last executing test programs: 13.983970067s ago: executing program 2 (id=9): socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$inet(0x2, 0x3, 0x2f) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) capset(&(0x7f0000000340)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200000, 0x20000000, 0x0, 0xf}) ioctl$KDFONTOP_SET(0xffffffffffffffff, 0x4b72, &(0x7f0000000000)={0x4, 0x0, 0x6, 0x1, 0x100, 0x0}) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000140)='xfrm0\x00', 0x10) r4 = syz_open_dev$video(&(0x7f0000000180), 0x101, 0xab02) ioctl$VIDIOC_G_STD(r4, 0x80085617, 0x0) mbind(&(0x7f0000007000/0x4000)=nil, 0x4000, 0x1, 0x0, 0x9, 0x0) get_mempolicy(0x0, 0x0, 0x9, &(0x7f0000008000/0x1000)=nil, 0x3) 13.124203389s ago: executing program 1 (id=10): r0 = syz_io_uring_setup(0x10d, &(0x7f0000000380)={0x0, 0x0, 0x80, 0x0, 0x8a}, &(0x7f0000000400)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000440)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_SHUTDOWN={0x22, 0x9}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) io_uring_enter(r0, 0x3516, 0x0, 0x0, 0x0, 0x0) r3 = socket$rxrpc(0x21, 0x2, 0xa) connect$rxrpc(r3, &(0x7f0000000000)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @mcast1}}, 0x24) sendmsg$inet(r3, &(0x7f0000000180)={0x0, 0xfffffffffffffd6b, 0x0, 0x0, &(0x7f00000000c0)=[@ip_tos_int={{0x18, 0x110}}], 0x18, 0x4c00}, 0x0) bind$alg(0xffffffffffffffff, &(0x7f00000000c0)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_ctr_aes128\x00'}, 0x58) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000340)="8d19b21e5d0c9600b6e29ae680d132e4c1fb44687e524a", 0x17) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f00000004c0)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(anubis)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) accept4(r4, 0x0, 0x0, 0x800) syz_usb_connect(0x5, 0x46, &(0x7f0000000780)=ANY=[@ANYBLOB="12016b9720f4cc08c0070515c5b8010203010902340001000080000904ba00038e4ee2000905000000041a06010905010300001007c109050c04"], 0x0) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r5, 0xffffffffffffffff, 0x3f00000000000000) 12.432634484s ago: executing program 2 (id=12): socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$inet(0x2, 0x3, 0x2f) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) capset(&(0x7f0000000340)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200000, 0x20000000, 0x0, 0xf}) ioctl$KDFONTOP_SET(0xffffffffffffffff, 0x4b72, &(0x7f0000000000)={0x4, 0x0, 0x6, 0x1, 0x100, 0x0}) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000140)='xfrm0\x00', 0x10) r4 = syz_open_dev$video(&(0x7f0000000180), 0x101, 0xab02) ioctl$VIDIOC_G_STD(r4, 0x80085617, 0x0) mbind(&(0x7f0000007000/0x4000)=nil, 0x4000, 0x1, 0x0, 0x9, 0x0) get_mempolicy(0x0, 0x0, 0x9, &(0x7f0000008000/0x1000)=nil, 0x3) 11.405294524s ago: executing program 2 (id=14): socket$inet6_sctp(0xa, 0x1, 0x84) syz_pidfd_open(0x0, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000080)=[{0x0}], 0x1}, 0x0) r1 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) r6 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r6, 0x10e, 0xc, &(0x7f0000000980)={0x802, 0x0, 0x0, 0x4}, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c000000520001fe2abd70000000000002"], 0x1c}, 0x1, 0x0, 0x0, 0x4008800}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000780)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x68, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7, 0x0, 0xfffc}, [@NFTA_SET_ID={0x8}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0xd}, @NFTA_SET_EXPRESSIONS={0x38, 0x12, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @limit={{0xa}, @val={0x10, 0x2, 0x0, 0x1, [@NFTA_LIMIT_RATE={0xc, 0x1, 0x1, 0x0, 0x8b}]}}}, {0x14, 0x1, 0x0, 0x1, @limit={{0xa}, @val={0x4}}}]}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x5, 0x84}}}, 0x90}, 0x1, 0x0, 0x0, 0x20004010}, 0x20050800) bind$netlink(r4, &(0x7f0000000100)={0x10, 0x0, 0x25dfdbfd, 0x400}, 0xc) getsockname$packet(r4, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r3, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x40d, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, r7, 0x1}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_MODE={0x5, 0x1, 0x4}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40040}, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000000)={[0x7, 0x2, 0x7fffffffffffffff, 0x7, 0x7fffffffffffffff, 0x2, 0x2, 0x6dd, 0xfffffffffffffff9, 0xb482, 0x9, 0xfffffffffffffffc, 0x7ff, 0xa, 0x0, 0x9], 0x80a0000, 0x148800}) madvise(&(0x7f0000000000/0x600000)=nil, 0x60005f, 0x67) socket(0x1, 0x803, 0x0) sendmsg$nl_route(r8, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001400)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r2}, @IFLA_MASTER={0x8}]}, 0x44}}, 0x0) 10.868321841s ago: executing program 2 (id=15): socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$inet(0x2, 0x3, 0x2f) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) capset(&(0x7f0000000340)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200000, 0x20000000, 0x0, 0xf}) ioctl$KDFONTOP_SET(0xffffffffffffffff, 0x4b72, &(0x7f0000000000)={0x4, 0x0, 0x6, 0x1, 0x100, 0x0}) sendto$inet(r0, 0x0, 0x0, 0x4040004, &(0x7f0000000380)={0x2, 0x6e20, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) r4 = syz_open_dev$video(&(0x7f0000000180), 0x101, 0xab02) ioctl$VIDIOC_G_STD(r4, 0x80085617, 0x0) mbind(&(0x7f0000007000/0x4000)=nil, 0x4000, 0x1, 0x0, 0x9, 0x0) get_mempolicy(0x0, 0x0, 0x9, &(0x7f0000008000/0x1000)=nil, 0x3) 9.806940324s ago: executing program 2 (id=16): socket$nl_route(0x10, 0x3, 0x0) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x41, &(0x7f0000000000)=0x5fd, 0x4) recvmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x2120, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) openat$incfs(0xffffffffffffff9c, 0x0, 0x400000, 0x110) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000380)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mount$9p_unix(&(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100), 0x892031, &(0x7f0000000280)={'trans=unix,', {[{@directio}, {@loose}]}}) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000005880)={0x0, 0x0, &(0x7f0000005840)={&(0x7f0000000000)=@getsa={0x28, 0x12, 0x1, 0x70bd2b, 0x25dfdbfd, {@in6=@mcast1, 0x4d4, 0x2, 0xff}}, 0x28}, 0x1, 0x0, 0x0, 0x4001090}, 0x40080) syz_emit_ethernet(0x1046, 0x0, 0x0) sendmsg$RDMA_NLDEV_CMD_SET(0xffffffffffffffff, 0x0, 0x40810) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) 9.502258189s ago: executing program 1 (id=17): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) ioctl$HIDIOCSUSAGES(0xffffffffffffffff, 0x501c4814, &(0x7f0000000dc0)={{0x1, 0x3, 0x9, 0x800, 0x5, 0x5}, 0x8d, [0x7, 0x93b, 0x6, 0x1, 0x1, 0xb8a, 0x2f, 0x100, 0x5, 0x7, 0x7, 0x5, 0x41d4, 0x83, 0x4, 0xffffffff, 0x9, 0x1000, 0x77e4, 0xffff0c56, 0x3, 0x1, 0x0, 0x40, 0x9, 0x200, 0x69, 0x4, 0x0, 0x6, 0x3, 0x7, 0x8, 0x8, 0xa522, 0x100, 0xfffffff8, 0x80000001, 0x0, 0x40, 0x1, 0x6, 0x1, 0x7fffffff, 0x5eb9, 0x5, 0x9c05, 0x800000c, 0x401, 0x4, 0x75, 0x817, 0xb, 0x3, 0xda90, 0x7, 0xf, 0xbc4b, 0x106, 0xfd, 0x81, 0x6, 0x101, 0x39, 0xffffff7f, 0x6, 0x5, 0x5, 0x77, 0xfffffffd, 0x0, 0x9, 0x73f, 0x5, 0x8, 0x4, 0x3, 0xffffffff, 0x5, 0x26be23d3, 0x7, 0x2, 0x9, 0x8, 0xdd2, 0xdd2, 0x3, 0x4, 0x2, 0xfff, 0x80000001, 0x9, 0x4, 0x0, 0x3, 0x2, 0x2, 0x5, 0x6, 0x1, 0x80000001, 0x7, 0x0, 0x40, 0x5, 0x101, 0x8, 0x9, 0x334c230c, 0x6, 0x4, 0xfffffff9, 0x8, 0x3, 0xffff0000, 0x7, 0x2, 0xffffffff, 0x4, 0x3, 0x4, 0x4, 0x3f, 0x81, 0x3, 0x400, 0x4, 0x984, 0x1, 0x6, 0x7, 0x8001, 0x1ff, 0x2a3, 0x6d, 0x1, 0x10000, 0x5, 0x80000000, 0x1d01e, 0x1, 0x3, 0xfffffffb, 0x8, 0x63, 0x400, 0x5, 0x401, 0x4, 0xfff, 0x0, 0x9, 0x3, 0x8, 0xfffffff9, 0x2, 0x80000000, 0x3, 0xc, 0x1, 0xad, 0x100, 0x144, 0x2, 0xfffffffc, 0x2, 0x5, 0x0, 0x5, 0x9, 0x1, 0x4, 0x1000, 0x974, 0x5, 0x2, 0x8, 0x5, 0x88, 0x1000, 0x0, 0x1, 0x2, 0x5, 0x9, 0x0, 0x57a, 0x0, 0x0, 0x6, 0x9, 0x5c, 0x6, 0x9, 0xd22, 0x2, 0x7, 0x10, 0x8, 0xffffffff, 0x2149, 0xf, 0x26a02622, 0x7fff, 0x8, 0x8, 0x7ff, 0x5, 0x8, 0x81, 0x8, 0xff, 0x5, 0xfffffffa, 0x2, 0x2, 0xffff, 0xf, 0x5, 0x7, 0x5, 0x100, 0x1e06, 0xf, 0xdf2, 0x0, 0xbb, 0xfff, 0x400, 0x2, 0x80000000, 0x7, 0x8, 0xf9b, 0x8, 0x7ff, 0x7, 0x3ff, 0x630a, 0x5, 0xcff, 0x9, 0xb7, 0x1, 0xff, 0x4, 0x5, 0x10, 0x1, 0x92a, 0x3, 0x5, 0xd, 0x5, 0x101, 0x6, 0x7fff, 0x800, 0x3, 0x4, 0x0, 0x7f, 0x200, 0x20, 0x7, 0x1000000, 0x0, 0x7f, 0x53, 0x8, 0x8, 0x5, 0x2, 0xf, 0xd81c, 0x840, 0x1, 0x9, 0x2, 0x81, 0x9, 0x3, 0x5, 0x1000, 0x8, 0x47, 0x94, 0x7, 0x8, 0x8001, 0x56f71053, 0x1, 0x867, 0x3ff, 0x40, 0x6, 0x3, 0xfff, 0x5, 0x197, 0x9, 0x6, 0x5, 0x6, 0x7, 0x0, 0x84, 0x3, 0x1ff, 0x400, 0x3, 0xd42, 0x9, 0x5, 0x1ff, 0x4, 0x9, 0xbec, 0x5, 0x7, 0x3, 0x5, 0x64000000, 0x2, 0x201e, 0x3a, 0x6, 0x5, 0x18000, 0x2, 0xffff, 0x9, 0x6, 0x9, 0x0, 0xe4f, 0x67c, 0x27b7, 0xe, 0x9, 0x9, 0x5, 0x0, 0x5, 0x7f, 0x76, 0x9, 0xc4fe, 0x9, 0x3, 0x4, 0x8, 0x87, 0x1, 0x4, 0x6, 0x40, 0x9, 0x8, 0x1, 0x6, 0x8, 0xc75e, 0x4, 0x6, 0x1b, 0xfd3, 0x2, 0x3, 0x9, 0x10, 0x4, 0x5d2f, 0x5, 0x1b, 0x3ff, 0x5, 0x8, 0x6, 0xc000000, 0x5c, 0x9, 0x541b, 0xce, 0x6, 0x4, 0x69f, 0x3, 0x5, 0x7, 0x4, 0x200, 0x7, 0x8, 0x2323, 0xfffffff7, 0xffff, 0x7ff, 0x4, 0xd, 0xffffff42, 0x89, 0x80000001, 0x3ff, 0x3, 0x554, 0xde, 0x0, 0x400, 0x3, 0x9, 0x800, 0x7cb3aca3, 0x6, 0x6, 0x4, 0xf8000000, 0x1, 0xfffffff9, 0x9, 0xffffffff, 0x0, 0x3, 0x10000, 0x4, 0x3, 0x8001, 0x8, 0xbb, 0x5, 0xf548, 0x3, 0x36c, 0xffffffff, 0x10, 0x676, 0xe67, 0x88, 0x808, 0x560, 0x6db5, 0xa7b, 0x2, 0x4, 0x9, 0x3, 0x4, 0xffffffff, 0x6, 0xed2, 0x24bdaad2, 0x9, 0x4, 0x3, 0x1, 0xd599, 0x2, 0x6c51, 0x2, 0x0, 0x0, 0x2, 0xfce6, 0xf, 0xcd0, 0x4, 0xf, 0x0, 0x9, 0x5, 0x200, 0x6, 0x5, 0x2, 0x7, 0x17, 0xc36, 0x0, 0x8fbb, 0x3, 0x5, 0x0, 0x8, 0x8, 0x1, 0x8, 0x1000001, 0x45d8, 0x9, 0x0, 0x60000, 0x7, 0x2, 0xfffffff1, 0x3, 0x2, 0xfffffd67, 0x2, 0x4, 0x5, 0x3, 0x800, 0x10, 0xa, 0xb12c, 0x5ce, 0x1, 0xfffffffd, 0xf9c8, 0x0, 0x80f8, 0x10000, 0x3, 0x8, 0x2, 0x7, 0x5, 0x8, 0x401, 0x7, 0x10, 0x0, 0x6b, 0x100, 0x8, 0x2, 0x2, 0x5273, 0xe45f, 0x10, 0x0, 0x8, 0x4, 0x7, 0x7, 0x6, 0x4, 0x8e8b, 0x5, 0x3, 0x7, 0x3, 0xe535, 0x80, 0x5, 0x6, 0x0, 0x3, 0xff, 0x7fffffff, 0x5, 0x1, 0xa, 0x4, 0x1, 0x31, 0x0, 0xee1, 0x10001, 0x3, 0xfffffffc, 0x4, 0x1, 0x6f9, 0x7, 0xb26c, 0xb, 0x0, 0xfffffff3, 0x4000008, 0x8, 0x3, 0x6, 0xfd, 0x3, 0x3d, 0x6, 0x80000001, 0x5, 0x7, 0x1, 0xffffffff, 0x6, 0x3d29, 0x4, 0x7, 0x8, 0xb04, 0x3, 0xea6, 0x9, 0x101, 0x4, 0x1400, 0xfffffeff, 0x7, 0x2, 0x4, 0x8, 0x7, 0xe, 0x2, 0xc, 0x2, 0x2, 0x64c1, 0x80000000, 0x200, 0x2, 0xfffffffd, 0x1, 0x91, 0x8001, 0x401, 0x781d, 0x80, 0xfffff5b0, 0x8, 0x3, 0x8, 0xfff, 0xcd800000, 0x9, 0x6, 0x0, 0x5b5, 0x7, 0x10, 0x2, 0x5, 0x10001, 0xc, 0x9e9, 0x53, 0xfffffdd5, 0xc, 0xc00, 0x40, 0x401, 0xf2a6, 0x7, 0x3, 0x2, 0x7, 0x3800000, 0x0, 0x3ff, 0x3, 0x7fffffff, 0x4, 0x0, 0x1, 0xf, 0x7, 0xa84d, 0x3, 0xaf, 0xaf72, 0x5f, 0x1, 0xe, 0x6, 0x9, 0x5, 0x7, 0x24a, 0x5, 0x3, 0x40, 0x1000, 0x75f1, 0x4, 0x3, 0x1, 0xfffffffd, 0x4, 0x8, 0x10, 0x80, 0x2, 0x6, 0x0, 0xe, 0xc, 0x3, 0x2, 0xd, 0x5, 0xfffff3f2, 0x6, 0x8, 0x3, 0xe, 0x5, 0x3, 0x3, 0x8, 0xbd, 0xa, 0x8, 0xffffed34, 0x8000, 0x2, 0x7, 0x7, 0x55f4727b, 0x4e, 0x3b, 0x5, 0x8, 0xffffffff, 0x4, 0x81, 0x6, 0xb, 0x2, 0xa53, 0xff, 0x0, 0x2, 0x5, 0x3233, 0xff, 0x6, 0x2, 0x9, 0x1, 0x0, 0x3ff, 0x5, 0x8, 0x40, 0x0, 0x40, 0x88, 0x5, 0x80, 0x4, 0xd0000000, 0x8, 0x4, 0x5, 0x5, 0x7, 0x0, 0x0, 0x76b, 0xbb, 0x2, 0x5, 0x7fff, 0x9, 0xa, 0x5, 0x80, 0x4, 0x8, 0x8, 0x1f, 0x1, 0x3, 0x4, 0xd126, 0x7, 0x5, 0x0, 0x0, 0x8, 0x4, 0x1, 0x5, 0xfffffffa, 0x8, 0x270b, 0x5, 0x7fff, 0x4, 0x5, 0x6, 0x3, 0x4, 0x13f, 0x0, 0xc906, 0x6, 0x100, 0x4, 0x3, 0x3, 0x7f, 0x2b, 0x4, 0x3, 0x3, 0x8001, 0x46f, 0x19f1, 0x6, 0x20, 0x2, 0x2, 0x6, 0x5, 0x5, 0x401, 0x5, 0x6, 0x5, 0x7, 0xb, 0x200, 0x6, 0x9, 0x7, 0x3, 0x1, 0x7f, 0x9, 0xc3b, 0xfdf5, 0x0, 0x3, 0x0, 0xf, 0x1, 0x800, 0x4f35, 0x1, 0x18, 0x5, 0x0, 0x6, 0xaa5, 0x800, 0xf, 0x7, 0x800, 0x8, 0xfffffffb, 0xff, 0x5, 0x1000, 0x8, 0x81, 0x6, 0x80, 0x9, 0x8, 0x5, 0x8, 0x8, 0x100, 0x5, 0x10, 0x3, 0x7, 0x82, 0x4, 0x40, 0xabde, 0x1, 0xb, 0x8, 0x5, 0x8, 0x7f, 0x100, 0x8, 0x9, 0x6, 0x80000001, 0x2, 0x8, 0x2, 0x7fff, 0x3, 0x6, 0x4, 0x5, 0x3, 0x0, 0x1, 0x8, 0x59, 0x1, 0x0, 0x48, 0xaa19, 0xc, 0x401, 0x1, 0x401, 0x8, 0xc11, 0x4, 0x0, 0x7, 0x2, 0x7f, 0x0, 0x1, 0xc0000, 0x7, 0x4, 0xef47, 0x3, 0x1, 0x0, 0x2, 0x1, 0x0, 0xe14f, 0x5, 0x7, 0x8, 0x7fffffff, 0x7f, 0xffffffff, 0xffffff88, 0x400, 0x7fffffff, 0x10, 0x5, 0x9, 0x5, 0x0, 0xff, 0x0, 0x8, 0x3, 0x5, 0xfffffffc, 0x9, 0x11, 0x9, 0xfffffffe, 0x40, 0x3, 0x7, 0x0, 0x1, 0x2, 0x6, 0x81, 0x4, 0x401, 0x6, 0x5, 0x3, 0x0, 0xd, 0x6, 0xc, 0x2, 0x1, 0xfffffe5c, 0x40, 0x0, 0x9, 0x24, 0x1ff, 0x4, 0xe92, 0x5, 0x6e3, 0x4, 0xff, 0x0, 0xdf, 0x5, 0x7, 0x100, 0x3ac9, 0x10001, 0xae27, 0x80, 0x5, 0x7, 0x7fff, 0x0, 0xb, 0x4, 0x1, 0x1, 0x0, 0x9, 0x331d, 0x5, 0xb9, 0x7, 0x4, 0x4, 0x9, 0x6cf3, 0x8, 0x7, 0xf, 0x80, 0x9, 0xffff, 0x8000, 0x1, 0x2, 0x2, 0xdc0, 0x5, 0x100, 0x9, 0x1, 0xfffffff8, 0x800, 0x3, 0x0, 0x9, 0x644d, 0x93, 0xb0, 0x2, 0x3ff, 0x800, 0xfffffff7, 0x2, 0x0, 0xff]}) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x1, 0x5, 0x9, 0x84, 0x144}, 0x48) 6.803803833s ago: executing program 3 (id=20): sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x10) socket$nl_xfrm(0x10, 0x3, 0x6) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) r3 = fsopen(&(0x7f0000000100)='cifs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r3, 0x1, &(0x7f0000000180)='user\x00', &(0x7f00000002c0)='\x00\x00E\x01\x00\x00\f\x01\x00\x00\x00\x00\x00\xc1~\x99l\xb7\xd6\xfc\xebw1hn\x1a\xc5\xef\xec,\xa1\xa0\x12\x1c\x7fn\a\\\xec\xd8\x94oh\x1d\xec\xf5jb\xe5\xb2\xa2e\xfd\x9c\xc4\xd22\x9c\xe97#(/\xb1\xe6\x03\xe1\xaa\x96\x92\x8b4}\xc1L\x1b\x9b\xe6n\x97\xc7\x06\xb2Y\xadQ\xa4c\x1b&\x0e?\xc0\x90\xaf\xb29\xf6>\xe1\xe8}D\f\xc1u\xab]$\x1b\x1bt\xda\x9eA\xd3\x1b\x12A\x82\xd5\xa8@\x1eIw\xb2y2F\xe8\xc7\x03e&\x98\"9\t\xe0\x81Pj\xee&\xae{P\xe8\xceL\xe1\xd1V\xc7\xeaF\xd54\x80\xb6%\xaf\xbbK\x85\x95\xf2\x1bG\xf1\xdaq:\xae\xe22\\~j~\xfe\x83\xbb>\xb0\x9b.\xa4\x95\x0eY\xb8j\xe1M\xf5\xa5\x87`\x04\xab\xf1\xc7[\xda{\r\x95\xa4\xea^\xfc\xa7\x8b\x85\xd1ld\xacK\x8aqd\x1d\xaa\x99\xeb\t|@\xd5p\x1d>+\x0e\xec\xe2\xcd\xdc\x8f\x01\xf7\xabH=z\xa5x\x1b\x9f\x95\xd1\x88k\x85L#\x99^p\x18\x98\xec6\xf69y\x052', 0x0) fsconfig$FSCONFIG_SET_STRING(r3, 0x1, &(0x7f0000000080)='user\x00', &(0x7f00000000c0)='ocfs2\x00', 0x0) setsockopt$sock_linger(r1, 0x1, 0xd, 0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) 6.797030923s ago: executing program 0 (id=21): socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$inet(0x2, 0x3, 0x2f) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) capset(&(0x7f0000000340)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200000, 0x20000000, 0x0, 0xf}) ioctl$KDFONTOP_SET(0xffffffffffffffff, 0x4b72, &(0x7f0000000000)={0x4, 0x0, 0x6, 0x1, 0x100, 0x0}) sendto$inet(r0, 0x0, 0x0, 0x4040004, &(0x7f0000000380)={0x2, 0x6e20, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) r4 = syz_open_dev$video(&(0x7f0000000180), 0x101, 0xab02) ioctl$VIDIOC_G_STD(r4, 0x80085617, 0x0) mbind(&(0x7f0000007000/0x4000)=nil, 0x4000, 0x1, 0x0, 0x9, 0x0) get_mempolicy(0x0, 0x0, 0x9, &(0x7f0000008000/0x1000)=nil, 0x3) 5.769348594s ago: executing program 0 (id=22): prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3fc, 0x0, 0x32}, 0x9c) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_SB_OCC_SNAPSHOT(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)={0x14, 0x0, 0x1, 0x0, 0xfffffffc}, 0x14}, 0x1, 0x0, 0x0, 0x20008045}, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r3, 0x84, 0x72, &(0x7f00000001c0)={0x0, 0x1, 0x20}, 0xc) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000000)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x800, 0x0, 0x0, 0x8a}, 0x9c) bind$inet6(r3, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r3, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) syz_emit_ethernet(0x56, &(0x7f00000001c0)={@multicast, @broadcast, @void, {@canfd={0xd, {{0x2, 0x1, 0x1}, 0x30, 0x1, 0x0, 0x0, "e4946a544da39164f72a7ad8c50a57ffaa1a674ed22a7819ab76a5a02ddc9bc308489744eff62f039e9f3c60d9c89230fb29fc9e63d952a9ab349c1d4800"}}}}, 0x0) syz_mount_image$hfs(&(0x7f0000000280), &(0x7f0000000000)='./file0\x00', 0x12140c0, &(0x7f00000003c0)={[{@dir_umask}, {@codepage={'codepage', 0x3d, 'cp857'}}, {@gid}, {@dir_umask={'dir_umask', 0x3d, 0x4}}, {@iocharset={'iocharset', 0x3d, 'koi8-ru'}}, {@part={'part', 0x3d, 0x800}}, {@creator={'creator', 0x3d, "5863953a"}}]}, 0x11, 0x320, &(0x7f0000000940)="$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") 5.748602106s ago: executing program 3 (id=23): socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$inet(0x2, 0x3, 0x2f) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) capset(&(0x7f0000000340)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200000, 0x20000000, 0x0, 0xf}) ioctl$KDFONTOP_SET(0xffffffffffffffff, 0x4b72, &(0x7f0000000000)={0x4, 0x0, 0x6, 0x1, 0x100, 0x0}) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000140)='xfrm0\x00', 0x10) sendto$inet(r0, 0x0, 0x0, 0x4040004, &(0x7f0000000380)={0x2, 0x6e20, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) ioctl$VIDIOC_G_STD(0xffffffffffffffff, 0x80085617, 0x0) mbind(&(0x7f0000007000/0x4000)=nil, 0x4000, 0x1, 0x0, 0x9, 0x0) get_mempolicy(0x0, 0x0, 0x9, &(0x7f0000008000/0x1000)=nil, 0x3) 4.611701092s ago: executing program 3 (id=24): bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYRES32=0x1, @ANYRES32=0x0], 0x50) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000140)={0x3, @pix={0x434c, 0x7f, 0x584e4f53, 0x3, 0x2, 0x7, 0x7, 0x5, 0x1, 0x4, 0x2, 0x7}}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x4) sched_setaffinity(0x0, 0x0, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x401c2, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e20, @broadcast}, 0x10) ioctl$sock_TIOCINQ(r2, 0x541b, 0x0) ftruncate(r1, 0x8800000) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) recvmmsg(r4, &(0x7f00000034c0)=[{{0x0, 0x0, &(0x7f0000001e40)=[{&(0x7f0000000b80)=""/4096, 0x20001b80}, {&(0x7f0000001b80)=""/112, 0x70}], 0x2, 0x0, 0xa0028cb4}}], 0x40000000000013c, 0x700, 0x0) sendfile(r3, r1, 0x0, 0x578410eb) connect$unix(0xffffffffffffffff, 0x0, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000100)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) 3.932326316s ago: executing program 0 (id=25): socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$inet(0x2, 0x3, 0x2f) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) capset(&(0x7f0000000340)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200000, 0x20000000, 0x0, 0xf}) ioctl$KDFONTOP_SET(0xffffffffffffffff, 0x4b72, &(0x7f0000000000)={0x4, 0x0, 0x6, 0x1, 0x100, 0x0}) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000140)='xfrm0\x00', 0x10) sendto$inet(r0, 0x0, 0x0, 0x4040004, &(0x7f0000000380)={0x2, 0x6e20, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) syz_open_dev$video(&(0x7f0000000180), 0x101, 0xab02) mbind(&(0x7f0000007000/0x4000)=nil, 0x4000, 0x1, 0x0, 0x9, 0x0) get_mempolicy(0x0, 0x0, 0x9, &(0x7f0000008000/0x1000)=nil, 0x3) 3.926513626s ago: executing program 1 (id=26): socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) listen(r0, 0xfff) accept4(r0, 0x0, 0x0, 0x800) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$alg(0x26, 0x5, 0x0) socket$nl_route(0x10, 0x3, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0xa8442, 0x0) r1 = socket(0x400000000010, 0x3, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x2, 0x0, 0x1, 0xfffffffc}, 0x50) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000300)={r2, &(0x7f0000000380)="dd8fdb", &(0x7f0000000080)=@udp=r1}, 0x20) r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000002c0)={r3, r5, 0x25, 0x2, @void}, 0x10) syz_emit_ethernet(0x1a, &(0x7f0000000340)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x47}, @remote, @val={@void, {0x8100, 0x1, 0x1, 0x4}}, {@llc={0x4, {@snap={0x0, 0x1, "c0", "118190", 0xf9}}}}}, 0x0) 3.242739359s ago: executing program 2 (id=27): r0 = socket$inet6_udp(0xa, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000280)='cifs\x00', 0x0, &(0x7f00000002c0)='cache=none') getsockopt$inet6_udp_int(r0, 0x11, 0xb, &(0x7f0000000000), &(0x7f0000000080)=0x4) r3 = syz_open_dev$tty20(0xc, 0x4, 0x1) r4 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r4, &(0x7f0000000f40)=[{{&(0x7f0000000080)={0xa, 0x4e22, 0x4, @dev={0xfe, 0x80, '\x00', 0xa}, 0xa}, 0x1c, &(0x7f0000000280)=[{&(0x7f00000022c0)='t', 0x1}], 0x1}}], 0x1, 0x48081) shutdown(r4, 0x1) getsockopt$bt_hci(r4, 0x84, 0x81, &(0x7f0000002300)=""/4113, &(0x7f00000000c0)=0x1011) ioctl$KDFONTOP_GET(r3, 0x4b72, &(0x7f0000000380)={0x1, 0x1, 0x1e, 0x1b, 0x9, &(0x7f0000000940)}) 2.603680211s ago: executing program 0 (id=28): socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) listen(r0, 0xfff) accept4(r0, 0x0, 0x0, 0x800) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$alg(0x26, 0x5, 0x0) socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x400000000010, 0x3, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x2, 0x0, 0x1, 0xfffffffc}, 0x50) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000300)={r2, &(0x7f0000000380)="dd8fdb", &(0x7f0000000080)=@udp=r1}, 0x20) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x14, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000100000000000000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000007000000850000000600000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000fcffffff7b8af8ff00000000bca2000000000000a6020000f8ffffffb703000018000000b704000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000002c0)={r3, r4, 0x25, 0x2, @void}, 0x10) syz_emit_ethernet(0x1a, &(0x7f0000000340)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x47}, @remote, @val={@void, {0x8100, 0x1, 0x1, 0x4}}, {@llc={0x4, {@snap={0x0, 0x1, "c0", "118190", 0xf9}}}}}, 0x0) 2.43586541s ago: executing program 1 (id=29): r0 = syz_io_uring_setup(0x10d, &(0x7f0000000380)={0x0, 0x0, 0x80, 0x0, 0x8a}, &(0x7f0000000400)=0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000440)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, 0x0, &(0x7f00000002c0)=@IORING_OP_SHUTDOWN={0x22, 0x9}) io_uring_enter(r0, 0x3516, 0x0, 0x0, 0x0, 0x0) r2 = socket$rxrpc(0x21, 0x2, 0xa) connect$rxrpc(r2, &(0x7f0000000000)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @mcast1}}, 0x24) sendmsg$inet(r2, &(0x7f0000000180)={0x0, 0xfffffffffffffd6b, 0x0, 0x0, &(0x7f00000000c0)=[@ip_tos_int={{0x18, 0x110}}], 0x18, 0x4c00}, 0x0) 2.137461905s ago: executing program 3 (id=30): ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000008c0)=@newqdisc={0x24, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r2, {0xffff}, {0xffff, 0xffff}, {0x2, 0x1}}}, 0x24}, 0x1, 0x0, 0x0, 0x400dc}, 0x0) 2.055969819s ago: executing program 1 (id=31): prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3fc, 0x0, 0x32}, 0x9c) sendmsg$DEVLINK_CMD_SB_OCC_SNAPSHOT(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)={0x14, 0x0, 0x1, 0x0, 0xfffffffc}, 0x14}, 0x1, 0x0, 0x0, 0x20008045}, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r3, 0x84, 0x72, &(0x7f00000001c0)={0x0, 0x1, 0x20}, 0xc) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000000)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x800, 0x0, 0x0, 0x8a}, 0x9c) bind$inet6(r3, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r3, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) syz_emit_ethernet(0x56, &(0x7f00000001c0)={@multicast, @broadcast, @void, {@canfd={0xd, {{0x2, 0x1, 0x1}, 0x30, 0x1, 0x0, 0x0, "e4946a544da39164f72a7ad8c50a57ffaa1a674ed22a7819ab76a5a02ddc9bc308489744eff62f039e9f3c60d9c89230fb29fc9e63d952a9ab349c1d4800"}}}}, 0x0) syz_mount_image$hfs(&(0x7f0000000280), &(0x7f0000000000)='./file0\x00', 0x12140c0, &(0x7f00000003c0)={[{@dir_umask}, {@codepage={'codepage', 0x3d, 'cp857'}}, {@gid}, {@dir_umask={'dir_umask', 0x3d, 0x4}}, {@iocharset={'iocharset', 0x3d, 'koi8-ru'}}, {@part={'part', 0x3d, 0x800}}, {@creator={'creator', 0x3d, "5863953a"}}]}, 0x11, 0x320, &(0x7f0000000940)="$eJzs3U1r1E4cB/DvJNnt7r+l/9hWCp6kWvBU2npQvFikePENeJBibVcojRW0ghbE1bOIN0Hw6M2z6FvQi/gG9NSDeNJL8WBkZjJ52E6y6bbdtOz3A93dJPPwm0ySndllGxDRwLqy+O3t+W35J2oAXACXAAdAA/AAnMRk48HG5tpm0FotKshVOeSfgM4pdqVZ2WjZssp8KkfEl0seRtLr6HCEYRh+75rqV19ioeoIfe7v4gBD0dmptjf6HtnhaOt2DZZUD4sd7OAhRqsMh4iIqhe9/8uB/2kAI9H43XGA6Wgcftzf/zPjm53q4jgS4vd/Ry+HQu6f/9WmZL6npnCy9x0zS7SVpY+JkezKMNnddegjK9MBotusUsXiNG+vBa2ZtirgGS5HUskm1OMqTEOUvGjr+mnKMjctUNT2YsOqDTXZhvmc+Mf3XOPHH3hlr27pc4mYxCfxRSwJH6+xGo//vFDInaP2j9/RUzr+2fwSVSt9nSrTymT+fkJVcsr0wId3SSubefu1AVfGYiNLEZ3jd9/E+bKenwtjyH6soFs3l986lWvcmms+Xv5jzTXRmavp1YLWzMrdoPCjlANjndGJF+K6mMJPvMdiavzvyNTTyD8zM1d+oVJGR0ZhezyVMqcfM9QJfMdyZjolMg+0q9aOLvYct3ARo/cfba0vB0HrXvUvzKlyROLRB2J0OMo18jmVBg35ogbgwCr9G4ahdZOHfjS5ppp64U3S5K31ZdHWi/urAu24QLNpIT8xgAUA0RpzReil9idxrqGkwFLZf8veVmvsB6SJqg8HpKkqs8nFUKkzpdlDpdcery8HPV2J6JhJOh2TN6oOhqogh1dCz/9S85VZddWRD37BbCTsVniqxLmcGdCYevyv3AwuLjZ3BjdsXnSZc505B5ztqNGBqfFpZ7F+FCeO4reSe/8qQyziK27y838iIiIiIiIiIiIiIiIiIiIiIiIiouNmr79G6OXnBNkatwfwH28QEREREREREREREREREREREREREREREe1P6v6/gKvuGFOv/P6/bon7/5r7UhBRz/4FAAD//+KdYGo=") 1.038389259s ago: executing program 3 (id=32): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) 1.02312685s ago: executing program 1 (id=33): bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYRES32=0x1, @ANYRES32=0x0], 0x50) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000140)={0x3, @pix={0x434c, 0x7f, 0x584e4f53, 0x3, 0x2, 0x7, 0x7, 0x5, 0x1, 0x4, 0x2, 0x7}}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x4) sched_setaffinity(0x0, 0x0, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x401c2, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e20, @broadcast}, 0x10) ioctl$sock_TIOCINQ(r2, 0x541b, 0x0) ftruncate(r1, 0x8800000) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) recvmmsg(r4, &(0x7f00000034c0)=[{{0x0, 0x0, &(0x7f0000001e40)=[{&(0x7f0000000b80)=""/4096, 0x20001b80}, {&(0x7f0000001b80)=""/112, 0x70}], 0x2, 0x0, 0xa0028cb4}}], 0x40000000000013c, 0x700, 0x0) sendfile(r3, r1, 0x0, 0x578410eb) connect$unix(0xffffffffffffffff, 0x0, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000100)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) 1.00967786s ago: executing program 0 (id=34): prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3fc, 0x0, 0x32}, 0x9c) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_SB_OCC_SNAPSHOT(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)={0x14, 0x0, 0x1, 0x0, 0xfffffffc}, 0x14}, 0x1, 0x0, 0x0, 0x20008045}, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r3, 0x84, 0x72, &(0x7f00000001c0)={0x0, 0x1, 0x20}, 0xc) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000000)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x800, 0x0, 0x0, 0x8a}, 0x9c) sendto$inet6(r3, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) 408.286481ms ago: executing program 3 (id=35): r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = creat(0x0, 0xecf86c37d53049cc) r4 = add_key(&(0x7f0000000000)='big_key\x00', &(0x7f0000000040)={'syz', 0x0}, &(0x7f0000000080)="ae", 0x1, 0xffffffffffffffff) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x1a, 0x0, 0x0) getgroups(0x0, 0x0) openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) sendmsg$unix(r3, 0x0, 0x4000010) keyctl$read(0x2, r4, &(0x7f00000000c0)=""/4096, 0x1000) keyctl$read(0xb, r4, &(0x7f00000010c0)=""/4096, 0x1000) 0s ago: executing program 0 (id=36): bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYRES32=0x1, @ANYRES32=0x0], 0x50) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000140)={0x3, @pix={0x434c, 0x7f, 0x584e4f53, 0x3, 0x2, 0x7, 0x7, 0x5, 0x1, 0x4, 0x2, 0x7}}) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x4) sched_setaffinity(0x0, 0x0, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x401c2, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e20, @broadcast}, 0x10) ioctl$sock_TIOCINQ(r2, 0x541b, 0x0) ftruncate(r1, 0x8800000) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) recvmmsg(r4, &(0x7f00000034c0)=[{{0x0, 0x0, &(0x7f0000001e40)=[{&(0x7f0000000b80)=""/4096, 0x20001b80}, {&(0x7f0000001b80)=""/112, 0x70}], 0x2, 0x0, 0xa0028cb4}}], 0x40000000000013c, 0x700, 0x0) sendfile(r3, r1, 0x0, 0x578410eb) connect$unix(0xffffffffffffffff, 0x0, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000100)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.41' (ED25519) to the list of known hosts. syzkaller login: [ 64.814042][ T5756] cgroup: Unknown subsys name 'net' [ 64.950801][ T5756] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 66.339482][ T5756] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 67.729248][ T51] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 67.737758][ T51] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 67.745810][ T51] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 67.752512][ T5778] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 67.753751][ T51] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 67.764384][ T5778] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 67.778577][ T5778] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 67.788255][ T5778] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 67.796082][ T5778] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 67.803524][ T5778] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 67.805909][ T5777] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 67.817876][ T5770] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 67.820469][ T5782] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 67.833722][ T5782] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 67.841298][ T5780] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 67.849153][ T5780] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 67.858008][ T5084] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 67.866565][ T5084] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 67.887620][ T5780] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 67.889442][ T5778] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 67.904163][ T5780] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 67.908244][ T5778] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 67.918475][ T5780] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 67.919828][ T5778] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 68.210811][ T5772] chnl_net:caif_netlink_parms(): no params data found [ 68.341092][ T5768] chnl_net:caif_netlink_parms(): no params data found [ 68.383698][ T5772] bridge0: port 1(bridge_slave_0) entered blocking state [ 68.392121][ T5772] bridge0: port 1(bridge_slave_0) entered disabled state [ 68.399759][ T5772] bridge_slave_0: entered allmulticast mode [ 68.407076][ T5772] bridge_slave_0: entered promiscuous mode [ 68.433391][ T5775] chnl_net:caif_netlink_parms(): no params data found [ 68.448591][ T5772] bridge0: port 2(bridge_slave_1) entered blocking state [ 68.456206][ T5772] bridge0: port 2(bridge_slave_1) entered disabled state [ 68.463381][ T5772] bridge_slave_1: entered allmulticast mode [ 68.470281][ T5772] bridge_slave_1: entered promiscuous mode [ 68.565441][ T5768] bridge0: port 1(bridge_slave_0) entered blocking state [ 68.572590][ T5768] bridge0: port 1(bridge_slave_0) entered disabled state [ 68.579995][ T5768] bridge_slave_0: entered allmulticast mode [ 68.586797][ T5768] bridge_slave_0: entered promiscuous mode [ 68.594112][ T5768] bridge0: port 2(bridge_slave_1) entered blocking state [ 68.601328][ T5768] bridge0: port 2(bridge_slave_1) entered disabled state [ 68.608692][ T5768] bridge_slave_1: entered allmulticast mode [ 68.615862][ T5768] bridge_slave_1: entered promiscuous mode [ 68.624713][ T5772] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 68.639630][ T5771] chnl_net:caif_netlink_parms(): no params data found [ 68.677476][ T5772] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 68.709340][ T5775] bridge0: port 1(bridge_slave_0) entered blocking state [ 68.716785][ T5775] bridge0: port 1(bridge_slave_0) entered disabled state [ 68.723951][ T5775] bridge_slave_0: entered allmulticast mode [ 68.731878][ T5775] bridge_slave_0: entered promiscuous mode [ 68.749757][ T5768] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 68.768885][ T5775] bridge0: port 2(bridge_slave_1) entered blocking state [ 68.776249][ T5775] bridge0: port 2(bridge_slave_1) entered disabled state [ 68.783394][ T5775] bridge_slave_1: entered allmulticast mode [ 68.790851][ T5775] bridge_slave_1: entered promiscuous mode [ 68.810294][ T5768] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 68.822710][ T5772] team0: Port device team_slave_0 added [ 68.832909][ T5772] team0: Port device team_slave_1 added [ 68.876247][ T5768] team0: Port device team_slave_0 added [ 68.892565][ T5768] team0: Port device team_slave_1 added [ 68.900786][ T5775] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 68.913353][ T5775] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 68.963209][ T5768] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 68.970261][ T5768] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 68.997822][ T5768] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 69.014496][ T5772] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 69.021925][ T5772] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 69.047967][ T5772] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 69.068561][ T5768] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 69.075829][ T5768] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 69.102138][ T5768] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 69.122140][ T5772] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 69.129450][ T5772] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 69.156446][ T5772] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 69.170187][ T5775] team0: Port device team_slave_0 added [ 69.205440][ T5775] team0: Port device team_slave_1 added [ 69.211413][ T5771] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.218818][ T5771] bridge0: port 1(bridge_slave_0) entered disabled state [ 69.226274][ T5771] bridge_slave_0: entered allmulticast mode [ 69.232954][ T5771] bridge_slave_0: entered promiscuous mode [ 69.272798][ T5771] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.280417][ T5771] bridge0: port 2(bridge_slave_1) entered disabled state [ 69.287712][ T5771] bridge_slave_1: entered allmulticast mode [ 69.294371][ T5771] bridge_slave_1: entered promiscuous mode [ 69.319826][ T5772] hsr_slave_0: entered promiscuous mode [ 69.326650][ T5772] hsr_slave_1: entered promiscuous mode [ 69.352551][ T5768] hsr_slave_0: entered promiscuous mode [ 69.359087][ T5768] hsr_slave_1: entered promiscuous mode [ 69.365959][ T5768] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 69.373745][ T5768] Cannot create hsr debugfs directory [ 69.380713][ T5775] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 69.388022][ T5775] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 69.414185][ T5775] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 69.438616][ T5771] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 69.461050][ T5775] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 69.468196][ T5775] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 69.494284][ T5775] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 69.507492][ T5771] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 69.595592][ T5771] team0: Port device team_slave_0 added [ 69.631436][ T5771] team0: Port device team_slave_1 added [ 69.656566][ T5775] hsr_slave_0: entered promiscuous mode [ 69.662915][ T5775] hsr_slave_1: entered promiscuous mode [ 69.669828][ T5775] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 69.678050][ T5775] Cannot create hsr debugfs directory [ 69.698073][ T5771] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 69.705144][ T5771] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 69.731753][ T5771] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 69.769236][ T5771] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 69.776304][ T5771] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 69.803825][ T5771] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 69.866337][ T5771] hsr_slave_0: entered promiscuous mode [ 69.872777][ T5771] hsr_slave_1: entered promiscuous mode [ 69.879055][ T5778] Bluetooth: hci1: command tx timeout [ 69.885417][ T5771] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 69.892986][ T5771] Cannot create hsr debugfs directory [ 69.955130][ T51] Bluetooth: hci0: command tx timeout [ 69.960812][ T5778] Bluetooth: hci3: command tx timeout [ 70.040662][ T5778] Bluetooth: hci2: command tx timeout [ 70.114248][ T5768] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 70.128394][ T5768] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 70.168518][ T5768] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 70.178384][ T5768] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 70.260364][ T5772] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 70.281988][ T5772] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 70.319650][ T5772] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 70.337835][ T5772] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 70.367894][ T5775] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 70.378927][ T5775] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 70.389893][ T5775] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 70.399939][ T5775] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 70.507751][ T5771] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 70.519399][ T5771] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 70.530209][ T5771] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 70.554038][ T5771] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 70.624012][ T5775] 8021q: adding VLAN 0 to HW filter on device bond0 [ 70.659623][ T5768] 8021q: adding VLAN 0 to HW filter on device bond0 [ 70.685983][ T5775] 8021q: adding VLAN 0 to HW filter on device team0 [ 70.710840][ T5772] 8021q: adding VLAN 0 to HW filter on device bond0 [ 70.731148][ T5768] 8021q: adding VLAN 0 to HW filter on device team0 [ 70.750557][ T1142] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.757926][ T1142] bridge0: port 1(bridge_slave_0) entered forwarding state [ 70.789864][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.796992][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 70.808278][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.815473][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 70.838290][ T5772] 8021q: adding VLAN 0 to HW filter on device team0 [ 70.848412][ T1126] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.855646][ T1126] bridge0: port 2(bridge_slave_1) entered forwarding state [ 70.888799][ T5771] 8021q: adding VLAN 0 to HW filter on device bond0 [ 70.929918][ T1126] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.937043][ T1126] bridge0: port 1(bridge_slave_0) entered forwarding state [ 70.962813][ T1126] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.969938][ T1126] bridge0: port 2(bridge_slave_1) entered forwarding state [ 70.988480][ T5771] 8021q: adding VLAN 0 to HW filter on device team0 [ 71.006178][ T1126] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.013275][ T1126] bridge0: port 1(bridge_slave_0) entered forwarding state [ 71.041231][ T5775] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 71.052221][ T5775] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 71.088729][ T1142] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.095906][ T1142] bridge0: port 2(bridge_slave_1) entered forwarding state [ 71.482695][ T1278] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.490503][ T1278] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.499463][ T5775] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 71.650005][ T5768] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 71.661130][ T5775] veth0_vlan: entered promiscuous mode [ 71.687115][ T5772] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 71.702794][ T5775] veth1_vlan: entered promiscuous mode [ 71.722244][ T5771] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 71.802274][ T5775] veth0_macvtap: entered promiscuous mode [ 71.812295][ T5772] veth0_vlan: entered promiscuous mode [ 71.831110][ T5768] veth0_vlan: entered promiscuous mode [ 71.845898][ T5768] veth1_vlan: entered promiscuous mode [ 71.858112][ T5772] veth1_vlan: entered promiscuous mode [ 71.877519][ T5775] veth1_macvtap: entered promiscuous mode [ 71.910375][ T5771] veth0_vlan: entered promiscuous mode [ 71.937624][ T5771] veth1_vlan: entered promiscuous mode [ 71.947276][ T5775] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 71.961120][ T5778] Bluetooth: hci1: command tx timeout [ 71.969945][ T5772] veth0_macvtap: entered promiscuous mode [ 71.995667][ T5775] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 72.007474][ T5772] veth1_macvtap: entered promiscuous mode [ 72.016698][ T5768] veth0_macvtap: entered promiscuous mode [ 72.035843][ T5778] Bluetooth: hci3: command tx timeout [ 72.035957][ T51] Bluetooth: hci0: command tx timeout [ 72.043311][ T5775] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.056030][ T5775] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.066463][ T5775] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.075952][ T5775] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.089036][ T5768] veth1_macvtap: entered promiscuous mode [ 72.115131][ T51] Bluetooth: hci2: command tx timeout [ 72.123096][ T5772] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 72.135385][ T5772] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.148586][ T5772] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 72.169745][ T5768] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 72.181411][ T5768] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.192465][ T5768] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 72.204260][ T5768] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.219954][ T5768] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 72.233253][ T5772] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 72.243974][ T5772] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.255290][ T5772] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 72.266521][ T5771] veth0_macvtap: entered promiscuous mode [ 72.286827][ T5772] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.298294][ T5772] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.307148][ T5772] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.315884][ T5772] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.329589][ T5771] veth1_macvtap: entered promiscuous mode [ 72.337807][ T5768] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 72.348374][ T5768] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.359437][ T5768] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 72.369943][ T5768] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.381421][ T5768] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 72.393581][ T5768] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.402513][ T5768] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.412828][ T5768] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.421977][ T5768] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.510462][ T5771] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 72.523440][ T5771] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.533691][ T5771] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 72.544665][ T5771] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.554486][ T5771] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 72.565023][ T5771] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.576519][ T5771] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 72.617241][ T5771] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 72.628013][ T5771] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.639107][ T5771] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 72.649620][ T5771] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.659588][ T5771] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 72.670601][ T5771] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.682216][ T5771] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 72.703299][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 72.714243][ T5771] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.725822][ T5771] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.727923][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 72.734523][ T5771] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.752878][ T5771] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.791774][ T4212] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 72.807468][ T4212] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 72.868635][ T49] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 72.884641][ T49] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 72.918450][ T49] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 72.925691][ T1142] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 72.934111][ T1142] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 72.947805][ T49] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 73.007990][ T4212] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 73.019135][ T4212] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 73.097290][ T3442] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 73.107088][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 73.134268][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 73.144048][ T3442] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 73.300854][ T5836] Zero length message leads to an empty skb [ 74.044782][ T51] Bluetooth: hci1: command tx timeout [ 74.116175][ T51] Bluetooth: hci0: command tx timeout [ 74.121650][ T51] Bluetooth: hci3: command tx timeout [ 74.141007][ T5836] 8021q: adding VLAN 0 to HW filter on device bond1 [ 74.198307][ T5778] Bluetooth: hci2: command tx timeout [ 75.001289][ T5855] 8021q: adding VLAN 0 to HW filter on device bond1 [ 75.417399][ T5863] capability: warning: `syz.1.2' uses deprecated v2 capabilities in a way that may be insecure [ 76.145056][ T5778] Bluetooth: hci1: command tx timeout [ 76.194793][ T5778] Bluetooth: hci3: command tx timeout [ 76.200363][ T51] Bluetooth: hci0: command tx timeout [ 76.305176][ T5778] Bluetooth: hci2: command tx timeout [ 77.260045][ T5880] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 77.686279][ T5880] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 78.040037][ T5889] bond1: option mode: unable to set because the bond device is up [ 78.705478][ T5810] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 79.594821][ T5810] usb 2-1: Using ep0 maxpacket: 8 [ 79.771569][ T5810] usb 2-1: unable to get BOS descriptor or descriptor too short [ 79.818386][ T5810] usb 2-1: unable to read config index 0 descriptor/start: -71 [ 79.847395][ T5810] usb 2-1: can't read configurations, error -71 [ 81.033107][ T5917] syz.3.19[5917]: memfd_create() called without MFD_EXEC or MFD_NOEXEC_SEAL set [ 81.048360][ T5917] loop3: detected capacity change from 0 to 64 [ 81.056670][ T5917] ======================================================= [ 81.056670][ T5917] WARNING: The mand mount option has been deprecated and [ 81.056670][ T5917] and is ignored by this kernel. Remove the mand [ 81.056670][ T5917] option from the mount to silence this warning. [ 81.056670][ T5917] ======================================================= [ 82.190564][ T5916] sched: RT throttling activated [ 82.192812][ T9] cfg80211: failed to load regulatory.db [ 82.282512][ T5917] hfs: get root inode failed [ 82.931411][ T5925] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 84.553447][ T5931] loop0: detected capacity change from 0 to 64 [ 84.975628][ T5931] hfs: get root inode failed [ 86.705938][ T5938] sctp: failed to load transform for md5: -2 [ 87.737271][ T5975] loop1: detected capacity change from 0 to 64 [ 87.812639][ T5975] hfs: get root inode failed [ 132.925166][ T1278] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.931561][ T1278] ieee802154 phy1 wpan1: encryption failed: -22 [ 143.704872][ T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!! [ 144.114709][ T0] NOHZ tick-stop error: local softirq work is pending, handler #c0!!! [ 146.264841][ T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!! [ 146.674692][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 148.824870][ T0] NOHZ tick-stop error: local softirq work is pending, handler #1c2!!! [ 149.234668][ T0] NOHZ tick-stop error: local softirq work is pending, handler #c0!!! [ 151.384877][ T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!! [ 151.794639][ T0] NOHZ tick-stop error: local softirq work is pending, handler #42!!! [ 153.944869][ T0] NOHZ tick-stop error: local softirq work is pending, handler #1c0!!! [ 154.354647][ T0] NOHZ tick-stop error: local softirq work is pending, handler #c0!!! [ 191.396403][ T5782] Bluetooth: hci0: command 0x0406 tx timeout [ 191.402491][ T5782] Bluetooth: hci1: command 0x0406 tx timeout [ 191.408616][ T5084] Bluetooth: hci3: command 0x0406 tx timeout [ 191.414670][ T5084] Bluetooth: hci2: command 0x0406 tx timeout [ 194.384568][ C0] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 194.391574][ C0] rcu: Tasks blocked on level-0 rcu_node (CPUs 0-1): P11/1:b..l [ 194.399534][ C0] rcu: (detected by 0, t=10502 jiffies, g=8929, q=654 ncpus=2) [ 194.407161][ C0] task:kworker/u4:0 state:R running task stack:20968 pid:11 ppid:2 flags:0x00004000 [ 194.418460][ C0] Workqueue: bat_events batadv_nc_worker [ 194.424102][ C0] Call Trace: [ 194.427377][ C0] [ 194.430293][ C0] __schedule+0x1553/0x45a0 [ 194.434790][ C0] ? mark_lock+0x94/0x320 [ 194.439105][ C0] ? __bfs+0x560/0x5c0 [ 194.443156][ C0] ? asan.module_dtor+0x20/0x20 [ 194.447996][ C0] ? mark_lock+0x94/0x320 [ 194.452309][ C0] ? lockdep_hardirqs_on_prepare+0x40d/0x770 [ 194.458277][ C0] ? preempt_schedule_irq+0xb4/0x150 [ 194.463552][ C0] preempt_schedule_irq+0xbf/0x150 [ 194.468651][ C0] ? preempt_schedule_notrace+0x110/0x110 [ 194.474358][ C0] ? rcu_irq_exit_check_preempt+0xdf/0x210 [ 194.480154][ C0] irqentry_exit+0x67/0x70 [ 194.484560][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 194.490545][ C0] RIP: 0010:lock_acquire+0x208/0x420 [ 194.495819][ C0] Code: f7 84 24 80 00 00 00 00 02 00 00 43 c6 44 3c 04 f8 0f 85 f0 00 00 00 41 f7 c6 00 02 00 00 74 01 fb 48 c7 44 24 60 0e 36 e0 45 <4b> c7 04 3c 00 00 00 00 43 c7 44 3c 08 00 00 00 00 65 48 8b 04 25 [ 194.515409][ C0] RSP: 0018:ffffc900001079c0 EFLAGS: 00000206 [ 194.521457][ C0] RAX: 0000000000000001 RBX: 0000000000000000 RCX: fb1ad6000f02f100 [ 194.529412][ C0] RDX: 0000000000000000 RSI: ffffffff8acadb60 RDI: ffffffff8b1c89a0 [ 194.537887][ C0] RBP: ffffc90000107ad8 R08: dffffc0000000000 R09: 1ffffffff22386a0 [ 194.545848][ C0] R10: dffffc0000000000 R11: fffffbfff22386a1 R12: 1ffff92000020f44 [ 194.553803][ C0] R13: ffffffff8d1320a0 R14: 0000000000000246 R15: dffffc0000000000 [ 194.561772][ C0] ? batadv_nc_process_nc_paths+0xba/0x390 [ 194.567564][ C0] ? read_lock_is_recursive+0x20/0x20 [ 194.572918][ C0] ? do_raw_spin_unlock+0x121/0x230 [ 194.578100][ C0] ? batadv_nc_purge_paths+0x311/0x3a0 [ 194.583535][ C0] ? batadv_nc_to_purge_nc_path_coding+0x120/0x120 [ 194.590038][ C0] ? batadv_nc_fwd_flush+0x330/0x330 [ 194.595326][ C0] ? batadv_nc_fwd_flush+0x330/0x330 [ 194.600606][ C0] batadv_nc_process_nc_paths+0xdb/0x390 [ 194.606237][ C0] ? batadv_nc_process_nc_paths+0xba/0x390 [ 194.612032][ C0] ? batadv_nc_process_nc_paths+0xba/0x390 [ 194.617823][ C0] batadv_nc_worker+0x52b/0x610 [ 194.622656][ C0] ? process_scheduled_works+0x96f/0x15d0 [ 194.628360][ C0] process_scheduled_works+0xa5d/0x15d0 [ 194.633912][ C0] ? worker_attach_to_pool+0x380/0x380 [ 194.639359][ C0] ? assign_work+0x3d2/0x5d0 [ 194.643936][ C0] worker_thread+0xa55/0xfc0 [ 194.648524][ C0] kthread+0x2fa/0x390 [ 194.652572][ C0] ? pr_cont_work+0x560/0x560 [ 194.657233][ C0] ? kthread_blkcg+0xd0/0xd0 [ 194.661804][ C0] ret_from_fork+0x48/0x80 [ 194.666206][ C0] ? kthread_blkcg+0xd0/0xd0 [ 194.670812][ C0] ret_from_fork_asm+0x11/0x20 [ 194.675566][ C0] [ 194.678576][ C0] rcu: rcu_preempt kthread starved for 10369 jiffies! g8929 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=1 [ 194.689676][ C0] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 194.699660][ C0] rcu: RCU grace-period kthread stack dump: [ 194.705560][ C0] task:rcu_preempt state:R running task stack:26568 pid:17 ppid:2 flags:0x00004000 [ 194.716321][ C0] Call Trace: [ 194.719584][ C0] [ 194.722500][ C0] __schedule+0x1553/0x45a0 [ 194.727005][ C0] ? asan.module_dtor+0x20/0x20 [ 194.731839][ C0] ? enqueue_timer+0x23d/0x550 [ 194.736593][ C0] ? __mod_timer+0x984/0xdb0 [ 194.741180][ C0] schedule+0xbd/0x170 [ 194.745240][ C0] schedule_timeout+0x188/0x2d0 [ 194.750071][ C0] ? console_conditional_schedule+0x40/0x40 [ 194.755944][ C0] ? _raw_spin_unlock_irqrestore+0x86/0x120 [ 194.761816][ C0] ? update_process_times+0x1b0/0x1b0 [ 194.767172][ C0] ? prepare_to_swait_event+0x339/0x360 [ 194.772696][ C0] rcu_gp_fqs_loop+0x313/0x1590 [ 194.777533][ C0] ? dyntick_save_progress_counter+0x2b0/0x2b0 [ 194.783666][ C0] ? rcu_gp_init+0x1560/0x1560 [ 194.788414][ C0] ? rcu_gp_cleanup+0xb41/0xc90 [ 194.793249][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 194.798429][ C0] ? lockdep_hardirqs_on+0x98/0x150 [ 194.803636][ C0] rcu_gp_kthread+0x9d/0x3b0 [ 194.808215][ C0] ? rcu_report_qs_rsp+0x1a0/0x1a0 [ 194.813304][ C0] ? __kthread_parkme+0x7a/0x1c0 [ 194.818222][ C0] ? __kthread_parkme+0x162/0x1c0 [ 194.823226][ C0] kthread+0x2fa/0x390 [ 194.827289][ C0] ? rcu_report_qs_rsp+0x1a0/0x1a0 [ 194.832391][ C0] ? kthread_blkcg+0xd0/0xd0 [ 194.836964][ C0] ret_from_fork+0x48/0x80 [ 194.841377][ C0] ? kthread_blkcg+0xd0/0xd0 [ 194.846228][ C0] ret_from_fork_asm+0x11/0x20 [ 194.850990][ C0] [ 194.854000][ C0] rcu: Stack dump where RCU GP kthread last ran: [ 194.860301][ C0] Sending NMI from CPU 0 to CPUs 1: [ 194.865497][ C1] NMI backtrace for cpu 1 [ 194.865519][ C1] CPU: 1 PID: 0 Comm: swapper/1 Not tainted syzkaller #0 [ 194.865533][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 194.865541][ C1] RIP: 0010:pv_native_safe_halt+0xf/0x10 [ 194.865562][ C1] Code: 6f 21 02 c3 cc cc cc cc cc cc cc f3 0f 1e fa 0f 0b 66 2e 0f 1f 84 00 00 00 00 00 f3 0f 1e fa 66 90 0f 00 2d 23 39 42 00 fb f4 66 0f 1f 00 55 41 57 41 56 41 54 53 50 8b 2f eb 2e 41 89 de 80 [ 194.865574][ C1] RSP: 0018:ffffc90000187de0 EFLAGS: 000002c6 [ 194.865587][ C1] RAX: e6d3fd7e6e00ab00 RBX: ffffffff8162a8c1 RCX: e6d3fd7e6e00ab00 [ 194.865599][ C1] RDX: 0000000000000001 RSI: ffffffff8acac9e0 RDI: ffffffff8b1c89a0 [ 194.865609][ C1] RBP: ffffc90000187f20 R08: ffff8880b8f36b2b R09: 1ffff110171e6d65 [ 194.865620][ C1] R10: dffffc0000000000 R11: ffffed10171e6d66 R12: 1ffff92000030fc8 [ 194.865630][ C1] R13: dffffc0000000000 R14: 1ffff1100384c780 R15: 0000000000000000 [ 194.865640][ C1] FS: 0000000000000000(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000 [ 194.865653][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 194.865663][ C1] CR2: 00007f74865a1796 CR3: 0000000023f09000 CR4: 00000000003506e0 [ 194.865676][ C1] Call Trace: [ 194.865684][ C1] [ 194.865688][ C1] default_idle+0x13/0x20 [ 194.865706][ C1] default_idle_call+0x6c/0xa0 [ 194.865724][ C1] do_idle+0x221/0x590 [ 194.865745][ C1] ? idle_inject_timer_fn+0x60/0x60 [ 194.865761][ C1] ? _raw_spin_unlock_irqrestore+0x86/0x120 [ 194.865786][ C1] ? lockdep_hardirqs_on+0x98/0x150 [ 194.865803][ C1] ? _raw_spin_unlock_irqrestore+0xc5/0x120 [ 194.865820][ C1] ? _raw_spin_unlock+0x40/0x40 [ 194.865840][ C1] cpu_startup_entry+0x43/0x60 [ 194.865857][ C1] start_secondary+0xee/0xf0 [ 194.865872][ C1] secondary_startup_64_no_verify+0x179/0x17b [ 194.865898][ C1]