last executing test programs: 3m56.892475015s ago: executing program 0 (id=82): socket$nl_route(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket(0x10, 0x3, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x20, 0x3, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000000000000000000000000009500000000000000"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99ec}, 0x94) openat$rfkill(0xffffffffffffff9c, 0x0, 0x60800, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_INFO(r0, 0xc08c5334, &(0x7f0000000400)={0x5, 0x10001, 0x1, 'queue0\x00', 0x9}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r5}, 0x10) socket$inet6_mptcp(0xa, 0x1, 0x106) landlock_create_ruleset(0x0, 0x0, 0x0) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000180)=0x2, 0x12) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000080)={r1, 0x0, 0x2d, 0x0, @val=@netfilter={0xa, 0x1, 0x353a, 0x1}}, 0x20) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = getpgid(0x0) fcntl$setownex(r6, 0xf, &(0x7f00000001c0)={0x0, r7}) fcntl$getownex(r6, 0x10, &(0x7f00000003c0)) syz_emit_ethernet(0x36, &(0x7f0000000500)={@local, @local, @void, {@ipv6={0x86dd, @generic={0x6, 0x6, '\x00@e', 0x0, 0x2c, 0xff, @ipv4={'\x00', '\xff\xff', @remote}, @ipv4={'\x00', '\xff\xff', @loopback}}}}}, 0x0) syz_open_dev$evdev(&(0x7f0000000040), 0x5, 0x400) sendmsg$kcm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)="2e000000040f80ec5cacbcca670413a1f8480d0000005e140602000000000e000a00290000000280000000000000000000000000000000dd64a5746e28b2704808db745972e94acefd3e0000", 0x4c}], 0x1}, 0x0) 3m54.926809759s ago: executing program 0 (id=85): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TCXONC(r1, 0x540a, 0x0) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000080)=0xa) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xffa3}, 0x48) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = socket$inet_sctp(0x2, 0x5, 0x84) r3 = userfaultfd(0x1) ioctl$UFFDIO_ZEROPAGE(r3, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000ffc000/0x4000)=nil, 0x4000}, 0x1}) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000000180)=[@in={0x2, 0x4e21, @local}], 0x10) r4 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000140), 0x60000, 0x0) ioctl$SOUND_MIXER_READ_VOLUME(r4, 0x80044d0a, &(0x7f0000000240)) sendmsg$inet_sctp(r2, &(0x7f0000000700)={&(0x7f0000000340)=@in={0x2, 0x4e21, @local}, 0x10, &(0x7f00000006c0)=[{&(0x7f0000000380)='N', 0x1}], 0x1, 0x0, 0x0, 0x804c040}, 0xc851) r5 = syz_open_dev$audion(&(0x7f0000000280), 0x2, 0x0) ioctl$SNDCTL_SEQ_SYNC(r5, 0x5101) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r2, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f00000000c0)=@assoc_value={r6, 0x7fffffff}, 0x8) r7 = fsopen(&(0x7f0000000300)='jfs\x00', 0x0) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r5, 0x84, 0x6b, &(0x7f00000003c0)=[@in6={0xa, 0x4e20, 0xfffffc01, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x3}, @in={0x2, 0x4e24, @loopback}, @in={0x2, 0x4e22, @multicast1}], 0x3c) r8 = syz_open_dev$usbfs(&(0x7f0000000040), 0x20000007d, 0x0) r9 = dup3(0xffffffffffffffff, r8, 0x0) ioctl$sock_inet6_tcp_SIOCINQ(r9, 0x9201, 0x0) close_range(r7, 0xffffffffffffffff, 0x0) 3m51.146922753s ago: executing program 0 (id=89): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000000}, 0x24008000) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_int(r2, 0x29, 0x1a, &(0x7f0000000040), 0x4) r3 = socket$nl_route(0x10, 0x3, 0x0) fcntl$lock(r1, 0x24, &(0x7f00000000c0)={0x2, 0x2, 0x1}) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x7, 0x1eba, &(0x7f0000000700)=ANY=[@ANYRESHEX=r3], &(0x7f0000000080)='GPL\x00', 0x9, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x94) r4 = shmget$private(0x0, 0x4000, 0x1000, &(0x7f0000ffc000/0x4000)=nil) shmctl$IPC_SET(r4, 0x1, &(0x7f00000020c0)={{0x3, 0x0, 0x0, 0x0, 0x0, 0x34, 0xe}, 0x9, 0x5, 0x2, 0xfffffffffffffffd, 0x0, 0xffffffffffffffff, 0x3ff}) shmctl$SHM_UNLOCK(r4, 0xc) socket(0x2, 0x3, 0x5) r5 = syz_open_procfs(0x0, &(0x7f0000000380)='wchan\x00') read$FUSE(r5, &(0x7f00000020c0)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) r7 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) prlimit64(r6, 0xc, &(0x7f0000000000)={0x1ff, 0x8}, &(0x7f0000000240)) ioctl$IOMMU_IOAS_ALLOC(r7, 0x3b81, &(0x7f0000000200)={0xc, 0x0, 0x0}) r9 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$TCSETSF(r9, 0x5404, &(0x7f0000000040)={0xfdfdffff, 0xfffffff7, 0x1, 0x4, 0x12, "518aba4d000000000000000000000000002000"}) r10 = dup(r9) write$UHID_INPUT(r10, &(0x7f0000001040)={0xfc, {"a2336848149e516d4b5e071887f70e09d038e7ff7fc6e5539b0d500a8b089b3f383563030890e0879b0a71c6e70a9b334a959b669a242f0a0af3988f7ef319520100ffe8d178708c523c921b1b3e31070d0773090acd3b78130daa41d8e8040000005802b77f07227227b7ba67e0e78657a6f5c2a874e62a9ccdc0d31a0c9f318c0da1993bd160e233df4a62179c6f30e065cd5b91cd0ae193973735b36d5b1b63dd1c00305d3f46635eb016d5b1dda98e2d749be7bd1df1fb3b231fdcdb5075a9aaa1b469c3090000000000000075271b286329d169934288fd789aa37d6e98b224fd44b65b31334ffc55cc82cd3ac32ecdb08ced6f9081b4dd0d8b38f3cd4498bee800490841bdb114f6b76383709d8f5c55432a909fda039aec54a1236e80f6a8abadea7662496bddbb42be6bfb2f17959d1f416e56c71b1931870262f5e801119242ca026bfc821e7e7daf2451138e645bb80c617669314e2fbe70de98ec76a9e40dad47f36fd9f7d0d42a4b5f1185ccdcf16ff46295d8a0fa17713c5802630933a9a34af674f3f39fe23491237c08822dec110911e893d0a8c4f677747abc360934b82910ff85bfd995083bba2987a67399eac427d145d546a40b9f6ff14ac488ec130fb3850a27af9544ae15a7e454dea05918b41243513f000000000000000a3621c56cea8d20fa911a0c41db6ebe8cac64f17679141d54b34bbc9963ac4f4bb3309603f1d4ab966203861b5b15a841f2b575a8bd0d78248ebe4d9a80002695104f674c2431dca141fae269cab70e9a66f3c3a9a63e9639e1f59c0ede26c6b5d74b078a5e15c31634e5ae098ce9ee70771aaa18119a867e1088334975e9f73483b6a62fa678ca14ffd9f9db2a7869d85864056526f889af43a6056080572286522449df466c632b3570243f989cce7cd9f465e41e610c20d80421d653a5520000008213b704c7fb082ff27590678ef9f190bae97909507041d860420c5664b27921b14dc1db8892fd32d0ad7bc946813591ad8deff4b05f60cea0da7710ac0000000000008000bea37ce0d0d4aa202f928f28381aab144a5d429a04a6a2b83c7068ae949ed06e288e810bac9c76600025e19c907f8ea2e2010000008271a1f5f8528f227e79c1389dbdfffe492f21579d2c15b8c70cdb1c332d86d87341432750861ec2bc3451edca194b221cfec4603d276bbaa1dfa6d4fb8a48a76eafc9a9a0270e4c10d64cd5a62427264f2377fe763c43470833ac96c45f357cbbaba8f1b1fdcc7cbb61a7cdb9744ed7f9129aede2be21ccfdc4e9134f8684b3a4f354da9a795e96334e207dff70f1988037b2ed3aaf575c0b88d8f146684078416d59fdee5325928974d12dad99dac44c3f0008047096a44002bebc2420aed92fa9b6578b4779415d4ac01b75d5495c118045651cf41c2fc48b778efa5ea5677747430af4162b987b80c3e001cd34e5c92f76cc4c24eeb8bc4e9ac2aed9e53803ed0ca4ae3a9737d214060005ea6f1783e287b3bee96e3a726eafe2fdfaa78d1f48c13b64df07847754b8400daaa69bf5c8f4350aeae9ca1207e78283cd0b20ceb360c7e658828163e2d25c4aa348561f927e88f63aa70e73a5e69b3df3495903f06572e1e007fa55a2999f596d067312f5779e8dbfdcf3427138f3d444d2639a10477f9bec4b0bbb6e3c04be68981f392203dd0ee3ef478e16dacfc5e3e03cf7ab8e3902f1b0ff034ef655b253ca509383815b1b6fc6522d4e4fdc11a48cf42d48604675fde2b94cf00500a2690891abf8ab9c015073014d9e08d4338b8780bdecd436cf0541359bafffa45237f104b96210403b2de9efed496f42355bc7872c827467cfa5c4e72730d56bd068ed211cf847535edecb7b373f78b095b68441a34cb51682a8ae4d24ad0465f3927f889b813076038e79a7962fb385a882e8020f06c4c2ba1dd5cac7c18876da865d258734dd73583df292892448039ef799cf0630becdcce04579b5561dc825ab829827945e020c1f67ee615feb6243378e0610060f02cca4e91b2f001edb3d78fb4b55668dda93aec92a5de203717aa49c2d284acfabe262fccfcbb2b75a2183c46eb65ca8104e1b4da7fbb77ab2fc043aead87c32ab875ee7c2e7b7019c982cd3b43eaeb1a5fb135c0c7dcee8fe6516a328032f88c042891824659e9e94265c803b35ee5f83a2b210520106b8a358b50ab7a1fa89af9c251fe5294b3d1802d5676d95f160ec97b1ad94872cb2044642c37b4a6cc6c04effc1672db7e4b68d787d9a7a508ae54b3cd7369dde50e8c77d95a3d361c040babb171607caac2a3559ad4f75465f49c0d0ae3716db6e00cb11db4a5fade2a57c10238e204a67737c3b42aae501b20f7694a00f16e2d0174035a2c22656dc29880acebdbe8ddbd75c2f998d8ac2dfad2ba3a504767b6b45a45957f24d758ed024b3849c11d412a2a03b4047497022d9c30e23ef4df5c89644f48bb536f7945b59d7bcddff754413d135273ea8e75f22f216c6b9990ae71806f2c00b4025c48b75c0f73cdb9a7b8fa367b50028067e7f16f4dd569d462f4f19eacdb3ed70eeebb4483f8fd777d443e8b40427db6fe29068c0ca3d2414442e8f3a154704b0e51bc664a137b26be719f4f7c9a5678a674dfc95df80b9ce375dd649c8c704e509bd88c8e63d8c7dd67071115c8982ba46af4d6adcc9f68a75b9397b035153faf46366e7205dd8d6f37525c1a0e94610dd94323f6c15d085197149bfd6655548cfd9c52c9711937f79abb1a124f1210465483cd3b2d78378cfb85ed82e7da0f6eb6d279f2ae455925d0f6f1ba571eba281f2a654fb39ddff3b484439ff158e7c5419e037f3e3ad038f2211f1033195563c7f93cd54b9094f226e783271e1e5a2a2c10712eab625d64931cd4ffe6738d97b9b5ef828eea399567c1d93768f7971d31488b8658a20878b7c1dd7ba02fc42939dde3d4a3339a65d507dc59c51097b40517705da56e9ebf0afa53282bf86dbb58c548069ff6eb95aade7cc66d7bbef724779ca1f731b3346ff177050373d79ff7b3e7f9bc0c1b4b266a8878b90baaa039d3e3b63979ac3df6e6f4859afd50238c7547a39b60810938044ae185d2ba3e00a4e73676864ae090d81eaee5ee6cf1d0ab378dd4dd891e937c2ea5410e0513005000000000000003911fab964c271550027697b52160687461602f88df165d884b36ec2b6c25a2f33c715687e9d4afb8843dd014e5c5ad8fe995754bd9cf32fce1e31919c4b2082fb0a30b9deae84bed4b28045634073c9c58c89d9e99c81769177c6d594f88a4facfd4c735a20307c737afa2d60399473296b831dbd933d93994ba3064279b10ea0c5833f41f157ea2302993dbe433b1aa3a3766d5439020484f4113c4c859465c3b415c3432f81db8719539d5bf372aaaea1cc43a6c5cbe59758bfee2916580dac4b008e595f437491d87abed02cefcd9db53d94d02daee67918e5d6787463183b4b87c9050000002f7809959bc048850613d17ca51055f2f416a44fe180d2d50c312cca7cb14a2bdc331f57a9817139a206fc76957227ffff2de20a4b8e3737fbb42913777c06376f799eba367e21f94ca598705f5dcb767d6f0900d6b0f6095e53c4c4234d0c1fbe434f6ab8f43c0013ee93b83946ee7759e89d7bdd1a32d7b311711b757fe43c06d21a35810d8fe98b27faea8aa12bc8716eefc5c97c45ac33eeec964c5214bc3a9359bdea1cccab94f15e36319cb34ebcacedb82c2ed3de5a8a8f0011e8f74e82d7f96093530e76692839d7961939adfdeeeaff19d11efcafb6d546fef271e89d6cc2389e81ff58cefcce3fbf4625a7e7de40e42e07b34449e15e065cc7340002000000000000f288a4510de03dab19d26285eda89156d50dd385a60333ba5bbf5d77cd7007ad1519ad5470de3dd6d6080cafccf8a97406bb6b68a1f0c4549820a73c880f475f732ae00398e8bd1f4108b7807fb33b72685ec37a2d3f766413a60459516246e5a1d998a2017aef0948a68cf255315ab80dd349e891aef595dc4d470e8ac32a308e15fc37d06aeac289c0523f483e1ff7408c6087f1ab652f2ef91d4f2b01987b0f46da034e5c3f745a7ee8101a3934c54e24b48ec0275e2d0687dc746b0827cbf652f406c6b95f2722e58c05f752ce2126596e1cd7655b904801784c416b22f73d324678e2724f43f1fe687c7e8a60c28b82b6528341b648cdd56fed7cdcbb1575912d5ecd36dea3bca0b7427d8392c6289455e8f8d2ab2242729251ae033a9e02210e62df0546a74b333a1c48f95fd54acb5741259e8c5488efeee327415cc19451432c6f14c27693102a3cd84857cd6586fc5ca9a93eb0145fac0662ff86107f998a8ef7df8aa14046c55b03d3d47f88a8d60f7774a2ee08758897fb411a94b3c2fc5d5f0db42c0456ec015f08e5247d33ae2d35603ff8454c16f8342856935125102bb784ed7148b6ce431b63ee356b0c785f2f47b90e29389f22fc5b59a70efaea2bd40195af4486220d702e30bfc43c10ec23ea6283994a7dde4dcb61fea6b651fb1d62458d0741a12830052fcc460db043afe525629b40d7cee458e4cb5e930ed624806c43a006e39336d07c2b8081c128ad2706f48261f7897484c297a1a6613bc18f5a38d442768af38041efe03d152ef95ff569e76db2391f4509d7f339d92fdb4a89364949da398000000000000000d80a4fe654578376e599aff3565b1d531f30912b9945030b81ea9935fd46edb44a78f615255490a4b621501f2a9e4d24624c4dac9274118c67584f5d374755534d7f68f679c4ff516a9c861a0e7e65868fcb2bf1cb9aea4e05df72279fdb0d2b9e935c5af3cf474bed79dfc248c1f5aea4b8b32c5d295e57079d0fe662a46b7f71cd47744db86c50b704c971d90295c7b2c7439a2d78ccfa79b5fc2bff6bbf840262bf89394b3e0691953264d2700c838fa2c7b3425260f59554e502dcea39cb313b0000000000004ca7c12f45858d6284ca6270d6b2f0e58fded8a7b4a302a97bc641df07720ba2b26bbfcc807ca0abb1b44322269c21c5ec68cb068ea88067d905ea917bb03eefdaebdeabf2d0dce80997c915c8949de992587c2cb5fe36d7d3e5db21b094b8b77940b5f07722e47a08d367e5f84c96ec664b72934b99b3109af65d77e86abd6859cddf4bbae1f0930462df15fddbc48562ea3511a8065ef028cf12f14dcf6ebecd8d884836174faf1aa609e5f1ee1162dfa13bdc1fa7cfaadba85c72e9758f03a755d0be53f8d2a1dfb1c68cc164b0a0780d971a96ea2c4d4ca0398c2235980a9307b3d5bd3b01faffd0a5dbed2881a9700af561ac8c6b00000000000000f96f0e817fb903729a7db6ff957697c9ede7885d94ffb0969be0daf60af93109eb1dee72e4363f51af62af6fb2a6df3bec89822a7a0b678058fa3fef86faec216eb6992162f8dcbf719c148cd2f9c55f4901203a9a8a2c3e90f3943dbc10360a1a49700d1dfbf66d69f6fbaf506c8bcce8bb0d872a02238926407a4eddd5d0fc5a752f9000", 0x1000}}, 0x1006) ioctl$IOMMU_VFIO_IOAS$SET(r7, 0x3b88, 0x0) ioctl$IOMMU_IOAS_MAP$PAGES(r7, 0x3b85, &(0x7f0000000340)={0x28, 0x2, r8, 0x0, &(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x10}) 3m47.991960612s ago: executing program 0 (id=95): r0 = socket$inet_tcp(0x2, 0x1, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$int_in(0xffffffffffffffff, 0x40000000af01, 0x0) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0xb, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) setsockopt$IP_VS_SO_SET_STOPDAEMON(r0, 0x0, 0x48c, &(0x7f00000000c0)={0x0, 'veth1_vlan\x00'}, 0x18) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x28801, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0), 0x42280, 0x0) close(r3) ioctl$KVM_CHECK_EXTENSION(r4, 0xae01, 0x1) syz_kvm_setup_syzos_vm$x86(r3, &(0x7f0000bfe000/0x400000)=nil) ioctl$KVM_SET_MEMORY_ATTRIBUTES(r3, 0x4020aed2, 0x0) unshare(0x24020400) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_REG(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x28}, 0x1, 0x0, 0x0, 0x20000810}, 0x24000000) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x7, 0x6, 0x0, &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x94) r6 = socket$kcm(0xa, 0x1, 0x0) r7 = socket$kcm(0xa, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1000000004000000080000000200000000000000", @ANYRES32=r7], 0x50) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) ioctl$sock_kcm_SIOCKCMCLONE(r7, 0x8916, &(0x7f0000000000)={r7}) socket$kcm(0xa, 0x5, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r7, 0x8916, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r6, 0x8936, &(0x7f0000000000)={r7}) 3m43.467452301s ago: executing program 0 (id=100): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f00000001c0)='ext4_allocate_inode\x00', 0xffffffffffffffff, 0x0, 0xfdc3}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) r3 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_PR_SUPPORTED(r3, 0x84, 0x71, &(0x7f0000000000), 0x8) bind$inet(r3, &(0x7f0000000080)={0x2, 0x4e22, @remote}, 0x10) sendmsg$inet_sctp(r3, &(0x7f0000000d80)={&(0x7f0000000800)=@in={0x2, 0x4e22, @remote}, 0x10, &(0x7f0000000d00)=[{&(0x7f0000000840)='6', 0xffe0}], 0x1, 0x0, 0x0, 0x20000080}, 0x10) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, 0x0, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)=ANY=[@ANYBLOB], 0x74}}, 0x0) r5 = syz_open_dev$usbfs(&(0x7f0000000180), 0x204, 0x2581) r6 = fcntl$dupfd(r5, 0x0, r5) ioctl$USBDEVFS_SUBMITURB(r6, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000080)={0x80, 0xf, 0x0, 0x0, 0x7995}, 0x10007, 0x0, 0x0, 0x48000000, 0x0, 0x40000000, 0x0}) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000edff0000000000000000850000000f00000018010000646c012500000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000800000850000000600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x94) r7 = socket$inet6(0x10, 0x3, 0x0) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={0x0, r8}, 0x18) sendto$inet6(r7, &(0x7f00000000c0)="900000001c001f4d154a817393278bff0a80a578020000000104740014000100ac1414bb0542d6401051a2d708f37ac8da1a297e0099c5ac0000c5b068d0bf46d323456536016466fcb78dcaaf6c3efed495a46215be0000760700c0c80cefd28581d158ba86c9d2896c6d3bca2d0000000b0015009e49a6560641263da4de1df32c1739d7fbee9aa241731ae9e0b390", 0x90, 0x0, 0x0, 0x0) setsockopt$sock_int(r7, 0x1, 0x4, &(0x7f0000000040)=0xffffff5c, 0x4) 3m40.959148029s ago: executing program 0 (id=103): socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x8020) ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(r0, 0x40505330, &(0x7f0000000080)={{0x1, 0x1}, {0x4}, 0x8, 0x4}) preadv(0xffffffffffffffff, &(0x7f00000003c0), 0x0, 0x7, 0x4) ioctl$VIDIOC_ENUM_FMT(0xffffffffffffffff, 0xc0585611, &(0x7f0000000200)={0xfffffffe, 0xd, 0x3, "6e145c0ef608314ceb833d278fe1d4dd16331c3e1ef459aa6db8a9f4d600", 0x35315241}) mount$fuse(0x0, 0x0, 0x0, 0x1930bd, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) write$bt_hci(r1, &(0x7f0000000200)=ANY=[], 0x7) openat$smackfs_change_rule(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000002000/0x18000)=nil, &(0x7f00000000c0)=[@text16={0x10, &(0x7f0000000040)="0f01cb650f741065666765f36f0f330f09660f3a0cb9000000752066b9800000c00f326635004000000f300f01d7ba4100ed", 0x32}], 0x1, 0x12, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) pipe2(0x0, 0x4080) socket(0x1, 0x2, 0x0) r5 = getpid() prlimit64(r5, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x5, &(0x7f0000000180)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r6 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r6, &(0x7f0000019680)=""/102392, 0x18ff8) openat$binderfs(0xffffffffffffff9c, 0x0, 0x800, 0x0) socket$kcm(0x10, 0x2, 0x0) 3m25.809025937s ago: executing program 32 (id=103): socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x8020) ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(r0, 0x40505330, &(0x7f0000000080)={{0x1, 0x1}, {0x4}, 0x8, 0x4}) preadv(0xffffffffffffffff, &(0x7f00000003c0), 0x0, 0x7, 0x4) ioctl$VIDIOC_ENUM_FMT(0xffffffffffffffff, 0xc0585611, &(0x7f0000000200)={0xfffffffe, 0xd, 0x3, "6e145c0ef608314ceb833d278fe1d4dd16331c3e1ef459aa6db8a9f4d600", 0x35315241}) mount$fuse(0x0, 0x0, 0x0, 0x1930bd, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) write$bt_hci(r1, &(0x7f0000000200)=ANY=[], 0x7) openat$smackfs_change_rule(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000002000/0x18000)=nil, &(0x7f00000000c0)=[@text16={0x10, &(0x7f0000000040)="0f01cb650f741065666765f36f0f330f09660f3a0cb9000000752066b9800000c00f326635004000000f300f01d7ba4100ed", 0x32}], 0x1, 0x12, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) pipe2(0x0, 0x4080) socket(0x1, 0x2, 0x0) r5 = getpid() prlimit64(r5, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x5, &(0x7f0000000180)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r6 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r6, &(0x7f0000019680)=""/102392, 0x18ff8) openat$binderfs(0xffffffffffffff9c, 0x0, 0x800, 0x0) socket$kcm(0x10, 0x2, 0x0) 2m29.230762798s ago: executing program 2 (id=182): r0 = socket$inet_icmp(0x2, 0x2, 0x1) syz_open_procfs$pagemap(0x0, &(0x7f0000000140)) openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x18, 0x4, &(0x7f0000000180)=ANY=[@ANYRESDEC=r0], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x34, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) setresgid(0xee00, 0xee01, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r4, 0x84, 0x81, &(0x7f0000000280)="1a00000002000000", 0x8) r5 = syz_init_net_socket$x25(0x9, 0x5, 0x0) getsockopt$X25_QBITINCL(r5, 0x106, 0x1, 0x0, 0x0) r6 = semget$private(0x0, 0x6, 0x0) semctl$GETALL(r6, 0x0, 0xd, &(0x7f0000000040)=""/84) sendto$inet6(r4, &(0x7f0000000080)="b1", 0x1, 0x400c0d4, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @loopback, 0xffffffff}, 0x1c) execve(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) 2m27.370323444s ago: executing program 2 (id=186): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000380)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) syz_io_uring_setup(0x110, &(0x7f00000000c0)={0x0, 0x1b00, 0x0, 0x3, 0x80}, &(0x7f0000000180)=0x0, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="5c000000020603000000000000000000ffea000005000100070000000900020073797a300000000014000780080012401b0000000800084000000000050005000000001005000400000000000d000300686173683a6d6163"], 0x5c}}, 0x0) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) ioctl$TIOCSETD(r5, 0x5423, &(0x7f00000000c0)=0xf) write$P9_RGETLOCK(0xffffffffffffffff, &(0x7f0000000440)=ANY=[], 0x1f) r6 = fcntl$dupfd(r5, 0x0, r5) ioctl$TCFLSH(r6, 0x400455c8, 0x0) ioctl$TIOCSTI(r6, 0x5412, &(0x7f0000000040)=0xfc) ioctl$TIOCSTI(r6, 0x5412, &(0x7f0000000280)=0x4) ioctl$TIOCSTI(r5, 0x5412, &(0x7f0000000180)=0xff) ioctl$TIOCSTI(r5, 0x5412, &(0x7f0000000380)=0xff) ioctl$TIOCSTI(r6, 0x5412, &(0x7f00000001c0)=0xfe) syz_io_uring_submit(r3, 0x0, 0x0) 2m21.705317065s ago: executing program 2 (id=191): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x5) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00'}, 0x10) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) clock_gettime(0x8, &(0x7f0000000180)) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r3, 0x10e, 0x2, &(0x7f0000000180)=0x4, 0x4) ioctl$BTRFS_IOC_SUBVOL_CREATE(r2, 0x5000940e, &(0x7f0000000980)={{r3}, "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"}) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8000000, 0x3, 0x2f8, 0x110, 0xffffffff, 0xffffffff, 0x110, 0xffffffff, 0x228, 0xffffffff, 0xffffffff, 0x228, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00', @private1, [0xff000000, 0xffffff00, 0x6dc8f3d6512d1aed, 0xffffffff], [0xff, 0xff000000, 0xff000000], 'bond_slave_0\x00', 'batadv0\x00', {}, {}, 0x2f, 0x2, 0x3, 0xe}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, '\x00', 'syz1\x00'}}}, {{@ipv6={@dev={0xfe, 0x80, '\x00', 0x17}, @mcast1, [], [], 'veth1\x00', 'wlan1\x00'}, 0x0, 0xa8, 0x118}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x7fffffff, 0x9, 0xb3, 0x1, 0x0, "86d6b549c4bf723e1f33da7c11e5cee0b1adedc05fbfc6af15c3f8b75adf8819ec9d8cd0614114f5f1d3b7ba1d33f3750c2e3b8acf37107767e107dac4688212"}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x358) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, 0x0, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="2800000021000100"], 0x28}}, 0x4000000) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) r7 = socket$netlink(0x10, 0x3, 0x0) r8 = socket(0x2, 0xa, 0x0) sendto$packet(r8, &(0x7f0000000280)="0f30d9eec1", 0xfffffffffffffea6, 0xdd49000fcf4ce9dc, 0x0, 0x0) getsockname$packet(r8, &(0x7f0000000580)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r7, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="480000fa7b69d3363d6e8de9c292", @ANYRES32=r9, @ANYRES8=r0, @ANYRESHEX], 0x48}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000880)=@gettaction={0x14, 0x32, 0x800, 0x70bd2d, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x4000800}, 0x88) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000006c0)=@delchain={0x24, 0x2a, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r9, {0x6, 0xb}, {0x0, 0xffff}}}, 0x24}}, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000000000)=@mangle={'mangle\x00', 0x64, 0x6, 0x510, 0x2e0, 0xd0, 0x2e0, 0xd0, 0xd0, 0x5a0, 0x5a0, 0x5a0, 0x5a0, 0x5a0, 0x6, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00', 0x2, {0x0, 0x5}}}, {{@ipv6={@mcast1, @local, [], [], 'macvtap0\x00', 'ip6tnl0\x00', {}, {}, 0x11}, 0x0, 0xa8, 0xe8}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv4=@broadcast}}}, {{@ipv6={@mcast2, @loopback, [], [], 'veth0_to_team\x00', 'syzkaller0\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@MARK={0x28}}, {{@uncond, 0x0, 0xa8, 0xd0}, @inet=@DSCP={0x28}}, {{@uncond, 0x0, 0xa8, 0xe8}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv4=@dev}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x570) 2m14.347043901s ago: executing program 5 (id=122): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$int_in(0xffffffffffffffff, 0x40000000af01, 0x0) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0xb, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x28801, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0), 0x42280, 0x0) close(r2) ioctl$KVM_CHECK_EXTENSION(r3, 0xae01, 0x1) syz_kvm_setup_syzos_vm$x86(r2, &(0x7f0000bfe000/0x400000)=nil) ioctl$KVM_SET_MEMORY_ATTRIBUTES(r2, 0x4020aed2, &(0x7f0000000080)={0xf000, 0x280000, 0x8}) unshare(0x24020400) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000800), r4) sendmsg$NL80211_CMD_SET_REG(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000000000004001b0000000c00228059fe00800400008006002100", @ANYRESOCT=r5], 0x28}, 0x1, 0x0, 0x0, 0x20000810}, 0x24000000) unshare(0x80) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x7, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="05000000000000007111ae00000000008510000002000000850000000500000095000000000000009500a505000000"], &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x94) r6 = socket$kcm(0xa, 0x1, 0x0) r7 = socket$kcm(0xa, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1000000004000000080000000200000000000000", @ANYRES32=r7], 0x50) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) ioctl$sock_kcm_SIOCKCMCLONE(r7, 0x8916, &(0x7f0000000000)={r7}) r8 = socket$kcm(0xa, 0x5, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r7, 0x8916, &(0x7f0000000000)={r8}) ioctl$sock_kcm_SIOCKCMCLONE(r6, 0x8936, &(0x7f0000000000)={r7}) 2m14.341612698s ago: executing program 2 (id=202): bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000cc0)=ANY=[@ANYBLOB], &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x94) r0 = socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{0x0}, {0x0}], 0x2) bind$alg(0xffffffffffffffff, &(0x7f0000000540)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-serpent-avx\x00'}, 0x58) socket(0x1e, 0x4000000000080002, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp_SCTP_MAXSEG(0xffffffffffffffff, 0x84, 0xd, 0x0, 0xfffffffffffffc6c) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xffffffff}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0xc) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x6, 0x4, &(0x7f0000002180)=ANY=[@ANYBLOB="180200000000000000000000cfffffff850000001700000095"], &(0x7f0000000040)='syzkaller\x00'}, 0x90) r6 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'dummy0\x00', 0x0}) r8 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000080)={r5, r7, 0x25, 0x0, @void}, 0x10) r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x6, 0x5, 0x0, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100}, 0x94) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000140)={r8, r9}, 0x10) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_SET_FLAGS(r10, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)={0x28, r11, 0x1, 0x70bd2c, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x4000}, 0x8000) sendmsg$MPTCP_PM_CMD_GET_LIMITS(r0, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x14, r11, 0x800, 0x70bd2a, 0x25dfdbfd}, 0x14}}, 0x402c891) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={0x0, &(0x7f0000000f40)=""/4083, 0x0, 0xff3, 0x1, 0x1}, 0x28) 2m10.244726312s ago: executing program 5 (id=192): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0) ioctl$UI_GET_SYSNAME(r0, 0x8040552c, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'bond0\x00'}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) syz_open_dev$video4linux(&(0x7f0000001540), 0x6, 0x0) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) munlockall() socket(0x6, 0x1, 0x0) syz_open_dev$loop(0x0, 0x81, 0x2a82) r4 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$sock_TIOCINQ(r4, 0x541b, &(0x7f0000004b80)) r5 = fsopen(&(0x7f0000000240)='vfat\x00', 0x0) r6 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r6, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) connect$inet(r6, &(0x7f00000009c0)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x30}}, 0x10) writev(r6, &(0x7f0000000200)=[{&(0x7f00000000c0)='X', 0x8030000}], 0x1) timer_settime(0x0, 0x0, &(0x7f0000000100)={{0x77359400}, {0x77359400}}, 0x0) clock_gettime(0x0, &(0x7f0000000100)) munlockall() shutdown(r6, 0x1) close_range(r5, 0xffffffffffffffff, 0x0) 2m10.243726709s ago: executing program 2 (id=194): r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/uevent_helper', 0xa2a01, 0x104) write$binfmt_script(r0, 0x0, 0x0) r1 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, 0xffffffffffffffff, &(0x7f0000000040)={0x30000000}) r2 = socket$inet_udp(0x2, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000080)={0x8, 0x8000000000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = socket$inet(0x2, 0x1, 0x100) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x120}}, 0x0) setsockopt$inet_tcp_int(r4, 0x6, 0x80000000000002, 0x0, 0x0) sendto$inet(r4, &(0x7f00000012c0)="09268a927f1f6588b967481241ba7820fcfaf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55", 0x3f, 0x11, 0x0, 0x0) setsockopt$SO_BINDTODEVICE_wg(r2, 0x1, 0x19, &(0x7f00000003c0)='wg1\x00', 0x4) connect$inet(r2, &(0x7f0000000400)={0x2, 0x0, @multicast2}, 0x10) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_EVENTS(r6, 0x84, 0xb, &(0x7f00000000c0)={0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0xfe}, 0xe) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x4, &(0x7f00000004c0)=ANY=[@ANYBLOB="b400000000000000611154000000000066000000000000009500000c000000000873696d33614e2ee57dd5a154a2ae94e43150a2edbe813e570040726e46d195ecec656826699bb5d9a5bd236da1d26377330a343310cf83a36df255f237ca8c218594d970fa45d4038269416583198ed13e98e6333e060a3110d547d2b46faa492e91a84ae2b4f531ab8d522e9482063299bb473f1a523acec6ff5121b7296d64af85ec07e8e810a8dd25daedaf1aa612"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x1f2, 0x10, &(0x7f0000000000), 0xfffffe51}, 0x48) shutdown(r6, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r6, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x0, @local}]}, &(0x7f0000000440)=0x10) setsockopt$inet_sctp6_SCTP_RESET_ASSOC(r6, 0x84, 0x78, &(0x7f0000000040)=r7, 0x4) r8 = creat(&(0x7f0000000340)='./file0\x00', 0x14) read$FUSE(r8, 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f00000000c0), 0x0, 0x0) mkdir(&(0x7f0000000000)='./bus\x00', 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)) 2m5.736577904s ago: executing program 2 (id=199): bind$inet6(0xffffffffffffffff, &(0x7f0000000140)={0xa, 0x4e22}, 0x1c) listen(0xffffffffffffffff, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000180)={@local, @empty, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a8435", 0x14, 0x6, 0xff, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x1, 0x0, 0x0, 0x5}}}}}}}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x1000000008c}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x1, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xfec8d000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000400)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000820004000000000000000c00850000000f00000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r5 = socket(0x400000000010, 0x3, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000280)=@newtfilter={0x3c, 0x2c, 0xd27, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, r7, {0xe, 0x7}, {}, {0xfff3, 0x2}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS={0x8, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_VXLAN={0x4}]}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x80}, 0x0) socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000001c0), 0x4) bpf$MAP_CREATE(0x0, &(0x7f0000000240)=@base={0x1, 0x8006, 0x8, 0x8, 0x40, 0xffffffffffffffff, 0x80000}, 0x50) getpid() 2m2.982370299s ago: executing program 5 (id=206): r0 = openat$nvme_fabrics(0xffffffffffffff9c, 0x0, 0x80000, 0x0) sendmsg$NL80211_CMD_EXTERNAL_AUTH(r0, &(0x7f0000000280)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="34010000", @ANYBLOB], 0x34}, 0x1, 0x0, 0x0, 0x800}, 0x41) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000006c0)=ANY=[@ANYBLOB="800000000001010400000000141a000002fff500240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c000280050001000000000008000740000000011c00108008000140000000000800024000000000080003"], 0x80}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x8) r4 = getpid() bpf$TOKEN_CREATE(0x24, &(0x7f0000000400)={0x0, r3}, 0x8) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x5, &(0x7f00000003c0)=ANY=[@ANYBLOB="1805000000000000000000004b64ffec850000007d00000085"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x2c, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='rpc_request\x00', r5}, 0x18) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6770c000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={0x38, 0x3, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}]}, 0x38}}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) recvmmsg$unix(r8, &(0x7f0000002e00), 0x0, 0x40002120, &(0x7f0000002f00)) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) close_range(r8, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x18, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000030000000000000000000ff9500"/32], &(0x7f00000002c0)='GPL\x00', 0xf, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffc0}, 0x94) r9 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r9) ptrace$getregset(0x4204, r9, 0x1, &(0x7f0000000480)={0x0}) sendmsg$nl_generic(r0, 0x0, 0x44000) 2m0.710388871s ago: executing program 5 (id=208): r0 = socket$inet_smc(0x2b, 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x2, &(0x7f0000006680)) socket(0x18, 0x3, 0x204) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000004c0)=@bpf_ext={0x1c, 0x1, &(0x7f00000005c0)=ANY=[@ANYRES8], &(0x7f0000000280)='GPL\x00', 0x81, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x10168, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x401}, 0x94) socket$packet(0x11, 0x3, 0x300) bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB], 0x48) openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0) socket(0x25, 0x5, 0x0) setreuid(0xffffffffffffffff, 0xee00) setresuid(0x0, 0x0, 0xffffffffffffffff) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) pselect6(0xfffffefc, 0x0, 0x0, &(0x7f00000002c0)={0x3ff, 0x1, 0x3, 0x8, 0xfffffffffffffffe, 0x1, 0xfffffffffffffffe}, 0x0, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r2, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) r3 = socket$kcm(0x10, 0x2, 0x0) r4 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/igmp\x00') pread64(r4, &(0x7f0000000180)=""/15, 0xfffffe9c, 0xb6) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r3, 0x8982, &(0x7f0000000400)={0x0, 'batadv0\x00', {0x5}}) sendmsg$kcm(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000000)="2e00000010008188e6b62aa73f72cc9f0ba1f848140000005e140602000000000e000a000f000000028000001294", 0x2e}], 0x1}, 0x20000000) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r4, 0xc058534f, &(0x7f0000000100)={{0x2, 0xa1}, 0x1, 0x1, 0x2, {0x5, 0xd3}, 0x4, 0xa}) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) getsockopt$IP_VS_SO_GET_DAEMON(r0, 0x0, 0x487, &(0x7f0000000040), &(0x7f0000000200)=0x30) 1m57.552069176s ago: executing program 5 (id=212): socket$alg(0x26, 0x5, 0x0) r0 = socket$inet_smc(0x2b, 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000240)=0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x5) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000200)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_WOWLAN(r4, &(0x7f0000000e00)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)={0x1c, r5, 0x301, 0x0, 0x25dfdbfe, {{0x5}, {@void, @val={0x8, 0x3, r6}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x4044041}, 0x20000000) syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), r4) io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x8) writev(0xffffffffffffffff, 0x0, 0x0) r7 = socket(0x2, 0x80805, 0x0) setsockopt$inet_sctp6_SCTP_CONTEXT(r7, 0x84, 0x11, &(0x7f0000000440)={0x0, 0x5}, 0x8) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, &(0x7f0000000000)={0x0, 0x6}, 0x8) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000580)=@raw={'raw\x00', 0x8, 0x3, 0x4b0, 0x0, 0x25, 0x148, 0x0, 0x60, 0x418, 0x2a8, 0x2a8, 0x418, 0x2a8, 0x3, 0x0, {[{{@uncond, 0x0, 0x2f8, 0x320, 0x0, {0x200003ae, 0x7f00}, [@common=@inet=@hashlimit1={{0x58}, {'geneve0\x00', {0x44, 0x0, 0x9, 0x0, 0x0, 0xffffffff, 0x7}}}, @common=@unspec=@bpf1={{0x230, 'bpf\x00', 0x0}, @pinned={0x1, 0x0, 0x6, './file0\x00'}}]}, @common=@unspec=@AUDIT={0x28, 'AUDIT\x00', 0x0, {0x1}}}, {{@ip={@broadcast, @multicast1, 0x0, 0x0, 'veth1_to_bond\x00', 'macvlan1\x00', {0xff}}, 0x0, 0xd0, 0xf8, 0x0, {}, [@common=@ttl={{0x28}, {0x2, 0x8}}, @common=@unspec=@statistic={{0x38}, {0x0, 0x0, 0x7f}}]}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00', 0x0, {0x6}}}], {{'\x00', 0xc8, 0x70, 0x98}, {0x28}}}}, 0x510) r8 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000000)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x1, '\x00', 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0x7, 0x17, &(0x7f0000000100)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r8}, {}, {}, {0x85, 0x0, 0x0, 0x8}, {0x4, 0x1, 0xb, 0x9, 0x0, 0x8}}, {{0x6, 0x0, 0xb, 0xa}, {0xf}}, [@printk={@lu, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x1, 0x2, 0x1, 0x9}, {0x7, 0x0, 0x3}, {}, {}, {0x15}}], {{0x7, 0x1, 0x3, 0x3}, {0x5, 0x0, 0xb, 0x3}, {0x85, 0x0, 0x0, 0x76}}}, &(0x7f0000000080)='syzkaller\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) socket(0x15, 0x5, 0x0) 1m55.397366989s ago: executing program 5 (id=213): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x110b, 0x8000000000003}) r2 = openat(0xffffffffffffff9c, &(0x7f00000013c0)='./file0\x00', 0x42, 0x8) close(r2) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, 0x0, 0x440c0) pipe2(&(0x7f0000000200)={0x0, 0x0}, 0x0) fanotify_init(0x200, 0x0) listen(0xffffffffffffffff, 0x0) ioprio_set$pid(0x2, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f00000003c0)={0x8, 0x8b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) getpid() read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) syz_open_dev$ptys(0xc, 0x3, 0x0) getrlimit(0xd, &(0x7f0000000300)) setsockopt$MRT_ADD_MFC(0xffffffffffffffff, 0x0, 0xcc, &(0x7f0000000080)={@loopback, @multicast1, 0x0, "2634784b05261d387c9201200000000000000080000000000600", 0x0, 0xffffffff, 0x2005, 0xf6}, 0x3c) setsockopt$MRT_ADD_MFC(0xffffffffffffffff, 0x0, 0xcc, &(0x7f0000000000)={@empty, @multicast1, 0x1, "aaa517d60f2811d48c8a2cc60c4380bc23bd0f4eb500", 0x9, 0x8000200, 0x0, 0x7}, 0x3c) setsockopt$MRT_FLUSH(0xffffffffffffffff, 0x0, 0xd4, 0x0, 0x0) r5 = inotify_init() inotify_add_watch(r5, &(0x7f0000000280)='.\x00', 0x25000001) 1m50.115451128s ago: executing program 33 (id=199): bind$inet6(0xffffffffffffffff, &(0x7f0000000140)={0xa, 0x4e22}, 0x1c) listen(0xffffffffffffffff, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000180)={@local, @empty, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a8435", 0x14, 0x6, 0xff, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x1, 0x0, 0x0, 0x5}}}}}}}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x1000000008c}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x1, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xfec8d000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000400)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000820004000000000000000c00850000000f00000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r5 = socket(0x400000000010, 0x3, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000280)=@newtfilter={0x3c, 0x2c, 0xd27, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, r7, {0xe, 0x7}, {}, {0xfff3, 0x2}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS={0x8, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_VXLAN={0x4}]}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x80}, 0x0) socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000001c0), 0x4) bpf$MAP_CREATE(0x0, &(0x7f0000000240)=@base={0x1, 0x8006, 0x8, 0x8, 0x40, 0xffffffffffffffff, 0x80000}, 0x50) getpid() 1m40.196963601s ago: executing program 34 (id=213): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x110b, 0x8000000000003}) r2 = openat(0xffffffffffffff9c, &(0x7f00000013c0)='./file0\x00', 0x42, 0x8) close(r2) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, 0x0, 0x440c0) pipe2(&(0x7f0000000200)={0x0, 0x0}, 0x0) fanotify_init(0x200, 0x0) listen(0xffffffffffffffff, 0x0) ioprio_set$pid(0x2, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f00000003c0)={0x8, 0x8b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) getpid() read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) syz_open_dev$ptys(0xc, 0x3, 0x0) getrlimit(0xd, &(0x7f0000000300)) setsockopt$MRT_ADD_MFC(0xffffffffffffffff, 0x0, 0xcc, &(0x7f0000000080)={@loopback, @multicast1, 0x0, "2634784b05261d387c9201200000000000000080000000000600", 0x0, 0xffffffff, 0x2005, 0xf6}, 0x3c) setsockopt$MRT_ADD_MFC(0xffffffffffffffff, 0x0, 0xcc, &(0x7f0000000000)={@empty, @multicast1, 0x1, "aaa517d60f2811d48c8a2cc60c4380bc23bd0f4eb500", 0x9, 0x8000200, 0x0, 0x7}, 0x3c) setsockopt$MRT_FLUSH(0xffffffffffffffff, 0x0, 0xd4, 0x0, 0x0) r5 = inotify_init() inotify_add_watch(r5, &(0x7f0000000280)='.\x00', 0x25000001) 15.573525539s ago: executing program 3 (id=341): bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x48) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', 0x0, 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=']) read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000040)={0xfff0, 0x0, r1, {0x7, 0x1f, 0xe0000003, 0x0, 0x2, 0xf71, 0x0, 0x0, 0x0, 0x0, 0x100, 0x108}}, 0x50) syz_fuse_handle_req(r0, &(0x7f000000e3c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d838aae8c05dd22d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x0) r4 = getpid() ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r3, 0xc1105517, &(0x7f0000000080)={{0x1009, 0x2, 0x0, 0x80, 'syz0\x00'}, 0x5, 0x0, 0x1, r4, 0x0, 0x8, 'syz1\x00', 0x0}) syz_fuse_handle_req(r0, &(0x7f0000006340)="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", 0x2000, &(0x7f0000000b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x18}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) writev(0xffffffffffffffff, &(0x7f0000000200)=[{&(0x7f00000003c0)='n', 0x1}], 0x1) r5 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r6 = socket$qrtr(0x2a, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r6, 0x8914, &(0x7f0000000000)={'wlan1\x00'}) capset(&(0x7f0000000000)={0x19980330}, &(0x7f0000000180)) r7 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='oom_score_adj\x00') write$tcp_mem(r7, &(0x7f0000000100)={0x8, 0x20, 0x7418, 0x20, 0x6c}, 0x48) r8 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f00000000c0)={'wlan1\x00'}) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000000c0)={'wlan1\x00'}) 12.815480939s ago: executing program 3 (id=344): prlimit64(0x0, 0xe, &(0x7f0000000180)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) ftruncate(0xffffffffffffffff, 0x6000000) socket$nl_route(0x10, 0x3, 0x0) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x2) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000040)={0x1, 0x3, 0x0, 0x1000, &(0x7f0000fe6000/0x1000)=nil}) syz_kvm_setup_cpu$x86(r5, r6, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000080)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r3, 0xffffffffffffffff}, &(0x7f00000006c0), &(0x7f0000000700)=r2}, 0x20) recvmsg$unix(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000002380)=[{&(0x7f0000002480)=""/195, 0xc3}], 0x1}, 0x2000) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000100)={{r7}, &(0x7f0000000280), &(0x7f0000000140)=r1}, 0x22) sendmsg$inet(r1, &(0x7f0000000980)={0x0, 0x0, 0x0}, 0x0) 12.769048772s ago: executing program 1 (id=345): socket$kcm(0x29, 0x2, 0x0) socket$can_j1939(0x1d, 0x2, 0x7) syz_open_dev$dri(&(0x7f0000000340), 0x8, 0x2c2080) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000001a40)=""/102392, 0x18ff8) keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB=':syt 00N004093\x00\x00\x00\x00\x00\x00\x00\x00\x00'], 0x2a, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x1, 0x2, &(0x7f0000000280)=ANY=[@ANYBLOB="91104f000000000095"], &(0x7f00000000c0)='GPL\x00'}, 0x94) read$char_usb(0xffffffffffffffff, &(0x7f0000000040)=""/20, 0x14) r1 = add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe) mount_setattr(0xffffffffffffffff, 0x0, 0x800, &(0x7f0000001b40)={0x70, 0xb3}, 0x20) keyctl$read(0xb, 0x0, &(0x7f0000000240)=""/112, 0x349b7f55) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) umount2(&(0x7f00000002c0)='./file0/../file0\x00', 0x2) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x45}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r3}, 0x10) r4 = syz_open_dev$sndctrl(&(0x7f0000001440), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_PREFER_SUBDEVICE(r4, 0xc1485544, &(0x7f0000000080)) connect$inet(r2, &(0x7f0000003580)={0x2, 0x4e21, @dev}, 0x10) connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) add_key$user(0x0, &(0x7f0000000440)={'syz', 0x2}, &(0x7f0000000480)="6eb62ffc13578fc984d5faafb8d0736a4978a56b7afaec369885c629ae3056467a59cdd8745e539487dfc01f305313f35c383e16d434d74b9d621ae7f772e3d172da67d880a91d6a032dfb3ca177a628aeeb5364ae22ba04d968dc6183b8b7c38d64a33d1d7977ce21b45db9d0e65b83c3f66a7bd103ad2cc345fef6a606fa7b72e56d65510abff546c096447ee70ca1bbd2ba27864ceabe8ad9700831ca628b8ff1ba0008ed413d35adcd9c49ef5cb94729009014ae73a44eba61e41e51751fe0eeb9f2ac44b5938d8fe78ae818043646e56878b997a73e9b9297a976bf47377f61771f", 0xe4, r1) keyctl$read(0xb, r1, &(0x7f0000000240)=""/112, 0x349b7f55) mount$cgroup2(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x18000, &(0x7f0000000300)={[{@memory_hugetlb_accounting}]}) 12.387094753s ago: executing program 3 (id=346): socket$kcm(0x29, 0x2, 0x0) socket$can_j1939(0x1d, 0x2, 0x7) syz_open_dev$dri(&(0x7f0000000340), 0x8, 0x2c2080) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000001a40)=""/102392, 0x18ff8) keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB=':syt 00N004093\x00\x00\x00\x00\x00\x00\x00\x00\x00'], 0x2a, 0x0) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) umount2(&(0x7f00000002c0)='./file0/../file0\x00', 0x2) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00'}, 0x10) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_PREFER_SUBDEVICE(0xffffffffffffffff, 0xc1485544, &(0x7f0000000080)) connect$inet(r1, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) keyctl$read(0xb, 0x0, &(0x7f0000000240)=""/112, 0x349b7f55) ioctl$DRM_IOCTL_MODE_GETPLANE(0xffffffffffffffff, 0xc02064b6, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x6, &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) 11.880387552s ago: executing program 1 (id=348): syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket$inet_sctp(0x2, 0x5, 0x84) socket$inet6_mptcp(0xa, 0x1, 0x106) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x44}, 0x1, 0x0, 0x0, 0x40040c0}, 0xc000) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$nl_generic(0x10, 0x3, 0x10) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000000)={'#! ', './file0', [{0x20, 'axA\x9b^\xfb^$\r\'uij\r\xd9\xef\xd2Et^Q\v\x9fOFL\x95`Z\xae\xc3a\xfe%\x94\x1a\xebt\xc6\x06\x8fD,\xf7\xae#\x80\x80\xdf\xa3\xcaO\xc6\x8a\x91\x90\xadR\aW\xe1\xf3n\xca\xa3\x8f\xd6F\x03\x0e\x9b\xe5yb\xfc\xa19wUs\x83\xf1{&\n\x1d\x8e\x82y\x1a.B\x0e\xea\x17\xc7\xe7H\xa9\xd4\x8e\xe7 gD\x89*\xb5c\xc5\x8a\xe6R\xe5YGq\xf5\xb6\x95\xbc\x112\x9bno\xc8\x06\xb6\b\xcc\x03{Sn\x94G\x01\xb4\xffJQ8t\x99vY\xaaf\xc7,\x9f\xbb\x15G\x1cr\x19\xef\xab\n\xa8\xbc\xbd\xa2E\x16\x1cm\xbd=\x98\x7fU\xcbg\x15%\x95\xb11\x017\x83*\x14\xcbt\xc2\xcb\x04\x1e~?\xb9j\x18\x96\x84EA\xeaB\a\x83\xba\xdco<\x00'/256}]}, 0x10c) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r2 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$sock_netdev_private(r2, 0x8914, &(0x7f0000000000)) r3 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$sock_rose_SIOCADDRT(r3, 0x890b, &(0x7f0000000380)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0x3}, 0x6, @null, @bpq0, 0x0, [@bcast, @bcast, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}) socket(0x2, 0x80805, 0x7f) r4 = syz_init_net_socket$rose(0xb, 0x5, 0x0) connect$rose(r4, &(0x7f0000000040)=@short={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, 0x1, @default}, 0x1c) connect$rose(r4, &(0x7f0000000100)=@full={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x0, [@null, @null, @null, @default, @bcast, @default]}, 0x40) r5 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000700), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r5, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) 10.312231436s ago: executing program 3 (id=349): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x180, 0x0) ioctl$TIOCGSOFTCAR(r0, 0x5414, &(0x7f0000000000)) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, 0x0, 0x0) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, 0x0, 0x0, 0x2, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) r3 = syz_open_dev$sndctrl(&(0x7f0000000080), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_TLV_READ(r3, 0xc008551a, &(0x7f0000001100)=ANY=[@ANYBLOB="030000001000"/15]) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) bind$alg(0xffffffffffffffff, 0x0, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000140)='net/ip6_flowlabel\x00') pread64(r5, &(0x7f0000001600)=""/4103, 0x1007, 0x9b) pipe2$9p(&(0x7f0000000240), 0x0) r6 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r6, 0x29, 0x20, &(0x7f00000000c0)={@mcast1, 0x800, 0x0, 0x103, 0x1}, 0x20) setsockopt$inet6_int(r6, 0x29, 0x1000000000021, &(0x7f00000005c0)=0x1, 0x4) sendmsg$inet6(r6, &(0x7f0000000600)={&(0x7f0000000080)={0xa, 0x4e20, 0x1000000080000, @dev={0xfe, 0x80, '\x00', 0x25}}, 0x1c, 0x0, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000000000029000000040000"], 0x30}, 0x0) r7 = memfd_create(&(0x7f0000000100)='-B\xd5NI\xc5j\x98\b\x00\x00\x00\b\x84\xa2{\x00\v\x18\x004\x03\x96\x00\x00\xcf\xb0\x18\xd3\xad*\xd7Uw\x00\xbc\xfa2\xb3\xbb\x8d\xac\xacva}knh#\xcf)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8b\x066\xb8G\xd1c\xe1$\xff\x97k\xde\xc5\xe96\xddU)\xc98M\xcd\xfb+Y\x9e\r\xc83\x12\xd7\xdb\x93\xcc]x\xaa\x8f~\xb90a\xa9\xb2\x041=\x9f\x99\xabQ\xf6\a\x81\x01\xe5\x98\t\x1d\xa1\xce\x8b\x19\xea\xef\xe3\x00\x00\x00\x00\x00\x00\x00\x00\x00\xa9\xf0I{\x00\x00\xd7\x802\xf3\r|\x86\x82\xf1\xb2\x06\xb0\x1e\xd6l\xbc_\xcb\xec\x83#?\xf4\x81\x16+\x14\xd0\xb8\x88RW\xa9\xef\xe9\"]\xa8W?r\x88\xe6K\xc1gb\xc0\x9d\"*\xe2X\xb5#', 0x7) dup(r7) fanotify_init(0x2, 0x40000) syz_open_dev$vbi(0x0, 0x0, 0x2) ppoll(&(0x7f0000000180), 0x0, 0x0, 0x0, 0x0) close(0x3) 8.67597446s ago: executing program 1 (id=351): signalfd(0xffffffffffffffff, &(0x7f0000000140), 0x8) r0 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000080)={'vxcan1\x00', 0x0}) bind$can_raw(r0, &(0x7f00000000c0)={0x1d, r1}, 0x10) setsockopt$CAN_RAW_ERR_FILTER(r0, 0x65, 0x2, &(0x7f0000000000)=0x5cfa, 0x4) setsockopt$CAN_RAW_FILTER(r0, 0x65, 0x1, 0x0, 0x0) bind$can_raw(r0, &(0x7f0000000480), 0x10) syz_io_uring_setup(0x38a9, 0x0, &(0x7f00000000c0)=0x0, &(0x7f0000000140)=0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) syz_emit_vhci(0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r7 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r7, 0x6, 0x0, 0x0, 0x0) r8 = fsmount(r7, 0x1, 0x0) fchdir(r8) ioprio_set$pid(0x3, 0x0, 0x0) r9 = open(&(0x7f0000000040)='./file1\x00', 0x80242, 0x0) write$FUSE_CREATE_OPEN(r9, 0x0, 0x0) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r10, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x16}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x14}]}, @NFT_MSG_NEWSETELEM={0x50, 0xc, 0xa, 0x301, 0x0, 0x0, {0x1}, [@NFTA_SET_ELEM_LIST_SET_ID={0x8}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x28, 0x3, 0x0, 0x1, [{0x24, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0x20, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x1a, 0x1, "10c4e3257eaa66a5725a38cd58d26115453baa910be0"}]}]}]}]}], {0x14, 0x10}}, 0xdc}}, 0x0) syz_io_uring_submit(r2, r3, 0x0) 7.531677556s ago: executing program 4 (id=352): socket$nl_generic(0x10, 0x3, 0x10) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) move_pages(0x0, 0xffffffffffffff55, 0x0, 0x0, 0x0, 0x0) sendmsg$can_bcm(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, 0x0}, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000180)={0xc, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x4) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=ANY=[@ANYBLOB="4c00000002060108000034e40000000000000000050001000600000005000400000000000900020073797a3100000080050005000200000011000300686173683a69702c706f7274"], 0x4c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$IPSET_CMD_ADD(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[@ANYBLOB="50000000090601020000000000000000020000840900020073797a31000000000500010007000000280007800c00018008000140fffffff70500070084000000060004404e22000006000540"], 0x50}, 0x1, 0x0, 0x0, 0x10000082}, 0x90) r5 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r5, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x47) setsockopt$inet_tcp_int(r5, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r5, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4) connect$inet(r5, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) sendmsg$sock(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000240)="5b63392b41febc78767f2c24eb5b020ff1b2de985295fe3c67b1be419eeb1d13daf99fe36f4d8aed1aef9d92bf5d5bbe250c5c01046ad658897799292f678394714da261743da93315daf6fd850c9a9f7b31", 0x52}], 0x1}, 0x8000) sendto$inet(r5, &(0x7f0000000200)=';', 0x1, 0x20004810, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r5, 0x6, 0x16, &(0x7f0000000340)=[@timestamp, @window={0x3, 0x6, 0x7}, @mss={0x2, 0x7}, @window={0x3, 0x0, 0x4}, @window={0x3, 0x8, 0x6}, @timestamp, @window={0x3, 0xfffe}, @sack_perm], 0x2000000000000061) setsockopt$inet_tcp_TCP_REPAIR(r5, 0x6, 0x13, &(0x7f00000001c0), 0x4) sendto$inet(r5, &(0x7f00000004c0)='<', 0x381, 0x805, 0x0, 0x0) 7.416666891s ago: executing program 3 (id=353): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) openat$sndseq(0xffffff9c, &(0x7f0000000000), 0x8000) openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x147c40, 0x0) r2 = getpid() syz_pidfd_open(r2, 0x0) syz_usb_connect(0x6, 0x75, &(0x7f0000000780)=ANY=[@ANYBLOB="1201010240d85bc7b1132200345c010203010902630002040828072406020000000524001c620d240f0100000000020005f29011cc03080353ee97050a2401f90a000201020924030607"], &(0x7f0000000280)={0xa, &(0x7f0000000100)={0xa, 0x6, 0x250, 0x9, 0x2, 0xf4, 0x20, 0x93}, 0x0, 0x0}) r3 = syz_open_dev$video4linux(&(0x7f0000000140), 0xf, 0x103205) ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(r3, 0xc0305602, &(0x7f0000000000)={0x0, 0x8}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r4 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r7 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x8400, 0x0) prlimit64(r4, 0x7, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000180)=0x4) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r8, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="6c00000002060104db406e3e0004000200000000100003006269746d61703a706f72740005000400000000000900020073797a32000000000500050000006c00050001000600000024000780080008400000137906000440fffff000060005400000000008"], 0x6c}}, 0x0) sched_setaffinity(0x0, 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r7, 0x40186f40, &(0x7f0000000440)=0x1f) syz_clone(0x120e1100, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$TIOCL_SETSEL(r1, 0x541c, &(0x7f0000001900)={0x2, {0xc, 0x117, 0x5, 0xffff, 0x100}}) 4.783973639s ago: executing program 4 (id=354): prlimit64(0x0, 0xe, &(0x7f0000000180)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) ftruncate(0xffffffffffffffff, 0x6000000) socket$nl_route(0x10, 0x3, 0x0) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x2) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000040)={0x1, 0x3, 0x0, 0x1000, &(0x7f0000fe6000/0x1000)=nil}) syz_kvm_setup_cpu$x86(r5, r6, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000080)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r3, 0xffffffffffffffff}, &(0x7f00000006c0), &(0x7f0000000700)=r2}, 0x20) recvmsg$unix(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000002380)=[{&(0x7f0000002480)=""/195, 0xc3}], 0x1}, 0x2000) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000100)={{r7}, &(0x7f0000000280), &(0x7f0000000140)=r1}, 0x22) sendmsg$inet(r1, &(0x7f0000000980)={0x0, 0x0, 0x0}, 0x0) 4.444597319s ago: executing program 4 (id=355): prlimit64(0x0, 0xe, &(0x7f0000000180)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000400)=@abs={0x0, 0x0, 0x4e24}, 0x6e) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000ac0)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000786c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000fdffffff850000002d00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xa, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={0x0, r2}, 0x18) ftruncate(0xffffffffffffffff, 0x6000000) socket$nl_route(0x10, 0x3, 0x0) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x2) ioctl$KVM_SET_USER_MEMORY_REGION(r7, 0x4020ae46, &(0x7f0000000040)={0x1, 0x3, 0x0, 0x1000, &(0x7f0000fe6000/0x1000)=nil}) ioctl$KVM_RUN(r8, 0xae80, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r5, 0xffffffffffffffff}, &(0x7f00000006c0), &(0x7f0000000700)=r4}, 0x20) recvmsg$unix(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000002380)=[{&(0x7f0000002480)=""/195, 0xc3}], 0x1}, 0x2000) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000100)={{r9}, &(0x7f0000000280), &(0x7f0000000140)=r3}, 0x22) sendmsg$inet(r3, &(0x7f0000000980)={0x0, 0x0, 0x0}, 0x0) 3.981852153s ago: executing program 1 (id=356): ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f0000000540), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x5) setsockopt$inet_tcp_int(r1, 0x6, 0x19, 0x0, 0x0) bind$inet(r1, &(0x7f0000000100)={0x2, 0x4e24, @loopback}, 0x10) sendmmsg$inet(r1, &(0x7f0000004980)=[{{&(0x7f0000000000)={0x2, 0x4e24, @loopback}, 0x10, &(0x7f0000000040)}}], 0x1, 0x20008000) setrlimit(0x8, &(0x7f0000000980)={0x42, 0x62}) fcntl$getown(0xffffffffffffffff, 0x5) r2 = syz_open_pts(0xffffffffffffffff, 0x0) r3 = socket$inet6(0x18, 0x5, 0x1) setsockopt$sock_int(r3, 0xffff, 0x800, 0x0, 0x0) poll(&(0x7f0000000000)=[{r2, 0x44}], 0x37, 0x7) syz_usbip_server_init(0x1) r4 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r4, 0xaf01, 0x0) r5 = eventfd(0xffffffff) ioctl$VHOST_SET_LOG_FD(r4, 0x4004af07, &(0x7f0000000240)=r5) ioctl$VHOST_SET_VRING_KICK(r4, 0x4008af20, &(0x7f0000000040)={0x1, r5}) ioctl$VHOST_SET_VRING_ADDR(r4, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000300)=""/71, 0x0}) r6 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r6, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x0, 0x81, 0x1ff, 0x1, 0x1}, 0x1c) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r7, 0x0, 0x0) 3.756697592s ago: executing program 3 (id=357): bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={0x0, 0x0, 0x26}, 0x28) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x20080, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x8000002000000, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) mount$9p_rdma(0x0, 0x0, 0x0, 0x1000800, 0x0) r3 = creat(&(0x7f0000000000)='./bus\x00', 0x8) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r3, 0x6, 0x14, &(0x7f0000000240), 0x4) mount$fuse(0x0, 0x0, 0x0, 0x0, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r4, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) bind$inet(r4, 0x0, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$fou(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$FOU_CMD_ADD(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)={0x34, r6, 0x1, 0x0, 0x10, {}, [@FOU_ATTR_PEER_PORT={0x6, 0xa, 0x4e22}, @FOU_ATTR_PEER_V4={0x8, 0x8, @multicast2}, @FOU_ATTR_TYPE={0x5, 0x4, 0x2}, @FOU_ATTR_LOCAL_V4={0x8, 0x6, @local}]}, 0x34}}, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r4, 0x6, 0xd, 0x0, 0x0) connect$inet(r4, &(0x7f0000000180)={0x2, 0x4e1d, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r4, 0x6, 0x13, &(0x7f00000001c0), 0x4) sendto$inet(r4, &(0x7f0000000000), 0x0, 0xb, 0x0, 0x0) r7 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r7, 0x84, 0x9, 0x0, 0x0) bind$inet6(r7, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) socketpair$unix(0x1, 0x5, 0x0, 0x0) 3.160224916s ago: executing program 4 (id=358): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x110b, 0x8000000000003}) r2 = openat(0xffffffffffffff9c, &(0x7f00000013c0)='./file0\x00', 0x42, 0x8) close(r2) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, 0x0, 0x440c0) pipe2(&(0x7f0000000200)={0x0, 0x0}, 0x0) fanotify_init(0x200, 0x0) ioprio_set$pid(0x2, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f00000003c0)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) getpid() read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) syz_open_dev$ptys(0xc, 0x3, 0x0) getrlimit(0xd, &(0x7f0000000300)) setsockopt$MRT_ADD_MFC(0xffffffffffffffff, 0x0, 0xcc, &(0x7f0000000080)={@loopback, @multicast1, 0x0, "2634784b05261d387c9201200000000000000080000000000600", 0x0, 0xffffffff, 0x2005, 0xf6}, 0x3c) setsockopt$MRT_ADD_MFC(0xffffffffffffffff, 0x0, 0xcc, &(0x7f0000000000)={@empty, @multicast1, 0x1, "aaa517d60f2811d48c8a2cc60c4380bc23bd0f4eb500", 0x9, 0x8000200, 0x0, 0x7}, 0x3c) setsockopt$MRT_FLUSH(0xffffffffffffffff, 0x0, 0xd4, 0x0, 0x0) r5 = inotify_init() r6 = inotify_add_watch(r5, &(0x7f0000000280)='.\x00', 0x25000001) inotify_rm_watch(r5, r6) socket(0x400000000010, 0x3, 0x0) 2.256649091s ago: executing program 1 (id=359): socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4) bind$inet6(0xffffffffffffffff, 0x0, 0x0) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x8, 0x4, &(0x7f00000001c0)=ANY=[@ANYBLOB="b4000000000000007311320000000000166400000000010095007400"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @cgroup_skb}, 0x94) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0xffffe000, 0x3}, 0x0) socket$kcm(0x2d, 0x2, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000040)='net/ip_vs\x00') preadv(r3, &(0x7f0000000380)=[{&(0x7f0000000080)=""/83, 0x53}], 0x1, 0xc9, 0x1) madvise(&(0x7f00005ce000/0x3000)=nil, 0x3000, 0xb) pread64(r2, &(0x7f0000000400)=""/154, 0x9a, 0x51) pipe2$watch_queue(0x0, 0x80) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'batadv_slave_1\x00'}) set_mempolicy(0x3, &(0x7f0000000000)=0x7, 0x7) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0), 0xffffffffffffffff) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r5, 0x89b1, &(0x7f0000000900)={'bond0\x00', @random="0600002000"}) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_DELFLOWTABLE={0xf0, 0x18, 0xa, 0x101, 0x0, 0x0, {0x3, 0x0, 0x7}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_FLAGS={0x8, 0x7, 0x1, 0x0, 0x3}, @NFTA_FLOWTABLE_HOOK={0xbc, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_DEVS={0x2c, 0x3, 0x0, 0x1, [{0x14, 0x1, 'ip6gretap0\x00'}, {0x14, 0x1, 'vlan0\x00'}]}, @NFTA_FLOWTABLE_HOOK_DEVS={0x40, 0x3, 0x0, 0x1, [{0x14, 0x1, 'wg0\x00'}, {0x14, 0x1, 'vcan0\x00'}, {0x14, 0x1, 'geneve0\x00'}]}, @NFTA_FLOWTABLE_HOOK_DEVS={0x2c, 0x3, 0x0, 0x1, [{0x14, 0x1, 'syzkaller0\x00'}, {0x14, 0x1, 'bridge_slave_0\x00'}]}, @NFTA_FLOWTABLE_HOOK_DEVS={0x4}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_DEVS={0x4}]}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz1\x00'}]}], {0x14}}, 0x118}, 0x1, 0x0, 0x0, 0x40000}, 0x0) keyctl$negate(0xd, 0x0, 0x8, 0x0) sendmsg$TIPC_NL_BEARER_ADD(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=ANY=[], 0x60}, 0x1, 0x0, 0x0, 0x4000080}, 0x20000000) r6 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="180000001814010000e9ffffffffffff070001"], 0x18}}, 0x0) 1.799991721s ago: executing program 4 (id=360): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f000001a300)=""/102400, 0x19000) syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TCGETA(0xffffffffffffffff, 0x5405, &(0x7f0000000080)) r1 = socket$packet(0x11, 0x3, 0x300) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000001a40)={0x11, 0x5, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000030000000000000000000000850000000700000085000000110000009500000000000000c4adcb2d5c1f2b484f35b4f33c6f8d3f42ed805a6ba7a3d5e3522b91e8d585638a762cb7af2c2642d97d03afb3f2ac24da57d156704e199518f4cab636aa723c7eb2b07ca274b5807afff01d75504219ef69a9a2a57c2fb2315a42965ed714431005a49fb77b1a73a72ce2f9f2ccb1e5da2e8212c76d33cad737e187d1debc0acad2683bb4e0b8bbb5b63496fcdbaa0984e1b91701d0886346fe7a3a4e3bc9d7"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001b40)={r2, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000240)={'batadv_slave_1\x00'}) r3 = socket$key(0xf, 0x3, 0x2) pipe2(&(0x7f0000000180)={0xffffffffffffffff}, 0x0) getsockopt$inet_sctp6_SCTP_MAX_BURST(r4, 0x84, 0x14, &(0x7f0000000300)=@assoc_value, &(0x7f0000000340)=0x8) r5 = syz_init_net_socket$bt_rfcomm(0x1f, 0x3, 0x3) ioctl$sock_SIOCGIFVLAN_GET_VLAN_REALDEV_NAME_CMD(r5, 0x8982, &(0x7f0000000480)={0x8, 'ip6erspan0\x00', {'ip6gretap0\x00'}}) sendmsg$key(r3, &(0x7f0000000100)={0x3, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="0203f30216000000000000000000000002001b0008000000e9000000000000000300060000000000020000000000000000000000000000000200010000000000000003fcff000020030005000000000002000000ac1414aa00000000000000000a00080008"], 0xb0}, 0x1, 0x7}, 0x0) r6 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180), 0x109842, 0x0) ioctl$SNDCTL_DSP_SETFMT(r6, 0xc0045005, &(0x7f0000000040)=0x3fe) mmap$dsp(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2, 0x12, r6, 0x0) write$dsp(r6, 0x0, 0x0) r7 = openat$cachefiles(0xffffffffffffff9c, &(0x7f00000000c0), 0x200c00, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANE(0xffffffffffffffff, 0xc02064b6, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000200)=[0x0]}) read$FUSE(r7, &(0x7f0000001bc0)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) prctl$PR_SCHED_CORE(0x3e, 0x0, r8, 0x3, &(0x7f00000004c0)) r9 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0) ioctl$KVM_CREATE_VM(r9, 0xae01, 0x0) eventfd(0x1008c66) 474.112368ms ago: executing program 4 (id=361): ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454d9, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={0x0}, 0x10) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000001400)={r0}) sendmmsg$alg(r1, &(0x7f0000000300)=[{0x0, 0x0, &(0x7f0000000200)=[{0x0}], 0x1, &(0x7f0000000240)=ANY=[@ANYBLOB], 0xa0, 0x200040d4}], 0x1, 0x20008852) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="9feb010018000000000000002400000024000000090000000400000003000006040000000400000007000000020000000400000004000000fcffffff002e71a061"], 0x0, 0x45, 0x0, 0x1, 0x80000001}, 0x28) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000180)={'batadv0\x00', 0x0}) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001700)=ANY=[@ANYBLOB="1800000024000103000000000000000001008c000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x8001}, 0x4000) recvmmsg(r6, &(0x7f0000004ec0)=[{{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000002c0)=""/4082, 0xff2}, {0x0}], 0x2}, 0x5}], 0x1, 0x2000, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001380)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="1b00040000000000140012800c0001006d6163766c616e000400028008000500", @ANYRES32=r4, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r5, @ANYRESDEC=r4], 0x44}, 0x1, 0x0, 0x0, 0x1}, 0x4000040) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_GET(r8, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000680)={0x14, 0x1, 0x2, 0x201, 0x0, 0x0, {0xa, 0x0, 0x7}}, 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x40) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r9, &(0x7f0000001440)={0x0, 0x0, 0x0}, 0x0) sendmsg$NFQNL_MSG_CONFIG(r9, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, 0x2, 0x3, 0x3, 0x0, 0x0, {0x0, 0x0, 0x10}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1}}]}, 0x1c}}, 0x0) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DESTROY(r10, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)={0x28, 0x3, 0x6, 0x401, 0x0, 0x0, {0x2, 0x0, 0x6}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x48090}, 0x40000) close(r8) r11 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000440)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r11, @ANYBLOB="6d9310000000f4dbdf25010000000c00060000000000020000000800010000000000"], 0x28}, 0x1, 0x0, 0x0, 0x20048890}, 0x880) r12 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000040)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x15, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r12}, {}, {0x7, 0x0, 0xb, 0x6}, {0x85, 0x0, 0x0, 0x5}, {0x4}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x6, 0xa, 0x9, 0xfff0, 0xf1}, {0x5, 0x0, 0xb, 0x9}, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x6, 0x1, 0xb, 0xa, 0x8}, {0x7, 0x0, 0x0, 0x8}, {0x7, 0x1, 0xb, 0x4, 0x9}, {}, {}, {0x18, 0x6, 0x2, 0x0, r2}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @sk_reuseport, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 0s ago: executing program 1 (id=362): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=@updpolicy={0xfc, 0x19, 0x1, 0x0, 0x0, {{@in6=@rand_addr=' \x01\x00', @in=@local, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa9, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0x6a6f396b, 0x40800000000000, 0x800000000000000}}, [@tmpl={0x44, 0x5, [{{@in=@local, 0x0, 0x3c}, 0x0, @in=@broadcast, 0x0, 0x0, 0x3}]}]}, 0xfc}}, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) bpf$MAP_CREATE(0x0, 0x0, 0x48) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) msgctl$MSG_STAT(0x0, 0xb, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000380)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) keyctl$unlink(0x9, 0x0, 0x0) socket$kcm(0x2, 0x200000000000001, 0x0) unshare(0x2040400) r5 = mq_open(&(0x7f0000001140)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\xee\x1084\xff)\x89\xd6\xb6!\xae\xf79k\x90\x8d\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xd3\xa7\xd8J\xfd\x94#KT\xdd\x14\xd3\xe1\xbe_$A=z\xd7\xbd/X\xbemOX)s\x94\xde\xbe_\x88N\xb8\xde\xeb)\xcd\xc56m\n\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88|0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc\x02\xea\x91\xe8\xd8\x01YZy\xe6!\x89\x9c\xd1\xa6\x167\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1[\x84\x10aF\x9b\xda\xeb\xc4*\x02q\xb2\x92\x00\x8cv\xac\x00AN\xb9\xaa\xe0\x9d\x97Te\x81\x98L\xfe\x97+u\xd3^\xb1\xf0\xe0\x1fOR\x86R\x97\xcf\xf9\xbd\a\xbb\xe5\x18\x9ds\x12ha\x00\xeb\x84\x99\xc6\x0f\xf1\xd5LD\xa87\xa0DQ\x8a2\x16!8,\xbc%$\xf1\xf2\xd6\x9cy\xecK\xda\xc5\xdc\xfa\xdd\xf6\b\xc6\xb4\x14\x16\x9c\x7f\x92\x85\xb0\xa2%:\xf0\xf4\x150\x0f\xb4\x00\x00\xb4\xe4L\x19W\xd5\x90\xf7l\x1b\xfe\xde\vh\x97=m\x82.\xac\vh\xfe\x84Q}\x838/\x83\xebP\xbe\xd6+:\xceE\\\x95\xd4\xac\x92\x87\xd7\x98\x97\xe3\xec\xad\xd5\xac\x80C\x84R\x88r^g\xbaQ(\x9a>\xe2\xba\xa8=\x17\f04\x8f\x1f\xf2\x88*@v\xe7\xd1\xee\xb3\xc2\x8dT\xda\x81g\xd9\x1a:h\x1e\xcd\v\xe5L\x19\x96s\xbc\x9e\xf4\x10$\r\xa4\xd8\xa2\xa2\xfcM\xc5R3~%\xc2\f\xaebJ\xa8\xef\'\xcc<$\xdf\x15\f]\x15u#G\xce\xaf\x88U\xfa\x80\xf24\xf6\xb5\xef\xe2z\xcf\x9eN\x92\xac\x81{\xe6\xbd\xd7\x16\xe6F\xe2\x9e\x91%\x94\v\xb9\xdc\xd6\x87\x8f\xcd\xc1\xb05\x81\x81\xf8\xe9X\xe8Kt9@\xf4\xe1\xa6=\xc9\xe1:p4\nP[f\x1d\xfd\xfa\x839\x8d\x0e\xd1\xf9\xa0\xd2^E\xe5\xedo.\xaa\xf2\xb4\xcdn\x14\f\xcd\x83_yk\xda\xc5\x89\xf0Z\xea\x1d\xbd\xc00\v\xa3\xb3\xbe\xe6\x8b\x18/\xa8\xaaY\xf2\x89\x0f\x9enOOr\x00\xb2\x01\x1f:Z\xb8\xee;\xe3;\x8aPV\xce\xee\xf8[\x16\n\xe6:z\xb8\x1dvk\a{\xc1\x14\xd9\x90y\xe8\\\xe6\xfc\xca\xb4\xcbC\xd6\xd0\xbeC\xce\xc0L\xdb\xcd\xb3\x907c\xb4\xa6\xce\xdb[\xce\x122N\xa3\xc7Q<\x1a\xa5\xb3)\xc5\x98\x84\x8a\x82\x19\xb0\t\xac\x10\\\x8c\xbe\xcb\raIYe[\xa8\xc4\xac\x0e\xbb\x0f\b^\xdag\xe2\xa9\"\xf5h\'\xcf\xd9\x1b\xef\xe3\xe7y\x82\x1e\xca\x7f\x02 \xcf\x9e\xe0\xd9TM\xb9\n\xa9\xad3\x91\xa5\xe6!\xcd\xa2\xa4\x14\x12\xf9\x06\x00\x00\x00\x00\x00\x00\x00\f\f\x957\xc9}\x00'/894, 0x40, 0x1f0, 0x0) mq_timedsend(r5, 0x0, 0x2000, 0x6, 0x0) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000009c0)=@migrate={0xcc, 0x21, 0x1, 0x0, 0x4, {{@in6=@private2, @in6=@private2, 0x0, 0x0, 0x0, 0x0, 0xa}}, [@migrate={0x50, 0x11, [{@in6=@mcast2, @in=@private=0xa010100, @in=@private=0xa010100, @in=@rand_addr=0x6, 0x3c, 0x0, 0x0, 0x0, 0xa, 0xa}]}, @user_kmaddress={0x2c, 0x13, {@in=@loopback, @in=@multicast1, 0x0, 0xa}}]}, 0xcc}}, 0x0) r7 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r8 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_subtree(r8, &(0x7f0000000200), 0x2, 0x0) rmdir(&(0x7f0000000080)='./cgroup/../file0\x00') close_range(r7, 0xffffffffffffffff, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.118' (ED25519) to the list of known hosts. [ 90.008509][ T5823] cgroup: Unknown subsys name 'net' [ 90.202501][ T5823] cgroup: Unknown subsys name 'cpuset' [ 90.211860][ T5823] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 91.878681][ T5823] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 96.331902][ T5851] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 96.340249][ T5851] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 96.349126][ T5851] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 96.357283][ T5851] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 96.367724][ T5851] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 96.374951][ T5849] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 96.375834][ T5851] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 96.390861][ T5857] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 96.398912][ T5851] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 96.410887][ T5851] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 96.418994][ T5851] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 96.427867][ T5851] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 96.436085][ T5855] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 96.439259][ T5858] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 96.444866][ T5856] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 96.459929][ T5851] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 96.480621][ T5856] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 96.498537][ T5856] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 96.501427][ T51] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 96.512383][ T5849] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 96.521405][ T5856] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 96.530159][ T5856] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 96.537306][ T5849] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 96.552178][ T5849] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 96.568012][ T5856] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 97.271867][ T24] cfg80211: failed to load regulatory.db [ 97.349363][ T5837] chnl_net:caif_netlink_parms(): no params data found [ 97.382233][ T5838] chnl_net:caif_netlink_parms(): no params data found [ 97.395769][ T5836] chnl_net:caif_netlink_parms(): no params data found [ 97.437048][ T5846] chnl_net:caif_netlink_parms(): no params data found [ 97.534144][ T5850] chnl_net:caif_netlink_parms(): no params data found [ 97.762791][ T5836] bridge0: port 1(bridge_slave_0) entered blocking state [ 97.770237][ T5836] bridge0: port 1(bridge_slave_0) entered disabled state [ 97.777700][ T5836] bridge_slave_0: entered allmulticast mode [ 97.785513][ T5836] bridge_slave_0: entered promiscuous mode [ 97.847197][ T5836] bridge0: port 2(bridge_slave_1) entered blocking state [ 97.854498][ T5836] bridge0: port 2(bridge_slave_1) entered disabled state [ 97.863580][ T5836] bridge_slave_1: entered allmulticast mode [ 97.871391][ T5836] bridge_slave_1: entered promiscuous mode [ 97.878953][ T5837] bridge0: port 1(bridge_slave_0) entered blocking state [ 97.886265][ T5837] bridge0: port 1(bridge_slave_0) entered disabled state [ 97.893629][ T5837] bridge_slave_0: entered allmulticast mode [ 97.901060][ T5837] bridge_slave_0: entered promiscuous mode [ 97.924448][ T5838] bridge0: port 1(bridge_slave_0) entered blocking state [ 97.931776][ T5838] bridge0: port 1(bridge_slave_0) entered disabled state [ 97.940082][ T5838] bridge_slave_0: entered allmulticast mode [ 97.947547][ T5838] bridge_slave_0: entered promiscuous mode [ 97.988879][ T5837] bridge0: port 2(bridge_slave_1) entered blocking state [ 97.996171][ T5837] bridge0: port 2(bridge_slave_1) entered disabled state [ 98.003936][ T5837] bridge_slave_1: entered allmulticast mode [ 98.011639][ T5837] bridge_slave_1: entered promiscuous mode [ 98.033816][ T5846] bridge0: port 1(bridge_slave_0) entered blocking state [ 98.041483][ T5846] bridge0: port 1(bridge_slave_0) entered disabled state [ 98.048913][ T5846] bridge_slave_0: entered allmulticast mode [ 98.056503][ T5846] bridge_slave_0: entered promiscuous mode [ 98.064379][ T5838] bridge0: port 2(bridge_slave_1) entered blocking state [ 98.072341][ T5838] bridge0: port 2(bridge_slave_1) entered disabled state [ 98.080447][ T5838] bridge_slave_1: entered allmulticast mode [ 98.087963][ T5838] bridge_slave_1: entered promiscuous mode [ 98.143485][ T5836] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 98.169108][ T5846] bridge0: port 2(bridge_slave_1) entered blocking state [ 98.176297][ T5846] bridge0: port 2(bridge_slave_1) entered disabled state [ 98.186747][ T5846] bridge_slave_1: entered allmulticast mode [ 98.194598][ T5846] bridge_slave_1: entered promiscuous mode [ 98.217104][ T5850] bridge0: port 1(bridge_slave_0) entered blocking state [ 98.227431][ T5850] bridge0: port 1(bridge_slave_0) entered disabled state [ 98.234876][ T5850] bridge_slave_0: entered allmulticast mode [ 98.243508][ T5850] bridge_slave_0: entered promiscuous mode [ 98.253504][ T5836] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 98.280247][ T5837] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 98.306449][ T5838] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 98.316443][ T5850] bridge0: port 2(bridge_slave_1) entered blocking state [ 98.325049][ T5850] bridge0: port 2(bridge_slave_1) entered disabled state [ 98.332685][ T5850] bridge_slave_1: entered allmulticast mode [ 98.340592][ T5850] bridge_slave_1: entered promiscuous mode [ 98.364643][ T5837] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 98.391237][ T5838] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 98.435453][ T5836] team0: Port device team_slave_0 added [ 98.460202][ T5846] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 98.470311][ T5856] Bluetooth: hci1: command tx timeout [ 98.492367][ T5838] team0: Port device team_slave_0 added [ 98.514021][ T5836] team0: Port device team_slave_1 added [ 98.537265][ T5846] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 98.548390][ T5856] Bluetooth: hci0: command tx timeout [ 98.554007][ T5838] team0: Port device team_slave_1 added [ 98.563468][ T5850] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 98.591763][ T5837] team0: Port device team_slave_0 added [ 98.627335][ T5850] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 98.643705][ T5856] Bluetooth: hci3: command tx timeout [ 98.643793][ T5845] Bluetooth: hci2: command tx timeout [ 98.650285][ T5842] Bluetooth: hci4: command tx timeout [ 98.677276][ T5837] team0: Port device team_slave_1 added [ 98.712164][ T5838] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 98.719542][ T5838] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 98.745983][ T5838] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 98.774191][ T5836] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 98.781358][ T5836] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 98.809359][ T5836] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 98.837722][ T5846] team0: Port device team_slave_0 added [ 98.844816][ T5838] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 98.852576][ T5838] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 98.879332][ T5838] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 98.904942][ T5836] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 98.912252][ T5836] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 98.938726][ T5836] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 98.974602][ T5846] team0: Port device team_slave_1 added [ 99.022746][ T5850] team0: Port device team_slave_0 added [ 99.033553][ T5850] team0: Port device team_slave_1 added [ 99.043743][ T5837] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 99.051450][ T5837] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 99.078766][ T5837] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 99.091958][ T5837] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 99.099240][ T5837] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 99.125997][ T5837] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 99.145525][ T5846] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 99.152680][ T5846] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 99.179463][ T5846] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 99.235706][ T5846] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 99.242905][ T5846] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 99.269729][ T5846] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 99.346137][ T5850] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 99.353650][ T5850] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 99.380756][ T5850] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 99.397625][ T5836] hsr_slave_0: entered promiscuous mode [ 99.405484][ T5836] hsr_slave_1: entered promiscuous mode [ 99.432305][ T5838] hsr_slave_0: entered promiscuous mode [ 99.439339][ T5838] hsr_slave_1: entered promiscuous mode [ 99.445864][ T5838] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 99.453854][ T5838] Cannot create hsr debugfs directory [ 99.476926][ T5850] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 99.483972][ T5850] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 99.510750][ T5850] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 99.567191][ T5837] hsr_slave_0: entered promiscuous mode [ 99.573908][ T5837] hsr_slave_1: entered promiscuous mode [ 99.581141][ T5837] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 99.589503][ T5837] Cannot create hsr debugfs directory [ 99.615466][ T5846] hsr_slave_0: entered promiscuous mode [ 99.622012][ T5846] hsr_slave_1: entered promiscuous mode [ 99.628401][ T5846] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 99.636083][ T5846] Cannot create hsr debugfs directory [ 99.709011][ T5850] hsr_slave_0: entered promiscuous mode [ 99.715626][ T5850] hsr_slave_1: entered promiscuous mode [ 99.722525][ T5850] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 99.730749][ T5850] Cannot create hsr debugfs directory [ 100.307407][ T5838] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 100.322722][ T5838] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 100.334522][ T5838] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 100.357616][ T5838] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 100.456733][ T5836] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 100.476040][ T5836] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 100.494828][ T5836] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 100.506427][ T5836] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 100.548635][ T5842] Bluetooth: hci1: command tx timeout [ 100.614386][ T5837] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 100.628895][ T5842] Bluetooth: hci0: command tx timeout [ 100.650454][ T5837] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 100.663343][ T5837] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 100.694723][ T5837] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 100.712858][ T5856] Bluetooth: hci3: command tx timeout [ 100.718844][ T5856] Bluetooth: hci2: command tx timeout [ 100.724670][ T5842] Bluetooth: hci4: command tx timeout [ 100.737625][ T5838] 8021q: adding VLAN 0 to HW filter on device bond0 [ 100.774551][ T5838] 8021q: adding VLAN 0 to HW filter on device team0 [ 100.838080][ T2137] bridge0: port 1(bridge_slave_0) entered blocking state [ 100.845599][ T2137] bridge0: port 1(bridge_slave_0) entered forwarding state [ 100.866178][ T76] bridge0: port 2(bridge_slave_1) entered blocking state [ 100.873550][ T76] bridge0: port 2(bridge_slave_1) entered forwarding state [ 100.884680][ T5846] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 100.914750][ T5846] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 100.946929][ T5846] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 100.965689][ T5846] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 101.094132][ T5850] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 101.128907][ T5850] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 101.142268][ T5850] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 101.172109][ T5836] 8021q: adding VLAN 0 to HW filter on device bond0 [ 101.186136][ T5850] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 101.282326][ T5836] 8021q: adding VLAN 0 to HW filter on device team0 [ 101.306044][ T5837] 8021q: adding VLAN 0 to HW filter on device bond0 [ 101.323394][ T76] bridge0: port 1(bridge_slave_0) entered blocking state [ 101.331208][ T76] bridge0: port 1(bridge_slave_0) entered forwarding state [ 101.359883][ T76] bridge0: port 2(bridge_slave_1) entered blocking state [ 101.367071][ T76] bridge0: port 2(bridge_slave_1) entered forwarding state [ 101.472692][ T5837] 8021q: adding VLAN 0 to HW filter on device team0 [ 101.537505][ T2137] bridge0: port 1(bridge_slave_0) entered blocking state [ 101.544921][ T2137] bridge0: port 1(bridge_slave_0) entered forwarding state [ 101.564349][ T5846] 8021q: adding VLAN 0 to HW filter on device bond0 [ 101.578215][ T49] bridge0: port 2(bridge_slave_1) entered blocking state [ 101.585448][ T49] bridge0: port 2(bridge_slave_1) entered forwarding state [ 101.703170][ T5846] 8021q: adding VLAN 0 to HW filter on device team0 [ 101.762794][ T49] bridge0: port 1(bridge_slave_0) entered blocking state [ 101.770042][ T49] bridge0: port 1(bridge_slave_0) entered forwarding state [ 101.799816][ T5838] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 101.856868][ T4261] bridge0: port 2(bridge_slave_1) entered blocking state [ 101.864266][ T4261] bridge0: port 2(bridge_slave_1) entered forwarding state [ 101.952888][ T5850] 8021q: adding VLAN 0 to HW filter on device bond0 [ 102.054687][ T5850] 8021q: adding VLAN 0 to HW filter on device team0 [ 102.081644][ T5836] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 102.173216][ T2137] bridge0: port 1(bridge_slave_0) entered blocking state [ 102.180839][ T2137] bridge0: port 1(bridge_slave_0) entered forwarding state [ 102.219797][ T2137] bridge0: port 2(bridge_slave_1) entered blocking state [ 102.227120][ T2137] bridge0: port 2(bridge_slave_1) entered forwarding state [ 102.267390][ T5838] veth0_vlan: entered promiscuous mode [ 102.335889][ T5838] veth1_vlan: entered promiscuous mode [ 102.407721][ T5850] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 102.424115][ T5850] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 102.481429][ T5837] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 102.575419][ T5838] veth0_macvtap: entered promiscuous mode [ 102.614627][ T5838] veth1_macvtap: entered promiscuous mode [ 102.638239][ T5842] Bluetooth: hci1: command tx timeout [ 102.692529][ T5846] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 102.709742][ T5842] Bluetooth: hci0: command tx timeout [ 102.722771][ T5838] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 102.746414][ T5837] veth0_vlan: entered promiscuous mode [ 102.774066][ T5838] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 102.794081][ T5842] Bluetooth: hci4: command tx timeout [ 102.800145][ T5842] Bluetooth: hci2: command tx timeout [ 102.805699][ T5842] Bluetooth: hci3: command tx timeout [ 102.844564][ T5838] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.855896][ T5838] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.865001][ T5838] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.876104][ T5838] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.941597][ T5837] veth1_vlan: entered promiscuous mode [ 103.046277][ T5850] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 103.066986][ T5846] veth0_vlan: entered promiscuous mode [ 103.086510][ T5836] veth0_vlan: entered promiscuous mode [ 103.106417][ T76] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 103.125600][ T76] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 103.130241][ T5836] veth1_vlan: entered promiscuous mode [ 103.173127][ T5846] veth1_vlan: entered promiscuous mode [ 103.199769][ T5837] veth0_macvtap: entered promiscuous mode [ 103.232395][ T5837] veth1_macvtap: entered promiscuous mode [ 103.247808][ T49] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 103.258862][ T49] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 103.332074][ T5837] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 103.344618][ T5837] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 103.350657][ T5838] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 103.369212][ T5836] veth0_macvtap: entered promiscuous mode [ 103.393955][ T5837] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.404736][ T5837] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.414471][ T5837] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.425009][ T5837] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.446866][ T5846] veth0_macvtap: entered promiscuous mode [ 103.456292][ T5850] veth0_vlan: entered promiscuous mode [ 103.469827][ T5836] veth1_macvtap: entered promiscuous mode [ 103.511743][ T5846] veth1_macvtap: entered promiscuous mode [ 103.546593][ T5850] veth1_vlan: entered promiscuous mode [ 103.628569][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 103.812570][ T5836] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 103.824863][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 103.990833][ T5836] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 104.202498][ T5846] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 104.262098][ T5836] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.271413][ T5836] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.280566][ T5836] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.290830][ T5836] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.330833][ T5846] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 104.393488][ T2137] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 104.415118][ T2137] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 104.437223][ T5846] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.460361][ T5846] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.475260][ T5846] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.484243][ T5846] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.635092][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 104.740596][ T5842] Bluetooth: hci1: command tx timeout [ 104.758361][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 104.802594][ T5842] Bluetooth: hci0: command tx timeout [ 104.868356][ T5842] Bluetooth: hci3: command tx timeout [ 104.868474][ T5845] Bluetooth: hci4: command tx timeout [ 104.874277][ T5856] Bluetooth: hci2: command tx timeout [ 105.048215][ T0] NOHZ tick-stop error: local softirq work is pending, handler #c0!!! [ 105.131372][ T5850] veth0_macvtap: entered promiscuous mode [ 105.213073][ T5850] veth1_macvtap: entered promiscuous mode [ 105.287156][ T5850] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 105.364014][ T5850] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 105.404893][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 105.422470][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 105.535483][ T5850] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.866367][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 105.866795][ T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!! [ 105.969899][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 105.970413][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 106.077178][ T5850] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 106.181664][ T5850] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 106.248901][ T5850] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 106.276380][ T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!! [ 106.592096][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 106.609215][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 106.689617][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 106.709619][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 106.885944][ T49] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 106.910990][ T49] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 107.860464][ T76] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 107.978878][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 108.067018][ T76] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 109.695587][ T5963] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 109.748976][ T5963] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 110.065753][ T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!! [ 111.831259][ T6001] netlink: 'syz.2.11': attribute type 2 has an invalid length. [ 112.136394][ T978] usb 5-1: new full-speed USB device number 2 using dummy_hcd [ 112.398933][ T6004] 9pnet_fd: Insufficient options for proto=fd [ 113.536685][ T978] usb 5-1: device not accepting address 2, error -71 [ 116.052705][ T24] IPVS: starting estimator thread 0... [ 116.132610][ T6021] bridge0: port 2(bridge_slave_1) entered disabled state [ 116.140851][ T6021] bridge0: port 1(bridge_slave_0) entered disabled state [ 116.166542][ T6024] IPVS: using max 35 ests per chain, 84000 per kthread [ 116.338353][ T6028] ======================================================= [ 116.338353][ T6028] WARNING: The mand mount option has been deprecated and [ 116.338353][ T6028] and is ignored by this kernel. Remove the mand [ 116.338353][ T6028] option from the mount to silence this warning. [ 116.338353][ T6028] ======================================================= [ 116.706823][ T6021] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 116.720298][ T6021] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 117.961222][ T6021] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 117.971295][ T6021] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 117.980350][ T6021] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 118.592630][ T6021] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 119.026653][ T6026] sp0: Synchronizing with TNC [ 119.574687][ T6056] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 120.119948][ T5842] Bluetooth: hci2: command tx timeout [ 120.308674][ T6054] fuse: Unknown parameter '' [ 120.942579][ T6057] process 'syz.4.22' launched './file0' with NULL argv: empty string added [ 124.795248][ T6070] netlink: 'syz.1.27': attribute type 8 has an invalid length. [ 124.911526][ T5912] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 125.124514][ T6066] delete_channel: no stack [ 125.332603][ T5912] usb 1-1: Using ep0 maxpacket: 16 [ 125.366258][ T5912] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 125.490287][ T6078] loop9: detected capacity change from 0 to 7 [ 125.504648][ T6078] Buffer I/O error on dev loop9, logical block 0, async page read [ 125.513405][ T6078] Buffer I/O error on dev loop9, logical block 0, async page read [ 125.521886][ T6078] Buffer I/O error on dev loop9, logical block 0, async page read [ 125.534356][ T6078] Buffer I/O error on dev loop9, logical block 0, async page read [ 125.543805][ T6078] Buffer I/O error on dev loop9, logical block 0, async page read [ 125.553053][ T6078] Buffer I/O error on dev loop9, logical block 0, async page read [ 125.561865][ T6078] Buffer I/O error on dev loop9, logical block 0, async page read [ 125.601800][ T6078] ldm_validate_partition_table(): Disk read failed. [ 125.609450][ T6078] Buffer I/O error on dev loop9, logical block 0, async page read [ 125.618353][ T6078] Buffer I/O error on dev loop9, logical block 0, async page read [ 125.626977][ T6078] Buffer I/O error on dev loop9, logical block 0, async page read [ 125.639157][ T6078] Dev loop9: unable to read RDB block 0 [ 125.646870][ T6078] loop9: unable to read partition table [ 125.653771][ T6078] loop9: partition table beyond EOD, truncated [ 125.660615][ T6078] loop_reread_partitions: partition scan of loop9 (被xڬdGݡ [ 125.660615][ T6078] ) failed (rc=-5) [ 126.208043][ T6078] syz.4.28 (6078) used greatest stack depth: 20032 bytes left [ 126.335042][ T5912] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 126.436191][ T5912] usb 1-1: string descriptor 0 read error: -71 [ 126.443140][ T5912] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 126.452740][ T5912] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 126.529157][ T5912] usb 1-1: can't set config #1, error -71 [ 126.577577][ T5912] usb 1-1: USB disconnect, device number 2 [ 129.107236][ T6102] Cannot find add_set index 0 as target [ 129.122858][ T6102] netlink: 'syz.2.32': attribute type 9 has an invalid length. [ 129.155281][ T6097] input: syz0 as /devices/virtual/input/input5 [ 129.172878][ T6102] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 132.384132][ T6121] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 132.936184][ T6126] netlink: 4 bytes leftover after parsing attributes in process `syz.2.35'. [ 138.086149][ T6128] evm: overlay not supported [ 138.278623][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 138.285276][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 140.088609][ T6156] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 140.297510][ T6156] netlink: 8 bytes leftover after parsing attributes in process `syz.4.44'. [ 141.159685][ T6159] netlink: 20 bytes leftover after parsing attributes in process `syz.3.45'. [ 142.121333][ T6163] binder: 6160:6163 ioctl 4018620d 0 returned -22 [ 142.141204][ T6163] binder: 6160:6163 ioctl c0306201 0 returned -14 [ 143.583581][ T6174] 9pnet_virtio: no channels available for device syz [ 144.496106][ T6180] overlay: ./file0 is not a directory [ 145.581552][ T6192] warning: `syz.2.52' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 147.740210][ T6197] input: syz1 as /devices/virtual/input/input8 [ 150.269477][ T6208] vimc link validate: Scaler:src:640x480 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 150.938180][ T30] audit: type=1326 audit(1755000704.765:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6204 comm="syz.1.55" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fa88578ebe9 code=0x0 [ 151.482235][ T6213] random: crng reseeded on system resumption [ 152.078859][ T6214] Bluetooth: hci5: received HCILL_GO_TO_SLEEP_ACK in state 2 [ 152.315453][ T6039] Bluetooth: hci5: Frame reassembly failed (-84) [ 152.481811][ T6220] Zero length message leads to an empty skb [ 154.412881][ T5856] Bluetooth: hci5: command 0x1003 tx timeout [ 154.420093][ T5842] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 155.596862][ T6225] netlink: 36 bytes leftover after parsing attributes in process `syz.1.59'. [ 155.609224][ T6225] netlink: 12 bytes leftover after parsing attributes in process `syz.1.59'. [ 155.857485][ T6225] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 156.190096][ T6224] mkiss: ax0: crc mode is auto. [ 156.403908][ T6234] netlink: 4 bytes leftover after parsing attributes in process `syz.0.61'. [ 156.598889][ T6234] netlink: 36 bytes leftover after parsing attributes in process `syz.0.61'. [ 157.769489][ T6245] random: crng reseeded on system resumption [ 160.631117][ T6260] sctp: [Deprecated]: syz.1.69 (pid 6260) Use of struct sctp_assoc_value in delayed_ack socket option. [ 160.631117][ T6260] Use struct sctp_sack_info instead [ 161.557089][ T6262] dvmrp17: entered allmulticast mode [ 163.000474][ T6271] netlink: 28 bytes leftover after parsing attributes in process `syz.1.71'. [ 171.843869][ T6305] netlink: 28 bytes leftover after parsing attributes in process `syz.3.81'. [ 174.794423][ T6300] Process accounting resumed [ 175.608672][ T5912] IPVS: starting estimator thread 0... [ 175.880013][ T6341] netlink: 'syz.1.87': attribute type 10 has an invalid length. [ 175.916958][ T6341] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 175.966815][ T6341] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 176.001774][ T6325] delete_channel: no stack [ 176.655283][ T6340] IPVS: using max 22 ests per chain, 52800 per kthread [ 178.542232][ T6350] netlink: 'syz.2.88': attribute type 1 has an invalid length. [ 178.865585][ T6341] syz.1.87 (6341) used greatest stack depth: 19144 bytes left [ 179.731091][ T6365] bpq0: entered allmulticast mode [ 179.809843][ T6367] trusted_key: syz.1.92 sent an empty control message without MSG_MORE. [ 181.062741][ T6374] netlink: 4 bytes leftover after parsing attributes in process `syz.1.92'. [ 184.878424][ T5842] Bluetooth: hci1: command tx timeout [ 185.707439][ T6409] netlink: 96 bytes leftover after parsing attributes in process `syz.0.100'. [ 186.313142][ T6410] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 188.127618][ T6408] tty tty23: ldisc open failed (-12), clearing slot 22 [ 188.305092][ T6414] ttynull ttynull: ldisc open failed (-12), clearing slot 0 [ 189.124726][ T6426] netlink: 'syz.1.105': attribute type 12 has an invalid length. [ 189.132987][ T6426] netlink: 'syz.1.105': attribute type 29 has an invalid length. [ 189.158424][ T6426] netlink: 148 bytes leftover after parsing attributes in process `syz.1.105'. [ 189.198555][ T6426] netlink: 59 bytes leftover after parsing attributes in process `syz.1.105'. [ 189.454963][ T6432] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 190.152503][ T6435] trusted_key: encrypted_key: master key parameter '00N004093' is invalid [ 190.177800][ T6435] trusted_key: encrypted_key: master key parameter '00N004093' is invalid [ 190.996380][ T5972] Process accounting resumed [ 193.427392][ T5842] Bluetooth: hci0: SCO packet for unknown connection handle 954 [ 193.969869][ T6441] delete_channel: no stack [ 194.938142][ T6470] overlay: ./file0 is not a directory [ 198.305785][ T6487] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input10 [ 199.281024][ T6493] netlink: 72 bytes leftover after parsing attributes in process `syz.4.117'. [ 199.347660][ T6493] syz.4.117: attempt to access beyond end of device [ 199.347660][ T6493] nbd4: rw=0, sector=64, nr_sectors = 8 limit=0 [ 199.368175][ T6493] syz.4.117: attempt to access beyond end of device [ 199.368175][ T6493] nbd4: rw=0, sector=120, nr_sectors = 8 limit=0 [ 199.382242][ T6493] Mount JFS Failure: -5 [ 199.828889][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 199.835524][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 200.233508][ T6503] trusted_key: encrypted_key: master key parameter '00N004093' is invalid [ 200.254028][ T6503] trusted_key: encrypted_key: master key parameter '00N004093' is invalid [ 202.868840][ T6514] netlink: 32 bytes leftover after parsing attributes in process `syz.4.120'. [ 206.262280][ T6537] macvtap1: entered allmulticast mode [ 206.267816][ T6537] veth0_macvtap: entered allmulticast mode [ 211.448760][ T5856] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 211.482812][ T5856] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 211.493433][ T5856] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 211.515868][ T5856] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 211.530033][ T5856] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 211.798624][ T6565] 9pnet_fd: Insufficient options for proto=fd [ 212.118912][ T6569] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 214.116876][ T5856] Bluetooth: hci5: command tx timeout [ 215.112503][ T6579] netlink: 'syz.3.143': attribute type 10 has an invalid length. [ 215.480824][ T6581] trusted_key: encrypted_key: master key parameter '00N004093' is invalid [ 215.498831][ T6581] trusted_key: encrypted_key: master key parameter '00N004093' is invalid [ 216.336082][ T5856] Bluetooth: hci6: Opcode 0x1003 failed: -110 [ 216.382657][ T6579] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 216.410467][ T6579] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 217.245413][ T5856] Bluetooth: hci5: command tx timeout [ 219.268496][ T5845] Bluetooth: hci5: command tx timeout [ 219.410097][ T6595] Cannot find add_set index 0 as target [ 219.420142][ T6595] netlink: 'syz.3.138': attribute type 9 has an invalid length. [ 219.443203][ T6595] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 221.360804][ T5849] Bluetooth: hci5: command tx timeout [ 221.438526][ T6031] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 222.549382][ T5849] Bluetooth: hci3: command 0x0406 tx timeout [ 222.555716][ T5849] Bluetooth: hci0: command 0x0406 tx timeout [ 222.562527][ T51] Bluetooth: hci1: command 0x0406 tx timeout [ 222.949504][ T6031] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 222.972685][ T6618] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci5/hci5:200/input12 [ 223.264786][ T6554] chnl_net:caif_netlink_parms(): no params data found [ 224.936827][ T6628] infiniband syz!: set down [ 224.941733][ T6628] infiniband syz!: added team_slave_0 [ 224.949886][ T6628] syz!: rxe_create_cq: returned err = -12 [ 224.956136][ T6628] infiniband syz!: Couldn't create ib_mad CQ [ 224.962711][ T6628] infiniband syz!: Couldn't open port 1 [ 225.013413][ T6628] RDS/IB: syz!: added [ 225.018154][ T6628] smc: adding ib device syz! with port count 1 [ 225.024587][ T6628] smc: ib device syz! port 1 has pnetid [ 226.107080][ T6646] netlink: zone id is out of range [ 226.114043][ T6646] netlink: zone id is out of range [ 226.119925][ T6646] netlink: zone id is out of range [ 226.125294][ T6646] netlink: zone id is out of range [ 226.130901][ T6646] netlink: zone id is out of range [ 226.136559][ T6646] netlink: zone id is out of range [ 226.142157][ T6646] netlink: zone id is out of range [ 226.147721][ T6646] netlink: zone id is out of range [ 226.160058][ T6646] netlink: zone id is out of range [ 226.165635][ T6646] netlink: zone id is out of range [ 226.421354][ T6031] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 227.228734][ T6655] befs: (nullb0): invalid magic header [ 228.128370][ T6644] netlink: 32 bytes leftover after parsing attributes in process `syz.1.147'. [ 228.246984][ T6031] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 228.270414][ T6554] bridge0: port 1(bridge_slave_0) entered blocking state [ 228.399114][ T6554] bridge0: port 1(bridge_slave_0) entered disabled state [ 228.409087][ T6554] bridge_slave_0: entered allmulticast mode [ 228.727085][ T6554] bridge_slave_0: entered promiscuous mode [ 228.857305][ T6554] bridge0: port 2(bridge_slave_1) entered blocking state [ 228.876663][ T6554] bridge0: port 2(bridge_slave_1) entered disabled state [ 229.049598][ T6554] bridge_slave_1: entered allmulticast mode [ 229.060636][ T6554] bridge_slave_1: entered promiscuous mode [ 229.070168][ T5972] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 229.848550][ T6664] 9pnet_virtio: no channels available for device syz [ 230.624422][ T5972] usb 4-1: Using ep0 maxpacket: 8 [ 230.665070][ T5972] usb 4-1: config 0 has an invalid interface number: 127 but max is 0 [ 230.674598][ T5972] usb 4-1: config 0 contains an unexpected descriptor of type 0x2, skipping [ 231.084001][ T6668] trusted_key: encrypted_key: master key parameter '00N004093' is invalid [ 231.139803][ T6668] trusted_key: encrypted_key: master key parameter '00N004093' is invalid [ 231.169763][ T6554] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 231.172521][ T5972] usb 4-1: config 0 has an invalid descriptor of length 1, skipping remainder of the config [ 231.199935][ T5972] usb 4-1: config 0 has no interface number 0 [ 231.221990][ T6554] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 231.281698][ T5972] usb 4-1: string descriptor 0 read error: -71 [ 231.300692][ T5972] usb 4-1: New USB device found, idVendor=0403, idProduct=bdc8, bcdDevice=63.99 [ 231.352876][ T5972] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 231.726141][ T5972] usb 4-1: config 0 descriptor?? [ 231.755557][ T5972] usb 4-1: can't set config #0, error -71 [ 231.986312][ T5972] usb 4-1: USB disconnect, device number 2 [ 232.696829][ T6554] team0: Port device team_slave_0 added [ 232.752179][ T6554] team0: Port device team_slave_1 added [ 232.903783][ T6686] ref_ctr going negative. vaddr: 0x200000ffc002, curr val: -29824, delta: 1 [ 232.913018][ T6686] ref_ctr increment failed for inode: 0xc2 offset: 0x7 ref_ctr_offset: 0x2 of mm: 0xffff88807e5f0a00 [ 232.944314][ T30] audit: type=1804 audit(1755000787.295:3): pid=6686 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz.4.155" name="/newroot/30/file0" dev="tmpfs" ino=194 res=1 errno=0 [ 238.010845][ T6031] bridge_slave_1: left allmulticast mode [ 238.016876][ T6031] bridge_slave_1: left promiscuous mode [ 238.056151][ T6702] tmpfs: Unknown parameter '/dev/comedi1' [ 238.064127][ T6031] bridge0: port 2(bridge_slave_1) entered disabled state [ 238.134312][ T6031] bridge_slave_0: left allmulticast mode [ 238.144053][ T6031] bridge_slave_0: left promiscuous mode [ 238.155308][ T6031] bridge0: port 1(bridge_slave_0) entered disabled state [ 239.331418][ T6730] mmap: syz.4.161 (6730) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 239.714321][ T6031] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 239.736757][ T6031] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 239.753850][ T6031] bond0 (unregistering): Released all slaves [ 239.774525][ T6554] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 239.782176][ T6554] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 239.824164][ T6554] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 239.952729][ T6715] bpq0: left allmulticast mode [ 240.006218][ T6730] pim6reg: entered allmulticast mode [ 240.017685][ T6554] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 240.149884][ T6554] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 240.269522][ T6554] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 242.391792][ T6745] wg1 speed is unknown, defaulting to 1000 [ 242.540452][ T6745] wg1 speed is unknown, defaulting to 1000 [ 242.557634][ T6745] wg1 speed is unknown, defaulting to 1000 [ 242.594591][ T6745] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 242.685125][ T6745] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 244.067294][ T6745] wg1 speed is unknown, defaulting to 1000 [ 244.094287][ T6554] hsr_slave_0: entered promiscuous mode [ 244.179747][ T6554] hsr_slave_1: entered promiscuous mode [ 244.239848][ T6554] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 244.304121][ T6554] Cannot create hsr debugfs directory [ 244.502194][ T6745] wg1 speed is unknown, defaulting to 1000 [ 244.747847][ T6745] wg1 speed is unknown, defaulting to 1000 [ 245.551026][ T6745] wg1 speed is unknown, defaulting to 1000 [ 245.551077][ T6775] tipc: Started in network mode [ 245.562222][ T6775] tipc: Node identity 4, cluster identity 4711 [ 245.568499][ T6775] tipc: Node number set to 4 [ 245.811750][ T6745] wg1 speed is unknown, defaulting to 1000 [ 245.862612][ T6745] wg1 speed is unknown, defaulting to 1000 [ 247.422053][ T6791] tmpfs: Bad value for 'mpol' [ 248.073895][ T6554] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 248.338454][ T6031] hsr_slave_0: left promiscuous mode [ 248.344819][ T6031] hsr_slave_1: left promiscuous mode [ 248.352858][ T6031] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 248.361860][ T6031] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 248.371033][ T6031] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 248.381234][ T6031] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 248.473119][ T6799] Bluetooth: hci2: Frame reassembly failed (-84) [ 248.549047][ T6031] veth1_macvtap: left promiscuous mode [ 248.569416][ T6031] veth0_macvtap: left promiscuous mode [ 248.586394][ T6031] veth1_vlan: left promiscuous mode [ 248.602497][ T6031] veth0_vlan: left promiscuous mode [ 249.384187][ T6031] team0 (unregistering): Port device team_slave_1 removed [ 249.427340][ T6031] team0 (unregistering): Port device team_slave_0 removed [ 249.826986][ T6554] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 249.871507][ T6554] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 249.903351][ T6554] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 250.166281][ T6554] 8021q: adding VLAN 0 to HW filter on device bond0 [ 250.190897][ T6554] 8021q: adding VLAN 0 to HW filter on device team0 [ 250.215620][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 250.223497][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 250.286220][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 250.293668][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 250.548492][ T5842] Bluetooth: hci2: Opcode 0x1003 failed: -110 [ 250.723795][ T6554] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 251.450927][ T6843] (syz.4.173,6843,0):ocfs2_fill_super:989 ERROR: superblock probe failed! [ 251.459845][ T6843] (syz.4.173,6843,0):ocfs2_fill_super:1177 ERROR: status = -22 [ 251.481196][ T6843] Bluetooth: Invalid esc byte 0x02 [ 251.744272][ T4261] Bluetooth: (null): Invalid header checksum [ 252.189321][ T6850] Bluetooth: hci2: Frame reassembly failed (-84) [ 253.445719][ T6858] netlink: 4 bytes leftover after parsing attributes in process `syz.4.175'. [ 254.308216][ T5856] Bluetooth: hci2: Opcode 0x1003 failed: -110 [ 256.190818][ T6872] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 256.228292][ T6872] 9pnet: Unknown protocol version 9p [ 256.997579][ T6871] trusted_key: encrypted_key: master key parameter '00N004093' is invalid [ 257.022826][ T6871] trusted_key: encrypted_key: master key parameter '00N004093' is invalid [ 260.486094][ T6897] qnx4: no qnx4 filesystem (no root dir). [ 260.732674][ T6898] ceph: No mds server is up or the cluster is laggy [ 260.856631][ T5927] libceph: connect (1)[c::]:6789 error -101 [ 261.114812][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 261.664056][ T6909] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 261.924107][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 261.997638][ T5927] libceph: mon0 (1)[c::]:6789 connect error [ 262.069358][ T6554] veth0_vlan: entered promiscuous mode [ 263.003402][ T6914] Bluetooth: hci2: Frame reassembly failed (-84) [ 264.073706][ T6554] veth1_vlan: entered promiscuous mode [ 265.673843][ T5842] Bluetooth: hci2: Opcode 0x1003 failed: -110 [ 265.678272][ T5856] Bluetooth: hci2: command 0x1003 tx timeout [ 265.966282][ T6928] bpq0: entered allmulticast mode [ 266.980543][ T6936] syz.2.191 uses obsolete (PF_INET,SOCK_PACKET) [ 268.016473][ T5856] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 268.028573][ T5856] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 268.037459][ T5856] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 268.052396][ T5856] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 268.084872][ T5856] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 268.504611][ T6938] wg1 speed is unknown, defaulting to 1000 [ 269.034827][ T6938] chnl_net:caif_netlink_parms(): no params data found [ 269.053676][ T13] bridge_slave_1: left allmulticast mode [ 269.059578][ T13] bridge_slave_1: left promiscuous mode [ 269.065392][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 269.076566][ T13] bridge_slave_0: left allmulticast mode [ 269.083912][ T13] bridge_slave_0: left promiscuous mode [ 269.090482][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 269.393310][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 269.407205][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 269.420748][ T13] bond0 (unregistering): Released all slaves [ 269.706516][ T6938] bridge0: port 1(bridge_slave_0) entered blocking state [ 269.715497][ T6938] bridge0: port 1(bridge_slave_0) entered disabled state [ 269.723538][ T6938] bridge_slave_0: entered allmulticast mode [ 269.748014][ T6938] bridge_slave_0: entered promiscuous mode [ 269.761016][ T13] hsr_slave_0: left promiscuous mode [ 269.767761][ T13] hsr_slave_1: left promiscuous mode [ 269.773934][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 269.787622][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 269.809108][ T13] veth1_vlan: left promiscuous mode [ 269.814491][ T13] veth0_vlan: left promiscuous mode [ 270.148362][ T5856] Bluetooth: hci2: command tx timeout [ 270.156121][ T13] team0 (unregistering): Port device team_slave_1 removed [ 270.202627][ T13] team0 (unregistering): Port device team_slave_0 removed [ 270.595813][ T6938] bridge0: port 2(bridge_slave_1) entered blocking state [ 270.618312][ T6938] bridge0: port 2(bridge_slave_1) entered disabled state [ 270.625639][ T6938] bridge_slave_1: entered allmulticast mode [ 270.651876][ T6938] bridge_slave_1: entered promiscuous mode [ 270.700498][ T6938] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 270.729924][ T6938] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 270.801959][ T6938] team0: Port device team_slave_0 added [ 270.824636][ T6938] team0: Port device team_slave_1 added [ 270.919997][ T6938] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 270.927031][ T6938] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 270.967293][ T6938] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 271.005466][ T6938] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 271.014024][ T6938] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 271.047971][ T6938] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 271.139398][ T6938] hsr_slave_0: entered promiscuous mode [ 271.153379][ T6938] hsr_slave_1: entered promiscuous mode [ 271.161159][ T6938] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 271.173172][ T6938] Cannot create hsr debugfs directory [ 271.810909][ T6938] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 271.828381][ T6938] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 271.847072][ T6938] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 271.870740][ T6938] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 272.044652][ T6938] 8021q: adding VLAN 0 to HW filter on device bond0 [ 272.095840][ T6938] 8021q: adding VLAN 0 to HW filter on device team0 [ 272.116867][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 272.124149][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 272.144071][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 272.151329][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 272.228235][ T5856] Bluetooth: hci2: command tx timeout [ 272.457365][ T6938] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 272.880423][ T6938] veth0_vlan: entered promiscuous mode [ 272.896799][ T6938] veth1_vlan: entered promiscuous mode [ 272.947876][ T6938] veth0_macvtap: entered promiscuous mode [ 272.973478][ T6938] veth1_macvtap: entered promiscuous mode [ 273.002207][ T6938] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 273.021050][ T6938] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 273.034679][ T6938] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 273.044308][ T6938] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 273.054711][ T6938] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 273.064348][ T6938] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 273.185992][ T59] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 273.206480][ T59] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 273.242757][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 273.251299][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 273.596076][ T7038] Bluetooth: MGMT ver 1.23 [ 273.673748][ T7038] binder: 7030:7038 ioctl c0306201 2000000003c0 returned -22 [ 275.284846][ T5842] Bluetooth: hci2: command tx timeout [ 275.749574][ T5856] Bluetooth: hci2: Opcode 0x0401 failed: -110 [ 275.848329][ T5972] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 277.348669][ T5856] Bluetooth: hci2: command 0x0419 tx timeout [ 279.428196][ T5856] Bluetooth: hci2: command 0x0419 tx timeout [ 283.136825][ T7090] capability: warning: `syz.1.197' uses deprecated v2 capabilities in a way that may be insecure [ 283.211833][ T30] audit: type=1326 audit(1755000842.615:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7083 comm="syz.1.197" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fa88578ebe9 code=0x0 [ 283.369945][ T5842] Bluetooth: hci5: command 0x1003 tx timeout [ 283.383451][ T5856] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 284.043763][ T7100] Bluetooth: hci5: Frame reassembly failed (-84) [ 286.223083][ T5856] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 286.230478][ T5842] Bluetooth: hci5: command 0x1003 tx timeout [ 287.212260][ T7122] netlink: 'syz.5.208': attribute type 10 has an invalid length. [ 287.240128][ T7122] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 287.277689][ T7122] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 288.876766][ T7125] netlink: 8 bytes leftover after parsing attributes in process `syz.3.209'. [ 289.397710][ T7122] syz.5.208 (7122) used greatest stack depth: 19056 bytes left [ 289.592514][ T7126] netlink: 'syz.3.209': attribute type 2 has an invalid length. [ 291.273557][ T7145] x_tables: ip_tables: TCPMSS target: only valid for protocol 6 [ 292.297243][ T7129] bridge0: port 1(bridge_slave_0) entered blocking state [ 292.305875][ T7129] bridge0: port 1(bridge_slave_0) entered forwarding state [ 293.652252][ T7153] F2FS-fs (loop3): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 293.660507][ T7153] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 293.676821][ T7153] F2FS-fs (loop3): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 293.685361][ T7153] F2FS-fs (loop3): Can't find valid F2FS filesystem in 2th superblock [ 301.335072][ T7204] trusted_key: encrypted_key: keyword 'new' not allowed when called from .update method [ 302.848246][ T7207] netlink: 36 bytes leftover after parsing attributes in process `syz.1.225'. [ 303.084178][ T7217] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 303.145344][ T7217] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 303.202537][ T7217] netlink: 'syz.4.227': attribute type 1 has an invalid length. [ 303.280747][ T7218] netlink: 'syz.4.227': attribute type 1 has an invalid length. [ 304.722826][ T5842] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 304.733703][ T5842] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 304.742380][ T5842] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 304.751136][ T5842] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 304.759253][ T5842] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 304.910392][ T7233] trusted_key: encrypted_key: master key parameter '00N004093' is invalid [ 305.005994][ T7234] trusted_key: encrypted_key: master key parameter '00N004093' is invalid [ 306.542762][ T7252] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 306.973133][ T5856] Bluetooth: hci5: command tx timeout [ 307.735983][ T7263] kernel read not supported for file /blkio.throttle.io_service_bytes_recursive (pid: 7263 comm: syz.3.233) [ 307.762626][ T7263] comedi comedi3: ni_at_a2150: I/O port conflict (0x2f00,28) [ 308.529530][ T7229] wg1 speed is unknown, defaulting to 1000 [ 308.548182][ T30] audit: type=1800 audit(1755000867.155:5): pid=7263 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.3.233" name="blkio.throttle.io_service_bytes_recursive" dev="mqueue" ino=12280 res=0 errno=0 [ 308.634674][ T7261] net_ratelimit: 112 callbacks suppressed [ 308.634695][ T7261] sctp: failed to load transform for md5: -2 [ 309.034129][ T5856] Bluetooth: hci5: command tx timeout [ 309.426624][ T5842] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 309.436443][ T5842] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 309.453518][ T5842] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 309.463891][ T5842] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 309.472942][ T5842] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 309.551546][ T7229] chnl_net:caif_netlink_parms(): no params data found [ 309.873790][ T7229] bridge0: port 1(bridge_slave_0) entered blocking state [ 309.894633][ T7229] bridge0: port 1(bridge_slave_0) entered disabled state [ 309.903062][ T7229] bridge_slave_0: entered allmulticast mode [ 309.920882][ T7229] bridge_slave_0: entered promiscuous mode [ 309.934851][ T7229] bridge0: port 2(bridge_slave_1) entered blocking state [ 309.943502][ T7229] bridge0: port 2(bridge_slave_1) entered disabled state [ 309.955710][ T7229] bridge_slave_1: entered allmulticast mode [ 309.964305][ T7229] bridge_slave_1: entered promiscuous mode [ 310.046452][ T7277] wg1 speed is unknown, defaulting to 1000 [ 310.083335][ T7229] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 310.111835][ T7229] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 310.196992][ T7229] team0: Port device team_slave_0 added [ 310.243431][ T5963] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 310.272766][ T7229] team0: Port device team_slave_1 added [ 310.333268][ T5963] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 310.375800][ T7229] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 310.387915][ T7229] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 310.431928][ T7229] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 310.466495][ T5963] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 310.485231][ T7229] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 310.492845][ T7229] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 310.519835][ T7229] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 310.577148][ T5963] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 310.715854][ T7229] hsr_slave_0: entered promiscuous mode [ 310.723833][ T7229] hsr_slave_1: entered promiscuous mode [ 310.731493][ T7229] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 310.739840][ T7229] Cannot create hsr debugfs directory [ 311.070106][ T7277] chnl_net:caif_netlink_parms(): no params data found [ 311.105188][ T5963] bridge_slave_1: left allmulticast mode [ 311.118247][ T5842] Bluetooth: hci5: command tx timeout [ 311.139062][ T5963] bridge_slave_1: left promiscuous mode [ 311.145214][ T5963] bridge0: port 2(bridge_slave_1) entered disabled state [ 311.495865][ T5963] bridge_slave_0: left allmulticast mode [ 311.501768][ T5963] bridge_slave_0: left promiscuous mode [ 311.550255][ T5963] bridge0: port 1(bridge_slave_0) entered disabled state [ 311.592455][ T5842] Bluetooth: hci0: command tx timeout [ 313.188341][ T5842] Bluetooth: hci5: command tx timeout [ 313.350542][ T5842] Bluetooth: hci3: unexpected event for opcode 0x202a [ 313.748488][ T5842] Bluetooth: hci0: command tx timeout [ 314.051543][ T7316] netlink: 'syz.4.237': attribute type 10 has an invalid length. [ 315.908881][ T5842] Bluetooth: hci0: command tx timeout [ 317.952473][ T5963] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 317.988169][ T5842] Bluetooth: hci0: command tx timeout [ 317.999283][ T5963] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 318.034896][ T5963] bond0 (unregistering): (slave batadv0): Releasing backup interface [ 318.063489][ T5963] bond0 (unregistering): Released all slaves [ 318.873023][ T7316] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 318.979200][ T7340] trusted_key: encrypted_key: master key parameter '00N004093' is invalid [ 319.031662][ T7340] trusted_key: encrypted_key: master key parameter '00N004093' is invalid [ 319.423085][ T7316] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 319.788378][ T7316] syz.4.237 (7316) used greatest stack depth: 18984 bytes left [ 321.302207][ T7355] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci0/hci0:200/input16 [ 322.392913][ T7377] random: crng reseeded on system resumption [ 322.560072][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 322.578790][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 324.075356][ T7388] trusted_key: encrypted_key: master key parameter '00N004093' is invalid [ 324.114816][ T7388] trusted_key: encrypted_key: master key parameter '00N004093' is invalid [ 324.637243][ T7277] bridge0: port 1(bridge_slave_0) entered blocking state [ 324.653861][ T7277] bridge0: port 1(bridge_slave_0) entered disabled state [ 324.697010][ T7277] bridge_slave_0: entered allmulticast mode [ 325.116991][ T7277] bridge_slave_0: entered promiscuous mode [ 325.321107][ T7277] bridge0: port 2(bridge_slave_1) entered blocking state [ 325.359139][ T7277] bridge0: port 2(bridge_slave_1) entered disabled state [ 325.398315][ T7277] bridge_slave_1: entered allmulticast mode [ 325.523913][ T7277] bridge_slave_1: entered promiscuous mode [ 326.851096][ T7405] trusted_key: encrypted_key: master key parameter '00N004093' is invalid [ 326.893339][ T7405] trusted_key: encrypted_key: master key parameter '00N004093' is invalid [ 327.589681][ T7414] netlink: 8 bytes leftover after parsing attributes in process `syz.4.255'. [ 328.204719][ T5963] hsr_slave_0: left promiscuous mode [ 328.232583][ T5963] hsr_slave_1: left promiscuous mode [ 328.305674][ T7419] trusted_key: encrypted_key: master key parameter '00N004093' is invalid [ 328.321428][ T7419] trusted_key: encrypted_key: master key parameter '00N004093' is invalid [ 328.347897][ T5963] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 328.356453][ T5963] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 328.773286][ T5963] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 328.792019][ T5963] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 328.909966][ T7423] o2cb: This node has not been configured. [ 328.916156][ T7423] o2cb: Cluster check failed. Fix errors before retrying. [ 328.923709][ T7423] (syz.1.256,7423,1):user_dlm_register:674 ERROR: status = -22 [ 328.931523][ T7423] (syz.1.256,7423,1):dlmfs_mkdir:438 ERROR: Error -22 could not register domain "file0" [ 328.945599][ T7423] o2cb: This node has not been configured. [ 328.951829][ T7423] o2cb: Cluster check failed. Fix errors before retrying. [ 328.959400][ T7423] (syz.1.256,7423,1):user_dlm_register:674 ERROR: status = -22 [ 328.967193][ T7423] (syz.1.256,7423,1):dlmfs_mkdir:438 ERROR: Error -22 could not register domain "file1" [ 329.691193][ T5963] veth1_macvtap: left promiscuous mode [ 329.696975][ T5963] veth0_macvtap: left promiscuous mode [ 329.704928][ T5963] veth1_vlan: left promiscuous mode [ 329.713236][ T5963] veth0_vlan: left promiscuous mode [ 329.750959][ T5842] Bluetooth: hci4: command 0x0406 tx timeout [ 330.525939][ T7435] random: crng reseeded on system resumption [ 331.243993][ T7437] netlink: 36 bytes leftover after parsing attributes in process `syz.4.257'. [ 331.491654][ T7437] netlink: 12 bytes leftover after parsing attributes in process `syz.4.257'. [ 331.994604][ T7429] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 332.203883][ T7441] trusted_key: encrypted_key: master key parameter '00N004093' is invalid [ 332.222948][ T7441] trusted_key: encrypted_key: master key parameter '00N004093' is invalid [ 334.238509][ T7443] delete_channel: no stack [ 334.498853][ T7459] trusted_key: encrypted_key: master key parameter '00N004093' is invalid [ 335.172129][ T5963] team0 (unregistering): Port device team_slave_1 removed [ 335.230377][ T5963] team0 (unregistering): Port device team_slave_0 removed [ 335.362612][ T7465] siw: device registration error -23 [ 336.480143][ T7277] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 336.545252][ T7277] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 336.718449][ T7470] ubi31: attaching mtd0 [ 336.915432][ T7470] ubi31: scanning is finished [ 336.915532][ T7470] ubi31: empty MTD device detected [ 337.420542][ T7470] ubi31: attached mtd0 (name "mtdram test device", size 0 MiB) [ 337.423009][ T7229] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 337.428609][ T7470] ubi31: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 337.428637][ T7470] ubi31: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 337.450135][ T7470] ubi31: VID header offset: 64 (aligned 64), data offset: 128 [ 337.457653][ T7470] ubi31: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 337.464728][ T7470] ubi31: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 337.472915][ T7470] ubi31: max/mean erase counter: 0/0, WL threshold: 4096, image sequence number: 1167886858 [ 337.483692][ T7470] ubi31: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 337.532386][ T7473] ubi31: background thread "ubi_bgt31d" started, PID 7473 [ 337.543755][ T7229] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 337.655490][ T7477] trusted_key: encrypted_key: master key parameter '00N004093' is invalid [ 337.694723][ T7477] trusted_key: encrypted_key: master key parameter '00N004093' is invalid [ 338.406058][ T7229] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 338.492814][ T7229] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 338.756642][ T7277] team0: Port device team_slave_0 added [ 339.252015][ T7480] netlink: 8 bytes leftover after parsing attributes in process `syz.3.268'. [ 339.264132][ T7277] team0: Port device team_slave_1 added [ 340.334109][ T7494] trusted_key: encrypted_key: master key parameter '00N004093' is invalid [ 340.416361][ T7494] trusted_key: encrypted_key: master key parameter '00N004093' is invalid [ 342.060022][ T7277] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 342.067061][ T7277] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 342.225610][ T7507] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 342.670465][ T7515] trusted_key: encrypted_key: master key parameter '00N004093' is invalid [ 342.768487][ T7518] netlink: 'syz.1.274': attribute type 4 has an invalid length. [ 342.776317][ T7518] netlink: 3657 bytes leftover after parsing attributes in process `syz.1.274'. [ 343.329273][ T7277] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 343.384322][ T7277] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 343.415435][ T7277] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 343.558119][ T7277] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 344.763910][ T7532] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 345.300028][ T7277] hsr_slave_0: entered promiscuous mode [ 345.306897][ T7277] hsr_slave_1: entered promiscuous mode [ 345.360899][ T7541] trusted_key: encrypted_key: master key parameter '00N004093' is invalid [ 345.388216][ T7541] trusted_key: encrypted_key: master key parameter '00N004093' is invalid [ 345.437090][ T7277] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 345.700512][ T7277] Cannot create hsr debugfs directory [ 348.170391][ T7229] 8021q: adding VLAN 0 to HW filter on device bond0 [ 348.441935][ T7563] trusted_key: encrypted_key: master key parameter '00N004093' is invalid [ 348.493972][ T7563] trusted_key: encrypted_key: master key parameter '00N004093' is invalid [ 348.793502][ T7229] 8021q: adding VLAN 0 to HW filter on device team0 [ 348.925055][ T6039] bridge0: port 1(bridge_slave_0) entered blocking state [ 348.932302][ T6039] bridge0: port 1(bridge_slave_0) entered forwarding state [ 349.522950][ T7572] trusted_key: encrypted_key: master key parameter '00N004093' is invalid [ 349.569919][ T7572] trusted_key: encrypted_key: master key parameter '00N004093' is invalid [ 349.669673][ T5842] Bluetooth: hci2: command 0x1003 tx timeout [ 349.670108][ T5856] Bluetooth: hci2: Opcode 0x1003 failed: -110 [ 350.202708][ T6039] bridge0: port 2(bridge_slave_1) entered blocking state [ 350.210063][ T6039] bridge0: port 2(bridge_slave_1) entered forwarding state [ 350.273429][ T7578] trusted_key: encrypted_key: master key parameter '00N004093' is invalid [ 352.443661][ T7592] trusted_key: encrypted_key: master key parameter '00N004093' is invalid [ 352.502790][ T7592] trusted_key: encrypted_key: master key parameter '00N004093' is invalid [ 352.746331][ T7277] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 353.852657][ T7277] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 353.943759][ T7277] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 354.025781][ T7606] fuse: Bad value for 'fd' [ 354.142445][ T7277] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 355.527826][ T7624] trusted_key: encrypted_key: master key parameter '00N004093' is invalid [ 355.550005][ T7624] trusted_key: encrypted_key: master key parameter '00N004093' is invalid [ 356.522046][ T7634] Bluetooth: hci2: Frame reassembly failed (-84) [ 357.156966][ T7229] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 357.272662][ T7638] trusted_key: encrypted_key: master key parameter '00N004093' is invalid [ 357.292929][ T7638] trusted_key: encrypted_key: master key parameter '00N004093' is invalid [ 357.858194][ T7277] 8021q: adding VLAN 0 to HW filter on device bond0 [ 357.907505][ T7277] 8021q: adding VLAN 0 to HW filter on device team0 [ 357.949536][ T6706] bridge0: port 1(bridge_slave_0) entered blocking state [ 357.956809][ T6706] bridge0: port 1(bridge_slave_0) entered forwarding state [ 358.042552][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 358.049815][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 358.237759][ T7277] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 358.408654][ T9] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 358.590430][ T9] usb 2-1: Using ep0 maxpacket: 8 [ 358.661167][ T9] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 358.693337][ T9] usb 2-1: New USB device found, idVendor=0e8d, idProduct=2000, bcdDevice=21.c6 [ 358.739051][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 358.793530][ T9] usb 2-1: config 0 descriptor?? [ 358.877396][ T7663] vivid-007: ================= START STATUS ================= [ 358.886630][ T7663] vivid-007: Generate PTS: true [ 358.892240][ T7663] vivid-007: Generate SCR: true [ 358.898878][ T7663] tpg source WxH: 320x240 (Y'CbCr) [ 358.904282][ T7663] tpg field: 1 [ 358.907902][ T7663] tpg crop: (0,0)/320x240 [ 358.912422][ T7663] tpg compose: (0,0)/320x240 [ 358.917413][ T7663] tpg colorspace: 8 [ 358.921398][ T7663] tpg transfer function: 0/0 [ 358.926234][ T7663] tpg Y'CbCr encoding: 0/0 [ 358.956641][ T7663] tpg quantization: 0/0 [ 358.961392][ T7663] tpg RGB range: 0/2 [ 358.965448][ T7663] vivid-007: ================== END STATUS ================== [ 359.108400][ T5856] Bluetooth: hci2: Opcode 0x1003 failed: -110 [ 359.921970][ T7666] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 360.187570][ T7663] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(12) [ 360.194588][ T7663] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 360.203399][ T7663] vhci_hcd vhci_hcd.0: Device attached [ 360.233627][ T7667] vhci_hcd: connection closed [ 360.245626][ T7666] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 360.335401][ T6706] vhci_hcd: stop threads [ 360.392085][ T6706] vhci_hcd: release socket [ 360.396616][ T6706] vhci_hcd: disconnect device [ 361.475989][ T7277] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 361.551597][ T7676] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 361.678581][ T5912] usb 2-1: USB disconnect, device number 3 [ 362.514267][ T7688] trusted_key: encrypted_key: master key parameter '00N004093' is invalid [ 362.948239][ T7688] trusted_key: encrypted_key: master key parameter '00N004093' is invalid [ 364.096582][ T30] audit: type=1326 audit(1755000922.745:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7689 comm="syz.3.300" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7efc8d18ebe9 code=0x0 [ 366.134088][ T5842] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 366.182660][ T5842] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 366.204416][ T5842] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 366.219594][ T5842] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 366.327211][ T5842] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 366.456189][ T7277] veth0_vlan: entered promiscuous mode [ 366.472902][ T7707] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 366.496229][ T7277] veth1_vlan: entered promiscuous mode [ 367.674744][ T7739] Bluetooth: hci5: Frame reassembly failed (-84) [ 368.491477][ T5856] Bluetooth: hci2: command tx timeout [ 369.749669][ T5842] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 370.608575][ T5842] Bluetooth: hci2: command tx timeout [ 372.168595][ T5856] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 372.184001][ T5856] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 372.185069][ T7719] wg1 speed is unknown, defaulting to 1000 [ 372.206710][ T5856] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 372.234945][ T5856] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 372.250878][ T5856] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 372.418450][ T6706] bridge_slave_1: left allmulticast mode [ 372.460091][ T6706] bridge_slave_1: left promiscuous mode [ 372.466119][ T6706] bridge0: port 2(bridge_slave_1) entered disabled state [ 372.510318][ T6706] bridge_slave_0: left allmulticast mode [ 372.528084][ T6706] bridge_slave_0: left promiscuous mode [ 372.534206][ T6706] bridge0: port 1(bridge_slave_0) entered disabled state [ 372.628541][ T5856] Bluetooth: hci2: command tx timeout [ 374.311691][ T5856] Bluetooth: hci5: command tx timeout [ 374.343576][ T6706] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 374.418282][ T6706] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 374.474489][ T6706] bond0 (unregistering): Released all slaves [ 374.711080][ T5856] Bluetooth: hci2: command tx timeout [ 375.068563][ T7795] netlink: 8 bytes leftover after parsing attributes in process `syz.1.315'. [ 376.378315][ T7807] netlink: 4 bytes leftover after parsing attributes in process `syz.1.315'. [ 376.420213][ T5856] Bluetooth: hci5: command tx timeout [ 376.546122][ T7811] tipc: Can't bind to reserved service type 0 [ 377.132283][ T7819] netlink: zone id is out of range [ 377.137927][ T7819] netlink: zone id is out of range [ 377.144364][ T7819] netlink: zone id is out of range [ 377.150561][ T7819] netlink: zone id is out of range [ 377.156168][ T7819] netlink: zone id is out of range [ 377.162244][ T7819] netlink: zone id is out of range [ 377.167886][ T7819] netlink: zone id is out of range [ 377.174051][ T7819] netlink: zone id is out of range [ 377.181403][ T7819] netlink: zone id is out of range [ 377.187432][ T7819] netlink: zone id is out of range [ 378.468717][ T5856] Bluetooth: hci5: command tx timeout [ 378.468734][ T5842] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 378.474288][ T5845] Bluetooth: hci0: command 0x1003 tx timeout [ 379.986444][ T6706] hsr_slave_0: left promiscuous mode [ 380.232273][ T6706] hsr_slave_1: left promiscuous mode [ 380.239464][ T6706] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 380.266993][ T6706] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 380.690517][ T5845] Bluetooth: hci4: SCO packet for unknown connection handle 954 [ 380.691601][ T5842] Bluetooth: hci5: command tx timeout [ 383.274564][ T6706] team0 (unregistering): Port device team_slave_1 removed [ 383.329119][ T7860] netlink: 8 bytes leftover after parsing attributes in process `syz.4.322'. [ 383.337123][ T6706] team0 (unregistering): Port device team_slave_0 removed [ 383.776686][ T7762] wg1 speed is unknown, defaulting to 1000 [ 383.787519][ T7719] chnl_net:caif_netlink_parms(): no params data found [ 383.981539][ T7865] netlink: 36 bytes leftover after parsing attributes in process `syz.3.327'. [ 383.996941][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 383.997041][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 386.068938][ T7895] trusted_key: encrypted_key: master key parameter '00N004093' is invalid [ 386.091157][ T7895] trusted_key: encrypted_key: master key parameter '00N004093' is invalid [ 386.823989][ T7719] bridge0: port 1(bridge_slave_0) entered blocking state [ 386.838337][ T7719] bridge0: port 1(bridge_slave_0) entered disabled state [ 386.886915][ T7719] bridge_slave_0: entered allmulticast mode [ 386.911228][ T7719] bridge_slave_0: entered promiscuous mode [ 387.505303][ T7719] bridge0: port 2(bridge_slave_1) entered blocking state [ 387.534264][ T7719] bridge0: port 2(bridge_slave_1) entered disabled state [ 387.543850][ T7719] bridge_slave_1: entered allmulticast mode [ 387.566259][ T7719] bridge_slave_1: entered promiscuous mode [ 387.746428][ T7719] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 388.049218][ T7719] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 389.253997][ T7719] team0: Port device team_slave_0 added [ 389.303398][ T7719] team0: Port device team_slave_1 added [ 390.584638][ T7945] xt_CT: You must specify a L4 protocol and not use inversions on it [ 390.794022][ T7946] binder: 7937:7946 ioctl c018620c 200000000000 returned -22 [ 391.680742][ T7944] bridge0: port 3(syz_tun) entered blocking state [ 391.687796][ T7944] bridge0: port 3(syz_tun) entered disabled state [ 391.695224][ T7944] syz_tun: entered allmulticast mode [ 391.702847][ T7944] syz_tun: entered promiscuous mode [ 391.710967][ T7944] bridge0: port 3(syz_tun) entered blocking state [ 391.717872][ T7944] bridge0: port 3(syz_tun) entered forwarding state [ 391.762925][ T7719] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 391.826088][ T7719] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 391.873313][ T7719] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 392.903351][ T7958] trusted_key: encrypted_key: master key parameter '00N004093' is invalid [ 392.935807][ T7958] trusted_key: encrypted_key: master key parameter '00N004093' is invalid [ 393.207717][ T7719] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 393.518842][ T7719] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 393.607306][ T7719] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 393.982720][ T7969] capability: warning: `syz.3.341' uses 32-bit capabilities (legacy support in use) [ 394.392531][ T7762] chnl_net:caif_netlink_parms(): no params data found [ 395.099033][ T7983] trusted_key: encrypted_key: master key parameter '00N004093' is invalid [ 395.380426][ T7719] hsr_slave_0: entered promiscuous mode [ 395.461968][ T7719] hsr_slave_1: entered promiscuous mode [ 395.629250][ T7719] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 395.640796][ T7719] Cannot create hsr debugfs directory [ 399.246131][ T7762] bridge0: port 1(bridge_slave_0) entered blocking state [ 399.278251][ T7762] bridge0: port 1(bridge_slave_0) entered disabled state [ 399.287040][ T7762] bridge_slave_0: entered allmulticast mode [ 399.307656][ T7762] bridge_slave_0: entered promiscuous mode [ 400.618435][ T7762] bridge0: port 2(bridge_slave_1) entered blocking state [ 400.625664][ T7762] bridge0: port 2(bridge_slave_1) entered disabled state [ 400.805036][ T7762] bridge_slave_1: entered allmulticast mode [ 400.867436][ T7762] bridge_slave_1: entered promiscuous mode [ 401.829273][ T8037] ubi: mtd0 is already attached to ubi31 [ 402.765842][ T7762] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 402.918217][ T6039] bridge_slave_1: left allmulticast mode [ 402.923942][ T6039] bridge_slave_1: left promiscuous mode [ 402.948340][ T6039] bridge0: port 2(bridge_slave_1) entered disabled state [ 402.995893][ T6039] bridge_slave_0: left allmulticast mode [ 403.012084][ T6039] bridge_slave_0: left promiscuous mode [ 403.044048][ T6039] bridge0: port 1(bridge_slave_0) entered disabled state [ 404.249490][ T8056] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(6) [ 404.256201][ T8056] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 404.300827][ T8056] vhci_hcd vhci_hcd.0: Device attached [ 404.678793][ T5972] usb 35-1: new low-speed USB device number 2 using vhci_hcd [ 404.735452][ T8057] vhci_hcd: connection reset by peer [ 404.757790][ T12] vhci_hcd: stop threads [ 404.763059][ T12] vhci_hcd: release socket [ 404.770558][ T12] vhci_hcd: disconnect device [ 405.413294][ T6039] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 405.431909][ T6039] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 405.483733][ T6039] bond0 (unregistering): Released all slaves [ 405.514108][ T7762] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 405.942957][ T8075] netlink: 'syz.1.359': attribute type 1 has an invalid length. [ 406.710707][ T7762] team0: Port device team_slave_0 added [ 406.843280][ T7762] team0: Port device team_slave_1 added [ 407.249164][ T7762] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 407.283549][ T7762] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 407.355636][ T7762] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 407.370120][ T7762] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 407.377307][ T7762] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 407.491893][ T7762] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 407.618233][ T6039] hsr_slave_0: left promiscuous mode [ 407.625498][ T6039] hsr_slave_1: left promiscuous mode [ 407.650881][ T6039] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 407.680636][ T6039] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 407.824250][ T6039] veth1_vlan: left promiscuous mode [ 407.830238][ T6039] veth0_vlan: left promiscuous mode [ 408.093811][ T6039] Oops: general protection fault, probably for non-canonical address 0xdffffc001fffe000: 0000 [#1] SMP KASAN PTI [ 408.105874][ T6039] KASAN: probably user-memory-access in range [0x00000000ffff0000-0x00000000ffff0007] [ 408.115476][ T6039] CPU: 0 UID: 0 PID: 6039 Comm: kworker/u8:10 Not tainted 6.16.0-syzkaller #0 PREEMPT(full) [ 408.125744][ T6039] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 408.135840][ T6039] Workqueue: netns cleanup_net [ 408.140666][ T6039] RIP: 0010:ip6_mc_clear_src+0x119/0x4e0 [ 408.146440][ T6039] Code: ff ff ff e8 49 fe 41 01 89 c5 31 ff 89 c6 e8 4e 9c 9b f7 85 ed 74 45 e8 05 98 9b f7 eb 05 e8 fe 97 9b f7 4c 89 e0 48 c1 e8 03 <42> 80 3c 28 00 74 08 4c 89 e7 e8 28 7f fb f7 49 8b 2c 24 49 8d 7c [ 408.166518][ T6039] RSP: 0018:ffffc9000b22f038 EFLAGS: 00010206 [ 408.172782][ T6039] RAX: 000000001fffe000 RBX: 1ffff1100abc0f82 RCX: ffff88802f5ebc00 [ 408.181053][ T6039] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000000 [ 408.189221][ T6039] RBP: 0000000000000001 R08: ffffffff8fa0b3f7 R09: 1ffffffff1f4167e [ 408.197395][ T6039] R10: dffffc0000000000 R11: fffffbfff1f4167f R12: 00000000ffff0000 [ 408.205488][ T6039] R13: dffffc0000000000 R14: 0000000000000538 R15: ffff888055e07c10 [ 408.213484][ T6039] FS: 0000000000000000(0000) GS:ffff888125c57000(0000) knlGS:0000000000000000 [ 408.222530][ T6039] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 408.229230][ T6039] CR2: 00007fa88659cf98 CR3: 0000000057fba000 CR4: 00000000003526f0 [ 408.237232][ T6039] Call Trace: [ 408.240530][ T6039] [ 408.243564][ T6039] __ipv6_dev_mc_dec+0x30d/0x390 [ 408.248715][ T6039] __ipv6_ifa_notify+0x43d/0xac0 [ 408.253693][ T6039] ? __pfx___ipv6_ifa_notify+0x10/0x10 [ 408.259366][ T6039] ? __lock_acquire+0xab9/0xd20 [ 408.264233][ T6039] ? __local_bh_enable_ip+0x12d/0x1c0 [ 408.269825][ T6039] ? lockdep_hardirqs_on+0x9c/0x150 [ 408.275339][ T6039] ? __local_bh_enable_ip+0x12d/0x1c0 [ 408.280732][ T6039] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 408.286469][ T6039] addrconf_ifdown+0xe69/0x1880 [ 408.291443][ T6039] ? tls_dev_event+0x717/0xec0 [ 408.296224][ T6039] ? __pfx_addrconf_ifdown+0x10/0x10 [ 408.301622][ T6039] addrconf_notify+0x1bc/0x1010 [ 408.306511][ T6039] notifier_call_chain+0x1b3/0x3e0 [ 408.312172][ T6039] dev_close_many+0x29c/0x410 [ 408.316963][ T6039] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 408.323050][ T6039] ? __pfx_dev_close_many+0x10/0x10 [ 408.328276][ T6039] unregister_netdevice_many_notify+0x834/0x2320 [ 408.335012][ T6039] ? __pfx_unregister_netdevice_many_notify+0x10/0x10 [ 408.341795][ T6039] ? kvfree_call_rcu+0x374/0x410 [ 408.346838][ T6039] ? unregister_netdevice_queue+0x1b3/0x380 [ 408.352748][ T6039] ? batadv_meshif_destroy_netlink+0x1dd/0x270 [ 408.358925][ T6039] default_device_exit_batch+0x819/0x890 [ 408.364602][ T6039] ? __pfx___might_resched+0x10/0x10 [ 408.369904][ T6039] ? __pfx_default_device_exit_batch+0x10/0x10 [ 408.376163][ T6039] ? __pfx_rdma_dev_exit_net+0x10/0x10 [ 408.381783][ T6039] ? net_generic+0x1e/0x240 [ 408.386414][ T6039] ? __pfx_default_device_exit_batch+0x10/0x10 [ 408.392614][ T6039] ops_undo_list+0x522/0x990 [ 408.397244][ T6039] ? __pfx_ops_undo_list+0x10/0x10 [ 408.402383][ T6039] cleanup_net+0x4c5/0x800 [ 408.406929][ T6039] ? __pfx_cleanup_net+0x10/0x10 [ 408.411920][ T6039] ? _raw_spin_unlock_irq+0x23/0x50 [ 408.417240][ T6039] ? process_scheduled_works+0x9ef/0x17b0 [ 408.422996][ T6039] ? process_scheduled_works+0x9ef/0x17b0 [ 408.428751][ T6039] process_scheduled_works+0xade/0x17b0 [ 408.434325][ T6039] ? __pfx_process_scheduled_works+0x10/0x10 [ 408.440456][ T6039] worker_thread+0x8a0/0xda0 [ 408.445088][ T6039] kthread+0x70e/0x8a0 [ 408.449184][ T6039] ? __pfx_worker_thread+0x10/0x10 [ 408.454315][ T6039] ? __pfx_kthread+0x10/0x10 [ 408.458950][ T6039] ? _raw_spin_unlock_irq+0x23/0x50 [ 408.464165][ T6039] ? lockdep_hardirqs_on+0x9c/0x150 [ 408.469464][ T6039] ? __pfx_kthread+0x10/0x10 [ 408.474076][ T6039] ret_from_fork+0x3fc/0x770 [ 408.478780][ T6039] ? __pfx_ret_from_fork+0x10/0x10 [ 408.484015][ T6039] ? __switch_to_asm+0x39/0x70 [ 408.488806][ T6039] ? __switch_to_asm+0x33/0x70 [ 408.493703][ T6039] ? __pfx_kthread+0x10/0x10 [ 408.498329][ T6039] ret_from_fork_asm+0x1a/0x30 [ 408.503253][ T6039] [ 408.506287][ T6039] Modules linked in: [ 408.511530][ T6039] ---[ end trace 0000000000000000 ]--- [ 408.962841][ T6039] RIP: 0010:ip6_mc_clear_src+0x119/0x4e0 [ 408.968765][ T6039] Code: ff ff ff e8 49 fe 41 01 89 c5 31 ff 89 c6 e8 4e 9c 9b f7 85 ed 74 45 e8 05 98 9b f7 eb 05 e8 fe 97 9b f7 4c 89 e0 48 c1 e8 03 <42> 80 3c 28 00 74 08 4c 89 e7 e8 28 7f fb f7 49 8b 2c 24 49 8d 7c [ 408.990247][ T6039] RSP: 0018:ffffc9000b22f038 EFLAGS: 00010206 [ 408.996594][ T6039] RAX: 000000001fffe000 RBX: 1ffff1100abc0f82 RCX: ffff88802f5ebc00 [ 409.007655][ T6039] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000000 [ 409.015958][ T6039] RBP: 0000000000000001 R08: ffffffff8fa0b3f7 R09: 1ffffffff1f4167e [ 409.024448][ T6039] R10: dffffc0000000000 R11: fffffbfff1f4167f R12: 00000000ffff0000 [ 409.032735][ T6039] R13: dffffc0000000000 R14: 0000000000000538 R15: ffff888055e07c10 [ 409.041148][ T6039] FS: 0000000000000000(0000) GS:ffff888125d57000(0000) knlGS:0000000000000000 [ 409.050166][ T6039] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 409.056908][ T6039] CR2: 00007fa885984198 CR3: 0000000033640000 CR4: 00000000003526f0 [ 409.065053][ T6039] Kernel panic - not syncing: Fatal exception [ 409.071559][ T6039] Kernel Offset: disabled [ 409.075929][ T6039] Rebooting in 86400 seconds..