last executing test programs: 20m48.987727726s ago: executing program 4 (id=69): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, @log={{0x8}, @void}}, {0x14, 0x1, 0x0, 0x1, @dynset={{0xb}, @val={0x4}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x78}}, 0x4048040) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = syz_open_dev$mouse(&(0x7f00000000c0), 0x0, 0x2042) socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_emit_ethernet(0x4a, &(0x7f0000000000)={@local, @local, @void, {@ipv4={0x800, @icmp={{0x8, 0x4, 0x0, 0x0, 0x3c, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local, {[@cipso={0x86, 0xc, 0x3, [{0x1, 0x6, '\x00\x00\x00\x00'}]}]}}, @time_exceeded={0x3, 0x0, 0x0, 0x3, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, @broadcast, @multicast1}}}}}}, 0x0) writev(r2, &(0x7f0000000000)=[{&(0x7f0000000640)="f3", 0xf000}], 0x1) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x4000001, 0x13, r1, 0x48079000) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0x1d, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="180000cae982b926ba2ad405ba4d00f9ffffff000000009c"], &(0x7f0000000040)='GPL\x00', 0x2, 0x1000, &(0x7f00000007c0)=""/4096, 0x41000, 0x61, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1, @void, @value}, 0x94) r4 = dup2(r3, r0) getsockopt$SO_TIMESTAMP(r4, 0x1, 0x23, &(0x7f00000000c0), &(0x7f0000000100)=0x4) r5 = syz_clone(0x80080000, &(0x7f0000000140)="a7f64ef32f2b8df52e116117419448db4aa4447c833dc5b116bc7e1f850d3b090e98846402f46cf0406badbed97f82f82985", 0x32, &(0x7f0000000180), &(0x7f00000001c0), &(0x7f00000004c0)="5dbe48d4fcb0c64c05697cc64c1c509f92524c050d9de8cb93c47dda0f1ee4fe62d05cd15ffea89a3e0aa32cecfabe347d2de7397a5d22cc8f0c7f43ad7bfb3cf988d5ac26869513ae8f74298e1ef3b25e7b6e4596c10e217a2ff7c0c490346e26f63c41389a434e7c0448ea5ce87f58ba3fbd830660f03dcc77d02862f2bea1d4794ba01ee14cbd5a4f8efa4189f918f4a62ead419a9912684433") getpgrp(r5) mmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x3000002, 0x100010, r3, 0x7c2a6000) munmap(&(0x7f0000470000/0x400000)=nil, 0xe06500) ioctl$KVM_GET_VCPU_MMAP_SIZE(r4, 0xae04) r6 = openat$kvm(0x0, &(0x7f0000000040), 0x101800, 0x0) r7 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) r9 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) r10 = ioctl$KVM_GET_VCPU_MMAP_SIZE(r6, 0xae04) mmap$KVM_VCPU(&(0x7f0000005000/0x3000)=nil, r10, 0x280000f, 0x11, r9, 0x0) mmap$KVM_VCPU(&(0x7f0000ffe000/0x2000)=nil, r10, 0x4, 0x1010, 0xffffffffffffffff, 0x0) msync(&(0x7f0000952000/0x2000)=nil, 0x87abbe8d1cc6ad9, 0x6) 20m43.398489581s ago: executing program 4 (id=76): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008a}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = userfaultfd(0x80801) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000600)) ioctl$UFFDIO_COPY(r0, 0xc028aa03, &(0x7f00000000c0)={&(0x7f0000800000/0x800000)=nil, &(0x7f0000199000/0x800000)=nil, 0x800000}) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) getresgid(&(0x7f0000000040), &(0x7f0000000180)=0x0, &(0x7f0000000240)) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='fd=', @ANYRESHEX, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=r2]) stat(&(0x7f0000006b00)='./file0\x00', &(0x7f0000006b40)) stat(&(0x7f0000006bc0)='./file0\x00', &(0x7f0000006c00)) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000006c80), &(0x7f0000006cc0)=0xc) getgid() syz_emit_ethernet(0x4e, &(0x7f0000000340)=ANY=[@ANYBLOB="0180c2000000aaaaaaaa193afffc000000000000000000a13292a8d20b38db1f0e9917edde000000000000fe8000000000000000000000000000aa88009078fc000000fe8000"/83], 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000180), 0xc2903) r4 = syz_open_dev$evdev(&(0x7f0000000180), 0x0, 0x0) ioctl$EVIOCSKEYCODE_V2(r4, 0x80104592, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, "00207d2000000000201b14700c1e0ac74f000000001200000000000900"}) bpf$PROG_LOAD(0x5, 0x0, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000800)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010000000000000000003900000008000300", @ANYRES32=r7, @ANYBLOB="14005a8010000180040001"], 0x30}}, 0x4000) ioctl$FIBMAP(r5, 0x1, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r3, 0x40a85323, &(0x7f0000000000)={{0x80}, 'port1\x00', 0x4b, 0x0, 0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1}) 20m40.597322624s ago: executing program 1 (id=81): bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="b700000012edfffebfa30000000000000703000028feffff620af0fff8ffffff61a4f0ff000000003e0a0000000000002d000000000000007404000001ed0a00250000001700000007040000000000007b0a00fe000000006e04000000000000c6000000000000009500000000000000023bc065b7a379d17cf9333379fc9e84af69912435f1b6a693002e7f3be3619184a0b139d8d4209c8ef1e50b91f32050e436fe275daf51efd601b6482a0800000098efd2a102ee010400006e7a1de4a21f379dbf01de00b1b564fef3bef70548aed0d600c095199fe3ff3128e599b0eaebbdbd7359a48f5b0afc532ef58de3c1b7646cb7798b3e6440c2fbdb00a3e35208b0bbf12cd8dff095edc710e4000000000000009fbe4b61a615c6c57a2b649dc74a1a610643b08d9ec21ead2ed51b104d4d91af25b8123deda8a3658d42ecbf28bf6d8e8afcb913466aaa7f6df70252e79166d876e42f2429d0b11008e59a5923906f88b53987ad1714e72ba7a54f0800000000000000d5f728d236619074d6ebdf098bc908f50ae728a40f9411fe7226a4040b96e37c4f46010400000000c3da29faf75ddd1aa96960bca97af133824b881cc1f62c0f8f8f0e8d76b86f9c45636614786f5a2cb77230a874640dcbe0b20bb77c022d4cab080078fce8c5c81b7037181fc2f18f781aaa6e2957d7e39cc1baddcb7ec6667e699f24e41697ee7ea23e4b29a8b6cc9a1f5a7b3caae05f13792292cb949b3aab06b1e042ff2164d80c605532b18ab1c156b97e58"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x25, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) ioctl$CEC_G_MODE(0xffffffffffffffff, 0x80046108, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000340)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000640), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(0xffffffffffffffff, 0xc0285700, &(0x7f0000000100)={0x9, "5660359c3245d1c42317afad7d48ed51000000000000000100", 0xffffffffffffffff}) syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r4, &(0x7f0000000100)) epoll_pwait2(0xffffffffffffffff, &(0x7f0000000340)=[{}], 0x1, 0x0, 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r3, 0xc0285700, &(0x7f00000001c0)={0x80000, "340b7832ceefdad118cf501922d6974a270000c50f0000002ddc7d00", 0xffffffffffffffff}) ioctl$SYNC_IOC_MERGE(r5, 0xc0303e03, &(0x7f0000000040)={"3c24139ed44aec57f2e2ad238a7b448ed886923c31d4b8affbf514fd00", r5}) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) r6 = syz_open_dev$swradio(&(0x7f0000000dc0), 0x0, 0x2) ioctl$VIDIOC_ENUM_FREQ_BANDS(r6, 0xc0405665, &(0x7f0000000e00)={0x1, 0x5}) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x3) close_range(r3, 0xffffffffffffffff, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000400)=@newtaction={0x70, 0x30, 0x871a15abc695fa3d, 0x0, 0x0, {}, [{0x5c, 0x1, [@m_ctinfo={0x58, 0x1, 0x0, 0x0, {{0xb}, {0x2c, 0x2, 0x0, 0x1, [@TCA_CTINFO_PARMS_DSCP_MASK={0x8, 0x5, 0x3f00}, @TCA_CTINFO_ACT={0x18}, @TCA_CTINFO_PARMS_DSCP_STATEMASK={0x8}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x70}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) 20m39.755596362s ago: executing program 4 (id=83): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0xa, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x7, 0x1, 0xb, 0x9, 0x0, 0x8}}, {}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x6, 0xa, 0x9, 0xfe00, 0xa0}, {0x6, 0x0, 0xb, 0x9, 0x0, 0x8}, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {}, {0x18, 0x8}, {}, {0x15, 0x0, 0x0, 0x76}}], {{0x5, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000040)='GPL\x00', 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000000)={'veth0\x00', 0x10}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0xffffffffffffff2b, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$RDMA_NLDEV_CMD_RES_GET(0xffffffffffffffff, 0x0, 0x20000001) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r4, &(0x7f0000000100)="b8", 0x1, 0x2000c851, 0x0, 0x0) listen(0xffffffffffffffff, 0x20000005) socket$inet6(0xa, 0x6, 0x0) socket$inet6_sctp(0xa, 0x801, 0x84) r5 = socket$inet(0xa, 0x801, 0x84) ioctl$int_in(r5, 0x5452, &(0x7f0000000280)=0x32d) connect$inet(r5, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r5, 0xfffffffd) r6 = accept4(r5, 0x0, 0x0, 0x0) recvmmsg(r6, &(0x7f0000001000), 0x581, 0x40000000, 0x0) setsockopt$inet_sctp6_SCTP_EVENTS(r6, 0x84, 0xb, &(0x7f0000000040)={0xfe, 0x9, 0x2, 0xff, 0xa7, 0x0, 0x1, 0x0, 0x5, 0x8, 0x0, 0x0, 0x2, 0x20}, 0xe) 20m38.857544072s ago: executing program 1 (id=85): r0 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0x15) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') getpid() prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) kcmp(0x0, 0x0, 0x2, 0xffffffffffffffff, 0xffffffffffffffff) r2 = socket$igmp(0x2, 0x3, 0x2) getsockopt$MRT(r2, 0x0, 0xd0, 0x0, &(0x7f00000001c0)) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000180)={'veth0_to_hsr\x00', &(0x7f0000000100)=@ethtool_wolinfo={0x5, 0x9, 0x115, "39dd9f967f37"}}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r6, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3fc, 0x0, 0x32}, 0x9c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r6, 0x84, 0x9, &(0x7f0000000000)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x800, 0x0, 0x0, 0x8a}, 0x9c) r7 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$sock_SIOCOUTQ(r7, 0x5411, &(0x7f0000000040)) bind$inet6(r6, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r6, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r6, 0x84, 0x9, &(0x7f0000000a00)={0x0, @in6={{0xa, 0x4e23, 0x0, @loopback}}, 0x0, 0x0, 0x0, 0x0, 0x54}, 0x9c) 20m36.637480074s ago: executing program 4 (id=86): bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000040)=0xffffffffffffffff, 0x4) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x400, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='./file0/../file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x891018, 0x0) mount$bind(0x0, &(0x7f0000000140)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000100)='./file0\x00', &(0x7f0000000280)='./file0/../file0\x00', 0x0, 0x1adc51, 0x0) mount$bind(&(0x7f00000002c0)='./file0/file0\x00', &(0x7f0000000240)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000440)='./file0/file0\x00', 0x0, 0x12f451, 0x0) mount$bind(&(0x7f00000000c0)='.\x00', &(0x7f0000000080)='./file0/file0/file0\x00', 0x0, 0x80700a, 0x0) 20m34.12687781s ago: executing program 1 (id=87): openat$vcsa(0xffffffffffffff9c, &(0x7f00000001c0), 0x400280, 0x0) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x90381) syz_genetlink_get_family_id$wireguard(0x0, 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xb3d68000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r0, &(0x7f0000000000), 0x651, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000002d00)=ANY=[@ANYBLOB], 0x20}}, 0x0) recvmmsg(r1, &(0x7f0000002a00)=[{{&(0x7f0000000300)=@generic, 0x80, 0x0}, 0x10000}, {{&(0x7f0000000540)=@xdp, 0x80, &(0x7f0000000b00), 0x0, &(0x7f0000000b80)=""/238, 0xee}, 0x3}, {{0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000d00)=""/239, 0xef}], 0x1}, 0x5}, {{0x0, 0x0, &(0x7f0000001080)=[{&(0x7f0000000ec0)=""/132, 0x84}, {&(0x7f0000000f80)=""/211, 0xd3}], 0x2, &(0x7f00000010c0)=""/161, 0xa1}, 0xfffffff1}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000001500)=""/244, 0xf4}, 0xfffffff9}, {{0x0, 0x0, &(0x7f0000002900)}, 0x4}], 0x6, 0x40012100, 0x0) 20m33.68433728s ago: executing program 4 (id=91): socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8915, &(0x7f0000001580)={'syz_tun\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}) r0 = openat$smackfs_change_rule(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000140)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(blowfish)\x00'}, 0x58) r5 = accept4(r4, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f00000001c0)="00940a37", 0x4) sendto$unix(r5, &(0x7f0000000440)="36d9a32e92c131d730b1abaedb51eb66fd2d5b1f7eda4f0e859fdaf294bad70673813533d8bf1c6a77b65a7afdc01b29e73571071a68d5def5d7df839810da130b9348f4d9d407eb478d5bfb298c552a498271af70914e14ba9476fd2a0e47984c25ea20afab3064a748add27a7149e9c4705475bda2ecec9ec30214f28c5e16fd3f50f604f20232c534409e52bff64fc6ca0f5e254083aec2794b7216e002e87caf3d0fa7d04ff9e3b03e81595a04979594ff6ea888bf13de8e8f74c6178e31e47593732ae1a501ad3641d423195a788efdb643f50a8c8b9794a62f7b8dfa0fa7da9d391b92ce2a7f9fe0f9d584a3775f", 0x703d59595f6742a8, 0x800, 0x0, 0x0) recvfrom(r5, &(0x7f00000030c0)=""/4117, 0xffffffffffffffbf, 0x1, 0x0, 0xffffffffffffffb5) sendto$inet(r5, &(0x7f0000000540)="e8", 0x1, 0x80, 0x0, 0x0) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000340)="4e98c8e7e17f5b2065346574581ac113569c3061218529b3211a5823bd18d8f38fe2274a1d85e5804363c8060b627192e3078ed343b0", 0x36}], 0x1) socket$nl_netfilter(0x10, 0x3, 0xc) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f0000004100)="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", 0x2000, &(0x7f00000019c0)={&(0x7f0000000000)={0x50, 0x0, 0x2, {0x7, 0x29, 0x8, 0x400, 0x1, 0x1ff, 0x100, 0xa1, 0x0, 0x0, 0x100, 0x2400000}}, 0x0, &(0x7f0000000280)={0x18, 0x0, 0x0, {0xffffffffffffffff}}, &(0x7f00000003c0)={0x18, 0x0, 0xfffffffffffffff9, {0xfffffff8}}, &(0x7f0000000400)={0x18, 0x0, 0x7, {0xa1}}, &(0x7f0000000580)={0x28, 0xfffffffffffffffe, 0x7, {{0x1, 0x7, 0xa734f38cbd7383cd, 0xffffffffffffffff}}}, &(0x7f00000005c0)={0x60, 0x0, 0xfffffffffffffff9, {{0x971, 0x620c, 0x6, 0x7, 0x5, 0x2, 0x2, 0x7}}}, &(0x7f0000000640)={0x18, 0x0, 0xb7, {0x80000000}}, &(0x7f0000000680)={0x1e, 0x0, 0x1, {'cbc(blowfish)\x00'}}, &(0x7f00000006c0)={0x20, 0x0, 0x6, {0x0, 0x5}}, &(0x7f0000000840)={0x78, 0x0, 0x7, {0x7f, 0x9, 0x0, {0x5, 0x3, 0x10000, 0xe, 0x4cc86890, 0x0, 0x10000, 0xffffffb8, 0x9, 0x2000, 0xfff, 0x0, 0x0, 0x1, 0x3}}}, &(0x7f0000000980)={0x90, 0x0, 0xd, {0x5, 0x2, 0x3, 0x8, 0xd242, 0x6, {0x1, 0xfffffffffffffffe, 0x81, 0x100000000, 0x4, 0x0, 0x1, 0xa24, 0x6, 0xa000, 0x2, 0x0, 0x0, 0x9, 0x2}}}, &(0x7f0000000a40)=ANY=[@ANYBLOB="60000000feffffff80d6f17bf17222500500000000000000010000000000000000000000040000000400000000000000020000000000000000000000ff07000002000000000000000000000000000000080000000200000073797a5f74756e00"], &(0x7f0000001040)={0x528, 0x0, 0x6, [{{0x4, 0x3, 0x200, 0x0, 0x0, 0x0, {0x2, 0xa1, 0x5, 0x1000, 0x2, 0x8, 0x7, 0x8, 0x7, 0xa000, 0x5, 0x0, 0x0, 0x10000, 0x3}}, {0x5, 0x3, 0x2, 0xa, '\\&'}}, {{0x4, 0x1, 0x6, 0x8, 0xfffffffe, 0x8, {0x6, 0x8, 0x4, 0x7, 0x1, 0x7, 0x91c, 0x80000000, 0x101, 0x4000, 0x2, 0x0, 0xee00, 0xfffffff7, 0x3}}, {0x0, 0x8, 0x3, 0xff, '#(\x00'}}, {{0x6, 0x2, 0x4894, 0x2, 0x8, 0x9, {0x4, 0xfffffffffffff801, 0x600000000000000, 0x3, 0x7, 0x8, 0xa66, 0x2, 0x10001, 0x4000, 0xb, 0xee01, 0xee01, 0x8, 0x7}}, {0x6, 0x6, 0xe, 0x9, 'cbc(blowfish)\x00'}}, {{0x1, 0x2, 0x10, 0x7, 0x9, 0x9, {0x5, 0x9, 0x1, 0x2, 0x4d9, 0xfffffffffffffe00, 0x0, 0x7, 0x1, 0x6000, 0x2, 0x0, 0x0, 0x0, 0x9}}, {0x5, 0x7ff, 0x1, 0x61, '$'}}, {{0x0, 0x2, 0x4, 0xc, 0x4b9, 0x8000, {0x2, 0x5, 0x4, 0x5, 0x8e7, 0x5b62e082, 0xfffffffb, 0x1, 0xb2c, 0x1000, 0x3, 0x0, 0xffffffffffffffff, 0x5}}, {0x5, 0x3ff, 0x8, 0x2da4, '*!\xf8%(-@$'}}, {{0x0, 0x2, 0xf4, 0x9, 0x8c2, 0x9, {0x4, 0xf0a, 0x101, 0x5, 0x4d8, 0x2, 0x4, 0x81, 0x6, 0x4000, 0x4, 0x0, 0x0, 0x4, 0x5}}, {0x0, 0xffffffffffffffff, 0x8, 0x0, 'syz_tun\x00'}}, {{0x0, 0x1, 0x4, 0xff, 0x3d, 0xb9c, {0x0, 0x3, 0xffffffffffff6fe2, 0x2, 0x5, 0x1, 0x9, 0x2, 0x5, 0x0, 0x5, 0x0, 0x0, 0xff, 0x10}}, {0x2, 0xbca, 0xe, 0x9, 'cbc(blowfish)\x00'}}, {{0x5, 0x0, 0x1, 0x130, 0x9, 0x9, {0x2, 0x4, 0x15, 0x2, 0xfffffffffffffff0, 0x8001, 0x822, 0x1, 0x2, 0xa000, 0x7, 0x0, 0x0, 0x6}}, {0x0, 0x4, 0x9, 0x6, '}({-!/:^['}}]}, &(0x7f00000016c0)={0xa0, 0x0, 0x8000000000000001, {{0x5, 0x3, 0x800, 0x0, 0x9, 0x800, {0x1, 0x2aa, 0x4, 0x8000000000000001, 0x6, 0x5, 0x10000, 0x6, 0x7, 0xa000, 0x6, 0x0, 0x0, 0x5, 0x1ff}}, {0x0, 0x14}}}, &(0x7f0000001780)={0x20, 0x0, 0xfffffffffffffff5, {0x200, 0x0, 0x5aa}}, &(0x7f0000001880)={0x130, 0x0, 0x1, {0x401, 0xfffffffb, 0x0, '\x00', {0x200, 0x6, 0xffffffffffffe8b0, 0x4, 0x0, 0x0, 0x1000, '\x00', 0x0, 0x3, 0xff, 0x9, {0x1, 0xf4}, {0x9, 0x1ff}, {0x93, 0x8001}, {0x6, 0x5}, 0x2ed, 0xf, 0x8, 0x9}}}}) 20m28.748933631s ago: executing program 4 (id=98): socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet_smc(0x2b, 0x1, 0x0) socket$inet_sctp(0x2, 0x5, 0x84) prlimit64(0x0, 0xe, &(0x7f0000000180)={0xc, 0x597}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f0000000540)={0x8000, 0xba, {0x0}, {}, 0x5, 0x5}) sched_setaffinity(r0, 0x8, &(0x7f0000000200)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0), 0x42280, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_MEMORY_ATTRIBUTES(r3, 0x4020aed2, &(0x7f0000000000)={0x303000, 0x606000, 0x8}) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f00001f0000), 0x1000002, 0x0) r5 = dup(r4) r6 = open(&(0x7f0000000000)='./bus\x00', 0x44542, 0x2) ftruncate(r6, 0xee72) sendfile(r5, r6, 0x0, 0x8000fffffffe) r7 = fcntl$dupfd(r5, 0x0, r6) r8 = dup3(r4, r7, 0x80000) ioctl$TIOCSETD(r8, 0x5423, &(0x7f0000000040)=0x1b) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x200000a, 0x5d031, 0xffffffffffffffff, 0x0) openat$incfs(0xffffffffffffffff, &(0x7f0000000440)='.pending_reads\x00', 0x2, 0x4) userfaultfd(0x801) 20m27.960765124s ago: executing program 32 (id=98): socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet_smc(0x2b, 0x1, 0x0) socket$inet_sctp(0x2, 0x5, 0x84) prlimit64(0x0, 0xe, &(0x7f0000000180)={0xc, 0x597}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f0000000540)={0x8000, 0xba, {0x0}, {}, 0x5, 0x5}) sched_setaffinity(r0, 0x8, &(0x7f0000000200)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0), 0x42280, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_MEMORY_ATTRIBUTES(r3, 0x4020aed2, &(0x7f0000000000)={0x303000, 0x606000, 0x8}) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f00001f0000), 0x1000002, 0x0) r5 = dup(r4) r6 = open(&(0x7f0000000000)='./bus\x00', 0x44542, 0x2) ftruncate(r6, 0xee72) sendfile(r5, r6, 0x0, 0x8000fffffffe) r7 = fcntl$dupfd(r5, 0x0, r6) r8 = dup3(r4, r7, 0x80000) ioctl$TIOCSETD(r8, 0x5423, &(0x7f0000000040)=0x1b) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x200000a, 0x5d031, 0xffffffffffffffff, 0x0) openat$incfs(0xffffffffffffffff, &(0x7f0000000440)='.pending_reads\x00', 0x2, 0x4) userfaultfd(0x801) 20m27.945353172s ago: executing program 1 (id=101): bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000040)=0xffffffffffffffff, 0x4) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x400, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='./file0/../file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x891018, 0x0) mount$bind(0x0, &(0x7f0000000140)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000100)='./file0\x00', &(0x7f0000000280)='./file0/../file0\x00', 0x0, 0x1adc51, 0x0) mount$bind(&(0x7f00000002c0)='./file0/file0\x00', &(0x7f0000000240)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000440)='./file0/file0\x00', 0x0, 0x12f451, 0x0) mount$bind(&(0x7f00000000c0)='.\x00', &(0x7f0000000080)='./file0/file0/file0\x00', 0x0, 0x80700a, 0x0) 20m26.685749867s ago: executing program 1 (id=104): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000002240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@getneigh={0x14, 0x1e, 0x2, 0x70bd25, 0x25dfdbfb, {}, ["", "", "", "", "", "", "", "", ""]}, 0xfffffc49}, 0x1, 0x0, 0x0, 0xc4010}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, 0x0, 0x4000) r2 = socket$xdp(0x2c, 0x3, 0x0) getsockopt$XDP_STATISTICS(r2, 0x11b, 0x8, &(0x7f0000003140), 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000001180)={'#! ', './file0', [{0x20, '^+]$)('}]}, 0x12) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = openat$audio(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$SNDCTL_DSP_CHANNELS(r6, 0xc0045006, &(0x7f0000000080)=0x7f) read$dsp(r6, &(0x7f00000002c0)=""/59, 0x3b) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) r7 = syz_open_procfs(0x0, &(0x7f00000042c0)='mounts\x00') read$FUSE(r7, &(0x7f0000000200)={0x2020}, 0x2020) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000000)='cifs\x00', 0x0, &(0x7f00000001c0)='=\n\x9b\xa1Q\x83\xe9\n@\xf6\"2a\xd7\x1fch\x1a}#\xfa\xe4\n\xdc[\x03\x97\xcd\xf1\xa6b\x9a\x1f\xff\xff\xffIT\xe4\x8c&\xac\xe6:\xc5\xe8\xd9\"\x82\xd5\xeb\x90\xef1:\xba\xc3\xc3\xd3\xad\'\xc44\x17,,\x8dZz\x04\x17-#F\xc7<\xe6\xf5]%gC\x9e\xca\nS\xc3\xc8\x98\xd8\xc8\x9eZ\xa76\x9f\xc2=\xaa\xcet7\xb9\xbd\xd47\xe3\xc8@$8\v\x9f\xfd\xe1!\x11\x19Y\x06J\x8f\x80\xef9Tw8\x1b\xe2\xf3\x85\xd5}\xa5\xb7\xd5|') 20m22.805398535s ago: executing program 1 (id=112): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = socket(0x2, 0x80805, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000100)={0x0}, &(0x7f0000000200)=0xc) r2 = syz_open_dev$vim2m(&(0x7f0000000380), 0x9, 0x2) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f00000003c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x8}}, './file0\x00'}) sendmsg$netlink(r0, &(0x7f0000000480)={&(0x7f0000000000)=@proc={0x10, 0x0, 0x25dfdbfb, 0x40000000}, 0xc, &(0x7f0000000340)=[{&(0x7f00000000c0)={0x18, 0x18, 0x100, 0x70bd2b, 0x25dfdbfb, "", [@typed={0x8, 0xd7, 0x0, 0x0, @ipv4=@rand_addr=0x64010100}]}, 0x18}, {&(0x7f0000001880)={0x1ac, 0x15, 0x2, 0x70bd2a, 0x25dfdbfc, "", [@nested={0x4, 0xb}, @generic="bc1be0a71ad4a2f7f38cc6a698b95fe34e9c9bc845d4956e87d0bafd3f4868786c2d6ff8bfc7972e5d2f7ab82718263814846cde4d68a617f9e506118d17e102d11cce83ce6e770b8ef986c29cefa329af65942e0952d889cf76e7025d5fb5921db169be0d911d8c835eb2e744434efdb8653e7e4e40a20e8e6fb7b9bbe99919972561ba0f912fd52649e48d682166bce6defaa15332bdbef67eabba2cff8ea4df5deae5dad20a034ae7c24456b28b", @typed={0x4, 0xfa}, @nested={0x77, 0x79, 0x0, 0x1, [@generic="51dc553fa7dd295194d38771cb9a0bb69825041198385e1751e0e3c6c444f6db80ddcfafdb41b4227f763f63ed8fe126e6c7d9e81150523dddc22096bfa7976ffceb80b12331eddc46f23f2a454e12f93885e90d2c5aa6225324df3e966b1b716eeeca3905e6601deb44d07d9d1e5fdf0a32ff"]}, @generic="bec703f17045ae92bdd6f5dec783f451961ccab50e45af3bb24e19f82336e9ba29a87f6613e940862fae607bc9ff07a9807c8c6ab89a03b491b62d44f1142c5218fa28ea20e31ba38cdb957aca756dbfaf89b2a60be3a2de3b0d34364b119b99724659b1e3ded9e201fede6575"]}, 0x1ac}, {&(0x7f0000000280)={0x18, 0x2b, 0x300, 0x70bd27, 0x25dfdbfe, "", [@typed={0x8, 0xbd, 0x0, 0x0, @pid=r1}]}, 0x18}], 0x3, &(0x7f0000000400)=[@rights={{0x34, 0x1, 0x1, [r0, r0, r0, r2, r0, r0, r0, r3, r0]}}], 0x38, 0x4}, 0x1) sendmmsg$inet(r0, &(0x7f0000000540)=[{{&(0x7f00000005c0)={0x2, 0x4e21, @remote}, 0x10, &(0x7f0000000600)=[{&(0x7f0000000180)="fd", 0x1}], 0x1}}, {{&(0x7f0000001180)={0x2, 0x4e24, @rand_addr=0x64010101}, 0x10, &(0x7f00000011c0)=[{&(0x7f0000004d00)='f', 0x1}], 0x1}}], 0x2, 0x0) r4 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0xc, &(0x7f0000000240)=@assoc_value={0x0}, &(0x7f0000000080)=0x8) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000300)={r5, 0x5}, 0x8) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x18, 0x4, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000007b3a6d7b850000005000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f00000000c0)='mm_page_alloc\x00', r6}, 0x10) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x5, &(0x7f0000000200)=ANY=[@ANYBLOB="180200000600000000000000000000008500000041000000850000002300000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000100)={r7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) r8 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r8, &(0x7f0000019680)=""/102392, 0x18ff8) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) getpid() gettid() pipe2$watch_queue(&(0x7f0000001180)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) r11 = add_key(&(0x7f0000000000)='id_resolver\x00', &(0x7f0000000100)={'syz', 0x3}, &(0x7f0000000080)="f8", 0x1, 0xfffffffffffffffe) keyctl$KEYCTL_WATCH_KEY(0x20, r11, r9, 0x0) keyctl$KEYCTL_WATCH_KEY(0x20, r11, r10, 0xffffffffffffffff) 20m21.534171645s ago: executing program 33 (id=112): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = socket(0x2, 0x80805, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000100)={0x0}, &(0x7f0000000200)=0xc) r2 = syz_open_dev$vim2m(&(0x7f0000000380), 0x9, 0x2) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f00000003c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x8}}, './file0\x00'}) sendmsg$netlink(r0, &(0x7f0000000480)={&(0x7f0000000000)=@proc={0x10, 0x0, 0x25dfdbfb, 0x40000000}, 0xc, &(0x7f0000000340)=[{&(0x7f00000000c0)={0x18, 0x18, 0x100, 0x70bd2b, 0x25dfdbfb, "", [@typed={0x8, 0xd7, 0x0, 0x0, @ipv4=@rand_addr=0x64010100}]}, 0x18}, {&(0x7f0000001880)={0x1ac, 0x15, 0x2, 0x70bd2a, 0x25dfdbfc, "", [@nested={0x4, 0xb}, @generic="bc1be0a71ad4a2f7f38cc6a698b95fe34e9c9bc845d4956e87d0bafd3f4868786c2d6ff8bfc7972e5d2f7ab82718263814846cde4d68a617f9e506118d17e102d11cce83ce6e770b8ef986c29cefa329af65942e0952d889cf76e7025d5fb5921db169be0d911d8c835eb2e744434efdb8653e7e4e40a20e8e6fb7b9bbe99919972561ba0f912fd52649e48d682166bce6defaa15332bdbef67eabba2cff8ea4df5deae5dad20a034ae7c24456b28b", @typed={0x4, 0xfa}, @nested={0x77, 0x79, 0x0, 0x1, [@generic="51dc553fa7dd295194d38771cb9a0bb69825041198385e1751e0e3c6c444f6db80ddcfafdb41b4227f763f63ed8fe126e6c7d9e81150523dddc22096bfa7976ffceb80b12331eddc46f23f2a454e12f93885e90d2c5aa6225324df3e966b1b716eeeca3905e6601deb44d07d9d1e5fdf0a32ff"]}, @generic="bec703f17045ae92bdd6f5dec783f451961ccab50e45af3bb24e19f82336e9ba29a87f6613e940862fae607bc9ff07a9807c8c6ab89a03b491b62d44f1142c5218fa28ea20e31ba38cdb957aca756dbfaf89b2a60be3a2de3b0d34364b119b99724659b1e3ded9e201fede6575"]}, 0x1ac}, {&(0x7f0000000280)={0x18, 0x2b, 0x300, 0x70bd27, 0x25dfdbfe, "", [@typed={0x8, 0xbd, 0x0, 0x0, @pid=r1}]}, 0x18}], 0x3, &(0x7f0000000400)=[@rights={{0x34, 0x1, 0x1, [r0, r0, r0, r2, r0, r0, r0, r3, r0]}}], 0x38, 0x4}, 0x1) sendmmsg$inet(r0, &(0x7f0000000540)=[{{&(0x7f00000005c0)={0x2, 0x4e21, @remote}, 0x10, &(0x7f0000000600)=[{&(0x7f0000000180)="fd", 0x1}], 0x1}}, {{&(0x7f0000001180)={0x2, 0x4e24, @rand_addr=0x64010101}, 0x10, &(0x7f00000011c0)=[{&(0x7f0000004d00)='f', 0x1}], 0x1}}], 0x2, 0x0) r4 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0xc, &(0x7f0000000240)=@assoc_value={0x0}, &(0x7f0000000080)=0x8) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000300)={r5, 0x5}, 0x8) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x18, 0x4, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000007b3a6d7b850000005000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f00000000c0)='mm_page_alloc\x00', r6}, 0x10) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x5, &(0x7f0000000200)=ANY=[@ANYBLOB="180200000600000000000000000000008500000041000000850000002300000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000100)={r7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) r8 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r8, &(0x7f0000019680)=""/102392, 0x18ff8) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) getpid() gettid() pipe2$watch_queue(&(0x7f0000001180)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) r11 = add_key(&(0x7f0000000000)='id_resolver\x00', &(0x7f0000000100)={'syz', 0x3}, &(0x7f0000000080)="f8", 0x1, 0xfffffffffffffffe) keyctl$KEYCTL_WATCH_KEY(0x20, r11, r9, 0x0) keyctl$KEYCTL_WATCH_KEY(0x20, r11, r10, 0xffffffffffffffff) 20m21.420492953s ago: executing program 3 (id=115): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) r4 = openat$vmci(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$IOCTL_VMCI_INIT_CONTEXT(r4, 0x7a0, &(0x7f0000000180)) r5 = socket$kcm(0xa, 0x2, 0x0) setsockopt$sock_attach_bpf(r5, 0x29, 0x38, 0x0, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_emit_vhci(&(0x7f0000000380)=ANY=[@ANYBLOB="040e2408570c"], 0x27) syz_open_dev$dri(0x0, 0x1ff, 0x0) syz_open_dev$sndctrl(&(0x7f0000000080), 0x1, 0x686a00) sendmsg$key(0xffffffffffffffff, &(0x7f0000000040)={0x3, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)={0x2, 0x4, 0x0, 0x2, 0x5, 0x0, 0x0, 0x0, [@sadb_x_nat_t_port={0x1, 0x15, 0x4e20}, @sadb_sa={0x2, 0x1, 0x227, 0x0, 0xb, 0x7a, 0x3, 0x40000000}]}, 0x28}, 0x1, 0x7}, 0x4000091) openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x101080, 0x0) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x161281, 0x0) ioctl$TCSETS(r6, 0x40045431, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, "a05c7b5d00008023e9c5bcf5fb7700"}) r7 = syz_open_dev$sg(&(0x7f00000003c0), 0x0, 0x5) writev(r7, 0x0, 0x0) 20m19.703187092s ago: executing program 3 (id=118): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000003900)=ANY=[@ANYBLOB="620af8ff0c200021bfa100000000000007010000f8ffffffb702000003000000bd120000000000008500000006000000b70000000000000095000000000000003faf4f1e7f2aa3d9b18ed81c0c869b51ec6c0af4e0e4a9446c7670568982b4e020f698393aa0f3881f9c24aa56f15199fad0093c59d66b5ece9f36c70d0f13905ea23c22624c9f87f9793f50bb546040677b0c5077da80fb982c1e9400e693146cea484a415b76966118b64f751a0f241b07080008002d75593a286cecc93e64c227c95aa0b784625704f07a72c234664c0af9360a1f7a5e6b607130c89f18c0c1089d8b853289e01aa27ae8b09e00e79ab20b0b8e1148f49faf2ad0000000000000006fa03c6468972089b302d7bf6023cdcedb5e0125ebbc08dee510cb2364149215108333719acd97cfa107d40224edc5465a932b77e74e802a0d42bc6099ad2300000080006ef6c1ff0900000000000010c63a949e8b7955394ffa82b8e942c89112f4ab87b1bfeda7be586602d985430cea0162ab3fcf4591c926abfb0767192302000000b0eea24492a660583eecb42cbcd3de3a83209da17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c95c25a573dc2edcaea2b1a52496dfcaf99431412fd134a996382a1a04d5bb924cfe5f3185418d605ffff9c4d2ec7c32f2095e63c80aff9fa740b5b7632f32030916f89c6dad7603f2ba2a790d62d6faec2fed44da4928b30142ba11de6c5d50b83bae613402216b5054d1e7c13b1355d6f4a8245ffa4997da9c77af4c0eb97fca585ec6bf5af51d564beb6d952aab9c70764b0a8a7583c90b3433b809bdb9fbd48bc873495cbff8a326eea31ae4e0f7505ebf6c9d13330ca005ace1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223a0eb4fa39f6b5c02e6d6d90756ff57902a8f57000000009700cf0b4b8bc2294133000000000000000000030000000000000000000000000010008bc0d9559711e6e8861c46495ba585a4b2d02edc3e28dd271c896249ed85b980680b00002b435ac15fc0288d9b2a169cdcacc413038dafb7a2c8cb482bac0ac502d9ba96ffffff7f0000100000000000007d5ad897ef3b7cda42013d53046da21b40216e14ba2d6ad5656bfff17addaedab25b30002abbba7fa725f38400be7c1f001b2cd317902f19e385be9e48dccff729433282830689da6b53b263339863297771429d120000003341bf4abacac95900fca0493cf29b33dcc9ffffffffffffffd39fec2271ff01589646efd1cf870cd7bb2366fde41f94290c2a5ff870ce41fd3467decb05cfd9fcb32c8ed1dbd9d10a64c1083d5e71b5565b1768ee58969c41595229df17bcad70fb4021428ce970275d13b78100788f11f76161d46ea3abe0fa4d30dc94ef241875f3b4ce0232fcea69c271d7fa29822aea68a660e717a04becff0f719197724f4fce1093b62d7e8c7123d8ec571be54c72d978cf906df0042e36acd37d7f9e119f2c06f815312e0cfe222a06f56dd022c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef2ae582786105c7df8be5877050c91301bb997316dbf17866fb84d4173731efe895ff2e1c5560926e90109b598502d3e959efc71f665c4d75cf2458e3546c1c776da64fb5abee0acfd235f2f4632c9062ece84c99a061887a20639b41c8c12ee86c50804042b3fb5aac518a75f9e7d7101d5e186c489b3a06fb99e0aa7f23a054de2f4d92d6bd72ee2c9fdc75aaaf1e3e483b4ad05573af40326993947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f54c2d3335457acf37331766e472391e358c3b377327ac9ecc34f24c9ae153ec60ac0694dc55bff9f5f45f90400000000000000d6b2c5ea1393fdf24285bf16b99c9cc0ad1857216f1a985f369191ae954febb3df464bfe0f7f3ee9afe7befb89d2777399f5874c553aeb3729cffe86e66964ae09bb6d163118e4cbe024fd4500f8ff0700000000cc9d8046c216c1f895778cb25122a2a9f9b444aeadea2a40da8daccf080842a486721737390cbf3a74cb2003016f1514216bdf57d2a40d40b51ab63e96ec8485b3b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde8a168c3f5db2fea6f26e4a4304e50c349f4f9ecee27defc93871c5f99b355b72d538ba4958ea8e4aa37094191e10096e7e60fc3541a2c905a1a95e9571bf38ae1981c4238ecaee6f75cd0a6881bd1517a8250ddc8674152f94e3a409e2a3bce109b60000000000000000d6d5210d7503000000a87a27602b81f76386f1535bef1497f92186086e29c6bc5a1fad6ec9a31137abf9a404abde7750898b1bd627e873f8703be8672d70d1ab57075228a9f46ed9bd1f08fb8191bbab2dc51de3a61f0868afc4294859323e6c257a45319f18101288d139bd3da20fed05a8fe64680b0a3fc22dd70400000000946912d6c98cd1a9fbe1e7d58c08acaf30235b918a31d2eca55f74a23641f61f2d5b308cf0d031b0c7f0ced69993e9960ff5f76015e6009556237badf4e7965bbe2777e808fcba821aa8e8c5c39609ff854352cb4900000000000000000000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66418d169fc03aa188546b3ad2a182068e1e3a0e2505bc7f41019645466a53f1c96e0d4b3bc19faa5449209b083dbd334b47f067bbab40743b2a42010082008df75cf43f8ecc8d3726602111b40e761fd21081920382f14d12ca3c3431ee97471c7868dcda7eaa69eb7f7f80572fdd11bb1d0d1280fbc22bf73468788df51710d7d31c632fc5ed1762eb0b428ee751c47d8e894f745a868404a0bf35f0121008b722b1eaa6aedfa1bf2e7ccb2d61d5d76331945ecefa26b8471d42645288d7226bbd9ccd628ab84875f2c50ba891cea592b0430a537a395dc73bda367bf12cb7d81691a5fe8c47be395656a297e9df0e71f96756ea5cce7daac4be290159f6bcd75f0dda9de5532e71ae9e48b0ed0254a83100000000f6fbb869604d51a36a54c832e45b2569dc0d90b075225fde44c4e0973171ad47d6b0fdf9743af932cd6db49a47613808bad959710300000000000000832d0a45fa4242e24c7e800003c9e8095e02985f28e678f66422436f949e2ab8f162d7e3f855e378f4a1f40b0c6fb2d4b205a800b6d713acebc5b014e61a543a5a194f9ac18d76b5440e3b1a569e7397f6cafa86966d7ba19e720413267a6ccea9c439671d2c680f2753ca184eeeb843450368acb4383a01d25eb3d1e23e0f2645d1cdfa9fa410632f95a5f622f851c66ee7e30393cd7a4d67ff2a49c4f93c0984b5c2d4523497e4d64f95f08493564a1df87111c9bf3194fef97dcecc467ace45feeb685c5870d05f88a0f463db88d377442e1349acaf766218b54a9d624778e1c4e064c98e494198276eb2df7766411bef0ebb5000000000006065d635b0b7a00ee767221d8af9753387e0cd8d718f54a29df6eba3bd4c440e6e2172e3fcc01b8babb757b5c59217b80d0db3ba582814a604e4ef7a803e9ca7c85b35c9b93a9e0885e238b44ae1c2e64cce3b27083b8246829e64056000302bffff15405bd5f2eba20000000000000000000000000000000000009a9823fd8fbc5aa16509945ed032b48ea12d8e0588dc52702e4084913a06d468d0928bad76d697e1f85ab030e788d38788ee5b5428d4a971cc97db9fd231088e570735ce129e7e77fc2777692664a1488fd8d6dff4dad618fd54f529d4555c6507009ee69dd1bc55258789b24052137e9637f3efbab71720f88c3c44b3b7486f979e8a3174b531f573fe0e5239c000be2733c49546f6e8a9175ec6f14dbf72cac91643b2fd99c29eca28a3c2e60d5e5b8795fae16a7c3ea57e728eca35eaf0155a39f97580e079175426c088a0208040982a0000000000000000000000000051ceaaf0159fe61f2eade7603d0a7a56fb09cd119ac06adb6597155ae47846892bb423c024d8cbe9240b71ec6dc2124d3a19e2d714b273d95d1d3aa737cb04a33615ff2a730e51067d5d675d7122361c37c61a43b5afd865b60d4cae891b73220f17d25985a7f76834995e53a93a1c7b9eef267df691ca983a0b15bda7f6c5c1ca7aa50261a3089a1ebf0734c9b07e8951ff023263ad5aed8cfb49b49e128c697724c057d22c5df5aef27ce3db11d5ad5527d149d076e1a87e2df27c0cb8a67ad026bf953e88f10447e125c2c0f1aebee1f3390a9e3ddad4e2a6e0f6e4569fdefa19e870e04acf9493b963f98e23cfc665e4f465fa3f801e1957c399e45f61d3459b1c606204368bb931345af2823c487d2fd99db6ea6e008e7ffa06ca861551189d155bd077a79fe2c7e961352e56824f727d21d41eae78bfec4a2d7a7edbc8ef958c5ea599f7c25bf71c2340558aa12fdd24a88aaad5921aee7dae6a2f3009d9cb43ab4898d0f0aa565431b6abe585d75db04d1c9ba0b9de4ae8b0d3132bc6810cc9a693979f55174a72e1df9fdef35bc470f9e6e591982757f45c52c645d891bf63bb21fb66926ebe1a8525611fc3e8bb8795c36dc2a86b5ab46ff33cc74f61751b2dae92676db85c8d0c721b7ea4544bf51c95c86fcac1f434d09d1ee4928aafe23de66fed972e0dddfb33f64e48701b049239e7f552d816441d11c4c2647c014462344359198d97c4b6e9ed31ca18987b64de079b2bed641e8a92f13ca70844c65cb423d01950b0ebf44bd28e09c05d9ae5dd689fb880fb18d042219f5ac60c3a03b085abf3e8e3efc842a8d328733461f04c99607061c65ed14c61322a5ac2d371a95b8ad867ec92d13a4fa4ae033a09673866cd77f4bcdaaa05207166b19a8758d8855400d8c6a7242dc207251e8797eca24ea4f487663e60f2f5e1f1424958fd148f846830e88a42d93e1fe9c0b4a4a268921738938aa9f3cb3811ac87c54c8ebc8bcfb4613cc3a997ff1579edbd4ade8020e3ad001b072b1a751b588ac4639f35a58e00a50c0270608c7a7f10132b1c25b9ea81232fbef665f6212f875b2a0000000000000000000000000000cf7b6c4ba9bec153d6834bfef080df374703a8ff56a63ec1fe5f2e05a79e3cace7283dd68d41e94420c325fe4dae144fde5ec25a87d625cab20753a77b323fa3783c8b675859b9012647885a242adfee2fe812ecbe5191e0a15142f7349e7627cc39d724e2e34e7a24154f26ae3125b36d0504965295d0453902ac7079b11a3a1e655e482331e3dc35b2e7e4e3ea99064fe5b9c8ae0ca3e5fd653f3286a99d81ce4eba765c38d097391ad4babac38ce5b4344e24a361cd54e5"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x2e) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r0}, 0x10) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r4, 0x1, 0x25, 0x0, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x11, 0x0, 0x0) connect$inet(r4, &(0x7f0000000480)={0x2, 0x0, @remote}, 0x10) sendmmsg(r4, &(0x7f0000007fc0), 0x800001d, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000005c0)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast2, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x29}, {0x1, 0x0, 0x7, 0x0, 0x0, 0x2, 0xffffffffffffffff}, {0x1000000000, 0x2000000000000000, 0x0, 0xffffffffffffffff}}}, 0xb8}}, 0x4004) r5 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) write(r5, 0x0, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=@updpolicy={0xb8, 0x19, 0x1, 0x70bd2c, 0x0, {{@in=@multicast1=0xe0000002, @in, 0x0, 0x0, 0x0, 0x0, 0xa, 0x20}, {}, {0x0, 0x0, 0x0, 0xfffffffffffffffe}}}, 0xb8}}, 0x0) io_setup(0x5, &(0x7f0000000040)) socket$nl_xfrm(0x10, 0x3, 0x6) r6 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r6, 0x29, 0x2a, &(0x7f0000fca000)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) setsockopt$inet6_MCAST_MSFILTER(r6, 0x29, 0x30, &(0x7f0000000240)=ANY=[@ANYBLOB="01000000000000000a0000000000ff00ff010000000000000000000000000001000001000000000000000000e0ff00000000000000bd0000000000000000000000e4ec010000000040000000000000000000000000000000000000013da51fd47aa2e2f70000000000000000000000000000000000000000000000000000000000000067ff0000000000000005"], 0x310) 20m12.664470258s ago: executing program 3 (id=126): bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) readv(0xffffffffffffffff, 0x0, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x6, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000540)={0x26, 'hash\x00', 0x0, 0x0, 'sha512-generic\x00'}, 0x58) r4 = accept4(r3, 0x0, 0x0, 0x0) sendmmsg$inet(r4, &(0x7f0000001200)=[{{0x0, 0x0, &(0x7f0000000440)=[{&(0x7f00000003c0)="ba", 0x1}, {&(0x7f00000005c0)='0', 0xcea40}], 0x2}}], 0x1, 0x0) r5 = socket$caif_stream(0x25, 0x1, 0x0) openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000), 0x20000, 0x0) r6 = syz_open_procfs(0x0, 0x0) r7 = syz_clone3(0x0, 0x0) sched_setaffinity(r7, 0x8, &(0x7f0000000440)=0x1ff) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x12, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000000000000000000000711216000000000095"], &(0x7f0000000900)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @cgroup_sock_addr=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2, @void, @value}, 0x94) ioctl$FS_IOC_ADD_ENCRYPTION_KEY(r6, 0x541b, 0x0) sendmmsg$inet(r5, &(0x7f0000000100)=[{{&(0x7f0000000000)={0x2, 0x4e24}, 0x10, &(0x7f0000000480)=[{&(0x7f0000000140)='P', 0x1}, {&(0x7f0000000080)="6356c5cf1b3419574ea180a6d8edd7d1a07d86fc8085eed3d9d5", 0x1a}], 0x2}}], 0x1, 0x0) 20m10.994215482s ago: executing program 3 (id=131): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='./file0/../file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x891018, 0x0) mount$bind(0x0, &(0x7f0000000140)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000100)='./file0\x00', &(0x7f0000000280)='./file0/../file0\x00', 0x0, 0x1adc51, 0x0) mount$bind(&(0x7f00000002c0)='./file0/file0\x00', &(0x7f0000000240)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000440)='./file0/file0\x00', 0x0, 0x12f451, 0x0) mount$bind(&(0x7f00000000c0)='.\x00', &(0x7f0000000080)='./file0/file0/file0\x00', 0x0, 0x80700a, 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r2, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff097b000008003950323030302e4c"], 0x15) getresuid(&(0x7f0000000180), &(0x7f00000002c0), &(0x7f0000000380)=0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX, @ANYBLOB=',privport,access=', @ANYRESDEC=r3]) umount2(&(0x7f0000000040)='.\x00', 0x2) 20m9.004978732s ago: executing program 3 (id=133): socket$rds(0x15, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x1}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001c40)={0x0, 0x3, &(0x7f0000001300)=ANY=[@ANYBLOB="1800000001000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r3 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup\x00', 0x0, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001c40)={0x8, 0x3, &(0x7f0000001300)=ANY=[], &(0x7f0000001200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r5 = bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000180)={r4, r3, 0x0, 0x0, @val=@tracing={0x0, 0x2}}, 0x40) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000240)={r5, 0x41, &(0x7f0000000100)}, 0x10) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r6, 0x84, 0x72, &(0x7f0000000240)={0x0, 0x0, 0x20}, 0xc) bind$inet6(r6, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r6, &(0x7f0000000180)="1a", 0x34000, 0x0, &(0x7f0000000480)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendmmsg$sock(r6, &(0x7f0000000300)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f00000000c0)=' ', 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000280)="a6", 0x1}], 0x1}}], 0x2, 0x40000) shutdown(r6, 0x1) r7 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r8 = syz_pidfd_open(r7, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(r8, 0xff04, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x10, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffff97, 0x10, &(0x7f00000000c0), 0xffffffffffffffc2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) 20m3.609326759s ago: executing program 3 (id=141): r0 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301) ioctl$USBDEVFS_DISCONNECT_CLAIM(r0, 0x8108551b, &(0x7f0000000380)={0x0, 0x0, "5a77bd318786aeb879ca62cdab2a0000000086d85b25a5665a3247e500f61681905db88235f8a5447dd2a2ed6e91626f068881e50f6853772b21a100efb76cba37ff3111d6847e8b9398a646717af75fc008daefba68e6222103472bc55704cdb72b4b996ed831f3b802549db3a8ffff7d34171113d806726615380fe65a6a0a72e1ac2b60bd6276fd8bb6363d10f70da60fd53ded22c87eb2be010e4a62fb73c33424b437bb192c9d06ea6ed04983fe5c5ca033dfce0a82575ef14eee686be0fc58e384f93a13f4e8bbf599394baea3a9ca1864f0a35d6cc38fca32ad6b39905a9727d2001457df7be7e1aefe363590d1f600"}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$USBDEVFS_REAPURBNDELAY(r0, 0x4008550d, &(0x7f0000000040)) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000010}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0}, 0x18) r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/profiling', 0x440002, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0xf, 0x0, 0x0) r6 = socket$netlink(0x10, 0x3, 0x4) writev(r6, &(0x7f00000000c0)=[{&(0x7f0000000180)="580000001500add427323b470c45b45602067fffffff81004e22030d00ff0028925aa8002000eaa57b00090080020efffeffe809020000ff0004f03a04000800ffffffffffffffffffffffe7ee0000000000000000020000", 0x58}], 0x1) finit_module(r5, 0x0, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf5", @ANYBLOB="0000000000008000280012800a00010076786c616e"], 0x50}}, 0x4000000) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000080)={0xd, 0x4, &(0x7f0000001300)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x9, 0x1, 0xa0}]}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) ioctl$USBDEVFS_CLEAR_HALT(r0, 0xc0105502, &(0x7f0000000340)={0x1, 0x1}) 20m1.699567082s ago: executing program 34 (id=141): r0 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301) ioctl$USBDEVFS_DISCONNECT_CLAIM(r0, 0x8108551b, &(0x7f0000000380)={0x0, 0x0, "5a77bd318786aeb879ca62cdab2a0000000086d85b25a5665a3247e500f61681905db88235f8a5447dd2a2ed6e91626f068881e50f6853772b21a100efb76cba37ff3111d6847e8b9398a646717af75fc008daefba68e6222103472bc55704cdb72b4b996ed831f3b802549db3a8ffff7d34171113d806726615380fe65a6a0a72e1ac2b60bd6276fd8bb6363d10f70da60fd53ded22c87eb2be010e4a62fb73c33424b437bb192c9d06ea6ed04983fe5c5ca033dfce0a82575ef14eee686be0fc58e384f93a13f4e8bbf599394baea3a9ca1864f0a35d6cc38fca32ad6b39905a9727d2001457df7be7e1aefe363590d1f600"}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$USBDEVFS_REAPURBNDELAY(r0, 0x4008550d, &(0x7f0000000040)) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000010}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0}, 0x18) r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/profiling', 0x440002, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0xf, 0x0, 0x0) r6 = socket$netlink(0x10, 0x3, 0x4) writev(r6, &(0x7f00000000c0)=[{&(0x7f0000000180)="580000001500add427323b470c45b45602067fffffff81004e22030d00ff0028925aa8002000eaa57b00090080020efffeffe809020000ff0004f03a04000800ffffffffffffffffffffffe7ee0000000000000000020000", 0x58}], 0x1) finit_module(r5, 0x0, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf5", @ANYBLOB="0000000000008000280012800a00010076786c616e"], 0x50}}, 0x4000000) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000080)={0xd, 0x4, &(0x7f0000001300)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x9, 0x1, 0xa0}]}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) ioctl$USBDEVFS_CLEAR_HALT(r0, 0xc0105502, &(0x7f0000000340)={0x1, 0x1}) 15m37.544315224s ago: executing program 5 (id=99): r0 = socket$tipc(0x1e, 0x5, 0x0) r1 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r1, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0x2}}, 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="2e00000010008188040f80ec59acbc0413a1f8480d0000005e140602000000000e000a00100000000280", 0x2a}, {&(0x7f0000000380)="5ec13721", 0x4}], 0x2}, 0x2000c040) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) socket$netlink(0x10, 0x3, 0x0) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r7 = socket$unix(0x1, 0x1, 0x0) bind$unix(r7, &(0x7f0000000080)=@file={0x1, './file0\x00'}, 0x6e) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r6}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x13, 0x4, &(0x7f0000000340)=ANY=[@ANYBLOB="1802000000000000000000000600000085000000b50000009500000000000000"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) openat$tun(0xffffffffffffff9c, 0x0, 0x40241, 0x0) sendmsg$ETHTOOL_MSG_EEE_SET(0xffffffffffffffff, 0x0, 0x1) bind$inet6(0xffffffffffffffff, 0x0, 0x0) write$cgroup_int(r5, &(0x7f0000000200), 0x806000) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x2, 0x11, r4, 0x0) ioctl$SIOCGSTAMPNS(r0, 0x8907, &(0x7f00000002c0)) socket$inet_mptcp(0x2, 0x1, 0x106) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r8, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r8, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[@ANYRES16=r3, @ANYRES32=0x0, @ANYBLOB="40c200000000000018000c00028008000200", @ANYRES8, @ANYBLOB="08000300", @ANYRES32=0x0, @ANYBLOB="0123eb1e9b5ece249fa127b366d308f72eb50200fd71aa056e02ed32fa3900000f0fde4da662f2fd9f6c33e8cfa65f97b2f90c0b5e5d718ca6ea98df5ca9b4aa7fffffffffffffff618ce2a6bd1fa71a91b0005c10af083957a3dce48e78479986bf2c20"], 0x40}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="2000000010000108000200"/20, @ANYRES32=0x0, @ANYBLOB="fe00100000000000"], 0x20}}, 0x0) 15m32.751390691s ago: executing program 5 (id=472): openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r3}, 0x10) r4 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r4, 0xc04064a0, &(0x7f00000003c0)={0x0, &(0x7f0000000300)=[0x0], 0x0, 0x0, 0x0, 0x1}) r5 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r5, 0xc00c643c, &(0x7f0000000300)) 15m29.817118727s ago: executing program 5 (id=478): bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0xe, 0xe, &(0x7f0000001740)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb=0x4, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x9}, 0x10, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) socket$key(0xf, 0x3, 0x2) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r2, 0x6, 0xe, &(0x7f0000000040)={@in6={{0xa, 0x0, 0x0, @ipv4}}, 0x0, 0x0, 0x15, 0x0, "94ac873f1692ddbc702d69407eca10eedeb5dcd05446c2b07ec23159acd334e8058957bcee65a1721541ac7db2be2af67fd949859fc48a758e5d9ec2dc28f3fb330ea6b887a32239b1f039ba45bc1bc1"}, 0xd8) setsockopt$inet6_tcp_TCP_MD5SIG(r2, 0x6, 0xe, &(0x7f0000000240)={@in6={{0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}}, 0x0, 0x0, 0x3d, 0x0, "2e52f463273974700fa6345b251d8975a34ce626db167dbf6e168d9e14bf1a87e7d0c4f843ff6a8a6123980b1debd6932fac4bcaeba676b4b24488db18f9f12d733e613a3a1ff563aca36e8f20b950a7"}, 0xd8) setsockopt$inet6_tcp_TCP_MD5SIG(r2, 0x6, 0xe, &(0x7f0000000140)={@in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x0, 0x19, 0x0, "41d2989d48db1764d991250db913d6dfbb2f5caa40b6ed2b6456aa8bb8a90f0c731f71573c64d277eeebae965ed6036a31420eb51c739e71e500c814c07f5659e1e1721bccc9b4894588115461cf0776"}, 0xd8) close(r2) mknod(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) mount(&(0x7f0000000140)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000100)='./file0\x00', &(0x7f0000000000)='btrfs\x00', 0x0, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) mknod$loop(0x0, 0x0, 0x1) ioctl$SCSI_IOCTL_SEND_COMMAND(0xffffffffffffffff, 0x1, 0x0) syz_io_uring_setup(0x88f, 0x0, &(0x7f0000000000)=0x0, 0x0) syz_io_uring_submit(r3, 0x0, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) r4 = socket$nl_route(0x10, 0x3, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000009c0)=@newqdisc={0x1a0, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0xe}, {0xffff, 0xffff}, {0x0, 0x6}}, [@qdisc_kind_options=@q_red={{0x8}, {0x16c, 0x2, [@TCA_RED_FLAGS={0xc, 0x4, {0x7, 0xf}}, @TCA_RED_STAB={0x104, 0x2, "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"}, @TCA_RED_EARLY_DROP_BLOCK={0x8, 0x5, 0x7}, @TCA_RED_MAX_P={0x8, 0x3, 0x5}, @TCA_RED_MARK_BLOCK={0x8, 0x6, 0x4}, @TCA_RED_MARK_BLOCK={0x8, 0x6, 0x6c00}, @TCA_RED_PARMS={0x14, 0x1, {0xffffffff, 0x4, 0x4, 0xa, 0xa, 0xa}}, @TCA_RED_FLAGS={0xc, 0x4, {0x8, 0x4}}, @TCA_RED_FLAGS={0xc, 0x4, {0x8, 0x7}}, @TCA_RED_FLAGS={0xc, 0x4, {0x8, 0xf}}]}}, @TCA_RATE={0x6}]}, 0x1a0}}, 0x0) 15m27.16999079s ago: executing program 5 (id=481): sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000240)=[{0x20000000, 0xff00, 0x0, 0x0, 0x0, 0xd8}], 0x1, 0x0) r0 = socket$inet6(0xa, 0x3, 0x6) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000180)={{{@in6=@empty, @in=@local, 0x0, 0x0, 0x8000, 0x0, 0x2}, {0x4, 0x100000000, 0x3ffffffff, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0xe086}, {0x0, 0x0, 0xfffffffffffffffe}, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, {{@in=@loopback, 0x0, 0x3c}, 0xa, @in=@empty, 0x0, 0x5, 0x2, 0x0, 0x2000000}}, 0xe8) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c) gettid() timer_create(0x0, 0x0, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x6, 0x10, &(0x7f00000008c0)=ANY=[], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sysvipc/shm\x00', 0x0, 0x0) lseek(r2, 0x164, 0x0) r3 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$TCPDIAG_GETSOCK(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)={0x54, 0x12, 0x1, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, {0x0, 0x4e22, [0x0, 0xffffffff], [], 0x0, [0x1, 0x3]}}, [@INET_DIAG_REQ_BYTECODE={0x8, 0x3, "11000000"}]}, 0x54}}, 0x20004010) syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), 0xffffffffffffffff) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r4, 0x5423, &(0x7f00000000c0)=0xf) r5 = fcntl$dupfd(r4, 0x0, r4) ioctl$TCFLSH(r4, 0x400455c8, 0x0) ioctl$TIOCSTI(r5, 0x5412, &(0x7f00000001c0)=0x1) ioctl$TIOCSTI(r4, 0x5412, &(0x7f0000000100)=0x4) r6 = socket$packet(0x11, 0x3, 0x300) getsockopt$packet_int(r6, 0x107, 0x15, 0x0, &(0x7f0000000200)) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) 15m23.398920362s ago: executing program 5 (id=485): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000240)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0x17ef, 0x60ee, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0xc}}}}}]}}]}}, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x8, &(0x7f0000006680)) creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) pipe2$9p(&(0x7f0000001900)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) socket$kcm(0x2, 0x5, 0x84) write$P9_RVERSION(r2, &(0x7f0000000500)=ANY=[@ANYBLOB="1500000065ffff048000000800395032303030"], 0x15) r3 = dup(r2) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="1805000000000000000000004b64ffec850000007d000000850000000700000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) epoll_create(0x47f) r5 = socket$can_raw(0x1d, 0x3, 0x1) getsockopt$CAN_RAW_FD_FRAMES(r5, 0x65, 0x8, &(0x7f0000004400), &(0x7f0000002140)=0x4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r6, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r6, &(0x7f0000000140)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r6, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r6, 0x11a, 0x2, &(0x7f0000000180)=@gcm_128={{0x304}, "967cdef875f8738a", "902295394fc6d0b5aa39eb14eac2d9a2", "cabd27f3", "393bedfa875e7d07"}, 0x28) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00'}, 0x10) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) write$FUSE_BMAP(r3, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r3, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000180)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[{@cache_mmap}], [], 0x6b}}) truncate(&(0x7f0000000240)='./file0\x00', 0x206b12) open(&(0x7f0000000340)='./file0\x00', 0x600, 0x69) r7 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r7, &(0x7f0000000940)={0x0, 0xe, &(0x7f0000000000)=[{&(0x7f00000001c0)="d8000000180081054e81f782db44b904021d005c06007c09e8fe55a10a0015400500142603600e1208000b0000000401a8001600a400014002000000036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360d070100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9701", 0xd8}], 0x1}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) 15m8.560140985s ago: executing program 35 (id=485): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000240)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0x17ef, 0x60ee, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0xc}}}}}]}}]}}, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x8, &(0x7f0000006680)) creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) pipe2$9p(&(0x7f0000001900)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) socket$kcm(0x2, 0x5, 0x84) write$P9_RVERSION(r2, &(0x7f0000000500)=ANY=[@ANYBLOB="1500000065ffff048000000800395032303030"], 0x15) r3 = dup(r2) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="1805000000000000000000004b64ffec850000007d000000850000000700000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) epoll_create(0x47f) r5 = socket$can_raw(0x1d, 0x3, 0x1) getsockopt$CAN_RAW_FD_FRAMES(r5, 0x65, 0x8, &(0x7f0000004400), &(0x7f0000002140)=0x4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r6, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r6, &(0x7f0000000140)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r6, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r6, 0x11a, 0x2, &(0x7f0000000180)=@gcm_128={{0x304}, "967cdef875f8738a", "902295394fc6d0b5aa39eb14eac2d9a2", "cabd27f3", "393bedfa875e7d07"}, 0x28) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00'}, 0x10) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) write$FUSE_BMAP(r3, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r3, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000180)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[{@cache_mmap}], [], 0x6b}}) truncate(&(0x7f0000000240)='./file0\x00', 0x206b12) open(&(0x7f0000000340)='./file0\x00', 0x600, 0x69) r7 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r7, &(0x7f0000000940)={0x0, 0xe, &(0x7f0000000000)=[{&(0x7f00000001c0)="d8000000180081054e81f782db44b904021d005c06007c09e8fe55a10a0015400500142603600e1208000b0000000401a8001600a400014002000000036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360d070100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9701", 0xd8}], 0x1}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) 9m21.368324317s ago: executing program 0 (id=1024): mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) userfaultfd(0x80001) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x5, 0x1000087}, 0x0) sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000002c0)=0x1) r0 = syz_open_dev$MSR(&(0x7f0000000200), 0xa, 0x0) read$msr(r0, &(0x7f0000002700)=""/102392, 0x18ff8) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000180)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-twofish-3way\x00'}, 0x58) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)}, 0x0) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000340)="71e67a15cdf0311cfcf33a52a7d86bd1", 0x20) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000040)={0x26, 'hash\x00', 0x0, 0x0, 'nhpoly1305-avx2\x00'}, 0x58) r3 = timerfd_create(0x8, 0x0) close(r3) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000000)="8a", 0x440) socket$packet(0x11, 0x2, 0x300) syz_emit_ethernet(0xe, &(0x7f0000000080)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaadab5"], 0x0) 9m20.870194615s ago: executing program 0 (id=1027): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, 0x0, 0x0) r1 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) r2 = socket$inet6_sctp(0xa, 0x801, 0x84) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r2, 0x84, 0x7b, &(0x7f0000000180)={0x0, 0x4}, 0x8) sendto$inet6(r2, &(0x7f0000001080)='\x00', 0x1, 0xc090, &(0x7f0000000100)={0xa, 0x1, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x4}, 0x1c) sendto$inet6(r2, &(0x7f00000001c0)="85", 0x1, 0x0, &(0x7f0000000280)={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, 0x1c) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r2, 0x84, 0x7c, &(0x7f00000000c0)={0x0, 0x2, 0x1a1}, 0x87674a396ee1bb89) r3 = openat(0xffffffffffffff9c, 0x0, 0x24c01, 0x0) ioctl$sock_inet_SIOCSARP(r3, 0x40806685, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r3, 0x402c5342, &(0x7f00000002c0)={0x7, 0xe, 0x400, {0x2, 0x7fff}, 0x7fff, 0x200}) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_HOPOPTS(r5, 0x29, 0x36, &(0x7f00000000c0)=ANY=[], 0x8) connect$inet6(r5, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c) setsockopt$SO_BINDTODEVICE(r5, 0x1, 0x19, &(0x7f0000000080)='bridge0\x00', 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xb, 0x16, &(0x7f0000000340)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x5, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) sendmmsg$inet6(r5, &(0x7f0000004b80)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000040)}, {&(0x7f00000000c0)='\x00', 0x1}], 0x2}}], 0x1, 0x8080) sendto$inet6(r5, &(0x7f0000000140)="8ccdecdaee44864e31ac987e1c2267dde9534ffd945f06", 0x17, 0x3b00, 0x0, 0x0) socket$inet6(0xa, 0x6, 0x3) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_RESET_STATS(r4, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000180)={&(0x7f00000007c0)=ANY=[@ANYBLOB="6001030c33c77b3b00", @ANYRES16=r6, @ANYBLOB="020028bd7000fbdbdf250a00000040000580070001006962000007000100696200002c000280080001000e00000008000300060000000800010005000000080001001700000008000300430000000c0101800d0001007564703a73797a3100000000380004001400010002004e22ac1414bb0000000000000000200002000a004e24fffffff800000000000000000000ffffac14143301000000380004001400010002004e21000000000000000000000000200002000a004e2100000007fe880000000000000000000000000101070000000d0001007564703a73797a3000000000080003000400000038000400200001000a004e2400000000ff010000000000000000000000000001b6cf93191400020002004e247f00000100000000000000002c0004001400010002004e247f00000100000000000000001400020002004e1f0a0101020000000000000000040002800800030007000000"], 0x160}, 0x1, 0x0, 0x0, 0x20000040}, 0x8055) setsockopt$WPAN_SECURITY(r1, 0x0, 0x1, &(0x7f0000000480)=0x2, 0x4) syz_genetlink_get_family_id$ipvs(&(0x7f0000000600), r1) r7 = syz_open_dev$sndctrl(&(0x7f0000000040), 0x2, 0x200) ioctl$SNDRV_CTL_IOCTL_HWDEP_INFO(r7, 0x80dc5521, &(0x7f0000000100)=""/119) 9m20.346746956s ago: executing program 0 (id=1029): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000001180)={0x0, 0x0, 0x0}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x3, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) syz_init_net_socket$ax25(0x3, 0x5, 0x6) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_io_uring_setup(0xbc4, &(0x7f0000000300)={0x0, 0xfd3b, 0x6aff8d7c40791670, 0x0, 0x89}, &(0x7f0000000240), &(0x7f0000000280)) r4 = socket$inet(0x2, 0x4000000000000001, 0x0) getsockopt$inet_int(r4, 0x0, 0x22, 0x0, &(0x7f00000001c0)) r5 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/ptype\x00') read$msr(r5, &(0x7f0000000040)=""/59, 0xffb5) socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000180)=ANY=[@ANYBLOB="4800000010001fff0000", @ANYRES32=0x0, @ANYBLOB="0000000000000000280100800b0001006272696467650000180002800a001400aaaaaaaaaabb00000800090000000000"], 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) r7 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) r8 = socket$unix(0x1, 0x5, 0x0) dup2(r8, r7) r9 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$inet(r9, &(0x7f0000000080)={&(0x7f0000000000)={0x2, 0x4001, @local}, 0x10, 0x0}, 0x30004001) socket$nl_route(0x10, 0x3, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) 9m17.15381572s ago: executing program 0 (id=1032): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket(0x1e, 0x4, 0x0) setsockopt$inet6_icmp_ICMP_FILTER(0xffffffffffffffff, 0x1, 0x1, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDGKBMODE(r3, 0x4b44, &(0x7f0000000140)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x1, 0x100004, 0x44, 0x9, 0x1, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x1b, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x2, r6}, 0x38) setsockopt$TIPC_DEST_DROPPABLE(r1, 0x10f, 0x81, 0x0, 0x0) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r7, 0x10e, 0x1, &(0x7f0000000400)=0x1, 0x4) r8 = socket$inet6(0xa, 0x3, 0x3) setsockopt$inet6_IPV6_XFRM_POLICY(r8, 0x29, 0x23, &(0x7f0000000040)={{{@in=@loopback, @in=@loopback, 0x4e22, 0x0, 0x4, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@empty, 0xfffffffd, 0x32}, 0xa, @in=@multicast2, 0xfffffffd, 0x4, 0x0, 0x0, 0x3}}, 0xe8) connect$inet6(r8, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c) recvmmsg(r1, &(0x7f0000000ac0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000a00)=""/152, 0x98}, 0x3}], 0x1, 0x10003, 0x0) sendmsg$tipc(r1, 0x0, 0x4800) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000180)={0xffffff}, 0x10) setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000280)={0x7, 0x85, 0x1, 0x4, 0xe0, 0x0, 0x2b, 0x3, 0x2, 0x1, 0x0, 0x5, 0x3, 0x3}, 0xe) 9m16.100378577s ago: executing program 0 (id=1034): r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, 0x0) r2 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301) ioctl$USBDEVFS_CONTROL(r2, 0xc0185500, &(0x7f0000000140)={0x40, 0xf, 0x7, 0x6, 0x0, 0xd626, &(0x7f0000000040)}) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) sched_setscheduler(r1, 0x5, &(0x7f0000000240)=0x6) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000002d00)=ANY=[@ANYBLOB="200000001000010700000000000000000a0000000c0002006e6c38303231"], 0x20}}, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000280)={0x1200, 0x2, 0x3, 0x0, 0x6}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'pim6reg0\x00', 0x7101}) openat$tun(0xffffffffffffff9c, 0x0, 0x1c1842, 0x0) socket$netlink(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) read$msr(r4, &(0x7f0000002700)=""/102392, 0x18ff8) r5 = socket$inet6(0xa, 0xa, 0x80000ff) sendmsg$inet6(r5, &(0x7f0000000000)={&(0x7f00000000c0)={0xa, 0x0, 0x0, @dev}, 0x1c, &(0x7f0000000040)}, 0x4010) r6 = syz_open_dev$vbi(&(0x7f0000000040), 0x0, 0x2) ioctl$VIDIOC_S_INPUT(r6, 0xc0045627, &(0x7f00000001c0)=0x2) ioctl$VIDIOC_CREATE_BUFS(r6, 0xc100565c, &(0x7f0000000480)={0x695, 0x200, 0x2, {0x4, @pix={0xa, 0x8, 0x34565559, 0x5, 0x0, 0xfffffff3, 0x5, 0x983e, 0x1, 0x3, 0x2}}, 0x9}) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f00000002c0)=0x20) creat(&(0x7f00000005c0)='./file0\x00', 0xc9028ba210c11f8b) unlink(&(0x7f0000000540)='./file0\x00') 9m15.931444758s ago: executing program 0 (id=1037): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, 0x0, 0x0) r1 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) r2 = socket$inet6_sctp(0xa, 0x801, 0x84) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r2, 0x84, 0x7b, &(0x7f0000000180)={0x0, 0x4}, 0x8) sendto$inet6(r2, &(0x7f0000001080)='\x00', 0x1, 0xc090, &(0x7f0000000100)={0xa, 0x1, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x4}, 0x1c) sendto$inet6(r2, &(0x7f00000001c0)="85", 0x1, 0x0, &(0x7f0000000280)={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, 0x1c) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r2, 0x84, 0x7c, &(0x7f00000000c0)={0x0, 0x2, 0x1a1}, 0x87674a396ee1bb89) r3 = openat(0xffffffffffffff9c, 0x0, 0x24c01, 0x0) ioctl$sock_inet_SIOCSARP(r3, 0x40806685, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r3, 0x402c5342, &(0x7f00000002c0)={0x7, 0xe, 0x400, {0x2, 0x7fff}, 0x7fff, 0x200}) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_HOPOPTS(r5, 0x29, 0x36, &(0x7f00000000c0)=ANY=[], 0x8) connect$inet6(r5, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c) setsockopt$SO_BINDTODEVICE(r5, 0x1, 0x19, &(0x7f0000000080)='bridge0\x00', 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xb, 0x16, &(0x7f0000000340)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x5, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) sendmmsg$inet6(r5, &(0x7f0000004b80)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000040)}, {&(0x7f00000000c0)='\x00', 0x1}], 0x2}}], 0x1, 0x8080) sendto$inet6(r5, &(0x7f0000000140)="8ccdecdaee44864e31ac987e1c2267dde9534ffd945f06", 0x17, 0x3b00, 0x0, 0x0) socket$inet6(0xa, 0x6, 0x3) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_RESET_STATS(r4, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000180)={&(0x7f00000007c0)=ANY=[@ANYBLOB="6001030c33c77b3b00", @ANYRES16=r6, @ANYBLOB="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"], 0x160}, 0x1, 0x0, 0x0, 0x20000040}, 0x8055) setsockopt$WPAN_SECURITY(r1, 0x0, 0x1, &(0x7f0000000480)=0x2, 0x4) syz_genetlink_get_family_id$ipvs(&(0x7f0000000600), r1) r7 = syz_open_dev$sndctrl(&(0x7f0000000040), 0x2, 0x200) ioctl$SNDRV_CTL_IOCTL_HWDEP_INFO(r7, 0x80dc5521, &(0x7f0000000100)=""/119) 9m1.282564811s ago: executing program 36 (id=1037): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, 0x0, 0x0) r1 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) r2 = socket$inet6_sctp(0xa, 0x801, 0x84) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r2, 0x84, 0x7b, &(0x7f0000000180)={0x0, 0x4}, 0x8) sendto$inet6(r2, &(0x7f0000001080)='\x00', 0x1, 0xc090, &(0x7f0000000100)={0xa, 0x1, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x4}, 0x1c) sendto$inet6(r2, &(0x7f00000001c0)="85", 0x1, 0x0, &(0x7f0000000280)={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, 0x1c) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r2, 0x84, 0x7c, &(0x7f00000000c0)={0x0, 0x2, 0x1a1}, 0x87674a396ee1bb89) r3 = openat(0xffffffffffffff9c, 0x0, 0x24c01, 0x0) ioctl$sock_inet_SIOCSARP(r3, 0x40806685, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r3, 0x402c5342, &(0x7f00000002c0)={0x7, 0xe, 0x400, {0x2, 0x7fff}, 0x7fff, 0x200}) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_HOPOPTS(r5, 0x29, 0x36, &(0x7f00000000c0)=ANY=[], 0x8) connect$inet6(r5, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c) setsockopt$SO_BINDTODEVICE(r5, 0x1, 0x19, &(0x7f0000000080)='bridge0\x00', 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xb, 0x16, &(0x7f0000000340)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x5, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) sendmmsg$inet6(r5, &(0x7f0000004b80)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000040)}, {&(0x7f00000000c0)='\x00', 0x1}], 0x2}}], 0x1, 0x8080) sendto$inet6(r5, &(0x7f0000000140)="8ccdecdaee44864e31ac987e1c2267dde9534ffd945f06", 0x17, 0x3b00, 0x0, 0x0) socket$inet6(0xa, 0x6, 0x3) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_RESET_STATS(r4, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000180)={&(0x7f00000007c0)=ANY=[@ANYBLOB="6001030c33c77b3b00", @ANYRES16=r6, @ANYBLOB="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"], 0x160}, 0x1, 0x0, 0x0, 0x20000040}, 0x8055) setsockopt$WPAN_SECURITY(r1, 0x0, 0x1, &(0x7f0000000480)=0x2, 0x4) syz_genetlink_get_family_id$ipvs(&(0x7f0000000600), r1) r7 = syz_open_dev$sndctrl(&(0x7f0000000040), 0x2, 0x200) ioctl$SNDRV_CTL_IOCTL_HWDEP_INFO(r7, 0x80dc5521, &(0x7f0000000100)=""/119) 6m53.259293016s ago: executing program 8 (id=1809): bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000040)={@cgroup=r0, r1, 0x2, 0x0, 0x0, @void, @value}, 0x10) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000040)={@cgroup=r2, r3, 0x2, 0x0, 0x0, @void, @value}, 0x10) 6m53.160218228s ago: executing program 8 (id=1810): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x10b200, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000600)=[@text64={0x40, &(0x7f00000006c0)="f3440fc7b729000000f20f5f0d00000080460f5ba4b07a000000470f38c9403736460fc7b10f240000660f3881078fa9189021da820001c0fef3440f0966b881000f00d8", 0x44}], 0xaaaabbc, 0x74, 0x0, 0x0) recvmsg(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x40012022) ioctl$KVM_RUN(r2, 0xae80, 0x0) 6m52.745391178s ago: executing program 8 (id=1814): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a010100000000000000000a0000000900010073797a300000000048000000030a010200000000000000000a0000000900010073797a30000000000900030073797a3100000000080007006e617400140004800800014000000000080002"], 0xa4}}, 0x0) r1 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) r2 = socket$inet6_sctp(0xa, 0x801, 0x84) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r2, 0x84, 0x7b, &(0x7f0000000180)={0x0, 0x4}, 0x8) sendto$inet6(r2, &(0x7f0000001080)='\x00', 0x1, 0xc090, &(0x7f0000000100)={0xa, 0x1, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x4}, 0x1c) sendto$inet6(r2, &(0x7f00000001c0)="85", 0x1, 0x0, &(0x7f0000000280)={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, 0x1c) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r2, 0x84, 0x7c, &(0x7f00000000c0)={0x0, 0x2, 0x1a1}, 0x87674a396ee1bb89) r3 = openat(0xffffffffffffff9c, 0x0, 0x24c01, 0x0) ioctl$sock_inet_SIOCSARP(r3, 0x40806685, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r3, 0x402c5342, &(0x7f00000002c0)={0x7, 0xe, 0x400, {0x2, 0x7fff}, 0x7fff, 0x200}) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_HOPOPTS(r5, 0x29, 0x36, &(0x7f00000000c0)=ANY=[], 0x8) setsockopt$SO_BINDTODEVICE(r5, 0x1, 0x19, &(0x7f0000000080)='bridge0\x00', 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xb, 0x16, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x5, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) sendmmsg$inet6(r5, &(0x7f0000004b80)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000040)}, {&(0x7f00000000c0)='\x00', 0x1}], 0x2}}], 0x1, 0x8080) sendto$inet6(r5, &(0x7f0000000140)="8ccdecdaee44864e31ac987e1c2267dde9534ffd945f06", 0x17, 0x3b00, 0x0, 0x0) socket$inet6(0xa, 0x6, 0x3) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_RESET_STATS(r4, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000180)={&(0x7f00000007c0)=ANY=[@ANYBLOB="6001030c33c77b3b00", @ANYRES16=r6, @ANYBLOB="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"], 0x160}, 0x1, 0x0, 0x0, 0x20000040}, 0x8055) setsockopt$WPAN_SECURITY(r1, 0x0, 0x1, &(0x7f0000000480)=0x2, 0x4) syz_genetlink_get_family_id$ipvs(&(0x7f0000000600), r1) r7 = syz_open_dev$sndctrl(&(0x7f0000000040), 0x2, 0x200) ioctl$SNDRV_CTL_IOCTL_HWDEP_INFO(r7, 0x80dc5521, &(0x7f0000000100)=""/119) 6m39.751180732s ago: executing program 8 (id=1814): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a010100000000000000000a0000000900010073797a300000000048000000030a010200000000000000000a0000000900010073797a30000000000900030073797a3100000000080007006e617400140004800800014000000000080002"], 0xa4}}, 0x0) r1 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) r2 = socket$inet6_sctp(0xa, 0x801, 0x84) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r2, 0x84, 0x7b, &(0x7f0000000180)={0x0, 0x4}, 0x8) sendto$inet6(r2, &(0x7f0000001080)='\x00', 0x1, 0xc090, &(0x7f0000000100)={0xa, 0x1, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x4}, 0x1c) sendto$inet6(r2, &(0x7f00000001c0)="85", 0x1, 0x0, &(0x7f0000000280)={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, 0x1c) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r2, 0x84, 0x7c, &(0x7f00000000c0)={0x0, 0x2, 0x1a1}, 0x87674a396ee1bb89) r3 = openat(0xffffffffffffff9c, 0x0, 0x24c01, 0x0) ioctl$sock_inet_SIOCSARP(r3, 0x40806685, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r3, 0x402c5342, &(0x7f00000002c0)={0x7, 0xe, 0x400, {0x2, 0x7fff}, 0x7fff, 0x200}) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_HOPOPTS(r5, 0x29, 0x36, &(0x7f00000000c0)=ANY=[], 0x8) setsockopt$SO_BINDTODEVICE(r5, 0x1, 0x19, &(0x7f0000000080)='bridge0\x00', 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xb, 0x16, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x5, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) sendmmsg$inet6(r5, &(0x7f0000004b80)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000040)}, {&(0x7f00000000c0)='\x00', 0x1}], 0x2}}], 0x1, 0x8080) sendto$inet6(r5, &(0x7f0000000140)="8ccdecdaee44864e31ac987e1c2267dde9534ffd945f06", 0x17, 0x3b00, 0x0, 0x0) socket$inet6(0xa, 0x6, 0x3) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_RESET_STATS(r4, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000180)={&(0x7f00000007c0)=ANY=[@ANYBLOB="6001030c33c77b3b00", @ANYRES16=r6, @ANYBLOB="020028bd7000fbdbdf250a00000040000580070001006962000007000100696200002c000280080001000e00000008000300060000000800010005000000080001001700000008000300430000000c0101800d0001007564703a73797a3100000000380004001400010002004e22ac1414bb0000000000000000200002000a004e24fffffff800000000000000000000ffffac14143301000000380004001400010002004e21000000000000000000000000200002000a004e2100000007fe880000000000000000000000000101070000000d0001007564703a73797a3000000000080003000400000038000400200001000a004e2400000000ff010000000000000000000000000001b6cf93191400020002004e247f00000100000000000000002c0004001400010002004e247f00000100000000000000001400020002004e1f0a0101020000000000000000040002800800030007000000"], 0x160}, 0x1, 0x0, 0x0, 0x20000040}, 0x8055) setsockopt$WPAN_SECURITY(r1, 0x0, 0x1, &(0x7f0000000480)=0x2, 0x4) syz_genetlink_get_family_id$ipvs(&(0x7f0000000600), r1) r7 = syz_open_dev$sndctrl(&(0x7f0000000040), 0x2, 0x200) ioctl$SNDRV_CTL_IOCTL_HWDEP_INFO(r7, 0x80dc5521, &(0x7f0000000100)=""/119) 6m20.415159484s ago: executing program 8 (id=1814): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a010100000000000000000a0000000900010073797a300000000048000000030a010200000000000000000a0000000900010073797a30000000000900030073797a3100000000080007006e617400140004800800014000000000080002"], 0xa4}}, 0x0) r1 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) r2 = socket$inet6_sctp(0xa, 0x801, 0x84) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r2, 0x84, 0x7b, &(0x7f0000000180)={0x0, 0x4}, 0x8) sendto$inet6(r2, &(0x7f0000001080)='\x00', 0x1, 0xc090, &(0x7f0000000100)={0xa, 0x1, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x4}, 0x1c) sendto$inet6(r2, &(0x7f00000001c0)="85", 0x1, 0x0, &(0x7f0000000280)={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, 0x1c) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r2, 0x84, 0x7c, &(0x7f00000000c0)={0x0, 0x2, 0x1a1}, 0x87674a396ee1bb89) r3 = openat(0xffffffffffffff9c, 0x0, 0x24c01, 0x0) ioctl$sock_inet_SIOCSARP(r3, 0x40806685, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r3, 0x402c5342, &(0x7f00000002c0)={0x7, 0xe, 0x400, {0x2, 0x7fff}, 0x7fff, 0x200}) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_HOPOPTS(r5, 0x29, 0x36, &(0x7f00000000c0)=ANY=[], 0x8) setsockopt$SO_BINDTODEVICE(r5, 0x1, 0x19, &(0x7f0000000080)='bridge0\x00', 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xb, 0x16, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x5, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) sendmmsg$inet6(r5, &(0x7f0000004b80)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000040)}, {&(0x7f00000000c0)='\x00', 0x1}], 0x2}}], 0x1, 0x8080) sendto$inet6(r5, &(0x7f0000000140)="8ccdecdaee44864e31ac987e1c2267dde9534ffd945f06", 0x17, 0x3b00, 0x0, 0x0) socket$inet6(0xa, 0x6, 0x3) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_RESET_STATS(r4, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000180)={&(0x7f00000007c0)=ANY=[@ANYBLOB="6001030c33c77b3b00", @ANYRES16=r6, @ANYBLOB="020028bd7000fbdbdf250a00000040000580070001006962000007000100696200002c000280080001000e00000008000300060000000800010005000000080001001700000008000300430000000c0101800d0001007564703a73797a3100000000380004001400010002004e22ac1414bb0000000000000000200002000a004e24fffffff800000000000000000000ffffac14143301000000380004001400010002004e21000000000000000000000000200002000a004e2100000007fe880000000000000000000000000101070000000d0001007564703a73797a3000000000080003000400000038000400200001000a004e2400000000ff010000000000000000000000000001b6cf93191400020002004e247f00000100000000000000002c0004001400010002004e247f00000100000000000000001400020002004e1f0a0101020000000000000000040002800800030007000000"], 0x160}, 0x1, 0x0, 0x0, 0x20000040}, 0x8055) setsockopt$WPAN_SECURITY(r1, 0x0, 0x1, &(0x7f0000000480)=0x2, 0x4) syz_genetlink_get_family_id$ipvs(&(0x7f0000000600), r1) r7 = syz_open_dev$sndctrl(&(0x7f0000000040), 0x2, 0x200) ioctl$SNDRV_CTL_IOCTL_HWDEP_INFO(r7, 0x80dc5521, &(0x7f0000000100)=""/119) 5m54.470721326s ago: executing program 8 (id=1814): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a010100000000000000000a0000000900010073797a300000000048000000030a010200000000000000000a0000000900010073797a30000000000900030073797a3100000000080007006e617400140004800800014000000000080002"], 0xa4}}, 0x0) r1 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) r2 = socket$inet6_sctp(0xa, 0x801, 0x84) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r2, 0x84, 0x7b, &(0x7f0000000180)={0x0, 0x4}, 0x8) sendto$inet6(r2, &(0x7f0000001080)='\x00', 0x1, 0xc090, &(0x7f0000000100)={0xa, 0x1, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x4}, 0x1c) sendto$inet6(r2, &(0x7f00000001c0)="85", 0x1, 0x0, &(0x7f0000000280)={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, 0x1c) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r2, 0x84, 0x7c, &(0x7f00000000c0)={0x0, 0x2, 0x1a1}, 0x87674a396ee1bb89) r3 = openat(0xffffffffffffff9c, 0x0, 0x24c01, 0x0) ioctl$sock_inet_SIOCSARP(r3, 0x40806685, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r3, 0x402c5342, &(0x7f00000002c0)={0x7, 0xe, 0x400, {0x2, 0x7fff}, 0x7fff, 0x200}) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_HOPOPTS(r5, 0x29, 0x36, &(0x7f00000000c0)=ANY=[], 0x8) setsockopt$SO_BINDTODEVICE(r5, 0x1, 0x19, &(0x7f0000000080)='bridge0\x00', 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xb, 0x16, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x5, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) sendmmsg$inet6(r5, &(0x7f0000004b80)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000040)}, {&(0x7f00000000c0)='\x00', 0x1}], 0x2}}], 0x1, 0x8080) sendto$inet6(r5, &(0x7f0000000140)="8ccdecdaee44864e31ac987e1c2267dde9534ffd945f06", 0x17, 0x3b00, 0x0, 0x0) socket$inet6(0xa, 0x6, 0x3) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_RESET_STATS(r4, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000180)={&(0x7f00000007c0)=ANY=[@ANYBLOB="6001030c33c77b3b00", @ANYRES16=r6, @ANYBLOB="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"], 0x160}, 0x1, 0x0, 0x0, 0x20000040}, 0x8055) setsockopt$WPAN_SECURITY(r1, 0x0, 0x1, &(0x7f0000000480)=0x2, 0x4) syz_genetlink_get_family_id$ipvs(&(0x7f0000000600), r1) r7 = syz_open_dev$sndctrl(&(0x7f0000000040), 0x2, 0x200) ioctl$SNDRV_CTL_IOCTL_HWDEP_INFO(r7, 0x80dc5521, &(0x7f0000000100)=""/119) 4m53.51377355s ago: executing program 7 (id=2234): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xc, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_io_uring_setup(0x5bf, 0x0, &(0x7f0000000240), &(0x7f0000000200)) r3 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$inet6_udp_int(r3, 0x11, 0x67, &(0x7f0000000040)=0x91, 0x4) connect$inet6(r3, &(0x7f0000000000)={0xa, 0x4e2a, 0xffffffff, @mcast2, 0x9}, 0x1c) setsockopt$inet6_IPV6_DSTOPTS(r3, 0x29, 0x3b, &(0x7f00000000c0)={0x2c}, 0x8) socket$nl_generic(0x10, 0x3, 0x10) sendmmsg$inet6(r3, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4001c00) 4m51.13493003s ago: executing program 7 (id=2237): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0xaee2, 0x800, 0x2, 0xbfdffffc}, &(0x7f0000000000)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f00000002c0)=@IORING_OP_STATX={0x15, 0x44, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x40, 0x0, 0x1}) io_uring_enter(r3, 0x47f6, 0x0, 0x0, 0x0, 0x0) setresgid(0x0, 0xee00, 0x0) mount(0x0, &(0x7f0000000080)='.\x00', 0x0, 0x0, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 4m48.143710167s ago: executing program 7 (id=2240): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket(0x1e, 0x4, 0x0) setsockopt$inet6_icmp_ICMP_FILTER(0xffffffffffffffff, 0x1, 0x1, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDGKBMODE(r3, 0x4b44, &(0x7f0000000140)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x1, 0x100004, 0x44, 0x9, 0x1, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x1b, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x2, r6}, 0x38) setsockopt$TIPC_DEST_DROPPABLE(r1, 0x10f, 0x81, 0x0, 0x0) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r7, 0x10e, 0x1, &(0x7f0000000400)=0x1, 0x4) r8 = socket$inet6(0xa, 0x3, 0x3) setsockopt$inet6_IPV6_XFRM_POLICY(r8, 0x29, 0x23, &(0x7f0000000040)={{{@in=@loopback, @in=@loopback, 0x4e22, 0x0, 0x4, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@empty, 0xfffffffd, 0x32}, 0xa, @in=@multicast2, 0xfffffffd, 0x4, 0x0, 0x0, 0x3}}, 0xe8) connect$inet6(r8, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c) recvmmsg(r1, &(0x7f0000000ac0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000a00)=""/152, 0x98}, 0x3}], 0x1, 0x10003, 0x0) sendmsg$tipc(r1, 0x0, 0x4800) r9 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r9, 0x10e, 0xc, &(0x7f0000000180)={0xffffff}, 0x10) write(r9, &(0x7f0000000000)="240000001a005f0214f9f407000904001f00000000000000000000000800040001000000", 0x24) setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000280)={0x7, 0x85, 0x1, 0x4, 0xe0, 0x0, 0x2b, 0x3, 0x2, 0x1, 0x0, 0x5, 0x3, 0x3}, 0xe) shutdown(r0, 0x0) 4m44.004895885s ago: executing program 7 (id=2249): r0 = gettid() timer_create(0x0, &(0x7f0000000140)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x3938700}, {0x0, 0x3938700}}, 0x0) bind$bt_sco(0xffffffffffffffff, &(0x7f0000000040)={0x1f, @fixed}, 0x8) listen(0xffffffffffffffff, 0x0) accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) getpid() madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket(0x40000000015, 0x805, 0x0) getsockopt(r1, 0x114, 0x271b, &(0x7f0000000440)=""/102400, &(0x7f00000000c0)=0x41) r2 = syz_open_dev$usbfs(&(0x7f0000003f00), 0x10, 0xa401) ioctl$USBDEVFS_ALLOC_STREAMS(r2, 0x8008551c, &(0x7f00000002c0)={0x2ffe, 0x1, [{0x1, 0x1}]}) write$cgroup_pressure(0xffffffffffffffff, &(0x7f0000000140)={'full'}, 0xfffffdef) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r3 = openat$sndseq(0xffffffffffffff9c, 0x0, 0x1) write$sndseq(r3, 0x0, 0x0) 4m42.978211528s ago: executing program 7 (id=2254): r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, 0x0, 0x0) write(r0, &(0x7f0000000000)="240000001a005f0214f9f407000904001f000000ff020002", 0x18) r1 = signalfd4(0xffffffffffffffff, &(0x7f0000000080), 0x8, 0x0) timer_create(0x0, 0x0, 0x0) timer_settime(0x0, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x300000b, 0x4031, 0xffffffffffffffff, 0x0) r2 = gettid() r3 = socket$inet6(0xa, 0x1, 0x0) brk(0x2344) setsockopt$inet6_int(r3, 0x29, 0x33, &(0x7f00000000c0)=0x1, 0x4) setsockopt$inet6_int(r3, 0x29, 0x31, &(0x7f0000000200)=0x8, 0x4) bind$inet6(r3, &(0x7f0000f65000)={0xa, 0x4e21, 0x0, @loopback}, 0x1c) sendto$inet6(r3, 0x0, 0x0, 0x20000002, &(0x7f00000001c0)={0xa, 0x4e21, 0x0, @loopback}, 0x1c) process_vm_writev(r2, 0x0, 0x0, 0x0, 0x0, 0x0) readv(r1, 0x0, 0x0) signalfd4(r1, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) 4m41.795021496s ago: executing program 7 (id=2257): syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) syz_open_procfs(0x0, 0x0) syz_usb_connect$cdc_ecm(0x2, 0x5a, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x20, 0x525, 0xa4a1, 0x40, 0x0, 0x0, 0xffffffffffff8001, 0x1, [{{0x9, 0x2, 0x48, 0x1, 0x1, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x16, 0x2, 0x2, 0x0, 0x0, {{0x5}, {0x5}, {0xd, 0x24, 0xf, 0x1, 0x0, 0x0, 0x8, 0x2}, [@acm={0x4, 0x24, 0x2, 0x2}]}, {[{{0x9, 0x5, 0x81, 0x3, 0x40}}], {{0x9, 0x5, 0x82, 0x2, 0x200}}, {{0x9, 0x5, 0x3, 0x2, 0x240}}}}}]}}]}}, 0x0) r0 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000080)={'vxcan1\x00', 0x0}) connect$can_bcm(r0, &(0x7f0000000300)={0x1d, r1}, 0x10) sendmsg$can_bcm(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000400)=ANY=[@ANYRESOCT=r1], 0x48}}, 0x0) sendmsg$can_bcm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="0500"/12, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYBLOB="0000000001"], 0x48}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000dfff75390000000000000000850000007d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000340)='io_uring_register\x00', r4}, 0x10) r5 = syz_io_uring_setup(0x239, &(0x7f0000000440), &(0x7f0000000180), &(0x7f00000001c0)) io_uring_register$IORING_REGISTER_NAPI(r5, 0x1b, &(0x7f0000000280)={0x80000000, 0xf1, '\x00', 0x100000000000000}, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f00000000c0)={'vxcan1\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000004c00)=@newtfilter={0x24, 0x11, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x74, r6}}, 0x24}, 0x1, 0xf0ffffffffffff}, 0x0) mkdirat(0xffffffffffffffff, &(0x7f0000000140)='./file0\x00', 0x8) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0006}]}) 4m27.24532263s ago: executing program 37 (id=2257): syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) syz_open_procfs(0x0, 0x0) syz_usb_connect$cdc_ecm(0x2, 0x5a, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x20, 0x525, 0xa4a1, 0x40, 0x0, 0x0, 0xffffffffffff8001, 0x1, [{{0x9, 0x2, 0x48, 0x1, 0x1, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x16, 0x2, 0x2, 0x0, 0x0, {{0x5}, {0x5}, {0xd, 0x24, 0xf, 0x1, 0x0, 0x0, 0x8, 0x2}, [@acm={0x4, 0x24, 0x2, 0x2}]}, {[{{0x9, 0x5, 0x81, 0x3, 0x40}}], {{0x9, 0x5, 0x82, 0x2, 0x200}}, {{0x9, 0x5, 0x3, 0x2, 0x240}}}}}]}}]}}, 0x0) r0 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000080)={'vxcan1\x00', 0x0}) connect$can_bcm(r0, &(0x7f0000000300)={0x1d, r1}, 0x10) sendmsg$can_bcm(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000400)=ANY=[@ANYRESOCT=r1], 0x48}}, 0x0) sendmsg$can_bcm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="0500"/12, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYBLOB="0000000001"], 0x48}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000dfff75390000000000000000850000007d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000340)='io_uring_register\x00', r4}, 0x10) r5 = syz_io_uring_setup(0x239, &(0x7f0000000440), &(0x7f0000000180), &(0x7f00000001c0)) io_uring_register$IORING_REGISTER_NAPI(r5, 0x1b, &(0x7f0000000280)={0x80000000, 0xf1, '\x00', 0x100000000000000}, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f00000000c0)={'vxcan1\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000004c00)=@newtfilter={0x24, 0x11, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x74, r6}}, 0x24}, 0x1, 0xf0ffffffffffff}, 0x0) mkdirat(0xffffffffffffffff, &(0x7f0000000140)='./file0\x00', 0x8) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0006}]}) 12.377381237s ago: executing program 9 (id=2671): r0 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'batadv_slave_1\x00', 0x0}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x87}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000980)={0x6, 0x0, 0x0, 0x0, 0xc58d, 0x0, 0x0, 0x40f00, 0x20, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffff7, @void, @value}, 0x94) getsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x6, 0x0, 0x0) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x7fffffffffffffff) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x5) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) write$cgroup_devices(0xffffffffffffffff, &(0x7f0000000280)=ANY=[], 0xa) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x4100, 0x0) setsockopt$SO_RDS_TRANSPORT(0xffffffffffffffff, 0x114, 0x8, 0x0, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000000200)={0xa, 0x4e20, 0x4, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x17}, 0x1c) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r4, 0x6, 0x13, &(0x7f0000000240)=0x100000001, 0x59) connect$inet6(r4, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r4, 0x6, 0x1f, &(0x7f0000000040), 0x4) setsockopt$inet6_tcp_TLS_TX(r4, 0x11a, 0x1, &(0x7f00000000c0)=@gcm_256={{0x304}, 'v\x00', "07f217bd74511f465bbbd5de01000000f91800", "0000f600", "8ce63ecbc640735f"}, 0x38) sendto$inet6(r4, &(0x7f0000000100)='S', 0x1, 0x8000, 0x0, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000001c0)=@newqdisc={0x30, 0x24, 0xd0f, 0x470bd2d, 0xfffffffd, {0x60, 0x0, 0x0, r2, {0x0, 0xfff2}, {0xfff1, 0xffff}, {0x0, 0xfff1}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}, 0x1, 0x0, 0x0, 0x20004000}, 0x44080) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x4000) r5 = syz_usb_connect(0x0, 0x24, &(0x7f0000000280)={{0x12, 0x1, 0x0, 0xe3, 0xdd, 0xef, 0x20, 0x1d50, 0x60a1, 0xa14f, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x9d, 0x14, 0x4e}}]}}]}}, 0x0) syz_usb_control_io$cdc_ecm(r5, 0x0, 0x0) 11.501043012s ago: executing program 6 (id=2672): socket$inet_dccp(0x2, 0x6, 0x0) socket(0x10, 0x2, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000009c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0, 0x0, 0xfffffffffffffffe}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x48) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = getpid() r6 = syz_pidfd_open(r5, 0x0) r7 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000300)='attr/current\x00') writev(r7, &(0x7f00000015c0)=[{&(0x7f00000000c0)='w', 0x1}], 0x1) pidfd_getfd(r6, r4, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00'}, 0x10) r8 = socket$inet(0x2, 0x2, 0x1) r9 = memfd_create(&(0x7f0000000280)='\x00\x00\x00\x00\x00\x00z\x9b\xb6\xe8t;\xfc\x02\x00\x00\x009\xa0\x8b\x14d\xa2\xa1\xa8!\xe8\xd1\xa0\x8a\xce0\x1c\xb7\xf1\xccm\xce\xd4\xdb\x89\xe5\x8f\xe2\xb6\xd6\x9cF\xbd\xff\x14\x05\x00\x00\x00\x00\x00\x00\x00\xf3\xdc\x91\'\x06\\8\r\xfc\xeeG\xbe\x90C\x1c)5\x98\xa3\xfa\a\xf9\x98\xbb}\xeb\x86P=\xe51\x9d,\xb7\xe6_M\xbe\x19\xea#\xff[\xd1\xc3\x9a\xa3\x1b\xf9\xe9\x1d \xce1\xc9\x9f\xb0\x14\xc2\xeb\xf9\xceE\xad\xa4\x92\f\xef\x87g\xb6\xabW\xac\rP\xf42\xb7\xc8\xaajn\xd7\n\r\x802\xd7\x1b$\x95tO*\xf4\xae\xb8\xb8m\xbf\r\xd5\xbf*\xfd\xc7\x85\x1b\x8b\xe5\x97j`c\xe0\x88?\xda\x8a#t>r\xae\xe8\xc9)', 0x0) execveat(r9, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) sendmsg$inet(r8, &(0x7f0000000600)={&(0x7f0000000000), 0x10, &(0x7f00000000c0)=[{&(0x7f0000000400)='\b\x00', 0x16}, {&(0x7f0000000180)="96bc1480bb58", 0x6}], 0x2, &(0x7f0000000240)=[@ip_tos_u8={{0x11, 0x0, 0x7}}, @ip_pktinfo={{0x19, 0x0, 0x8, {0x0, @rand_addr, @multicast2}}}], 0x38}, 0x0) 10.520178978s ago: executing program 2 (id=2673): socket(0x10, 0x3, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='setgroups\x00') pwritev(0xffffffffffffffff, &(0x7f0000001880)=[{&(0x7f00000002c0)="3f69551dfed83d7885411986f4759b39fa562669bbaa0e5468a41b296cc394", 0x1f}], 0x1, 0x7ff, 0x200) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="10000000040000000800000002"], 0x13) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000080)={r1, &(0x7f0000000300), 0x0}, 0x20) prctl$PR_GET_TSC(0x43, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r3, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) listen(r3, 0x101) r4 = socket$inet_dccp(0x2, 0x6, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) setsockopt(r4, 0x10d, 0x800000000d, &(0x7f00001c9fff)="03", 0x1) ioctl$sock_SIOCSPGRP(r0, 0x8902, 0x0) lseek(0xffffffffffffffff, 0xd7, 0x0) io_uring_setup(0x901, &(0x7f00000004c0)={0x0, 0x894c, 0x10, 0xfff7ffff, 0x1fc}) r5 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r5, &(0x7f0000000000)={&(0x7f0000000080)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e22, @dev}}, 0x80, 0x0, 0x0, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000000040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b57000000860f5878c37ffe36e1165814d435be5b317c6c8189587d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988ab013f40afe403041323110f62055394412158e7a3adb148d641aa40d4ab077fe34232aa8b31851466d0998a61d7da0c86d70000001010"], 0x10b8}, 0xff00) socket$inet6_udp(0xa, 0x2, 0x0) r6 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r6}, &(0x7f0000bbdffc)) prlimit64(0x0, 0x0, &(0x7f0000000100)={0x8000000000000001, 0x2}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x4000000) close_range(r0, 0xffffffffffffffff, 0x0) 10.500869732s ago: executing program 6 (id=2674): prlimit64(0x0, 0xe, &(0x7f0000000240)={0xb, 0xffffffffffffffff}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sendmsg$key(0xffffffffffffffff, &(0x7f0000000040)={0x9, 0x0, &(0x7f0000000340)={&(0x7f00000001c0)=ANY=[], 0x18}, 0x1, 0x7}, 0x0) sched_setaffinity(0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = socket$nl_audit(0x10, 0x3, 0x9) bind$netlink(r0, 0x0, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = socket$can_bcm(0x1d, 0x2, 0x2) socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c00028005000100000000000800074000000001"], 0x64}}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="4c00000016010504000000000000000002000000240001801400018008000100e000000108000200e00000010c000280050001000000000414000f8008000240000000"], 0x4c}}, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0) syz_open_dev$video(0x0, 0x2, 0x48a140) r5 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r5, 0x6, 0x80000000000002, 0x0, 0x0) sendto$inet(r5, 0x0, 0x0, 0x240007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r7}, 0x10) sendmsg$NFT_MSG_GETRULE(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)={0x14, 0x19, 0xa, 0x201, 0x0, 0x0, {0x2}}, 0x14}}, 0x8840) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_NEW_MPATH(r2, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000440)={0x20, r8, 0x100, 0x70bd27, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0xfffffffb, 0x1c}}}}}, 0x20}, 0x1, 0x0, 0x0, 0x40c0}, 0x4c000) 10.212934646s ago: executing program 6 (id=2675): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121701, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xd) ioctl$TIOCOUTQ(r0, 0x5411, &(0x7f0000000000)) r1 = socket$inet_tcp(0x2, 0x1, 0x0) socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540)) socket$nl_route(0x10, 0x3, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f00000001c0)=ANY=[@ANYBLOB="180000009024000000000000000008009500000040000000fbd7f44ea5c42d70829bdf63d6d738"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r2}, 0x10) socket(0x10, 0x3, 0x0) socket$packet(0x11, 0x2, 0x300) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) munlockall() madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x8) socket$pppl2tp(0x18, 0x1, 0x1) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) r5 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r5, 0x1, &(0x7f0000000680)='sou\xba8\xb9\x7frcVBR\xffL\x9a\x1b_\x8e\xee\x7f\xac\x99n\xfcx\x7f\x1f\x04\xd1\x8d\xbcL\xba\n\xa43_\x87\xba\xd4\'_ph-l\xeb|\xfd\x16\r\xf6\xbfz\xa8je|\x8d\r\x80\xdcq\xe5\xc8\xfcq\nr\xd0\f[\x1b\xf2\xf0\xc1\x1ed\x10\x01\x94\xaf4\x8b)\x01v`.i\x13\xd8)\xfa0m\xe2\xae\xd1\xa6D\xaf\x97\x1f\x0f\xd0\x8f\x932\xd4\x17k\xa7TI\xc5\x9c\x8d\xe8S^Y\x90\xa8\xb8nv\xa8@\xe0\x03\xb2\x15\x96\xce\xf9m\xc8[\xc3=\xdc\xe6&\x11]z|\x8a\xbb\x87\x15\x1f\x9d\xcbv\xcboD\t;X\x90F\x8cAvNtB\xd0\x18\xd4\xf9\xc7]bL\xc1\x05\x8b\x91m0\xc4\xc9\xfee3\xe7\t\xec\xe3\x10\xa1_\xad\xac\xbf\x8b\x88\xf2\xe4i\xfe\x15a\x1e\xbe\xe4>R\xf8h\xef\xb6\x91\a\xa3\xcd\x88\xbb\x82\xa4\x12\x10\xdcs\x84Y\x85\x9b\x97a\xf4\b\xddE;l\xf2\xb8\xc5v\x98\x9a\xf0D\xd2S\xbd\xdc\xdd\x10\xbe\x06\r\x83\xdf \x8fe\x99$\xe9\xc3&7.-\xc5\x16\xf3\x83>\xad\x1cH\x8e\x89%a\xca\x8c]c\xc1\xf5\x01\x11\xbd\xff4\x05X\'D\xb2~\x87\xc4O$\x8c\xc2\xc6mxJq\xeb\x950\xcc\vai\x9d\xfb\xc5\xab*<\xdeU \x94\xe1\xdd\x98\xb27J\xe4(c\xda=tr\xbaT\xf3\xf6 \xc8\xce\xd0\xde\x1bUjz\xb9\a\x92\x81\x9bp\'\xe6=\xe6@\xb5Gb', 0x0, 0x0) mmap$xdp(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x4, 0x110, 0xffffffffffffffff, 0x100000000) sendmsg$nl_route(r4, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={0x0, 0x18}}, 0x0) syz_emit_ethernet(0x56, &(0x7f0000000000)={@multicast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00', 0x20, 0x3a, 0xff, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @mcast2, {[], @ndisc_ns={0x87, 0x0, 0x0, @private0, [{}, {}, {0xe, 0x1, "24fcaa8fc05a"}]}}}}}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0xffffffffffffff6e, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="5000000010008105e9c51c000000000000000000", @ANYRES32=r6, @ANYBLOB="01000000000000002800128009000100766c616e000000001800028006000100000000000c0002000c0000000d00000008000500", @ANYRES64=r3], 0x50}, 0x1, 0x0, 0x0, 0x80}, 0x0) r7 = socket$packet(0x11, 0x2, 0x300) sendto$packet(r7, 0x0, 0x0, 0x44010, &(0x7f0000000040)={0x11, 0x4, r6, 0x1, 0x7}, 0x14) bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e21, @private=0x8a010102}, 0x10) sendto$inet(r1, &(0x7f00000002c0)="88", 0x1, 0x31, 0x0, 0x0) 9.928510832s ago: executing program 9 (id=2676): mkdir(&(0x7f0000000000)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1803000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000800b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b70200"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r3}, 0x10) write$P9_RVERSION(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff017f000e0800395032303030"], 0x15) r4 = dup(r1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r5 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb703000008000000b703000000000020850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) getrusage(0xffffffffffffffff, 0x0) socket$nl_route(0x10, 0x3, 0x0) setitimer(0x1, 0x0, 0x0) write$FUSE_BMAP(r4, &(0x7f0000000000)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r4, &(0x7f00000003c0)=ANY=[@ANYBLOB="b0"], 0xb0) write$FUSE_GETXATTR(r4, &(0x7f00000000c0)={0x18}, 0x18) write$FUSE_INIT(r4, &(0x7f0000000100)={0x50}, 0x50) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1, @ANYBLOB=',cache=fscache']) utime(&(0x7f0000000200)='./file0\x00', 0x0) 9.928132382s ago: executing program 2 (id=2677): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000400)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$MAP_CREATE(0x0, 0x0, 0x48) r4 = socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(0x0, r4) io_uring_setup(0x1e83, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, 0x0, 0x0) r5 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCSETD(r5, 0x5423, &(0x7f0000000000)=0x15) ioctl$TCFLSH(r5, 0x40384708, 0x20000000) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nfc(&(0x7f00000003c0), r6) sendmsg$NFC_CMD_VENDOR(r6, &(0x7f0000000c00)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000b00)={0x14, r7, 0x1, 0x70bd3d, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x4000000}, 0x800) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000010000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000003c80)={{0x14}, [@NFT_MSG_NEWRULE={0x60, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x34, 0x4, 0x0, 0x1, [{0x30, 0x1, 0x0, 0x1, @immediate={{0xe}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_IMMEDIATE_DATA={0x10, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0x3}]}]}, @NFTA_IMMEDIATE_DREG={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}, @NFT_MSG_DELRULE={0x20, 0x8, 0xa, 0x101, 0x0, 0x0, {0x2, 0x0, 0x3}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xa8}, 0x1, 0x0, 0x0, 0x44}, 0x0) 7.751902231s ago: executing program 2 (id=2678): socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000012c0)) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) listen(r1, 0xfffffffd) syz_emit_ethernet(0x56, &(0x7f0000000080)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a8435", 0x20, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x8, 0x2, 0x0, 0x0, 0x0, {[@timestamp={0x8, 0xa}]}}}}}}}}, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000180)={@local, @broadcast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a8435", 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000340), r4) sendmsg$IEEE802154_LLSEC_DEL_KEY(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000400)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010026bd7000fbdbdf252800000005002e000f0000000c002d000200aaaaaaaaaaaa05002b000300000008000200", @ANYRES32=r4, @ANYRES16=r0, @ANYRES16=r0], 0x38}, 0x1, 0x0, 0x0, 0x40}, 0x40850) syz_genetlink_get_family_id$ieee802154(0x0, 0xffffffffffffffff) sendmsg$IEEE802154_LLSEC_SETPARAMS(0xffffffffffffffff, 0x0, 0x4000000) sendmsg$IEEE802154_LLSEC_DEL_KEY(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000340)={0x0}}, 0x24040040) io_uring_setup(0x3dea, &(0x7f0000000480)={0x0, 0xb6e5, 0x4a2, 0x2, 0x2a2}) r6 = gettid() prlimit64(r6, 0x4, &(0x7f0000000000)={0x7, 0x4}, &(0x7f0000000240)) sendmsg$NFQNL_MSG_CONFIG(r0, 0x0, 0x8010) socketpair$unix(0x1, 0x1, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) 7.718572407s ago: executing program 9 (id=2679): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x24}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000040)={0x26, 'hash\x00', 0x0, 0x0, 'nhpoly1305-avx2\x00'}, 0x58) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = fcntl$dupfd(r0, 0x0, r1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_tcp_TCP_QUEUE_SEQ(0xffffffffffffffff, 0x6, 0x15, &(0x7f0000000100)=0x704, 0x4) r4 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) listen(r4, 0x0) accept4(r4, 0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='rxrpc_local\x00'}, 0x10) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000040)={0x48, 0x2, 0x6, 0x3, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:net\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x48}}, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)={0x38, 0x9, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x10, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @broadcast}}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x10000047}, 0x4000084) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="340000001a000100000000000000000002000000ef0000000000000008000100e000000108000300", @ANYRES32=r2, @ANYBLOB], 0x34}}, 0x400c840) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000000)="8a", 0x440) accept4(r0, 0x0, 0x0, 0x80000) 7.616709721s ago: executing program 2 (id=2680): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) add_key$user(&(0x7f0000000780), 0x0, 0x0, 0x0, 0xffffffffffffffff) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000fe05000000000000000000009500"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={0x0, r3}, 0x18) r4 = socket(0x2b, 0x1, 0x0) r5 = inotify_init() prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r6 = inotify_add_watch(r5, &(0x7f0000000280)='.\x00', 0x25000001) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, 0x0, &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f00000004c0)='kmem_cache_free\x00', r7}, 0x10) inotify_rm_watch(r5, r6) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DESTROY(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)=ANY=[@ANYBLOB], 0x1c}}, 0x5) sendmsg$IPSET_CMD_DESTROY(r4, &(0x7f00000003c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000340)={0x4c, 0x3, 0x6, 0x201, 0x0, 0x0, {0x7, 0x0, 0x6}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}]}, 0x4c}, 0x1, 0x0, 0x0, 0x1000}, 0xc1) r9 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r9, 0x6, 0x2, &(0x7f0000000040)=0x2800, 0x4) connect$inet(r9, &(0x7f0000000300)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x1a}}, 0x10) 7.521385499s ago: executing program 9 (id=2681): syz_init_net_socket$x25(0x9, 0x5, 0x0) pipe(&(0x7f0000000040)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000019080)=ANY=[@ANYBLOB="0100000001000000e27f000001"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000005700)={{r3, 0xffffffffffffffff}, &(0x7f0000005680), &(0x7f00000056c0)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r4}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x5}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x10) r6 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r6, 0x0, 0x0) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001c40)={0x8, 0x3, &(0x7f0000001300)=ANY=[@ANYBLOB="1800"/15], &(0x7f0000001200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) r8 = fsmount(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000200)={r7, r8, 0x1, 0x0, @void}, 0x10) r9 = memfd_create(&(0x7f0000001d80)='Y\xff\xff\x00\x00\x00\x00\x00K\xb2\x02\x80B\xe9\xe8\xcc\xde\x06\x00l\xa8\x1aJ\xaf\xb2M\xba\xb8_\x05U\xcd<|>\x9e\xec^\x0e\xbe\x18+-\x9b\x893\x02\x00\xa6\x1f+\xb3\xc5\x90z5\xe0\xdfi\xb7\x9f\xb4QW\xc9\xc9\x92\x03\t\x00\x00\x00\x00\x00\xb2\x0f\xee\xbe\f8\xcc\x7f\x00\x00\x00Z\x81\x00\x00\x00\x00\x18I\x13\xf1\xa2x\x04\x81R\xd45R\xae\x84\xcdN\xf7\xf6\b~\xed_M^dQ:\xbc\xafq\x88\x19nSF|;]\xe1A\x8c\x8a\x98\xd7|\xadNaC\xa6\xf9\xa7>c\x84\xd8\xfa\xf1\r\xb1\xfd\xbf!\xc7u\xccP\xdd\x13~\x89\xcf\x85\xca\xa0%\xc6\xc7\x11\x00\x00\x00\x00\x00\x00\x00?M9\\\av~\'\xd9\xb0\xacdya]8\x9d\xb7\v\xf39\xc5{\x9c!\x0f/\xb8g8\xb9\x8d\x19\xe2\xca\x01y\x83\xe7\ng\x87\xd93\xd8\x12\x8cXc5%\x03\x8d`\xdayC\x9b\x9a\xd9c\xe9\xb4\v\x99\x87\xe4\x00\x8a\x8eS\x8e\f\x05ZH\xa2\x0e\xbc\x9c\x95\b2Cf6\x9a\xe7\xb9\x86\xbe\xd0\xda\x91\xc1sl\x11PA\x93\xa5\x93\xc8\xf1w\x7fp6z\xbf\xe8[\'u\xb8\xd2$K\x12\rt\x87\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00r\xe2`\xdf\xd2\xb3\xaf\xe9\xc4!Z\xb4&\xa2\x12\xe2i\x91kC$A\xafR\xb3\xff\x1d=\xec\x10\xb4+\x13\'\x92>\x14\x00\a\xb6R\x8b\xdcz\xc3\xd1Y\xd6\xd9;s \xb0\x938\xb7D9\xdcN\xbd\xdbn\xe35\xa7\x02\x9c\xc1\xd9\x13?\xc9\xd7\xab\x9c\xf3\x82\xd1\xee^kk\xce\xdbn\x02\x1f\x80\t\xdbr\xa9\xcc\xf1\xcb\x9f@\x8c\xfc\x02W/p\x97\xb0\xbd\x8f\xdb|n2a\xee\x95u\x83\xca\x8a>}\xd3\xd0\xff6.pa\x17\xe3e\xd2\x7f\xf6\xbc\x9d\x112\x1b\x14p\xa1\xd6u\xefn\xb4\xa3\x05D\x8c\xc5l\xcc\b\xeb\xf42\xe9\xf15\xf3\xf2\xee\xd6\xed\t\xb3\xf7\x1a\x7f\xe6\xb4z\x19\xe1\xb4w\xf7\xa6\xd7\\\xfa\x96\xe2\xf9\xb1\x81\xba\xdfg\xadI\x1c\xde*_\xd5\xdf\xeeA\xcd \x91\xc9\xd4\xd1\xcd*.t\x80]\xd5~\xfb\xfb>\x9d\x91Kq]N\x87\x0f\x04L\xd4(\xf2G \xfdr~:\xc4\xc3\xfe\x14G\xadG~^l\xe0:(Y`\x0e\x90\xfa\x1c\xb6\f6\x92B\x92\xd3\xa9BG\xd2*AB\x1e\x01\xf0m+\x02\x87\x81aj;\xb6y.g\xeb\xc4\x0f\xd3\x85\xa5\x00\xa1\xa6iP\x0f\x02\x14\x90q\x94\xab\xb3\x0f\x01=\x06\x98\xa8\x87\xd9=\xce\xbef\x98\x87\xb5p\xf7\xd7\xeb\xfb\xf30\xb8\xf1\b\x06M\x18w\xdc\x0e\x98?\x04G\xf9\x99\xab\xc1\xc0z\xe9Fu\x03\x9aj\xc0]\xb47\xd5\xb8]\x98y@\x8c\x8fM\x8c],\x1b\x03\xaa\'gv\xeb\xbf\xa8d\"\x94e3Q\xfci\xdf\xad\x819\xd1\xf3\xaa\xc8i\xf2\x8a\xc4CU3\x87Ns\x9f\x9f\xcd\x05\x06', 0x7) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x2000002, 0x10012, r9, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) 7.511291487s ago: executing program 6 (id=2682): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) syz_pidfd_open(0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f00000002c0)='sys_enter\x00', r1}, 0x10) capget(&(0x7f0000000440)={0x19980330}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() clock_nanosleep(0x8, 0x0, 0x0, 0x0) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x0, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-blowfish-asm\x00'}, 0x58) r6 = accept$alg(r5, 0x0, 0x0) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f0000000080)="ad060000", 0x4) sendmsg$alg(r6, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f00000000c0)="438dc77642449e6e1755", 0xa}], 0x1}, 0x0) io_uring_register$IORING_UNREGISTER_BUFFERS(0xffffffffffffffff, 0x1, 0x0, 0x0) recvmmsg(r6, &(0x7f0000007dc0)=[{{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000500)=""/9, 0x9}], 0x1}, 0x4}], 0x1, 0x12021, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) mmap$IORING_OFF_SQES(&(0x7f000041a000/0x13000)=nil, 0x13000, 0x3000000, 0x10010, 0xffffffffffffffff, 0x10000000) r7 = socket$rds(0x15, 0x5, 0x0) setsockopt$RDS_CANCEL_SENT_TO(r7, 0x114, 0x1, &(0x7f0000000100)={0x2, 0x4e22, @local}, 0x10) 4.993490047s ago: executing program 9 (id=2683): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) r1 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r1, 0x0, 0xc8, &(0x7f0000003d40), 0x4) setsockopt$MRT_ADD_VIF(r1, 0x0, 0xca, &(0x7f0000003d80)={0x0, 0x0, 0x0, 0x0, @vifc_lcl_addr=@local, @dev}, 0x10) syz_emit_ethernet(0x2e, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaabb080046000001000000007800000000e0000300940400001100907800000000000000"], 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) r2 = syz_open_dev$swradio(&(0x7f00000007c0), 0x0, 0x2) socket$nl_xfrm(0x10, 0x3, 0x6) chdir(0x0) r3 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r3, 0x40086602, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000300)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000000d40)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000380)={r5, 0x0, 0x0}, 0x10) r6 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000d00), 0x4) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000840)={r6, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0xffe4, 0xfffffffffffffda0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x4) bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="0200000004000000080000000100", @ANYRES32, @ANYBLOB='\x00'/10, @ANYRES32=r7], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$VIDIOC_CREATE_BUFS(r2, 0xc100565c, &(0x7f0000000000)={0x0, 0x1, 0x2, {0xb, @win={{0x8, 0x0, 0x10001, 0x7f}, 0x5, 0x3, 0x0, 0x401, 0x0, 0x1}}}) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x2, &(0x7f0000000000)=[{0x2, 0x6, 0x1, 0x4}, {0xfff9, 0x0, 0x7, 0x3}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x240007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) prlimit64(0x0, 0x7, &(0x7f0000000140), 0x0) socket(0x40000000015, 0x5, 0x0) 2.743098302s ago: executing program 6 (id=2684): r0 = socket$nl_generic(0x10, 0x3, 0x10) set_mempolicy(0x3, &(0x7f0000000040)=0xb, 0xa2f) r1 = openat$smackfs_access(0xffffffffffffff9c, &(0x7f0000000600)='/sys/fs/smackfs/access\x00', 0x2, 0x0) write$smackfs_access(r1, 0x0, 0x0) socket$inet6_sctp(0xa, 0x801, 0x84) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x5, &(0x7f0000000000)=0x9718, 0x4) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x3000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) keyctl$chown(0x4, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x0, 0x0) r5 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000280), 0xaa481, 0x0) ioctl$SNDCTL_DSP_GETOPTR(r5, 0x800c5012, &(0x7f0000000040)) ioctl$SNDCTL_DSP_SPEED(r5, 0xc0045002, &(0x7f0000000080)=0x10000000) ioctl$SNDCTL_DSP_GETOSPACE(r5, 0x8010500c, 0x0) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, 0x0) r6 = socket$rxrpc(0x21, 0x2, 0xa) sendto$rxrpc(r6, 0x0, 0x0, 0x40000, &(0x7f0000000080)=@in6={0x21, 0x1, 0x2, 0x1c, {0xa, 0x4e23, 0x2, @private1, 0x100000}}, 0x24) r7 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x1, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r7, 0xc4c85512, &(0x7f0000000280)={{0x3, 0x0, 0x0, 0x0, 'syz1\x00'}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0xfffffffffffffffd, 0x100000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd451, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1]}) 2.729922975s ago: executing program 2 (id=2685): syz_open_dev$sg(&(0x7f0000001600), 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000800)={&(0x7f0000000200)=ANY=[@ANYBLOB="9feb0100180000000000000028000000280000000a000000000000000100000d080000000000000000000000000000000100000604"], &(0x7f0000000f40)=""/4089, 0x4a, 0xff9, 0x8, 0x0, 0x0, @void, @value}, 0x28) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x10, &(0x7f0000001280), 0x4) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet_smc(0x2b, 0x1, 0x0) r4 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r4, 0x9003000000000000, 0x40, &(0x7f0000000b40)=@raw={'raw\x00', 0x2, 0x3, 0x2c8, 0x178, 0x178, 0x178, 0x0, 0x178, 0x230, 0x230, 0x230, 0x230, 0x230, 0x3, 0x0, {[{{@uncond, 0x0, 0x158, 0x178, 0x0, {}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'kmp\x00', "d9d9e63590ab5471c46924e95540949f0cd7e2b0a94d71d9d944acb7f0a1297674a95b30cee19db4c1725572ba928385b1635c89b58ae9a0e1ea500b26f006da3fa8a134552f7980e92de5a784cd4f46e799e191835d7d5ea776f04bef524f22f0bb6ed4b00f44ceb936943e13fa1caa6b4b159c673db1efa9a08b1ddc74ce6c", 0xff}}, @common=@inet=@socket3={{0x28}}]}, @unspec=@NOTRACK={0x20}}, {{@uncond, 0x0, 0x98, 0xb8, 0x0, {}, [@common=@inet=@set2={{0x28}}]}, @unspec=@NOTRACK={0x20}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x328) r5 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r6 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r6, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) r8 = socket$nl_audit(0x10, 0x3, 0x9) getsockopt$sock_int(r8, 0x1, 0x3c, 0x0, &(0x7f0000000040)) ioctl$DRM_IOCTL_MODE_GETCRTC(r6, 0xc06864a1, &(0x7f0000000380)={0x0, 0xffffffca, r7, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r6, 0xc06864ce, &(0x7f0000000440)={r9, 0xe, 0x7f, 0x0, 0x0, [0x0], [0x0, 0x29, 0x2], [], [0x0, 0x0, 0xfffffffffffffffd]}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r5, 0xc02064b2, &(0x7f0000000340)={0x83ff, 0x2, 0xb5}) link(0x0, 0x0) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r5, 0xc00c642d, &(0x7f0000000080)={r10, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r6, 0xc00c642e, &(0x7f0000000300)={0x0, 0x0, r11}) close_range(r3, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) 12.815414ms ago: executing program 9 (id=2686): r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$inet_dccp(0x2, 0x6, 0x0) getsockopt$inet_int(r1, 0x10d, 0xcb, &(0x7f0000000000), &(0x7f0000000080)=0x4) setsockopt$inet_MCAST_LEAVE_GROUP(r1, 0x0, 0x2d, &(0x7f0000000280)={0x5, {{0x2, 0x4e20, @rand_addr=0x64010102}}}, 0x88) setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x2a, &(0x7f0000000180)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) setsockopt$inet_MCAST_MSFILTER(r1, 0x0, 0x30, &(0x7f0000000600)=ANY=[@ANYBLOB], 0x110) r2 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000240)=0xffffffffffffffff, 0x4) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x18, 0xfff, 0x7, 0x0, 0x80, 0xffffffffffffffff, 0x9, '\x00', 0x0, r2, 0x0, 0x1, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) ioctl$TCSETAF(r3, 0x5408, &(0x7f00000000c0)={0x0, 0x4ce, 0x0, 0x9dff, 0x1, "0007edeb00cbe600"}) write$binfmt_aout(r3, &(0x7f00000000c0)=ANY=[], 0xff2e) ioctl$TCSETS(r3, 0x40045431, &(0x7f0000000dc0)={0x0, 0x0, 0x0, 0x5, 0x0, "0062ba7d82000000000000000000f7ffffff00"}) r4 = syz_open_pts(r3, 0x0) r5 = dup3(r4, r3, 0x0) ioctl$TIOCSTI(r5, 0x5412, &(0x7f0000000000)=0x17) ioctl$TIOCSTI(r3, 0x5412, &(0x7f0000000100)=0xf) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r6}, 0x10) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r7, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'}) syz_genetlink_get_family_id$ethtool(&(0x7f0000000680), 0xffffffffffffffff) r8 = syz_open_dev$sndctrl(&(0x7f0000000100), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r8, 0xc1105517, &(0x7f0000000340)={{0x0, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x6, 0x0, 0x4, 0x0, 0x0, 0x0, 'syz1\x00', 0x0, 0x8}) socket$packet(0x11, 0x2, 0x300) r9 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_udp_encap(r9, 0x11, 0x64, &(0x7f0000000040)=0x2, 0x4) bind$inet6(r9, &(0x7f0000000000)={0xa, 0xe22, 0x0, @empty}, 0x1c) syz_emit_ethernet(0x66, &(0x7f0000000640)={@link_local, @link_local, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "010700", 0x30, 0x11, 0x25b4e59c81b60c2e, @private1, @mcast2, {[], {0x0, 0xe22, 0x30, 0x0, @opaque="f5c09875f8b1261e573beffe4a0a102d8080aa174b3ee71bbcc8d26ba4b7c133a34b44ff38194e95"}}}}}}, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r8, 0xc4c85513, &(0x7f0000000540)={{0x4, 0x2, 0x0, 0x0, 'syz0\x00'}, 0x0, [0x8, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xae, 0x0, 0x0, 0xfffffffffffffffe, 0xcf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x6, 0x0, 0x4, 0x801, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10001, 0x0, 0x80000000, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x100000001]}) 10.869449ms ago: executing program 6 (id=2687): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = openat$incfs(0xffffffffffffff9c, &(0x7f0000000040)='.pending_reads\x00', 0x4200, 0x2) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000004f4b000000000000000000180100002020702000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000fdffffff850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x27, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000040)='hrtimer_init\x00', r4}, 0x18) futex(0x0, 0x9, 0x1, &(0x7f0000000340)={0x0, 0x989680}, 0x0, 0x1) inotify_add_watch(r3, &(0x7f0000000180)='./file0\x00', 0x40000040) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="0b00000007000000010001000900000001000000"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r6}, 0x10) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000c80)={0x11, 0xb, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000ff01000000000000002000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x34, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r7}, 0x10) statfs(&(0x7f0000000000)='./file0\x00', 0x0) ioctl$UI_SET_EVBIT(r3, 0x40045564, 0x12) r8 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r8, &(0x7f0000000140)={0xffffffffffffffff, 0x0, &(0x7f0000000100)={&(0x7f0000000240)=@newsa={0x138, 0x10, 0x1, 0x0, 0x0, {{@in6=@private1, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x2}, {@in=@local, 0x0, 0x6c}, @in=@loopback, {}, {}, {}, 0x0, 0x0, 0x2}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}}, 0x0) 0s ago: executing program 2 (id=2688): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2) ioctl$KVM_RUN(r2, 0xae80, 0x0) socket$nl_generic(0x10, 0x3, 0x10) getsockopt$bt_hci(0xffffffffffffffff, 0x84, 0x81, &(0x7f0000000080)=""/4076, &(0x7f0000000040)=0xfec) r3 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r3, &(0x7f0000000100)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @loopback}, 0x4}}, 0x2e) mount$fuse(0x0, 0x0, &(0x7f0000002100), 0x0, &(0x7f0000000540)={{}, 0x2c, {'rootmode', 0x3d, 0x4000}}) mount(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000400)='ramfs\x00', 0x2000000, 0x0) chdir(&(0x7f0000000280)='./file0\x00') seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) clock_settime(0x0, &(0x7f0000003c80)={0x77359400}) creat(&(0x7f0000000300)='./bus\x00', 0x15d) r4 = open(&(0x7f00000000c0)='./bus\x00', 0x14103e, 0x0) r5 = open(&(0x7f0000000000)='./file0\x00', 0x143042, 0xfe) r6 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) read$FUSE(r6, &(0x7f0000001b00)={0x2020}, 0x2020) ftruncate(r5, 0x2008002) sendfile(r4, r5, 0x0, 0x80000001) kernel console output (not intermixed with test programs): 867][ T336] bond0 (unregistering): Released all slaves [ 983.776613][T16043] lo speed is unknown, defaulting to 1000 [ 983.943399][T11482] Bluetooth: hci4: command tx timeout [ 984.434263][T16043] chnl_net:caif_netlink_parms(): no params data found [ 985.915235][T11482] Bluetooth: hci4: command tx timeout [ 986.588172][ T336] hsr_slave_0: left promiscuous mode [ 986.640707][ T336] hsr_slave_1: left promiscuous mode [ 986.668148][ T336] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 986.680164][ T336] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 986.698460][ T336] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 986.724731][ T336] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 986.803855][ T336] veth1_macvtap: left promiscuous mode [ 986.809495][ T336] veth0_macvtap: left promiscuous mode [ 986.832707][ T336] veth1_vlan: left promiscuous mode [ 986.850169][ T336] veth0_vlan: left promiscuous mode [ 987.692945][ T336] team0 (unregistering): Port device team_slave_1 removed [ 987.757448][ T336] team0 (unregistering): Port device team_slave_0 removed [ 987.897085][T11482] Bluetooth: hci4: command tx timeout [ 988.647276][T16043] bridge0: port 1(bridge_slave_0) entered blocking state [ 988.664757][T16043] bridge0: port 1(bridge_slave_0) entered disabled state [ 988.684027][T16043] bridge_slave_0: entered allmulticast mode [ 988.698914][T16043] bridge_slave_0: entered promiscuous mode [ 989.360937][T16148] tipc: Enabled bearer , priority 0 [ 989.381145][T16043] bridge0: port 2(bridge_slave_1) entered blocking state [ 989.391658][T16043] bridge0: port 2(bridge_slave_1) entered disabled state [ 989.419662][T16043] bridge_slave_1: entered allmulticast mode [ 989.431508][T16043] bridge_slave_1: entered promiscuous mode [ 989.562520][T16043] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 989.648367][T16043] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 989.882057][T16167] netlink: 'syz.6.2048': attribute type 2 has an invalid length. [ 989.918426][T11050] Bluetooth: hci4: command tx timeout [ 990.631444][T16043] team0: Port device team_slave_0 added [ 990.643836][T11050] Bluetooth: hci2: command 0x0405 tx timeout [ 990.757391][T16174] netlink: 28 bytes leftover after parsing attributes in process `syz.6.2050'. [ 990.823731][T16043] team0: Port device team_slave_1 added [ 990.863789][T16174] netlink: 28 bytes leftover after parsing attributes in process `syz.6.2050'. [ 990.988862][ T29] kauditd_printk_skb: 29 callbacks suppressed [ 990.988879][ T29] audit: type=1326 audit(1031.660:1159): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16177 comm="syz.7.2053" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faf84d8cde9 code=0x7ffc0000 [ 991.070251][ T29] audit: type=1326 audit(1031.660:1160): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16177 comm="syz.7.2053" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faf84d8cde9 code=0x7ffc0000 [ 991.178997][T16174] syz_tun: entered promiscuous mode [ 991.195067][T16174] erspan0: entered promiscuous mode [ 991.215340][T16174] debugfs: Directory 'hsr1' with parent 'hsr' already present! [ 991.242104][ T29] audit: type=1326 audit(1031.660:1161): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16177 comm="syz.7.2053" exe="/root/syz-executor" sig=0 arch=c000003e syscall=254 compat=0 ip=0x7faf84d8cde9 code=0x7ffc0000 [ 991.270203][T16174] Cannot create hsr debugfs directory [ 991.351053][ T29] audit: type=1326 audit(1031.660:1162): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16177 comm="syz.7.2053" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faf84d8cde9 code=0x7ffc0000 [ 991.652914][ T29] audit: type=1326 audit(1031.660:1163): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16177 comm="syz.7.2053" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faf84d8cde9 code=0x7ffc0000 [ 991.674419][ T29] audit: type=1326 audit(1031.691:1164): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16177 comm="syz.7.2053" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7faf84d8cde9 code=0x7ffc0000 [ 991.707962][ T29] audit: type=1326 audit(1031.691:1165): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16177 comm="syz.7.2053" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faf84d8cde9 code=0x7ffc0000 [ 992.040346][T16043] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 992.411159][ T29] audit: type=1326 audit(1031.691:1166): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16177 comm="syz.7.2053" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faf84d8cde9 code=0x7ffc0000 [ 992.432297][ C0] vkms_vblank_simulate: vblank timer overrun [ 992.450125][T16043] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 992.553342][T16043] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 992.563004][ T29] audit: type=1326 audit(1031.691:1167): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16177 comm="syz.7.2053" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7faf84d8cde9 code=0x7ffc0000 [ 992.616981][T16043] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 992.649843][ T29] audit: type=1326 audit(1031.691:1168): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16177 comm="syz.7.2053" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faf84d8cde9 code=0x7ffc0000 [ 992.662099][T16043] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 992.748732][T16043] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 992.873534][T16043] hsr_slave_0: entered promiscuous mode [ 992.902040][T16043] hsr_slave_1: entered promiscuous mode [ 992.926875][T16043] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 992.953266][T16043] Cannot create hsr debugfs directory [ 995.035086][ T5908] usb 7-1: new high-speed USB device number 17 using dummy_hcd [ 995.200687][ T5908] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 995.224625][ T5908] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 995.255962][ T5908] usb 7-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 995.279711][ T5908] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 995.303820][ T5908] usb 7-1: SerialNumber: syz [ 995.313941][T16043] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 995.331412][T16043] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 995.350935][T16043] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 995.368930][T16043] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 995.517168][ T5908] usb 7-1: 0:2 : does not exist [ 995.560751][ T5908] usb 7-1: USB disconnect, device number 17 [ 995.589916][T16043] 8021q: adding VLAN 0 to HW filter on device bond0 [ 995.676032][T16043] 8021q: adding VLAN 0 to HW filter on device team0 [ 995.698808][ T6182] bridge0: port 1(bridge_slave_0) entered blocking state [ 995.705955][ T6182] bridge0: port 1(bridge_slave_0) entered forwarding state [ 995.754211][ T6182] bridge0: port 2(bridge_slave_1) entered blocking state [ 995.761451][ T6182] bridge0: port 2(bridge_slave_1) entered forwarding state [ 995.832557][T16271] udevd[16271]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 995.837096][T16043] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 996.604412][ T29] kauditd_printk_skb: 37 callbacks suppressed [ 996.604468][ T29] audit: type=1326 audit(1037.390:1206): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16290 comm="syz.7.2076" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faf84d8cde9 code=0x7ffc0000 [ 996.984086][ T29] audit: type=1326 audit(1037.390:1207): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16290 comm="syz.7.2076" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faf84d8cde9 code=0x7ffc0000 [ 997.220479][ T29] audit: type=1326 audit(1037.390:1208): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16290 comm="syz.7.2076" exe="/root/syz-executor" sig=0 arch=c000003e syscall=254 compat=0 ip=0x7faf84d8cde9 code=0x7ffc0000 [ 997.256157][ T29] audit: type=1326 audit(1037.390:1209): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16290 comm="syz.7.2076" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faf84d8cde9 code=0x7ffc0000 [ 997.372741][T16043] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 997.397976][ T29] audit: type=1326 audit(1037.390:1210): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16290 comm="syz.7.2076" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faf84d8cde9 code=0x7ffc0000 [ 997.482248][T16306] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2078'. [ 997.512762][ T29] audit: type=1326 audit(1037.390:1211): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16290 comm="syz.7.2076" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7faf84d8cde9 code=0x7ffc0000 [ 997.573413][ T29] audit: type=1326 audit(1037.390:1212): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16290 comm="syz.7.2076" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faf84d8cde9 code=0x7ffc0000 [ 997.623634][ T29] audit: type=1326 audit(1037.390:1213): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16290 comm="syz.7.2076" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faf84d8cde9 code=0x7ffc0000 [ 997.676976][ T5878] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 997.703225][ T29] audit: type=1326 audit(1037.390:1214): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16290 comm="syz.7.2076" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7faf84d8cde9 code=0x7ffc0000 [ 997.746643][ T29] audit: type=1326 audit(1037.390:1215): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16290 comm="syz.7.2076" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faf84d8cde9 code=0x7ffc0000 [ 997.767797][ C0] vkms_vblank_simulate: vblank timer overrun [ 997.810015][ T5878] hid-generic 0000:0000:0000.0008: hidraw0: HID v0.00 Device [syz1] on syz0 [ 997.903132][ T8237] usb 7-1: new high-speed USB device number 18 using dummy_hcd [ 998.055420][ T8237] usb 7-1: Using ep0 maxpacket: 16 [ 998.066891][ T8237] usb 7-1: config 0 has no interfaces? [ 998.075325][ T8237] usb 7-1: New USB device found, idVendor=056a, idProduct=0029, bcdDevice= 0.00 [ 998.124952][ T8237] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 998.277283][ T8237] usb 7-1: config 0 descriptor?? [ 998.702115][ T8237] usb 7-1: USB disconnect, device number 18 [ 998.987126][T16043] veth0_vlan: entered promiscuous mode [ 999.043926][T16043] veth1_vlan: entered promiscuous mode [ 999.124572][T16349] bridge0: port 2(netdevsim2) entered blocking state [ 999.131360][T16349] bridge0: port 2(netdevsim2) entered disabled state [ 999.176325][T16349] netdevsim netdevsim7 netdevsim2: entered allmulticast mode [ 999.186833][T16349] netdevsim netdevsim7 netdevsim2: entered promiscuous mode [ 999.244978][T16043] veth0_macvtap: entered promiscuous mode [ 1000.085731][T16043] veth1_macvtap: entered promiscuous mode [ 1000.156965][T16043] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1000.299514][T16043] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1000.318760][T16043] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1000.332686][T16043] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1000.352348][T16043] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1000.695380][T16043] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1000.783870][T16043] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1001.182119][T16043] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1001.400323][T16043] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1001.426318][T16043] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1001.487433][T16043] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1001.564356][T16043] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1001.612210][T16043] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1001.653772][T16043] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1002.432100][T16043] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1002.460954][T16043] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1002.481790][T16043] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1002.549545][T16043] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1002.573283][T16043] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1002.594157][T16043] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1002.607937][T16043] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1002.634256][T16043] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1002.713493][T16043] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1002.753298][T16043] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1002.792415][T16043] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1002.824692][T16043] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1003.538625][ T3970] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1003.573871][ T3970] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1003.675370][ T3970] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1003.742337][ T3970] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1005.658543][T16414] xt_bpf: check failed: parse error [ 1006.029297][ T6182] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1006.295754][ T6182] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1006.526524][ T6182] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1006.683088][ T6182] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1007.243302][ T29] kauditd_printk_skb: 36 callbacks suppressed [ 1007.243319][ T29] audit: type=1326 audit(1048.713:1252): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16432 comm="syz.2.2101" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f722778cde9 code=0x7ffc0000 [ 1007.365497][ T6182] bridge_slave_1: left allmulticast mode [ 1007.413103][ T29] audit: type=1326 audit(1048.713:1253): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16432 comm="syz.2.2101" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f722778cde9 code=0x7ffc0000 [ 1007.434467][ T29] audit: type=1326 audit(1048.713:1254): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16432 comm="syz.2.2101" exe="/root/syz-executor" sig=0 arch=c000003e syscall=254 compat=0 ip=0x7f722778cde9 code=0x7ffc0000 [ 1007.455824][ C0] vkms_vblank_simulate: vblank timer overrun [ 1007.489420][ T6182] bridge_slave_1: left promiscuous mode [ 1007.492733][ T29] audit: type=1326 audit(1048.713:1255): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16432 comm="syz.2.2101" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f722778cde9 code=0x7ffc0000 [ 1007.517647][ T6182] bridge0: port 2(bridge_slave_1) entered disabled state [ 1007.534128][ T6182] bridge_slave_0: left allmulticast mode [ 1007.541112][ T6182] bridge_slave_0: left promiscuous mode [ 1007.558430][ T6182] bridge0: port 1(bridge_slave_0) entered disabled state [ 1008.480924][ T29] audit: type=1326 audit(1048.713:1256): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16432 comm="syz.2.2101" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f722778cde9 code=0x7ffc0000 [ 1008.502269][ C0] vkms_vblank_simulate: vblank timer overrun [ 1008.594876][ T29] audit: type=1326 audit(1048.713:1257): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16432 comm="syz.2.2101" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f722778cde9 code=0x7ffc0000 [ 1008.616019][ C0] vkms_vblank_simulate: vblank timer overrun [ 1008.713573][ T29] audit: type=1326 audit(1048.713:1258): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16432 comm="syz.2.2101" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f722778cde9 code=0x7ffc0000 [ 1008.790028][ T51] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1008.801605][ T29] audit: type=1326 audit(1048.713:1259): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16432 comm="syz.2.2101" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f722778cde9 code=0x7ffc0000 [ 1008.822822][ C0] vkms_vblank_simulate: vblank timer overrun [ 1008.909116][ T29] audit: type=1326 audit(1048.713:1260): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16432 comm="syz.2.2101" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f722778cde9 code=0x7ffc0000 [ 1008.930904][ C0] vkms_vblank_simulate: vblank timer overrun [ 1008.975111][ T29] audit: type=1326 audit(1048.713:1261): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16432 comm="syz.2.2101" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f722778cde9 code=0x7ffc0000 [ 1008.996317][ C0] vkms_vblank_simulate: vblank timer overrun [ 1009.263414][T11050] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1009.290073][T11050] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1009.308785][T11050] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1009.347957][T11050] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1009.357316][T11050] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 1009.365133][T11050] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1010.145357][ T6182] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1010.192278][ T6182] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1010.239479][ T6182] bond0 (unregistering): Released all slaves [ 1011.143149][T16458] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1011.348945][T16458] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1011.411048][T11050] Bluetooth: hci4: command tx timeout [ 1012.190700][T16458] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1012.460297][T16458] netdevsim netdevsim9 netdevsim0 (unregistering): left allmulticast mode [ 1013.220249][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 1013.286170][T16458] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1013.317240][T16515] veth0_macvtap: mtu less than device minimum [ 1013.425897][T16470] lo speed is unknown, defaulting to 1000 [ 1013.436141][T11050] Bluetooth: hci4: command tx timeout [ 1014.756914][T16458] netdevsim netdevsim9 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1014.925839][T16540] netlink: 'syz.2.2120': attribute type 1 has an invalid length. [ 1014.991776][ T6182] hsr_slave_0: left promiscuous mode [ 1015.009982][ T6182] hsr_slave_1: left promiscuous mode [ 1015.018925][ T6182] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1015.026438][ T6182] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1015.085067][ T6182] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1015.115588][ T6182] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1015.233572][ T6182] veth1_macvtap: left promiscuous mode [ 1015.239914][ T6182] veth0_macvtap: left promiscuous mode [ 1015.245584][ T6182] veth1_vlan: left promiscuous mode [ 1015.251044][ T6182] veth0_vlan: left promiscuous mode [ 1015.477589][T11050] Bluetooth: hci4: command tx timeout [ 1016.887803][T16555] Falling back ldisc for pty33. [ 1017.235660][ T6182] team0 (unregistering): Port device team_slave_1 removed [ 1017.304464][ T6182] team0 (unregistering): Port device team_slave_0 removed [ 1017.399965][T11050] Bluetooth: hci4: command tx timeout [ 1017.962429][T16458] netdevsim netdevsim9 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1017.973652][T16540] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 1018.033374][T16561] tipc: Enabled bearer , priority 10 [ 1018.166151][T16458] netdevsim netdevsim9 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1018.217851][T16458] netdevsim netdevsim9 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1019.368476][T16470] chnl_net:caif_netlink_parms(): no params data found [ 1021.560685][T16612] netlink: 'syz.9.2134': attribute type 4 has an invalid length. [ 1021.568608][T16612] netlink: 152 bytes leftover after parsing attributes in process `syz.9.2134'. [ 1022.321775][T16612] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 1022.390892][T16470] bridge0: port 1(bridge_slave_0) entered blocking state [ 1022.434171][T16610] siw: device registration error -23 [ 1022.443021][T16470] bridge0: port 1(bridge_slave_0) entered disabled state [ 1022.461912][T16470] bridge_slave_0: entered allmulticast mode [ 1022.469042][T16470] bridge_slave_0: entered promiscuous mode [ 1022.631835][T16470] bridge0: port 2(bridge_slave_1) entered blocking state [ 1022.639046][T16470] bridge0: port 2(bridge_slave_1) entered disabled state [ 1022.646534][T16470] bridge_slave_1: entered allmulticast mode [ 1022.653867][T16470] bridge_slave_1: entered promiscuous mode [ 1023.617498][T16629] openvswitch: netlink: Flow key attr not present in new flow. [ 1023.925165][T16470] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1024.894835][T16470] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1025.277647][ T29] kauditd_printk_skb: 13 callbacks suppressed [ 1025.277688][ T29] audit: type=1326 audit(1067.581:1275): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16634 comm="syz.7.2140" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faf84d8cde9 code=0x7ffc0000 [ 1025.921167][ T29] audit: type=1326 audit(1067.581:1276): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16634 comm="syz.7.2140" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faf84d8cde9 code=0x7ffc0000 [ 1025.943838][ T29] audit: type=1326 audit(1067.581:1277): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16634 comm="syz.7.2140" exe="/root/syz-executor" sig=0 arch=c000003e syscall=254 compat=0 ip=0x7faf84d8cde9 code=0x7ffc0000 [ 1025.971831][ T29] audit: type=1326 audit(1067.581:1278): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16634 comm="syz.7.2140" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faf84d8cde9 code=0x7ffc0000 [ 1026.107087][ T29] audit: type=1326 audit(1067.581:1279): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16634 comm="syz.7.2140" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faf84d8cde9 code=0x7ffc0000 [ 1026.129371][ T29] audit: type=1326 audit(1067.581:1280): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16634 comm="syz.7.2140" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7faf84d8cde9 code=0x7ffc0000 [ 1026.183038][ T29] audit: type=1326 audit(1067.591:1281): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16634 comm="syz.7.2140" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faf84d8cde9 code=0x7ffc0000 [ 1026.952886][T16470] team0: Port device team_slave_0 added [ 1027.104230][T16470] team0: Port device team_slave_1 added [ 1027.231231][ T29] audit: type=1326 audit(1067.591:1282): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16634 comm="syz.7.2140" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faf84d8cde9 code=0x7ffc0000 [ 1027.444209][ T29] audit: type=1326 audit(1067.602:1283): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16634 comm="syz.7.2140" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7faf84d8cde9 code=0x7ffc0000 [ 1027.528377][ T29] audit: type=1326 audit(1067.602:1284): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16634 comm="syz.7.2140" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faf84d8cde9 code=0x7ffc0000 [ 1028.871736][T16470] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1028.902546][T16470] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1028.931079][T16470] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1028.974963][T16470] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1029.144899][T16470] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1029.295068][T16470] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1029.337579][ T6182] vlan2: left allmulticast mode [ 1029.357659][ T6182] gretap0: left allmulticast mode [ 1029.383328][ T6182] vlan2: left promiscuous mode [ 1029.391662][ T6182] gretap0: left promiscuous mode [ 1029.423817][ T6182] bridge0: port 3(vlan2) entered disabled state [ 1029.468737][T16672] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2149'. [ 1029.481650][ T6182] bridge_slave_1: left allmulticast mode [ 1029.499204][ T6182] bridge_slave_1: left promiscuous mode [ 1029.510520][ T6182] bridge0: port 2(bridge_slave_1) entered disabled state [ 1029.662888][ T6182] bridge_slave_0: left allmulticast mode [ 1029.694222][ T6182] bridge_slave_0: left promiscuous mode [ 1029.699915][ T6182] bridge0: port 1(bridge_slave_0) entered disabled state [ 1030.483521][T16681] openvswitch: netlink: Flow key attr not present in new flow. [ 1031.670901][ T6182] dvmrp0 (unregistering): left allmulticast mode [ 1031.889762][ T29] kauditd_printk_skb: 28 callbacks suppressed [ 1031.889802][ T29] audit: type=1326 audit(1074.412:1313): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16685 comm="syz.9.2154" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8b8a38cde9 code=0x7ffc0000 [ 1031.997219][ T29] audit: type=1326 audit(1074.412:1314): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16685 comm="syz.9.2154" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8b8a38cde9 code=0x7ffc0000 [ 1032.019405][ T29] audit: type=1326 audit(1074.423:1315): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16685 comm="syz.9.2154" exe="/root/syz-executor" sig=0 arch=c000003e syscall=254 compat=0 ip=0x7f8b8a38cde9 code=0x7ffc0000 [ 1032.052938][ T29] audit: type=1326 audit(1074.423:1316): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16685 comm="syz.9.2154" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8b8a38cde9 code=0x7ffc0000 [ 1032.074994][ T29] audit: type=1326 audit(1074.423:1317): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16685 comm="syz.9.2154" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8b8a38cde9 code=0x7ffc0000 [ 1032.126461][ T29] audit: type=1326 audit(1074.423:1318): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16685 comm="syz.9.2154" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f8b8a38cde9 code=0x7ffc0000 [ 1032.168535][ T29] audit: type=1326 audit(1074.433:1319): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16685 comm="syz.9.2154" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8b8a38cde9 code=0x7ffc0000 [ 1032.191995][ T29] audit: type=1326 audit(1074.433:1320): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16685 comm="syz.9.2154" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8b8a38cde9 code=0x7ffc0000 [ 1032.218755][ T29] audit: type=1326 audit(1074.433:1321): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16685 comm="syz.9.2154" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f8b8a38cde9 code=0x7ffc0000 [ 1032.240442][ T29] audit: type=1326 audit(1074.444:1322): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16685 comm="syz.9.2154" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8b8a38cde9 code=0x7ffc0000 [ 1032.261616][ C0] vkms_vblank_simulate: vblank timer overrun [ 1034.590405][ T6182] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1034.620469][ T6182] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1034.649243][ T6182] bond0 (unregistering): Released all slaves [ 1034.696887][T16672] ipvlan0: entered promiscuous mode [ 1034.724824][T16672] 8021q: adding VLAN 0 to HW filter on device ipvlan0 [ 1034.733978][T16672] bond0: (slave ipvlan0): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 1034.874272][T16470] hsr_slave_0: entered promiscuous mode [ 1034.885608][T16470] hsr_slave_1: entered promiscuous mode [ 1034.892033][T16470] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1035.076736][T16470] Cannot create hsr debugfs directory [ 1039.602884][ T78] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1041.650089][ T6182] hsr_slave_0: left promiscuous mode [ 1041.671598][ T6182] hsr_slave_1: left promiscuous mode [ 1041.689274][ T6182] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1041.715266][ T6182] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1041.888904][ T6182] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1041.901843][ T6182] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1042.980355][ T6182] veth1_macvtap: left promiscuous mode [ 1042.999307][ T6182] veth0_macvtap: left promiscuous mode [ 1043.018930][ T6182] veth1_vlan: left promiscuous mode [ 1043.037956][ T6182] veth0_vlan: left promiscuous mode [ 1044.382888][ T6182] pimreg (unregistering): left allmulticast mode [ 1047.055269][ T6182] team0 (unregistering): Port device team_slave_1 removed [ 1047.777959][ T6182] team0 (unregistering): Port device team_slave_0 removed [ 1050.381764][T16849] netlink: 'syz.9.2193': attribute type 1 has an invalid length. [ 1051.170649][T16850] bond1: (slave ip6gretap1): Enslaving as a backup interface with an up link [ 1051.325717][T16851] veth3: entered promiscuous mode [ 1051.382832][T16851] bond1: (slave veth3): Enslaving as a backup interface with a down link [ 1054.130463][T16896] netlink: 4 bytes leftover after parsing attributes in process `syz.9.2200'. [ 1056.693010][T16914] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 1057.068101][ T6182] IPVS: stop unused estimator thread 0... [ 1057.386223][T16470] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 1058.465199][T16470] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 1058.491162][T16470] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 1059.580966][T16470] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 1059.674378][T16945] netlink: 1256 bytes leftover after parsing attributes in process `syz.7.2214'. [ 1059.842222][T16470] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1059.920123][T16470] 8021q: adding VLAN 0 to HW filter on device team0 [ 1059.971383][ T3970] bridge0: port 1(bridge_slave_0) entered blocking state [ 1059.978597][ T3970] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1060.034044][ T336] bridge0: port 2(bridge_slave_1) entered blocking state [ 1060.041214][ T336] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1060.046275][T16951] netlink: 28 bytes leftover after parsing attributes in process `syz.7.2215'. [ 1060.085038][T16951] netlink: 28 bytes leftover after parsing attributes in process `syz.7.2215'. [ 1060.124898][T16951] team0: entered promiscuous mode [ 1060.142612][T16951] : entered promiscuous mode [ 1060.156387][T16951] debugfs: Directory 'hsr1' with parent 'hsr' already present! [ 1060.193958][T16951] Cannot create hsr debugfs directory [ 1060.219762][T16951] hsr1: Slave A (team0) is not up; please bring it up to get a fully working HSR network [ 1060.270690][T16951] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 1060.385001][T16470] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1061.434239][T16970] 9pnet_fd: Insufficient options for proto=fd [ 1063.559037][T16987] overlayfs: failed to clone upperpath [ 1063.647725][T16470] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1066.620898][T17040] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 1066.819485][T11482] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1067.059647][T11482] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1067.085432][T11482] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1067.095715][T11482] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1067.109763][T11482] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 1067.117569][T11482] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1069.321050][T11482] Bluetooth: hci4: command tx timeout [ 1069.374187][T17045] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 1071.716788][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 1071.732855][ T6350] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1071.747123][T11482] Bluetooth: hci4: command tx timeout [ 1073.662719][T11482] Bluetooth: hci4: command tx timeout [ 1074.821305][T17048] lo speed is unknown, defaulting to 1000 [ 1075.061429][ T5879] usb 7-1: new high-speed USB device number 19 using dummy_hcd [ 1075.654836][T11482] Bluetooth: hci4: command tx timeout [ 1075.824548][ T5879] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1075.852332][ T5879] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1075.916741][ T5879] usb 7-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 1076.117527][ T5879] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 1076.162679][ T5879] usb 7-1: SerialNumber: syz [ 1076.397271][ T5879] usb 7-1: 0:2 : does not exist [ 1076.424236][T17048] chnl_net:caif_netlink_parms(): no params data found [ 1076.438663][ T5879] usb 7-1: unit 255 not found! [ 1076.451376][ T5879] usb 7-1: 5:0: cannot get min/max values for control 15 (id 5) [ 1076.478485][ T5879] usb 7-1: 5:0: cannot get min/max values for control 16 (id 5) [ 1076.550522][ T5879] usb 7-1: USB disconnect, device number 19 [ 1076.795512][T17145] udevd[17145]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1076.864433][ T5962] bridge_slave_1: left allmulticast mode [ 1076.873791][ T5962] bridge_slave_1: left promiscuous mode [ 1076.879694][ T5962] bridge0: port 2(bridge_slave_1) entered disabled state [ 1077.001040][ T5962] bridge_slave_0: left allmulticast mode [ 1077.039400][ T5962] bridge_slave_0: left promiscuous mode [ 1077.072130][ T5962] bridge0: port 1(bridge_slave_0) entered disabled state [ 1079.255079][T17176] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2257'. [ 1079.745075][ T29] kauditd_printk_skb: 7 callbacks suppressed [ 1079.745115][ T29] audit: type=1326 audit(1124.763:1330): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17178 comm="syz.6.2258" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1a9db8cde9 code=0x7ffc0000 [ 1080.298459][ T29] audit: type=1326 audit(1124.763:1331): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17178 comm="syz.6.2258" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1a9db8cde9 code=0x7ffc0000 [ 1080.319639][ C0] vkms_vblank_simulate: vblank timer overrun [ 1080.331541][ T29] audit: type=1326 audit(1124.763:1332): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17178 comm="syz.6.2258" exe="/root/syz-executor" sig=0 arch=c000003e syscall=254 compat=0 ip=0x7f1a9db8cde9 code=0x7ffc0000 [ 1080.371611][ T29] audit: type=1326 audit(1124.763:1333): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17178 comm="syz.6.2258" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1a9db8cde9 code=0x7ffc0000 [ 1080.454983][ T29] audit: type=1326 audit(1124.763:1334): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17178 comm="syz.6.2258" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1a9db8cde9 code=0x7ffc0000 [ 1080.476118][ C0] vkms_vblank_simulate: vblank timer overrun [ 1080.502626][ T29] audit: type=1326 audit(1124.763:1335): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17178 comm="syz.6.2258" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f1a9db8cde9 code=0x7ffc0000 [ 1080.523788][ C0] vkms_vblank_simulate: vblank timer overrun [ 1080.571696][ T29] audit: type=1326 audit(1124.763:1336): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17178 comm="syz.6.2258" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1a9db8cde9 code=0x7ffc0000 [ 1080.612045][ T29] audit: type=1326 audit(1124.763:1337): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17178 comm="syz.6.2258" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1a9db8cde9 code=0x7ffc0000 [ 1080.633305][ C0] vkms_vblank_simulate: vblank timer overrun [ 1080.648759][ T29] audit: type=1326 audit(1124.773:1338): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17178 comm="syz.6.2258" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f1a9db8cde9 code=0x7ffc0000 [ 1080.671636][ T29] audit: type=1326 audit(1124.773:1339): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17178 comm="syz.6.2258" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1a9db8cde9 code=0x7ffc0000 [ 1081.850680][ T5962] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1081.863204][ T5962] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1081.884403][ T5962] bond0 (unregistering): Released all slaves [ 1082.155435][T17048] bridge0: port 1(bridge_slave_0) entered blocking state [ 1082.167968][T17048] bridge0: port 1(bridge_slave_0) entered disabled state [ 1082.181019][T17048] bridge_slave_0: entered allmulticast mode [ 1082.222716][T17048] bridge_slave_0: entered promiscuous mode [ 1082.244388][T17048] bridge0: port 2(bridge_slave_1) entered blocking state [ 1082.271416][T17048] bridge0: port 2(bridge_slave_1) entered disabled state [ 1082.289466][T17048] bridge_slave_1: entered allmulticast mode [ 1082.297498][T17048] bridge_slave_1: entered promiscuous mode [ 1083.450840][T17048] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1083.486830][T17048] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1084.633963][ T5962] hsr_slave_0: left promiscuous mode [ 1084.656293][ T5962] hsr_slave_1: left promiscuous mode [ 1084.676591][ T5962] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1084.701868][ T5962] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1085.358319][ T9] IPVS: starting estimator thread 0... [ 1085.469047][T17250] IPVS: using max 20 ests per chain, 48000 per kthread [ 1086.957483][ T5962] team0 (unregistering): Port device team_slave_1 removed [ 1087.498774][ T5962] team0 (unregistering): Port device team_slave_0 removed [ 1088.258033][ T29] kauditd_printk_skb: 26 callbacks suppressed [ 1088.258047][ T29] audit: type=1800 audit(1133.735:1366): pid=17280 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz.9.2279" name="bus" dev="tmpfs" ino=1356 res=0 errno=0 [ 1089.263907][T17285] netlink: 4 bytes leftover after parsing attributes in process `syz.9.2280'. [ 1089.273730][T17285] unsupported nlmsg_type 40 [ 1089.627707][T17287] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2281'. [ 1089.748764][T17288] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2281'. [ 1089.812133][T17048] team0: Port device team_slave_0 added [ 1090.053133][T17287] bond_slave_0: entered promiscuous mode [ 1090.059411][T17287] bond_slave_1: entered promiscuous mode [ 1090.065442][T17287] batadv0: entered promiscuous mode [ 1090.651288][T17287] macvtap1: entered promiscuous mode [ 1091.115249][T17287] bond0: entered promiscuous mode [ 1091.121840][T17287] macvtap1: entered allmulticast mode [ 1091.127252][T17287] bond0: entered allmulticast mode [ 1091.132618][T17287] bond_slave_0: entered allmulticast mode [ 1091.139614][T17287] bond_slave_1: entered allmulticast mode [ 1091.145589][T17287] batadv0: entered allmulticast mode [ 1091.270123][T17287] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 1091.362505][T17288] bond0: left allmulticast mode [ 1091.392723][T17288] bond_slave_0: left allmulticast mode [ 1091.423335][T17288] bond_slave_1: left allmulticast mode [ 1091.449854][T17288] batadv0: left allmulticast mode [ 1091.465480][T17288] bond0: left promiscuous mode [ 1091.474746][T17311] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2285'. [ 1091.486162][T17288] bond_slave_0: left promiscuous mode [ 1091.492230][T17288] bond_slave_1: left promiscuous mode [ 1091.498213][T17288] batadv0: left promiscuous mode [ 1091.517255][T17048] team0: Port device team_slave_1 added [ 1092.228379][T17048] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1092.248192][T17048] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1092.274211][ C0] vkms_vblank_simulate: vblank timer overrun [ 1092.290333][T17048] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1092.313781][T17048] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1092.357076][T17048] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1092.434866][T17048] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1093.452061][T17048] hsr_slave_0: entered promiscuous mode [ 1093.514993][T17048] hsr_slave_1: entered promiscuous mode [ 1093.632507][T17048] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1094.642328][T17048] Cannot create hsr debugfs directory [ 1096.929440][T17371] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1096.941617][T17371] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1096.951424][T17371] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1097.000537][T17371] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1097.008410][T17371] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 1097.021167][T17371] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1098.672102][T17176] : (slave syz_tun): Releasing backup interface [ 1099.275605][T17371] Bluetooth: hci5: command tx timeout [ 1099.755740][T17399] overlayfs: failed to clone lowerpath [ 1100.495030][T17048] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 1100.516877][T17369] lo speed is unknown, defaulting to 1000 [ 1102.105418][T17048] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 1102.184046][T17048] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 1102.248258][T17371] Bluetooth: hci5: command tx timeout [ 1102.323110][T17048] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 1102.683963][T17430] overlayfs: failed to clone lowerpath [ 1103.446590][T17048] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1103.464131][T17048] 8021q: adding VLAN 0 to HW filter on device team0 [ 1103.475344][T17369] chnl_net:caif_netlink_parms(): no params data found [ 1103.516550][ T3970] bridge0: port 1(bridge_slave_0) entered blocking state [ 1103.523714][ T3970] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1104.807400][T17371] Bluetooth: hci5: command tx timeout [ 1104.857236][ T336] bridge0: port 2(bridge_slave_1) entered blocking state [ 1104.864446][ T336] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1105.773400][T17048] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1105.834706][T17048] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1106.122778][T17455] futex_wake_op: syz.2.2311 tries to shift op by -1; fix this program [ 1106.897021][T17371] Bluetooth: hci5: command tx timeout [ 1107.219252][T17369] bridge0: port 1(bridge_slave_0) entered blocking state [ 1107.301663][T17476] openvswitch: netlink: ct_state flags 010000e0 unsupported [ 1107.518259][T17369] bridge0: port 1(bridge_slave_0) entered disabled state [ 1107.526580][T17369] bridge_slave_0: entered allmulticast mode [ 1107.540478][T17369] bridge_slave_0: entered promiscuous mode [ 1107.690630][T17369] bridge0: port 2(bridge_slave_1) entered blocking state [ 1107.816972][T17369] bridge0: port 2(bridge_slave_1) entered disabled state [ 1108.695989][T17369] bridge_slave_1: entered allmulticast mode [ 1108.729652][T17369] bridge_slave_1: entered promiscuous mode [ 1108.888016][T17369] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1109.028020][T17369] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1109.838856][T17369] team0: Port device team_slave_0 added [ 1109.857959][T17369] team0: Port device team_slave_1 added [ 1110.073644][T17369] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1110.119946][T17369] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1110.145916][ C0] vkms_vblank_simulate: vblank timer overrun [ 1110.204940][T17369] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1110.890159][T17369] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1110.904922][T17369] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1110.970971][T17369] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1111.025263][T17048] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1111.664625][T17369] hsr_slave_0: entered promiscuous mode [ 1111.757747][T17369] hsr_slave_1: entered promiscuous mode [ 1111.769411][T17369] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1111.786926][T17369] Cannot create hsr debugfs directory [ 1114.278416][T17371] Bluetooth: hci2: unexpected event for opcode 0x1405 [ 1114.847188][T17048] veth0_vlan: entered promiscuous mode [ 1115.040756][T17048] veth1_vlan: entered promiscuous mode [ 1115.080982][T17048] veth0_macvtap: entered promiscuous mode [ 1116.905260][T17048] veth1_macvtap: entered promiscuous mode [ 1117.212763][T17048] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1117.245252][T17048] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1117.285615][T17048] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1117.323718][T17048] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1117.352602][T17048] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1117.378919][T17048] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1117.389217][T17048] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1117.419892][T17048] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1117.455844][T17048] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1117.494163][T17048] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1117.533405][T17048] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1117.551438][T17048] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1117.577135][T17048] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1117.596139][T17048] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1117.617062][T17048] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1117.630936][T17048] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1117.666385][T17048] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1117.686370][T17048] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1117.870802][T17048] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1117.923708][T17048] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1117.932459][T17048] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1117.961864][T17048] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1118.370661][T17369] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 1119.259481][T17369] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 1119.268332][ T3970] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1119.276187][ T3970] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1119.489990][T17369] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 1119.865057][T17369] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 1120.173933][ T3970] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1120.265353][ T3970] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1120.467493][T17612] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2337'. [ 1120.809750][T17369] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1120.905024][T17369] 8021q: adding VLAN 0 to HW filter on device team0 [ 1120.985939][ T5962] bridge0: port 1(bridge_slave_0) entered blocking state [ 1120.993113][ T5962] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1121.105943][ T3007] bridge0: port 2(bridge_slave_1) entered blocking state [ 1121.113119][ T3007] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1121.326084][T17371] Bluetooth: hci2: unexpected event for opcode 0x1405 [ 1121.431710][T17638] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2340'. [ 1121.530365][T17638] openvswitch: netlink: IPv4 tunnel dst address is zero [ 1123.834682][T17642] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 1124.296716][ T3970] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1124.349785][T17651] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for ip6gretap0 [ 1124.468422][ T3970] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1124.600828][ T3970] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1124.701604][ T3970] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1124.753675][T17369] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1124.907464][ T3970] bridge_slave_1: left allmulticast mode [ 1124.914351][ T3970] bridge_slave_1: left promiscuous mode [ 1124.967771][ T3970] bridge0: port 2(bridge_slave_1) entered disabled state [ 1125.024925][ T3970] bridge_slave_0: left allmulticast mode [ 1125.030631][ T3970] bridge_slave_0: left promiscuous mode [ 1125.252075][ T3970] bridge0: port 1(bridge_slave_0) entered disabled state [ 1126.511031][T11482] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1126.530027][T11482] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1126.548594][T11482] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1126.570565][T11482] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1126.907677][T11482] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 1126.916551][T11482] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1127.483781][T17709] openvswitch: netlink: Actions may not be safe on all matching packets [ 1127.683264][T12572] libceph: connect (1)[c::]:6789 error -22 [ 1127.689232][T12572] libceph: mon0 (1)[c::]:6789 connect error [ 1127.950778][ T5879] libceph: connect (1)[c::]:6789 error -22 [ 1128.069341][ T29] audit: type=1800 audit(1175.480:1367): pid=17720 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.2.2349" name="SYSV00000000" dev="hugetlbfs" ino=2 res=0 errno=0 [ 1128.492127][T17712] ceph: No mds server is up or the cluster is laggy [ 1128.537515][ T5879] libceph: mon0 (1)[c::]:6789 connect error [ 1128.865716][T11482] Bluetooth: hci1: command tx timeout [ 1129.104458][ T3970] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1129.139041][ T3970] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1129.166473][ T3970] bond0 (unregistering): Released all slaves [ 1130.503113][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 1130.813539][ T5962] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1130.864579][T11482] Bluetooth: hci1: command tx timeout [ 1131.055825][T17369] veth0_vlan: entered promiscuous mode [ 1131.221746][T17702] lo speed is unknown, defaulting to 1000 [ 1132.258989][T17369] veth1_vlan: entered promiscuous mode [ 1133.427949][T11482] Bluetooth: hci1: command tx timeout [ 1134.407625][ T3970] hsr_slave_0: left promiscuous mode [ 1134.418651][ T3970] hsr_slave_1: left promiscuous mode [ 1134.688713][ T3970] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1134.710702][ T3970] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1135.410121][T11482] Bluetooth: hci1: command tx timeout [ 1136.365922][ T3970] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1136.467068][ T3970] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1136.769877][ T3970] veth1_macvtap: left promiscuous mode [ 1136.775500][ T3970] veth0_macvtap: left promiscuous mode [ 1136.784790][ T3970] veth1_vlan: left promiscuous mode [ 1136.790304][ T3970] veth0_vlan: left promiscuous mode [ 1138.056129][T17798] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1138.906150][T17806] netlink: 48 bytes leftover after parsing attributes in process `syz.2.2364'. [ 1140.944325][ T3970] team0 (unregistering): Port device team_slave_1 removed [ 1141.002437][ T3970] team0 (unregistering): Port device team_slave_0 removed [ 1141.608549][T17369] veth0_macvtap: entered promiscuous mode [ 1141.874274][T17369] veth1_macvtap: entered promiscuous mode [ 1142.067919][T17702] chnl_net:caif_netlink_parms(): no params data found [ 1143.434189][T17847] overlayfs: failed to resolve './file0': -2 [ 1143.700058][T17852] netlink: 20 bytes leftover after parsing attributes in process `syz.9.2368'. [ 1143.709368][T17852] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 1144.093141][T17369] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1144.113032][T17369] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1144.123297][T17369] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1144.134293][T17369] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1144.144342][T17369] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1144.310148][T17369] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1144.326641][T17369] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1145.206261][T17369] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1145.274027][T17369] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1145.531504][T17369] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1145.558592][T17369] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1146.187739][T17369] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1146.200208][T17369] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1146.210290][T17369] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1146.220756][T17369] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1146.231497][T17369] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1146.280780][T17369] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1146.341308][T17369] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1146.378829][T17369] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1146.395593][T17369] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1146.412145][T17369] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1146.431546][T17369] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1146.677972][T17702] bridge0: port 1(bridge_slave_0) entered blocking state [ 1146.714197][T17702] bridge0: port 1(bridge_slave_0) entered disabled state [ 1146.740994][T17702] bridge_slave_0: entered allmulticast mode [ 1146.767134][T17702] bridge_slave_0: entered promiscuous mode [ 1146.803347][T17702] bridge0: port 2(bridge_slave_1) entered blocking state [ 1146.837349][T17702] bridge0: port 2(bridge_slave_1) entered disabled state [ 1146.858071][T17901] netlink: 8 bytes leftover after parsing attributes in process `syz.9.2377'. [ 1146.877737][T17702] bridge_slave_1: entered allmulticast mode [ 1147.009214][T17702] bridge_slave_1: entered promiscuous mode [ 1148.263797][T17702] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1148.300292][T17702] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1148.392999][ T6182] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1148.403866][ T6182] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1148.476243][T17702] team0: Port device team_slave_0 added [ 1148.501988][T17702] team0: Port device team_slave_1 added [ 1149.068063][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1149.081520][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1149.316067][T17702] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1149.542090][T17702] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1149.578258][T17702] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1149.809287][T17702] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1149.955970][T17702] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1150.394701][T17702] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1151.204055][T17702] hsr_slave_0: entered promiscuous mode [ 1151.611334][T17702] hsr_slave_1: entered promiscuous mode [ 1151.621434][T17702] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1151.629336][T17702] Cannot create hsr debugfs directory [ 1152.686004][T17371] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1152.736364][T17371] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1152.746375][T17371] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1152.756945][T17371] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1152.766493][T17371] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 1152.960451][T17371] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1153.843412][T17978] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6 [ 1154.010425][ T51] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1154.426052][ T51] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1154.612103][T17965] lo speed is unknown, defaulting to 1000 [ 1155.017546][T11482] Bluetooth: hci4: command tx timeout [ 1155.671933][ T51] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1155.899102][T18017] overlayfs: failed to clone upperpath [ 1156.664880][T18008] veth0_macvtap: mtu less than device minimum [ 1157.104874][T11482] Bluetooth: hci4: command tx timeout [ 1158.717141][ T51] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1159.321121][T18046] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1159.378945][T11482] Bluetooth: hci4: command tx timeout [ 1160.131320][T17702] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 1160.388927][T17702] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 1161.360354][T11482] Bluetooth: hci4: command tx timeout [ 1161.383192][ T11] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1161.642215][T17702] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 1161.686189][ T29] audit: type=1326 audit(1210.698:1368): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18052 comm="syz.9.2402" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8b8a38cde9 code=0x7ffc0000 [ 1162.042005][ T29] audit: type=1326 audit(1210.698:1369): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18052 comm="syz.9.2402" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8b8a38cde9 code=0x7ffc0000 [ 1162.072533][ T29] audit: type=1326 audit(1210.698:1370): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18052 comm="syz.9.2402" exe="/root/syz-executor" sig=0 arch=c000003e syscall=254 compat=0 ip=0x7f8b8a38cde9 code=0x7ffc0000 [ 1162.288640][ T29] audit: type=1326 audit(1210.698:1371): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18052 comm="syz.9.2402" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8b8a38cde9 code=0x7ffc0000 [ 1162.310038][ C0] vkms_vblank_simulate: vblank timer overrun [ 1162.514422][T17702] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 1162.534231][ T29] audit: type=1326 audit(1210.698:1372): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18052 comm="syz.9.2402" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8b8a38cde9 code=0x7ffc0000 [ 1162.644444][ T29] audit: type=1326 audit(1210.698:1373): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18052 comm="syz.9.2402" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f8b8a38cde9 code=0x7ffc0000 [ 1162.885464][ T29] audit: type=1326 audit(1210.709:1374): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18052 comm="syz.9.2402" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8b8a38cde9 code=0x7ffc0000 [ 1162.937257][ T29] audit: type=1326 audit(1210.709:1375): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18052 comm="syz.9.2402" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8b8a38cde9 code=0x7ffc0000 [ 1163.030743][ T29] audit: type=1326 audit(1210.709:1376): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18052 comm="syz.9.2402" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f8b8a38cde9 code=0x7ffc0000 [ 1163.078493][ T29] audit: type=1326 audit(1210.709:1377): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18052 comm="syz.9.2402" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8b8a38cde9 code=0x7ffc0000 [ 1163.086518][T17965] chnl_net:caif_netlink_parms(): no params data found [ 1163.274779][ T51] bridge_slave_1: left allmulticast mode [ 1163.280507][ T51] bridge_slave_1: left promiscuous mode [ 1163.320736][ T51] bridge0: port 2(bridge_slave_1) entered disabled state [ 1163.635138][ T51] bridge_slave_0: left allmulticast mode [ 1163.646541][ T51] bridge_slave_0: left promiscuous mode [ 1163.652235][ T51] bridge0: port 1(bridge_slave_0) entered disabled state [ 1165.562251][ T51] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1165.588229][ T51] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1165.609942][ T51] bond0 (unregistering): Released all slaves [ 1166.600386][T17702] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1166.617046][T17702] 8021q: adding VLAN 0 to HW filter on device team0 [ 1166.629765][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 1166.636868][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1167.109522][T18127] overlayfs: failed to clone upperpath [ 1167.185850][T17702] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1167.233602][T17702] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1168.072873][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 1168.080063][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1168.343350][T17965] bridge0: port 1(bridge_slave_0) entered blocking state [ 1168.350542][T17965] bridge0: port 1(bridge_slave_0) entered disabled state [ 1168.390934][T17965] bridge_slave_0: entered allmulticast mode [ 1168.409095][T17965] bridge_slave_0: entered promiscuous mode [ 1168.430116][T17965] bridge0: port 2(bridge_slave_1) entered blocking state [ 1168.437277][T17965] bridge0: port 2(bridge_slave_1) entered disabled state [ 1168.658139][T17965] bridge_slave_1: entered allmulticast mode [ 1168.665931][T17965] bridge_slave_1: entered promiscuous mode [ 1170.589134][T17965] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1170.728849][T17965] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1172.113725][T17965] team0: Port device team_slave_0 added [ 1173.000474][ T51] hsr_slave_0: left promiscuous mode [ 1173.050755][ T51] hsr_slave_1: left promiscuous mode [ 1173.077691][ T51] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1173.095156][ T51] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1173.116545][ T51] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1173.128880][ T51] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1173.188246][ T51] veth1_macvtap: left promiscuous mode [ 1173.691488][ T51] veth0_macvtap: left promiscuous mode [ 1173.711796][ T51] veth1_vlan: left promiscuous mode [ 1173.726424][ T51] veth0_vlan: left promiscuous mode [ 1176.738263][ T8237] usb 7-1: new high-speed USB device number 20 using dummy_hcd [ 1176.900275][ T8237] usb 7-1: Using ep0 maxpacket: 8 [ 1176.920904][ T8237] usb 7-1: config index 0 descriptor too short (expected 301, got 45) [ 1176.940561][ T8237] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1176.976391][ T8237] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1177.005234][ T8237] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1177.023784][ T8237] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1177.052171][ T8237] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1177.062177][ T8237] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1177.282011][T18237] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1177.293559][T18237] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1177.362788][T18237] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1177.461031][T18237] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1177.550927][ T8237] usb 7-1: GET_CAPABILITIES returned 0 [ 1177.578680][ T8237] usbtmc 7-1:16.0: can't read capabilities [ 1177.861721][T18237] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1177.878279][T18237] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1178.105271][ T8237] usb 7-1: USB disconnect, device number 20 [ 1178.113643][ T51] team0 (unregistering): Port device team_slave_1 removed [ 1178.194930][ T51] team0 (unregistering): Port device team_slave_0 removed [ 1178.789508][T17965] team0: Port device team_slave_1 added [ 1178.851311][T17702] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1180.269149][T17965] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1180.458514][T17965] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1180.484449][ C0] vkms_vblank_simulate: vblank timer overrun [ 1180.853414][T17965] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1180.868657][T17965] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1180.893170][T17965] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1181.967567][T17965] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1186.497947][T18288] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2435'. [ 1186.613394][T17965] hsr_slave_0: entered promiscuous mode [ 1186.649434][T17965] hsr_slave_1: entered promiscuous mode [ 1186.664361][T17965] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1186.706066][T17965] Cannot create hsr debugfs directory [ 1186.857492][T18309] x_tables: ip_tables: osf match: only valid for protocol 6 [ 1188.217036][T17371] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1188.227915][T17371] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1188.238042][T17371] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1188.247488][T17371] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1188.257419][T17371] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 1188.266689][T17371] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1188.436101][T18323] overlayfs: failed to clone upperpath [ 1189.082258][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 1191.332607][T11482] Bluetooth: hci1: command tx timeout [ 1191.371824][T18316] lo speed is unknown, defaulting to 1000 [ 1193.262723][ T3007] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1193.275321][T11482] Bluetooth: hci1: command tx timeout [ 1193.428099][T18352] netlink: 16 bytes leftover after parsing attributes in process `syz.9.2446'. [ 1194.568174][ T29] kauditd_printk_skb: 49 callbacks suppressed [ 1194.568215][ T29] audit: type=1326 audit(1245.223:1427): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18356 comm="syz.6.2448" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1a9db8cde9 code=0x7ffc0000 [ 1194.595534][ C0] vkms_vblank_simulate: vblank timer overrun [ 1195.024500][ T29] audit: type=1326 audit(1245.223:1428): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18356 comm="syz.6.2448" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1a9db8cde9 code=0x7ffc0000 [ 1195.058919][ C0] vkms_vblank_simulate: vblank timer overrun [ 1195.154059][ T29] audit: type=1326 audit(1245.223:1429): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18356 comm="syz.6.2448" exe="/root/syz-executor" sig=0 arch=c000003e syscall=254 compat=0 ip=0x7f1a9db8cde9 code=0x7ffc0000 [ 1195.257206][T11482] Bluetooth: hci1: command tx timeout [ 1195.282507][ T29] audit: type=1326 audit(1245.223:1430): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18356 comm="syz.6.2448" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1a9db8cde9 code=0x7ffc0000 [ 1195.357562][ T29] audit: type=1326 audit(1245.234:1431): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18356 comm="syz.6.2448" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1a9db8cde9 code=0x7ffc0000 [ 1195.521912][ T29] audit: type=1326 audit(1245.234:1432): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18356 comm="syz.6.2448" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f1a9db8cde9 code=0x7ffc0000 [ 1195.641496][ T29] audit: type=1326 audit(1245.234:1433): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18356 comm="syz.6.2448" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1a9db8cde9 code=0x7ffc0000 [ 1195.702324][ T29] audit: type=1326 audit(1245.234:1434): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18356 comm="syz.6.2448" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1a9db8cde9 code=0x7ffc0000 [ 1195.909262][ T29] audit: type=1326 audit(1245.244:1435): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18356 comm="syz.6.2448" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f1a9db8cde9 code=0x7ffc0000 [ 1195.936208][ T29] audit: type=1326 audit(1245.244:1436): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18356 comm="syz.6.2448" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1a9db8cde9 code=0x7ffc0000 [ 1196.952046][T18316] chnl_net:caif_netlink_parms(): no params data found [ 1197.321882][T11482] Bluetooth: hci1: command tx timeout [ 1198.060135][T18374] bridge0: port 3(netdevsim2) entered blocking state [ 1198.066930][T18374] bridge0: port 3(netdevsim2) entered disabled state [ 1198.073772][T18374] netdevsim netdevsim6 netdevsim2: entered allmulticast mode [ 1198.081913][T18374] netdevsim netdevsim6 netdevsim2: entered promiscuous mode [ 1198.089548][T18374] bridge0: port 3(netdevsim2) entered blocking state [ 1198.096283][T18374] bridge0: port 3(netdevsim2) entered forwarding state [ 1198.627977][T18406] netlink: 156 bytes leftover after parsing attributes in process `syz.9.2454'. [ 1198.892221][T18409] trusted_key: encrypted_key: insufficient parameters specified [ 1200.514138][ T29] kauditd_printk_skb: 13 callbacks suppressed [ 1200.514157][ T29] audit: type=1326 audit(1251.478:1450): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18419 comm="syz.6.2459" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1a9db8cde9 code=0x7ffc0000 [ 1200.547713][T18316] bridge0: port 1(bridge_slave_0) entered blocking state [ 1201.066609][T18316] bridge0: port 1(bridge_slave_0) entered disabled state [ 1201.073906][T18316] bridge_slave_0: entered allmulticast mode [ 1201.137478][T18316] bridge_slave_0: entered promiscuous mode [ 1201.173055][T18316] bridge0: port 2(bridge_slave_1) entered blocking state [ 1201.212064][T18316] bridge0: port 2(bridge_slave_1) entered disabled state [ 1201.247376][ T29] audit: type=1326 audit(1251.478:1451): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18419 comm="syz.6.2459" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1a9db8cde9 code=0x7ffc0000 [ 1201.268661][ T29] audit: type=1326 audit(1251.478:1452): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18419 comm="syz.6.2459" exe="/root/syz-executor" sig=0 arch=c000003e syscall=254 compat=0 ip=0x7f1a9db8cde9 code=0x7ffc0000 [ 1201.370481][ T29] audit: type=1326 audit(1251.478:1453): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18419 comm="syz.6.2459" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1a9db8cde9 code=0x7ffc0000 [ 1201.401450][T18434] netlink: 152 bytes leftover after parsing attributes in process `syz.9.2458'. [ 1201.453557][ T29] audit: type=1326 audit(1251.478:1454): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18419 comm="syz.6.2459" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1a9db8cde9 code=0x7ffc0000 [ 1201.591001][T18316] bridge_slave_1: entered allmulticast mode [ 1201.598110][T18316] bridge_slave_1: entered promiscuous mode [ 1201.772157][ T29] audit: type=1326 audit(1251.478:1455): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18419 comm="syz.6.2459" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f1a9db8cde9 code=0x7ffc0000 [ 1201.802890][ T29] audit: type=1326 audit(1251.478:1456): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18419 comm="syz.6.2459" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1a9db8cde9 code=0x7ffc0000 [ 1202.486684][ T29] audit: type=1326 audit(1251.478:1457): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18419 comm="syz.6.2459" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1a9db8cde9 code=0x7ffc0000 [ 1202.508721][ T29] audit: type=1326 audit(1251.478:1458): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18419 comm="syz.6.2459" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f1a9db8cde9 code=0x7ffc0000 [ 1202.530294][ T29] audit: type=1326 audit(1251.478:1459): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18419 comm="syz.6.2459" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1a9db8cde9 code=0x7ffc0000 [ 1204.276832][ T3970] bridge_slave_1: left allmulticast mode [ 1204.282660][ T3970] bridge_slave_1: left promiscuous mode [ 1204.308807][ T3970] bridge0: port 2(bridge_slave_1) entered disabled state [ 1204.416232][ T3970] bridge_slave_0: left allmulticast mode [ 1204.427123][ T3970] bridge_slave_0: left promiscuous mode [ 1204.442474][ T3970] bridge0: port 1(bridge_slave_0) entered disabled state [ 1205.431347][T18482] xt_hashlimit: max too large, truncated to 1048576 [ 1205.438352][T18482] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6 [ 1207.657321][ T3970] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1207.668619][ T3970] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1207.683314][ T3970] bond0 (unregistering): Released all slaves [ 1207.710759][T18316] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1207.910545][T18316] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1209.558974][T18316] team0: Port device team_slave_0 added [ 1210.666911][T18523] ceph: No mds server is up or the cluster is laggy [ 1210.704992][T18316] team0: Port device team_slave_1 added [ 1211.066670][ T29] kauditd_printk_skb: 49 callbacks suppressed [ 1211.066710][ T29] audit: type=1326 audit(1262.580:1509): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18527 comm="syz.2.2473" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f722778cde9 code=0x7ffc0000 [ 1211.891534][ T29] audit: type=1326 audit(1262.580:1510): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18527 comm="syz.2.2473" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f722778cde9 code=0x7ffc0000 [ 1211.919587][ T29] audit: type=1326 audit(1262.591:1511): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18527 comm="syz.2.2473" exe="/root/syz-executor" sig=0 arch=c000003e syscall=254 compat=0 ip=0x7f722778cde9 code=0x7ffc0000 [ 1211.940768][ C0] vkms_vblank_simulate: vblank timer overrun [ 1211.947884][ T29] audit: type=1326 audit(1262.591:1512): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18527 comm="syz.2.2473" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f722778cde9 code=0x7ffc0000 [ 1211.969923][ T29] audit: type=1326 audit(1262.591:1513): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18527 comm="syz.2.2473" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f722778cde9 code=0x7ffc0000 [ 1211.991634][ T29] audit: type=1326 audit(1262.591:1514): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18527 comm="syz.2.2473" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f722778cde9 code=0x7ffc0000 [ 1212.033772][ T29] audit: type=1326 audit(1262.591:1515): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18527 comm="syz.2.2473" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f722778cde9 code=0x7ffc0000 [ 1212.074669][T17371] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1212.091081][T17371] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1212.198523][T17371] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1212.205114][ T29] audit: type=1326 audit(1262.591:1516): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18527 comm="syz.2.2473" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f722778cde9 code=0x7ffc0000 [ 1212.226762][ C0] vkms_vblank_simulate: vblank timer overrun [ 1212.263293][T17371] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1212.410530][T17371] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 1212.432138][T17371] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1212.444149][ T29] audit: type=1326 audit(1262.601:1517): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18527 comm="syz.2.2473" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f722778cde9 code=0x7ffc0000 [ 1212.535833][ T29] audit: type=1326 audit(1262.601:1518): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18527 comm="syz.2.2473" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f722778cde9 code=0x7ffc0000 [ 1212.701869][ T3970] hsr_slave_0: left promiscuous mode [ 1213.551747][ T3970] hsr_slave_1: left promiscuous mode [ 1213.590396][ T3970] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1213.645902][ T3970] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1214.464444][T17371] Bluetooth: hci4: command tx timeout [ 1215.696933][ T3970] team0 (unregistering): Port device team_slave_1 removed [ 1216.053904][ T3970] team0 (unregistering): Port device team_slave_0 removed [ 1216.459253][T17371] Bluetooth: hci4: command tx timeout [ 1217.310050][T18316] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1217.321983][T18316] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1217.353553][T18316] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1217.373111][T18316] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1217.380160][T18316] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1217.406865][T18316] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1217.514770][T18601] bond0: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 1217.528892][T18601] bond0: (slave lo): Error: Device can not be enslaved while up [ 1218.762508][T17371] Bluetooth: hci4: command tx timeout [ 1219.918265][T18536] lo speed is unknown, defaulting to 1000 [ 1219.958118][T18316] hsr_slave_0: entered promiscuous mode [ 1219.973341][T18316] hsr_slave_1: entered promiscuous mode [ 1219.987818][T18316] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1220.006058][T18316] Cannot create hsr debugfs directory [ 1220.965829][T17371] Bluetooth: hci4: command tx timeout [ 1222.515944][T18536] chnl_net:caif_netlink_parms(): no params data found [ 1224.302951][ T3007] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1228.086045][ T29] kauditd_printk_skb: 13 callbacks suppressed [ 1228.086063][ T29] audit: type=1326 audit(1279.455:1532): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18705 comm="syz.2.2498" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f722778cde9 code=0x7ffc0000 [ 1228.568061][ T29] audit: type=1326 audit(1279.455:1533): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18705 comm="syz.2.2498" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f722778cde9 code=0x7ffc0000 [ 1228.639272][ T29] audit: type=1326 audit(1279.455:1534): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18705 comm="syz.2.2498" exe="/root/syz-executor" sig=0 arch=c000003e syscall=254 compat=0 ip=0x7f722778cde9 code=0x7ffc0000 [ 1228.660463][ C0] vkms_vblank_simulate: vblank timer overrun [ 1228.688319][ T29] audit: type=1326 audit(1279.455:1535): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18705 comm="syz.2.2498" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f722778cde9 code=0x7ffc0000 [ 1228.709587][ C0] vkms_vblank_simulate: vblank timer overrun [ 1228.726994][ T29] audit: type=1326 audit(1279.455:1536): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18705 comm="syz.2.2498" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f722778cde9 code=0x7ffc0000 [ 1228.875128][ T29] audit: type=1326 audit(1279.465:1537): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18705 comm="syz.2.2498" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f722778cde9 code=0x7ffc0000 [ 1228.896957][ T29] audit: type=1326 audit(1279.465:1538): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18705 comm="syz.2.2498" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f722778cde9 code=0x7ffc0000 [ 1228.918891][ T29] audit: type=1326 audit(1279.465:1539): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18705 comm="syz.2.2498" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f722778cde9 code=0x7ffc0000 [ 1229.303820][ T29] audit: type=1326 audit(1279.465:1540): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18705 comm="syz.2.2498" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f722778cde9 code=0x7ffc0000 [ 1229.696314][ T29] audit: type=1326 audit(1279.465:1541): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18705 comm="syz.2.2498" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f722778cde9 code=0x7ffc0000 [ 1231.464245][T18729] lo speed is unknown, defaulting to 1000 [ 1231.491560][T18536] bridge0: port 1(bridge_slave_0) entered blocking state [ 1231.503186][T18536] bridge0: port 1(bridge_slave_0) entered disabled state [ 1231.510646][T18536] bridge_slave_0: entered allmulticast mode [ 1231.532638][T18536] bridge_slave_0: entered promiscuous mode [ 1231.622269][T18536] bridge0: port 2(bridge_slave_1) entered blocking state [ 1231.639811][T18536] bridge0: port 2(bridge_slave_1) entered disabled state [ 1231.654386][T18536] bridge_slave_1: entered allmulticast mode [ 1231.668718][T18536] bridge_slave_1: entered promiscuous mode [ 1231.751825][T18536] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1231.774980][T18536] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1232.136675][T18536] team0: Port device team_slave_0 added [ 1232.212905][T18536] team0: Port device team_slave_1 added [ 1232.323081][T18536] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1232.337486][T18536] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1232.363498][ C0] vkms_vblank_simulate: vblank timer overrun [ 1232.388274][T18536] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1232.480390][T18536] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1232.505596][T18536] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1232.575439][T18536] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1233.161829][T18316] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 1233.297091][T18316] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 1233.425808][T18316] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 1233.857035][T18316] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 1233.884090][T18536] hsr_slave_0: entered promiscuous mode [ 1233.900848][T18536] hsr_slave_1: entered promiscuous mode [ 1233.913551][T18536] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1233.932108][T18536] Cannot create hsr debugfs directory [ 1233.978549][ T51] bridge_slave_1: left allmulticast mode [ 1233.994605][ T51] bridge_slave_1: left promiscuous mode [ 1234.004618][ T51] bridge0: port 2(bridge_slave_1) entered disabled state [ 1234.023944][ T51] bridge_slave_0: left allmulticast mode [ 1234.035489][ T51] bridge_slave_0: left promiscuous mode [ 1234.046771][ T51] bridge0: port 1(bridge_slave_0) entered disabled state [ 1235.962789][ T29] kauditd_printk_skb: 13 callbacks suppressed [ 1235.962809][ T29] audit: type=1326 audit(1288.070:1555): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18767 comm="syz.6.2510" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1a9db8cde9 code=0x7ffc0000 [ 1236.381941][ T29] audit: type=1326 audit(1288.070:1556): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18767 comm="syz.6.2510" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1a9db8cde9 code=0x7ffc0000 [ 1236.516139][ T51] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1236.543612][ T29] audit: type=1326 audit(1288.070:1557): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18767 comm="syz.6.2510" exe="/root/syz-executor" sig=0 arch=c000003e syscall=254 compat=0 ip=0x7f1a9db8cde9 code=0x7ffc0000 [ 1236.577880][ T29] audit: type=1326 audit(1288.070:1558): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18767 comm="syz.6.2510" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1a9db8cde9 code=0x7ffc0000 [ 1236.612233][ T29] audit: type=1326 audit(1288.070:1559): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18767 comm="syz.6.2510" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1a9db8cde9 code=0x7ffc0000 [ 1236.651415][ T29] audit: type=1326 audit(1288.070:1560): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18767 comm="syz.6.2510" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f1a9db8cde9 code=0x7ffc0000 [ 1236.683366][ T29] audit: type=1326 audit(1288.081:1561): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18767 comm="syz.6.2510" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1a9db8cde9 code=0x7ffc0000 [ 1236.754873][ T29] audit: type=1326 audit(1288.081:1562): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18767 comm="syz.6.2510" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1a9db8cde9 code=0x7ffc0000 [ 1236.789630][ T29] audit: type=1326 audit(1288.081:1563): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18767 comm="syz.6.2510" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f1a9db8cde9 code=0x7ffc0000 [ 1236.828259][ T29] audit: type=1326 audit(1288.081:1564): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18767 comm="syz.6.2510" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1a9db8cde9 code=0x7ffc0000 [ 1236.874793][ T51] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1236.917635][ T51] bond0 (unregistering): Released all slaves [ 1237.441371][T18781] netlink: 187320 bytes leftover after parsing attributes in process `syz.6.2512'. [ 1237.450879][T18781] netlink: zone id is out of range [ 1237.456026][T18781] netlink: zone id is out of range [ 1237.461293][T18781] netlink: zone id is out of range [ 1237.466420][T18781] netlink: zone id is out of range [ 1237.471818][T18781] netlink: zone id is out of range [ 1237.477073][T18781] netlink: zone id is out of range [ 1237.482426][T18781] netlink: zone id is out of range [ 1237.488002][T18781] netlink: zone id is out of range [ 1237.493218][T18781] netlink: zone id is out of range [ 1237.498613][T18781] netlink: zone id is out of range [ 1238.633820][T18786] overlayfs: failed to clone upperpath [ 1243.365294][ T51] hsr_slave_0: left promiscuous mode [ 1244.021057][T18821] netlink: 'syz.6.2518': attribute type 10 has an invalid length. [ 1244.065968][ T51] hsr_slave_1: left promiscuous mode [ 1245.039656][ T51] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1245.274720][ T51] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1246.311349][ T29] kauditd_printk_skb: 13 callbacks suppressed [ 1246.311395][ T29] audit: type=1326 audit(1299.498:1578): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18827 comm="syz.2.2521" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f722778cde9 code=0x7ffc0000 [ 1246.528491][ T29] audit: type=1326 audit(1299.498:1579): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18827 comm="syz.2.2521" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f722778cde9 code=0x7ffc0000 [ 1246.658892][ T29] audit: type=1326 audit(1299.498:1580): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18827 comm="syz.2.2521" exe="/root/syz-executor" sig=0 arch=c000003e syscall=254 compat=0 ip=0x7f722778cde9 code=0x7ffc0000 [ 1246.772556][ T29] audit: type=1326 audit(1299.498:1581): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18827 comm="syz.2.2521" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f722778cde9 code=0x7ffc0000 [ 1246.903315][ T29] audit: type=1326 audit(1299.498:1582): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18827 comm="syz.2.2521" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f722778cde9 code=0x7ffc0000 [ 1246.943441][ T29] audit: type=1326 audit(1299.498:1583): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18827 comm="syz.2.2521" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f722778cde9 code=0x7ffc0000 [ 1246.987285][ T29] audit: type=1326 audit(1299.509:1584): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18827 comm="syz.2.2521" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f722778cde9 code=0x7ffc0000 [ 1247.010140][ T29] audit: type=1326 audit(1299.509:1585): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18827 comm="syz.2.2521" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f722778cde9 code=0x7ffc0000 [ 1247.089551][ T29] audit: type=1326 audit(1299.509:1586): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18827 comm="syz.2.2521" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f722778cde9 code=0x7ffc0000 [ 1247.157124][ T29] audit: type=1326 audit(1299.509:1587): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18827 comm="syz.2.2521" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f722778cde9 code=0x7ffc0000 [ 1247.259220][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 1247.259557][T11482] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1247.285047][T18840] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2522'. [ 1247.292855][T11482] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1247.316355][T11482] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1247.330441][T11482] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1247.338116][T11482] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 1247.345425][T11482] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1247.369479][T18840] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2522'. [ 1247.420883][ T51] team0 (unregistering): Port device team_slave_1 removed [ 1247.476877][ T51] team0 (unregistering): Port device team_slave_0 removed [ 1247.687746][T18821] bond0: (slave wlan1): Opening slave failed [ 1248.212729][T18849] kAFS: No cell specified [ 1249.306067][T11482] Bluetooth: hci1: command tx timeout [ 1250.138967][T18865] infiniband syz0: set active [ 1250.144127][T18865] infiniband syz0: added bond0 [ 1251.343275][T11482] Bluetooth: hci1: command tx timeout [ 1251.721478][T18865] RDS/IB: syz0: added [ 1251.725667][T18865] smc: adding ib device syz0 with port count 1 [ 1251.731994][T18865] smc: ib device syz0 port 1 has pnetid [ 1253.320177][T11482] Bluetooth: hci1: command tx timeout [ 1254.432084][T18886] (unnamed net_device) (uninitialized): peer notification delay (3) is not a multiple of miimon (9), value rounded to 0 ms [ 1254.461629][T18841] lo speed is unknown, defaulting to 1000 [ 1255.256736][T11482] Bluetooth: hci1: command tx timeout [ 1255.708334][T18921] kAFS: No cell specified [ 1256.163479][T18935] netlink: 8 bytes leftover after parsing attributes in process `syz.9.2536'. [ 1257.619669][ T3970] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1257.970254][T18841] chnl_net:caif_netlink_parms(): no params data found [ 1257.999128][T18936] netlink: 'syz.6.2537': attribute type 13 has an invalid length. [ 1262.816492][T18977] netlink: 4 bytes leftover after parsing attributes in process `syz.9.2542'. [ 1263.016274][T18981] netlink: 12 bytes leftover after parsing attributes in process `syz.9.2542'. [ 1263.850221][T18536] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 1265.110626][T18536] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 1266.241427][T19001] net_ratelimit: 332 callbacks suppressed [ 1266.241446][T19001] veth0_macvtap: mtu less than device minimum [ 1266.287554][T18841] bridge0: port 1(bridge_slave_0) entered blocking state [ 1266.313794][T18841] bridge0: port 1(bridge_slave_0) entered disabled state [ 1266.321225][T18841] bridge_slave_0: entered allmulticast mode [ 1266.371760][T18841] bridge_slave_0: entered promiscuous mode [ 1266.400423][T18841] bridge0: port 2(bridge_slave_1) entered blocking state [ 1266.427556][T18841] bridge0: port 2(bridge_slave_1) entered disabled state [ 1266.434864][T18841] bridge_slave_1: entered allmulticast mode [ 1266.462546][T18841] bridge_slave_1: entered promiscuous mode [ 1267.737755][T18841] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1267.884657][T17371] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1267.906694][T17371] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1267.930892][T17371] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1267.941243][T19015] overlayfs: failed to clone upperpath [ 1267.947751][T17371] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1267.955386][T17371] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 1267.962731][T17371] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1268.208139][T18841] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1269.016808][ T12] bridge_slave_1: left allmulticast mode [ 1269.022947][ T12] bridge_slave_1: left promiscuous mode [ 1269.037275][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 1269.049181][ T12] bridge_slave_0: left allmulticast mode [ 1269.055040][ T12] bridge_slave_0: left promiscuous mode [ 1269.096523][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 1270.090670][T11482] Bluetooth: hci4: command tx timeout [ 1270.226819][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1270.256499][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1270.278801][ T12] bond0 (unregistering): Released all slaves [ 1270.302028][T19024] veth0_macvtap: mtu less than device minimum [ 1270.463084][T18841] team0: Port device team_slave_0 added [ 1270.482824][T18841] team0: Port device team_slave_1 added [ 1271.663702][T19052] openvswitch: netlink: Tunnel attr 47 out of range max 16 [ 1272.564778][T11482] Bluetooth: hci4: command tx timeout [ 1273.276182][T19057] veth0_macvtap: mtu less than device minimum [ 1273.338530][T18841] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1273.388290][T18841] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1273.414225][ C0] vkms_vblank_simulate: vblank timer overrun [ 1273.561916][T18841] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1273.575492][T19062] veth0_vlan: entered allmulticast mode [ 1273.795732][T19064] veth0_vlan: left promiscuous mode [ 1273.812534][T19064] veth0_vlan: entered promiscuous mode [ 1274.229577][T18841] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1274.237405][T18841] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1274.263402][ C0] vkms_vblank_simulate: vblank timer overrun [ 1274.364654][T18841] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1274.588553][T11482] Bluetooth: hci4: command tx timeout [ 1274.625995][T19014] lo speed is unknown, defaulting to 1000 [ 1275.843943][T18841] hsr_slave_0: entered promiscuous mode [ 1275.871165][T18841] hsr_slave_1: entered promiscuous mode [ 1275.890908][T18841] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1275.923975][T18841] Cannot create hsr debugfs directory [ 1276.529454][T11482] Bluetooth: hci4: command tx timeout [ 1276.970353][T19103] overlayfs: failed to resolve './file0': -2 [ 1277.049584][T19104] netlink: 20 bytes leftover after parsing attributes in process `syz.9.2566'. [ 1277.058777][T19104] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 1277.886795][ T12] hsr_slave_0: left promiscuous mode [ 1277.893577][ T12] hsr_slave_1: left promiscuous mode [ 1277.901918][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1277.941348][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1279.361411][T19108] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1279.790639][ T12] team0 (unregistering): Port device team_slave_1 removed [ 1279.798909][T17371] Bluetooth: hci4: command 0x0405 tx timeout [ 1279.864514][ T12] team0 (unregistering): Port device team_slave_0 removed [ 1282.386486][T19145] netlink: 8 bytes leftover after parsing attributes in process `syz.9.2574'. [ 1282.556336][T19014] chnl_net:caif_netlink_parms(): no params data found [ 1283.158011][T19014] bridge0: port 1(bridge_slave_0) entered blocking state [ 1283.168084][T19014] bridge0: port 1(bridge_slave_0) entered disabled state [ 1283.178182][T19014] bridge_slave_0: entered allmulticast mode [ 1283.218977][T19014] bridge_slave_0: entered promiscuous mode [ 1283.255534][T19014] bridge0: port 2(bridge_slave_1) entered blocking state [ 1283.283749][T19014] bridge0: port 2(bridge_slave_1) entered disabled state [ 1283.319484][T19014] bridge_slave_1: entered allmulticast mode [ 1283.438069][T19014] bridge_slave_1: entered promiscuous mode [ 1284.383117][T19179] kAFS: unable to lookup cell 'sy>7 †ŸO-z1' [ 1284.458784][T18841] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 1285.015826][T19176] netlink: 'syz.2.2577': attribute type 15 has an invalid length. [ 1285.035224][T18841] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 1285.087211][T19014] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1285.112424][T18841] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 1285.139312][T18841] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 1285.237219][T19014] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1286.129818][T19014] team0: Port device team_slave_0 added [ 1286.356891][T19014] team0: Port device team_slave_1 added [ 1287.285281][T19014] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1287.299307][T19014] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1287.325267][ C0] vkms_vblank_simulate: vblank timer overrun [ 1287.367140][T19014] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1287.535926][T19190] bridge_slave_0: entered promiscuous mode [ 1288.331078][T19014] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1288.348380][T19014] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1288.374718][ C0] vkms_vblank_simulate: vblank timer overrun [ 1288.514166][T19014] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1288.693850][T18841] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1288.940807][T19014] hsr_slave_0: entered promiscuous mode [ 1288.976018][T19014] hsr_slave_1: entered promiscuous mode [ 1289.089920][T19014] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1289.097636][T19014] Cannot create hsr debugfs directory [ 1290.984068][T18841] 8021q: adding VLAN 0 to HW filter on device team0 [ 1291.020791][ T78] bridge_slave_1: left allmulticast mode [ 1291.028622][ T78] bridge_slave_1: left promiscuous mode [ 1291.052663][ T78] bridge0: port 2(bridge_slave_1) entered disabled state [ 1291.082240][ T78] bridge_slave_0: left allmulticast mode [ 1291.088046][ T78] bridge_slave_0: left promiscuous mode [ 1291.140235][ T78] bridge0: port 1(bridge_slave_0) entered disabled state [ 1292.159253][ T51] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1292.339021][ T78] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1292.456984][ T78] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1292.506690][ T78] bond0 (unregistering): Released all slaves [ 1292.566209][ T3970] bridge0: port 1(bridge_slave_0) entered blocking state [ 1292.573518][ T3970] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1293.459337][ T5962] bridge0: port 2(bridge_slave_1) entered blocking state [ 1293.466709][ T5962] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1293.790117][T19236] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 1293.872157][ T29] kauditd_printk_skb: 49 callbacks suppressed [ 1293.872199][ T29] audit: type=1326 audit(1349.418:1637): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19232 comm="syz.9.2591" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8b8a38cde9 code=0x7ffc0000 [ 1293.899650][ C0] vkms_vblank_simulate: vblank timer overrun [ 1294.439804][T18841] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1294.462434][ T29] audit: type=1326 audit(1349.418:1638): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19232 comm="syz.9.2591" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8b8a38cde9 code=0x7ffc0000 [ 1294.503145][T18841] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1294.541784][ T29] audit: type=1326 audit(1349.418:1639): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19232 comm="syz.9.2591" exe="/root/syz-executor" sig=0 arch=c000003e syscall=13 compat=0 ip=0x7f8b8a38cde9 code=0x7ffc0000 [ 1294.574502][ T29] audit: type=1326 audit(1349.418:1640): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19232 comm="syz.9.2591" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8b8a38cde9 code=0x7ffc0000 [ 1294.651018][ T29] audit: type=1326 audit(1349.418:1641): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19232 comm="syz.9.2591" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8b8a38cde9 code=0x7ffc0000 [ 1294.676763][ T29] audit: type=1326 audit(1349.418:1642): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19232 comm="syz.9.2591" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f8b8a38cde9 code=0x7ffc0000 [ 1294.700502][ C0] vkms_vblank_simulate: vblank timer overrun [ 1294.722795][ T29] audit: type=1326 audit(1349.418:1643): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19232 comm="syz.9.2591" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8b8a38cde9 code=0x7ffc0000 [ 1294.744002][ C0] vkms_vblank_simulate: vblank timer overrun [ 1294.754861][ T29] audit: type=1326 audit(1349.418:1644): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19232 comm="syz.9.2591" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8b8a38cde9 code=0x7ffc0000 [ 1294.776651][ C0] vkms_vblank_simulate: vblank timer overrun [ 1294.797748][ T29] audit: type=1326 audit(1349.418:1645): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19232 comm="syz.9.2591" exe="/root/syz-executor" sig=0 arch=c000003e syscall=285 compat=0 ip=0x7f8b8a38cde9 code=0x7ffc0000 [ 1295.095093][T19240] new mount options do not match the existing superblock, will be ignored [ 1295.225387][T19227] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 1295.286134][ T29] audit: type=1326 audit(1349.418:1646): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19232 comm="syz.9.2591" exe="/root/syz-executor" sig=0 arch=c000003e syscall=96 compat=0 ip=0xffffffffff600000 code=0x7ffc0000 [ 1297.007950][ T78] hsr_slave_0: left promiscuous mode [ 1297.056285][ T78] hsr_slave_1: left promiscuous mode [ 1297.228708][ T78] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1297.546897][ T78] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1297.919521][T17371] Bluetooth: hci2: command 0x0405 tx timeout [ 1300.209487][ T78] team0 (unregistering): Port device team_slave_1 removed [ 1300.310474][ T78] team0 (unregistering): Port device team_slave_0 removed [ 1300.556477][T19282] gtp1: entered promiscuous mode [ 1301.078326][T19014] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 1301.159562][T19014] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 1303.077805][T19014] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 1303.554407][T19014] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 1303.658370][ T8237] usb 7-1: new high-speed USB device number 21 using dummy_hcd [ 1304.564094][ T8237] usb 7-1: device descriptor read/64, error -71 [ 1304.979187][T11482] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1304.989941][T11482] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1304.998595][T11482] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1305.830785][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 1305.840995][T11482] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1305.848803][T11482] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 1305.856490][T11482] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1307.105329][T19014] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1307.217025][T19014] 8021q: adding VLAN 0 to HW filter on device team0 [ 1307.331644][ T29] kauditd_printk_skb: 5 callbacks suppressed [ 1307.331662][ T29] audit: type=1326 audit(1363.638:1652): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19340 comm="syz.9.2607" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f8b8a38cde9 code=0x0 [ 1307.422001][T19355] /dev/nullb0: Can't lookup blockdev [ 1307.992602][T11482] Bluetooth: hci1: command tx timeout [ 1308.399559][ T3970] bridge0: port 1(bridge_slave_0) entered blocking state [ 1308.407114][ T3970] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1309.115713][ T3970] bridge0: port 2(bridge_slave_1) entered blocking state [ 1309.123053][ T3970] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1309.358508][T19336] lo speed is unknown, defaulting to 1000 [ 1309.929493][T11482] Bluetooth: hci1: command tx timeout [ 1311.853989][T19393] ip6t_srh: unknown srh match flags 5294 [ 1311.893224][T11482] Bluetooth: hci1: command tx timeout [ 1312.668633][T19336] chnl_net:caif_netlink_parms(): no params data found [ 1312.916542][T19014] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1313.689896][ T78] bridge_slave_1: left allmulticast mode [ 1313.698056][ T78] bridge_slave_1: left promiscuous mode [ 1313.709713][ T78] bridge0: port 2(bridge_slave_1) entered disabled state [ 1313.779302][ T78] bridge_slave_0: left allmulticast mode [ 1313.785010][ T78] bridge_slave_0: left promiscuous mode [ 1313.798055][ T78] bridge0: port 1(bridge_slave_0) entered disabled state [ 1313.879647][T17371] Bluetooth: hci1: command tx timeout [ 1314.879957][T19414] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1317.377125][T19429] Invalid source name [ 1318.626065][ T78] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1318.640447][ T78] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1318.654495][ T78] bond0 (unregistering): Released all slaves [ 1320.003358][T19336] bridge0: port 1(bridge_slave_0) entered blocking state [ 1320.037147][T19336] bridge0: port 1(bridge_slave_0) entered disabled state [ 1320.065047][T19336] bridge_slave_0: entered allmulticast mode [ 1320.088803][T19336] bridge_slave_0: entered promiscuous mode [ 1320.130265][T19336] bridge0: port 2(bridge_slave_1) entered blocking state [ 1320.147564][T19336] bridge0: port 2(bridge_slave_1) entered disabled state [ 1320.935422][T19336] bridge_slave_1: entered allmulticast mode [ 1320.942503][T19336] bridge_slave_1: entered promiscuous mode [ 1321.058002][ T78] hsr_slave_0: left promiscuous mode [ 1321.070408][ T78] hsr_slave_1: left promiscuous mode [ 1321.136053][ T78] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1321.254260][ T78] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1322.270869][ T7580] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1323.067038][ T78] team0 (unregistering): Port device team_slave_1 removed [ 1323.114863][T19484] /dev/nullb0: Can't lookup blockdev [ 1323.181280][ T78] team0 (unregistering): Port device team_slave_0 removed [ 1324.582869][ C0] vkms_vblank_simulate: vblank timer overrun [ 1325.461895][T17371] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1325.474226][T17371] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1325.486594][T17371] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1325.509698][T17371] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1325.524774][T17371] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 1325.532967][T17371] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1325.591334][T19336] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1325.617386][T19336] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1325.886717][T19503] netlink: 'syz.2.2633': attribute type 3 has an invalid length. [ 1326.162861][T19336] team0: Port device team_slave_0 added [ 1326.470245][T19336] team0: Port device team_slave_1 added [ 1327.245144][T19336] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1327.269655][T19336] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1327.360714][T19336] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1327.411901][T19336] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1327.440993][T19336] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1327.507923][T19336] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1327.521194][T17371] Bluetooth: hci5: command tx timeout [ 1329.440515][T19527] trusted_key: encrypted_key: insufficient parameters specified [ 1329.503355][T17371] Bluetooth: hci5: command tx timeout [ 1330.343649][T19336] hsr_slave_0: entered promiscuous mode [ 1330.350507][T19336] hsr_slave_1: entered promiscuous mode [ 1330.356838][T19336] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1330.369012][T19336] Cannot create hsr debugfs directory [ 1330.462236][T19539] netlink: 40 bytes leftover after parsing attributes in process `syz.6.2641'. [ 1330.785503][T19533] netlink: 696 bytes leftover after parsing attributes in process `syz.9.2640'. [ 1331.089939][T19496] lo speed is unknown, defaulting to 1000 [ 1331.484017][T17371] Bluetooth: hci5: command tx timeout [ 1332.019526][T19557] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2644'. [ 1332.139430][T19557] netlink: 'syz.6.2644': attribute type 1 has an invalid length. [ 1332.894585][T19557] netlink: 224 bytes leftover after parsing attributes in process `syz.6.2644'. [ 1333.475566][T17371] Bluetooth: hci5: command tx timeout [ 1337.635699][T19496] chnl_net:caif_netlink_parms(): no params data found [ 1338.014398][T19496] bridge0: port 1(bridge_slave_0) entered blocking state [ 1338.022674][T19496] bridge0: port 1(bridge_slave_0) entered disabled state [ 1338.030431][T19496] bridge_slave_0: entered allmulticast mode [ 1338.038904][T19496] bridge_slave_0: entered promiscuous mode [ 1338.771625][T19615] bridge0: entered allmulticast mode [ 1338.889291][T19496] bridge0: port 2(bridge_slave_1) entered blocking state [ 1338.907559][T19496] bridge0: port 2(bridge_slave_1) entered disabled state [ 1338.919955][T19496] bridge_slave_1: entered allmulticast mode [ 1338.928041][T19496] bridge_slave_1: entered promiscuous mode [ 1338.981628][ T7580] bridge_slave_1: left allmulticast mode [ 1338.996588][ T7580] bridge_slave_1: left promiscuous mode [ 1339.014393][ T7580] bridge0: port 2(bridge_slave_1) entered disabled state [ 1339.029038][ T7580] bridge_slave_0: left allmulticast mode [ 1339.036549][ T7580] bridge_slave_0: left promiscuous mode [ 1339.042914][ T7580] bridge0: port 1(bridge_slave_0) entered disabled state [ 1340.908837][ C0] vkms_vblank_simulate: vblank timer overrun [ 1341.712157][ T7580] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1341.725049][ T7580] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1341.747591][ T7580] bond0 (unregistering): Released all slaves [ 1341.820272][T19336] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 1341.855545][T19336] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 1341.883155][T19336] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 1342.596661][T19496] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1342.894845][T19496] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1343.158434][T19336] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 1344.054721][T19496] team0: Port device team_slave_0 added [ 1344.076553][ T7580] hsr_slave_0: left promiscuous mode [ 1344.158031][ T7580] hsr_slave_1: left promiscuous mode [ 1344.165704][ T7580] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1344.337241][ T7580] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1347.500735][ T7580] team0 (unregistering): Port device team_slave_1 removed [ 1347.578544][ C0] vkms_vblank_simulate: vblank timer overrun [ 1347.624266][ T7580] team0 (unregistering): Port device team_slave_0 removed [ 1348.669738][T19496] team0: Port device team_slave_1 added [ 1349.720282][T19496] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1349.735306][T19496] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1349.762314][ C0] vkms_vblank_simulate: vblank timer overrun [ 1349.857029][T19496] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1349.900264][T19496] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1349.913309][T19496] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1349.953777][ C0] vkms_vblank_simulate: vblank timer overrun [ 1349.962266][T19496] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1350.112813][T19496] hsr_slave_0: entered promiscuous mode [ 1350.129908][T19496] hsr_slave_1: entered promiscuous mode [ 1350.149661][T19496] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1350.167119][T19496] Cannot create hsr debugfs directory [ 1352.547383][T19719] netlink: 8 bytes leftover after parsing attributes in process `syz.9.2679'. [ 1352.754448][ T6350] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1353.959275][T19336] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1356.147079][ T29] audit: type=1326 audit(1414.040:1653): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19720 comm="syz.2.2680" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f722778cde9 code=0x7ffc0000 [ 1356.175840][ C0] vkms_vblank_simulate: vblank timer overrun [ 1357.268523][ T29] audit: type=1326 audit(1414.040:1654): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19720 comm="syz.2.2680" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f722778cde9 code=0x7ffc0000 [ 1357.437743][T19746] syz_tun: entered allmulticast mode [ 1357.449950][ T29] audit: type=1326 audit(1414.166:1655): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19720 comm="syz.2.2680" exe="/root/syz-executor" sig=0 arch=c000003e syscall=254 compat=0 ip=0x7f722778cde9 code=0x7ffc0000 [ 1357.498664][ T29] audit: type=1326 audit(1414.166:1656): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19720 comm="syz.2.2680" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f722778cde9 code=0x7ffc0000 [ 1357.604645][T19336] 8021q: adding VLAN 0 to HW filter on device team0 [ 1357.656195][ T29] audit: type=1326 audit(1414.166:1657): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19720 comm="syz.2.2680" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f722778cde9 code=0x7ffc0000 [ 1357.737413][ T29] audit: type=1326 audit(1414.282:1658): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19720 comm="syz.2.2680" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f722778cde9 code=0x7ffc0000 [ 1358.768678][ T29] audit: type=1326 audit(1414.292:1659): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19720 comm="syz.2.2680" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f722778cde9 code=0x7ffc0000 [ 1359.220850][ T29] audit: type=1326 audit(1414.292:1660): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19720 comm="syz.2.2680" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f722778cde9 code=0x7ffc0000 [ 1359.268236][ T29] audit: type=1326 audit(1414.292:1661): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19720 comm="syz.2.2680" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f722778cde9 code=0x7ffc0000 [ 1359.300790][ T29] audit: type=1326 audit(1414.292:1662): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19720 comm="syz.2.2680" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f722778cde9 code=0x7ffc0000 [ 1359.607331][T19496] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 1359.620039][T19496] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 1359.643397][T19496] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 1359.711824][T19496] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 1359.812396][T19496] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1359.844030][T19496] 8021q: adding VLAN 0 to HW filter on device team0 [ 1359.930264][ T7580] bridge0: port 1(bridge_slave_0) entered blocking state [ 1359.938957][ T7580] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1359.961794][ T7580] bridge0: port 2(bridge_slave_1) entered blocking state [ 1359.969833][ T7580] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1460.481171][ C0] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 1460.490293][ C0] rcu: 1-...!: (1 GPs behind) idle=8a9c/1/0x4000000000000000 softirq=106844/106845 fqs=3 [ 1460.505262][ C0] rcu: (detected by 0, t=10502 jiffies, g=95261, q=194 ncpus=2) [ 1460.515779][ C0] Sending NMI from CPU 0 to CPUs 1: [ 1460.515824][ C1] NMI backtrace for cpu 1 [ 1460.515837][ C1] CPU: 1 UID: 0 PID: 19767 Comm: kworker/u8:13 Not tainted 6.14.0-rc2-syzkaller-00056-gab68d7eb7b1a #0 [ 1460.515857][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 1460.515869][ C1] RIP: 0010:__lock_acquire+0xc62/0x2100 [ 1460.515896][ C1] Code: 00 e8 92 65 00 00 45 31 f6 85 c0 0f 84 da 07 00 00 48 c7 c0 80 d9 3c 9a 48 c1 e8 03 48 bf 00 00 00 00 00 fc ff df 0f b6 04 38 <84> c0 0f 85 24 0d 00 00 83 3d 9f 1d a2 18 00 75 39 48 63 9c 24 88 [ 1460.515909][ C1] RSP: 0018:ffffc90000a18a10 EFLAGS: 00000806 [ 1460.515924][ C1] RAX: 0000000000000004 RBX: ffff888025eb8ad8 RCX: ffffffff819b21da [ 1460.515936][ C1] RDX: 0000000000000000 RSI: 0000000000000008 RDI: dffffc0000000000 [ 1460.515947][ C1] RBP: ffff888025eb8b90 R08: ffffffff942c6847 R09: 1ffffffff2858d08 [ 1460.515959][ C1] R10: dffffc0000000000 R11: fffffbfff2858d09 R12: ffff888025eb8ad4 [ 1460.515970][ C1] R13: ffff888025eb8000 R14: 0000000000000000 R15: ffff888025eb8bb0 [ 1460.515981][ C1] FS: 0000000000000000(0000) GS:ffff8880b8700000(0000) knlGS:0000000000000000 [ 1460.515994][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1460.516005][ C1] CR2: 0000000000000000 CR3: 00000000563ae000 CR4: 00000000003526f0 [ 1460.516018][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 1460.516028][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 1460.516038][ C1] Call Trace: [ 1460.516046][ C1] [ 1460.516055][ C1] ? nmi_cpu_backtrace+0x3c2/0x4d0 [ 1460.516075][ C1] ? __pfx_lock_acquire+0x10/0x10 [ 1460.516095][ C1] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 1460.516118][ C1] ? nmi_cpu_backtrace_handler+0xc/0x20 [ 1460.516136][ C1] ? nmi_handle+0x14f/0x5a0 [ 1460.516157][ C1] ? nmi_handle+0x2a/0x5a0 [ 1460.516178][ C1] ? __lock_acquire+0xc62/0x2100 [ 1460.516196][ C1] ? default_do_nmi+0x63/0x160 [ 1460.516212][ C1] ? exc_nmi+0x123/0x1f0 [ 1460.516227][ C1] ? end_repeat_nmi+0xf/0x53 [ 1460.516251][ C1] ? mark_lock+0x9a/0x360 [ 1460.516271][ C1] ? __lock_acquire+0xc62/0x2100 [ 1460.516290][ C1] ? __lock_acquire+0xc62/0x2100 [ 1460.516309][ C1] ? __lock_acquire+0xc62/0x2100 [ 1460.516328][ C1] [ 1460.516334][ C1] [ 1460.516346][ C1] lock_acquire+0x1ed/0x550 [ 1460.516364][ C1] ? advance_sched+0xa02/0xca0 [ 1460.516384][ C1] ? __pfx_lock_acquire+0x10/0x10 [ 1460.516403][ C1] ? advance_sched+0x9b4/0xca0 [ 1460.516418][ C1] ? do_raw_spin_lock+0x14f/0x370 [ 1460.516433][ C1] ? __pfx_lock_release+0x10/0x10 [ 1460.516455][ C1] ? do_raw_spin_unlock+0x13c/0x8b0 [ 1460.516471][ C1] ? taprio_set_budgets+0x32c/0x370 [ 1460.516488][ C1] ? advance_sched+0xa02/0xca0 [ 1460.516504][ C1] advance_sched+0xa1e/0xca0 [ 1460.516520][ C1] ? advance_sched+0xa02/0xca0 [ 1460.516541][ C1] ? __pfx_advance_sched+0x10/0x10 [ 1460.516559][ C1] __hrtimer_run_queues+0x59b/0xd30 [ 1460.516596][ C1] ? __pfx___hrtimer_run_queues+0x10/0x10 [ 1460.516619][ C1] ? read_tsc+0x9/0x20 [ 1460.516636][ C1] ? ktime_get_update_offsets_now+0x38e/0x3b0 [ 1460.516659][ C1] hrtimer_interrupt+0x403/0xa40 [ 1460.516690][ C1] __sysvec_apic_timer_interrupt+0x110/0x420 [ 1460.516713][ C1] sysvec_apic_timer_interrupt+0xa1/0xc0 [ 1460.516735][ C1] [ 1460.516740][ C1] [ 1460.516747][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1460.516769][ C1] RIP: 0010:_raw_spin_unlock_irqrestore+0xd8/0x140 [ 1460.516788][ C1] Code: 9c 8f 44 24 20 42 80 3c 23 00 74 08 4c 89 f7 e8 de 93 32 f6 f6 44 24 21 02 75 52 41 f7 c7 00 02 00 00 74 01 fb bf 01 00 00 00 b3 af 9c f5 65 8b 05 a4 07 13 74 85 c0 74 43 48 c7 04 24 0e 36 [ 1460.516807][ C1] RSP: 0018:ffffc900048aea40 EFLAGS: 00000206 [ 1460.516821][ C1] RAX: 64f4c2f047bdf000 RBX: 1ffff92000915d4c RCX: ffffffff819b21da [ 1460.516834][ C1] RDX: dffffc0000000000 RSI: ffffffff8c0aa680 RDI: 0000000000000001 [ 1460.516845][ C1] RBP: ffffc900048aead8 R08: ffffffff942c6847 R09: 1ffffffff2858d08 [ 1460.516857][ C1] R10: dffffc0000000000 R11: fffffbfff2858d09 R12: dffffc0000000000 [ 1460.516869][ C1] R13: 1ffff92000915d48 R14: ffffc900048aea60 R15: 0000000000000246 [ 1460.516884][ C1] ? mark_lock+0x9a/0x360 [ 1460.516918][ C1] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 1460.516942][ C1] __rmqueue_pcplist+0x2231/0x2ad0 [ 1460.516968][ C1] ? __pfx_do_raw_spin_trylock+0x10/0x10 [ 1460.516989][ C1] get_page_from_freelist+0x88a/0x37a0 [ 1460.517013][ C1] ? __pfx___might_resched+0x10/0x10 [ 1460.517041][ C1] __alloc_frozen_pages_noprof+0x292/0x710 [ 1460.517059][ C1] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 1460.517083][ C1] alloc_pages_mpol+0x311/0x660 [ 1460.517104][ C1] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 1460.517122][ C1] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 1460.517142][ C1] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 1460.517162][ C1] ? alloc_frozen_pages_noprof+0xef/0x170 [ 1460.517181][ C1] allocate_slab+0x8f/0x3a0 [ 1460.517198][ C1] ___slab_alloc+0xc27/0x14a0 [ 1460.517222][ C1] ? jbd2_journal_add_journal_head+0x7e/0x470 [ 1460.517249][ C1] ? jbd2_journal_add_journal_head+0x7e/0x470 [ 1460.517271][ C1] __slab_alloc+0x58/0xa0 [ 1460.517293][ C1] ? jbd2_journal_add_journal_head+0x7e/0x470 [ 1460.517314][ C1] kmem_cache_alloc_noprof+0x268/0x380 [ 1460.517337][ C1] jbd2_journal_add_journal_head+0x7e/0x470 [ 1460.517360][ C1] jbd2_journal_get_write_access+0x1de/0x240 [ 1460.517380][ C1] __ext4_journal_get_write_access+0x1cc/0x580 [ 1460.517404][ C1] ? __pfx___ext4_journal_get_write_access+0x10/0x10 [ 1460.517431][ C1] ext4_reserve_inode_write+0x271/0x360 [ 1460.517454][ C1] ? __pfx_ext4_reserve_inode_write+0x10/0x10 [ 1460.517479][ C1] __ext4_mark_inode_dirty+0x1ec/0x880 [ 1460.517499][ C1] ? __pfx___ext4_mark_inode_dirty+0x10/0x10 [ 1460.517516][ C1] ? trace_jbd2_handle_start+0x9c/0x250 [ 1460.517540][ C1] ext4_dirty_inode+0xce/0x110 [ 1460.517561][ C1] ? __pfx_ext4_dirty_inode+0x10/0x10 [ 1460.517587][ C1] __mark_inode_dirty+0x2ee/0xe90 [ 1460.517609][ C1] ? filemap_read+0x100d/0x1260 [ 1460.517627][ C1] touch_atime+0x413/0x690 [ 1460.517652][ C1] filemap_read+0x100d/0x1260 [ 1460.517678][ C1] ? __pfx_filemap_read+0x10/0x10 [ 1460.517704][ C1] ? generic_file_read_iter+0x98/0x550 [ 1460.517730][ C1] ? ext4_file_read_iter+0x182/0x670 [ 1460.517750][ C1] __kernel_read+0x52e/0xa00 [ 1460.517777][ C1] ? __pfx___kernel_read+0x10/0x10 [ 1460.517804][ C1] ? rw_verify_area+0x243/0x630 [ 1460.517829][ C1] load_elf_binary+0x2096/0x2820 [ 1460.517854][ C1] ? __pfx_lock_acquire+0x10/0x10 [ 1460.517873][ C1] ? bprm_execve+0x94b/0x1430 [ 1460.517889][ C1] ? __pfx_load_elf_binary+0x10/0x10 [ 1460.517905][ C1] ? _raw_read_unlock+0x28/0x50 [ 1460.517922][ C1] ? load_misc_binary+0x6e5/0xc10 [ 1460.517942][ C1] bprm_execve+0x979/0x1430 [ 1460.517963][ C1] ? __pfx_bprm_execve+0x10/0x10 [ 1460.517980][ C1] ? copy_string_kernel+0x1c9/0x1f0 [ 1460.518004][ C1] kernel_execve+0x931/0xa50 [ 1460.518025][ C1] call_usermodehelper_exec_async+0x237/0x380 [ 1460.518042][ C1] ? __pfx_call_usermodehelper_exec_async+0x10/0x10 [ 1460.518060][ C1] ret_from_fork+0x4b/0x80 [ 1460.518078][ C1] ? __pfx_call_usermodehelper_exec_async+0x10/0x10 [ 1460.518095][ C1] ret_from_fork_asm+0x1a/0x30 [ 1460.518117][ C1] [ 1460.518823][ C0] rcu: rcu_preempt kthread starved for 10494 jiffies! g95261 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=0 [ 1461.448318][ C0] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 1461.460759][ C0] rcu: RCU grace-period kthread stack dump: [ 1461.468217][ C0] task:rcu_preempt state:R running task stack:26104 pid:17 tgid:17 ppid:2 task_flags:0x208040 flags:0x00004000 [ 1461.486696][ C0] Call Trace: [ 1461.492101][ C0] [ 1461.495084][ C0] __schedule+0x18bc/0x4c40 [ 1461.500694][ C0] ? __pfx___schedule+0x10/0x10 [ 1461.505984][ C0] ? __pfx_lock_release+0x10/0x10 [ 1461.511888][ C0] ? __pfx___mod_timer+0x10/0x10 [ 1461.518958][ C0] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 1461.526039][ C0] ? schedule+0x90/0x320 [ 1461.531905][ C0] schedule+0x14b/0x320 [ 1461.536461][ C0] schedule_timeout+0x15a/0x290 [ 1461.541830][ C0] ? __pfx_schedule_timeout+0x10/0x10 [ 1461.548658][ C0] ? __pfx_process_timeout+0x10/0x10 [ 1461.555220][ C0] ? prepare_to_swait_event+0x330/0x350 [ 1461.563432][ C0] rcu_gp_fqs_loop+0x2df/0x1330 [ 1461.570455][ C0] ? lockdep_hardirqs_on+0x99/0x150 [ 1461.579028][ C0] ? __pfx_rcu_watching_snap_recheck+0x10/0x10 [ 1461.587862][ C0] ? __pfx_rcu_gp_fqs_loop+0x10/0x10 [ 1461.596306][ C0] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 1461.603984][ C0] ? finish_swait+0xd4/0x1e0 [ 1461.609367][ C0] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 1461.616872][ C0] rcu_gp_kthread+0xa7/0x3b0 [ 1461.622101][ C0] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 1461.628572][ C0] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 1461.637136][ C0] ? __kthread_parkme+0x169/0x1d0 [ 1461.644129][ C0] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 1461.654244][ C0] kthread+0x7a9/0x920 [ 1461.660456][ C0] ? __pfx_kthread+0x10/0x10 [ 1461.666328][ C0] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 1461.673759][ C0] ? __pfx_kthread+0x10/0x10 [ 1461.678561][ C0] ? __pfx_kthread+0x10/0x10 [ 1461.685133][ C0] ? __pfx_kthread+0x10/0x10 [ 1461.690044][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 1461.695985][ C0] ? lockdep_hardirqs_on+0x99/0x150 [ 1461.701919][ C0] ? __pfx_kthread+0x10/0x10 [ 1461.707025][ C0] ret_from_fork+0x4b/0x80 [ 1461.712143][ C0] ? __pfx_kthread+0x10/0x10 [ 1461.717247][ C0] ret_from_fork_asm+0x1a/0x30 [ 1461.723291][ C0] [ 1461.729764][ C0] rcu: Stack dump where RCU GP kthread last ran: [ 1461.740065][ C0] CPU: 0 UID: 0 PID: 19768 Comm: syz.6.2687 Not tainted 6.14.0-rc2-syzkaller-00056-gab68d7eb7b1a #0 [ 1461.756601][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 1461.768313][ C0] RIP: 0010:smp_call_function_many_cond+0x1ba4/0x2d30 [ 1461.778354][ C0] Code: 03 84 c0 75 7e 45 8b 65 00 44 89 e6 83 e6 01 31 ff e8 b0 e8 0b 00 41 83 e4 01 4c 8b 64 24 68 75 07 e8 60 e4 0b 00 eb 41 f3 90 <48> b8 00 00 00 00 00 fc ff df 0f b6 04 03 84 c0 75 11 41 f7 45 00 [ 1461.805425][ C0] RSP: 0018:ffffc90004a6f3e0 EFLAGS: 00000246 [ 1461.813458][ C0] RAX: ffffffff81b36b05 RBX: 1ffff110170e88c9 RCX: 0000000000080000 [ 1461.825775][ C0] RDX: ffffc90015db7000 RSI: 000000000007ffff RDI: 0000000000080000 [ 1461.836295][ C0] RBP: ffffc90004a6f5e0 R08: ffffffff81b36ad0 R09: 1ffffffff2858d08 [ 1461.845818][ C0] R10: dffffc0000000000 R11: fffffbfff2858d09 R12: ffff8880b863f9c8 [ 1461.854955][ C0] R13: ffff8880b8744648 R14: ffff8880b863f9c0 R15: 0000000000000001 [ 1461.864793][ C0] FS: 00007f1a9e99d6c0(0000) GS:ffff8880b8600000(0000) knlGS:0000000000000000 [ 1461.875791][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1461.883223][ C0] CR2: 0000001b2d518ff8 CR3: 0000000034120000 CR4: 00000000003526f0 [ 1461.892581][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 1461.902057][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 1461.913836][ C0] Call Trace: [ 1461.917136][ C0] [ 1461.920557][ C0] ? rcu_check_gp_kthread_starvation+0x278/0x310 [ 1461.927806][ C0] ? print_other_cpu_stall+0x1481/0x15c0 [ 1461.936017][ C0] ? __pfx_print_other_cpu_stall+0x10/0x10 [ 1461.942227][ C0] ? cgroup_rstat_updated+0x13b/0xc30 [ 1461.948554][ C0] ? kvm_check_and_clear_guest_paused+0x6a/0xd0 [ 1461.957203][ C0] ? rcu_sched_clock_irq+0xa26/0x10e0 [ 1461.962985][ C0] ? __pfx_rcu_sched_clock_irq+0x10/0x10 [ 1461.969546][ C0] ? update_process_times+0x242/0x2f0 [ 1461.976910][ C0] ? tick_nohz_handler+0x37c/0x500 [ 1461.982427][ C0] ? __pfx_tick_nohz_handler+0x10/0x10 [ 1461.989495][ C0] ? __hrtimer_run_queues+0x551/0xd30 [ 1461.996181][ C0] ? __pfx___hrtimer_run_queues+0x10/0x10 [ 1462.004637][ C0] ? sched_clock+0x4a/0x70 [ 1462.010237][ C0] ? read_tsc+0x9/0x20 [ 1462.014955][ C0] ? ktime_get_update_offsets_now+0x38e/0x3b0 [ 1462.021949][ C0] ? hrtimer_interrupt+0x403/0xa40 [ 1462.027556][ C0] ? __sysvec_apic_timer_interrupt+0x110/0x420 [ 1462.035268][ C0] ? sysvec_apic_timer_interrupt+0xa1/0xc0 [ 1462.042070][ C0] [ 1462.046203][ C0] [ 1462.049353][ C0] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1462.058642][ C0] ? smp_call_function_many_cond+0x1b90/0x2d30 [ 1462.066842][ C0] ? smp_call_function_many_cond+0x1bc5/0x2d30 [ 1462.075833][ C0] ? smp_call_function_many_cond+0x1ba4/0x2d30 [ 1462.082533][ C0] ? __SCT__tp_func_timer_base_idle+0x8/0x8 [ 1462.089271][ C0] ? __SCT__tp_func_timer_base_idle+0x8/0x8 [ 1462.096460][ C0] ? __pfx___text_poke+0x10/0x10 [ 1462.101760][ C0] ? __get_immv32+0x19c/0x350 [ 1462.106545][ C0] ? __pfx_smp_call_function_many_cond+0x10/0x10 [ 1462.114318][ C0] ? __pfx___might_resched+0x10/0x10 [ 1462.123056][ C0] ? __pfx_do_sync_core+0x10/0x10 [ 1462.129187][ C0] on_each_cpu_cond_mask+0x3f/0x80 [ 1462.135330][ C0] text_poke_bp_batch+0x352/0xb30 [ 1462.142020][ C0] ? __mutex_trylock_common+0x183/0x2e0 [ 1462.149218][ C0] ? __pfx_text_poke_bp_batch+0x10/0x10 [ 1462.155456][ C0] ? rcu_is_watching+0x15/0xb0 [ 1462.163309][ C0] ? __SCT__tp_func_timer_base_idle+0x8/0x8 [ 1462.171837][ C0] text_poke_bp+0xb0/0x100 [ 1462.177876][ C0] ? __pfx_text_poke_bp+0x10/0x10 [ 1462.184099][ C0] ? arch_static_call_transform+0x37/0x380 [ 1462.190808][ C0] ? __SCT__tp_func_timer_base_idle+0x8/0x8 [ 1462.199499][ C0] __static_call_transform+0x51a/0x810 [ 1462.207838][ C0] ? __SCT__tp_func_timer_base_idle+0x8/0x8 [ 1462.214628][ C0] ? __pfx___bpf_trace_hrtimer_init+0x10/0x10 [ 1462.221431][ C0] ? __pfx___static_call_transform+0x10/0x10 [ 1462.229242][ C0] ? __pfx_rcu_read_lock_any_held+0x10/0x10 [ 1462.238391][ C0] ? __pfx___bpf_trace_hrtimer_init+0x10/0x10 [ 1462.245476][ C0] ? __SCT__tp_func_timer_base_idle+0x8/0x8 [ 1462.252048][ C0] arch_static_call_transform+0x141/0x380 [ 1462.260426][ C0] ? __pfx___bpf_trace_hrtimer_init+0x10/0x10 [ 1462.267220][ C0] ? __SCT__tp_func_timer_base_idle+0x8/0x8 [ 1462.275422][ C0] __static_call_update+0xd8/0x5e0 [ 1462.282723][ C0] ? __pfx___bpf_trace_hrtimer_init+0x10/0x10 [ 1462.290847][ C0] ? __pfx___static_call_update+0x10/0x10 [ 1462.299405][ C0] ? trace_kmalloc+0x1f/0xd0 [ 1462.305868][ C0] ? __kmalloc_noprof+0x2a5/0x4c0 [ 1462.312083][ C0] ? __pfx___bpf_trace_hrtimer_init+0x10/0x10 [ 1462.319143][ C0] tracepoint_add_func+0x925/0xaa0 [ 1462.324833][ C0] ? __pfx___bpf_trace_hrtimer_init+0x10/0x10 [ 1462.331384][ C0] tracepoint_probe_register_prio_may_exist+0x122/0x190 [ 1462.338826][ C0] ? __pfx_tracepoint_probe_register_prio_may_exist+0x10/0x10 [ 1462.347821][ C0] ? __pfx___bpf_trace_hrtimer_init+0x10/0x10 [ 1462.353941][ C0] ? anon_inode_getfile+0xff/0x180 [ 1462.359984][ C0] ? bpf_probe_register+0x134/0x1f0 [ 1462.366188][ C0] bpf_raw_tp_link_attach+0x4a3/0x700 [ 1462.371788][ C0] ? __pfx_bpf_raw_tp_link_attach+0x10/0x10 [ 1462.380816][ C0] ? __fget_files+0x2a/0x410 [ 1462.386629][ C0] ? fput+0x21b/0x290 [ 1462.390917][ C0] bpf_raw_tracepoint_open+0x177/0x1f0 [ 1462.396840][ C0] __sys_bpf+0x3c0/0x810 [ 1462.402158][ C0] ? __pfx___sys_bpf+0x10/0x10 [ 1462.407511][ C0] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 1462.416735][ C0] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 1462.424955][ C0] ? do_syscall_64+0x100/0x230 [ 1462.429782][ C0] __x64_sys_bpf+0x7c/0x90 [ 1462.435100][ C0] do_syscall_64+0xf3/0x230 [ 1462.440088][ C0] ? clear_bhb_loop+0x35/0x90 [ 1462.447006][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1462.458232][ C0] RIP: 0033:0x7f1a9db8cde9 [ 1462.463915][ C0] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1462.485410][ C0] RSP: 002b:00007f1a9e99d038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1462.496058][ C0] RAX: ffffffffffffffda RBX: 00007f1a9dda6160 RCX: 00007f1a9db8cde9 [ 1462.506742][ C0] RDX: 0000000000000018 RSI: 0000400000000540 RDI: 0000000000000011 [ 1462.516079][ C0] RBP: 00007f1a9dc0e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 1462.524701][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1462.533705][ C0] R13: 0000000000000000 R14: 00007f1a9dda6160 R15: 00007fff8ccffc98 [ 1462.543666][ C0] [ 1462.548935][ C0] vkms_vblank_simulate: vblank timer overrun