of device [ 695.895305][T18781] nbd7: rw=0, sector=2048, nr_sectors = 4 limit=0 [ 695.900172][T18781] UDF-fs: error (device nbd7): udf_read_tagged: read failed, block=512, location=512 [ 695.904556][T18781] syz.7.3276: attempt to access beyond end of device [ 695.904556][T18781] nbd7: rw=0, sector=64, nr_sectors = 8 limit=0 [ 695.906667][ T1136] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 695.909551][T18781] UDF-fs: error (device nbd7): udf_read_tagged: read failed, block=256, location=256 [ 695.917771][T18781] UDF-fs: error (device nbd7): udf_read_tagged: read failed, block=512, location=512 [ 695.921294][T18781] UDF-fs: warning (device nbd7): udf_fill_super: No partition found (1) [ 696.412782][ T1136] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 697.242866][T15715] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 697.247077][T15715] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 697.253261][T15715] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 697.263015][T15715] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 697.283844][T15715] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 697.734426][ T1136] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 697.833620][ T1136] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 697.968353][T18794] chnl_net:caif_netlink_parms(): no params data found [ 698.195942][ T1136] bridge_slave_1: left allmulticast mode [ 698.198472][ T1136] bridge_slave_1: left promiscuous mode [ 698.201120][ T1136] bridge0: port 2(bridge_slave_1) entered disabled state [ 698.227728][T18814] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3285'. [ 698.230422][T18814] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3285'. [ 698.233990][ T1136] bridge_slave_0: left allmulticast mode [ 698.236111][ T1136] bridge_slave_0: left promiscuous mode [ 698.239665][ T1136] bridge0: port 1(bridge_slave_0) entered disabled state [ 698.664515][ T1136] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 698.670189][ T1136] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 698.674593][ T1136] bond0 (unregistering): Released all slaves [ 698.680561][T18794] bridge0: port 1(bridge_slave_0) entered blocking state [ 698.685361][T18794] bridge0: port 1(bridge_slave_0) entered disabled state [ 698.688438][T18794] bridge_slave_0: entered allmulticast mode [ 698.692530][T18794] bridge_slave_0: entered promiscuous mode [ 698.696611][T18794] bridge0: port 2(bridge_slave_1) entered blocking state [ 698.698924][T18794] bridge0: port 2(bridge_slave_1) entered disabled state [ 698.701230][T18794] bridge_slave_1: entered allmulticast mode [ 698.706237][T18794] bridge_slave_1: entered promiscuous mode [ 698.764568][T18794] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 698.826105][T18794] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 698.901601][T18794] team0: Port device team_slave_0 added [ 698.905942][T18794] team0: Port device team_slave_1 added [ 698.982965][T18809] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 698.985051][T18809] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 698.988973][T18809] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 698.993468][T18809] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 698.997975][T18809] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 698.999868][T18809] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 699.004629][T18809] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 699.017069][T18809] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 699.019264][T18809] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 699.025387][T18809] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 699.029612][T18809] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 699.177135][ T1136] hsr_slave_0: left promiscuous mode [ 699.180259][ T1136] hsr_slave_1: left promiscuous mode [ 699.184335][ T1136] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 699.187690][ T1136] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 699.192808][ T1136] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 699.195929][ T1136] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 699.237001][ T1136] veth1_macvtap: left promiscuous mode [ 699.238982][ T1136] veth0_macvtap: left promiscuous mode [ 699.240939][ T1136] veth1_vlan: left promiscuous mode [ 699.243562][ T1136] veth0_vlan: left promiscuous mode [ 699.329589][T18829] UDF-fs: error (device nbd7): udf_read_tagged: read failed, block=256, location=256 [ 699.339966][T18829] UDF-fs: error (device nbd7): udf_read_tagged: read failed, block=512, location=512 [ 699.345745][T18829] UDF-fs: error (device nbd7): udf_read_tagged: read failed, block=256, location=256 [ 699.349781][T18829] UDF-fs: error (device nbd7): udf_read_tagged: read failed, block=512, location=512 [ 699.355249][T18829] UDF-fs: error (device nbd7): udf_read_tagged: read failed, block=256, location=256 [ 699.359140][T18829] UDF-fs: error (device nbd7): udf_read_tagged: read failed, block=512, location=512 [ 699.363911][T18829] UDF-fs: error (device nbd7): udf_read_tagged: read failed, block=256, location=256 [ 699.369135][T18829] UDF-fs: error (device nbd7): udf_read_tagged: read failed, block=512, location=512 [ 699.373777][T18829] UDF-fs: warning (device nbd7): udf_fill_super: No partition found (1) [ 699.990001][T18836] netlink: zone id is out of range [ 699.994561][T18836] netlink: zone id is out of range [ 699.996872][T18836] netlink: del zone limit has 4 unknown bytes [ 700.000415][T18836] openvswitch: netlink: Missing valid actions attribute. [ 700.005119][T18836] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 700.603279][ T1136] team0 (unregistering): Port device team_slave_1 removed [ 700.738901][ T1136] team0 (unregistering): Port device team_slave_0 removed [ 700.992630][ T5957] Bluetooth: hci0: command 0x0c1a tx timeout [ 700.992667][T15715] Bluetooth: hci1: command 0x0406 tx timeout [ 701.085498][T15715] Bluetooth: hci2: command 0x041b tx timeout [ 701.085754][ T5957] Bluetooth: hci4: command 0x0c1a tx timeout [ 701.558714][T18794] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 701.560908][T18794] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 701.568931][T18794] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 701.573504][T18794] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 701.575664][T18794] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 701.583598][T18794] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 701.649852][T18843] autofs4:pid:18843:check_dev_ioctl_version: ioctl control interface version mismatch: kernel(1.1), user(4294967071.1), cmd(0xc018937e) [ 701.655838][T18843] autofs4:pid:18843:validate_dev_ioctl: invalid device control module version supplied for cmd(0xc018937e) [ 701.667937][T18794] hsr_slave_0: entered promiscuous mode [ 701.671299][T18794] hsr_slave_1: entered promiscuous mode [ 701.675438][T18794] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 701.677820][T18794] Cannot create hsr debugfs directory [ 701.913769][T18849] netlink: 28 bytes leftover after parsing attributes in process `syz.7.3295'. [ 701.917587][T18849] netlink: 28 bytes leftover after parsing attributes in process `syz.7.3295'. [ 702.131949][T18858] netlink: 5280 bytes leftover after parsing attributes in process `syz.7.3296'. [ 703.072389][ T5957] Bluetooth: hci0: command 0x0c1a tx timeout [ 703.157475][ T5957] Bluetooth: hci2: command 0x041b tx timeout [ 703.159143][T15715] Bluetooth: hci4: command 0x0c1a tx timeout [ 704.188676][T18865] autofs4:pid:18865:check_dev_ioctl_version: ioctl control interface version mismatch: kernel(1.1), user(4294967071.1), cmd(0xc018937e) [ 704.196035][T18865] autofs4:pid:18865:validate_dev_ioctl: invalid device control module version supplied for cmd(0xc018937e) [ 704.449413][T18794] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 704.455985][T18794] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 704.462581][T18794] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 704.468921][T18794] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 704.545060][T18794] 8021q: adding VLAN 0 to HW filter on device bond0 [ 704.579706][T18794] 8021q: adding VLAN 0 to HW filter on device team0 [ 704.598338][ T7660] bridge0: port 1(bridge_slave_0) entered blocking state [ 704.601441][ T7660] bridge0: port 1(bridge_slave_0) entered forwarding state [ 704.608945][ T7660] bridge0: port 2(bridge_slave_1) entered blocking state [ 704.611958][ T7660] bridge0: port 2(bridge_slave_1) entered forwarding state [ 704.967674][T18794] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 705.152637][T15715] Bluetooth: hci0: command 0x0c1a tx timeout [ 705.233593][ T5957] Bluetooth: hci4: command 0x0c1a tx timeout [ 705.236282][T15715] Bluetooth: hci2: command 0x041b tx timeout [ 705.377649][T18881] netlink: 12 bytes leftover after parsing attributes in process `syz.7.3301'. [ 705.417567][T18881] 8021q: adding VLAN 0 to HW filter on device bond1 [ 705.514480][T18794] veth0_vlan: entered promiscuous mode [ 705.533644][T18794] veth1_vlan: entered promiscuous mode [ 705.558585][T18794] veth0_macvtap: entered promiscuous mode [ 705.565058][T18794] veth1_macvtap: entered promiscuous mode [ 705.582181][T18794] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 705.594142][T18794] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 705.601867][T18794] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 705.609013][T18794] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 705.615226][T18794] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 705.618696][T18794] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 705.774236][ T8012] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 705.777506][ T8012] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 705.840902][T18897] bio_check_eod: 14 callbacks suppressed [ 705.840920][T18897] syz.7.3303: attempt to access beyond end of device [ 705.840920][T18897] nbd7: rw=0, sector=64, nr_sectors = 1 limit=0 [ 705.849667][T18897] syz.7.3303: attempt to access beyond end of device [ 705.849667][T18897] nbd7: rw=0, sector=256, nr_sectors = 1 limit=0 [ 705.855928][T18897] UDF-fs: error (device nbd7): udf_read_tagged: read failed, block=256, location=256 [ 705.860169][T18897] syz.7.3303: attempt to access beyond end of device [ 705.860169][T18897] nbd7: rw=0, sector=512, nr_sectors = 1 limit=0 [ 705.866303][T18897] UDF-fs: error (device nbd7): udf_read_tagged: read failed, block=512, location=512 [ 705.871149][T18897] syz.7.3303: attempt to access beyond end of device [ 705.871149][T18897] nbd7: rw=0, sector=64, nr_sectors = 2 limit=0 [ 705.877806][T18897] syz.7.3303: attempt to access beyond end of device [ 705.877806][T18897] nbd7: rw=0, sector=512, nr_sectors = 2 limit=0 [ 705.880838][T18267] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 705.883634][T18897] UDF-fs: error (device nbd7): udf_read_tagged: read failed, block=256, location=256 [ 705.890315][T18897] syz.7.3303: attempt to access beyond end of device [ 705.890315][T18897] nbd7: rw=0, sector=1024, nr_sectors = 2 limit=0 [ 705.895805][T18267] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 705.899748][T18897] UDF-fs: error (device nbd7): udf_read_tagged: read failed, block=512, location=512 [ 705.905120][T18897] syz.7.3303: attempt to access beyond end of device [ 705.905120][T18897] nbd7: rw=0, sector=64, nr_sectors = 4 limit=0 [ 705.911080][T18897] syz.7.3303: attempt to access beyond end of device [ 705.911080][T18897] nbd7: rw=0, sector=1024, nr_sectors = 4 limit=0 [ 705.917671][T18897] UDF-fs: error (device nbd7): udf_read_tagged: read failed, block=256, location=256 [ 705.923723][T18897] syz.7.3303: attempt to access beyond end of device [ 705.923723][T18897] nbd7: rw=0, sector=2048, nr_sectors = 4 limit=0 [ 705.929002][T18897] UDF-fs: error (device nbd7): udf_read_tagged: read failed, block=512, location=512 [ 705.934158][T18897] syz.7.3303: attempt to access beyond end of device [ 705.934158][T18897] nbd7: rw=0, sector=64, nr_sectors = 8 limit=0 [ 705.939563][T18897] UDF-fs: error (device nbd7): udf_read_tagged: read failed, block=256, location=256 [ 705.944514][T18897] UDF-fs: error (device nbd7): udf_read_tagged: read failed, block=512, location=512 [ 705.948574][T18897] UDF-fs: warning (device nbd7): udf_fill_super: No partition found (1) [ 706.042373][T18901] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3305'. [ 706.046138][T18901] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3305'. [ 706.055430][T18901] ªªªªª': entered promiscuous mode [ 706.058695][T18901] ªªªªª': left promiscuous mode [ 706.300473][T18908] autofs4:pid:18908:check_dev_ioctl_version: ioctl control interface version mismatch: kernel(1.1), user(4294967071.1), cmd(0xc018937e) [ 706.306982][T18908] autofs4:pid:18908:validate_dev_ioctl: invalid device control module version supplied for cmd(0xc018937e) [ 707.089536][T18912] netlink: 48 bytes leftover after parsing attributes in process `syz.7.3308'. [ 707.232850][T15715] Bluetooth: hci0: command 0x0c1a tx timeout [ 707.438877][ T8004] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 708.325407][ T5957] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 708.329939][ T5957] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 708.333120][ T5957] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 708.335971][ T5957] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 708.339848][ T5957] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 708.439201][T18932] chnl_net:caif_netlink_parms(): no params data found [ 708.503034][T18932] bridge0: port 1(bridge_slave_0) entered blocking state [ 708.505337][T18932] bridge0: port 1(bridge_slave_0) entered disabled state [ 708.507583][T18932] bridge_slave_0: entered allmulticast mode [ 708.510633][T18932] bridge_slave_0: entered promiscuous mode [ 708.514107][T18932] bridge0: port 2(bridge_slave_1) entered blocking state [ 708.516368][T18932] bridge0: port 2(bridge_slave_1) entered disabled state [ 708.518701][T18932] bridge_slave_1: entered allmulticast mode [ 708.521342][T18932] bridge_slave_1: entered promiscuous mode [ 708.597868][T18932] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 708.605217][T18932] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 708.697154][T18932] team0: Port device team_slave_0 added [ 708.707557][T18932] team0: Port device team_slave_1 added [ 708.786665][T18932] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 708.789591][T18932] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 708.800518][T18932] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 708.806693][T18932] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 708.809507][T18932] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 708.820700][T18932] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 708.910059][T18932] hsr_slave_0: entered promiscuous mode [ 708.913691][T18932] hsr_slave_1: entered promiscuous mode [ 708.916608][T18932] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 708.919718][T18932] Cannot create hsr debugfs directory [ 709.141896][ T8004] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 709.348877][ T8004] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 709.445746][ T8004] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 709.559157][T18950] macvlan4: entered promiscuous mode [ 709.560976][T18950] macvlan4: entered allmulticast mode [ 709.564593][T18950] batadv0: entered promiscuous mode [ 709.566797][T18950] 8021q: adding VLAN 0 to HW filter on device macvlan4 [ 709.570951][T18950] bond0: (slave macvlan4): Enslaving as an active interface with an up link [ 709.612667][ T8004] bridge_slave_1: left allmulticast mode [ 709.614308][ T8004] bridge_slave_1: left promiscuous mode [ 709.616018][ T8004] bridge0: port 2(bridge_slave_1) entered disabled state [ 709.620039][ T8004] bridge_slave_0: left allmulticast mode [ 709.621742][ T8004] bridge_slave_0: left promiscuous mode [ 709.623650][ T8004] bridge0: port 1(bridge_slave_0) entered disabled state [ 709.701368][T18958] autofs4:pid:18958:check_dev_ioctl_version: ioctl control interface version mismatch: kernel(1.1), user(4294967071.1), cmd(0xc018937e) [ 709.707644][T18958] autofs4:pid:18958:validate_dev_ioctl: invalid device control module version supplied for cmd(0xc018937e) [ 709.919483][ T8004] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 709.928108][ T8004] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 709.933634][ T8004] bond0 (unregistering): Released all slaves [ 710.229999][ T8004] hsr_slave_0: left promiscuous mode [ 710.233192][ T8004] hsr_slave_1: left promiscuous mode [ 710.236097][ T8004] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 710.239250][ T8004] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 710.243360][ T8004] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 710.246518][ T8004] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 710.297521][ T8004] veth1_macvtap: left promiscuous mode [ 710.299919][ T8004] veth0_macvtap: left promiscuous mode [ 710.302946][ T8004] veth1_vlan: left promiscuous mode [ 710.305435][ T8004] veth0_vlan: left promiscuous mode [ 710.352361][ T5957] Bluetooth: hci2: command tx timeout [ 710.634758][ T40] audit: type=1326 audit(2000000802.187:2575): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18968 comm="syz.4.3322" exe="/syz-executor" sig=0 arch=40000003 syscall=172 compat=1 ip=0xf7f35579 code=0x7ffc0000 [ 710.643176][ T40] audit: type=1326 audit(2000000802.187:2576): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18968 comm="syz.4.3322" exe="/syz-executor" sig=0 arch=40000003 syscall=172 compat=1 ip=0xf7f35579 code=0x7ffc0000 [ 710.651455][ T40] audit: type=1326 audit(2000000802.187:2577): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18968 comm="syz.4.3322" exe="/syz-executor" sig=0 arch=40000003 syscall=172 compat=1 ip=0xf7f35579 code=0x7ffc0000 [ 710.661461][ T40] audit: type=1326 audit(2000000802.187:2578): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18968 comm="syz.4.3322" exe="/syz-executor" sig=0 arch=40000003 syscall=172 compat=1 ip=0xf7f35579 code=0x7ffc0000 [ 710.670132][ T40] audit: type=1326 audit(2000000802.187:2579): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18968 comm="syz.4.3322" exe="/syz-executor" sig=0 arch=40000003 syscall=172 compat=1 ip=0xf7f35579 code=0x7ffc0000 [ 710.680707][ T40] audit: type=1326 audit(2000000802.187:2580): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18968 comm="syz.4.3322" exe="/syz-executor" sig=0 arch=40000003 syscall=172 compat=1 ip=0xf7f35579 code=0x7ffc0000 [ 710.689830][ T40] audit: type=1326 audit(2000000802.187:2581): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18968 comm="syz.4.3322" exe="/syz-executor" sig=0 arch=40000003 syscall=172 compat=1 ip=0xf7f35579 code=0x7ffc0000 [ 710.703641][ T40] audit: type=1326 audit(2000000802.247:2582): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18968 comm="syz.4.3322" exe="/syz-executor" sig=0 arch=40000003 syscall=172 compat=1 ip=0xf7f35579 code=0x7ffc0000 [ 710.877390][T18976] netlink: 5280 bytes leftover after parsing attributes in process `syz.7.3323'. [ 711.848543][ T8004] team0 (unregistering): Port device team_slave_1 removed [ 712.029056][ T8004] team0 (unregistering): Port device team_slave_0 removed [ 712.432400][ T5957] Bluetooth: hci2: command tx timeout [ 712.734899][T18978] vlan2: entered promiscuous mode [ 712.736618][T18978] vlan2: entered allmulticast mode [ 712.738156][T18978] hsr_slave_1: entered allmulticast mode [ 712.781554][T18932] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 712.785742][T18932] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 712.789954][T18932] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 712.797578][T18932] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 712.847302][T18932] 8021q: adding VLAN 0 to HW filter on device bond0 [ 712.880337][T18932] 8021q: adding VLAN 0 to HW filter on device team0 [ 712.889835][ T8014] bridge0: port 1(bridge_slave_0) entered blocking state [ 712.892952][ T8014] bridge0: port 1(bridge_slave_0) entered forwarding state [ 712.910659][ T8005] bridge0: port 2(bridge_slave_1) entered blocking state [ 712.913397][ T8005] bridge0: port 2(bridge_slave_1) entered forwarding state [ 713.114768][T18932] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 713.252076][T18932] veth0_vlan: entered promiscuous mode [ 713.258963][T18932] veth1_vlan: entered promiscuous mode [ 713.275519][T18932] veth0_macvtap: entered promiscuous mode [ 713.279634][T18932] veth1_macvtap: entered promiscuous mode [ 713.289795][T18932] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 713.296735][T18932] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 713.301521][T18932] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 713.305259][T18932] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 713.308032][T18932] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 713.310797][T18932] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 713.417780][ T8005] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 713.420363][ T8005] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 713.432174][T18267] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 713.435601][T18267] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 713.902774][ T10] usb 7-1: new high-speed USB device number 31 using dummy_hcd [ 713.923868][T19020] sctp: [Deprecated]: syz.4.3332 (pid 19020) Use of int in maxseg socket option. [ 713.923868][T19020] Use struct sctp_assoc_value instead [ 714.052281][ T10] usb 7-1: Using ep0 maxpacket: 8 [ 714.057536][ T10] usb 7-1: config index 0 descriptor too short (expected 301, got 45) [ 714.062970][ T10] usb 7-1: config 16 has an invalid interface number: 3 but max is 0 [ 714.068143][ T10] usb 7-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 714.075191][ T10] usb 7-1: config 16 has no interface number 0 [ 714.079195][ T10] usb 7-1: config 16 interface 3 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 714.089548][ T10] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 714.092548][ T10] usb 7-1: New USB device strings: Mfr=0, Product=199, SerialNumber=0 [ 714.095043][ T10] usb 7-1: Product: syz [ 714.101072][ T10] usbtmc 7-1:16.3: bulk endpoints not found [ 714.854996][T19029] usb usb8: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 715.188457][ T7660] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 716.038030][T19029] netlink: 'syz.4.3334': attribute type 10 has an invalid length. [ 716.040644][T19029] netlink: 40 bytes leftover after parsing attributes in process `syz.4.3334'. [ 716.048304][T19029] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 716.051169][T19029] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 716.054217][T19029] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 716.057486][T19029] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 716.073098][T19029] geneve0: entered promiscuous mode [ 716.076104][T19029] team0: Port device geneve0 added [ 716.616993][T19045] autofs4:pid:19045:check_dev_ioctl_version: ioctl control interface version mismatch: kernel(1.1), user(4294967071.1), cmd(0xc018937e) [ 716.621349][T19045] autofs4:pid:19045:validate_dev_ioctl: invalid device control module version supplied for cmd(0xc018937e) [ 716.628272][T15715] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 716.633684][T15715] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 716.637036][T15715] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 716.641992][T15715] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 716.646388][T15715] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 716.670895][ T6010] usb 7-1: USB disconnect, device number 31 [ 716.745151][ T7660] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 716.831181][T19046] chnl_net:caif_netlink_parms(): no params data found [ 716.976081][ T7660] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 717.062923][ T7660] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 717.124803][T19046] bridge0: port 1(bridge_slave_0) entered blocking state [ 717.127398][T19046] bridge0: port 1(bridge_slave_0) entered disabled state [ 717.129799][T19046] bridge_slave_0: entered allmulticast mode [ 717.136019][T19046] bridge_slave_0: entered promiscuous mode [ 717.149322][T19046] bridge0: port 2(bridge_slave_1) entered blocking state [ 717.156192][T19046] bridge0: port 2(bridge_slave_1) entered disabled state [ 717.159902][T19046] bridge_slave_1: entered allmulticast mode [ 717.164776][T19046] bridge_slave_1: entered promiscuous mode [ 717.216753][T19046] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 717.223366][T19046] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 717.314418][T19046] team0: Port device team_slave_0 added [ 717.320091][T19046] team0: Port device team_slave_1 added [ 717.325380][ T7660] bridge_slave_1: left allmulticast mode [ 717.327847][ T7660] bridge_slave_1: left promiscuous mode [ 717.330367][ T7660] bridge0: port 2(bridge_slave_1) entered disabled state [ 717.335347][ T7660] bridge_slave_0: left allmulticast mode [ 717.337603][ T7660] bridge_slave_0: left promiscuous mode [ 717.339993][ T7660] bridge0: port 1(bridge_slave_0) entered disabled state [ 717.486344][T19066] netlink: 28 bytes leftover after parsing attributes in process `syz.7.3341'. [ 717.489258][T19066] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3341'. [ 717.779159][ T7660] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 717.785676][ T7660] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 717.789708][ T7660] bond0 (unregistering): Released all slaves [ 717.867273][T19078] netlink: 5280 bytes leftover after parsing attributes in process `syz.2.3344'. [ 718.104956][T19046] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 718.107694][T19046] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 718.121044][T19046] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 718.127384][T19046] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 718.130140][T19046] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 718.142684][T19046] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 718.235813][T19046] hsr_slave_0: entered promiscuous mode [ 718.238630][T19046] hsr_slave_1: entered promiscuous mode [ 718.241275][T19046] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 718.244500][T19046] Cannot create hsr debugfs directory [ 718.306805][ T7660] hsr_slave_0: left promiscuous mode [ 718.309366][ T7660] hsr_slave_1: left promiscuous mode [ 718.311923][ T7660] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 718.314604][ T7660] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 718.317431][ T7660] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 718.319808][ T7660] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 718.350182][ T7660] veth1_macvtap: left promiscuous mode [ 718.352066][ T7660] veth0_macvtap: left promiscuous mode [ 718.354026][ T7660] veth1_vlan: left promiscuous mode [ 718.355743][ T7660] veth0_vlan: left promiscuous mode [ 718.675033][T15715] Bluetooth: hci2: command tx timeout [ 719.201149][ T7660] team0 (unregistering): Port device team_slave_1 removed [ 719.348943][ T7660] team0 (unregistering): Port device team_slave_0 removed [ 720.322293][ T29] usb 7-1: new high-speed USB device number 32 using dummy_hcd [ 720.359475][ T6010] hid-generic 00A0:0008:0003.000D: unknown main item tag 0x0 [ 720.362278][ T6010] hid-generic 00A0:0008:0003.000D: unknown main item tag 0x0 [ 720.364642][ T6010] hid-generic 00A0:0008:0003.000D: unknown main item tag 0x0 [ 720.367378][ T6010] hid-generic 00A0:0008:0003.000D: unknown main item tag 0x0 [ 720.369838][ T6010] hid-generic 00A0:0008:0003.000D: unknown main item tag 0x0 [ 720.372416][ T6010] hid-generic 00A0:0008:0003.000D: unknown main item tag 0x0 [ 720.374800][ T6010] hid-generic 00A0:0008:0003.000D: unknown main item tag 0x0 [ 720.377170][ T6010] hid-generic 00A0:0008:0003.000D: unknown main item tag 0x0 [ 720.379528][ T6010] hid-generic 00A0:0008:0003.000D: unknown main item tag 0x0 [ 720.381923][ T6010] hid-generic 00A0:0008:0003.000D: unknown main item tag 0x0 [ 720.392979][ T6010] hid-generic 00A0:0008:0003.000D: hidraw0: HID v0.05 Device [syz1] on syz0 [ 720.470559][T19046] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 720.474692][T19046] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 720.478620][T19046] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 720.482758][T19046] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 720.492267][ T29] usb 7-1: Using ep0 maxpacket: 8 [ 720.496296][ T29] usb 7-1: config index 0 descriptor too short (expected 301, got 45) [ 720.499485][ T29] usb 7-1: config 16 has an invalid interface number: 3 but max is 0 [ 720.512258][ T29] usb 7-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 720.516211][ T29] usb 7-1: config 16 has no interface number 0 [ 720.518633][ T29] usb 7-1: config 16 interface 3 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 720.525978][ T29] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 720.529514][ T29] usb 7-1: New USB device strings: Mfr=0, Product=199, SerialNumber=0 [ 720.532712][ T29] usb 7-1: Product: syz [ 720.536672][ T29] usbtmc 7-1:16.3: bulk endpoints not found [ 720.563110][T19046] 8021q: adding VLAN 0 to HW filter on device bond0 [ 720.572922][T19046] 8021q: adding VLAN 0 to HW filter on device team0 [ 720.584420][ T8005] bridge0: port 1(bridge_slave_0) entered blocking state [ 720.586734][ T8005] bridge0: port 1(bridge_slave_0) entered forwarding state [ 720.597443][ T8005] bridge0: port 2(bridge_slave_1) entered blocking state [ 720.599862][ T8005] bridge0: port 2(bridge_slave_1) entered forwarding state [ 720.722939][T19046] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 720.752529][T15715] Bluetooth: hci2: command tx timeout [ 720.856572][T19046] veth0_vlan: entered promiscuous mode [ 720.862122][T19046] veth1_vlan: entered promiscuous mode [ 720.877705][T19046] veth0_macvtap: entered promiscuous mode [ 720.881907][T19046] veth1_macvtap: entered promiscuous mode [ 720.893738][T19046] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 720.900915][T19046] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 720.909090][T19046] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 720.912565][T19046] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 720.915869][T19046] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 720.919217][T19046] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 720.954583][ T8004] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 720.957110][ T8004] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 720.969062][ T7660] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 720.972502][ T7660] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 722.095389][T19126] bio_check_eod: 2 callbacks suppressed [ 722.095406][T19126] syz.4.3351: attempt to access beyond end of device [ 722.095406][T19126] nbd4: rw=0, sector=64, nr_sectors = 1 limit=0 [ 722.102620][T19126] syz.4.3351: attempt to access beyond end of device [ 722.102620][T19126] nbd4: rw=0, sector=256, nr_sectors = 1 limit=0 [ 722.107963][T19126] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=256, location=256 [ 722.112086][T19126] syz.4.3351: attempt to access beyond end of device [ 722.112086][T19126] nbd4: rw=0, sector=512, nr_sectors = 1 limit=0 [ 722.118497][T19126] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=512, location=512 [ 722.123679][T19126] syz.4.3351: attempt to access beyond end of device [ 722.123679][T19126] nbd4: rw=0, sector=64, nr_sectors = 2 limit=0 [ 722.131406][T19126] syz.4.3351: attempt to access beyond end of device [ 722.131406][T19126] nbd4: rw=0, sector=512, nr_sectors = 2 limit=0 [ 722.139145][T19126] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=256, location=256 [ 722.143583][T19126] syz.4.3351: attempt to access beyond end of device [ 722.143583][T19126] nbd4: rw=0, sector=1024, nr_sectors = 2 limit=0 [ 722.149187][T19126] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=512, location=512 [ 722.152716][T19126] syz.4.3351: attempt to access beyond end of device [ 722.152716][T19126] nbd4: rw=0, sector=64, nr_sectors = 4 limit=0 [ 722.156763][T19126] syz.4.3351: attempt to access beyond end of device [ 722.156763][T19126] nbd4: rw=0, sector=1024, nr_sectors = 4 limit=0 [ 722.160774][T19126] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=256, location=256 [ 722.164117][T19126] syz.4.3351: attempt to access beyond end of device [ 722.164117][T19126] nbd4: rw=0, sector=2048, nr_sectors = 4 limit=0 [ 722.168501][T19126] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=512, location=512 [ 722.173194][T19126] syz.4.3351: attempt to access beyond end of device [ 722.173194][T19126] nbd4: rw=0, sector=64, nr_sectors = 8 limit=0 [ 722.178801][T19126] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=256, location=256 [ 722.183863][T19126] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=512, location=512 [ 722.187501][T19126] UDF-fs: warning (device nbd4): udf_fill_super: No partition found (1) [ 723.111475][ T9] usb 7-1: USB disconnect, device number 32 [ 723.139378][T15715] Bluetooth: hci0: unexpected event 0x06 length: 5 > 3 [ 723.310012][ T8011] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 724.479999][T19157] netlink: 5280 bytes leftover after parsing attributes in process `syz.7.3360'. [ 724.518458][ T5957] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 724.527064][ T5957] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 724.529893][ T5957] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 724.532752][ T5957] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 724.535704][ T5957] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 724.646165][T19158] chnl_net:caif_netlink_parms(): no params data found [ 724.658653][T19160] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3359'. [ 724.705445][T19160] 8021q: adding VLAN 0 to HW filter on device bond0 [ 725.065470][T19177] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=256, location=256 [ 725.068955][T19177] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=512, location=512 [ 725.072908][T19177] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=256, location=256 [ 725.075856][T19177] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=512, location=512 [ 725.079120][T19177] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=256, location=256 [ 725.082018][T19177] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=512, location=512 [ 725.085326][T19177] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=256, location=256 [ 725.088307][T19177] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=512, location=512 [ 725.091103][T19177] UDF-fs: warning (device nbd4): udf_fill_super: No partition found (1) [ 725.471975][T19158] bridge0: port 1(bridge_slave_0) entered blocking state [ 725.474438][T19158] bridge0: port 1(bridge_slave_0) entered disabled state [ 725.477113][T19158] bridge_slave_0: entered allmulticast mode [ 725.479715][T19158] bridge_slave_0: entered promiscuous mode [ 725.483013][T19158] bridge0: port 2(bridge_slave_1) entered blocking state [ 725.485308][T19158] bridge0: port 2(bridge_slave_1) entered disabled state [ 725.487646][T19158] bridge_slave_1: entered allmulticast mode [ 725.490583][T19158] bridge_slave_1: entered promiscuous mode [ 725.587116][T19158] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 725.595829][T19158] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 725.620091][T15715] Bluetooth: hci0: unexpected event for opcode 0x0000 [ 725.644479][T19158] team0: Port device team_slave_0 added [ 725.696535][T19158] team0: Port device team_slave_1 added [ 725.745514][T19158] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 725.747871][T19158] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 725.759092][T19158] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 725.763785][T19158] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 725.765954][T19158] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 725.773997][T19158] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 725.794733][ T8011] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 725.888706][T19158] hsr_slave_0: entered promiscuous mode [ 725.890955][T19158] hsr_slave_1: entered promiscuous mode [ 725.893924][T19158] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 725.896283][T19158] Cannot create hsr debugfs directory [ 725.913458][ T8011] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 726.004184][ T8011] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 726.450394][T19192] netlink: 'syz.4.3367': attribute type 1 has an invalid length. [ 726.452976][T19192] netlink: 224 bytes leftover after parsing attributes in process `syz.4.3367'. [ 726.456113][T19192] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3367'. [ 726.549148][ T8011] bridge_slave_1: left allmulticast mode [ 726.550970][ T8011] bridge_slave_1: left promiscuous mode [ 726.553528][ T8011] bridge0: port 2(bridge_slave_1) entered disabled state [ 726.557617][ T8011] bridge_slave_0: left allmulticast mode [ 726.559403][ T8011] bridge_slave_0: left promiscuous mode [ 726.561264][ T8011] bridge0: port 1(bridge_slave_0) entered disabled state [ 726.594153][T15715] Bluetooth: hci2: command tx timeout [ 727.104934][ T8011] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 727.125562][ T8011] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 727.137550][ T8011] bond0 (unregistering): Released all slaves [ 727.347401][T19201] autofs4:pid:19201:check_dev_ioctl_version: ioctl control interface version mismatch: kernel(1.1), user(4294967071.1), cmd(0xc018937e) [ 727.352110][T19201] autofs4:pid:19201:validate_dev_ioctl: invalid device control module version supplied for cmd(0xc018937e) [ 727.690213][ T8011] hsr_slave_0: left promiscuous mode [ 727.696180][ T8011] hsr_slave_1: left promiscuous mode [ 727.700737][ T8011] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 727.705755][ T8011] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 727.714217][ T8011] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 727.716649][ T8011] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 727.903741][ T8011] veth1_macvtap: left promiscuous mode [ 727.905693][ T8011] veth0_macvtap: left promiscuous mode [ 727.907491][ T8011] veth1_vlan: left promiscuous mode [ 727.909207][ T8011] veth0_vlan: left promiscuous mode [ 728.457806][T19214] bio_check_eod: 14 callbacks suppressed [ 728.457816][T19214] syz.2.3374: attempt to access beyond end of device [ 728.457816][T19214] nbd2: rw=4096, sector=2, nr_sectors = 2 limit=0 [ 728.464026][T19214] EXT4-fs (nbd2): unable to read superblock [ 728.672588][T15715] Bluetooth: hci2: command tx timeout [ 729.112052][ T8011] team0 (unregistering): Port device team_slave_1 removed [ 729.203151][ T8011] team0 (unregistering): Port device team_slave_0 removed [ 729.514644][ T40] audit: type=1326 audit(2000000821.077:2583): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19223 comm="syz.2.3375" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7fe7579 code=0x0 [ 729.643846][T15715] Bluetooth: hci0: Controller not accepting commands anymore: ncmd = 0 [ 729.649451][T15715] Bluetooth: hci0: Injecting HCI hardware error event [ 729.658545][ T5957] Bluetooth: hci0: hardware error 0x00 [ 730.034019][T19158] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 730.040938][T19158] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 730.047448][T19158] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 730.059143][T19158] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 730.124312][T19158] 8021q: adding VLAN 0 to HW filter on device bond0 [ 730.134307][T19158] 8021q: adding VLAN 0 to HW filter on device team0 [ 730.164118][ T1141] bridge0: port 1(bridge_slave_0) entered blocking state [ 730.166386][ T1141] bridge0: port 1(bridge_slave_0) entered forwarding state [ 730.170506][T19231] syz.7.3376: attempt to access beyond end of device [ 730.170506][T19231] nbd7: rw=0, sector=64, nr_sectors = 1 limit=0 [ 730.174947][T19231] syz.7.3376: attempt to access beyond end of device [ 730.174947][T19231] nbd7: rw=0, sector=256, nr_sectors = 1 limit=0 [ 730.175775][ T1141] bridge0: port 2(bridge_slave_1) entered blocking state [ 730.179041][T19231] UDF-fs: error (device nbd7): udf_read_tagged: read failed, block=256, location=256 [ 730.181219][ T1141] bridge0: port 2(bridge_slave_1) entered forwarding state [ 730.184742][T19231] syz.7.3376: attempt to access beyond end of device [ 730.184742][T19231] nbd7: rw=0, sector=512, nr_sectors = 1 limit=0 [ 730.190544][T19231] UDF-fs: error (device nbd7): udf_read_tagged: read failed, block=512, location=512 [ 730.195266][T19231] syz.7.3376: attempt to access beyond end of device [ 730.195266][T19231] nbd7: rw=0, sector=64, nr_sectors = 2 limit=0 [ 730.199494][T19231] syz.7.3376: attempt to access beyond end of device [ 730.199494][T19231] nbd7: rw=0, sector=512, nr_sectors = 2 limit=0 [ 730.208755][T19231] UDF-fs: error (device nbd7): udf_read_tagged: read failed, block=256, location=256 [ 730.213182][T19231] syz.7.3376: attempt to access beyond end of device [ 730.213182][T19231] nbd7: rw=0, sector=1024, nr_sectors = 2 limit=0 [ 730.217371][T19231] UDF-fs: error (device nbd7): udf_read_tagged: read failed, block=512, location=512 [ 730.221996][T19231] syz.7.3376: attempt to access beyond end of device [ 730.221996][T19231] nbd7: rw=0, sector=64, nr_sectors = 4 limit=0 [ 730.229196][T19231] syz.7.3376: attempt to access beyond end of device [ 730.229196][T19231] nbd7: rw=0, sector=1024, nr_sectors = 4 limit=0 [ 730.239252][T19231] UDF-fs: error (device nbd7): udf_read_tagged: read failed, block=256, location=256 [ 730.246671][T19231] syz.7.3376: attempt to access beyond end of device [ 730.246671][T19231] nbd7: rw=0, sector=2048, nr_sectors = 4 limit=0 [ 730.257549][T19231] UDF-fs: error (device nbd7): udf_read_tagged: read failed, block=512, location=512 [ 730.265475][T19231] UDF-fs: error (device nbd7): udf_read_tagged: read failed, block=256, location=256 [ 730.272683][T19231] UDF-fs: error (device nbd7): udf_read_tagged: read failed, block=512, location=512 [ 730.278064][T19231] UDF-fs: warning (device nbd7): udf_fill_super: No partition found (1) [ 730.557426][ T8011] bond0 (unregistering): Released all slaves [ 730.752623][T15715] Bluetooth: hci2: command tx timeout [ 730.768395][T19243] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3378'. [ 730.785907][T19243] 8021q: adding VLAN 0 to HW filter on device bond0 [ 730.845097][T19158] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 731.092011][T19158] veth0_vlan: entered promiscuous mode [ 731.097164][T19158] veth1_vlan: entered promiscuous mode [ 731.112428][T19158] veth0_macvtap: entered promiscuous mode [ 731.116130][T19158] veth1_macvtap: entered promiscuous mode [ 731.128111][T19158] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 731.134391][T19158] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 731.138019][T19158] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 731.140857][T19158] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 731.144478][T19158] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 731.147192][T19158] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 731.683526][ T8014] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 731.686089][ T8014] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 731.707495][ T8005] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 731.709959][ T8005] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 731.712616][ T5957] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 731.878124][T19269] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3382'. [ 731.918734][ T8012] bond0 (unregistering): Released all slaves [ 732.898308][T19289] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=256, location=256 [ 732.901709][T19289] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=512, location=512 [ 732.905802][T19289] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=256, location=256 [ 732.908810][T19289] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=512, location=512 [ 732.914532][T19289] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=256, location=256 [ 732.917672][T19289] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=512, location=512 [ 732.917685][T19289] UDF-fs: warning (device nbd2): udf_fill_super: No partition found (1) [ 732.972505][T19287] block nbd4: shutting down sockets [ 733.357273][ T8005] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 734.431556][ T8005] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 734.519095][ T8005] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 734.768619][ T8005] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 734.798399][T15715] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 734.804141][T15715] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 734.808280][T15715] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 734.818632][T15715] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 734.829140][T15715] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 734.885022][ T8005] bridge_slave_1: left allmulticast mode [ 734.886836][ T8005] bridge_slave_1: left promiscuous mode [ 734.888666][ T8005] bridge0: port 2(bridge_slave_1) entered disabled state [ 734.892788][ T8005] bridge_slave_0: left allmulticast mode [ 734.894660][ T8005] bridge_slave_0: left promiscuous mode [ 734.896481][ T8005] bridge0: port 1(bridge_slave_0) entered disabled state [ 735.247782][ T8005] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 735.252043][ T8005] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 735.255825][ T8005] bond0 (unregistering): Released all slaves [ 735.347931][T19307] chnl_net:caif_netlink_parms(): no params data found [ 735.501863][T19307] bridge0: port 1(bridge_slave_0) entered blocking state [ 735.504423][T19307] bridge0: port 1(bridge_slave_0) entered disabled state [ 735.506726][T19307] bridge_slave_0: entered allmulticast mode [ 735.509391][T19307] bridge_slave_0: entered promiscuous mode [ 735.513457][T19307] bridge0: port 2(bridge_slave_1) entered blocking state [ 735.516679][T19307] bridge0: port 2(bridge_slave_1) entered disabled state [ 735.519460][T19307] bridge_slave_1: entered allmulticast mode [ 735.522706][T19307] bridge_slave_1: entered promiscuous mode [ 735.697775][T19307] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 735.714483][T19307] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 735.788136][ T8005] hsr_slave_0: left promiscuous mode [ 735.790653][ T8005] hsr_slave_1: left promiscuous mode [ 735.793656][ T8005] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 735.796342][ T8005] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 735.799401][ T8005] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 735.801869][ T8005] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 735.834893][ T8005] veth1_macvtap: left promiscuous mode [ 735.836775][ T8005] veth0_macvtap: left promiscuous mode [ 735.838564][ T8005] veth1_vlan: left promiscuous mode [ 735.840281][ T8005] veth0_vlan: left promiscuous mode [ 736.579500][T19344] netlink: 56 bytes leftover after parsing attributes in process `syz.4.3400'. [ 736.912610][ T5957] Bluetooth: hci2: command tx timeout [ 736.939998][ T8005] team0 (unregistering): Port device team_slave_1 removed [ 736.970328][T19350] bio_check_eod: 12 callbacks suppressed [ 736.970345][T19350] syz.2.3401: attempt to access beyond end of device [ 736.970345][T19350] nbd2: rw=0, sector=64, nr_sectors = 2 limit=0 [ 736.977369][T19350] syz.2.3401: attempt to access beyond end of device [ 736.977369][T19350] nbd2: rw=0, sector=512, nr_sectors = 2 limit=0 [ 736.981427][T19350] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=256, location=256 [ 736.984979][T19350] syz.2.3401: attempt to access beyond end of device [ 736.984979][T19350] nbd2: rw=0, sector=1024, nr_sectors = 2 limit=0 [ 736.989019][T19350] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=512, location=512 [ 736.992421][T19350] syz.2.3401: attempt to access beyond end of device [ 736.992421][T19350] nbd2: rw=0, sector=64, nr_sectors = 4 limit=0 [ 736.996497][T19350] syz.2.3401: attempt to access beyond end of device [ 736.996497][T19350] nbd2: rw=0, sector=1024, nr_sectors = 4 limit=0 [ 737.000713][T19350] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=256, location=256 [ 737.003940][T19350] syz.2.3401: attempt to access beyond end of device [ 737.003940][T19350] nbd2: rw=0, sector=2048, nr_sectors = 4 limit=0 [ 737.008176][T19350] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=512, location=512 [ 737.011400][T19350] syz.2.3401: attempt to access beyond end of device [ 737.011400][T19350] nbd2: rw=0, sector=64, nr_sectors = 8 limit=0 [ 737.015795][T19350] syz.2.3401: attempt to access beyond end of device [ 737.015795][T19350] nbd2: rw=0, sector=2048, nr_sectors = 8 limit=0 [ 737.019825][T19350] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=256, location=256 [ 737.023447][T19350] syz.2.3401: attempt to access beyond end of device [ 737.023447][T19350] nbd2: rw=0, sector=4096, nr_sectors = 8 limit=0 [ 737.027481][T19350] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=512, location=512 [ 737.030607][T19350] UDF-fs: warning (device nbd2): udf_fill_super: No partition found (1) [ 737.057182][ T8005] team0 (unregistering): Port device team_slave_0 removed [ 737.738971][T19307] team0: Port device team_slave_0 added [ 737.743114][T19307] team0: Port device team_slave_1 added [ 737.797807][T19307] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 737.800645][T19307] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 737.811507][T19307] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 737.820140][T19307] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 737.822672][T19307] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 737.830820][T19307] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 737.965431][T19307] hsr_slave_0: entered promiscuous mode [ 737.967678][T19307] hsr_slave_1: entered promiscuous mode [ 737.970264][T19307] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 737.973352][T19307] Cannot create hsr debugfs directory [ 738.553511][T19307] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 738.558271][T19307] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 738.570152][T19307] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 738.577208][T19307] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 738.614817][T19307] 8021q: adding VLAN 0 to HW filter on device bond0 [ 738.638772][T19307] 8021q: adding VLAN 0 to HW filter on device team0 [ 738.654277][ T8012] bridge0: port 1(bridge_slave_0) entered blocking state [ 738.656601][ T8012] bridge0: port 1(bridge_slave_0) entered forwarding state [ 738.663055][ T8012] bridge0: port 2(bridge_slave_1) entered blocking state [ 738.665359][ T8012] bridge0: port 2(bridge_slave_1) entered forwarding state [ 738.828511][T19307] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 738.958593][T19307] veth0_vlan: entered promiscuous mode [ 738.963267][T19307] veth1_vlan: entered promiscuous mode [ 738.976702][T19307] veth0_macvtap: entered promiscuous mode [ 738.980311][T19307] veth1_macvtap: entered promiscuous mode [ 738.988322][T19307] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 738.992601][ T5957] Bluetooth: hci2: command tx timeout [ 738.996234][T19307] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 739.000276][T19307] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 739.003057][T19307] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 739.005792][T19307] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 739.008477][T19307] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 739.070643][T19394] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3410'. [ 739.107282][T19394] 8021q: adding VLAN 0 to HW filter on device bond0 [ 739.116885][ T8005] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 739.119327][ T8005] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 739.141250][ T8011] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 739.145914][ T8011] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 739.225485][T19401] netlink: 16 bytes leftover after parsing attributes in process `syz.7.3412'. [ 739.240628][T19405] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 739.243991][T19405] overlayfs: failed to set xattr on upper [ 739.245799][T19405] overlayfs: ...falling back to redirect_dir=nofollow. [ 739.248320][T19405] overlayfs: ...falling back to index=off. [ 739.251011][T19405] overlayfs: ...falling back to uuid=null. [ 739.411640][ T1141] bond0 (unregistering): Released all slaves [ 740.473745][T19430] lo speed is unknown, defaulting to 1000 [ 740.476002][T19430] lo speed is unknown, defaulting to 1000 [ 740.483222][T19430] lo speed is unknown, defaulting to 1000 [ 740.520857][T19430] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 740.624830][T19430] lo speed is unknown, defaulting to 1000 [ 740.630222][T19430] lo speed is unknown, defaulting to 1000 [ 740.637795][T19430] lo speed is unknown, defaulting to 1000 [ 740.643322][T19430] lo speed is unknown, defaulting to 1000 [ 740.648825][T19430] lo speed is unknown, defaulting to 1000 [ 740.654473][T19430] lo speed is unknown, defaulting to 1000 [ 740.659233][T19431] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3418'. [ 741.238331][T19442] netlink: 412 bytes leftover after parsing attributes in process `syz.4.3422'. [ 741.239477][T19438] lo speed is unknown, defaulting to 1000 [ 741.242071][T19442] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3422'. [ 741.248444][T19442] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3422'. [ 741.289695][T19442] syzkaller1: entered promiscuous mode [ 741.291480][T19442] syzkaller1: entered allmulticast mode [ 741.403617][ T8014] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 741.452303][T19444] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3421'. [ 741.464224][T19444] 8021q: adding VLAN 0 to HW filter on device bond0 [ 742.778495][T15715] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 742.784778][T15715] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 742.787681][T15715] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 742.792758][T15715] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 742.796571][T15715] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 742.819792][T19454] lo speed is unknown, defaulting to 1000 [ 742.907602][T19454] chnl_net:caif_netlink_parms(): no params data found [ 742.952241][T19465] geneve0: left promiscuous mode [ 742.955592][T19465] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 742.958407][T19465] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 742.961208][T19465] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 742.964420][T19465] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 742.977984][T19465] team0: Port device geneve0 removed [ 742.983063][T19465] bond0: (slave macvlan4): Releasing backup interface [ 742.987445][T19465] batadv0: left promiscuous mode [ 742.999426][T19465] netlink: 'syz.4.3423': attribute type 10 has an invalid length. [ 743.063822][T19454] bridge0: port 1(bridge_slave_0) entered blocking state [ 743.066620][T19454] bridge0: port 1(bridge_slave_0) entered disabled state [ 743.069375][T19454] bridge_slave_0: entered allmulticast mode [ 743.073142][T19454] bridge_slave_0: entered promiscuous mode [ 743.076493][T19454] bridge0: port 2(bridge_slave_1) entered blocking state [ 743.078953][T19454] bridge0: port 2(bridge_slave_1) entered disabled state [ 743.081445][T19454] bridge_slave_1: entered allmulticast mode [ 743.084569][T19454] bridge_slave_1: entered promiscuous mode [ 743.118113][T19454] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 743.123034][T19454] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 743.160113][T19454] team0: Port device team_slave_0 added [ 743.165182][T19454] team0: Port device team_slave_1 added [ 743.236942][T19454] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 743.239412][T19454] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 743.249053][T19454] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 743.253486][T19454] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 743.255728][T19454] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 743.266517][T19454] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 743.314990][T19454] hsr_slave_0: entered promiscuous mode [ 743.319045][T19454] hsr_slave_1: entered promiscuous mode [ 743.321994][T19454] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 743.325144][T19454] Cannot create hsr debugfs directory [ 743.339487][ T8014] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 743.444871][ T8014] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 743.557287][ T8014] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 743.564649][T19474] Malformed UNC in devname [ 743.564649][T19474] [ 743.566898][T19474] CIFS: VFS: Malformed UNC in devname [ 743.571004][T19474] openvswitch: netlink: Unexpected mask (mask=440, allowed=10048) [ 743.794488][ T8014] bridge_slave_1: left allmulticast mode [ 743.796306][ T8014] bridge_slave_1: left promiscuous mode [ 743.798140][ T8014] bridge0: port 2(bridge_slave_1) entered disabled state [ 743.812559][ T8014] bridge_slave_0: left allmulticast mode [ 743.814485][ T8014] bridge_slave_0: left promiscuous mode [ 743.844214][ T8014] bridge0: port 1(bridge_slave_0) entered disabled state [ 744.192517][ T8014] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 744.197507][ T8014] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 744.201153][ T8014] bond0 (unregistering): Released all slaves [ 744.719700][ T8014] hsr_slave_0: left promiscuous mode [ 744.733247][ T8014] hsr_slave_1: left promiscuous mode [ 744.735764][ T8014] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 744.738065][ T8014] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 744.743320][ T8014] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 744.745776][ T8014] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 744.773324][T19492] netlink: 5280 bytes leftover after parsing attributes in process `syz.7.3432'. [ 744.785200][ T8014] veth1_macvtap: left promiscuous mode [ 744.786968][ T8014] veth0_macvtap: left promiscuous mode [ 744.788728][ T8014] veth1_vlan: left promiscuous mode [ 744.791750][ T8014] veth0_vlan: left promiscuous mode [ 744.832409][T15715] Bluetooth: hci2: command tx timeout [ 745.674721][T19499] FAULT_INJECTION: forcing a failure. [ 745.674721][T19499] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 745.678889][T19499] CPU: 3 UID: 0 PID: 19499 Comm: syz.7.3434 Not tainted 6.15.0-syzkaller #0 PREEMPT(full) [ 745.678910][T19499] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 745.678922][T19499] Call Trace: [ 745.678928][T19499] [ 745.678935][T19499] dump_stack_lvl+0x16c/0x1f0 [ 745.678978][T19499] should_fail_ex+0x512/0x640 [ 745.679006][T19499] _copy_to_user+0x32/0xd0 [ 745.679018][T19499] simple_read_from_buffer+0xcb/0x170 [ 745.679036][T19499] proc_fail_nth_read+0x197/0x270 [ 745.679051][T19499] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 745.679067][T19499] ? rw_verify_area+0xcf/0x680 [ 745.679083][T19499] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 745.679099][T19499] vfs_read+0x1de/0xc70 [ 745.679112][T19499] ? __pfx___mutex_lock+0x10/0x10 [ 745.679127][T19499] ? __pfx_vfs_read+0x10/0x10 [ 745.679141][T19499] ? __fget_files+0x20e/0x3c0 [ 745.679155][T19499] ksys_read+0x12a/0x240 [ 745.679164][T19499] ? __pfx_ksys_read+0x10/0x10 [ 745.679176][T19499] ? rcu_is_watching+0x12/0xc0 [ 745.679188][T19499] __do_fast_syscall_32+0x73/0x120 [ 745.679206][T19499] do_fast_syscall_32+0x32/0x80 [ 745.679221][T19499] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 745.679235][T19499] RIP: 0023:0xf7fc4579 [ 745.679243][T19499] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 745.679254][T19499] RSP: 002b:00000000f50e6590 EFLAGS: 00000293 ORIG_RAX: 0000000000000003 [ 745.679265][T19499] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00000000f50e6620 [ 745.679271][T19499] RDX: 000000000000000f RSI: 00000000f7452ff4 RDI: 0000000000000000 [ 745.679277][T19499] RBP: 0000000000000001 R08: 0000000000000000 R09: 0000000000000000 [ 745.679283][T19499] R10: 0000000000000000 R11: 0000000000000296 R12: 0000000000000000 [ 745.679289][T19499] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 745.679303][T19499] [ 745.838379][ T8014] team0 (unregistering): Port device team_slave_1 removed [ 745.854273][T19502] random: crng reseeded on system resumption [ 745.947680][ T8014] team0 (unregistering): Port device team_slave_0 removed [ 745.975986][T19505] autofs4:pid:19505:check_dev_ioctl_version: ioctl control interface version mismatch: kernel(1.1), user(4294967071.1), cmd(0xc018937e) [ 745.980116][T19505] autofs4:pid:19505:validate_dev_ioctl: invalid device control module version supplied for cmd(0xc018937e) [ 746.669325][T19454] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 746.675064][T19454] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 746.679116][T19454] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 746.694930][T19454] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 746.765885][T19454] 8021q: adding VLAN 0 to HW filter on device bond0 [ 746.786072][T19454] 8021q: adding VLAN 0 to HW filter on device team0 [ 746.793364][ T1141] bridge0: port 1(bridge_slave_0) entered blocking state [ 746.795909][ T1141] bridge0: port 1(bridge_slave_0) entered forwarding state [ 746.802716][ T7660] bridge0: port 2(bridge_slave_1) entered blocking state [ 746.805712][ T7660] bridge0: port 2(bridge_slave_1) entered forwarding state [ 746.913583][T15715] Bluetooth: hci2: command tx timeout [ 746.939150][T19520] lo speed is unknown, defaulting to 1000 [ 746.997842][T19454] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 747.039531][T19528] lo speed is unknown, defaulting to 1000 [ 747.122901][T19512] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3437'. [ 747.137000][T19512] 8021q: adding VLAN 0 to HW filter on device bond0 [ 747.153953][T19536] syz.7.3440: attempt to access beyond end of device [ 747.153953][T19536] nbd7: rw=0, sector=64, nr_sectors = 1 limit=0 [ 747.157951][T19536] syz.7.3440: attempt to access beyond end of device [ 747.157951][T19536] nbd7: rw=0, sector=256, nr_sectors = 1 limit=0 [ 747.183463][T19536] UDF-fs: error (device nbd7): udf_read_tagged: read failed, block=256, location=256 [ 747.186498][T19536] syz.7.3440: attempt to access beyond end of device [ 747.186498][T19536] nbd7: rw=0, sector=512, nr_sectors = 1 limit=0 [ 747.190323][T19536] UDF-fs: error (device nbd7): udf_read_tagged: read failed, block=512, location=512 [ 747.202501][T19536] syz.7.3440: attempt to access beyond end of device [ 747.202501][T19536] nbd7: rw=0, sector=64, nr_sectors = 2 limit=0 [ 747.207204][T19536] syz.7.3440: attempt to access beyond end of device [ 747.207204][T19536] nbd7: rw=0, sector=512, nr_sectors = 2 limit=0 [ 747.211179][T19536] UDF-fs: error (device nbd7): udf_read_tagged: read failed, block=256, location=256 [ 747.222498][T19536] syz.7.3440: attempt to access beyond end of device [ 747.222498][T19536] nbd7: rw=0, sector=1024, nr_sectors = 2 limit=0 [ 747.226428][T19536] UDF-fs: error (device nbd7): udf_read_tagged: read failed, block=512, location=512 [ 747.229610][T19536] syz.7.3440: attempt to access beyond end of device [ 747.229610][T19536] nbd7: rw=0, sector=64, nr_sectors = 4 limit=0 [ 747.234654][T19536] syz.7.3440: attempt to access beyond end of device [ 747.234654][T19536] nbd7: rw=0, sector=1024, nr_sectors = 4 limit=0 [ 747.238546][T19536] UDF-fs: error (device nbd7): udf_read_tagged: read failed, block=256, location=256 [ 747.241492][T19536] syz.7.3440: attempt to access beyond end of device [ 747.241492][T19536] nbd7: rw=0, sector=2048, nr_sectors = 4 limit=0 [ 747.245658][T19536] UDF-fs: error (device nbd7): udf_read_tagged: read failed, block=512, location=512 [ 747.250084][T19536] syz.7.3440: attempt to access beyond end of device [ 747.250084][T19536] nbd7: rw=0, sector=64, nr_sectors = 8 limit=0 [ 747.256327][T19536] UDF-fs: error (device nbd7): udf_read_tagged: read failed, block=256, location=256 [ 747.259475][T19536] UDF-fs: error (device nbd7): udf_read_tagged: read failed, block=512, location=512 [ 747.262806][T19536] UDF-fs: warning (device nbd7): udf_fill_super: No partition found (1) [ 747.304189][ T8014] bond0 (unregistering): Released all slaves [ 747.350912][T19454] veth0_vlan: entered promiscuous mode [ 747.372415][T19454] veth1_vlan: entered promiscuous mode [ 747.394105][T19454] veth0_macvtap: entered promiscuous mode [ 747.399909][T19454] veth1_macvtap: entered promiscuous mode [ 747.409236][T19454] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 747.430827][T19454] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 747.438676][T19454] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 747.441437][T19454] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 747.444312][T19454] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 747.447115][T19454] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 747.486374][T18267] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 747.492326][T18267] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 747.505260][T18267] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 747.507605][T18267] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 748.014265][T19546] netlink: 5280 bytes leftover after parsing attributes in process `syz.7.3442'. [ 748.114545][ T8014] bond0 (unregistering): Released all slaves [ 749.070375][T19561] autofs4:pid:19561:check_dev_ioctl_version: ioctl control interface version mismatch: kernel(1.1), user(4294967071.1), cmd(0xc018937e) [ 749.082389][T19561] autofs4:pid:19561:validate_dev_ioctl: invalid device control module version supplied for cmd(0xc018937e) [ 749.224916][ T5957] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 749.245467][ T5957] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 749.250769][ T5957] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 749.255719][ T5957] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 749.258769][ T5957] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 749.307385][ T8014] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 749.338962][T19565] lo speed is unknown, defaulting to 1000 [ 749.441092][T19565] chnl_net:caif_netlink_parms(): no params data found [ 749.507229][T19565] bridge0: port 1(bridge_slave_0) entered blocking state [ 749.509548][T19565] bridge0: port 1(bridge_slave_0) entered disabled state [ 749.511952][T19565] bridge_slave_0: entered allmulticast mode [ 749.515307][T19565] bridge_slave_0: entered promiscuous mode [ 749.520303][T19565] bridge0: port 2(bridge_slave_1) entered blocking state [ 749.522865][T19565] bridge0: port 2(bridge_slave_1) entered disabled state [ 749.525134][T19565] bridge_slave_1: entered allmulticast mode [ 749.527684][T19565] bridge_slave_1: entered promiscuous mode [ 749.559243][T19565] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 749.564073][T19565] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 749.604656][T19565] team0: Port device team_slave_0 added [ 749.608839][T19565] team0: Port device team_slave_1 added [ 749.640688][T19565] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 749.643916][T19565] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 749.651859][T19565] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 749.656955][T19565] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 749.659133][T19565] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 749.667176][T19565] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 749.717317][T19565] hsr_slave_0: entered promiscuous mode [ 749.719555][T19565] hsr_slave_1: entered promiscuous mode [ 749.721877][T19565] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 749.724363][T19565] Cannot create hsr debugfs directory [ 750.195871][T19565] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 750.200328][T19565] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 750.206955][T19565] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 750.213362][T19565] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 750.282113][T19565] 8021q: adding VLAN 0 to HW filter on device bond0 [ 750.298524][T19565] 8021q: adding VLAN 0 to HW filter on device team0 [ 750.305900][ T1136] bridge0: port 1(bridge_slave_0) entered blocking state [ 750.308160][ T1136] bridge0: port 1(bridge_slave_0) entered forwarding state [ 750.311259][ T1136] bridge0: port 2(bridge_slave_1) entered blocking state [ 750.313624][ T1136] bridge0: port 2(bridge_slave_1) entered forwarding state [ 750.339066][ T8014] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 750.359864][T19565] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 750.455766][T19565] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 750.537880][T19587] lo speed is unknown, defaulting to 1000 [ 750.579950][T19583] lo speed is unknown, defaulting to 1000 [ 750.614142][ T5957] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 750.623077][ T5957] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 750.627922][ T5957] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 750.638196][ T5957] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 750.639910][ T8014] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 750.643857][ T5957] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 750.656804][T19597] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=256, location=256 [ 750.660345][T19597] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=512, location=512 [ 750.666231][T19597] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=256, location=256 [ 750.666367][T19583] netlink: 12 bytes leftover after parsing attributes in process `syz.7.3449'. [ 750.669578][T19597] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=512, location=512 [ 750.675218][T19597] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=256, location=256 [ 750.678204][T19597] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=512, location=512 [ 750.681153][T19597] UDF-fs: warning (device nbd2): udf_fill_super: No partition found (1) [ 750.683077][T19583] 8021q: adding VLAN 0 to HW filter on device bond0 [ 750.703367][T19592] lo speed is unknown, defaulting to 1000 [ 750.720159][ T8014] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 750.771292][T19565] veth0_vlan: entered promiscuous mode [ 750.779070][T19565] veth1_vlan: entered promiscuous mode [ 750.867318][T19565] veth0_macvtap: entered promiscuous mode [ 750.893841][T19592] chnl_net:caif_netlink_parms(): no params data found [ 750.906957][T19565] veth1_macvtap: entered promiscuous mode [ 751.014703][ T8014] bridge_slave_1: left allmulticast mode [ 751.017543][ T8014] bridge_slave_1: left promiscuous mode [ 751.021933][ T8014] bridge0: port 2(bridge_slave_1) entered disabled state [ 751.032866][ T8014] bridge_slave_0: left allmulticast mode [ 751.034715][ T8014] bridge_slave_0: left promiscuous mode [ 751.036831][ T8014] bridge0: port 1(bridge_slave_0) entered disabled state [ 751.324847][ T5957] Bluetooth: hci2: command tx timeout [ 751.364522][ T8014] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 751.369090][ T8014] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 751.373247][ T8014] bond0 (unregistering): Released all slaves [ 751.511330][T19565] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 751.643729][T19592] bridge0: port 1(bridge_slave_0) entered blocking state [ 751.645947][T19592] bridge0: port 1(bridge_slave_0) entered disabled state [ 751.649319][T19592] bridge_slave_0: entered allmulticast mode [ 751.652071][T19592] bridge_slave_0: entered promiscuous mode [ 751.659577][T19565] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 751.663154][T19592] bridge0: port 2(bridge_slave_1) entered blocking state [ 751.665475][T19592] bridge0: port 2(bridge_slave_1) entered disabled state [ 751.667959][T19592] bridge_slave_1: entered allmulticast mode [ 751.670615][T19592] bridge_slave_1: entered promiscuous mode [ 751.697718][T19565] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 751.700475][T19565] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 751.706035][T19565] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 751.709641][T19565] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 751.781301][T19615] netlink: 5280 bytes leftover after parsing attributes in process `syz.7.3453'. [ 751.794705][ T1415] ieee802154 phy1 wpan1: encryption failed: -22 [ 751.910419][T19592] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 751.929906][T19592] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 751.998510][T19592] team0: Port device team_slave_0 added [ 752.001963][T19592] team0: Port device team_slave_1 added [ 752.056616][T19592] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 752.059454][T19592] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 752.069492][T19592] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 752.076223][ T8014] hsr_slave_0: left promiscuous mode [ 752.078348][ T8014] hsr_slave_1: left promiscuous mode [ 752.080378][ T8014] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 752.085428][ T8014] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 752.088438][ T8014] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 752.090985][ T8014] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 752.124594][ T8014] veth1_macvtap: left promiscuous mode [ 752.126587][ T8014] veth0_macvtap: left promiscuous mode [ 752.128388][ T8014] veth1_vlan: left promiscuous mode [ 752.130136][ T8014] veth0_vlan: left promiscuous mode [ 752.672349][ T5957] Bluetooth: hci3: command tx timeout [ 753.392381][ T5957] Bluetooth: hci2: command tx timeout [ 753.796376][ T8014] team0 (unregistering): Port device team_slave_1 removed [ 753.885154][ T8014] team0 (unregistering): Port device team_slave_0 removed [ 754.623271][T19592] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 754.625474][T19592] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 754.633516][T19592] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 754.653285][ T8005] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 754.655997][ T8005] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 754.709352][T19592] hsr_slave_0: entered promiscuous mode [ 754.713930][T19592] hsr_slave_1: entered promiscuous mode [ 754.718655][T19592] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 754.721793][T19592] Cannot create hsr debugfs directory [ 754.736466][ T1136] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 754.743216][ T1136] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 754.752359][ T5957] Bluetooth: hci3: command tx timeout [ 754.883864][T19637] random: crng reseeded on system resumption [ 755.472510][ T5957] Bluetooth: hci2: command tx timeout [ 755.939632][ T1136] bond0 (unregistering): Released all slaves [ 756.027020][T19651] lo speed is unknown, defaulting to 1000 [ 756.192066][T19592] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 756.200946][T19592] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 756.213322][T19592] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 756.219376][T19592] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 756.223528][T19648] netlink: 12 bytes leftover after parsing attributes in process `syz.7.3458'. [ 756.243669][T19648] 8021q: adding VLAN 0 to HW filter on device bond2 [ 756.246721][T19648] ================================================================== [ 756.250007][T19648] BUG: KASAN: global-out-of-bounds in fib6_ifdown+0x7f5/0x8f0 SYZFAIL: failed to recv rpc [ 756.253110][T19648] Read of size 8 at addr ffffffff9af85c90 by task syz.7.3458/19648 fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 756.257793][T19648] [ 756.258865][T19648] CPU: 3 UID: 0 PID: 19648 Comm: syz.7.3458 Not tainted 6.15.0-syzkaller #0 PREEMPT(full) [ 756.258889][T19648] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 756.258901][T19648] Call Trace: [ 756.258908][T19648] [ 756.258915][T19648] dump_stack_lvl+0x116/0x1f0 [ 756.258947][T19648] print_report+0xc3/0x670 [ 756.258970][T19648] ? __virt_addr_valid+0x5e/0x590 [ 756.259000][T19648] ? __phys_addr+0xc6/0x150 [ 756.259023][T19648] ? fib6_ifdown+0x7f5/0x8f0 [ 756.259043][T19648] kasan_report+0xe0/0x110 [ 756.259064][T19648] ? fib6_ifdown+0x7f5/0x8f0 [ 756.259087][T19648] fib6_ifdown+0x7f5/0x8f0 [ 756.259109][T19648] ? __pfx_fib6_ifdown+0x10/0x10 [ 756.259131][T19648] fib6_clean_node+0x2a7/0x5b0 [ 756.259153][T19648] ? __pfx_fib6_clean_node+0x10/0x10 [ 756.259180][T19648] fib6_walk_continue+0x452/0x8d0 [ 756.259200][T19648] fib6_walk+0x182/0x370 [ 756.259218][T19648] ? __pfx_fib6_ifdown+0x10/0x10 [ 756.259237][T19648] fib6_clean_tree+0xd4/0x110 [ 756.259255][T19648] ? __pfx_fib6_clean_tree+0x10/0x10 [ 756.259275][T19648] ? __pfx_fib6_clean_node+0x10/0x10 [ 756.259296][T19648] ? __pfx_fib6_ifdown+0x10/0x10 [ 756.259320][T19648] ? __pfx_fib6_ifdown+0x10/0x10 [ 756.259341][T19648] __fib6_clean_all+0x107/0x2d0 [ 756.259363][T19648] rt6_sync_down_dev+0x139/0x160 [ 756.259391][T19648] ? __pfx_rt6_sync_down_dev+0x10/0x10 [ 756.259420][T19648] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 756.259447][T19648] addrconf_notify+0x12ef/0x19e0 [ 756.259472][T19648] ? ip6mr_device_event+0x1bc/0x230 [ 756.259501][T19648] notifier_call_chain+0xbc/0x410 [ 756.259523][T19648] ? __pfx_addrconf_notify+0x10/0x10 [ 756.259550][T19648] call_netdevice_notifiers_info+0xbe/0x140 [ 756.259581][T19648] __dev_notify_flags+0x2a8/0x2e0 [ 756.259602][T19648] ? __pfx___dev_notify_flags+0x10/0x10 [ 756.259624][T19648] ? __dev_change_flags+0x3d5/0x720 [ 756.259646][T19648] ? __pfx_delayed_work_timer_fn+0x10/0x10 [ 756.259664][T19648] ? __pfx_delayed_work_timer_fn+0x10/0x10 [ 756.259682][T19648] ? lockdep_init_map_type+0x5c/0x280 [ 756.259708][T19648] rtnl_configure_link+0x1b7/0x260 [ 756.259729][T19648] rtnl_newlink+0xcd9/0x2000 [ 756.259781][T19648] ? __pfx_rtnl_newlink+0x10/0x10 [ 756.259813][T19648] ? kfree_skbmem+0x1a4/0x1f0 [ 756.259834][T19648] ? rcu_is_watching+0x12/0xc0 [ 756.259851][T19648] ? trace_cap_capable+0x18d/0x200 [ 756.259874][T19648] ? find_held_lock+0x2b/0x80 [ 756.259891][T19648] ? __pfx_rtnl_newlink+0x10/0x10 [ 756.259914][T19648] ? __pfx_rtnl_newlink+0x10/0x10 [ 756.259936][T19648] ? rtnetlink_rcv_msg+0x93a/0xe90 [ 756.259959][T19648] ? __pfx_rtnl_newlink+0x10/0x10 [ 756.259982][T19648] rtnetlink_rcv_msg+0x95b/0xe90 [ 756.260013][T19648] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 756.260044][T19648] netlink_rcv_skb+0x16a/0x440 [ 756.260070][T19648] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 756.260095][T19648] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 756.260125][T19648] ? netlink_deliver_tap+0x1ae/0xd30 [ 756.260150][T19648] netlink_unicast+0x53d/0x7f0 [ 756.260174][T19648] ? __pfx_netlink_unicast+0x10/0x10 [ 756.260201][T19648] netlink_sendmsg+0x8d1/0xdd0 [ 756.260227][T19648] ? __pfx_netlink_sendmsg+0x10/0x10 [ 756.260251][T19648] ? __import_iovec+0x1c8/0x660 [ 756.260272][T19648] ____sys_sendmsg+0xa95/0xc70 [ 756.260299][T19648] ? __pfx_____sys_sendmsg+0x10/0x10 [ 756.260326][T19648] ? get_compat_msghdr+0x11a/0x170 [ 756.260352][T19648] ___sys_sendmsg+0x134/0x1d0 [ 756.260374][T19648] ? __pfx____sys_sendmsg+0x10/0x10 [ 756.260410][T19648] __sys_sendmsg+0x16d/0x220 [ 756.260432][T19648] ? __pfx___sys_sendmsg+0x10/0x10 [ 756.260454][T19648] ? __ia32_sys_futex_time32+0x1d9/0x460 [ 756.260480][T19648] ? rcu_is_watching+0x12/0xc0 [ 756.260498][T19648] ? rcu_is_watching+0x12/0xc0 [ 756.260517][T19648] __do_fast_syscall_32+0x73/0x120 [ 756.260545][T19648] do_fast_syscall_32+0x32/0x80 [ 756.260572][T19648] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 756.260594][T19648] RIP: 0023:0xf7fc4579 [ 756.260610][T19648] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 756.260628][T19648] RSP: 002b:00000000f50e655c EFLAGS: 00000296 ORIG_RAX: 0000000000000172 [ 756.260646][T19648] RAX: ffffffffffffffda RBX: 0000000000000009 RCX: 0000000080000080 [ 756.260658][T19648] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 756.260669][T19648] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 756.260679][T19648] R10: 0000000000000000 R11: 0000000000000296 R12: 0000000000000000 [ 756.260690][T19648] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 756.260709][T19648] [ 756.260717][T19648] [ 756.420200][T19648] The buggy address belongs to the variable: [ 756.422025][T19648] __key.0+0x30/0x40 [ 756.423217][T19648] [ 756.423993][T19648] The buggy address belongs to the physical page: [ 756.425888][T19648] page: refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x1af85 [ 756.428498][T19648] flags: 0xfff00000002000(reserved|node=0|zone=1|lastcpupid=0x7ff) [ 756.430804][T19648] raw: 00fff00000002000 ffffea00006be148 ffffea00006be148 0000000000000000 [ 756.433427][T19648] raw: 0000000000000000 0000000000000000 00000001ffffffff 0000000000000000 [ 756.435883][T19648] page dumped because: kasan: bad access detected [ 756.437745][T19648] page_owner info is not present (never set?) [ 756.439545][T19648] [ 756.440284][T19648] Memory state around the buggy address: [ 756.441987][T19648] ffffffff9af85b80: f9 f9 f9 f9 00 f9 f9 f9 f9 f9 f9 f9 00 f9 f9 f9 [ 756.444363][T19648] ffffffff9af85c00: f9 f9 f9 f9 00 f9 f9 f9 f9 f9 f9 f9 00 00 f9 f9 [ 756.446737][T19648] >ffffffff9af85c80: f9 f9 f9 f9 00 f9 f9 f9 f9 f9 f9 f9 00 00 00 00 [ 756.449087][T19648] ^ [ 756.450478][T19648] ffffffff9af85d00: 00 00 00 00 00 00 00 00 00 00 00 f9 f9 f9 f9 f9 [ 756.452934][T19648] ffffffff9af85d80: 00 00 f9 f9 f9 f9 f9 f9 00 00 f9 f9 f9 f9 f9 f9 [ 756.455361][T19648] ================================================================== [ 756.457908][T19648] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 756.460080][T19648] CPU: 3 UID: 0 PID: 19648 Comm: syz.7.3458 Not tainted 6.15.0-syzkaller #0 PREEMPT(full) [ 756.463156][T19648] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 756.466534][T19648] Call Trace: [ 756.467561][T19648] [ 756.468476][T19648] dump_stack_lvl+0x3d/0x1f0 [ 756.469937][T19648] panic+0x71c/0x800 [ 756.471304][T19648] ? __pfx_panic+0x10/0x10 [ 756.472678][T19648] ? mark_held_locks+0x49/0x80 [ 756.474135][T19648] ? fib6_ifdown+0x7f5/0x8f0 [ 756.475519][T19648] ? fib6_ifdown+0x7f5/0x8f0 [ 756.476954][T19648] check_panic_on_warn+0xab/0xb0 [ 756.478452][T19648] end_report+0x107/0x170 [ 756.479773][T19648] kasan_report+0xee/0x110 [ 756.481156][T19648] ? fib6_ifdown+0x7f5/0x8f0 [ 756.482555][T19648] fib6_ifdown+0x7f5/0x8f0 [ 756.483892][T19648] ? __pfx_fib6_ifdown+0x10/0x10 [ 756.485371][T19648] fib6_clean_node+0x2a7/0x5b0 [ 756.486800][T19648] ? __pfx_fib6_clean_node+0x10/0x10 [ 756.488399][T19648] fib6_walk_continue+0x452/0x8d0 [ 756.489923][T19648] fib6_walk+0x182/0x370 [ 756.491219][T19648] ? __pfx_fib6_ifdown+0x10/0x10 [ 756.492727][T19648] fib6_clean_tree+0xd4/0x110 [ 756.494178][T19648] ? __pfx_fib6_clean_tree+0x10/0x10 [ 756.495822][T19648] ? __pfx_fib6_clean_node+0x10/0x10 [ 756.497466][T19648] ? __pfx_fib6_ifdown+0x10/0x10 [ 756.498970][T19648] ? __pfx_fib6_ifdown+0x10/0x10 [ 756.500492][T19648] __fib6_clean_all+0x107/0x2d0 [ 756.502011][T19648] rt6_sync_down_dev+0x139/0x160 [ 756.503557][T19648] ? __pfx_rt6_sync_down_dev+0x10/0x10 [ 756.505260][T19648] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 756.507052][T19648] addrconf_notify+0x12ef/0x19e0 [ 756.508563][T19648] ? ip6mr_device_event+0x1bc/0x230 [ 756.510168][T19648] notifier_call_chain+0xbc/0x410 [ 756.511701][T19648] ? __pfx_addrconf_notify+0x10/0x10 [ 756.513369][T19648] call_netdevice_notifiers_info+0xbe/0x140 [ 756.515136][T19648] __dev_notify_flags+0x2a8/0x2e0 [ 756.516663][T19648] ? __pfx___dev_notify_flags+0x10/0x10 [ 756.518365][T19648] ? __dev_change_flags+0x3d5/0x720 [ 756.519965][T19648] ? __pfx_delayed_work_timer_fn+0x10/0x10 [ 756.521747][T19648] ? __pfx_delayed_work_timer_fn+0x10/0x10 [ 756.523503][T19648] ? lockdep_init_map_type+0x5c/0x280 [ 756.525132][T19648] rtnl_configure_link+0x1b7/0x260 [ 756.526661][T19648] rtnl_newlink+0xcd9/0x2000 [ 756.528077][T19648] ? __pfx_rtnl_newlink+0x10/0x10 [ 756.529606][T19648] ? kfree_skbmem+0x1a4/0x1f0 [ 756.531021][T19648] ? rcu_is_watching+0x12/0xc0 [ 756.532473][T19648] ? trace_cap_capable+0x18d/0x200 [ 756.534019][T19648] ? find_held_lock+0x2b/0x80 [ 756.535405][T19648] ? __pfx_rtnl_newlink+0x10/0x10 [ 756.536888][T19648] ? __pfx_rtnl_newlink+0x10/0x10 [ 756.538400][T19648] ? rtnetlink_rcv_msg+0x93a/0xe90 [ 756.539944][T19648] ? __pfx_rtnl_newlink+0x10/0x10 [ 756.541453][T19648] rtnetlink_rcv_msg+0x95b/0xe90 [ 756.542918][T19648] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 756.544549][T19648] netlink_rcv_skb+0x16a/0x440 [ 756.546053][T19648] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 756.547712][T19648] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 756.549321][T19648] ? netlink_deliver_tap+0x1ae/0xd30 [ 756.550912][T19648] netlink_unicast+0x53d/0x7f0 [ 756.552398][T19648] ? __pfx_netlink_unicast+0x10/0x10 [ 756.553990][T19648] netlink_sendmsg+0x8d1/0xdd0 [ 756.555484][T19648] ? __pfx_netlink_sendmsg+0x10/0x10 [ 756.557102][T19648] ? __import_iovec+0x1c8/0x660 [ 756.558598][T19648] ____sys_sendmsg+0xa95/0xc70 [ 756.560102][T19648] ? __pfx_____sys_sendmsg+0x10/0x10 [ 756.561701][T19648] ? get_compat_msghdr+0x11a/0x170 [ 756.563317][T19648] ___sys_sendmsg+0x134/0x1d0 [ 756.564775][T19648] ? __pfx____sys_sendmsg+0x10/0x10 [ 756.566359][T19648] __sys_sendmsg+0x16d/0x220 [ 756.567786][T19648] ? __pfx___sys_sendmsg+0x10/0x10 [ 756.569320][T19648] ? __ia32_sys_futex_time32+0x1d9/0x460 [ 756.571012][T19648] ? rcu_is_watching+0x12/0xc0 [ 756.572498][T19648] ? rcu_is_watching+0x12/0xc0 [ 756.573963][T19648] __do_fast_syscall_32+0x73/0x120 [ 756.575503][T19648] do_fast_syscall_32+0x32/0x80 [ 756.576986][T19648] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 756.578861][T19648] RIP: 0023:0xf7fc4579 [ 756.580150][T19648] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 756.585850][T19648] RSP: 002b:00000000f50e655c EFLAGS: 00000296 ORIG_RAX: 0000000000000172 [ 756.588407][T19648] RAX: ffffffffffffffda RBX: 0000000000000009 RCX: 0000000080000080 [ 756.590745][T19648] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 756.593135][T19648] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 756.595467][T19648] R10: 0000000000000000 R11: 0000000000000296 R12: 0000000000000000 [ 756.597814][T19648] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 756.600128][T19648] [ 756.601630][T19648] Kernel Offset: disabled [ 756.602977][T19648] Rebooting in 86400 seconds.. VM DIAGNOSIS: 17:00:52 Registers: info registers vcpu 0 CPU#0 RAX=000001cb06f746a2 RBX=ffff88802b2235c0 RCX=00000000000006e0 RDX=00000000000001cb RSI=ffff88802b2235c0 RDI=0000000000000145 RBP=0000000000000145 RSP=ffffc900046cf9b0 R8 =0000000000000005 R9 =000000000000003f R10=0000000000000019 R11=0000000000000000 R12=dffffc0000000000 R13=0000000000000000 R14=0000000000000019 R15=ffffed10056446bd RIP=ffffffff81671415 RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0000 0000000000000000 ffffffff 00c00000 DS =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] FS =0000 0000000000000000 ffffffff 00c00000 GS =0063 ffff8880977e7000 ffffffff 00d0f300 DPL=3 DS [-WA] LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=0000000080ea2000 CR3=000000004f5f8000 CR4=00352ef0 DR0=0000000000000000 DR1=000000000000ff99 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000002 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000005000000000 0000000100000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=dffffc0000000000 RBX=ffff888026b94880 RCX=ffffc90023b47af4 RDX=0000000000000000 RSI=ffffffff8dbb8f28 RDI=ffff888026b94cc4 RBP=ffff888026b94880 RSP=ffffc90023b47b00 R8 =0000000000000001 R9 =0000000000000000 R10=0000000000000001 R11=0000000000000000 R12=ffff888026b94880 R13=0000000000000000 R14=0000000000000000 R15=dffffc0000000000 RIP=ffffffff81a14993 RFL=00000a03 [-O----C] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880978e7000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00000000f7f955c0 CR3=000000005f70e000 CR4=00352ef0 DR0=000000000000000d DR1=00000000000000ff DR2=fffffffffffffff7 DR3=3e00000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000002 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000005000000000 0000000100000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 2 CPU#2 RAX=0000000000000000 RBX=0000000000000002 RCX=ffffffff84d48436 RDX=ffff888022e6a440 RSI=0000000000000020 RDI=0000000000000001 RBP=ffffffff8bf4da60 RSP=ffffc90003a171b8 R8 =0000000000000001 R9 =0000000000000020 R10=0000000000000020 R11=0000000000000000 R12=0000000000000020 R13=0000000000000001 R14=0000000000000003 R15=ffffffff8bf4def0 RIP=ffffffff81baa961 RFL=00000202 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0000 0000000000000000 ffffffff 00c00000 DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 00007fd190f52300 ffffffff 00c00000 GS =0000 ffff8880979e7000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=000055e2107fa000 CR3=0000000050829000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=00000000fcffc200 Opmask01=000000000000ffff Opmask02=00000000ffffffff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000001 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000000001df8a 0000002c00000012 0004000000080024 0000000000280030 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000d8b 0000001000000000 0000000000000000 0000000000000015 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 93cac4b09f91a284 a308000b9b808008 0000020c013fea0c 0000006c00000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 8803000000240808 0b80030b80020780 03078002028d9003 000800028d88030f ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffffffff02028d80 0000000001320800 0680808608000002 06013eda08808080 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0800000204013fde 0e839480080004b8 808002040141da00 080001808008000c ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 80800206013fe232 0800068080860800 000206013eda0008 0001080060080001 ZMM24=338d1804338d1804 338d1804338d1804 338d1804338d1804 338d1804338d1804 338d1804338d1804 338d1804338d1804 338d1804338d1804 338d1804338d1804 ZMM25=1fac64531fac6453 1fac64531fac6453 1fac64531fac6453 1fac64531fac6453 1fac64531fac6453 1fac64531fac6453 1fac64531fac6453 1fac64531fac6453 ZMM26=2980369c2980369c 2980369c2980369c 2980369c2980369c 2980369c2980369c 2980369c2980369c 2980369c2980369c 2980369c2980369c 2980369c2980369c ZMM27=f472da1cf472da1c f472da1cf472da1c f472da1cf472da1c f472da1cf472da1c f472da1cf472da1c f472da1cf472da1c f472da1cf472da1c f472da1cf472da1c ZMM28=000000700000006f 0000006e0000006d 0000006c0000006b 0000006a00000069 0000006800000067 0000006600000065 0000006400000063 0000006200000061 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=8f2700008f270000 8f2700008f270000 8f2700008f270000 8f2700008f270000 8f2700008f270000 8f2700008f270000 8f2700008f270000 8f2700008f270000 info registers vcpu 3 CPU#3 RAX=0000000000000030 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff854c74f5 RDI=ffffffff9ade4c80 RBP=ffffffff9ade4c40 RSP=ffffc90006726860 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=3966666666666666 R12=0000000000000000 R13=0000000000000030 R14=ffffffff9ade4c40 R15=ffffffff854c7490 RIP=ffffffff854c751f RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0000 0000000000000000 ffffffff 00c00000 DS =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] FS =0000 0000000000000000 ffffffff 00c00000 GS =0063 ffff888097ae7000 ffffffff 00d0f300 DPL=3 DS [-WA] LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=0000000000000000 CR3=0000000027920000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000002 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000005000000000 0000000100000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000