last executing test programs: 20m27.121888399s ago: executing program 32 (id=19): socket$inet6_tcp(0xa, 0x1, 0x0) socket$kcm(0x10, 0x2, 0x4) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x5) r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFDSTADDR(r0, 0x8918, 0x0) ioctl$sock_inet_SIOCSIFDSTADDR(r0, 0x8918, &(0x7f0000000000)={'ipvlan1\x00', {0x2, 0x4e1f, @empty}}) r1 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) bind$netrom(r1, 0x0, 0x0) sendto(r1, 0x0, 0x0, 0x0, &(0x7f00000000c0)=@ieee802154={0x24, @short={0x2, 0x0, 0xaaa3}}, 0x80) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000007c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$int_in(0xffffffffffffffff, 0x5452, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000dc0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x30102, 0x0) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000340)={0x1, &(0x7f0000000000)=[{0x6, 0xf, 0x0, 0x7fff8000}]}) close_range(r3, 0xffffffffffffffff, 0x0) io_uring_enter(0xffffffffffffffff, 0x847ba, 0x0, 0xe, 0x0, 0x0) 19m19.750752986s ago: executing program 33 (id=107): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000200)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-twofish-3way\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000300)="c99b57381801238c09d0ff0f1d0dbd30", 0x10) r4 = accept4(r3, 0x0, 0x0, 0x0) recvmmsg(r4, &(0x7f00000001c0)=[{{0x0, 0x0, &(0x7f00000008c0)=[{&(0x7f00000006c0)=""/188, 0xbc}], 0x1}, 0x7}], 0x1, 0x10000, 0x0) sendmsg$nl_route_sched_retired(r4, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000001e40)=@newtfilter={0xe88, 0x2c, 0x20, 0x70bd2c, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x9, 0xf}, {0xfff1, 0x2}, {0x7, 0xffe0}}, [@f_tcindex={{0xc}, {0xe58, 0x2, [@TCA_TCINDEX_ACT={0xe54, 0x7, [@m_pedit={0xe50, 0x1a, 0x0, 0x0, {{0xa}, {0xe24, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS_EX={0xe20, 0x4, {{{0x9, 0x0, 0x6, 0x0, 0x9}, 0x0, 0x7}, [{0xff, 0x5, 0xe9, 0x9, 0x1, 0x8bf}, {0xb992, 0x4, 0x14, 0x7, 0x80f, 0x7}, {0x90, 0x7fffffff, 0x4, 0xfd, 0x3, 0x3ff}, {0x28, 0x1, 0x40, 0x9, 0x1, 0xc85e}, {0x9, 0x4, 0xfff, 0x66, 0x2, 0x800}, {0x4, 0x4, 0xfff, 0x7, 0x9, 0x80000001}, {0x72, 0xd192, 0x7034, 0xfd8, 0x2, 0x101}, {0x7735, 0x72838b6a, 0x6, 0xb04, 0x10001, 0x2}, {0x4, 0x7f, 0xc9f, 0x42b, 0x0, 0x3}, {0x16f6bb9, 0xde, 0x200000, 0x2, 0x101, 0x1}, {0x4, 0x10008000, 0x4, 0x2, 0x5aa, 0xdf}, {0x48, 0xa, 0x0, 0x874, 0xff, 0x2}, {0x8a25, 0x2, 0x6, 0x0, 0x9, 0x2}, {0x1, 0x7fffffff, 0x1, 0x9, 0x7fffffff, 0x7}, {0xfffffffd, 0xcfd, 0xfc4e, 0x0, 0xfffffffe, 0x4}, {0x6, 0x1, 0xc, 0x10, 0x4, 0x8}, {0x9, 0x800, 0x7a01b583, 0x3, 0xffffffff, 0xe3b}, {0x5, 0x8, 0x5, 0x9f, 0x651, 0x5}, {0x4, 0x5, 0x1000, 0x3, 0x259db723, 0x9}, {0x10, 0x0, 0x3, 0x8, 0x13000000, 0x7fffffff}, {0xf0, 0x2, 0x0, 0x101, 0x101, 0x5}, {0x1, 0x127, 0x6, 0xffff, 0x8001, 0x4}, {0x0, 0x8, 0xffff6f39, 0xca51, 0x9, 0x8}, {0x8001, 0x81, 0x3, 0x4, 0xfffffff9}, {0x5, 0xa3, 0x0, 0x0, 0x1e400000, 0x100}, {0x8, 0x6, 0x0, 0x5, 0x4, 0xfffffffe}, {0x8, 0x1ff, 0x4, 0x6d13addf, 0x140, 0x6}, {0x0, 0x6, 0x2, 0x5, 0x5, 0x1b}, {0x80, 0x0, 0x401, 0x9, 0xfd, 0x1}, {0x9, 0x2, 0x5, 0x896, 0xffff7fff, 0xeb6}, {0x0, 0x28, 0x5}, {0x400, 0xfff, 0x7f6, 0x100, 0x3, 0x7}, {0x2, 0xad25, 0x77, 0x80000000, 0x1, 0xd}, {0x1, 0x3, 0x8, 0x7, 0x9, 0x9}, {0x7, 0x1, 0xb68e, 0x4, 0x5, 0x800}, {0x0, 0x1000, 0x9, 0x5, 0x7}, {0x2, 0x5a7, 0x5, 0x9, 0x24, 0xfffffffe}, {0x200, 0x2, 0x5, 0x1, 0x4, 0x6}, {0x3, 0x0, 0x1, 0x5, 0x40, 0x4}, {0x8, 0x10, 0x4, 0x5, 0x4, 0x1}, {0x8000, 0xec, 0x8, 0x3, 0x4, 0x81}, {0x0, 0x6, 0x9, 0x3, 0xfffffff8, 0x4}, {0x3, 0x1, 0x0, 0xc4b, 0x0, 0x5}, {0x8, 0x0, 0xffffffff, 0x5, 0x3, 0x40}, {0x3, 0x6, 0x0, 0x2, 0x8, 0xe}, {0x2, 0x401, 0x5759cd20, 0x4, 0x933, 0x2}, {0x8000, 0xc89, 0x8, 0x5, 0x2, 0x218}, {0x80000000, 0x0, 0x3, 0x6, 0xe3, 0x1}, {0x6, 0x1ff, 0x4, 0x1e9, 0x5, 0x1}, {0x10, 0x6b, 0x23, 0x5, 0xfffffffc}, {0x4, 0x828f, 0x0, 0x0, 0x6, 0x4}, {0x93c7, 0x4, 0xe, 0x3259, 0x1, 0x2000}, {0x9, 0xff66, 0xd089, 0x4, 0x35, 0xc20}, {0x1, 0x281, 0x7, 0x4, 0x4, 0x2}, {0xd, 0x6, 0xa0, 0x1, 0x9, 0x8}, {0x22, 0x0, 0x5, 0x8, 0x2, 0x5}, {0xe8, 0xdc00, 0x8, 0x80000001, 0x4, 0x1}, {0xf, 0x4, 0x9, 0x2, 0x8000, 0x480}, {0x1, 0xf4000000, 0x8, 0x8, 0x200}, {0x401, 0x0, 0x0, 0x43, 0x7, 0x3}, {0x9, 0x1ff, 0x7fff, 0x3, 0x9, 0x5}, {0x7, 0x38000, 0x3, 0x5, 0xa58d, 0xba43}, {0x400000, 0xff, 0xfffffff0, 0x9, 0x0, 0x6}, {0x1, 0x7, 0x3, 0xa, 0xcd0, 0x7110}, {0x8, 0x0, 0xf, 0x4, 0x1b, 0x4}, {0xc, 0x14, 0x1ff, 0x9, 0x8, 0x3}, {0x5, 0x3da, 0xff, 0x5, 0x5, 0x3}, {0x7f67, 0xffff, 0x9, 0x33a925b9, 0x80000001, 0x8000}, {0x201023e3, 0x8, 0x7, 0x3, 0x6, 0x4}, {0x1ff, 0x57, 0x0, 0xe7c, 0x4, 0x800}, {0x5, 0xfffffffe, 0xb, 0x80, 0xfffffffc, 0x7}, {0x8, 0x1e, 0x21d, 0x1, 0x74426d9d, 0x8d}, {0xfffffff8, 0xffffffff, 0xc8, 0x7fff, 0x2, 0x7fffffff}, {0x5c, 0x8, 0x40, 0xbf4, 0xff, 0x6}, {0x2, 0xb6, 0x5, 0x70000, 0xed2b, 0x8}, {0x2, 0x7, 0x3, 0x8001, 0x2, 0x7}, {0x79a2, 0x2, 0x4000, 0x3, 0x80, 0x5}, {0x4, 0x2, 0x5, 0x4, 0xfffff001, 0xf}, {0x1e7, 0x80000001, 0x4, 0x7, 0x2, 0xfff}, {0x6, 0x3ff, 0x7, 0x3, 0x9, 0xfff}, {0x4, 0x9, 0x3, 0x6, 0xb, 0x6}, {0x1, 0x2, 0x0, 0x1, 0x2, 0x6}, {0xffffffd4, 0x3, 0x80, 0xffff9f41, 0xc, 0x8}, {0x6, 0x4, 0xd, 0xfffff271, 0x2, 0x10001}, {0x5, 0x2, 0x2, 0x1, 0x7, 0xc7e1}, {0x7, 0x2, 0x100, 0x1000, 0x3, 0x10}, {0x8, 0x80, 0x192f, 0xa1, 0x2, 0x9}, {0x2, 0x2, 0x9, 0x800, 0xbb, 0x3}, {0xf, 0x1, 0x3, 0xb, 0x7, 0x14e0}, {0x9, 0x2, 0xca, 0xc2a5, 0xf9f5, 0x4}, {0x40, 0x7, 0x3, 0x4, 0x4, 0x2}, {0xf, 0x13, 0x7, 0xfffffffd, 0x3, 0x401}, {0x2, 0x3, 0xffffffff, 0xd9e, 0xc2, 0x20}, {0x54, 0xec, 0x6, 0x6b2, 0xad, 0x6}, {0x5, 0x6, 0x6, 0x401, 0x6, 0x2}, {0xf, 0x3c7, 0xffff, 0x7ff, 0x2, 0x8001}, {0x7, 0x9, 0x2, 0x8001, 0x401, 0x5}, {0xffff, 0x4, 0x81, 0x4, 0x9e, 0x7}, {0x10000, 0x1, 0xf, 0x7fffffff, 0x2, 0x9}, {0x4e1b, 0x8000, 0xa, 0x4, 0x1, 0xffff59e7}, {0x3f4, 0x3, 0x400, 0x1, 0xf2d, 0x745d7b2a}, {0x4, 0x8000000, 0x20d, 0x9, 0x7, 0x101}, {0xc, 0x356, 0x87, 0x5, 0x45, 0x7ff}, {0xffff, 0x10000, 0x7, 0x40, 0x800, 0x2}, {0x7, 0x2, 0x200, 0x4, 0x2, 0x2}, {0x5, 0xfd5, 0x8, 0x4, 0xfffffffc, 0xb85d}, {0x88d, 0x6, 0xffffffff, 0x7, 0x8, 0xcf}, {0x9, 0x0, 0x7, 0xfffffff8, 0xfffffefd, 0x3}, {0x2, 0x4, 0x43d7, 0xff, 0xc7e, 0x5}, {0x6, 0x8, 0x6, 0xd21, 0xc7, 0x8}, {0x2, 0xad, 0x5, 0x1, 0xfffffffc, 0x1c}, {0x7fffffff, 0x44, 0x8e, 0x0, 0x1ff, 0x1}, {0x7fff, 0x7fffffff, 0xfffffff8, 0x5, 0x2, 0x7}, {0x9, 0x4, 0x0, 0x6, 0xa, 0x6}, {0x6, 0x28, 0x100, 0x5, 0x8}, {0x1, 0xf6, 0x9ea, 0x7fff, 0xfffffffb, 0x7}, {0x101, 0x7ff, 0x4, 0x7, 0x0, 0x400}, {0x1000, 0x8, 0x4, 0x5, 0xfffffff2, 0x101}, {0x8515, 0x0, 0x80000001, 0xfffffff7, 0x80f5, 0x3}, {0x0, 0x9, 0xce, 0x401, 0x6, 0x8}, {0x200, 0x9, 0xb, 0x5, 0x3, 0x2}, {0x3000, 0x3, 0xf4bb, 0x3ff, 0x2, 0x2}, {0xd2e1, 0x1, 0x4, 0xfffffffb, 0x9, 0x1ff}, {0x2, 0x2, 0x8, 0x3, 0x3, 0x8}, {0x10, 0x0, 0x38a, 0x2, 0xfffffffe, 0x4}, {0x85, 0x9, 0x1ff, 0x7, 0x7f, 0x401}, {0x6, 0x6, 0x1, 0x3, 0x6, 0x7}, {0x2, 0x6, 0x1, 0xff, 0x1000, 0x6f4}], [{0x1}, {0x2, 0x1}, {0x5}, {0x2, 0x1}, {0x4}, {0x4, 0x1}, {0x0, 0x1}, {0x5}, {0x4}, {0x2, 0x1}, {0x5, 0xfb51726ae9cc3196}, {0x1, 0x1}, {0x5, 0x1}, {0x3}, {0x0, 0x1}, {0x4}, {0x4}, {}, {0x5}, {0x0, 0x1}, {0x5, 0x1}, {0x0, 0x1}, {0x4}, {0x1, 0x1}, {0x4, 0x1}, {0x2}, {0x4}, {0x2}, {}, {0x1, 0x1}, {0x0, 0x1}, {0x1, 0x1}, {0x7, 0x1}, {}, {0x4, 0x1}, {0x69029817d8283d0}, {0x2}, {0x1}, {0x1}, {0x3}, {0x3}, {0x5, 0x1}, {}, {0x1, 0x1}, {0x4}, {0x3}, {0x5, 0x1}, {0x3, 0x1}, {0x5, 0x1}, {0x1, 0x1}, {0x5, 0x1}, {}, {0x3, 0x1}, {0x1}, {0x5}, {}, {0x6}, {0x1}, {0x2, 0x1}, {}, {0x1}, {0x2}, {0x3, 0x1}, {0x4, 0x1}, {0x2, 0x1}, {0x3, 0x1}, {0x2}, {0x5}, {0x3, 0x1}, {0x2, 0x1}, {0x3}, {}, {0x0, 0x1}, {}, {0x2, 0x1}, {0x3, 0x1}, {0x3}, {0x1, 0x1}, {0x5, 0x1}, {0x5}, {0x7}, {0x5, 0x1}, {0x2}, {0x5}, {0x5, 0x1}, {0x5, 0x1}, {0x5, 0x1}, {0x1}, {0x2}, {0x0, 0x1}, {0x1}, {0x2, 0x1}, {0x1}, {}, {0x2, 0x1}, {0x1, 0x1}, {}, {0x0, 0x1}, {0x2}, {}, {}, {0x2}, {0x2, 0x1}, {}, {0x5, 0x1}, {0x3}, {}, {0x5}, {0x5}, {0x4, 0x1}, {0x1}, {0x1, 0x1}, {0x3, 0x1}, {0x5}, {0x4, 0x1}, {0x3}, {0x5}, {0x4, 0x1}, {0x4, 0x1}, {}, {0x1, 0x1}, {0x2, 0x1}, {0x1, 0xf8e8073cdc0d3e77}, {0x3}, {0x0, 0x1}, {0x3}, {0x7289fafe301ce6fe, 0x1}, {0x0, 0x1}], 0x1}}]}, {0x4}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2}}}}]}]}}]}, 0xe88}, 0x1, 0x0, 0x0, 0x84}, 0x800) 18m40.164146246s ago: executing program 34 (id=145): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x6, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = syz_open_dev$cec(&(0x7f0000000080), 0x0, 0x0) ioctl$CEC_S_MODE(r1, 0x40046109, 0x0) ioctl$CEC_S_MODE(r1, 0x40046109, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@ipv4_delroute={0x44, 0x19, 0x901, 0x0, 0x0, {0x2, 0x18, 0x0, 0x0, 0x0, 0x2, 0xfd, 0x1}, [@RTA_DST={0x8, 0x1, @dev}, @RTA_GATEWAY={0x8, 0x5, @initdev={0xac, 0x1e, 0x1, 0x0}}, @RTA_ENCAP={0x10, 0x16, 0x0, 0x1, @LWTUNNEL_IP6_ID={0xc, 0x1, 0x4}}, @RTA_ENCAP_TYPE={0x6, 0x15, 0x1}]}, 0x44}}, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000d80)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct={0x0, 0x0, 0x0, 0x4, 0x1, 0x1}]}}, 0x0, 0x26, 0x0, 0x1}, 0x28) ioctl$sock_FIOGETOWN(r2, 0x8903, &(0x7f0000000040)) syz_emit_ethernet(0x0, 0x0, 0x0) bind$isdn(0xffffffffffffffff, &(0x7f0000000100)={0x22, 0x1, 0xec, 0x9, 0xb3}, 0x6) sendmsg$ETHTOOL_MSG_TSINFO_GET(0xffffffffffffffff, 0x0, 0x4008800) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x401, 0x0) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(0xffffffffffffffff, 0xc058534f, 0x0) ioctl$TIOCGPGRP(r3, 0x5437, 0x0) 13m49.648439246s ago: executing program 35 (id=162): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000200)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-twofish-3way\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000300)="c99b57381801238c09d0ff0f1d0dbd30", 0x10) r4 = accept4(r3, 0x0, 0x0, 0x0) sendmsg$nl_route_sched_retired(r4, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000001e40)=@newtfilter={0xe88, 0x2c, 0x20, 0x70bd2c, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x9, 0xf}, {0xfff1, 0x2}, {0x7, 0xffe0}}, [@f_tcindex={{0xc}, {0xe58, 0x2, [@TCA_TCINDEX_ACT={0xe54, 0x7, [@m_pedit={0xe50, 0x1a, 0x0, 0x0, {{0xa}, {0xe24, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS_EX={0xe20, 0x4, {{{0x9, 0x0, 0x6, 0x0, 0x9}, 0x0, 0x7}, [{0xff, 0x5, 0xe9, 0x9, 0x1, 0x8bf}, {0xb992, 0x4, 0x14, 0x7, 0x80f, 0x7}, {0x90, 0x7fffffff, 0x4, 0xfd, 0x3, 0x3ff}, {0x28, 0x1, 0x40, 0x9, 0x1, 0xc85e}, {0x9, 0x4, 0xfff, 0x66, 0x2, 0x800}, {0x4, 0x4, 0xfff, 0x7, 0x9, 0x80000001}, {0x72, 0xd192, 0x7034, 0xfd8, 0x2, 0x101}, {0x7735, 0x72838b6a, 0x6, 0xb04, 0x10001, 0x2}, {0x4, 0x7f, 0xc9f, 0x42b, 0x0, 0x3}, {0x16f6bb9, 0xde, 0x200000, 0x2, 0x101, 0x1}, {0x4, 0x10008000, 0x4, 0x2, 0x5aa, 0xdf}, {0x48, 0xa, 0x0, 0x874, 0xff, 0x2}, {0x8a25, 0x2, 0x6, 0x0, 0x9, 0x2}, {0x1, 0x7fffffff, 0x1, 0x9, 0x7fffffff, 0x7}, {0xfffffffd, 0xcfd, 0xfc4e, 0x0, 0xfffffffe, 0x4}, {0x6, 0x1, 0xc, 0x10, 0x4, 0x8}, {0x9, 0x800, 0x7a01b583, 0x3, 0xffffffff, 0xe3b}, {0x5, 0x8, 0x5, 0x9f, 0x651, 0x5}, {0x4, 0x5, 0x1000, 0x3, 0x259db723, 0x9}, {0x10, 0x0, 0x3, 0x8, 0x13000000, 0x7fffffff}, {0xf0, 0x2, 0x0, 0x101, 0x101, 0x5}, {0x1, 0x127, 0x6, 0xffff, 0x8001, 0x4}, {0x0, 0x8, 0xffff6f39, 0xca51, 0x9, 0x8}, {0x8001, 0x81, 0x3, 0x4, 0xfffffff9}, {0x5, 0xa3, 0x0, 0x0, 0x1e400000, 0x100}, {0x8, 0x6, 0x0, 0x5, 0x4, 0xfffffffe}, {0x8, 0x1ff, 0x4, 0x6d13addf, 0x140, 0x6}, {0x0, 0x6, 0x2, 0x5, 0x5, 0x1b}, {0x80, 0x0, 0x401, 0x9, 0xfd, 0x1}, {0x9, 0x2, 0x5, 0x896, 0xffff7fff, 0xeb6}, {0x0, 0x28, 0x5}, {0x400, 0xfff, 0x7f6, 0x100, 0x3, 0x7}, {0x2, 0xad25, 0x77, 0x80000000, 0x1, 0xd}, {0x1, 0x3, 0x8, 0x7, 0x9, 0x9}, {0x7, 0x1, 0xb68e, 0x4, 0x5, 0x800}, {0x0, 0x1000, 0x9, 0x5, 0x7}, {0x2, 0x5a7, 0x5, 0x9, 0x24, 0xfffffffe}, {0x200, 0x2, 0x5, 0x1, 0x4, 0x6}, {0x3, 0x0, 0x1, 0x5, 0x40, 0x4}, {0x8, 0x10, 0x4, 0x5, 0x4, 0x1}, {0x8000, 0xec, 0x8, 0x3, 0x4, 0x81}, {0x0, 0x6, 0x9, 0x3, 0xfffffff8, 0x4}, {0x3, 0x1, 0x0, 0xc4b, 0x0, 0x5}, {0x8, 0x0, 0xffffffff, 0x5, 0x3, 0x40}, {0x3, 0x6, 0x0, 0x2, 0x8, 0xe}, {0x2, 0x401, 0x5759cd20, 0x4, 0x933, 0x2}, {0x8000, 0xc89, 0x8, 0x5, 0x2, 0x218}, {0x80000000, 0x0, 0x3, 0x6, 0xe3, 0x1}, {0x6, 0x1ff, 0x4, 0x1e9, 0x5, 0x1}, {0x10, 0x6b, 0x23, 0x5, 0xfffffffc}, {0x4, 0x828f, 0x0, 0x0, 0x6, 0x4}, {0x93c7, 0x4, 0xe, 0x3259, 0x1, 0x2000}, {0x9, 0xff66, 0xd089, 0x4, 0x35, 0xc20}, {0x1, 0x281, 0x7, 0x4, 0x4, 0x2}, {0xd, 0x6, 0xa0, 0x1, 0x9, 0x8}, {0x22, 0x0, 0x5, 0x8, 0x2, 0x5}, {0xe8, 0xdc00, 0x8, 0x80000001, 0x4, 0x1}, {0xf, 0x4, 0x9, 0x2, 0x8000, 0x480}, {0x1, 0xf4000000, 0x8, 0x8, 0x200}, {0x401, 0x0, 0x0, 0x43, 0x7, 0x3}, {0x9, 0x1ff, 0x7fff, 0x3, 0x9, 0x5}, {0x7, 0x38000, 0x3, 0x5, 0xa58d, 0xba43}, {0x400000, 0xff, 0xfffffff0, 0x9, 0x0, 0x6}, {0x1, 0x7, 0x3, 0xa, 0xcd0, 0x7110}, {0x8, 0x0, 0xf, 0x4, 0x1b, 0x4}, {0xc, 0x14, 0x1ff, 0x9, 0x8, 0x3}, {0x5, 0x3da, 0xff, 0x5, 0x5, 0x3}, {0x7f67, 0xffff, 0x9, 0x33a925b9, 0x80000001, 0x8000}, {0x201023e3, 0x8, 0x7, 0x3, 0x6, 0x4}, {0x1ff, 0x57, 0x0, 0xe7c, 0x4, 0x800}, {0x5, 0xfffffffe, 0xb, 0x80, 0xfffffffc, 0x7}, {0x8, 0x1e, 0x21d, 0x1, 0x74426d9d, 0x8d}, {0xfffffff8, 0xffffffff, 0xc8, 0x7fff, 0x2, 0x7fffffff}, {0x5c, 0x8, 0x40, 0xbf4, 0xff, 0x6}, {0x2, 0xb6, 0x5, 0x70000, 0xed2b, 0x8}, {0x2, 0x7, 0x3, 0x8001, 0x2, 0x7}, {0x79a2, 0x2, 0x4000, 0x3, 0x80, 0x5}, {0x4, 0x2, 0x5, 0x4, 0xfffff001, 0xf}, {0x1e7, 0x80000001, 0x4, 0x7, 0x2, 0xfff}, {0x6, 0x3ff, 0x7, 0x3, 0x9, 0xfff}, {0x4, 0x9, 0x3, 0x6, 0xb, 0x6}, {0x1, 0x2, 0x0, 0x1, 0x2, 0x6}, {0xffffffd4, 0x3, 0x80, 0xffff9f41, 0xc, 0x8}, {0x6, 0x4, 0xd, 0xfffff271, 0x2, 0x10001}, {0x5, 0x2, 0x2, 0x1, 0x7, 0xc7e1}, {0x7, 0x2, 0x100, 0x1000, 0x3, 0x10}, {0x8, 0x80, 0x192f, 0xa1, 0x2, 0x9}, {0x2, 0x2, 0x9, 0x800, 0xbb, 0x3}, {0xf, 0x1, 0x3, 0xb, 0x7, 0x14e0}, {0x9, 0x2, 0xca, 0xc2a5, 0xf9f5, 0x4}, {0x40, 0x7, 0x3, 0x4, 0x4, 0x2}, {0xf, 0x13, 0x7, 0xfffffffd, 0x3, 0x401}, {0x2, 0x3, 0xffffffff, 0xd9e, 0xc2, 0x20}, {0x54, 0xec, 0x6, 0x6b2, 0xad, 0x6}, {0x5, 0x6, 0x6, 0x401, 0x6, 0x2}, {0xf, 0x3c7, 0xffff, 0x7ff, 0x2, 0x8001}, {0x7, 0x9, 0x2, 0x8001, 0x401, 0x5}, {0xffff, 0x4, 0x81, 0x4, 0x9e, 0x7}, {0x10000, 0x1, 0xf, 0x7fffffff, 0x2, 0x9}, {0x4e1b, 0x8000, 0xa, 0x4, 0x1, 0xffff59e7}, {0x3f4, 0x3, 0x400, 0x1, 0xf2d, 0x745d7b2a}, {0x4, 0x8000000, 0x20d, 0x9, 0x7, 0x101}, {0xc, 0x356, 0x87, 0x5, 0x45, 0x7ff}, {0xffff, 0x10000, 0x7, 0x40, 0x800, 0x2}, {0x7, 0x2, 0x200, 0x4, 0x2, 0x2}, {0x5, 0xfd5, 0x8, 0x4, 0xfffffffc, 0xb85d}, {0x88d, 0x6, 0xffffffff, 0x7, 0x8, 0xcf}, {0x9, 0x0, 0x7, 0xfffffff8, 0xfffffefd, 0x3}, {0x2, 0x4, 0x43d7, 0xff, 0xc7e, 0x5}, {0x6, 0x8, 0x6, 0xd21, 0xc7, 0x8}, {0x2, 0xad, 0x5, 0x1, 0xfffffffc, 0x1c}, {0x7fffffff, 0x44, 0x8e, 0x0, 0x1ff, 0x1}, {0x7fff, 0x7fffffff, 0xfffffff8, 0x5, 0x2, 0x7}, {0x9, 0x4, 0x0, 0x6, 0xa, 0x6}, {0x6, 0x28, 0x100, 0x5, 0x8}, {0x1, 0xf6, 0x9ea, 0x7fff, 0xfffffffb, 0x7}, {0x101, 0x7ff, 0x4, 0x7, 0x0, 0x400}, {0x1000, 0x8, 0x4, 0x5, 0xfffffff2, 0x101}, {0x8515, 0x0, 0x80000001, 0xfffffff7, 0x80f5, 0x3}, {0x0, 0x9, 0xce, 0x401, 0x6, 0x8}, {0x200, 0x9, 0xb, 0x5, 0x3, 0x2}, {0x3000, 0x3, 0xf4bb, 0x3ff, 0x2, 0x2}, {0xd2e1, 0x1, 0x4, 0xfffffffb, 0x9, 0x1ff}, {0x2, 0x2, 0x8, 0x3, 0x3, 0x8}, {0x10, 0x0, 0x38a, 0x2, 0xfffffffe, 0x4}, {0x85, 0x9, 0x1ff, 0x7, 0x7f, 0x401}, {0x6, 0x6, 0x1, 0x3, 0x6, 0x7}, {0x2, 0x6, 0x1, 0xff, 0x1000, 0x6f4}], [{0x1}, {0x2, 0x1}, {0x5}, {0x2, 0x1}, {0x4}, {0x4, 0x1}, {0x0, 0x1}, {0x5}, {0x4}, {0x2, 0x1}, {0x5, 0xfb51726ae9cc3196}, {0x1, 0x1}, {0x5, 0x1}, {0x3}, {0x0, 0x1}, {0x4}, {0x4}, {}, {0x5}, {0x0, 0x1}, {0x5, 0x1}, {0x0, 0x1}, {0x4}, {0x1, 0x1}, {0x4, 0x1}, {0x2}, {0x4}, {0x2}, {}, {0x1, 0x1}, {0x0, 0x1}, {0x1, 0x1}, {0x7, 0x1}, {}, {0x4, 0x1}, {0x69029817d8283d0}, {0x2}, {0x1}, {0x1}, {0x3}, {0x3}, {0x5, 0x1}, {}, {0x1, 0x1}, {0x4}, {0x3}, {0x5, 0x1}, {0x3, 0x1}, {0x5, 0x1}, {0x1, 0x1}, {0x5, 0x1}, {}, {0x3, 0x1}, {0x1}, {0x5}, {}, {0x6}, {0x1}, {0x2, 0x1}, {}, {0x1}, {0x2}, {0x3, 0x1}, {0x4, 0x1}, {0x2, 0x1}, {0x3, 0x1}, {0x2}, {0x5}, {0x3, 0x1}, {0x2, 0x1}, {0x3}, {}, {0x0, 0x1}, {}, {0x2, 0x1}, {0x3, 0x1}, {0x3}, {0x1, 0x1}, {0x5, 0x1}, {0x5}, {0x7}, {0x5, 0x1}, {0x2}, {0x5}, {0x5, 0x1}, {0x5, 0x1}, {0x5, 0x1}, {0x1}, {0x2}, {0x0, 0x1}, {0x1}, {0x2, 0x1}, {0x1}, {}, {0x2, 0x1}, {0x1, 0x1}, {}, {0x0, 0x1}, {0x2}, {}, {}, {0x2}, {0x2, 0x1}, {}, {0x5, 0x1}, {0x3}, {}, {0x5}, {0x5}, {0x4, 0x1}, {0x1}, {0x1, 0x1}, {0x3, 0x1}, {0x5}, {0x4, 0x1}, {0x3}, {0x5}, {0x4, 0x1}, {0x4, 0x1}, {}, {0x1, 0x1}, {0x2, 0x1}, {0x1, 0xf8e8073cdc0d3e77}, {0x3}, {0x0, 0x1}, {0x3}, {0x7289fafe301ce6fe, 0x1}, {0x0, 0x1}], 0x1}}]}, {0x4}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2}}}}]}]}}]}, 0xe88}, 0x1, 0x0, 0x0, 0x84}, 0x800) syz_io_uring_submit(0x0, 0x0, 0x0) 13m39.466874015s ago: executing program 5 (id=473): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0, r0}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, r1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = socket$netlink(0x10, 0x3, 0x15) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) writev(r5, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff08000400", 0x32}], 0x1) syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), r5) 13m36.457122231s ago: executing program 5 (id=476): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000180)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) openat$sequencer(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) r1 = syz_init_net_socket$x25(0x9, 0x5, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd=r1, 0x0, 0x0, 0x0, 0x14, 0x0, {0x3}}) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)={{0x14}, [@NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x2c, 0x4, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @masq={{0x9}, @void}}, {0x18, 0x1, 0x0, 0x1, @fib={{0x8}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_FIB_RESULT={0x8, 0x2, 0x1, 0x0, 0x1}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0xffffffffffffff07}}, 0x80}}, 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x10, r2, 0x3c525000) copy_file_range(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x5, 0x0) 13m35.224152291s ago: executing program 6 (id=479): bind$inet6(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(des3_ede)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r4 = accept4(r3, 0x0, 0x0, 0x0) sendmmsg$alg(r4, &(0x7f0000000400)=[{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe1a}], 0x1, &(0x7f0000000380)=[@op={0x18}], 0x18}], 0x4924924924924b9, 0x0) recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000000c0)=""/73, 0x49}, {&(0x7f0000000200)=""/83, 0x53}], 0x3a}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), r4) 13m34.375333145s ago: executing program 5 (id=481): r0 = socket(0xa, 0x3, 0x3a) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x3, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) sendmsg$SEG6_CMD_SETHMAC(0xffffffffffffffff, 0x0, 0x400c0c4) r3 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000100), 0x100, 0x0) ioctl$RTC_AIE_OFF(r3, 0x7002) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000300)=@abs={0x0, 0x0, 0x4e20}, 0x6c) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x0, &(0x7f0000000340)={&(0x7f00000002c0)={0x2, 0x5, 0x0, 0x2, 0xc, 0x0, 0xfffffffd, 0x25dfdbff, [@sadb_address={0x5, 0x6, 0x0, 0x20, 0x0, @in6={0xa, 0x4e23, 0x7fffffff, @dev={0xfe, 0x80, '\x00', 0x33}}}, @sadb_sa={0x2, 0x1, 0x0, 0x7, 0x0, 0xfb, 0x3}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x4e23, @local}}]}, 0x60}, 0x1, 0x7}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) r6 = syz_open_dev$sg(&(0x7f00000002c0), 0x0, 0x9840) ioctl$SG_IO(r6, 0x2285, &(0x7f0000000040)={0x53, 0xfffffffffffffffb, 0x7, 0x1, @buffer={0x300, 0x56, &(0x7f0000000440)=""/86}, &(0x7f0000000380)="259374c94982f4", 0x0, 0x0, 0x14, 0x0, 0x0}) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f00000000c0)={'syz_tun\x00', &(0x7f0000000040)=@ethtool_link_settings={0x2, 0x0, 0x0, 0x0, 0x7, 0xfe, 0x0, 0x0, 0x20, 0xfd, [0x0, 0x0, 0x0, 0xc, 0x2, 0x0, 0x0, 0x2]}}) 13m33.09635103s ago: executing program 6 (id=482): r0 = gettid() r1 = inotify_init1(0x0) prlimit64(r0, 0xe, &(0x7f0000000140)={0x4, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) sched_setaffinity(0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000004340)=""/102376, 0x18fe8) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x20090) r3 = creat(&(0x7f0000000000)='./file0\x00', 0xd931d3864d39dcdb) gettid() timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) close(r3) fcntl$setlease(0xffffffffffffffff, 0x400, 0x1) memfd_create(&(0x7f0000000180)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf3:\x99\x1e\xac`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\xd2q#\xc6\xca\x97\x9d\xcb\x1e\x80\xd6\xd5%N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xecz\xabq\x95t*T9\xa9\b X \x04\"\x17\xbf\xcb\xccF\xda\xcf\xdd^\xa0\x15\xc0\xcb^h>\x1b\xb5d\xc7\x7f0\x9a&\xb0\x12#\x9c`\xa6\xed\x05\x95g\a\xccYb\xaf\xe9\xb6G?\x9f\xf5\xfe\xc1\xc0JJ\xc8\xd9d\x80\x13\x8fX\xb4\x19\xc4\\\xcb\x89-)\x90\x01\v\xac^\xdbBQ|\xaej;\x92\\\xf8u\x19Y\xee\x99EI\xf1t\xadn<\x9b\xc9\x87\xd0\xa7\x1a\x81\xb9\xc87sq\xd7\x15\xd6\x91O\x9c\x99!9>\xff\xa8\xfa\xe6=d\xcf\xca\xa9\xc61!\xc6P\x13\xd0\x88gZ\xbe\xdfl\xfa\xff\xb0m;d07tx\xbb\xabd\xe5\x16\xc4\xae\xf0', 0x0) inotify_add_watch(r1, &(0x7f0000000340)='./file0\x00', 0x20f) removexattr(&(0x7f00000004c0)='./file0\x00', &(0x7f0000000500)=@known='system.posix_acl_default\x00') sendmsg$inet(0xffffffffffffffff, 0x0, 0xfc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0xd9}, 0x0) syz_init_net_socket$rose(0xb, 0x5, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) 13m31.69689453s ago: executing program 5 (id=484): r0 = landlock_create_ruleset(&(0x7f0000000040)={0x0, 0x3}, 0x10, 0x0) landlock_restrict_self(r0, 0x0) openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x8042, 0x0) link(&(0x7f0000000200)='./file1\x00', &(0x7f0000000300)='./bus\x00') socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)) prlimit64(0x0, 0xe, &(0x7f0000000340)={0xd, 0x200200090}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000040)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r4, 0x0, 0x8}, 0x18) r5 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r5, 0x8983, &(0x7f0000000000)={0x0, 'team0\x00', {0x1}, 0x2}) r6 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r6, 0x29, 0x40, &(0x7f0000000b00)=@mangle={'mangle\x00', 0x2, 0x6, 0x510, 0x0, 0x270, 0x0, 0xd0, 0x360, 0x440, 0x440, 0x440, 0x440, 0x440, 0x6, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0, 0x0, {0x7a00000000000000}}, @HL={0x28}}, {{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast1, [0xff, 0xff000000], [0x0, 0xff000000], 'syzkaller0\x00', 'pimreg0\x00', {0xff}, {}, 0x0, 0x2}, 0x0, 0xa8, 0xd0}, @HL={0x28, 'HL\x00', 0x0, {0x3, 0xa}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@CLASSIFY={0x28, 'CLASSIFY\x00', 0x0, {0x3ff}}}, {{@ipv6={@remote, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', [0x0, 0xff], [], 'bond_slave_1\x00', 'pim6reg1\x00', {0xff}}, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @ipv4, 0x0, 0x2b}}}, {{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @empty, [0xffffff00, 0xffffffff, 0xff000000], [0xffffffff, 0xffffffff, 0x0, 0xffffffff], 'geneve1\x00', 'team_slave_1\x00', {0xff}, {}, 0x32, 0x9, 0x1, 0x40}, 0x0, 0xa8, 0xe0}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{0x1, 0x24, 0x1}, {0x4, 0x4}, {0x2, 0x5, 0x5}, 0x4, 0x1}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x570) socket$nl_netfilter(0x10, 0x3, 0xc) 13m30.24408817s ago: executing program 6 (id=485): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x1f, 0x13, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000786c6c2500000000002020200600000000000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000010000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) readv(0xffffffffffffffff, 0x0, 0x0) clock_gettime(0x0, 0x0) write$evdev(0xffffffffffffffff, &(0x7f0000001280)=[{{0x0, 0xea60}, 0x18, 0x8}, {{}, 0x3, 0x80, 0x1}, {{}, 0x2, 0x5, 0x2}, {{}, 0x14, 0x7ff, 0x5}], 0x60) write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000000000)={0xc, {"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", 0x1000}}, 0x1006) sendmsg$NL80211_CMD_NEW_KEY(r4, &(0x7f0000001100)={&(0x7f0000001040)={0x10, 0x0, 0x0, 0x2000}, 0xc, 0x0}, 0x40) 13m29.782875361s ago: executing program 4 (id=486): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0, r0}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, r1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = socket$netlink(0x10, 0x3, 0x15) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) writev(r5, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000", 0x36}], 0x1) syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), r5) 13m28.291384647s ago: executing program 36 (id=467): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) socket$nl_audit(0x10, 0x3, 0x9) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mq_timedsend(0xffffffffffffffff, 0x0, 0x0, 0x7, &(0x7f0000000600)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) r2 = socket$kcm(0x10, 0x100000000002, 0x4) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f0000000040), 0x4) sendmsg$kcm(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000200)="39000000140081ae00002c000500015601618575e285af0180000000171300883795c04a31ba377a1b2cc32b38d3740000ffffffffff", 0x36}], 0x1, 0x0, 0x0, 0xc00e}, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000847fff), 0x0, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_usb_connect(0x6, 0x1fc, &(0x7f0000000780)=ANY=[@ANYBLOB="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"], 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000340)={'bridge0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000940)=ANY=[@ANYBLOB="440000001300290a000000000000000007000000", @ANYRES32=r4, @ANYBLOB="00000000000000001c001a800800028008000200080000003e127a510800020010"], 0x44}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000500)=ANY=[], 0xa0}}, 0x0) r5 = socket(0x10, 0x3, 0x0) sendmmsg(r5, &(0x7f0000000000), 0x4000000000001f2, 0xfff0) 13m28.284502476s ago: executing program 4 (id=488): r0 = syz_io_uring_setup(0x422, 0x0, &(0x7f0000000340)=0x0, &(0x7f0000000080)=0x0) r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={0x0, r3}, 0x18) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r4 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r4, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r6 = accept4(r5, 0x0, 0x0, 0x800) sendmmsg$alg(r6, &(0x7f0000000400)=[{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000140)="f78d9ca38fff48f3be52163448412ba8", 0x10}], 0x1, &(0x7f0000000a40)=ANY=[@ANYBLOB="180000000000000017010fff03000000010000000000000000000000000000001701000002000000000000007005baa38d33e2e1650de8f13f421b2d4b60252e76171216e42961c3b08d4d3dacb0a7089ff7cbfd613d46fa95d6e2f6e76ac3266c9b1a531c4bcf0e7071f117cca4e883b4a6eb5dee7a9ab4d05d7ee311ab1c55b817285e0c3714ee6137e3b8553de667701a7c93437583b5f0b285a188098c1ac4ebac40b315ff8db6f736992497879a42b95248fed4d4888970573d0e88ceead26d97e172588a3ad30fbd01b7bbeeaa668e835f7ae3113fe2d949bb47bc0b2c62541714cc0538601ae4bab19d69a5addee134dd447034da6dd89704603d31a3d25b9d5f46cfd43d9e29aac7422920d98e1463256bd4cc929373ad9000000000faf6a95a04ad3b9db9b230f8224a3d"], 0x18}], 0x1, 0x0) recvmsg(r6, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000200)=""/83, 0x53}], 0x1}, 0x0) r7 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000040)={0x3, 0x6, &(0x7f0000000300)=@framed={{0x18, 0x2}, [@map_fd={0x18, 0x3}, @call={0x85, 0x0, 0x0, 0xc0}]}, &(0x7f0000000000)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000140)={r7, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000200)="9e36d448b388dd965f7a33120825", 0x0, 0xbffffffe, 0xe8030000, 0x0, 0x0, 0x0, 0x0}, 0x50) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, 0x0, 0x0, 0x4) socket$kcm(0x2, 0x3, 0x2) syz_io_uring_submit(r1, r2, 0x0) io_uring_enter(r0, 0x627, 0x4c1, 0x43, 0x0, 0x0) 13m28.172382868s ago: executing program 6 (id=489): socket$inet_udp(0x2, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000200)='sched_switch\x00', r0}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r4, &(0x7f0000000480)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000400)={0x5c, 0x2, 0x3, 0x801, 0x0, 0x0, {0x5, 0x0, 0xa}, [@NFQA_CFG_PARAMS={0x9, 0x2, {0xfffffffe, 0x2}}, @NFQA_CFG_PARAMS={0x9, 0x2, {0xa}}, @NFQA_CFG_QUEUE_MAXLEN={0x8}, @NFQA_CFG_CMD={0x8, 0x1, {0x1, 0x0, 0x28}}, @NFQA_CFG_PARAMS={0x9, 0x2, {0x3c4, 0x2}}, @NFQA_CFG_PARAMS={0x9, 0x2, {0x8, 0x1}}, @NFQA_CFG_MASK={0x8, 0x4, 0x1, 0x0, 0x3}]}, 0x5c}, 0x1, 0x0, 0x0, 0x410}, 0x8000) 13m26.349202971s ago: executing program 6 (id=490): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000180)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r0 = syz_open_dev$sndmidi(0x0, 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) r1 = syz_init_net_socket$x25(0x9, 0x5, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd=r1, 0x0, 0x0, 0x0, 0x14, 0x0, {0x3}}) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)={{0x14}, [@NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x2c, 0x4, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @masq={{0x9}, @void}}, {0x18, 0x1, 0x0, 0x1, @fib={{0x8}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_FIB_RESULT={0x8, 0x2, 0x1, 0x0, 0x1}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0xffffffffffffff07}}, 0x80}}, 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x10, r2, 0x3c525000) copy_file_range(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x5, 0x0) 13m25.83225063s ago: executing program 5 (id=491): bind$inet6(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(des3_ede)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r2 = accept4(r1, 0x0, 0x0, 0x0) sendmmsg$alg(r2, &(0x7f0000000400)=[{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe1a}], 0x1, &(0x7f0000000380)=[@op={0x18}], 0x18}], 0x4924924924924b9, 0x0) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000000c0)=""/73, 0x49}, {&(0x7f0000000200)=""/83, 0x53}], 0x3a}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), r2) 13m25.831785069s ago: executing program 4 (id=492): bpf$MAP_CREATE(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x3}, {{0x18, 0x1, 0x1, 0x0, r3}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x2d) r5 = syz_pidfd_open(0x0, 0x0) r6 = socket$unix(0x1, 0x3, 0x0) bind$unix(r6, &(0x7f00000006c0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r7 = socket$unix(0x1, 0x3, 0x0) openat$dir(0xffffffffffffff9c, 0x0, 0x200200, 0x21) sendmsg$unix(r7, &(0x7f0000000680)={&(0x7f0000000000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e, 0x0, 0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="2c000000000000000100000001000000", @ANYRES32=r6], 0x30}, 0x0) close_range(r5, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 13m24.61498824s ago: executing program 5 (id=493): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$smackfs_netlabel(0xffffffffffffff9c, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) ioctl$INCFS_IOC_PERMIT_FILL(r0, 0x40046721, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$LOOP_CONFIGURE(0xffffffffffffffff, 0x4c0a, 0x0) ioctl$LOOP_SET_STATUS(0xffffffffffffffff, 0x4c02, 0x0) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r3, 0x0, 0x10) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000280)={0x1, 0x3, 0x0, 0x1000, &(0x7f0000fe6000/0x1000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000fe6000/0x18000)=nil, &(0x7f00000000c0)=[@text16={0x10, &(0x7f0000000380)="0f01c8b81a010f00d066cb0f01c90f20e06635000002000f22e0baf80c66b84205108d66efbafc0cb8b3f5efd9f7f30fc7360a00ba2100b0d4ee64f00fc7882418", 0x41}], 0x1, 0x45, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 13m24.358679457s ago: executing program 6 (id=494): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8e}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f00000001c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0/file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000cc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x0) r4 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$RTC_AIE_OFF(r4, 0x7002) r5 = socket$inet_smc(0x2b, 0x1, 0x0) ioctl$sock_inet_tcp_SIOCOUTQNSD(r5, 0x894b, &(0x7f0000000000)) r6 = landlock_create_ruleset(&(0x7f0000000040)={0x0, 0x3, 0x1}, 0x18, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) landlock_restrict_self(r6, 0x0) 13m24.358410886s ago: executing program 4 (id=495): setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x21, &(0x7f0000000080)=0x8, 0x4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000340)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) openat$kvm(0x0, 0x0, 0x4040, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0xc040) mount(0x0, 0x0, &(0x7f00000000c0)='nfsd\x00', 0x10, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) r4 = accept4(r3, 0x0, 0x0, 0x0) sendmsg$nl_route_sched_retired(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000012100), 0xe078}}, 0x0) recvmmsg(r4, &(0x7f0000000180)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000580)=""/230, 0xe6}, {&(0x7f00000004c0)=""/168, 0xa8}, {&(0x7f0000000900)=""/106, 0x6a}, {&(0x7f00000000c0)=""/26, 0xfe4b}], 0x4}, 0x2000000}], 0x2, 0x101, 0x0) 13m22.704937592s ago: executing program 4 (id=496): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0, r0}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, r1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = socket$netlink(0x10, 0x3, 0x15) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) writev(r5, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000", 0x36}], 0x1) syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), r5) 13m21.561589004s ago: executing program 4 (id=497): openat$ttyprintk(0xffffffffffffff9c, 0x0, 0x228c0, 0x0) arch_prctl$ARCH_GET_GS(0x1004, 0x0) syz_genetlink_get_family_id$nfc(0x0, 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000001a40)=""/102392, 0x18ff8) socket(0x21, 0x3, 0x0) r1 = fsopen(&(0x7f0000000200)='pstore\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) fsmount(r1, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x8042, 0x0) link(0x0, 0x0) syz_open_dev$sndpcmc(0x0, 0x0, 0x1) r2 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(r2, 0x84, 0x71, &(0x7f0000000080)={0x0, 0x8}, &(0x7f00000000c0)=0x8) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSETMODE(r3, 0x4b45, 0x0) ioctl$TIOCL_SETSEL(r3, 0x541c, &(0x7f00000000c0)={0x2, {0x2, 0x0, 0x300, 0x300, 0x8, 0x300}}) 13m2.198613417s ago: executing program 37 (id=494): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8e}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f00000001c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0/file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000cc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x0) r4 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$RTC_AIE_OFF(r4, 0x7002) r5 = socket$inet_smc(0x2b, 0x1, 0x0) ioctl$sock_inet_tcp_SIOCOUTQNSD(r5, 0x894b, &(0x7f0000000000)) r6 = landlock_create_ruleset(&(0x7f0000000040)={0x0, 0x3, 0x1}, 0x18, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) landlock_restrict_self(r6, 0x0) 13m1.908576387s ago: executing program 38 (id=493): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$smackfs_netlabel(0xffffffffffffff9c, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) ioctl$INCFS_IOC_PERMIT_FILL(r0, 0x40046721, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$LOOP_CONFIGURE(0xffffffffffffffff, 0x4c0a, 0x0) ioctl$LOOP_SET_STATUS(0xffffffffffffffff, 0x4c02, 0x0) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r3, 0x0, 0x10) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000280)={0x1, 0x3, 0x0, 0x1000, &(0x7f0000fe6000/0x1000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000fe6000/0x18000)=nil, &(0x7f00000000c0)=[@text16={0x10, &(0x7f0000000380)="0f01c8b81a010f00d066cb0f01c90f20e06635000002000f22e0baf80c66b84205108d66efbafc0cb8b3f5efd9f7f30fc7360a00ba2100b0d4ee64f00fc7882418", 0x41}], 0x1, 0x45, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 13m1.762849657s ago: executing program 39 (id=497): openat$ttyprintk(0xffffffffffffff9c, 0x0, 0x228c0, 0x0) arch_prctl$ARCH_GET_GS(0x1004, 0x0) syz_genetlink_get_family_id$nfc(0x0, 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000001a40)=""/102392, 0x18ff8) socket(0x21, 0x3, 0x0) r1 = fsopen(&(0x7f0000000200)='pstore\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) fsmount(r1, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x8042, 0x0) link(0x0, 0x0) syz_open_dev$sndpcmc(0x0, 0x0, 0x1) r2 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(r2, 0x84, 0x71, &(0x7f0000000080)={0x0, 0x8}, &(0x7f00000000c0)=0x8) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSETMODE(r3, 0x4b45, 0x0) ioctl$TIOCL_SETSEL(r3, 0x541c, &(0x7f00000000c0)={0x2, {0x2, 0x0, 0x300, 0x300, 0x8, 0x300}}) 10m15.776306512s ago: executing program 8 (id=559): mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) chown(0x0, 0x0, 0xffffffffffffffff) mkdir(0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r3}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x2d) sendto$inet6(0xffffffffffffffff, &(0x7f0000000080)="7800000018002507b9409b14ffff00000204be04020506050e020409430009003f000c00100006000d0085a168d0bf46d32345653600648d0a00120002000a0000005ade4a460c89b6ec0cff3959547f509058ba86c902000000004a32000400160005000a", 0x65, 0x0, 0x0, 0x0) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000540), r5) sendmsg$IEEE802154_ADD_IFACE(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="01000000ecffffffffff2000000005002000000000000c001f0070687930"], 0x28}}, 0x0) 10m13.459217542s ago: executing program 8 (id=560): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) syz_emit_vhci(&(0x7f0000000080)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x1, 0x0, 0x12}, @l2cap_cid_le_signaling={{0xe}, @l2cap_ecred_conn_req={{0x17, 0x7, 0xa}, {0xffff, 0x81, 0x687c, 0x950, [0xfa53]}}}}, 0x17) r4 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) getsockopt$bt_BT_POWER(r4, 0x11, 0x9, 0x0, &(0x7f0000000040)) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000240)={{r5, 0xffffffffffffffff}, &(0x7f0000000000), &(0x7f00000001c0)='%pK \x00'}, 0x20) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x5, 0xc, 0x42, 0x40, 0xc0, 0x1}, 0x50) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x16c5, r7, 0x20}, 0x38) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000280)={r6}, 0x4) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={0xffffffffffffffff, 0x18000000000002a0, 0xe, 0x0, &(0x7f00000002c0)="b9ff0307600300dd000000000000", 0x0, 0xfe6, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) 10m12.239966285s ago: executing program 8 (id=561): r0 = socket(0xa, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000040)=0x9, 0x4) bind$inet6(r0, &(0x7f0000000080)={0xa, 0xe64, 0x3, @ipv4={'\x00', '\xff\xff', @empty}, 0x202}, 0x1c) r1 = socket(0xa, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000040)=0x9, 0x4) bind$inet6(r1, &(0x7f0000000480)={0xa, 0xe64, 0x3, @empty, 0x2}, 0x1c) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r2, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r3, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r4, 0x2) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r5, 0xfff) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r6, 0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r7, 0x0) r8 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r8, &(0x7f00000000c0)=[{&(0x7f0000000000)="580000001400192340834b80040d8c560a067fbc45ff810500000000000058000b480400945f6400947e570028925a01000000000000008000f0fffeffe809000000fff5dd0000001000010002081000418e00000004fcff", 0x58}], 0x1) syz_genetlink_get_family_id$tipc2(&(0x7f0000000140), r8) 10m12.090789578s ago: executing program 8 (id=562): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f0000000040), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x50) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000740)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="0100000000000000000003000000400001802c0004001400010002000000ac14140f00000000000000001400020002000000ffffffff00000000000000000d0001007564703a73797a32"], 0x54}}, 0x0) r3 = syz_io_uring_setup(0x3b9, &(0x7f0000000300)={0x0, 0x0, 0x40, 0xfffffffc, 0x30a}, &(0x7f0000000400), &(0x7f0000000280)) io_uring_enter(r3, 0x47f9, 0x0, 0x0, 0x0, 0x0) sendmsg$TIPC_NL_BEARER_SET(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="0100280000000000000002000000200001800d0001007564703a73797a"], 0x34}}, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) r4 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) clock_gettime(0x0, &(0x7f0000000c80)) recvmmsg$unix(r4, 0x0, 0x0, 0x0, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES32=0x0, @ANYBLOB="000000000200"/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x6, 0xe, &(0x7f00000008c0)=ANY=[@ANYBLOB="b7020000ff0d0000bfa30000000000000703000000feffff7a0af0fff8ffff1971a4f0ff00000000b7060000080000006f6400000000000045040400010000001704000001000a00b7040000ff0100006a0a00fe0000000085000000bd000000b70000000000000095000000000000009e17f199a68b06d83298a8cdc21ce784909b849d5550ad857d0454d8877a6db61d69f2ffcaa10350e11cb97c8adf1bc9a0c4eeceb9971e43405d621ffbc9ce000000d8ca56b50d0c010d631f6dde53a9a53608c10556e5734eb84049761451ce540c772e2d9f"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000340), 0x10}, 0x94) r5 = syz_open_dev$video4linux(&(0x7f0000000080), 0x100, 0x20000) ioctl$VIDIOC_S_DV_TIMINGS(r5, 0xc0845657, &(0x7f0000000200)={0x0, @bt={0x8, 0x5, 0x0, 0x1, 0xd26f, 0x4, 0x7, 0x9, 0x0, 0x3579, 0x93, 0xfffffffc, 0x81, 0x2, 0x3, 0x0, {0x8dc5, 0x94}, 0x7, 0x3}}) 10m9.636490623s ago: executing program 8 (id=565): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0, r0}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mount(0x0, &(0x7f0000000040)='.\x00', &(0x7f0000000100)='ecryptfs\x00', 0x0, 0x0) setsockopt$XDP_RX_RING(0xffffffffffffffff, 0x11b, 0x2, &(0x7f0000001980)=0x100, 0x4) bind$xdp(0xffffffffffffffff, &(0x7f0000000100)={0x2c, 0x18}, 0x10) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={r4, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001440)={r4, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a80)={0x6, 0x3, &(0x7f0000000200)=@framed, &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', r5}, 0x94) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000180)={0x6, 0x9, &(0x7f0000000080)=@raw=[@ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}], &(0x7f0000000000)='GPL\x00', 0xff, 0x0, 0x0, 0x41100, 0x0, '\x00', r5, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xf01}, 0x94) 10m7.799274693s ago: executing program 8 (id=567): r0 = socket$kcm(0x10, 0x2, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = socket(0xa, 0x3, 0x3a) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) syz_open_procfs(0x0, 0x0) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) fsetxattr$security_capability(r3, 0x0, 0x0, 0xfffffe04, 0x1) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mremap(&(0x7f000054e000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f000022c000/0x3000)=nil) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$fou(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$FOU_CMD_GET(r4, 0x0, 0x40000) openat2$dir(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) io_uring_enter(0xffffffffffffffff, 0x2d3e, 0x1, 0x0, 0x0, 0x0) setsockopt$MRT6_ADD_MFC_PROXY(r1, 0x29, 0xd2, &(0x7f00000000c0)={{0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, {0xa, 0x0, 0x0, @empty}}, 0x5c) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000040)="d8000000180081064e81f782db4cb904021d080006007c09e8fe55a10a0015000700142603600e1208000f0000000401a80016002000014006000000035c0461c1d60008000000000000fb8000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f0f49e119c849ea6e5a0fc55e4cde205a214d6102d6dcbf33fb5ce3bb9ad809d5e1cace81ed0bffece0b42a1a83d5f59ecb", 0xd8}], 0x5}, 0x0) 9m52.636352115s ago: executing program 40 (id=567): r0 = socket$kcm(0x10, 0x2, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = socket(0xa, 0x3, 0x3a) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) syz_open_procfs(0x0, 0x0) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) fsetxattr$security_capability(r3, 0x0, 0x0, 0xfffffe04, 0x1) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mremap(&(0x7f000054e000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f000022c000/0x3000)=nil) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$fou(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$FOU_CMD_GET(r4, 0x0, 0x40000) openat2$dir(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) io_uring_enter(0xffffffffffffffff, 0x2d3e, 0x1, 0x0, 0x0, 0x0) setsockopt$MRT6_ADD_MFC_PROXY(r1, 0x29, 0xd2, &(0x7f00000000c0)={{0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, {0xa, 0x0, 0x0, @empty}}, 0x5c) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000040)="d8000000180081064e81f782db4cb904021d080006007c09e8fe55a10a0015000700142603600e1208000f0000000401a80016002000014006000000035c0461c1d60008000000000000fb8000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f0f49e119c849ea6e5a0fc55e4cde205a214d6102d6dcbf33fb5ce3bb9ad809d5e1cace81ed0bffece0b42a1a83d5f59ecb", 0xd8}], 0x5}, 0x0) 8m40.326411286s ago: executing program 2 (id=658): r0 = syz_open_dev$vbi(&(0x7f0000000080), 0x1, 0x2) ioctl$VIDIOC_S_OUTPUT(r0, 0xc004562f, &(0x7f00000000c0)=0x1) ioctl$VIDIOC_S_DV_TIMINGS(r0, 0xc0845657, &(0x7f0000000380)={0x0, @bt={0x12, 0x7c5, 0x1, 0x3, 0xd59f80, 0x4, 0x5, 0x7, 0x8, 0x5, 0x722, 0xe72, 0x8, 0x8, 0x2e, 0x8, {0xffff945a, 0x1}, 0x3, 0xed}}) open(&(0x7f0000000180)='.\x02\x00', 0x1a081, 0x37) mkdirat(0xffffffffffffff9c, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="17000000", @ANYBLOB, @ANYBLOB], 0x48) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) syz_open_dev$vcsa(0x0, 0x1, 0x102) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x6) ioctl$sock_inet_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f00000001c0)={0x0, {0x2, 0x4e22, @multicast2}, {0x2, 0x21, @remote}, {0x2, 0x4e23, @broadcast}, 0x107, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}) r4 = syz_open_dev$vbi(&(0x7f0000000080), 0x1, 0x2) ioctl$VIDIOC_S_DV_TIMINGS(r4, 0xc0845657, &(0x7f0000000380)={0x0, @bt={0x12, 0x7c5, 0x1, 0x3, 0xd59f80, 0x4, 0x5, 0x7, 0x8, 0x5, 0x722, 0xe72, 0x7, 0x2800, 0x2e, 0x8, {0xffff945a, 0x1}, 0x3, 0xed}}) 8m38.224056381s ago: executing program 2 (id=660): openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x8040) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20008008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000002100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x20, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r3}, 0x10) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x7f) r4 = fanotify_init(0x0, 0x0) r5 = open$dir(&(0x7f0000000000)='.\x00', 0x0, 0x0) mknodat(r5, &(0x7f00000000c0)='./file0\x00', 0xa, 0x8e6c) fanotify_mark(r4, 0x641, 0x48001018, r5, 0x0) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x3000003, 0x4031, 0xffffffffffffffff, 0x0) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000850000000500000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000d80)={&(0x7f0000000d40)='mmap_lock_acquire_returned\x00', r6}, 0x10) 8m37.291492376s ago: executing program 2 (id=661): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x4) sendmsg$NFNL_MSG_CTHELPER_NEW(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000004c40)=ANY=[@ANYRESDEC], 0x14}, 0x1, 0x0, 0x0, 0x20008004}, 0x20004000) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_IOEVENTFD(r2, 0x4040ae79, &(0x7f0000000100)={0x0, 0x0, 0x2, 0xffffffffffffffff, 0x20}) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="3000000010000100"/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=0x0, @ANYBLOB="08001b"], 0x30}}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$team(&(0x7f00000044c0), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(r4, 0x8933, &(0x7f0000004700)={'team0\x00', 0x0}) socket$netlink(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8b24, &(0x7f0000000000)={'wlan0\x00'}) r7 = syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000dc0)=ANY=[@ANYBLOB="12010000000000402f17370000000001000109022400010000a00009040000040300020009210000020122030009058103"], 0x0) r8 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x800) ioctl$sock_inet6_tcp_SIOCOUTQNSD(r8, 0x894b, &(0x7f0000000040)) syz_usb_control_io(r7, 0x0, 0x0) syz_usb_control_io$hid(r7, &(0x7f0000000200)={0x24, &(0x7f00000002c0)=ANY=[@ANYBLOB="40300500"], 0x0, 0x0, 0x0}, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(r4, &(0x7f0000004bc0)={0x0, 0x0, &(0x7f0000004b80)={&(0x7f00000047c0)={0x60, r5, 0x405, 0x70bd27, 0x25dfdbfe, {}, [{{0x8, 0x1, r6}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @name={{0x24}, {0x5}, {0x10, 0x4, 'loadbalance\x00'}}}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x4000401}, 0x44084) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, 0x0, 0x8) 8m33.387639072s ago: executing program 2 (id=666): socket$inet_smc(0x2b, 0x1, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x180, 0x4, 0x28}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000080)=@framed={{}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r0}, {}, {0x85, 0x0, 0x0, 0x1b}}]}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_emit_ethernet(0x288, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000100)=0x5) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000007c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) open(&(0x7f0000000080)='./bus\x00', 0x143142, 0x0) mount(&(0x7f0000000100), &(0x7f0000000280)='./bus\x00', &(0x7f00000002c0)='9p\x00', 0x0, &(0x7f0000000300)='trans=rdma,') write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x3, 0x2, 0x6, 0xfffa}, 0x3a, [0x8000, 0xc95a, 0xf, 0x8, 0x7fffffff, 0x2, 0x7, 0x7f, 0x20000006, 0x4d, 0x6, 0x5f, 0x9, 0x5, 0xffff2d37, 0xffffff01, 0x7, 0x3, 0x0, 0x5, 0x24, 0x1, 0x7, 0x3c5b, 0x1, 0x24, 0x6, 0x8000, 0x5, 0xffffffff, 0xe661, 0x4, 0x7, 0x89d2, 0x8, 0x4c74, 0x80000000, 0x40000, 0x3, 0xe, 0x0, 0x80008071, 0x7, 0x17, 0xd, 0x407, 0x5, 0x3e, 0x8f, 0x4006, 0x6, 0x80000000, 0x0, 0x4, 0x8, 0x400, 0x80, 0x0, 0x4, 0x7, 0x8, 0x4, 0xfffffffe, 0x40], [0x10000007, 0xf0000000, 0x8000012f, 0x8004, 0x5, 0x6, 0x129432e6, 0x2, 0xf9, 0xe, 0x2bf, 0x6c7, 0x9, 0xfffffffc, 0x3, 0x0, 0x0, 0x5, 0x2f, 0x10, 0x312, 0xd, 0xea4, 0xffffffff, 0x4, 0x7, 0x7fff, 0x5a7c, 0x420, 0x401, 0x6, 0x0, 0xff, 0x1, 0x1000005, 0x5f31, 0xd, 0x4e0, 0x2, 0x4, 0xb, 0x4, 0x20009, 0x8, 0x9, 0x9, 0x47, 0x8000, 0x1, 0xfe000000, 0xffff, 0xfffffffe, 0x7, 0x9, 0x5, 0x3, 0x8, 0x1, 0x3, 0x6c0, 0xbc45, 0x48c93690, 0x42, 0x3], [0x7, 0x408, 0x8004, 0x5, 0xfffffffe, 0x100, 0x8d2, 0x9, 0x5, 0x7fff, 0x0, 0x5, 0xb, 0x4, 0x9, 0x5, 0x0, 0x1ef, 0x5, 0x8, 0x10000, 0x3, 0x5, 0x3e7, 0xb, 0x5, 0x2, 0x2, 0x3, 0x20000008, 0x4, 0x6d01, 0x6, 0x1, 0x800003, 0x200, 0x7e, 0x7, 0x4, 0x2950bfaf, 0xffe, 0xa2, 0x7, 0xa9, 0x5, 0x9, 0xac8, 0x2000bf, 0x2, 0x3, 0x7ff, 0x12b, 0x4, 0x1, 0x0, 0x0, 0x5, 0x1c, 0x120000, 0x3, 0x2004, 0x80a2ed, 0x4, 0x25], [0x9, 0xbb33, 0x7, 0xb, 0x5, 0x938, 0x6, 0x6, 0x0, 0xb9, 0xce7, 0x9, 0x2, 0x57, 0x5, 0x3, 0x101, 0x10000, 0x4, 0x7fff, 0xffff, 0x2000a620, 0x2, 0x5, 0x1, 0x2, 0x5, 0xe7, 0x6, 0x16, 0xfffffffe, 0x80000003, 0x6, 0x4, 0xc8, 0x9, 0xfffff000, 0x10000, 0x3, 0x7e, 0xfd, 0x9602, 0x7, 0xaf, 0x8, 0x6, 0xffffffff, 0x5, 0x5, 0x8, 0x30b1d693, 0x5, 0xf40, 0x7, 0x1, 0x6c1b, 0x0, 0x4, 0x5, 0xb1e, 0xd7, 0x200, 0xffff3441, 0xfff]}, 0x45c) syz_open_dev$vim2m(&(0x7f00000001c0), 0x7fffffff, 0x2) r3 = syz_open_dev$dri(0x0, 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r3, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r3, 0xc01064b5, &(0x7f0000000180)={&(0x7f0000000040)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r3, 0xc06864a1, &(0x7f0000000100)={0x0}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00', r1}, 0x18) ioctl$MEDIA_IOC_REQUEST_ALLOC(0xffffffffffffffff, 0x80047c05, 0x0) r4 = add_key$keyring(&(0x7f0000000240), 0x0, 0x0, 0x0, 0xffffffffffffffff) add_key(0x0, 0x0, &(0x7f0000000000)="30800202", 0x4, r4) 8m32.602577359s ago: executing program 2 (id=668): openat$tun(0xffffffffffffff9c, 0x0, 0x60280, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) openat(0xffffffffffffffff, 0x0, 0x711301, 0x58) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0x2, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x10}, 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000200)=@framed, &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r3}, 0x10) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r5 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0x9}, {0xffff, 0xffff}, {0x0, 0x6}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x38}}, 0x4000) 8m29.910317398s ago: executing program 2 (id=671): openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x10000, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x25, &(0x7f0000000180)=0x34c3, 0x8) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r3}, 0x10) bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) r4 = socket$igmp(0x2, 0x3, 0x2) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r4, 0x8933, &(0x7f00000000c0)={'batadv_slave_1\x00', 0x0}) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8936, &(0x7f0000000000)={@dev={0xfe, 0x80, '\x00', 0x2c}, 0x78, r5}) r6 = socket(0xa, 0x1, 0x0) ioctl(r6, 0x8916, &(0x7f0000000000)) ioctl(r6, 0x8936, 0x0) ioctl$TUNSETTXFILTER(0xffffffffffffffff, 0x400454d1, &(0x7f0000000000)=ANY=[]) 8m14.128133322s ago: executing program 41 (id=671): openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x10000, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x25, &(0x7f0000000180)=0x34c3, 0x8) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r3}, 0x10) bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) r4 = socket$igmp(0x2, 0x3, 0x2) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r4, 0x8933, &(0x7f00000000c0)={'batadv_slave_1\x00', 0x0}) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8936, &(0x7f0000000000)={@dev={0xfe, 0x80, '\x00', 0x2c}, 0x78, r5}) r6 = socket(0xa, 0x1, 0x0) ioctl(r6, 0x8916, &(0x7f0000000000)) ioctl(r6, 0x8936, 0x0) ioctl$TUNSETTXFILTER(0xffffffffffffffff, 0x400454d1, &(0x7f0000000000)=ANY=[]) 3m28.382725878s ago: executing program 9 (id=487): bind$inet6(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(des3_ede)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r4 = accept4(r3, 0x0, 0x0, 0x0) sendmmsg$alg(r4, &(0x7f0000000400)=[{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe1a}], 0x1, &(0x7f0000000380)=[@op={0x18}], 0x18}], 0x4924924924924b9, 0x0) recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000000c0)=""/73, 0x49}, {&(0x7f0000000200)=""/83, 0x53}], 0x3a}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), r4) sendmsg$alg(r4, &(0x7f0000000fc0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4004011}, 0x4c040) 3m25.086364026s ago: executing program 9 (id=907): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) close(0xffffffffffffffff) socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$sock_netrom_SIOCADDRT(0xffffffffffffffff, 0x890b, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) prctl$PR_SET_NAME(0xf, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) syz_emit_ethernet(0xbe, &(0x7f0000000000)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x23}, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "7b4b143b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af", "584cbf2649a50f2dbc43efa8698d0a881c51852e4451b57d037ad3c045942824251d7d17b5191584bcd4fbe40a23424d", "bcfd56f1375461caaa2f19935e6996c7096ffeeb0300000000000064", {"9a3bfbc1f39cb307b3472eb9cdb042d2", "643fcbb2c5a57df67d544af6e8dafe09"}}}}}}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x3}, 0x94) recvmmsg(r0, &(0x7f0000000380)=[{{0x0, 0x0, 0x0}, 0x5}], 0x1, 0x2, 0x0) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x9}, 0x94) sendmsg$GTP_CMD_DELPDP(0xffffffffffffffff, &(0x7f00000006c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x800}, 0xc, 0x0}, 0x8000) sendmmsg(0xffffffffffffffff, &(0x7f0000000e00)=[{{&(0x7f0000000080)=@qipcrtr={0x2a, 0x3, 0x4000}, 0x80, 0x0}}], 0x1, 0x45) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) socket$inet6_tcp(0xa, 0x1, 0x0) pipe(&(0x7f0000000080)) socket$nl_route(0x10, 0x3, 0x0) syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) socket$nl_generic(0x10, 0x3, 0x10) pselect6(0x40, &(0x7f00000002c0)={0x2, 0x0, 0xc, 0xe9d9, 0x800, 0x2, 0x1, 0x1}, 0x0, &(0x7f0000000340)={0x3ff, 0xd0000000, 0x10007, 0x7e3, 0x3, 0x80000008, 0xfffffffffffffffe, 0xbf7}, 0x0, 0x0) connect$inet(r2, &(0x7f0000000080)={0x2, 0x4e21, @empty}, 0x10) 3m20.988141158s ago: executing program 3 (id=915): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket(0x10, 0x803, 0x0) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000340)={&(0x7f00000001c0)=ANY=[@ANYBLOB="9feb010018000000000000003400000034000000020000000000000002000004000000000000000002000000000000000000000002000000000000000100000000000001"], 0x0, 0x4e}, 0x20) r5 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/ptype\x00') preadv(r5, &(0x7f00000002c0)=[{0x0}], 0x1, 0x35, 0x88) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000002c0)={0x1b, 0x0, 0x0, 0x1000, 0x0, 0x1, 0x0, '\x00', 0x0, r4, 0x1, 0x1}, 0x50) r6 = openat$autofs(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) open(&(0x7f0000000240)='./file1\x00', 0x145142, 0x0) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r6, 0xc0189378, 0x0) bpf$OBJ_GET_PROG(0x7, &(0x7f00000000c0)=@o_path={&(0x7f0000000080)='./file0\x00', 0x0, 0x4008}, 0x18) 3m20.105882779s ago: executing program 9 (id=916): prctl$PR_SET_MM(0x23, 0x4, &(0x7f0000ffc000/0x1000)=nil) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000009c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) listen(r0, 0x5) r5 = socket$inet_sctp(0x2, 0x1, 0x84) r6 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r6, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000001080)=0x8) getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r6, 0x84, 0x72, &(0x7f00000002c0)={r7, 0x7, 0x30}, &(0x7f00000000c0)=0xc) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(r5, 0x84, 0x71, 0x0, &(0x7f0000000180)) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x2, 0x2172, 0xffffffffffffffff, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000000000)=0x8, 0x4) 3m14.031520644s ago: executing program 9 (id=923): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) utimensat(0xffffffffffffffff, 0x0, 0x0, 0x0) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) r4 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f00000000c0)={'vxcan1\x00', 0x0}) bind$can_j1939(r4, &(0x7f0000000380)={0x1d, r5, 0x0, {0x2, 0xf0, 0x4}, 0xfe}, 0x18) setsockopt$sock_int(r4, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4) setsockopt$SO_J1939_ERRQUEUE(r4, 0x6b, 0x4, &(0x7f0000000080)=0x1, 0x4) sendmsg$can_j1939(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)="5f7327a543a8f33e22", 0x9}, 0x1, 0x0, 0x0, 0x2400c000}, 0x8051) sendmsg$inet(r4, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x4048001) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000440)=@newtfilter={0x24, 0x11, 0x1, 0x70bd27, 0x0, {0x0, 0x0, 0x74, r5, {0xfffd, 0xffff}, {0x1, 0x9}, {0xfff2}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x4012}, 0x850) 3m13.795280247s ago: executing program 3 (id=924): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6770c000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000006900000000000001000000940000000fad413e850000000700000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000380)='sched_switch\x00', r3}, 0x18) r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f00000002c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000300)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r4, &(0x7f0000000000)={0x15, 0x110, 0xfa08, {r5, 0x0, 0x10, 0x10, 0x0, @in={0x2, 0x0, @empty}, @in={0x2, 0x0, @empty}}}, 0x118) write$RDMA_USER_CM_CMD_QUERY(r4, &(0x7f00000001c0)={0x13, 0x10, 0xfa00, {&(0x7f0000000480), r5, 0x2}}, 0x18) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x121602, 0x0) r6 = socket$inet_tcp(0x2, 0x1, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)={0x60, 0x2, 0x6, 0x5, 0x0, 0x0, {0x7}, [@IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x11}, @IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0xc8f}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}]}, 0x60}}, 0x20004000) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000180)={'bond_slave_1\x00'}) socket$inet6_tcp(0xa, 0x1, 0x0) 3m10.689999976s ago: executing program 3 (id=926): mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) r0 = bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000"], 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000)={r1}, 0xc) mount(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000580)='tracefs\x00', 0x0, 0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x1e, 0xc, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x39, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000032680)=""/102392, 0x18ff8) r3 = openat$dsp(0xffffffffffffff9c, &(0x7f00000003c0), 0x101a02, 0x0) ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, &(0x7f0000000040)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(0xffffffffffffffff, 0x3ba0, 0x0) ioctl$IOMMU_HWPT_ALLOC$NONE(0xffffffffffffffff, 0x3b89, &(0x7f0000000000)={0x28, 0x2, 0x0, r4, 0x0, 0x0, 0x0, 0x0, 0x0}) close_range(r3, 0xffffffffffffffff, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0, 0x0) setxattr$security_smack_transmute(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080), &(0x7f0000000180), 0x4, 0x2) lseek(r5, 0x22367a57, 0x1) 3m10.103889542s ago: executing program 3 (id=930): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0, r0}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, r1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = socket$netlink(0x10, 0x3, 0x15) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) writev(r5, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) syz_genetlink_get_family_id$mptcp(0x0, r5) 3m8.55810367s ago: executing program 9 (id=933): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000009c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d000000"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0xe1}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r1 = getpid() setsockopt$MRT_DEL_VIF(0xffffffffffffffff, 0x0, 0xcb, 0x0, 0x0) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x2000000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) r4 = socket$inet_udp(0x2, 0x2, 0x0) r5 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0xd, &(0x7f0000000f80)=ANY=[@ANYBLOB="18"], 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x1b) r7 = dup(r6) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r8, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r4, 0x0, 0x60, &(0x7f0000000440)={'filter\x00', 0x4, 0x4, 0x3c8, 0xe8, 0x0, 0x0, 0x2e0, 0x2e0, 0x2e0, 0x4, 0x0, {[{{@uncond, 0xc0, 0xe8}, @unspec=@STANDARD={0x28, '\x00', 0x0, 0x1d0}}, {{@arp={@multicast2, @initdev={0xac, 0x1e, 0x0, 0x0}, 0xff000000, 0xff, 0xd, 0x5, {@empty, {[0xff, 0x0, 0xff]}}, {@empty, {[0xff, 0x0, 0x0, 0x0, 0x0, 0xff]}}, 0x6, 0x8a2d, 0x1000, 0x100, 0xa, 0xc, 'sit0\x00', 'team0\x00', {0xff}, {}, 0x0, 0x290}, 0xc0, 0xe8}, @unspec=@NFQUEUE1={0x28, 'NFQUEUE\x00', 0x1, {0x0, 0xff03}}}, {{@arp={@multicast2, @multicast1, 0x0, 0x0, 0x0, 0x0, {}, {@mac=@link_local}, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 'xfrm0\x00', 'pim6reg\x00'}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@local, @empty, @initdev={0xac, 0x1e, 0x0, 0x0}, @broadcast, 0x1}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x418) 3m7.980218948s ago: executing program 3 (id=935): socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$inet(r0, &(0x7f0000001540)=[{{0x0, 0xfffffffffffffda1, 0x0}}], 0x40001b6, 0x0) close(r1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$F2FS_IOC_SEC_TRIM_FILE(r2, 0x4018f514, &(0x7f0000000000)={0xff, 0x6, 0x3}) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000000040)={0x3, &(0x7f0000000140)=[{0x20, 0x0, 0x0, 0xfffff010}, {0x20, 0x0, 0x0, 0xfffff024}, {0x6, 0x0, 0xfd}]}, 0x10) sendmmsg(r2, &(0x7f0000001c00), 0x400000000000159, 0x40840) r4 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi4\x00', 0x400, 0x0) ioctl$COMEDI_DEVCONFIG(r4, 0x40946400, 0x0) preadv(r4, &(0x7f0000001cc0)=[{&(0x7f0000000200)=""/126, 0x7e}], 0x1, 0x0, 0xa3) io_setup(0xd74, &(0x7f0000000280)=0x0) openat$ocfs2_control(0xffffffffffffff9c, 0x0, 0x42e540, 0x0) r6 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r6, &(0x7f0000000380)={0x2, 0x4e22, @empty}, 0x10) setsockopt$sock_int(r6, 0x1, 0x800000000f, &(0x7f0000000080)=0x7, 0x4) eventfd2(0x5, 0x3) io_submit(r5, 0x0, &(0x7f00000006c0)) 3m5.290445654s ago: executing program 9 (id=938): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) syz_open_dev$vbi(&(0x7f0000000040), 0x0, 0x2) syz_open_dev$I2C(&(0x7f00000000c0), 0x0, 0x800) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) connect$inet(0xffffffffffffffff, 0x0, 0x0) r1 = openat$userio(0xffffffffffffff9c, &(0x7f0000000080), 0x22242, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) write$USERIO_CMD_REGISTER(r1, &(0x7f00000000c0), 0x2) chmod(&(0x7f0000000040)='.\x00', 0x35e) setuid(0xee01) removexattr(&(0x7f00000004c0)='./file0\x00', &(0x7f0000000500)=@known='system.posix_acl_default\x00') r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r2, 0x29, 0x31, &(0x7f0000000080)=0x4, 0x4) setsockopt$inet6_int(r2, 0x29, 0x48, &(0x7f0000000040)=0xd169, 0x4) r3 = accept$inet6(r2, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, &(0x7f0000000140)=0x1c) getsockopt$inet_sctp6_SCTP_GET_ASSOC_NUMBER(r3, 0x84, 0x1c, &(0x7f0000000000), &(0x7f0000000100)=0xe) getsockopt$inet6_buf(r2, 0x29, 0x6, 0x0, &(0x7f0000000240)) 3m4.22373251s ago: executing program 3 (id=939): madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) madvise(&(0x7f0000529000/0x2000)=nil, 0x2000, 0x16) r0 = socket(0x40000000015, 0x5, 0x0) set_mempolicy(0x2, 0x0, 0x3) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000019100), 0x4000000000000ed, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, 0x0, 0x0) sched_setattr(0x0, 0x0, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000019140)='net/snmp\x00') r4 = syz_open_dev$dri(&(0x7f0000000100), 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r4, 0xc04064a0, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000940)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r4, 0xc05064a7, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000900), 0x20, 0x5, 0x0, 0x0, r5}) pread64(r3, &(0x7f0000000080)=""/102356, 0x18fd4, 0x200) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r7 = dup2(r6, r6) ioctl$sock_inet_sctp_SIOCINQ(r7, 0x541b, 0x0) recvmmsg(r0, &(0x7f0000000940)=[{{0x0, 0x0, 0x0}, 0x7ff}], 0x1, 0x60010020, 0x0) sendto$inet(r0, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2, 0x0, @loopback}, 0x10) syz_clone(0x1000, 0x0, 0x0, 0x0, 0x0, 0x0) 2m46.792400849s ago: executing program 42 (id=939): madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) madvise(&(0x7f0000529000/0x2000)=nil, 0x2000, 0x16) r0 = socket(0x40000000015, 0x5, 0x0) set_mempolicy(0x2, 0x0, 0x3) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000019100), 0x4000000000000ed, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, 0x0, 0x0) sched_setattr(0x0, 0x0, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000019140)='net/snmp\x00') r4 = syz_open_dev$dri(&(0x7f0000000100), 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r4, 0xc04064a0, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000940)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r4, 0xc05064a7, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000900), 0x20, 0x5, 0x0, 0x0, r5}) pread64(r3, &(0x7f0000000080)=""/102356, 0x18fd4, 0x200) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r7 = dup2(r6, r6) ioctl$sock_inet_sctp_SIOCINQ(r7, 0x541b, 0x0) recvmmsg(r0, &(0x7f0000000940)=[{{0x0, 0x0, 0x0}, 0x7ff}], 0x1, 0x60010020, 0x0) sendto$inet(r0, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2, 0x0, @loopback}, 0x10) syz_clone(0x1000, 0x0, 0x0, 0x0, 0x0, 0x0) 2m46.557719647s ago: executing program 43 (id=938): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) syz_open_dev$vbi(&(0x7f0000000040), 0x0, 0x2) syz_open_dev$I2C(&(0x7f00000000c0), 0x0, 0x800) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) connect$inet(0xffffffffffffffff, 0x0, 0x0) r1 = openat$userio(0xffffffffffffff9c, &(0x7f0000000080), 0x22242, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) write$USERIO_CMD_REGISTER(r1, &(0x7f00000000c0), 0x2) chmod(&(0x7f0000000040)='.\x00', 0x35e) setuid(0xee01) removexattr(&(0x7f00000004c0)='./file0\x00', &(0x7f0000000500)=@known='system.posix_acl_default\x00') r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r2, 0x29, 0x31, &(0x7f0000000080)=0x4, 0x4) setsockopt$inet6_int(r2, 0x29, 0x48, &(0x7f0000000040)=0xd169, 0x4) r3 = accept$inet6(r2, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, &(0x7f0000000140)=0x1c) getsockopt$inet_sctp6_SCTP_GET_ASSOC_NUMBER(r3, 0x84, 0x1c, &(0x7f0000000000), &(0x7f0000000100)=0xe) getsockopt$inet6_buf(r2, 0x29, 0x6, 0x0, &(0x7f0000000240)) 13.784339459s ago: executing program 1 (id=1153): setsockopt(0xffffffffffffffff, 0x84, 0x81, &(0x7f0000000280)="1a000000020000", 0x7) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000040)="2e00000011008188040f80ec59acbc0413a1f8480b0000005e14060200", 0x1d}], 0x1}, 0x40000) r0 = socket(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) select(0x40, &(0x7f0000000240)={0xffffffffffff5814, 0x1, 0x200, 0xc, 0x1c00000000, 0x2, 0x6, 0x100000000}, &(0x7f0000000300)={0x1, 0x8000000000000000, 0x8, 0x80000001, 0x4, 0x1000, 0x594b, 0x7ff}, &(0x7f00000003c0)={0xfffffffffffffff8, 0x3, 0x252, 0x81, 0x98c, 0x2f79754f, 0xfffffffffffffff7, 0x7ff}, &(0x7f0000000400)={0x77359400}) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000180)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x3, [@struct={0x0, 0x2, 0x0, 0x13, 0x0, 0x2, [{0x1}, {0x1}]}]}, {0x0, [0x61]}}, 0x0, 0x3f, 0x0, 0x9}, 0x28) write(r0, 0x0, 0x0) r2 = socket$inet6(0xa, 0x802, 0x0) getsockopt$inet6_opts(r2, 0x29, 0x36, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x0, 0x0, 0x2, 0x0) timer_settime(0x0, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, &(0x7f0000000380)) r3 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r3, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(r3, &(0x7f0000000180)={0x2, 0x4e21, @empty}, 0x10) sendto$inet(r3, &(0x7f0000000000), 0xfffffffffffffd74, 0x40004, 0x0, 0x0) openat2$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)={0x20800, 0x0, 0x21}, 0x18) recvfrom$inet(r3, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0xc9100120, 0x0, 0xfffffffffffffd25) 13.779879669s ago: executing program 7 (id=1154): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) utimensat(0xffffffffffffffff, 0x0, 0x0, 0x0) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) r4 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f00000000c0)={'vxcan1\x00', 0x0}) bind$can_j1939(r4, &(0x7f0000000380)={0x1d, r5, 0x0, {0x2, 0xf0, 0x4}, 0xfe}, 0x18) setsockopt$sock_int(r4, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4) setsockopt$SO_J1939_ERRQUEUE(r4, 0x6b, 0x4, &(0x7f0000000080)=0x1, 0x4) sendmsg$inet(r4, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x4048001) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000440)=@newtfilter={0x24, 0x11, 0x1, 0x70bd27, 0x0, {0x0, 0x0, 0x74, r5, {0xfffd, 0xffff}, {0x1, 0x9}, {0xfff2}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x4012}, 0x850) 12.256598491s ago: executing program 7 (id=1155): bind$inet6(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(des3_ede)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r4 = accept4(r3, 0x0, 0x0, 0x0) sendmmsg$alg(r4, &(0x7f0000000400)=[{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe1a}], 0x1, &(0x7f0000000380)=[@op={0x18}], 0x18}], 0x4924924924924b9, 0x0) recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000000c0)=""/73, 0x49}, {&(0x7f0000000200)=""/83, 0x53}], 0x3a}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), r4) 11.728701679s ago: executing program 1 (id=1156): socket$inet(0x2, 0x1, 0x100) socket$inet6_udplite(0xa, 0x2, 0x88) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x3, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB, @ANYRES32], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r3, 0x1, 0x0, &(0x7f0000000040)='c:::\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) tkill(0x0, 0xb) utimensat(0xffffffffffffff9c, &(0x7f00000003c0)='.\x00', 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = openat$cgroup_ro(r4, &(0x7f0000000040)='blkio.bfq.time_recursive\x00', 0x0, 0x0) preadv2(r5, &(0x7f0000000280)=[{&(0x7f00000008c0)=""/211, 0xd3}], 0x1, 0x0, 0x0, 0x0) 10.81873468s ago: executing program 7 (id=1157): bind$inet6(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(des3_ede)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c2", 0x17) r4 = accept4(r3, 0x0, 0x0, 0x0) sendmmsg$alg(r4, &(0x7f0000000400)=[{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe1a}], 0x1, &(0x7f0000000380)=[@op={0x18}], 0x18}], 0x4924924924924b9, 0x0) recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000000c0)=""/73, 0x49}, {&(0x7f0000000200)=""/83, 0x53}], 0x3a}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), r4) 9.134349744s ago: executing program 0 (id=1158): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) pipe2$9p(0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x1, 0x4, 0x7fe2, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={0x0, r0}, 0x18) dup(0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = accept4$inet6(0xffffffffffffffff, 0x0, &(0x7f0000000000), 0x800) quotactl$Q_SYNC(0xffffffff80000102, 0x0, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000700)=@raw={'raw\x00', 0x3c1, 0x3, 0x418, 0x0, 0x940c, 0x3002, 0x210, 0x2c0, 0x348, 0x3d8, 0x3d8, 0x348, 0x3d8, 0x3, 0x0, {[{{@uncond, 0x0, 0x1c8, 0x210, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x2, 0x1, 0x0, 'syz0\x00'}}, @common=@eui64={{0x28}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@loopback, 'virt_wifi0\x00'}}}, {{@ipv6={@loopback, @empty, [0xffffff00, 0xffff00, 0xff, 0xffffff00], [0xff, 0xff000000, 0x0, 0xff000000], 'syzkaller1\x00', 'macvtap0\x00', {}, {}, 0x1, 0x9, 0x1, 0x8}, 0x0, 0xd0, 0x138, 0x0, {0x700}, [@common=@inet=@socket2={{0x28}, 0x2}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, '\x00', 'syz0\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x478) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x3) socket$nl_netfilter(0x10, 0x3, 0xc) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x2}, 0x6) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, 0x0) 9.020432961s ago: executing program 7 (id=1159): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20008008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000002100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x40, '\x00', 0x0, 0x2}, 0x94) r4 = openat$vimc2(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_ENUM_FRAMESIZES(r4, 0xc02c564a, &(0x7f0000000040)={0x6, 0x34324258, 0x3, @discrete={0x3b79f0fc, 0xffffffff}}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r3}, 0x10) sched_getattr(r0, &(0x7f0000000340)={0x38}, 0x38, 0x0) fanotify_init(0x0, 0x0) open$dir(&(0x7f0000000000)='.\x00', 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000000)={0x1, &(0x7f0000000140)=[{0x6, 0x0, 0x1, 0x7fff0000}]}) timerfd_gettime(0xffffffffffffffff, 0x0) r5 = openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TIOCSETD(r5, 0x5423, &(0x7f00000000c0)=0x3) openat$mice(0xffffffffffffff9c, 0x0, 0x800000) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000009c0)=@newlink={0x34, 0x10, 0xc362e63b3f31ba5f, 0x6000, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x80e1}, [@IFLA_GROUP={0x8}, @IFLA_BROADCAST={0xa, 0x2, @broadcast}]}, 0x34}}, 0x0) 8.859917441s ago: executing program 1 (id=1160): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000005c00), r4) sendmsg$BATADV_CMD_GET_GATEWAYS(r4, &(0x7f0000005d00)={0x0, 0x0, &(0x7f0000005cc0)={&(0x7f0000000540)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r5, @ANYBLOB="11072bbd7000fedbdf250a0000000800030045"], 0x1c}, 0x1, 0x0, 0x0, 0x4000084}, 0x10) 8.051224935s ago: executing program 0 (id=1161): r0 = getpid() prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) epoll_pwait(0xffffffffffffffff, &(0x7f0000000100)=[{}], 0x1, 0xfffffff, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f0000000140)=@file={0x0, './file0\x00'}, 0x6e) r3 = userfaultfd(0x80001) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x749}) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000000200)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) mremap(&(0x7f00003cd000/0x4000)=nil, 0x4000, 0x2000, 0x3, &(0x7f0000c9a000/0x2000)=nil) close_range(r3, 0xffffffffffffffff, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_POLICER_SET(r4, 0x0, 0x4000810) sendmsg$DEVLINK_CMD_GET(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x10}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4000041}, 0xc0) r5 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r5, 0xaf01, 0x0) 7.89390451s ago: executing program 7 (id=1162): sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000140)={0xa, 0x0, 0x0, @private0}, 0x1c) socket(0x2, 0x80805, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(0xffffffffffffffff, 0x84, 0x7c, 0x0, 0x0) r0 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r0, &(0x7f0000000400)=@nameseq={0x1e, 0x1, 0x3, {0x42, 0x0, 0x2}}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0xfffffffffffffffe) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETOBJ(r2, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x800}, 0x24040808) getsockopt$bt_hci(0xffffffffffffffff, 0x84, 0x7f, &(0x7f0000000080)=""/4057, 0x0) clock_gettime(0x4, 0x0) syz_emit_vhci(0x0, 0x9) r3 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, 0x0) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000000)={0x42, 0x1}, 0x10) r4 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r4, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x1, 0x4}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r4, 0x10f, 0x87, &(0x7f0000000240)={0x42, 0x1}, 0x10) dup3(r4, r0, 0x0) 5.471155994s ago: executing program 1 (id=1163): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) utimensat(0xffffffffffffffff, 0x0, 0x0, 0x0) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) r4 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f00000000c0)={'vxcan1\x00', 0x0}) bind$can_j1939(r4, &(0x7f0000000380)={0x1d, r5, 0x0, {0x2, 0xf0, 0x4}, 0xfe}, 0x18) setsockopt$sock_int(r4, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4) setsockopt$SO_J1939_ERRQUEUE(r4, 0x6b, 0x4, &(0x7f0000000080)=0x1, 0x4) sendmsg$inet(r4, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x4048001) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000440)=@newtfilter={0x24, 0x11, 0x1, 0x70bd27, 0x0, {0x0, 0x0, 0x74, r5, {0xfffd, 0xffff}, {0x1, 0x9}, {0xfff2}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x4012}, 0x850) 5.468943405s ago: executing program 0 (id=1164): prlimit64(0x0, 0x1, &(0x7f0000000140)={0x8, 0xfffffffffffffffe}, 0x0) r0 = socket(0x11, 0x80a, 0x0) bind$rxrpc(r0, 0x0, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) r2 = fsopen(&(0x7f00000001c0)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r2, 0x1, &(0x7f00000000c0)='test_dummy_encryption', 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000b00)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x800}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) read$msr(0xffffffffffffffff, &(0x7f0000000780)=""/4, 0x4) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000000)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x800, 0x0, 0x0, 0x8a}, 0x9c) bind$inet6(r1, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000a00)={0x0, @in6={{0xa, 0x4e23, 0x0, @loopback}}, 0x100, 0x0, 0xfffffffe, 0x0, 0x54}, 0x9c) r6 = add_key(&(0x7f0000000000)='big_key\x00', &(0x7f0000000040)={'syz', 0x0}, &(0x7f0000000080)="ae", 0x1, 0xffffffffffffffff) keyctl$read(0x2, r6, &(0x7f00000003c0)=""/4096, 0x1000) 2.270389557s ago: executing program 1 (id=1165): bind$inet6(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(des3_ede)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r4 = accept4(r3, 0x0, 0x0, 0x0) sendmmsg$alg(r4, &(0x7f0000000400)=[{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe1a}], 0x1, &(0x7f0000000380)=[@op={0x18}], 0x18}], 0x4924924924924b9, 0x0) recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000000c0)=""/73, 0x49}, {&(0x7f0000000200)=""/83, 0x53}], 0x3a}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), r4) 2.224056957s ago: executing program 0 (id=1166): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000180)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = syz_io_uring_setup(0x497, &(0x7f0000000380)={0x0, 0x607b, 0x8, 0x0, 0x284}, &(0x7f0000000280)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) r4 = syz_init_net_socket$x25(0x9, 0x5, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd=r4, 0x0, 0x0, 0x0, 0x14, 0x0, {0x3}}) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a3000000000090003007379"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)={{0x14}, [@NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x2c, 0x4, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @masq={{0x9}, @void}}, {0x18, 0x1, 0x0, 0x1, @fib={{0x8}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_FIB_RESULT={0x8, 0x2, 0x1, 0x0, 0x1}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0xffffffffffffff07}}, 0x80}}, 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x10, r5, 0x3c525000) io_uring_enter(r1, 0x3516, 0x0, 0x4, 0x0, 0x0) copy_file_range(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x5, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="2c0000002b000b00000000080000000008000000040003000c0001800600000088480000080002"], 0x2c}}, 0x0) 2.11607912s ago: executing program 7 (id=1167): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000009c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000000)='sched_switch\x00', r0, 0x0, 0xfff7fffffffffff5}, 0x18) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, 0x0) syz_usb_control_io(0xffffffffffffffff, &(0x7f00000003c0)={0x2c, &(0x7f00000000c0)=ANY=[], 0x0, 0x0, 0x0, 0x0}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000300)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) mknod$loop(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x200, 0x1) ioctl$sock_SIOCGIFVLAN_SET_VLAN_NAME_TYPE_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000000)={0x6, 'dvmrp1\x00'}) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, &(0x7f0000000040)={0x0, @dev, 0x4e24, 0x2, 'sed\x00', 0x0, 0xfffffffc}, 0x2c) mount(0x0, &(0x7f0000000240)='.\x00', &(0x7f000015bffc)='nfs\x00', 0x0, &(0x7f0000000000)) 1.248609566s ago: executing program 1 (id=1168): openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000003c0), 0x2, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) socket(0x400000000010, 0x3, 0x0) r1 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r1, 0x0, 0x0) bind$tipc(r1, 0x0, 0x0) r2 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r2, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) bind$tipc(r1, 0x0, 0xfffffe35) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000007, 0x110, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x9}, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x3) r3 = syz_open_dev$MSR(&(0x7f0000000100), 0x0, 0x0) read$msr(r3, &(0x7f0000002700)=""/102392, 0x18ff8) listen(0xffffffffffffffff, 0x80000001) unshare(0x20000400) openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x8000, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000000940)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffffd2}, 0x48) 1.030931456s ago: executing program 0 (id=1169): openat$nullb(0xffffffffffffff9c, 0x0, 0x4a2000, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000a80)={0xffffffffffffffff, 0xffffffffffffffff, 0x2f, 0x0, @val=@iter={0x0}}, 0x20) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) openat$snapshot(0xffffffffffffff9c, &(0x7f00000000c0), 0xc2d41, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000280), 0xffffffffffffffff) r3 = socket$l2tp(0x2, 0x2, 0x73) sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000340)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="230900000000000000000100000005000700000000000800090000000000060002000100000008000a000000000008001700", @ANYRES32=r3], 0x3c}}, 0x0) close(r3) ioctl$NBD_SET_FLAGS(0xffffffffffffffff, 0xab0a, 0x8) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000140)=0x15) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, &(0x7f0000000300)) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, &(0x7f0000000000)=0x7e) unshare(0x8000000) shmget$private(0x0, 0xfffffffffeffffff, 0x4800, &(0x7f0000ffc000/0x3000)=nil) 0s ago: executing program 0 (id=1170): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000400)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_route(0x10, 0x3, 0x0) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r5 = add_key$fscrypt_v1(&(0x7f0000000440), &(0x7f0000000480)={'fscrypt:', @auto=[0x39, 0x0, 0x0, 0x62, 0x38, 0x0, 0x0, 0x0, 0x35, 0x63, 0x0, 0x0, 0x0, 0x0, 0x0, 0x64]}, &(0x7f00000004c0)={0x0, "3e82554dc8ccfbc2e85ec82d4ee9df60f6ae16b1a5f2c848722ba3b132e4fde178c945bd950b0477e801fc8a1be9b4ebbe9c2289a6b0aa00"}, 0x48, 0xfffffffffffffffe) pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff}, 0x80) keyctl$KEYCTL_WATCH_KEY(0x20, r5, r6, 0x1d) r7 = add_key$keyring(&(0x7f0000000140), &(0x7f00000001c0)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) keyctl$KEYCTL_WATCH_KEY(0x20, r7, r6, 0x1f) add_key$keyring(&(0x7f0000000100), &(0x7f0000000180)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) close_range(r4, 0xffffffffffffffff, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r3, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) kernel console output (not intermixed with test programs): ed disabled state [ 870.234752][ T9178] bridge_slave_0: entered allmulticast mode [ 870.258408][ T9178] bridge_slave_0: entered promiscuous mode [ 870.336490][ T9178] bridge0: port 2(bridge_slave_1) entered blocking state [ 870.336623][ T9178] bridge0: port 2(bridge_slave_1) entered disabled state [ 870.336799][ T9178] bridge_slave_1: entered allmulticast mode [ 870.371456][ T9178] bridge_slave_1: entered promiscuous mode [ 870.888858][ T9178] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 871.058065][ T9178] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 871.058301][ T9212] bridge0: port 1(bridge_slave_0) entered blocking state [ 871.058442][ T9212] bridge0: port 1(bridge_slave_0) entered disabled state [ 871.058612][ T9212] bridge_slave_0: entered allmulticast mode [ 871.062382][ T9212] bridge_slave_0: entered promiscuous mode [ 871.272540][ T9212] bridge0: port 2(bridge_slave_1) entered blocking state [ 871.272781][ T9212] bridge0: port 2(bridge_slave_1) entered disabled state [ 871.273004][ T9212] bridge_slave_1: entered allmulticast mode [ 871.299338][ T9212] bridge_slave_1: entered promiscuous mode [ 871.569370][ T9178] team0: Port device team_slave_0 added [ 871.741194][ T9178] team0: Port device team_slave_1 added [ 871.886595][ T9212] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 872.013277][ T9212] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 872.048159][ T9178] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 872.048176][ T9178] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 872.048204][ T9178] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 872.137083][ T7638] Bluetooth: hci4: command tx timeout [ 872.281549][ T9178] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 872.281567][ T9178] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 872.281592][ T9178] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 872.776717][ T9212] team0: Port device team_slave_0 added [ 872.857268][ T9212] team0: Port device team_slave_1 added [ 874.229107][ T9431] netlink: 16 bytes leftover after parsing attributes in process `syz.0.692'. [ 874.426422][ T9212] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 874.426437][ T9212] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 874.426463][ T9212] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 874.588032][ T9178] hsr_slave_0: entered promiscuous mode [ 874.589461][ T9178] hsr_slave_1: entered promiscuous mode [ 874.597277][ T9178] debugfs: 'hsr0' already exists in 'hsr' [ 874.597301][ T9178] Cannot create hsr debugfs directory [ 874.599472][ T9370] chnl_net:caif_netlink_parms(): no params data found [ 874.621772][ T9212] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 874.621787][ T9212] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 874.621815][ T9212] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 874.622856][ T9337] chnl_net:caif_netlink_parms(): no params data found [ 875.247209][ T7638] Bluetooth: hci6: command 0x0406 tx timeout [ 875.676021][ T9212] hsr_slave_0: entered promiscuous mode [ 875.680146][ T9212] hsr_slave_1: entered promiscuous mode [ 875.681223][ T9212] debugfs: 'hsr0' already exists in 'hsr' [ 875.681249][ T9212] Cannot create hsr debugfs directory [ 876.679590][ T9370] bridge0: port 1(bridge_slave_0) entered blocking state [ 876.679817][ T9370] bridge0: port 1(bridge_slave_0) entered disabled state [ 876.680028][ T9370] bridge_slave_0: entered allmulticast mode [ 876.682694][ T9370] bridge_slave_0: entered promiscuous mode [ 876.807828][ T9337] bridge0: port 1(bridge_slave_0) entered blocking state [ 876.807995][ T9337] bridge0: port 1(bridge_slave_0) entered disabled state [ 876.808248][ T9337] bridge_slave_0: entered allmulticast mode [ 876.810843][ T9337] bridge_slave_0: entered promiscuous mode [ 876.844221][ T9370] bridge0: port 2(bridge_slave_1) entered blocking state [ 876.844409][ T9370] bridge0: port 2(bridge_slave_1) entered disabled state [ 876.844607][ T9370] bridge_slave_1: entered allmulticast mode [ 876.848207][ T9370] bridge_slave_1: entered promiscuous mode [ 876.947553][ T9337] bridge0: port 2(bridge_slave_1) entered blocking state [ 876.947734][ T9337] bridge0: port 2(bridge_slave_1) entered disabled state [ 876.947999][ T9337] bridge_slave_1: entered allmulticast mode [ 876.950803][ T9337] bridge_slave_1: entered promiscuous mode [ 877.432646][ T1234] bridge_slave_1: left allmulticast mode [ 877.432681][ T1234] bridge_slave_1: left promiscuous mode [ 877.432942][ T1234] bridge0: port 2(bridge_slave_1) entered disabled state [ 877.498909][ T1234] bridge_slave_0: left allmulticast mode [ 877.498940][ T1234] bridge_slave_0: left promiscuous mode [ 877.499181][ T1234] bridge0: port 1(bridge_slave_0) entered disabled state [ 877.561881][ T1234] bridge_slave_1: left allmulticast mode [ 877.561910][ T1234] bridge_slave_1: left promiscuous mode [ 877.562131][ T1234] bridge0: port 2(bridge_slave_1) entered disabled state [ 877.602797][ T1234] bridge_slave_0: left allmulticast mode [ 877.602830][ T1234] bridge_slave_0: left promiscuous mode [ 877.603101][ T1234] bridge0: port 1(bridge_slave_0) entered disabled state [ 877.692499][ T1234] bridge_slave_1: left allmulticast mode [ 877.692531][ T1234] bridge_slave_1: left promiscuous mode [ 877.692820][ T1234] bridge0: port 2(bridge_slave_1) entered disabled state [ 877.758877][ T1234] bridge_slave_0: left allmulticast mode [ 877.758909][ T1234] bridge_slave_0: left promiscuous mode [ 877.759150][ T1234] bridge0: port 1(bridge_slave_0) entered disabled state [ 878.124040][ T1234] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 878.208376][ T1234] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 878.282228][ T1234] bond0 (unregistering): Released all slaves [ 878.547852][ T1234] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 878.637963][ T1234] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 878.709244][ T1234] bond0 (unregistering): Released all slaves [ 878.950144][ T1234] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 879.028411][ T1234] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 879.094389][ T1234] bond0 (unregistering): Released all slaves [ 879.265095][ T1234] bond0 (unregistering): Released all slaves [ 879.451593][ T9370] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 879.536454][ T9337] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 879.569104][ T9370] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 879.573242][ T9337] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 879.790545][ T8253] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 879.826300][ T8253] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 879.834598][ T8253] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 879.843769][ T8253] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 879.844911][ T8253] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 880.202531][ T9337] team0: Port device team_slave_0 added [ 880.214578][ T9370] team0: Port device team_slave_0 added [ 880.236370][ T9337] team0: Port device team_slave_1 added [ 880.255358][ T9370] team0: Port device team_slave_1 added [ 880.374806][ T1319] ieee802154 phy0 wpan0: encryption failed: -22 [ 880.374862][ T1319] ieee802154 phy1 wpan1: encryption failed: -22 [ 881.134619][ T9337] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 881.134631][ T9337] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 881.134648][ T9337] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 881.157768][ T9370] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 881.157784][ T9370] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 881.157813][ T9370] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 881.200436][ T9337] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 881.200453][ T9337] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 881.200491][ T9337] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 881.250955][ T9370] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 881.250989][ T9370] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 881.251019][ T9370] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 881.347373][ T1234] hsr_slave_0: left promiscuous mode [ 881.367254][ T1234] hsr_slave_1: left promiscuous mode [ 881.368228][ T1234] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 881.434181][ T1234] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 881.527138][ T1234] hsr_slave_0: left promiscuous mode [ 881.547256][ T1234] hsr_slave_1: left promiscuous mode [ 881.548275][ T1234] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 881.587964][ T1234] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 881.638216][ T1234] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 881.657926][ T1234] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 881.892046][ T8253] Bluetooth: hci0: command tx timeout [ 882.235982][ T1234] team0 (unregistering): Port device team_slave_1 removed [ 882.377840][ T1234] team0 (unregistering): Port device team_slave_0 removed [ 883.608221][ T1234] team0 (unregistering): Port device team_slave_1 removed [ 883.737981][ T1234] team0 (unregistering): Port device team_slave_0 removed [ 883.967181][ T8253] Bluetooth: hci0: command tx timeout [ 884.568218][ T1234] team0 (unregistering): Port device team_slave_1 removed [ 884.698086][ T1234] team0 (unregistering): Port device team_slave_0 removed [ 885.231017][ T7638] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 885.235492][ T7638] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 885.257139][ T7638] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 885.259884][ T7638] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 885.274716][ T7638] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 886.059581][ T8253] Bluetooth: hci0: command tx timeout [ 886.165894][ T9337] hsr_slave_0: entered promiscuous mode [ 886.185175][ T9337] hsr_slave_1: entered promiscuous mode [ 886.322171][ T9370] hsr_slave_0: entered promiscuous mode [ 886.323598][ T9370] hsr_slave_1: entered promiscuous mode [ 886.324506][ T9370] debugfs: 'hsr0' already exists in 'hsr' [ 886.324527][ T9370] Cannot create hsr debugfs directory [ 887.327070][ T8253] Bluetooth: hci1: command tx timeout [ 887.987574][ T9445] chnl_net:caif_netlink_parms(): no params data found [ 888.127085][ T8253] Bluetooth: hci0: command tx timeout [ 888.596361][ T9450] chnl_net:caif_netlink_parms(): no params data found [ 889.409852][ T8253] Bluetooth: hci1: command tx timeout [ 890.921629][ T9445] bridge0: port 1(bridge_slave_0) entered blocking state [ 890.954647][ T9445] bridge0: port 1(bridge_slave_0) entered disabled state [ 890.982391][ T9445] bridge_slave_0: entered allmulticast mode [ 891.111119][ T9445] bridge_slave_0: entered promiscuous mode [ 891.487343][ T8253] Bluetooth: hci1: command tx timeout [ 891.739352][ T9445] bridge0: port 2(bridge_slave_1) entered blocking state [ 891.739502][ T9445] bridge0: port 2(bridge_slave_1) entered disabled state [ 891.739718][ T9445] bridge_slave_1: entered allmulticast mode [ 891.746196][ T9445] bridge_slave_1: entered promiscuous mode [ 892.514699][ T9445] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 892.804728][ T9445] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 893.058796][ T9450] bridge0: port 1(bridge_slave_0) entered blocking state [ 893.059094][ T9450] bridge0: port 1(bridge_slave_0) entered disabled state [ 893.059310][ T9450] bridge_slave_0: entered allmulticast mode [ 893.062097][ T9450] bridge_slave_0: entered promiscuous mode [ 893.238416][ T9450] bridge0: port 2(bridge_slave_1) entered blocking state [ 893.238581][ T9450] bridge0: port 2(bridge_slave_1) entered disabled state [ 893.238884][ T9450] bridge_slave_1: entered allmulticast mode [ 893.240810][ T9450] bridge_slave_1: entered promiscuous mode [ 893.252395][ T9445] team0: Port device team_slave_0 added [ 893.388406][ T9445] team0: Port device team_slave_1 added [ 893.577363][ T8253] Bluetooth: hci1: command tx timeout [ 893.676921][ T9450] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 893.763685][ T9450] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 893.876899][ T9445] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 893.876913][ T9445] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 893.878843][ T9445] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 893.985610][ T9445] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 893.985629][ T9445] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 893.985671][ T9445] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 894.236325][ T9450] team0: Port device team_slave_0 added [ 894.250355][ T9450] team0: Port device team_slave_1 added [ 894.787065][ T9445] hsr_slave_0: entered promiscuous mode [ 894.790489][ T9445] hsr_slave_1: entered promiscuous mode [ 894.791526][ T9445] debugfs: 'hsr0' already exists in 'hsr' [ 894.791549][ T9445] Cannot create hsr debugfs directory [ 894.793908][ T9450] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 894.793921][ T9450] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 894.793947][ T9450] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 894.888438][ T1234] bridge_slave_1: left allmulticast mode [ 894.888475][ T1234] bridge_slave_1: left promiscuous mode [ 894.888902][ T1234] bridge0: port 2(bridge_slave_1) entered disabled state [ 894.948655][ T1234] bridge_slave_0: left allmulticast mode [ 894.948685][ T1234] bridge_slave_0: left promiscuous mode [ 894.948963][ T1234] bridge0: port 1(bridge_slave_0) entered disabled state [ 895.024356][ T1234] bridge_slave_1: left allmulticast mode [ 895.024387][ T1234] bridge_slave_1: left promiscuous mode [ 895.024611][ T1234] bridge0: port 2(bridge_slave_1) entered disabled state [ 895.101841][ T1234] bridge_slave_0: left allmulticast mode [ 895.101871][ T1234] bridge_slave_0: left promiscuous mode [ 895.102117][ T1234] bridge0: port 1(bridge_slave_0) entered disabled state [ 895.758888][ T9482] netlink: 'syz.0.698': attribute type 21 has an invalid length. [ 895.758968][ T9482] netlink: 128 bytes leftover after parsing attributes in process `syz.0.698'. [ 896.938013][ T1234] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 896.997579][ T1234] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 897.065330][ T1234] bond0 (unregistering): Released all slaves [ 897.247735][ T1234] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 897.349162][ T1234] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 897.440783][ T1234] bond0 (unregistering): Released all slaves [ 897.477889][ T9482] netlink: 'syz.0.698': attribute type 5 has an invalid length. [ 897.477910][ T9482] netlink: 3 bytes leftover after parsing attributes in process `syz.0.698'. [ 897.480388][ T9450] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 897.480402][ T9450] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 897.480430][ T9450] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 899.442526][ T9450] hsr_slave_0: entered promiscuous mode [ 899.443970][ T9450] hsr_slave_1: entered promiscuous mode [ 899.444912][ T9450] debugfs: 'hsr0' already exists in 'hsr' [ 899.444937][ T9450] Cannot create hsr debugfs directory [ 899.554964][ T9337] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 899.977205][ T1234] hsr_slave_0: left promiscuous mode [ 900.019814][ T1234] hsr_slave_1: left promiscuous mode [ 900.021345][ T1234] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 900.040165][ T1234] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 900.259134][ T1234] hsr_slave_0: left promiscuous mode [ 900.297518][ T1234] hsr_slave_1: left promiscuous mode [ 900.298191][ T1234] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 900.320196][ T1234] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 903.157963][ T1234] team0 (unregistering): Port device team_slave_1 removed [ 903.307849][ T1234] team0 (unregistering): Port device team_slave_0 removed [ 904.295779][ T1234] team0 (unregistering): Port device team_slave_1 removed [ 904.419053][ T1234] team0 (unregistering): Port device team_slave_0 removed [ 904.879891][ T9337] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 906.475808][ T9337] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 907.789203][ T9337] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 908.934999][ T9370] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 909.282223][ T9370] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 909.322806][ T9370] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 909.379907][ T9370] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 910.079942][ T9537] netlink: 32 bytes leftover after parsing attributes in process `syz.0.706'. [ 910.734852][ T9337] 8021q: adding VLAN 0 to HW filter on device bond0 [ 910.791618][ T9337] 8021q: adding VLAN 0 to HW filter on device team0 [ 910.870955][ T9370] 8021q: adding VLAN 0 to HW filter on device bond0 [ 910.901716][ T8562] bridge0: port 1(bridge_slave_0) entered blocking state [ 910.902203][ T8562] bridge0: port 1(bridge_slave_0) entered forwarding state [ 911.058569][ T9542] overlayfs: missing 'lowerdir' [ 911.775136][ T3606] bridge0: port 2(bridge_slave_1) entered blocking state [ 911.777235][ T3606] bridge0: port 2(bridge_slave_1) entered forwarding state [ 911.906711][ T9370] 8021q: adding VLAN 0 to HW filter on device team0 [ 911.953415][ T43] bridge0: port 1(bridge_slave_0) entered blocking state [ 911.953644][ T43] bridge0: port 1(bridge_slave_0) entered forwarding state [ 912.025057][ T8562] bridge0: port 2(bridge_slave_1) entered blocking state [ 912.025226][ T8562] bridge0: port 2(bridge_slave_1) entered forwarding state [ 912.582943][ T9548] overlayfs: failed to resolve './file1': -2 [ 913.474392][ T7638] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 913.485491][ T7638] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 913.486849][ T7638] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 913.489226][ T7638] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 913.490125][ T7638] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 915.987044][ T7638] Bluetooth: hci2: command tx timeout [ 917.803528][ T1234] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 918.057549][ T7638] Bluetooth: hci2: command tx timeout [ 918.335592][ T1234] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 918.857499][ T1234] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 918.901694][ T9370] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 919.204787][ T1234] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 920.602627][ T7638] Bluetooth: hci2: command tx timeout [ 920.664138][ T9445] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 920.716299][ T9445] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 921.012216][ T9445] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 922.111377][ T9445] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 922.617637][ T7638] Bluetooth: hci2: command tx timeout [ 922.789562][ T8253] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 922.849633][ T8253] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 922.855115][ T8253] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 922.873577][ T8253] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 923.776877][ T8253] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 925.807941][ T7638] Bluetooth: hci3: command tx timeout [ 925.911326][ T1234] bond0 (unregistering): Released all slaves [ 926.084524][ T9551] chnl_net:caif_netlink_parms(): no params data found [ 926.114765][ T1234] tipc: Disabling bearer [ 926.131584][ T1234] tipc: Left network mode [ 926.259432][ T9450] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 926.600594][ T9618] netlink: 68 bytes leftover after parsing attributes in process `syz.0.723'. [ 927.126778][ T9450] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 927.450268][ T1234] IPVS: stopping backup sync thread 8794 ... [ 927.601027][ T9450] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 927.895975][ T8253] Bluetooth: hci3: command tx timeout [ 929.173758][ T9450] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 929.967152][ T8253] Bluetooth: hci3: command tx timeout [ 930.540711][ T9551] bridge0: port 1(bridge_slave_0) entered blocking state [ 930.540842][ T9551] bridge0: port 1(bridge_slave_0) entered disabled state [ 930.541108][ T9551] bridge_slave_0: entered allmulticast mode [ 930.543966][ T9551] bridge_slave_0: entered promiscuous mode [ 930.593433][ T9551] bridge0: port 2(bridge_slave_1) entered blocking state [ 930.593579][ T9551] bridge0: port 2(bridge_slave_1) entered disabled state [ 930.593792][ T9551] bridge_slave_1: entered allmulticast mode [ 930.596525][ T9551] bridge_slave_1: entered promiscuous mode [ 932.052174][ T8253] Bluetooth: hci3: command tx timeout [ 932.597262][ T1234] hsr_slave_0: left promiscuous mode [ 932.628588][ T1234] hsr_slave_1: left promiscuous mode [ 932.656090][ T1234] veth1_macvtap: left promiscuous mode [ 932.656160][ T1234] veth0_macvtap: left promiscuous mode [ 932.656323][ T1234] veth1_vlan: left promiscuous mode [ 932.656441][ T1234] veth0_vlan: left promiscuous mode [ 937.249571][ T9551] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 937.266831][ T9551] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 938.605765][ T9551] team0: Port device team_slave_0 added [ 939.295388][ T9551] team0: Port device team_slave_1 added [ 939.751389][ T9551] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 939.751405][ T9551] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 939.751431][ T9551] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 939.810813][ T9551] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 939.810828][ T9551] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 939.810854][ T9551] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 941.284874][ T7638] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 941.304951][ T7638] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 941.306209][ T7638] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 941.327477][ T7638] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 941.328714][ T7638] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 941.502736][ T9676] IPVS: Error joining to the multicast group [ 941.531530][ T9551] hsr_slave_0: entered promiscuous mode [ 941.532908][ T9551] hsr_slave_1: entered promiscuous mode [ 941.533868][ T9551] debugfs: 'hsr0' already exists in 'hsr' [ 941.533892][ T9551] Cannot create hsr debugfs directory [ 941.696443][ T9601] chnl_net:caif_netlink_parms(): no params data found [ 941.922768][ T1319] ieee802154 phy0 wpan0: encryption failed: -22 [ 941.922848][ T1319] ieee802154 phy1 wpan1: encryption failed: -22 [ 942.320278][ T9682] bridge1: entered promiscuous mode [ 942.867276][ T9684] netlink: 'syz.0.735': attribute type 10 has an invalid length. [ 942.919541][ T9685] netlink: 'syz.0.735': attribute type 4 has an invalid length. [ 942.919560][ T9685] netlink: 152 bytes leftover after parsing attributes in process `syz.0.735'. [ 943.090096][ T9684] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 943.155508][ T9685] : renamed from bond0 (while UP) [ 943.410749][ T7638] Bluetooth: hci0: command tx timeout [ 944.945024][ T9601] bridge0: port 1(bridge_slave_0) entered blocking state [ 944.945226][ T9601] bridge0: port 1(bridge_slave_0) entered disabled state [ 944.945456][ T9601] bridge_slave_0: entered allmulticast mode [ 944.958549][ T9601] bridge_slave_0: entered promiscuous mode [ 945.134617][ T9601] bridge0: port 2(bridge_slave_1) entered blocking state [ 945.134756][ T9601] bridge0: port 2(bridge_slave_1) entered disabled state [ 945.134987][ T9601] bridge_slave_1: entered allmulticast mode [ 945.143556][ T9601] bridge_slave_1: entered promiscuous mode [ 945.242183][ T8253] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 945.245830][ T8253] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 945.261688][ T8253] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 945.283067][ T8253] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 945.305337][ T8253] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 945.497198][ T7638] Bluetooth: hci0: command tx timeout [ 946.208722][ T9601] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 946.721864][ T9601] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 947.654856][ T7638] Bluetooth: hci4: command tx timeout [ 947.655222][ T7638] Bluetooth: hci0: command tx timeout [ 948.840381][ T9601] team0: Port device team_slave_0 added [ 949.115831][ T9601] team0: Port device team_slave_1 added [ 949.727395][ T7638] Bluetooth: hci4: command tx timeout [ 949.727489][ T8253] Bluetooth: hci0: command tx timeout [ 951.817469][ T8253] Bluetooth: hci4: command tx timeout [ 952.026519][ T9601] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 952.026533][ T9601] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 952.026552][ T9601] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 952.143446][ T9601] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 952.143459][ T9601] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 952.143479][ T9601] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 953.567650][ T9601] hsr_slave_0: entered promiscuous mode [ 953.568996][ T9601] hsr_slave_1: entered promiscuous mode [ 953.569891][ T9601] debugfs: 'hsr0' already exists in 'hsr' [ 953.569917][ T9601] Cannot create hsr debugfs directory [ 953.887365][ T8253] Bluetooth: hci4: command tx timeout [ 953.889585][ T9674] chnl_net:caif_netlink_parms(): no params data found [ 956.771057][ T9754] trusted_key: syz.0.750 sent an empty control message without MSG_MORE. [ 957.836525][ T9551] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 957.926919][ T9759] overlayfs: failed to resolve './file1': -2 [ 958.744468][ T9551] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 958.839450][ T9551] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 959.515563][ T9770] sock: sock_timestamping_bind_phc: sock not bind to device [ 960.365649][ T9551] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 960.941773][ T9674] bridge0: port 1(bridge_slave_0) entered blocking state [ 960.942011][ T9674] bridge0: port 1(bridge_slave_0) entered disabled state [ 960.942207][ T9674] bridge_slave_0: entered allmulticast mode [ 960.957726][ T9674] bridge_slave_0: entered promiscuous mode [ 961.058987][ T9698] chnl_net:caif_netlink_parms(): no params data found [ 961.150844][ T9674] bridge0: port 2(bridge_slave_1) entered blocking state [ 961.153244][ T9674] bridge0: port 2(bridge_slave_1) entered disabled state [ 961.153567][ T9674] bridge_slave_1: entered allmulticast mode [ 961.175209][ T9674] bridge_slave_1: entered promiscuous mode [ 961.575531][ T9674] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 961.669819][ T9674] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 962.124865][ T9674] team0: Port device team_slave_0 added [ 962.250118][ T9674] team0: Port device team_slave_1 added [ 962.275321][ T9698] bridge0: port 1(bridge_slave_0) entered blocking state [ 962.275458][ T9698] bridge0: port 1(bridge_slave_0) entered disabled state [ 962.275587][ T9698] bridge_slave_0: entered allmulticast mode [ 962.304451][ T9698] bridge_slave_0: entered promiscuous mode [ 962.392198][ T9698] bridge0: port 2(bridge_slave_1) entered blocking state [ 962.392286][ T9698] bridge0: port 2(bridge_slave_1) entered disabled state [ 962.392437][ T9698] bridge_slave_1: entered allmulticast mode [ 962.394971][ T9698] bridge_slave_1: entered promiscuous mode [ 962.689422][ T9674] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 962.689435][ T9674] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 962.689454][ T9674] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 962.881821][ T9674] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 962.881834][ T9674] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 962.881854][ T9674] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 962.942671][ T1234] bridge_slave_1: left allmulticast mode [ 962.942696][ T1234] bridge_slave_1: left promiscuous mode [ 962.945785][ T1234] bridge0: port 2(bridge_slave_1) entered disabled state [ 963.008886][ T1234] bridge_slave_0: left allmulticast mode [ 963.008916][ T1234] bridge_slave_0: left promiscuous mode [ 963.009121][ T1234] bridge0: port 1(bridge_slave_0) entered disabled state [ 963.093835][ T1234] bridge_slave_1: left allmulticast mode [ 963.093866][ T1234] bridge_slave_1: left promiscuous mode [ 963.094116][ T1234] bridge0: port 2(bridge_slave_1) entered disabled state [ 963.151239][ T1234] bridge_slave_0: left allmulticast mode [ 963.151268][ T1234] bridge_slave_0: left promiscuous mode [ 963.151604][ T1234] bridge0: port 1(bridge_slave_0) entered disabled state [ 963.255613][ T1234] bridge_slave_1: left allmulticast mode [ 963.255645][ T1234] bridge_slave_1: left promiscuous mode [ 963.256340][ T1234] bridge0: port 2(bridge_slave_1) entered disabled state [ 963.318653][ T1234] bridge_slave_0: left allmulticast mode [ 963.318676][ T1234] bridge_slave_0: left promiscuous mode [ 963.318843][ T1234] bridge0: port 1(bridge_slave_0) entered disabled state [ 965.301137][ T9796] netlink: 16 bytes leftover after parsing attributes in process `syz.0.758'. [ 965.579711][ T1234] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 965.689800][ T1234] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 965.772007][ T1234] bond0 (unregistering): Released all slaves [ 967.872820][ T9806] ecryptfs_validate_options: You must supply at least one valid auth tok signature as a mount parameter; see the eCryptfs README [ 967.872897][ T9806] Error validating options; rc = [-22] [ 970.157977][ T1234] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 970.217642][ T1234] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 970.262972][ T1234] bond0 (unregistering): Released all slaves [ 971.758122][ T1234] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 971.957963][ T1234] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 972.015434][ T1234] bond0 (unregistering): Released all slaves [ 972.055208][ T9698] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 972.510195][ T9698] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 975.599404][ T9698] team0: Port device team_slave_0 added [ 975.789130][ T7638] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 975.810758][ T9698] team0: Port device team_slave_1 added [ 975.837881][ T7638] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 975.845311][ T7638] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 975.846401][ T7638] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 975.857200][ T7638] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 976.086616][ T9674] hsr_slave_0: entered promiscuous mode [ 976.095232][ T9674] hsr_slave_1: entered promiscuous mode [ 976.096282][ T9674] debugfs: 'hsr0' already exists in 'hsr' [ 976.096308][ T9674] Cannot create hsr debugfs directory [ 976.391506][ T9698] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 976.391524][ T9698] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 976.391548][ T9698] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 976.596817][ T9698] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 976.596834][ T9698] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 976.596861][ T9698] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 976.645836][ T37] kauditd_printk_skb: 22 callbacks suppressed [ 976.645852][ T37] audit: type=1326 audit(1755977964.481:57): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9835 comm="syz.0.768" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f6a8fbfebe9 code=0x0 [ 977.718178][ T1234] hsr_slave_0: left promiscuous mode [ 977.757296][ T1234] hsr_slave_1: left promiscuous mode [ 977.758351][ T1234] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 977.805424][ T1234] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 977.967131][ T1234] hsr_slave_0: left promiscuous mode [ 977.977850][ T8253] Bluetooth: hci1: command tx timeout [ 978.052173][ T1234] hsr_slave_1: left promiscuous mode [ 978.053134][ T1234] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 978.111911][ T1234] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 978.152975][ T9845] netlink: 'syz.0.769': attribute type 7 has an invalid length. [ 978.152996][ T9845] netlink: 'syz.0.769': attribute type 8 has an invalid length. [ 978.305169][ T1234] hsr_slave_0: left promiscuous mode [ 978.318380][ T1234] hsr_slave_1: left promiscuous mode [ 978.319029][ T1234] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 978.357792][ T1234] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 979.938638][ T1234] team0 (unregistering): Port device team_slave_1 removed [ 980.047853][ T8253] Bluetooth: hci1: command tx timeout [ 980.119079][ T1234] team0 (unregistering): Port device team_slave_0 removed [ 982.554554][ T8253] Bluetooth: hci1: command tx timeout [ 982.873309][ T9856] netlink: 32 bytes leftover after parsing attributes in process `syz.0.772'. [ 982.940733][ T9857] netlink: 32 bytes leftover after parsing attributes in process `syz.0.772'. [ 983.098192][ T7638] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 983.101787][ T7638] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 983.106671][ T7638] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 983.124164][ T7638] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 983.126447][ T7638] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 984.007924][ T1234] team0 (unregistering): Port device team_slave_1 removed [ 984.248118][ T1234] team0 (unregistering): Port device team_slave_0 removed [ 984.628997][ T8253] Bluetooth: hci1: command tx timeout [ 985.167432][ T8253] Bluetooth: hci2: command tx timeout [ 987.158030][ T1234] team0 (unregistering): Port device team_slave_1 removed [ 987.247029][ T8253] Bluetooth: hci2: command tx timeout [ 987.298016][ T1234] team0 (unregistering): Port device team_slave_0 removed [ 989.199675][ T9864] overlay: ./file0 is not a directory [ 989.327295][ T8253] Bluetooth: hci2: command tx timeout [ 989.328705][ T9863] Process accounting resumed [ 989.519318][ T9698] hsr_slave_0: entered promiscuous mode [ 989.520553][ T9698] hsr_slave_1: entered promiscuous mode [ 991.407174][ T8253] Bluetooth: hci2: command tx timeout [ 997.277654][ T9831] chnl_net:caif_netlink_parms(): no params data found [ 998.747422][ T9858] chnl_net:caif_netlink_parms(): no params data found [ 1000.681270][ T9831] bridge0: port 1(bridge_slave_0) entered blocking state [ 1000.681575][ T9831] bridge0: port 1(bridge_slave_0) entered disabled state [ 1000.681842][ T9831] bridge_slave_0: entered allmulticast mode [ 1000.686839][ T9831] bridge_slave_0: entered promiscuous mode [ 1000.716167][ T9831] bridge0: port 2(bridge_slave_1) entered blocking state [ 1000.716357][ T9831] bridge0: port 2(bridge_slave_1) entered disabled state [ 1000.716576][ T9831] bridge_slave_1: entered allmulticast mode [ 1000.720388][ T9831] bridge_slave_1: entered promiscuous mode [ 1001.220891][ T9831] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1001.377723][ T9831] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1001.388068][ T9858] bridge0: port 1(bridge_slave_0) entered blocking state [ 1001.388234][ T9858] bridge0: port 1(bridge_slave_0) entered disabled state [ 1001.388445][ T9858] bridge_slave_0: entered allmulticast mode [ 1001.398235][ T9858] bridge_slave_0: entered promiscuous mode [ 1001.723705][ T7638] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1001.734197][ T7638] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1001.748074][ T7638] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1001.754075][ T7638] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1001.754755][ T7638] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1001.830149][ T9858] bridge0: port 2(bridge_slave_1) entered blocking state [ 1001.830261][ T9858] bridge0: port 2(bridge_slave_1) entered disabled state [ 1001.830521][ T9858] bridge_slave_1: entered allmulticast mode [ 1001.850023][ T9858] bridge_slave_1: entered promiscuous mode [ 1002.240656][ T9831] team0: Port device team_slave_0 added [ 1003.346328][ T1319] ieee802154 phy0 wpan0: encryption failed: -22 [ 1003.346406][ T1319] ieee802154 phy1 wpan1: encryption failed: -22 [ 1003.839926][ T9831] team0: Port device team_slave_1 added [ 1003.845871][ T9858] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1003.887347][ T7638] Bluetooth: hci3: command tx timeout [ 1003.988017][ T9858] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1004.153011][ T9831] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1004.153030][ T9831] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1004.153060][ T9831] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1004.298317][ T9831] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1004.298333][ T9831] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1004.298359][ T9831] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1004.384312][ T9858] team0: Port device team_slave_0 added [ 1004.413960][ T9858] team0: Port device team_slave_1 added [ 1005.281674][ T9858] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1005.281692][ T9858] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1005.281719][ T9858] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1005.350072][ T9831] hsr_slave_0: entered promiscuous mode [ 1005.360388][ T9831] hsr_slave_1: entered promiscuous mode [ 1005.369198][ T9831] debugfs: 'hsr0' already exists in 'hsr' [ 1005.369222][ T9831] Cannot create hsr debugfs directory [ 1005.395275][ T9858] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1005.395286][ T9858] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1005.395304][ T9858] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1005.967754][ T7638] Bluetooth: hci3: command tx timeout [ 1006.631941][ T8253] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1006.645139][ T8253] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1006.646560][ T8253] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1006.649304][ T8253] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1006.650753][ T8253] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1007.079599][ T9947] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 1007.081150][ T9947] FAT-fs (loop1): unable to read boot sector [ 1008.047046][ T8253] Bluetooth: hci3: command tx timeout [ 1009.212546][ T8253] Bluetooth: hci5: command tx timeout [ 1009.954085][ T9858] hsr_slave_0: entered promiscuous mode [ 1009.955441][ T9858] hsr_slave_1: entered promiscuous mode [ 1009.956488][ T9858] debugfs: 'hsr0' already exists in 'hsr' [ 1009.956514][ T9858] Cannot create hsr debugfs directory [ 1010.127944][ T8253] Bluetooth: hci3: command tx timeout [ 1011.083490][ T9924] chnl_net:caif_netlink_parms(): no params data found [ 1011.247697][ T8253] Bluetooth: hci5: command tx timeout [ 1011.462961][ T1234] bridge_slave_1: left allmulticast mode [ 1011.462986][ T1234] bridge_slave_1: left promiscuous mode [ 1011.463166][ T1234] bridge0: port 2(bridge_slave_1) entered disabled state [ 1011.548572][ T1234] bridge_slave_0: left allmulticast mode [ 1011.548605][ T1234] bridge_slave_0: left promiscuous mode [ 1011.548899][ T1234] bridge0: port 1(bridge_slave_0) entered disabled state [ 1011.621989][ T1234] bridge_slave_1: left allmulticast mode [ 1011.622020][ T1234] bridge_slave_1: left promiscuous mode [ 1011.622267][ T1234] bridge0: port 2(bridge_slave_1) entered disabled state [ 1011.688970][ T1234] bridge_slave_0: left allmulticast mode [ 1011.689000][ T1234] bridge_slave_0: left promiscuous mode [ 1011.689254][ T1234] bridge0: port 1(bridge_slave_0) entered disabled state [ 1011.781866][ T1234] bridge_slave_1: left allmulticast mode [ 1011.781902][ T1234] bridge_slave_1: left promiscuous mode [ 1011.782165][ T1234] bridge0: port 2(bridge_slave_1) entered disabled state [ 1011.850691][ T1234] bridge_slave_0: left allmulticast mode [ 1011.850725][ T1234] bridge_slave_0: left promiscuous mode [ 1011.850994][ T1234] bridge0: port 1(bridge_slave_0) entered disabled state [ 1012.328899][ T1234] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1012.427662][ T1234] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1012.501625][ T1234] bond0 (unregistering): Released all slaves [ 1012.977518][ T1234] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1013.069411][ T1234] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1013.130988][ T1234] bond0 (unregistering): Released all slaves [ 1013.327180][ T8253] Bluetooth: hci5: command tx timeout [ 1013.867916][ T1234] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1013.967834][ T1234] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1014.030775][ T1234] bond0 (unregistering): Released all slaves [ 1014.815933][ T9924] bridge0: port 1(bridge_slave_0) entered blocking state [ 1014.816190][ T9924] bridge0: port 1(bridge_slave_0) entered disabled state [ 1014.816402][ T9924] bridge_slave_0: entered allmulticast mode [ 1014.829618][ T9924] bridge_slave_0: entered promiscuous mode [ 1014.953641][ T9924] bridge0: port 2(bridge_slave_1) entered blocking state [ 1014.953767][ T9924] bridge0: port 2(bridge_slave_1) entered disabled state [ 1014.953991][ T9924] bridge_slave_1: entered allmulticast mode [ 1014.955755][ T9924] bridge_slave_1: entered promiscuous mode [ 1015.298260][ T1234] hsr_slave_0: left promiscuous mode [ 1015.337223][ T1234] hsr_slave_1: left promiscuous mode [ 1015.338009][ T1234] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1015.367716][ T1234] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1015.407313][ T8253] Bluetooth: hci5: command tx timeout [ 1015.538668][ T1234] hsr_slave_0: left promiscuous mode [ 1015.557133][ T1234] hsr_slave_1: left promiscuous mode [ 1015.558028][ T1234] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1015.640224][ T1234] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1015.777518][ T1234] hsr_slave_0: left promiscuous mode [ 1015.797238][ T1234] hsr_slave_1: left promiscuous mode [ 1015.798058][ T1234] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1015.861846][ T1234] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1016.627895][ T1234] team0 (unregistering): Port device team_slave_1 removed [ 1016.768065][ T1234] team0 (unregistering): Port device team_slave_0 removed [ 1017.948838][ T1234] team0 (unregistering): Port device team_slave_1 removed [ 1018.107879][ T1234] team0 (unregistering): Port device team_slave_0 removed [ 1019.368196][ T1234] team0 (unregistering): Port device team_slave_1 removed [ 1019.507803][ T1234] team0 (unregistering): Port device team_slave_0 removed [ 1020.320945][ T9924] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1020.375562][ T9924] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1020.376034][ T9944] chnl_net:caif_netlink_parms(): no params data found [ 1020.643664][ T9924] team0: Port device team_slave_0 added [ 1020.782215][ T9924] team0: Port device team_slave_1 added [ 1021.094532][ T9924] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1021.094550][ T9924] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1021.094580][ T9924] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1021.219833][ T9924] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1021.219850][ T9924] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1021.219877][ T9924] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1021.448969][ T9944] bridge0: port 1(bridge_slave_0) entered blocking state [ 1021.449108][ T9944] bridge0: port 1(bridge_slave_0) entered disabled state [ 1021.449241][ T9944] bridge_slave_0: entered allmulticast mode [ 1021.450987][ T9944] bridge_slave_0: entered promiscuous mode [ 1021.478107][ T9944] bridge0: port 2(bridge_slave_1) entered blocking state [ 1021.478263][ T9944] bridge0: port 2(bridge_slave_1) entered disabled state [ 1021.478469][ T9944] bridge_slave_1: entered allmulticast mode [ 1021.481305][ T9944] bridge_slave_1: entered promiscuous mode [ 1021.580478][ T9858] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 1021.809528][ T9858] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 1021.856636][ T9944] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1021.938970][ T9858] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 1022.000897][ T9944] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1022.093803][ T9924] hsr_slave_0: entered promiscuous mode [ 1022.095186][ T9924] hsr_slave_1: entered promiscuous mode [ 1022.096114][ T9924] debugfs: 'hsr0' already exists in 'hsr' [ 1022.096136][ T9924] Cannot create hsr debugfs directory [ 1022.105506][ T9858] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 1022.375832][ T9944] team0: Port device team_slave_0 added [ 1022.478418][ T9944] team0: Port device team_slave_1 added [ 1023.005528][ T9944] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1023.005549][ T9944] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1023.005574][ T9944] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1023.030622][ T9944] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1023.030638][ T9944] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1023.030675][ T9944] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1023.031230][ T9831] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 1023.142671][ T9831] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 1023.188925][ T9831] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 1023.275968][ T9831] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 1023.594690][ T9944] hsr_slave_0: entered promiscuous mode [ 1023.595976][ T9944] hsr_slave_1: entered promiscuous mode [ 1023.596620][ T9944] debugfs: 'hsr0' already exists in 'hsr' [ 1023.596640][ T9944] Cannot create hsr debugfs directory [ 1024.980647][ T9858] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1025.004329][ T9831] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1025.028504][ T9858] 8021q: adding VLAN 0 to HW filter on device team0 [ 1025.124154][ T57] bridge0: port 1(bridge_slave_0) entered blocking state [ 1025.124833][ T57] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1025.253827][ T9831] 8021q: adding VLAN 0 to HW filter on device team0 [ 1025.262578][ T3653] bridge0: port 2(bridge_slave_1) entered blocking state [ 1025.262764][ T3653] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1025.302175][ T3653] bridge0: port 1(bridge_slave_0) entered blocking state [ 1025.302477][ T3653] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1025.342310][ T8006] bridge0: port 2(bridge_slave_1) entered blocking state [ 1025.343078][ T8006] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1025.822173][ T1234] bridge_slave_1: left allmulticast mode [ 1025.822206][ T1234] bridge_slave_1: left promiscuous mode [ 1025.822460][ T1234] bridge0: port 2(bridge_slave_1) entered disabled state [ 1025.950191][ T1234] bridge_slave_0: left allmulticast mode [ 1025.950223][ T1234] bridge_slave_0: left promiscuous mode [ 1025.950460][ T1234] bridge0: port 1(bridge_slave_0) entered disabled state [ 1026.040970][ T1234] bridge_slave_1: left allmulticast mode [ 1026.040996][ T1234] bridge_slave_1: left promiscuous mode [ 1026.041165][ T1234] bridge0: port 2(bridge_slave_1) entered disabled state [ 1026.112412][ T1234] bridge_slave_0: left allmulticast mode [ 1026.112436][ T1234] bridge_slave_0: left promiscuous mode [ 1026.112603][ T1234] bridge0: port 1(bridge_slave_0) entered disabled state [ 1026.488057][ T1234] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1026.578265][ T1234] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1026.640842][ T1234] bond0 (unregistering): Released all slaves [ 1026.852028][ T1234] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1026.937923][ T1234] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1027.019776][ T1234] bond0 (unregistering): Released all slaves [ 1027.420843][ T9831] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1027.549088][ T9858] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1027.690548][ T1234] hsr_slave_0: left promiscuous mode [ 1027.735384][ T1234] hsr_slave_1: left promiscuous mode [ 1027.736011][ T1234] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1027.778907][ T1234] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1027.917262][ T1234] hsr_slave_0: left promiscuous mode [ 1027.937281][ T1234] hsr_slave_1: left promiscuous mode [ 1027.938061][ T1234] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1027.985147][ T1234] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1028.669239][ T1234] team0 (unregistering): Port device team_slave_1 removed [ 1028.780694][ T1234] team0 (unregistering): Port device team_slave_0 removed [ 1029.887978][ T1234] team0 (unregistering): Port device team_slave_1 removed [ 1030.029279][ T1234] team0 (unregistering): Port device team_slave_0 removed [ 1030.855656][ T9858] veth0_vlan: entered promiscuous mode [ 1030.969245][ T9858] veth1_vlan: entered promiscuous mode [ 1031.166580][ T9924] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 1031.219209][ T9924] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 1031.294227][ T9924] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 1031.392097][ T9924] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 1031.447484][ T9831] veth0_vlan: entered promiscuous mode [ 1031.497685][ T9858] veth0_macvtap: entered promiscuous mode [ 1031.562938][ T9858] veth1_macvtap: entered promiscuous mode [ 1031.624853][ T9831] veth1_vlan: entered promiscuous mode [ 1031.655938][ T9944] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 1031.696549][ T9944] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 1031.740754][ T9944] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 1031.780376][ T9944] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 1031.849097][ T9858] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1031.891813][ T9858] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1031.971526][ T57] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1031.995575][ T57] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1032.020729][ T57] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1032.043144][ T57] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1032.141273][ T9831] veth0_macvtap: entered promiscuous mode [ 1032.262005][ T9831] veth1_macvtap: entered promiscuous mode [ 1032.500079][ T9831] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1032.534165][ T83] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1032.534186][ T83] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1032.556352][ T9831] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1032.573855][ T9924] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1032.602484][ T8581] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1032.628503][ T8581] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1032.638851][ T8581] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1032.659058][ T8581] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1032.662532][ T8581] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1032.662548][ T8581] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1032.773902][ T9924] 8021q: adding VLAN 0 to HW filter on device team0 [ 1032.842095][ T8562] bridge0: port 1(bridge_slave_0) entered blocking state [ 1032.846647][ T8562] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1033.066802][ T57] bridge0: port 2(bridge_slave_1) entered blocking state [ 1033.067087][ T57] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1033.713902][T10023] netlink: 8 bytes leftover after parsing attributes in process `syz.0.800'. [ 1033.927949][T10017] netlink: 68 bytes leftover after parsing attributes in process `syz.3.682'. [ 1034.276174][ T9944] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1034.411961][ T9944] 8021q: adding VLAN 0 to HW filter on device team0 [ 1034.471282][ T8006] bridge0: port 1(bridge_slave_0) entered blocking state [ 1034.471527][ T8006] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1034.504873][ T8006] bridge0: port 2(bridge_slave_1) entered blocking state [ 1034.505025][ T8006] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1035.943889][ T8253] Bluetooth: hci6: unexpected event for opcode 0x0c7d [ 1036.318320][ T7638] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1036.324913][ T7638] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1036.326254][ T7638] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1036.329872][ T7638] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1036.330724][ T7638] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1037.515558][ T9924] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1038.386990][ T8253] Bluetooth: hci0: command tx timeout [ 1039.967981][ T8253] Bluetooth: hci6: Controller not accepting commands anymore: ncmd = 0 [ 1039.968105][ T8253] Bluetooth: hci6: Injecting HCI hardware error event [ 1039.968784][ T8253] Bluetooth: hci6: hardware error 0x00 [ 1041.014278][ T7638] Bluetooth: hci0: command tx timeout [ 1041.305456][T10076] Device name cannot be null; rc = [-22] [ 1041.634259][ T57] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1043.801799][ T8253] Bluetooth: hci6: Opcode 0x0c03 failed: -110 [ 1043.801954][ T8253] Bluetooth: hci0: command tx timeout [ 1043.861902][ T57] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1044.060413][ T9944] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1044.490921][T10108] (syz.3.809,10108,0):ocfs2_fill_super:989 ERROR: superblock probe failed! [ 1044.490977][T10108] (syz.3.809,10108,0):ocfs2_fill_super:1177 ERROR: status = -22 [ 1045.351482][T10111] netdevsim netdevsim0: Direct firmware load for þ failed with error -2 [ 1045.351511][T10111] netdevsim netdevsim0: Falling back to sysfs fallback for: þ [ 1045.987344][ T7638] Bluetooth: hci0: command tx timeout [ 1046.021058][ T57] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1046.280795][T10123] capability: warning: `syz.3.812' uses deprecated v2 capabilities in a way that may be insecure [ 1047.668429][T10135] trusted_key: encrypted_key: insufficient parameters specified [ 1048.008234][ T57] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1048.039747][T10135] vcan0: MTU too low for tipc bearer [ 1048.039783][T10135] tipc: Enabling of bearer rejected, failed to enable media [ 1048.083382][ T9924] veth0_vlan: entered promiscuous mode [ 1048.148831][T10043] chnl_net:caif_netlink_parms(): no params data found [ 1049.213334][T10144] tty tty26: ldisc open failed (-12), clearing slot 25 [ 1049.498219][ T9924] veth1_vlan: entered promiscuous mode [ 1051.389685][T10162] netlink: 16402 bytes leftover after parsing attributes in process `syz.0.819'. [ 1052.577868][T10043] bridge0: port 1(bridge_slave_0) entered blocking state [ 1052.578005][T10043] bridge0: port 1(bridge_slave_0) entered disabled state [ 1052.578256][T10043] bridge_slave_0: entered allmulticast mode [ 1052.597031][T10043] bridge_slave_0: entered promiscuous mode [ 1052.678828][T10043] bridge0: port 2(bridge_slave_1) entered blocking state [ 1052.678976][T10043] bridge0: port 2(bridge_slave_1) entered disabled state [ 1052.679186][T10043] bridge_slave_1: entered allmulticast mode [ 1052.685040][T10043] bridge_slave_1: entered promiscuous mode [ 1052.790197][T10177] random: crng reseeded on system resumption [ 1061.814384][T10043] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1061.857993][T10043] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1062.025018][ T57] bridge_slave_1: left allmulticast mode [ 1062.025051][ T57] bridge_slave_1: left promiscuous mode [ 1062.025326][ T57] bridge0: port 2(bridge_slave_1) entered disabled state [ 1062.108671][ T57] bridge_slave_0: left allmulticast mode [ 1062.108708][ T57] bridge_slave_0: left promiscuous mode [ 1062.108939][ T57] bridge0: port 1(bridge_slave_0) entered disabled state [ 1064.282014][ T8253] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1064.366447][T10209] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1065.061939][ T1319] ieee802154 phy0 wpan0: encryption failed: -22 [ 1065.062030][ T1319] ieee802154 phy1 wpan1: encryption failed: -22 [ 1065.274099][ T5153] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1065.331554][ T5153] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1065.333326][ T5153] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1065.334905][ T5153] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1067.970864][ T5153] Bluetooth: hci1: command tx timeout [ 1070.047561][ T5153] Bluetooth: hci1: command tx timeout [ 1070.875800][ T7638] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1070.893350][ T7638] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1070.894720][ T7638] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1070.896361][ T7638] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1070.905059][ T7638] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1072.358389][ T7638] Bluetooth: hci1: command tx timeout [ 1072.880586][T10240] netlink: 4 bytes leftover after parsing attributes in process `syz.3.836'. [ 1073.874478][T10238] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1073.875043][ T7638] Bluetooth: hci3: command tx timeout [ 1074.249390][ T57] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1074.308823][ T57] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1074.332710][ T57] bond0 (unregistering): Released all slaves [ 1074.377118][ T7638] Bluetooth: hci1: command tx timeout [ 1075.900052][ T7638] Bluetooth: hci3: command tx timeout [ 1076.723918][T10264] netlink: 277 bytes leftover after parsing attributes in process `syz.0.842'. [ 1076.754554][T10043] team0: Port device team_slave_0 added [ 1077.248850][T10043] team0: Port device team_slave_1 added [ 1078.379343][ T7638] Bluetooth: hci3: command tx timeout [ 1080.767693][ T7638] Bluetooth: hci3: command tx timeout [ 1082.157805][T10043] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1082.157822][T10043] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1082.157850][T10043] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1082.427239][ T57] hsr_slave_0: left promiscuous mode [ 1082.447522][ T57] hsr_slave_1: left promiscuous mode [ 1082.448576][ T57] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1082.448612][ T57] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1082.478259][ T57] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1082.478286][ T57] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1082.548236][ T57] veth1_macvtap: left promiscuous mode [ 1082.548319][ T57] veth0_macvtap: left promiscuous mode [ 1082.548505][ T57] veth1_vlan: left promiscuous mode [ 1082.548638][ T57] veth0_vlan: left promiscuous mode [ 1083.173902][T10310] netlink: 'syz.0.853': attribute type 1 has an invalid length. [ 1083.173940][T10310] netlink: 4 bytes leftover after parsing attributes in process `syz.0.853'. [ 1084.527785][ T57] team0 (unregistering): Port device team_slave_1 removed [ 1084.748122][ T57] team0 (unregistering): Port device team_slave_0 removed [ 1086.845731][T10043] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1086.845749][T10043] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1086.845776][T10043] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1089.368452][T10328] overlayfs: failed to clone lowerpath [ 1090.861656][T10043] hsr_slave_0: entered promiscuous mode [ 1090.863081][T10043] hsr_slave_1: entered promiscuous mode [ 1092.943106][T10341] ip6gretap1: entered allmulticast mode [ 1096.257094][T10365] netlink: 277 bytes leftover after parsing attributes in process `syz.3.867'. [ 1096.265033][T10365] netlink: 16 bytes leftover after parsing attributes in process `syz.3.867'. [ 1096.280490][T10206] chnl_net:caif_netlink_parms(): no params data found [ 1096.409500][T10234] chnl_net:caif_netlink_parms(): no params data found [ 1096.663829][T10376] netlink: 4 bytes leftover after parsing attributes in process `syz.0.869'. [ 1097.425500][ T5153] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1097.453667][ T5153] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1097.486305][ T5153] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1097.508802][ T5153] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1097.509856][ T5153] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1099.598410][ T7638] Bluetooth: hci0: command tx timeout [ 1100.862214][T10206] bridge0: port 1(bridge_slave_0) entered blocking state [ 1100.867645][T10206] bridge0: port 1(bridge_slave_0) entered disabled state [ 1100.867910][T10206] bridge_slave_0: entered allmulticast mode [ 1100.870845][T10206] bridge_slave_0: entered promiscuous mode [ 1101.065679][T10404] netlink: 277 bytes leftover after parsing attributes in process `syz.0.876'. [ 1101.228647][T10206] bridge0: port 2(bridge_slave_1) entered blocking state [ 1101.228801][T10206] bridge0: port 2(bridge_slave_1) entered disabled state [ 1101.229054][T10206] bridge_slave_1: entered allmulticast mode [ 1101.236176][T10206] bridge_slave_1: entered promiscuous mode [ 1101.249779][T10234] bridge0: port 1(bridge_slave_0) entered blocking state [ 1101.249998][T10234] bridge0: port 1(bridge_slave_0) entered disabled state [ 1101.250222][T10234] bridge_slave_0: entered allmulticast mode [ 1101.293442][T10234] bridge_slave_0: entered promiscuous mode [ 1101.649425][T10234] bridge0: port 2(bridge_slave_1) entered blocking state [ 1101.657489][ T7638] Bluetooth: hci0: command tx timeout [ 1101.675028][T10234] bridge0: port 2(bridge_slave_1) entered disabled state [ 1101.675307][T10234] bridge_slave_1: entered allmulticast mode [ 1101.706748][T10234] bridge_slave_1: entered promiscuous mode [ 1103.013287][T10206] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1103.185261][T10430] netlink: 277 bytes leftover after parsing attributes in process `syz.3.884'. [ 1104.236730][T10206] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1104.267202][T10234] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1104.470594][ T7638] Bluetooth: hci0: command tx timeout [ 1104.550799][ T37] audit: type=1326 audit(1755978092.391:58): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10440 comm="syz.0.887" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f6a8fbfebe9 code=0x0 [ 1104.583182][T10234] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1105.446602][T10451] netlink: 168 bytes leftover after parsing attributes in process `syz.3.889'. [ 1105.910256][T10451] C: renamed from team_slave_0 (while UP) [ 1105.943327][T10206] team0: Port device team_slave_0 added [ 1106.527703][ T5153] Bluetooth: hci0: command tx timeout [ 1107.449228][T10206] team0: Port device team_slave_1 added [ 1107.452624][T10234] team0: Port device team_slave_0 added [ 1107.854809][ T5153] Bluetooth: hci2: command 0x0406 tx timeout [ 1107.892429][T10234] team0: Port device team_slave_1 added [ 1109.496645][ C0] vxcan1: j1939_tp_rxtimer: 0xffff88803368e400: rx timeout, send abort [ 1109.996769][ C0] vxcan1: j1939_tp_rxtimer: 0xffff88803368e400: abort rx timeout. Force session deactivation [ 1110.001429][ C0] vxcan1: j1939_tp_rxtimer: 0xffff88801cb59400: rx timeout, send abort [ 1110.454820][T10206] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1110.454836][T10206] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1110.454863][T10206] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1110.503367][ C0] vxcan1: j1939_tp_rxtimer: 0xffff88801cb59400: abort rx timeout. Force session deactivation [ 1110.674939][T10206] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1110.674955][T10206] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1110.674982][T10206] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1110.745892][T10234] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1110.745910][T10234] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1110.745938][T10234] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1111.391931][T10234] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1111.391950][T10234] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1111.391977][T10234] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1111.710577][T10206] hsr_slave_0: entered promiscuous mode [ 1111.711787][T10206] hsr_slave_1: entered promiscuous mode [ 1111.712615][T10206] debugfs: 'hsr0' already exists in 'hsr' [ 1111.712635][T10206] Cannot create hsr debugfs directory [ 1111.849764][T10234] hsr_slave_0: entered promiscuous mode [ 1111.851094][T10234] hsr_slave_1: entered promiscuous mode [ 1111.851992][T10234] debugfs: 'hsr0' already exists in 'hsr' [ 1111.852016][T10234] Cannot create hsr debugfs directory [ 1112.630455][T10380] chnl_net:caif_netlink_parms(): no params data found [ 1113.898269][T10380] bridge0: port 1(bridge_slave_0) entered blocking state [ 1113.898412][T10380] bridge0: port 1(bridge_slave_0) entered disabled state [ 1113.898588][T10380] bridge_slave_0: entered allmulticast mode [ 1113.900281][T10380] bridge_slave_0: entered promiscuous mode [ 1113.903412][T10380] bridge0: port 2(bridge_slave_1) entered blocking state [ 1113.903585][T10380] bridge0: port 2(bridge_slave_1) entered disabled state [ 1113.903957][T10380] bridge_slave_1: entered allmulticast mode [ 1113.905627][T10380] bridge_slave_1: entered promiscuous mode [ 1114.314027][T10380] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1114.328621][T10380] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1114.518937][T10380] team0: Port device team_slave_0 added [ 1114.521882][T10380] team0: Port device team_slave_1 added [ 1114.706131][T10380] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1114.706149][T10380] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1114.706172][T10380] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1114.769463][T10380] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1114.769477][T10380] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1114.769503][T10380] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1115.156440][T10380] hsr_slave_0: entered promiscuous mode [ 1115.158366][T10380] hsr_slave_1: entered promiscuous mode [ 1115.159330][T10380] debugfs: 'hsr0' already exists in 'hsr' [ 1115.159355][T10380] Cannot create hsr debugfs directory [ 1115.439582][ T57] bridge_slave_1: left allmulticast mode [ 1115.439613][ T57] bridge_slave_1: left promiscuous mode [ 1115.439847][ T57] bridge0: port 2(bridge_slave_1) entered disabled state [ 1115.498914][ T57] bridge_slave_0: left allmulticast mode [ 1115.498944][ T57] bridge_slave_0: left promiscuous mode [ 1115.499219][ T57] bridge0: port 1(bridge_slave_0) entered disabled state [ 1115.561696][ T57] bridge_slave_1: left allmulticast mode [ 1115.561730][ T57] bridge_slave_1: left promiscuous mode [ 1115.562013][ T57] bridge0: port 2(bridge_slave_1) entered disabled state [ 1115.618542][ T57] bridge_slave_0: left allmulticast mode [ 1115.618572][ T57] bridge_slave_0: left promiscuous mode [ 1115.618792][ T57] bridge0: port 1(bridge_slave_0) entered disabled state [ 1115.712472][ T57] bridge_slave_1: left allmulticast mode [ 1115.712494][ T57] bridge_slave_1: left promiscuous mode [ 1115.712646][ T57] bridge0: port 2(bridge_slave_1) entered disabled state [ 1115.798381][ T57] bridge_slave_0: left allmulticast mode [ 1115.798412][ T57] bridge_slave_0: left promiscuous mode [ 1115.798641][ T57] bridge0: port 1(bridge_slave_0) entered disabled state [ 1116.297815][ T57] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1116.410647][ T57] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1116.481727][ T57] bond0 (unregistering): Released all slaves [ 1117.847914][ T57] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1117.927824][ T57] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1117.973292][ T57] bond0 (unregistering): Released all slaves [ 1119.409244][ T57] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1119.474197][ T57] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1119.501811][ T57] bond0 (unregistering): Released all slaves [ 1120.345868][ T57] hsr_slave_0: left promiscuous mode [ 1120.391114][ T57] hsr_slave_1: left promiscuous mode [ 1120.391972][ T57] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1120.434379][ T57] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1120.557415][ T57] hsr_slave_0: left promiscuous mode [ 1120.577845][ T57] hsr_slave_1: left promiscuous mode [ 1120.578840][ T57] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1120.628149][ T57] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1120.777181][ T57] hsr_slave_0: left promiscuous mode [ 1120.803202][ T57] hsr_slave_1: left promiscuous mode [ 1120.803889][ T57] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1120.837984][ T57] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1120.977838][ T57] veth1_vlan: left promiscuous mode [ 1120.978043][ T57] veth0_vlan: left promiscuous mode [ 1121.838099][ T57] team0 (unregistering): Port device team_slave_1 removed [ 1121.967955][ T57] team0 (unregistering): Port device team_slave_0 removed [ 1123.892299][ T5153] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1123.938028][ T5153] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1123.944838][ T5153] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1123.962009][ T5153] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1123.962808][ T5153] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1124.087791][ T57] team0 (unregistering): Port device team_slave_1 removed [ 1124.307921][ T57] team0 (unregistering): Port device team_slave_0 removed [ 1126.057107][ T7638] Bluetooth: hci4: command tx timeout [ 1126.137571][ T1319] ieee802154 phy0 wpan0: encryption failed: -22 [ 1126.137644][ T1319] ieee802154 phy1 wpan1: encryption failed: -22 [ 1127.857875][ T57] team0 (unregistering): Port device team_slave_1 removed [ 1128.077890][ T57] team0 (unregistering): Port device team_slave_0 removed [ 1128.137113][ T7638] Bluetooth: hci4: command tx timeout [ 1128.555222][ T5153] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1128.585708][ T5153] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1128.589916][ T5153] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1128.591709][ T5153] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1128.592647][ T5153] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1130.206994][ T7638] Bluetooth: hci4: command tx timeout [ 1130.697007][ T7638] Bluetooth: hci5: command tx timeout [ 1132.287030][ T7638] Bluetooth: hci4: command tx timeout [ 1132.416048][T10504] chnl_net:caif_netlink_parms(): no params data found [ 1132.441175][T10508] chnl_net:caif_netlink_parms(): no params data found [ 1132.767109][ T7638] Bluetooth: hci5: command tx timeout [ 1133.721801][T10504] bridge0: port 1(bridge_slave_0) entered blocking state [ 1133.722039][T10504] bridge0: port 1(bridge_slave_0) entered disabled state [ 1133.722249][T10504] bridge_slave_0: entered allmulticast mode [ 1133.725194][T10504] bridge_slave_0: entered promiscuous mode [ 1133.734429][T10508] bridge0: port 1(bridge_slave_0) entered blocking state [ 1133.734578][T10508] bridge0: port 1(bridge_slave_0) entered disabled state [ 1133.734784][T10508] bridge_slave_0: entered allmulticast mode [ 1133.738587][T10508] bridge_slave_0: entered promiscuous mode [ 1133.742291][T10504] bridge0: port 2(bridge_slave_1) entered blocking state [ 1133.742450][T10504] bridge0: port 2(bridge_slave_1) entered disabled state [ 1133.742693][T10504] bridge_slave_1: entered allmulticast mode [ 1133.746064][T10504] bridge_slave_1: entered promiscuous mode [ 1133.868617][T10508] bridge0: port 2(bridge_slave_1) entered blocking state [ 1133.868757][T10508] bridge0: port 2(bridge_slave_1) entered disabled state [ 1133.868938][T10508] bridge_slave_1: entered allmulticast mode [ 1133.871679][T10508] bridge_slave_1: entered promiscuous mode [ 1134.100481][T10504] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1134.188976][T10504] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1134.257029][T10508] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1134.363842][T10508] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1134.533942][T10504] team0: Port device team_slave_0 added [ 1134.641104][T10504] team0: Port device team_slave_1 added [ 1134.644186][T10508] team0: Port device team_slave_0 added [ 1134.780115][T10508] team0: Port device team_slave_1 added [ 1134.847077][ T7638] Bluetooth: hci5: command tx timeout [ 1135.010274][T10504] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1135.010293][T10504] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1135.010320][T10504] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1135.120589][T10504] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1135.120607][T10504] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1135.120634][T10504] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1135.121936][T10508] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1135.121948][T10508] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1135.121974][T10508] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1135.168901][T10508] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1135.168919][T10508] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1135.168950][T10508] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1135.179198][T10380] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 1135.277179][T10380] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 1135.407325][T10380] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 1135.513919][T10380] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 1135.697471][T10504] hsr_slave_0: entered promiscuous mode [ 1135.698724][T10504] hsr_slave_1: entered promiscuous mode [ 1135.800682][T10508] hsr_slave_0: entered promiscuous mode [ 1135.801943][T10508] hsr_slave_1: entered promiscuous mode [ 1135.802834][T10508] debugfs: 'hsr0' already exists in 'hsr' [ 1135.802859][T10508] Cannot create hsr debugfs directory [ 1136.275588][ T57] bridge_slave_1: left allmulticast mode [ 1136.275612][ T57] bridge_slave_1: left promiscuous mode [ 1136.275778][ T57] bridge0: port 2(bridge_slave_1) entered disabled state [ 1136.328251][ T57] bridge_slave_0: left allmulticast mode [ 1136.328274][ T57] bridge_slave_0: left promiscuous mode [ 1136.328445][ T57] bridge0: port 1(bridge_slave_0) entered disabled state [ 1136.421988][ T57] bridge_slave_1: left allmulticast mode [ 1136.422012][ T57] bridge_slave_1: left promiscuous mode [ 1136.422181][ T57] bridge0: port 2(bridge_slave_1) entered disabled state [ 1136.509208][ T57] bridge_slave_0: left allmulticast mode [ 1136.509240][ T57] bridge_slave_0: left promiscuous mode [ 1136.509476][ T57] bridge0: port 1(bridge_slave_0) entered disabled state [ 1136.851649][ T57] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1136.927144][ T7638] Bluetooth: hci5: command tx timeout [ 1136.943568][ T57] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1137.000205][ T57] bond0 (unregistering): Released all slaves [ 1137.271310][ T57] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1137.347875][ T57] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1137.411884][ T57] bond0 (unregistering): Released all slaves [ 1138.087167][ T57] hsr_slave_0: left promiscuous mode [ 1138.127197][ T57] hsr_slave_1: left promiscuous mode [ 1138.127985][ T57] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1138.159371][ T57] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1138.337149][ T57] hsr_slave_0: left promiscuous mode [ 1138.357412][ T57] hsr_slave_1: left promiscuous mode [ 1138.358295][ T57] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1138.387778][ T57] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1139.117870][ T57] team0 (unregistering): Port device team_slave_1 removed [ 1139.248342][ T57] team0 (unregistering): Port device team_slave_0 removed [ 1140.427870][ T57] team0 (unregistering): Port device team_slave_1 removed [ 1140.567813][ T57] team0 (unregistering): Port device team_slave_0 removed [ 1141.532768][T10380] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1141.586313][T10504] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 1141.634585][T10504] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 1141.674153][T10504] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 1141.755715][T10504] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 1141.817579][T10380] 8021q: adding VLAN 0 to HW filter on device team0 [ 1141.909715][ T5966] bridge0: port 1(bridge_slave_0) entered blocking state [ 1141.909932][ T5966] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1141.986237][ T3606] bridge0: port 2(bridge_slave_1) entered blocking state [ 1141.986525][ T3606] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1142.001213][T10508] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 1142.040004][T10508] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 1142.102892][T10508] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 1142.136347][T10508] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 1142.556176][T10504] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1142.720059][T10504] 8021q: adding VLAN 0 to HW filter on device team0 [ 1142.732145][T10508] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1142.743374][ T3653] bridge0: port 1(bridge_slave_0) entered blocking state [ 1142.743697][ T3653] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1142.775042][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 1142.777075][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1142.840295][T10508] 8021q: adding VLAN 0 to HW filter on device team0 [ 1142.870879][ T3606] bridge0: port 1(bridge_slave_0) entered blocking state [ 1142.871101][ T3606] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1142.906775][ T3606] bridge0: port 2(bridge_slave_1) entered blocking state [ 1142.907073][ T3606] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1142.948919][T10380] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1143.541727][T10504] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1143.693075][T10504] veth0_vlan: entered promiscuous mode [ 1143.711569][T10508] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1143.744332][T10504] veth1_vlan: entered promiscuous mode [ 1143.804983][T10380] veth0_vlan: entered promiscuous mode [ 1143.862883][T10504] veth0_macvtap: entered promiscuous mode [ 1143.865091][T10380] veth1_vlan: entered promiscuous mode [ 1143.897109][T10504] veth1_macvtap: entered promiscuous mode [ 1143.974261][T10504] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1144.033137][T10504] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1144.033834][T10380] veth0_macvtap: entered promiscuous mode [ 1144.083527][T10380] veth1_macvtap: entered promiscuous mode [ 1144.085171][ T1234] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1144.088287][ T1234] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1144.089736][ T1234] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1144.092555][ T1234] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1144.380256][T10380] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1144.416110][T10380] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1144.434127][ T57] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1144.434146][ T57] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1144.468516][ T12] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1144.491501][ T12] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1144.509036][ T12] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1144.511320][ T12] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1144.556586][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1144.556606][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1144.615866][T10508] veth0_vlan: entered promiscuous mode [ 1144.718445][T10508] veth1_vlan: entered promiscuous mode [ 1144.934586][T10573] netlink: 32 bytes leftover after parsing attributes in process `syz.3.908'. [ 1145.507105][ T3653] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1145.507127][ T3653] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1145.532545][T10508] veth0_macvtap: entered promiscuous mode [ 1145.618707][T10508] veth1_macvtap: entered promiscuous mode [ 1145.971894][ T1234] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1145.971915][ T1234] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1145.994229][T10508] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1146.051333][T10508] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1147.652616][ T1234] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1147.654063][ T1234] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1147.654352][ T1234] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1147.654963][ T1234] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1148.376316][ C0] vxcan1: j1939_tp_rxtimer: 0xffff88803a2d0400: rx timeout, send abort [ 1148.872517][ C0] vxcan1: j1939_tp_rxtimer: 0xffff888056fd1400: rx timeout, send abort [ 1148.876534][ C0] vxcan1: j1939_tp_rxtimer: 0xffff88803a2d0400: abort rx timeout. Force session deactivation [ 1149.895728][ C0] vxcan1: j1939_tp_rxtimer: 0xffff888056fd1400: abort rx timeout. Force session deactivation [ 1151.522262][T10618] random: crng reseeded on system resumption [ 1152.804240][T10612] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1152.804262][T10612] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1155.232521][T10612] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1155.232543][T10612] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1157.286469][ C0] vkms_vblank_simulate: vblank timer overrun [ 1157.804903][ C0] vkms_vblank_simulate: vblank timer overrun [ 1158.146143][ C0] vkms_vblank_simulate: vblank timer overrun [ 1158.935504][ C0] vkms_vblank_simulate: vblank timer overrun [ 1159.240244][T10670] netlink: 12 bytes leftover after parsing attributes in process `syz.0.920'. [ 1159.705601][T10674] random: crng reseeded on system resumption [ 1165.811443][T10696] bpq0: left allmulticast mode [ 1165.829507][T10692] netlink: 277 bytes leftover after parsing attributes in process `syz.0.925'. [ 1165.835309][T10692] netlink: 16 bytes leftover after parsing attributes in process `syz.0.925'. [ 1165.924161][ C1] vxcan1: j1939_tp_rxtimer: 0xffff888059df7800: rx timeout, send abort [ 1167.200325][ C1] vxcan1: j1939_tp_rxtimer: 0xffff88805573cc00: rx timeout, send abort [ 1168.340684][ C1] vxcan1: j1939_tp_rxtimer: 0xffff88805573cc00: abort rx timeout. Force session deactivation [ 1171.281773][T10743] random: crng reseeded on system resumption [ 1172.206656][T10748] netlink: 277 bytes leftover after parsing attributes in process `syz.1.940'. [ 1172.327372][T10750] netlink: 16 bytes leftover after parsing attributes in process `syz.1.940'. [ 1173.970308][ C0] vkms_vblank_simulate: vblank timer overrun [ 1174.766530][ C0] vkms_vblank_simulate: vblank timer overrun [ 1175.634575][ C0] vkms_vblank_simulate: vblank timer overrun [ 1176.083784][ C1] vxcan1: j1939_tp_rxtimer: 0xffff888035c9a000: rx timeout, send abort [ 1176.121541][ C0] vkms_vblank_simulate: vblank timer overrun [ 1176.329806][ C1] vxcan1: j1939_tp_rxtimer: 0xffff888023940800: rx timeout, send abort [ 1176.362519][ C0] vkms_vblank_simulate: vblank timer overrun [ 1176.629604][T10784] nfs: Unknown parameter './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa' [ 1177.422645][ C1] vxcan1: j1939_tp_rxtimer: 0xffff888035c9a000: abort rx timeout. Force session deactivation [ 1177.422845][ C1] vxcan1: j1939_tp_rxtimer: 0xffff888023940800: abort rx timeout. Force session deactivation [ 1177.773759][ C0] vkms_vblank_simulate: vblank timer overrun [ 1178.397023][ C0] vkms_vblank_simulate: vblank timer overrun [ 1178.622355][ C0] vkms_vblank_simulate: vblank timer overrun [ 1181.242915][ T37] audit: type=1326 audit(1755978169.081:59): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10806 comm="syz.7.952" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fad205eebe9 code=0x7ffc0000 [ 1181.244187][ T37] audit: type=1326 audit(1755978169.081:60): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10806 comm="syz.7.952" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7fad205eebe9 code=0x7ffc0000 [ 1181.244232][ T37] audit: type=1326 audit(1755978169.081:61): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10806 comm="syz.7.952" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fad205eebe9 code=0x7ffc0000 [ 1181.244273][ T37] audit: type=1326 audit(1755978169.081:62): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10806 comm="syz.7.952" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fad205eebe9 code=0x7ffc0000 [ 1181.245644][ T37] audit: type=1326 audit(1755978169.081:63): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10806 comm="syz.7.952" exe="/root/syz-executor" sig=0 arch=c000003e syscall=302 compat=0 ip=0x7fad205eebe9 code=0x7ffc0000 [ 1181.245692][ T37] audit: type=1326 audit(1755978169.081:64): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10806 comm="syz.7.952" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fad205eebe9 code=0x7ffc0000 [ 1181.245736][ T37] audit: type=1326 audit(1755978169.081:65): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10806 comm="syz.7.952" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fad205eebe9 code=0x7ffc0000 [ 1181.245778][ T37] audit: type=1326 audit(1755978169.081:66): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10806 comm="syz.7.952" exe="/root/syz-executor" sig=0 arch=c000003e syscall=144 compat=0 ip=0x7fad205eebe9 code=0x7ffc0000 [ 1181.245823][ T37] audit: type=1326 audit(1755978169.081:67): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10806 comm="syz.7.952" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fad205eebe9 code=0x7ffc0000 [ 1181.245865][ T37] audit: type=1326 audit(1755978169.081:68): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10806 comm="syz.7.952" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fad205eebe9 code=0x7ffc0000 [ 1181.659658][T10810] overlayfs: missing 'lowerdir' [ 1187.573263][ T1319] ieee802154 phy0 wpan0: encryption failed: -22 [ 1187.573368][ T1319] ieee802154 phy1 wpan1: encryption failed: -22 [ 1189.197252][ T37] kauditd_printk_skb: 10 callbacks suppressed [ 1189.197270][ T37] audit: type=1326 audit(1755978177.041:79): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10806 comm="syz.7.952" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fad205eebe9 code=0x7ffc0000 [ 1189.197319][ T37] audit: type=1326 audit(1755978177.041:80): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10806 comm="syz.7.952" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fad205eebe9 code=0x7ffc0000 [ 1194.832105][T10842] netlink: 277 bytes leftover after parsing attributes in process `syz.7.961'. [ 1195.366397][T10849] netlink: 40 bytes leftover after parsing attributes in process `syz.1.962'. [ 1195.370742][T10849] netlink: 'syz.1.962': attribute type 1 has an invalid length. [ 1196.775670][ C1] vkms_vblank_simulate: vblank timer overrun [ 1196.799245][T10856] netlink: 277 bytes leftover after parsing attributes in process `syz.1.965'. [ 1197.621301][ C1] vkms_vblank_simulate: vblank timer overrun [ 1197.721574][T10861] netlink: 16 bytes leftover after parsing attributes in process `syz.1.965'. [ 1197.788060][ T5153] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1197.820267][ T5153] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1197.821804][ T5153] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1197.837337][ T5153] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1197.841495][ T5153] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1198.056511][ C1] vkms_vblank_simulate: vblank timer overrun [ 1198.980307][ C1] vkms_vblank_simulate: vblank timer overrun [ 1199.315560][ C1] vkms_vblank_simulate: vblank timer overrun [ 1199.654097][ C1] vkms_vblank_simulate: vblank timer overrun [ 1200.391129][ C1] vkms_vblank_simulate: vblank timer overrun [ 1200.396427][ T7638] Bluetooth: hci1: command tx timeout [ 1200.627829][ T5153] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1200.667148][ T5153] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1200.668844][ T5153] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1200.679133][ T5153] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1200.687189][ T5153] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1201.083829][ C1] vkms_vblank_simulate: vblank timer overrun [ 1202.228674][ C1] vkms_vblank_simulate: vblank timer overrun [ 1202.262184][ C1] vkms_vblank_simulate: vblank timer overrun [ 1202.311947][ C1] vkms_vblank_simulate: vblank timer overrun [ 1202.472046][ C1] vkms_vblank_simulate: vblank timer overrun [ 1202.514468][ T7638] Bluetooth: hci1: command tx timeout [ 1202.658565][ C1] vkms_vblank_simulate: vblank timer overrun [ 1202.874532][ C1] vkms_vblank_simulate: vblank timer overrun [ 1202.876451][ T7638] Bluetooth: hci3: command tx timeout [ 1203.499914][ C1] vkms_vblank_simulate: vblank timer overrun [ 1203.762892][ C1] vkms_vblank_simulate: vblank timer overrun [ 1204.022309][ C1] vkms_vblank_simulate: vblank timer overrun [ 1204.114266][ C1] vkms_vblank_simulate: vblank timer overrun [ 1204.415443][ C1] vkms_vblank_simulate: vblank timer overrun [ 1204.507363][ C0] vxcan1: j1939_tp_rxtimer: 0xffff888035c95c00: rx timeout, send abort [ 1205.007117][ C0] vxcan1: j1939_tp_rxtimer: 0xffff888035c96c00: rx timeout, send abort [ 1205.009055][ C0] vxcan1: j1939_tp_rxtimer: 0xffff888035c95c00: abort rx timeout. Force session deactivation [ 1205.299547][ C1] vkms_vblank_simulate: vblank timer overrun [ 1205.301378][ T7638] Bluetooth: hci1: command tx timeout [ 1205.301406][ T7638] Bluetooth: hci3: command tx timeout [ 1205.358522][ C1] vkms_vblank_simulate: vblank timer overrun [ 1205.388257][ C1] vkms_vblank_simulate: vblank timer overrun [ 1205.411673][T10905] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1205.507228][ C0] vxcan1: j1939_tp_rxtimer: 0xffff888035c96c00: abort rx timeout. Force session deactivation [ 1205.844720][ C1] vkms_vblank_simulate: vblank timer overrun [ 1206.030753][ C1] vkms_vblank_simulate: vblank timer overrun [ 1206.057743][ C1] vkms_vblank_simulate: vblank timer overrun [ 1206.109613][ C1] vkms_vblank_simulate: vblank timer overrun [ 1206.745072][ C1] vkms_vblank_simulate: vblank timer overrun [ 1207.209427][ C1] vkms_vblank_simulate: vblank timer overrun [ 1207.393459][ T7638] Bluetooth: hci1: command tx timeout [ 1207.397298][ C1] vkms_vblank_simulate: vblank timer overrun [ 1207.671871][ C1] vkms_vblank_simulate: vblank timer overrun [ 1207.672347][ C1] vxcan1: j1939_tp_rxtimer: 0xffff88805968b800: rx timeout, send abort [ 1208.151680][ C1] vxcan1: j1939_tp_rxtimer: 0xffff888059689000: rx timeout, send abort [ 1208.172757][ C1] vxcan1: j1939_tp_rxtimer: 0xffff88805968b800: abort rx timeout. Force session deactivation [ 1208.227377][ T5153] Bluetooth: hci3: command tx timeout [ 1208.570997][ C1] vkms_vblank_simulate: vblank timer overrun [ 1208.916347][ C1] vkms_vblank_simulate: vblank timer overrun [ 1208.917080][ C1] vxcan1: j1939_tp_rxtimer: 0xffff888059689000: abort rx timeout. Force session deactivation [ 1208.940826][ C1] vkms_vblank_simulate: vblank timer overrun [ 1209.156387][ C1] vkms_vblank_simulate: vblank timer overrun [ 1210.569491][ T5153] Bluetooth: hci3: command tx timeout [ 1210.731717][T10934] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1210.908325][ C0] vxcan1: j1939_tp_rxtimer: 0xffff88803eacb800: rx timeout, send abort [ 1212.075631][ C0] vxcan1: j1939_tp_rxtimer: 0xffff88803eacb800: abort rx timeout. Force session deactivation [ 1212.075781][ C0] vxcan1: j1939_tp_rxtimer: 0xffff88803eac9400: rx timeout, send abort [ 1213.369726][ C0] vxcan1: j1939_tp_rxtimer: 0xffff88803eac9400: abort rx timeout. Force session deactivation [ 1213.534291][T10959] netlink: 277 bytes leftover after parsing attributes in process `syz.0.996'. [ 1214.814837][ T43] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1219.522605][ T43] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1219.549613][T10991] IPVS: Error joining to the multicast group [ 1222.365110][T11009] netlink: 277 bytes leftover after parsing attributes in process `syz.0.1000'. [ 1222.575391][ T43] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1226.303976][T11027] tipc: Failed to remove unknown binding: 66,1,1/0:3840768875/3840768877 [ 1226.304003][T11027] tipc: Failed to remove unknown binding: 66,1,1/0:3840768875/3840768877 [ 1227.045268][ C0] vxcan1: j1939_tp_rxtimer: 0xffff888057237c00: rx timeout, send abort [ 1227.545546][ C0] vxcan1: j1939_tp_rxtimer: 0xffff888057237c00: abort rx timeout. Force session deactivation [ 1227.548404][ C0] vxcan1: j1939_tp_rxtimer: 0xffff888057235800: rx timeout, send abort [ 1230.232892][ C0] vxcan1: j1939_tp_rxtimer: 0xffff888057235800: abort rx timeout. Force session deactivation [ 1230.233641][ T5153] Bluetooth: hci4: unexpected Set CIG Parameters response data [ 1231.502994][ T43] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1232.512306][T11073] netlink: 'syz.1.1013': attribute type 27 has an invalid length. [ 1233.727572][T10859] chnl_net:caif_netlink_parms(): no params data found [ 1234.289410][ T5153] Bluetooth: hci4: Controller not accepting commands anymore: ncmd = 0 [ 1234.289586][ T5153] Bluetooth: hci4: Injecting HCI hardware error event [ 1234.292714][ T7638] Bluetooth: hci4: hardware error 0x00 [ 1234.503400][ C0] vxcan1: j1939_tp_rxtimer: 0xffff8880583d9400: rx timeout, send abort [ 1235.066249][ C0] vxcan1: j1939_tp_rxtimer: 0xffff8880583d9400: abort rx timeout. Force session deactivation [ 1235.066392][ C0] vxcan1: j1939_tp_rxtimer: 0xffff8880583d9000: rx timeout, send abort [ 1235.566474][ C0] vxcan1: j1939_tp_rxtimer: 0xffff8880583d9000: abort rx timeout. Force session deactivation [ 1235.720276][T11094] netlink: 277 bytes leftover after parsing attributes in process `syz.0.1019'. [ 1236.914020][ C0] vxcan1: j1939_tp_rxtimer: 0xffff888059def800: rx timeout, send abort [ 1237.343902][T10859] bridge0: port 1(bridge_slave_0) entered blocking state [ 1237.344141][T10859] bridge0: port 1(bridge_slave_0) entered disabled state [ 1237.344323][T10859] bridge_slave_0: entered allmulticast mode [ 1237.354046][T10859] bridge_slave_0: entered promiscuous mode [ 1237.357553][T10875] chnl_net:caif_netlink_parms(): no params data found [ 1237.381811][T10859] bridge0: port 2(bridge_slave_1) entered blocking state [ 1237.381938][T10859] bridge0: port 2(bridge_slave_1) entered disabled state [ 1237.382114][T10859] bridge_slave_1: entered allmulticast mode [ 1237.391541][T10859] bridge_slave_1: entered promiscuous mode [ 1237.414090][ C0] vxcan1: j1939_tp_rxtimer: 0xffff888059def800: abort rx timeout. Force session deactivation [ 1237.417588][ C0] vxcan1: j1939_tp_rxtimer: 0xffff888059dec400: rx timeout, send abort [ 1238.047141][T11124] netlink: 5128 bytes leftover after parsing attributes in process `syz.0.1022'. [ 1238.047354][T11124] netlink: 5128 bytes leftover after parsing attributes in process `syz.0.1022'. [ 1238.047370][T11124] netlink: 640 bytes leftover after parsing attributes in process `syz.0.1022'. [ 1238.060427][ C0] vxcan1: j1939_tp_rxtimer: 0xffff888059dec400: abort rx timeout. Force session deactivation [ 1239.036944][ T7638] Bluetooth: hci4: Opcode 0x0c03 failed: -110 [ 1239.254835][ C1] vkms_vblank_simulate: vblank timer overrun [ 1239.388025][T11129] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1025'. [ 1239.615067][ C1] vkms_vblank_simulate: vblank timer overrun [ 1239.723108][ C1] vkms_vblank_simulate: vblank timer overrun [ 1240.067725][ C1] vkms_vblank_simulate: vblank timer overrun [ 1240.095195][ C1] vkms_vblank_simulate: vblank timer overrun [ 1240.269688][ C1] vkms_vblank_simulate: vblank timer overrun [ 1240.928117][ C1] vkms_vblank_simulate: vblank timer overrun [ 1240.998192][ C0] vxcan1: j1939_tp_rxtimer: 0xffff888059e24000: rx timeout, send abort [ 1241.089462][T11143] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1028'. [ 1241.498479][ C0] vxcan1: j1939_tp_rxtimer: 0xffff888059e24000: abort rx timeout. Force session deactivation [ 1241.502556][ C0] vxcan1: j1939_tp_rxtimer: 0xffff888059e24800: rx timeout, send abort [ 1241.857762][ C1] vkms_vblank_simulate: vblank timer overrun [ 1241.979099][T11143] ipvlan2: entered promiscuous mode [ 1242.050765][T10859] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1242.065310][ C0] vxcan1: j1939_tp_rxtimer: 0xffff888059e24800: abort rx timeout. Force session deactivation [ 1242.221093][T10859] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1242.243778][T11147] netlink: 277 bytes leftover after parsing attributes in process `syz.0.1029'. [ 1242.451547][ C1] vkms_vblank_simulate: vblank timer overrun [ 1244.782680][ T43] bridge_slave_1: left allmulticast mode [ 1244.782714][ T43] bridge_slave_1: left promiscuous mode [ 1244.783022][ T43] bridge0: port 2(bridge_slave_1) entered disabled state [ 1245.796841][ T37] audit: type=1800 audit(1755978233.371:81): pid=11173 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.0.1034" name="SYSV00000000" dev="tmpfs" ino=0 res=0 errno=0 [ 1246.268749][ T43] bridge_slave_0: left allmulticast mode [ 1246.268781][ T43] bridge_slave_0: left promiscuous mode [ 1246.269045][ T43] bridge0: port 1(bridge_slave_0) entered disabled state [ 1246.296574][T11175] random: crng reseeded on system resumption [ 1248.831333][ C1] vxcan1: j1939_tp_rxtimer: 0xffff88805742b800: rx timeout, send abort [ 1249.016835][ C1] vxcan1: j1939_tp_rxtimer: 0xffff88805742b000: rx timeout, send abort [ 1249.214944][ T1319] ieee802154 phy0 wpan0: encryption failed: -22 [ 1249.215018][ T1319] ieee802154 phy1 wpan1: encryption failed: -22 [ 1249.331510][ C1] vxcan1: j1939_tp_rxtimer: 0xffff88805742b800: abort rx timeout. Force session deactivation [ 1249.439985][T11195] netlink: 277 bytes leftover after parsing attributes in process `syz.0.1042'. [ 1249.516943][ C1] vxcan1: j1939_tp_rxtimer: 0xffff88805742b000: abort rx timeout. Force session deactivation [ 1251.520422][ T5153] Bluetooth: hci5: command 0x0406 tx timeout [ 1252.777555][ T5153] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1252.783169][ T5153] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1252.909935][ T5153] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1253.596082][ T5153] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1253.609474][ T5153] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1256.441489][T11222] Bluetooth: hci0: command tx timeout [ 1257.028232][ T8253] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1257.057156][T11234] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1257.057168][T11234] IPv6: NLM_F_CREATE should be set when creating new route [ 1257.057656][T11234] IPv6: NLM_F_CREATE should be set when creating new route [ 1257.057682][T11234] IPv6: NLM_F_CREATE should be set when creating new route [ 1257.069917][ T8253] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1257.074367][ T8253] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1257.075783][ T8253] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1257.078091][ T8253] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1258.459761][T11222] Bluetooth: hci0: command tx timeout [ 1259.168194][ C0] vxcan1: j1939_tp_rxtimer: 0xffff888059726800: rx timeout, send abort [ 1259.177124][T11222] Bluetooth: hci2: command tx timeout [ 1259.204770][ C0] vxcan1: j1939_tp_rxtimer: 0xffff888059727c00: rx timeout, send abort [ 1259.672305][ C0] vxcan1: j1939_tp_rxtimer: 0xffff888059726800: abort rx timeout. Force session deactivation [ 1259.715835][ C0] vxcan1: j1939_tp_rxtimer: 0xffff888059727c00: abort rx timeout. Force session deactivation [ 1260.140350][ T43] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1261.120419][ T8253] Bluetooth: hci0: command tx timeout [ 1261.159110][ T43] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1261.295120][T11222] Bluetooth: hci2: command tx timeout [ 1261.313018][ T43] bond0 (unregistering): Released all slaves [ 1261.520898][T11208] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1262.666030][ C0] vxcan1: j1939_tp_rxtimer: 0xffff888059c33400: rx timeout, send abort [ 1263.166338][ C0] vxcan1: j1939_tp_rxtimer: 0xffff888059c33400: abort rx timeout. Force session deactivation [ 1263.172882][ C0] vxcan1: j1939_tp_rxtimer: 0xffff888059c32c00: rx timeout, send abort [ 1263.350684][T11222] Bluetooth: hci0: command tx timeout [ 1263.350735][T11222] Bluetooth: hci2: command tx timeout [ 1263.673030][ C0] vxcan1: j1939_tp_rxtimer: 0xffff888059c32c00: abort rx timeout. Force session deactivation [ 1265.414498][ T8253] Bluetooth: hci2: command tx timeout [ 1266.580027][ C1] vxcan1: j1939_tp_rxtimer: 0xffff888055c27800: rx timeout, send abort [ 1267.346875][ C0] vkms_vblank_simulate: vblank timer overrun [ 1267.534828][ C1] vxcan1: j1939_tp_rxtimer: 0xffff888036302400: rx timeout, send abort [ 1267.534876][ C1] vxcan1: j1939_tp_rxtimer: 0xffff888055c27800: abort rx timeout. Force session deactivation [ 1267.712836][ C0] vkms_vblank_simulate: vblank timer overrun [ 1268.254188][ C1] vxcan1: j1939_tp_rxtimer: 0xffff888036302400: abort rx timeout. Force session deactivation [ 1268.260844][ C0] vkms_vblank_simulate: vblank timer overrun [ 1268.913213][ C0] vkms_vblank_simulate: vblank timer overrun [ 1269.067486][ C0] vkms_vblank_simulate: vblank timer overrun [ 1269.163593][ C0] vxcan1: j1939_tp_rxtimer: 0xffff888059f38c00: rx timeout, send abort [ 1269.587973][ C0] vkms_vblank_simulate: vblank timer overrun [ 1269.663751][ C0] vxcan1: j1939_tp_rxtimer: 0xffff888059f38c00: abort rx timeout. Force session deactivation [ 1269.663970][ C0] vxcan1: j1939_tp_rxtimer: 0xffff888059f38400: rx timeout, send abort [ 1269.949524][ C0] vkms_vblank_simulate: vblank timer overrun [ 1270.630213][ C0] vkms_vblank_simulate: vblank timer overrun [ 1270.630412][ C0] vxcan1: j1939_tp_rxtimer: 0xffff888059f38400: abort rx timeout. Force session deactivation [ 1270.750836][ C0] vkms_vblank_simulate: vblank timer overrun [ 1272.925576][T11337] bridge0: port 2(bridge_slave_1) entered disabled state [ 1272.927678][T11337] bridge0: port 1(bridge_slave_0) entered disabled state [ 1274.887619][T11347] Device name cannot be null; rc = [-22] [ 1275.585204][ T37] audit: type=1326 audit(1755978263.421:82): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11351 comm="syz.7.1074" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fad205eebe9 code=0x7ffc0000 [ 1275.596589][ T37] audit: type=1326 audit(1755978263.431:83): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11351 comm="syz.7.1074" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fad205eebe9 code=0x7ffc0000 [ 1275.596639][ T37] audit: type=1326 audit(1755978263.431:84): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11351 comm="syz.7.1074" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fad205eebe9 code=0x7ffc0000 [ 1275.596681][ T37] audit: type=1326 audit(1755978263.431:85): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11351 comm="syz.7.1074" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fad205eebe9 code=0x7ffc0000 [ 1275.596723][ T37] audit: type=1326 audit(1755978263.431:86): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11351 comm="syz.7.1074" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fad205eebe9 code=0x7ffc0000 [ 1275.717315][ T37] audit: type=1326 audit(1755978263.551:87): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11351 comm="syz.7.1074" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fad205eebe9 code=0x7ffc0000 [ 1275.717372][ T37] audit: type=1326 audit(1755978263.561:88): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11351 comm="syz.7.1074" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fad205eebe9 code=0x7ffc0000 [ 1275.718610][ T37] audit: type=1326 audit(1755978263.561:89): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11351 comm="syz.7.1074" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7fad205eebe9 code=0x7ffc0000 [ 1275.718658][ T37] audit: type=1326 audit(1755978263.561:90): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11351 comm="syz.7.1074" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fad205eebe9 code=0x7ffc0000 [ 1275.731750][ T37] audit: type=1326 audit(1755978263.561:91): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11351 comm="syz.7.1074" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7fad205eebe9 code=0x7ffc0000 [ 1275.895463][T11357] smb3: Unexpected value for 'rdma' [ 1279.429132][ C1] vkms_vblank_simulate: vblank timer overrun [ 1279.522965][ C1] vkms_vblank_simulate: vblank timer overrun [ 1280.023549][ C1] vkms_vblank_simulate: vblank timer overrun [ 1280.114659][ C1] vkms_vblank_simulate: vblank timer overrun [ 1280.128058][T11386] Device name cannot be null; rc = [-22] [ 1280.148006][ C1] vkms_vblank_simulate: vblank timer overrun [ 1281.594627][ C1] vkms_vblank_simulate: vblank timer overrun [ 1281.750504][ C1] vkms_vblank_simulate: vblank timer overrun [ 1281.783061][T11392] overlayfs: failed to clone upperpath [ 1282.011294][ C1] vkms_vblank_simulate: vblank timer overrun [ 1282.407643][ C1] vkms_vblank_simulate: vblank timer overrun [ 1282.523964][ C1] vkms_vblank_simulate: vblank timer overrun [ 1282.779711][ C1] vkms_vblank_simulate: vblank timer overrun [ 1283.848069][ C1] vkms_vblank_simulate: vblank timer overrun [ 1284.048945][ C1] vkms_vblank_simulate: vblank timer overrun [ 1288.363512][ T43] hsr_slave_0: left promiscuous mode [ 1288.597406][ T43] hsr_slave_1: left promiscuous mode [ 1288.598327][ T43] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1288.598353][ T43] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1288.898372][ T43] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1288.898404][ T43] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1290.137043][ T43] veth1_macvtap: left promiscuous mode [ 1290.137179][ T43] veth0_macvtap: left promiscuous mode [ 1290.137533][ T43] veth1_vlan: left promiscuous mode [ 1290.137773][ T43] veth0_vlan: left promiscuous mode [ 1290.789234][ C0] vxcan1: j1939_tp_rxtimer: 0xffff888035111000: rx timeout, send abort [ 1291.289519][ C0] vxcan1: j1939_tp_rxtimer: 0xffff888035111000: abort rx timeout. Force session deactivation [ 1291.294581][ C0] vxcan1: j1939_tp_rxtimer: 0xffff888035110c00: rx timeout, send abort [ 1291.794700][ C0] vxcan1: j1939_tp_rxtimer: 0xffff888035110c00: abort rx timeout. Force session deactivation [ 1292.056298][T11454] Device name cannot be null; rc = [-22] [ 1293.812497][ C1] vxcan1: j1939_tp_rxtimer: 0xffff88801aea7000: rx timeout, send abort [ 1294.194631][ C1] vxcan1: j1939_tp_rxtimer: 0xffff888059e33800: rx timeout, send abort [ 1294.312623][ C1] vxcan1: j1939_tp_rxtimer: 0xffff88801aea7000: abort rx timeout. Force session deactivation [ 1294.755017][ C1] vxcan1: j1939_tp_rxtimer: 0xffff888059e33800: abort rx timeout. Force session deactivation [ 1297.990669][ C1] vxcan1: j1939_tp_rxtimer: 0xffff888057845800: rx timeout, send abort [ 1298.572039][ C1] vxcan1: j1939_tp_rxtimer: 0xffff88805d07e400: rx timeout, send abort [ 1298.572093][ C1] vxcan1: j1939_tp_rxtimer: 0xffff88805d07e800: rx timeout, send abort [ 1298.572127][ C1] vxcan1: j1939_tp_rxtimer: 0xffff888057845800: abort rx timeout. Force session deactivation [ 1298.743873][ C1] vxcan1: j1939_tp_rxtimer: 0xffff88805d07f400: rx timeout, send abort [ 1299.072595][ C1] vxcan1: j1939_tp_rxtimer: 0xffff88805d07e400: abort rx timeout. Force session deactivation [ 1299.166632][ C1] vxcan1: j1939_tp_rxtimer: 0xffff88805d07e800: abort rx timeout. Force session deactivation [ 1299.245948][ C1] vxcan1: j1939_tp_rxtimer: 0xffff88805d07f400: abort rx timeout. Force session deactivation [ 1299.562071][T11492] usb usb1: usbfs: interface 0 claimed by hub while 'syz.1.1107' sets config #1 [ 1300.164304][T11499] trusted_key: encrypted_key: insufficient parameters specified [ 1301.842892][T11508] netlink: 'syz.0.1110': attribute type 1 has an invalid length. [ 1301.842911][T11508] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1110'. [ 1303.767704][ T43] team0 (unregistering): Port device team_slave_1 removed [ 1303.987704][ T43] team0 (unregistering): Port device C removed [ 1310.461215][ T1319] ieee802154 phy0 wpan0: encryption failed: -22 [ 1310.461282][ T1319] ieee802154 phy1 wpan1: encryption failed: -22 [ 1310.564143][T11237] chnl_net:caif_netlink_parms(): no params data found [ 1310.597087][T11218] chnl_net:caif_netlink_parms(): no params data found [ 1313.823662][T11571] netlink: 'syz.7.1121': attribute type 1 has an invalid length. [ 1313.823930][T11571] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1121'. [ 1315.453166][T11222] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1315.477069][T11222] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1315.478529][T11222] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1315.479885][T11222] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1315.480776][T11222] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1316.489964][T11587] trusted_key: encrypted_key: insufficient parameters specified [ 1317.522249][T11222] Bluetooth: hci1: command tx timeout [ 1320.076136][T11601] futex_wake_op: syz.7.1128 tries to shift op by 36; fix this program [ 1320.566848][T11222] Bluetooth: hci1: command tx timeout [ 1320.951744][T11604] trusted_key: encrypted_key: insufficient parameters specified [ 1323.070850][ C0] vkms_vblank_simulate: vblank timer overrun [ 1323.220610][ C0] vkms_vblank_simulate: vblank timer overrun [ 1323.277160][T11222] Bluetooth: hci1: command tx timeout [ 1323.711274][ C0] vkms_vblank_simulate: vblank timer overrun [ 1324.751327][ C0] vkms_vblank_simulate: vblank timer overrun [ 1324.788506][ T8253] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1324.797247][ T8253] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1324.799537][ T8253] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1324.800903][ T8253] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1324.802340][ T8253] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1325.140530][ C0] vkms_vblank_simulate: vblank timer overrun [ 1325.346852][ T8253] Bluetooth: hci1: command tx timeout [ 1325.573741][ C0] vkms_vblank_simulate: vblank timer overrun [ 1325.859647][ C0] vkms_vblank_simulate: vblank timer overrun [ 1326.939951][ T8253] Bluetooth: hci0: command tx timeout [ 1327.047550][ C0] vkms_vblank_simulate: vblank timer overrun [ 1327.052124][T11640] netlink: 'syz.0.1137': attribute type 1 has an invalid length. [ 1327.052139][T11640] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1137'. [ 1327.576913][ C0] vkms_vblank_simulate: vblank timer overrun [ 1328.020050][ C0] vxcan1: j1939_tp_rxtimer: 0xffff888039d72400: rx timeout, send abort [ 1328.520398][ C0] vxcan1: j1939_tp_rxtimer: 0xffff888039d72400: abort rx timeout. Force session deactivation [ 1328.521623][ C0] vxcan1: j1939_tp_rxtimer: 0xffff888039d71400: rx timeout, send abort [ 1329.020467][ T8253] Bluetooth: hci0: command tx timeout [ 1329.052612][ C0] vxcan1: j1939_tp_rxtimer: 0xffff888039d71400: abort rx timeout. Force session deactivation [ 1330.378003][ T43] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1331.138068][T11657] netlink: 'syz.0.1140': attribute type 1 has an invalid length. [ 1331.153647][ T8253] Bluetooth: hci0: command tx timeout [ 1333.237898][ T8253] Bluetooth: hci0: command tx timeout [ 1337.209792][ T43] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1343.520573][ T43] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1344.227887][T11575] chnl_net:caif_netlink_parms(): no params data found [ 1346.403995][ T43] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1350.951832][T11769] tipc: Failed to remove unknown binding: 66,1,1/0:3419929547/3419929549 [ 1350.951878][T11769] tipc: Failed to remove unknown binding: 66,1,1/0:3419929547/3419929549 [ 1354.101871][T11575] bridge0: port 1(bridge_slave_0) entered blocking state [ 1354.101960][T11575] bridge0: port 1(bridge_slave_0) entered disabled state [ 1354.102155][T11575] bridge_slave_0: entered allmulticast mode [ 1354.137048][T11575] bridge_slave_0: entered promiscuous mode [ 1354.180448][T11575] bridge0: port 2(bridge_slave_1) entered blocking state [ 1354.180617][T11575] bridge0: port 2(bridge_slave_1) entered disabled state [ 1354.180808][T11575] bridge_slave_1: entered allmulticast mode [ 1354.210233][T11575] bridge_slave_1: entered promiscuous mode [ 1355.075800][T11791] netlink: 'syz.0.1166': attribute type 1 has an invalid length. [ 1355.075822][T11791] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1166'. [ 1356.433531][T11805] ------------[ cut here ]------------ [ 1356.433541][T11805] verifier bug: REG INVARIANTS VIOLATION (true_reg1): range bounds violation u64=[0xffffdfcd, 0xffffffffffffdfcc] s64=[0x80000000ffffdfcd, 0x7fffffffffffdfcc] u32=[0xffffdfcd, 0xffffdfcc] s32=[0xffffdfcd, 0xffffdfcc] var_off=(0xffffdfcc, 0xffffffff00000000)(1) [ 1356.433698][T11805] WARNING: CPU: 1 PID: 11805 at kernel/bpf/verifier.c:2728 reg_bounds_sanity_check+0x6e6/0xc20 [ 1356.433741][T11805] Modules linked in: [ 1356.433771][T11805] CPU: 1 UID: 0 PID: 11805 Comm: syz.1.1168 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 1356.433789][T11805] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1356.433812][T11805] RIP: 0010:reg_bounds_sanity_check+0x6e6/0xc20 [ 1356.433837][T11805] Code: 24 20 4c 8b 44 24 60 4c 8b 4c 24 58 41 ff 75 00 53 41 57 55 ff 74 24 38 ff 74 24 70 ff 74 24 40 e8 3f 5d ab ff 48 83 c4 38 90 <0f> 0b 90 90 48 bb 00 00 00 00 00 fc ff df 4d 89 f7 4c 8b 74 24 08 [ 1356.433851][T11805] RSP: 0018:ffffc90003e46f08 EFLAGS: 00010282 [ 1356.433864][T11805] RAX: 0f074265e71cf000 RBX: 00000000ffffdfcc RCX: 0000000000080000 [ 1356.433876][T11805] RDX: ffffc90014552000 RSI: 00000000000032b4 RDI: 00000000000032b5 [ 1356.433886][T11805] RBP: 00000000ffffdfcd R08: 0000000000000000 R09: 0000000000000000 [ 1356.433896][T11805] R10: dffffc0000000000 R11: ffffed1017124863 R12: ffff888058e58258 [ 1356.433907][T11805] R13: ffff888058e58278 R14: ffff888058e58290 R15: 00000000ffffdfcc [ 1356.433919][T11805] FS: 00007fbb694156c0(0000) GS:ffff8881269c2000(0000) knlGS:0000000000000000 [ 1356.433933][T11805] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1356.433944][T11805] CR2: fffffffffffffffd CR3: 00000000534c0000 CR4: 00000000003526f0 [ 1356.433970][T11805] Call Trace: [ 1356.433976][T11805] [ 1356.433999][T11805] reg_set_min_max+0x214/0x300 [ 1356.434027][T11805] check_cond_jmp_op+0x1625/0x2910 [ 1356.434061][T11805] ? __pfx_check_cond_jmp_op+0x10/0x10 [ 1356.434084][T11805] ? do_check+0x4531/0xe520 [ 1356.434103][T11805] ? kfree+0x195/0x550 [ 1356.434126][T11805] do_check+0x6751/0xe520 [ 1356.434195][T11805] ? __pfx_do_check+0x10/0x10 [ 1356.434213][T11805] ? init_func_state+0x1ddf/0x2d20 [ 1356.434239][T11805] do_check_common+0x1949/0x24f0 [ 1356.434270][T11805] bpf_check+0x17473/0x1d2e0 [ 1356.434301][T11805] ? is_bpf_text_address+0x26/0x2b0 [ 1356.434347][T11805] ? rtlock_slowlock_locked+0xd8/0x4010 [ 1356.434364][T11805] ? __lock_acquire+0xab9/0xd20 [ 1356.434398][T11805] ? __lock_acquire+0xab9/0xd20 [ 1356.434418][T11805] ? __lock_acquire+0xab9/0xd20 [ 1356.434442][T11805] ? do_raw_spin_lock+0x121/0x290 [ 1356.434470][T11805] ? __lock_acquire+0xab9/0xd20 [ 1356.434493][T11805] ? __pfx_bpf_check+0x10/0x10 [ 1356.434506][T11805] ? ktime_get_with_offset+0x8c/0x2a0 [ 1356.434527][T11805] ? seqcount_lockdep_reader_access+0x123/0x1c0 [ 1356.434542][T11805] ? lockdep_hardirqs_on+0x9c/0x150 [ 1356.434560][T11805] ? ktime_get_with_offset+0x8c/0x2a0 [ 1356.434574][T11805] ? seqcount_lockdep_reader_access+0x175/0x1c0 [ 1356.434589][T11805] ? __pfx_seqcount_lockdep_reader_access+0x10/0x10 [ 1356.434611][T11805] ? __asan_memset+0x22/0x50 [ 1356.434626][T11805] ? bpf_obj_name_cpy+0x194/0x1e0 [ 1356.434646][T11805] ? bpf_lsm_bpf_prog_load+0x9/0x20 [ 1356.434663][T11805] ? security_bpf_prog_load+0x7f/0x310 [ 1356.434685][T11805] bpf_prog_load+0x1318/0x1930 [ 1356.434716][T11805] ? __pfx_bpf_prog_load+0x10/0x10 [ 1356.434749][T11805] ? bpf_lsm_bpf+0x9/0x20 [ 1356.434764][T11805] ? security_bpf+0x7e/0x300 [ 1356.434784][T11805] __sys_bpf+0x528/0x870 [ 1356.434808][T11805] ? __pfx___sys_bpf+0x10/0x10 [ 1356.434839][T11805] ? rcu_is_watching+0x15/0xb0 [ 1356.434866][T11805] __x64_sys_bpf+0x7c/0x90 [ 1356.434882][T11805] do_syscall_64+0xfa/0x3b0 [ 1356.434901][T11805] ? lockdep_hardirqs_on+0x9c/0x150 [ 1356.434918][T11805] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1356.434932][T11805] ? clear_bhb_loop+0x60/0xb0 [ 1356.434949][T11805] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1356.434963][T11805] RIP: 0033:0x7fbb6b1cebe9 [ 1356.434978][T11805] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1356.434989][T11805] RSP: 002b:00007fbb69415038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1356.435003][T11805] RAX: ffffffffffffffda RBX: 00007fbb6b3f6090 RCX: 00007fbb6b1cebe9 [ 1356.435013][T11805] RDX: 0000000000000048 RSI: 00002000000054c0 RDI: 0000000000000005 [ 1356.435022][T11805] RBP: 00007fbb6b251e19 R08: 0000000000000000 R09: 0000000000000000 [ 1356.435030][T11805] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1356.435039][T11805] R13: 00007fbb6b3f6128 R14: 00007fbb6b3f6090 R15: 00007fffa0d990c8 [ 1356.435060][T11805] [ 1356.435067][T11805] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 1356.435076][T11805] CPU: 1 UID: 0 PID: 11805 Comm: syz.1.1168 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 1356.435092][T11805] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1356.435100][T11805] Call Trace: [ 1356.435105][T11805] [ 1356.435110][T11805] dump_stack_lvl+0x99/0x250 [ 1356.435133][T11805] ? __asan_memcpy+0x40/0x70 [ 1356.435147][T11805] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1356.435170][T11805] ? __pfx__printk+0x10/0x10 [ 1356.435194][T11805] vpanic+0x281/0x750 [ 1356.435215][T11805] ? __pfx__printk+0x10/0x10 [ 1356.435229][T11805] ? __pfx_vpanic+0x10/0x10 [ 1356.435250][T11805] ? is_bpf_text_address+0x26/0x2b0 [ 1356.435277][T11805] panic+0xb9/0xc0 [ 1356.435297][T11805] ? __pfx_panic+0x10/0x10 [ 1356.435327][T11805] __warn+0x31b/0x4b0 [ 1356.435347][T11805] ? reg_bounds_sanity_check+0x6e6/0xc20 [ 1356.435369][T11805] ? reg_bounds_sanity_check+0x6e6/0xc20 [ 1356.435390][T11805] report_bug+0x2be/0x4f0 [ 1356.435407][T11805] ? reg_bounds_sanity_check+0x6e6/0xc20 [ 1356.435428][T11805] ? reg_bounds_sanity_check+0x6e6/0xc20 [ 1356.435449][T11805] ? reg_bounds_sanity_check+0x6e8/0xc20 [ 1356.435469][T11805] handle_bug+0x84/0x160 [ 1356.435490][T11805] exc_invalid_op+0x1a/0x50 [ 1356.435510][T11805] asm_exc_invalid_op+0x1a/0x20 [ 1356.435523][T11805] RIP: 0010:reg_bounds_sanity_check+0x6e6/0xc20 [ 1356.435544][T11805] Code: 24 20 4c 8b 44 24 60 4c 8b 4c 24 58 41 ff 75 00 53 41 57 55 ff 74 24 38 ff 74 24 70 ff 74 24 40 e8 3f 5d ab ff 48 83 c4 38 90 <0f> 0b 90 90 48 bb 00 00 00 00 00 fc ff df 4d 89 f7 4c 8b 74 24 08 [ 1356.435556][T11805] RSP: 0018:ffffc90003e46f08 EFLAGS: 00010282 [ 1356.435567][T11805] RAX: 0f074265e71cf000 RBX: 00000000ffffdfcc RCX: 0000000000080000 [ 1356.435577][T11805] RDX: ffffc90014552000 RSI: 00000000000032b4 RDI: 00000000000032b5 [ 1356.435587][T11805] RBP: 00000000ffffdfcd R08: 0000000000000000 R09: 0000000000000000 [ 1356.435595][T11805] R10: dffffc0000000000 R11: ffffed1017124863 R12: ffff888058e58258 [ 1356.435606][T11805] R13: ffff888058e58278 R14: ffff888058e58290 R15: 00000000ffffdfcc [ 1356.435644][T11805] reg_set_min_max+0x214/0x300 [ 1356.435670][T11805] check_cond_jmp_op+0x1625/0x2910 [ 1356.435701][T11805] ? __pfx_check_cond_jmp_op+0x10/0x10 [ 1356.435722][T11805] ? do_check+0x4531/0xe520 [ 1356.435740][T11805] ? kfree+0x195/0x550 [ 1356.435761][T11805] do_check+0x6751/0xe520 [ 1356.435832][T11805] ? __pfx_do_check+0x10/0x10 [ 1356.435849][T11805] ? init_func_state+0x1ddf/0x2d20 [ 1356.435873][T11805] do_check_common+0x1949/0x24f0 [ 1356.435903][T11805] bpf_check+0x17473/0x1d2e0 [ 1356.435915][T11805] ? is_bpf_text_address+0x26/0x2b0 [ 1356.435956][T11805] ? rtlock_slowlock_locked+0xd8/0x4010 [ 1356.435971][T11805] ? __lock_acquire+0xab9/0xd20 [ 1356.435992][T11805] ? __lock_acquire+0xab9/0xd20 [ 1356.436013][T11805] ? __lock_acquire+0xab9/0xd20 [ 1356.436037][T11805] ? do_raw_spin_lock+0x121/0x290 [ 1356.436065][T11805] ? __lock_acquire+0xab9/0xd20 [ 1356.436089][T11805] ? __pfx_bpf_check+0x10/0x10 [ 1356.436102][T11805] ? ktime_get_with_offset+0x8c/0x2a0 [ 1356.436124][T11805] ? seqcount_lockdep_reader_access+0x123/0x1c0 [ 1356.436139][T11805] ? lockdep_hardirqs_on+0x9c/0x150 [ 1356.436157][T11805] ? ktime_get_with_offset+0x8c/0x2a0 [ 1356.436171][T11805] ? seqcount_lockdep_reader_access+0x175/0x1c0 [ 1356.436186][T11805] ? __pfx_seqcount_lockdep_reader_access+0x10/0x10 [ 1356.436208][T11805] ? __asan_memset+0x22/0x50 [ 1356.436223][T11805] ? bpf_obj_name_cpy+0x194/0x1e0 [ 1356.436243][T11805] ? bpf_lsm_bpf_prog_load+0x9/0x20 [ 1356.436260][T11805] ? security_bpf_prog_load+0x7f/0x310 [ 1356.436281][T11805] bpf_prog_load+0x1318/0x1930 [ 1356.436307][T11805] ? __pfx_bpf_prog_load+0x10/0x10 [ 1356.436340][T11805] ? bpf_lsm_bpf+0x9/0x20 [ 1356.436356][T11805] ? security_bpf+0x7e/0x300 [ 1356.436375][T11805] __sys_bpf+0x528/0x870 [ 1356.436394][T11805] ? __pfx___sys_bpf+0x10/0x10 [ 1356.436423][T11805] ? rcu_is_watching+0x15/0xb0 [ 1356.436449][T11805] __x64_sys_bpf+0x7c/0x90 [ 1356.436465][T11805] do_syscall_64+0xfa/0x3b0 [ 1356.436483][T11805] ? lockdep_hardirqs_on+0x9c/0x150 [ 1356.436500][T11805] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1356.436513][T11805] ? clear_bhb_loop+0x60/0xb0 [ 1356.436530][T11805] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1356.436544][T11805] RIP: 0033:0x7fbb6b1cebe9 [ 1356.436555][T11805] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1356.436567][T11805] RSP: 002b:00007fbb69415038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1356.436579][T11805] RAX: ffffffffffffffda RBX: 00007fbb6b3f6090 RCX: 00007fbb6b1cebe9 [ 1356.436589][T11805] RDX: 0000000000000048 RSI: 00002000000054c0 RDI: 0000000000000005 [ 1356.436598][T11805] RBP: 00007fbb6b251e19 R08: 0000000000000000 R09: 0000000000000000 [ 1356.436607][T11805] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1356.436633][T11805] R13: 00007fbb6b3f6128 R14: 00007fbb6b3f6090 R15: 00007fffa0d990c8 [ 1356.436656][T11805] [ 1356.437034][T11805] Kernel Offset: disabled