last executing test programs: 3.419034505s ago: executing program 2 (id=31): getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r0 = socket(0x6, 0x3, 0xfffffffc) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="7c0000001000010400"/20, @ANYRES32=r2, @ANYBLOB="00000000000000005c001280110001006272696467655f736c677665000000004400058005001b"], 0x7c}}, 0x24000004) socket$kcm(0x29, 0x2, 0x0) 3.319623649s ago: executing program 2 (id=33): r0 = socket$igmp(0x2, 0x3, 0x2) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000ac0), 0x0, 0x0) ioctl$TIOCNOTTY(r1, 0x5422) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)={0x3c, r3, 0x1, 0x170bf2a, 0x25dfdbff, {}, [@ETHTOOL_A_COALESCE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}]}, @ETHTOOL_A_COALESCE_USE_CQE_MODE_RX={0x5, 0x19, 0x1}, @ETHTOOL_A_COALESCE_TX_USECS_LOW={0x8, 0x10, 0xd}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4920}, 0x44860) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f0000000140)=0x10000, 0x4) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r4, &(0x7f0000000000)={0x900, 0x0, &(0x7f0000000400)={&(0x7f0000000080)={0x2, 0xa, 0xfc, 0x0, 0x7, 0x0, 0x70bd29, 0x25dfdbfe, [@sadb_x_filter={0x5, 0x1a, @in=@empty, @in=@local, 0xa, 0x20}]}, 0x38}}, 0x40408c0) r5 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./proc\x00', &(0x7f0000000080)='proc\x00', 0x0, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./proc/net/rpc/auth.rpcsec.context/channel\x00', 0x1, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, 0x0) setsockopt$WPAN_SECURITY_LEVEL(r5, 0x0, 0x2, &(0x7f0000000100)=0x1, 0x4) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) setsockopt$SO_J1939_ERRQUEUE(r6, 0x6b, 0x4, &(0x7f0000000280), 0x4) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) r9 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x1) ioctl$KVM_SET_SREGS2(r9, 0x4140aecd, &(0x7f0000000140)={{0xffff0000, 0x58000, 0xf000, 0x9, 0x7f, 0xe3, 0x81, 0xff, 0x0, 0x84, 0x4, 0xb}, {0xeeee8000, 0xd000, 0x10, 0x3, 0x3, 0xb, 0x5, 0x6, 0x4, 0x4, 0xfa, 0x5}, {0xf000, 0x7000, 0x4, 0x4, 0x11, 0x81, 0x0, 0x5, 0x5, 0x4, 0x92, 0x9}, {0x40000, 0xeeef0000, 0x1b, 0x7, 0x81, 0xfa, 0x0, 0x0, 0xfa, 0x29, 0x9, 0x9}, {0xeeee8000, 0x0, 0xe, 0x9, 0x1, 0x2, 0x7, 0xf1, 0x2, 0x6e, 0x0, 0x8}, {0x4000, 0x80a0000, 0x10, 0x2, 0xad, 0x2, 0x5, 0x4, 0x1, 0xe, 0x6, 0xa}, {0x10000, 0x10000, 0xc, 0x0, 0xcd, 0x5, 0x5, 0x26, 0xa, 0x6, 0xff, 0x6}, {0xeeef0000, 0xeeef0000, 0xb, 0xe, 0x13, 0x1e, 0x3, 0x0, 0x7f, 0x7, 0x2, 0x8}, {0x100000, 0x405}, {0xeeef0000, 0xff81}, 0xe0000031, 0x0, 0x6000, 0x61, 0x5, 0xa800, 0x8000000, 0x1, [0x6257, 0x2, 0x8000000000000003, 0xc]}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x11, 0x15, &(0x7f0000000580)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x7, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94) 2.390674435s ago: executing program 2 (id=37): r0 = syz_open_dev$usbfs(&(0x7f0000000700), 0x2000000000000, 0x141002) r1 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r1, 0x800448d2, &(0x7f00000009c0)={0x2, &(0x7f0000000740)=[{}, {}]}) r2 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bsg/2:0:0:0\x00', 0x1, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff1b000000020000000900010073797a30000001000900038073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x25}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)={{0x14}, [@NFT_MSG_NEWSET={0x3c, 0x12, 0xa, 0x5, 0x0, 0x0, {0x2}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_KEY_TYPE={0x8}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0xa}]}, @NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x5, 0x0, 0x0, {0x0, 0x0, 0x7}}], {0x3}}, 0x78}, 0x1, 0x0, 0x0, 0x20004804}, 0x0) ioctl$SCSI_IOCTL_GET_IDLUN(r2, 0x5382, &(0x7f0000000140)) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r4, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="80000000", @ANYRES16=r5, @ANYBLOB="01000000000000000000010000001c000180060005004e230000060001000200000008000300ac1414aa"], 0x30}}, 0x0) ioctl$USBDEVFS_DISCONNECT_CLAIM(r0, 0xc0185500, &(0x7f0000000040)={0x82, 0x100000, "aa2fe1a243fcd9abf29cc3391c06b86f68e7f73d4f0bff9669a8e82040ccb44d75131fb06cade553a6bdc314438ce0af11c38cd724980b087a7a16f9295be0a69db51576e7a06ef6bcabc67b52ba82e73504fa842ec2f0c06bf006f3e5bcdd5057997bf171c60d96a538b02ee9f4b573457498ca09cb417b1fbe6dc3b0c27ab0693ac57aff136748f7740dfc33f3a902b670f8933aec28869e637c18379d6d0b4d844b732cb1932733dfcec2f69f8b6df76ba84e1f001ad29105230471f466b6f9d7d2b05a57fe16e7363e5ecebc2c74539ca55c7ce3a175061adedd20532a9de97379f4dd5baeeae835946311e6e4e2361355c54b3bd500"}) r6 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010005"], 0x3c}}, 0x0) r7 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x42002) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r7, 0xc08c5332, &(0x7f00000001c0)={0xfffffffc, 0x0, 0x0, 'queue0\x00'}) write$sndseq(r7, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick, {}, {}, @raw32}], 0xffc8) r8 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r8, 0x7a7, &(0x7f0000000040)=0x90000) ioctl$BTRFS_IOC_SUBVOL_GETFLAGS(r2, 0x80089419, &(0x7f0000000180)) ioctl$IOCTL_VMCI_INIT_CONTEXT(r8, 0x7a0, &(0x7f0000000000)={@local}) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r8, 0x7a8, &(0x7f0000000540)={{@hyper, 0x2}, @hyper, 0x0, 0x0, 0x5e}) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r8, 0x7a8, &(0x7f0000000540)={{@hyper, 0x2}, @hyper, 0x0, 0x0, 0x81, 0xfffffffffffffff9, 0x0, 0x0, 0x3}) ioctl$UI_ABS_SETUP(r6, 0x401c5504, &(0x7f0000000000)={0x3c, {0xfffffffc, 0x0, 0x0, 0x80, 0x8, 0x1}}) 2.389955484s ago: executing program 1 (id=38): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) write$tun(r0, 0x0, 0xfb5) r1 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x8042, 0x20) fcntl$setlease(r1, 0x400, 0x1) fcntl$getflags(r1, 0x401) r2 = socket$xdp(0x2c, 0x3, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = openat$cgroup_int(r3, &(0x7f00000000c0)='hugetlb.1GB.rsvd.failcnt\x00', 0x2, 0x0) sendfile(r4, r4, 0x0, 0x4) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f00000001c0)='ip_vti0\x00', 0x54) r5 = socket$can_j1939(0x1d, 0x2, 0x7) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000200)={'bond0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000140)={'gretap0\x00', 0x0}) sendmsg$nl_route(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="500000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="350d0000000000003000128008000100687372002400028008000200", @ANYRES32=r8, @ANYBLOB="08000100", @ANYRES32=r7], 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x8000) bind$can_j1939(r5, &(0x7f0000000040)={0x1d, r8, 0x0, {0x0, 0x1, 0x2}, 0xff}, 0x18) bind$xdp(r2, &(0x7f0000000100)={0x2c, 0x4, 0x0, 0x3, r2}, 0x10) 2.280444554s ago: executing program 2 (id=39): capset(&(0x7f0000000040)={0x19980330}, &(0x7f0000000000)={0x6, 0x2, 0x2, 0x84, 0xfffbffff, 0x41}) r0 = fsopen(&(0x7f0000000040)='afs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f00000001c0)='source', &(0x7f0000000100)='%\xff\xff2\x82|\x9a\xe0\xadA\xde\xd5\x03\x00\x00\x00\xb7\xe5\xee:\xb5\x0e\xec\xe5\xdc\xe5\x8d?\x16BE\x8b\xe8)\xa9H\x99\x10\x02q\xf7\x10\xf7\xb2\xed\x8a\xdc\xa6\x8fO\xc8\xbay,\xae\xd3\xc5*\x15\xdf_\xb2_`\x92', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000000)='source', &(0x7f0000000180)='%(,c\xbe\r\xcc:', 0x0) r1 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = socket(0xa, 0x2, 0x0) setsockopt$inet_int(r2, 0x0, 0x18, &(0x7f0000000080)=0x200, 0x4) bind$inet6(r2, &(0x7f0000000000)={0xa, 0x0, 0xd, @ipv4={'\x00', '\xff\xff', @empty}, 0x2}, 0x1c) ptrace(0x10, r1) ptrace$setregset(0x4205, r1, 0x1, &(0x7f0000000100)={&(0x7f0000000040)="dcef58b7f29c1f7c93d183044aedba283413e674c7719c33a4b17f028f68610a6c55bb2bf8282853f3e16f8394a8676ff55a3507e2ad50248c6130863b0f7433c7fbc9b978a39eae88bffd05d139cedbee444f7c98e1f92b0f64462b4b470bedced2125e0b1f38fbaa348c6d75aa1a4011e9cdae15ecb9309b0101edbf6dd6d111d6132f1821a4e4cbec8438c571a70e7ca7b0451a6cc55c", 0x98}) ptrace$getregset(0x4204, r1, 0x1, &(0x7f0000000280)={&(0x7f0000000580)=""/200, 0xc8}) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r3) r5 = getpid() ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000003c0)={'wlan1\x00'}) syz_pidfd_open(r5, 0x0) syz_open_procfs(r5, &(0x7f0000000200)='fd/3\x00') sendmsg$NFC_CMD_START_POLL(r3, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000240)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010023010000340200000600000008000100", @ANYRES32=0x0, @ANYRESOCT=r0], 0x24}}, 0x0) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_CCA_MODE(r6, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)=ANY=[@ANYBLOB="1c000000", @ANYRES16=0x0, @ANYBLOB="000229bd7000ffdbdf250d0000000800010003000800"], 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000280)='setgroups\x00') 2.20109196s ago: executing program 2 (id=42): r0 = socket$nl_route(0x10, 0x3, 0x0) (async) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={'bridge0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="480000001c00110e0000006a00000f0007000000", @ANYRES32=r2, @ANYBLOB="800202000a000200577f0000aabb000020000e80050001008f000000050001000100000004000200050001"], 0x48}}, 0x0) (async, rerun: 64) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) (rerun: 64) r3 = socket$unix(0x1, 0x2, 0x0) bind$unix(r3, &(0x7f0000000100)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) sendmsg$unix(r3, &(0x7f00000000c0)={&(0x7f0000000200)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e, 0x0, 0x0, 0x0, 0x0, 0x303de1f53b11ae}, 0x20008840) (async) setsockopt$SO_TIMESTAMP(r3, 0x1, 0x40, &(0x7f0000000080)=0x906, 0x4) recvmmsg(r3, &(0x7f0000000c00)=[{{0x0, 0x0, 0x0}, 0x8}], 0x1, 0x1000400000de, 0x0) (async) r4 = openat$nmem0(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0) (async) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r1) sendmsg$NL80211_CMD_VENDOR(r4, &(0x7f00000004c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000480)={&(0x7f0000000300)={0x180, r5, 0xc00, 0x70bd29, 0x25dfdbff, {{}, {@void, @void, @val={0xc, 0x99, {0x7, 0x3f}}}}, [@NL80211_ATTR_VENDOR_ID={0x8, 0xc3, 0x9}, @NL80211_ATTR_VENDOR_DATA={0xbe, 0xc5, "4425e051898c91dd3e7ff492901948f4f07dfa6db81a9588c62499fd83c9b69d6068db2837c4c83ca9abb9bff3274a5c04543721cc182cf434b1d9822b21f197f585a0e0ac3ae00413a930d11c4c367197c1b4638c9daaaef72567ea2aa2464a06efae0f86bd1b29ee0e0b9ed38790a1d94f4f8e8f4d80f51609edae8f09521985670991d7481d46c661d82221560355ed6d947d3e71173e926019ec75c52cc31d6845b14c0edd51e988f6e82e398c537c8582a7d754d2f7da47"}, @NL80211_ATTR_VENDOR_DATA={0x5f, 0xc5, "b4a3a10476f6f21ed649c8f16647aba682fb3ca8c905e41163911b537bf01c7212ab1e143a80eb0c2c476044a798364dcd8c6b7ef085eea53257ac8d83a0818679681d5b29ec43013270ce518563183b5c8d804124b929da65f5a9"}, @NL80211_ATTR_VENDOR_DATA={0x28, 0xc5, "987e8b8642e92b4c4c8ab34ee597af4b71126d21314c236d770d01e05473a533adde6391"}, @NL80211_ATTR_VENDOR_SUBCMD={0x8, 0xc4, 0x63}, @NL80211_ATTR_VENDOR_ID={0x8, 0xc3, 0x2}]}, 0x180}, 0x1, 0x0, 0x0, 0x20000010}, 0x40) (async) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40810}, 0x24000000) 2.200200666s ago: executing program 1 (id=43): mlock2(&(0x7f0000003000/0x1000)=nil, 0x1000, 0x0) r0 = syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000240)={0x0, &(0x7f0000000000)=[@in_dx={0x69, 0x20, {0x4643, 0x5}}, @enable_nested={0x12c, 0x18}, @nested_amd_vmcb_write_mask={0x17c, 0x38, {0x3, @control_area=0xa4, 0x8, 0xfffffffffffff0b5, 0x3}}, @wrmsr={0x65, 0x20, {0x3a6}}, @set_irq_handler={0xc8, 0x20, {0xf, 0x1}}, @wr_drn={0x68, 0x20, {0x2, 0x4}}, @nested_load_syzos={0x136, 0x68, {0x2, 0x8000, [@nested_amd_vmload={0x182, 0x18, 0x2}, @uexit={0x0, 0x18, 0x80000001}, @uexit={0x0, 0x18, 0x3}]}}, @out_dx={0x6a, 0x28, {0x2f58, 0x0, 0x8}}, @uexit={0x0, 0x18, 0x3}, @cpuid={0x64, 0x18, {0x1, 0x10000}}, @nested_amd_stgi={0x17e, 0x10}, @enable_nested={0x12c, 0x18}, @out_dx={0x6a, 0x28, {0x77, 0x1, 0x9}}, @nested_vmlaunch={0x12f, 0x18}, @nested_amd_clgi={0x17f, 0x10}], 0x208}) ioctl$KVM_GET_XSAVE2(r0, 0x9000aecf, &(0x7f0000002000/0x3000)=nil) r1 = accept4$packet(0xffffffffffffffff, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f00000002c0)=0x14, 0x800) setsockopt$packet_fanout_data(r1, 0x107, 0x16, &(0x7f0000000340)={0x1, &(0x7f0000000300)=[{0x8, 0x9, 0xff, 0x80000001}]}, 0x10) r2 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000380), 0x2, 0x0) ioctl$OCFS2_IOC_RESVSP(r2, 0x40305828, &(0x7f00000003c0)={0x2, 0x2, 0x0, 0x0, 0x0, 0x1}) connect(r1, &(0x7f0000000400)=@l2={0x1f, 0x5, @any, 0x6, 0x2}, 0x80) r3 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$RDMA_NLDEV_CMD_PORT_GET(r3, &(0x7f0000000580)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000540)={&(0x7f00000004c0)={0x50, 0x1405, 0x20, 0x70bd27, 0x25dfdbfe, "", [{{0x8, 0x1, 0x2}, {0x8}}, {{0x8, 0x1, 0x1}, {0x8, 0x3, 0x1}}, {{0x8, 0x1, 0x2}, {0x8, 0x3, 0x1}}, {{0x8, 0x1, 0x2}, {0x8, 0x3, 0x3}}]}, 0x50}, 0x1, 0x0, 0x0, 0x24000010}, 0x801) syslog(0xa, 0x0, 0x0) ioctl$KVM_PRE_FAULT_MEMORY(r0, 0xc040aed5, &(0x7f00000005c0)={0x0, 0x101000}) setsockopt$IP_VS_SO_SET_DEL(r1, 0x0, 0x484, &(0x7f0000000600)={0x87, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x4e21, 0x4, 'fo\x00', 0x3c, 0x7, 0x1b}, 0x2c) r4 = openat$dir(0xffffffffffffff9c, &(0x7f0000000640)='./file0\x00', 0x200000, 0x98) execveat(r4, &(0x7f0000000680)='./file0\x00', &(0x7f0000000940)={[&(0x7f00000006c0)='(#@+\x00', &(0x7f0000000700)='fo\x00', &(0x7f0000000740)='^\\(@2\x00', &(0x7f0000000780)='fo\x00', &(0x7f00000007c0)='^\x00', &(0x7f0000000800)='fo\x00', &(0x7f0000000840)='^\xc3/+\x00', &(0x7f0000000880)='fo\x00', &(0x7f00000008c0)='\x00', &(0x7f0000000900)='fo\x00']}, &(0x7f0000000a40)={[&(0x7f00000009c0)=']-:({^\x00', &(0x7f0000000a00)='\xf5(\x00']}, 0x1000) ioctl$FUSE_DEV_IOC_BACKING_CLOSE(r2, 0x4004e502, &(0x7f0000000a80)=0x9) syslog(0x2, &(0x7f0000000ac0)=""/209, 0xd1) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000bc0), 0x10400, 0x0) r6 = syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4) ioctl$sock_bt_bnep_BNEPCONNDEL(r6, 0x400442c9, &(0x7f0000000c00)={0x200, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) write$FUSE_NOTIFY_RETRIEVE(0xffffffffffffffff, &(0x7f0000000c40)={0x30, 0x5, 0x0, {0x0, 0x4, 0xfffffffffffffff9, 0xa7e3}}, 0x30) pwrite64(r1, &(0x7f0000000c80)="0da78b8dd05c5b228e8437d4846564dac2a6e1d89e9dc0a44fcbfe651937a469ccd2c557107d371be216495d5fe309220e9fe09e3facda6a41adc2b45e030dbe9f51f696fd50a4310aba003e6b62db433686e941ae37d3ffdf6668f56bbe1731bbb4823ecb6a0e120610826b353cef9e98d6928f5a0d6e0738ca8387f7ec4c42e937dde64344a846a75e203e11706d177770e3b9a2046008f4f4925d56a3675688d69cf202a5278898a9a80cc4f5be4da3267a8acb19c17b39d92647", 0xbc, 0x10000) r7 = syz_open_dev$sndpcmc(&(0x7f0000000d40), 0x2, 0x0) ioctl$SNDRV_PCM_IOCTL_PAUSE(r7, 0x40044145, &(0x7f0000000d80)=0x5) connect(r1, &(0x7f0000000dc0)=@sco={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}}, 0x80) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000e40)='/proc/sys/net/ipv4/vs/backup_only\x00', 0x2, 0x0) ioctl$SIOCGSTAMP(r3, 0x8906, &(0x7f0000000e80)) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r5, 0xc01864c6, &(0x7f0000000f00)={&(0x7f0000000ec0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0xa, 0x800, 0x0, 0xffffffffffffffff}) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r8, 0x1, &(0x7f0000000f40)={0x4, r2}, 0x0) mount$fuse(0x0, &(0x7f0000000f80)='./file0\x00', &(0x7f0000000fc0), 0x2864052, &(0x7f00000011c0)={{'fd', 0x3d, r8}, 0x2c, {'rootmode', 0x3d, 0xa000}, 0x2c, {}, 0x2c, {}, 0x2c, {[{@allow_other}, {@allow_other}, {@default_permissions}, {@default_permissions}, {@blksize}, {@blksize={'blksize', 0x3d, 0x200}}, {@default_permissions}, {@blksize}], [{@uid_eq}]}}) 2.199581396s ago: executing program 3 (id=44): r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_MFC(r0, 0x0, 0xcc, &(0x7f0000000140)={@multicast2, @multicast1, 0x0, "aaa517d60f2811d48c8a2cc60c4380bc23b510d442ff13482864280a9c0f4eb5", 0x0, 0x0, 0x0, 0x3}, 0x3c) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff}) r2 = creat(&(0x7f0000000040)='./file0\x00', 0x4b) close(r2) r3 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r3, 0xc04064a0, &(0x7f0000000140)={0x0, &(0x7f0000000380)=[0x0], 0x0, 0x0, 0x0, 0x1}) socket$nl_route(0x10, 0x3, 0x0) ioctl$DRM_IOCTL_MODE_GETCRTC(r3, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x0, r4, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r2, 0xc06864ce, &(0x7f0000000680)={r5, 0x1ff, 0x0, 0x1, 0x3, [0x0, 0x0, 0x0, 0x0], [0x7fdfffff, 0x0, 0x0, 0x4], [0x0, 0x1001000, 0x2], [0x100000000, 0x0, 0xfffffffffefffffc, 0x9]}) ioctl$DRM_IOCTL_MODE_ADDFB2(r2, 0xc06864b8, &(0x7f00000001c0)={0x0, 0xae, 0x3ff, 0x34325241, 0x0, [r6, r7, 0x0, r7], [0x2b8, 0x2], [0x0, 0x1]}) close_range(r1, 0xffffffffffffffff, 0x0) setsockopt$MRT_DEL_MFC_PROXY(r0, 0x0, 0xd3, &(0x7f0000000100)={@multicast2, @multicast1, 0x0, "c6c0e6ec8755b5dc4e305886d95f086707764f8d0e5a0358ea21274f844a69e9", 0x9, 0x201, 0x489c, 0x6}, 0x3c) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r8, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f0000000cc0)={0x14, 0x0, 0x3, 0x3, 0x70bd25, 0x25dfdbfb, {0x1, 0x0, 0x2}}, 0x14}, 0x1, 0x0, 0x0, 0x5bf08cece5b99490}, 0x8000) 2.199305905s ago: executing program 2 (id=45): syz_open_dev$hidraw(&(0x7f0000000180), 0x400, 0x0) r0 = syz_usb_connect$cdc_ncm(0x5, 0x6e, &(0x7f0000000040)=ANY=[], 0x0) write(0xffffffffffffffff, &(0x7f00000000c0)="dc02cd74", 0x4) mkdir(&(0x7f0000000400)='./file0\x00', 0x114) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x0) mount(0x0, &(0x7f00000000c0)='./file2\x00', &(0x7f0000000080)='sysfs\x00', 0x10000, 0x0) mkdir(&(0x7f0000000200)='./bus\x00', 0x10) mount$overlay(0x0, &(0x7f0000000100)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f00000021c0)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chroot(&(0x7f0000000000)='./bus\x00') openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143042, 0x58) rt_sigprocmask(0x2, &(0x7f0000000b40)={[0x6d285c1d]}, 0x0, 0x8) mprotect(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1) copy_file_range(r1, 0x0, r1, &(0x7f00000000c0)=0xae8, 0x863, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$IOMMU_IOAS_MAP$PAGES(0xffffffffffffffff, 0x3b85, &(0x7f0000000000)={0x28, 0x4, 0x0, 0x0, &(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x5}) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r2, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="3800000056000100000000f70000000007020000", @ANYRES32, @ANYBLOB="200001"], 0x38}}, 0x0) syz_usb_disconnect(r0) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x1, &(0x7f00000004c0)=0x79, 0x4) socket$inet_mptcp(0x2, 0x1, 0x106) syz_usb_connect$printer(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="1201f105000000402504a8a440000102030109021b0001012c100009040005010701054009050102200061010d"], 0x0) sysfs$2(0x2, 0x2, &(0x7f00000000c0)=""/160) 2.130490722s ago: executing program 1 (id=47): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x400000000a882, 0x0) r1 = dup(r0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000002, 0x28011, r1, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x8001}, 0x4) syz_emit_ethernet(0x2e, &(0x7f0000000000)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @random="e43f6642531e", @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x20, 0x0, 0xe000, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0xc, 0x0, @gue={{0x1, 0x1, 0x1, 0x10, 0x0, @void}}}}}}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x1ffffc54, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x40}, 0x94) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x5, 0xb68, 0x2000, &(0x7f0000000000)='%', 0x0, 0xd01, 0x1000000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) migrate_pages(0x0, 0x3, &(0x7f0000000040)=0x7f, &(0x7f0000000300)=0xa) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a3c000000090a010400000000000000000a0000040900010073797a310000000008000540000000370900020073797a310000000008000a40fffffffc300000000c0a010100000000000000000a001960b5b14bec6752b4ae00060900020073797a30000000000900010073797a310000000004000380140000001100010000000000000000000300000a"], 0x94}, 0x1, 0x0, 0x0, 0x4000850}, 0x4040) 2.130058147s ago: executing program 3 (id=48): bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], 0x0, 0x0, 0x0, 0x0, 0x40e00, 0x5a, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x90deb09d804ad4f3, 0x63) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40e00, 0x5a, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$gtp(&(0x7f0000000000), r2) setregid(0xffffffffffffffff, 0x0) r4 = socket(0x10, 0x803, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0xa, 0x18, 0x8, 0x40, 0x42, 0x1}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000700), &(0x7f00000004c0), 0x1000, r5}, 0x38) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), r6) sendmsg$ETHTOOL_MSG_FEATURES_SET(r6, &(0x7f0000002540)={0x0, 0x0, &(0x7f0000002500)={&(0x7f0000000100)={0x4c, r7, 0x1, 0x70bd27, 0x0, {}, [@ETHTOOL_A_FEATURES_WANTED={0x20, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x1c, 0x3, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, '($@\'\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x4}]}]}]}, @ETHTOOL_A_FEATURES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bond\x00'}]}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4004801}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r4) getsockname$packet(r4, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=@newlink={0x38, 0x10, 0x437, 0x800000, 0x0, {0x0, 0x0, 0x0, r8, 0x504c3}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gtp={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GTP_FD0={0x8, 0x1, @udp6}]}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x2000c014}, 0x0) sendmsg$GTP_CMD_DELPDP(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="03002cbd70000e0000000200000008000100", @ANYRES32=r8, @ANYBLOB="0800020000000000080005"], 0x34}, 0x1, 0x0, 0x0, 0x44800}, 0x20000000) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000012c0)={r1, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)=[0x0], 0x0, 0x0, 0x1, 0x1}}, 0x40) mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x10012, r0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000005c0)={0x6, 0x8, &(0x7f0000000a00)=@framed={{0x18, 0x0, 0x0, 0x0, 0xffffffff}, [@jmp={0x6, 0x0, 0xc, 0x0, 0x0, 0x1, 0x8}, @func={0x85, 0x0, 0x1, 0x0, 0x1}, @exit, @cb_func={0x18, 0x0, 0x4, 0x0, 0xffffffffffffffff}]}, &(0x7f0000000100)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) 2.027224457s ago: executing program 3 (id=49): futex_waitv(&(0x7f0000000180)=[{0x3, &(0x7f0000000040)=0x3, 0x2}], 0x1, 0x0, 0x0, 0x0) r0 = openat$userio(0xffffffffffffff9c, &(0x7f0000000080), 0x22242, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) (async) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) write$USERIO_CMD_SEND_INTERRUPT(r0, &(0x7f0000000040)={0x2, 0xfe}, 0x2) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) (async) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = fsopen(&(0x7f0000000080)='autofs\x00', 0x0) fsconfig$FSCONFIG_SET_FD(r4, 0x5, &(0x7f0000000280)='fd', 0x0, r3) (async) fsconfig$FSCONFIG_SET_FD(r4, 0x5, &(0x7f0000000280)='fd', 0x0, r3) fsconfig$FSCONFIG_SET_FD(r4, 0x5, &(0x7f00000005c0)='fd', 0x0, r3) socket$inet6(0xa, 0x1, 0x0) (async) socket$inet6(0xa, 0x1, 0x0) r5 = socket$inet_tcp(0x2, 0x1, 0x0) close(0x4) socket$inet_tcp(0x2, 0x1, 0x0) (async) r6 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r6, 0x1, 0x3c, &(0x7f0000000040)=0x1, 0x4) (async) setsockopt$sock_int(r6, 0x1, 0x3c, &(0x7f0000000040)=0x1, 0x4) sendmmsg$sock(r5, &(0x7f0000000f40)=[{{0x0, 0x0, &(0x7f0000000900)=[{&(0x7f0000000280)="f8", 0x1}], 0x1, &(0x7f0000000a40)=[@timestamping={{0x14, 0x1, 0x4f, 0x3ff}}], 0x18}}], 0x1, 0x40440d1) sendmsg$ETHTOOL_MSG_COALESCE_SET(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01002bbd700000000000140000001800018014000200766574683000000000000000000000040000000000000000"], 0x34}}, 0x4040004) r7 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000180), 0x1eba00, 0x0) ioctl$PPPIOCNEWUNIT(r7, 0xc004743e, &(0x7f00000000c0)) (async) ioctl$PPPIOCNEWUNIT(r7, 0xc004743e, &(0x7f00000000c0)) r8 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r8, &(0x7f00000035c0)={0x0, 0x0, &(0x7f0000003580)={&(0x7f00000005c0)=ANY=[@ANYBLOB="5c0000001500010028bd7000ffdbdf2500000000000000000000000000000000ac1414aa0000000000000000000000004e2100094e2300090a00a00032000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="b36b6e00020000230a0010006a"], 0x5c}, 0x1, 0x0, 0x0, 0x4004050}, 0x20000000) ioctl$PPPIOCSNPMODE(r7, 0x4008744b, &(0x7f0000000f80)={0x2b, 0x1}) 1.851190529s ago: executing program 3 (id=51): r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu/memory.limit_in_bytes\x00', 0x20042, 0x0) write$sysctl(r0, &(0x7f0000000100)='4\x00', 0x2) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CURSOR2(r2, 0xc02464bb, &(0x7f0000000080)={0x2, 0x0, 0x0, 0x20000, 0x1, 0x6, 0x0, 0x44e1, 0xb781}) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000140), 0x106, 0x9}}, 0x20) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f00000000c0)={'veth0\x00', &(0x7f0000000200)=@ethtool_eeprom={0x43, 0x2, 0x70, 0xb0, "b78bbeeb976a79dfb71a436679136f52899b38fdd2173751aa11917385771e4050c8450a56c516581023000000009668e6d9d354c51a1f949eca777a438b1bd9455e8b5a4ec4fc57ef0054dd2b5ba9a6d0aca21e116c8230f7d517a5c41401358e8d5d9c40061552937188fa62a8e51e9c6f9860c7fd7bca7470dbd602d55648a4e899aa24429ead0e2e5c9aa4c21c4d60a6a683a0951626658e5ca59253f7c070291aba8c73307559d72e3ec6e408d1"}}) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x111}}, 0x20) 1.65156024s ago: executing program 1 (id=52): r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket(0x10, 0x2, 0x0) sendmsg$nl_route(r1, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000005c0)=0x56) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000007d00), r3) ioctl$sock_SIOCGIFINDEX_802154(r3, 0x8933, &(0x7f0000007d40)={'wpan1\x00', 0x0}) sendmsg$IEEE802154_LLSEC_SETPARAMS(r3, &(0x7f0000007e40)={0x0, 0x0, &(0x7f0000007e00)={&(0x7f0000000300)={0x2c, r4, 0x1, 0x70bd26, 0x25dfdbfd, {}, [@IEEE802154_ATTR_LLSEC_KEY_MODE={0x5}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r5}, @IEEE802154_ATTR_LLSEC_SECLEVEL={0x5, 0x2a, 0x4}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000000}, 0x10008000) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)=ANY=[@ANYBLOB="4000000010003904000000000000000080040000", @ANYRES32=r2, @ANYBLOB="01980000000000002000128008000100736974001400028006000e000600000008000100", @ANYRES16=r2], 0x40}, 0x1, 0x0, 0x0, 0x80}, 0x0) sendto$packet(r0, &(0x7f0000000600)="05d936277c6f54220002097844ffcf8bd1846f7f83477ca1b278e3e4018a34844b9d62cbd7cd2a62", 0x28, 0x8c1, &(0x7f00000000c0)={0x11, 0x86dd, r2, 0x1, 0x0, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, 0x14) 1.590871239s ago: executing program 1 (id=53): r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x3, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000000c0)={0x6, 0x2, 0x1, 0x0, 0x1}) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000140)={0x2, @vbi={0x500, 0xfffffffc, 0x0, 0x0, [0x5]}}) r1 = openat$selinux_policy(0xffffff9c, &(0x7f0000000300), 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./sys\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='./sys\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./sys/bus/pci/devices/0000:00:02.0/resource0\x00', 0x2, 0x0) mmap(&(0x7f0000402000/0x1000)=nil, 0x1000, 0x3, 0x11, r2, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x42000, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000000)={'pim6reg1\x00', 0x2}) ioctl$TUNSETLINK(r3, 0x400454cd, 0x339) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000140)={'pim6reg1\x00', @multicast}) close(r3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, r1, 0x0) 1.441701111s ago: executing program 1 (id=54): syz_emit_ethernet(0x96, &(0x7f0000000080)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000086dd600a843500600601fe8000000000000000000000000000bbfe8000000000000000000000000000aa00004e22", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="800200"], 0x0) socket$nl_route(0x10, 0x3, 0x0) r0 = syz_usb_connect(0x2, 0x3f, &(0x7f00000007c0)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001100000000904000003fe03010009cd8d1f000200000009050502000000001009058b1e20"], 0x0) r1 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) r3 = dup3(r2, r1, 0x0) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r3, 0xc018620c, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) r4 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$FS_IOC_GETVERSION(r4, 0xc0105b08, &(0x7f0000000040)) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="400000001000030400000000ffdbdf2500007400", @ANYRES32=0x0, @ANYBLOB="00000000f3b20500200012800b00a55c04f31dcb0c01006272696467650000100002800c0023000200000000000000710ab1c912b510a66c21599463d57bae496974ef9368b5a2400de623fc019a43ee0c05928d81f12f96ef7c5b67e44180394efd1d066187a3a32ae38c5ac54985bc4beb30ad88178c1e2c"], 0x40}, 0x1, 0x0, 0x0, 0x800}, 0x2000c014) syz_extract_tcp_res(&(0x7f0000000300), 0x3ff, 0x5) r5 = fsopen(&(0x7f0000000100)='ocfs2_dlmfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000280)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newqdisc={0x60, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x2, {0x0, 0x0, 0x0, r7, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x30, 0x2, {{0x0, 0x1, 0x0, 0xad1}, [@TCA_NETEM_RATE={0x14, 0xe, {0x0, 0x200002, 0x1}}]}}}]}, 0x60}}, 0x0) r8 = fsmount(r5, 0x0, 0x0) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r9, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="4800000041000501010000000000000001010000000000001c0001000600060086dd0000100007007f0000017f0000013a004000140002"], 0x48}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) r10 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f00000000c0), 0x4000, 0x0) r11 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r11, &(0x7f0000000200)={0xa, 0x4e22, 0x0, @empty, 0x30d}, 0x1c) connect$pppoe(r10, &(0x7f0000000240)={0x18, 0x0, {0x4, @remote, 'ipvlan0\x00'}}, 0x1e) fchdir(r8) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) prctl$PR_CAP_AMBIENT(0x2f, 0x1, 0x0) set_mempolicy(0x8006, &(0x7f0000000040)=0xfff, 0x5) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xa, 0x6, &(0x7f00000002c0)=@framed={{0x6, 0x0, 0x0, 0x0, 0x0, 0x71, 0x11, 0x3c}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x76}, @exit], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x94) 1.031790506s ago: executing program 3 (id=57): r0 = syz_open_dev$radio(&(0x7f00000000c0), 0xffffffffffffffff, 0x2) setreuid(0xee01, 0xee01) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000440)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48) r1 = syz_open_dev$sndpcmp(&(0x7f00000001c0), 0x1, 0x0) ioctl$SNDRV_PCM_IOCTL_HW_PARAMS(r1, 0xc2604111, &(0x7f0000000540)={0x7, [[0x9, 0x5, 0x1, 0x6, 0x8a56, 0x4, 0x8, 0x7], [0x0, 0x0, 0x4000009, 0xff, 0x6, 0x5e8d, 0x2000000, 0x7d9], [0x6, 0x40, 0x15, 0x80, 0x2, 0x40, 0x9]], '\x00', [{0xc, 0xffff, 0x0, 0x0, 0x1}, {0x80000001, 0xc26d, 0x1, 0x0, 0x1, 0x1}, {0xfd, 0x77, 0x0, 0x1}, {0x17b, 0x8d, 0x1, 0x1, 0x1}, {0x3, 0x2, 0x0, 0x1, 0x1}, {0xf, 0x210f, 0x1}, {0x580000, 0x9, 0x0, 0x1, 0x1}, {0x2, 0x56, 0x0, 0x1}, {0x1, 0x8, 0x1, 0x1}, {0x9, 0x48af80, 0x0, 0x1, 0x1}, {0x1, 0x8, 0x1}, {0x7fffffff, 0xa, 0x1, 0x0, 0x0, 0x1}], '\x00', 0x9}) ioctl$VIDIOC_G_TUNER(r0, 0xc054561d, &(0x7f0000000140)={0x0, "4ff88a2de3b33d9c3d1953b1c239a5a2aab996cb9a5ae96c26323b4f0558449d", 0x5, 0x0, 0x9, 0xc53, 0x4, 0x3, 0x2, 0x7ff}) 1.031503752s ago: executing program 3 (id=58): mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./dev\x00', 0x1c0) mount(0x0, &(0x7f0000000100)='./dev\x00', &(0x7f0000000200)='devtmpfs\x00', 0x0, 0x0) syz_usb_connect(0x0, 0x47, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000200000040cd0607010001010203010902350001010080fa0904000005ff00000007058102400001070501024000010705830240000107050302"], 0x0) openat(0xffffffffffffff9c, &(0x7f0000000140)='./dev/ttyUSB0\x00', 0x2, 0x0) r0 = socket$netlink(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r0, &(0x7f0000000080)={0x0, 0x1f, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r1, 0x1, 0x9, 0x25dfdbff, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x10}, 0x24004804) 599.871765ms ago: executing program 0 (id=64): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x8031, 0xffffffffffffffff, 0xfffff000) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x5, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x4000004) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000006c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r2, {0x0, 0xd}, {0xffff, 0xb}, {0xffff, 0xffe0}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x38}, 0x1, 0x0, 0x0, 0x240040e0}, 0x4890) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x129, 0x0, 0xfffffff8, {0x0, 0x0, 0x0, r4, {0xb, 0xd}, {}, {0x8}}}, 0x24}}, 0x40004) madvise(&(0x7f0000000000/0x600000)=nil, 0x600722, 0x19) mremap(&(0x7f0000064000/0x3000)=nil, 0x3000, 0x600000, 0x3, &(0x7f0000a00000/0x600000)=nil) r6 = userfaultfd(0x80001) ioctl$UFFDIO_API(r6, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x280}) mlock2(&(0x7f00001b9000/0x3000)=nil, 0x3000, 0x1) ioctl$UFFDIO_REGISTER(r6, 0xc020aa00, &(0x7f00000002c0)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x5}) r7 = userfaultfd(0x801) ioctl$UFFDIO_API(r6, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_ZEROPAGE(r7, 0xc020aa04, &(0x7f0000000040)={{&(0x7f0000a39000/0x1000)=nil, 0x1000}}) openat$nvme_fabrics(0xffffff9c, &(0x7f0000000000), 0x80081, 0x0) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000a5b000/0x4000)=nil, 0x4000, &(0x7f0000000080)='/dev/nvme-fabrics\x00') mlock(&(0x7f0000cd3000/0x3000)=nil, 0x3000) 291.024782ms ago: executing program 0 (id=65): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r0) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_PROBE_MESH_LINK(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f00000011c0)={&(0x7f00000005c0)=ANY=[@ANYBLOB="e00b0000", @ANYRES16=r1, @ANYBLOB="937229bd7000fbdbdf258800000008000300", @ANYRES32=r3, @ANYBLOB="7503330000207f00080211000001080211000001ffffffffffff9000000200000006010101010101010596b61296ecdde7a9f9e40158b52438241fa826deaf4e2aa79e9d696a3ad08e27ea6e82f5e434a339fea4956390e06705aa426dc5635015bf7212eb494b8465abd99109ea25168599bc88130f055793e43280ddc7e8820de640ca29fef65c3ed36673166a0685550f971ab2cc649cfc62fcb66bc7b460cbca4d2c4814c738addcfbcdf77422308e590892b81404644e598b38d98a3e2fb3d03046127c5d83b71c0193506064fcdedb1213c22cedef6a6f9575d1940bbbfa598a23fe70dd5ad1a145a21eed52636d125252776e55ec48e5367c88e7047319160aca9b6e235dda45348f1a59b82bbee7cabdd5f44c55ddaab842ff24e3c7ec7f7b5e5edec188de28f2e17ca88c09a0102f01c00881976a19dd8c714665f9165213ad84043792c9230ee976d53dac19807f28afc5bfaf9dc539ddd76f1ac9193fe69f5430ab4a007861bdd78a4e3b7e9a09b6784624e710186d12699e9a9420e071cf8422eefa714939243546cff135fd574ae95cd539389b71934325ffb239b3fe544aa52009b6974a1d7cd09fccc86e7e5143e38d9372a554ef18cc335306dd9f41dd2f646ec9bef122f1c61f8d6072769dd123ba28c71b8157fb771d47e23ae896e12a22ded3f52c69f5f5541414bdd782f6ddba51cabe129d879bdcb1c2a8f40a14d462e508b7e98e157bf0b91c3232172b6add32a959a38c105fd56bb3934571aa80ad781f78b88a958d82d35240df601d85a6dc7a04f2fd5c7b4f50afd5ed0b5ef9970a8633cfdf19eb0228e8e1b1a2543bb751cdfe051463e3940de54e46362e14831f453576fcebc2e1b9210d3286e90c977f4c322ba802489afc9481d5e2ea968224cbc3074183448d05e2ca84a95b121a1a7018d384717690d266c285b9ebfd23a71d677878c938b0de48ddc20d25b3f9040f80cce65e3eda59c79cc749386c04af3e152e51cc108ef0ae463d31a796efa786daa5ffac605789706df90ff7209bde8687dc5086b56294074c33de8d1e943fbde1c9c0bfa2405dd29fbba3071753493ee0422be1a36f6ad7ac58586e609abf92f61941e5ac36cc988fb6ce476c708209bda06aeb71e82edf8034dc1916224ab3847485ef17a6d1c21d3931beca48fb6857556a6fcda2c81e2bda54432f14926d3842f92ff6ccc457050e7c9a70476c26b631d34aad51e2da9a9b36a00000000a00060008021100000000000a00060008021100000100000a0006000802110000000000e7023300102c1000080211000000080211000001080211000000c2ff440018001000010260862d1a08000f0000010000000000020007001d0000000100aa50920005dd3784bd38cf461ead6969b370f60f88f2d90434beb2cdabd1c4c1ab56bbed0c4eb3a879c89903d47d54b94855b81095060d06dff14720904add99aeb62938cb7cfc4dbee9e912fff76e307859cc19a010b3c790a9b660e4274b451ce319b8b41acfefe746ab939df7e00978b5a4b08f53c6363381f3089feb60e84f125e36937f1c23583cc27f83640823f7f376032609fb51f4c498dc5e414cb559eda80892faf2c254239c9aa4b0237c9d0d8dea47e3039c17a2618dc965b4f757317e1c9d1e5b60f45077904ce21f2d4652bd61e8e7603e20ddea7a282cb94056efb0f9a69b75c03e6882169d09ba92f18e2877328773dfd46387e82e68ff65ba1a5daa58905ce0a5c0aff2f68da61853b6dea56686846a9827d08f1b6378aa9092ee0e79b555bb731562b31ef7a038754f2cc92f7d69396ad961a71c0f5c506d0c59d3e74f32c094b78a67f61582ad0f50e8cbc2953e336a20b6aa8fad3d78e5ca4e235db01db20192e440655c285e3205646b388f55defeec7d56ba3112c843fd9f19e6a931a50023bc26cac5b42c7f26f1a4cbc215534e0986d6887385bd673ae22add3acf9ca1167ab7f9dd8256f2290a4dec54b59b9680b51b90a43244d298eeb322dde36f6d5fe253bc2f4c08912e59a78b95fa8bf22af61b9e5b527c7ac148d6f791c917360226016d964103b373a6d039dd5738d5e61fa92d7fc93006460411018fd8d81cf359f5f01759b6943176870853ce8e271d25c32ac5490923caba710f1db91450c9435c5e96c03d23c010ba0143dff628cc41608b35355cdd01e757b013f2678a6b025d485d73fdd94fbbddfbe4647fd867dbdd66d249e52edcca507fcd0d7988ce1f14421d34876dbc2728916fd080ad63a90110b2e34c3f541714b257eee2d369d10f0387cad8d804ac1fc59a78c6906d78500a746a55b8f26da01880ff3d6108003205330010140600080211000000080211000001780c4b433b0c710020001e0008002d1a200007040000000000000008000600160000000100a74b000002dd19c18247783e694b1b1e26c48455336fcb90e755ee739a6b5cadddff84a84b39dc8a242fca5e69837e2600c3d34250d4e966344918e9838dedaec6757b36dd7e4de2e5e36081a1a1482833780884957eebc2c8447a86e16c53f5d732acecfb51862e3051f8638dd2b783bb3d83b402de4beb20f30b982b8331d1a9d8a438a3fb57cc0a374260fd2b9d2c6bd41616b473ba3ae7c480d8de0e6361e6879c0deaabffcfdaef9fd610f8678b679ce2ef708b1e33db43e1fe0384fcfd89abaa7f0512c38d6ddbab8f22f60db9adf45932c34d2e2381a9ee0a3a756a9d2545cf70c43ded889f994838163d3a50da052cd9db67e2889671158e9da042ed93c8b3e2a9ac78477bc34bcc5e0657a2a12394eca18987fa582e98e897cbe44f2cddfc35fea368034948698a82b564adbfd10cb09e086ab141548d892ecd8849ca7e45526e8dfdb6fd8c7448194d2bd187863538215e430bb225c00cd6d7a40535605f35a870534d3446d7ce3edf51ce26ed89e7e0b50507972cd6ca601c9db19707d334d0ebc474ee1320da49b8b93e6600cdc912cbd7796ee14470b00fe96bc0ec2bc90c619d0d519690dc65d93b3aea34bbd38424c5604768efe08562bc4459098208f18b5c94e4c127b7ef63867f649e8723d08b1690687daece1c5c7d648b19770dff49754d9f56eaa5585d53214c874ac993f42100ace48c74227ee58effb4a2a4c0399f930c0114cd33ef0b6d3592f7099503da3c1008bf82258a41ddf32c7f2f897ccdd2c4db0e62583c6a7a3391144e31decfe9a35657d2cc8d38df0fa3f4ad424e8925419a7efa47d4f3557c99f482b24e2281effc8ae607fd19eeef3265f9a3a6bc4a1c70dc2bfc9b295a68cf2a9e9dc641c0ceb1337c576dac52ce38c3c46ad934d1f6955949861d6084da58a81d36200e8cd896adc8f77e2fb99ddd4b17f5b1bbd9ef82e5b9d84261744581a9b4ce2ae187d777fc2f5ab06ee6d72f0c59b3541658abf5c198081efac70e0c6154dcab50a07cedabe8c00c5f249c42827b9c964ed3c97bd96b48c8517aa2cdeac8393139ce7734f808b944dabd5972f5c862ce109f83f584dbaee68171ef252ec3ddd8750a0498ca3179b717b4980acd2370b5e79f2bb590df37350719557aae530b26bcddff5179007d813aeaf8cf02d6d1771822b9949123a69365b8eb0ad636d8c09eb4df3ac1e8da9ca73725466dca2d126e4d4e03e288a821adda90bbecf3fcd45532b43cc07a29a5b2c19ecece2e93108a295934e9e1042d7e5f7fd7cb2f1c1b895f80c427d1d0e8dec92dc6361bed1e9a0120b0fbf3c906b5efd5fea95b0064e099fc59bc5dde77c1d37a291a071c5e275fa6b6dc8129d65b70bf10c25ebbec422e7556de35bab6029b42dc4d19509a63c0573663a1ff73dd0a554d5215042f17392be9dd5a3da66bda4b654783d05e539ad144f32e0f782df71a8ec215788f637ae798f2408af3f716b92088f9a49dc1f3fc50b1de569ed86895e4b3d832966d47110d43c34e7e2754c323a0aa7ca68357afcc21c90984b38bc323d77d5ca4dda176b1a647075dac4375c9e5c1b281122acc560f2f9e41ba4a47063d1b2dd0748e23368fb3d95abf4569c1cf9830411794fce5a3d944d6ec00acfd7cb3e1802c007619e33d21532d191ab8415c23dd7b0bfbc5256478beaf78853e6f0e978c07b7f80db7f5e855cea24f174a8051752756588739e091fe3fb9e049dc2dd992230d4a2e7ca59433837b9c938ce3d888bfdcfb963f905b4360136d27dd72fa6d202de200000a000600"], 0xbe0}, 0x1, 0x0, 0x0, 0x800}, 0x4000000) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000004c0)={0x28, r5, 0x1, 0x70bd2c, 0x40ffffff, {}, [@MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast1}]}]}, 0x28}, 0x1, 0xff07, 0x0, 0x20000840}, 0x2000000) 234.174402ms ago: executing program 0 (id=66): socket$nl_generic(0x10, 0x3, 0x10) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2241, 0x0) socket$netlink(0x10, 0x3, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r3 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0) ioctl$EVIOCGSW(r3, 0x8040451b, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010005"], 0x3c}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x1, 0x803, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=@newlink={0x50, 0x10, 0x609, 0x0, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, 0x88aefe86, 0x40000}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x1}]}}}, @IFLA_LINK={0x8, 0x5, r7}, @IFLA_ADDRESS={0xa, 0x1, @remote}]}, 0x50}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000240)=0xffe4) r8 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000040), 0x290c01, 0x0) sendmsg$nl_route(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000440)=ANY=[@ANYBLOB="5c00000010001ffffcffffff0000000000000000", @ANYRES64=r2, @ANYRESDEC=r8, @ANYRES32=r4], 0x5c}}, 0x40) 148.723351ms ago: executing program 0 (id=67): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_GET_ONE_REG(r3, 0x4010aeab, &(0x7f0000000040)=@other={0x2030000200000000, &(0x7f0000000100)}) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)=ANY=[@ANYRES8=r0], 0x16c}, 0x1, 0x0, 0x0, 0x20004414}, 0xc000) setresgid(0x0, 0xee01, 0x0) prctl$PR_SET_SECUREBITS(0x1c, 0x2c) setuid(0xee00) openat$binfmt_register(0xffffff9c, &(0x7f0000000100), 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000480)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@type_tag={0x9, 0x0, 0x0, 0x12, 0x4}]}}, 0x0, 0x26}, 0x28) r4 = openat$kvm(0xffffffffffffff9c, 0x0, 0x1a1700, 0x0) ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) rseq(&(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x6, 0x4, 0xfffffffffffffffa, 0x7}, 0x4}, 0x20, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./sys\x00', 0x1ff) r5 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r6 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2) r7 = memfd_create(&(0x7f0000000700)='y\x105\xfb\xf7u\x83%\x1f\xe09@:r\xc2\xb9x0\x90P\x03\x00\x00\x00\x00\x00\x00\x00\xfe,\x1c\xf1\xdd\xcf]\xac\xbc\t\xbb\xfc\xa4j\x9f\xceX\x8f5=\xaa\xd5\xe9n\xab s\xa5\x00\x8d\tV\t\x91\x18\x06O\xb0=D\xda\xb6F\x1a\xc82\x8b\xc0l\xd0\x89d\xe6\xb7\xd8\x97\xb8\xde\xa3\x89\xc2%/u\x17\xdaM\x8d\x01Lh\x1e^\x9ej\x1c\xc5\xf0\xf6\x92\x05\x9aH\x00\'\xd4\x94d_\v\xfc\xad\x0f\xa8\xc5\xad\x00\xc2\x12\xff\xff\xff\xff\xff\xff\x00\x00\x00\x00\nj\x8c\xef\x90\xc0Z\xfa\x1a\xb3\xf0wVq\xe9d\xf8N\x80\xd1g\xd8e\xc8\x16\xad1\x02\xab\xce3\xb2\xb0\xd1\x11\xf0\xc3Gj+kV$\x80\x8aJ$\x81\xc0\x16\xf5\x9cz\x10\x97\xdb\x12H\xee/\xe3sY\x02D;L~\xd0\xb44\x01*\xfb\xa4 \xb2b\x90H$\xb2\xad\xbf\x8aM\xb6\x81\x81^\x02\xa0\xa7t\xfbHb\xa5=\xdd+$\xc06J\xb4\xf0\xab\x85Xz\x9f\xb2D$\xbe\xd9\x7f-\r\x9aj9r\n_\x11\xd4\x19\xb0\xa0G\xb7\x94\xf7\xfd~\xe9\xb6G\xbfE\xbb\x15\x15\xa6\xca2\xd0\xd3\x8c\xf7nO\xf9\xa8\xfd\x8a\xd2\xb2\xab\xff\xe4\xb0;\xd9\xa8\f\x03R\xbd%\x9fF\xee\x05\x06.3(QF?\f\x05\xa4uY\xee\xab\x8a\xeb~\xed\xcb0\xb7\xe7\xe6?8g\x8aN\xda\x8f\x9d\xde\x1eNaS\xaac\x00\x00\x00\x00\x00\x00\x8c\xb9=5\x991\xae\x89N\x13\xd1\xf7\xf0\x13\xb2\xaeS\xa1\x97\x18j\xea\x9f\xde\xb6\xd4\xdc\xe6*\x9c\xfdV\x82\x05\xb7\xcc\xb4\tU\x9e\xc2\x7f\x92\xf5\x10\xc1\xc0\x82\xfa\x16\xccWzs\xba4\xb8\xcbU\x1a|\xc8\xe3i\xf8jYv\x05\x84\xdeC=vn\xea\x00\xda\xc4\'\xeb=g\xa3\xf6\xaf\xa6\x1f\x9bW|\t\xa4\xf1\xab\x1d \xfbBO\x83\xdd\x80\xb0\xd6\x9a\xdf\x1f\x03\xee\xbe)s\xc1f\xa9\x04\x958\xc3\v\xa3$=\x14\xe8\xac\xee\x1f\x94_\xed\n\x8aa\x01+Oy\xae\xe40S\xceJ\xc4vk\xe7\xc0!\x9d\x1fk\x98@\x94s%\xd7p)\xcb7\xfem\x17\xcc\xe9\xcb\x18bn\x90\xafd\xcdW\xa5\xff\x0fvo\xff\x87w\xadL\xf4\x9c=\xc7\xb5\x129\xacX\xda\xee\xc3\xe3\xf6\vs\x9cR|\rrO\'\xd3T\xa3W\xc3<\xbd\xbb_\a\x92\x1f\xd2\x97\xd6\xe5?\xec\x91\x98\xdcH\xf1\x8d\x92\xac\xfb\xd8\xd3!(Y\xa0\xe8^\xc9\xd4\x8a\xc4\v^\x7f\x18\x05F\xeb\a\xfe47/\xfcc\xc1\xbcl!\xb0u\xa2\x88\xa1\xa9\\-\x11\xea\xf8\xb1\xc4-\xb3\xe6\te\"j\x88\t\xe0\x14\v\"9cQh2j\rq\x00'/671, 0x0) ftruncate(r7, 0xffff) fcntl$addseals(r7, 0x409, 0x3) close(0x3) ioctl$UDMABUF_CREATE(r6, 0x40187542, &(0x7f0000000000)={r7, 0x1, 0x0, 0x2000}) mmap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x810, r5, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb01001800000000000000a00db297ce285479330c0000000c000000020000000000000000"], 0x0, 0x26}, 0x20) mount(0x0, &(0x7f0000000340)='./sys\x00', &(0x7f0000000380)='sysfs\x00', 0x0, 0x0) r8 = openat(0xffffffffffffff9c, &(0x7f0000000480)='./sys/class/net/bridge0/bridge/multicast_igmp_version\x00', 0x1, 0x0) r9 = signalfd4(r8, &(0x7f0000000040)={[0x5]}, 0x8, 0x80800) ioctl$XFS_IOC_EXCHANGE_RANGE(r9, 0x40285881, &(0x7f0000000100)={r8, 0x0, 0x656, 0x5749, 0x8, 0x8}) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x240080, 0x0) 954.603µs ago: executing program 0 (id=68): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x181) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./bus\x00', 0x0) (async) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(twofish)\x00'}, 0x5b) (async) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f00000007c0)=[{0x0, 0x0, &(0x7f0000000480)=[{&(0x7f00000003c0)="96e6e14d06cd2cd1dc6969313336a9017d94", 0x12}, {&(0x7f0000000400)="499b7fee4035c5b8beb1f70453870f0783c185665f5661dc54c5a1a1ad65e127a695fb29eb758e857595e5277fdfcd8246da633a7d6ed7e05fe75f4f36c670e755ca5142914fdc83650da6c01c7a06ebf495fbe36b151a4c207d9347308484a5891ad7c14310bd", 0x67}, {&(0x7f0000000640)="7caba4f81ffec1c44c4691773da226d91a54e9721f1f4c8f4d4f19a73292612c8ad72d40ac83e55148f6700815e6d140cfab03adc719caee1f3feed087bc616c3bc19a510350d0befe495457b7d16c139c6e6850f1e32a661bd7cc91e333472aae3e3eb8815a38aa8fea91788c44336c8437a86f885f35", 0x77}], 0x3, 0x0, 0x0, 0x40088c0}], 0x1, 0x48800) (async) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0xff1f}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) mount$overlay(0x0, &(0x7f0000000100)='./bus\x00', &(0x7f0000000440), 0x8, &(0x7f0000000140)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './cgroup'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) (async) chdir(&(0x7f00000001c0)='./bus\x00') (async) r2 = open(&(0x7f0000000040)='./file0\x00', 0x10507e, 0xa6) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$fou(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$FOU_CMD_GET(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)={0x24, r4, 0x1, 0x70bd2c, 0x25dfdbfd, {}, [@FOU_ATTR_PORT={0x6, 0x1, 0x4e20}, @FOU_ATTR_LOCAL_V4={0x8, 0x6, @private=0xa010101}]}, 0x24}, 0x1, 0x0, 0x0, 0x20008001}, 0x840) (async) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r2, 0x89f2, &(0x7f0000000540)={'syztnl1\x00', &(0x7f0000000300)={'erspan0\x00', 0x0, 0x40, 0x40, 0x7, 0x0, {{0x7, 0x4, 0x0, 0xa, 0x1c, 0x68, 0x0, 0x1, 0x4, 0x0, @loopback, @broadcast, {[@timestamp={0x44, 0x8, 0xe6, 0x0, 0x5, [0x0]}]}}}}}) (async) r6 = socket(0x10, 0x803, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f0000000740)={'vxcan0\x00'}) (async) r7 = socket$nl_route(0x10, 0x3, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000240)={'netpci0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000400)={0x0, 0xfe98, &(0x7f0000000000)={&(0x7f00000002c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {0x0, 0x5}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x1c, 0x2, [@TCA_FQ_FLOW_DEFAULT_RATE={0x18, 0x10, 0x7}, @TCA_FQ_FLOW_MAX_RATE={0xfffffffffffffedf, 0x2}, @TCA_FQ_FLOW_MAX_RATE={0x1400, 0x7, 0x3}]}}]}, 0x48}}, 0x0) (async) sendmsg$nl_route(r6, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000100)=@newlink={0x38, 0x10, 0x437, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x50483}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gre={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_LINK={0x8, 0x1, r8}]}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40000}, 0x4000000) (async) sendmsg$FOU_CMD_DEL(r2, &(0x7f00000008c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000880)={&(0x7f0000000900)=ANY=[@ANYBLOB="e9ce342e2a12dff8c6dfad77cb79821b9bc646dbcce14633b4ee178b0c28026406790071718433a3dc8628ce72c8f9d909625d976f331f4d439781847f84796d66d6ca5c406c9990b99cb5e8addece6c6fa156df49f995d64520b6ee57108bf509a88148ae64eb9a4021a49552747711d6", @ANYRES16=r4, @ANYBLOB="000228bd7000fbdbdf2502000000050002000a0000001400090020010000000000000000000000000001080008007f00000108000b00", @ANYRES32=r5, @ANYBLOB="08000600ffffffff08000b00", @ANYRES32=r8, @ANYBLOB="14000700fe8000000000000000000000000000aa140009000000000000000000000000000000000008000800ffffffff"], 0x80}, 0x1, 0x0, 0x0, 0x1}, 0x4001000) sendmsg$DEVLINK_CMD_PORT_UNSPLIT(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x2}, 0x0) r9 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000740)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb010018000000000000001800000018000000050000000100000001000013040000000200000088060000ff0f0000002e2e"], 0x0, 0x35}, 0x28) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x11, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="180005000000ffff000077b9080000009500000000d3a07e"], &(0x7f0000000080)='GPL\x00', 0x7, 0x4fa, &(0x7f0000000cc0)=""/4096, 0x40f00, 0x5, '\x00', 0x0, 0x0, r9, 0x8, 0x0, 0x0, 0x10, &(0x7f00000002c0)={0x0, 0x2, 0x4, 0x9}, 0x1, 0x0, 0x0, 0xff3e, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94) sendmsg$DEVLINK_CMD_RATE_NEW(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000240)=ANY=[], 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) io_setup(0x7d, &(0x7f0000000600)=0x0) io_submit(r10, 0x1, &(0x7f0000001d00)=[&(0x7f0000000080)={0xfffffffffffffdef, 0x0, 0x0, 0x0, 0x0, r2, &(0x7f0000000000)="96", 0x1, 0x0, 0x0, 0x0, r2}]) 0s ago: executing program 0 (id=69): bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000000)={0x1, 0xffffffffffffffff}, 0x4) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000001380)={'veth0_virt_wifi\x00', 0x0}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./debug/lru_gen\x00', 0x1, 0x0) lseek(r2, 0x8, 0x1) r3 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000001400)={0xffffffffffffffff}, 0x4) r4 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000001440)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1, 0x1, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x2, 0x5}, 0x50) r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./myproc/scsi/device_info\x00', 0x1, 0x0) write(r5, &(0x7f0000000240)="76656e646f80e22a723a6d6f1bede58a8c72951a8d9997987210b3e164656c3a", 0x20) pipe2$watch_queue(&(0x7f00000014c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) r7 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./sys/bus/usb/devices/usb2/power/level\x00', 0x2, 0x0) write$uinput_user_dev(r7, &(0x7f0000000700)={'syz1\x00', {0x7, 0x7, 0x8e4, 0x5}, 0x4a, [0x4, 0x6, 0x40, 0x8, 0x344, 0x1, 0x80, 0x4, 0x1f2, 0x7, 0xff, 0x3, 0x6b, 0x4, 0x9, 0x56a6a682, 0xffff, 0x0, 0xc7, 0x4, 0x80000000, 0x2, 0x9, 0x0, 0x8, 0x7, 0x0, 0x400, 0x5, 0x80000000, 0x2, 0x401, 0xc, 0x200, 0x2, 0x2, 0x9, 0x3, 0xfffffff6, 0xc, 0x3ff, 0x3, 0x80, 0x9, 0x4, 0xd5, 0x39, 0x6, 0x5a, 0xffff, 0x650fdaa8, 0x8, 0x6, 0x0, 0x0, 0x4, 0x5, 0x1887, 0x1, 0x8000, 0x5, 0x200, 0x400], [0x9, 0x10, 0xfffffff7, 0x8000, 0x8, 0x3ebc, 0x10000, 0x2, 0xb428, 0x7fff, 0x0, 0xb960, 0x3ff, 0x6, 0x5, 0x6, 0x10000, 0xffff, 0x3, 0x1, 0x5, 0x6, 0x5, 0x0, 0x4f, 0x88, 0xa532, 0x5, 0x1, 0xfffffffb, 0xc5fe, 0x8, 0x0, 0x3, 0x2, 0x3, 0x6689, 0x7, 0xffffffff, 0x4, 0xd8d6, 0x3, 0x2, 0x6, 0x80000001, 0x2, 0x1, 0x1, 0x1, 0x6df, 0xffffffff, 0xffffffff, 0x73, 0x6, 0x1, 0x7ff, 0x6, 0x7e, 0xb9, 0x7, 0x76ba, 0x7, 0xf1], [0x9, 0x8, 0x7, 0x9, 0x4, 0x100, 0x800, 0x80000001, 0x3, 0x4, 0x9fa, 0x6, 0x80000001, 0x9, 0xd970, 0x0, 0x80000001, 0x7, 0x8, 0x8, 0x5, 0x2, 0x6, 0x3, 0x6, 0xfffffffa, 0x80000001, 0x0, 0x1ff, 0xf, 0xfffffff8, 0x0, 0x6, 0x200, 0x5, 0x413, 0xfffffff8, 0x5, 0x1, 0xde, 0x9, 0x6, 0x6, 0x4, 0x1, 0x2a0e, 0x0, 0x1, 0xe5, 0xfffffff9, 0xc0000000, 0x2, 0x9, 0x80000001, 0x0, 0x7, 0x0, 0x4, 0x3, 0xd, 0x4a7, 0x1, 0x3043, 0x800], [0x6, 0x0, 0x80, 0x5, 0x34, 0x5, 0x8, 0x36fb, 0x0, 0xbe28, 0xfffffff7, 0xa1, 0x100, 0x3, 0x8, 0x3, 0xfffffff9, 0xb92e, 0x6, 0x2, 0x9, 0x7a9, 0x881c, 0x3, 0x665, 0x2, 0x2, 0x81, 0x4b, 0x4099, 0x5, 0x40, 0x7, 0xb, 0xffff, 0x1, 0x8, 0x9, 0xbc, 0xfffffff8, 0x8, 0x4, 0x3ff, 0x2, 0x5, 0x7, 0x7fffffff, 0x1c, 0x6, 0x2, 0x7, 0x4, 0x0, 0xb, 0x8, 0x8670, 0x4, 0x10000, 0x1, 0x8, 0x2, 0xa5f, 0x2000, 0x9]}, 0x45c) r8 = syz_open_dev$loop(&(0x7f0000000500), 0x800000000ffff, 0x14f600) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) ioctl$VIDIOC_QBUF(r9, 0xc058565d, &(0x7f0000000200)=@fd={0x0, 0x6, 0x4, 0x4, 0x0, {}, {0x0, 0x0, 0x96, 0x0, 0x0, 0xa, "fd0f09a2"}, 0x5, 0x2, {}, 0x80000}) write$binfmt_misc(r9, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r8, 0x4c0a, &(0x7f00000002c0)={r9, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x80000000700, 0x0, 0x0, 0xb, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89df3b7fbebffe60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "f4bd000000801900", [0x0, 0x31]}}) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000001580)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000001500), &(0x7f0000001540)='%-5lx \x00'}, 0x20) r11 = fsmount(0xffffffffffffffff, 0x1, 0x7) bpf$PROG_LOAD(0x5, &(0x7f0000001600)={0xf, 0x15, &(0x7f0000000140)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x7}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xfffffffa}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}}, @func={0x85, 0x0, 0x1, 0x0, 0x4}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffb}, @map_idx={0x18, 0x3, 0x5, 0x0, 0xf}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffb}]}, &(0x7f0000000200)='syzkaller\x00', 0x3, 0x1000, &(0x7f0000000380)=""/4096, 0x41100, 0x38, '\x00', r1, @cgroup_device, r2, 0x8, 0x0, 0x0, 0x10, &(0x7f00000013c0)={0x4, 0x2, 0x9, 0xbc}, 0x10, 0xffffffffffffffff, r3, 0x0, &(0x7f00000015c0)=[r4, r5, r6, r7, r9, r10, r11], 0x0, 0x10, 0x9}, 0x94) r12 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r12, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=@ipv6_newnexthop={0x34, 0x68, 0x5fb9a818fb7378e9, 0x70bd29, 0x0, {}, [@NHA_OIF={0x8}, @NHA_GATEWAY={0x14, 0x6, @in6_addr=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}]}, 0x34}}, 0x0) 0s ago: executing program 0 (id=70): r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x88a8ffad}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @lowpan={{0xb}, {0x4}}}, @IFLA_LINK={0x8}]}, 0x3c}}, 0x8000) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) r2 = landlock_create_ruleset(&(0x7f0000000240)={0x20}, 0x18, 0x0) landlock_restrict_self(r2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./dev\x00', 0x1ff) (async) mount(0x0, &(0x7f0000000140)='./dev\x00', &(0x7f0000000180)='devtmpfs\x00', 0x0, 0x0) (async) r3 = syz_usb_connect(0x0, 0x47, &(0x7f0000000000)=ANY=[@ANYBLOB="120100020000004051045f500001010203020902350001020080300904000005ff00000007058102000200070501020002000705820200020007050202000200070583030a0001"], 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000005700)=ANY=[@ANYBLOB="580000000906010200000000000000000200fdff300007800c00018008000140e8000001140017006261746164765f736c6176655f3000000c00028008000140640101010900020073797a31000000000500010007"], 0x58}, 0x1, 0x0, 0x0, 0x8000}, 0x40c0080) syz_usb_control_io(r3, 0x0, 0x0) (async) syz_usb_control_io(r3, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600722, 0x66) (async) madvise(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x3) (async) syz_usb_control_io(r3, 0x0, 0x0) syz_usb_control_io(r3, 0x0, 0x0) syz_usb_control_io(r3, 0x0, 0x0) (async) nanosleep(&(0x7f0000000300)={0x0, 0x1dcd6500}, 0x0) (async) r5 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./dev/ttyUSB0\x00', 0x2, 0x0) write(r5, &(0x7f0000000240)='hello_world', 0xb) mknodat(0xffffffffffffff9c, &(0x7f0000000380)='./file0/file1\x00', 0x81c0, 0x0) (async, rerun: 32) unlinkat(0xffffffffffffff9c, &(0x7f00000003c0)='./file0/file1\x00', 0x0) (async, rerun: 32) bind$802154_dgram(r0, &(0x7f00000007c0)={0x24, @none={0x0, 0xffff}}, 0x14) (async) ioctl$BTRFS_IOC_QUOTA_RESCAN(r0, 0x4040942c, &(0x7f0000000000)={0x0, 0x8, [0x8, 0x400, 0x3, 0xfd5, 0x4, 0x3]}) kernel console output (not intermixed with test programs): Warning: Permanently added '[localhost]:27763' (ED25519) to the list of known hosts. [ 48.192747][ T42] kauditd_printk_skb: 20 callbacks suppressed [ 48.192763][ T42] audit: type=1400 audit(1785678454.599:141): avc: denied { mounton } for pid=5715 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2022 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 48.203167][ T42] audit: type=1400 audit(1785678454.609:142): avc: denied { mount } for pid=5715 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 48.205081][ T5715] cgroup: Unknown subsys name 'net' [ 48.213157][ T42] audit: type=1400 audit(1785678454.619:143): avc: denied { unmount } for pid=5715 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 48.402797][ T5715] cgroup: Unknown subsys name 'cpuset' [ 48.408891][ T5715] cgroup: Unknown subsys name 'rlimit' [ 48.615508][ T42] audit: type=1400 audit(1785678455.019:144): avc: denied { setattr } for pid=5715 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=850 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 48.625194][ T42] audit: type=1400 audit(1785678455.019:145): avc: denied { create } for pid=5715 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 48.633443][ T42] audit: type=1400 audit(1785678455.019:146): avc: denied { write } for pid=5715 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 48.641050][ T42] audit: type=1400 audit(1785678455.019:147): avc: denied { read } for pid=5715 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 48.648769][ T42] audit: type=1400 audit(1785678455.029:148): avc: denied { mounton } for pid=5715 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 48.658489][ T42] audit: type=1400 audit(1785678455.039:149): avc: denied { mount } for pid=5715 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 48.667514][ T42] audit: type=1400 audit(1785678455.039:150): avc: denied { read } for pid=5445 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1 [ 48.682223][ T5722] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). Setting up swapspace version 1, size = 127995904 bytes [ 49.628984][ T5715] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 54.264138][ T42] kauditd_printk_skb: 7 callbacks suppressed [ 54.264150][ T42] audit: type=1400 audit(1785678460.669:158): avc: denied { execmem } for pid=5728 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 54.470689][ T42] audit: type=1400 audit(1785678460.879:159): avc: denied { create } for pid=5732 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 54.478508][ T42] audit: type=1400 audit(1785678460.879:160): avc: denied { read write } for pid=5732 comm="syz-executor" name="vhci" dev="devtmpfs" ino=1292 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 54.487543][ T42] audit: type=1400 audit(1785678460.879:161): avc: denied { open } for pid=5732 comm="syz-executor" path="/dev/vhci" dev="devtmpfs" ino=1292 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 54.489819][ T5735] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 54.494259][ T5739] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 54.495996][ T42] audit: type=1400 audit(1785678460.879:162): avc: denied { ioctl } for pid=5732 comm="syz-executor" path="socket:[6771]" dev="sockfs" ino=6771 ioctlcmd=0x48c9 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 54.496085][ T5741] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 54.497407][ T5739] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 54.497648][ T5741] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 54.498723][ T5739] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 54.501164][ T5735] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 54.509088][ T5739] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 54.511579][ T5735] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 54.513719][ T5739] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 54.515512][ T5735] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 54.517655][ T5739] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 54.520404][ T5735] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 54.526756][ T42] audit: type=1400 audit(1785678460.929:163): avc: denied { read } for pid=5738 comm="syz-executor" dev="nsfs" ino=4026531833 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 54.531746][ T5735] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 54.532970][ T5743] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 54.533798][ T42] audit: type=1400 audit(1785678460.929:164): avc: denied { open } for pid=5738 comm="syz-executor" path="net:[4026531833]" dev="nsfs" ino=4026531833 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 54.538747][ T64] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 54.540476][ T64] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 54.546643][ T42] audit: type=1400 audit(1785678460.939:165): avc: denied { mounton } for pid=5738 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 54.554590][ T64] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 54.559392][ T42] audit: type=1400 audit(1785678460.939:166): avc: denied { module_request } for pid=5738 comm="syz-executor" kmod="netdev-nr1" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 54.567286][ T64] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 54.569056][ T42] audit: type=1400 audit(1785678460.969:167): avc: denied { sys_module } for pid=5738 comm="syz-executor" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 54.575982][ T64] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 55.122732][ T5738] bridge0: port 1(bridge_slave_0) entered blocking state [ 55.126283][ T5738] bridge0: port 1(bridge_slave_0) entered disabled state [ 55.130451][ T5738] bridge_slave_0: entered allmulticast mode [ 55.134079][ T5738] bridge_slave_0: entered promiscuous mode [ 55.162360][ T5738] bridge0: port 2(bridge_slave_1) entered blocking state [ 55.164857][ T5738] bridge0: port 2(bridge_slave_1) entered disabled state [ 55.167195][ T5738] bridge_slave_1: entered allmulticast mode [ 55.170209][ T5738] bridge_slave_1: entered promiscuous mode [ 55.207668][ T5732] bridge0: port 1(bridge_slave_0) entered blocking state [ 55.210234][ T5732] bridge0: port 1(bridge_slave_0) entered disabled state [ 55.212592][ T5732] bridge_slave_0: entered allmulticast mode [ 55.215299][ T5732] bridge_slave_0: entered promiscuous mode [ 55.218621][ T5733] bridge0: port 1(bridge_slave_0) entered blocking state [ 55.220969][ T5733] bridge0: port 1(bridge_slave_0) entered disabled state [ 55.223302][ T5733] bridge_slave_0: entered allmulticast mode [ 55.225967][ T5733] bridge_slave_0: entered promiscuous mode [ 55.238226][ T5738] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 55.246130][ T5732] bridge0: port 2(bridge_slave_1) entered blocking state [ 55.248879][ T5732] bridge0: port 2(bridge_slave_1) entered disabled state [ 55.251292][ T5732] bridge_slave_1: entered allmulticast mode [ 55.253927][ T5732] bridge_slave_1: entered promiscuous mode [ 55.256455][ T5733] bridge0: port 2(bridge_slave_1) entered blocking state [ 55.258821][ T5733] bridge0: port 2(bridge_slave_1) entered disabled state [ 55.261068][ T5733] bridge_slave_1: entered allmulticast mode [ 55.263780][ T5733] bridge_slave_1: entered promiscuous mode [ 55.268137][ T5738] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 55.317883][ T5742] bridge0: port 1(bridge_slave_0) entered blocking state [ 55.320701][ T5742] bridge0: port 1(bridge_slave_0) entered disabled state [ 55.323268][ T5742] bridge_slave_0: entered allmulticast mode [ 55.326352][ T5742] bridge_slave_0: entered promiscuous mode [ 55.330855][ T5742] bridge0: port 2(bridge_slave_1) entered blocking state [ 55.333238][ T5742] bridge0: port 2(bridge_slave_1) entered disabled state [ 55.335565][ T5742] bridge_slave_1: entered allmulticast mode [ 55.338333][ T5742] bridge_slave_1: entered promiscuous mode [ 55.342199][ T5732] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 55.354364][ T5738] team0: Port device team_slave_0 added [ 55.365568][ T5732] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 55.375566][ T5733] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 55.381841][ T5733] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 55.386495][ T5738] team0: Port device team_slave_1 added [ 55.407814][ T5742] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 55.419236][ T5742] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 55.433586][ T5732] team0: Port device team_slave_0 added [ 55.455868][ T5732] team0: Port device team_slave_1 added [ 55.459578][ T5733] team0: Port device team_slave_0 added [ 55.471316][ T5738] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 55.474318][ T5738] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 55.484636][ T5738] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 55.491703][ T5738] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 55.494601][ T5738] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 55.505042][ T5738] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 55.519237][ T5733] team0: Port device team_slave_1 added [ 55.522935][ T5742] team0: Port device team_slave_0 added [ 55.548147][ T5742] team0: Port device team_slave_1 added [ 55.552184][ T5732] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 55.555052][ T5732] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 55.565610][ T5732] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 55.610777][ T5732] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 55.613712][ T5732] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 55.623131][ T5732] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 55.627787][ T5733] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 55.630784][ T5733] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 55.639973][ T5733] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 55.654170][ T5733] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 55.656351][ T5733] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 55.664414][ T5733] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 55.668478][ T5742] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 55.670893][ T5742] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 55.679738][ T5742] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 55.690429][ T5742] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 55.692731][ T5742] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 55.700778][ T5742] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 55.710541][ T5738] hsr_slave_0: entered promiscuous mode [ 55.713885][ T5738] hsr_slave_1: entered promiscuous mode [ 55.780601][ T5733] hsr_slave_0: entered promiscuous mode [ 55.784365][ T5733] hsr_slave_1: entered promiscuous mode [ 55.787315][ T5733] debugfs: 'hsr0' already exists in 'hsr' [ 55.790082][ T5733] Cannot create hsr debugfs directory [ 55.824054][ T5732] hsr_slave_0: entered promiscuous mode [ 55.827235][ T5732] hsr_slave_1: entered promiscuous mode [ 55.830176][ T5732] debugfs: 'hsr0' already exists in 'hsr' [ 55.832355][ T5732] Cannot create hsr debugfs directory [ 55.840103][ T5742] hsr_slave_0: entered promiscuous mode [ 55.843258][ T5742] hsr_slave_1: entered promiscuous mode [ 55.846164][ T5742] debugfs: 'hsr0' already exists in 'hsr' [ 55.849499][ T5742] Cannot create hsr debugfs directory [ 56.172160][ T5733] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 56.181573][ T5733] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 56.185008][ T5733] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 56.189722][ T5733] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 56.194191][ T5733] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 56.200948][ T5733] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 56.211340][ T5733] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 56.218904][ T5733] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 56.257738][ T5738] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 56.263127][ T5738] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 56.265874][ T5738] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 56.269812][ T5738] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 56.272619][ T5738] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 56.276887][ T5738] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 56.282792][ T5738] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 56.287494][ T5738] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 56.344750][ T5732] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 56.350340][ T5732] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 56.356184][ T5732] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 56.362518][ T5732] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 56.366348][ T5732] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 56.372378][ T5732] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 56.375928][ T5732] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 56.382560][ T5732] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 56.438343][ T5742] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 56.442897][ T5742] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 56.451554][ T5742] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 56.457893][ T5742] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 56.462847][ T5742] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 56.468509][ T5742] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 56.472387][ T5742] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 56.476633][ T5742] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 56.505116][ T5733] 8021q: adding VLAN 0 to HW filter on device bond0 [ 56.546539][ T5733] 8021q: adding VLAN 0 to HW filter on device team0 [ 56.556561][ T5738] 8021q: adding VLAN 0 to HW filter on device bond0 [ 56.573474][ T5738] 8021q: adding VLAN 0 to HW filter on device team0 [ 56.581541][ T81] bridge0: port 1(bridge_slave_0) entered blocking state [ 56.584401][ T81] bridge0: port 1(bridge_slave_0) entered forwarding state [ 56.589124][ T5739] Bluetooth: hci2: command tx timeout [ 56.589417][ T5735] Bluetooth: hci1: command tx timeout [ 56.589686][ T64] Bluetooth: hci0: command tx timeout [ 56.606862][ T81] bridge0: port 2(bridge_slave_1) entered blocking state [ 56.609973][ T81] bridge0: port 2(bridge_slave_1) entered forwarding state [ 56.620068][ T81] bridge0: port 1(bridge_slave_0) entered blocking state [ 56.623141][ T81] bridge0: port 1(bridge_slave_0) entered forwarding state [ 56.644101][ T81] bridge0: port 2(bridge_slave_1) entered blocking state [ 56.647147][ T81] bridge0: port 2(bridge_slave_1) entered forwarding state [ 56.656355][ T5742] 8021q: adding VLAN 0 to HW filter on device bond0 [ 56.670672][ T5732] 8021q: adding VLAN 0 to HW filter on device bond0 [ 56.678513][ T5735] Bluetooth: hci3: command tx timeout [ 56.693279][ T5742] 8021q: adding VLAN 0 to HW filter on device team0 [ 56.715267][ T81] bridge0: port 1(bridge_slave_0) entered blocking state [ 56.718297][ T81] bridge0: port 1(bridge_slave_0) entered forwarding state [ 56.730969][ T5732] 8021q: adding VLAN 0 to HW filter on device team0 [ 56.745442][ T81] bridge0: port 2(bridge_slave_1) entered blocking state [ 56.748492][ T81] bridge0: port 2(bridge_slave_1) entered forwarding state [ 56.764746][ T81] bridge0: port 1(bridge_slave_0) entered blocking state [ 56.767773][ T81] bridge0: port 1(bridge_slave_0) entered forwarding state [ 56.784756][ T81] bridge0: port 2(bridge_slave_1) entered blocking state [ 56.787617][ T81] bridge0: port 2(bridge_slave_1) entered forwarding state [ 57.089510][ T5733] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 57.104028][ T5738] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 57.124686][ T5732] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 57.151726][ T5742] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 57.161727][ T5733] veth0_vlan: entered promiscuous mode [ 57.191647][ T5733] veth1_vlan: entered promiscuous mode [ 57.210895][ T5738] veth0_vlan: entered promiscuous mode [ 57.225340][ T5742] veth0_vlan: entered promiscuous mode [ 57.235760][ T5738] veth1_vlan: entered promiscuous mode [ 57.249556][ T5742] veth1_vlan: entered promiscuous mode [ 57.264196][ T5732] veth0_vlan: entered promiscuous mode [ 57.271458][ T5733] veth0_macvtap: entered promiscuous mode [ 57.279638][ T5733] veth1_macvtap: entered promiscuous mode [ 57.286086][ T5732] veth1_vlan: entered promiscuous mode [ 57.317960][ T5742] veth0_macvtap: entered promiscuous mode [ 57.322860][ T5733] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 57.327397][ T5738] veth0_macvtap: entered promiscuous mode [ 57.338932][ T5733] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 57.343551][ T5742] veth1_macvtap: entered promiscuous mode [ 57.354636][ T5738] veth1_macvtap: entered promiscuous mode [ 57.376411][ T5732] veth0_macvtap: entered promiscuous mode [ 57.393073][ T5742] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 57.395884][ T5732] veth1_macvtap: entered promiscuous mode [ 57.401119][ T5738] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 57.415476][ T5738] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 57.422698][ T5742] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 57.478904][ T5837] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.489709][ T5732] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 57.500005][ T5784] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.502717][ T1168] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 57.506647][ T1168] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 57.522707][ T5732] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 57.554020][ T1168] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 57.556832][ T1168] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 57.574095][ T1168] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 57.577053][ T1168] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 57.618763][ T5837] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.627797][ T1168] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 57.632560][ T1168] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 57.641392][ T5733] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 57.656974][ T1168] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 57.660688][ T1168] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 57.691824][ T1166] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 57.695663][ T1166] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 57.721578][ T1166] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 57.732624][ T1166] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 57.771026][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 57.773594][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 57.778967][ T5837] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.918732][ T13] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.921775][ T13] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.939122][ T5837] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.941974][ T5837] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.944818][ T5837] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.947528][ T5837] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.957757][ T5902] ADFS-fs (nbd2): error: unable to read block 3, try 0 [ 57.968841][ T13] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.971673][ T13] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.974423][ T13] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.977285][ T13] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.980428][ T13] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.983777][ T13] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.074229][ T5912] ip6gretap0: entered promiscuous mode [ 58.108812][ T848] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 58.261780][ T5925] syz.0.15 uses obsolete (PF_INET,SOCK_PACKET) [ 58.270631][ T848] usb 8-1: Using ep0 maxpacket: 16 [ 58.273031][ T848] usb 8-1: config 0 has no interfaces? [ 58.274700][ T848] usb 8-1: New USB device found, idVendor=06f8, idProduct=b000, bcdDevice=7d.f9 [ 58.274714][ T848] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 58.274724][ T848] usb 8-1: Product: syz [ 58.274731][ T848] usb 8-1: Manufacturer: syz [ 58.274739][ T848] usb 8-1: SerialNumber: syz [ 58.278131][ T848] usb 8-1: config 0 descriptor?? [ 58.505985][ T5811] usb 8-1: USB disconnect, device number 2 [ 58.653788][ T5932] /dev/sg0: Can't lookup blockdev [ 58.669009][ T5735] Bluetooth: hci1: command tx timeout [ 58.678915][ T5735] Bluetooth: hci2: command tx timeout [ 58.678958][ T5739] Bluetooth: hci0: command tx timeout [ 58.716161][ T5936] affs: No valid root block on device sr0 [ 58.750587][ T5739] Bluetooth: hci3: command tx timeout [ 58.842550][ T5941] syzkaller0: entered promiscuous mode [ 58.844873][ T5941] syzkaller0: entered allmulticast mode [ 59.003732][ T5943] Zero length message leads to an empty skb [ 59.167134][ T5949] bridge0: port 2(bridge_slave_1) entered disabled state [ 59.208445][ T5955] usb usb9: usbfs: process 5955 (syz.1.23) did not claim interface 0 before use [ 59.212840][ T5955] netlink: 'syz.1.23': attribute type 2 has an invalid length. [ 59.216582][ T5955] netlink: 40 bytes leftover after parsing attributes in process `syz.1.23'. [ 59.234597][ T5955] : entered promiscuous mode [ 59.271484][ T42] kauditd_printk_skb: 100 callbacks suppressed [ 59.271496][ T42] audit: type=1400 audit(1785678465.679:268): avc: denied { write } for pid=5960 comm="syz.3.26" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 59.274887][ T5962] process 'syz.3.26' launched '/dev/fd/4' with NULL argv: empty string added [ 59.279900][ T42] audit: type=1400 audit(1785678465.679:269): avc: denied { create } for pid=5961 comm="syz.2.27" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 59.291040][ T42] audit: type=1400 audit(1785678465.679:270): avc: denied { execute } for pid=5960 comm="syz.3.26" dev="hugetlbfs" ino=11413 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=file permissive=1 [ 59.291076][ T42] audit: type=1400 audit(1785678465.689:271): avc: denied { execute_no_trans } for pid=5960 comm="syz.3.26" path=2F6D656D66643AA39F6EB4645204693502ACCEE1889D5B4038D7CE1F2039497F151D933DB5E75C274CE6D28EBC294A7454447181CF81BAE531F522C8103EC95C85174CBFCF91DF4DF3025E542A202864656C6574656429 dev="hugetlbfs" ino=11413 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=file permissive=1 [ 59.330162][ T5965] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(6) [ 59.333063][ T5965] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 59.337512][ T5965] vhci_hcd vhci_hcd.0: Device attached [ 59.345192][ T5963] vimc link validate: Sensor B:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 1:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 59.352950][ T42] audit: type=1400 audit(1785678465.759:272): avc: denied { setopt } for pid=5961 comm="syz.2.27" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 59.361259][ T42] audit: type=1400 audit(1785678465.769:273): avc: denied { write } for pid=5961 comm="syz.2.27" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 59.371787][ T5966] vhci_hcd: connection closed [ 59.372972][ T5784] vhci_hcd vhci_hcd.2: stop threads [ 59.376642][ T5784] vhci_hcd vhci_hcd.2: release socket [ 59.379004][ T5784] vhci_hcd vhci_hcd.2: disconnect device [ 59.502349][ T42] audit: type=1400 audit(1785678465.909:274): avc: denied { read write } for pid=5969 comm="syz.3.28" name="fuse" dev="devtmpfs" ino=105 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 59.509758][ T42] audit: type=1400 audit(1785678465.909:275): avc: denied { open } for pid=5969 comm="syz.3.28" path="/dev/fuse" dev="devtmpfs" ino=105 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 59.535525][ T42] audit: type=1400 audit(1785678465.939:276): avc: denied { read } for pid=5973 comm="syz.3.29" name="hpet" dev="devtmpfs" ino=630 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 59.545485][ T42] audit: type=1400 audit(1785678465.939:277): avc: denied { open } for pid=5973 comm="syz.3.29" path="/dev/hpet" dev="devtmpfs" ino=630 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 60.059404][ T5990] ======================================================= [ 60.059404][ T5990] WARNING: The mand mount option has been deprecated and [ 60.059404][ T5990] and is ignored by this kernel. Remove the mand [ 60.059404][ T5990] option from the mount to silence this warning. [ 60.059404][ T5990] ======================================================= [ 60.074511][ T5990] new mount options do not match the existing superblock, will be ignored [ 60.749076][ T5739] Bluetooth: hci0: command tx timeout [ 60.758574][ T5739] Bluetooth: hci2: command tx timeout [ 60.758670][ T5735] Bluetooth: hci1: command tx timeout [ 60.839168][ T5735] Bluetooth: hci3: command tx timeout [ 60.979194][ T6001] netlink: 4 bytes leftover after parsing attributes in process `syz.2.37'. [ 60.996653][ T6003] netlink: 16 bytes leftover after parsing attributes in process `syz.1.38'. [ 61.006483][ T6003] bond0: entered promiscuous mode [ 61.008739][ T6003] bond_slave_0: entered promiscuous mode [ 61.011252][ T6003] bond_slave_1: entered promiscuous mode [ 61.017329][ T6003] gretap0: entered promiscuous mode [ 61.021707][ T6003] hsr1: entered promiscuous mode [ 61.041334][ T6005] capability: warning: `syz.2.39' uses 32-bit capabilities (legacy support in use) [ 61.061603][ T6007] netlink: 4 bytes leftover after parsing attributes in process `syz.3.40'. [ 61.070948][ T6008] dummy_hcd dummy_hcd.0: remove, state 4 [ 61.074781][ T6005] netlink: 8 bytes leftover after parsing attributes in process `syz.2.39'. [ 61.076812][ T6008] usb usb5: USB disconnect, device number 1 [ 61.096326][ T6008] dummy_hcd dummy_hcd.0: stopped [ 61.099666][ T6008] dummy_hcd dummy_hcd.0: USB bus 5 deregistered [ 61.145786][ T6012] batadv_slave_1: entered promiscuous mode [ 61.167380][ T6022] batadv_slave_1: left promiscuous mode [ 61.201798][ T6028] virtio-fs: tag not found [ 61.254425][ T6032] netlink: 8 bytes leftover after parsing attributes in process `syz.3.48'. [ 61.391127][ T6043] netlink: 28 bytes leftover after parsing attributes in process `syz.1.47'. [ 61.430860][ T29] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 61.591860][ T29] usb 7-1: device descriptor read/64, error -71 [ 61.741367][ T6055] vim2m vim2m.0: vidioc_s_fmt queue busy [ 61.767539][ T6055] pim6reg1: entered promiscuous mode [ 61.769394][ T6055] pim6reg1: entered allmulticast mode [ 61.838506][ T29] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 61.968494][ T29] usb 7-1: device descriptor read/64, error -71 [ 62.088581][ T29] usb usb7-port1: attempt power cycle [ 62.148505][ T5495] usb 6-1: new full-speed USB device number 2 using dummy_hcd [ 62.321286][ T5495] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 62.325788][ T5495] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 62.333632][ T5495] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 62.337290][ T5495] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 62.448608][ T29] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 62.472657][ T29] usb 7-1: device descriptor read/8, error -71 [ 62.490007][ T6079] ICMPv6: NA: 00:00:00:00:00:00 advertised our address fe80::aa on syz_tun! [ 62.553085][ T5495] usb 6-1: usb_control_msg returned -32 [ 62.556087][ T5495] usbtmc 6-1:16.0: can't read capabilities [ 62.570261][ T5811] usb 8-1: new high-speed USB device number 3 using dummy_hcd [ 62.718684][ T29] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 62.722881][ T5811] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 62.726094][ T5811] usb 8-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 64 [ 62.730062][ T5811] usb 8-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 64 [ 62.733173][ T5811] usb 8-1: config 1 interface 0 altsetting 0 bulk endpoint 0x83 has invalid maxpacket 64 [ 62.736253][ T5811] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 62.739641][ T5811] usb 8-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0 [ 62.743095][ T5811] usb 8-1: config 1 interface 0 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 5 [ 62.751467][ T29] usb 7-1: device descriptor read/8, error -71 [ 62.752411][ T5811] usb 8-1: New USB device found, idVendor=06cd, idProduct=0107, bcdDevice= 1.00 [ 62.757316][ T5811] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 62.760700][ T5811] usb 8-1: Product: syz [ 62.762504][ T5811] usb 8-1: Manufacturer: syz [ 62.764480][ T5811] usb 8-1: SerialNumber: syz [ 62.770690][ T6071] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 62.774170][ T6071] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 62.777210][ T6071] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 62.785076][ T5811] keyspan 8-1:1.0: Keyspan 1 port adapter converter detected [ 62.788765][ T5811] keyspan 8-1:1.0: found no endpoint descriptor for endpoint 84 [ 62.795940][ T5811] keyspan 8-1:1.0: found no endpoint descriptor for endpoint 82 [ 62.799526][ T5811] keyspan 8-1:1.0: found no endpoint descriptor for endpoint 2 [ 62.809147][ T5811] usb 8-1: Keyspan 1 port adapter converter now attached to ttyUSB0 [ 62.829072][ T5735] Bluetooth: hci1: command tx timeout [ 62.839228][ T5735] Bluetooth: hci2: command tx timeout [ 62.840513][ T5739] Bluetooth: hci0: command tx timeout [ 62.859086][ T29] usb usb7-port1: unable to enumerate USB device [ 62.910913][ T5739] Bluetooth: hci3: command tx timeout [ 62.919175][ T6094] netlink: 'syz.1.54': attribute type 14 has an invalid length. [ 62.923636][ T6094] openvswitch: netlink: Missing key (keys=c0, expected=1100) [ 62.930314][ T6094] o2cb: This node has not been configured. [ 62.933183][ T6094] o2cb: Cluster check failed. Fix errors before retrying. [ 62.935538][ T6094] (syz.1.54,6094,1):user_dlm_register:674 ERROR: status = -22 [ 62.938639][ T6094] (syz.1.54,6094,1):dlmfs_mkdir:437 ERROR: Error -22 could not register domain "file0" [ 63.036531][ T6071] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 63.091334][ T6098] netlink: 'syz.0.66': attribute type 1 has an invalid length. [ 63.118812][ T6071] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 63.119123][ T5824] usb 6-1: USB disconnect, device number 2 [ 63.215324][ T6071] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 63.321476][ T6103] overlayfs: failed to resolve './bus': -2 [ 63.360292][ T6107] loop3: detected capacity change from 0 to 7 [ 63.364644][ T6071] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 63.371219][ T6107] Dev loop3: unable to read RDB block 7 [ 63.374233][ T6107] loop3: AHDI p2 [ 63.375968][ T6107] loop3: partition table partially beyond EOD, truncated [ 63.432111][ T6111] Oops: general protection fault, probably for non-canonical address 0xdffffc0000000000: 0000 [#1] SMP KASAN NOPTI [ 63.437104][ T6111] KASAN: null-ptr-deref in range [0x0000000000000000-0x0000000000000007] [ 63.440246][ T6111] CPU: 1 UID: 0 PID: 6111 Comm: syz.0.70 Tainted: G L syzkaller #0 PREEMPT(full) [ 63.444114][ T6111] Tainted: [L]=SOFTLOCKUP [ 63.445578][ T6111] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 63.448709][ T6111] RIP: 0010:dummy_udc_start+0x91/0x1d0 [ 63.450663][ T6111] Code: df 48 89 fa 48 c1 ea 03 80 3c 02 00 0f 85 28 01 00 00 4c 8b ab 90 06 00 00 48 b8 00 00 00 00 00 fc ff df 4c 89 ea 48 c1 ea 03 <80> 3c 02 00 0f 85 10 01 00 00 83 ed 01 bf 02 00 00 00 49 8b 5d 00 [ 63.456988][ T6111] RSP: 0018:ffffc90004f1fb48 EFLAGS: 00010246 [ 63.458901][ T6111] RAX: dffffc0000000000 RBX: ffff88802c594c00 RCX: ffffffff87d0e8a9 [ 63.461403][ T6111] RDX: 0000000000000000 RSI: ffffffff87d0e8b7 RDI: ffff88802c595290 [ 63.463892][ T6111] RBP: 0000000000000003 R08: 0000000000000005 R09: 0000000000000005 [ 63.466358][ T6111] R10: 0000000000000003 R11: 0000000000000000 R12: ffff8880362a2050 [ 63.468824][ T6111] R13: 0000000000000000 R14: ffff88802c16e4f1 R15: ffff88802c16e008 [ 63.471313][ T6111] FS: 00007f100d6a26c0(0000) GS:ffff8880d5ed8000(0000) knlGS:0000000000000000 [ 63.474116][ T6111] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 63.476169][ T6111] CR2: 00007f100c787640 CR3: 000000005ab5d000 CR4: 0000000000352ef0 [ 63.478683][ T6111] Call Trace: [ 63.479757][ T6111] [ 63.480697][ T6111] gadget_bind_driver+0x4ac/0xbf0 [ 63.482338][ T6111] ? __pfx_gadget_bind_driver+0x10/0x10 [ 63.484072][ T6111] really_probe+0x241/0xa60 [ 63.485534][ T6111] __driver_probe_device+0x20e/0x450 [ 63.487189][ T6111] driver_probe_device+0x4a/0x140 [ 63.488778][ T6111] __driver_attach+0x21f/0x5b0 [ 63.490373][ T6111] ? __pfx___driver_attach+0x10/0x10 [ 63.492031][ T6111] bus_for_each_dev+0x13e/0x1d0 [ 63.493435][ T6111] ? __pfx_bus_for_each_dev+0x10/0x10 [ 63.494903][ T6111] ? bus_add_driver+0x2b5/0x5b0 [ 63.496264][ T6111] bus_add_driver+0x305/0x5b0 [ 63.497745][ T6111] driver_register+0x1e2/0x360 [ 63.499271][ T6111] ? rcu_is_watching+0x12/0xc0 [ 63.500804][ T6111] usb_gadget_register_driver_owner+0x132/0x210 [ 63.502788][ T6111] raw_ioctl+0x1a85/0x2b80 [ 63.504206][ T6111] ? __pfx_raw_ioctl+0x10/0x10 [ 63.505721][ T6111] ? selinux_file_ioctl+0x13b/0x290 [ 63.507359][ T6111] ? selinux_file_ioctl+0xb6/0x290 [ 63.508967][ T6111] ? __pfx_raw_ioctl+0x10/0x10 [ 63.510479][ T6111] __x64_sys_ioctl+0x18e/0x210 [ 63.511996][ T6111] do_syscall_64+0x115/0x870 [ 63.513481][ T6111] ? clear_bhb_loop+0x40/0x90 [ 63.514962][ T6111] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 63.516808][ T6111] RIP: 0033:0x7f100c79dcab [ 63.518275][ T6111] Code: 00 48 89 44 24 18 31 c0 48 8d 44 24 60 c7 04 24 10 00 00 00 48 89 44 24 08 48 8d 44 24 20 48 89 44 24 10 b8 10 00 00 00 0f 05 <89> c2 3d 00 f0 ff ff 77 1c 48 8b 44 24 18 64 48 2b 04 25 28 00 00 [ 63.524245][ T6111] RSP: 002b:00007f100d69ff00 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 63.526838][ T6111] RAX: ffffffffffffffda RBX: 0000000000000006 RCX: 00007f100c79dcab [ 63.529295][ T6111] RDX: 0000000000000000 RSI: 0000000000005501 RDI: 0000000000000006 [ 63.531776][ T6111] RBP: 00007f100d6a0fd0 R08: 0000000000000001 R09: 00000000ffffffff [ 63.534231][ T6111] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 63.536713][ T6111] R13: 0000200000000000 R14: 0000000000000000 R15: 0000000000000000 [ 63.539087][ T6111] [ 63.540014][ T6111] Modules linked in: [ 63.542009][ T6111] ---[ end trace 0000000000000000 ]--- [ 63.544861][ T6111] RIP: 0010:dummy_udc_start+0x91/0x1d0 [ 63.546808][ T6111] Code: df 48 89 fa 48 c1 ea 03 80 3c 02 00 0f 85 28 01 00 00 4c 8b ab 90 06 00 00 48 b8 00 00 00 00 00 fc ff df 4c 89 ea 48 c1 ea 03 <80> 3c 02 00 0f 85 10 01 00 00 83 ed 01 bf 02 00 00 00 49 8b 5d 00 [ 63.554640][ T6111] RSP: 0018:ffffc90004f1fb48 EFLAGS: 00010246 [ 63.557248][ T6111] RAX: dffffc0000000000 RBX: ffff88802c594c00 RCX: ffffffff87d0e8a9 [ 63.560535][ T6111] RDX: 0000000000000000 RSI: ffffffff87d0e8b7 RDI: ffff88802c595290 [ 63.563821][ T6111] RBP: 0000000000000003 R08: 0000000000000005 R09: 0000000000000005 [ 63.566958][ T6111] R10: 0000000000000003 R11: 0000000000000000 R12: ffff8880362a2050 [ 63.568562][ T13] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.570300][ T6111] R13: 0000000000000000 R14: ffff88802c16e4f1 R15: ffff88802c16e008 [ 63.573206][ T13] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.575649][ T6111] FS: 00007f100d6a26c0(0000) GS:ffff8880d5dd8000(0000) knlGS:0000000000000000 [ 63.579029][ T13] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.581739][ T6111] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 63.581750][ T6111] CR2: 00007f100d6c2ff8 CR3: 000000005ab5d000 CR4: 0000000000352ef0 [ 63.581759][ T6111] Kernel panic - not syncing: Fatal exception [ 63.585402][ T6111] Kernel Offset: disabled