last executing test programs: 6.837487627s ago: executing program 0 (id=7): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000280), 0x80000, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000380), 0x101040) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000340)=0x400000b4e) socket$inet_icmp_raw(0x2, 0x3, 0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000002000)=""/102400, 0x19000) mq_timedsend(0xffffffffffffffff, &(0x7f0000000780), 0x0, 0x5, &(0x7f00000005c0)) r3 = openat$sndseq(0xffffffffffffff9c, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r3, 0x40605346, &(0x7f0000000280)={0x0, 0x0, {}, 0x9}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r1, 0x40505412, &(0x7f00000000c0)={0x0, 0x74, 0x40, 0x0, 0x5}) socketpair$unix(0x1, 0x1, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="0f0000"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f00000001c0)=ANY=[], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x3) socket$nl_rdma(0x10, 0x3, 0x14) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xe) ioctl$TIOCGPGRP(r0, 0x5437, 0x0) 6.205359705s ago: executing program 3 (id=4): unshare(0x8000400) r0 = socket(0x2c, 0x3, 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, 0x0, 0x0) 6.055479606s ago: executing program 0 (id=8): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0, r0}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000200)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-twofish-3way\x00'}, 0x58) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000000300)="c99b57381801238c09d0ff0f1d0dbd30", 0x10) r5 = accept4(r4, 0x0, 0x0, 0x0) recvmmsg(r5, &(0x7f00000001c0)=[{{0x0, 0x0, &(0x7f00000008c0)=[{&(0x7f00000006c0)=""/188, 0xbc}], 0x1}, 0x7}], 0x1, 0x10000, 0x0) sendmsg$nl_route_sched_retired(r5, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000001e40)=@newtfilter={0x2c38, 0x2c, 0x20, 0x70bd2c, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x9, 0xf}, {0xfff1, 0x2}, {0x7, 0xffe0}}, [@f_tcindex={{0xc}, {0x2c08, 0x2, [@TCA_TCINDEX_ACT={0x2c04, 0x7, [@m_pedit={0x2c00, 0x1a, 0x0, 0x0, {{0xa}, {0x2b28, 0x2, 0x0, 0x1, [@TCA_PEDIT_KEYS_EX={0x4}, @TCA_PEDIT_PARMS_EX={0xec8, 0x4, {{{0x9, 0x0, 0x6, 0x0, 0x9}, 0x0, 0x7, [{0xffff, 0x81, 0xffff, 0x3, 0xd, 0x9}, {0x401, 0x0, 0x128e000, 0x1000, 0x1, 0x4}, {0x9, 0xe, 0x7, 0x80000000, 0x1, 0x3}, {0x6, 0xc2, 0x45, 0x80000001, 0x100, 0x5}, {0x7b, 0x10, 0x80000001, 0x3, 0x80000000, 0x1}, {0x5, 0x3, 0xb8, 0x1, 0x2de7, 0x80000000}, {0x0, 0x8000, 0x7, 0x5, 0x9, 0xea7}]}, [{0xff, 0x5, 0xe9, 0x9, 0x1, 0x8bf}, {0xb992, 0x4, 0x14, 0x7, 0x80f, 0x7}, {0x90, 0x7fffffff, 0x4, 0xfd, 0x3, 0x3ff}, {0x28, 0x1, 0x40, 0x9, 0x1, 0xc85e}, {0x9, 0x4, 0xfff, 0x66, 0x2, 0x800}, {0x4, 0x4, 0xfff, 0x7, 0x9, 0x80000001}, {0x72, 0xd192, 0x7034, 0xfd8, 0x2, 0x101}, {0x7735, 0x72838b6a, 0x6, 0xb04, 0x10001, 0x2}, {0x4, 0x7f, 0xc9f, 0x42b, 0x0, 0x3}, {0x16f6bb9, 0xde, 0x200000, 0x2, 0x101, 0x1}, {0x4, 0x8000, 0x4, 0x2, 0x5aa, 0xdf}, {0x48, 0xa, 0x0, 0x874, 0xff, 0x2}, {0x8a25, 0x2, 0x6, 0x0, 0x9, 0x2}, {0x1, 0x7fffffff, 0x1, 0x9, 0x7fffffff, 0x7}, {0xfffffffd, 0xcfd, 0xfc4e, 0x0, 0xfffffffe, 0x4}, {0x6, 0x1, 0xc, 0x10, 0x4, 0x8}, {0x9, 0x800, 0x7a01b583, 0x3, 0xffffffff, 0xe3b}, {0x5, 0x8, 0x5, 0x9f, 0x651, 0x5}, {0x4, 0x5, 0x1000, 0x3, 0x259db723, 0x9}, {0x10, 0x0, 0x3, 0x8, 0x13000000, 0x7fffffff}, {0xf0, 0x2, 0x0, 0x101, 0x101, 0x5}, {0x1, 0x127, 0x6, 0xffff, 0x8001, 0x4}, {0x0, 0x8, 0xffff6f39, 0xca51, 0x9, 0x8}, {0x8001, 0x81, 0x3, 0x4, 0xfffffff9}, {0x5, 0xa3, 0x0, 0x0, 0x1e400000, 0x100}, {0x8, 0x6, 0x0, 0x5, 0x4, 0xfffffffe}, {0x8, 0x1ff, 0x4, 0x6d13addf, 0x140, 0x6}, {0x0, 0x6, 0x2, 0x5, 0x5, 0x1b}, {0x80, 0x0, 0x401, 0x9, 0xfd, 0x1}, {0x9, 0x2, 0x5, 0x896, 0xffff7fff, 0xeb6}, {0x0, 0x28, 0x5}, {0x400, 0xfff, 0x7f6, 0x100, 0x3, 0x7}, {0x2, 0xad25, 0x77, 0x80000000, 0x1, 0xd}, {0x1, 0x3, 0x8, 0x7, 0x9, 0x9}, {0x7, 0x1, 0xb68e, 0x4, 0x5, 0x800}, {0x0, 0x1000, 0x9, 0x5, 0x7}, {0x2, 0x5a7, 0x5, 0x9, 0x24, 0xfffffffe}, {0x200, 0x2, 0x5, 0x1, 0x4, 0x6}, {0x3, 0x0, 0x1, 0x5, 0x40, 0x4}, {0x8, 0x10, 0x4, 0x5, 0x4, 0x1}, {0x8000, 0xec, 0x8, 0x3, 0x4, 0x81}, {0x0, 0x6, 0x9, 0x3, 0xfffffff8, 0x4}, {0x3, 0x1, 0x0, 0xc4b, 0x0, 0x5}, {0x8, 0x0, 0xffffffff, 0x5, 0x3, 0x40}, {0x3, 0x6, 0x0, 0x2, 0x8, 0xe}, {0x2, 0x401, 0x5759cd20, 0x4, 0x933, 0x2}, {0x8000, 0xc89, 0x8, 0x5, 0x2, 0x218}, {0x80000000, 0x0, 0x3, 0x6, 0xe3, 0x1}, {0x6, 0x1ff, 0x4, 0x1e9, 0x5, 0x1}, {0x10, 0x6b, 0x23, 0x5, 0xfffffffc}, {0x4, 0x828f, 0x0, 0x0, 0x6, 0x4}, {0x93c7, 0x4, 0xe, 0x3259, 0x1, 0x2000}, {0x9, 0xff66, 0xd089, 0x4, 0x35, 0xc20}, {0x1, 0x281, 0x7, 0x4, 0x4, 0x2}, {0xd, 0x6, 0xa0, 0x1, 0x9, 0x8}, {0x22, 0x0, 0x5, 0x8, 0x2, 0x5}, {0xe8, 0xdc00, 0x8, 0x80000001, 0x4, 0x1}, {0xf, 0x4, 0x9, 0x2, 0x8000, 0x480}, {0x1, 0xf4000000, 0x8, 0x8, 0x200}, {0x401, 0x0, 0x0, 0x43, 0x7, 0x3}, {0x9, 0x1ff, 0x7fff, 0x3, 0x9, 0x5}, {0x7, 0x38000, 0x3, 0x5, 0xa58d, 0xba43}, {0x400000, 0xff, 0xfffffff0, 0x9, 0x0, 0x6}, {0x1, 0x7, 0x3, 0xa, 0xcd0, 0x7110}, {0x8, 0x0, 0xf, 0x4, 0x1b, 0x4}, {0xc, 0x14, 0x1ff, 0x9, 0x8, 0x3}, {0x5, 0x3da, 0xff, 0x5, 0x5, 0x3}, {0x7f67, 0xffff, 0x9, 0x33a925b9, 0x80000001, 0x8000}, {0x201023e3, 0x8, 0x7, 0x3, 0x6, 0x4}, {0x1ff, 0x57, 0x0, 0xe7c, 0x4, 0x800}, {0x5, 0xfffffffe, 0xb, 0x80, 0xfffffffc, 0x7}, {0x8, 0x1e, 0x21d, 0x1, 0x74426d9d, 0x8d}, {0xfffffff8, 0xffffffff, 0xc8, 0x7fff, 0x2, 0x7fffffff}, {0x5c, 0x8, 0x40, 0xbf4, 0xff, 0x6}, {0x2, 0xb6, 0x5, 0x70000, 0xed2b, 0x8}, {0x2, 0x7, 0x3, 0x8001, 0x2, 0x7}, {0x79a2, 0x2, 0x4000, 0x3, 0x80, 0x5}, {0x4, 0x2, 0x5, 0x4, 0xfffff001, 0xf}, {0x1e7, 0x80000001, 0x4, 0x7, 0x2, 0xfff}, {0x6, 0x3ff, 0x7, 0x3, 0x9, 0xfff}, {0x4, 0x9, 0x3, 0x6, 0xb, 0x6}, {0x1, 0x2, 0x0, 0x1, 0x2, 0x6}, {0xffffffd4, 0x3, 0x80, 0xffff9f41, 0xc, 0x8}, {0x6, 0x4, 0xd, 0xfffff271, 0x2, 0x10001}, {0x5, 0x2, 0x2, 0x1, 0x7, 0xc7e1}, {0x7, 0x2, 0x100, 0x1000, 0x3, 0x10}, {0x8, 0x80, 0x192f, 0xa1, 0x2, 0x9}, {0x2, 0x2, 0x9, 0x800, 0xbb, 0x3}, {0xf, 0x1, 0x3, 0xb, 0x7, 0x14e0}, {0x9, 0x2, 0xca, 0xc2a5, 0xf9f5, 0x4}, {0x40, 0x7, 0x3, 0x4, 0x4, 0x2}, {0xf, 0x13, 0x7, 0xfffffffd, 0x3, 0x401}, {0x2, 0x3, 0xffffffff, 0xd9e, 0xc2, 0x20}, {0x54, 0xec, 0x6, 0x6b2, 0xad, 0x6}, {0x5, 0x6, 0x6, 0x401, 0x6, 0x2}, {0xf, 0x3c7, 0xffff, 0x7ff, 0x2, 0x8001}, {0x7, 0x9, 0x2, 0x8001, 0x401, 0xe62c}, {0xffff, 0x4, 0x81, 0x4, 0x9e, 0x7}, {0x10000, 0x1, 0xf, 0x7fffffff, 0x2, 0x9}, {0x4e1b, 0x8000, 0xa, 0x4, 0x1, 0xffff59e7}, {0x3f4, 0x3, 0x400, 0x1, 0xf2d, 0x745d7b2a}, {0x4, 0x8000000, 0x20d, 0x9, 0x7, 0x101}, {0xc, 0x356, 0x87, 0x5, 0x45, 0x7ff}, {0xffff, 0x10000, 0x7, 0x40, 0x800, 0x2}, {0x7, 0x2, 0x200, 0x4, 0x2, 0x2}, {0x5, 0xfd5, 0x8, 0x4, 0xfffffffc, 0xb85d}, {0x88d, 0x6, 0xffffffff, 0x7, 0x8, 0xcf}, {0x9, 0x0, 0x7, 0xfffffff8, 0xfffffefd, 0x3}, {0x2, 0x4, 0x43d7, 0xff, 0xc7e, 0x5}, {0x6, 0x8, 0x6, 0xd21, 0xc7, 0x8}, {0x2, 0xad, 0x5, 0x1, 0xfffffffc, 0x1c}, {0x7fffffff, 0x44, 0x8e, 0x0, 0x1ff, 0x1}, {0x7fff, 0x7fffffff, 0xfffffff8, 0x5, 0x2, 0x7}, {0x9, 0x4, 0x0, 0x6, 0xa, 0x6}, {0x6, 0x28, 0x100, 0x5, 0x8}, {0x1, 0xf6, 0x9ea, 0x7fff, 0xfffffffb, 0x7}, {0x101, 0x7ff, 0x4, 0x7, 0x0, 0x400}, {0x1000, 0x8, 0x4, 0x5, 0xfffffff2, 0x101}, {0x8515, 0x0, 0x80000001, 0xfffffff7, 0x80f5, 0x3}, {0x0, 0x9, 0xce, 0x401, 0x6, 0x8}, {0x200, 0x9, 0xb, 0x5, 0x3, 0x2}, {0x3000, 0x3, 0xf4bb, 0x3ff, 0x2, 0x2}, {0xd2e1, 0x1, 0x4, 0xfffffffb, 0x9, 0x1ff}, {0x2, 0x2, 0x8, 0x3, 0x3, 0x8}, {0x10, 0x0, 0x38a, 0x2, 0xfffffffe, 0x4}, {0x85, 0x9, 0x1ff, 0x7, 0x7f, 0x401}, {0x6, 0x6, 0x1, 0x3, 0x6, 0x7}, {0x2, 0x6, 0x1, 0xff, 0x1000, 0x6f4}], [{0x1}, {0x2, 0x1}, {0x5}, {0x2, 0x1}, {0x4}, {0x4, 0x1}, {0x0, 0x1}, {0x5}, {0x4}, {0x2, 0x1}, {0x5, 0xfb51726ae9cc3196}, {0x1, 0x1}, {0x5, 0x1}, {0x3}, {0x0, 0x1}, {0x4}, {0x4}, {}, {0x5}, {0x0, 0x1}, {0x5, 0x1}, {0x0, 0x1}, {0x4}, {0x1, 0x1}, {0x4, 0x1}, {0x2}, {0x4}, {0x2}, {}, {0x1, 0x1}, {0x0, 0x1}, {0x1, 0x1}, {0x7, 0x1}, {}, {0x4, 0x1}, {0x69029817d8283d0}, {0x2}, {0x1}, {0x1}, {0x3}, {0x3}, {0x5, 0x1}, {}, {0x1, 0x1}, {0x4}, {0x3}, {0x5, 0x1}, {0x3, 0x1}, {0x5, 0x1}, {0x1, 0x1}, {0x5, 0x1}, {}, {0x3, 0x1}, {0x1}, {0x5}, {}, {0x6}, {0x1}, {0x2, 0x1}, {}, {0x1}, {0x2}, {0x3, 0x1}, {0x4, 0x1}, {0x2, 0x1}, {0x3, 0x1}, {0x2}, {0x5}, {0x3, 0x1}, {0x2, 0x1}, {0x3}, {}, {0x0, 0x1}, {}, {0x2, 0x1}, {0x3, 0x1}, {0x3}, {0x1, 0x1}, {0x5, 0x1}, {0x5}, {0x7}, {0x5, 0x1}, {0x2}, {0x5}, {0x5, 0x1}, {0x5, 0x1}, {0x5, 0x1}, {0x1}, {0x2}, {0x0, 0x1}, {0x1}, {0x2, 0x1}, {0x1}, {}, {0x2, 0x1}, {0x1, 0x1}, {}, {0x0, 0x1}, {0x2}, {}, {}, {0x2}, {0x2, 0x1}, {}, {0x5, 0x1}, {0x3}, {}, {0x5}, {0x5}, {0x4, 0x1}, {0x1}, {0x1, 0x1}, {0x3, 0x1}, {0x5}, {0x4, 0x1}, {0x3}, {0x5}, {0x4, 0x1}, {0x4, 0x1}, {}, {0x1, 0x1}, {0x2, 0x1}, {0x1, 0xf8e8073cdc0d3e77}, {0x3}, {0x0, 0x1}, {0x3}, {0x7289fafe301ce6fe, 0x1}, {0x0, 0x1}], 0x1}}, @TCA_PEDIT_PARMS_EX={0xe20, 0x4, {{{0x3, 0x0, 0x7, 0xf, 0x524}, 0xf4, 0x1}, [{0x9057, 0x7, 0x8, 0x0, 0x4a, 0x9}, {0x14e, 0xe76, 0x9, 0x6, 0x1, 0x2}, {0x6, 0xffffffff, 0x3, 0x4, 0x7, 0x100}, {0xe180, 0x9, 0x8001, 0xffff, 0x6e3, 0x4}, {0x1, 0x7fffffff, 0x8001, 0x7f, 0xfffffffe, 0x2}, {0x6, 0x4, 0x3, 0xd633, 0x7, 0x7}, {0x7, 0x0, 0xffff, 0x916, 0x5, 0x6}, {0xd, 0xf6, 0x7, 0xf1c, 0x4, 0x80}, {0x1, 0x10, 0x8000, 0x6, 0x8, 0x80000001}, {0x40, 0x401, 0x8, 0x4, 0xa, 0x8}, {0x9, 0x45c2, 0xfffffff7, 0xfff, 0x4, 0x4}, {0x1, 0x10, 0x6, 0x4, 0xffffff7e, 0x7ff}, {0x0, 0xc0, 0x94eb, 0x6, 0xffffb4e2, 0x10001}, {0x2, 0xc, 0x7, 0x27, 0x10000, 0xb1}, {0x1000, 0x2, 0x3, 0x551b, 0x81, 0xa0}, {0x1, 0x40, 0x1, 0x7ff, 0x2, 0x1b94}, {0x0, 0x3, 0x10001, 0x0, 0x78, 0x2}, {0x7, 0x3, 0x5a, 0xfffffff8, 0x5, 0x6}, {0x75, 0xeb, 0xfffff001, 0x2, 0x3, 0x6ab}, {0x7, 0x4, 0x4, 0x0, 0x200, 0x80}, {0x2400000, 0x4, 0x7d, 0xd4e, 0xfa57b15, 0x75f}, {0x8, 0x2, 0x0, 0x8, 0xfff, 0x4}, {0x0, 0x0, 0x4348, 0x3, 0x44, 0x101}, {0x2, 0x1, 0xef, 0x45050b62, 0x7f, 0x8}, {0x4, 0x80000001, 0x5, 0x401, 0x9, 0xff}, {0x0, 0x8, 0x10000, 0x9, 0xf, 0x7}, {0x3, 0x2, 0x0, 0x9, 0xfffffffe, 0x10000}, {0x0, 0x8, 0x1, 0x7fffffff, 0x32cf, 0x9}, {0x1, 0x6, 0x80000001, 0x3, 0x68, 0x6}, {0x5, 0xf, 0x4, 0xff, 0x9, 0xbe}, {0x8, 0x0, 0xce68, 0x40, 0x6, 0x200}, {0x2, 0xa, 0x80, 0x7, 0xff, 0x100}, {0x4, 0x6, 0x0, 0x7, 0x5, 0x7}, {0x3, 0x9, 0x2, 0x2, 0x9, 0x7}, {0x8000, 0x10001, 0x8, 0xf, 0xa1, 0x4}, {0xa, 0xa, 0x25e, 0x200, 0xcc6, 0x5}, {0x1, 0x0, 0x4, 0x67a7, 0x4e626721, 0x9}, {0x10, 0x9, 0x1, 0x2, 0xc, 0x2}, {0xd3, 0x4, 0x9, 0x6, 0x7, 0x4}, {0x2, 0xffffffff, 0x6, 0x7f, 0x4, 0x1}, {0x0, 0x2, 0x0, 0xffffffff, 0xfffffffa, 0x6}, {0x1ff, 0x1, 0x4, 0x2, 0x7, 0xaec6}, {0x2, 0x7, 0x200, 0x100, 0x7fff, 0xfffffff9}, {0x4, 0x7, 0x8, 0x0, 0xc96, 0x100}, {0x1, 0x1, 0x1, 0x3, 0x5, 0x897}, {0x1, 0x1, 0x21, 0x7, 0x4, 0x6}, {0x6, 0x3, 0x10000, 0x7, 0x4, 0x400}, {0x920, 0x5, 0x5, 0x2, 0x12e24000, 0xffffffff}, {0x3, 0x1, 0x5, 0x7f, 0x6, 0xfffffff7}, {0x2, 0x8, 0x2, 0x12, 0x7fffffff, 0x8}, {0x5, 0x7, 0x6, 0x2, 0x5, 0x7}, {0xef, 0x4, 0x3, 0xfffffffb, 0x8, 0x6}, {0x79, 0x0, 0x9, 0xc95, 0x6, 0x2}, {0x1, 0xc30b, 0x3, 0x8, 0x6, 0xfff}, {0xa296, 0x53, 0xb977, 0x1, 0x4e, 0x7}, {0xff, 0xe50, 0x1e, 0x4, 0x0, 0x1144898f}, {0x3, 0x5, 0xfffffffe, 0x6, 0x9e, 0x7}, {0x2, 0x4e00ad80, 0x47d1, 0xfff, 0x7, 0xfff}, {0x96, 0x40, 0x2, 0x7, 0x6, 0xa3}, {0x0, 0x7, 0x4, 0x4, 0x1, 0x3}, {0xbb64, 0x3, 0xfffff60b, 0xd, 0xa, 0xfffffff9}, {0x101, 0x0, 0x10001, 0x73, 0x3, 0x7bac5936}, {0x7f, 0x9, 0x8, 0x7fffffff, 0x40, 0x4}, {0x9, 0x6, 0x1, 0x5, 0xd21, 0x100}, {0x6, 0x9, 0x8, 0x2, 0x10c2, 0x8}, {0xfffffff9, 0x1, 0x9, 0x16, 0x5, 0x1}, {0xfffffffc, 0x4, 0x4b, 0xb9, 0x1eb6, 0x1}, {0xffffffff, 0x9, 0xc8, 0x80000000, 0xa, 0x5}, {0x8, 0x9, 0x101, 0x101, 0x10}, {0x80000001, 0x73b, 0xb8, 0x5, 0x0, 0xffffff2c}, {0x7, 0xf, 0x8000, 0x7f, 0x1, 0x1}, {0xffffffff, 0x6, 0x4cc, 0x7, 0x400, 0x7fffffff}, {0x10000, 0x0, 0x7, 0x3, 0x1, 0x1c0000}, {0x0, 0xfffffffa, 0x5, 0xfffffff4, 0x0, 0x80}, {0x7, 0x2, 0x80000000, 0x34, 0x7, 0x6}, {0x1, 0x2, 0x8, 0x70c, 0x5, 0x9}, {0x3, 0x8, 0x30000000, 0x3, 0xfff, 0xf}, {0x292, 0x4, 0x1ff, 0x200, 0x1, 0x2}, {0xfffffffa, 0x6, 0x2, 0x8, 0x8000000, 0x7f}, {0x0, 0x2, 0x3, 0x0, 0xff, 0x5a47}, {0x0, 0x2, 0xb271, 0x80000001, 0x1, 0x9}, {0x1a2, 0x8, 0xd7ff, 0x1, 0x5, 0x10001}, {0x7, 0x3, 0x1, 0xa92e, 0xe, 0xf}, {0x9, 0x0, 0x6, 0xffff, 0x3, 0x9}, {0x8001, 0x2, 0x7, 0xffff, 0x9, 0x3}, {0x4, 0x25a5ec6d, 0x3, 0x4, 0xff, 0x9}, {0x7, 0x0, 0x7, 0x3, 0xf, 0x6}, {0x1, 0x80000000, 0x80, 0x3, 0x4, 0x1000}, {0x4, 0x8000, 0x7, 0x0, 0x8, 0x8}, {0xffff344b, 0x178c4fd6, 0x0, 0x3, 0xd, 0x4}, {0xfffffffb, 0x3, 0x0, 0x4, 0x6, 0x52}, {0xffff, 0x44, 0x6, 0x7, 0x1, 0xc93a}, {0x48a10cde, 0x6, 0xdb47, 0x5, 0x7, 0x7}, {0x13b00, 0x761, 0x1, 0x8, 0x5, 0x8}, {0x5e, 0xd, 0x101, 0xe4, 0x3ff, 0x1}, {0x5, 0x2, 0x0, 0x2000, 0x7ff}, {0x4, 0xfffffffd, 0x6, 0xcb1b, 0x9, 0x6}, {0x9, 0x4, 0x67, 0x3, 0xfffffffa, 0xfffffff9}, {0x1000, 0x400, 0x0, 0x7, 0x3, 0x1000}, {0x5, 0x7, 0xfff, 0x4, 0x9, 0x1}, {0x9, 0x8, 0x8, 0xffffa305, 0x2, 0x3}, {0x9, 0xb, 0x4, 0x12, 0x800, 0x7}, {0x1, 0x89, 0x2, 0x1, 0x9, 0x68f}, {0x3, 0x7, 0x80, 0x1, 0x3, 0x400}, {0xf111, 0x8000, 0x6, 0x1, 0x2, 0x401}, {0x4, 0x6, 0x1, 0xa7, 0x10, 0x5}, {0x5, 0x8, 0x7, 0x0, 0x2, 0x7}, {0x1, 0x2, 0xe, 0x2, 0xfffffb79, 0x8332}, {0x9, 0xb94, 0xd, 0x5, 0x8, 0x1}, {0x8, 0xd, 0xd2a, 0xfffffff9, 0x6, 0x3f5c}, {0x5, 0x2f, 0x2, 0x7, 0xdd86, 0x1}, {0x9, 0x6, 0x5, 0x5, 0x6e20, 0x6}, {0xec, 0x1, 0x101, 0x5, 0x0, 0x6}, {0x7ff, 0x8, 0x5, 0xfffffffc, 0x5, 0x1ff}, {0x9, 0x10, 0x1a9, 0x800, 0x4af4, 0x3ff}, {0x2, 0x540000, 0xd, 0x7fff, 0x7f, 0x3}, {0x9, 0x5, 0x6, 0x9, 0xc0, 0x40}, {0x544, 0x400, 0xbef8, 0x3, 0x4, 0x4}, {0x1, 0x4, 0x6, 0x6, 0x8, 0x5}, {0x3, 0x6, 0xffffff01, 0xd8, 0xfffffffc, 0xffff}, {0x1700, 0x0, 0x1, 0x1000, 0x3, 0xfffff800}, {0x749, 0x8, 0x8, 0x9, 0x36, 0x1}, {0x2, 0x1, 0x5, 0x74016747, 0xffff}, {0x0, 0x7, 0x0, 0x8d8, 0x8, 0x7fff}, {0xc25f, 0x7ff, 0x1, 0x7, 0x2, 0x5}, {0x101, 0x7, 0x1, 0x3, 0x4, 0x3}, {0xc, 0x0, 0x7, 0x9d, 0x5, 0x100}, {0x3, 0x9, 0x7fffffff, 0x5, 0x2, 0x200}], [{0x4}, {0x2, 0x1}, {0x4, 0x1}, {}, {0x2, 0x1}, {0x3, 0x1}, {0x5, 0x1}, {0x2}, {0x3, 0x1}, {0x2}, {0x1}, {0x5}, {0x5}, {0x3, 0x1}, {0x3, 0x1}, {0x2}, {0x2}, {0x3}, {0x2, 0x1}, {}, {}, {0x2}, {0x3}, {0x5, 0x1}, {0x1}, {0x5, 0x1}, {0x5, 0x1}, {0x2}, {0x0, 0x1}, {0x0, 0x1}, {0x5, 0x1}, {0x4}, {0x2}, {0x0, 0x1}, {0x2}, {0x2, 0x1}, {0x5, 0x1}, {0x0, 0x1}, {0x2}, {0x1}, {0x1, 0x1}, {0x1, 0x1}, {0x7}, {0x5, 0x1}, {0x3}, {0x5}, {0x1}, {}, {0x1}, {0x1, 0x1}, {0x2}, {0x4, 0x1}, {0x4}, {0x1}, {0x2}, {0x1, 0x1}, {0x5}, {0x5}, {0x4}, {0x3, 0x1}, {0x2, 0x1}, {0x0, 0x1}, {0x0, 0x1}, {0x2, 0x1}, {0x3, 0x1}, {0x3, 0x1}, {}, {0x2, 0x1}, {0x3}, {0x2}, {0x0, 0x1}, {0x1}, {0x1, 0x1}, {0x3, 0x1}, {0x5, 0x1}, {0x1, 0x1}, {0x2, 0x1}, {0x3}, {}, {0x5}, {0x1, 0x1}, {0x3, 0x1}, {0x4, 0x1}, {0x5}, {0x1, 0x1}, {0x3, 0x1}, {0x1, 0x1}, {0x2, 0x1}, {0x3}, {0x4, 0x1}, {0x4}, {0x0, 0x1}, {0x2}, {0x4}, {0x3, 0x1}, {0x1}, {0x5, 0x1}, {0x2, 0x1}, {0x2}, {0x4}, {0x4}, {0x4, 0x1}, {0x0, 0x1}, {0x0, 0x1}, {0x2}, {0x1}, {0x4}, {}, {0x4}, {0x5, 0x1}, {0x1}, {0x5}, {0x5}, {0x1, 0x1}, {0x0, 0x2}, {0x2}, {0x5}, {0x4, 0x1}, {0x4, 0x1}, {0x3, 0x1}, {0x3, 0x1}, {0x2}, {0x5}, {0x4, 0x1}, {0x3, 0x1}, {0x5}, {0x5, 0x1}, {0x1}]}}, @TCA_PEDIT_PARMS_EX={0xe38, 0x4, {{{0x10001, 0x3, 0x7, 0x5, 0x6}, 0xdb, 0xb, [{0x8, 0x9, 0x5, 0x1, 0x1ef, 0x8}]}, [{0xfff, 0x578, 0x0, 0x1, 0x1e566a40, 0x53}, {0x1, 0x40, 0x6, 0xffffff79, 0xb0000000, 0x9b}, {0x80000001, 0x7ff, 0x0, 0x7, 0x9, 0x1}, {0x7fff, 0x1, 0x9, 0x9, 0x5, 0x1da}, {0x3, 0xc, 0x7fffffff, 0x7, 0x1, 0x4}, {0x0, 0x5, 0x7, 0x81, 0x4, 0x3}, {0x47, 0x5, 0x10, 0x0, 0x6, 0x25380432}, {0x4, 0x5, 0xc7, 0x2, 0x7, 0x6}, {0x0, 0x0, 0x1, 0x0, 0x5, 0x7}, {0x4, 0xfff, 0x81, 0x0, 0x429}, {0x7, 0x40, 0x2, 0x8000, 0x6, 0x7}, {0xffffffff, 0x34f7, 0x10001, 0xfffffff9, 0x80, 0x8001}, {0x9, 0xffff0000, 0x58, 0x8, 0x9, 0x9}, {0x0, 0x80000000, 0x4, 0x3, 0x1000000, 0x6}, {0xb5, 0x1, 0x6, 0x4, 0x400, 0x2f69}, {0x3, 0x8000, 0x3, 0x9, 0x8, 0x5b7f0000}, {0x1, 0x4, 0x7ff, 0x3, 0x3, 0x8000}, {0x8, 0x8000, 0xc0000, 0x2, 0x5, 0x7fffffff}, {0x6, 0xffffffff, 0x401, 0x0, 0x4, 0xffff}, {0x1ff, 0xbca, 0x0, 0x83, 0xa, 0x2}, {0x3, 0x52, 0xb, 0x40, 0x1, 0x6}, {0x100, 0x1, 0x40, 0x1, 0xa16d724, 0xffffffff}, {0x81, 0x6279, 0x5, 0xe6, 0xa, 0x7fff}, {0x6, 0x1ff, 0x80000000, 0x4, 0x6}, {0x3, 0x101, 0x2, 0x5, 0x0, 0xba}, {0x5a, 0x6, 0xc3d, 0x7, 0x101, 0x5}, {0x7, 0x9, 0x9, 0x9, 0xa, 0x5115a14}, {0x7, 0x10, 0x0, 0x41, 0x9}, {0xd, 0x8e50, 0x57, 0xffffff69, 0x0, 0x1}, {0x32c, 0x6, 0x8, 0x80000001, 0xa9, 0xa}, {0x3, 0x10, 0x95, 0x4, 0x8, 0x7}, {0x1, 0x5, 0x3, 0x8959, 0x5, 0x6}, {0x0, 0x4, 0xa, 0x7f, 0x9, 0x2}, {0xe, 0x81, 0x121e, 0x7fffffff, 0xb372, 0xfffffff8}, {0x0, 0x4, 0x200, 0x1, 0x3}, {0x7ff, 0x5cb2, 0x3, 0x0, 0x10001, 0xfd1}, {0x80000000, 0xfff, 0x401, 0x4, 0x0, 0x3}, {0x3, 0x80000001, 0xffff0001, 0x3, 0x7fff, 0xe}, {0x4, 0xf, 0x5, 0x2f4d19, 0x2}, {0x8000, 0xffffff00, 0x6, 0x5, 0x3, 0x101}, {0x2364e0ad, 0x6, 0x1, 0x6, 0x22}, {0x1, 0x7fffffff, 0x2, 0xfffffc01, 0x0, 0x7a9}, {0xf0f6, 0x7ca, 0x6, 0xc, 0xbdf, 0x3d}, {0x2, 0xfffffffd, 0x0, 0x4, 0x2, 0x726}, {0x9, 0xc, 0x7fffffff, 0xf, 0x6, 0x4}, {0x1000, 0x8, 0x323, 0x7, 0xffffffff, 0xfffffff8}, {0x7fff, 0xbc9, 0x2, 0x1ff, 0x0, 0x4}, {0x401, 0xf, 0xfffffffe, 0xffffffff, 0x4}, {0x6, 0xfffffe01, 0x4, 0x9, 0xffff, 0x3}, {0x5, 0x4, 0x7, 0x655, 0xffffff61, 0x9}, {0x7, 0xf, 0x14000000, 0x0, 0x2, 0x8}, {0xf03, 0x9, 0x1000, 0x200, 0x1435ba92, 0x6}, {0x80, 0x4, 0x3, 0x1, 0x5, 0x6}, {0xfffffffb, 0x480000, 0x6, 0x0, 0x401, 0xc3}, {0x0, 0x0, 0xffffffff, 0x9, 0x64e097e0, 0x200}, {0x7, 0x3, 0x0, 0x2, 0x5, 0xfffffff9}, {0x4d03, 0xfffffe00, 0x3ff, 0x6, 0x6, 0x6}, {0xb, 0x8, 0x9d8f, 0x4, 0x8000, 0x9}, {0x3, 0x4, 0x1, 0x5, 0x9119}, {0x1, 0x100, 0x80, 0xffffffff, 0x9, 0xfffffff5}, {0x2613cc2b, 0x6, 0xfff, 0x7fffffff, 0x6, 0x265}, {0x81f1, 0x3, 0x9, 0x1, 0x41, 0x17}, {0x74e, 0x3, 0x4, 0x2, 0xfffffffc, 0x3}, {0x1e, 0x1000, 0x8, 0x256d9965, 0x4, 0x5}, {0x800, 0x7421a8f3, 0xac, 0x6, 0x80000001, 0x8}, {0x3, 0xffff0000, 0x6, 0xb3, 0xfffffff7}, {0x200, 0x9, 0x6, 0x9, 0x80000000, 0xfffff800}, {0x80000001, 0xd, 0x7, 0x8, 0xfb, 0x8}, {0x80, 0xf, 0x9a8, 0x2, 0x5, 0x2}, {0x5, 0xffffffff, 0x2, 0x8, 0x4, 0x6}, {0x30, 0xa6, 0x3, 0xb, 0x1000, 0x9}, {0x7fffffff, 0xffffffff, 0x89e4, 0xbf, 0x5, 0xfffff29e}, {0x2, 0xc, 0x6, 0x40, 0xfffffff1, 0x3}, {0xffff0000, 0xa9f6, 0x8000, 0x9, 0x8}, {0x1, 0xfffffff3, 0x0, 0x3, 0x6, 0x4}, {0x5, 0x4b, 0x8, 0x0, 0x6, 0x9}, {0x10001, 0x9, 0x5, 0x2, 0x3, 0x4}, {0xfffffffe, 0x0, 0x38, 0xffff8001, 0x5, 0x8}, {0xb5, 0xffff, 0xd, 0x9, 0x7b3, 0xfffffff1}, {0x2, 0x10001, 0x3, 0x2, 0x7, 0x2}, {0x1, 0x1, 0x3a, 0x1, 0xffff6eb6, 0x8}, {0x4, 0x5, 0x18f7, 0x0, 0x6, 0x6}, {0x7, 0x6, 0xbb000, 0x3, 0x81, 0x9}, {0x9, 0x800, 0x6118, 0x7f, 0x800}, {0xfffffff9, 0x4, 0x10000, 0xd, 0x40, 0xd8}, {0xe3ca, 0x6, 0x7, 0x10001, 0x8, 0x1}, {0x1, 0x10001, 0x0, 0x9, 0x598, 0xf}, {0x3, 0x6, 0x8001, 0x400, 0x2, 0x1}, {0x8001, 0x20000000, 0xffffff81, 0x7, 0x7}, {0xfffffffc, 0x9, 0x3, 0x2, 0x9, 0xe87f}, {0x3b34, 0x7fffffff, 0x9, 0x40, 0xf975, 0x40}, {0x3, 0x2, 0x4, 0x1ff, 0x0, 0xb02f}, {0x432e, 0x200, 0x3, 0xbb1, 0x800}, {0x3, 0x0, 0xa452, 0x1ff, 0x80, 0x6}, {0x8, 0x3, 0x8, 0x5, 0x4, 0x8d6f}, {0x8, 0x0, 0x81, 0xffffdc49, 0xfffffffc, 0xffff}, {0x6, 0x10000, 0xf811, 0x6, 0x401, 0x1}, {0x5, 0x0, 0x3, 0xec, 0x9, 0x5}, {0x6, 0x6, 0x3, 0x1ff, 0x3, 0x84b4}, {0x5, 0x10000, 0x4, 0x5, 0x0, 0x1}, {0x2, 0x5, 0x2, 0x5b40, 0xfffffeff, 0x55a}, {0x1ff, 0x2f1, 0x86, 0x2, 0x1, 0x200}, {0x5, 0x2, 0x40, 0x1, 0x2, 0x6}, {0x6, 0xfffffffa, 0x5, 0x1, 0xe, 0x6}, {0x0, 0x6cb207cd, 0xfffffff9, 0x200, 0x101, 0x9}, {0x87, 0x45, 0x8, 0xffffff7f, 0x6, 0x80}, {0x0, 0x401, 0x1, 0x965, 0x5, 0x7}, {0x8, 0x3, 0xfff, 0x80000001, 0x3ff, 0x1}, {0x9, 0x80, 0x7, 0x6, 0x9, 0x100}, {0x1, 0x8001, 0x1, 0xe, 0x4, 0x4}, {0x9, 0xa527, 0x10001, 0x41}, {0x7ff, 0x7f, 0xd44e, 0x7, 0x8001, 0x40}, {0x9, 0x401, 0x8, 0x30, 0x9, 0x6}, {0x2, 0x8, 0x2, 0x10001, 0xf91a2889, 0x7}, {0xc0bd, 0x30, 0x7db, 0x401, 0x73, 0xfffff367}, {0x7, 0xb69, 0x800, 0x980, 0x3, 0x1}, {0x4, 0xb4f, 0x9d, 0x6, 0xa, 0x7}, {0xd587, 0x587, 0x1, 0xeaa6, 0x7, 0x3ff}, {0x6, 0x5850, 0x2, 0xc75, 0x6, 0x9}, {0x0, 0x5, 0x3, 0x2, 0x1, 0x4}, {0x9, 0x6, 0x7f, 0x9, 0x3, 0x10001}, {0x2, 0x6, 0x3, 0x7fffffff, 0x8, 0xb}, {0x1, 0x5, 0x404, 0x9, 0x7, 0x7fffffff}, {0xc, 0xc, 0x5, 0x7fffffff, 0x6, 0x8}, {0x1, 0x0, 0x1, 0x9, 0x6, 0x2}, {0x9, 0x800, 0x0, 0x8000, 0x6, 0x103}, {0x6, 0x0, 0x8, 0x7, 0xffff, 0x2044}, {0x1, 0x4, 0x51, 0x1ec, 0x5, 0x3000}], [{0x5}, {0x0, 0x1}, {0x2, 0x2}, {0x2}, {0x0, 0x1}, {0x4, 0x1}, {0x4}, {0x5}, {}, {0x3}, {0x4}, {0x1, 0x1}, {0x5, 0x1}, {0x3, 0x1}, {0x5, 0x1}, {}, {}, {}, {0x5, 0x1}, {0x3, 0x1}, {0x4, 0x1}, {0x3, 0xc5287081a5d1bc98}, {0x6}, {0x1, 0x1}, {0x1}, {0x5, 0x1}, {0x5}, {0x1, 0x1}, {0x5}, {0x0, 0x1}, {0x9657ad8b69cfffdb}, {0x0, 0x1}, {0x4}, {0x5}, {}, {}, {0x0, 0x1}, {0x2}, {0x0, 0x1}, {0x3}, {0x4}, {0x5, 0x1}, {0x5}, {0x1, 0x1}, {0x3, 0x1}, {0x1}, {0x0, 0x1}, {}, {0x0, 0x1}, {0x3, 0x1}, {0x4, 0x1}, {0x4}, {}, {0x5, 0x1}, {0x3}, {0x665bc8d483e53f89}, {0x2}, {0x3, 0x1}, {0x5, 0x1}, {0x5}, {0x4, 0x1}, {0x1}, {}, {0x1, 0x1}, {0x2, 0x1}, {0x1, 0x1}, {0x3, 0x1}, {0x0, 0x1}, {0x0, 0x1}, {0x1, 0x1}, {}, {0x4}, {0x3}, {0x1}, {}, {0x5}, {0x1}, {0x5}, {0x2, 0x1}, {0x3, 0x1}, {0x1}, {0x0, 0x1}, {}, {0x2, 0x1}, {}, {0x0, 0x1}, {0x0, 0x1}, {0x5}, {0x0, 0x1}, {0x4, 0x1}, {0x3, 0x1}, {0x1}, {0x1}, {0xc8b3f91e16de1f94}, {0x2, 0x1}, {0x2}, {0x1}, {0x2, 0x1cdb6a2ed7cdd91e}, {0x0, 0x1}, {0x1, 0x1}, {0x5}, {0x0, 0x1}, {0x6ecce1a447d01efd}, {0x4}, {0x3}, {0x0, 0x1}, {0x3}, {0x5, 0x1}, {0x4, 0x1}, {0x5, 0x1}, {}, {0x2}, {0x1}, {0x3}, {0x4, 0x1}, {0x1}, {0x4}, {0x1}, {0x2, 0x1}, {0x2}, {0x2}, {0x1}, {}, {}, {0x0, 0x1}, {}, {0x5}, {0x0, 0x1}]}}]}, {0xb0, 0x6, "804249ec2be3d3cac2c0d3aa987bea0e20e07bc3abea1f5f8f2f4c219a3f39c8ab1cf19e8a06020a59d6692b4a7a2d7e7e7a41b0836765f5b693a7a16734ee514fb636733c28daba175d859d4b492f94698ffcee48d88efad37939204f3e1dac4b9747120409f17ea12c3abe089d4eaf647ee79534a9111bbd92783fb38d4910c28a94227815102f71f92b35e24376a2d565ce012ce5dbb82a185513e71673c61c8604c32106a56c2b285976"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2}}}}]}]}}]}, 0x2c38}, 0x1, 0x0, 0x0, 0x84}, 0x800) 5.976761996s ago: executing program 3 (id=9): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x6, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0xa) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000032680)=""/102400, 0x19000) r1 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) connect$bt_rfcomm(r1, &(0x7f00000004c0)={0x1f, @none, 0x4}, 0xa) syz_open_dev$video(&(0x7f0000000080), 0xfffffffffffffff8, 0x408000) socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'bond0\x00', 0x0}) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000800)=@newsa={0x148, 0x10, 0x713, 0x0, 0x0, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in=@initdev={0xac, 0x1e, 0x0, 0x0}}, {@in6=@local, 0x0, 0x33}, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', {}, {}, {}, 0x0, 0x3502, 0x2}, [@offload={0xc, 0x1c, {r3}}, @algo_auth_trunc={0x4c, 0x14, {{'sha1\x00'}}}]}, 0x148}}, 0x0) 4.765213044s ago: executing program 0 (id=10): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$inet_udp(0x2, 0x2, 0x0) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, 0x0, 0x0) sendmsg$nl_xfrm(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000840)=ANY=[@ANYBLOB="fc0000001900010000000000fcdbdf2500000000000000000000000000000000fe8000000002000000000000000000bb00000000000000000200000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000004000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000001000000000000004400050000000000000000000000000000000000000000022b0000000a000000fe8000000000000000000000000000aa0000000004"], 0xfc}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) bind$inet(r3, &(0x7f0000000100)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xb}}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, 0x0, 0x0) setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x11a, 0x2, 0x0, 0x0) setsockopt$sock_int(r3, 0x1, 0x6, &(0x7f0000000000)=0x4, 0x4) connect$inet(r3, &(0x7f0000000280)={0x2, 0x0, @broadcast}, 0x10) sendmmsg$inet(r3, &(0x7f0000004d00)=[{{0x0, 0x6000, 0x0, 0x0, 0x0, 0x0, 0x30000}}], 0x300, 0xf00) 4.672582451s ago: executing program 3 (id=11): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000640)=@newqdisc={0x24, 0x24, 0x800, 0x70bd25, 0xffffffff, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff1}, {0xffff, 0x5}, {0xffff, 0xf}}}, 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x0) creat(&(0x7f00000002c0)='./file0\x00', 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], 0x0, 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0xa4242, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000007, 0x38011, r0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wlan0\x00'}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = openat$userio(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0) write$USERIO_CMD_SET_PORT_TYPE(r2, &(0x7f0000000040)={0x1, 0x6}, 0x2) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) r3 = syz_open_procfs$pagemap(0x0, &(0x7f0000000240)) ioctl$PAGEMAP_SCAN(r3, 0xc0606610, &(0x7f00000004c0)={0x60, 0x0, &(0x7f000023d000/0x4000)=nil, &(0x7f0000769000/0x3000)=nil, 0x0, 0x0, 0x0, 0x3c3, 0x0, 0x0, 0x42, 0x2e}) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={0x0, r4}, 0x18) open(&(0x7f0000000300)='.\x00', 0x0, 0x0) 3.683702422s ago: executing program 0 (id=12): syz_clone(0x2211000, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)="d8b07da8a079e98f7663074742d57c") sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r0 = add_key$user(&(0x7f00000002c0), &(0x7f0000000300)={'syz', 0x0}, &(0x7f0000000280)="d25a9850a9d7", 0x6, 0xfffffffffffffffe) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) r1 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000140)={r0, r1, r0}, &(0x7f00000000c0)=""/83, 0xfffffffffffffe4f, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x20042, 0x0) add_key$user(&(0x7f0000000080), 0x0, 0x0, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = dup(r3) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r3, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) 3.437273716s ago: executing program 2 (id=3): r0 = socket(0x10, 0x803, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000340), 0x302, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000640)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xffff, 0xf}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x4, 0x6}}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x40000}, 0x0) sendmsg$nl_route_sched(r0, 0x0, 0x40) 2.928500387s ago: executing program 1 (id=2): socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0xfc5cd7921c2c19c4, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) setpgid(0x0, 0x0) 2.640690382s ago: executing program 3 (id=13): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0xfff, 0x6}, 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) 2.025058143s ago: executing program 2 (id=14): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0xffffd000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) socket(0x200000100000011, 0x3, 0x3) r4 = syz_open_dev$evdev(0x0, 0x0, 0x121041) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) writev(r5, 0x0, 0x0) write$evdev(r4, &(0x7f0000000040), 0x373) lseek(0xffffffffffffffff, 0xfffffffffffffff5, 0x1) fsconfig$FSCONFIG_SET_STRING(r3, 0x1, &(0x7f0000000b40)='source', &(0x7f0000000040)='c:::\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) r6 = syz_open_dev$sndctrl(0x0, 0x1, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r6, 0xc4c85512, 0x0) r7 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) connect$bt_rfcomm(r7, &(0x7f0000000100)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x2}, 0xa) syz_open_procfs$namespace(0x0, 0x0) 2.02474274s ago: executing program 3 (id=15): syz_open_dev$dri(&(0x7f0000000140), 0x1, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket$phonet_pipe(0x23, 0x5, 0x2) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) epoll_create1(0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x2, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f0000000240)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) connect$bt_l2cap(r0, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) r1 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) ioctl$sock_bt_hidp_HIDPCONNADD(r1, 0x400448c8, &(0x7f0000000340)={r0, r0, 0x8, 0x0, 0x0, 0x82, 0x4a, 0x15c2, 0x5886, 0x801, 0x0, 0x8, 'syz1\x00'}) ioctl$sock_bt_hidp_HIDPCONNDEL(r1, 0x400448c9, &(0x7f0000000040)={@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x1}) 1.954700939s ago: executing program 0 (id=16): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_4ADDR={0x5, 0x53, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000014}, 0x0) 1.892733781s ago: executing program 1 (id=17): syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) bpf$PROG_LOAD(0x5, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x7, 0x8}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = socket(0x2b, 0x1, 0x0) r2 = syz_io_uring_setup(0x110, &(0x7f0000001280)={0x0, 0xfad6, 0x400}, &(0x7f0000000240)=0x0, &(0x7f0000000100)=0x0) syz_open_dev$usbfs(&(0x7f0000000180), 0x200, 0x882) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0x1, 0x0, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000002700)={0x2020}, 0x2020) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x42002) syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r1}) io_uring_enter(r2, 0xdb4, 0x0, 0x0, 0x0, 0x0) io_uring_register$IORING_REGISTER_SYNC_CANCEL(r2, 0x18, &(0x7f0000000000)={0xfeffffff, r1, 0x23, {0x3b4, 0x6d3}, 0x6}, 0x1) 1.584297632s ago: executing program 4 (id=5): prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) munlockall() sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) connect$nfc_llcp(r1, &(0x7f0000000200)={0x27, 0x0, 0xffffffffffffffff, 0x1, 0x0, 0xc, "a4675b2b18a8dd293727afdec135e8aa1615a606563654835d353c38ffd8951ba843c21fb368724e1205aea471943a0adf0eb9a217b9206faeb67448e31d89", 0x29}, 0x60) 585.195309ms ago: executing program 0 (id=18): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6770c000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r2, &(0x7f0000000080)={0xa, 0x4e23, 0x400, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x3b}}}, 0x1c) setsockopt$sock_linger(r2, 0x1, 0x3c, &(0x7f0000000180)={0x200000000000001}, 0x8) sendmmsg$inet6(r2, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4001c00) 287.059989ms ago: executing program 1 (id=19): r0 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r0, 0x84, 0x7c, 0x0, &(0x7f00000006c0)) 174.667589ms ago: executing program 4 (id=20): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$kcm(0x2d, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r3, 0x89e2, &(0x7f0000000100)={r3}) bind$xdp(r4, &(0x7f0000000080)={0x2d, 0x0, 0x0, 0xc}, 0x10) mkdir(0x0, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) mknodat$loop(0xffffffffffffffff, 0x0, 0x10, 0x0) close(r3) 1.08747ms ago: executing program 3 (id=21): r0 = io_uring_setup(0x6dc6, &(0x7f00000001c0)={0x0, 0xcf51, 0x400, 0x2}) bpf$MAP_CREATE(0x0, 0x0, 0x48) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r1) socket(0x2b, 0x1, 0x1) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, 0x0) openat$cgroup(0xffffffffffffffff, 0x0, 0x200002, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) gettid() listen(r1, 0x5) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r3, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) close_range(r0, 0xffffffffffffffff, 0x0) 0s ago: executing program 2 (id=22): socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000240)={0x26, 'hash\x00', 0x0, 0x0, 'michael_mic-generic\x00'}, 0x58) syz_emit_ethernet(0x112, &(0x7f0000000ac0)={@local, @link_local, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "aaa938", 0xdc, 0x11, 0xff, @remote, @empty, {[@dstopts={0x4, 0x6, '\x00', [@jumbo={0xc2, 0x4, 0x6}, @padn={0x1, 0x6, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @jumbo={0xc2, 0x4, 0x1}, @jumbo={0xc2, 0x4, 0xfffffff9}, @hao={0xc9, 0x10, @ipv4={'\x00', '\xff\xff', @empty}}, @ra={0x5, 0x2, 0x1}, @pad1]}, @hopopts={0x32, 0x2, '\x00', [@enc_lim={0x4, 0x1, 0x5}, @hao={0xc9, 0x10, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}]}, @routing={0x2c, 0xa, 0x0, 0x20, 0x0, [@mcast2, @empty, @initdev={0xfe, 0x88, '\x00', 0x2, 0x0}, @loopback, @loopback]}], {0x4e24, 0x4e23, 0x24, 0x0, @gue={{0x1, 0x1, 0x2, 0x3, 0x100, @void}, "1a8d573197df233e9958d0f14bef8274bab84698625a7f40"}}}}}}}, 0x0) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$NL80211_CMD_PEER_MEASUREMENT_START(0xffffffffffffffff, 0x0, 0x40000) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, 0x0, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_STATION(r4, &(0x7f0000001080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)={0x30, r5, 0xb97534d5fe9700cf, 0x4, 0x25dfdbff, {{0x12}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_STA_VLAN={0x8}, @NL80211_ATTR_MAC={0xa}]}, 0x30}, 0x1, 0x0, 0x0, 0x200488c1}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000740)={'wlan1\x00'}) connect$bt_l2cap(r1, &(0x7f0000000840)={0x1f, 0xfbff, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x800, 0x1}, 0xe) sendmsg$IPSET_CMD_ADD(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000880)={0x48, 0x9, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0xdb}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x10, 0x7, 0x0, 0x1, [@IPSET_ATTR_COMMENT={0x9, 0x1a, '^^.\xd7\x00'}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x10000047}, 0x0) bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000440)=@base={0x12, 0x80, 0x8, 0x2}, 0x50) r7 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r7, 0x29, 0x40, &(0x7f0000000040)=@mangle={'mangle\x00', 0x64, 0x6, 0x648, 0x0, 0x3d0, 0xd0, 0xd0, 0xd0, 0x578, 0x578, 0x578, 0x578, 0x578, 0x6, 0x0, {[{{@ipv6={@private0, @private1, [], [], 'veth1\x00', 'veth1_vlan\x00'}, 0x0, 0xa8, 0xd0, 0x0, {0x0, 0x3a010000}}, @HL={0x28}}, {{@ipv6={@private1, @loopback, [], [], 'tunl0\x00', 'bridge_slave_1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0x3d0}}, {{@ipv6={@private0, @remote, [], [], 'veth0_to_team\x00', 'tunl0\x00', {}, {}, 0x11, 0x0, 0x3, 0x44}, 0x0, 0x138, 0x160, 0x0, {}, [@common=@srh1={{0x90}, {0x0, 0x0, 0x0, 0x0, 0x0, @dev, @private1, @mcast2}}]}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@inet=@SYNPROXY={0x28}}, {{@ipv6={@loopback, @private2, [], [], 'syzkaller1\x00', 'veth0_to_batadv\x00'}, 0x0, 0x160, 0x1a8, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@srh1={{0x90}, {0x0, 0x0, 0x0, 0x0, 0x0, @dev, @private0, @local}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}, 'vlan0\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x6a8) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.178' (ED25519) to the list of known hosts. [ 73.363572][ T5823] cgroup: Unknown subsys name 'net' [ 73.479043][ T5823] cgroup: Unknown subsys name 'cpuset' [ 73.488472][ T5823] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 74.827591][ T5823] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 78.765759][ T5836] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 78.774872][ T5836] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 78.782992][ T5836] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 78.790964][ T5836] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 78.800367][ T5836] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 78.808762][ T5836] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 78.828859][ T5848] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 78.836456][ T5848] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 78.844405][ T5848] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 78.852792][ T5848] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 78.860294][ T5848] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 78.860712][ T5846] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 78.868043][ T5848] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 78.882816][ T5846] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 78.907504][ T5848] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 78.915354][ T5848] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 78.927447][ T5848] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 78.935171][ T5848] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 78.944167][ T5836] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 78.952156][ T5837] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 78.970308][ T51] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 78.978819][ T51] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 78.991266][ T51] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 78.999586][ T51] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 79.009280][ T51] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 79.622998][ T5834] chnl_net:caif_netlink_parms(): no params data found [ 79.687630][ T5841] chnl_net:caif_netlink_parms(): no params data found [ 79.785318][ T5851] chnl_net:caif_netlink_parms(): no params data found [ 79.850386][ T5833] chnl_net:caif_netlink_parms(): no params data found [ 79.864754][ T5847] chnl_net:caif_netlink_parms(): no params data found [ 79.993545][ T5834] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.001584][ T5834] bridge0: port 1(bridge_slave_0) entered disabled state [ 80.010011][ T5834] bridge_slave_0: entered allmulticast mode [ 80.018235][ T5834] bridge_slave_0: entered promiscuous mode [ 80.058434][ T5834] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.065706][ T5834] bridge0: port 2(bridge_slave_1) entered disabled state [ 80.072849][ T5834] bridge_slave_1: entered allmulticast mode [ 80.080094][ T5834] bridge_slave_1: entered promiscuous mode [ 80.124688][ T5841] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.131887][ T5841] bridge0: port 1(bridge_slave_0) entered disabled state [ 80.139645][ T5841] bridge_slave_0: entered allmulticast mode [ 80.147471][ T5841] bridge_slave_0: entered promiscuous mode [ 80.155194][ T5841] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.162812][ T5841] bridge0: port 2(bridge_slave_1) entered disabled state [ 80.170212][ T5841] bridge_slave_1: entered allmulticast mode [ 80.177514][ T5841] bridge_slave_1: entered promiscuous mode [ 80.249014][ T5834] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 80.311801][ T5834] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 80.330533][ T5851] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.339057][ T5851] bridge0: port 1(bridge_slave_0) entered disabled state [ 80.346340][ T5851] bridge_slave_0: entered allmulticast mode [ 80.353348][ T5851] bridge_slave_0: entered promiscuous mode [ 80.373497][ T5841] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 80.383058][ T5847] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.390717][ T5847] bridge0: port 1(bridge_slave_0) entered disabled state [ 80.399563][ T5847] bridge_slave_0: entered allmulticast mode [ 80.408036][ T5847] bridge_slave_0: entered promiscuous mode [ 80.431875][ T5851] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.439398][ T5851] bridge0: port 2(bridge_slave_1) entered disabled state [ 80.447090][ T5851] bridge_slave_1: entered allmulticast mode [ 80.454090][ T5851] bridge_slave_1: entered promiscuous mode [ 80.464227][ T5833] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.471428][ T5833] bridge0: port 1(bridge_slave_0) entered disabled state [ 80.479652][ T5833] bridge_slave_0: entered allmulticast mode [ 80.487031][ T5833] bridge_slave_0: entered promiscuous mode [ 80.495091][ T5833] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.502581][ T5833] bridge0: port 2(bridge_slave_1) entered disabled state [ 80.509919][ T5833] bridge_slave_1: entered allmulticast mode [ 80.518307][ T5833] bridge_slave_1: entered promiscuous mode [ 80.527065][ T5841] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 80.550640][ T5847] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.558692][ T5847] bridge0: port 2(bridge_slave_1) entered disabled state [ 80.566048][ T5847] bridge_slave_1: entered allmulticast mode [ 80.573335][ T5847] bridge_slave_1: entered promiscuous mode [ 80.583572][ T5834] team0: Port device team_slave_0 added [ 80.654611][ T5834] team0: Port device team_slave_1 added [ 80.702785][ T5841] team0: Port device team_slave_0 added [ 80.711860][ T5847] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 80.725137][ T5847] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 80.751746][ T5834] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 80.759340][ T5834] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 80.785645][ T5834] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 80.800534][ T5851] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 80.811263][ T5834] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 80.818896][ T5834] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 80.844838][ T5834] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 80.858219][ T5833] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 80.870826][ T5833] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 80.882271][ T5841] team0: Port device team_slave_1 added [ 80.904521][ T5851] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 80.966329][ T51] Bluetooth: hci1: command tx timeout [ 80.972148][ T5836] Bluetooth: hci2: command tx timeout [ 81.012141][ T5851] team0: Port device team_slave_0 added [ 81.020914][ T5851] team0: Port device team_slave_1 added [ 81.030191][ T5833] team0: Port device team_slave_0 added [ 81.046196][ T51] Bluetooth: hci0: command tx timeout [ 81.050801][ T5836] Bluetooth: hci4: command tx timeout [ 81.051727][ T5837] Bluetooth: hci3: command tx timeout [ 81.074167][ T5847] team0: Port device team_slave_0 added [ 81.083129][ T5847] team0: Port device team_slave_1 added [ 81.133216][ T5833] team0: Port device team_slave_1 added [ 81.140443][ T5841] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 81.147463][ T5841] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 81.173444][ T5841] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 81.196955][ T5851] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 81.203949][ T5851] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 81.230329][ T5851] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 81.266515][ T5841] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 81.273474][ T5841] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 81.300440][ T5841] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 81.334138][ T5851] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 81.343973][ T5851] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 81.373980][ T5851] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 81.402332][ T5834] hsr_slave_0: entered promiscuous mode [ 81.411170][ T5834] hsr_slave_1: entered promiscuous mode [ 81.431879][ T5833] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 81.439274][ T5833] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 81.466080][ T5833] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 81.479038][ T5833] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 81.486516][ T5833] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 81.512794][ T5833] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 81.524544][ T5847] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 81.532025][ T5847] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 81.558227][ T5847] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 81.601650][ T5847] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 81.609869][ T5847] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 81.637058][ T5847] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 81.684819][ T5851] hsr_slave_0: entered promiscuous mode [ 81.692349][ T5851] hsr_slave_1: entered promiscuous mode [ 81.699183][ T5851] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 81.709743][ T5851] Cannot create hsr debugfs directory [ 81.769401][ T5841] hsr_slave_0: entered promiscuous mode [ 81.777003][ T5841] hsr_slave_1: entered promiscuous mode [ 81.783346][ T5841] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 81.795568][ T5841] Cannot create hsr debugfs directory [ 81.949911][ T5847] hsr_slave_0: entered promiscuous mode [ 81.959069][ T5847] hsr_slave_1: entered promiscuous mode [ 81.965390][ T5847] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 81.975835][ T5847] Cannot create hsr debugfs directory [ 82.033180][ T5833] hsr_slave_0: entered promiscuous mode [ 82.039464][ T5833] hsr_slave_1: entered promiscuous mode [ 82.045467][ T5833] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 82.053871][ T5833] Cannot create hsr debugfs directory [ 82.588016][ T5841] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 82.600353][ T5841] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 82.610621][ T5841] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 82.631761][ T5841] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 82.699824][ T5851] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 82.710906][ T5851] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 82.729402][ T5851] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 82.740897][ T5851] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 82.834452][ T5834] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 82.847100][ T5834] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 82.862052][ T5834] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 82.890722][ T5834] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 83.011931][ T5847] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 83.025062][ T5847] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 83.037123][ T5847] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 83.046567][ T5837] Bluetooth: hci2: command tx timeout [ 83.052017][ T5837] Bluetooth: hci1: command tx timeout [ 83.077530][ T5841] 8021q: adding VLAN 0 to HW filter on device bond0 [ 83.089439][ T5847] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 83.129736][ T51] Bluetooth: hci0: command tx timeout [ 83.131187][ T5837] Bluetooth: hci3: command tx timeout [ 83.135160][ T5836] Bluetooth: hci4: command tx timeout [ 83.184792][ T5833] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 83.209977][ T5841] 8021q: adding VLAN 0 to HW filter on device team0 [ 83.219618][ T5833] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 83.236543][ T5833] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 83.258192][ T5833] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 83.282288][ T64] bridge0: port 1(bridge_slave_0) entered blocking state [ 83.289586][ T64] bridge0: port 1(bridge_slave_0) entered forwarding state [ 83.341600][ T5851] 8021q: adding VLAN 0 to HW filter on device bond0 [ 83.372000][ T3465] bridge0: port 2(bridge_slave_1) entered blocking state [ 83.379156][ T3465] bridge0: port 2(bridge_slave_1) entered forwarding state [ 83.432851][ T5851] 8021q: adding VLAN 0 to HW filter on device team0 [ 83.454334][ T5834] 8021q: adding VLAN 0 to HW filter on device bond0 [ 83.477126][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 83.484289][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 83.529164][ T5834] 8021q: adding VLAN 0 to HW filter on device team0 [ 83.551397][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 83.558532][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 83.593900][ T64] bridge0: port 1(bridge_slave_0) entered blocking state [ 83.601181][ T64] bridge0: port 1(bridge_slave_0) entered forwarding state [ 83.621051][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 83.628253][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 83.673517][ T5847] 8021q: adding VLAN 0 to HW filter on device bond0 [ 83.751794][ T5833] 8021q: adding VLAN 0 to HW filter on device bond0 [ 83.790706][ T5847] 8021q: adding VLAN 0 to HW filter on device team0 [ 83.859442][ T3465] bridge0: port 1(bridge_slave_0) entered blocking state [ 83.866932][ T3465] bridge0: port 1(bridge_slave_0) entered forwarding state [ 83.914426][ T3532] bridge0: port 2(bridge_slave_1) entered blocking state [ 83.921636][ T3532] bridge0: port 2(bridge_slave_1) entered forwarding state [ 83.968974][ T5833] 8021q: adding VLAN 0 to HW filter on device team0 [ 84.035501][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 84.042724][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 84.074859][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 84.082068][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 84.112477][ T5841] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 84.348779][ T5834] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 84.368491][ T5841] veth0_vlan: entered promiscuous mode [ 84.416795][ T5841] veth1_vlan: entered promiscuous mode [ 84.556924][ T5841] veth0_macvtap: entered promiscuous mode [ 84.644375][ T5841] veth1_macvtap: entered promiscuous mode [ 84.674904][ T5851] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 84.687354][ T5834] veth0_vlan: entered promiscuous mode [ 84.735027][ T5847] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 84.754217][ T5841] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 84.764508][ T5834] veth1_vlan: entered promiscuous mode [ 84.790850][ T5841] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 84.812895][ T5833] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 84.827372][ T5841] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.838512][ T5841] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.848184][ T5841] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.857401][ T5841] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.004761][ T5847] veth0_vlan: entered promiscuous mode [ 85.025137][ T5834] veth0_macvtap: entered promiscuous mode [ 85.060710][ T5833] veth0_vlan: entered promiscuous mode [ 85.074490][ T5834] veth1_macvtap: entered promiscuous mode [ 85.113441][ T5847] veth1_vlan: entered promiscuous mode [ 85.128045][ T5836] Bluetooth: hci1: command tx timeout [ 85.133847][ T5836] Bluetooth: hci2: command tx timeout [ 85.163358][ T3532] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 85.178173][ T3532] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 85.207109][ T51] Bluetooth: hci4: command tx timeout [ 85.208685][ T5837] Bluetooth: hci0: command tx timeout [ 85.212589][ T5836] Bluetooth: hci3: command tx timeout [ 85.229183][ T5834] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 85.238916][ T5833] veth1_vlan: entered promiscuous mode [ 85.276567][ T5834] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 85.289753][ T5834] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.298862][ T5834] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.308062][ T5834] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.316913][ T5834] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.341646][ T64] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 85.344319][ T5847] veth0_macvtap: entered promiscuous mode [ 85.355423][ T64] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 85.370682][ T5847] veth1_macvtap: entered promiscuous mode [ 85.467544][ T5841] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 85.472116][ T5851] veth0_vlan: entered promiscuous mode [ 85.507298][ T5833] veth0_macvtap: entered promiscuous mode [ 85.531049][ T5851] veth1_vlan: entered promiscuous mode [ 85.558312][ T5847] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 85.579453][ T5833] veth1_macvtap: entered promiscuous mode [ 85.637100][ T5847] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 85.745401][ T5833] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 85.764888][ T5847] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.781370][ T5847] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.790727][ T5847] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.807467][ T5847] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.852531][ T5833] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 86.058855][ T5957] vxfs: WRONG superblock magic 00000000 at 1 [ 86.067233][ T5957] vxfs: WRONG superblock magic 00000000 at 8 [ 86.073293][ T5957] vxfs: can't find superblock. [ 86.403318][ T5851] veth0_macvtap: entered promiscuous mode [ 86.430705][ T5833] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.440190][ T5833] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.449799][ T5833] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.477526][ T5833] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.495406][ T994] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 86.520514][ T994] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 86.578434][ T5851] veth1_macvtap: entered promiscuous mode [ 86.621465][ T3427] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 86.631734][ T5851] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 86.644331][ T3427] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 86.700169][ T5851] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 86.734743][ T979] cfg80211: failed to load regulatory.db [ 86.760997][ T5851] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.790434][ T5851] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.803247][ T5851] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.816382][ T5851] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.206151][ T5836] Bluetooth: hci2: command tx timeout [ 87.211856][ T5836] Bluetooth: hci1: command tx timeout [ 87.286323][ T51] Bluetooth: hci4: command tx timeout [ 87.291981][ T5836] Bluetooth: hci3: command tx timeout [ 87.297946][ T5837] Bluetooth: hci0: command tx timeout [ 87.329114][ T49] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 87.337099][ T49] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 87.534559][ T49] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 87.560109][ T49] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 87.679128][ T49] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 87.700477][ T49] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 88.516083][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 88.575801][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 88.725884][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 89.954639][ T3427] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.135412][ T3427] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.146205][ T0] NOHZ tick-stop error: local softirq work is pending, handler #42!!! [ 90.405669][ T5837] Bluetooth: hci4: command 0x0405 tx timeout [ 90.475480][ T5986] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 90.503028][ T3532] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.542233][ T3532] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.645956][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 90.674918][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 90.912458][ T994] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.921281][ T994] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.692605][ T6001] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input5 [ 92.216037][ T5910] libceph: connect (1)[c::]:6789 error -101 [ 92.486475][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 92.500715][ T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!! [ 92.581419][ T5910] libceph: mon0 (1)[c::]:6789 connect error [ 92.976850][ T6014] ceph: No mds server is up or the cluster is laggy [ 93.012632][ T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!! [ 93.022034][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 93.681366][ T6031] [ 93.683750][ T6031] ====================================================== [ 93.690775][ T6031] WARNING: possible circular locking dependency detected [ 93.697821][ T6031] 6.16.0-rc6-syzkaller-00205-gd786aba32000 #0 Not tainted [ 93.704937][ T6031] ------------------------------------------------------ [ 93.711955][ T6031] syz.3.21/6031 is trying to acquire lock: [ 93.717762][ T6031] ffff8880782d1670 ((work_completion)(&new_smc->smc_listen_work)){+.+.}-{0:0}, at: __flush_work+0xd2/0xbc0 [ 93.729212][ T6031] [ 93.729212][ T6031] but task is already holding lock: [ 93.736591][ T6031] ffff8880782d0258 (sk_lock-AF_SMC/1){+.+.}-{0:0}, at: smc_release+0x255/0x540 [ 93.745572][ T6031] [ 93.745572][ T6031] which lock already depends on the new lock. [ 93.745572][ T6031] [ 93.755962][ T6031] [ 93.755962][ T6031] the existing dependency chain (in reverse order) is: [ 93.764969][ T6031] [ 93.764969][ T6031] -> #1 (sk_lock-AF_SMC/1){+.+.}-{0:0}: [ 93.772706][ T6031] lock_acquire+0x120/0x360 [ 93.777728][ T6031] lock_sock_nested+0x48/0x100 [ 93.783001][ T6031] smc_listen_out+0x109/0x3e0 [ 93.788187][ T6031] process_scheduled_works+0xade/0x17b0 [ 93.794247][ T6031] worker_thread+0x8a0/0xda0 [ 93.799352][ T6031] kthread+0x711/0x8a0 [ 93.803929][ T6031] ret_from_fork+0x3fc/0x770 [ 93.809026][ T6031] ret_from_fork_asm+0x1a/0x30 [ 93.814301][ T6031] [ 93.814301][ T6031] -> #0 ((work_completion)(&new_smc->smc_listen_work)){+.+.}-{0:0}: [ 93.824456][ T6031] validate_chain+0xb9b/0x2140 [ 93.829738][ T6031] __lock_acquire+0xab9/0xd20 [ 93.834924][ T6031] lock_acquire+0x120/0x360 [ 93.839937][ T6031] __flush_work+0x6b8/0xbc0 [ 93.844951][ T6031] __cancel_work_sync+0xbe/0x110 [ 93.850401][ T6031] smc_clcsock_release+0x60/0xf0 [ 93.855849][ T6031] __smc_release+0x66b/0x7e0 [ 93.860951][ T6031] smc_close_non_accepted+0xd5/0x1f0 [ 93.866751][ T6031] smc_close_active+0xb68/0xf10 [ 93.872113][ T6031] __smc_release+0x8d/0x7e0 [ 93.877126][ T6031] smc_release+0x2ce/0x540 [ 93.882050][ T6031] sock_close+0xc3/0x240 [ 93.886804][ T6031] __fput+0x44c/0xa70 [ 93.891298][ T6031] task_work_run+0x1d4/0x260 [ 93.896400][ T6031] exit_to_user_mode_loop+0xec/0x110 [ 93.902190][ T6031] do_syscall_64+0x2bd/0x3b0 [ 93.907291][ T6031] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 93.913692][ T6031] [ 93.913692][ T6031] other info that might help us debug this: [ 93.913692][ T6031] [ 93.923908][ T6031] Possible unsafe locking scenario: [ 93.923908][ T6031] [ 93.931341][ T6031] CPU0 CPU1 [ 93.936695][ T6031] ---- ---- [ 93.942045][ T6031] lock(sk_lock-AF_SMC/1); [ 93.946548][ T6031] lock((work_completion)(&new_smc->smc_listen_work)); [ 93.955995][ T6031] lock(sk_lock-AF_SMC/1); [ 93.963012][ T6031] lock((work_completion)(&new_smc->smc_listen_work)); [ 93.969943][ T6031] [ 93.969943][ T6031] *** DEADLOCK *** [ 93.969943][ T6031] [ 93.978069][ T6031] 3 locks held by syz.3.21/6031: [ 93.982987][ T6031] #0: ffff8880590c4a08 (&sb->s_type->i_mutex_key#10){+.+.}-{4:4}, at: sock_close+0x9b/0x240 [ 93.993167][ T6031] #1: ffff8880782d0258 (sk_lock-AF_SMC/1){+.+.}-{0:0}, at: smc_release+0x255/0x540 [ 94.002570][ T6031] #2: ffffffff8e13f0e0 (rcu_read_lock){....}-{1:3}, at: __flush_work+0xd2/0xbc0 [ 94.011699][ T6031] [ 94.011699][ T6031] stack backtrace: [ 94.017589][ T6031] CPU: 0 UID: 0 PID: 6031 Comm: syz.3.21 Not tainted 6.16.0-rc6-syzkaller-00205-gd786aba32000 #0 PREEMPT(full) [ 94.017606][ T6031] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 94.017620][ T6031] Call Trace: [ 94.017631][ T6031] [ 94.017637][ T6031] dump_stack_lvl+0x189/0x250 [ 94.017656][ T6031] ? __pfx_dump_stack_lvl+0x10/0x10 [ 94.017669][ T6031] ? __pfx__printk+0x10/0x10 [ 94.017686][ T6031] ? print_lock_name+0xde/0x100 [ 94.017703][ T6031] print_circular_bug+0x2ee/0x310 [ 94.017721][ T6031] check_noncircular+0x134/0x160 [ 94.017738][ T6031] validate_chain+0xb9b/0x2140 [ 94.017752][ T6031] ? do_raw_spin_lock+0x121/0x290 [ 94.017774][ T6031] ? look_up_lock_class+0x74/0x170 [ 94.017788][ T6031] ? register_lock_class+0x51/0x320 [ 94.017808][ T6031] __lock_acquire+0xab9/0xd20 [ 94.017822][ T6031] ? __flush_work+0xd2/0xbc0 [ 94.017837][ T6031] lock_acquire+0x120/0x360 [ 94.017848][ T6031] ? __flush_work+0xd2/0xbc0 [ 94.017865][ T6031] ? _raw_spin_unlock_irq+0x23/0x50 [ 94.017884][ T6031] ? __flush_work+0xd2/0xbc0 [ 94.017899][ T6031] __flush_work+0x6b8/0xbc0 [ 94.017913][ T6031] ? __flush_work+0xd2/0xbc0 [ 94.017928][ T6031] ? __flush_work+0xd2/0xbc0 [ 94.017943][ T6031] ? __pfx___flush_work+0x10/0x10 [ 94.017958][ T6031] ? __pfx_wq_barrier_func+0x10/0x10 [ 94.017975][ T6031] ? __pfx___cancel_work+0x10/0x10 [ 94.017989][ T6031] ? __local_bh_enable_ip+0x12d/0x1c0 [ 94.018003][ T6031] ? lockdep_hardirqs_on+0x9c/0x150 [ 94.018016][ T6031] ? __local_bh_enable_ip+0x12d/0x1c0 [ 94.018030][ T6031] __cancel_work_sync+0xbe/0x110 [ 94.018045][ T6031] smc_clcsock_release+0x60/0xf0 [ 94.018062][ T6031] __smc_release+0x66b/0x7e0 [ 94.018080][ T6031] ? do_raw_spin_unlock+0x122/0x240 [ 94.018098][ T6031] smc_close_non_accepted+0xd5/0x1f0 [ 94.018118][ T6031] smc_close_active+0xb68/0xf10 [ 94.018134][ T6031] ? __pfx_sock_def_readable+0x10/0x10 [ 94.018150][ T6031] __smc_release+0x8d/0x7e0 [ 94.018167][ T6031] ? do_raw_spin_unlock+0x122/0x240 [ 94.018185][ T6031] smc_release+0x2ce/0x540 [ 94.018203][ T6031] sock_close+0xc3/0x240 [ 94.018217][ T6031] ? __pfx_sock_close+0x10/0x10 [ 94.018229][ T6031] __fput+0x44c/0xa70 [ 94.018248][ T6031] task_work_run+0x1d4/0x260 [ 94.018267][ T6031] ? __pfx_task_work_run+0x10/0x10 [ 94.018286][ T6031] ? exit_to_user_mode_loop+0x40/0x110 [ 94.018300][ T6031] exit_to_user_mode_loop+0xec/0x110 [ 94.018313][ T6031] do_syscall_64+0x2bd/0x3b0 [ 94.018327][ T6031] ? lockdep_hardirqs_on+0x9c/0x150 [ 94.018340][ T6031] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 94.018353][ T6031] ? clear_bhb_loop+0x60/0xb0 [ 94.018367][ T6031] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 94.018380][ T6031] RIP: 0033:0x7f40fff8e9a9 [ 94.018396][ T6031] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 94.018407][ T6031] RSP: 002b:00007f4100d9b038 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 94.018421][ T6031] RAX: 0000000000000000 RBX: 00007f41001b5fa0 RCX: 00007f40fff8e9a9 [ 94.018431][ T6031] RDX: 0000000000000000 RSI: ffffffffffffffff RDI: 0000000000000003 [ 94.018440][ T6031] RBP: 00007f4100010ca1 R08: 0000000000000000 R09: 0000000000000000 [ 94.018448][ T6031] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 94.018456][ T6031] R13: 0000000000000000 R14: 00007f41001b5fa0 R15: 00007ffeebe70d68 [ 94.018470][ T6031] [ 94.057589][ T6034] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT