last executing test programs: 10m30.909660786s ago: executing program 32 (id=233): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f00000004c0)={0x10, 0x6a, 0xfcdfa0f79c183163, 0x0, 0x25dfdbfc}, 0x10}], 0x1, 0x0, 0x0, 0x20048000}, 0x0) personality(0x200000) r2 = syz_open_dev$sndpcmc(&(0x7f0000001200), 0x7, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000000000)={0x0, ""/256, 0x0, 0x0, 0x0, 0x0, ""/16, ""/16, ""/16, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r0, 0xc0c89425, &(0x7f0000001600)={"df3437245fec83e71d8249c65bc0bc7c", r3, r4, {0x0, 0x4}, {0x23, 0x2}, 0xd, [0x3, 0x5, 0x6, 0x5, 0xa, 0xffffffffffff90cf, 0x9, 0xfff, 0x1, 0x1, 0x0, 0xa, 0x1ff, 0x2, 0x7fffffffffffffff]}) ioctl$BTRFS_IOC_SCRUB(r2, 0xc400941b, &(0x7f0000000280)={0x0, 0x0, 0xdc, 0x1}) ioctl$BTRFS_IOC_RM_DEV_V2(r2, 0x5000943a, &(0x7f0000002100)={{r0}, r3, 0xe, @inherit={0x60, &(0x7f0000000200)={0x1, 0x3, 0x0, 0x7, {0x24, 0x0, 0x1, 0x1, 0x9}, [0x6, 0x7, 0x0]}}, @devid=r5}) r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) socket$alg(0x26, 0x5, 0x0) r7 = openat2(0xffffffffffffffff, &(0x7f0000001240)='./file0\x00', &(0x7f0000001280)={0x105400, 0x1f8, 0x30}, 0x18) sendmsg$SOCK_DESTROY(r7, &(0x7f00000015c0)={&(0x7f00000012c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000001580)={&(0x7f0000001300)={0x25c, 0x15, 0x200, 0x70bd25, 0x25dfdbfc, {0x10, 0x5}, [@INET_DIAG_REQ_BYTECODE={0x1e, 0x1, "245aa53b43c142968c5e045f83165879b58d7153fdbaab36072a"}, @INET_DIAG_REQ_BYTECODE={0xba, 0x1, "1581c992a1830b801e2f92f99c1bcb42a2401efc7f99a42a5cba31a19c1c2b5982632310149bca5cca8e4d1ac86575ebf13c49af887fed1b9a3f11b15590263d19d940b7c0b234be1cf905efe1c35e885c72fefbc1043d9c0607fcdd70f5f7c91ff5110b6f115f6721e43dcd7475df63fb2a7a21462ef69d39dc437ca9ee103124b8a383796f2a317bf3731d0a8677d62eb6266d79798c00c987b13e6a2a77775b1af64af1cebeaeeeb38fdb25a127bf9c02d1298685"}, @INET_DIAG_REQ_BYTECODE={0x96, 0x1, "891f0561eca929a6f7cb8b11315d4fef7adb87500aac42fa36754bb052c27eb6de7263458c6162fdae0bba1983ce328fafa8aeb53a097427e3e100f05a7ac3071e4c44886270073c7f0a6fc8b0abcad3220e1af2cd4bb1756616a8bd5675006bda3b6a4ba1e81e1f8b5b88ec37aa55a6021e91a352ad91c1057cd7843c602dd0f8d8e653a9de8d2226cc0a1a4a3099c5b6dc"}, @INET_DIAG_REQ_BYTECODE={0x22, 0x1, "cf2e72aa9f69e02f74c3e3f5b338aec413602185f2b0f44e32519e207110"}, @INET_DIAG_REQ_BYTECODE={0x4}, @INET_DIAG_REQ_BYTECODE={0xac, 0x1, "71db9aa0acec54deeeadf5b36393b54f05161c367ebaef0dc54367edd9a532a75e1a177fb9a9a298301c620f13f125b829d049b54d6b0c29cad6031e1986b8642fd3dc93f7d9c168f79ac1a5484255ca58df3ea6509aa1ee78b5c8efb3701dab91da6525e4425d1dff33836c579fe1f40baf2b6fbc620f5651186984c3e4db2029798925cc009b793fff5b6dba12d5fae0929a26cc69ac8a7f91131bc822d14722639c533c3a7c4d"}]}, 0x25c}, 0x1, 0x0, 0x0, 0x4090}, 0x4000001) recvmmsg(r6, &(0x7f00000020c0)=[{{0x0, 0x0, 0x0}, 0x6}], 0x1, 0x2041, 0x0) 8m1.39463015s ago: executing program 33 (id=710): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='9p_protocol_dump\x00', r0}, 0x10) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0xfffffffc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='9p_protocol_dump\x00', r3}, 0x10) mount$9p_fd(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000000600)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}}) (async) mount$9p_fd(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000000600)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}}) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x2c040, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x801}, 0x4000000) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000000)='nfs4\x00', 0x0, &(0x7f00000001c0)='\x01') (async) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000000)='nfs4\x00', 0x0, &(0x7f00000001c0)='\x01') r6 = socket(0x1, 0x1, 0x1) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nbd(&(0x7f0000000280), 0xffffffffffffffff) (async) r8 = syz_genetlink_get_family_id$nbd(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(r7, &(0x7f00000027c0)={0x0, 0x0, &(0x7f0000002780)={&(0x7f0000000500)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="010029bd7000fbdbdf25010000000c000200d5400000000000001c0007800c00018008000100", @ANYRES32=r6, @ANYBLOB="05"], 0x3c}, 0x1, 0x0, 0x0, 0x4000004}, 0x4000) (async) sendmsg$NBD_CMD_CONNECT(r7, &(0x7f00000027c0)={0x0, 0x0, &(0x7f0000002780)={&(0x7f0000000500)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="010029bd7000fbdbdf25010000000c000200d5400000000000001c0007800c00018008000100", @ANYRES32=r6, @ANYBLOB="05"], 0x3c}, 0x1, 0x0, 0x0, 0x4000004}, 0x4000) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x2c, r8, 0x10, 0x70bd25, 0x25dfdbfe, {}, [@NBD_ATTR_BACKEND_IDENTIFIER={0xa, 0xa, 'team0\x00'}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x10001}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40}, 0x240040d1) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="3000000010000100"/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=0x0, @ANYBLOB="08001b"], 0x30}}, 0x0) accept(r6, &(0x7f0000000180)=@can, &(0x7f00000002c0)=0x80) (async) accept(r6, &(0x7f0000000180)=@can, &(0x7f00000002c0)=0x80) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$team(&(0x7f00000044c0), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(r9, 0x8933, &(0x7f0000004700)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r9, &(0x7f0000004bc0)={0x0, 0x0, &(0x7f0000004b80)={&(0x7f00000047c0)={0x60, r10, 0x405, 0x70bd2b, 0x25dfdbfe, {}, [{{0x8, 0x1, r11}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @name={{0x24}, {0x5}, {0x10, 0x4, 'loadbalance\x00'}}}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x4000401}, 0x44084) (async) sendmsg$TEAM_CMD_OPTIONS_SET(r9, &(0x7f0000004bc0)={0x0, 0x0, &(0x7f0000004b80)={&(0x7f00000047c0)={0x60, r10, 0x405, 0x70bd2b, 0x25dfdbfe, {}, [{{0x8, 0x1, r11}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @name={{0x24}, {0x5}, {0x10, 0x4, 'loadbalance\x00'}}}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x4000401}, 0x44084) 5m43.761448448s ago: executing program 34 (id=1242): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0xf) ioctl$KDSETKEYCODE(r0, 0x4b4d, &(0x7f0000000180)={0x1, 0x6}) ioctl$TCFLSH(r0, 0x400455c8, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_usb_connect(0x0, 0x0, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="11000000040000000400000002"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xd, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000000000000000000000000000850000007d00000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000001000000b704000000000000850000003300000095"], &(0x7f00000004c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000b80)={r2, 0x2000012, 0xe, 0x0, &(0x7f0000000280)="63ec33c9e9b98600000000000000", 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xb}, 0x50) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) 4m58.831138952s ago: executing program 35 (id=1418): mount$fuse(0x0, 0x0, 0x0, 0x92000, &(0x7f0000000100)=ANY=[]) (async) r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000000c0)=ANY=[], 0x48) (async, rerun: 32) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x10, &(0x7f0000000300)=ANY=[], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (rerun: 32) dup2(r1, r1) (async) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) (async) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) (async) r3 = socket(0x840000000002, 0x3, 0x100) (async) r4 = socket$igmp6(0xa, 0x3, 0x3a) setsockopt$MRT6_ADD_MFC(r4, 0x29, 0x22, &(0x7f0000000000)={{0xa, 0x0, 0x101, @loopback, 0x18000}, {0xa, 0x0, 0xfffffffd, @dev, 0x4}, 0x0, {[0xe, 0xfffffffd, 0x0, 0xfffffef9, 0x0, 0x1, 0x8]}}, 0x5c) (async) fdatasync(r2) (async) openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) (async) pwrite64(r3, &(0x7f0000000080)='3', 0x1, 0xffffffffffffffff) (async) bind$inet(0xffffffffffffffff, &(0x7f0000000200)={0x2, 0x4e20, @multicast1}, 0x10) (async) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x2, &(0x7f0000000040), 0x4) (async) r5 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000340)=@newtclass={0x3c, 0x28, 0x800, 0x70bd2a, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0xd, 0x4}, {0xfff3, 0xe}, {0xffe0, 0xf}}, [@TCA_RATE={0x6, 0x5, {0x1, 0x8}}, @TCA_RATE={0x6, 0x5, {0x6, 0xe0}}, @TCA_RATE={0x6, 0x5, {0x7, 0x2}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40054}, 0x4010) (async) sendmsg$inet(0xffffffffffffffff, &(0x7f00000015c0)={0x0, 0xfffffffffffffdbf, &(0x7f0000001600)=[{&(0x7f0000000400)="2dcf0b430358b5ba657153e657edd2e36122340a0f74398e7ff56e0c66183688755489f5236350d3c123adba4a623e7b876e422258f3d939e225495202939916c05280c4cde85d46f4775d0e252facfa1774808275c0b5ad3e18cad99332bed7dca14b5371037260246efc7fdf926776873ba5cf3ba0d985d3bda3caaba906679dae42fc376225f02de1fea429288221ad572d223ea23b975c13201a44f77274fd54be3cb079855a17695fd6a55e2a07375c4ab48ec1880c691a0cba1460dfb356867bf98492a02d8719b05b07588c7c49a31d32ce11e1284365eb", 0xdb}], 0x1}, 0x400d8) (async) openat(0xffffffffffffff9c, 0x0, 0x80540, 0x188) accept4$nfc_llcp(0xffffffffffffffff, 0x0, 0x0, 0x800) (async) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) getpid() (async) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbeef, 0xd08b14d2aa7757d7, 0xffffffffffffffff, 0x0) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) (async) sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0) 4m9.683543024s ago: executing program 36 (id=1658): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="3000000040000701feffffff00000000017c0000040042801400018006000600800a000008001100", @ANYRES32=0x0, @ANYBLOB="07cfa1ec"], 0x30}, 0x1, 0x0, 0x0, 0x48815}, 0xc000) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r1, 0x6, 0x23, &(0x7f0000000100)={&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, &(0x7f0000000080)=""/91, 0x5b, 0x1, &(0x7f00000001c0)=""/228, 0xe4}, &(0x7f0000000140)=0x40) r2 = syz_open_dev$sndctrl(&(0x7f00000002c0), 0x2, 0x6002) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r2, 0xc4c85513, &(0x7f0000000300)={{0x8, 0x6, 0x9, 0x7fff, 'syz1\x00', 0x8}, 0x1, [0x0, 0x0, 0x8000000000000001, 0x10001, 0xfffffffffffffffd, 0xe2c, 0xb, 0x71c, 0x9, 0xb, 0x281, 0x0, 0x0, 0x53, 0x4, 0x401, 0x2, 0x2, 0x4, 0x2, 0x7060, 0x2b7, 0x4, 0x8000000000000000, 0x0, 0x6, 0x9, 0x0, 0xeda9, 0xdf4ba0, 0x5, 0x399a890f, 0x7, 0x54, 0x401, 0x7ff, 0xfffffffffffffffd, 0x9059, 0x10, 0x9, 0x0, 0xffffffffffffffff, 0x2, 0x9, 0x8, 0x49be5f77, 0x5, 0x4, 0x9, 0x4, 0xf2e, 0x4, 0x21, 0xe7, 0x9, 0xffffffff, 0x6, 0x10, 0x8, 0x3, 0x8, 0x5, 0x5, 0x8000000000000000, 0x9, 0x2, 0x7, 0x7, 0xb6bd, 0x1, 0x7fffffff, 0x1, 0x7, 0x1, 0x1ff, 0x6, 0x7, 0x9, 0x5, 0xffffffff00000000, 0x2, 0xc, 0xd89b, 0x77364984, 0x9, 0x9, 0x6, 0x9, 0x3, 0x8, 0x7ff, 0xd7, 0x9, 0x75, 0x401, 0x80, 0x1, 0x8000000000000001, 0xda3d, 0x10000, 0xd139, 0x2, 0x6935, 0x6, 0x7, 0x1, 0xda0, 0x400, 0x7ff, 0xe, 0x8, 0x7, 0xfffffffffffffffb, 0x0, 0x3, 0x100000000, 0x6, 0x5, 0x7fff, 0x4, 0x0, 0x2, 0x2, 0x4, 0x8124, 0x3, 0xffffffffffffb554, 0x3]}) 3m46.14884674s ago: executing program 6 (id=1730): writev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000680)="3da26ab0126b", 0x6}], 0x1) bpf$OBJ_PIN_MAP(0x6, &(0x7f00000006c0)=@o_path={0x0}, 0x18) bpf$MAP_CREATE(0x100000000000000, &(0x7f00000000c0)=ANY=[@ANYBLOB="1600001024e6000000", @ANYBLOB="0000000000000800000000000000000000000000016c965536a4dfe5b700444ddb28eca660b2cccdbd0bd2813f15acb9bdd781516a8419a47267d80a7649613669ce59710a4765aee852d9133e1053080c042a1a24c6a6e6fd7936d2c3a3b38fcc24b7fca4378aa4337b0bd8ff0ca075c5ca379035e380f312b9aac77ff3bcd39123c2feac4f9aa6da2c381a3f5469e34ae9039ba30792402b4a745d0a878272393b0bc55f14fccaeb2cced82585d5b9b546b825c8db83bdce25dad50865d73ba46e39b20adf8353d67691011d3c877b7a560ab3a25c7dce4cb970de611041e167b0363922160c57b86d5a1738cb79f7c01f8a293e21189906687bdb365bf21361849edd4bae2432fa7d5fa8285e1b5ccd9cd90321b633251dc0fd368cc082439d7a9647b2bb96a3123041be314a8ab25fe6e26d34dec185f4a401000100d5b9887e916482c5fce2a0e5e89052a294d16ab4aa082c9bcbb002af4331effd15ece8c6b09e6316b05b21edf7f24b5279a90fa4df32becda117af28f8c96750"], 0x50) r0 = open_tree(0xffffffffffffffff, &(0x7f00000000c0)='./file0\x00', 0x80801) sendmmsg$sock(0xffffffffffffffff, &(0x7f0000002480)=[{{0x0, 0x0, &(0x7f0000001780)=[{&(0x7f00000005c0)="f2b314c96d50", 0x6}], 0x1}}], 0x1, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000740)=[{{0x0, 0x0, &(0x7f0000000300), 0x0, &(0x7f0000000b40)=ANY=[], 0x300}}], 0x1, 0x810) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000880)=ANY=[@ANYBLOB="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"], 0x0, 0x3e}, 0x20) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r4 = accept4(r3, 0x0, 0x0, 0x800) bind$alg(0xffffffffffffffff, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(camellia)\x00'}, 0x58) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c2", 0x17) sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000002c0)=""/87, 0x57}, {&(0x7f0000000200)=""/83, 0x53}], 0x2}, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="a00000000001010400000000000000000a0000003c0001802c00018014000300fe8000000000000000000000000000aa14000400ff0100000000000000000000000000010c0002800500010000000000440002802c00018014000300fe8000000000000000000000000000aa14000400fe8800000000000000000000000000010c000280050001000000000006000340000100000800074000000000040006"], 0xa0}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000380)={0xb4, 0x0, 0x1, 0x401, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @empty}, {0x14, 0x4, @mcast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x44, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @local}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}]}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x400}, @CTA_NAT_SRC={0x18, 0x6, 0x0, 0x1, [@CTA_NAT_V6_MINIP={0x14, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}]}]}, 0xb4}}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="ea7c5828b87d70214008724bcae1ce6577c01031b19698ecb8a7f5183947918ce2cc9dc778dbfff9e28e1a6df7d8f95c3e45768a6786d6325bc0fe4ed394c8ed0edcbb9f917074251a7f5b6b24c52516a68f181592262dfd12b5af7386658c5fb6c36d86d5084624a302a155c0463b6c36e9fc88338b0f66e2713728a21d19d9a33da93d419df63d8a87fa100381ec74de8b7409f4977d3cd7a9f2fb03cec91c4277b39b2c9f227a9b74926a11960d085e2aaf98673d2a67fa95b8d9dcc72ca6181f6b9b2d1c402267e6cfef5599e1520077d9bc472fb5a5db42b1befd498ec7b8d519b12f065323b15280a2540bc7a4ffe508fc12f93707064caf4111e893142f9867b432b1e6258caa2ae081b8b646c25de7f5366a21f9dd257b84546cd316e17b79d22c4bcaf70e8a96d1e502b53c581c75482d1d63f0d5f3fb5bdbb714583f0798e0c4d6c9d99513e91a68a26612053290f15f5a2e06acfa229356e37b4d57697224e9561c0430a67fcb5dea72acc91e60751a5b07eb603548a646f082ce213347b4ee908bd95cc56775330aa09d4f19f48a8cb5d7f6346d82bab8ff019309684bd01eb4d90febe2269cd2a1100130c242a2995ce38638a3bbc9008ac0e820a1e0b9a9511af47aa7f3e30a69589985423f3b4ea98152433bf1aa53a0981f783f11c4cc50f70fe63b2043b74b9cb7da59caedadc1fa1f662831a353969893d4f93b919cda52a1ce2200a0a7895abb293c29d6d197cce98a4df8fc90c582014742a00b4bd09f1fcc5ff5753320d2b5593e657c0fb87a4cfa323ce59111eea806a6e020fb0c4fdd601087811e33e793975b5e9e936c16d243bdea757e0ee4508f5d5b496ed07b6f0f1f46ed752448f30d679b23ba8142d4ab25beb913ee77547866e5d9501a55e9797ba3407f3f4cc11398bdaf3ac4c2e79a5b133a09fcf8ae790bb985fa01daf2758fd8a77fde15a822227dddf64bb2ebc49a56ad025e01c6c59e4818abdf808789d9f87c103cf7f7d21d2a1345b9b7fd66b1cf96002343fbd62f8080d945e70bd93d4bf42b401477abed49065b4a8ccfb9d93724118168de2e8df4f78ccf3b9593f993423a619ef6bd8392a2cfc6424d3687fcdc67d33073db95d856f312b934d05a3c4e967217837920fee73b00757b617d1ef3bfc2e88a8a72f0948263db2c9e7bd491f059b6ee8d0ea3f2193314562910529869b248172bfe0f914f7a91a27c6e9e6c2e3455a7ae765392b48fc959958aa39a5a483b2a6e873ac76f8579515e42f7a3bbc82bcf71edaf12f7b40a2adc74d67ef793988cc8ac788185049e57fb84757bdc700ffde10afc19df290787ed98222f8afb2b6d11944666331350e2914466b398750acae526146373b2cbe1bdd1803e6c920a182a1ad118a3d09313c2ce2703a0a1c09215cab90c35b03b1c795cf704f42dd31ddff6be67bb355977b2e07609c5228299a170308e54705674384fc294cdfa4abf989d3c3bf3eabbbcf52a6a0646bf6db5b61ad027007464fd6fc10490ee2e9190c28ae5cb3733105cb782c0d53e5c79c3e455609d557d824154d01e282788ec8ae7c8a03fcd6cd4e37829b0f921c46d715454d5e1281c641cf0756a2f31b0369ce94e819e6254af95b88bffd7bb2cfe9469d303497fead174839b2789b5aa703176510eab1f46916b3b63f6f5b2df262fe7274a0cee9bd6e115e5f9f48ac1c09e5b3c546ae95b9916a633869854d3ee39d4acb800e876e7fc084ffd79a20fca8331caff657ec89b445c6012ff7eb9531eb1e8c90cdc66b82d6fd608310099503a9dcf50b40d10a3b1ab520477e20ad5f6405cd4b5b36d201e12088d7868c6e94737ea88db6ed5f7df4d31cbd2d0c4f21cdcc3b181f5aae7216dc4c06b2989bb44e5369ba96ce87f3e3abbb530d103a53d7e0b914115c302c935eea7d256a73aa851d84dec6d9112163be8135889c67fa90e796a6f050fba0a6a740618cd513748072daac9f3e25034772cc400a14834afbde835bc9fd7cf1113d67ebe99a3b78907596886ad5a1670ef572c18e26c98fe40194428de339cba7b8efc5fa7faf7512ef6b89a877f3e534fb4512729df686e14aece08fab3b42ea14acde0e18ffe5dc00e74288661c7463e00f3b942cddf3b71e1dcf71989f378b933df099316451cca296a4e117bbeb3b1e552e5a10f9731449ae830de14989049ce818f720e77e78a86c307c80450b26278bc25ee7390ce6d4c4dfc8d39b6b4b1ce6f3865dbdd1d37aedb555288bea9ef95c8600dea1cd10e9e42d15aa804f99a31bfaa5ea52185333d734c766e3bb4a9abf86cf4d840dc188167a25cc3054b65fd7ce053d38518474ab55e59c1ccaf34d57b4cd73b07ed63d754ab3d57dfc0f67bbdb22e33d9f63aa2b36cf0af338794d4acbd1b13669bde67f7bd032f9c6b400e8054a0cff77fc6e0591195b21715e42c881e23156b4ba504d7e1b6eb9c2ec9b9e382d85f7c52bd964d305da9496dbaa022880ddf236730c458f31258d64ae2668aa863b3fe558c7f8cfb3dabf42edcaf2891e9b9462c44153658eae85cd499abd9dca762adf26d9904d28b772b3fc3d066d56261474c944387ac7eb00059025ff25e34b8f7c2986db1ccc4297e1315c3ceeef1b8f98e0500bbb8bb0ab52d80f8c6c8fa5d24b9a05f5350e2fd59af4b9fa9a2b4339b61e208f227ba968d4dbd36246133de2078c6a15dd57754a3537c31d04da545f062dbf9cbaa0840e23974f441a4d5937fec23ff81c193bd951a7bacac8eb6d4705702cbe3c930f27869753ba6026455bbb7742c53644f1646d7545467091a207905f831505f214fbd818aea4455705b5e727850cdcac40620135b8dba85cb0c0f393af252ec082cba5c43385fbc2cc5682bc1994b064e29c8c5a20e7e6d15fbb13e6fd1a86b2fda666fbcd80fd08be00a7423fcafbdd8283bac88ead203bc10d1c1a13ca2fe853fa6cc8991b0476561be085b086b0d0e45f73e59f519342c13f368a37464cb55b8a13846f4cd610536d5c4b8704fcd347abe6712d3de67d7918e6954898f31647a8ea37ecc2e1bb02b1b26e7a60fbb2b0a48efc5795c12d5c4ac8dc4149dea0f2e085422ec69352882622711b74e1e32c7ead2cf3c554e8ff1648e8b66d0dc6997b6304b3b560a33d75aa49476175a386ca721156ea79bdba432d439dbceb0285561abd5d134badd9f38c04fae8fa920edfff15705371c907848c14acdfb0b22a4c7168e1840e8b8a50349dcee5f429b3cb34e30f0f67acf93604792b8574f36ea9409d422621f3c0c7b781fc8e23d1d46f04a9b44f633e5f72cb079fbde66a9745705666c6dab6238628e57ee6cffa8cfad616dac1abe2789c9efccb4fc7e65e490d9a4e49e7ce72a6980e72f70a17649e67de86f86b61a4b6219daefc939b5904e5712ecaf85c98484fc02585b1aa990b95173e4a2907cf877af696e528e6b2b634a4fb7d791cacc8644fa76e062148d411e18f0da5aed22116828cd700a28e8f46bca950550acb4ab05eddeb6b2dac24702cff4de0a3ece393cac879ed2f0c5b9645839cfdb79fb1df87596b14504cba9dddda51edaffcd0214b91b5898ea022774e699aa0caf0f646cc0cb8e8fc8b8be43c23aa7f6bd29fd0615c0b78f3514a52989d7f35ad08a4bd473e61da6657cc2e85d3b2b7d3fb51174a96f27038ddbc87a35e09a668e436aa40146c6a26dca87b39220f139b772719d80aadb752c622bf09acd6846838fb48a8817ba4aa72eaa32e82251b3789969d8518f9aa07cdcb9a355f73f119725c086168aaca262f13cd742e5f06c969a462638a557e15a4f5d43e3242c08f23b00d2b8d57c60d3636abd4068ec03a4be3429b95e41351ab5c58812e552df90c3e6c9d8779aa484e74f073ea9fcdce13b1dff8e7c101b2c6865c5cefe108e3559f520e2bc42c9dc39b57fddb44ca49f2689e10c1381c0740d20cbca46da475c62f513cb08398a5fd5d4f6b13ce839fe149df0d291a8f7267fe90a7e1845dace17cd927c2d1aeffbdc36bb983172ceff025e84b0419645fcc72897b992f5081c78756122391947f08ccd20806cfc2bded705b472fc52e84734e016cbd309aadebbbb4e8bdfed77b1e0b15ce0904838d9e4d64643df66f0353c377e554b428dc0f31189a134cdb8e66d2755e84c2b2409c3d63a81f5f05616baf6a243b09153a4f8289e15a5a4ffb007b0cbeffde25391bb2acd86b453e245643c0fa1dfe5d42e0e3f1c592a00b77f0133adf7989c6c2bf3ddc0b8a2b14f35d33f62f4ee2fc56166372058e997b9abe6bad8aa718f8d87ad095e8f354aaef540840437b5451771266a8358ed75954db52b38bca4a1c8696dca1de03b12627254409f8bb68c94eeaa1a8bcf894482b96e81b9ff5c2383a907537a191aff0bb5b5418ef5670cecca1cfbd41b61879b11a5a5053cd86cf5d61f8c2f7d7ad2034a1801b3b92a79ac3b4343c680008b1ba10577a35173cac6d4dbc1d00e436f238b57093b34d4ea19c225b84a2d6086cc6cf72595b980c88142d268bbf9c8375a93afe75c3583b3b9687368d78147985d209e6d89c335e948c51696a948f01ad062dcf84a99584466e24646b2e441fefb10ef962432f2925d6d98e790acf4ca7d9339a589a537aa3392ec79f34a6544144072ab8248e45ac560a78c70c5afcbf10909299dfcd67981c88780c1340c951e115ffec56d23b9ead6a55024e199238f4b133e3e1e0e84318b5037a3947ae09749c25c7e4887936ecf0ba9a807dfa471ea1f3350b70feb58dc9e2836365ce4db456a341e43410cac1253fe08e79c21fca932716f4c171fc957cb325737b70532d81f0eb2f0a16478c0d934165728f7b29a8a0ff6bc964e99dea26d3efd28336b00c112a26da7a2ea1c21a9688cc3a68293958edf27ae89e5f9b8348af4121028e760cf68c931af92906d27dad4d330df9201b5395ccce0c803806422883667ccb11438d9dbe1901d4ab98d89914b313338486deb6f748053517e2188c479adb1eabb8e8ed5d05bb3f66826fae83bbc5bce3615ee32d937ffbe8846a1156aaf7bf9b9d4189bdf290b3df254077688eeda824d6ea0a452f7e7f915c1a94ee250a3907ec035d7ba7bb0256811f04646ca156b8925506c774df4d4072c02929e985057a5f7ddc1469c7306e6fdb86b810ada1cc96f6bd389597dd27dd656f55c316fb2d56b2d13eddf893722e813934a19778719be99697c365222db64039f9caab1201c430e53df1af8a0321c8759fc33e8204150080979936d0717f6c4c9145fb828389acbb894a4600485e8b105c7165a40e814889343deead6d434a8da60eed1e50aa507ac2793b4a4c5517265f859f223bb4f6cadc6fb53430304baea18189e2b5ddd266c38f5c325ba391a50fcd34060d217c4118889c4275e40a8428099ddfa3cc0d8241c22fc1554318e922f3b1257f2046d70df460c5283a539487583ffca1972a19237b06480e0a56d9e185fe4dc3607666d81ed0d9d9f5c5c568a5a0a87160b6d35c73dae9c6177f2b25d90a2598042f4b43bc765fa86a831c401a01c391a8fdc8f8c742f2322a1b8ef18ec7d82f013893c981f6bd96ec57d8e73e1633ae3970721fcea055ecc836ce3", 0xf91}], 0x1, 0x1, 0x6) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) 3m45.873263367s ago: executing program 6 (id=1732): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x18, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="1800800087a21d00460b0000feff00000200fa0600000000001c00"], &(0x7f0000000100)='GPL\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='contention_end\x00', r0}, 0x18) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000940)=@base={0xe, 0x4, 0x4, 0x2}, 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xd, &(0x7f0000000200)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {0x4}, {0x6, 0x0, 0xa}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x33}}, @call={0x85, 0x0, 0x0, 0x11}]}, &(0x7f00000005c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000b80)={r2, 0x2000012, 0xe, 0x0, &(0x7f0000000280)="63ec33c9e9b98600000000000000", 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xb}, 0x50) r3 = syz_open_dev$usbmon(&(0x7f0000000240), 0x8, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000300)='rxrpc_client\x00', r4}, 0x18) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000140)='rxrpc_client\x00', r4, 0x0, 0x5}, 0x18) r5 = socket(0x2000000000000021, 0x2, 0x10000000000002) connect$rxrpc(r5, &(0x7f0000000140)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x400}}, 0x24) sendmmsg(r5, &(0x7f00000038c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="180000ed1d1d925f8befaf8fb2fff101"], 0x18, 0xe000}, 0x5}], 0x1, 0x0) mmap(&(0x7f00006c2000/0x1000)=nil, 0x1000, 0x5, 0x13, r3, 0x1e67e000) ioctl$MON_IOCT_RING_SIZE(r3, 0x9204, 0xc397e) 3m45.599997852s ago: executing program 37 (id=1732): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x18, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="1800800087a21d00460b0000feff00000200fa0600000000001c00"], &(0x7f0000000100)='GPL\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='contention_end\x00', r0}, 0x18) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000940)=@base={0xe, 0x4, 0x4, 0x2}, 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xd, &(0x7f0000000200)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {0x4}, {0x6, 0x0, 0xa}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x33}}, @call={0x85, 0x0, 0x0, 0x11}]}, &(0x7f00000005c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000b80)={r2, 0x2000012, 0xe, 0x0, &(0x7f0000000280)="63ec33c9e9b98600000000000000", 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xb}, 0x50) r3 = syz_open_dev$usbmon(&(0x7f0000000240), 0x8, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000300)='rxrpc_client\x00', r4}, 0x18) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000140)='rxrpc_client\x00', r4, 0x0, 0x5}, 0x18) r5 = socket(0x2000000000000021, 0x2, 0x10000000000002) connect$rxrpc(r5, &(0x7f0000000140)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x400}}, 0x24) sendmmsg(r5, &(0x7f00000038c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="180000ed1d1d925f8befaf8fb2fff101"], 0x18, 0xe000}, 0x5}], 0x1, 0x0) mmap(&(0x7f00006c2000/0x1000)=nil, 0x1000, 0x5, 0x13, r3, 0x1e67e000) ioctl$MON_IOCT_RING_SIZE(r3, 0x9204, 0xc397e) 3m33.954363121s ago: executing program 7 (id=1768): socket(0x10, 0x3, 0x0) r0 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGSKNS(r0, 0x894c, 0x0) socket(0x2d, 0x2, 0x0) syz_io_uring_setup(0x497, &(0x7f00000000c0)={0x0, 0x707c, 0x400, 0x3, 0x288}, &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) syz_io_uring_submit(r1, 0x0, &(0x7f0000000200)=@IORING_OP_OPENAT={0x12, 0x4, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000b40)='./file1\x00', 0x10f, 0x10105, 0x23456}) r3 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r4 = syz_io_uring_setup(0xeb19, &(0x7f0000000100)={0x0, 0x3e, 0x8000, 0x3, 0x34f, 0x0, r3}, &(0x7f00000000c0)=0x0, &(0x7f0000000280)=0x0) mount$overlay(0x0, 0x0, 0x0, 0x0, 0x0) r7 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r7, &(0x7f0000000240)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x2d}}, 0x10) sendmmsg$inet(r7, &(0x7f0000002700)=[{{&(0x7f0000000800)={0x2, 0x6e20, @multicast1}, 0x10, 0x0}}, {{0x0, 0x0, &(0x7f0000001ac0)=[{&(0x7f0000002400)="03", 0x1}], 0x1}}], 0x2, 0x2000c044) syz_emit_ethernet(0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="4d5722d585a85d0689061a50a245d5cde0080045000028000000000002907800000000fbffffff160090780000000000000000000000499101b135c66149"], 0x0) sendto$inet(r7, &(0x7f0000000c80)="e8", 0x6200, 0x12000000, 0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000180)=0xfffffff9, 0x0, 0x4) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f00000001c0)={0x1, &(0x7f0000000200)=[{0x9, 0x1, 0x0, 0x6}]}, 0x10) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=@ipv6_deladdrlabel={0x38, 0x49, 0x1, 0x70bd26, 0x25dfdbfd, {0xa, 0x0, 0x80}, [@IFAL_LABEL={0x8, 0x2, 0x7}, @IFAL_ADDRESS={0x14, 0x1, @loopback}]}, 0x38}, 0x1, 0x0, 0x0, 0x20040865}, 0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000200)=@IORING_OP_POLL_REMOVE={0x7, 0x50, 0x0, 0x0, 0x0, 0x1}) r9 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x102080, 0x0) r10 = ioctl$KVM_CREATE_VM(r9, 0xae01, 0x0) r11 = ioctl$KVM_CREATE_VCPU(r10, 0xae41, 0x200) ioctl$KVM_SET_MSRS(r11, 0x4008ae89, &(0x7f00000000c0)={0x1, 0x0, [{0x122, 0x0, 0x6}]}) r12 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x621c2, 0x0) ftruncate(r12, 0x8800000) ioctl$KVM_CREATE_VCPU(r12, 0xae41, 0x2) io_uring_enter(r4, 0x47bc, 0x0, 0x21, 0x0, 0x0) 3m33.702823506s ago: executing program 38 (id=1768): socket(0x10, 0x3, 0x0) r0 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGSKNS(r0, 0x894c, 0x0) socket(0x2d, 0x2, 0x0) syz_io_uring_setup(0x497, &(0x7f00000000c0)={0x0, 0x707c, 0x400, 0x3, 0x288}, &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) syz_io_uring_submit(r1, 0x0, &(0x7f0000000200)=@IORING_OP_OPENAT={0x12, 0x4, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000b40)='./file1\x00', 0x10f, 0x10105, 0x23456}) r3 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r4 = syz_io_uring_setup(0xeb19, &(0x7f0000000100)={0x0, 0x3e, 0x8000, 0x3, 0x34f, 0x0, r3}, &(0x7f00000000c0)=0x0, &(0x7f0000000280)=0x0) mount$overlay(0x0, 0x0, 0x0, 0x0, 0x0) r7 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r7, &(0x7f0000000240)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x2d}}, 0x10) sendmmsg$inet(r7, &(0x7f0000002700)=[{{&(0x7f0000000800)={0x2, 0x6e20, @multicast1}, 0x10, 0x0}}, {{0x0, 0x0, &(0x7f0000001ac0)=[{&(0x7f0000002400)="03", 0x1}], 0x1}}], 0x2, 0x2000c044) syz_emit_ethernet(0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="4d5722d585a85d0689061a50a245d5cde0080045000028000000000002907800000000fbffffff160090780000000000000000000000499101b135c66149"], 0x0) sendto$inet(r7, &(0x7f0000000c80)="e8", 0x6200, 0x12000000, 0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000180)=0xfffffff9, 0x0, 0x4) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f00000001c0)={0x1, &(0x7f0000000200)=[{0x9, 0x1, 0x0, 0x6}]}, 0x10) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=@ipv6_deladdrlabel={0x38, 0x49, 0x1, 0x70bd26, 0x25dfdbfd, {0xa, 0x0, 0x80}, [@IFAL_LABEL={0x8, 0x2, 0x7}, @IFAL_ADDRESS={0x14, 0x1, @loopback}]}, 0x38}, 0x1, 0x0, 0x0, 0x20040865}, 0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000200)=@IORING_OP_POLL_REMOVE={0x7, 0x50, 0x0, 0x0, 0x0, 0x1}) r9 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x102080, 0x0) r10 = ioctl$KVM_CREATE_VM(r9, 0xae01, 0x0) r11 = ioctl$KVM_CREATE_VCPU(r10, 0xae41, 0x200) ioctl$KVM_SET_MSRS(r11, 0x4008ae89, &(0x7f00000000c0)={0x1, 0x0, [{0x122, 0x0, 0x6}]}) r12 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x621c2, 0x0) ftruncate(r12, 0x8800000) ioctl$KVM_CREATE_VCPU(r12, 0xae41, 0x2) io_uring_enter(r4, 0x47bc, 0x0, 0x21, 0x0, 0x0) 1m0.9898859s ago: executing program 9 (id=1867): r0 = creat(&(0x7f0000000000)='./bus\x00', 0x0) close(r0) r1 = userfaultfd(0x801) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000140)) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f00000001c0)={{&(0x7f0000ff6000/0x8000)=nil, 0x8000}, 0x6}) mount(&(0x7f0000000000)=@sr0, 0x0, &(0x7f0000000180)='omfs\x00', 0x1000048, 0x0) waitid(0x1, 0x0, 0x0, 0x1000008, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000480), 0x22401, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = syz_io_uring_setup(0x3b7c, &(0x7f00000003c0)={0x0, 0x10010, 0x0, 0xb, 0x18, 0x0, r0}, &(0x7f0000000180)=0x0, &(0x7f0000000280)=0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)={{0x14, 0x10, 0x4}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x7, 0x0, 0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x21}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0x84}}, 0x0) io_uring_register$IORING_REGISTER_FILES(r4, 0x2, &(0x7f0000000300)=[0xffffffffffffffff], 0x1) r8 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r8, 0xc0a85320, &(0x7f00000005c0)={{0x80}, 'port1\x00', 0x62, 0x10cfa, 0x0, 0x8000008, 0x3, 0x4, 0x1, 0x0, 0x7, 0xd}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r8, 0x4058534c, &(0x7f0000000240)={0x80, 0x4, 0xc4, 0x0, 0x9, 0x3e}) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r5, r6, &(0x7f00000002c0)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000040), 0x1b}) io_uring_enter(r4, 0x47f6, 0x0, 0x0, 0x0, 0x0) r9 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) sendmsg$SMC_PNETID_DEL(0xffffffffffffffff, 0x0, 0x4000) memfd_create(0x0, 0xa) prlimit64(0x0, 0x7, &(0x7f0000000040)={0x0, 0x100}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x1, 0x4, 0x8, 0x5}, 0x50) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r9, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text16={0x10, &(0x7f0000000200)="ea0d00b0000f229464670fc79c8100800000ba6100ecbaf80c66b8ecb1048566efbafc0c66b8106d7dd166eff0867dc5decb66b9800000c00f326635000100000f30ea0000e50066b8010000000f01d9", 0x50}], 0x1, 0x43, 0x0, 0x0) syz_kvm_setup_cpu$x86(r3, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@text16={0x10, 0x0, 0x3f}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r9, 0xae80, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) syz_open_dev$MSR(&(0x7f0000000380), 0x0, 0x0) 1m0.89320437s ago: executing program 4 (id=1868): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = socket(0x1, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r6 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=ANY=[@ANYBLOB="340000001400b59500000000000000000a000000", @ANYRES32=r5, @ANYBLOB="1400020000000000000000000000ffff000000000800080010920000d41ff9e3d7a080eeaca3610d17e9aa8a39a6cf53bba3ac2d0fcdb0273076e31474ea09577d233e8a0dd5ad"], 0x34}}, 0x0) syz_kvm_setup_cpu$x86(r2, r0, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f0000000140)="c4e2a599df0f01cf0f21d9f30fc734ec66ba410066ed660f57fe640fc75b00c4c2352e5701f30fc7b00c000000c74424000e000000c7442402d5000000c7442406000000000f011c24", 0x1c}], 0x1, 0x42, 0x0, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x30, 0x40, 0x107, 0xfffffffe, 0x0, {0x1, 0x7c}, [@nested={0x4, 0x142}, @nested={0x14, 0x1, 0x0, 0x1, [@typed={0x8, 0x2, 0x0, 0x0, @uid}, @typed={0x8, 0x14, 0x0, 0x0, @uid}]}, @nested={0x4, 0x2}]}, 0x30}, 0x1, 0x0, 0x0, 0x48815}, 0xc000) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, &(0x7f00000001c0)="b9800000c00f3235000400000f30440f20c03508000000440f22c036646665f36526f20f22a5430f01c566ba4000edc4a39979250b00000008b9800000c00f3235010000000f30f245ab48b800000000000000800f23c00f21f83500000b000f23f8c481e57dcd", 0x67}], 0x1, 0x10, 0x0, 0x0) ioctl$KVM_PRE_FAULT_MEMORY(r3, 0xc040aed5, &(0x7f0000000080)={0x8080000, 0x10000}) ioctl$KVM_RUN(r3, 0xae80, 0x0) 1m0.59897005s ago: executing program 39 (id=1868): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = socket(0x1, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r6 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=ANY=[@ANYBLOB="340000001400b59500000000000000000a000000", @ANYRES32=r5, @ANYBLOB="1400020000000000000000000000ffff000000000800080010920000d41ff9e3d7a080eeaca3610d17e9aa8a39a6cf53bba3ac2d0fcdb0273076e31474ea09577d233e8a0dd5ad"], 0x34}}, 0x0) syz_kvm_setup_cpu$x86(r2, r0, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f0000000140)="c4e2a599df0f01cf0f21d9f30fc734ec66ba410066ed660f57fe640fc75b00c4c2352e5701f30fc7b00c000000c74424000e000000c7442402d5000000c7442406000000000f011c24", 0x1c}], 0x1, 0x42, 0x0, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x30, 0x40, 0x107, 0xfffffffe, 0x0, {0x1, 0x7c}, [@nested={0x4, 0x142}, @nested={0x14, 0x1, 0x0, 0x1, [@typed={0x8, 0x2, 0x0, 0x0, @uid}, @typed={0x8, 0x14, 0x0, 0x0, @uid}]}, @nested={0x4, 0x2}]}, 0x30}, 0x1, 0x0, 0x0, 0x48815}, 0xc000) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, &(0x7f00000001c0)="b9800000c00f3235000400000f30440f20c03508000000440f22c036646665f36526f20f22a5430f01c566ba4000edc4a39979250b00000008b9800000c00f3235010000000f30f245ab48b800000000000000800f23c00f21f83500000b000f23f8c481e57dcd", 0x67}], 0x1, 0x10, 0x0, 0x0) ioctl$KVM_PRE_FAULT_MEMORY(r3, 0xc040aed5, &(0x7f0000000080)={0x8080000, 0x10000}) ioctl$KVM_RUN(r3, 0xae80, 0x0) 59.853350634s ago: executing program 9 (id=1873): syz_emit_ethernet(0x46, &(0x7f0000000180)={@local, @random, @void, {@ipv4={0x800, @tcp={{0x9, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x6, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @dev={0xac, 0x14, 0x14, 0x41}, {[@lsrr={0x83, 0x7, 0xd0, [@multicast2]}, @cipso={0x86, 0x6}]}}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x80}}}}}}, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) (async) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r2 = dup2(r1, r1) setsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r2, 0x84, 0x6, 0x0, 0x0) (async) r3 = syz_open_dev$video(&(0x7f0000000100), 0x9, 0x1e3a00) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) (async) ioctl$VIDIOC_G_FREQUENCY(r3, 0xc02c5638, &(0x7f0000000180)={0x6, 0x1, 0x40}) (async) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000003b40)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7, 0x0, 0x2}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSETELEM={0x2c, 0xb, 0xa, 0x201, 0x0, 0x0, {0x7}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0x74}}, 0x0) (async, rerun: 64) r4 = syz_open_dev$vim2m(&(0x7f0000002c80), 0x3, 0x2) (rerun: 64) r5 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x402, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000007, 0x38011, r5, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(r4, 0xc0145608, &(0x7f0000000140)={0x7, 0x1, 0x2}) (async) ioctl$vim2m_VIDIOC_PREPARE_BUF(r4, 0xc058565d, &(0x7f0000002dc0)=@userptr={0x2, 0x1, 0x4, 0x0, 0x1, {}, {0x1, 0xc, 0x9, 0xc, 0x6, 0xa, "bf240fef"}, 0x3, 0x2, {&(0x7f00000002c0)}, 0x96000}) (async) syz_emit_ethernet(0x62, &(0x7f0000000140)={@local, @empty, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "2a8435", 0x2c, 0x6, 0x1, @empty, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x4, 0xb, 0xc2, 0x0, 0x0, 0x0, {[@generic={0x1, 0x2}, @mss={0x2, 0x4}, @md5sig={0x13, 0x12, "0500fe6983015f2de7553d10f8a145a6"}]}}}}}}}}, 0x0) (async, rerun: 64) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) (rerun: 64) r7 = memfd_create(&(0x7f0000000480)='\xff\x00l\x1e\xa00x0}) sendmsg$nl_route_sched(r8, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r10, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x4) r11 = socket(0x400000000010, 0x3, 0x0) (async, rerun: 64) r12 = socket$unix(0x1, 0x5, 0x0) (rerun: 64) ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) syz_open_dev$vivid(&(0x7f0000000080), 0x3, 0x2) sendmsg$nl_route_sched(r11, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000003c0)=@newtfilter={0x3c, 0x2c, 0x400, 0x70bd24, 0x25dfdbfc, {0x0, 0x0, 0x0, r13, {0xfff3, 0xfff2}, {}, {0x5, 0xc}}, [@filter_kind_options=@f_basic={{0xa}, {0xc, 0x2, [@TCA_BASIC_CLASSID={0x8, 0x1, {0x1, 0xffe0}}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x8848}, 0x4000010) (async) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) 58.727084428s ago: executing program 9 (id=1875): r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000000), 0x3) (async) ppoll(0xffffffffffffffff, 0x0, &(0x7f0000000040)={0x77359400}, &(0x7f0000000080)={[0x800]}, 0x8) madvise(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x9) (async) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f00000000c0), 0x2400, 0x0) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r1, 0xc018937a, &(0x7f0000000100)={{0x1, 0x1, 0x18, r0, {0x3ff}}, './file0\x00'}) ioctl$SNDRV_TIMER_IOCTL_START(r2, 0x54a0) (async) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r2) (async) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000001c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r2, &(0x7f00000002c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x48, r3, 0x400, 0x70bd27, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r4}, @val={0xc, 0x99, {0x5, 0x38}}}}, [@NL80211_ATTR_HT_CAPABILITY_MASK={0x1e, 0x94, {0x10, 0x2, 0x5, 0x0, {0x8, 0x11, 0x0, 0x4, 0x0, 0x0, 0x1, 0x0, 0x1}, 0x1, 0xff, 0x1}}]}, 0x48}, 0x1, 0x0, 0x0, 0x8811}, 0x0) (async) r5 = socket$unix(0x1, 0x5, 0x0) recvmmsg(r5, &(0x7f0000005ec0)=[{{&(0x7f0000000300)=@nfc_llcp, 0x80, &(0x7f0000001840)=[{&(0x7f0000000380)=""/250, 0xfa}, {&(0x7f0000000480)=""/113, 0x71}, {&(0x7f0000000500)=""/119, 0x77}, {&(0x7f0000000580)=""/81, 0x51}, {&(0x7f0000000600)=""/4096, 0x1000}, {&(0x7f0000001600)=""/56, 0x38}, {&(0x7f0000001640)=""/242, 0xf2}, {&(0x7f0000001740)=""/208, 0xd0}], 0x8, &(0x7f00000018c0)=""/4096, 0x1000}, 0x4}, {{&(0x7f00000028c0)=@nfc_llcp, 0x80, &(0x7f0000002d80)=[{&(0x7f0000002940)=""/237, 0xed}, {&(0x7f0000002a40)=""/214, 0xd6}, {&(0x7f0000002b40)=""/129, 0x81}, {&(0x7f0000002c00)=""/180, 0xb4}, {&(0x7f0000002cc0)=""/28, 0x1c}, {&(0x7f0000002d00)=""/76, 0x4c}], 0x6}, 0x1}, {{&(0x7f0000002e00)=@tipc, 0x80, &(0x7f0000003040)=[{&(0x7f0000002e80)=""/189, 0xbd}, {&(0x7f0000002f40)=""/196, 0xc4}], 0x2}, 0x7f}, {{&(0x7f0000003080)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @dev}}}, 0x80, &(0x7f0000004700)=[{&(0x7f0000003100)=""/94, 0x5e}, {&(0x7f0000003180)=""/143, 0x8f}, {&(0x7f0000003240)=""/198, 0xc6}, {&(0x7f0000003340)=""/4096, 0x1000}, {&(0x7f0000004340)=""/247, 0xf7}, {&(0x7f0000004440)=""/207, 0xcf}, {&(0x7f0000004540)=""/106, 0x6a}, {&(0x7f00000045c0)=""/96, 0x60}, {&(0x7f0000004640)=""/141, 0x8d}], 0x9, &(0x7f00000047c0)=""/123, 0x7b}, 0x6}, {{&(0x7f0000004840)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @remote}}, 0x80, &(0x7f0000004e40)=[{&(0x7f00000048c0)=""/131, 0x83}, {&(0x7f0000004980)=""/140, 0x8c}, {&(0x7f0000004a40)=""/134, 0x86}, {&(0x7f0000004b00)=""/13, 0xd}, {&(0x7f0000004b40)=""/147, 0x93}, {&(0x7f0000004c00)=""/220, 0xdc}, {&(0x7f0000004d00)=""/15, 0xf}, {&(0x7f0000004d40)=""/206, 0xce}], 0x8, &(0x7f0000004ec0)=""/4096, 0x1000}, 0x400}], 0x5, 0x40, &(0x7f0000006000)={0x77359400}) (async) getcwd(&(0x7f0000006040)=""/27, 0x1b) (async) ioctl$sock_inet6_tcp_SIOCATMARK(r2, 0x8905, &(0x7f0000006080)) (async) write$vga_arbiter(r2, &(0x7f00000060c0)=@target={'target ', {'PCI:', '9', ':', 'f', ':', 'd', '.', '14'}}, 0x14) (async, rerun: 32) ioctl$USBDEVFS_SETINTERFACE(r2, 0x80085504, &(0x7f0000006100)={0x100, 0x7}) (rerun: 32) setsockopt$netrom_NETROM_T4(r2, 0x103, 0x6, &(0x7f0000006140)=0xffff, 0x4) bpf$BPF_PROG_TEST_RUN_LIVE(0xa, &(0x7f00000062c0)={r2, 0x0, 0x48, 0x0, &(0x7f0000006180)="c8ba5381c9a04c8e9b2df8d19adb497c11c212462a4ef926f2a8c02c60d93d1533039ea9601e3f4d521efefb3ee9c3122b712795acfc15e5e7eb9b35e40a3838969679c0f6119347", 0x0, 0x100000, 0x0, 0xb2, 0x0, &(0x7f0000006200)="c1011cee6136f191a2fb2ae7ef4a99c13847cca7920322882c5e5f6dc276436f77230613156e80e787a22f332af6497aa71223d5d4bcc083cdc41576aaf85c3ed8b35ec25042eafc698de0e1e39803e152349417432c06698e0cf9a0e796d1295aa84baec1015b18a8a4478009cc049274c96362885426d19131fceb0ccddb3ec434412ca12ede4e420984c8f1e4c536aa9b3c873e0c5e0675285f86ed743655030074041780fe4168d1fe017bf8946eed09", 0x0, 0x2, 0x0, 0x3de}, 0x50) r7 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000006340), 0x40000, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r2, 0xc0189379, &(0x7f0000006380)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) (async) getsockopt$PNPIPE_IFINDEX(r2, 0x113, 0x2, &(0x7f00000063c0)=0x0, &(0x7f0000006400)=0x4) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000006440)=@bloom_filter={0x1e, 0x7fffffff, 0xffff0000, 0x2, 0x40, r8, 0x2, '\x00', r9, r2, 0x3, 0x3, 0x1, 0xc}, 0x50) bind$inet6(r2, &(0x7f00000064c0)={0xa, 0x4e24, 0x10, @remote, 0x8}, 0x1c) inotify_add_watch(r8, &(0x7f0000006500)='./file0\x00', 0x500) write$P9_RLCREATE(r8, &(0x7f0000006540)={0x18, 0xf, 0x1, {{0x1, 0x4, 0x8}, 0x8}}, 0x18) ioctl$KDSKBMODE(r8, 0x4b45, &(0x7f0000006580)) (async) r11 = syz_open_dev$vbi(&(0x7f0000007ac0), 0x1, 0x2) (async, rerun: 64) r12 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000007b00)='/proc/sys/net/ipv4/tcp_rfc1337\x00', 0x1, 0x0) (rerun: 64) syz_clone3(&(0x7f0000007cc0)={0x1082280, &(0x7f0000007b40), &(0x7f0000007b80)=0x0, &(0x7f0000007bc0), {0x30}, &(0x7f0000007c00)=""/48, 0x30, &(0x7f0000007c40)=""/51, &(0x7f0000007c80)=[0xffffffffffffffff], 0x1, {r2}}, 0x58) sendmmsg$unix(r2, &(0x7f0000009380)=[{{&(0x7f00000065c0)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000007a40)=[{&(0x7f0000006640)="4808e80124c6bfd87b20ce7c146060285dc79814398646ae8ca98424da5ed00feca11c8aebed8993eeeaf8923af731ae8b62548feb4cc45606ca3267d17ec68847c1a40c6a78c0428ca8d4764b3b599c8d7299ed3f15b33febf316778014968c7e358526d6fd19faf593babd9b404bf8b74e55f01ce0cca083f11d0a095ea1cfeaff30825de43e2824e9296731f1e9ded7a440dbca738799116c2b269f924cecf551be8882668287e896f7a8e5d4dca93e846ecf65982a5667212223ba5c3871f2aa3ad2583af1fa5fbda7be90f15cfb90c7", 0xd2}, {&(0x7f0000006740)="359b49147b2fa141c3810e8c7d39c3919efb604f6313d1729e41b76f482a9ee76a3f23b2dfb2632f00d801bc76761243470d859aea094a0e8a9564d14984e19692b4c904657ff82e69b3d560eaea3fe9fa2b4409b86d5b74e5", 0x59}, {&(0x7f00000067c0)="fe858ae9a4811989f6f053e3131619ade7d7405832dd9b5b747a99319b3b39c79facc003fa35c6548bbae77e9c569aecdaf1ccb22401113574a07c75f525ee2cf65f5f6a3f9d0acc9524f1c2eaf270371435020b13c8568497a39dd553bda061ccf882adf473d117b349c98ce974233f2f4ddcce134de669dcf3c46313a9918907b009e17b3f27e06f41a651e261420fe5078c64be4f74e16e08f9982be7c9defdc5af995d58c70e586eb1", 0xab}, {&(0x7f0000006880)="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", 0x1000}, {&(0x7f0000007880)="c9ffa3e8bc4bc4937e3fc71f06bd68f24df74875925cbd8509fb18eba47b68e4cc1fa93b40b2cdd355454998ef16b2c1cc5da9192767dbbe6625efb411ee6f353e783d7a5d2ae8bb7ba557e4d2965e31168cb442442b0cd1a7280a562c6600cd4dd8f4184d163adca6295933695143549651df49ad8b75072c6c78f2651c4d334f0efb9e", 0x84}, {&(0x7f0000007940)="a91b68aab60bde20b4afe98f14a6bad00dc68a045229898b372ca379e45b8a575e059c4fc0bd1fcc72ebeb82ff2a67df29042bb0ccf3ca169a8e67c2d4d34514993ac9668c6747cf919cda1fd89a3f595b7386e4a9f346cd75412e778a469b1d16810de72acf6f4d2c42ddc73e634b3a32fa3f87ecf83bc0265406e28d740ce81d22d6c77d54d94b7c0cea74f11a14a906359229a6933b165f9c5641f9aa284a36d2edb9253cf2f0d84157ebe27361fdc50cdc573e991c78d7daf21531acaa37eb99efc914c5aedc5f8d75ed8cb899551a15a129c5dba314dcdb7493f2623b640c33094490a7a19525cc1f47ad9a89e7bb297f89296c", 0xf6}], 0x6, &(0x7f0000007f80)=[@rights={{0x18, 0x1, 0x1, [r8, r11]}}, @rights={{0x24, 0x1, 0x1, [r8, r1, r7, r12, r0]}}, @cred={{0x1c, 0x1, 0x2, {r13, 0x0, 0xffffffffffffffff}}}, @cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff}}}], 0x80, 0x80}}, {{&(0x7f0000008000)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000008340)=[{&(0x7f0000008080)="254f20c06d074cf4e90c0f866145765a875f685c3d017218793f1ffa7e221f966efeda84236a40ab53da3fb4cf61a7f4101c155c409b66a2fc7657276dee9d04216bcd21be058e7611267d857ada7f1ad1ed68eb217f0add5e8c67264afe1125e036d58bdf536f626f6aff87786e397e0ec9184a46f1cc476ac2c805ede11a44a8acfd1ef7d6380c4d2837a4112473c3b05af4202e84fa8033569c5bf0967fc0df2b432d49484dd8a8fc07fae9dc969f893268294c14fb1412ff83230ff04ffa6db591abbbc8189db772522818d9720ff50e6941744d098c685727537e4e9f7a765f3a82b391529148", 0xe9}, {&(0x7f0000008180)="6a62161424f6fcb1654b7edc7ab5895a3e90d32178be818261668283546a99a331b8161d934e9956935bc17231dcfde8c7b83058cee95c2e681959b1b195b7f6d4713751431935c51d1333547101b69f41454e33aca9722f71e2c42b7d9f8b3303e181", 0x63}, {&(0x7f0000008200)="d0da55c7491f1eb3bca3529a222db55ad52415a1093349963e2b9dc745a824a6f319ddd6945b31eefce7f1f1202babaf8e0d58041bac3f60192aedafbd5a05f8c3d9a217bbf98905563a3014a84bf1c0d54ad1d87935a3050a4a8eccc9", 0x5d}, {&(0x7f0000008280)="de2a24b9529c89fc256738c96465c1295df04bdd73dfbb633d7aad3ff241267ee6dcdf75ecb74a2557d322f62e42acb73651ec34c2405d515cd3513f0363df7aa4571fbe458482a8aeec3735170368b4084846edf736900d289f8a60644959c805c4b756", 0x64}, {&(0x7f0000008300)="0741449fb6678869", 0x8}], 0x5, &(0x7f0000008440)=[@rights={{0x1c, 0x1, 0x1, [r5, r0, 0xffffffffffffffff]}}], 0x20, 0x4040}}, {{&(0x7f0000008480)=@abs={0x0, 0x0, 0x4e22}, 0x6e, &(0x7f0000008740)=[{&(0x7f0000008500)="e1a1bc332c2d391ee9c8f5aa8d1db6122588b982736890bd4dbd5eb4a6fe2a16841e81e73671a2cc4998e63148c00bcea8bea61722968786188ab4dfc6", 0x3d}, {&(0x7f0000008540)="de318ecd1f078ad015b02f7a395aabf7cadbb5d7c20a2b5449a0f2a961f5f0bd7e941bc20788849dd57248722eda73a3e21724dda284682a5cc7849bed239dddb217813ae082c969f895badf9ca1d865d5e6b5f597f9ad4c69d100e38e22a8eea06d97ed8089a397c9cdd5a036d0de555c420109361330378fd95ad1feea74c18c", 0x81}, {&(0x7f0000008600)="205b2f591d12c65c96d3ffb52681825d0173ab97bb5e7e42a392a1553f4c9fb2c5df511575416f45186289c2f7fa59b3c41daa72eed1931cb78cab38ad0bd1f85e476466a61e445ef578deb298a313ed0f291501d71921c393ea4b1f2c7f396b182b5f652e850fa1cddbc44829b773f3e9ed10e41198cb92dbbaf07db16de924b6aeca8b689a1a1b3c96ad70492851ac80dcaadc6b37dee4d40e7fc198d30fff6d0136c91c8f48164f540fcd9312f04db00370758ff69ef421bce7cca8fdc3643dbbae56da19228a94b0fc3ff56e100b3f36bcfa7da1e1ac9f71eca93e4f1c59fba2", 0xe2}, {&(0x7f0000008700)="33fc20476c4dcca8f30921eaa5f1dc612d3296ca93c12932", 0x18}], 0x4, &(0x7f00000087c0)=[@rights={{0x2c, 0x1, 0x1, [r2, r0, 0xffffffffffffffff, r5, r7, r2, r10]}}], 0x30, 0x4000040}}, {{&(0x7f0000008800)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000008940)=[{&(0x7f0000008880)="031c0da6ae1d355256a78d4c5f452896d504a35e79e23698452d96f0a159c33e89c04fa675792a8640c462c706431d4a0e56b691d6bcb10179cb556098e5eb9bd2b23341f9a35ad48f11065b7ddabafa93a560e16b018b21a54952568268febe84867b43ee14796a93eb15fa26be53d0b90e7527e6b42d8b908a4f15e6fbc542c7e18ef9e95eaf32da7183", 0x8b}], 0x1, &(0x7f0000008c40)=[@rights={{0x20, 0x1, 0x1, [r10, r10, r6, r6]}}, @cred={{0x1c}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0xffffffffffffffff, 0xee01}}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0xee00}}}, @rights={{0x18, 0x1, 0x1, [r1, r8]}}], 0x98, 0x20000000}}, {{&(0x7f0000008d00)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f00000090c0)=[{&(0x7f0000008d80)="aa3dfd7473cb94c550ab61fcaa35800b1f7b02c22fbd0dbca772088991f028860c018a95f294df9af0131d24212bb22504bede511066141ae3d2bcec9ec11e580adfa105bbec81f02c7804c986b1b8a02db7e97cc3f49d7ccc5ec9c8b6cb6200967149eff8dafa1e99c2e3cbf8eabdce32df7e37cc5df79cda6dc289b7f70f6902a7d8356f64db8bcf9bcd2aaf74fd9faeb557babfc252658148f46a567f0ba609d56299", 0xa4}, {&(0x7f0000008e40)="1aee9612f6e0a34af5439f5c62eea42a4c33243f10088fdf83d29c6c6c08d578df23638afad7b806b3cb77873f774e5e6b4d6e4f97a5af6cc5d8b4fa7e8538933dc5c0740b4005abed92d8e414241731ec50243cb00a963b511986f711644c015edc8e98e3b1c4b4a21d76925e0c58b7309803dea2f54e90549b31815e3f097707504dd2eaf5927b492b5654e1185a929d1e768e601335a51db8f0d3d978cfb9e4d4f247e3d353eea9e8", 0xaa}, {&(0x7f0000008f00)="ecb7b1c3b70d07fdb2e460ea7b9e3a25add5bea44d770be5e2bd17cbb61c656fcd5c01f1ac75cdbf280e21e89993a2334876cb3a63291861ea2836460d44ff87fab13a79757597ea325361bf1a196d0b228093338e6853205b6a6c3ea0dc7442f2e3f654cabd6db54760098180714bcfb39aa336e189456d8cb068548be54e63d505c69c2b3291ae12af128591fef9411aad7d57146351bad527cc573eb0dfe4cc592a5390f9435b0d4c8837c523a42dcaa5c20a9f1b", 0xb6}, {&(0x7f0000008fc0)="e29828cf54a50d9d883a9196bc786b2c142c9e51a313e01deba2087188fb71d868d09dc1cd5675cae6f933d8fe14f55f4ae0269750d8124fc622f68a280cab72dd0e67b2034eddbd8b9ef1c626cc4fe674f799e7e608a282817c026f190ab23333f07f667e616ae3ba92661655019c", 0x6f}, {&(0x7f0000009040)="24cd41b15704adf6f105c999eeebdb3326a678e5b3995d91af0d1f15b62308804026af4aba737ba166f2793e1e9ceaf48e76039630ffc0fc5f92573009ecbe6a02b0ea", 0x43}], 0x5, &(0x7f0000009300)=[@cred={{0x1c, 0x1, 0x2, {0x0, 0xee00}}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0, 0xffffffffffffffff}}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x58, 0x44000}}], 0x5, 0x4004000) 58.578492084s ago: executing program 9 (id=1876): mkdir(0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = gettid() timer_create(0x0, &(0x7f00000005c0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) memfd_create(&(0x7f0000000040)='dev [\x1dx#l', 0x8) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r2, 0x29, 0x4e, &(0x7f0000000100)=0xfffffff7, 0x4) syz_open_dev$sndctrl(&(0x7f0000000440), 0x0, 0x0) r3 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040201, 0x0) r4 = syz_open_dev$sndpcmp(&(0x7f0000000200), 0x0, 0xa2c65) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000500)={0x0, 0xfffffffffffffd83, 0xfa00, {0x0, 0x0}}, 0xfdbc) ioctl$SNDRV_PCM_IOCTL_SW_PARAMS(r4, 0xc0884113, &(0x7f0000000680)={0x1, 0x0, 0x202, 0xce, 0xffffffffffffffff, 0x200000000000008, 0x1000000000000008, 0x2, 0x8, 0x40000000000002a, 0x80000009, 0x2}) ioctl$SNDRV_PCM_IOCTL_STATUS_EXT32(r4, 0xc06c4124, &(0x7f0000000840)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}) sendmmsg$inet6(r2, &(0x7f0000001700)=[{{&(0x7f0000000000)={0xa, 0x4e21, 0x0, @local, 0x1}, 0x18, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="24000000000000002900000032000000ff1100000000000000c7e0cfc90800000000000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00'], 0x28, 0x7ffffff7}}], 0x1, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x100000, 0x0) r5 = open_tree(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) mount$bind(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000280)='./file0/file0\x00', 0x0, 0x1000, 0x0) mount_setattr(r5, &(0x7f0000000040)='./file0\x00', 0x1100, &(0x7f0000000300)={0x80, 0x88, 0x80000, {r5}}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r6 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) connect$llc(r6, &(0x7f0000000180)={0x1a, 0x0, 0x0, 0x8, 0x3, 0x0, @random="a1fb75d10a28"}, 0x10) r7 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$sock_ifreq(r7, 0x8992, &(0x7f0000000180)={'vlan0\x00', @ifru_names='dummy0\x00'}) 56.403796617s ago: executing program 8 (id=1884): socket$nl_route(0x10, 0x3, 0x0) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000000000), &(0x7f0000000100)=0x4) socket$inet6_tcp(0xa, 0x1, 0x0) r0 = fsopen(&(0x7f0000000000)='gfs2\x00', 0x0) mlock(&(0x7f0000ffb000/0x2000)=nil, 0x2000) r1 = socket$nl_sock_diag(0x10, 0x3, 0x4) socket$nl_generic(0x10, 0x3, 0x10) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x13, &(0x7f0000000300)=ANY=[], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000001c0)='percpu_alloc_percpu\x00', r2}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0x1e, 0x12, &(0x7f0000000400)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x3}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@jmp={0x5, 0x1, 0xa, 0x9, 0x0, 0xfffffffffffffffc, 0x4}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x4}, @call={0x85, 0x0, 0x0, 0x95}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) socket(0x1d, 0x2, 0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x0) io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x8, 0xc1}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000002240)=""/102392, 0x18ff8) r5 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r5, 0x3b81, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x881, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$TCPDIAG_GETSOCK(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000240)=ANY=[@ANYBLOB="700000001200030200"/56, @ANYRES8=r4, @ANYBLOB="816900000000080000000000000000002100010008081c00"], 0x70}}, 0x84) r6 = fsopen(&(0x7f0000000100)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r6, 0x6, 0x0, 0x0, 0x0) 56.309791344s ago: executing program 8 (id=1885): r0 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x86) fchdir(r1) mkdirat(r1, &(0x7f0000000100)='./file0\x00', 0x2a0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$EVIOCGREP(0xffffffffffffffff, 0x80084524, 0x0) close(0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x6) openat$sndseq(0xffffff9c, &(0x7f00000000c0), 0x880) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000240)=0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = openat$binfmt_register(0xffffff9c, &(0x7f0000000000), 0x1, 0x0) write$binfmt_register(r5, &(0x7f0000000200)={0x3a, 'syz3', 0x3a, 'M', 0x3a, 0x8, 0x3a, '/proc/sys/fs/binfmt_misc/register\x00', 0x3a, '/proc/sys/fs/binfmt_misc/register\x00', 0x3a, './file0/../file0', 0x3a, [0x4f, 0x43]}, 0x76) getpid() r6 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000040)={'sit0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFDSTADDR(r6, 0x8918, &(0x7f0000000080)={@loopback={0x0, 0x3fc}, 0x0, r7}) socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x1, 0xe, &(0x7f0000000380)=ANY=[], &(0x7f0000000380)='syzkaller\x00', 0xfff, 0x0, 0x0, 0x0, 0x21, '\x00', 0x0, @fallback=0x9}, 0x94) mkdir(&(0x7f0000000680)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) rename(&(0x7f0000000580)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000200)='./file0\x00') prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) 55.569814473s ago: executing program 9 (id=1890): r0 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) epoll_create1(0x80000) (async) epoll_create1(0x80000) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) syz_usb_connect(0x4, 0x24, &(0x7f0000000300)=ANY=[@ANYBLOB="1201000003"], 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x6, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="0b00000000010000000100000900000001"], 0x48) (async) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="0b00000000010000000100000900000001"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000000), &(0x7f00000002c0), 0x8, r2}, 0x38) bpf$MAP_LOOKUP_BATCH(0x1b, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000100), 0x0, 0x7, r2}, 0x38) r3 = getpid() sched_setscheduler(r3, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) (async) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) (async) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) (async) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) fcntl$lock(r6, 0x24, &(0x7f0000000080)={0x2, 0x2, 0x7, 0x4000000008}) (async) fcntl$lock(r6, 0x24, &(0x7f0000000080)={0x2, 0x2, 0x7, 0x4000000008}) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000380)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x40, 0x0, 0xfffffffb, 0x1, &(0x7f0000000180)="d30039bc344c23cfc43bf9c64cb29324e0b066304932fa86180964b3db14f67d9d27b11d1ff2f6cfdda27340939919e40dfab148f15eb0a3052c17e4be9a2f11f90df2c924ffdee94b63158e8b44b2a134d8cd0bcd247075b614344c83854ca0a865", 0x10000, 0x0, 0x0, {0x3}}) socket$kcm(0x10, 0x2, 0x0) write$binfmt_script(r0, &(0x7f00000002c0)={'#! ', './file0', [{0x20, '\t\t\xf2`:y\xd4H\xfa\xee=d\xd7T\x0f7\x93`\xc6\xd04\xa3\xacQT\x8cj\x83\xa8\xb1\x88H\xe3\x16\xeb\x16\xaa\x91Pn\xcd\xde}$\xad`\xd6(\xa8\xaa\xc67?anM_\xa0\xcf\x82\x84\xf8\xb0\x8amlKL!\xd7\xaaK\xces\x04\x1e*p\x9e\xf2\x16\x01`\xd2+FG\tX)\x910\x00\x00\x00B\x1d\xc7\xd8\xb5\x81\x15\x0f[D8\x88@A$\x88\xa5O&\xae\xe3\b\xa8\xd4\x9b\xabo\xf4\xd1\f\"e\xcdzA\xf49\xc1\xc8\f\x8c\xf3\xa7*O\xe3\xc3L\xd6H\ta\xf5\xc6\xee\xa2\xd4\xde\xe5\x1b\x1e34~\xa8\xb8aQtp\xc8r_\x14K\xd35;\x8f_\xe0|Y\x8b'}]}, 0xbf) close(r0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x62081, 0x0) io_submit(0x0, 0x0, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0xa8002, 0x0) execve(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) (async) execve(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) 54.583593563s ago: executing program 8 (id=1897): syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), r0) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000240)={'wlan0\x00'}) sendmsg$NL80211_CMD_DEL_STATION(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)={0x1c, r2, 0x1, 0x70bd28, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000080}, 0x4000) r3 = socket(0x2a, 0x2, 0x0) sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x24}}, 0x0) getsockname$packet(r3, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r5, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) r7 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r7, @ANYBLOB="03032abd7000fbdbdf250a00000008000300", @ANYRES32=r6, @ANYBLOB="da9a10964f66104c843853aa3649b6f2e3e7938c3863b0bbd3908b02fa00b16ad148ef024604c514b64d1dadefe3d0eb0104000000000000a7"], 0x1c}, 0x1, 0xf0}, 0x8010) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r8 = getpid() sched_setscheduler(r8, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r9, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r10, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r9, &(0x7f00000000c0), 0x10106, 0x2, 0x0) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) munlock(&(0x7f00002a4000/0x2000)=nil, 0x2000) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x24, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0) r11 = socket$nl_generic(0x10, 0x3, 0x10) r12 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$IPVS_CMD_GET_DEST(r11, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)={0x28, r12, 0x50dc85624ea6cf59, 0x0, 0x1, {}, [@IPVS_CMD_ATTR_SERVICE={0x14, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x3}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x400c081}, 0x0) sendmsg$IPVS_CMD_NEW_SERVICE(r3, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000040)={&(0x7f00000003c0)={0xec, r12, 0x31, 0x70bd26, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x5}, @IPVS_CMD_ATTR_DAEMON={0x28, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x4}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @remote}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'wg1\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x8001}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x4a9}, @IPVS_CMD_ATTR_DEST={0x4c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x7}, @IPVS_DEST_ATTR_TUN_TYPE={0x5}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0x2}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e22}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0xffff}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x7}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x9}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x80000001}, @IPVS_DEST_ATTR_TUN_TYPE={0x5, 0xd, 0x1}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x5}, @IPVS_CMD_ATTR_DAEMON={0x3c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @mcast1}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e24}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0xd0}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @remote}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x5}]}, 0xec}, 0x1, 0x0, 0x0, 0x810}, 0x0) 54.577642685s ago: executing program 9 (id=1898): prctl$PR_SCHED_CORE(0x3e, 0x10000000001, 0x0, 0x2, 0x0) prlimit64(0x0, 0xd, &(0x7f000001b100)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x9, 0x6, 0x1) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'virt_wifi0\x00'}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r2) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=ANY=[@ANYBLOB="3800000018000100000000000000000002001000fe0000090000000006001500040000001400168010000880"], 0x38}, 0x1, 0x0, 0x0, 0x4}, 0x0) bind$inet6(r2, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) prlimit64(0x0, 0x2, &(0x7f000001b000)={0x8000, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000002000)=""/102395, 0x18ffb) r6 = add_key(&(0x7f000001b040)='dns_resolver\x00', &(0x7f0000000040)={'syz', 0x0}, &(0x7f000001b0c0)="ae", 0x1, 0xffffffffffffffff) keyctl$read(0x2, r6, &(0x7f00000000c0)=""/4096, 0x1000) keyctl$read(0xb, r6, &(0x7f00000010c0)=""/4096, 0x1000) r7 = syz_open_dev$tty1(0xc, 0x4, 0x2) ioctl$TCXONC(r7, 0x540a, 0x3) r8 = syz_open_dev$radio(&(0x7f0000000000), 0xffffffffffffffff, 0x2) ioctl$VIDIOC_S_EXT_CTRLS(r8, 0xc0205648, &(0x7f0000000100)={0x9f0000, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000040)={0xa20934, 0x200, '\x00', @value=0xc6}}) listen(r3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000740)=ANY=[@ANYBLOB="f5b0d5f5", @ANYRES32=r0, @ANYRESDEC=r0], 0x70}, 0x1, 0x0, 0x0, 0x800}, 0x800) socket$kcm(0x10, 0x2, 0x4) socket$nl_route(0x10, 0x3, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f000001b080)=0x1) 54.400369784s ago: executing program 40 (id=1898): prctl$PR_SCHED_CORE(0x3e, 0x10000000001, 0x0, 0x2, 0x0) prlimit64(0x0, 0xd, &(0x7f000001b100)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x9, 0x6, 0x1) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'virt_wifi0\x00'}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r2) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=ANY=[@ANYBLOB="3800000018000100000000000000000002001000fe0000090000000006001500040000001400168010000880"], 0x38}, 0x1, 0x0, 0x0, 0x4}, 0x0) bind$inet6(r2, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) prlimit64(0x0, 0x2, &(0x7f000001b000)={0x8000, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000002000)=""/102395, 0x18ffb) r6 = add_key(&(0x7f000001b040)='dns_resolver\x00', &(0x7f0000000040)={'syz', 0x0}, &(0x7f000001b0c0)="ae", 0x1, 0xffffffffffffffff) keyctl$read(0x2, r6, &(0x7f00000000c0)=""/4096, 0x1000) keyctl$read(0xb, r6, &(0x7f00000010c0)=""/4096, 0x1000) r7 = syz_open_dev$tty1(0xc, 0x4, 0x2) ioctl$TCXONC(r7, 0x540a, 0x3) r8 = syz_open_dev$radio(&(0x7f0000000000), 0xffffffffffffffff, 0x2) ioctl$VIDIOC_S_EXT_CTRLS(r8, 0xc0205648, &(0x7f0000000100)={0x9f0000, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000040)={0xa20934, 0x200, '\x00', @value=0xc6}}) listen(r3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000740)=ANY=[@ANYBLOB="f5b0d5f5", @ANYRES32=r0, @ANYRESDEC=r0], 0x70}, 0x1, 0x0, 0x0, 0x800}, 0x800) socket$kcm(0x10, 0x2, 0x4) socket$nl_route(0x10, 0x3, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f000001b080)=0x1) 53.513307643s ago: executing program 8 (id=1902): mkdir(0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = gettid() timer_create(0x0, &(0x7f00000005c0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) memfd_create(&(0x7f0000000040)='dev [\x1dx#l', 0x8) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r2, 0x29, 0x4e, &(0x7f0000000100)=0xfffffff7, 0x4) syz_open_dev$sndctrl(&(0x7f0000000440), 0x0, 0x0) r3 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040201, 0x0) r4 = syz_open_dev$sndpcmp(&(0x7f0000000200), 0x0, 0xa2c65) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000500)={0x0, 0xfffffffffffffd83, 0xfa00, {0x0, 0x0}}, 0xfdbc) ioctl$SNDRV_PCM_IOCTL_SW_PARAMS(r4, 0xc0884113, &(0x7f0000000680)={0x1, 0x0, 0x202, 0xce, 0xffffffffffffffff, 0x200000000000008, 0x1000000000000008, 0x2, 0x8, 0x40000000000002a, 0x80000009, 0x2}) ioctl$SNDRV_PCM_IOCTL_STATUS_EXT32(r4, 0xc06c4124, &(0x7f0000000840)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}) sendmmsg$inet6(r2, &(0x7f0000001700)=[{{&(0x7f0000000000)={0xa, 0x4e21, 0x0, @local, 0x1}, 0x18, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="24000000000000002900000032000000ff1100000000000000c7e0cfc90800000000000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00'], 0x28, 0x7ffffff7}}], 0x1, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x100000, 0x0) r5 = open_tree(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) mount$bind(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000280)='./file0/file0\x00', 0x0, 0x1000, 0x0) mount_setattr(r5, &(0x7f0000000040)='./file0\x00', 0x1100, &(0x7f0000000300)={0x80, 0x88, 0x80000, {r5}}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r6 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) connect$llc(r6, &(0x7f0000000180)={0x1a, 0x0, 0x0, 0x8, 0x3, 0x0, @random="a1fb75d10a28"}, 0x10) r7 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$sock_ifreq(r7, 0x8992, &(0x7f0000000180)={'vlan0\x00', @ifru_names='dummy0\x00'}) 52.444825199s ago: executing program 8 (id=1906): r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040), 0x511f03, 0x0) ioctl$SNDCTL_SEQ_GETTIME(r0, 0x80045113, &(0x7f0000000080)) 51.813201365s ago: executing program 8 (id=1911): openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x80082, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) socket$packet(0x11, 0x3, 0x300) r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bpf$OBJ_GET_PROG(0x7, &(0x7f00000005c0)=@generic={&(0x7f0000000080)='./mnt\x00', 0x0, 0x18}, 0x18) sched_setattr(0x0, &(0x7f0000000000)={0x38, 0x0, 0x4, 0x8001, 0x0, 0xb49, 0x200000000002, 0x7, 0x8, 0x5}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x15) writev(r3, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) recvmmsg(r3, &(0x7f0000000680)=[{{0x0, 0x0, 0x0}, 0x5}], 0x1, 0x40010000, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x40082, 0x0) ioctl$PPPIOCNEWUNIT(r4, 0xc004743e, &(0x7f0000000140)) r5 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080), 0x804000, &(0x7f0000000180)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r5, @ANYBLOB=',wfdno=', @ANYRESHEX=r4]) r6 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r6, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0xfffffffffffffe57}, 0x1, 0x0, 0x0, 0x4000}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r8 = fsopen(&(0x7f0000000280)='configfs\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r8, 0x6, 0x0, 0x0, 0x0) r9 = fsmount(r8, 0x0, 0x1) fchdir(r9) execve(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32=r7, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}, 0x1, 0x0, 0x0, 0xc000}, 0x0) setsockopt$inet_sctp6_SCTP_AUTOCLOSE(r6, 0x84, 0x4, &(0x7f00000001c0)=0x9, 0x4) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001500)=@newqdisc={0x24, 0x24, 0xe0b, 0x70bd2b, 0x0, {0x0, 0x0, 0x0, r7, {0x1, 0x9}, {0xffff, 0xffff}, {0xfff1}}}, 0x24}}, 0x0) 51.585111611s ago: executing program 41 (id=1911): openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x80082, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) socket$packet(0x11, 0x3, 0x300) r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bpf$OBJ_GET_PROG(0x7, &(0x7f00000005c0)=@generic={&(0x7f0000000080)='./mnt\x00', 0x0, 0x18}, 0x18) sched_setattr(0x0, &(0x7f0000000000)={0x38, 0x0, 0x4, 0x8001, 0x0, 0xb49, 0x200000000002, 0x7, 0x8, 0x5}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x15) writev(r3, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) recvmmsg(r3, &(0x7f0000000680)=[{{0x0, 0x0, 0x0}, 0x5}], 0x1, 0x40010000, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x40082, 0x0) ioctl$PPPIOCNEWUNIT(r4, 0xc004743e, &(0x7f0000000140)) r5 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080), 0x804000, &(0x7f0000000180)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r5, @ANYBLOB=',wfdno=', @ANYRESHEX=r4]) r6 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r6, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0xfffffffffffffe57}, 0x1, 0x0, 0x0, 0x4000}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r8 = fsopen(&(0x7f0000000280)='configfs\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r8, 0x6, 0x0, 0x0, 0x0) r9 = fsmount(r8, 0x0, 0x1) fchdir(r9) execve(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32=r7, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}, 0x1, 0x0, 0x0, 0xc000}, 0x0) setsockopt$inet_sctp6_SCTP_AUTOCLOSE(r6, 0x84, 0x4, &(0x7f00000001c0)=0x9, 0x4) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001500)=@newqdisc={0x24, 0x24, 0xe0b, 0x70bd2b, 0x0, {0x0, 0x0, 0x0, r7, {0x1, 0x9}, {0xffff, 0xffff}, {0xfff1}}}, 0x24}}, 0x0) 36.378718443s ago: executing program 0 (id=1956): r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000c00), 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000000)=0x200000000) write$vhost_msg(r0, &(0x7f0000000540)={0x1, {&(0x7f0000000040)=""/62, 0x3e, 0x0, 0x2, 0x2}}, 0x48) write$vhost_msg_v2(r0, &(0x7f0000000400)={0x2, 0x0, {&(0x7f0000000080)=""/169, 0xa9, 0x0, 0x2, 0x2}}, 0x48) write$vhost_msg_v2(r0, &(0x7f00000039c0)={0x2, 0x0, {&(0x7f0000000680)=""/184, 0xfffffefd, 0x0, 0x3, 0x2}}, 0x48) write$vhost_msg_v2(r0, &(0x7f0000000300)={0x2, 0x0, {&(0x7f00000002c0)=""/3, 0x3, 0x0, 0x1, 0x2}}, 0x48) write$vhost_msg_v2(r0, &(0x7f00000004c0)={0x2, 0x0, {&(0x7f0000001080)=""/185, 0xb9, 0x0, 0x3, 0x2}}, 0x48) write$vhost_msg_v2(r0, &(0x7f0000000840)={0x2, 0x0, {&(0x7f0000000740)=""/215, 0xffffffffffffffdd, 0x0, 0x3, 0x2}}, 0x48) 35.578146625s ago: executing program 0 (id=1959): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000001640)=@mangle={'mangle\x00', 0x44, 0x6, 0x3b8, 0x2a8, 0x98, 0x2a8, 0x130, 0x1f0, 0x370, 0x370, 0x98, 0x370, 0x370, 0x6, 0x0, {[{{@uncond, 0x0, 0x70, 0x98}, @inet=@DSCP={0x28}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @local, 0x0, 0x0, 'batadv_slave_1\x00', 'veth1_virt_wifi\x00', {}, {}, 0x11, 0x0, 0x69}, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28}}, {{@ip={@broadcast, @multicast2, 0x0, 0x0, 'vlan1\x00', 'nr0\x00'}, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28}}, {{@ip={@loopback, @empty, 0x0, 0x0, 'syzkaller0\x00', 'dvmrp1\x00', {}, {}, 0x6}, 0x0, 0x70, 0xb8}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz0\x00', 0x1, 0x3, {0x5}}}}, {{@ip={@broadcast, @dev={0xac, 0x14, 0x14, 0x18}, 0x0, 0x0, 'lo\x00', 'batadv_slave_1\x00'}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x0, @loopback}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x418) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x20004004) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) ioctl$DRM_IOCTL_SET_CLIENT_CAP(0xffffffffffffffff, 0x4010640d, 0x0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x0) sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)={0x30, r2, 0x5, 0xffffffff, 0x8, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}, @NL80211_ATTR_WIPHY_FREQ_HINT={0x8}]}, 0x30}}, 0x488c0) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000808}, 0xc, &(0x7f0000000180)={&(0x7f0000000040)={0x28, 0x0, 0x400, 0x70bd29, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_CONTROL_PORT_NO_ENCRYPT={0x4}, @NL80211_ATTR_CONTROL_PORT_ETHERTYPE={0x6, 0x66, 0x6004}]}, 0x28}, 0x1, 0x0, 0x0, 0x24004880}, 0x4044810) pipe2(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80800) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x40200, 0x0) ioctl$TIOCPKT(r5, 0x5420, &(0x7f00000000c0)=0x3ff) sendfile(r4, r5, 0x0, 0x10ffff) ioctl$TCSETS(r5, 0x5402, &(0x7f0000000740)={0x6e, 0x483aa015, 0x0, 0x0, 0x0, "fe00"}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(0xffffffffffffffff, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_GETPLANE(0xffffffffffffffff, 0xc02064b6, 0x0) r6 = accept$netrom(0xffffffffffffffff, 0x0, 0x0) pwritev2(r6, 0x0, 0x0, 0x7f, 0xc, 0x18) sendto$inet6(0xffffffffffffffff, &(0x7f00000001c0), 0x0, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_EVENTS(0xffffffffffffffff, 0x84, 0xb, 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) socket$inet_smc(0x2b, 0x1, 0x0) socket$can_j1939(0x1d, 0x2, 0x7) 34.557334s ago: executing program 0 (id=1961): r0 = syz_open_dev$sndpcmc(&(0x7f0000000040), 0x1, 0x101000) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x10) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f00000002c0)='./bus\x00', 0x42, 0x58) renameat2(0xffffffffffffff9c, &(0x7f0000000480)='./bus\x00', r1, &(0x7f00000004c0)='./file0\x00', 0x2) r2 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) mkdirat(r2, &(0x7f0000000200)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) renameat2(r2, &(0x7f0000000340)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000380)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x2) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000080), 0x420b41, 0x0) socketpair$unix(0x1, 0x3, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f0000000400)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0) ioctl$TCSETS(r3, 0x5402, &(0x7f0000000000)={0x401, 0x0, 0x10000, 0xb998, 0x0, "194f2f83c2e798c3584770116cddc8819592b1"}) write$binfmt_aout(r3, &(0x7f0000000000)=ANY=[], 0xff2e) syz_usb_connect(0x2, 0x2d, &(0x7f0000000540)={{0x12, 0x1, 0x300, 0x90, 0xd8, 0xf9, 0x8, 0xb62, 0x59, 0xc12e, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x2, 0x8, 0x9, 0xb0, 0x3, [{{0x9, 0x4, 0x8a, 0x0, 0x0, 0xe4, 0x72, 0x45, 0x6}}, {{0x9, 0x4, 0x88, 0x3, 0x0, 0x7e, 0x5a, 0x26, 0x40}}]}}]}}, &(0x7f0000001840)={0x0, 0x0, 0x0, 0x0}) ioctl$TCSETS(r3, 0x5402, &(0x7f0000000080)={0xa04c, 0x35e8b534, 0x1, 0x18, 0x13, "53af0f0b4ece6c29bf81c173f4a8f5f73eb62f"}) sched_setattr(0x0, 0x0, 0x0) syz_open_procfs$namespace(0x0, 0x0) syz_io_uring_setup(0x2f90, 0x0, &(0x7f0000000100), 0x0) epoll_create(0xaf2) mq_timedsend(0xffffffffffffffff, 0x0, 0x0, 0x26aadf42, 0x0) close(0xffffffffffffffff) unlink(&(0x7f0000000180)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00') ioctl$SNDRV_PCM_IOCTL_HWSYNC(r0, 0x4122, 0x0) 30.876928688s ago: executing program 0 (id=1974): mkdir(0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = gettid() timer_create(0x0, &(0x7f00000005c0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) memfd_create(&(0x7f0000000040)='dev [\x1dx#l', 0x8) r2 = socket$inet6(0xa, 0x2, 0x0) r3 = syz_open_dev$sndctrl(&(0x7f0000000440), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r3, 0x40045532, &(0x7f0000000040)) r4 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040201, 0x0) r5 = syz_open_dev$sndpcmp(&(0x7f0000000200), 0x0, 0xa2c65) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f0000000500)={0x0, 0xfffffffffffffd83, 0xfa00, {0x0, 0x0}}, 0xfdbc) ioctl$SNDRV_PCM_IOCTL_SW_PARAMS(r5, 0xc0884113, &(0x7f0000000680)={0x1, 0x0, 0x202, 0xce, 0xffffffffffffffff, 0x200000000000008, 0x1000000000000008, 0x2, 0x8, 0x40000000000002a, 0x80000009, 0x2}) ioctl$SNDRV_PCM_IOCTL_STATUS_EXT32(r5, 0xc06c4124, &(0x7f0000000840)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}) sendmmsg$inet6(r2, &(0x7f0000001700)=[{{&(0x7f0000000000)={0xa, 0x4e21, 0x0, @local, 0x1}, 0x18, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="24000000000000002900000032000000ff1100000000000000c7e0cfc90800000000000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00'], 0x28, 0x7ffffff7}}], 0x1, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x100000, 0x0) r6 = open_tree(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) mount$bind(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000280)='./file0/file0\x00', 0x0, 0x1000, 0x0) mount_setattr(r6, &(0x7f0000000040)='./file0\x00', 0x1100, &(0x7f0000000300)={0x80, 0x88, 0x80000, {r6}}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r7 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) connect$llc(r7, &(0x7f0000000180)={0x1a, 0x0, 0x0, 0x8, 0x3, 0x0, @random="a1fb75d10a28"}, 0x10) r8 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$sock_ifreq(r8, 0x8992, &(0x7f0000000180)={'vlan0\x00', @ifru_names='dummy0\x00'}) 26.249965554s ago: executing program 1 (id=1988): openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={0xffffffffffffffff, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000140)={'\x00', 0x2, 0xe77f, 0xffffffff, 0x0, 0x1852, r1}) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) ptrace$ARCH_SHSTK_LOCK(0x1e, 0x0, 0x1, 0x5003) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, &(0x7f0000000000)={0x1, 0x0, [{0xc0010001, 0x0, 0x200000000400}]}) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) setitimer(0x1, &(0x7f0000000000)={{0x77359400}, {0x20000000000000}}, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0}, 0x50) r6 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x10, 0x1c, &(0x7f0000000040)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r6}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3, 0x9, 0x0, 0x1, 0x3801}, {0x2c}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x0, 0x20000000}, {0x3, 0x3, 0x6, 0xa, 0xa, 0xfff8, 0xf1}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {0x7, 0x0, 0xc}, {0x18, 0x2, 0x2, 0x0, r5}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 25.220618394s ago: executing program 1 (id=1989): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000980)={'batadv_slave_0\x00', 0x0}) sendmsg$ETHTOOL_MSG_FEATURES_GET(0xffffffffffffffff, &(0x7f0000000a00)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000009c0)={&(0x7f0000000a80)=ANY=[@ANYBLOB="e0000000", @ANYRES16=0x0, @ANYBLOB="000225bd7000fcdbdf250b000000180001801400020064766d72703100000000000000000000880001801400020076657468305f746f5f626174616476001400020064766d7270310000000000000000000008000100", @ANYRES32=r1, @ANYBLOB="0800030002000000140002006970766c616e30000000000000000000080003000000000008000300020000001400020076657468305f746f5f7465616d000000140002006e7230000000000000000000000000002c00018008000100", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=r1, @ANYBLOB="13e279e2384b2b0a8890870cfba2123f371ac942308ee1ca480608aaa2866d9bfae70fc8f0a91c6a48cfb97b06c09020148f2d518819433cde4ee1d3aaa39c995dfe551816161085854edc45f831f3753bb146d781f8ff80bc0f176234938e531d2d7bad4e78a4a283e54a7a544462420ee12100e7a44151", @ANYRES32=r1, @ANYBLOB="08000300010000000800030001000000"], 0xe0}, 0x1, 0x0, 0x0, 0xc890}, 0x24000080) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TCSETS(r2, 0x40045431, &(0x7f0000000dc0)={0x0, 0x3, 0x1000002, 0x0, 0xff, "d4e9002b2c000000ff00"}) r3 = syz_open_pts(r2, 0x0) r4 = dup(r3) ioctl$TIOCSETD(r4, 0x5423, &(0x7f00000000c0)=0x3) dup3(r2, r4, 0x0) r5 = dup3(r3, r2, 0x0) sendmsg$nl_route(r5, &(0x7f0000000c80)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000c40)={&(0x7f0000000cc0)=ANY=[@ANYBLOB="680000001c0002002bbd7000fbdbdf250700", @ANYRES32, @ANYBLOB="0100b8050a000200aaaaaaaaaa3f00000a000100ffffffffffff00000a000200aaaaaa0900000000000000082c4dcd054644aaaa000208000b00ff000000060005000000000008000100e00000010800010064010102060006004e240000"], 0x68}, 0x1, 0x0, 0x0, 0x1}, 0x0) r6 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000540)={&(0x7f0000000740)=ANY=[@ANYBLOB="9feb010018000000000000006c0000006c000000040000000e00000001000005ff0100000a0000000100000001000000030000000000000900000000010000000000001104000000040000000e0000000000000b03000000000000000100000d0000000005000000000000000400000000000002030000000f0000000000001201000000006161002b85cd185339323bc56322186cc1dea16ad9b3"], &(0x7f0000000600)=""/94, 0x88, 0x5e, 0x1, 0x7, 0x10000}, 0x28) bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="1d00000003000000b1d000ea0400000020000000", @ANYRES32, @ANYBLOB="0600"/20, @ANYRES32=0x0, @ANYRES32=r6, @ANYBLOB="05000000030000000200"/28], 0x50) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r7 = getpid() sched_setscheduler(r7, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000aae000/0x4000)=nil, 0x4000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r8, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r9, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r8, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_emit_vhci(&(0x7f0000000080)=ANY=[@ANYBLOB="043d0eaaaaaaaaaa5f9e1a2b18ab4f0101"], 0x11) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r10 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$IP6T_SO_SET_REPLACE(r10, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x4e0, 0x348, 0x18c, 0x203, 0x0, 0x19030000, 0x410, 0x2e0, 0x2e0, 0x410, 0x2e0, 0x3, 0x0, {[{{@uncond, 0x300, 0x300, 0x348, 0x0, {}, [@common=@unspec=@bpf0={{0x230}, {0x13, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x16}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x6}]}}, @common=@hl={{0x28}}]}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz1\x00'}}}, {{@uncond, 0x0, 0xa8, 0xc8}, @unspec=@NOTRACK={0x20}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x540) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000000080)={0x50, 0x0, 0x0, {0x7, 0x29, 0xfffffffa, 0xffffffff989dfd54, 0x8000, 0x4, 0x3ff, 0x4, 0x0, 0x0, 0x10}}, 0x50) syz_usb_connect$cdc_ncm(0x4, 0xd1, &(0x7f0000000040)=ANY=[@ANYBLOB="12011003020000182505a1a44000010203010902bf0002010650000900000000020d00000524060001082400a9b30d240f010a0000000300ff000606241a05001407240a050905580c240c00000000a90c0900030424020204240200042406024424"], 0x0) syz_usb_connect(0x3, 0xf5, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000772aed408680070bb96c010203010902e30003dc2000000904003f000e01000505a40600010524007f000d240f0104000000080000000006241a03000a05240101070424020a1524120009a317a88b045e4f01a607c0ffcb7e392a09044c03003a92a2010a240109000102010205240401050c2402"], 0x0) 23.900703359s ago: executing program 0 (id=1992): syz_usb_connect(0x0, 0x24, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0xe4, 0x68, 0xce, 0x8, 0x2013, 0x1faa, 0xcaf7, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x11, 0x0, 0x0, 0x8b, 0x87, 0x62}}]}}]}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0xd, 0xd, &(0x7f0000000740)=ANY=[@ANYBLOB="180200000000000000000000ffffffff851000000100000095000000000000001800000020646c2500000000002020207b1af8ff00000000bda100000000000007010000f8ffffffb702000008b19200b703000000000000850000003100000095"], &(0x7f00000000c0)='syzkaller\x00', 0xb, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) r0 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r1 = socket(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x6) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0xa) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000580)=ANY=[@ANYBLOB="280000001e00431b0000000000000000070000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n', @ANYRES32=0x0], 0x28}}, 0x0) r6 = openat(0xffffffffffffffff, &(0x7f0000000100)='./file1\x00', 0x448240, 0x1ff) sendmsg$IPCTNL_MSG_CT_GET(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40094}, 0x20000804) write$binfmt_elf64(r6, &(0x7f00000005c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x4, 0x0, 0x0, 0x87fff, 0x3, 0x3e, 0xffffffec, 0x398, 0x40, 0xd6, 0x0, 0x5, 0x38, 0x4, 0x0, 0x2}, [{0x60000000, 0xf, 0xfffffffffffffffd, 0x9, 0x0, 0x8, 0x7fff, 0x512}, {0x6474e551, 0x7, 0xfffffffffffffffc, 0x6, 0x8, 0x7, 0xfffffffffffffff7, 0xfffffffffffffff8}, {0x3, 0x81, 0x7, 0x5, 0x101, 0x0, 0x7c, 0x3}, {0x70000000, 0xfffff994, 0x4, 0x7, 0x676, 0x9, 0x4, 0x5}]}, 0x120) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x0, 0x0, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x2, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="1c000000210005010000000000000000020000000000000001000100433a720daf1775a2fe9424d17a7cf846eb5397786ded27290ff3d4eaef267ed0d3326135eeca78a6c0a750286fc074af91a5172b9dd7754089973185d51475deda8747f6b20cf7e2142c721fea4a040765c8"], 0x1c}}, 0x0) setsockopt$nfc_llcp_NFC_LLCP_MIUX(r1, 0x118, 0x1, &(0x7f0000000080)=0x61f, 0x4) ioctl$SNDCTL_DSP_GETFMTS(r0, 0x8004500b, &(0x7f0000000040)=0x401) r7 = syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x0) ioctl$int_in(r7, 0x5452, &(0x7f00000001c0)=0x1) close_range(r7, 0xffffffffffffffff, 0x0) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x882) openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) epoll_create(0x4156) 23.619675313s ago: executing program 0 (id=1996): ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xee01, 0xee01}}, './file0\x00'}) open_tree(r0, &(0x7f0000000140)='./file0\x00', 0x1800) (async) r1 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000440), 0x1, 0x0) ioctl$KVM_SET_MSRS(r1, 0x4008ae89, &(0x7f00000004c0)={0x1, 0x0, [{0x8ec, 0x0, 0x3}]}) (async) r2 = add_key(&(0x7f0000000700)='pkcs7_test\x00', &(0x7f0000000740)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc) (async) r3 = add_key$user(&(0x7f0000000780), &(0x7f00000007c0)={'syz', 0x3}, &(0x7f0000000800)="3a95cc28a474d8620f569be3ddfe750752a3dc824b2bbb46374af7ab77d2351dea4e0bdf00761c7a3e3b295cff4b59e62a3db9fc4e4bc686906b1c88bd29959440b3ff6abd6e74e02806b04420d6a96bfae6fce5b8e6c0b204be26be0621ab9cd86b56a6f222af49a48aa213183aeedc00b4e34b68756b4eb1a272a48aa6cfa51d51daf351bccd16c35082bda6453b97c7fe4f1f4a79b06b4fb1c8f68bd95e594226c17d9d5cc81f51b1d648dbfec2e166f63c4f60f0063aef4157c90742e5880d4b64180bf6f50639a37b8b2f0785131edef0de3ec98680d2cd11700cdbb05d0bf83130afdd", 0xe6, 0xfffffffffffffff8) (async) add_key$user(&(0x7f0000000900), &(0x7f0000000940)={'syz', 0x0}, &(0x7f0000000980)="d0e1945aa97b1080be174f654721339ad6565477f29a9fb1ffbcb5f01334e4228b7b", 0x22, 0xfffffffffffffffe) r4 = add_key$user(&(0x7f0000000300), &(0x7f00000000c0)={'syz', 0x0}, &(0x7f0000000bc0)="666ffb71a0034f0d46bf5f846adf3ebbed939eaba0a3103d2ec21202392f9515275382f3e68c17577f122efc7d7c4732dfdefcfb99ef8e945afbd5b1589f4e364057e1ae8bff166af06bc671ffc05bf7c2081b68cd38c1b88f82257200234d2dddc09b6a90b5dd4c87f007d4bcc7808fbaabace48598394f5dc397147128a73f3de0bba7ecd772bc9bb37da0d755bb5a14ee49b2c57a2e9dda84757fcb2ad9d0c7eca621741d057a41c65e0f914dbeed90ab9a8aa698ed3ee0d878c2690400bde74ee315f3c9f8b4f3dc745d18524ef021cb8e0fd10ca3a06e6fc2bbe8c7754bded20a59ff3e4b04fb74f9db0c488c7e16110ee71f7bb5974e9f56034c2734aa334e0c177f65116f382f704f9dcacff94fb252b74e4d4f2049c7e7b7b453bc58777d48486fe85964d7d56dc56d680f366998e34fb26b9c158a26d70243077cf893afac4658c441539f64395c261faf183f8f489c590ea3c2b23be6c9af06caa32cf73d70c667f4e03feaecafeac470ad5f14d911be97b232d43f32ec54ef563e413c943023682a3f9a34bddd2081a681838ea39b6ca5f195a80eef5d95d8db74158cb547843bb2e7bc0b9f10c0aea382613b8756c51d296a520efc127142188a5baaaab2f128e341c91999435eb011b1c9b1b0cdf0db33d4f1371194e4d1ae53ecc25c75108c495ac0cb6a0c005fe4e7e17f87100f1438f02f702ff04482e69d79efb8e91f6d48582cee7ddfbb6e82079743cb3e5a80861f27feb991abf9fa86866b7551ee6935c54d849269f60f7a52708058c478c49b2b402fa6ae0d184aef417a79e8fb99f75d57dda3474184767a8ead663b41b9aebad7b0902280735215873b01e8a0a91be98111c051a9edc1b737caa3de13d7a422a252ec25df80da9800e207bf9dd5ef3144033bb0689c21361d3e372d20b1fc843a70e6167d6fb7e7d9653d2f9a8310e2006e80ee1df0d09d7d30f4827f46f34269e27e9f340edc8143fca5170ca369b15b59e3b8d9f1d1d336088e2f4b2b784004602d0b6c05ef4e9284589ca56398ce876fd8e9eaa02cc242367522f03e2a24df354b3537da30acd488a1fc2e148f7ab68d80c03d036f764913795e820dac2831a5b0e6e4bc2b6a557a58bf08533479fc9c5bd2e3f9e91c51147b465d9109a4340f3f7b306b5a58247ad95703c4c8979f390bb2f79a9661004f619964b03045fdade1f06e762eaac89bc4e5a15228e7ea47002dec4f6da1c7daf3801212c66c3b7bf810175a8eefb64431e431b92b3aea79581c057fb7e595b4e6ca848ff262059ce974cd0c362c87f6772101963e3d45c21ee63830f4e894fc95bba1bae97426332c55916864a5bc3b951c0e63aebed53ef08e4637a83030130fca390797766a1275c23e4e8c138773dd351fc44196f840dc77cc6dc1c514424ef77ef95da326e62f7f460be4da5c91e75bde6619587fe188b2a0f203568ecb20f3c66b86654e7541cbe90e96f56df51b0548499b3b2726b10d3040a4914dd6deae8a8bd3a7ecc96f9e1b40da15523cd8ac8be96c3cb4f7077a8d9c5ef17dc6ed93da1f65277250e5a3d8ab27e7d5f30d3c2ce2b86bb417e943d3be841eb8b7b98d458bd662977cab9ebe2572d8def7beaacd2c5223984257fb6447032e5f24624c06c649a01cdc4d7a964d7f89410f327809a2405927c7d3de37e21eb69fcbc73999b4928d96c985197b71e83f3dbd1d9ddcac399df01a422c3eaed4ca674e5247f8596394faa5835cd9bbbd43fa60d91a65ba485279f8af5d66ea5d926392734279fe4051e58fc8ad1e7a1ac05b9f8e8c72ea098309da3a6b6b7ae3d429c4d3af221297ffa653d66fd755148644ff7974a2edac3309af9589f61ae0d0548f0d54d17bcafdcbccffbad4521a0bc126c479a8b9fdfbb66a85888f6753a4538123ca17bb8eb3d43b03e46171588a5bd2404652e2729aa16fec4175bca51004270889838973c20fe92629bf032adf77dd3193e4494f9ef937b6b750b6bf083adf471f4331dd836995f038ecd2bd31d828c02632a719728806234da8839ced2b09e926c83f9109bfd8309c53dc4864efd44cda4b6021cd098fda9d7309609f836ea14e5707e72417483648abf6946a7f4d18d7d7eabb6931e41a50680fe7453a7181dbb1a3f78d1497dfe88d5bd2f18ef94d14fd6272668512e55a168320d6fcf1bc9cf021a9dec2fa6980a313aa14e8388f0d61ba8802121c1514be63689cfa21359939e483a473e62662f7b8e0f512a3868b4d2e1ef0e3fb4b45c6b82d769ca882a3dfc1117cdc3e1d257a92bee26f7474ea369d21dc291606ecf3f766c67f77d8888fed1e99c0527c1d811a4ef2e7e2d693145631608b7e8742699a197d1c4f89bd7c508504960106e0078593f8188b9881a04adee7e19d107dd54ac43af8c5bb9a4598cf8bc36daafcf8cf6b72e03846150881aa4621a81c035bd8fb011ba862926622c2b949b52d99c3e6e23e9741196f7baa2b7f666e449a8fae24f38ee19a1e9d218bd8457e5eb19ee89829546dea8b7df1fd1f54e87617caab1172bd5632e7c890f009300a2b61cbfec25e93198e98492abe99f865d68772d1fe4d6f1cac0427a82f78de12633a808766c54f83a79579efcf7ca762fcd33c9a538136fd9d23438c4c554a448786e600898e800380aca86ac0e17989162b35f48de9451b5717aa889f5e67e7a6432497fccd9cc82fff86dd4108020000000000000021274856dc733761eaa281f437a70edf53fd2c8b395b9583a5daa4e0c93276794b3b6e1b8996485b29e7793c56af3d2ffeb222e48171ee2ed51f0d380c0e7cb73371fab0ae20b89ee06f9ae9c1c99f7c43b92f47d2db0785b872de4d3b46dbb6c1bbf0006c7e4f83ee1d1c54c73fcf834d396e1dde615da1592e941556a7306d4de0fd1b4f07cdc6b69413de69cb07343ad5c3323e94b3cb0ffbbcf88584caf3131001470a317e47ea5dfa980aa89f6b2b9e46cc3568e6a0304ed6e22f4cd39ec3e25d5f7b115772212f8067c2e6e1feb7c1e2d47eaeed3e4b0f4b947c0bd1e71f47d93dd49ae463fbf505156606beede1b7757bd2c8261536c80715c1984e9c4a724f203650865285d0aee545134441a9a478ccfb93255ef9e1940e6fb8d42c1856fd45087f85d62dcf37f877d10014c3fa42832683a9f388f6287a8c410429063d995cee268d4d5e0b27c929d0746955f45497e6c19bfc9a51f3c477cd303a0790c752707cd620d1ddcf38b78a3b752103d4c2670ab89761ba57bdf7e07404e27b07a8b56002a77f400f3126d37c7a3188d9c2d7e94d66954257818966c4d6a0adb6fc79549c3476561c651489dfa2ef142ca9a99d97a009a3a7afc6a36c854d6a3587e6a5e390cbb0b54526cadc82c3b7713efa9aae79fdfa74fec67384ca97e0164fbf092cdf3b6b64330b93d67df99105306fbb63745305251041c7d2bdb03f4b8f096a1150d4d0c10b3d69c8c67a5cd689a0bdb74ba20877445e34e3c0e90ca04b0895e7a695f77eb852fc0529775cde832c08081356314fe4a0e192e18d4c106db91a119238a34e402515e16290ede4dd8086235bea273b264f06127de700ba4d836037d81dc29a4aa1eb049225a912bb89178bb574ce095a721220bf1bfba7b58c998132e39c2973468d28cf2dcaf443ff659d31a63263f4b397c2aa50519511cee5660599073c0730aa1e62b60f479fbd43f3197730866437ef91655b61f27ae5f0784d61c593a71c44f3ef746a8814e943463dbe5fc50cec56382962c0d3c046c861640d11d8decacda8be9f5a1354e372d43bdaf863e9b8d587e98dfad90f61ee024dd24d9d30b8e132fe5bf60c81f8f00a419faab2f05810078ba9d8bc519bf830d97a2370392a40339b81cbe01efaf6d432b5e08cfac323e424715199b31e106b04085c47b5ea5fcf739903c7e335df30485a3fb90fd873b12cd5e00d1a2e06d8a82b990c813a9448bb215fccb5e0a8bf31b9b2d0090375181de922ef1a3b0eeeb885acc6812c7326e3b95d7fcd38358d0a290b17b5b54ab62e0cc726e3698cb2fc3dcdfb8cc42800179ea4e97bd36ae200568ccbb4d460e426f37e62b71c9463c4f647683def73060000000000000087d907b9828b889148d66a7c133d74ebebc57dce91ece068d16ab13b82aaaa942ef7a7649262448ea4486c56568da880a64b91f75e7773987876fdbaa482acf88e0cf079fd63d425678068917ef226dc80d6f254f0d8bb3492ca431b17b7ec49712dd3ef2137adae0aca7c971b9f2826d50f9e1a13978e99a0deb67681096e8184be092e6c897dbd1d7fb2e593d14e472f04181c4bf679a0392c88ab6aaed8e5527bb1a3dd6bb61e5431c8c1aad54ac74e5428376a2206089f9079c7a61b22442245ead4906763be54b430cacb38e84ac8c6ae774b3cca96ad471cf1a4a7698de79c2379f44b93d685e71759f26cdc0b42ffc3f0d76ca0d9f30acf0539ebcfa84ad89300a2db4f0f3280ad10e4b0f306d06b76312cc818b06076a05fbf12a2111c91f7e0c24483a21321bc474d51901099c7fee46cc20c63f15b58b3f614d09c9a1e7b175b956704fdd3d8ef348a732545f0d184211aa8c714dceaf0a567356c193f36b860dc2ff45ef58a16dc5e7f4eae7e3eacceec04556daa258fecff12fd62b0080103cb6c16822ed98f86e3f771ce560ca75e256aafbb7976be668bc25889ceafca0ca307802ce30544fd05a608becd9e21dd08abe9b9d6fda8e0a5cc1efa0434b4322d46ebe3b5f4178ea1082d10e1137ac42c8d492aa1318a7bc63231eeb8f8ad011719922306678724b07cc282282a0bd330fa2fdfdb92c646e40ed3149b3cfbb194fadae1b8f6dc2dbf1f75fabd60cf845981ce4e76f3ebde2dde1de68110f9768ee6e113cfdf6d3ec743299e550d5a5ff26d876c84bab2c6a5c321bc7211ef54c9984123f189e4d9ba6a13a934619165e4554a08ccb66602fd49b928faff4da9530faaabf19d7f58fe2e19522131960ec7a44145015e10310d8a1b61c086f2ad4555e3d10e127aa99ed9017c1d9480b848f3a866797664e48d80e87d1233db867ebed00a0a324ad12f240af4b18c67422f7b23a0a3c8d8994b6ffe1cfcea4e183692bcc0588ab7b6b4356e194808cba22e991e484bc0c7e6c9e386631de945b04c52580eba0738e4b2e4d34bcafb48471eaa3f515e00c5eaa94b2e92d8e3b800bde6b5139bb14d340d5a88f1b9599b63f064331cb601e3804970a4d3db42b91c024ba414c0e48ca32b23b5a965c767ae47be71c2cab178c117fc5ee36eacb685f131d3533d005e116cd10bb8119f2cff71d4e02b35391b16fb59e913a63abbf30df4910805a45a3a4d6477e7ae3dc0f866757ed61c275a0b673ddf1810d12b6fb22977d00b27e358231a577f5f51968b74433950931b756b04f68df790ee311ad7c30b03fce07a62b7666f1c07855821764f43f224b3fa5fae1a15af5be7f980826533847cd3bc368fd685da7a7b38fd96743e8aac5ddf2560d9c55b185b052e52379a1f853f229bd9d2d86404ea2214b8d74a14a2730c46155b140759f9b73424b7f45d28a23ad78c54d116ce754bf56681f2cdae902c977eec77cd5b08921b479a070a0b0369978578966825196549fdec10912a831f9807d00247a37c2f8f8717be92e41b63aa7de0fad14e26f9e77b2d3b443f2669b61ceeeb972761ce831cdcf0d8b2b5198c263b68fb2368db0617f212f228180888a1f71cc3914e13d60e1b4d262b91550494bfd0f1000000000000", 0x5c6, 0xfffffffffffffffb) keyctl$dh_compute(0x17, &(0x7f00000009c0)={r2, r3, r4}, &(0x7f0000000a00)=""/119, 0x77, &(0x7f0000000b80)={&(0x7f0000000a80)={'sha256-avx2\x00'}, &(0x7f0000000240)="30f194f11302f30e0c6c8486f9957f1d4536f0b73bf34f24c21aaf48a21c833b0844d2343103d63f7608b0c2de13b0cfb7f56ac45176fdc8d6160d4eb7ec3e71e1abac1b4ce2bbdcac4bd03c80285830e9dc1abb8fb4aac347b5539aa7aab36a2fe0a0537190ccbe8510fd32a7c5d3468900b061d0ce495d2b52c50a0a3d8674c70fc9094ff0baab82a4ab474a7b", 0x8e}) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0}, 0x18) (async) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0xe) (async) r5 = getpid() sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x7) (async) mmap(&(0x7f0000191000/0x4000)=nil, 0x4000, 0xb635773f06ebbeee, 0x11, 0xffffffffffffffff, 0x0) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r6, &(0x7f0000000180)=@abs={0x0, 0x0, 0x4e20}, 0x6e) (async) socket$nl_rdma(0x10, 0x3, 0x14) (async) getpid() (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r7, &(0x7f000057eff8)=@file={0x0, './bus\x00'}, 0x6e) (async) syz_emit_ethernet(0x46, &(0x7f0000000340)=ANY=[@ANYBLOB="fffffdffffffb68a186f15a3d1bacd1b00000000000086dd67001b0100103afffe880000000000000000000000000201ff021e00000000000000000000002f873d456605a9000186009079ff02030001000000f6ffffff"], 0x0) (async) sendmmsg$unix(r8, &(0x7f0000000000), 0x651, 0x0) (async) recvmmsg(r7, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) (async) mknod$loop(&(0x7f0000000200)='./file0\x00', 0x2480, 0x1) mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000080)='ubifs\x00', 0x0, 0x0) (async) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000002c0), r9) 23.000968272s ago: executing program 42 (id=1996): ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xee01, 0xee01}}, './file0\x00'}) open_tree(r0, &(0x7f0000000140)='./file0\x00', 0x1800) (async) r1 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000440), 0x1, 0x0) ioctl$KVM_SET_MSRS(r1, 0x4008ae89, &(0x7f00000004c0)={0x1, 0x0, [{0x8ec, 0x0, 0x3}]}) (async) r2 = add_key(&(0x7f0000000700)='pkcs7_test\x00', &(0x7f0000000740)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc) (async) r3 = add_key$user(&(0x7f0000000780), &(0x7f00000007c0)={'syz', 0x3}, &(0x7f0000000800)="3a95cc28a474d8620f569be3ddfe750752a3dc824b2bbb46374af7ab77d2351dea4e0bdf00761c7a3e3b295cff4b59e62a3db9fc4e4bc686906b1c88bd29959440b3ff6abd6e74e02806b04420d6a96bfae6fce5b8e6c0b204be26be0621ab9cd86b56a6f222af49a48aa213183aeedc00b4e34b68756b4eb1a272a48aa6cfa51d51daf351bccd16c35082bda6453b97c7fe4f1f4a79b06b4fb1c8f68bd95e594226c17d9d5cc81f51b1d648dbfec2e166f63c4f60f0063aef4157c90742e5880d4b64180bf6f50639a37b8b2f0785131edef0de3ec98680d2cd11700cdbb05d0bf83130afdd", 0xe6, 0xfffffffffffffff8) (async) add_key$user(&(0x7f0000000900), &(0x7f0000000940)={'syz', 0x0}, &(0x7f0000000980)="d0e1945aa97b1080be174f654721339ad6565477f29a9fb1ffbcb5f01334e4228b7b", 0x22, 0xfffffffffffffffe) r4 = add_key$user(&(0x7f0000000300), &(0x7f00000000c0)={'syz', 0x0}, &(0x7f0000000bc0)="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", 0x5c6, 0xfffffffffffffffb) keyctl$dh_compute(0x17, &(0x7f00000009c0)={r2, r3, r4}, &(0x7f0000000a00)=""/119, 0x77, &(0x7f0000000b80)={&(0x7f0000000a80)={'sha256-avx2\x00'}, &(0x7f0000000240)="30f194f11302f30e0c6c8486f9957f1d4536f0b73bf34f24c21aaf48a21c833b0844d2343103d63f7608b0c2de13b0cfb7f56ac45176fdc8d6160d4eb7ec3e71e1abac1b4ce2bbdcac4bd03c80285830e9dc1abb8fb4aac347b5539aa7aab36a2fe0a0537190ccbe8510fd32a7c5d3468900b061d0ce495d2b52c50a0a3d8674c70fc9094ff0baab82a4ab474a7b", 0x8e}) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0}, 0x18) (async) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0xe) (async) r5 = getpid() sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x7) (async) mmap(&(0x7f0000191000/0x4000)=nil, 0x4000, 0xb635773f06ebbeee, 0x11, 0xffffffffffffffff, 0x0) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r6, &(0x7f0000000180)=@abs={0x0, 0x0, 0x4e20}, 0x6e) (async) socket$nl_rdma(0x10, 0x3, 0x14) (async) getpid() (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r7, &(0x7f000057eff8)=@file={0x0, './bus\x00'}, 0x6e) (async) syz_emit_ethernet(0x46, &(0x7f0000000340)=ANY=[@ANYBLOB="fffffdffffffb68a186f15a3d1bacd1b00000000000086dd67001b0100103afffe880000000000000000000000000201ff021e00000000000000000000002f873d456605a9000186009079ff02030001000000f6ffffff"], 0x0) (async) sendmmsg$unix(r8, &(0x7f0000000000), 0x651, 0x0) (async) recvmmsg(r7, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) (async) mknod$loop(&(0x7f0000000200)='./file0\x00', 0x2480, 0x1) mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000080)='ubifs\x00', 0x0, 0x0) (async) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000002c0), r9) 21.385890325s ago: executing program 1 (id=2004): r0 = syz_open_dev$vbi(&(0x7f0000000080), 0x3, 0x2) syz_open_dev$radio(&(0x7f0000000000), 0x0, 0x2) openat$vcsu(0xffffffffffffff9c, &(0x7f0000000040), 0x50d01, 0x0) ioctl$VIDIOC_S_OUTPUT(r0, 0xc004562f, &(0x7f0000000100)=0xd) 21.265316871s ago: executing program 1 (id=2005): mkdir(0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = gettid() timer_create(0x0, &(0x7f00000005c0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) memfd_create(&(0x7f0000000040)='dev [\x1dx#l', 0x8) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x4e, &(0x7f0000000100)=0xfffffff7, 0x4) r2 = syz_open_dev$sndctrl(&(0x7f0000000440), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r2, 0x40045532, &(0x7f0000000040)) r3 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040201, 0x0) r4 = syz_open_dev$sndpcmp(&(0x7f0000000200), 0x0, 0xa2c65) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000500)={0x0, 0xfffffffffffffd83, 0xfa00, {0x0, 0x0}}, 0xfdbc) ioctl$SNDRV_PCM_IOCTL_SW_PARAMS(r4, 0xc0884113, &(0x7f0000000680)={0x1, 0x0, 0x202, 0xce, 0xffffffffffffffff, 0x200000000000008, 0x1000000000000008, 0x2, 0x8, 0x40000000000002a, 0x80000009, 0x2}) ioctl$SNDRV_PCM_IOCTL_STATUS_EXT32(r4, 0xc06c4124, &(0x7f0000000840)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000001700)=[{{&(0x7f0000000000)={0xa, 0x4e21, 0x0, @local, 0x1}, 0x18, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="24000000000000002900000032000000ff1100000000000000c7e0cfc90800000000000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00'], 0x28, 0x7ffffff7}}], 0x1, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x100000, 0x0) r5 = open_tree(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) mount$bind(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000280)='./file0/file0\x00', 0x0, 0x1000, 0x0) mount_setattr(r5, &(0x7f0000000040)='./file0\x00', 0x1100, &(0x7f0000000300)={0x80, 0x88, 0x80000, {r5}}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r6 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) connect$llc(r6, &(0x7f0000000180)={0x1a, 0x0, 0x0, 0x8, 0x3, 0x0, @random="a1fb75d10a28"}, 0x10) r7 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$sock_ifreq(r7, 0x8992, &(0x7f0000000180)={'vlan0\x00', @ifru_names='dummy0\x00'}) 19.176826732s ago: executing program 5 (id=2013): r0 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000000000)={0x0, 0x400}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, &(0x7f0000000080)={0x3, 0xc, 0x9, 0x8, r1}, &(0x7f00000000c0)=0x10) r2 = accept4(r0, &(0x7f0000000100)=@isdn, &(0x7f0000000180)=0x80, 0x80000) r3 = openat$vcsa(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) getsockopt$inet_sctp_SCTP_ADAPTATION_LAYER(r3, 0x84, 0x7, &(0x7f0000000200), &(0x7f0000000240)=0x4) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r3, 0xc0189373, &(0x7f0000000280)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r4, 0x84, 0x79, &(0x7f00000002c0)={r1, 0x7, 0x6}, 0x8) (async) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r4, 0x84, 0x79, &(0x7f00000002c0)={r1, 0x7, 0x6}, 0x8) syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), r4) (async) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), r4) sendmsg$NL80211_CMD_SET_STATION(r3, &(0x7f0000000580)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000540)={&(0x7f0000000380)={0x1ac, r5, 0x100, 0x70bd2b, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_STA_EXT_CAPABILITY={0xb7, 0xac, "6e788d8e89facb27273070da17ad7cb48cce0454350e30b740718fc0eef3e4e91558c1d3f6b607452d38a033013868451e04cd9b12c26c64fc68c7656ada4044f705b77aa61c95bcd1dac11e22734cae4a85cd518ab4dfe9fd4c0d1f07099a0e652fc44b5e7614cafc3ba846100a46c9c11b1aa8ca8f8a69fd182606497c19a18527ff48233072f85b3c15545b1a2ebd018bbf452d0aa925b82324bd9cbd7c59410695648fcbf4ad7e1a6f9ccdc65f91e377b1"}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x4}, @NL80211_ATTR_MESH_PEER_AID={0x6, 0xed, 0x47d}, @NL80211_ATTR_AIRTIME_WEIGHT={0x6}, @NL80211_ATTR_STA_SUPPORTED_RATES={0x19, 0x13, [{0x4, 0x1}, {0x9}, {0x6}, {0x16, 0x1}, {0x24, 0x1}, {0xc, 0x1}, {0x36}, {0x9, 0x1}, {0x5, 0x1}, {0x12, 0x1}, {0x6c, 0x1}, {0x18, 0x1}, {0xc}, {0x12}, {0x36, 0x1}, {0x18}, {0xb, 0x1}, {0x16}, {0xb, 0x1}, {0x5, 0x1}, {0x16}]}, @NL80211_ATTR_STA_WME={0xc, 0x81, [@NL80211_STA_WME_UAPSD_QUEUES={0x5, 0x1, 0xe}]}, @NL80211_ATTR_STA_AID={0x6, 0x10, 0x686}, @NL80211_ATTR_STA_PLINK_ACTION={0x5, 0x19, 0x2}, @NL80211_ATTR_STA_EXT_CAPABILITY={0x8e, 0xac, "bafb8a414dadd7e037c7a25c001d5377259ea2005000f546ab7a209f7c0826ace35aa2f70a22e6e9f2f18fa784725865f859752a6ba820299b0e2ad248dfce7c503ac0eb2fc752814c5040680defb09867a56f2464f723cda159be74b05156342595f223f4c1006ae38e13476181403c25eeb091fb818c1dd0a98f32ee5196fa7876b17bfe192ee5eb3d"}]}, 0x1ac}, 0x1, 0x0, 0x0, 0x4080}, 0x40000) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nfc(&(0x7f0000000600), 0xffffffffffffffff) (async) r7 = syz_genetlink_get_family_id$nfc(&(0x7f0000000600), 0xffffffffffffffff) ioctl$IOCTL_GET_NCIDEV_IDX(r4, 0x0, &(0x7f0000000640)) (async) ioctl$IOCTL_GET_NCIDEV_IDX(r4, 0x0, &(0x7f0000000640)=0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r4, 0x0, &(0x7f0000000680)=0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r3, 0x0, &(0x7f00000006c0)=0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r3, 0x0, &(0x7f0000000700)) (async) ioctl$IOCTL_GET_NCIDEV_IDX(r3, 0x0, &(0x7f0000000700)=0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r4, 0x0, &(0x7f0000000740)) (async) ioctl$IOCTL_GET_NCIDEV_IDX(r4, 0x0, &(0x7f0000000740)=0x0) sendmsg$NFC_CMD_DEV_UP(r6, &(0x7f0000000840)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000800)={&(0x7f0000000780)={0x44, r7, 0x300, 0x70bd2b, 0x25dfdbff, {}, [@NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r8}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r9}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r10}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r11}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r12}]}, 0x44}, 0x1, 0x0, 0x0, 0x40840}, 0x24004053) fcntl$setstatus(r2, 0x4, 0x2000) syz_genetlink_get_family_id$SEG6(&(0x7f00000008c0), r2) (async) r13 = syz_genetlink_get_family_id$SEG6(&(0x7f00000008c0), r2) sendmsg$SEG6_CMD_SET_TUNSRC(r2, &(0x7f0000000980)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000940)={&(0x7f0000000900)={0x30, r13, 0x100, 0x70bd26, 0x25dfdbfe, {}, [@SEG6_ATTR_DST={0x14, 0x1, @mcast1}, @SEG6_ATTR_ALGID={0x5, 0x6, 0xff}]}, 0x30}, 0x1, 0x0, 0x0, 0x800}, 0x8800) r14 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r14, 0x84, 0x77, &(0x7f00000009c0)={r1, 0xff, 0x1, [0x81]}, 0xa) r15 = openat$nci(0xffffffffffffff9c, &(0x7f0000000a00), 0x2, 0x0) setsockopt$TIPC_CONN_TIMEOUT(r2, 0x10f, 0x82, &(0x7f0000000a40)=0x3, 0x4) (async) setsockopt$TIPC_CONN_TIMEOUT(r2, 0x10f, 0x82, &(0x7f0000000a40)=0x3, 0x4) ioctl$IOCTL_GET_NCIDEV_IDX(r3, 0x0, &(0x7f0000000ac0)=0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r15, 0x0, &(0x7f0000000b00)=0x0) sendmsg$NFC_CMD_DEV_DOWN(r6, &(0x7f0000000bc0)={&(0x7f0000000a80)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000b80)={&(0x7f0000000b40)={0x34, r7, 0x400, 0x70bd26, 0x25dfdbfd, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r8}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r16}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r17}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r8}]}, 0x34}}, 0x4040) ioctl$sock_SIOCGIFINDEX_802154(r6, 0x8933, &(0x7f0000000c40)={'wpan4\x00', 0x0}) sendmsg$NL802154_CMD_SET_PAN_ID(r6, &(0x7f0000000d00)={&(0x7f0000000c00)={0x10, 0x0, 0x0, 0x5a2059abdade1a82}, 0xc, &(0x7f0000000cc0)={&(0x7f0000000c80)={0x30, 0x0, 0x20, 0x70bd29, 0x25dfdbff, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r18}, @NL802154_ATTR_PAN_ID={0x6, 0x9, 0x1}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x9c11b176b309f699}]}, 0x30}, 0x1, 0x0, 0x0, 0x8000}, 0x21) (async) sendmsg$NL802154_CMD_SET_PAN_ID(r6, &(0x7f0000000d00)={&(0x7f0000000c00)={0x10, 0x0, 0x0, 0x5a2059abdade1a82}, 0xc, &(0x7f0000000cc0)={&(0x7f0000000c80)={0x30, 0x0, 0x20, 0x70bd29, 0x25dfdbff, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r18}, @NL802154_ATTR_PAN_ID={0x6, 0x9, 0x1}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x9c11b176b309f699}]}, 0x30}, 0x1, 0x0, 0x0, 0x8000}, 0x21) 18.415697359s ago: executing program 1 (id=2017): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x1}, 0x94) renameat2(0xffffffffffffff9c, 0x0, 0xffffffffffffff9c, 0x0, 0x8c) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = syz_open_dev$usbfs(&(0x7f0000003f00), 0x1ff, 0xa401) ioctl$USBDEVFS_CLAIM_PORT(r1, 0x80045518, &(0x7f0000000000)=0x800) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r0}, 0x10) setreuid(0xee01, 0xee01) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="6800000010000108fdffffff0000000000000000", @ANYRES32=0x0, @ANYBLOB="000000000000000008001b0000000000400016803c0001800c0005"], 0x68}, 0x1, 0x0, 0x0, 0x44004}, 0x0) mlock(&(0x7f0000ffd000/0x2000)=nil, 0x2000) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000440)=ANY=[@ANYBLOB="b7000000fdffffffbfa30000000000000703000020feffff720af0fff8ffffff71a4f0ff000000000f040000000000001d4002000000000065040000000000000f030000000000001d440000000000007a0a00fe000000000f00000000000000b5000000000000009500000000000000033bc065b78111c6dfa041b63af4a3912435f1a864a7aad58db6a693002e7f3be361917adef6ee1c8a2a4f8ef1e50becb19bc461e91a7168e5181554a090f300020000fe275daf51efd601b6bf01c8e8b1b526375ee4dd6fcd82e4fee5bef7af9aa0d7d600c095199fe3ff3128e599b0eaebbdbd732c9cc00eec363e4a8f6456e2cc21557c0afc646cb7798b3e6440c2fbdb00a3e35208b0bb0d2cd829e65440000000000000000028610643a98d9ec21ead2ed51b104d4d91af25b845b9f75dd08d123deda88c658d42ecbf28bf7076c15b463bebc72f526dd70252e79166d858fcd0e06dd31af9612fa402d0b1100886475923906f88b53987ad0c33d39000d06a59ff616236fd9aa58f0177184b6a89adaf17b0a6041bdef728d236619074d6ebdfd1f5089048ddff6da40f9411fe7226a40409d6e37c4f46756d31cb467600ade70063e5291569b33d21dae356e1c51f03a801be8189679a16da18ec0ae564162a27afea62d84f3a10076443d64360f56e24e6d2105bd901128c7e0ec82770c8204a1deeed4155617572652d950ad31928b0b0c3dc2869f478341d02d0f5ad94b081fcd507acb4b9c65fee7dfcb59b854e9d5a17f48a7382f1b3fa4526650ea6cef13d000000225d85ae49cee383f936ad657b303ab841dc5049076b98fb6853ab39a21514da60d2ae20cfb91d6a49964757cdf538f9ce2bdbb9893a5de817101ab062cd54e67051d355d84ce97bb0c6b4a595e487efbb2d71cde2c1070bc6980fe78683ac5c0c31032599ddd71063be9261eee52216d009f4c52048ef8c126aeef5f510a8f1aded94a129e4aec6e8d9ab06faffc3a15d96c2ea3e2e04cfe031b287539d0540059fe6c7fe7cd8697502c7596566d674e425da5e7f009602a9f61d3804b3e0a1053abdc31282dfb15eb6841bb64a1b3045024a982f3c48153baae244e7bf573eac34b781337ad5905c6bbf1137548c22ee965a38f7defbd2960242b104e20dc2d9b0c35608d402ccdd9069bd50b994fd03000000022a579dfc0229cc0dc98816106dec28eaeb883418f562ae00003ea96d10f172c0374d6eed826416050000000bfe9b4a9c5a90ff59d54d1f92ecc48899b212c55318294270a1ad10c80fef7c24d47afce829ba0f85da6d888f18ea40ab959f6074ab2a40d85d1501783a7ab51380d7b4ead35a385e0b4a26b702396df7e0c1e02b884114f244a9bf93f04bf072f0861f5c0b000000004000eedcf2ba1a9508f9d6aba582a896a9f1ffa968eacea75caf822a7a63ba34015ea52acb1188883ad2a3b1832371fe5bc621426d1ed0a4a99705cc1b6912a1e717d29135753208165b9cdbae2ed9dc7358f0ebadde0b727f27feeb7464dcc536cbae315c7d951680f6f2f9a6a8346962a350845ffa0d82884f79adc287906943408e6df3c391e97ba48db0a5adbfd03aac93df8866fb010ae20e92bed1fe39af169d2a466f0db6f3d9436a7d55fc30511d00000000c95265b2bd83d64a532869d701723fedcbada1ee7baa19faf67256b56a41fd355b6a686b50f0937f778af083e055f6138a757ebd0ed91124a6b244f9acf41ac5d73a008364e0706a594817031fc2f52c8785fe0721719b3d654026c6ea08b83b123145ab5703dad844ceb201efeb6dc5f6a9037d2283c42efc54fa84323afc4c10eff462c8843187f1dd48ef0900000000000000ff0f40b10ca94f6feeb2893c17888e1cdba94a6ea80c33ead5722c3293a493f1479531dd88261458f40d31fe8df15efaaeea831555877f9538c6ee6ba65893ff1f908ba7554ba583ec7932f5954f31a878e2fae6691d1aee1da02ba516467df3e7d1daac43738612e4fee18a22da19fcdb4c2811e32f808890205f3a6da2819d2f9e77c7c64affa54fec0136cbafa5f62e96753b639a924599c1f69219927ea5301fff0a6063d427180d61542c2571f983e96735600000554f327a3535e7c7542799493c31ac05a7b57f03ca91a01ba2a30ca99e969d6fd09dc28ebc15ecb4d91675767999d146aef7799738b292fd64bbca48568325b2969e2b15f36b788bce5ccdbaf75c94cb93499f6947a967a7bce14c6de4e7c0660d80010f5c653d22d49030a8c2a4ab595bf4238f18ca428dafc7ac96d404607a0000000051a2104f22e6db5a62b5089c1b45282d38864daa3ae81d6b0968d1d2867b91b7d12096833d6864da40b54783a17aaeb6737c323f9f98e354cc98dcfe23ad01bd1c61563e69ffe1c2c73e1661261173f359e93d2c5e424c17998809ec8f0232b3955e052a4cecd89008f70314a0bdd491ec86a4555d89fe0120f64c62e8e3ed8bcb45202c204bbec8d722824c0ebca8db1ea4a003d2fbdc1f9be78537756ab5bbe4fe7ff5d785d0128171c90d9900ca2532b0f9d01c4b45294fbba468df3e1b393cb4e62e753b4172ba7ac1f2b51c94bc5d047899fd219f448bf9189c65c9d91eda6b52a373803a9efe44f86909bc90addb7b9aee813df534aac4b3093c91b8068cd849904568916694d461b76a58d88cf0f520310a1e9fdc18cde98d662eee077515d0a8811922923806ca84d69ea370db27a5ffff5392ab3d1311b82432662806add87047f601fa888400000000000000000000000000006acc19808d7cf29bc974b0ea92499a419aa095e203c1bafbb9b9a7c2bca311a28ee4952f2d325a56390578f12205db653a536f0100e0eda300a43a13bd1b9f3322405d1efd78e578dc6b3fb84f3738a4b6caa800000087efa51c5d95ecba4e50e529d1e8c89600e809dc3d0a2f65579e23457949a50f2d0455cf79a43746979f99f6a1527f004f1e37a3926937e84fb478199dc1020f4beb98b8074bf7df8b5e783637da7418fd3aa81cff202c5afeb06e2f9115558ea12f92d7ae633d44086b3f03b20d546fa66a72e38207c9d20035ab63de71a30f1240de52536941242d23896ab74a3c6670fdc49c14f34fc4eadd6db8d80eba439772bf60a1db18c472dafc5569adc282928d2a1ffe29f1a57d3f18f4edaeb5d37918e6fddcd821da67a0785585a4443440dc65600e64a6a274000000000000000000000000000000000000000000000009dd14b38f2f4426d7cf5075047c31f6ce6adddfe3ac649c0643c829aaf375e904bbe52691a4120260ffcd8f1d04166d291ebcef893e1b9ccb6797d0646fe0d0274434f28efb43e06e64f0698caca42f4e6018a455736c482a017e2b13dac4a90faa109f0e87cc94e3efb649692456463ca74aa6ad4bf50c1acb3928143be1c1023a375e528285544d0064b98646f3109e9a4942ce42c6e7ec84b664f6c2770803f10baa804a707f0a1fcbfc37f1eb7ceeffb3c0547ac6571603adbfde4c8b5f4441613633b48865b65bdc415e1e0dcf672d68cf4cebf04f4bc1eebf560a26d3b332240d450fdb0a9a69f432e277f3a0386eb2bd1305c821c64757f786b79fef54dbf34c67d73934bc80b2133fb3c04cc7ea48bf97a6243c9f95dcbddecf45f008f1822c7868e1ff5a3cbf5d6b6898335792749df7b1f51e91f8c1c3b1b93b33aaa3fab69cef08a9f6f6cf39dea3d878b2ed42545421970cc426e644332bc956d1c6adefdf0ede2c5c94aa632646ae225accdf031f611d01622921f1b922a5ac887cca3136133dce8d9f5f4da7bed2ea5d9436220000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dd9000000000000f05fe239d3d6dafc367f12689b6700000000bd4990d9dc174a69aadffdea5445fd3c13350af85d308caee689736c06417b52541eb5871d820b850dcb00877bbe2ed19d911564f11adeb52ec3047cfdcac8a8bab6ee365941cf792155f589226758e9c8bec8289b3012ca74bfe210e0315b384ce982e16f93f3e0b1385cfaab63bd36b141dfbc7f96ee549b8b52c311e5c657943f2a5d177f03e10b3595ed13458472a2eab1ea987a0668e52fff5c716fb5950852186649ce7362b45225f050c1c37327b6833025cc1dff2d57df674be03bab30901188386d248370"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000)={0x0, 0xd}, 0x10}, 0x94) 18.414627235s ago: executing program 5 (id=2019): r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="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"], 0xc0}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) r2 = socket$packet(0x11, 0x2, 0x300) openat$vcsu(0xffffffffffffff9c, &(0x7f0000000200), 0x100, 0x0) setsockopt$packet_int(r2, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) mlockall(0x1) setsockopt$packet_rx_ring(r2, 0x107, 0x5, &(0x7f0000000140)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x7ff, 0xf83, 0x3}, 0x1c) sendmmsg$sock(0xffffffffffffffff, &(0x7f0000002480)=[{{0x0, 0x0, &(0x7f0000001780)=[{0x0}, {&(0x7f00000005c0)="f2b314c96d500b66f7", 0x9}], 0x2}}], 0x1, 0x0) mount$fuse(0x0, &(0x7f0000000280)='./file0\x00', 0x0, 0x100000, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000740)=[{{0x0, 0x0, &(0x7f0000000300), 0x0, &(0x7f0000000880)=[@hoplimit={{0x14, 0x29, 0x34, 0x4}}, @hoplimit={{0x14, 0x29, 0x34, 0xfffffffd}}, @dstopts_2292={{0xe8, 0x29, 0x4, {0x4, 0x19, '\x00', [@calipso={0x7, 0x10, {0x1, 0x2, 0x9, 0x9f, [0x8]}}, @generic={0xfe, 0x7d, "f4a4a3142ee1e12b9826287997a6b33d89f3d60da1641d9fe3896c3c1b6c130ef4f01be8f5836d417874540898618a50ea000000124b11de36afb16ef4fc1cf3f4e4fa0e647cd1b07b068d3894180b6aa7527a4a8252f6836a0d67a7782c675a838ea989292e40a30db9d6a3286604207fdbbf8893ab968939c340ba3b"}, @calipso={0x7, 0x20, {0x1, 0x6, 0x7e, 0x8001, [0x9, 0x6, 0x4]}}, @ra={0x5, 0x2, 0xa7e}, @pad1, @ra={0x5, 0x2, 0xbf4}, @ra={0x5, 0x2, 0x3b3f}, @generic={0x93, 0x7, "e80ee304ecb784"}]}}}, @hoplimit={{0x14}}, @rthdrdstopts={{0x20, 0x29, 0x37, {0x73, 0x0, '\x00', [@pad1]}}}, @flowinfo={{0x14, 0x29, 0xb, 0x2}}, @rthdr={{0x18}}], 0x180}}], 0x1, 0x810) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3be", 0x6) r6 = accept4(r5, 0x0, 0x0, 0x800) sendmmsg$alg(r6, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11", 0xce}], 0x3, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r6, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r7 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r7, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="ea7c5828b87d70214008724bcae1ce6577c01031b19698ecb8a7f5183947918ce2cc9dc778dbfff9e28e1a6df7d8f95c3e45768a6786d6325bc0fe4ed394c8ed0edcbb9f917074251a7f5b6b24c52516a68f181592262dfd12b5af7386658c5fb6c36d86d5084624a302a155c0463b6c36e9fc88338b0f66e2713728a21d19d9a33da93d419df63d8a87fa100381ec74de8b7409f4977d3cd7a9f2fb03cec91c4277b39b2c9f227a9b74926a11960d085e2aaf98673d2a67fa95b8d9dcc72ca6181f6b9b2d1c402267e6cfef5599e1520077d9bc472fb5a5db42b1befd498ec7b8d519b12f065323b15280a2540bc7a4ffe508fc12f93707064caf4111e893142f9867b432b1e6258caa2ae081b8b646c25de7f5366a21f9dd257b84546cd316e17b79d22c4bcaf70e8a96d1e502b53c581c75482d1d63f0d5f3fb5bdbb714583f0798e0c4d6c9d99513e91a68a26612053290f15f5a2e06acfa229356e37b4d57697224e9561c0430a67fcb5dea72acc91e60751a5b07eb603548a646f082ce213347b4ee908bd95cc56775330aa09d4f19f48a8cb5d7f6346d82bab8ff019309684bd01eb4d90febe2269cd2a1100130c242a2995ce38638a3bbc9008ac0e820a1e0b9a9511af47aa7f3e30a69589985423f3b4ea98152433bf1aa53a0981f783f11c4cc50f70fe63b2043b74b9cb7da59caedadc1fa1f662831a353969893d4f93b919cda52a1ce2200a0a7895abb293c29d6d197cce98a4df8fc90c582014742a00b4bd09f1fcc5ff5753320d2b5593e657c0fb87a4cfa323ce59111eea806a6e020fb0c4fdd601087811e33e793975b5e9e936c16d243bdea757e0ee4508f5d5b496ed07b6f0f1f46ed752448f30d679b23ba8142d4ab25beb913ee77547866e5d9501a55e9797ba3407f3f4cc11398bdaf3ac4c2e79a5b133a09fcf8ae790bb985fa01daf2758fd8a77fde15a822227dddf64bb2ebc49a56ad025e01c6c59e4818abdf808789d9f87c103cf7f7d21d2a1345b9b7fd66b1cf96002343fbd62f8080d945e70bd93d4bf42b401477abed49065b4a8ccfb9d93724118168de2e8df4f78ccf3b9593f993423a619ef6bd8392a2cfc6424d3687fcdc67d33073db95d856f312b934d05a3c4e967217837920fee73b00757b617d1ef3bfc2e88a8a72f0948263db2c9e7bd491f059b6ee8d0ea3f2193314562910529869b248172bfe0f914f7a91a27c6e9e6c2e3455a7ae765392b48fc959958aa39a5a483b2a6e873ac76f8579515e42f7a3bbc82bcf71edaf12f7b40a2adc74d67ef793988cc8ac788185049e57fb84757bdc700ffde10afc19df290787ed98222f8afb2b6d11944666331350e2914466b398750acae526146373b2cbe1bdd1803e6c920a182a1ad118a3d09313c2ce2703a0a1c09215cab90c35b03b1c795cf704f42dd31ddff6be67bb355977b2e07609c5228299a170308e54705674384fc294cdfa4abf989d3c3bf3eabbbcf52a6a0646bf6db5b61ad027007464fd6fc10490ee2e9190c28ae5cb3733105cb782c0d53e5c79c3e455609d557d824154d01e282788ec8ae7c8a03fcd6cd4e37829b0f921c46d715454d5e1281c641cf0756a2f31b0369ce94e819e6254af95b88bffd7bb2cfe9469d303497fead174839b2789b5aa703176510eab1f46916b3b63f6f5b2df262fe7274a0cee9bd6e115e5f9f48ac1c09e5b3c546ae95b9916a633869854d3ee39d4acb800e876e7fc084ffd79a20fca8331caff657ec89b445c6012ff7eb9531eb1e8c90cdc66b82d6fd608310099503a9dcf50b40d10a3b1ab520477e20ad5f6405cd4b5b36d201e12088d7868c6e94737ea88db6ed5f7df4d31cbd2d0c4f21cdcc3b181f5aae7216dc4c06b2989bb44e5369ba96ce87f3e3abbb530d103a53d7e0b914115c302c935eea7d256a73aa851d84dec6d9112163be8135889c67fa90e796a6f050fba0a6a740618cd513748072daac9f3e25034772cc400a14834afbde835bc9fd7cf1113d67ebe99a3b78907596886ad5a1670ef572c18e26c98fe40194428de339cba7b8efc5fa7faf7512ef6b89a877f3e534fb4512729df686e14aece08fab3b42ea14acde0e18ffe5dc00e74288661c7463e00f3b942cddf3b71e1dcf71989f378b933df099316451cca296a4e117bbeb3b1e552e5a10f9731449ae830de14989049ce818f720e77e78a86c307c80450b26278bc25ee7390ce6d4c4dfc8d39b6b4b1ce6f3865dbdd1d37aedb555288bea9ef95c8600dea1cd10e9e42d15aa804f99a31bfaa5ea52185333d734c766e3bb4a9abf86cf4d840dc188167a25cc3054b65fd7ce053d38518474ab55e59c1ccaf34d57b4cd73b07ed63d754ab3d57dfc0f67bbdb22e33d9f63aa2b36cf0af338794d4acbd1b13669bde67f7bd032f9c6b400e8054a0cff77fc6e0591195b21715e42c881e23156b4ba504d7e1b6eb9c2ec9b9e382d85f7c52bd964d305da9496dbaa022880ddf236730c458f31258d64ae2668aa863b3fe558c7f8cfb3dabf42edcaf2891e9b9462c44153658eae85cd499abd9dca762adf26d9904d28b772b3fc3d066d56261474c944387ac7eb00059025ff25e34b8f7c2986db1ccc4297e1315c3ceeef1b8f98e0500bbb8bb0ab52d80f8c6c8fa5d24b9a05f5350e2fd59af4b9fa9a2b4339b61e208f227ba968d4dbd36246133de2078c6a15dd57754a3537c31d04da545f062dbf9cbaa0840e23974f441a4d5937fec23ff81c193bd951a7bacac8eb6d4705702cbe3c930f27869753ba6026455bbb7742c53644f1646d7545467091a207905f831505f214fbd818aea4455705b5e727850cdcac40620135b8dba85cb0c0f393af252ec082cba5c43385fbc2cc5682bc1994b064e29c8c5a20e7e6d15fbb13e6fd1a86b2fda666fbcd80fd08be00a7423fcafbdd8283bac88ead203bc10d1c1a13ca2fe853fa6cc8991b0476561be085b086b0d0e45f73e59f519342c13f368a37464cb55b8a13846f4cd610536d5c4b8704fcd347abe6712d3de67d7918e6954898f31647a8ea37ecc2e1bb02b1b26e7a60fbb2b0a48efc5795c12d5c4ac8dc4149dea0f2e085422ec69352882622711b74e1e32c7ead2cf3c554e8ff1648e8b66d0dc6997b6304b3b560a33d75aa49476175a386ca721156ea79bdba432d439dbceb0285561abd5d134badd9f38c04fae8fa920edfff15705371c907848c14acdfb0b22a4c7168e1840e8b8a50349dcee5f429b3cb34e30f0f67acf93604792b8574f36ea9409d422621f3c0c7b781fc8e23d1d46f04a9b44f633e5f72cb079fbde66a9745705666c6dab6238628e57ee6cffa8cfad616dac1abe2789c9efccb4fc7e65e490d9a4e49e7ce72a6980e72f70a17649e67de86f86b61a4b6219daefc939b5904e5712ecaf85c98484fc02585b1aa990b95173e4a2907cf877af696e528e6b2b634a4fb7d791cacc8644fa76e062148d411e18f0da5aed22116828cd700a28e8f46bca950550acb4ab05eddeb6b2dac24702cff4de0a3ece393cac879ed2f0c5b9645839cfdb79fb1df87596b14504cba9dddda51edaffcd0214b91b5898ea022774e699aa0caf0f646cc0cb8e8fc8b8be43c23aa7f6bd29fd0615c0b78f3514a52989d7f35ad08a4bd473e61da6657cc2e85d3b2b7d3fb51174a96f27038ddbc87a35e09a668e436aa40146c6a26dca87b39220f139b772719d80aadb752c622bf09acd6846838fb48a8817ba4aa72eaa32e82251b3789969d8518f9aa07cdcb9a355f73f119725c086168aaca262f13cd742e5f06c969a462638a557e15a4f5d43e3242c08f23b00d2b8d57c60d3636abd4068ec03a4be3429b95e41351ab5c58812e552df90c3e6c9d8779aa484e74f073ea9fcdce13b1dff8e7c101b2c6865c5cefe108e3559f520e2bc42c9dc39b57fddb44ca49f2689e10c1381c0740d20cbca46da475c62f513cb08398a5fd5d4f6b13ce839fe149df0d291a8f7267fe90a7e1845dace17cd927c2d1aeffbdc36bb983172ceff025e84b0419645fcc72897b992f5081c78756122391947f08ccd20806cfc2bded705b472fc52e84734e016cbd309aadebbbb4e8bdfed77b1e0b15ce0904838d9e4d64643df66f0353c377e554b428dc0f31189a134cdb8e66d2755e84c2b2409c3d63a81f5f05616baf6a243b09153a4f8289e15a5a4ffb007b0cbeffde25391bb2acd86b453e245643c0fa1dfe5d42e0e3f1c592a00b77f0133adf7989c6c2bf3ddc0b8a2b14f35d33f62f4ee2fc56166372058e997b9abe6bad8aa718f8d87ad095e8f354aaef540840437b5451771266a8358ed75954db52b38bca4a1c8696dca1de03b12627254409f8bb68c94eeaa1a8bcf894482b96e81b9ff5c2383a907537a191aff0bb5b5418ef5670cecca1cfbd41b61879b11a5a5053cd86cf5d61f8c2f7d7ad2034a1801b3b92a79ac3b4343c680008b1ba10577a35173cac6d4dbc1d00e436f238b57093b34d4ea19c225b84a2d6086cc6cf72595b980c88142d268bbf9c8375a93afe75c3583b3b9687368d78147985d209e6d89c335e948c51696a948f01ad062dcf84a99584466e24646b2e441fefb10ef962432f2925d6d98e790acf4ca7d9339a589a537aa3392ec79f34a6544144072ab8248e45ac560a78c70c5afcbf10909299dfcd67981c88780c1340c951e115ffec56d23b9ead6a55024e199238f4b133e3e1e0e84318b5037a3947ae09749c25c7e4887936ecf0ba9a807dfa471ea1f3350b70feb58dc9e2836365ce4db456a341e43410cac1253fe08e79c21fca932716f4c171fc957cb325737b70532d81f0eb2f0a16478c0d934165728f7b29a8a0ff6bc964e99dea26d3efd28336b00c112a26da7a2ea1c21a9688cc3a68293958edf27ae89e5f9b8348af4121028e760cf68c931af92906d27dad4d330df9201b5395ccce0c803806422883667ccb11438d9dbe1901d4ab98d89914b313338486deb6f748053517e2188c479adb1eabb8e8ed5d05bb3f66826fae83bbc5bce3615ee32d937ffbe8846a1156aaf7bf9b9d4189bdf290b3df254077688eeda824d6ea0a452f7e7f915c1a94ee250a3907ec035d7ba7bb0256811f04646ca156b8925506c774df4d4072c02929e985057a5f7ddc1469c7306e6fdb86b810ada1cc96f6bd389597dd27dd656f55c316fb2d56b2d13eddf893722e813934a19778719be99697c365222db64039f9caab1201c430e53df1af8a0321c8759fc33e8204150080979936d0717f6c4c9145fb828389acbb894a4600485e8b105c7165a40e814889343deead6d434a8da60eed1e50aa507ac2793b4a4c5517265f859f223bb4f6cadc6fb53430304baea18189e2b5ddd266c38f5c325ba391a50fcd34060d217c4118889c4275e40a8428099ddfa3cc0d8241c22fc1554318e922f3b1257f2046d70df460c5283a539487583ffca1972a19237b06480e0a56d9e185fe4dc3607666d81ed0d9d9f5c5c568a5a0a87160b6d35c73dae9c6177f2b25d90a2598042f4b43bc765fa86a831c401a01c391a8fdc8f8c742f2322a1b8ef18ec7d82f013893c981f6bd96ec57d8e73e1633ae3970721fcea055ecc836ce3", 0xf91}], 0x1, 0x1, 0x2) syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r7, 0xae80, 0x0) r8 = socket(0x1d, 0x3, 0x3) write(r8, &(0x7f0000000040)="1c0000001a009b8a140000003b9b301f00"/28, 0x1c) recvmmsg(r8, &(0x7f0000002ec0), 0x400000000000ec0, 0x2, &(0x7f00000001c0)={0x77359400}) rt_sigtimedwait(&(0x7f0000000540)={[0x6]}, 0x0, &(0x7f0000000600), 0x8) getsockopt$IP_VS_SO_GET_DESTS(r0, 0x0, 0x484, &(0x7f0000000040)=""/31, &(0x7f0000000080)=0x1f) 18.412297246s ago: executing program 1 (id=2022): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$batadv(&(0x7f00000001c0), 0xffffffffffffffff) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000001140)={@map=0x1, 0x2f, 0x0, 0x0, &(0x7f0000001040)=[0x0], 0x1, 0x0, 0x0, 0x0, 0x0}, 0x40) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000003040)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_TP_METER(r1, &(0x7f0000003140)={0x0, 0x0, &(0x7f0000003100)={&(0x7f0000000500)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01002bbd7000fbdbdf25020000000a0009007bf24827ed91000008000300", @ANYRES32=r3, @ANYBLOB="f9db9a13225701375a7b4ab18ea24c131c4136cfedbb2e27bfc82f3ddb4686b5d458a642719eca7bdcc14635b2f5c46b48241e5ff85c56cf42bb433f780c272376d54b8f519382e5936fdab46712644157747329a755c2605265f346add65f47700b12fdc9a6e5e753872c4e6f9942969c0350c3ffbb1593c0466da51e85875e53b0628556ab87a1a66b708038238039cd13ef936695455ff9e0eb0c1b5cc02e432ed9d9be3b231e98091eda9d630d63e475d5ed9824f369529d528bfc5ee78bb63721d642fbe4b4df05efba68b5f9b0021ffd68b081c2948fd6133df49d61ce2fa0aa553268dbe42d2df32eaf8e3ce73ce9788c18b07c54366f3f34b008a13e7b25f14a365d5ab0504f2489051495c1beb1ed6de1cf9770e01170bbac4003ee6872033fdd632accca90c42fa55a299e7815979b3f3373c7f943c2b5ed151303f10fb6f1643fa1bcee249728a9a91e420696e0c58f3daf39f27cc42c2e0012eda94c240a58dc24c6ec8d574f01cb8ed91297aaed62558a10b7f06a02d68cdeab0cd6490ae2c433c97a15f8d6276c2e342bd7d9b28af87e9bcd43b4d95af890284891d62b5f4176dcf071fb42f9d494fbaec190645193adcdc073c0d5d800"/457], 0x30}, 0x1, 0x0, 0x0, 0x20000050}, 0x20000884) r4 = syz_open_dev$loop(&(0x7f0000000240), 0x7, 0x142ba3) r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000200)='/sys/power/pm_print_times', 0x3c1943, 0x93) ioctl$LOOP_CONFIGURE(r4, 0x4c0a, &(0x7f0000000080)={r5, 0x0, {0x0, 0x0, 0x0, 0x6, 0x4000000000000ffd, 0x0, 0x0, 0x1d, 0xc, "faf98317e5a1149989fc8dbe43ea6acc96e3a2503dc3bd3fe37d58128bbad0099cebdc25f5d69098c8b534464c516bdd8a0f350000e35abdb80e38f5eb010001", "32d8cc263d9e234b30c50997d3bef4cd4a5d83cdd3dfe7800b2d7b6aa54cc5001fcaed1e831fa79a0000000200", "67523760fd40f78d2cfc03d81a8ca55ba139c01802c4dae4162e43ac61b7ad33", [0x8, 0x5]}}) ioctl$LOOP_SET_STATUS64(r4, 0x4c04, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x7ee, 0x1, 0x0, 0x2, 0x9, 0x14, "2cf5c70b0b284c81f83143810b4a71ffcb375325c86829381495265ceecf444a28178ef925a84f7f9eb646cad27cfda8bbcaa2f1d2280c11b1505e4bbbc8fbda", "190b4de479e73750618816dabedbff4a0a2e75b44e2cc115632179aca631a6a9d774adda677624b790b5d6617f89540b338290e27d4be7cb387cb05ce62f5f77", "57d8695804cc86297563ad6985c5b2634cccb18b060000000000000000000100", [0xb, 0xe69]}) r6 = getpgid(0x0) prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x8, 0x8000}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r7 = syz_open_dev$MSR(&(0x7f0000000200), 0x0, 0x0) read$msr(r7, &(0x7f0000002700)=""/102392, 0x18ff8) capset(&(0x7f0000000040)={0x20071026}, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x81, 0xfffffff9}) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f00000025c0)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48) getsockopt$inet_sctp6_SCTP_HMAC_IDENT(r8, 0x84, 0x16, &(0x7f00000002c0)={0x1, [0x6]}, &(0x7f0000000300)=0x6) prlimit64(r6, 0xb, &(0x7f0000000040)={0x7, 0x81}, &(0x7f00000001c0)) 18.306722351s ago: executing program 43 (id=2022): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$batadv(&(0x7f00000001c0), 0xffffffffffffffff) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000001140)={@map=0x1, 0x2f, 0x0, 0x0, &(0x7f0000001040)=[0x0], 0x1, 0x0, 0x0, 0x0, 0x0}, 0x40) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000003040)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_TP_METER(r1, &(0x7f0000003140)={0x0, 0x0, &(0x7f0000003100)={&(0x7f0000000500)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01002bbd7000fbdbdf25020000000a0009007bf24827ed91000008000300", @ANYRES32=r3, @ANYBLOB="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"/457], 0x30}, 0x1, 0x0, 0x0, 0x20000050}, 0x20000884) r4 = syz_open_dev$loop(&(0x7f0000000240), 0x7, 0x142ba3) r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000200)='/sys/power/pm_print_times', 0x3c1943, 0x93) ioctl$LOOP_CONFIGURE(r4, 0x4c0a, &(0x7f0000000080)={r5, 0x0, {0x0, 0x0, 0x0, 0x6, 0x4000000000000ffd, 0x0, 0x0, 0x1d, 0xc, "faf98317e5a1149989fc8dbe43ea6acc96e3a2503dc3bd3fe37d58128bbad0099cebdc25f5d69098c8b534464c516bdd8a0f350000e35abdb80e38f5eb010001", "32d8cc263d9e234b30c50997d3bef4cd4a5d83cdd3dfe7800b2d7b6aa54cc5001fcaed1e831fa79a0000000200", "67523760fd40f78d2cfc03d81a8ca55ba139c01802c4dae4162e43ac61b7ad33", [0x8, 0x5]}}) ioctl$LOOP_SET_STATUS64(r4, 0x4c04, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x7ee, 0x1, 0x0, 0x2, 0x9, 0x14, "2cf5c70b0b284c81f83143810b4a71ffcb375325c86829381495265ceecf444a28178ef925a84f7f9eb646cad27cfda8bbcaa2f1d2280c11b1505e4bbbc8fbda", "190b4de479e73750618816dabedbff4a0a2e75b44e2cc115632179aca631a6a9d774adda677624b790b5d6617f89540b338290e27d4be7cb387cb05ce62f5f77", "57d8695804cc86297563ad6985c5b2634cccb18b060000000000000000000100", [0xb, 0xe69]}) r6 = getpgid(0x0) prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x8, 0x8000}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r7 = syz_open_dev$MSR(&(0x7f0000000200), 0x0, 0x0) read$msr(r7, &(0x7f0000002700)=""/102392, 0x18ff8) capset(&(0x7f0000000040)={0x20071026}, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x81, 0xfffffff9}) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f00000025c0)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48) getsockopt$inet_sctp6_SCTP_HMAC_IDENT(r8, 0x84, 0x16, &(0x7f00000002c0)={0x1, [0x6]}, &(0x7f0000000300)=0x6) prlimit64(r6, 0xb, &(0x7f0000000040)={0x7, 0x81}, &(0x7f00000001c0)) 17.538247814s ago: executing program 5 (id=2025): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r0, 0x0, 0x0) quotactl_fd$Q_GETQUOTA(r0, 0xffffffff80000700, 0x0, &(0x7f00000001c0)) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x68c81, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) socket$inet6_sctp(0xa, 0x5, 0x84) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x1) r5 = syz_open_dev$mouse(&(0x7f0000000000), 0x7, 0x0) getsockname$llc(r5, &(0x7f0000000040)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @dev}, &(0x7f0000000100)=0x10) r6 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r7 = dup(r6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x13, r7, 0x2000) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1) ioctl$KVM_PRE_FAULT_MEMORY(r4, 0xc040aed5, &(0x7f00000000c0)={0xf000, 0x118000}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) (async) connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) (async) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) (async) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) sendmsg(r0, 0x0, 0x0) (async) quotactl_fd$Q_GETQUOTA(r0, 0xffffffff80000700, 0x0, &(0x7f00000001c0)) (async) openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x68c81, 0x0) (async) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) (async) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) (async) socket$inet6_sctp(0xa, 0x5, 0x84) (async) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x1) (async) syz_open_dev$mouse(&(0x7f0000000000), 0x7, 0x0) (async) getsockname$llc(r5, &(0x7f0000000040)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @dev}, &(0x7f0000000100)=0x10) (async) openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) (async) dup(r6) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x13, r7, 0x2000) (async) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1) (async) ioctl$KVM_PRE_FAULT_MEMORY(r4, 0xc040aed5, &(0x7f00000000c0)={0xf000, 0x118000}) (async) 16.780269164s ago: executing program 5 (id=2027): mkdir(0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = gettid() timer_create(0x0, &(0x7f00000005c0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r2, 0x29, 0x4e, &(0x7f0000000100)=0xfffffff7, 0x4) r3 = syz_open_dev$sndctrl(&(0x7f0000000440), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r3, 0x40045532, &(0x7f0000000040)) r4 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040201, 0x0) r5 = syz_open_dev$sndpcmp(&(0x7f0000000200), 0x0, 0xa2c65) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f0000000500)={0x0, 0xfffffffffffffd83, 0xfa00, {0x0, 0x0}}, 0xfdbc) ioctl$SNDRV_PCM_IOCTL_SW_PARAMS(r5, 0xc0884113, &(0x7f0000000680)={0x1, 0x0, 0x202, 0xce, 0xffffffffffffffff, 0x200000000000008, 0x1000000000000008, 0x2, 0x8, 0x40000000000002a, 0x80000009, 0x2}) ioctl$SNDRV_PCM_IOCTL_STATUS_EXT32(r5, 0xc06c4124, &(0x7f0000000840)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}) sendmmsg$inet6(r2, &(0x7f0000001700)=[{{&(0x7f0000000000)={0xa, 0x4e21, 0x0, @local, 0x1}, 0x18, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="24000000000000002900000032000000ff1100000000000000c7e0cfc90800000000000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00'], 0x28, 0x7ffffff7}}], 0x1, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x100000, 0x0) r6 = open_tree(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) mount$bind(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000280)='./file0/file0\x00', 0x0, 0x1000, 0x0) mount_setattr(r6, &(0x7f0000000040)='./file0\x00', 0x1100, &(0x7f0000000300)={0x80, 0x88, 0x80000, {r6}}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r7 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) connect$llc(r7, &(0x7f0000000180)={0x1a, 0x0, 0x0, 0x8, 0x3, 0x0, @random="a1fb75d10a28"}, 0x10) r8 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$sock_ifreq(r8, 0x8992, &(0x7f0000000180)={'vlan0\x00', @ifru_names='dummy0\x00'}) 15.351603386s ago: executing program 5 (id=2033): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB="4000000010ffff00cf000062649d971ed7da1b0b14aafb3e0598b519328fb59165ae708601e02ace9366ae74", @ANYRES32=0x0, @ANYBLOB="8b800000000000002000128008000100677265001400028008000600ac14143a08000700e000030a"], 0x40}}, 0x0) accept4(r0, 0x0, &(0x7f0000000000), 0x0) 15.052623216s ago: executing program 2 (id=2034): bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0a00000001000000e27f000001"], 0x48) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000002a82, 0x0) r1 = dup(r0) ioctl$BTRFS_IOC_SPACE_INFO(0xffffffffffffffff, 0xc0109414, &(0x7f0000000600)={0x28a, 0x68, ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f00000003c0)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x0, 0x0) sendmsg$NFULNL_MSG_CONFIG(0xffffffffffffffff, 0x0, 0xc044) r5 = socket$inet(0x2, 0x3, 0x4) setsockopt$inet_opts(r5, 0x0, 0x4, &(0x7f0000000000)="8907040400", 0x5) setsockopt$SO_BINDTODEVICE(r5, 0x1, 0x19, &(0x7f00000000c0)='ip6_vti0\x00', 0x10) connect$inet(r5, &(0x7f0000000180)={0x2, 0x4e20, @multicast2}, 0xfffffdb9) sendmmsg$inet(r5, &(0x7f0000000f40)=[{{&(0x7f0000000040)={0x2, 0x0, @broadcast}, 0x10, 0x0}}], 0x68000, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000100)=ANY=[@ANYBLOB="1201000083ef0840e07d6e67db77000000480902120001000000000904000000ef01"], 0x0) mmap(&(0x7f0000244000/0x4000)=nil, 0x4000, 0x1000002, 0x11, r1, 0x0) mkdir(&(0x7f0000000300)='./file0\x00', 0xfffffffffffffffe) r6 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r6, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r6, &(0x7f0000006180)={0x2020, 0x0, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r6, &(0x7f0000004180)="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", 0x2000, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x90, 0x0, 0x0, {0x5, 0x2, 0xfffffffffffffffe, 0x0, 0x0, 0x0, {0x40, 0x3, 0x0, 0xffff, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x120, 0x2000, 0x0, r8, 0x0, 0x501, 0x4}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0d000003005a"], 0x50) write$FUSE_INIT(r6, &(0x7f0000000440)={0x50, 0x0, r7, {0x7, 0x29, 0x0, 0x1004cc80, 0x40, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff}}, 0x50) r9 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file0/file0\x00', 0x0, 0x1) ioctl$sock_inet_udp_SIOCINQ(r9, 0xc0184d16, 0x0) 14.097659839s ago: executing program 5 (id=2036): sendmmsg$inet(0xffffffffffffffff, &(0x7f00000017c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=[@ip_ttl={{0x14, 0x0, 0x2, 0x7}}], 0x18}}], 0x1, 0x0) (async, rerun: 32) r0 = socket$inet(0x2, 0x2, 0x0) (async, rerun: 32) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000001c0)=ANY=[@ANYBLOB="5400000010000304000000070000000000000400", @ANYRES32=0x0, @ANYBLOB="00030000000000002c0012800b00010062726964676500001c00028008000500010040000500250001000000050029000000000008000a00", @ANYRES32=r2], 0x54}, 0x1, 0x0, 0x0, 0x4}, 0x8044) (async) setsockopt$inet_mreqn(r0, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @empty, r2}, 0xc) r3 = socket$netlink(0x10, 0x3, 0x0) writev(r3, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) (async) writev(r3, &(0x7f0000000300)=[{&(0x7f00000001c0)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000d00000000000006040000000000f93132", 0x39}], 0x1) (async) r4 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r4, 0x0, 0x23, &(0x7f0000000080)={@multicast2, @loopback}, 0xc) (async) setsockopt$inet_msfilter(r4, 0x0, 0x29, &(0x7f0000000000)=ANY=[@ANYBLOB="e00000027f"], 0x57) (async) r5 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x1c1840, 0x0) (async) r6 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x0, 0x0) (async) r7 = openat(0xffffffffffffff9c, &(0x7f0000000e80)='./bus\x00', 0x1c1002, 0x0) write(r7, &(0x7f00000001c0)="f1", 0x1) sendfile(r7, r5, 0x0, 0x40001) (async) sendfile(r7, r6, 0x0, 0x7ffff000) setsockopt$inet_mreqsrc(r0, 0x0, 0x24, &(0x7f0000000440)={@multicast2, @loopback, @empty}, 0xc) 13.834348571s ago: executing program 44 (id=2036): sendmmsg$inet(0xffffffffffffffff, &(0x7f00000017c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=[@ip_ttl={{0x14, 0x0, 0x2, 0x7}}], 0x18}}], 0x1, 0x0) (async, rerun: 32) r0 = socket$inet(0x2, 0x2, 0x0) (async, rerun: 32) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000001c0)=ANY=[@ANYBLOB="5400000010000304000000070000000000000400", @ANYRES32=0x0, @ANYBLOB="00030000000000002c0012800b00010062726964676500001c00028008000500010040000500250001000000050029000000000008000a00", @ANYRES32=r2], 0x54}, 0x1, 0x0, 0x0, 0x4}, 0x8044) (async) setsockopt$inet_mreqn(r0, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @empty, r2}, 0xc) r3 = socket$netlink(0x10, 0x3, 0x0) writev(r3, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) (async) writev(r3, &(0x7f0000000300)=[{&(0x7f00000001c0)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000d00000000000006040000000000f93132", 0x39}], 0x1) (async) r4 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r4, 0x0, 0x23, &(0x7f0000000080)={@multicast2, @loopback}, 0xc) (async) setsockopt$inet_msfilter(r4, 0x0, 0x29, &(0x7f0000000000)=ANY=[@ANYBLOB="e00000027f"], 0x57) (async) r5 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x1c1840, 0x0) (async) r6 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x0, 0x0) (async) r7 = openat(0xffffffffffffff9c, &(0x7f0000000e80)='./bus\x00', 0x1c1002, 0x0) write(r7, &(0x7f00000001c0)="f1", 0x1) sendfile(r7, r5, 0x0, 0x40001) (async) sendfile(r7, r6, 0x0, 0x7ffff000) setsockopt$inet_mreqsrc(r0, 0x0, 0x24, &(0x7f0000000440)={@multicast2, @loopback, @empty}, 0xc) 11.852132361s ago: executing program 2 (id=2043): syz_emit_ethernet(0x42, &(0x7f0000000340)=ANY=[@ANYBLOB="aaaaaaaaaaaa40110800450040340000000000019078ac1e0001ac1414aa03039078120002282500000000000000002f00007f00000100000000000088be819ee0d265c700775444de72cdd0052145064740a0160eacb19cc44721771397b52beb7da660e7410f41cdef3dd85b71122ec74ab4d3336126d414d5f94613144a2ca2060cc4d621e6c6b5d5b2c4e3fa53e20e17519524a9402d269344b896060492a86cfb01872aebf1b26d13fb970a7f91458b7aef42952d52723bc40652e8c32febc636e0f88b2b8648a57e04dd4d485b0a38a82965e8"], 0x0) r0 = syz_open_procfs(0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$inet6_sctp(0xa, 0x5, 0x84) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00'}, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x70}, 0x1, 0x0, 0x0, 0x4000080}, 0x20048004) bpf$PROG_LOAD(0x5, &(0x7f0000001380)={0x7, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020006c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="480000001000ffff28bd7000fadbdf2500000000", @ANYRES32=0x0, @ANYBLOB="00000000299605002800128009000100626f6e640000000018000280140008800800"], 0x48}, 0x1, 0x0, 0x0, 0x40060880}, 0x240400c0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000080}, 0x4008000) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r2 = gettid() r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000840), 0x0) read(r3, &(0x7f0000000200)=""/209, 0xd1) r4 = socket(0x10, 0x803, 0x0) sendmsg$nl_generic(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)={0x58, 0x2a, 0x20, 0x0, 0x25dfdbfe, {0x42}, [@generic="3e47094cd9dd9b0f05288923fbf05a019429f2a8154425fa8c161aa03b6b4ff6fe6edfa987135b55dfb33ad7c5e80102649a8acc38313be740eeed4a622351d7b37333a3"]}, 0x58}, 0x1, 0x0, 0x0, 0x40}, 0x0) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r3, 0x4040534e, &(0x7f00000000c0)={0x335, @tick=0xe, 0x42, {0x80}, 0x2}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r3, 0xc04c5349, &(0x7f0000000000)={0x4c58, 0x8001, 0x200}) tkill(r2, 0x7) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r5 = getpid() sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f0000000180)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) syz_open_procfs(r5, &(0x7f0000000300)='oom_score\x00') 10.764298453s ago: executing program 2 (id=2045): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000005"], 0x48) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x800}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) ioctl$KVM_X86_SETUP_MCE(r2, 0x4008ae9c, &(0x7f0000000040)={0x6, 0x4, 0x5}) close(0x3) openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="0800000004000000040000000900000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0200000001000000000000000000000000000025b019c25f62009dc993b25f3cafda"], 0x50) socketpair$unix(0x1, 0x3, 0x0, 0x0) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x3, 0x0) socket$kcm(0x2, 0x1000000000000005, 0x0) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x3ec0) mmap(&(0x7f0000141000/0x1000)=nil, 0x1000, 0xe, 0x2703bc1b62154692, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) bpf$PROG_LOAD(0x25, 0x0, 0x0) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f0000000300)=[{{&(0x7f0000000280)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @private1}}}, 0x80, &(0x7f0000000cc0)=[{&(0x7f0000000380)=""/194, 0xc2}, {&(0x7f0000000480)=""/104, 0x68}, {&(0x7f0000000140)=""/42, 0x2a}, {&(0x7f0000000500)=""/132, 0x84}, {&(0x7f00000005c0)=""/188, 0xbc}, {&(0x7f00000001c0)=""/58, 0x3a}, {&(0x7f0000000680)=""/250, 0xfa}, {&(0x7f0000000780)=""/145, 0x91}, {&(0x7f0000000840)=""/173, 0xad}, {&(0x7f0000000a00)=""/251, 0xfb}], 0xa, &(0x7f0000000bc0)=""/254, 0xfe}, 0x7}], 0x1, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r4, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0xd231c4f959ad4808) syz_open_dev$dri(0x0, 0x1, 0x111000) r5 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$SG_GET_COMMAND_Q(r5, 0x2270, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmmsg$inet6(r6, &(0x7f0000000900)=[{{&(0x7f0000000200)={0xa, 0x4e24, 0xa, @mcast2, 0x6}, 0x1c, &(0x7f0000000000)=[{&(0x7f0000000280)}], 0x1}}], 0x1, 0x4000844) shutdown(r6, 0x1) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, 0x0) 9.747167085s ago: executing program 2 (id=2047): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x20, 0x3, &(0x7f0000000200)=@framed, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99ee}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000002380)={r2, 0x0, 0x2d, 0x0, @val=@netfilter={0x2, 0x4, 0x600}}, 0x20) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fc00100}]}) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d000000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r4}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r5 = getpid() sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r8 = add_key$user(&(0x7f0000000180), &(0x7f0000000340)={'syz', 0x0}, &(0x7f0000000480)='.', 0x1, 0xfffffffffffffffd) r9 = syz_open_dev$vbi(&(0x7f0000000000), 0x1, 0x2) ioctl$VIDIOC_CREATE_BUFS(r9, 0xc100565c, &(0x7f00000013c0)={0x200, 0x2, 0x2, {0x9, @vbi={0xb5, 0x0, 0x3, 0x42474752, [0x2, 0x8000000], [0x8200, 0x1]}}, 0x4}) r10 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xf1, 0xfffffffffffffffd) openat$fuse(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) keyctl$dh_compute(0x17, &(0x7f00000000c0)={r8, r10, r8}, &(0x7f00000001c0)=""/241, 0xf1, &(0x7f0000000000)={&(0x7f0000000140)={'rmd160\x00'}}) getpid() ioctl$SECCOMP_IOCTL_NOTIF_RECV(r3, 0xc0502100, &(0x7f0000000680)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_SEND(r3, 0xc0182101, &(0x7f0000000080)={r11, 0x1, 0x6}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r3, 0xc0502100, &(0x7f0000000380)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r3, 0x40182103, &(0x7f0000000240)={r12, 0x1, r3, 0x6}) ioctl$SECCOMP_IOCTL_NOTIF_SEND(r3, 0xc0182101, &(0x7f0000000280)={r12, 0x0, 0x5}) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000480)=@newtaction={0x84, 0x30, 0x871a15abc695fb3d, 0x0, 0x0, {}, [{0x70, 0x1, [@m_tunnel_key={0x6c, 0x1, 0x0, 0x0, {{0xf}, {0x3c, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{}, 0x1}}, @TCA_TUNNEL_KEY_ENC_IPV6_SRC={0x14, 0xb, @loopback={0x400000000000000}}, @TCA_TUNNEL_KEY_ENC_DST_PORT={0x6, 0x9, 0x4e20}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x84}}, 0x40084) 7.086603998s ago: executing program 2 (id=2054): syz_usb_control_io$sierra_net(0xffffffffffffffff, 0x0, 0x0) (async) prlimit64(0x0, 0xe, 0x0, 0x0) (async) r0 = syz_open_dev$MSR(&(0x7f0000000100), 0x0, 0x0) read$msr(r0, &(0x7f0000001a40)=""/102392, 0x18ff8) (async) socket$pppl2tp(0x18, 0x1, 0x1) r1 = syz_open_dev$dri(&(0x7f00000000c0), 0x1, 0x2) pread64(r1, 0x0, 0xfffffffffffffef9, 0x9) (async) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r1, 0x4010640d, 0x0) (async) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r1, 0xc01064b5, 0x0) (async) ioctl$DRM_IOCTL_MODE_GETPLANE(r1, 0xc02064b6, &(0x7f00000016c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r1, 0xc02064b9, 0x0) (async) ioctl$DRM_IOCTL_MODE_ATOMIC(r1, 0xc03864bc, 0x0) (async) r2 = syz_io_uring_setup(0xa57, 0x0, 0x0, 0x0) r3 = openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_MIGRATE_ID(r3, 0x0, 0x0) (async) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0) r4 = fsopen(&(0x7f0000001140)='hugetlbfs\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) (async) r5 = fsmount(r4, 0x0, 0x0) close_range(r0, r5, 0x0) (async) fchdir(r5) mknodat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x1000, 0x0) fchdir(r2) r6 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYRESOCT=r3], 0x0) syz_usb_control_io(r6, 0x0, &(0x7f0000000780)={0x84, &(0x7f0000000540)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r6, 0x0, 0x0) (async) syz_usb_control_io(r6, 0x0, 0x0) (async) syz_usb_control_io$cdc_ncm(r6, 0x0, 0x0) 6.693316135s ago: executing program 3 (id=2055): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) (async) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) syz_open_dev$sg(0x0, 0x1ff, 0x200000) (async) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) (async) setsockopt$sock_linger(0xffffffffffffffff, 0x1, 0x3c, 0x0, 0x0) (async) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) (async, rerun: 32) r1 = accept$nfc_llcp(0xffffffffffffffff, &(0x7f0000000180), &(0x7f0000000100)=0x60) (rerun: 32) recvmmsg(r1, &(0x7f0000006500)=[{{&(0x7f0000000240)=@pppoe={0x18, 0x0, {0x0, @random}}, 0x80, &(0x7f0000000440)=[{&(0x7f0000000340)=""/7, 0x7}, {&(0x7f0000000640)=""/210, 0xd2}, {&(0x7f0000000880)=""/205, 0xcd}, {&(0x7f0000000380)=""/6, 0x6}], 0x4, &(0x7f0000000a40)=""/199, 0xc7}, 0x2}, {{&(0x7f0000000580)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @multicast}, 0x80, &(0x7f0000000d80)=[{&(0x7f0000000b40)=""/241, 0xf1}, {&(0x7f00000007c0)=""/127, 0x7f}, {&(0x7f0000000980)=""/106, 0x6a}, {&(0x7f0000000480)=""/42, 0x2a}, {&(0x7f0000000500)=""/50, 0x32}, {&(0x7f0000000740)=""/20, 0x14}, {&(0x7f0000000c40)=""/241, 0xf1}, {&(0x7f0000000d40)=""/15, 0xf}], 0x8, &(0x7f0000000e00)=""/170, 0xaa}, 0xec}, {{&(0x7f0000000ec0)=@l2, 0x80, &(0x7f00000015c0)=[{&(0x7f0000000f40)=""/198, 0xc6}, {&(0x7f0000001040)=""/186, 0xba}, {&(0x7f0000001100)=""/145, 0x91}, {&(0x7f00000011c0)=""/41, 0x29}, {&(0x7f0000001200)=""/151, 0x97}, {&(0x7f00000012c0)=""/220, 0xdc}, {&(0x7f0000001400)=""/100, 0x64}, {&(0x7f0000001480)=""/57, 0x39}, {&(0x7f00000014c0)=""/223, 0xdf}], 0x9, &(0x7f0000001680)=""/158, 0x9e}, 0x4}, {{&(0x7f0000001740)=@pptp={0x18, 0x2, {0x0, @initdev}}, 0x80, &(0x7f00000018c0)=[{&(0x7f00000017c0)=""/228, 0xe4}], 0x1, &(0x7f0000001900)}}, {{&(0x7f0000001940)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @private1}}}, 0x80, &(0x7f0000002b00)=[{&(0x7f00000019c0)=""/4096, 0x1000}, {&(0x7f00000029c0)=""/207, 0xcf}, {&(0x7f0000002ac0)=""/47, 0x2f}], 0x3, &(0x7f0000002b40)=""/222, 0xde}, 0x5}, {{0x0, 0x0, &(0x7f0000004d00)=[{&(0x7f0000002c40)=""/4096, 0x1000}, {&(0x7f0000003c40)=""/52, 0x34}, {&(0x7f0000003c80)=""/4096, 0x1000}, {&(0x7f0000004c80)=""/79, 0x4f}], 0x4}, 0x9}, {{&(0x7f0000004d40)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @multicast}, 0x80, &(0x7f0000006440)=[{&(0x7f0000004dc0)=""/105, 0x69}, {&(0x7f0000004e40)=""/227, 0xe3}, {&(0x7f0000004f40)=""/216, 0xd8}, {&(0x7f0000005040)=""/162, 0xa2}, {&(0x7f0000005100)=""/113, 0x71}, {&(0x7f0000005180)=""/4096, 0x1000}, {&(0x7f0000006180)=""/197, 0xc5}, {&(0x7f0000006280)=""/54, 0x36}, {&(0x7f00000062c0)=""/85, 0x55}, {&(0x7f0000006340)=""/210, 0xd2}], 0xa}, 0xb}], 0x7, 0x20, &(0x7f00000066c0)={0x0, 0x3938700}) openat(0xffffffffffffff9c, &(0x7f00000013c0)='./file0/file0\x00', 0x42, 0x0) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1) (async) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) (async) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@metacopy_on}]}) r2 = open(&(0x7f0000000040)='./file0\x00', 0x400, 0x43) mknodat$loop(r2, &(0x7f0000000200)='./file1\x00', 0x40, 0x1) (async, rerun: 32) r3 = syz_open_dev$dri(&(0x7f00000000c0), 0x9237, 0x149441) (rerun: 32) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r3, 0xc01064bd, &(0x7f0000000100)={&(0x7f0000001cc0)='1', 0x1, 0x0}) (async) r5 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r5, 0xc01064bd, &(0x7f0000001540)={&(0x7f0000001480)='8', 0x1}) ioctl$DRM_IOCTL_MODE_DESTROYPROPBLOB(r5, 0xc00464be, &(0x7f0000000180)={r4}) (async) chdir(&(0x7f00000003c0)='./bus\x00') (async) mkdir(&(0x7f0000000140)='./control\x00', 0x5) (async) renameat2(0xffffffffffffff9c, &(0x7f0000000a00)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000600)='./file1\x00', 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000540)='./file7\x00', 0x1c0) (async) fsconfig$FSCONFIG_CMD_RECONFIGURE(0xffffffffffffffff, 0x7, 0x0, 0x0, 0x0) (async) renameat2(0xffffffffffffff9c, &(0x7f0000000780)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file7/file0\x00', 0x1) 6.331290766s ago: executing program 3 (id=2056): syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00') r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') io_setup(0x6, &(0x7f0000001380)=0x0) io_submit(r1, 0x1, &(0x7f0000000340)=[&(0x7f0000000100)={0x1000000, 0x0, 0x0, 0x5, 0x8001, r0, 0x0}]) mount$binderfs(0x0, &(0x7f0000000000)='./binderfs\x00', 0x0, 0x194d020, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x5, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000000000000000000003b8100008500f0007d000000850000005000000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x200}, 0x94) unshare(0x8000000) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000400)={&(0x7f0000000240)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000020000000000000000000004"], 0x0, 0x26}, 0x28) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000000), 0x8) unshare(0x6010100) semget$private(0x0, 0x4000, 0x555) r2 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) pwrite64(r2, 0x0, 0x0, 0x4) semtimedop(0x0, &(0x7f0000000040)=[{0x2, 0x5, 0x800}, {0x2, 0xff7a, 0x1800}, {0x3, 0x1ff, 0x1000}, {0x5, 0x3ff, 0x1000}, {0x1, 0x7, 0x1800}, {0x2, 0xb}, {0x3, 0x6, 0x1000}, {0x4, 0x8, 0x800}, {0x3, 0x8}, {0x4, 0x5, 0x1000}], 0xa, 0x0) 6.166329594s ago: executing program 3 (id=2057): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) syz_open_procfs(0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_io_uring_setup(0x500, &(0x7f0000000080)={0x0, 0x4000000, 0xb2, 0x0, 0x4, 0x0, 0x0}, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000280)={0x1f, 0xffff, 0x3}, 0x6) io_setup(0x8f0, &(0x7f0000002400)=0x0) rename(0x0, &(0x7f0000000140)='./file0\x00') syz_usb_connect(0x0, 0x4f, &(0x7f0000000100)=ANY=[@ANYBLOB="120100005cdd2e106307151088560000000109023d00010000d00009047e0004ff5b34000905b74318860809050725018705ee7b09050a000002810bac090504"], 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x6}]}, 0x10) io_submit(r1, 0x1, &(0x7f0000000600)=[&(0x7f0000000100)={0x2002000000, 0x4, 0x0, 0x1, 0x0, r0, &(0x7f0000000040)="0200ffff0000", 0x6, 0x0, 0x0, 0x2}]) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8b28, &(0x7f00000002c0)={'wlan0\x00'}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) socket(0x6, 0x800, 0x6) r3 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) writev(r3, &(0x7f0000000080)=[{&(0x7f0000000140)='3', 0x1}], 0x1) 5.837495251s ago: executing program 2 (id=2058): r0 = syz_clone(0x2b02000, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000002e02, 0x0) r2 = dup(r1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000b, 0x11, r2, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CAP_SPLIT_IRQCHIP(r4, 0x4068aea3, &(0x7f0000000200)={0x79, 0x0, 0x52f}) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r5 = getpid() sched_setscheduler(r5, 0x1, &(0x7f0000000280)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f00000003c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x6000, 0x1) r8 = fsopen(&(0x7f0000000100)='qnx6\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r8, 0x1, &(0x7f0000000000)='source', &(0x7f0000000040), 0x0) r9 = syz_io_uring_setup(0xdf4, &(0x7f00000002c0)={0x0, 0x2041, 0x4800, 0x2, 0x1df}, &(0x7f0000000340), &(0x7f0000000380)) io_uring_enter(r9, 0x636f, 0xced3, 0x0, &(0x7f0000000440)={[0x1f4]}, 0x8) fsconfig$FSCONFIG_CMD_CREATE(r8, 0x6, 0x0, 0x0, 0x0) r10 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x1) ioctl$KVM_CAP_HYPERV_SYNIC(r10, 0x4068aea3, &(0x7f00000000c0)) ioctl$KVM_SET_MSRS(r10, 0x4008ae89, &(0x7f00000001c0)={0x1, 0x0, [{0x400000b3, 0x0, 0x8}]}) fsconfig$FSCONFIG_SET_BINARY(0xffffffffffffffff, 0x2, 0x0, &(0x7f00000004c0)="e6ca871e95292e1da574", 0xa) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000800000001"], 0x48) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) 5.468941119s ago: executing program 6 (id=1997): r0 = openat$procfs(0xffffffffffffff9c, &(0x7f00000004c0)='/proc/asound/seq/clients\x00', 0x0, 0x0) lseek(r0, 0x9, 0x0) mkdir(&(0x7f0000000040)='./file0\x00', 0x10) mount$afs(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='dyn']) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x8, &(0x7f0000000300)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x8880, 0x85) lseek(r1, 0x100000000004, 0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_io_uring_setup(0x497, &(0x7f0000000400)={0x0, 0x3f73, 0x100, 0x0, 0x1d2}, &(0x7f0000000340)=0x0, &(0x7f0000000600)=0x0) io_uring_register$IORING_REGISTER_PBUF_RING(r4, 0x16, &(0x7f0000000040)={&(0x7f0000001000)={[{0x0, 0xffffffffffffff3a, 0x3, 0xf4}]}, 0x1, 0x1}, 0x1) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) r7 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r7, &(0x7f0000000000)={0x2, 0x4e21, @empty}, 0x10) syz_io_uring_submit(r5, r6, &(0x7f00000002c0)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x20, 0x10, r7, 0x0, 0x0, 0x0, 0x262, 0x1, {0x1}}) io_uring_enter(r4, 0x3516, 0xf400, 0x0, 0x0, 0xf4) getdents64(r1, 0x0, 0x4f) 4.324335772s ago: executing program 7 (id=2023): socket$nl_generic(0x10, 0x3, 0x10) (async) r0 = syz_genetlink_get_family_id$smc(&(0x7f0000000000), 0xffffffffffffffff) (async) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) (async) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0xa, 0x4, 0xdd, 0xa}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000940)='percpu_alloc_percpu\x00', r4}, 0x10) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x3, 0x3, &(0x7f0000000000)=@framed={{0x7a, 0xa, 0x0, 0xff00, 0x0, 0x71, 0x10, 0x43}}, &(0x7f0000000480)='syzkaller\x00'}, 0x80) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r2, &(0x7f0000000200)={0xa, 0x0, 0x2, @loopback, 0x8}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x1, &(0x7f0000000140)=@gcm_128={{0x303}, "87ee8ac6c46dad33", "2607080d7f4fcf00fd4ef2dece6c7c58", '\x00', '#\x00'}, 0x28) setsockopt$sock_int(r2, 0x1, 0x7, &(0x7f0000000040)=0x5, 0x4) (async, rerun: 64) sendmsg$SMC_PNETID_DEL(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000000c0)={0x14, r0, 0xe27, 0x70bd25, 0x0, {0x4, 0x7, 0x2}}, 0x14}, 0x1, 0x40030000000000}, 0x4000) (async, rerun: 64) syz_io_uring_setup(0xbdc, &(0x7f0000000640)={0x0, 0xec25, 0x400, 0x1, 0x40000333}, 0x0, 0x0) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) (async, rerun: 64) socket$packet(0x11, 0x3, 0x300) (rerun: 64) r5 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$sock_TIOCOUTQ(r5, 0x5411, &(0x7f0000000000)) (async) r6 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f00000002c0)={'bridge_slave_0\x00', 0x0}) (async, rerun: 32) r8 = socket(0x10, 0x80002, 0x0) (rerun: 32) sendmsg$nl_route(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="440000001100a7cc4a372eaf541d002007000000", @ANYRES32=r7, @ANYBLOB="00000000100000001c001a80080002802d00ff0008000200", @ANYRES16=r8, @ANYRES32=r8], 0x44}}, 0x2000800) (async) chdir(&(0x7f0000000040)='./file0\x00') 4.164909723s ago: executing program 7 (id=2059): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000400)=@file={0x0, './file0\x00'}, 0x4e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) write$P9_RVERSION(0xffffffffffffffff, 0x0, 0x500) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="01000000120000007f00000001"], 0x48) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000002c0)={{r2, 0xffffffffffffffff}, &(0x7f0000000240), &(0x7f0000000280)='%pS \x00'}, 0x20) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f00000004c0)={r3, &(0x7f0000000740), 0x0}, 0x20) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x3, 0x0, 0x800010, 0x0, 0x2, 0x89, 0x8, 0xb319, 0x3}, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r4, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_MD5SIG(r4, 0x6, 0xe, &(0x7f0000000300)={@in6={{0xa, 0x4e24, 0x2, @empty, 0xcac2d78a}}, 0x0, 0x0, 0x43, 0x0, "ee8b0e650926a96ecc136e7fb980e989db9e8bf9b93129488f651a8de213eb94cd46e19d9c65a018444a131f4da58ae36556dd38ea6c029607462029add09240005c6776267517308a3d40aa1c788df6"}, 0xd8) connect$inet6(r4, &(0x7f0000000100)={0xa, 0x0, 0x0, @loopback}, 0x1c) futex_waitv(&(0x7f0000001080)=[{0x3, &(0x7f0000001040)=0x3, 0x82}], 0x1, 0x0, &(0x7f0000001100)={0x77359400}, 0x1) setsockopt$inet6_tcp_TCP_ULP(r4, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r4, 0x11a, 0x1, &(0x7f00000001c0)=@gcm_256={{0x304}, "6ae04425ace3f60c", "acba84f0a6731f234db1cc7f3f382ad796bd667cb12ea99509873931d2873103", "0f9dafb4", "ec3fff9afd96e6c0"}, 0x38) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r4, 0x6, 0x14, &(0x7f0000000040)=0x2, 0x4) ioctl$int_in(r4, 0x5421, &(0x7f0000000140)=0x1) close(r4) ioctl$sock_SIOCOUTQ(r0, 0x5411, &(0x7f0000000180)) 4.036537824s ago: executing program 6 (id=2060): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="1c0000005e000ffb28bd7000ffdbdf2500", @ANYRES64], 0x1c}, 0x1, 0x0, 0x0, 0x4000010}, 0x44040) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r0, 0x8983, &(0x7f0000000000)={0x0, 'bridge_slave_1\x00', {0x3}, 0x2}) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_RECVNXTINFO(r1, 0x84, 0x21, &(0x7f00000000c0), &(0x7f0000000140)=0x4) recvmsg(r0, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x102) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sysvipc/msg\x00', 0x0, 0x0) pread64(r2, &(0x7f0000001440)=""/126, 0x7e, 0x0) 3.714161036s ago: executing program 6 (id=2061): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000795d6c08450c3a616dc4010203010902120001000000000904"], 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x3, &(0x7f0000000d00)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], 0x0}, 0x94) (async) r1 = socket$kcm(0x2d, 0x2, 0x0) (async) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x3, &(0x7f0000000d00)=ANY=[], &(0x7f0000000000)='syzkaller\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000280)='mctp_key_acquire\x00', r2, 0x0, 0x9}, 0x18) (async) ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x89e2, &(0x7f0000000240)={r1}) syz_usb_control_io(r0, 0x0, 0x0) 3.167973014s ago: executing program 4 (id=2037): r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000c00), 0x2, 0x0) write$vhost_msg_v2(r0, &(0x7f0000000840)={0x2, 0x0, {&(0x7f0000000740)=""/215, 0xffffffffffffffdd, 0x0, 0x3, 0x2}}, 0x48) 2.944827591s ago: executing program 7 (id=2062): mount_setattr(0xffffffffffffffff, 0x0, 0x8100, &(0x7f0000000300)={0x8, 0x1001f5, 0x40000}, 0x20) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ptrace$peeksig(0x4209, r0, &(0x7f0000000080)={0xc000000, 0x0, 0x2}, &(0x7f0000000380)=[{}, {}]) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = mq_open(&(0x7f0000000a00)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xd3\xa7\xd8J\xfd\x94#KT\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\x88N\xb8\xde\xeb)\xcd\xc56m\n\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88|0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc\x02\xea\x91\xe8\xd8\x01YZy\xe6!\x89\x9c\xd1\xa6\x167\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1[\x84\x10aF\x9b\xda\xeb\xc4*\x02q\xb2\x92\x00\x8cv\xac AN\xb9\xaa\x81W\x97Te\x81\x98L\xfe\x97+u\xd3^\xb1\xf0\xe0\x1f\xbd\a\xbb\xe5\x18\x9ds\x12ha\x00\xeb\x84\x99\xc6\x0f\xf1\xd5LD\xa87\xa0DQ\x8a2\x16!8,\xbc%$\xf1\xf2\xd6\x9cy\xecK\xda\xc5\xdc\xfa\xdd\xf6\b\xc6\xb4\x14\x16\x9c\x7f\x92\x85\xb0\xa2%:\xf0\xf4\x150\x0f\xb4\xa6d\xb4\xe4L\x19W\xd5\x90\xf7l\x1b\xfe\xde\vh\x97=m\x82.\xac\vh\xfe\x84Q}\x838/\x83\xebP\xbe\xd6+:\xceE\\\x95\xd4\xac\x92\x87\xd7\x98\x97\xe3\xec\xad\xd5\xac\x80C\x84R\x88r^g\xbaQ(\x9a>\xe2\xba\xa8=\x17\f04\x8f\x1f\xf2\x88*@v\xe7\xd1\xee\xb3\xc2\x8dT\xda\x81g\xd9\x1a:hzW6s)x\x06\xae\x11\xf2\x1e\xcd\v\xe5L\x19\x96s\xbc\x9e\xf4\x10$\r\xa4\xd8\xa2\xa2\xfcM\xc5R3~$\xc0\xa5n\x9a W\xb1e\xcc<$\xf5#G\xce\xaf\x88U\xfa\x80\xf24\xf6\xb5\xef\xe2z\xcf\x9eN\x92\xac\x81{\xe6\xbd\xd7\x16\xe6F\xe2\x9e\x91%\x94\v\xb9\xdc\xd6\x87\x8f\xcd\xc1\xb05\x81\x81\xf8\xe9X\xe8Kt9@\xf4\xe1\xa6=\xc9\xe1:p4\nP[f\x1d\xfd\xfa\x839\x8d\x0e\xd1\xf9\xa0\xd2^E\xe5\xedo.\xaa\xf2\xb4\xcdn\x14\f\xcd\x83_yk\xda\xc5\x89\xf0Z\xea\x1d\xbd\xc00\v\xa3\xb3\xbe\xe6\x8b\x18/\xa8\xaaY\xf2\x89\x0f\x9enOOr\x00\xb2\x01\x1f:Z\xb8\xee;\xe3;\x8aPV\xce\xee\xf8[\x16\n\xe6:z\xb8\x1dvk\a{\xc1\x14\xd9+\xdb\t\x11\x90y\xe8\\\xe6\xfc\xca\xb4\xcbC\xd6\xd0\xbeC\xce\xc0L\xdb\xcd\xb3\x907c\xb4\xa6\xce\xdb[\xce\x122N\xa3\xc7Q<\x1a\xa5\xb3)\xc5\x98\x84\x8a\x82\x19\xb0\t\xac\x10\\\x8c\xbe\xcb\raIYe[\xa8\xc4\xac\x0e\xbb\x0f\b^\xdag\xe2\xa9\"\xf5h\'\xcf\xd9\x1b\xef\xe3\xe7y\x82\x1e\xca\x7f\x02 \xcf\x9e\xe0\xd9TM\xb9\n\xa9\xad3\x91\xa5\xe6!\xcd\xa2\xa4\x14\x12\xf9\xbf\xa8b\xcec:\xd7\'\f\f\x957\xc9}\r\xa6\xaa\x0f\xca\x96\xeb\x00\x00\x00\x00\x00', 0x42, 0x1f0, 0x0) mq_unlink(&(0x7f0000000000)='eth0\x00') close(r3) r4 = syz_open_dev$sndpcmc(&(0x7f0000000a00), 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_HW_REFINE(r4, 0xc25c4110, 0x0) sendmsg$ETHTOOL_MSG_CHANNELS_SET(0xffffffffffffffff, 0x0, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x121000, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x2) ioctl$KVM_PRE_FAULT_MEMORY(r7, 0xc040aed5, &(0x7f0000000000)={0x3d8c3144653f8606, 0x102000}) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$IPVS_CMD_GET_DEST(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)={0x28, r9, 0x50dc85624ea6cf59, 0x0, 0x1, {}, [@IPVS_CMD_ATTR_SERVICE={0x14, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x3}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x400c081}, 0x0) r10 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x204, 0x2) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1000002, 0x11012, r10, 0x10c000) ioctl$USBDEVFS_SUBMITURB(r10, 0x8038550a, &(0x7f0000000140)=@urb_type_control={0x2, {}, 0x2000000b, 0x80, &(0x7f0000000240)={0x3, 0x0, 0xfffa, 0x4360}, 0x8, 0x6, 0x7d, 0x0, 0x1, 0x101, 0x0}) move_pages(0x0, 0x20a0, &(0x7f0000000040), &(0x7f0000001180), &(0x7f0000000000), 0x0) 2.944444687s ago: executing program 4 (id=2063): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x0, 0x440101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = syz_io_uring_setup(0x3, &(0x7f0000000240)={0x0, 0x21c2a, 0x10180, 0x1, 0x1, 0x0, r1}, &(0x7f0000000100)=0x0, &(0x7f00000000c0)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0, 0x0, {}, 0x1}) r5 = getpgrp(0x0) sched_setaffinity(r5, 0x8, &(0x7f0000000140)=0x104) (async) prlimit64(r5, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r6 = getpid() (async) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, 0x0, 0x0) sched_setscheduler(r6, 0x2, &(0x7f0000000000)=0x3) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) (async) r7 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r7, 0x1, 0x0) (async) r8 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r8, &(0x7f0000019680)=""/102392, 0x18ff8) (async) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x25, &(0x7f0000000200)=0x474c, 0x4) (async) bind$inet(0xffffffffffffffff, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r1, &(0x7f0000000080)={0x2, 0xffff, @multicast1}, 0x10) (async) sendmmsg(0xffffffffffffffff, &(0x7f0000007fc0), 0x800001d, 0x0) (async) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x24058041) (async) io_uring_enter(r2, 0x2ded, 0x4000, 0x0, 0x0, 0x0) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) (async) unshare(0x22020600) fcntl$lock(r9, 0x6, &(0x7f0000002000)={0x1, 0x0, 0x0, 0x1}) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) 2.012601248s ago: executing program 3 (id=2064): r0 = syz_usb_connect(0x2, 0x24, &(0x7f00000007c0)=ANY=[@ANYBLOB="12010000ed3ec908cd0cb300ea2d010203010902120001000000000904"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000000)={0x1c, &(0x7f0000000640)=ANY=[], 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f00000003c0)={0x44, &(0x7f0000000500)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) bpf$MAP_CREATE(0x0, 0x0, 0x48) r1 = syz_init_net_socket$llc(0x1a, 0x801, 0x0) bind$llc(r1, &(0x7f0000000000)={0x1a, 0x0, 0x0, 0xf, 0x0, 0x3f, @random="cb00100000ea"}, 0x10) connect$llc(r1, &(0x7f0000000240)={0x1a, 0x20, 0x0, 0x9, 0x2, 0x0, @remote}, 0x10) r2 = syz_init_net_socket$llc(0x1a, 0x801, 0x0) bind$llc(r2, &(0x7f0000000000)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x42}, 0x10) syz_usb_control_io(r0, 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(0xffffffffffffffff, 0x40045532, &(0x7f0000000000)) prlimit64(0x0, 0xe, &(0x7f00000003c0)={0x6, 0x7}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x2) close(0xffffffffffffffff) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f0000000080), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000300)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-twofish-3way\x00'}, 0x58) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r5 = signalfd4(0xffffffffffffffff, &(0x7f00000000c0)={[0x1]}, 0x8, 0x0) faccessat2(r5, &(0x7f0000001400)='\x00', 0x0, 0x1100) r6 = accept4(r4, 0x0, 0x0, 0x800) sendmmsg$alg(r6, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb0958730", 0x4c}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb", 0x4d}], 0x3, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r6, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000004c0)=""/85, 0x55}, {&(0x7f0000000200)=""/83, 0x53}], 0x2}, 0x40000103) 1.67643314s ago: executing program 7 (id=2065): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[], 0x1c}, 0x1, 0x0, 0x0, 0x42804}, 0x0) (async) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) (async) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) (async) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) (async) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) (async) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = syz_open_dev$loop(&(0x7f0000000440), 0x81, 0x2a82) (async) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000400)='cpuset.effective_cpus\x00', 0x275a, 0x0) ioctl$LOOP_CONFIGURE(r4, 0x4c0a, &(0x7f00000005c0)={r5, 0x800, {0x2a00, 0x80010000, 0x0, 0x5, 0x0, 0x0, 0x0, 0x20, 0x1c, "fee8a2ab78fc179fd1f8a0e91ddaaca7bd6447a4b4e00d9683dda1af1ea09de2b7fb0a0100000000000000000300", "2809e8dbe108598927875397bab22d0000b420a9c81f40f05f819e01177d3d458dac00000000000000000000003b00000000000000000200", "90be8b1c5512406c7f00", [0x4, 0x40000000000000]}}) (async) r6 = syz_open_dev$loop(&(0x7f00000001c0), 0x1, 0x88383) ioctl$LOOP_CONFIGURE(r6, 0x4c0a, &(0x7f0000001280)={r4, 0x0, {0x2a12, 0x80010000, 0x0, 0x0, 0x4, 0x0, 0x0, 0x3, 0x1c, "fee8a2ab78fc179fd1f8a0e91ddaaca7bd64c6a4b4e00d9603dda1af1ea80000000000000000000000deff00000000000000000000000014a2648f00", "2809e8dbe108038948224ad54afac11d875397bdb22d0000b420a1a93c7540f4767f9e01177d3dd40600000061ac00", "90be8b1c55f96400", [0x800]}}) (async) ioctl$LOOP_CHANGE_FD(r6, 0x4c06, r4) (async) openat$cgroup(0xffffffffffffffff, 0x0, 0x200002, 0x0) (async) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) (async) r7 = socket$inet(0x2, 0x4000000000000001, 0x0) (async) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYRES32=r6], 0x48) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000700)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000400007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='sched_switch\x00', r9}, 0x10) setsockopt$inet_tcp_int(r7, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) (async) bind$inet(r7, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) (async) setsockopt$SO_ATTACH_FILTER(r7, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe3}]}, 0x10) (async) sendto$inet(r7, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendmmsg$inet(r7, &(0x7f0000004a80)=[{{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f00000007c0)="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", 0x1c4}], 0x1}}], 0x1, 0x400c0) sendto$inet(r7, &(0x7f0000000580)="17", 0x1d4c, 0x10048095, 0x0, 0x0) openat$drirender128(0xffffffffffffff9c, &(0x7f00000000c0), 0x8000, 0x0) 1.57337457s ago: executing program 4 (id=2066): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) r0 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000080), 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, r0}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) bind$unix(0xffffffffffffffff, &(0x7f0000000440)=@file={0x1, './file0\x00'}, 0x6e) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) ioctl$PTP_PIN_GETFUNC2(0xffffffffffffffff, 0xc0603d0f, &(0x7f00000003c0)={'\x00', 0x2, 0x0, 0xe}) r4 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$sock_rose_SIOCADDRT(r4, 0x890b, 0x0) connect$rose(r4, &(0x7f0000000040)=@short={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, 0x1, @null}, 0x1c) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) mount$tmpfs(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000180), 0x400, &(0x7f00000001c0)=ANY=[@ANYBLOB="6d706f6c010100000000000000"]) mount$tmpfs(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x420, &(0x7f00000000c0)={[{@mpol={'mpol', 0x3d, {'interleave', '=relative', @void}}}]}) 1.464347109s ago: executing program 6 (id=2067): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) ioctl$SNDCTL_MIDI_PRETIME(0xffffffffffffffff, 0xc0046d00, &(0x7f00000002c0)=0x20f) r0 = getpid() r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) syz_pidfd_open(0x0, 0xf0) socket$isdn_base(0x22, 0x3, 0x0) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3fc, 0x0, 0x32}, 0x9c) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000096c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001080)=@newtaction={0x6c, 0x30, 0x9, 0x0, 0x0, {}, [{0x58, 0x1, [@m_vlan={0x54, 0x1, 0x0, 0x0, {{0x9}, {0x28, 0x2, 0x0, 0x1, [@TCA_VLAN_PARMS={0x1c, 0x2, {{0x0, 0x0, 0x20000000, 0x0, 0xfffffffc}, 0x3}}, @TCA_VLAN_PUSH_VLAN_ID={0x6, 0x3, 0xffff}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x6c}}, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x9, &(0x7f0000000000)={0x0, @in6={{0xa, 0x100, 0x0, @empty}}, 0x0, 0x0, 0x0, 0x0, 0x8a}, 0x9c) bind$inet6(r4, &(0x7f0000000300)={0xa, 0x4e23, 0x0, @loopback, 0x3}, 0x7e) sendto$inet6(r4, &(0x7f0000847fff)='X', 0x34000, 0xe0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000000c0)='memory.events.local\x00', 0x0, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r2, 0x8983, &(0x7f0000000100)={0x0, 'erspan0\x00', {0x1}, 0x26}) timer_create(0x0, 0x0, 0x0) mount(&(0x7f0000000140)=@nullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000080)='xfs\x00', 0x2208004, 0x0) syz_usb_connect(0x5, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000538acc089c0e00001e5b0102030109021b00010000000009040000014b34ef000905", @ANYBLOB='s'], 0x0) 519.184242ms ago: executing program 4 (id=2068): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) (async) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) (async) r3 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) add_key$keyring(&(0x7f0000000240), 0x0, 0x0, 0x0, 0xffffffffffffffff) (async) ioctl$IOCTL_VMCI_VERSION2(r1, 0x7a7, &(0x7f0000000040)=0xb0000) (async) ioctl$IOCTL_VMCI_INIT_CONTEXT(r3, 0x7a0, &(0x7f0000000000)={@my=0x1}) keyctl$set_reqkey_keyring(0xe, 0x1) (async) ioctl$IOCTL_VMCI_DATAGRAM_SEND(r3, 0x7ab, &(0x7f0000002440)={&(0x7f0000002000)={{@host, 0x9}, {@local, 0x4}, 0x400, "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"}, 0x418, 0xfffffffd}) (async) close_range(r2, 0xffffffffffffffff, 0x0) r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r5 = dup(r4) r6 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000002480), 0x101c0, 0x0) ioctl$IOMMU_IOAS_UNMAP(r6, 0x3b86, &(0x7f00000024c0)={0x18, 0x0, 0x8000, 0x5}) (async) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000ffc000/0x2000)=nil}) r7 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r7, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, 0x0}], 0x1, 0x11, 0x0, 0x0) r8 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x80082, 0x0) write$vga_arbiter(r8, &(0x7f0000000040), 0xf) (async) prlimit64(0x0, 0xe, 0x0, 0x0) (async) r9 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x121202, 0x0) ioctl$TIOCSTI(r9, 0x5412, &(0x7f0000000380)=0x3) (async) syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) (async) ioctl$KVM_RUN(r7, 0xae80, 0x0) write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000000080)={0xfc, {"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", 0x1000}}, 0x1006) (async) r10 = syz_usb_connect(0x5, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1edb23610000000109022d0101100000000904000003fe03010009cd8d1f0002000000090505020000fcffff09058b1e"], 0x0) syz_usb_control_io(r10, 0x0, 0x0) syz_usb_control_io(r10, 0x0, &(0x7f0000000780)={0x84, &(0x7f00000004c0)=ANY=[@ANYBLOB="00000100000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$rtl8150(r10, &(0x7f0000000000)={0x14, &(0x7f00000010c0)=ANY=[], 0x0}, 0x0) (async) r11 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$EVIOCGMASK(r11, 0x5b02, 0x0) 444.009751ms ago: executing program 7 (id=2069): r0 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(0xffffffffffffffff, 0x84, 0xf, &(0x7f0000000000)={0x0, @in={{0x2, 0x4e24, @private=0xa010102}}, 0x3ff, 0x80, 0x8e6, 0xff, 0x4}, &(0x7f00000000c0)=0x98) setsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000100)={r1, 0xfff, 0x20}, 0xc) socket$rds(0x15, 0x5, 0x0) r2 = syz_open_dev$usbfs(&(0x7f0000000140), 0x8, 0x40) ioctl$IOC_PR_PREEMPT(0xffffffffffffffff, 0x401870cb, &(0x7f0000000180)={0x7, 0x7fff, 0xffff, 0x9}) r3 = syz_usb_connect(0x6, 0x50a, &(0x7f00000001c0)={{0x12, 0x1, 0x200, 0x9, 0xfe, 0x83, 0x8, 0xccd, 0x64, 0xfb36, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x4f8, 0x3, 0x6, 0x0, 0xd8, 0x3, [{{0x9, 0x4, 0x4, 0x2, 0xe, 0x82, 0xf0, 0xad, 0x9, [@hid_hid={0x9, 0x21, 0x6d55, 0xbf, 0x1, {0x22, 0x838}}], [{{0x9, 0x5, 0x2, 0x1, 0x3ff, 0xf, 0x7f, 0xd, [@uac_iso={0x7, 0x25, 0x1, 0x3, 0xff, 0x9}, @uac_iso={0x7, 0x25, 0x1, 0x1, 0xf, 0xff00}]}}, {{0x9, 0x5, 0x6, 0x0, 0x10, 0x9, 0x0, 0x3, [@generic={0x96, 0x5, "9f029d750a6c2d9bda9adf0b7881abd1a845cd5d88d3c364406e3a6f3c22439b9a32aa0491992274e9d23a2cfcafc139c96336636f8a19e760838124178534181dc50f2fe33e0b4a3d2fc588927decb0c3f5153cf846009583ce1e9c5507ada51382e1fcabced079a2387a004ecfbc17b7afaffdc10fca7fed8574c4c28f5e332c8a387c54a53d070aef3a33947d654fe38519f5"}]}}, {{0x9, 0x5, 0x2, 0x0, 0x8, 0x2, 0x82, 0xd2, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x4, 0x6821}]}}, {{0x9, 0x5, 0x8, 0x8, 0x40, 0x3, 0x64, 0x7}}, {{0x9, 0x5, 0x4, 0x0, 0x200, 0x5e, 0x4, 0x9, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x56, 0x5}]}}, {{0x9, 0x5, 0x7, 0x1, 0x40, 0xec, 0x3, 0x7b, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0xdf, 0x7ff}]}}, {{0x9, 0x5, 0x3, 0x4, 0x10, 0xfe, 0x3, 0xf, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0xff, 0x4}]}}, {{0x9, 0x5, 0x0, 0x10, 0x8, 0x8, 0x12, 0xf, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x96, 0x4}, @uac_iso={0x7, 0x25, 0x1, 0x2, 0x6, 0x7}]}}, {{0x9, 0x5, 0xe, 0x10, 0x20, 0x1, 0x7, 0x6, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x22}, @uac_iso={0x7, 0x25, 0x1, 0x2, 0x1, 0x7fff}]}}, {{0x9, 0x5, 0x6, 0x3, 0x0, 0xb, 0x6, 0x2}}, {{0x9, 0x5, 0x3, 0x0, 0x20, 0xac, 0x8, 0xa, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x56, 0x7f}, @generic={0xb7, 0xa, "0f2422dbad73c46150e0a10194a42c6f1d266d920d463527ae7a3347b0ffe96e54e373041f75a701abbc227463a89e3f272d8137dba45d48b0133a2fc25c61cf6f23041bb1016e1dd53e44a52a27dadf8a4f0053e2f79efdd32944f66c6334703219b1781eb3a16fe37f3d491d8fe4e984f0dd570897145ad2bbcbe3b9516d981646ef66f4da5ac3d27082ed2e7c018121986be1de1d4833e26f8474d625ee494a7573c65f3192eabfb4a063994f9f0406d9fa0718"}]}}, {{0x9, 0x5, 0x0, 0x10, 0x8, 0x8, 0xa, 0x1}}, {{0x9, 0x5, 0x0, 0x10, 0x10, 0x3, 0xfb, 0x6, [@generic={0x5d, 0x30, "4428bb0c8ff79c3ba1354d56f1d0d98c86e140707d737df6c2c9bbe364b0449f38450751525b47472a21b3d81aae575777597929e3880b51ff3429f5debbd384ed3063afaf3646350ec1b69b61ea16976d48528be393e353a6368d"}]}}, {{0x9, 0x5, 0x0, 0x0, 0x200, 0x7f, 0x4, 0xa, [@generic={0x77, 0x2, "ca37fef9714d0db881c55dc4b3d0de2f62ac5aed61348295789c8f689c2f53c06cea01c8400c4f3f127c0eff0c027d343424ebba9295d05690394047c9c3378fa840a0e2de22786dcce8c9bf5549470f855b97862e5b2a390114147996e9b5840829955ab8367a8525da211b1456cf2ebc8d0bb0ad"}, @uac_iso={0x7, 0x25, 0x1, 0x82, 0x8, 0x8856}]}}]}}, {{0x9, 0x4, 0x76, 0x6, 0x5, 0xff, 0xff, 0xff, 0xa5, [], [{{0x9, 0x5, 0x9, 0x0, 0x200, 0x0, 0x8, 0x8, [@generic={0x79, 0x1, "3c627ebbc3dd6579f975a12989cde5074b7b2ac04824f475222239d7b8f227dba982095ec0154cc2ff42e330fc5c00f5cf9bbcb688bcdbabf4a895716232da087ba4239828ed43d0c5b1a7ab6fdc028bf1515ac468f3c8914e08864fd0c3a3ec274be6cff039c302596607a316d707efefcf74e302686d"}]}}, {{0x9, 0x5, 0x0, 0x3, 0x10, 0x0, 0x7f, 0x8}}, {{0x9, 0x5, 0xa, 0x4, 0x400, 0xd2, 0x88, 0x4, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0xf, 0xffff}, @uac_iso={0x7, 0x25, 0x1, 0x3, 0x1, 0x92}]}}, {{0x9, 0x5, 0xb, 0x0, 0x10, 0x40, 0x9e, 0x8}}, {{0x9, 0x5, 0x6, 0x0, 0x200, 0xfe, 0x2, 0x2, [@generic={0x56, 0x21, "4a0b94e2652551dfb1a31faae6eb6c8be13adea43218cd3bf3913b91e07a792664a8054ee2fcf53605b1af1064faa2e6acb01977cbf049b091dd6dbbf384b7ce0be5051cf4f86c72ea48f6614f8b58faba989b51"}]}}]}}, {{0x9, 0x4, 0xeb, 0x3, 0x1, 0xff, 0xff, 0xff, 0x3, [@cdc_ncm={{0x8, 0x24, 0x6, 0x0, 0x1, "f4274c"}, {0x5, 0x24, 0x0, 0x4}, {0xd, 0x24, 0xf, 0x1, 0xbf55ae5, 0xc, 0x0, 0x1}, {0x6, 0x24, 0x1a, 0x2, 0x1}, [@mdlm_detail={0x97, 0x24, 0x13, 0x4, "99d9b2adf61a317bb2494d7abca0dd58d7f203fdf8a2a591b27677ba7f0ae3a81d8672ddc6d3277ed24a84cf5ae0d3987f7968e42ff773d86f6c287b5ca7f4ed838b3e77431b69eb9f54d32f739274a750ef257511f1af1b185ce8e9522cce41a0daafad6ba6443944879110d298a7670626f4193a0ffd9fd6e6cd63b2eeb850567d333126743f16c5f4d91443af0a9d714cff"}, @obex={0x5, 0x24, 0x15, 0x1}]}, @hid_hid={0x9, 0x21, 0x200, 0xf, 0x1, {0x22, 0x543}}], [{{0x9, 0x5, 0xf, 0x0, 0x400, 0x9, 0x5, 0xf6}}]}}]}}]}}, &(0x7f00000008c0)={0xa, &(0x7f0000000700)={0xa, 0x6, 0x100, 0xb, 0x9, 0x95, 0x40, 0xd8}, 0x20, &(0x7f0000000740)={0x5, 0xf, 0x20, 0x3, [@ss_cap={0xa, 0x10, 0x3, 0x2, 0x0, 0xb, 0x8, 0x6}, @ext_cap={0x7, 0x10, 0x2, 0x4, 0x2, 0x3, 0x8}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0xc, 0x4, 0x0, 0x7}]}, 0x5, [{0x4, &(0x7f0000000780)=@lang_id={0x4, 0x3, 0x340a}}, {0x4, &(0x7f00000007c0)=@lang_id={0x4, 0x3, 0x40d}}, {0x4, &(0x7f0000000800)=@lang_id={0x4, 0x3, 0x480a}}, {0xc, &(0x7f0000000840)=@string={0xc, 0x3, "15e0b5a313c3b7309648"}}, {0x4, &(0x7f0000000880)=@lang_id={0x4, 0x3, 0x414}}]}) syz_usb_control_io$cdc_ncm(r3, &(0x7f0000000a80)={0x14, &(0x7f0000000940)={0xb66345045f124d60, 0x22, 0xf9, {0xf9, 0x21, "cc947748aaa0412e724a803e343555f30d1df368106f91c2a5d07b27c9d49fde2d51e66b8ab5188781f53c1651bee33f40c7ac7e867cda2ca32094e84eda85c94e4d6aa57598000e35dd3fcb39db668efd28cd7a34daf63b0522783af4b58cb51eef79e7cb93549fe5b4af4a4b247b6cd12a06a36a2786755995c6cfefba94c02b9515fe86954e4f8b9701daa043c2dfe0df6e45ed03c4897b64167b5992d3dbf1dc7f6de9e836f53adca561d2ab6ffd86d970ab8b107a2ab13f8448b8529d11fe8411de55abbbc0b2540852d41a49aea5aad5417cdc4b378272b481c4ac52e97f6e26013da53f62810931ffbab8a5b32287b7c31d2ee2"}}, &(0x7f0000000a40)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000000d00)={0x44, &(0x7f0000000ac0)={0x40, 0xe, 0x4d, "6c44f945f15218009b525dac7c42e2eeefd985b6045a52d6db9c5c1a01362e780e0e68a873332e158225f65c60830ddfc9cbde7c5a097fc65c5b558b3f36f273f919e0fe323b5cec8f8bb53b46"}, &(0x7f0000000b40)={0x0, 0xa, 0x1, 0x2}, &(0x7f0000000b80)={0x0, 0x8, 0x1, 0x3}, &(0x7f0000000bc0)={0x20, 0x80, 0x1c, {0x1, 0x4, 0x3, 0xfffb, 0x4, 0x35, 0x4, 0x1, 0x4ca, 0x4, 0xffff, 0x211}}, &(0x7f0000000c00)={0x20, 0x85, 0x4, 0x9}, &(0x7f0000000c40)={0x20, 0x83, 0x2, 0x1}, &(0x7f0000000c80)={0x20, 0x87, 0x2, 0x401}, &(0x7f0000000cc0)={0x20, 0x89, 0x2, 0x1}}) setsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0x14, &(0x7f0000000d80)=@assoc_value={r1}, 0x8) socket$rxrpc(0x21, 0x2, 0xa) r4 = fcntl$getown(r0, 0x9) sched_setscheduler(r4, 0x1, &(0x7f0000000dc0)=0x7) pwritev(r2, &(0x7f0000001280)=[{&(0x7f0000000e00)="d7f796c29597d49d8dc8ef9bee5a707bf664f22303a9214818ba8ab891b98b552725f6b05328c76bdde8330c40e2a39dec4667956a23ef1d4b86f7e645186e36dc634803d377a8285f7ce3c6dd7de8cc7444f31b54e22249c406086ea961584ab38e2d635669143116457c68ec201c1fbc940a7c53af", 0x76}, {&(0x7f0000000e80)="2e6442c80ff1859a08975937a0b799e5fa89f01f386979e554bed9f31b6878bd2c3e45d4d1a61f307ade6052f3e6920332c10815dfd15887509154277f0aed87f7e10fab7bd75180351bab5b8f174eace8418e467673a6f826efd38d6f4629155cf6ab8ff968e7523981289bcfb7be3d7f0a495188d7c542478a43cbaea86227c7a8810f353500bc98645447c4d4db4af6381fe41beba5e78383a63dbf491321d58142380058f48dd4ba9edfc45b75506b8ea5013f5f362a69a1d2fc8aab3a205eacdf5e296212c4ed830cd5cd", 0xcd}, {&(0x7f0000000f80)="4b41b08bf93bf5ee9f8077e6667958a2b53132b5448d9ab96f3960604d28139cdc07a3c1060dd58c967d1c3ddc20188c691b5805483b1e55eb0c188abb5704e9fc43e668be6b5208a7e86025151d", 0x4e}, {&(0x7f0000001000)="c0e54c75c4a9b0d7c7b7f2d3199bb41919cdd18a0deca1f49019023889edda36c9ee1817a8fd5294127e400cd11187f51f12d3df2f755d245334e10038fb86de233ab7f7af49de5440de99e5988a1980aafe0361bf3e501a8b65d94f931d456a2e5b1d81", 0x64}, {&(0x7f0000001080)="bc78ce4795bd654f80e56e3b713b8350d4a05487e1c071d1b4c042c1600d6e2a928a", 0x22}, {&(0x7f00000010c0)="0ed61a13d0b97f8b3e93ef20223aca05ff00e057fa379ce71361d36a70c7fffa9cf6891099062383668d8c30fe52a6d472395ec3c05f15577012ed8462160fbb0307219251208c26bf83ffac933d09819541ce2694985d4c5c34fa8246d0450448fd01bf765b3aa8e62764bd80773b7ad8a38be0e289ffd6f547b551abbbd8cd3e7c8e862b9d62354139eda3f31b99141ddea1bc87c22f2ad4c07bcf58e782166aa032569eb50f343765915c11652dd2c19f40ec38e821c464ca7df57e8ad5999a1df610cf43732071949d9c2e33f9025d", 0xd1}, {&(0x7f00000011c0)="c67fd0a980f0b92e7bdd58bfe1964f0773443beed9c9feb3109f4e5182445c308f90e912c2bcb86c80fbe39f306d59134207b934060595196617eddafb233211be5fb3e77390cc7049be0a81c33c7feba04cc073ac56a9", 0x57}, {&(0x7f0000001240)="75a75cc3be3191a83b58842226f18545167bafbd2f96e2a57b00fc5795702ba0d558ce25dda3d48920e51a4d58b94a720165f7e6ac5ccb96d8bc82", 0x3b}], 0x8, 0x9, 0x8) r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000001300)='/sys/power/resume', 0x10001, 0xd) r6 = syz_open_dev$usbfs(&(0x7f0000001340), 0x7fffffffffffffff, 0x125402) ioctl$USBDEVFS_CONNECTINFO(r6, 0x40085511, &(0x7f0000001380)) r7 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f00000013c0)={'batadv_slave_1\x00'}) ioctl$sock_inet_SIOCDELRT(r0, 0x890c, &(0x7f0000001440)={0x0, {0x2, 0x4e20, @broadcast}, {0x2, 0x4e23, @private=0xa010100}, {0x2, 0x4e20, @multicast1}, 0x20, 0x0, 0x0, 0x0, 0x5, &(0x7f0000001400)='bond_slave_1\x00', 0x5, 0x5, 0xfffe}) ioctl$BLKCLOSEZONE(r5, 0x40101287, &(0x7f00000014c0)={0xd5d, 0x6}) ioctl$KVM_GET_DIRTY_LOG(r5, 0x4010ae42, &(0x7f0000001500)={0x1ff, 0x0, &(0x7f0000ffb000/0x2000)=nil}) bind$alg(r5, &(0x7f0000001540)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_sha1\x00'}, 0x58) syz_open_dev$usbfs(&(0x7f00000015c0), 0x0, 0x80000) syz_io_uring_setup(0x2a6c, &(0x7f0000001600)={0x0, 0x45b8, 0x2, 0x2, 0x2a8, 0x0, r5}, &(0x7f0000001680)=0x0, &(0x7f00000016c0)) syz_io_uring_complete(r8) bind$alg(r5, &(0x7f0000001700)={0x26, 'aead\x00', 0x0, 0x0, 'ccm(xeta-generic)\x00'}, 0x58) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f00000017c0), r5) sendmsg$NL80211_CMD_TESTMODE(r5, &(0x7f0000001940)={&(0x7f0000001780)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000001900)={&(0x7f0000001800)={0xcc, r9, 0x8, 0x70bd2d, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_TESTDATA={0x7b, 0x45, "fb963891c71bc0c11970fd1b808809f1025adb1c6c6a5cdf6c4164dff226352fe3ef35ef1019f282aba7cc208223c07a46537769ddd3358adfdc33944177c128ac57444795b4f893d80c8d05405037db9a6d0761faf70d103b88f0447bb738fe963a3de6c3def355db2a42c7b39e49d8fc9abba5fa0a9e"}, @NL80211_ATTR_TESTDATA={0x3c, 0x45, "625952ecd9734a67cd56a7a6c14ae22993ea21301c4b36eb470c002a22efcb89f1ad6573cde5b053ace61a7b18ac0f9538e02520d975fcde"}]}, 0xcc}, 0x1, 0x0, 0x0, 0x20004084}, 0x800) getdents64(r5, &(0x7f0000001980)=""/93, 0x5d) socket$packet(0x11, 0x3, 0x300) 148.368539ms ago: executing program 4 (id=2070): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) mount$fuse(0x0, 0x0, 0x0, 0x8, &(0x7f0000000040)=ANY=[@ANYBLOB='fd=', @ANYRESDEC=0x0]) mount(0x0, &(0x7f0000000440)='./file0\x00', &(0x7f0000000280)='autofs\x00', 0x201000c, &(0x7f0000000040)) chdir(&(0x7f0000000080)='./file0\x00') setpgid(r0, r0) setpgid(0x0, r0) mprotect(&(0x7f00003fd000/0xc00000)=nil, 0xc00000, 0x1) sched_setaffinity(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000400)='/sys/power/resume', 0x149a82, 0x0) write$cgroup_int(r2, &(0x7f0000000040)=0x1f00, 0x12) ioctl$SCSI_IOCTL_SEND_COMMAND(0xffffffffffffffff, 0x1, &(0x7f0000000340)=ANY=[@ANYBLOB]) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) r3 = openat$autofs(0xffffffffffffff9c, &(0x7f00000002c0), 0x40100, 0x0) r4 = open(&(0x7f0000000000)='.\x00', 0x0, 0x244) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r3, 0xc0189379, &(0x7f0000000200)={{0x1, 0x1, 0x18, r4}, './file0\x00'}) r5 = fanotify_init(0x1, 0x8000) r6 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) syz_usb_connect(0x1, 0x24, &(0x7f0000000300)=ANY=[@ANYBLOB="01161c10010203010902120001080140600904e90700fd581507000000000000000000003f78c4da9a770d4a83d6d677a1224fd0af85a3d726faa168583448c9a7f4460f5895d8b47411b9b6068454338037ac093a7621b6ecee6a24151ecd642b8a39c046b492062b30a48722b7be20a0"], &(0x7f00000008c0)={0x0, 0x0, 0xf, &(0x7f0000000540)={0x5, 0xf, 0xf, 0x1, [@ss_cap={0xa, 0x10, 0x3, 0x0, 0x0, 0x39, 0x0, 0x8001}]}, 0x3, [{0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}]}) fanotify_mark(r5, 0x71, 0x1038, r6, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f0000004280)='.\x00', 0x0, 0x0) readv(r7, &(0x7f0000000100)=[{&(0x7f0000000080)=""/88, 0x58}], 0x1) 140.010397ms ago: executing program 3 (id=2071): prlimit64(0x0, 0x7, &(0x7f0000000140)={0x9, 0x8b}, 0x0) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) (async) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x800, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) 0s ago: executing program 3 (id=2072): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x188}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f0000000340)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000004bc311ec8500000075000000a70000000800000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000000c0)='percpu_alloc_percpu\x00', r1}, 0x10) syz_io_uring_setup(0x111, &(0x7f0000000340)={0x0, 0x1c62, 0x2, 0x7}, 0x0, 0x0) kernel console output (not intermixed with test programs): bridge_slave_0: left allmulticast mode [ 549.548739][T13290] bridge_slave_0: left promiscuous mode [ 549.557164][T13290] bridge0: port 1(bridge_slave_0) entered disabled state [ 549.588828][ T6136] usb 9-1: new full-speed USB device number 13 using dummy_hcd [ 550.014374][T13290] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 550.025694][T13290] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 550.037038][T13290] bond0 (unregistering): Released all slaves [ 550.064245][ T6136] usb 9-1: device descriptor read/64, error -71 [ 550.183677][ T6136] usb usb9-port1: attempt power cycle [ 550.208401][ T5923] usb 4-1: new full-speed USB device number 10 using dummy_hcd [ 550.298913][T13480] chnl_net:caif_netlink_parms(): no params data found [ 550.399558][ T5923] usb 4-1: unable to get BOS descriptor or descriptor too short [ 550.415917][ T5923] usb 4-1: not running at top speed; connect to a high speed hub [ 550.467968][ T5923] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 550.482579][ T5923] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 550.497512][ T5923] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 550.507264][ T5923] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 550.515703][ T5923] usb 4-1: Product: syz [ 550.520105][ T5923] usb 4-1: Manufacturer: syz [ 550.530107][T13290] hsr_slave_0: left promiscuous mode [ 550.536011][T13290] hsr_slave_1: left promiscuous mode [ 550.541877][ T5923] usb 4-1: SerialNumber: syz [ 550.551833][T13290] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 550.561956][T13290] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 550.568331][ T6136] usb 9-1: new full-speed USB device number 14 using dummy_hcd [ 550.582400][T13290] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 550.590139][T13290] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 550.600912][ T6136] usb 9-1: device descriptor read/8, error -71 [ 550.621452][T13290] veth1_macvtap: left promiscuous mode [ 550.627861][T13290] veth0_macvtap: left promiscuous mode [ 550.633580][T13290] veth1_vlan: left promiscuous mode [ 550.638873][T13290] veth0_vlan: left promiscuous mode [ 550.878380][ T6136] usb 9-1: new full-speed USB device number 15 using dummy_hcd [ 550.906526][T13494] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 550.915689][T13494] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 550.932283][ T6136] usb 9-1: device descriptor read/8, error -71 [ 550.945644][ T5923] usb 4-1: 0:2 : does not exist [ 550.950713][ T5923] usb 4-1: unit 0 not found! [ 550.993518][ T5923] usb 4-1: USB disconnect, device number 10 [ 551.062603][ T6136] usb usb9-port1: unable to enumerate USB device [ 551.365166][T13290] team0 (unregistering): Port device team_slave_1 removed [ 551.451895][T13290] team0 (unregistering): Port device team_slave_0 removed [ 551.533526][ T30] audit: type=1400 audit(1766711296.557:2067): avc: denied { getopt } for pid=13512 comm="syz.3.1777" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 551.588798][T11416] Bluetooth: hci1: command tx timeout [ 551.980918][T13480] bridge0: port 1(bridge_slave_0) entered blocking state [ 551.988092][T13480] bridge0: port 1(bridge_slave_0) entered disabled state [ 551.995956][T13480] bridge_slave_0: entered allmulticast mode [ 552.003454][T13480] bridge_slave_0: entered promiscuous mode [ 552.011238][T13480] bridge0: port 2(bridge_slave_1) entered blocking state [ 552.018740][T13480] bridge0: port 2(bridge_slave_1) entered disabled state [ 552.026494][T13480] bridge_slave_1: entered allmulticast mode [ 552.033805][T13480] bridge_slave_1: entered promiscuous mode [ 552.040718][T13511] !: renamed from dummy0 [ 552.111213][T13480] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 552.239380][T13480] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 552.633022][T13480] team0: Port device team_slave_0 added [ 552.700394][ T30] audit: type=1400 audit(1766711297.605:2068): avc: denied { create } for pid=13522 comm="syz.9.1780" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 552.721102][T13480] team0: Port device team_slave_1 added [ 552.746583][ T30] audit: type=1400 audit(1766711297.689:2069): avc: denied { ioctl } for pid=13517 comm="syz.8.1778" path="/dev/raw-gadget" dev="devtmpfs" ino=820 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 552.772407][ T933] usb 9-1: new high-speed USB device number 16 using dummy_hcd [ 552.782459][ T30] audit: type=1400 audit(1766711297.726:2070): avc: denied { ioctl } for pid=13522 comm="syz.9.1780" path="socket:[43209]" dev="sockfs" ino=43209 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 552.808550][ T30] audit: type=1400 audit(1766711297.726:2071): avc: denied { create } for pid=13529 comm="syz.2.1781" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 552.985761][ T30] audit: type=1400 audit(1766711297.726:2072): avc: denied { write } for pid=13529 comm="syz.2.1781" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 552.992834][T13526] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 553.007014][ T30] audit: type=1400 audit(1766711297.726:2073): avc: denied { read } for pid=13529 comm="syz.2.1781" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 553.098272][T13480] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 553.106937][T13480] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 553.111049][ T30] audit: type=1400 audit(1766711297.726:2074): avc: denied { create } for pid=13529 comm="syz.2.1781" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 553.167128][ T933] usb 9-1: config 220 has an invalid interface number: 76 but max is 2 [ 553.175424][ T933] usb 9-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 553.175512][T13480] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 553.196527][ T933] usb 9-1: config 220 has 2 interfaces, different from the descriptor's value: 3 [ 553.216683][ T933] usb 9-1: config 220 has no interface number 1 [ 553.231321][ T933] usb 9-1: config 220 interface 0 has no altsetting 0 [ 553.248129][ T933] usb 9-1: config 220 interface 76 has no altsetting 0 [ 553.358233][ T933] usb 9-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 553.377071][ T933] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 553.393418][ T933] usb 9-1: Product: syz [ 553.936473][T11416] Bluetooth: hci1: command tx timeout [ 553.968998][T13480] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 553.977261][ T933] usb 9-1: Manufacturer: syz [ 553.986417][ T933] usb 9-1: SerialNumber: syz [ 553.990961][T13480] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 554.042752][T13480] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 554.069764][ T30] kauditd_printk_skb: 22 callbacks suppressed [ 554.069787][ T30] audit: type=1400 audit(1766711298.933:2097): avc: denied { name_bind } for pid=13540 comm="syz.9.1784" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 554.161677][T13480] hsr_slave_0: entered promiscuous mode [ 554.184142][T13480] hsr_slave_1: entered promiscuous mode [ 554.230374][ T933] uvcvideo 9-1:220.0: Found UVC 7.01 device syz (8086:0b07) [ 554.250179][ T933] uvcvideo 9-1:220.0: No valid video chain found. [ 554.272276][ T933] usb 9-1: USB disconnect, device number 16 [ 554.279536][ T30] audit: type=1400 audit(1766711299.129:2098): avc: denied { map_create } for pid=13543 comm="syz.9.1785" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 554.309390][ T30] audit: type=1400 audit(1766711299.129:2099): avc: denied { prog_run } for pid=13543 comm="syz.9.1785" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 554.334784][ T30] audit: type=1400 audit(1766711299.148:2100): avc: denied { read write } for pid=13545 comm="syz.3.1786" name="raw-gadget" dev="devtmpfs" ino=820 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 554.370183][ T30] audit: type=1400 audit(1766711299.148:2101): avc: denied { open } for pid=13545 comm="syz.3.1786" path="/dev/raw-gadget" dev="devtmpfs" ino=820 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 554.394119][ T30] audit: type=1400 audit(1766711299.176:2102): avc: denied { read write } for pid=13543 comm="syz.9.1785" name="sg0" dev="devtmpfs" ino=756 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 554.420561][ T30] audit: type=1400 audit(1766711299.176:2103): avc: denied { open } for pid=13543 comm="syz.9.1785" path="/dev/sg0" dev="devtmpfs" ino=756 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 554.450223][ T30] audit: type=1400 audit(1766711299.204:2104): avc: denied { ioctl } for pid=13543 comm="syz.9.1785" path="/dev/sg0" dev="devtmpfs" ino=756 ioctlcmd=0x227b scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 554.476969][ T30] audit: type=1400 audit(1766711299.204:2105): avc: denied { create } for pid=13543 comm="syz.9.1785" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 554.548386][T13480] netdevsim netdevsim4 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 554.560913][T13480] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 554.571564][T13480] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 43998 - 0 [ 554.581947][ T24] usb 4-1: new full-speed USB device number 11 using dummy_hcd [ 554.667884][T13480] netdevsim netdevsim4 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 554.678264][T13480] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 554.694925][T13480] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 43998 - 0 [ 554.750981][ T24] usb 4-1: unable to get BOS descriptor or descriptor too short [ 554.762235][ T24] usb 4-1: not running at top speed; connect to a high speed hub [ 554.787687][T13480] netdevsim netdevsim4 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 554.794116][ T24] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 554.819113][ T24] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 554.819179][T13480] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 554.832749][ T24] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 554.839776][ T30] audit: type=1400 audit(1766711299.653:2106): avc: denied { create } for pid=13548 comm="syz.8.1787" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 554.871617][T13480] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 43998 - 0 [ 554.882469][ T24] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 554.890820][ T24] usb 4-1: Product: syz [ 554.901427][ T24] usb 4-1: Manufacturer: syz [ 554.906147][ T24] usb 4-1: SerialNumber: syz [ 555.064402][T13480] bond0: (slave netdevsim0): Releasing backup interface [ 555.084820][T13555] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1789'. [ 555.089909][T13480] netdevsim netdevsim4 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 555.112431][T13480] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 555.123006][T13480] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 43998 - 0 [ 555.186855][T13557] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1789'. [ 555.373439][T13546] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 555.404913][T13546] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 555.479070][ T24] usb 4-1: 0:2 : does not exist [ 555.484001][ T24] usb 4-1: unit 0 not found! [ 555.508300][ T24] usb 4-1: USB disconnect, device number 11 [ 555.562938][T13480] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 555.584991][T13480] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 555.605281][T13480] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 555.770561][T13480] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 556.106755][T11416] Bluetooth: hci1: command tx timeout [ 556.271041][T13583] netlink: 'syz.3.1795': attribute type 13 has an invalid length. [ 556.296683][T13584] netlink: 'syz.3.1795': attribute type 13 has an invalid length. [ 556.351780][T13480] 8021q: adding VLAN 0 to HW filter on device bond0 [ 556.442394][T13480] 8021q: adding VLAN 0 to HW filter on device team0 [ 556.481328][T10541] bridge0: port 1(bridge_slave_0) entered blocking state [ 556.490922][T10541] bridge0: port 1(bridge_slave_0) entered forwarding state [ 556.603374][ T7353] bridge0: port 2(bridge_slave_1) entered blocking state [ 556.610560][ T7353] bridge0: port 2(bridge_slave_1) entered forwarding state [ 556.618059][T13359] usb 9-1: new full-speed USB device number 17 using dummy_hcd [ 556.865197][T13359] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 557.029521][T13359] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid maxpacket 512, setting to 64 [ 557.052008][T13594] ubi: mtd0 is already attached to ubi31 [ 557.064546][T13359] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 557.074311][T13359] usb 9-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 22 [ 557.152403][T13359] usb 9-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 1.40 [ 557.179408][T13359] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 557.200698][T13359] usb 9-1: SerialNumber: syz [ 557.228057][T13582] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22 [ 557.247911][T13359] cdc_acm 9-1:1.0: Control and data interfaces are not separated! [ 557.272827][T13359] cdc_acm 9-1:1.0: probe with driver cdc_acm failed with error -12 [ 557.338098][T13611] misc userio: Invalid payload size [ 557.349098][T13480] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 557.721511][T13582] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 557.730138][T13582] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 558.245768][T13359] usb 9-1: USB disconnect, device number 17 [ 558.305170][T13480] veth0_vlan: entered promiscuous mode [ 558.316195][T13480] veth1_vlan: entered promiscuous mode [ 558.330082][T11416] Bluetooth: hci1: command tx timeout [ 558.347837][T13480] veth0_macvtap: entered promiscuous mode [ 558.411806][T13480] veth1_macvtap: entered promiscuous mode [ 558.470648][T13480] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 558.521824][T13480] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 558.548716][T13642] sctp: [Deprecated]: syz.3.1805 (pid 13642) Use of int in max_burst socket option. [ 558.548716][T13642] Use struct sctp_assoc_value instead [ 558.581262][T12166] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 558.622137][T12166] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 558.684873][T12166] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 558.684998][T13644] netlink: 8 bytes leftover after parsing attributes in process `syz.9.1806'. [ 558.724225][T13644] netlink: 24 bytes leftover after parsing attributes in process `syz.9.1806'. [ 558.755551][T12166] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 558.835087][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 558.896334][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 558.937411][T12166] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 558.948361][T12166] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 559.073886][ T6509] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 559.411304][ T6509] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 559.452366][T13359] usb 10-1: new high-speed USB device number 10 using dummy_hcd [ 559.489313][ T6509] usb 4-1: New USB device found, idVendor=046d, idProduct=08c6, bcdDevice=33.c2 [ 559.520080][ T6509] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 559.708428][T13663] netlink: 12 bytes leftover after parsing attributes in process `syz.8.1810'. [ 559.725460][T13663] netlink: 12 bytes leftover after parsing attributes in process `syz.8.1810'. [ 559.736920][T13663] netlink: 12 bytes leftover after parsing attributes in process `syz.8.1810'. [ 559.790256][T13663] netlink: 12 bytes leftover after parsing attributes in process `syz.8.1810'. [ 559.813853][T13663] netlink: 12 bytes leftover after parsing attributes in process `syz.8.1810'. [ 559.833013][T13663] netlink: 12 bytes leftover after parsing attributes in process `syz.8.1810'. [ 559.945669][ T6509] usb 4-1: config 0 descriptor?? [ 559.967940][ T6509] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 559.974937][ T6509] usb 4-1: MIDIStreaming interface descriptor not found [ 560.040948][T13359] usb 10-1: Using ep0 maxpacket: 32 [ 560.048121][T13359] usb 10-1: config 0 has an invalid interface number: 71 but max is 0 [ 560.068511][T13359] usb 10-1: config 0 has no interface number 0 [ 560.081722][T13359] usb 10-1: config 0 interface 71 has no altsetting 0 [ 560.097642][T13359] usb 10-1: New USB device found, idVendor=185b, idProduct=d001, bcdDevice=dc.ab [ 560.110261][T13359] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 560.120614][T13359] usb 10-1: Product: syz [ 560.127020][T13359] usb 10-1: Manufacturer: syz [ 560.131948][T13359] usb 10-1: SerialNumber: syz [ 560.139240][T13359] usb 10-1: config 0 descriptor?? [ 560.146109][ T30] kauditd_printk_skb: 49 callbacks suppressed [ 560.146120][ T30] audit: type=1400 audit(1766711304.611:2156): avc: denied { mount } for pid=13668 comm="syz.8.1812" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 560.177065][T13359] dvb-usb: found a 'Compro Videomate DVB-U2000 - DVB-T USB1.1 (please confirm to linux-dvb)' in warm state. [ 560.196907][T13359] dvb-usb: bulk message failed: -22 (3/0) [ 560.202858][ T30] audit: type=1400 audit(1766711304.639:2157): avc: denied { remount } for pid=13668 comm="syz.8.1812" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 560.224205][ T6509] usb 4-1: USB disconnect, device number 12 [ 560.235406][T13359] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 560.251765][T13359] dvbdev: DVB: registering new adapter (Compro Videomate DVB-U2000 - DVB-T USB1.1 (please confirm to linux-dvb)) [ 560.264502][ T30] audit: type=1400 audit(1766711304.658:2158): avc: denied { write } for pid=13649 comm="syz.3.1807" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 560.285208][T13359] usb 10-1: media controller created [ 560.299232][ T30] audit: type=1400 audit(1766711304.658:2159): avc: denied { connect } for pid=13649 comm="syz.3.1807" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 560.302413][T13359] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 560.328899][ T30] audit: type=1400 audit(1766711304.658:2160): avc: denied { name_connect } for pid=13649 comm="syz.3.1807" dest=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 560.336346][T13359] dvb-usb: bulk message failed: -22 (6/0) [ 560.352312][ T30] audit: type=1400 audit(1766711304.658:2161): avc: denied { shutdown } for pid=13649 comm="syz.3.1807" lport=55599 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 560.359411][T13359] dvb-usb: no frontend was attached by 'Compro Videomate DVB-U2000 - DVB-T USB1.1 (please confirm to linux-dvb)' [ 560.412052][T13359] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.9/usb10/10-1/input/input63 [ 560.434660][T13359] dvb-usb: schedule remote query interval to 150 msecs. [ 560.434825][ T30] audit: type=1400 audit(1766711304.882:2162): avc: denied { read } for pid=5169 comm="acpid" name="event4" dev="devtmpfs" ino=3885 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 560.464481][ T933] usb 9-1: new high-speed USB device number 18 using dummy_hcd [ 560.479020][ T30] audit: type=1400 audit(1766711304.929:2163): avc: denied { open } for pid=5169 comm="acpid" path="/dev/input/event4" dev="devtmpfs" ino=3885 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 560.483880][T13359] dvb-usb: bulk message failed: -22 (3/0) [ 560.511273][ T30] audit: type=1400 audit(1766711304.929:2164): avc: denied { ioctl } for pid=5169 comm="acpid" path="/dev/input/event4" dev="devtmpfs" ino=3885 ioctlcmd=0x4520 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 560.544498][T13359] dvb-usb: Compro Videomate DVB-U2000 - DVB-T USB1.1 (please confirm to linux-dvb) successfully initialized and connected. [ 560.562990][T13359] usb 10-1: USB disconnect, device number 10 [ 560.586642][T13359] dvb-usb: Compro Videomate DVB-U2000 - DVB-T USB1 successfully deinitialized and disconnected. [ 560.635727][ T933] usb 9-1: Using ep0 maxpacket: 8 [ 560.643435][ T933] usb 9-1: config 0 has an invalid interface number: 55 but max is 0 [ 560.660251][ T933] usb 9-1: config 0 has no interface number 0 [ 560.666422][ T933] usb 9-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 560.678184][ T933] usb 9-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 560.689853][ T933] usb 9-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 560.703014][ T933] usb 9-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 560.724460][ T933] usb 9-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 560.733530][ T933] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 560.743251][ T933] usb 9-1: config 0 descriptor?? [ 560.752757][ T933] ldusb 9-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 560.908928][ T30] audit: type=1400 audit(1766711305.331:2165): avc: denied { ioctl } for pid=13673 comm="syz.2.1814" path="socket:[42979]" dev="sockfs" ino=42979 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 560.962780][T13678] kAFS: unable to lookup cell 'Þ({^ú@' [ 560.978493][T13359] usb 9-1: USB disconnect, device number 18 [ 560.987559][T13359] ldusb 9-1:0.55: LD USB Device #0 now disconnected [ 561.141837][T13692] __nla_validate_parse: 23 callbacks suppressed [ 561.141848][T13692] netlink: 40 bytes leftover after parsing attributes in process `syz.9.1820'. [ 561.158429][ T6116] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 561.226873][ T5922] usb 5-1: new high-speed USB device number 34 using dummy_hcd [ 561.528638][T13695] lo speed is unknown, defaulting to 1000 [ 561.660399][T13692] lo speed is unknown, defaulting to 1000 [ 561.729454][ T5922] usb 5-1: Using ep0 maxpacket: 8 [ 561.738597][ T5922] usb 5-1: New USB device found, idVendor=0402, idProduct=5602, bcdDevice=26.ec [ 561.748313][ T5922] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 562.211872][ T6116] usb 4-1: config 6 has an invalid interface number: 241 but max is 2 [ 562.220075][ T6116] usb 4-1: config 6 has an invalid interface number: 206 but max is 2 [ 562.415609][ T5922] usb 5-1: Product: syz [ 562.419802][ T5922] usb 5-1: Manufacturer: syz [ 562.425540][ T5922] usb 5-1: SerialNumber: syz [ 562.435866][ T5922] gspca_main: ALi m5602-2.14.0 probing 0402:5602 [ 562.527830][ T6116] usb 4-1: config 6 has an invalid interface number: 170 but max is 2 [ 562.536938][ T6116] usb 4-1: config 6 has no interface number 0 [ 562.543055][ T6116] usb 4-1: config 6 has no interface number 1 [ 562.549166][ T6116] usb 4-1: config 6 has no interface number 2 [ 562.556041][ T6116] usb 4-1: config 6 interface 241 altsetting 64 endpoint 0xA has invalid maxpacket 1024, setting to 64 [ 562.567123][ T6116] usb 4-1: config 6 interface 206 altsetting 3 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 562.580145][ T6116] usb 4-1: config 6 interface 170 altsetting 32 has a duplicate endpoint with address 0x8, skipping [ 562.595982][ T6116] usb 4-1: config 6 interface 170 altsetting 32 has a duplicate endpoint with address 0x8, skipping [ 562.607270][ T6116] usb 4-1: config 6 interface 241 has no altsetting 0 [ 562.623549][ T6116] usb 4-1: config 6 interface 206 has no altsetting 0 [ 562.633385][ T6116] usb 4-1: config 6 interface 170 has no altsetting 0 [ 562.680503][ T6116] usb 4-1: New USB device found, idVendor=19d2, idProduct=1104, bcdDevice=31.bd [ 562.712865][ T6116] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 562.720882][ T6116] usb 4-1: Product: syz [ 562.752551][ T6116] usb 4-1: Manufacturer: syz [ 562.914254][ T6116] usb 4-1: SerialNumber: syz [ 563.525428][T13359] usb 9-1: new high-speed USB device number 19 using dummy_hcd [ 563.784963][T13359] usb 9-1: device descriptor read/64, error -71 [ 564.124161][T13359] usb 9-1: new high-speed USB device number 20 using dummy_hcd [ 564.273714][T13359] usb 9-1: device descriptor read/64, error -71 [ 564.398769][T13359] usb usb9-port1: attempt power cycle [ 564.795019][ T89] usb 10-1: new high-speed USB device number 11 using dummy_hcd [ 564.842695][ T5922] gspca_m5602: Failed to find a sensor [ 564.857904][ T5922] ALi m5602 5-1:8.0: ALi m5602 webcam failed [ 564.883579][ T5922] usb 5-1: USB disconnect, device number 34 [ 564.900362][T13359] usb 9-1: new high-speed USB device number 21 using dummy_hcd [ 564.927279][T13359] usb 9-1: device descriptor read/8, error -71 [ 565.046272][ T89] usb 10-1: device descriptor read/64, error -71 [ 565.193188][T13359] usb 9-1: new high-speed USB device number 22 using dummy_hcd [ 565.215209][T13359] usb 9-1: device descriptor read/8, error -71 [ 565.310716][ T89] usb 10-1: new high-speed USB device number 12 using dummy_hcd [ 565.332410][T13359] usb usb9-port1: unable to enumerate USB device [ 565.460506][ T89] usb 10-1: device descriptor read/64, error -71 [ 565.584034][ T89] usb usb10-port1: attempt power cycle [ 565.628016][T13749] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 565.650810][T13749] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 565.737831][ T30] kauditd_printk_skb: 22 callbacks suppressed [ 565.737849][ T30] audit: type=1400 audit(1766711309.840:2188): avc: denied { read append } for pid=13748 comm="syz.3.1831" name="card1" dev="devtmpfs" ino=628 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 565.779879][ T30] audit: type=1400 audit(1766711309.877:2189): avc: denied { open } for pid=13748 comm="syz.3.1831" path="/dev/dri/card1" dev="devtmpfs" ino=628 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 565.805400][ T30] audit: type=1400 audit(1766711309.914:2190): avc: denied { ioctl } for pid=13748 comm="syz.3.1831" path="/dev/dri/card1" dev="devtmpfs" ino=628 ioctlcmd=0x64ac scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 565.862799][T13753] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 565.872053][T13755] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1832'. [ 565.896570][T13755] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1832'. [ 565.932384][T13753] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 565.937843][T13755] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1832'. [ 565.941079][T10513] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 565.961445][T10513] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 565.972419][T10513] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 565.976028][ T89] usb 10-1: new high-speed USB device number 13 using dummy_hcd [ 565.991085][T13755] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1832'. [ 565.991296][T10513] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 567.083753][ T89] usb 10-1: device descriptor read/8, error -71 [ 567.143584][ T1295] ieee802154 phy0 wpan0: encryption failed: -22 [ 567.150790][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 [ 567.340934][ T30] audit: type=1400 audit(1766711311.336:2191): avc: denied { write } for pid=13767 comm="syz.8.1836" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 567.374185][ T89] usb 10-1: new high-speed USB device number 14 using dummy_hcd [ 567.417134][ T89] usb 10-1: device descriptor read/8, error -71 [ 567.514657][ T30] audit: type=1400 audit(1766711311.514:2192): avc: denied { create } for pid=13771 comm="syz.4.1835" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 567.537518][ T30] audit: type=1400 audit(1766711311.533:2193): avc: denied { ioctl } for pid=13771 comm="syz.4.1835" path="socket:[45142]" dev="sockfs" ino=45142 ioctlcmd=0x89ed scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 567.537997][T13772] netlink: 'syz.4.1835': attribute type 29 has an invalid length. [ 567.573012][ T89] usb usb10-port1: unable to enumerate USB device [ 567.583837][T13772] netlink: 'syz.4.1835': attribute type 29 has an invalid length. [ 567.594844][T13772] netlink: 'syz.4.1835': attribute type 2 has an invalid length. [ 567.602641][T13772] netlink: 152 bytes leftover after parsing attributes in process `syz.4.1835'. [ 567.685057][ T5809] usb 9-1: new high-speed USB device number 23 using dummy_hcd [ 567.823081][ T5809] usb 9-1: device descriptor read/64, error -71 [ 568.090316][ T5809] usb 9-1: new high-speed USB device number 24 using dummy_hcd [ 568.229233][ T5809] usb 9-1: device descriptor read/64, error -71 [ 568.346996][ T5809] usb usb9-port1: attempt power cycle [ 568.710587][ T5809] usb 9-1: new high-speed USB device number 25 using dummy_hcd [ 568.732786][ T5809] usb 9-1: device descriptor read/8, error -71 [ 568.938294][ T6116] option 4-1:6.241: GSM modem (1-port) converter detected [ 568.990255][ T5809] usb 9-1: new high-speed USB device number 26 using dummy_hcd [ 569.010133][ T5809] usb 9-1: device descriptor read/8, error -71 [ 569.127887][ T5809] usb usb9-port1: unable to enumerate USB device [ 576.910053][ T1071] block nbd2: Possible stuck request ffff888025ed8000: control (read@0,1024B). Runtime 240 seconds [ 576.920837][ T1071] block nbd2: Possible stuck request ffff888025ed8200: control (read@1024,1024B). Runtime 240 seconds [ 576.931968][ T1071] block nbd2: Possible stuck request ffff888025ed8400: control (read@2048,1024B). Runtime 240 seconds [ 576.942934][ T1071] block nbd2: Possible stuck request ffff888025ed8600: control (read@3072,1024B). Runtime 240 seconds [ 609.046266][ T1071] block nbd2: Possible stuck request ffff888025ed8000: control (read@0,1024B). Runtime 270 seconds [ 609.057882][ T1071] block nbd2: Possible stuck request ffff888025ed8200: control (read@1024,1024B). Runtime 270 seconds [ 609.069062][ T1071] block nbd2: Possible stuck request ffff888025ed8400: control (read@2048,1024B). Runtime 270 seconds [ 609.080042][ T1071] block nbd2: Possible stuck request ffff888025ed8600: control (read@3072,1024B). Runtime 270 seconds [ 612.638158][ T5827] Bluetooth: hci3: command 0x0406 tx timeout [ 632.310504][ T1295] ieee802154 phy0 wpan0: encryption failed: -22 [ 632.316845][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 [ 641.236066][ T1071] block nbd2: Possible stuck request ffff888025ed8000: control (read@0,1024B). Runtime 300 seconds [ 641.247261][ T1071] block nbd2: Possible stuck request ffff888025ed8200: control (read@1024,1024B). Runtime 300 seconds [ 641.258612][ T1071] block nbd2: Possible stuck request ffff888025ed8400: control (read@2048,1024B). Runtime 300 seconds [ 641.269606][ T1071] block nbd2: Possible stuck request ffff888025ed8600: control (read@3072,1024B). Runtime 300 seconds [ 645.479577][ T5827] Bluetooth: hci0: command 0x0406 tx timeout [ 672.850899][ T5827] Bluetooth: hci5: command 0x0406 tx timeout [ 673.382196][ T25] block nbd2: Possible stuck request ffff888025ed8000: control (read@0,1024B). Runtime 330 seconds [ 673.392971][ T25] block nbd2: Possible stuck request ffff888025ed8200: control (read@1024,1024B). Runtime 330 seconds [ 673.403987][ T25] block nbd2: Possible stuck request ffff888025ed8400: control (read@2048,1024B). Runtime 330 seconds [ 673.415001][ T25] block nbd2: Possible stuck request ffff888025ed8600: control (read@3072,1024B). Runtime 330 seconds [ 683.794952][ T5827] Bluetooth: hci1: command 0x0406 tx timeout [ 695.204989][ T30] audit: type=1400 audit(1766711430.946:2194): avc: denied { setopt } for pid=13774 comm="syz.9.1837" lport=2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 695.207385][T13781] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 695.236750][T13778] syz_tun: entered allmulticast mode [ 695.244566][T13781] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 695.435451][T13778] netlink: 4 bytes leftover after parsing attributes in process `syz.9.1837'. [ 695.458255][T13778] syz_tun (unregistering): left allmulticast mode [ 695.737803][T13794] geneve2: entered promiscuous mode [ 695.761564][T13786] fuse: Bad value for 'group_id' [ 695.767295][T12171] netdevsim netdevsim4 netdevsim0: set [1, 1] type 2 family 0 port 56276 - 0 [ 695.776589][ T30] audit: type=1400 audit(1766711431.470:2195): avc: denied { read write } for pid=13774 comm="syz.9.1837" name="fuse" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 695.800693][T13786] fuse: Bad value for 'group_id' [ 695.821838][T12171] netdevsim netdevsim4 netdevsim1: set [1, 1] type 2 family 0 port 56276 - 0 [ 695.839099][T12171] netdevsim netdevsim4 netdevsim2: set [1, 1] type 2 family 0 port 56276 - 0 [ 695.854833][ T30] audit: type=1400 audit(1766711431.470:2196): avc: denied { open } for pid=13774 comm="syz.9.1837" path="/dev/fuse" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 695.891883][T12171] netdevsim netdevsim4 netdevsim3: set [1, 1] type 2 family 0 port 56276 - 0 [ 695.924919][ T30] audit: type=1400 audit(1766711431.470:2197): avc: denied { mounton } for pid=13774 comm="syz.9.1837" path="/31/file0" dev="tmpfs" ino=188 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 695.980470][ T30] audit: type=1400 audit(1766711431.507:2198): avc: denied { remount } for pid=13774 comm="syz.9.1837" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 696.502876][T13803] overlayfs: invalid origin (0000) [ 696.562046][ T30] audit: type=1400 audit(1766711432.218:2199): avc: denied { create } for pid=13800 comm="syz.2.1844" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 696.583126][T13805] fuse: Bad value for 'fd' [ 696.609638][T13806] fuse: Bad value for 'fd' [ 696.618495][ T30] audit: type=1400 audit(1766711432.274:2200): avc: denied { create } for pid=13807 comm="syz.9.1846" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 697.423134][ T30] audit: type=1400 audit(1766711432.274:2201): avc: denied { getopt } for pid=13807 comm="syz.9.1846" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 697.454022][T13814] fuse: Unknown parameter 'g®d' [ 697.786220][ T30] audit: type=1400 audit(1766711433.359:2202): avc: denied { mount } for pid=13823 comm="syz.8.1850" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 697.886431][ T30] audit: type=1400 audit(1766711433.453:2203): avc: denied { mounton } for pid=13821 comm="syz.2.1849" path="/" dev="ramfs" ino=44222 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=dir permissive=1 [ 697.995464][ T1295] ieee802154 phy0 wpan0: encryption failed: -22 [ 698.023961][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 [ 698.098774][T13707] usb 9-1: new high-speed USB device number 27 using dummy_hcd [ 698.106750][T13827] random: crng reseeded on system resumption [ 698.248423][T13707] usb 9-1: device descriptor read/64, error -71 [ 698.580355][T13707] usb 9-1: new high-speed USB device number 28 using dummy_hcd [ 698.718801][T13707] usb 9-1: device descriptor read/64, error -71 [ 698.837146][T13707] usb usb9-port1: attempt power cycle [ 698.905514][T13832] lo speed is unknown, defaulting to 1000 [ 699.221233][T13707] usb 9-1: new high-speed USB device number 29 using dummy_hcd [ 699.264622][T13707] usb 9-1: device descriptor read/8, error -71 [ 699.520590][T13707] usb 9-1: new high-speed USB device number 30 using dummy_hcd [ 699.553819][T13707] usb 9-1: device descriptor read/8, error -71 [ 699.681907][T13707] usb usb9-port1: unable to enumerate USB device [ 699.918697][T13868] netlink: 40 bytes leftover after parsing attributes in process `syz.9.1859'. [ 700.034618][T13873] comedi comedi3: comedi_config --init_data is deprecated [ 700.474317][T13880] netlink: 88 bytes leftover after parsing attributes in process `syz.9.1863'. [ 700.859342][T13883] fuse: Unknown parameter '0x000000000000000300000000000000000003' [ 701.008223][ T30] kauditd_printk_skb: 16 callbacks suppressed [ 701.008234][ T30] audit: type=1400 audit(1766711436.381:2220): avc: denied { unmount } for pid=13480 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 701.094346][T13885] 8021q: VLANs not supported on ip6gre0 [ 701.481589][ T30] audit: type=1326 audit(1766711436.483:2221): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13882 comm="syz.9.1864" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb14218f749 code=0x7ffc0000 [ 701.505165][ T30] audit: type=1326 audit(1766711436.483:2222): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13882 comm="syz.9.1864" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb14218f749 code=0x7ffc0000 [ 701.552959][ T30] audit: type=1326 audit(1766711436.493:2223): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13882 comm="syz.9.1864" exe="/root/syz-executor" sig=0 arch=c000003e syscall=165 compat=0 ip=0x7fb14218f749 code=0x7ffc0000 [ 701.586109][ T30] audit: type=1326 audit(1766711436.493:2224): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13882 comm="syz.9.1864" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb14218f749 code=0x7ffc0000 [ 701.613700][ T30] audit: type=1326 audit(1766711436.493:2225): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13882 comm="syz.9.1864" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb14218f749 code=0x7ffc0000 [ 701.637461][ T30] audit: type=1326 audit(1766711436.493:2226): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13882 comm="syz.9.1864" exe="/root/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7fb14218f749 code=0x7ffc0000 [ 701.671267][ T30] audit: type=1326 audit(1766711436.502:2227): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13882 comm="syz.9.1864" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb14218f749 code=0x7ffc0000 [ 701.699552][ T30] audit: type=1326 audit(1766711436.502:2228): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13882 comm="syz.9.1864" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb14218f749 code=0x7ffc0000 [ 701.727202][ T30] audit: type=1326 audit(1766711436.502:2229): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13882 comm="syz.9.1864" exe="/root/syz-executor" sig=0 arch=c000003e syscall=165 compat=0 ip=0x7fb14218f749 code=0x7ffc0000 [ 701.873359][ T5921] usb 9-1: new high-speed USB device number 31 using dummy_hcd [ 701.964085][T10526] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 701.995110][T10526] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 56276 - 0 [ 702.043655][ T5921] usb 9-1: device descriptor read/64, error -71 [ 702.176100][T10526] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 702.207515][T10526] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 56276 - 0 [ 702.300281][ T5921] usb 9-1: new high-speed USB device number 32 using dummy_hcd [ 702.336955][T10526] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 702.357944][T10526] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 56276 - 0 [ 702.445562][ T5827] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 702.463143][ T5921] usb 9-1: device descriptor read/64, error -71 [ 702.463244][ T5827] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 702.478716][ T5827] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 702.486554][ T5827] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 702.494222][ T5827] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 702.507558][T10526] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 702.540701][T10526] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 56276 - 0 [ 702.592525][T13894] lo speed is unknown, defaulting to 1000 [ 702.624593][ T5921] usb usb9-port1: attempt power cycle [ 702.875886][T10526] bridge_slave_1: left allmulticast mode [ 702.881665][T10526] bridge_slave_1: left promiscuous mode [ 702.892611][T10526] bridge0: port 2(bridge_slave_1) entered disabled state [ 702.912313][T10526] bridge_slave_0: left allmulticast mode [ 702.917956][T10526] bridge_slave_0: left promiscuous mode [ 702.927320][T10526] bridge0: port 1(bridge_slave_0) entered disabled state [ 703.005771][ T5921] usb 9-1: new high-speed USB device number 33 using dummy_hcd [ 703.027924][ T5921] usb 9-1: device descriptor read/8, error -71 [ 703.294531][ T5921] usb 9-1: new high-speed USB device number 34 using dummy_hcd [ 703.316734][ T5921] usb 9-1: device descriptor read/8, error -71 [ 703.444421][ T5921] usb usb9-port1: unable to enumerate USB device [ 703.912116][T10526] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 703.923181][T10526] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 703.933433][T10526] bond0 (unregistering): Released all slaves [ 703.960915][T13894] chnl_net:caif_netlink_parms(): no params data found [ 704.705328][T13894] bridge0: port 1(bridge_slave_0) entered blocking state [ 704.718021][T13894] bridge0: port 1(bridge_slave_0) entered disabled state [ 704.748442][ T5827] Bluetooth: hci1: command tx timeout [ 704.851847][T13894] bridge_slave_0: entered allmulticast mode [ 705.896290][T13894] bridge_slave_0: entered promiscuous mode [ 705.902474][ T25] block nbd2: Possible stuck request ffff888025ed8000: control (read@0,1024B). Runtime 360 seconds [ 705.916637][ T25] block nbd2: Possible stuck request ffff888025ed8200: control (read@1024,1024B). Runtime 360 seconds [ 706.110163][ T25] block nbd2: Possible stuck request ffff888025ed8400: control (read@2048,1024B). Runtime 360 seconds [ 706.121175][ T25] block nbd2: Possible stuck request ffff888025ed8600: control (read@3072,1024B). Runtime 360 seconds [ 706.132278][T13956] kvm: kvm [13951]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc2) = 0x9d00 [ 706.136067][T13894] bridge0: port 2(bridge_slave_1) entered blocking state [ 706.149926][T13894] bridge0: port 2(bridge_slave_1) entered disabled state [ 706.159636][T13894] bridge_slave_1: entered allmulticast mode [ 706.175418][T13894] bridge_slave_1: entered promiscuous mode [ 706.191044][T13956] kvm: kvm [13951]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc1) = 0x9d00 [ 706.224158][T10526] hsr_slave_0: left promiscuous mode [ 706.233127][T10526] hsr_slave_1: left promiscuous mode [ 706.243939][T10526] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 706.254310][T10526] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 706.262450][T10526] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 706.270767][T10526] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 706.287846][T10526] veth1_macvtap: left promiscuous mode [ 706.293366][T10526] veth0_macvtap: left promiscuous mode [ 706.299362][T10526] veth1_vlan: left promiscuous mode [ 706.303871][T13959] netlink: 'syz.3.1882': attribute type 11 has an invalid length. [ 706.304671][T10526] veth0_vlan: left promiscuous mode [ 706.337165][T13959] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 706.357279][T13959] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 706.445790][ T30] kauditd_printk_skb: 24 callbacks suppressed [ 706.445807][ T30] audit: type=1400 audit(1766711441.460:2254): avc: denied { create } for pid=13963 comm="syz.8.1884" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 706.926362][ T30] audit: type=1400 audit(1766711441.909:2255): avc: denied { write } for pid=13971 comm="syz.2.1886" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 706.993359][ T5827] Bluetooth: hci1: command tx timeout [ 707.020845][ T30] audit: type=1400 audit(1766711442.002:2256): avc: denied { create } for pid=13974 comm="syz.2.1887" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_iscsi_socket permissive=1 [ 707.483423][T10526] team0 (unregistering): Port device team_slave_1 removed [ 707.523423][T10526] team0 (unregistering): Port device team_slave_0 removed [ 707.676434][ T30] audit: type=1400 audit(1766711442.610:2257): avc: denied { execute } for pid=13996 comm="syz.2.1895" name="file0" dev="tmpfs" ino=2194 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 707.709128][ T30] audit: type=1400 audit(1766711442.638:2258): avc: denied { execute_no_trans } for pid=13996 comm="syz.2.1895" path="/408/file0" dev="tmpfs" ino=2194 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 707.781390][T13996] process '/newroot/408/file0' started with executable stack [ 707.987789][ T30] audit: type=1400 audit(1766711442.900:2259): avc: denied { create } for pid=13999 comm="syz.2.1896" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 708.374008][T14006] IPVS: sync thread started: state = BACKUP, mcast_ifn = ip6_vti0, syncid = 1, id = 0 [ 708.567104][T11416] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 708.577777][T11416] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 708.586878][T11416] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 708.594663][T11416] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 708.604990][T11416] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 708.833119][ T30] audit: type=1400 audit(1766711443.686:2260): avc: denied { write } for pid=14003 comm="syz.8.1897" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 709.130011][ T30] audit: type=1400 audit(1766711443.976:2261): avc: denied { listen } for pid=14005 comm="syz.2.1899" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 709.143584][T13894] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 709.163140][T13894] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 709.206878][ T5827] Bluetooth: hci1: command tx timeout [ 709.306873][T13894] team0: Port device team_slave_0 added [ 709.316382][T14010] lo speed is unknown, defaulting to 1000 [ 709.323462][T13894] team0: Port device team_slave_1 added [ 709.510124][T13894] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 709.526996][T13894] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 709.557825][T13894] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 709.592206][T13894] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 709.606567][T13894] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 709.637351][T13894] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 710.015138][T13894] hsr_slave_0: entered promiscuous mode [ 710.031904][T13894] hsr_slave_1: entered promiscuous mode [ 710.054373][T14031] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 710.064384][T14031] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 710.213337][T10526] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 710.379880][T14010] chnl_net:caif_netlink_parms(): no params data found [ 710.503119][ T30] audit: type=1400 audit(1766711445.229:2262): avc: denied { shutdown } for pid=14034 comm="syz.2.1905" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 710.611677][ T30] audit: type=1400 audit(1766711445.239:2263): avc: denied { create } for pid=14034 comm="syz.2.1905" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 710.667217][T10526] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 710.852538][T10526] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 710.856259][T14042] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1908'. [ 711.053597][T10526] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 711.237992][T14010] bridge0: port 1(bridge_slave_0) entered blocking state [ 711.245723][T14010] bridge0: port 1(bridge_slave_0) entered disabled state [ 711.253201][ T5827] Bluetooth: hci0: command tx timeout [ 711.270252][T14010] bridge_slave_0: entered allmulticast mode [ 711.295140][T14010] bridge_slave_0: entered promiscuous mode [ 711.316963][T14010] bridge0: port 2(bridge_slave_1) entered blocking state [ 711.333887][T14010] bridge0: port 2(bridge_slave_1) entered disabled state [ 711.345420][T14010] bridge_slave_1: entered allmulticast mode [ 711.366204][T14010] bridge_slave_1: entered promiscuous mode [ 711.379374][T14050] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 711.399254][T14050] team0: Port device batadv1 added [ 711.419245][ T5827] Bluetooth: hci1: command tx timeout [ 711.487052][T14010] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 711.503452][T11416] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 711.520010][T11416] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 711.523949][T14010] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 711.536437][T11416] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 711.547866][T11416] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 711.555440][T11416] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 711.646151][T14010] team0: Port device team_slave_0 added [ 711.672280][T14010] team0: Port device team_slave_1 added [ 711.726846][T10526] bridge_slave_1: left allmulticast mode [ 711.733798][T10526] bridge_slave_1: left promiscuous mode [ 711.741463][T10526] bridge0: port 2(bridge_slave_1) entered disabled state [ 711.753701][T10526] bridge_slave_0: left allmulticast mode [ 711.759416][T10526] bridge_slave_0: left promiscuous mode [ 711.766789][T10526] bridge0: port 1(bridge_slave_0) entered disabled state [ 712.152088][ T30] kauditd_printk_skb: 5 callbacks suppressed [ 712.152106][ T30] audit: type=1400 audit(1766711446.801:2269): avc: denied { read } for pid=14062 comm="syz.3.1915" name="binder0" dev="binder" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 712.184384][ T30] audit: type=1400 audit(1766711446.801:2270): avc: denied { open } for pid=14062 comm="syz.3.1915" path="/dev/binderfs/binder0" dev="binder" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 712.209065][ T30] audit: type=1400 audit(1766711446.829:2271): avc: denied { ioctl } for pid=14062 comm="syz.3.1915" path="/dev/binderfs/binder0" dev="binder" ino=4 ioctlcmd=0x620d scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 712.234899][ T30] audit: type=1400 audit(1766711446.829:2272): avc: denied { set_context_mgr } for pid=14062 comm="syz.3.1915" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 712.291107][ T30] audit: type=1400 audit(1766711446.932:2273): avc: denied { map } for pid=14062 comm="syz.3.1915" path="/dev/binderfs/binder0" dev="binder" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 712.399612][T10526] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 712.409976][T10526] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 712.419621][T10526] bond0 (unregistering): Released all slaves [ 712.429483][T14054] lo speed is unknown, defaulting to 1000 [ 712.430035][T14010] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 712.442541][T14010] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 712.469343][T14010] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 712.486550][T14010] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 712.493588][T14010] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 712.522120][T14010] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 712.622437][ T30] audit: type=1400 audit(1766711447.241:2274): avc: denied { ioctl } for pid=14065 comm="syz.2.1916" path="socket:[46460]" dev="sockfs" ino=46460 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 712.781558][T14010] hsr_slave_0: entered promiscuous mode [ 712.788870][T14010] hsr_slave_1: entered promiscuous mode [ 712.794860][T14010] debugfs: 'hsr0' already exists in 'hsr' [ 712.802246][T14010] Cannot create hsr debugfs directory [ 712.864613][T14069] overlayfs: failed to clone upperpath [ 712.885904][T14069] fuse: Unknown parameter '4ÔûIr' [ 713.193397][T10526] hsr_slave_0: left promiscuous mode [ 713.199500][T10526] hsr_slave_1: left promiscuous mode [ 713.206635][T10526] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 713.214117][T10526] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 713.222724][T10526] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 713.230238][T10526] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 713.249925][T10526] veth1_macvtap: left promiscuous mode [ 713.255482][T10526] veth0_macvtap: left promiscuous mode [ 713.263298][T10526] veth1_vlan: left promiscuous mode [ 713.270398][T10526] veth0_vlan: left promiscuous mode [ 713.474010][ T5827] Bluetooth: hci0: command tx timeout [ 713.737786][T10526] team0 (unregistering): Port device team_slave_1 removed [ 713.780537][ T5827] Bluetooth: hci3: command tx timeout [ 714.035012][T10526] team0 (unregistering): Port device team_slave_0 removed [ 715.292430][T14092] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1923'. [ 715.383304][T14054] chnl_net:caif_netlink_parms(): no params data found [ 715.477941][T14099] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1924'. [ 715.503239][T14100] xt_socket: unknown flags 0x4 [ 715.575259][T14054] bridge0: port 1(bridge_slave_0) entered blocking state [ 715.594181][T14054] bridge0: port 1(bridge_slave_0) entered disabled state [ 715.608620][T14054] bridge_slave_0: entered allmulticast mode [ 715.617918][T14054] bridge_slave_0: entered promiscuous mode [ 715.695494][ T5827] Bluetooth: hci0: command tx timeout [ 715.701293][T14054] bridge0: port 2(bridge_slave_1) entered blocking state [ 715.708984][T14054] bridge0: port 2(bridge_slave_1) entered disabled state [ 715.723978][T14054] bridge_slave_1: entered allmulticast mode [ 715.734131][T14054] bridge_slave_1: entered promiscuous mode [ 715.801497][T14054] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 715.827995][T14054] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 715.882069][T14054] team0: Port device team_slave_0 added [ 715.939286][T10526] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 715.974279][T14054] team0: Port device team_slave_1 added [ 715.979940][T13894] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 716.006977][T13894] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 716.019794][T13894] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 716.041560][ T5827] Bluetooth: hci3: command tx timeout [ 716.092202][T10526] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 716.134400][T13894] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 716.203247][T14054] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 716.220049][T14054] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 716.252375][T14054] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 716.376467][T10526] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 716.392449][T14054] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 716.399473][T14054] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 716.872343][ T30] audit: type=1400 audit(1766711451.207:2275): avc: denied { create } for pid=14113 comm="syz.3.1926" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 716.893097][T14054] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 716.914424][ T30] audit: type=1400 audit(1766711451.263:2276): avc: denied { ioctl } for pid=14113 comm="syz.3.1926" path="socket:[44961]" dev="sockfs" ino=44961 ioctlcmd=0x89e2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 717.005099][T10526] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 717.038291][T14122] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 717.047371][T14122] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 717.073090][T14010] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 717.092273][T14010] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 717.109667][T14054] hsr_slave_0: entered promiscuous mode [ 717.115827][T14054] hsr_slave_1: entered promiscuous mode [ 717.122109][T14054] debugfs: 'hsr0' already exists in 'hsr' [ 717.127864][T14054] Cannot create hsr debugfs directory [ 717.134722][T14010] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 717.151156][T14010] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 717.358721][T10526] bridge_slave_1: left allmulticast mode [ 717.364885][T10526] bridge_slave_1: left promiscuous mode [ 717.370620][T10526] bridge0: port 2(bridge_slave_1) entered disabled state [ 717.381077][T10526] bridge_slave_0: left allmulticast mode [ 717.387402][T10526] bridge_slave_0: left promiscuous mode [ 717.396880][T10526] bridge0: port 1(bridge_slave_0) entered disabled state [ 717.658958][ T30] audit: type=1400 audit(1766711451.946:2277): avc: denied { ioctl } for pid=14133 comm="syz.3.1931" path="/dev/vhost-vsock" dev="devtmpfs" ino=1275 ioctlcmd=0xaf01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 717.853408][T10526] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 717.864192][T10526] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 717.874200][T10526] bond0 (unregistering): Released all slaves [ 717.921635][ T5827] Bluetooth: hci0: command tx timeout [ 717.970357][T14010] 8021q: adding VLAN 0 to HW filter on device bond0 [ 718.011192][T13894] 8021q: adding VLAN 0 to HW filter on device bond0 [ 718.029423][T14010] 8021q: adding VLAN 0 to HW filter on device team0 [ 718.054519][T10515] bridge0: port 1(bridge_slave_0) entered blocking state [ 718.061672][T10515] bridge0: port 1(bridge_slave_0) entered forwarding state [ 718.097247][T13894] 8021q: adding VLAN 0 to HW filter on device team0 [ 718.107632][T10520] bridge0: port 2(bridge_slave_1) entered blocking state [ 718.114726][T10520] bridge0: port 2(bridge_slave_1) entered forwarding state [ 718.139616][T10520] bridge0: port 1(bridge_slave_0) entered blocking state [ 718.146736][T10520] bridge0: port 1(bridge_slave_0) entered forwarding state [ 718.163479][T10515] bridge0: port 2(bridge_slave_1) entered blocking state [ 718.170595][T10515] bridge0: port 2(bridge_slave_1) entered forwarding state [ 718.183505][T10526] hsr_slave_0: left promiscuous mode [ 718.190647][T10526] hsr_slave_1: left promiscuous mode [ 718.196279][T10526] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 718.203968][T10526] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 718.212195][T10526] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 718.220323][T10526] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 718.236838][T10526] veth1_macvtap: left promiscuous mode [ 718.242578][T10526] veth0_macvtap: left promiscuous mode [ 718.248089][T10526] veth1_vlan: left promiscuous mode [ 718.253347][T10526] : left promiscuous mode [ 718.261414][ T5827] Bluetooth: hci3: command tx timeout [ 718.960096][T10526] team0 (unregistering): Port device team_slave_1 removed [ 719.022658][T10526] team0 (unregistering): Port device team_slave_0 removed [ 719.805384][ T30] audit: type=1400 audit(1766711453.957:2278): avc: denied { mount } for pid=14147 comm="syz.2.1935" name="/" dev="rpc_pipefs" ino=47444 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:rpc_pipefs_t tclass=filesystem permissive=1 [ 720.009715][T14054] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 720.117952][T14054] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 720.156672][T14054] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 720.179492][T14054] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 720.205839][T14010] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 720.238795][T13894] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 720.329426][T13894] veth0_vlan: entered promiscuous mode [ 720.342927][T14054] 8021q: adding VLAN 0 to HW filter on device bond0 [ 720.364411][T13894] veth1_vlan: entered promiscuous mode [ 720.389326][T14054] 8021q: adding VLAN 0 to HW filter on device team0 [ 720.405952][T12165] bridge0: port 1(bridge_slave_0) entered blocking state [ 720.413132][T12165] bridge0: port 1(bridge_slave_0) entered forwarding state [ 720.430833][T12165] bridge0: port 2(bridge_slave_1) entered blocking state [ 720.437976][T12165] bridge0: port 2(bridge_slave_1) entered forwarding state [ 720.505510][T14010] veth0_vlan: entered promiscuous mode [ 720.511350][ T5827] Bluetooth: hci3: command tx timeout [ 720.525511][T14010] veth1_vlan: entered promiscuous mode [ 720.553689][T14010] veth0_macvtap: entered promiscuous mode [ 720.567159][T13894] veth0_macvtap: entered promiscuous mode [ 720.582898][T13894] veth1_macvtap: entered promiscuous mode [ 720.587251][T14172] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1936'. [ 720.600090][T14010] veth1_macvtap: entered promiscuous mode [ 720.602682][T14172] netlink: 'syz.2.1936': attribute type 11 has an invalid length. [ 720.611052][T13894] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 720.625982][T14172] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1936'. [ 720.629991][T13894] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 720.643100][T14172] netlink: 'syz.2.1936': attribute type 11 has an invalid length. [ 720.669790][T10534] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 720.687774][T14172] wg2: entered allmulticast mode [ 720.694596][T10534] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 720.704138][T10534] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 720.719079][T10534] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 720.745082][T14010] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 720.806119][T14010] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 720.832590][T10523] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 720.861254][T10523] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 720.871337][T10523] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 720.884660][T10523] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 720.902993][T10534] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 720.910815][T10534] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 721.085193][T14181] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 721.216037][T14181] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 721.282662][T10520] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 721.364996][T10520] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 721.452372][T14054] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 721.520177][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 721.540289][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 721.614781][T14054] veth0_vlan: entered promiscuous mode [ 721.627189][T14054] veth1_vlan: entered promiscuous mode [ 721.664624][T14054] veth0_macvtap: entered promiscuous mode [ 721.685102][T13290] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 721.699066][T14054] veth1_macvtap: entered promiscuous mode [ 721.707347][T13290] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 722.101518][T14054] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 722.117959][T14054] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 722.165135][T12166] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 722.174924][T14190] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 722.183579][T12166] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 722.192982][T14190] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 722.203741][T12166] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 722.221389][ T30] audit: type=1400 audit(1766711456.220:2279): avc: denied { read } for pid=14189 comm="syz.3.1940" name="ppp" dev="devtmpfs" ino=709 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 722.258973][T12166] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 722.375987][ T30] audit: type=1400 audit(1766711456.248:2280): avc: denied { open } for pid=14189 comm="syz.3.1940" path="/dev/ppp" dev="devtmpfs" ino=709 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 722.471668][T14190] XFS (nullb0): Invalid superblock magic number [ 722.480511][ T30] audit: type=1400 audit(1766711456.248:2281): avc: denied { ioctl } for pid=14189 comm="syz.3.1940" path="/dev/ppp" dev="devtmpfs" ino=709 ioctlcmd=0x7438 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 722.638751][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 722.652245][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 722.660705][T13290] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 722.689150][ T30] audit: type=1400 audit(1766711456.651:2282): avc: denied { map } for pid=14193 comm="syz.2.1939" path="socket:[48553]" dev="sockfs" ino=48553 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 722.741335][T13290] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 722.805720][T14201] usb 6-1: new high-speed USB device number 54 using dummy_hcd [ 722.842173][T14211] netlink: 'syz.0.1912': attribute type 4 has an invalid length. [ 722.986615][T14201] usb 6-1: Using ep0 maxpacket: 32 [ 722.993385][T14201] usb 6-1: config 0 has an invalid interface number: 2 but max is 0 [ 723.002511][T14201] usb 6-1: config 0 has no interface number 0 [ 723.009065][T14201] usb 6-1: config 0 interface 2 has no altsetting 0 [ 723.019315][T14201] usb 6-1: New USB device found, idVendor=086a, idProduct=0003, bcdDevice=f0.3f [ 723.028689][T14201] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 723.036965][T14201] usb 6-1: Product: syz [ 723.041536][T14201] usb 6-1: Manufacturer: syz [ 723.046201][T14201] usb 6-1: SerialNumber: syz [ 723.057796][T14201] usb 6-1: config 0 descriptor?? [ 723.191035][T14224] overlay: Unknown parameter 'silent' [ 723.227802][ T30] audit: type=1400 audit(1766711457.156:2283): avc: denied { connect } for pid=14218 comm="syz.0.1944" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 723.285451][T14201] usb 6-1: Quirk or no altset; falling back to MIDI 1.0 [ 723.310613][T14201] usb 6-1: USB disconnect, device number 54 [ 723.560314][T14234] ptrace attach of "./syz-executor exec"[13337] was attempted by "./syz-executor exec"[14234] [ 724.328293][T14201] usb 2-1: new high-speed USB device number 80 using dummy_hcd [ 724.432196][T14241] gfs2: not a GFS2 filesystem [ 724.515338][T14201] usb 2-1: Using ep0 maxpacket: 16 [ 724.537287][T14201] usb 2-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 724.593498][T14201] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 724.664987][T14201] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 724.718049][T14201] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 724.772824][T14201] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 724.815536][T14201] usb 2-1: Product: syz [ 724.850989][T14201] usb 2-1: Manufacturer: syz [ 724.867099][T14256] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 724.882244][T14201] usb 2-1: SerialNumber: syz [ 724.892513][ T5827] Bluetooth: hci3: Invalid connection link type handle 0x00c9 [ 724.917228][T14256] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 725.147231][ T89] usb 6-1: new full-speed USB device number 55 using dummy_hcd [ 725.322869][T14265] kvm: kvm [14264]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc1) = 0xa000 [ 725.337366][T14265] kvm: kvm [14264]: vcpu0, guest rIP: 0x1be Unhandled WRMSR(0xc1) = 0xe000 [ 725.348136][T14265] kvm: kvm [14264]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc2) = 0x400 [ 725.357862][T14201] usb 2-1: 0:2 : does not exist [ 725.364819][T14265] kvm: kvm [14264]: vcpu0, guest rIP: 0x1be Unhandled WRMSR(0xc2) = 0x4400 [ 725.605018][T14271] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 725.613971][T14271] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 726.322005][ T89] usb 6-1: new high-speed USB device number 56 using dummy_hcd [ 726.798064][T14201] usb 2-1: 1:0: cannot get min/max values for control 4 (id 1) [ 727.235209][T14201] usb 2-1: USB disconnect, device number 80 [ 727.380363][ T89] usb 6-1: Using ep0 maxpacket: 16 [ 727.440672][ T89] usb 6-1: config 0 has an invalid interface number: 68 but max is 3 [ 727.458612][T14280] lo speed is unknown, defaulting to 1000 [ 727.477686][ T89] usb 6-1: config 0 contains an unexpected descriptor of type 0x2, skipping [ 727.542470][ T89] usb 6-1: config 0 has an invalid interface number: 238 but max is 3 [ 727.577419][ T89] usb 6-1: config 0 has an invalid interface number: 252 but max is 3 [ 727.608250][ T89] usb 6-1: config 0 has an invalid interface number: 173 but max is 3 [ 727.640363][ T89] usb 6-1: config 0 has an invalid interface number: 24 but max is 3 [ 727.668496][ T89] usb 6-1: config 0 has an invalid interface number: 214 but max is 3 [ 727.695314][ T89] usb 6-1: config 0 has an invalid interface number: 163 but max is 3 [ 727.729374][ T89] usb 6-1: config 0 has 7 interfaces, different from the descriptor's value: 4 [ 727.762167][ T89] usb 6-1: config 0 has no interface number 0 [ 727.784689][ T89] usb 6-1: config 0 has no interface number 1 [ 727.810693][ T89] usb 6-1: config 0 has no interface number 2 [ 727.829053][ T89] usb 6-1: config 0 has no interface number 3 [ 727.853316][ T89] usb 6-1: config 0 has no interface number 4 [ 727.877246][ T89] usb 6-1: config 0 has no interface number 5 [ 727.894685][ T89] usb 6-1: config 0 has no interface number 6 [ 727.910257][ T89] usb 6-1: config 0 interface 68 altsetting 7 endpoint 0x2 has invalid wMaxPacketSize 0 [ 727.920464][ T89] usb 6-1: config 0 interface 68 altsetting 7 has an invalid descriptor for endpoint zero, skipping [ 727.932723][ T89] usb 6-1: config 0 interface 68 altsetting 7 endpoint 0x3 has invalid maxpacket 3096, setting to 64 [ 727.949652][ T89] usb 6-1: config 0 interface 68 altsetting 7 endpoint 0x5 has invalid maxpacket 1024, setting to 64 [ 727.961094][ T89] usb 6-1: config 0 interface 68 altsetting 7 endpoint 0xE has invalid maxpacket 20136, setting to 64 [ 727.973550][ T89] usb 6-1: config 0 interface 68 altsetting 7 endpoint 0xD has invalid maxpacket 1023, setting to 64 [ 727.984802][ T89] usb 6-1: config 0 interface 68 altsetting 7 has an endpoint descriptor with address 0x4A, changing to 0xA [ 727.997276][ T89] usb 6-1: config 0 interface 68 altsetting 7 endpoint 0xA has an invalid bInterval 0, changing to 7 [ 728.008585][ T89] usb 6-1: config 0 interface 68 altsetting 7 endpoint 0xA has invalid maxpacket 1072, setting to 1024 [ 728.021358][ T89] usb 6-1: config 0 interface 68 altsetting 7 has a duplicate endpoint with address 0x2, skipping [ 728.035963][ T89] usb 6-1: config 0 interface 238 altsetting 96 endpoint 0x6 has invalid maxpacket 512, setting to 64 [ 728.047325][ T89] usb 6-1: config 0 interface 238 altsetting 96 has a duplicate endpoint with address 0xE, skipping [ 728.063211][ T89] usb 6-1: config 0 interface 238 altsetting 96 has a duplicate endpoint with address 0xE, skipping [ 728.075224][ T89] usb 6-1: config 0 interface 238 altsetting 96 has a duplicate endpoint with address 0x2, skipping [ 728.087452][ T89] usb 6-1: config 0 interface 238 altsetting 96 has 4 endpoint descriptors, different from the interface descriptor's value: 10 [ 728.101284][ T89] usb 6-1: too many endpoints for config 0 interface 252 altsetting 238: 187, using maximum allowed: 30 [ 728.113015][ T89] usb 6-1: config 0 interface 252 altsetting 238 has a duplicate endpoint with address 0xB, skipping [ 728.124288][ T89] usb 6-1: config 0 interface 252 altsetting 238 has 2 endpoint descriptors, different from the interface descriptor's value: 187 [ 728.138712][ T89] usb 6-1: too many endpoints for config 0 interface 173 altsetting 244: 191, using maximum allowed: 30 [ 728.151788][ T89] usb 6-1: config 0 interface 173 altsetting 244 has a duplicate endpoint with address 0xA, skipping [ 728.170067][ T89] usb 6-1: config 0 interface 173 altsetting 244 has a duplicate endpoint with address 0x5, skipping [ 728.231165][ T89] usb 6-1: config 0 interface 173 altsetting 244 has a duplicate endpoint with address 0x3, skipping [ 728.298314][ T89] usb 6-1: config 0 interface 173 altsetting 244 has a duplicate endpoint with address 0x2, skipping [ 728.427967][ T89] usb 6-1: config 0 interface 173 altsetting 244 has an endpoint descriptor with address 0x2B, changing to 0xB [ 728.447076][ T89] usb 6-1: config 0 interface 173 altsetting 244 has a duplicate endpoint with address 0xB, skipping [ 728.464832][ T89] usb 6-1: config 0 interface 173 altsetting 244 has 5 endpoint descriptors, different from the interface descriptor's value: 191 [ 728.930190][ T89] usb 6-1: config 0 interface 24 altsetting 204 has a duplicate endpoint with address 0xB, skipping [ 728.941043][ T89] usb 6-1: config 0 interface 24 altsetting 204 has a duplicate endpoint with address 0x5, skipping [ 728.951882][ T89] usb 6-1: config 0 interface 24 altsetting 204 has an endpoint descriptor with address 0x4B, changing to 0xB [ 728.981171][ T89] usb 6-1: config 0 interface 24 altsetting 204 has a duplicate endpoint with address 0xB, skipping [ 728.993763][ T89] usb 6-1: config 0 interface 24 altsetting 204 has a duplicate endpoint with address 0x7, skipping [ 729.006979][ T89] usb 6-1: config 0 interface 24 altsetting 204 endpoint 0x4 has invalid maxpacket 1023, setting to 64 [ 729.014400][ T6401] usb 1-1: new full-speed USB device number 82 using dummy_hcd [ 729.021436][ T89] usb 6-1: config 0 interface 24 altsetting 204 has a duplicate endpoint with address 0xE, skipping [ 729.197705][ T89] usb 6-1: config 0 interface 24 altsetting 204 endpoint 0xC has invalid wMaxPacketSize 0 [ 729.218640][ T89] usb 6-1: config 0 interface 24 altsetting 204 has a duplicate endpoint with address 0x4, skipping [ 729.387721][ T6401] usb 1-1: unable to get BOS descriptor or descriptor too short [ 729.406846][ T6401] usb 1-1: not running at top speed; connect to a high speed hub [ 729.416992][ T89] usb 6-1: config 0 interface 24 altsetting 204 has a duplicate endpoint with address 0x7, skipping [ 729.449412][ T89] usb 6-1: config 0 interface 24 altsetting 204 has a duplicate endpoint with address 0x2, skipping [ 729.563086][ T89] usb 6-1: config 0 interface 24 altsetting 204 has a duplicate endpoint with address 0x2, skipping [ 729.580134][ T6401] usb 1-1: config 8 has an invalid interface number: 138 but max is 1 [ 729.658577][ T30] audit: type=1400 audit(1766711463.180:2284): avc: denied { setopt } for pid=14299 comm="syz.5.1963" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 729.678209][ T6401] usb 1-1: config 8 has an invalid interface number: 136 but max is 1 [ 729.731692][ T89] usb 6-1: config 0 interface 24 altsetting 204 has an invalid descriptor for endpoint zero, skipping [ 729.790124][ T30] audit: type=1400 audit(1766711463.189:2285): avc: denied { create } for pid=14299 comm="syz.5.1963" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 729.823961][ T89] usb 6-1: config 0 interface 24 altsetting 204 has a duplicate endpoint with address 0x2, skipping [ 729.837362][ T89] usb 6-1: config 0 interface 24 altsetting 204 has 14 endpoint descriptors, different from the interface descriptor's value: 13 [ 729.838071][T14298] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 729.859215][T14298] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 729.878817][ T6401] usb 1-1: config 8 has no interface number 0 [ 729.894701][ T6401] usb 1-1: config 8 has no interface number 1 [ 729.896609][ T30] audit: type=1400 audit(1766711463.189:2286): avc: denied { write } for pid=14299 comm="syz.5.1963" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 729.906951][ T6401] usb 1-1: config 8 interface 136 has no altsetting 0 [ 729.922050][ T89] usb 6-1: config 0 interface 214 altsetting 132 has 0 endpoint descriptors, different from the interface descriptor's value: 17 [ 729.956750][ T89] usb 6-1: config 0 interface 163 altsetting 12 has a duplicate endpoint with address 0x4, skipping [ 729.967674][ T30] audit: type=1400 audit(1766711463.189:2287): avc: denied { read } for pid=14299 comm="syz.5.1963" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 729.992286][ T89] usb 6-1: config 0 interface 163 altsetting 12 has an invalid descriptor for endpoint zero, skipping [ 730.009470][ T30] audit: type=1400 audit(1766711463.339:2288): avc: denied { write } for pid=14297 comm="syz.3.1964" name="uinput" dev="devtmpfs" ino=920 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 730.033059][ T89] usb 6-1: config 0 interface 163 altsetting 12 has a duplicate endpoint with address 0x4, skipping [ 730.046174][ T89] usb 6-1: config 0 interface 68 has no altsetting 0 [ 730.052860][ T89] usb 6-1: config 0 interface 238 has no altsetting 0 [ 730.068228][ T30] audit: type=1400 audit(1766711463.339:2289): avc: denied { open } for pid=14297 comm="syz.3.1964" path="/dev/uinput" dev="devtmpfs" ino=920 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 730.092646][ T89] usb 6-1: config 0 interface 252 has no altsetting 0 [ 730.099436][ T89] usb 6-1: config 0 interface 173 has no altsetting 0 [ 730.113806][ T89] usb 6-1: config 0 interface 24 has no altsetting 0 [ 730.120655][ T89] usb 6-1: config 0 interface 214 has no altsetting 0 [ 730.333116][ T30] audit: type=1400 audit(1766711463.404:2290): avc: denied { ioctl } for pid=14297 comm="syz.3.1964" path="/dev/uinput" dev="devtmpfs" ino=920 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 730.358572][ T89] usb 6-1: config 0 interface 163 has no altsetting 0 [ 730.366246][ T30] audit: type=1400 audit(1766711463.451:2291): avc: denied { write } for pid=14303 comm="syz.5.1965" name="renderD128" dev="devtmpfs" ino=626 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 730.374230][ T6401] usb 1-1: New USB device found, idVendor=0b62, idProduct=0059, bcdDevice=c1.2e [ 730.391036][ T89] usb 6-1: string descriptor 0 read error: -71 [ 730.405803][ T89] usb 6-1: New USB device found, idVendor=045e, idProduct=0476, bcdDevice=c5.4e [ 730.414848][ T89] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 730.425776][ T6401] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 730.435585][ T6401] usb 1-1: Product: syz [ 730.437232][ T89] usb 6-1: config 0 descriptor?? [ 730.441236][ T6401] usb 1-1: Manufacturer: syz [ 730.448485][ T89] usb 6-1: can't set config #0, error -71 [ 730.451523][ T6401] usb 1-1: SerialNumber: syz [ 730.457600][ T89] usb 6-1: USB disconnect, device number 56 [ 730.492443][T14313] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=14313 comm=syz.2.1967 [ 730.536240][ T30] audit: type=1400 audit(1766711464.003:2292): avc: denied { unmount } for pid=13337 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 730.536822][T14313] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1967'. [ 730.674857][T14317] syzkaller0: entered promiscuous mode [ 730.694558][T14317] syzkaller0: entered allmulticast mode [ 730.705124][T13114] usb 2-1: new high-speed USB device number 81 using dummy_hcd [ 730.724979][T14317] tipc: Started in network mode [ 730.730386][T14317] tipc: Node identity 6a29661c04bb, cluster identity 4711 [ 730.739862][T14317] tipc: Enabled bearer , priority 0 [ 730.762259][T14317] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=14317 comm=syz.3.1970 [ 730.778060][T14317] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1970'. [ 730.790686][ T89] usb 6-1: new high-speed USB device number 57 using dummy_hcd [ 730.798441][T14317] netlink: 'syz.3.1970': attribute type 1 has an invalid length. [ 730.912416][T14316] tipc: Resetting bearer [ 730.918228][T13114] usb 2-1: Using ep0 maxpacket: 16 [ 730.932395][T13114] usb 2-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 730.948819][T14316] tipc: Disabling bearer [ 730.955269][T13114] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 730.966691][T13114] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 730.978446][T13114] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 730.989124][T13114] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 730.993732][ T89] usb 6-1: Using ep0 maxpacket: 16 [ 730.997327][T13114] usb 2-1: Product: syz [ 731.002727][ T89] usb 6-1: too many configurations: 72, using maximum allowed: 8 [ 731.015645][T13114] usb 2-1: Manufacturer: syz [ 731.016315][ T89] usb 6-1: config 0 has no interfaces? [ 731.020358][T13114] usb 2-1: SerialNumber: syz [ 731.026658][ T89] usb 6-1: config 0 has no interfaces? [ 731.043565][ T89] usb 6-1: config 0 has no interfaces? [ 731.050075][ T89] usb 6-1: config 0 has no interfaces? [ 731.068687][ T89] usb 6-1: config 0 has no interfaces? [ 731.076675][ T89] usb 6-1: config 0 has no interfaces? [ 731.086651][ T89] usb 6-1: config 0 has no interfaces? [ 731.096226][ T89] usb 6-1: config 0 has no interfaces? [ 731.278743][ T89] usb 6-1: string descriptor 0 read error: -71 [ 731.289539][ T89] usb 6-1: New USB device found, idVendor=1708, idProduct=000e, bcdDevice=ad.b1 [ 731.299188][ T89] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=70 [ 731.316105][ T89] usb 6-1: config 0 descriptor?? [ 731.322606][ T89] usb 6-1: can't set config #0, error -71 [ 731.500776][T13114] usb 2-1: 0:2 : does not exist [ 731.706381][ T89] usb 6-1: USB disconnect, device number 57 [ 731.837116][ T30] audit: type=1400 audit(1766711465.210:2293): avc: denied { bind } for pid=14328 comm="syz.2.1973" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 731.880843][ T6401] usb 1-1: USB disconnect, device number 82 [ 732.036722][T14335] overlayfs: missing 'lowerdir' [ 732.146435][T13114] usb 2-1: 1:0: cannot get min/max values for control 4 (id 1) [ 732.362761][T13114] usb 2-1: USB disconnect, device number 81 [ 733.876698][T14359] netlink: 5 bytes leftover after parsing attributes in process `syz.1.1981'. [ 733.918896][T14359] 0ªX¹¦D: renamed from macvtap0 (while UP) [ 733.958065][T14359] 0ªX¹¦D: entered allmulticast mode [ 734.078039][T14359] veth0_macvtap: entered allmulticast mode [ 734.835612][T14359] A link change request failed with some changes committed already. Interface 30ªX¹¦D may have been left with an inconsistent configuration, please check. [ 735.776704][ T30] kauditd_printk_skb: 1 callbacks suppressed [ 735.776717][ T30] audit: type=1400 audit(1766711468.904:2295): avc: denied { getopt } for pid=14374 comm="syz.5.1986" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 735.805241][T14376] IPVS: length: 231 != 8 [ 738.731837][ T25] block nbd2: Possible stuck request ffff888025ed8000: control (read@0,1024B). Runtime 390 seconds [ 738.742722][ T25] block nbd2: Possible stuck request ffff888025ed8200: control (read@1024,1024B). Runtime 390 seconds [ 738.743521][ T30] audit: type=1400 audit(1766711471.664:2296): avc: denied { connect } for pid=14387 comm="syz.2.1990" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 738.753788][ T25] block nbd2: Possible stuck request ffff888025ed8400: control (read@2048,1024B). Runtime 390 seconds [ 738.785470][ T25] block nbd2: Possible stuck request ffff888025ed8600: control (read@3072,1024B). Runtime 390 seconds [ 738.818113][ T30] audit: type=1400 audit(1766711471.664:2297): avc: denied { write } for pid=14387 comm="syz.2.1990" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 738.862058][ T5887] usb 2-1: new high-speed USB device number 82 using dummy_hcd [ 738.871477][T14400] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 738.902405][T14400] CIFS: Unable to determine destination address [ 739.024566][ T5887] usb 2-1: config 220 has an invalid interface number: 76 but max is 2 [ 739.078967][ T5887] usb 2-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 739.102200][ T5887] usb 2-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 739.116464][ T5887] usb 2-1: config 220 has no interface number 2 [ 739.123002][ T5887] usb 2-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 739.169027][ T5887] usb 2-1: config 220 interface 0 has no altsetting 0 [ 739.190062][ T5887] usb 2-1: config 220 interface 76 has no altsetting 0 [ 739.201045][ T5887] usb 2-1: config 220 interface 1 has no altsetting 0 [ 739.213928][ T5887] usb 2-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 739.247514][ T5887] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 739.418449][ T5887] usb 2-1: Product: syz [ 739.422737][ T5887] usb 2-1: Manufacturer: syz [ 739.464900][T10534] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 739.477494][ T5887] usb 2-1: SerialNumber: syz [ 739.846495][T10534] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 739.877887][T14416] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 739.908079][T14416] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 739.931721][T14416] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 739.962033][T14416] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 739.996504][T14416] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 740.016907][T14416] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 740.050688][T10534] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 740.063236][T11416] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 740.074455][T11416] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 740.083073][T11416] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 740.094277][T11416] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 740.103545][T11416] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 740.144324][T14417] lo speed is unknown, defaulting to 1000 [ 740.192296][T10534] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 740.423215][T13114] usb 6-1: new high-speed USB device number 58 using dummy_hcd [ 740.495006][T14417] chnl_net:caif_netlink_parms(): no params data found [ 740.510837][T10534] bridge_slave_1: left allmulticast mode [ 740.518938][T10534] bridge_slave_1: left promiscuous mode [ 740.526087][T10534] bridge0: port 2(bridge_slave_1) entered disabled state [ 740.537476][T10534] bridge_slave_0: left allmulticast mode [ 740.544362][T10534] bridge_slave_0: left promiscuous mode [ 740.551379][T10534] bridge0: port 1(bridge_slave_0) entered disabled state [ 740.615308][T13114] usb 6-1: Using ep0 maxpacket: 16 [ 740.622112][T13114] usb 6-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 740.631209][T13114] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 740.646764][T13114] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 740.658421][T13114] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 740.667465][T13114] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 740.689598][T13114] usb 6-1: Product: syz [ 740.693848][T13114] usb 6-1: Manufacturer: syz [ 740.698444][T13114] usb 6-1: SerialNumber: syz [ 740.758329][ T30] audit: type=1400 audit(1766711473.563:2298): avc: denied { create } for pid=14427 comm="syz.3.2001" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=atmpvc_socket permissive=1 [ 740.795472][ T30] audit: type=1400 audit(1766711473.581:2299): avc: denied { create } for pid=14427 comm="syz.3.2001" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 741.121267][T10534] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 741.134534][T10534] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 741.145127][T10534] bond0 (unregistering): Released all slaves [ 741.150559][T13114] usb 6-1: 0:2 : does not exist [ 741.181289][T14436] ip6erspan1: entered allmulticast mode [ 741.327039][T14417] bridge0: port 1(bridge_slave_0) entered blocking state [ 741.334762][T14417] bridge0: port 1(bridge_slave_0) entered disabled state [ 741.342156][T14417] bridge_slave_0: entered allmulticast mode [ 741.350843][T14417] bridge_slave_0: entered promiscuous mode [ 741.378966][ T5887] uvcvideo 2-1:220.1: Unknown video format 04000003-0000-0000-0000-001000000000 [ 741.397626][ T5887] uvcvideo 2-1:220.0: Found UVC 7.01 device syz (8086:0b07) [ 741.405072][ T5887] uvcvideo 2-1:220.0: No valid video chain found. [ 741.415212][ T5887] usb 2-1: selecting invalid altsetting 0 [ 741.445604][ T5887] usb 2-1: selecting invalid altsetting 0 [ 741.451962][ T5887] usbtest 2-1:220.1: probe with driver usbtest failed with error -22 [ 741.461424][T14417] bridge0: port 2(bridge_slave_1) entered blocking state [ 741.463064][ T5887] usb 2-1: USB disconnect, device number 82 [ 741.477521][T14417] bridge0: port 2(bridge_slave_1) entered disabled state [ 741.487591][T14417] bridge_slave_1: entered allmulticast mode [ 741.495510][T14417] bridge_slave_1: entered promiscuous mode [ 741.555733][T10534] hsr_slave_0: left promiscuous mode [ 741.563315][T10534] hsr_slave_1: left promiscuous mode [ 741.570049][T10534] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 741.579318][T10534] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 741.588356][T10534] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 741.597322][T10534] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 741.628606][T10534] veth1_macvtap: left promiscuous mode [ 741.634508][T10534] veth0_macvtap: left promiscuous mode [ 741.640354][T10534] veth1_vlan: left promiscuous mode [ 741.646099][T10534] veth0_vlan: left promiscuous mode [ 741.895586][T13114] usb 6-1: 1:0: failed to get current value for ch 0 (-22) [ 741.919402][ T30] audit: type=1400 audit(1766711474.638:2300): avc: denied { bind } for pid=14451 comm="syz.2.2007" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 741.972314][T13114] usb 6-1: USB disconnect, device number 58 [ 742.286090][T10534] team0 (unregistering): Port device team_slave_1 removed [ 742.293761][T11416] Bluetooth: hci3: command tx timeout [ 742.332899][T10534] team0 (unregistering): Port device team_slave_0 removed [ 742.782949][T14417] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 742.923687][T14417] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 743.483846][T13114] IPVS: starting estimator thread 0... [ 743.551284][T14464] dvmrp0: entered allmulticast mode [ 743.557483][T14467] tipc: Enabled bearer , priority 10 [ 743.608724][T14468] IPVS: using max 83 ests per chain, 199200 per kthread [ 743.630808][T14417] team0: Port device team_slave_0 added [ 743.657596][T14417] team0: Port device team_slave_1 added [ 743.770394][ T30] audit: type=1400 audit(1766711476.378:2301): avc: denied { accept } for pid=14475 comm="syz.5.2013" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 743.957718][ T30] audit: type=1400 audit(1766711476.547:2302): avc: denied { mount } for pid=14491 comm="syz.3.2018" name="/" dev="nfsd" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfsd_fs_t tclass=filesystem permissive=1 [ 743.987582][ T30] audit: type=1400 audit(1766711476.575:2303): avc: denied { unmount } for pid=14491 comm="syz.3.2018" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfsd_fs_t tclass=filesystem permissive=1 [ 744.021694][T14417] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 744.029547][T14417] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 744.073119][T14417] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 744.124423][T14417] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 744.131406][T14417] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 744.158557][T14417] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 744.204443][T14417] hsr_slave_0: entered promiscuous mode [ 744.211071][T14417] hsr_slave_1: entered promiscuous mode [ 744.217743][T14417] debugfs: 'hsr0' already exists in 'hsr' [ 744.223922][T14417] Cannot create hsr debugfs directory [ 744.482050][T10534] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 744.518588][ T5827] Bluetooth: hci3: command tx timeout [ 744.619630][T11416] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 744.630114][T11416] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 744.638817][T11416] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 744.646527][T11416] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 744.653978][T11416] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 744.751859][ T30] audit: type=1400 audit(1766711477.286:2304): avc: denied { read } for pid=14493 comm="syz.5.2019" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 744.752412][T10534] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 744.818557][ T6401] tipc: Node number set to 1855088156 [ 744.833408][T14503] lo speed is unknown, defaulting to 1000 [ 744.869673][T14495] can: request_module (can-proto-3) failed. [ 744.888838][ T30] audit: type=1400 audit(1766711477.407:2305): avc: denied { unmount } for pid=13337 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 744.994965][T10534] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 745.056759][ T30] audit: type=1400 audit(1766711477.576:2306): avc: denied { name_connect } for pid=14499 comm="syz.2.2021" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=sctp_socket permissive=1 [ 745.108614][T10534] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 745.186664][ T30] audit: type=1400 audit(1766711477.697:2307): avc: denied { watch_reads } for pid=14508 comm="syz.3.2024" path="/67" dev="tmpfs" ino=373 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 745.359674][T14417] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 745.374449][T14417] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 745.404930][T14417] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 745.415951][T14417] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 745.434516][ T30] audit: type=1400 audit(1766711477.931:2308): avc: denied { read write } for pid=14516 comm="syz.5.2025" name="nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 745.472414][T10534] bridge_slave_1: left allmulticast mode [ 745.485430][T10534] bridge_slave_1: left promiscuous mode [ 745.497459][T10534] bridge0: port 2(bridge_slave_1) entered disabled state [ 745.506086][ T30] audit: type=1400 audit(1766711477.959:2309): avc: denied { open } for pid=14516 comm="syz.5.2025" path="/dev/nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 745.538443][T10534] bridge_slave_0: left allmulticast mode [ 745.548258][T10534] bridge_slave_0: left promiscuous mode [ 745.559155][T10534] bridge0: port 1(bridge_slave_0) entered disabled state [ 746.071025][T10534] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 746.096795][T10534] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 746.113008][T10534] bond0 (unregistering): Released all slaves [ 746.147871][T14503] chnl_net:caif_netlink_parms(): no params data found [ 746.355615][T14538] netlink: 'syz.3.2029': attribute type 1 has an invalid length. [ 746.365352][T14538] netlink: 'syz.3.2029': attribute type 2 has an invalid length. [ 746.373492][T14538] netlink: 'syz.3.2029': attribute type 1 has an invalid length. [ 746.381597][T14538] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2029'. [ 746.744721][ T5827] Bluetooth: hci3: command tx timeout [ 746.758587][T14503] bridge0: port 1(bridge_slave_0) entered blocking state [ 746.769256][T14503] bridge0: port 1(bridge_slave_0) entered disabled state [ 746.777373][T14503] bridge_slave_0: entered allmulticast mode [ 746.784633][T14503] bridge_slave_0: entered promiscuous mode [ 746.797871][T14503] bridge0: port 2(bridge_slave_1) entered blocking state [ 746.805416][T14503] bridge0: port 2(bridge_slave_1) entered disabled state [ 746.812687][T14503] bridge_slave_1: entered allmulticast mode [ 746.823454][T14503] bridge_slave_1: entered promiscuous mode [ 746.829467][ T5827] Bluetooth: hci1: command tx timeout [ 746.854577][T10534] hsr_slave_0: left promiscuous mode [ 746.862752][T10534] hsr_slave_1: left promiscuous mode [ 746.869025][T10534] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 746.876637][T10534] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 746.885008][T10534] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 746.892940][T10534] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 746.919415][T10534] veth1_macvtap: left promiscuous mode [ 746.925210][T10534] veth0_macvtap: left allmulticast mode [ 746.930963][T10534] veth0_macvtap: left promiscuous mode [ 746.936703][T10534] veth1_vlan: left promiscuous mode [ 746.942245][T10534] veth0_vlan: left promiscuous mode [ 747.313962][ T30] kauditd_printk_skb: 4 callbacks suppressed [ 747.313978][ T30] audit: type=1400 audit(1766711479.690:2314): avc: denied { connect } for pid=14554 comm="syz.3.2032" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 747.677810][T10534] team0 (unregistering): Port device team_slave_1 removed [ 747.724273][T10534] team0 (unregistering): Port device team_slave_0 removed [ 748.285301][T14555] gre0: entered promiscuous mode [ 748.290293][T14555] gre0: entered allmulticast mode [ 748.374137][T14503] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 748.395471][T14503] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 748.540019][T14567] ipt_REJECT: ECHOREPLY no longer supported. [ 748.666955][ T30] audit: type=1400 audit(1766711480.962:2315): avc: denied { ioctl } for pid=14564 comm="syz.3.2035" path="/dev/fuse" dev="devtmpfs" ino=99 ioctlcmd=0xe500 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 748.739304][T14503] team0: Port device team_slave_0 added [ 748.750035][T14503] team0: Port device team_slave_1 added [ 748.860404][T14503] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 748.874813][T14503] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 748.913268][T14503] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 748.927311][T14503] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 748.939207][T14503] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 748.965222][ T5827] Bluetooth: hci3: command tx timeout [ 748.971369][T14503] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 749.051771][ T5827] Bluetooth: hci1: command tx timeout [ 749.064479][T14503] hsr_slave_0: entered promiscuous mode [ 749.071913][T14503] hsr_slave_1: entered promiscuous mode [ 749.085919][T11416] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 749.097280][T11416] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 749.106236][T11416] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 749.123398][T11416] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 749.132586][T11416] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 749.171217][T10534] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 749.207340][T14417] 8021q: adding VLAN 0 to HW filter on device bond0 [ 749.258490][T10534] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 749.295984][T14569] lo speed is unknown, defaulting to 1000 [ 749.331206][T10534] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 749.361609][T14417] 8021q: adding VLAN 0 to HW filter on device team0 [ 749.429541][T10534] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 749.442139][ T30] audit: type=1400 audit(1766711481.682:2316): avc: denied { create } for pid=14571 comm="syz.3.2038" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 749.483541][ T30] audit: type=1400 audit(1766711481.682:2317): avc: denied { connect } for pid=14571 comm="syz.3.2038" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 749.505429][ T30] audit: type=1400 audit(1766711481.682:2318): avc: denied { setopt } for pid=14571 comm="syz.3.2038" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 749.534903][T10520] bridge0: port 1(bridge_slave_0) entered blocking state [ 749.542072][T10520] bridge0: port 1(bridge_slave_0) entered forwarding state [ 749.569469][T10520] bridge0: port 2(bridge_slave_1) entered blocking state [ 749.576652][T10520] bridge0: port 2(bridge_slave_1) entered forwarding state [ 749.751930][T10534] bridge_slave_1: left allmulticast mode [ 749.759160][T10534] bridge_slave_1: left promiscuous mode [ 749.764941][T10534] bridge0: port 2(bridge_slave_1) entered disabled state [ 749.773692][T10534] bridge_slave_0: left allmulticast mode [ 749.802554][T10534] bridge_slave_0: left promiscuous mode [ 749.808569][T10534] bridge0: port 1(bridge_slave_0) entered disabled state [ 750.063568][T10534] dvmrp0 (unregistering): left allmulticast mode [ 750.240725][T10534] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 750.251069][T10534] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 750.261018][T10534] bond0 (unregistering): Released all slaves [ 750.293361][T14569] chnl_net:caif_netlink_parms(): no params data found [ 750.533765][T14569] bridge0: port 1(bridge_slave_0) entered blocking state [ 750.542935][T14569] bridge0: port 1(bridge_slave_0) entered disabled state [ 750.550271][T14569] bridge_slave_0: entered allmulticast mode [ 750.557841][T14569] bridge_slave_0: entered promiscuous mode [ 750.565926][T14569] bridge0: port 2(bridge_slave_1) entered blocking state [ 750.576401][T14569] bridge0: port 2(bridge_slave_1) entered disabled state [ 750.584435][T14569] bridge_slave_1: entered allmulticast mode [ 750.593077][T14569] bridge_slave_1: entered promiscuous mode [ 750.648320][T10534] hsr_slave_0: left promiscuous mode [ 750.655068][T10534] hsr_slave_1: left promiscuous mode [ 750.661031][T10534] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 750.669088][T10534] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 750.678774][T10534] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 750.686935][T10534] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 750.782978][T10534] veth1_macvtap: left promiscuous mode [ 750.789026][T10534] veth0_macvtap: left promiscuous mode [ 750.790649][T14594] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 750.794654][T10534] veth1_vlan: left promiscuous mode [ 750.817967][T10534] veth0_vlan: left promiscuous mode [ 751.638674][T11416] Bluetooth: hci0: command tx timeout [ 751.646091][ T5827] Bluetooth: hci1: command tx timeout [ 751.671542][ T30] audit: type=1400 audit(1766711483.394:2319): avc: denied { connect } for pid=14600 comm="syz.3.2042" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 751.703082][ T30] audit: type=1400 audit(1766711483.394:2320): avc: denied { write } for pid=14600 comm="syz.3.2042" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 752.172987][T10534] team0 (unregistering): Port device team_slave_1 removed [ 752.245458][T10534] team0 (unregistering): Port device team_slave_0 removed [ 753.244236][ T30] audit: type=1400 audit(1766711485.236:2321): avc: denied { setattr } for pid=14631 comm="syz.3.2050" name="RAW" dev="sockfs" ino=51219 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 753.288910][T14569] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 753.313617][T14503] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 753.323807][ T30] audit: type=1400 audit(1766711485.311:2322): avc: denied { associate } for pid=14636 comm="syz.3.2051" name="pfkey" scontext=root:object_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 753.351304][T14569] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 753.363767][T14503] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 753.409814][T14503] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 753.423790][T14417] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 753.453098][T14503] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 753.490263][ T30] audit: type=1400 audit(1766711485.470:2323): avc: denied { listen } for pid=14636 comm="syz.3.2051" lport=50906 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 753.509646][T14569] team0: Port device team_slave_0 added [ 753.514457][ T30] audit: type=1400 audit(1766711485.470:2324): avc: denied { listen } for pid=14636 comm="syz.3.2051" lport=50906 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 753.618030][T14569] team0: Port device team_slave_1 added [ 753.908554][ T5827] Bluetooth: hci1: command tx timeout [ 753.914266][ T5827] Bluetooth: hci0: command tx timeout [ 755.073105][T14569] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 755.087118][T14569] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 755.423084][ T30] audit: type=1326 audit(1766711487.257:2325): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14628 comm="syz.2.2047" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd46378f749 code=0x7fc00000 [ 755.454328][T14569] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 755.480616][ T30] audit: type=1326 audit(1766711487.322:2326): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14628 comm="syz.2.2047" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd46378f749 code=0x7fc00000 [ 755.515814][ T30] audit: type=1326 audit(1766711487.322:2327): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14628 comm="syz.2.2047" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd46378f749 code=0x7fc00000 [ 755.541276][ T30] audit: type=1326 audit(1766711487.322:2328): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14628 comm="syz.2.2047" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd46378f749 code=0x7fc00000 [ 755.565029][T14650] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2047'. [ 755.604335][T14569] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 755.621584][ T30] audit: type=1326 audit(1766711487.322:2329): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14628 comm="syz.2.2047" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd46378f749 code=0x7fc00000 [ 755.624796][T14569] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 755.645415][ T30] audit: type=1326 audit(1766711487.322:2330): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14628 comm="syz.2.2047" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd46378f749 code=0x7fc00000 [ 755.766976][T14569] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 756.021171][T14569] hsr_slave_0: entered promiscuous mode [ 756.027179][T14569] hsr_slave_1: entered promiscuous mode [ 756.033163][T14569] debugfs: 'hsr0' already exists in 'hsr' [ 756.038861][T14569] Cannot create hsr debugfs directory [ 756.075571][ T5827] Bluetooth: hci0: command tx timeout [ 756.086111][T14503] 8021q: adding VLAN 0 to HW filter on device bond0 [ 756.122286][T14503] 8021q: adding VLAN 0 to HW filter on device team0 [ 756.440384][T12171] bridge0: port 1(bridge_slave_0) entered blocking state [ 756.447479][T12171] bridge0: port 1(bridge_slave_0) entered forwarding state [ 756.462573][T12171] bridge0: port 2(bridge_slave_1) entered blocking state [ 756.469697][T12171] bridge0: port 2(bridge_slave_1) entered forwarding state [ 756.538534][T14417] veth0_vlan: entered promiscuous mode [ 756.564359][T14417] veth1_vlan: entered promiscuous mode [ 756.610461][T14417] veth0_macvtap: entered promiscuous mode [ 756.633638][T14417] veth1_macvtap: entered promiscuous mode [ 756.713390][T14417] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 756.764953][T14417] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 756.820808][T14569] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 756.844962][T10515] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 756.853982][T14569] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 756.880965][T10515] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 756.897865][T10515] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 756.911888][T14569] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 756.927367][T10515] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 756.938945][T14569] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 756.998731][T14674] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 757.014440][T14674] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 757.067120][T14503] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 757.102405][T10534] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 757.123421][T10534] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 757.213880][T10515] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 757.230263][T10515] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 757.289250][T14569] 8021q: adding VLAN 0 to HW filter on device bond0 [ 757.333231][T14569] 8021q: adding VLAN 0 to HW filter on device team0 [ 757.365141][T12171] bridge0: port 1(bridge_slave_0) entered blocking state [ 757.372268][T12171] bridge0: port 1(bridge_slave_0) entered forwarding state [ 757.418679][T10506] bridge0: port 2(bridge_slave_1) entered blocking state [ 757.425836][T10506] bridge0: port 2(bridge_slave_1) entered forwarding state [ 757.592936][T14503] veth0_vlan: entered promiscuous mode [ 757.624913][T14503] veth1_vlan: entered promiscuous mode [ 757.711215][T14503] veth0_macvtap: entered promiscuous mode [ 757.745415][T14503] veth1_macvtap: entered promiscuous mode [ 757.859858][T14503] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 757.889604][T14503] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 757.910708][T10520] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 757.926893][T10520] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 757.999197][T14569] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 758.014332][T10520] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 758.046107][T10520] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 758.193291][T12165] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 758.215610][T12165] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 758.286963][ T5827] Bluetooth: hci0: command tx timeout [ 758.339748][T10506] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 758.367943][T10506] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 758.915968][T14569] veth0_vlan: entered promiscuous mode [ 758.946959][T14569] veth1_vlan: entered promiscuous mode [ 759.036121][T14569] veth0_macvtap: entered promiscuous mode [ 759.055465][T14569] veth1_macvtap: entered promiscuous mode [ 759.146292][T14569] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 759.165072][T14569] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 759.183143][T12165] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 759.213852][T12165] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 759.247753][T12165] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 759.289436][T12165] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 759.398461][ T30] kauditd_printk_skb: 4 callbacks suppressed [ 759.398481][ T30] audit: type=1400 audit(1766711490.989:2335): avc: denied { create } for pid=14681 comm="syz.2.2058" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 759.432083][T14723] qnx6: unable to read the first superblock [ 759.443429][ T5923] usb 7-1: new high-speed USB device number 47 using dummy_hcd [ 759.476835][T14677] syz.3.2057 (14677): drop_caches: 3 [ 759.515720][T12166] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 759.529198][T14723] qnx6: unable to read the first superblock [ 759.535196][T12166] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 759.535216][T14723] qnx6: unable to read the first superblock [ 759.590245][T12166] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 759.602456][T12166] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 759.644623][ T5923] usb 7-1: Using ep0 maxpacket: 8 [ 759.654405][ T5923] usb 7-1: New USB device found, idVendor=0c45, idProduct=613a, bcdDevice=c4.6d [ 759.676662][ T5923] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 759.684788][ T5923] usb 7-1: Product: syz [ 759.695560][ T5923] usb 7-1: Manufacturer: syz [ 759.700367][ T5923] usb 7-1: SerialNumber: syz [ 759.726815][ T5923] usb 7-1: config 0 descriptor?? [ 759.770228][ T5923] gspca_main: sonixj-2.14.0 probing 0c45:613a [ 760.052088][ T30] audit: type=1400 audit(1766711491.597:2336): avc: denied { lock } for pid=14729 comm="syz.4.2063" path="socket:[53026]" dev="sockfs" ino=53026 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_stream_socket permissive=1 [ 760.499938][ T5923] gspca_sonixj: reg_r err -71 [ 760.510832][ T5923] sonixj 7-1:0.0: probe with driver sonixj failed with error -71 [ 760.530909][ T5923] usb 7-1: USB disconnect, device number 47 [ 760.552849][ T30] audit: type=1400 audit(1766711491.766:2337): avc: denied { write } for pid=14727 comm="syz.7.2062" name="001" dev="devtmpfs" ino=736 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 760.612542][ T30] audit: type=1400 audit(1766711491.766:2338): avc: denied { map } for pid=14727 comm="syz.7.2062" path="/dev/bus/usb/006/001" dev="devtmpfs" ino=736 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 760.817644][T14738] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 760.826566][T14738] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 760.838444][ T30] audit: type=1400 audit(1766711492.336:2339): avc: denied { bind } for pid=14737 comm="syz.3.2064" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 761.149322][ T30] audit: type=1326 audit(1766711492.486:2340): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14737 comm="syz.3.2064" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f667cb8f749 code=0x7ffc0000 [ 761.205437][ T30] audit: type=1326 audit(1766711492.486:2341): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14737 comm="syz.3.2064" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f667cb8f749 code=0x7ffc0000 [ 761.636231][T14744] tmpfs: Unknown parameter 'mpol' [ 761.660909][ T30] audit: type=1400 audit(1766711493.094:2342): avc: denied { create } for pid=14742 comm="syz.4.2066" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 761.686104][ T30] audit: type=1400 audit(1766711493.094:2343): avc: denied { ioctl } for pid=14742 comm="syz.4.2066" path="socket:[53042]" dev="sockfs" ino=53042 ioctlcmd=0x890b scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 762.360035][ T30] audit: type=1400 audit(1766711493.094:2344): avc: denied { connect } for pid=14742 comm="syz.4.2066" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 762.541787][T13114] usb 7-1: new high-speed USB device number 48 using dummy_hcd [ 762.712770][T13114] usb 7-1: Using ep0 maxpacket: 8 [ 762.778312][T13114] usb 7-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x73, changing to 0x3 [ 762.814539][T13114] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 762.854490][T13114] usb 7-1: New USB device found, idVendor=0e9c, idProduct=0000, bcdDevice=5b.1e [ 762.877095][T14772] [ 762.879442][T14772] ====================================================== [ 762.886438][T14772] WARNING: possible circular locking dependency detected [ 762.893452][T14772] syzkaller #0 Tainted: G L [ 762.899402][T14772] ------------------------------------------------------ [ 762.906396][T14772] syz.4.2070/14772 is trying to acquire lock: [ 762.912525][T14772] ffff888027aac468 (&pipe->mutex){+.+.}-{4:4}, at: anon_pipe_write+0x15d/0x1bd0 [ 762.921562][T14772] [ 762.921562][T14772] but task is already holding lock: [ 762.928913][T14772] ffff888054b47148 (&sbi->pipe_mutex){+.+.}-{4:4}, at: autofs_notify_daemon+0x4a6/0xd60 [ 762.938663][T14772] [ 762.938663][T14772] which lock already depends on the new lock. [ 762.938663][T14772] [ 762.949042][T14772] [ 762.949042][T14772] the existing dependency chain (in reverse order) is: [ 762.958029][T14772] [ 762.958029][T14772] -> #3 (&sbi->pipe_mutex){+.+.}-{4:4}: [ 762.965742][T14772] __mutex_lock+0x1aa/0x1ca0 [ 762.970836][T14772] autofs_notify_daemon+0x4a6/0xd60 [ 762.976534][T14772] autofs_wait+0x10f3/0x1ac0 [ 762.981623][T14772] autofs_mount_wait+0x132/0x3c0 [ 762.987060][T14772] autofs_d_automount+0x4b2/0x960 [ 762.992600][T14772] __traverse_mounts+0x1b9/0x830 [ 762.998070][T14772] step_into_slowpath+0x772/0xf50 [ 763.003593][T14772] path_lookupat+0x627/0xc40 [ 763.008691][T14772] filename_lookup+0x224/0x5f0 [ 763.013967][T14772] kern_path+0x35/0x50 [ 763.018531][T14772] lookup_bdev+0xd8/0x280 [ 763.023367][T14772] resume_store+0x1d6/0x490 [ 763.028377][T14772] kobj_attr_store+0x58/0x80 [ 763.033467][T14772] sysfs_kf_write+0xf2/0x150 [ 763.038560][T14772] kernfs_fop_write_iter+0x3af/0x570 [ 763.044367][T14772] vfs_write+0x7d3/0x11d0 [ 763.049213][T14772] ksys_write+0x12a/0x250 [ 763.054126][T14772] do_syscall_64+0xcd/0xf80 [ 763.059132][T14772] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 763.065525][T14772] [ 763.065525][T14772] -> #2 (&of->mutex){+.+.}-{4:4}: [ 763.072726][T14772] __mutex_lock+0x1aa/0x1ca0 [ 763.077816][T14772] kernfs_seq_start+0x4f/0x2a0 [ 763.083082][T14772] seq_read_iter+0x2c1/0x12d0 [ 763.088281][T14772] kernfs_fop_read_iter+0x46c/0x610 [ 763.094003][T14772] copy_splice_read+0x618/0xc20 [ 763.099375][T14772] do_splice_read+0x285/0x370 [ 763.104555][T14772] splice_direct_to_actor+0x2a1/0xa30 [ 763.110425][T14772] do_splice_direct+0x174/0x240 [ 763.115772][T14772] do_sendfile+0xb06/0xe50 [ 763.120683][T14772] __x64_sys_sendfile64+0x1d8/0x220 [ 763.126390][T14772] do_syscall_64+0xcd/0xf80 [ 763.131388][T14772] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 763.137782][T14772] [ 763.137782][T14772] -> #1 (&p->lock){+.+.}-{4:4}: [ 763.144783][T14772] __mutex_lock+0x1aa/0x1ca0 [ 763.149867][T14772] seq_read_iter+0xe1/0x12d0 [ 763.154959][T14772] kernfs_fop_read_iter+0x46c/0x610 [ 763.160660][T14772] copy_splice_read+0x618/0xc20 [ 763.166029][T14772] do_splice_read+0x285/0x370 [ 763.171204][T14772] splice_file_to_pipe+0x109/0x120 [ 763.176817][T14772] do_sendfile+0x400/0xe50 [ 763.181823][T14772] __x64_sys_sendfile64+0x1d8/0x220 [ 763.187518][T14772] do_syscall_64+0xcd/0xf80 [ 763.192517][T14772] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 763.198904][T14772] [ 763.198904][T14772] -> #0 (&pipe->mutex){+.+.}-{4:4}: [ 763.206254][T14772] __lock_acquire+0x1669/0x2890 [ 763.211619][T14772] lock_acquire+0x179/0x330 [ 763.216643][T14772] __mutex_lock+0x1aa/0x1ca0 [ 763.221735][T14772] anon_pipe_write+0x15d/0x1bd0 [ 763.227089][T14772] __kernel_write_iter+0x720/0xb10 [ 763.232701][T14772] __kernel_write+0xf5/0x140 [ 763.237791][T14772] autofs_notify_daemon+0x4db/0xd60 [ 763.243483][T14772] autofs_wait+0x10f3/0x1ac0 [ 763.248579][T14772] autofs_mount_wait+0x132/0x3c0 [ 763.254010][T14772] autofs_d_automount+0x4b2/0x960 [ 763.259527][T14772] __traverse_mounts+0x1b9/0x830 [ 763.264964][T14772] step_into_slowpath+0x772/0xf50 [ 763.270487][T14772] path_lookupat+0x627/0xc40 [ 763.275578][T14772] filename_lookup+0x224/0x5f0 [ 763.280837][T14772] kern_path+0x35/0x50 [ 763.285401][T14772] lookup_bdev+0xd8/0x280 [ 763.290225][T14772] resume_store+0x1d6/0x490 [ 763.295222][T14772] kobj_attr_store+0x58/0x80 [ 763.300308][T14772] sysfs_kf_write+0xf2/0x150 [ 763.305402][T14772] kernfs_fop_write_iter+0x3af/0x570 [ 763.311201][T14772] vfs_write+0x7d3/0x11d0 [ 763.316025][T14772] ksys_write+0x12a/0x250 [ 763.320852][T14772] do_syscall_64+0xcd/0xf80 [ 763.325854][T14772] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 763.332252][T14772] [ 763.332252][T14772] other info that might help us debug this: [ 763.332252][T14772] [ 763.342457][T14772] Chain exists of: [ 763.342457][T14772] &pipe->mutex --> &of->mutex --> &sbi->pipe_mutex [ 763.342457][T14772] [ 763.354870][T14772] Possible unsafe locking scenario: [ 763.354870][T14772] [ 763.362294][T14772] CPU0 CPU1 [ 763.367638][T14772] ---- ---- [ 763.372978][T14772] lock(&sbi->pipe_mutex); [ 763.377463][T14772] lock(&of->mutex); [ 763.383942][T14772] lock(&sbi->pipe_mutex); [ 763.390943][T14772] lock(&pipe->mutex); [ 763.395076][T14772] [ 763.395076][T14772] *** DEADLOCK *** [ 763.395076][T14772] [ 763.403194][T14772] 5 locks held by syz.4.2070/14772: [ 763.408366][T14772] #0: ffff88807bfc9eb8 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x2a2/0x370 [ 763.417404][T14772] #1: ffff888033acc420 (sb_writers#8){.+.+}-{0:0}, at: ksys_write+0x12a/0x250 [ 763.426354][T14772] #2: ffff8880257b3088 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x28f/0x570 [ 763.436087][T14772] #3: ffff888140e9a4b8 (kn->active#62){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x2ff/0x570 [ 763.446082][T14772] #4: ffff888054b47148 (&sbi->pipe_mutex){+.+.}-{4:4}, at: autofs_notify_daemon+0x4a6/0xd60 [ 763.456250][T14772] [ 763.456250][T14772] stack backtrace: [ 763.462119][T14772] CPU: 0 UID: 0 PID: 14772 Comm: syz.4.2070 Tainted: G L syzkaller #0 PREEMPT(full) [ 763.462143][T14772] Tainted: [L]=SOFTLOCKUP [ 763.462149][T14772] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 763.462158][T14772] Call Trace: [ 763.462164][T14772] [ 763.462169][T14772] dump_stack_lvl+0x116/0x1f0 [ 763.462190][T14772] print_circular_bug+0x275/0x340 [ 763.462208][T14772] check_noncircular+0x146/0x160 [ 763.462227][T14772] __lock_acquire+0x1669/0x2890 [ 763.462246][T14772] ? __kasan_check_byte+0x13/0x50 [ 763.462267][T14772] lock_acquire+0x179/0x330 [ 763.462284][T14772] ? anon_pipe_write+0x15d/0x1bd0 [ 763.462306][T14772] ? __pfx___might_resched+0x10/0x10 [ 763.462324][T14772] ? rcu_is_watching+0x12/0xc0 [ 763.462340][T14772] __mutex_lock+0x1aa/0x1ca0 [ 763.462360][T14772] ? anon_pipe_write+0x15d/0x1bd0 [ 763.462379][T14772] ? is_bpf_text_address+0x94/0x1a0 [ 763.462397][T14772] ? kernel_text_address+0x8d/0x100 [ 763.462418][T14772] ? anon_pipe_write+0x15d/0x1bd0 [ 763.462438][T14772] ? unwind_get_return_address+0x59/0xa0 [ 763.462459][T14772] ? __bfs+0x148/0x290 [ 763.462472][T14772] ? __pfx___mutex_lock+0x10/0x10 [ 763.462492][T14772] ? check_irq_usage+0xe8/0xbc0 [ 763.462512][T14772] ? anon_pipe_write+0x15d/0x1bd0 [ 763.462532][T14772] anon_pipe_write+0x15d/0x1bd0 [ 763.462555][T14772] ? lockdep_unlock+0x64/0xd0 [ 763.462577][T14772] ? __lock_acquire+0x12c2/0x2890 [ 763.462595][T14772] ? __pfx_anon_pipe_write+0x10/0x10 [ 763.462618][T14772] ? lock_acquire+0x179/0x330 [ 763.462636][T14772] ? __pfx_anon_pipe_write+0x10/0x10 [ 763.462656][T14772] __kernel_write_iter+0x720/0xb10 [ 763.462676][T14772] ? __pfx___kernel_write_iter+0x10/0x10 [ 763.462695][T14772] ? __mutex_lock+0x27b/0x1ca0 [ 763.462714][T14772] ? __kernel_text_address+0xd/0x40 [ 763.462734][T14772] ? autofs_notify_daemon+0x45a/0xd60 [ 763.462754][T14772] __kernel_write+0xf5/0x140 [ 763.462772][T14772] ? __pfx___kernel_write+0x10/0x10 [ 763.462790][T14772] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 763.462815][T14772] autofs_notify_daemon+0x4db/0xd60 [ 763.462833][T14772] ? __pfx_autofs_notify_daemon+0x10/0x10 [ 763.462851][T14772] ? kernfs_fop_write_iter+0x3af/0x570 [ 763.462873][T14772] ? vfs_write+0x7d3/0x11d0 [ 763.462890][T14772] ? ksys_write+0x12a/0x250 [ 763.462915][T14772] ? lockdep_init_map_type+0x5c/0x270 [ 763.462934][T14772] ? lockdep_init_map_type+0x5c/0x270 [ 763.462953][T14772] autofs_wait+0x10f3/0x1ac0 [ 763.462972][T14772] ? __pfx_autofs_wait+0x10/0x10 [ 763.462989][T14772] ? __pfx_path_check_mount+0x10/0x10 [ 763.463004][T14772] ? find_held_lock+0x2b/0x80 [ 763.463026][T14772] ? path_has_submounts+0xcf/0x120 [ 763.463043][T14772] ? do_raw_spin_unlock+0x172/0x230 [ 763.463064][T14772] ? find_held_lock+0x2b/0x80 [ 763.463088][T14772] autofs_mount_wait+0x132/0x3c0 [ 763.463104][T14772] autofs_d_automount+0x4b2/0x960 [ 763.463122][T14772] __traverse_mounts+0x1b9/0x830 [ 763.463147][T14772] step_into_slowpath+0x772/0xf50 [ 763.463167][T14772] ? __up_read+0x2d1/0x700 [ 763.463186][T14772] ? __pfx_step_into_slowpath+0x10/0x10 [ 763.463205][T14772] ? lookup_slow+0x40/0x70 [ 763.463221][T14772] path_lookupat+0x627/0xc40 [ 763.463241][T14772] filename_lookup+0x224/0x5f0 [ 763.463260][T14772] ? __pfx_filename_lookup+0x10/0x10 [ 763.463285][T14772] ? getname_kernel+0x52/0x370 [ 763.463313][T14772] ? __asan_memcpy+0x3c/0x60 [ 763.463330][T14772] kern_path+0x35/0x50 [ 763.463348][T14772] lookup_bdev+0xd8/0x280 [ 763.463368][T14772] ? __pfx_lookup_bdev+0x10/0x10 [ 763.463389][T14772] ? __asan_memcpy+0x3c/0x60 [ 763.463404][T14772] resume_store+0x1d6/0x490 [ 763.463426][T14772] ? __pfx_resume_store+0x10/0x10 [ 763.463450][T14772] ? find_held_lock+0x2b/0x80 [ 763.463473][T14772] ? __pfx_resume_store+0x10/0x10 [ 763.463493][T14772] kobj_attr_store+0x58/0x80 [ 763.463513][T14772] ? __pfx_kobj_attr_store+0x10/0x10 [ 763.463532][T14772] sysfs_kf_write+0xf2/0x150 [ 763.463548][T14772] kernfs_fop_write_iter+0x3af/0x570 [ 763.463570][T14772] ? __pfx_sysfs_kf_write+0x10/0x10 [ 763.463586][T14772] vfs_write+0x7d3/0x11d0 [ 763.463604][T14772] ? __pfx_kernfs_fop_write_iter+0x10/0x10 [ 763.463628][T14772] ? __pfx_vfs_write+0x10/0x10 [ 763.463652][T14772] ksys_write+0x12a/0x250 [ 763.463670][T14772] ? __pfx_ksys_write+0x10/0x10 [ 763.463691][T14772] do_syscall_64+0xcd/0xf80 [ 763.463710][T14772] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 763.463726][T14772] RIP: 0033:0x7f738fd8f749 [ 763.463739][T14772] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 763.463755][T14772] RSP: 002b:00007f7390c5e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 763.463770][T14772] RAX: ffffffffffffffda RBX: 00007f738ffe5fa0 RCX: 00007f738fd8f749 [ 763.463780][T14772] RDX: 0000000000000012 RSI: 0000200000000040 RDI: 0000000000000004 [ 763.463789][T14772] RBP: 00007f738fe13f91 R08: 0000000000000000 R09: 0000000000000000 [ 763.463798][T14772] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 763.463807][T14772] R13: 00007f738ffe6038 R14: 00007f738ffe5fa0 R15: 00007ffc1aa76478 [ 763.463823][T14772] [ 763.966970][ T1295] ieee802154 phy0 wpan0: encryption failed: -22 [ 763.973217][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 [ 763.981448][T14772] PM: Image not found (code -22) [ 764.006335][T13114] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 764.064202][T13114] usb 7-1: Product: syz [ 764.136298][T13114] usb 7-1: Manufacturer: syz [ 764.140919][T13114] usb 7-1: SerialNumber: syz [ 764.371449][T13114] usb 7-1: config 0 descriptor?? [ 764.983719][T14752] base_sock_release(ffff888057010000) sk=ffff88803a789000 [ 765.011333][T13114] usb 7-1: can't set config #0, error -71 [ 765.031897][T13114] usb 7-1: USB disconnect, device number 48 [ 765.052041][T10519] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 765.131447][ T5809] usb 4-1: USB disconnect, device number 13 [ 765.137842][ T5809] option 4-1:6.241: device disconnected [ 765.155768][T10519] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 765.230027][T10519] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 765.252692][T10519] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 765.312659][T10519] bridge_slave_1: left allmulticast mode [ 765.318311][T10519] bridge_slave_1: left promiscuous mode [ 765.323964][T10519] bridge0: port 2(bridge_slave_1) entered disabled state [ 765.332084][T10519] bridge_slave_0: left allmulticast mode [ 765.337730][T10519] bridge_slave_0: left promiscuous mode [ 765.343411][T10519] bridge0: port 1(bridge_slave_0) entered disabled state [ 765.434791][T10519] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 765.444321][T10519] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 765.453473][T10519] bond0 (unregistering): Released all slaves [ 765.658176][T10519] hsr_slave_0: left promiscuous mode [ 765.663988][T10519] hsr_slave_1: left promiscuous mode [ 765.669504][T10519] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 765.676888][T10519] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 765.684317][T10519] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 765.691688][T10519] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 765.700639][T10519] veth1_macvtap: left promiscuous mode [ 765.706176][T10519] veth0_macvtap: left promiscuous mode [ 765.712026][T10519] veth1_vlan: left promiscuous mode [ 765.718412][T10519] veth0_vlan: left promiscuous mode [ 765.814991][T10519] team0 (unregistering): Port device team_slave_1 removed [ 765.836440][T10519] team0 (unregistering): Port device team_slave_0 removed [ 766.170700][T10519] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 766.233943][T10519] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 766.275786][T10519] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 766.339846][T10519] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 766.414432][T10519] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 766.446932][T10519] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 766.490152][T10519] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 766.574775][T10519] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 766.649938][T10519] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 766.703419][T10519] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 766.767110][T10519] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 766.841955][T10519] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 766.916442][T10519] bridge_slave_1: left allmulticast mode [ 766.922082][T10519] bridge_slave_1: left promiscuous mode [ 766.927816][T10519] bridge0: port 2(bridge_slave_1) entered disabled state [ 766.935688][T10519] bridge_slave_0: left allmulticast mode [ 766.941301][T10519] bridge_slave_0: left promiscuous mode [ 766.947514][T10519] bridge0: port 1(bridge_slave_0) entered disabled state [ 766.955550][T10519] bridge_slave_1: left allmulticast mode [ 766.961239][T10519] bridge_slave_1: left promiscuous mode [ 766.966830][T10519] bridge0: port 2(bridge_slave_1) entered disabled state [ 766.974836][T10519] bridge_slave_0: left allmulticast mode [ 766.980870][T10519] bridge_slave_0: left promiscuous mode [ 766.986450][T10519] bridge0: port 1(bridge_slave_0) entered disabled state [ 766.994675][T10519] bridge_slave_1: left allmulticast mode [ 767.000373][T10519] bridge_slave_1: left promiscuous mode [ 767.005948][T10519] bridge0: port 2(bridge_slave_1) entered disabled state [ 767.013725][T10519] bridge_slave_0: left allmulticast mode [ 767.019332][T10519] bridge_slave_0: left promiscuous mode [ 767.025465][T10519] bridge0: port 1(bridge_slave_0) entered disabled state [ 767.110757][T10519] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 767.121161][T10519] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 767.130309][T10519] bond0 (unregistering): Released all slaves [ 767.184618][T10519] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 767.194235][T10519] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 767.203644][T10519] bond0 (unregistering): Released all slaves [ 767.261789][T10519] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 767.272758][T10519] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 767.282118][T10519] bond0 (unregistering): Released all slaves [ 767.363708][T10519] tipc: Disabling bearer [ 767.368806][T10519] tipc: Left network mode [ 767.387497][T10519] IPVS: stopping backup sync thread 14006 ... [ 767.730361][T10519] hsr_slave_0: left promiscuous mode [ 767.735903][T10519] hsr_slave_1: left promiscuous mode [ 767.741455][T10519] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 767.748924][T10519] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 767.756365][T10519] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 767.763838][T10519] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 767.772696][T10519] hsr_slave_0: left promiscuous mode [ 767.778212][T10519] hsr_slave_1: left promiscuous mode [ 767.783775][T10519] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 767.792289][T10519] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 767.800172][T10519] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 767.807602][T10519] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 767.816406][T10519] hsr_slave_0: left promiscuous mode [ 767.821932][T10519] hsr_slave_1: left promiscuous mode [ 767.827539][T10519] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 767.834979][T10519] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 767.842357][T10519] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 767.849788][T10519] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 767.861404][T10519] veth1_macvtap: left promiscuous mode [ 767.867652][T10519] veth0_macvtap: left promiscuous mode [ 767.873132][T10519] veth1_vlan: left promiscuous mode [ 767.878416][T10519] veth0_vlan: left promiscuous mode [ 767.884008][T10519] veth1_macvtap: left promiscuous mode [ 767.889576][T10519] veth0_macvtap: left promiscuous mode [ 767.895043][T10519] veth1_vlan: left promiscuous mode [ 767.900568][T10519] veth0_vlan: left promiscuous mode [ 767.906171][T10519] veth1_macvtap: left promiscuous mode [ 767.911683][T10519] veth0_macvtap: left promiscuous mode [ 767.917204][T10519] veth1_vlan: left promiscuous mode [ 767.922495][T10519] veth0_vlan: left promiscuous mode [ 768.077865][T10519] team0 (unregistering): Port device team_slave_1 removed [ 768.101774][T10519] team0 (unregistering): Port device team_slave_0 removed [ 768.201811][T10519] team0 (unregistering): Port device team_slave_1 removed [ 768.222074][T10519] team0 (unregistering): Port device team_slave_0 removed [ 768.257831][T10519] team0 (unregistering): Port device batadv1 removed [ 768.309833][T10519] team0 (unregistering): Port device team_slave_1 removed [ 768.332849][T10519] team0 (unregistering): Port device team_slave_0 removed [ 769.146180][T10519] IPVS: stop unused estimator thread 0... [ 771.202076][ T25] block nbd2: Possible stuck request ffff888025ed8000: control (read@0,1024B). Runtime 420 seconds [ 771.212991][ T25] block nbd2: Possible stuck request ffff888025ed8200: control (read@1024,1024B). Runtime 420 seconds [ 771.224052][ T25] block nbd2: Possible stuck request ffff888025ed8400: control (read@2048,1024B). Runtime 420 seconds [ 771.234987][ T25] block nbd2: Possible stuck request ffff888025ed8600: control (read@3072,1024B). Runtime 420 seconds