last executing test programs: 29m16.723058195s ago: executing program 32 (id=10): openat$ptmx(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) dup3(r1, r0, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xe4b, 0x11e41e7a, 0x20000000, 0x3, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x34) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_usbip_server_init(0x6) syz_open_dev$tty20(0xc, 0x4, 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000080)='hugetlbfs\x00', 0x0, 0x0) r5 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r5, 0x0, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x4ec, 0x340, 0x25, 0x148, 0x0, 0x60, 0x458, 0x2a8, 0x2a8, 0x458, 0x2a8, 0x3, 0x0, {[{{@uncond, 0x0, 0x2f8, 0x340, 0x0, {0x200003ae, 0x7f00}, [@common=@inet=@hashlimit1={{0x58}, {'geneve0\x00', {0x44, 0x0, 0x9, 0x0, 0x1e01, 0xffffffff, 0x7}}}, @common=@unspec=@bpf1={{0x230, 'bpf\x00', 0x0}, @pinned={0x1, 0x0, 0x6, './file0\x00'}}]}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x6, 'syz0\x00'}}}, {{@ip={@broadcast, @multicast1, 0x0, 0x0, 'veth1_to_bond\x00', 'veth0\x00', {0xff}}, 0x0, 0xd0, 0x118, 0x0, {}, [@common=@unspec=@cgroup0={{0x28}, {0x4}}, @common=@unspec=@statistic={{0x38}}]}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x8000, 'syz0\x00', {0x481c}}}}], {{'\x00', 0xc8, 0x70, 0x94}, {0x24}}}}, 0x548) clock_settime(0xfffffffb, 0x0) acct(&(0x7f0000000180)='./file0/file0\x00') 29m4.470837981s ago: executing program 33 (id=17): mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1000, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='fd=', @ANYRESHEX, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',grou']) read$FUSE(0xffffffffffffffff, &(0x7f0000004280)={0x2020}, 0x2020) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/profiling', 0x1, 0x1cc) write$cgroup_subtree(r0, &(0x7f00000002c0)=ANY=[], 0x2c) 28m59.228823014s ago: executing program 34 (id=20): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x7}, 0x1c) listen(r0, 0xfffffffc) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x2) socket$inet_sctp(0x2, 0x4, 0x84) r5 = syz_open_dev$hidraw(&(0x7f00000004c0), 0x0, 0x14a242) poll(0x0, 0x0, 0x101) ioctl$HIDIOCGFEATURE(r5, 0x4004480d, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000009c0)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x100, 0x80e1}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) socket$l2tp(0x2, 0x2, 0x73) r7 = socket$netlink(0x10, 0x3, 0x4) writev(r7, 0x0, 0x0) sendmmsg(r2, &(0x7f00000094c0)=[{{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000300)="eb", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000740)=[{&(0x7f00000006c0)="f2", 0x1}], 0x1}}], 0x2, 0x80) dup2(r0, r2) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)={0x28, 0x0, 0x7, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}]}]}, 0x28}}, 0x0) r8 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x1d, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x4, 0x40, 0x7fff0000}]}) ioctl$SECCOMP_IOCTL_NOTIF_SEND(r8, 0xc0182101, &(0x7f0000000100)={0x0, 0x7fffffffffffffff, 0x3}) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r9, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000008c0)={0x14, 0x26, 0x20, 0x70bd2c, 0x80, {0x3c}}, 0x14}}, 0x4000000) 28m58.748097871s ago: executing program 35 (id=21): socket$inet6_mptcp(0xa, 0x1, 0x106) connect$vsock_stream(0xffffffffffffffff, 0x0, 0x0) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000240), 0x2, 0x40102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2f) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) munlockall() madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00003, 0x8) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) 28m58.39223976s ago: executing program 36 (id=23): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000380)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() r1 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000000), 0x400, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) bind$802154_dgram(r1, &(0x7f0000000280)={0x24, @short={0x2, 0x1, 0xaaa2}}, 0x14) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) read(0xffffffffffffffff, 0x0, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xb, 0x31, 0xffffffffffffffff, 0x0) syz_open_dev$vcsu(0x0, 0x0, 0x440200) mbind(&(0x7f00001fa000/0x2000)=nil, 0x2000, 0x1, 0x0, 0x0, 0x0) getrlimit(0xe, &(0x7f0000000040)) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) r5 = dup(r4) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r5, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x6, @empty, 0x3}], 0x1c) sendmsg$inet6(r4, &(0x7f0000000800)={&(0x7f0000000080)={0xa, 0x4e24, 0x8, @loopback, 0x4}, 0x1c, &(0x7f0000000380)=[{&(0x7f00000000c0)="88", 0x1}], 0x1}, 0x4048043) setsockopt$SO_BINDTODEVICE(r4, 0x1, 0x19, &(0x7f0000000000)='syz_tun\x00', 0x10) write$RDMA_USER_CM_CMD_CREATE_ID(r5, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x2, 0x0, 0x111, 0x5}}, 0x20) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r5, 0x84, 0x9, &(0x7f0000000200)={0x0, @in={{0x2, 0x4e21, @empty}}, 0x5, 0x3, 0xf06, 0x1, 0x94, 0xfffffffd, 0x5}, 0x9c) 27m49.226807022s ago: executing program 37 (id=33): ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001400)={0x18, 0x3, &(0x7f0000000380)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) mkdir(0x0, 0x120) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x8c, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, 0x0, 0x0) ioctl$vim2m_VIDIOC_QUERYBUF(0xffffffffffffffff, 0xc044560f, &(0x7f0000000080)=@mmap={0x0, 0x2, 0x4, 0x0, 0x7, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "10110401"}, 0x2000000}) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_SET(r3, 0x4b72, &(0x7f0000000080)={0x4, 0x1, 0x17, 0x1, 0x100, &(0x7f0000000440)="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"}) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x4, 0x80) socket$netlink(0x10, 0x3, 0xf) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x802, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = socket(0x21, 0x2, 0x10000000000002) connect$rxrpc(r4, &(0x7f0000000140)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x8000, @multicast2}}, 0x24) sendmmsg(r4, &(0x7f0000007840)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="100000001001000001"], 0x10, 0xe000}, 0x5}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="0c00000019000000060000000c0000000801000003000000771e4147994bd7364839c067ae90a7e57eee2869f2e7bcd42936848ea7910e1f1f702631dfe63d5b6c384c4715765224326b9ce4633f4a8705143d886e0a8cd45339c3edfcaea95048b85a6022a36c7e2711f2fca101d34752b66535ab0b10b8"], 0x18}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f00000073c0)}}], 0x4, 0x0) 27m48.819366613s ago: executing program 38 (id=24): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x800, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x8, 0x7, 0x0, 0x0, 0x8}, 0x94) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) 27m48.392394495s ago: executing program 39 (id=34): r0 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) dup(r0) bind$llc(r0, &(0x7f0000000040)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='blkio.bfq.io_queued\x00', 0x275a, 0x0) write$cgroup_int(r1, &(0x7f0000000000), 0xffffff6a) sendfile(r0, r1, 0x0, 0xffffffff000) recvmmsg(r0, &(0x7f0000009a00)=[{{0x0, 0x0, &(0x7f0000001740)=[{&(0x7f0000000200)=""/187, 0xbb}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x7}, 0x3}, {{0x0, 0x0, 0x0}, 0x81}, {{0x0, 0x0, 0x0}, 0x6}], 0x3, 0x10011, 0x0) ioctl$int_in(r0, 0x5452, &(0x7f00000001c0)=0x40000000000003) 27m48.043161715s ago: executing program 40 (id=26): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000100)='syzkaller\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000040), 0x2, 0x2}}, 0x20) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0500000003f01f00810000007f00000001000000", @ANYRES32, @ANYBLOB], 0x48) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0026}]}) close_range(r4, 0xffffffffffffffff, 0x0) read$proc_mixer(0xffffffffffffffff, &(0x7f00000003c0)=""/45, 0x2d) 26m26.244500991s ago: executing program 41 (id=49): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) close(0xffffffffffffffff) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000480)=0x7) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) sendmsg$NL80211_CMD_REQ_SET_REG(r4, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB, @ANYRESDEC], 0x14}, 0x1, 0x0, 0x0, 0x4000000}, 0x10040881) read$FUSE(0xffffffffffffffff, &(0x7f0000009780)={0x2020, 0x0, 0x0, 0x0}, 0x2020) mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', 0x67) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000000)='devpts\x00', 0x0, 0x0) timer_create(0x0, &(0x7f0000000080)={0x0, 0x11, 0x0, @thr={0x0, 0x0}}, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) mount(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x40078, 0x0) mount$9p_rdma(&(0x7f00000000c0), &(0x7f0000000300)='./file0\x00', &(0x7f0000000340), 0x10400, &(0x7f00000003c0)=ANY=[@ANYBLOB='trans=rdma,port=0x0000000000004e24,posixacl,smackfsroot=+%,rootcontext=user_u,measure,permit_directio,fowner>', @ANYRESDEC=r5, @ANYBLOB='\x00']) ioctl$HCIINQUIRY(0xffffffffffffffff, 0x400448ca, 0x0) 26m25.619392467s ago: executing program 42 (id=71): openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/custom0\x00', 0x803, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600722, 0x19) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x1) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f0000000040), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = getpid() fcntl$setownex(r1, 0xf, &(0x7f0000000100)={0x1, r2}) ioctl$sock_FIOGETOWN(r1, 0x8903, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r3 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000380)={'syzkaller0\x00'}) sendmsg$nl_route_sched(r3, 0x0, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) mknodat$loop(0xffffffffffffff9c, 0x0, 0x1000, 0x1) read$msr(r0, &(0x7f00000003c0)=""/89, 0x59) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004}, &(0x7f0000000340)=0x0) timer_settime(r4, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000280)=[{{0x0, 0x0, 0x0}, 0x7}], 0x1, 0x2, 0x0) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x12, &(0x7f0000000000)=0x2, 0x4) syz_open_dev$video(&(0x7f0000000100), 0x9, 0x1e3a00) 26m25.241724894s ago: executing program 43 (id=70): socket$nl_netfilter(0x10, 0x3, 0xc) openat$kvm(0xffffff9c, &(0x7f0000000000), 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x2000000000000013, &(0x7f0000000440)=ANY=[], &(0x7f0000000340)='GPL\x00', 0x6, 0xba, &(0x7f0000000140)=""/185, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0xec) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) bind$inet(r3, &(0x7f0000000080)={0x2, 0x4e21, @multicast2}, 0x35) connect$inet(r3, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x11}}, 0x1e) setsockopt$inet_tcp_TCP_CONGESTION(r3, 0x6, 0xd, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r3, 0x6, 0x16, &(0x7f0000000000)=[@mss, @sack_perm, @window={0x3, 0x7}, @mss={0x2, 0xfff}, @window={0x3, 0x0, 0x401}, @window], 0x20000000000000e4) setsockopt$inet_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f00000001c0), 0x4) sendto$inet(r3, &(0x7f0000000000), 0xffffffffffffff94, 0xb, 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) openat$proc_mixer(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/asound/card1/oss_mixer\x00', 0x80401, 0x0) 26m24.789759789s ago: executing program 44 (id=72): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000140)={0xa, 0x4e22}, 0x1c) madvise(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0xc) syz_emit_ethernet(0x11f3, &(0x7f0000001580)=ANY=[@ANYBLOB="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"], 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r1, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1b}, 0xd}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000000)='htcp', 0x4) write$binfmt_script(r1, &(0x7f0000000200), 0xfffffd9d) 25m12.013873366s ago: executing program 1 (id=116): sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x4048084) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000380)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) setresuid(0xee01, 0x0, 0x0) r3 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) prlimit64(r3, 0x6, 0x0, 0x0) 24m54.207510034s ago: executing program 45 (id=108): r0 = fsopen(&(0x7f00000002c0)='anon_inodefs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) fsmount(r0, 0x0, 0x1) fsconfig$FSCONFIG_CMD_RECONFIGURE(r0, 0x7, 0x0, 0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x7, 0x204c01) ioctl$SG_GET_REQUEST_TABLE(r1, 0x2286, 0x0) syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) socket$nl_generic(0x10, 0x3, 0x10) socket$inet_udp(0x2, 0x2, 0x0) r2 = getpgid(0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = socket$netlink(0x10, 0x3, 0xb) bind$netlink(r5, &(0x7f0000514ff4)={0x10, 0x0, 0x25dfdbff, 0x2fdfffffd}, 0xc) mkdirat(0xffffffffffffff9c, 0x0, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000880)=ANY=[@ANYBLOB="090000000600000044000000fc07"], 0x48) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f00000003c0)="057e30aae10df4f97559054b9a301ecfe91b645115e1421774006df60cb393573839b0078ce169ec2fde0afea66b5bbefa9d4f3cd8c2458336ceb1f0efe647d6d7b1cdbd12c9b8e3a822cbd51494bf79a1dbe5c22338ce37ed467a1d3d616564cbb81faa2e935b2697c12efb0ed141fa2eaad4747725c4bf20f8975e402b03eb77d1aa3f10f512397b5037b1b4cd4b7c08c03dc5e52a066e5982969fa044125ae251f46c26e2536cc8b77e8edb251378be4beedfb8dca0d449123f57677ca3da5bdebf91b195f1a5d49d7c292f20f58d490de36d8ee0e8a86bd04c3165549465cbee7891fc747d7def370ce644db894b56bd53af0d0e261bcfa6bf72a684dafc5bcafe07ece74cbd1d5fa32716dd03f7acd4f32d935438c91e033beaf49e3963e13d05e7a8334a858639636799f04a9033193e7d18a2a4b20bcc96811bb5efe476db70a76b7456ac4e71f3e89c00da0c7761c188570c7902bf2fee1be273be8a9f7a2d7508ef2188d3ba1db4fa9d1533d2f2a288cdfe3b0c50908d56ba69e81386e7e979e9d7ff78685ffb8de6baea2451762736a2bbafa11d541790b0564aef9b0b80fa24832090b84341a9fdf712d3296f911020f8021eda8130befaaab01cbe91dfc5768e6ff31ec50dd88596832a9f5fd4f558d367f40e454d3c97ad16a7f30b93629ee2def77b99f8a17c157529b0782fd847a4c75a2302ca96bbdcff660c2cca753e1a8c60dbcfb319a1594565a2e15bb6124316e196e3cafaf1a29eef84a0908d1dc80af7e333c65736699f1254addf2ab582f5c87c4f6ca234d7ca9673dc29444044b95abdaea958274e39aeb163ee2d05bc2ade5c33a0466e14fbdf8aa70ca2964c06ee5bc57b894b0143a7a503cc43574a07958940b029678df44d6c82fa2e6937ea6aeb5b8f33c21628e3b0d623c23c2e5a3546194fea742d90c1d61f343a005b9e58c3e8292b256fd0ecca81cda433f3bb0ed633607f0b635cdd8b4919bfa37c1e99df087d3f8f3ba5dec7930657eb3a4d8febb5234e048881fbfc499fe5eb6a0ce34546f7010ae2291e6731d0798ca451387a123998e68f6f577ba4e556bb9a119011a191a6bbcf55beb1fb0b8252deeed5721b271b964534a04462720c4c03e8ea7f120cfa1be630e7fc680d1f6e067075c72f642babcacf6b00cd3fdb9f3200e4ff8935b17ebe222053c78c3752666088017c2150dd014b9578af6adb15527a483eff5bb623710ca7b37ed49ff7cf1525f296af6f27846524e4aaea7476a2d08dceeca84a1ab11e2767abff12d10deaf63681dcabe9b1fb9ebe207d8e37bcdba9a73a02ebea4e3a072397a88c47795d5e88b2040c9fe3f96f66f8f7d593547c8fc8f4e75a1c20962ecf2dd1e7bddf896f2a6c5f37a8784e2bc5b10cef2feab3b6eee7430908eeadd372248041a09b0c29385cd7a75754d2c429e72bf5fdac34097bbbbb3790f86399c60cb5054fbeb8eb1241608b506beb135091c18110c1d10d9a80f4adb11a6fd3001957cae0b4f8f730cc4fa4a7328e23f390caab014cfeec0ebfd0e14021f47fe330a68680678d23e7ca1ff18e7e242f4c1e3cca51dec73c58b596c2a92267ee76d3657c1e2b34102b09fa4c59c2619148440bf26802c6f858b8eee6d8c697bad2c4d5a0f76c6a4cdd3b8fdc21e447920491ef40578b68a7a5dfda04fa235fac01ad4e824b627137dc48807100e52ec5ae2f3a3fd84d68b824033b4f0ee28a9e72333b4e209ae905d0781e4fe8116e03b1ca5c3b1ea84974cabaa0214ed15bfe01e974491e8a20f9d03ed1b73799b083f3a65e809c3ff3cf126288fc1627409d46f78b5fe8b8ba0b3ddc3ac79aecd6eee2e0cc59826e5798f48f80f0c7f549b3a656e9acbc5e51bdc3becef93533166c1d9ffe4335ec973d3d27ce5987d150f554c4095650528578fe4858b670b0786f23c886612191f89ec57970dbc0e33cd62b57a08fa940b339577fd12d07dec2ac50e9e0b27f0716b3233803153389a95df956637af8d9778e27bce49ab0a832978712a074d3f7516ad512ed0d9b43049b5990c841a7b7146a24c62fb70645b8d85b6c8863d5c6aab03638ffa4e30c8de24383cf320eee735a4fd37262d473076f495da8b2f0f028b8f178c238010738d6afb1dc2e48089e80f6a7658ad3496f1a1f7f78abdcf934c733d22abb0671a0d41b9b33a5faf99d7b82166e27df0f97a7953dcc1fb364478200253757e8311ba61cb4c78a380cdd820553c7296816210f64b34619966f1540a407c8d6e8e30788909de19ede4116d09a14ce26ad59957add80b90602855c0134ba7fe8afd4493f7cd9ced61fda7d0ae02505c046acf68d68ecd9b1507a4d4eba4c2c834777b2c3c5a8b3c06677fe468072dcab48c1ac9deec30265c7f6c5864df89e25bba52715c82e9921db601b3935f5047b8cc07351b9965b1a1f6ef36c1fba89d9d96e332eacc1e8a78e09d7d6ba30845866449ed5264f763735d4e7cc133dba4b296b2dd9331efea01e5b3d05f38055e41c49993d679ef133b9b1af435fd0ac5fad33f571c76d02c40d4e301110b4442aa134364f0456da0cf362b2c27ebd667c0969ae09dad18becba9d6918fb1e741f685735cc7078f0e6328181a83da67516fac31522f9d9fc64a4b769e57e76bfff6f9867fa2fee1e7dddd11128322210e44eeef6db7269dfa1bfbd9099dd6f8219d585c22c20483251447772719a6115ccb690609de352989610a138110c884562b65de3cf63c3ebe9adfeb53c6e4ecc637c98b60161f71952b84c6fc4cea6af0ed533144bde4f8fbab2d3ffe0b2a5d0c55ec9979ea85a25045ad3a84becf0e891b89c1a83178d7368aea4bdfa0ebd46b8e110a2972c8ac96e10ac630e89f8d76bf35b03b5ecd393d1986fc61318e08ef02721e5f2cd2fe098ebcd1bd30a8f87b2a5650b51dd50d0d78ab7fe66490f5827372f1779d3d389e9fa66bd0296f0203af010d8f76783837cdde2555a90be577626a12de47d4da638efd0017750a230485f6ade34a27284d85dd87f9db8a832c571106d8296629418777b4d933fa049f0f4e5958c193e889305074091be14c66a4bf02cdfe1e8d26a5d21fa78c5628a7ee3d7a0c550296b2f0625e2dd18d45f2d45bee6746d4462c92bc3cf50503c7479bd121393821afe1cd7144ea37f4e8e5ee21f739024ad25af9430dee006b76617725556ff8a820b767fa821629819732f086a5fdf2ccb4edae0aceb3d6dea698e798ead905a2eef9065d633b007271e93101a71cbe385f56e32b3a8fb081c5c1ab09b729f89294a0007f13a3b8e93686020d993b812c6f85fe1618db897cd67be6cd5053dc8490bbebee133d140503c4aa51eea0c156523a1d81ae849dbe5a273bfc0de94836f8160ea9f146147fc02dd7b55dca6a2a43692268ee98f51fcd2d3faa76071d9716e877b2a3dcb51a51d5359a2ee705da52b43306f1f3caf33342fc281bc9c58d1ce05ecdeca371e3a788542f8fa999e4d8e10e66f0b6053d7d4cfc6acb815628bc2409b3dec01726121c267b3ee85fd61bbbdda68ae2c13026863e4a54b93d956fe692707a179411c841ca7d2f33a5223181b18b7ba2eebdd7c2a8dec3ac2a317b5fbd996e8598c394ee627308f0e887480a8dcd59b0256b636f4c62566501a733fa74232945ba1d9e2bae347391bf9ae2da4d3af2b262b772421fd3a5cab46862ea6049f5c9c76dd8549ce0e6c31c792b81b6b21f0bcca18bb2fa6a9d4d6e0a837bb119e2e002a69d6ca95a4b2acc463076c2e05731ef0cfaea84387a6baf6737cc14a25f5329ea924090311213344625a69ee382dd4bc72e00e63329956f3e021092585c9affa06a95bd0ef653ae9ff0abed5ee561ada4f83d8ef202d9c0b2225ebe8660cc408859d45e0332f4f78f6a339bce9d12ca2bc5116a8fd4007c485f5c1c41af96c41d96db35411842d7babc05c8b228066dccb9b67f348974363be521e41fa94d2034a0bc1e87360a80606e1e1bfa8e6399601b30bf93ac41129869158bc2b791b50e51519133ab58afd4023d4d721129b1307f054103a47c49e0524ac4df511c3409fa62d8b5c1a897794600f53efdcc987e06bffd77c9fc75fb7221ef29ed2f7e3e8abcb4a1875b85bd5176a6fba9a361d8684876508443bd50e630f4c684002b15930cf81d740b880eed25d22d8de8c00066790df084fea7c5021184a210a6d24f9bc862c4e3eafbb1782fa240ecfa5959d7a681bae84e8a96a5ff45dea4f9e16dd2cff2dccc6cf4042b44b7ad1f55dc1db5998ed40a409c0e67e1e64fab423d2c00fabb8976d9dacf0c82530e356a99f75082f3411adddfe4ab1ad3b55599fa15450dd5feee23591f1ce398e4c5ae8aad71ad26ea189c333c8467d1eaba9589bb8c41bbfe8c0c173e5446bc06b578c1db849fabe5fcd8fe0fca94bdc799b53b897249826037499e8b6213d640724fda1bcc9341ac61fbea02c8f39a53c496902d5c7922f678a273cdf5ffff38ea028ae19dc72f0b0688f2b9b7d5a9c04153c10ff4168cf9f243dea03b336be778f6c79d67a2d0ade82863eaf95d6fc7f745569864f369f4b39177c356c8c393bded485df28622f01251e58f3d39498520ff90e6c670f0dce5b494cb1d78dfad108406dc5857086d386bd42bd03fe716f049407e5e55caa0e73e96c1a4f6d5791ce7195b2ce72de52ed617ecefaeeabfa9350af49d1d91f9a4b97dc0808869b916f34ee242c40fe8c8aee57b6ddb69f9a10636e481dfa059ef001bad7020266f0d74b14edce6c18ffef854768a60885bad798658a6b9d0b438c483ba159346d5ce0771f53ff1ae0bd47d8583bd56237f8da2747ac7eb2a87b6e26c4820d4fe18b76e06bb6e0c0cdf478b4aecd381c2a6ca9f10ec433f0aca63a66d04f70557baf9f2844005351a21664c2430fb0002cd03bcf0b2004068a2567f91a9fbee8c6d948fb35d48527b23e1398ce9f535e2b0b33c2bc31ab737ba4b980f46f5d424e33892c8093f3cd18510a3157afc023f63ad3ba999e950747c78c06ab141a26d74ffc049a6f76c465f9f9f03a8d339a8e61fef26a5239fbc11c01a87800c81efd7b9f28ee2ab2ed88a383f5013bfd6671ea3086121b235a0cc45ccb300c02588895f8d13ec7e00a3aaaa8b0e739f666fd1b13a90b23998704859c9c76108ed7ecdc63770e6ebaa0aeb9208b92ec4e948ac7fc81cc6f305f06c2f2d8c9267463af92e185ff627eed54313fa2ee0bff2cfa8be411982fd19fa88db5ec99f238f88782f8c7a957bef14f79351b63799a4cce160357c068987a5516b04c79644c140850cddc8bd5541fcca9e30826aad864240f434bd1fc67b58e3d664f782e9e46edcb34e2db98a39c23e334e51c71c9fa466470992cc1fbc36c3c8ff4340be67f9b85a74c9114cb9fe5ca4dcbb641ea17a54ba4658aeaa515109e117625a6196dd66d3584d293b468fce63b5a9c4b9461700c74ae955539bfbbe3eccfa7d9c9f737792a9d4b978baa2e92819e88340b73c88c2900b723248b18ae9414cb37a64ef8cb8ca85cda9677d9f1e71a6b70fe3ad17f2d13c1df48d93bfa50fd939a72ea26f9fbeaa6f8af2eec91b04a8fa7dc14fec0f54fcd1c5c848b4432f979f10e661cd2d7f8ff669ce99f9813fc5440fbbeb35f1a5e5115f5ca35dcc270bdbcae07a9ae8e22aabf8178379dee08874ec7840de27815890a88fc9a3bcfa88a33f9baef9af0ae01b2bd34a907f1151cb14bc8b396bc43a60f884f425e4a04348cc645aae68db49980139ddad0fed303e40b124fd654b36c961a56c44cc3686a7529b1f1ee47da3a0f1158542337df15780444790a2ff1b57e062f0db66730c9f98de395f939f44188225211c514447f67fcbf320a34c43ce09ed272bb992db3a35ae2c3c491c36f2de88984129fcea1ffd235aff7bef7fa95d65894db9a5f1b348efcb571a81b3d73ccd07cbef052389001e4d456800e05ca53bcf3485ce05791ff65a9f7913416ae26972f34f51a3270580b81307ce31c98eda06f3b35890ce317e79a16d728cd0bb6a3835667555c0c5138cfa5305a91db1f873b2a75b82ffcb27616ee67777708f7dc2ed9ddbeb38a60f446d3ac88ded25265c25ef38b0755a9d34bab5e669b6501d8c9787aae7eced9945cad3d4d1c32fa68b48a1d773750f814631db3e088c1b5e7ffa854ea1343d94ec1343918d7a1c5a095bb72b00eb3bff210aeec0b8a581a2a13429b83a193f4d447059265b63c4b8f8ea1b9494f65e79844d956c5d80780849dc086506e9eba002e682a1bae1543f8289588c574bb6ca9a2e57b908aaffed23ecf3536abaf96fe08291f3d70773288b4698e972b0187385dfff4cba59175814e75e7e5146205c7f2d2f749583b393f46c448c152d8be50d60ed8d8bdb30fc7925656a0f90b1de967c729980815e5f19ed453fbefcff67832cb90d753410a0b18eb7504600b11b0360c3d3594d48d832160d357afc1f17dc71dccabef7bbcf1fdd55b48cb02135c32650ab07b902f36b48be9376b2dd68343eacfe80d9dab3205a393a4c6ffd405f6db323dea11be4f22ce50df1e0cfec9e9b1e23acb94d66ea787d08f615a7c7288cdf1921a13a85d885e47cf1067d89ebad5b92ce5c9da255f8d74bd2d5b78366f998cc35bf35e45d06128f1c5984fabee7542642bbf6d981b60759d3e7900e5b3d1d7310f90df0c88a600ff2f39932bf7411e61c692c9444dc9ae0dff28c0b94292c430ac4464e83ce8a29b886f45c98b8396667740c5be51e592eac0250d6e479505d36e930ca3a32cb671d58707d25b10e2660cd5e661b08e268c8bf1b3cbceb2d995a2a6fdfe5475cccc965f71baa7c84054e3bb6cbcb7167b06c708cd72ad4301e943dd1b2b2c325f682be3eaae730a8ed8bc3134b28d1ce04543bc66a529744561c42d25e65c7b5cc2a17875ebf35e53aa46e1edec29ff8d046a7e01459d9639c10d1df998cd9a12d7e50b2dc71ee7338cf71beb72d5020dc69eeafc354bf822d65ee0328eb07d04ac0d266fdb53227a158411da5ded254b3c359ee710e0278e1a06f06002538e108450fd6b11949fdc618a29baf34f232aa192230ddb318aa6d59d122257e50713fe73e6c0059399589c382dc901a8c3381139436f7331b69f457bbb38ed54daaa07a52cceb053c32690836c664b73d86261216b8610fc7b4d53dd3e5d9bcb3e25528e132911cac37e7f2618274c733b5ae02f9c27638d9e11988f1dfbb281ffd8cddf8558a481861cbe9d53a4ad8282d3587449cd51759ca397eda122d286e117d01539359870b94c98a3ce383ed1d280bcceb228acf73193e87fd3650e4dfd563cc55bfbc8626a41293cc90ef76e28e2dedaf968602d2997ae1c2752a0febe3a78f3756d40201ae13074091238324422caabe22c66b7866065264261fc2c3e0569493468d1c1c36259aedd5f078a231e72decd70f4de8532f6753287435296f33a096bc1c8b0ebb68c9f783881e45ac54159ec1c2f9e1f5cb48f96729a62d1b4fdaa89ef5de8741bca04e953534dc977e881a61281812af435206378eff173d7929ab4967e511bdc14e6a783ab647a4c257a4fcd6ba38ef32bc48a0064341697e34f7465b3e6240589d854db4d9714e998f2edf3a03986598a52aaf647d938f4a8e07c1c29615803af6cd403d261ad6da3c1c804034b4a4eef3ea1cc8db39d9e171b3f6dd074388577a4eb901c25c8031e4592cea80b6354850657f53b2acd910ec2c5a7db6abb0153e051dadfbcdf047e35591b96b5657ca55d99ef6fb48e07c34321cd20c40b30a646132f8afcb9426fe84a790567fb847076a8762ca29cfb037e0c948edc12122a1160a55d465f5c912406a10dc0d3c1156cd207e9ffe906d267c9c870521934e1c56af460c0ad0dea9c929acf85768e22bb65eca6e25e4ec8e6edb7a6215e8c7e5fdb56c7131b156ab6a78fc808f8f17a2708ff68b37778c00b3b546004fb2b2c588d8ca8276d281026bfe896698569814410422f27421b8fc5c09d47635f17ddf6b9f56a202a991514678c18a4afabe1eeca6fce1187fffcb6ebdacfc6cac9750766ed40c80e7eceb342a3fa6f86d014949f9d111bfd96e2a39d364f2e2722f2d9ab0577befe26055890161d780e52eff4022461c1d3b019b86af28c4f02fd1f7496d8c141344ad5756bcdc45158f3af7aac227c8853f607cae412db6fa924c039859fe455857bd5fde66cc1b773c12f516401a31c80d750079247c128a103361e7f0a392d21b4b1b594307ff6b37e5a242666209ec517561e04645b92e7cf3cff1a6c76c900d12d9556e2962c535401b1e61fa85e06551ed678703fb3bf8590f2608ae3c278b8d1ac286af38061afbbc3cb27ee7adc6ad299151cd00a84506e6a97648ff99f2a9d35d8421e71589437406fa8e6def8ce34c9abe5de3481c492887176d4485dac794b84567d5ebaf68d0007cb2256a0f1ce4318f6891f750fa9696fed3525059688cf973e70d688b1759cd0f3dfb0b2a7078174b978767cbdbfc3f7d5850e2f7772e2bd6e3ed69ef13cc141238b5ee04b6615e33c42fcd6cf979a0ac848458b713b9a988c1e3fc32f2a182fc0cab2e6933e9aa5c2d77db8c6a1802b43bd8220ff0ca92229fc26a44761d00eeebec834e5f7d382b4f58a2759c56e53b163dae034ffa1970acc57165746e575470e13c4044f392ae4bea93e7d666256436507bb987a247785301274d4f262f94989cdc94b209b7499bd0cb4437525b72be79c87c6076533e4a14799a60bd3563d46ee4767108bed7e637cfed6f3139637bb01f36385dc5873eed726fbec9a87da294cc11db8b49fe45b798ae74e1a8cb0f2907eb0178d2baf5f0f88f654baab9f147741945c496ddea1cfed65a82e913a131c4ac7bb6f0d8d5d28225dab8a33c6e60c0d2b2d5dbd8c35089f13f9a2ae81ec9addaefea9b8ddabc8cdeb6437381ce346db6e14d9d1e8bb4662b508d61da77fc8d9ebebceb1c23be5d0a7bba4a48c0591333ab7779bae78ff23c4bbf8a8cf30f3120a5b63a047064d7ed7d37191cf39b6d1e8ffe3b47379767bd691cb855a9c938e9a0235a5ec9c316a6dceca63fa5fe6df0b9f0d6b38add216aaf2726d3377ab827b00b4cbf490708a0f679b8cd7caadb3dee40cc98f778917d6a6263fcc0747bf75fd676d84abb7d10087da323f95c2571139fd4c9826ad5db6ee4c246b9da20592cae11f9264bd2945aa1a427b2acefb514a2daafbbae35ff761eb1e3b98b4a1dfca348b8c4ff96325a618d677180ceb7e916654ecc2deecb4e61d01080f44b98776b1b43aebeffe2c14006dd1d78c8babf1179f42fd20d87654d3246d41e9dc633eac1741be44f8d751d8c9fd57316fe06d60872939b7a2906bb27a299a3408a51d74e5d98417f05f85fc1b332e103e79203e9fe344dc1d1572de39d914c5270c839870d2b33da5a6efc08c4f0c8227cc35a7f77c6a55f80ceef90e217c80e5ecb4c236685f5219787b01612cfbac90794e8269c07fb7ca4f7dba4defb2aae2b37f7b1696e78de15dbb1b6d4ee0cc4c0fae274b2c2de9343862de1d9847515ad235b1837daa9b814f19e895ae3966ed262e3e7add9f19009e6b61462917b29502b67e124c43538a6bcab7296529e01bb26ab8b3ef094ed057383c4f92790b6f705ae9d943c4e8dad84f6ef82b54d062713c16960fb475d74d46a1b16062563da3391cc6ff5185162c31ff7339e4837e38adab8ab911abaaa006e313dd19a1f92b4f7bede4525b154e1b9f796136a85f3602da011ae2232be902347e08ce0bbf3d23d91c4aac11c8824caafa1d1ff0343ce655802c1915f3ae7c0c670b18e56e139be66a33613afcb3b1928613b3afba9d635070af678216d57023d1911f0eb7ebddefc96f0efd8e9dc10e8a87a68393e19733ef900c6264722940750ae16f664e445414e85e98570303c6d87d7f265cfae0a1e9314fc14674c2871c0d59bbe2eddaf9330a4e2a28673af73910d6cb90790f800e89d55a2930910a8430ade9551819d83d5ea6da4e58326b7ce555d01da86ea78200f0219ec92473da95cd5a632c525ca9fbcddebb8168881cdb2f5da787d0e31881e2b17d78184f3a0bed8662486d3937dab275d050b9dd5a2ce904208a91a467afc33e10fb6c1ca788a5ef30d6e8b615ec0ae1503fea7006569559b7b155c31b196b85881c5671173c06fc5373e9fd973e7111ed45874609bf3c88c6db732210a3ea04cb68662bbc2048bb55d811482af5c658e29bd18c57ffa25e88d7297cd20d4c2b13007cfae89f4dcd90177a0806a2ceb2095333b58f828c093b9bf63cd07e3d56a446fd12e755fd651211bc160948836939c17623b317b9e935307044bab2c11879a62288e7ecbbb97f10f52516f517b7b8e44cff5964fdfaf8044065056b48db13b1365004c336afa3535af1242c9b7271b8b1ba2213fcbb80926bcd394815cd7c27e3aeb2348dc45f5e06e32f5bd56d1c472f41b564ec0939cd012028412883cc098d086fd43858747b746be72b979d175f6a6447fc5908616dec7fc6c962e12e96e09bd068acd2fcf0ce1cc26d9f82b2b91bc9aafcbf8435011f73b6a8ea1bb2f3289b23236136b31656600762feff53e607df8cf3c9a7f257b212630c19f142e4cf5094250b629cabb145c77f1f14ad60ab7617078f810a766cfa341fb7c16086609bc0a768fb1cd782606f32b83a0a55d883269a05b80275612dc571cb993ea9e447b4d32570d412203ab4c8b050b63bb5ac0f8d6f4e9a1644e4b622587b2ae125c2093bd363493d58544d6303a0de17780fcd83e993aa83f4432274eee1e6333fcdc77bcfdea95b8b9ed787723e35b71f1dbe89ff1e3e6fde146c05b6fe9eae52b472624e412253a63e7fcf1b77dbff7509eec5a55501e222f66bd84d36663cd244fa1556bd34b4c9957a93a71e63961ffc7700c5545acdd3e79da41e1cfaca0956d4978222cda23a574d691dbb6c6bd083c70c2782c045bbbe0fcaa10efbc002af6832e3fa7dda0ec8ff6ded69302d55d5a62a7ec213f16ecc5e3304a83103d1c2b21e04e3f5f3730339a630a407e8cc6a5afd2f2ed78ff992035a3783a2708195a46e565a9113be8c228ccaae3510363b475732ad48fe8ff34801f4c35132359d4c5c5bff65141f4a8684d462cf5d97b44496440fff3f7a28d28bbaa8e6db2a6064cbe9fca4679afe8ca6dd27a25c56f3e58165040f19a0455199a0ece4583f060979427f2f3495f40a83bc6ee3eaadab18705d464662b8aba9c7aa2f29114f7acc247548a85bd44723064abeee18f7f558f6d0d74fa08103dd906124454745d23005c425b260b0034372123b642a0cbebbc1a0bcf0cfc3639876eceac5f9734057ff659cfd35b1a3eaa768b86d66244aabc23a45676a59d492614f1c0011c9253e53fc7bb3e20d303afdb5b6614dcc7bbf72a339e414672aac23c2e2983083f08dbc34e3452def00f402598b6aaa4f0d896d1648b1442621993b7d0c930560cb6152b9ce59f94356726816a224fca84da5dbde6675d20f546a3e4635e82ff9575cac9160e6819f", 0x2000, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000), &(0x7f0000002480), 0xce4, r6}, 0x38) bpf$MAP_UPDATE_BATCH(0x1b, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000600), 0x0, 0x3ff, r6, 0x4, 0x100000000000000}, 0x38) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000340)={0x48, 0x2, 0x6, 0x3, 0x0, 0x0, {0xd}, [@IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:mac\x00'}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x4}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x48}}, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r8, &(0x7f0000000000)={0x0, 0x15, &(0x7f0000000200)={&(0x7f0000000240)={0x40, 0x9, 0x6, 0x101, 0x0, 0x0, {0x0, 0x0, 0x6}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x18, 0x7, 0x0, 0x1, [@IPSET_ATTR_MARKMASK={0x8, 0xb, 0x1, 0x0, 0x8}, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x0, 0x1, 0x1, 0x0, @loopback}}, @IPSET_ATTR_PACKETS={0x0, 0x19, 0x1, 0x0, 0x179e}]}]}, 0x40}, 0x1, 0x0, 0x0, 0x14048017}, 0x240008c5) sendmsg$IPSET_CMD_LIST(r7, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000001c0)={0x1c, 0x7, 0x6, 0x401, 0x0, 0x0, {0x5, 0x0, 0xa}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x24004000}, 0x0) r9 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0xff, 0x9}]}) mount(&(0x7f00000000c0)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140)='aio\x00', 0x2060000, 0x0) close_range(r9, 0xffffffffffffffff, 0x0) 24m51.479953927s ago: executing program 46 (id=116): sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x4048084) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000380)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) setresuid(0xee01, 0x0, 0x0) r3 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) prlimit64(r3, 0x6, 0x0, 0x0) 24m51.001112765s ago: executing program 47 (id=122): socket$netlink(0x10, 0x3, 0x0) sendmsg$NL80211_CMD_NEW_KEY(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[], 0x1c}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) r0 = getpgid(0x0) flock(0xffffffffffffffff, 0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x0, 0x0) r1 = epoll_create1(0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r3, &(0x7f0000000100)={0x20000014}) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r1, &(0x7f0000000000)={0xa0000001}) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) epoll_pwait(r4, &(0x7f0000000040)=[{}], 0x1, 0xff, 0x0, 0x0) 24m31.136120135s ago: executing program 48 (id=142): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x18, 0x3, &(0x7f0000000380)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r5 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x6) r6 = fsopen(0x0, 0x1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r7, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r8, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r5, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r7, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) bpf$MAP_CREATE(0x0, 0x0, 0x0) r9 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r9, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) unshare(0x6a040000) connect$bt_l2cap(r3, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) r10 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) ioctl$sock_bt_hidp_HIDPCONNADD(r10, 0x400448c8, &(0x7f0000000600)={r3, r3, 0x2008, 0x0, 0x0, 0x6, 0xfe, 0x10cf, 0x5, 0x5, 0x2, 0x1, 'syz0\x00'}) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="14000000100001250300000000000020000000000900010073797a3002000000140000001100000000000000000a00"/66], 0x48}, 0x1, 0x0, 0x0, 0xf3021be2a65b013}, 0x0) sendmmsg$unix(r1, &(0x7f00000019c0)=[{{&(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e22}, 0x6e, 0x0, 0x0, &(0x7f0000001940)=[@rights={{0x1c, 0x1, 0x1, [r4, r6, r10, r4]}}, @rights={{0x10, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [r1, r6]}}, @rights={{0x10, 0x1, 0x1, [0xffffffffffffffff]}}], 0x50, 0x24040040}}], 0x1, 0x0) 22m39.210122261s ago: executing program 49 (id=211): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x18, 0x3, &(0x7f0000000340)=ANY=[@ANYRES64], &(0x7f0000000300)='GPL\x00', 0x2, 0xb3, &(0x7f0000000140)=""/179, 0x41100, 0x7b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x38}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffa000/0x2000)=nil, 0x2000, &(0x7f0000000000)) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0) mount$9p_virtio(&(0x7f00000000c0), 0x0, 0x0, 0x20000cc, 0x0) sendmsg$RDMA_NLDEV_CMD_NEWLINK(0xffffffffffffffff, 0x0, 0x20000000) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00', 0x0}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f00000004c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x1}}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x41, '\x00', r3, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xff}, 0x94) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000380)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0xfffffffa, '\x00', r3, 0xffffffffffffffff, 0x3, 0x4}, 0x50) r4 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r5 = dup(r4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x13, r5, 0x2000) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x17) ioctl$SNDCTL_DSP_SPEED(0xffffffffffffffff, 0xc0045002, &(0x7f0000000180)) write$binfmt_aout(r5, 0x0, 0xffffffdb) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) socket$nl_route(0x10, 0x3, 0x0) 22m24.457522137s ago: executing program 8 (id=250): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xe4b, 0x11e41e7a, 0x20000000, 0x3, 0xffffffff}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x0, 0x20000001}}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x34) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8b37, &(0x7f0000000000)={'wlan1\x00'}) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000040)={0x4c, 0x2, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,port\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x3}]}, 0x4c}, 0x1, 0x0, 0x0, 0x24000000}, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) mremap(&(0x7f0000000000/0x9000)=nil, 0x600002, 0x600002, 0x7, &(0x7f0000a00000/0x600000)=nil) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_GUEST_MEMFD(0xffffffffffffffff, 0xc040aed4, &(0x7f0000000080)={0x200001fe0000, 0x3}) 22m6.079853821s ago: executing program 50 (id=250): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xe4b, 0x11e41e7a, 0x20000000, 0x3, 0xffffffff}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x0, 0x20000001}}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x34) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8b37, &(0x7f0000000000)={'wlan1\x00'}) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000040)={0x4c, 0x2, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,port\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x3}]}, 0x4c}, 0x1, 0x0, 0x0, 0x24000000}, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) mremap(&(0x7f0000000000/0x9000)=nil, 0x600002, 0x600002, 0x7, &(0x7f0000a00000/0x600000)=nil) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_GUEST_MEMFD(0xffffffffffffffff, 0xc040aed4, &(0x7f0000000080)={0x200001fe0000, 0x3}) 22m0.758587593s ago: executing program 51 (id=256): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x18, 0x3, &(0x7f0000000380)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r6 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r6, 0x2, &(0x7f0000000200)=0x6) r7 = fsopen(0x0, 0x1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r8, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r9, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r6, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r8, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) bpf$MAP_CREATE(0x0, 0x0, 0x0) r10 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r10, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) unshare(0x6a040000) sendmsg$nl_generic(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)=ANY=[@ANYBLOB="1c0000002100090002000000ffdbdf25020000000800080046"], 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x8084) connect$bt_l2cap(r3, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) r11 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) ioctl$sock_bt_hidp_HIDPCONNADD(r11, 0x400448c8, &(0x7f0000000600)={r3, r3, 0x2008, 0x0, 0x0, 0x6, 0xfe, 0x10cf, 0x5, 0x5, 0x2, 0x1, 'syz0\x00'}) sendmsg$NFT_BATCH(r2, 0x0, 0x0) sendmmsg$unix(r1, &(0x7f00000019c0)=[{{&(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e22}, 0x6e, 0x0, 0x0, &(0x7f0000001940)=[@rights={{0x1c, 0x1, 0x1, [r5, r7, r11, r5]}}, @rights={{0x10, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, r1, r7]}}, @rights={{0x10, 0x1, 0x1, [0xffffffffffffffff]}}], 0x54, 0x24040040}}], 0x1, 0x0) 22m0.252872541s ago: executing program 52 (id=258): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40000}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)=@newtfilter={0x54, 0x2c, 0xd27, 0x70bd29, 0x8000, {0x0, 0x0, 0x0, r3, {0x8, 0x7}, {}, {0xa, 0xfff3}}, [@filter_kind_options=@f_flower={{0xb}, {0x24, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS_MASK={0x8, 0x55, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_ERSPAN={0x4}]}, @TCA_FLOWER_KEY_ENC_OPTS={0x18, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_ERSPAN={0x14, 0x3, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_ERSPAN_VER={0x5, 0x1, 0x1}, @TCA_FLOWER_KEY_ENC_OPT_ERSPAN_INDEX={0x8, 0x2, 0x100c}]}]}]}}]}, 0x54}, 0x1, 0x0, 0x0, 0x22044028}, 0x20004000) 21m6.948579721s ago: executing program 1 (id=263): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000750000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000"], 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r0, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 21m6.346598129s ago: executing program 1 (id=319): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) setsockopt$bt_l2cap_L2CAP_OPTIONS(r0, 0x6, 0x1, &(0x7f0000000000)={0x3, 0x80, 0x6, 0x0, 0x8, 0x80, 0x7}, 0xc) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/address_bits', 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080), 0x0, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r1}}) bind$bt_l2cap(r0, &(0x7f00000002c0)={0x1f, 0x0, @any, 0xfffa}, 0xe) connect$bt_l2cap(r0, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) r3 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000006c00), 0x3, 0x0) ioctl$SNAPSHOT_S2RAM(r3, 0x330b) setresuid(0x0, 0xee00, 0xffffffffffffffff) r4 = io_uring_setup(0xa77, &(0x7f0000000080)={0x0, 0xffffeffa, 0x800, 0x7, 0x2}) setrlimit(0x40000000000008, &(0x7f0000000000)) io_uring_register$IORING_REGISTER_BUFFERS(r4, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000300)=""/4105, 0x1009}], 0x1) sendmmsg$inet(r0, &(0x7f0000000880)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4880) 21m4.522104458s ago: executing program 1 (id=321): r0 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) writev(r0, &(0x7f0000000b00)=[{&(0x7f0000000940)='\r', 0xfdef}], 0x2) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x2}, 0x50) r2 = socket$inet6(0xa, 0x2, 0x0) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000240)={0x6, 0x4, &(0x7f0000010580)=ANY=[@ANYBLOB="18000000080000000000000082acb9506f0000000000000095"], &(0x7f0000000040)='GPL\x00', 0x5, 0x0, 0x0, 0x40f00, 0x6c, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94) r4 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000000c0)={'syz_tun\x00', 0x0}) quotactl$Q_SETQUOTA(0xc4ad561acf0d1b38, 0x0, 0x0, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000140)={r3, r5, 0x25, 0x2, @val=@netfilter={0x7}}, 0x20) syz_emit_ethernet(0x6a, 0x0, 0x0) syz_emit_ethernet(0x62, &(0x7f0000000840)={@random, @local, @val={@void, {0x8100, 0x4}}, {@ipv6={0x86dd, @icmpv6={0x9, 0x6, "cfe21c", 0x28, 0x3a, 0x1, @ipv4={'\x00', '\xff\xff', @remote}, @private2={0xfc, 0x2, '\x00', 0x1}, {[], @ndisc_redir={0x89, 0x0, 0x0, '\x00', @remote, @mcast1}}}}}}, 0x0) setsockopt$SO_TIMESTAMP(r2, 0x1, 0x52, &(0x7f0000000040)=0x2, 0x4) bind$inet6(r2, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) sendto$inet6(r2, 0x0, 0x0, 0x44000, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x15, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x5}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x80004}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @sk_reuseport=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000180)={'syz_tun\x00'}) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) connect$inet(0xffffffffffffffff, 0x0, 0x0) syz_emit_ethernet(0x2f4, &(0x7f00000004c0)={@local, @local, @void, {@ipv6={0x86dd, @icmpv6={0x4, 0x6, "26f169", 0x2be, 0x3a, 0x0, @mcast2, @dev={0xfe, 0x80, '\x00', 0x33}, {[@routing={0x3c, 0xe, 0x0, 0x6, 0x0, [@remote, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @empty, @ipv4={'\x00', '\xff\xff', @loopback}, @dev={0xfe, 0x80, '\x00', 0x24}, @loopback, @local]}, @srh={0x32, 0x8, 0x4, 0x4, 0x0, 0x8, 0x70, [@remote, @loopback, @private2={0xfc, 0x2, '\x00', 0x1}, @local]}, @routing={0x2c, 0xc, 0x2, 0x1, 0x0, [@ipv4={'\x00', '\xff\xff', @private=0xa010101}, @empty, @mcast2, @private0, @loopback, @dev={0xfe, 0x80, '\x00', 0x17}]}, @srh={0x32, 0x8, 0x4, 0x4, 0x80, 0x60, 0x1, [@local, @remote, @mcast1, @empty]}, @srh={0x5c, 0x8, 0x4, 0x4, 0x8d, 0x10, 0x6dc8, [@private2={0xfc, 0x2, '\x00', 0x1}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @mcast1, @mcast2]}, @hopopts={0x67, 0x3, '\x00', [@hao={0xc9, 0x10, @remote}, @pad1, @jumbo={0xc2, 0x4, 0x80}, @enc_lim={0x4, 0x1, 0x7f}]}], @echo_reply={0x81, 0x0, 0x0, 0x49, 0x4, "60ef5c4c15be7e5a49bf5871fb7ec982b97b712b9dad8cf4ccb3a3b643a2a87fa20414b2ad5dde4c5a2c365e20f23cc6653fce0aa7fd84db1727cde1f3d05ff5d8b367b5d38216028b8100958e6e3f4edbbb76dc1235d0a301ebd35dd0ee86a562d7e1f8c845688ce82fb1d8a78fb8fb9a52ec985c452212eb8878a766612e4d6e4605cdb025dadeb4b4bc9eea01b1cbbd3264264348535ae98e96db31248b1118829c604da6e43f04b541e47379440baba2d4801dfd22583c829dd46d45330b3309e0706f48b4160490db2ee34480d14a7c871b98b1"}}}}}}, 0x0) 21m2.810137212s ago: executing program 1 (id=324): socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) recvmmsg(r1, &(0x7f0000001e40), 0x0, 0x100, 0x0) sendmmsg$inet(r0, &(0x7f0000001540)=[{{0x0, 0xfffffffffffffda1, 0x0}}], 0x40001b6, 0x0) r2 = socket(0xa, 0x3, 0x3a) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r5 = socket$inet(0x2b, 0x801, 0x0) sendmsg$ETHTOOL_MSG_LINKMODES_GET(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000580)={0x0}, 0x1, 0xffff000000000000}, 0x10) sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(r2, &(0x7f0000000300)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x100000}, 0x6e, &(0x7f00000002c0)={&(0x7f0000000200)={0x14, 0x0, 0x300, 0x70bd29, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x40000}, 0x4) setsockopt$IP_VS_SO_SET_ADD(r5, 0x0, 0x48f, &(0x7f0000000000)={0x2b, @remote, 0x4e60, 0x0, 'lblcr\x00', 0x4, 0x6, 0x47}, 0x2c) openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, 0x0) sendmsg$nl_route_sched(r6, 0x0, 0x4000010) openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x4000, 0x0) r7 = openat$nullb(0xffffffffffffff9c, 0x0, 0xa4242, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000007, 0x38011, r7, 0x0) r8 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x1c3902, 0x0) sendfile(r8, r8, 0x0, 0x2000fb) 20m47.049625409s ago: executing program 53 (id=324): socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) recvmmsg(r1, &(0x7f0000001e40), 0x0, 0x100, 0x0) sendmmsg$inet(r0, &(0x7f0000001540)=[{{0x0, 0xfffffffffffffda1, 0x0}}], 0x40001b6, 0x0) r2 = socket(0xa, 0x3, 0x3a) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r5 = socket$inet(0x2b, 0x801, 0x0) sendmsg$ETHTOOL_MSG_LINKMODES_GET(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000580)={0x0}, 0x1, 0xffff000000000000}, 0x10) sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(r2, &(0x7f0000000300)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x100000}, 0x6e, &(0x7f00000002c0)={&(0x7f0000000200)={0x14, 0x0, 0x300, 0x70bd29, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x40000}, 0x4) setsockopt$IP_VS_SO_SET_ADD(r5, 0x0, 0x48f, &(0x7f0000000000)={0x2b, @remote, 0x4e60, 0x0, 'lblcr\x00', 0x4, 0x6, 0x47}, 0x2c) openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, 0x0) sendmsg$nl_route_sched(r6, 0x0, 0x4000010) openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x4000, 0x0) r7 = openat$nullb(0xffffffffffffff9c, 0x0, 0xa4242, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000007, 0x38011, r7, 0x0) r8 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x1c3902, 0x0) sendfile(r8, r8, 0x0, 0x2000fb) 18m26.983268647s ago: executing program 5 (id=610): r0 = socket$inet6_udplite(0xa, 0x2, 0x88) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$team(&(0x7f0000000040), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000680)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="05042bbd7000fedbdf2501000000080001", @ANYRES32=r3, @ANYBLOB="4400028040000100"], 0x60}, 0x1, 0x0, 0x0, 0x4000401}, 0x2404c080) 18m23.521244507s ago: executing program 5 (id=613): r0 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) writev(r0, &(0x7f0000000b00)=[{&(0x7f0000000940)='\r', 0xfdef}], 0x2) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x2}, 0x50) r2 = socket$inet6(0xa, 0x2, 0x0) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000240)={0x6, 0x4, &(0x7f0000010580)=ANY=[@ANYBLOB="18000000080000000000000082acb9506f0000000000000095"], &(0x7f0000000040)='GPL\x00', 0x5, 0x0, 0x0, 0x40f00, 0x6c, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94) r4 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000000c0)={'syz_tun\x00', 0x0}) quotactl$Q_SETQUOTA(0xc4ad561acf0d1b38, 0x0, 0x0, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000140)={r3, r5, 0x25, 0x2, @val=@netfilter={0x7}}, 0x20) syz_emit_ethernet(0x6a, 0x0, 0x0) setsockopt$SO_TIMESTAMP(r2, 0x1, 0x52, &(0x7f0000000040)=0x2, 0x4) bind$inet6(r2, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) sendto$inet6(r2, 0x0, 0x0, 0x44000, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) recvmmsg(r2, &(0x7f0000000580)=[{{0x0, 0x0, 0x0}, 0x1ff}], 0x1, 0x1022, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x15, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x5}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x80004}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @sk_reuseport=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = socket$inet_tcp(0x2, 0x1, 0x0) r8 = openat$iommufd(0xffffff9c, &(0x7f0000000000), 0x4001, 0x0) ioctl$IOMMU_TEST_OP_ACCESS_RW(r8, 0x3ba0, &(0x7f00000001c0)={0x48, 0x8, r6, 0x0, 0xd06, 0xe7, &(0x7f0000000b40)="3ac5ef6974cea95d4f89ed4fa67961ea693fb4d1b145807a852e53e36fe61c812d8ccf777b1bcafd162b0eed58eeab0e1c0986d56c4c077d15f172cb6b83a38564e7511f0b93e8dc3c5b34279786ba128d49e944cdea268f44a5ad4ff502b1dcf464321ca7c94c3278aba2fa1d0cc725820c58671fe0bd447739e9935c4b835a37ce32f01384a0c148dcce0fcc36592027455f060b97dcc9ace06111f5038a95785bbaa25a43bd9c8ea7afb5816822e4609f68f927f5cb1d8308f43d1d514800b46798a38d46d2587802e40f43c8469cf761216b1a6df86e3e59e0693082df712601589325dd43", 0x5}) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000180)={'syz_tun\x00'}) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r9 = socket$inet_smc(0x2b, 0x1, 0x0) connect$inet(r9, 0x0, 0x0) syz_emit_ethernet(0x2f4, &(0x7f00000004c0)={@local, @local, @void, {@ipv6={0x86dd, @icmpv6={0x4, 0x6, "26f169", 0x2be, 0x3a, 0x0, @mcast2, @dev={0xfe, 0x80, '\x00', 0x33}, {[@routing={0x3c, 0xe, 0x0, 0x6, 0x0, [@remote, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @empty, @ipv4={'\x00', '\xff\xff', @loopback}, @dev={0xfe, 0x80, '\x00', 0x24}, @loopback, @local]}, @srh={0x32, 0x8, 0x4, 0x4, 0x0, 0x8, 0x70, [@remote, @loopback, @private2={0xfc, 0x2, '\x00', 0x1}, @local]}, @routing={0x2c, 0xc, 0x2, 0x1, 0x0, [@ipv4={'\x00', '\xff\xff', @private=0xa010101}, @empty, @mcast2, @private0, @loopback, @dev={0xfe, 0x80, '\x00', 0x17}]}, @srh={0x32, 0x8, 0x4, 0x4, 0x80, 0x60, 0x1, [@local, @remote, @mcast1, @empty]}, @srh={0x5c, 0x8, 0x4, 0x4, 0x8d, 0x10, 0x6dc8, [@private2={0xfc, 0x2, '\x00', 0x1}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @mcast1, @mcast2]}, @hopopts={0x67, 0x3, '\x00', [@hao={0xc9, 0x10, @remote}, @pad1, @jumbo={0xc2, 0x4, 0x80}, @enc_lim={0x4, 0x1, 0x7f}]}], @echo_reply={0x81, 0x0, 0x0, 0x49, 0x4, "60ef5c4c15be7e5a49bf5871fb7ec982b97b712b9dad8cf4ccb3a3b643a2a87fa20414b2ad5dde4c5a2c365e20f23cc6653fce0aa7fd84db1727cde1f3d05ff5d8b367b5d38216028b8100958e6e3f4edbbb76dc1235d0a301ebd35dd0ee86a562d7e1f8c845688ce82fb1d8a78fb8fb9a52ec985c452212eb8878a766612e4d6e4605cdb025dadeb4b4bc9eea01b1cbbd3264264348535ae98e96db31248b1118829c604da6e43f04b541e47379440baba2d4801dfd22583c829dd46d45330b3309e0706f48b4160490db2ee34480d14a7c871b98b1"}}}}}}, 0x0) 18m19.173032098s ago: executing program 5 (id=622): r0 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) ioctl$KVM_GET_MSR_INDEX_LIST(r0, 0xc004ae02, 0x0) socket$inet6(0xa, 0x3, 0x4) r1 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000100), 0x200, 0x0) ppoll(&(0x7f0000000080)=[{r1, 0x8108}, {r1, 0x441}], 0x2, 0x0, 0x0, 0x0) ioctl$SNDCTL_DSP_SETFMT(r1, 0xc0045005, &(0x7f0000000640)=0x10) mmap$dsp(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x100000b, 0x8012, r1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) connect$unix(r2, 0x0, 0x0) sendmmsg$unix(r2, 0x0, 0x0, 0x0) openat$adsp1(0xffffffffffffff9c, 0x0, 0x0, 0x0) r3 = openat$vmci(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r3, 0x7a7, &(0x7f0000000040)=0x90000) socket$nl_rdma(0x10, 0x3, 0x14) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) preadv2(0xffffffffffffffff, 0x0, 0x0, 0x4b5, 0xffffffff, 0x12) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) r6 = socket$inet_udplite(0x2, 0x2, 0x88) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r7, &(0x7f0000001580)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000580)=@getspdinfo={0x14, 0x25, 0x403, 0x70bd27, 0x25dfdbfe, 0xc9}, 0x14}, 0x1, 0x0, 0x0, 0x8080}, 0x2000402c) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000340)={'bridge0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="440000001300290a000000000000000007000000", @ANYRES32=r8, @ANYBLOB="00000000000000001c001a800800028008000200080000003e120000080002001040e5"], 0x44}}, 0x0) r9 = socket(0x10, 0x3, 0x0) sendmmsg(r9, &(0x7f0000000000), 0x4000000000001f2, 0x0) 18m3.277448716s ago: executing program 54 (id=622): r0 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) ioctl$KVM_GET_MSR_INDEX_LIST(r0, 0xc004ae02, 0x0) socket$inet6(0xa, 0x3, 0x4) r1 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000100), 0x200, 0x0) ppoll(&(0x7f0000000080)=[{r1, 0x8108}, {r1, 0x441}], 0x2, 0x0, 0x0, 0x0) ioctl$SNDCTL_DSP_SETFMT(r1, 0xc0045005, &(0x7f0000000640)=0x10) mmap$dsp(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x100000b, 0x8012, r1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) connect$unix(r2, 0x0, 0x0) sendmmsg$unix(r2, 0x0, 0x0, 0x0) openat$adsp1(0xffffffffffffff9c, 0x0, 0x0, 0x0) r3 = openat$vmci(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r3, 0x7a7, &(0x7f0000000040)=0x90000) socket$nl_rdma(0x10, 0x3, 0x14) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) preadv2(0xffffffffffffffff, 0x0, 0x0, 0x4b5, 0xffffffff, 0x12) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) r6 = socket$inet_udplite(0x2, 0x2, 0x88) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r7, &(0x7f0000001580)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000580)=@getspdinfo={0x14, 0x25, 0x403, 0x70bd27, 0x25dfdbfe, 0xc9}, 0x14}, 0x1, 0x0, 0x0, 0x8080}, 0x2000402c) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000340)={'bridge0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="440000001300290a000000000000000007000000", @ANYRES32=r8, @ANYBLOB="00000000000000001c001a800800028008000200080000003e120000080002001040e5"], 0x44}}, 0x0) r9 = socket(0x10, 0x3, 0x0) sendmmsg(r9, &(0x7f0000000000), 0x4000000000001f2, 0x0) 15m19.820536399s ago: executing program 55 (id=1142): socket$nl_netfilter(0x10, 0x3, 0xc) openat$udambuf(0xffffffffffffff9c, 0x0, 0x2) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) ioctl$TCSBRKP(0xffffffffffffffff, 0x5425, 0x0) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x2080, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x1) ioctl$KVM_HYPERV_EVENTFD(r3, 0x4048aec9, &(0x7f0000000080)={0x3}) r4 = syz_open_procfs(0x0, &(0x7f0000000180)='net/unix\x00') ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x1000}) r5 = syz_open_dev$video4linux(&(0x7f0000000040), 0x5, 0x0) ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(r5, 0xc0305602, &(0x7f00000002c0)={0x0, 0x8, 0x2007, 0x1}) socket$kcm(0x2a, 0x2, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000040)=ANY=[@ANYBLOB="f8000000160004000000000000000000fe880000000000000000000000000001ff0100000000000000000000000000010000000000000082000000002b000000", @ANYRES32=0x0, @ANYRES32], 0xf8}}, 0x0) syz_emit_ethernet(0x6e, &(0x7f0000000040)=ANY=[@ANYBLOB="0180c2000002aaaaaaaaaaaa08004500006000000000002f9078640101000000000024806558000000000000000010000800000086"], 0x0) r6 = socket$kcm(0x10, 0x2, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000040900010073797a30000000009c000000090a010400000000000000000700000308000a40000000000900020073797a30000000000900010073797a3000000000080005400000000d58001280200001800e000100636f6e6e6c696d69740000000c0002800800014000000008200001800e000100636f6e6e6c696d69740000000c00028008000140000000001400017b090001006cdbf80789f3f947dd000280080003"], 0xe4}, 0x1, 0x0, 0x0, 0x8001}, 0x20050840) sendmsg$kcm(r6, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030041000b05d25a806c8c6394f90324fc60100000000a000200053582c137153e3704020180fc5409000c00", 0x33fe0}], 0x1}, 0x0) 14m37.053135889s ago: executing program 8 (id=1176): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000bc0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000300)={@flat=@weak_binder={0x77622a85, 0x100a, 0x8000000000}, @flat=@weak_binder={0x77622a85, 0x1100, 0x3}, @flat=@binder={0x73622a85, 0x0, 0x1}}, &(0x7f0000000200)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000004a40)={0x8, 0x0, &(0x7f0000001140)=[@increfs={0x400c630e, 0x1}], 0x0, 0x0, 0x0}) 14m35.389301551s ago: executing program 8 (id=1242): bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) r0 = getpid() prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r1 = syz_open_dev$MSR(&(0x7f0000000200), 0x0, 0x0) read$msr(r1, &(0x7f0000002700)=""/102392, 0x18ff8) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x101) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f000001b900)=[{{0x0, 0x0, &(0x7f00000018c0)=[{&(0x7f00000000c0)="7ef237d321f8bbc2b5ed81ea08c09d3472426dbab799103d", 0x18}, {&(0x7f0000000400)="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", 0xffc}, {0x0}, {&(0x7f0000000240)="8a898dfdaf089f3d47be", 0xa}, {&(0x7f00000014c0)="6e10710a6749da667844d512ca85c4a7a66055107e257320016fc4912c11f6cab28964672966307ac132246e98bc71766c9e153a7625ffd736994a33318a31b1d60d05e9384f246db2a60f20bbd260efe7d097efb492ce63ef809d7470948c85dc1eefe29d52f7671c7d770225962888fd8a7120280641c8dd3fde99947d58ecdbfec58e8ecf17b1ddf4695d362d76ca913618d71a5a9dabc1db26bd5e5407236415b9", 0xa3}, {0x0}, {0x0}], 0x7, 0x0, 0x0, 0x4001}}, {{0x0, 0x0, &(0x7f000001b8c0)=[{&(0x7f000001b700)="a4347ffd980a71ef84f6f16e61275d3fc6daddb419d88254886df5f07ca1a6918e52af33ce547cd288565c09738538911eaea8d2a4176d361d76ef244cefb441377a7b6c017d3f1dc72cd76e47a1ed25625589eb9fcc27f678160279180c1518a35dd854b3cab0c80d7885489c507556ce3df4a55325e0f59a9a53b66df9372e2aa6afbb47397caed0195271ac2358263ec7f6fe8faae49a5530eb2d8585e99d627450ab7e9f811cd45efb93735c142b172f4664b3b4c5f567fdc1c2c699a0ac853f23afe4abfc4feb4f5a255cf3", 0xce}, {&(0x7f0000000380)="622c38259196a84132551a70e7a251cc3b3af064dc29a6e1d2059301f391771835d74b688e3323704c8e922a4d3011c8703dc58a", 0x34}, {&(0x7f000001b840)="ecd2a99395a09056c7c4a88e512368cef413929f70be25a6850bc4c2c20f370687ce9e3cf43f6e3f7fbde939c312de7e24c65e4b8847bec1f549cfe97d25b65a82faf84d01ad6fd1aae583a5bda99a07fd89d8", 0x53}], 0x3, 0x0, 0x0, 0x4040080}}], 0x2, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x0, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, 0x0, 0x0, 0x4) r4 = syz_open_dev$media(&(0x7f0000000040), 0x7fdffffe, 0x0) ioctl$MEDIA_IOC_REQUEST_ALLOC(r4, 0x80047c05, 0x0) r5 = syz_open_dev$radio(&(0x7f0000000000), 0xffffffffffffffff, 0x2) ioctl$VIDIOC_G_EXT_CTRLS(r5, 0xc0205648, &(0x7f0000000000)={0xf010000, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}) socket$nl_route(0x10, 0x3, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(r6, 0x10e, 0xc, 0x0, 0x0) r7 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$int_in(r7, 0x40000000af01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r7, 0x4008af03, &(0x7f00000016c0)={0x1, 0x0, [{0xd100828e98ba2273, 0xef, &(0x7f00000015c0)=""/239}]}) ioctl$VHOST_SET_FEATURES(r7, 0x4008af00, 0x0) sendmsg$nl_route(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@ipv6_getaddrlabel={0x38, 0x1a, 0x1, 0x70bd26, 0x0, {0x2, 0x0, 0x20}, [@IFAL_LABEL={0x8, 0x2, 0xc}, @IFAL_ADDRESS={0x14, 0x1, @private2}]}, 0x38}, 0x1, 0x0, 0x0, 0x20040050}, 0x0) 14m31.41822145s ago: executing program 56 (id=1222): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sched_setattr(0x0, &(0x7f0000000300)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x50, 0x0, 0x0) openat2$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(blowfish)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5", 0x4) r3 = syz_open_dev$sndctrl(&(0x7f0000000100), 0x0, 0x0) syz_io_uring_setup(0x5f85, 0x0, &(0x7f0000000280), &(0x7f0000000000)) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r3, 0xc1105517, &(0x7f0000000700)={{0x0, 0x1, 0xffffffff, 0xfffffff8, 'syz0\x00', 0x20}, 0x2, 0x2, 0x5, 0x0, 0x0, 0x9, 'syz0\x00', 0x0}) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000400)=[{0x0, 0x0, &(0x7f00000002c0), 0x0, &(0x7f0000000380)=[@op={0x18}], 0x18}], 0x1, 0x8040010) recvmsg(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}], 0x1, 0x0, 0x0, 0xf5000000}, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) syz_open_dev$tty1(0xc, 0x4, 0x4) r4 = syz_open_dev$cec(&(0x7f00000000c0), 0xffffffffffffffff, 0x80243) ioctl$CEC_ADAP_S_LOG_ADDRS(r4, 0xc05c6104, &(0x7f0000000040)={'\x00\f\x00', 0x0, 0x5, 0x2, 0x0, 0xc, "00000000020000000000002100", "00004702", "0052008f", '\x00', ["fdfeffbf84a438dfc5d5c010", "d78cb8b0211a83be12ff0bff", "0000efffffffffffbfff00", "000003cefd70f14003556000"]}) 14m19.719352038s ago: executing program 57 (id=1242): bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) r0 = getpid() prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r1 = syz_open_dev$MSR(&(0x7f0000000200), 0x0, 0x0) read$msr(r1, &(0x7f0000002700)=""/102392, 0x18ff8) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x101) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f000001b900)=[{{0x0, 0x0, &(0x7f00000018c0)=[{&(0x7f00000000c0)="7ef237d321f8bbc2b5ed81ea08c09d3472426dbab799103d", 0x18}, {&(0x7f0000000400)="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", 0xffc}, {0x0}, {&(0x7f0000000240)="8a898dfdaf089f3d47be", 0xa}, {&(0x7f00000014c0)="6e10710a6749da667844d512ca85c4a7a66055107e257320016fc4912c11f6cab28964672966307ac132246e98bc71766c9e153a7625ffd736994a33318a31b1d60d05e9384f246db2a60f20bbd260efe7d097efb492ce63ef809d7470948c85dc1eefe29d52f7671c7d770225962888fd8a7120280641c8dd3fde99947d58ecdbfec58e8ecf17b1ddf4695d362d76ca913618d71a5a9dabc1db26bd5e5407236415b9", 0xa3}, {0x0}, {0x0}], 0x7, 0x0, 0x0, 0x4001}}, {{0x0, 0x0, &(0x7f000001b8c0)=[{&(0x7f000001b700)="a4347ffd980a71ef84f6f16e61275d3fc6daddb419d88254886df5f07ca1a6918e52af33ce547cd288565c09738538911eaea8d2a4176d361d76ef244cefb441377a7b6c017d3f1dc72cd76e47a1ed25625589eb9fcc27f678160279180c1518a35dd854b3cab0c80d7885489c507556ce3df4a55325e0f59a9a53b66df9372e2aa6afbb47397caed0195271ac2358263ec7f6fe8faae49a5530eb2d8585e99d627450ab7e9f811cd45efb93735c142b172f4664b3b4c5f567fdc1c2c699a0ac853f23afe4abfc4feb4f5a255cf3", 0xce}, {&(0x7f0000000380)="622c38259196a84132551a70e7a251cc3b3af064dc29a6e1d2059301f391771835d74b688e3323704c8e922a4d3011c8703dc58a", 0x34}, {&(0x7f000001b840)="ecd2a99395a09056c7c4a88e512368cef413929f70be25a6850bc4c2c20f370687ce9e3cf43f6e3f7fbde939c312de7e24c65e4b8847bec1f549cfe97d25b65a82faf84d01ad6fd1aae583a5bda99a07fd89d8", 0x53}], 0x3, 0x0, 0x0, 0x4040080}}], 0x2, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x0, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, 0x0, 0x0, 0x4) r4 = syz_open_dev$media(&(0x7f0000000040), 0x7fdffffe, 0x0) ioctl$MEDIA_IOC_REQUEST_ALLOC(r4, 0x80047c05, 0x0) r5 = syz_open_dev$radio(&(0x7f0000000000), 0xffffffffffffffff, 0x2) ioctl$VIDIOC_G_EXT_CTRLS(r5, 0xc0205648, &(0x7f0000000000)={0xf010000, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}) socket$nl_route(0x10, 0x3, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(r6, 0x10e, 0xc, 0x0, 0x0) r7 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$int_in(r7, 0x40000000af01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r7, 0x4008af03, &(0x7f00000016c0)={0x1, 0x0, [{0xd100828e98ba2273, 0xef, &(0x7f00000015c0)=""/239}]}) ioctl$VHOST_SET_FEATURES(r7, 0x4008af00, 0x0) sendmsg$nl_route(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@ipv6_getaddrlabel={0x38, 0x1a, 0x1, 0x70bd26, 0x0, {0x2, 0x0, 0x20}, [@IFAL_LABEL={0x8, 0x2, 0xc}, @IFAL_ADDRESS={0x14, 0x1, @private2}]}, 0x38}, 0x1, 0x0, 0x0, 0x20040050}, 0x0) 11m22.56470112s ago: executing program 58 (id=1633): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) getpid() socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) syz_genetlink_get_family_id$batadv(0x0, 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_NEIGHBORS(0xffffffffffffffff, &(0x7f0000004340)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x1c}, 0x1, 0x0, 0x0, 0x4008000}, 0x4000000) r2 = syz_open_dev$vim2m(&(0x7f0000000180), 0x3, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r2, 0xc0405602, 0x0) r3 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/wireless\x00') madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) read$FUSE(r3, &(0x7f0000004380)={0x2020}, 0x2020) r4 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r4, 0x0, 0x0) setsockopt$inet_tcp_int(r4, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) setsockopt$inet_tcp_TCP_CONGESTION(r4, 0x6, 0xd, &(0x7f0000000080)='highspeed', 0x9) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r4, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4) connect$inet(r4, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) sendto$inet(r4, &(0x7f00000007c0)="1c", 0x1, 0x48015, 0x0, 0x0) sendto$inet(r4, &(0x7f00000004c0)='<', 0x381, 0x805, 0x0, 0x0) ioctl$VHOST_SET_OWNER(0xffffffffffffffff, 0xaf01, 0x0) r5 = socket$inet(0x2, 0xa, 0x0) bind$inet(r5, 0x0, 0x0) sendto$inet(r5, 0x0, 0x0, 0x200007fd, 0x0, 0x0) 10m41.859037213s ago: executing program 1 (id=1663): r0 = socket$inet6(0xa, 0x2, 0x0) r1 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000200), r1) r2 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r2, 0x1, 0x0, &(0x7f00000007c0)='{\xe0e%m\"\xbb{\xf4\x01Z\xb7\xf4\x92\xb5\xcb\'\xa3\x0e!\xf1\x88]C\x97\x86\xf9\xa8\xe7;\xdff3\x83\xb1a\xf2j\x90\x10@\x1chOK\x98\xae\xd6>\xbaN\x1d_N\xcbdIP2$\xbc\xc9\x89\xb5\n\x90-i%\xe2\x94\fH\xf1\xed\r\b\x02\x00\x00\x00\xc3Dhx\x04\xd8\x17\xbcP\x8bl\xb2\x03\x18!V\x1b\xcbk\xf8\xd6JE4,\xdf\x96\x80j#\xf9\xd8\x13,\x89\x10\x90:\xec/\xb9T\x9a\x00\x00\x00\x00\x00\x00\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r2, 0x1, &(0x7f0000000b40)='source', &(0x7f0000000040)='c:::\x00', 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) read$msr(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000000300)=""/102400, 0x19000) prctl$PR_SCHED_CORE(0x3e, 0x0, 0x0, 0x0, &(0x7f0000000200)) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4014) r4 = gettid() fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) bpf$BPF_PROG_QUERY(0x10, 0x0, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(0xffffffffffffffff, 0xc0184800, 0x0) fsconfig$FSCONFIG_SET_STRING(r2, 0x1, 0x0, &(0x7f00000002c0)='/\x00\x01\x00H\x98', 0x0) tkill(r4, 0xb) getsockname$packet(r1, &(0x7f0000000440)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=@newlink={0x48, 0x10, 0x437, 0x1, 0x0, {0x0, 0x0, 0x0, r5, 0x308c3, 0xc4a48b7f26be2e0b}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @sit={{0x8}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x8, 0x3, @multicast2}, @IFLA_IPTUN_ENCAP_FLAGS={0x6, 0x10, 0x9}, @IFLA_IPTUN_ENCAP_TYPE={0x6, 0xf, 0x2}]}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x40000}, 0x0) sendmmsg$inet(r0, &(0x7f00000018c0), 0x0, 0x4880) 10m26.303042746s ago: executing program 59 (id=1663): r0 = socket$inet6(0xa, 0x2, 0x0) r1 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000200), r1) r2 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r2, 0x1, 0x0, &(0x7f00000007c0)='{\xe0e%m\"\xbb{\xf4\x01Z\xb7\xf4\x92\xb5\xcb\'\xa3\x0e!\xf1\x88]C\x97\x86\xf9\xa8\xe7;\xdff3\x83\xb1a\xf2j\x90\x10@\x1chOK\x98\xae\xd6>\xbaN\x1d_N\xcbdIP2$\xbc\xc9\x89\xb5\n\x90-i%\xe2\x94\fH\xf1\xed\r\b\x02\x00\x00\x00\xc3Dhx\x04\xd8\x17\xbcP\x8bl\xb2\x03\x18!V\x1b\xcbk\xf8\xd6JE4,\xdf\x96\x80j#\xf9\xd8\x13,\x89\x10\x90:\xec/\xb9T\x9a\x00\x00\x00\x00\x00\x00\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r2, 0x1, &(0x7f0000000b40)='source', &(0x7f0000000040)='c:::\x00', 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) read$msr(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000000300)=""/102400, 0x19000) prctl$PR_SCHED_CORE(0x3e, 0x0, 0x0, 0x0, &(0x7f0000000200)) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4014) r4 = gettid() fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) bpf$BPF_PROG_QUERY(0x10, 0x0, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(0xffffffffffffffff, 0xc0184800, 0x0) fsconfig$FSCONFIG_SET_STRING(r2, 0x1, 0x0, &(0x7f00000002c0)='/\x00\x01\x00H\x98', 0x0) tkill(r4, 0xb) getsockname$packet(r1, &(0x7f0000000440)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=@newlink={0x48, 0x10, 0x437, 0x1, 0x0, {0x0, 0x0, 0x0, r5, 0x308c3, 0xc4a48b7f26be2e0b}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @sit={{0x8}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x8, 0x3, @multicast2}, @IFLA_IPTUN_ENCAP_FLAGS={0x6, 0x10, 0x9}, @IFLA_IPTUN_ENCAP_TYPE={0x6, 0xf, 0x2}]}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x40000}, 0x0) sendmmsg$inet(r0, &(0x7f00000018c0), 0x0, 0x4880) 9m38.350130593s ago: executing program 5 (id=1762): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x1, 0x0, 0x0, &(0x7f0000000040)='GPL\x00'}, 0x94) clock_gettime(0x0, &(0x7f0000000000)) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, 0x0, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000280)=0xc9, 0x4) readv(r0, &(0x7f0000000200)=[{&(0x7f0000001b80)=""/4096, 0x1000}], 0x1) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, 0x0, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000780)={0x44, 0x9, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x1c, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @empty=0xfffffffe}}, @IPSET_ATTR_COMMENT={0xa, 0x1a, 'basic\x00'}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x10000047}, 0x4000084) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) recvmsg(r3, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x4d2f02, 0x0) 9m36.643370678s ago: executing program 5 (id=1859): capget(0x0, &(0x7f00000003c0)={0x9, 0x3, 0x6, 0x4, 0xfffffffd, 0x7fff}) 9m35.962619908s ago: executing program 5 (id=1863): prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) setsockopt$bt_BT_VOICE(0xffffffffffffffff, 0x112, 0x13, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f0000000100), 0x0, 0x0) read$msr(r0, &(0x7f0000001a40)=""/102392, 0x18ff8) r1 = socket$kcm(0xa, 0x2, 0x0) r2 = socket(0x2, 0x80805, 0x0) r3 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r3, 0x0, 0x482, &(0x7f0000000040)={0x84, @loopback, 0x4e20, 0x3, 'wrr\x00', 0x1, 0x2, 0x6a}, 0x2c) syz_open_dev$tty20(0xc, 0x4, 0x1) setsockopt$IP_VS_SO_SET_ADDDEST(r2, 0x0, 0x487, &(0x7f0000000000)={{0x84, @private=0xa010101, 0x4e21, 0x3, 'lc\x00', 0x4, 0x8, 0x77}, {@rand_addr=0x64010102, 0x4e23, 0x2, 0xcd, 0x12d5f, 0x3}}, 0x44) sendmsg$sock(r1, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e22, 0x0, @dev}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) 9m19.861564029s ago: executing program 60 (id=1863): prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) setsockopt$bt_BT_VOICE(0xffffffffffffffff, 0x112, 0x13, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f0000000100), 0x0, 0x0) read$msr(r0, &(0x7f0000001a40)=""/102392, 0x18ff8) r1 = socket$kcm(0xa, 0x2, 0x0) r2 = socket(0x2, 0x80805, 0x0) r3 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r3, 0x0, 0x482, &(0x7f0000000040)={0x84, @loopback, 0x4e20, 0x3, 'wrr\x00', 0x1, 0x2, 0x6a}, 0x2c) syz_open_dev$tty20(0xc, 0x4, 0x1) setsockopt$IP_VS_SO_SET_ADDDEST(r2, 0x0, 0x487, &(0x7f0000000000)={{0x84, @private=0xa010101, 0x4e21, 0x3, 'lc\x00', 0x4, 0x8, 0x77}, {@rand_addr=0x64010102, 0x4e23, 0x2, 0xcd, 0x12d5f, 0x3}}, 0x44) sendmsg$sock(r1, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e22, 0x0, @dev}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) 8m20.732432508s ago: executing program 7 (id=1888): mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file1\x00', 0x94) mount$fuse(0x0, 0x0, 0x0, 0xfc5cd7921c2c19c4, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') r0 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) mkdir(&(0x7f0000000300)='./file0\x00', 0xfffffffffffffffe) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) r2 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000180), 0x28800, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r2, 0xc018937b, &(0x7f0000000140)={{0x1, 0x1, 0xb8, r0}, './file0\x00'}) 8m20.005856004s ago: executing program 7 (id=1958): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000400)=ANY=[@ANYBLOB="1400000010000100f7000000000000000500000a44000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc08000340000000144c0000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a3100000000200003801c0000800c00018006000100d10300000c000440000000000000000114000000110001"], 0xb8}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000018000000000000000000500000a480000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a31000000001c000380180000800c0001c006000100d90300000800"], 0x70}, 0x1, 0x0, 0x0, 0x40008d0}, 0x40) sendmsg$NFT_BATCH(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[], 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x0) close(0x3) 8m19.332296534s ago: executing program 7 (id=1959): socket$can_bcm(0x1d, 0x2, 0x2) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000240)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x1, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x21800, 0x0) r2 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(r2, 0xc100565c, 0x0) socket(0x1d, 0x2, 0x6) sched_setattr(0x0, 0x0, 0x0) r3 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_RX_RING(r3, 0x11b, 0x2, &(0x7f0000000200)=0x20022a, 0x4) openat$sndseq(0xffffffffffffff9c, &(0x7f00000001c0), 0x0) ioctl$EVIOCGEFFECTS(0xffffffffffffffff, 0x80044584, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x6) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r4, 0x10e, 0x2, &(0x7f0000000040)=0x12, 0x4) 8m10.032964052s ago: executing program 7 (id=1977): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r0, 0x0, 0x0) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000200)=0x2, 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f00000000c0)=@gcm_128={{0x304}, "bd88818314ff7d84", "877dab43c700", '\x00', "0100"}, 0x28) syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), r0) shutdown(r0, 0x0) 8m9.331153153s ago: executing program 7 (id=1980): mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file1\x00', 0x94) mount$fuse(0x0, 0x0, 0x0, 0xfc5cd7921c2c19c4, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') r0 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) mkdir(&(0x7f0000000300)='./file0\x00', 0xfffffffffffffffe) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) r2 = openat$autofs(0xffffffffffffff9c, 0x0, 0x28800, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r2, 0xc018937b, &(0x7f0000000140)={{0x1, 0x1, 0xb8, r0}, './file0\x00'}) 8m8.671721265s ago: executing program 7 (id=1984): openat$procfs(0xffffffffffffff9c, &(0x7f0000004400)='/proc/mdstat\x00', 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000000ac0)={0x2, &(0x7f0000000a80)=[{0x20, 0x0, 0x6, 0xfffff00c}, {0x16, 0x3, 0x0, 0x9}]}, 0x10) sendmmsg$inet(r2, &(0x7f0000000480)=[{{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000240)="62c8137e", 0x4}], 0x1}}], 0x1, 0x42) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x50, 0x0, 0x0) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) 7m53.049490625s ago: executing program 61 (id=1984): openat$procfs(0xffffffffffffff9c, &(0x7f0000004400)='/proc/mdstat\x00', 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000000ac0)={0x2, &(0x7f0000000a80)=[{0x20, 0x0, 0x6, 0xfffff00c}, {0x16, 0x3, 0x0, 0x9}]}, 0x10) sendmmsg$inet(r2, &(0x7f0000000480)=[{{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000240)="62c8137e", 0x4}], 0x1}}], 0x1, 0x42) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x50, 0x0, 0x0) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) 7m44.266227745s ago: executing program 0 (id=2034): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x110b, 0x8000000000002}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000280)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x800, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x10000000000) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) mmap$fb(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x13, r2, 0xd8000) r4 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@newlink={0x38, 0x10, 0x503, 0x70bd2d, 0x700, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1000}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gre={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_FWMARK={0x8, 0x14, 0x1292}]}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x800}, 0x2000000) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000100)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x1000}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x4e, 0x0, &(0x7f0000000440)="97713b46fbaa2b1044f2d408ffca802db4d770eb9874f493e0ef367e4bde497c403b450c72ff2417d079bb892435a1e107fa5c0ecd207d9e6f2a209bf148e6bc56955cb53347d1499097488fcad7"}) ioctl$DVB_DEMUX_DMX_EXPBUF(r2, 0xc00c6f3e, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000002c0)={0x44, 0x0, &(0x7f0000000600)=[@reply={0x40406301, {0x2, 0x0, 0x0, 0x0, 0x21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) r5 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) read$FUSE(r5, &(0x7f0000006380)={0x2020}, 0x2020) 7m41.656224724s ago: executing program 0 (id=2038): socketpair$unix(0x1, 0x3, 0x0, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f0000000080), 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x101302, 0x0) r1 = open(&(0x7f0000000400)='./file0\x00', 0x64842, 0x2) pwritev2(r1, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x76200}], 0x1, 0x7c00, 0x0, 0x3) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0x1cb041, 0x9) r3 = dup(r2) sendfile(r3, r1, 0x0, 0x8000fffffffc) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) 7m39.464407456s ago: executing program 0 (id=2045): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000001c0000001c00000003000000010000000000000e020000000000000000000000000000050400000000"], 0x0, 0x37}, 0x28) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000004440)=ANY=[@ANYBLOB="05000000040000000400000007"], 0x48) syz_emit_vhci(&(0x7f0000000740)=ANY=[@ANYRES8=r0, @ANYRES16=r0, @ANYRESOCT], 0xf8) 7m35.755070551s ago: executing program 0 (id=2050): r0 = inotify_init() syz_usb_connect(0x1, 0x2d, &(0x7f0000000340)=ANY=[@ANYBLOB="120100001ddf8208c007121522300000000109021b0001000000010904010001faf40d00090582239f"], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x800000000000) socket$packet(0x11, 0x2, 0x300) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCXONC(r1, 0x4b45, 0x2) socket$packet(0x11, 0x2, 0x300) socket(0x10, 0x3, 0x0) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x6, 0x0) openat$vnet(0xffffffffffffff9c, 0x0, 0x2, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB], &(0x7f00000002c0)='syzkaller\x00', 0xfffffff4, 0x0, 0x0, 0x0, 0x10}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x6, 0xe, 0x0, &(0x7f0000000b80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000040), 0x10}, 0x94) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x5, 0x4, 0xffffffffffffffdd, 0x400000, 0x0, 0xffffffffffffff1b, 0x3c}, 0x0, &(0x7f0000000040)={0x3fc, 0x0, 0x0, 0x1, 0x100, 0x0, 0x80000003}, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 7m34.018359254s ago: executing program 0 (id=2053): r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, &(0x7f0000000140)={0xbf48ce7, "1803c80980000000080000000003000000d600", 0xffffffffffffffff}) r2 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r2, 0xc0285700, &(0x7f0000000200)={0x40000002, "fa02791d2a69a2610f02000000000000001100010000000800", 0xffffffffffffffff}) ioctl$SYNC_IOC_MERGE(r3, 0xc0303e03, &(0x7f0000000080)={"6739a34dd06472f036ebf314e262816800", r1, 0xffffffffffffffff}) r5 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000180), 0x28d00, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r2, 0xc0285700, &(0x7f0000000240)={0x1b, "8a6035ceeae3ecc42317afad010000000000000400", 0xffffffffffffffff}) ioctl$SW_SYNC_IOC_CREATE_FENCE(r5, 0xc0285700, &(0x7f00000004c0)={0x9, "34e6498c270e0000b56a000005000000000000000000000000000100"}) ioctl$SYNC_IOC_MERGE(r4, 0xc0303e03, 0x0) close(r2) ioctl$SYNC_IOC_MERGE(r6, 0xc0303e03, &(0x7f0000000040)={"130fd7f9cec5064e58445f1268334b49000000000059a6b298fe3f6e1c00"}) 7m32.358081286s ago: executing program 0 (id=2056): r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000004400)='/proc/mdstat\x00', 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r5, 0x1, 0x1a, &(0x7f0000000ac0)={0x2, &(0x7f0000000a80)=[{0x20, 0x0, 0x6, 0xfffff00c}, {0x16, 0x3, 0x0, 0x9}]}, 0x10) sendmmsg$inet(r4, &(0x7f0000000480)=[{{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000240)="62c8137e", 0x4}], 0x1}}], 0x1, 0x42) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x50, 0x0, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) socket(0x2b, 0x80801, 0x1) r6 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) socket$netlink(0x10, 0x3, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, 0x0, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_IP(r6, &(0x7f0000000180)={0x3, 0x40, 0xfa02, {{0x6000000, 0x4000, 0xffffffff, @mcast2}, {0xa, 0x0, 0x7, @private1={0xfc, 0x1, '\x00', 0x1}, 0x86}}}, 0x48) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000019580)=ANY=[@ANYBLOB="ac0000000001010400000000000000000a0000003c0001802c00018014000300fe8000000000000000000000000000aa14000400ff0100000000000000000000000000010c00028005000100000000003c0002802c00018014000300fe8000000000000000000000000000aa14000400fe8800000000000000000000000000010c0002800500010000000000080007400000000b180006801400040020010000000000000000000000000001"], 0xac}}, 0x0) sendmsg$nl_generic(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="6002000043000701fefffffffcdbdf25037c00"], 0x260}, 0x1, 0x0, 0x0, 0xc004}, 0xc000) read$FUSE(r0, &(0x7f0000000180)={0x2020}, 0x2024) mount(&(0x7f0000000040)=@nullb, &(0x7f0000000100)='.\x00', &(0x7f0000000200)='qnx6\x00', 0x8000, 0x0) 7m17.079758011s ago: executing program 62 (id=2056): r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000004400)='/proc/mdstat\x00', 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r5, 0x1, 0x1a, &(0x7f0000000ac0)={0x2, &(0x7f0000000a80)=[{0x20, 0x0, 0x6, 0xfffff00c}, {0x16, 0x3, 0x0, 0x9}]}, 0x10) sendmmsg$inet(r4, &(0x7f0000000480)=[{{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000240)="62c8137e", 0x4}], 0x1}}], 0x1, 0x42) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x50, 0x0, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) socket(0x2b, 0x80801, 0x1) r6 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) socket$netlink(0x10, 0x3, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, 0x0, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_IP(r6, &(0x7f0000000180)={0x3, 0x40, 0xfa02, {{0x6000000, 0x4000, 0xffffffff, @mcast2}, {0xa, 0x0, 0x7, @private1={0xfc, 0x1, '\x00', 0x1}, 0x86}}}, 0x48) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000019580)=ANY=[@ANYBLOB="ac0000000001010400000000000000000a0000003c0001802c00018014000300fe8000000000000000000000000000aa14000400ff0100000000000000000000000000010c00028005000100000000003c0002802c00018014000300fe8000000000000000000000000000aa14000400fe8800000000000000000000000000010c0002800500010000000000080007400000000b180006801400040020010000000000000000000000000001"], 0xac}}, 0x0) sendmsg$nl_generic(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="6002000043000701fefffffffcdbdf25037c00"], 0x260}, 0x1, 0x0, 0x0, 0xc004}, 0xc000) read$FUSE(r0, &(0x7f0000000180)={0x2020}, 0x2024) mount(&(0x7f0000000040)=@nullb, &(0x7f0000000100)='.\x00', &(0x7f0000000200)='qnx6\x00', 0x8000, 0x0) 6m31.538303205s ago: executing program 8 (id=2082): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40000c4}, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000080)=@rc={0xa}, 0x80, 0x0}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x24e22}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0x0, 0xffffffff}, 0x0) syz_open_dev$vim2m(0x0, 0x3, 0x2) r2 = socket(0x2, 0x80805, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r2, 0x84, 0x1d, &(0x7f0000000000), &(0x7f0000000040)=0x4) socket$inet6(0xa, 0x3, 0x5) sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0xfffffffe) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f0000000580)=@raw={'raw\x00', 0x8, 0x3, 0x390, 0x1d0, 0x43, 0xa0, 0x1d0, 0x98, 0x2f8, 0x178, 0x178, 0x2f8, 0x178, 0x49, 0x0, {[{{@ip={@loopback, @local, 0x0, 0x0, 'veth0_to_bond\x00', 'geneve1\x00'}, 0x12a, 0x1b0, 0x1d0, 0x0, {0x0, 0x7a010000}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x8, 0x0, 'syz0\x00'}}, @common=@unspec=@helper={{0x48}, {0x0, 'ftp-20000\x00'}}]}, @unspec=@TRACE={0x20}}, {{@uncond, 0x0, 0xe8, 0x128, 0x0, {}, [@common=@unspec=@connbytes={{0x38}, {[{0xb}]}}, @common=@set={{0x40}, {{0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x300]}}}]}, @common=@unspec=@ERROR={0x40, 'ERROR\x00', 0x0, "f1c098b60204ed02d82cf440fef5497b80c206000000116d00"}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x3f0) ioprio_get$uid(0x3, 0x0) r4 = syz_io_uring_setup(0x5c2, &(0x7f00000003c0)={0x0, 0x2, 0x10, 0x4, 0x219}, &(0x7f0000000180)=0x0, &(0x7f0000000580)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000080)=0xfffffff8, 0x0, 0x4) syz_io_uring_submit(r5, r6, &(0x7f00000004c0)=@IORING_OP_TIMEOUT={0xb, 0x49, 0x0, 0x0, 0x4, &(0x7f0000000280)={0x0, 0x989680}, 0x1, 0x40, 0x1}) io_uring_enter(r4, 0x6e2, 0x3900, 0x3, 0x0, 0x0) r7 = socket$inet_sctp(0x2, 0x1, 0x84) sendto$inet(r7, &(0x7f0000000140)='^', 0x34000, 0x0, &(0x7f0000004ff0)={0x2, 0x0, @rand_addr=0xfffffffffffffffe}, 0x10) listen(r7, 0xda90) r8 = accept4(r7, 0x0, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x83, &(0x7f0000000000)=@assoc_value, &(0x7f00000002c0)=0x8) sendto$inet_nvme_of_msg(r8, &(0x7f00000001c0)={@data_h2c={{0x6, 0x2, 0x18, 0x3}, 0x1, 0x8, 0x7ff, 0x7, "103fcafa"}, @val=0x0}, 0x88, 0x0, 0x0, 0x0) 6m22.573482456s ago: executing program 8 (id=2169): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000200)=0x2, 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f00000000c0)=@gcm_128={{0x304}, "bd88818314ff7d84", "877dab43c700", '\x00', "0100"}, 0x28) syz_genetlink_get_family_id$ethtool(0x0, r0) recvfrom$inet6(r0, 0x0, 0x0, 0x40000000, 0x0, 0x0) shutdown(r0, 0x0) 6m21.770530859s ago: executing program 8 (id=2170): socket$nl_netfilter(0x10, 0x3, 0xc) mkdir(&(0x7f0000000000)='./bus\x00', 0x0) chdir(&(0x7f0000000140)='./bus\x00') r0 = open(&(0x7f0000000580)='./bus\x00', 0x84242, 0x1df2a23c5997fa5f) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) write$FUSE_CREATE_OPEN(r0, &(0x7f0000000180)={0xa0, 0x0, 0x0, {{0x4, 0x0, 0x5, 0x7, 0x3, 0x1, {0x400000080001, 0xfd, 0x20ff, 0x8, 0xe, 0xd615, 0x9, 0x3, 0xfffffffc, 0x8000, 0x0, 0x0, 0x0, 0x5, 0x6}}, {0x0, 0x13}}}, 0xa0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000180)={0xa, 0x4e22, 0x0, @loopback}, 0x58) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = socket$igmp6(0xa, 0x3, 0x2) r5 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r5, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000000b00)=@raw={'raw\x00', 0x8, 0x3, 0x490, 0x168, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x3c0, 0xffffffff, 0xffffffff, 0x3c0, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00', {}, {}, 0x0, 0x0, 0x0, 0x5}, 0x0, 0x148, 0x168, 0x0, {}, [@common=@unspec=@helper={{0x48}}, @common=@inet=@hashlimit1={{0x58}, {'bond_slave_1\x00', {0x41, 0x1ff, 0x6, 0xb0e2, 0x810001, 0x84e, 0xfffffffb, 0x18, 0x8}, {0x1}}}]}, @unspec=@NOTRACK={0x20}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00'}, 0x0, 0x228, 0x258, 0x0, {}, [@common=@ipv6header={{0x28}, {0x20}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0x0, 0x2, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x4f0) sendto$inet6(r3, 0x0, 0x0, 0x24040054, &(0x7f0000000040)={0xa, 0x4e22, 0x2, @empty}, 0x1c) 6m5.48789868s ago: executing program 63 (id=2170): socket$nl_netfilter(0x10, 0x3, 0xc) mkdir(&(0x7f0000000000)='./bus\x00', 0x0) chdir(&(0x7f0000000140)='./bus\x00') r0 = open(&(0x7f0000000580)='./bus\x00', 0x84242, 0x1df2a23c5997fa5f) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) write$FUSE_CREATE_OPEN(r0, &(0x7f0000000180)={0xa0, 0x0, 0x0, {{0x4, 0x0, 0x5, 0x7, 0x3, 0x1, {0x400000080001, 0xfd, 0x20ff, 0x8, 0xe, 0xd615, 0x9, 0x3, 0xfffffffc, 0x8000, 0x0, 0x0, 0x0, 0x5, 0x6}}, {0x0, 0x13}}}, 0xa0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000180)={0xa, 0x4e22, 0x0, @loopback}, 0x58) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = socket$igmp6(0xa, 0x3, 0x2) r5 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r5, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000000b00)=@raw={'raw\x00', 0x8, 0x3, 0x490, 0x168, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x3c0, 0xffffffff, 0xffffffff, 0x3c0, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00', {}, {}, 0x0, 0x0, 0x0, 0x5}, 0x0, 0x148, 0x168, 0x0, {}, [@common=@unspec=@helper={{0x48}}, @common=@inet=@hashlimit1={{0x58}, {'bond_slave_1\x00', {0x41, 0x1ff, 0x6, 0xb0e2, 0x810001, 0x84e, 0xfffffffb, 0x18, 0x8}, {0x1}}}]}, @unspec=@NOTRACK={0x20}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00'}, 0x0, 0x228, 0x258, 0x0, {}, [@common=@ipv6header={{0x28}, {0x20}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0x0, 0x2, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x4f0) sendto$inet6(r3, 0x0, 0x0, 0x24040054, &(0x7f0000000040)={0xa, 0x4e22, 0x2, @empty}, 0x1c) 1m11.858569577s ago: executing program 2 (id=2821): capset(&(0x7f0000a31000)={0x20080522}, &(0x7f0000000080)) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSIGACCEPT(r0, 0x5607, 0x16) 1m8.079875283s ago: executing program 2 (id=2823): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x1, 0x0, 0x0, &(0x7f0000000040)='GPL\x00'}, 0x94) clock_gettime(0x0, &(0x7f0000000000)) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, 0x0, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000280)=0xc9, 0x4) readv(r0, &(0x7f0000000200)=[{&(0x7f0000001b80)=""/4096, 0x1000}], 0x1) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="500000000206030000000000000000000d0000000c000300686173683a69700005000400000000000900020073797a31000000000c000780080008400000005d05000500020000000500010006"], 0x50}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000780)={0x38, 0x9, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x10, 0x7, 0x0, 0x1, [@IPSET_ATTR_COMMENT={0xa, 0x1a, 'basic\x00'}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x10000047}, 0x4000084) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) recvmsg(r3, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x4d2f02, 0x0) 1m6.61698176s ago: executing program 2 (id=2827): socket$unix(0x1, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) r3 = socket$phonet_pipe(0x23, 0x5, 0x2) setsockopt$sock_int(r3, 0x1, 0xa, &(0x7f0000000080)=0x4, 0x4) ioctl$sock_SIOCINQ(r3, 0x541b, &(0x7f0000000100)) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000140)={'pim6reg1\x00', @link_local}) socketpair$unix(0x1, 0x3, 0x0, 0x0) openat$binfmt(0xffffffffffffff9c, 0x0, 0x42, 0x1ff) prctl$PR_SET_IO_FLUSHER(0x43, 0xfffffffffffffffd) r4 = memfd_create(&(0x7f0000000400)='\xa3\x9fn\xb4dR\x04i5\x02\xac\xce\xe1\x88\x9d[@8\xd7\xce\x1f 9I\x7f\x15\x1d\x93=\xb5\xe7\\\'L\xe6\xd2\x8e\xbc)JtTDq\x81\xcf\x81\xba\xe51\xf5 \xc8\x10>\xc9\\\x85\x17L\xbf\xcf\x91\xdfM\xf3\x02^T*\x00\x02\xb9~B\x9f\xacl\x1d3\x06o\xf8\x16H\xaa*\x02\xf7\xfb\x06\xf1\x83\x92\xa8\xc2\xcb\xae\xb0\xb4\x93\xb8\x04\xf1\x99\xc2yY+\xd9y\x8a\xd5b\xe8\"q\x1b0)\xccm\xacz\xc1\xadd\x9b6a\xf3\xdds\xbb\x88\xff\b\x85\xb3s\x00\x0e\xbcfvi\x85\xfc.|\xd4h\xec\x82o\x8e\x93\x11\xc1\xd4\xae\x05\x17=\xd9R\xd0\xd4\x90\xcf\x9b\xdc\xaeV\x88\x94\x9f\xe3\xefqi\xed\xa8w\xbe\xd0\xd0-tBl\x9e+\xd3\xed\xce\x9f\x83\x86\xf9\x12\x16Ts\x80\x13]C\xfb`\xc2`\xf7\x1a\x00\x00\x00\x00\x00\x00\x00k\xae\xcb\x1a.\xc2\x8f\xd1x4]PZ\x9e\xd5Y\xf0L\xa4\xbc\x84\xf6\x04L\xff0\x8b\\*\xf9,\xb6\r\x97\xedy\xe0\x8a\xe2\x8ck\xc6S\xc3g\xb9\x1a\xf8\x8f \x9d\x00u7\xd8\'\xf1E\xa4(Q\x80Fy\xb5\xe4q\xc9\xff \xd8\x9d\xad\x11\xf8m\xd3\xbc\x9e\x10D\x7f!\xca\x0ev\x15h$\x01\xdd\xe5\xce\xf8*\xb3\x01\x85\a\xe4qv&\x9c\xac\x9aN~o\xe5\x89\xd5\a\x9f\f\x1f\xc2e/\x8d\x1e\n\xd0_\xbd!^\xa46\xb8j\xc0x\n\xdb\xe1\xa3\xd6\xae;\r\x92@\xa5I\x88Z1F\xf0\x1at\t\xd0\x8a\x04m\x06\xf3BL\xffS\x9eY\xf4\xb0U \xf8\xd00\x88y\xebX\x92\xd5\xbb\xa1h7\xf3\xe0\x0f\xbd\x02\xe4%\xf9\xb1\x87\x8aM\xfeG\xb2L\xbd\x92-\xcd\x1f\xf4\xe1,\xb7G|\xec\"\xa2\xab\xf6\x84\xe0\xcf1\x9a', 0x0) execveat(r4, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) mremap(&(0x7f000054e000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f000022c000/0x3000)=nil) r5 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$SNDCTL_DSP_RESET(r5, 0x80044dff, 0x1000000000000) r6 = socket(0xa, 0x5, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r6, 0x84, 0x64, &(0x7f0000000080)=[@in6={0xa, 0x4e24, 0xf1, @loopback, 0x19f49a9}], 0x1c) r7 = openat$cuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) read$FUSE(r7, &(0x7f0000005e40)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_ATTR(r7, &(0x7f0000005340)={0x78, 0x0, r8, {0x2000000007, 0x400, 0x0, {0x6, 0xfffe000000000000, 0xfffffffffffffffb, 0xff, 0x694, 0x3, 0x7f, 0x9, 0x800, 0x2000, 0x2, r9, r10, 0xb, 0x8, 0x1000000}}}, 0x78) sendmsg$inet_sctp(r6, &(0x7f00000000c0)={&(0x7f0000000000)=@in6={0xa, 0x4e24, 0xff, @loopback, 0x5}, 0x1c, &(0x7f0000000040)=[{&(0x7f0000000100)="e6", 0xffe0}], 0x1, &(0x7f0000000140)=[@dstaddrv4={0x18, 0x84, 0x7, @local}, @dstaddrv6={0x20, 0x84, 0x8, @rand_addr=' \x01\x00'}, @dstaddrv6={0x20, 0x84, 0x8, @ipv4={'\x00', '\xff\xff', @private=0xa010100}}], 0x58, 0x4855}, 0x24000052) 1m0.531174856s ago: executing program 2 (id=2841): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a8000000850000000f00000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x1f, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x3, 0x3, 0x0, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0xa, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x95ce}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x26, 0x0, 0x0) 59.40683175s ago: executing program 2 (id=2846): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r0) msgrcv(0x0, 0x0, 0x0, 0x5, 0x4c00) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) sched_setaffinity(0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) flistxattr(0xffffffffffffffff, 0x0, 0x0) sendmsg$NL80211_CMD_GET_WOWLAN(r0, &(0x7f0000000e00)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000440)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010300000000000000000500"], 0x30}, 0x1, 0x0, 0x0, 0x40}, 0x0) 57.303663087s ago: executing program 2 (id=2851): r0 = syz_io_uring_setup(0x2d64, &(0x7f0000000100)={0x0, 0x100577, 0x2, 0x0, 0x42}, &(0x7f0000000400), 0x0) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r0, 0x2, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0}, 0x20) connect$can_bcm(0xffffffffffffffff, 0x0, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000180)=@gettclass={0x24, 0x2a, 0x20, 0x70bd27, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0x7ff8, 0xe}, {0xd, 0xb}, {0xb, 0x10}}}, 0x24}, 0x1, 0x0, 0x0, 0x810}, 0x0) r2 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000180), 0xc00, 0x0) read$rfkill(r2, 0x0, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) io_uring_register$IORING_REGISTER_SYNC_CANCEL(r0, 0x18, &(0x7f00000000c0)={0x4, r0, 0xf, {0x100, 0x1}, 0x8}, 0x1) r4 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) r5 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$PPPIOCSMRU(r5, 0x40047452, &(0x7f0000000680)=0x9) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r4, 0xc01864c6, &(0x7f00000003c0)={0x0, 0x0, 0x80800, 0x0, 0xffffffffffffffff}) r7 = dup3(r6, r4, 0x80000) r8 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r7, 0xc04064a0, &(0x7f00000005c0)={&(0x7f0000000480)=[0x0, 0x0, 0x0], &(0x7f0000000500), &(0x7f0000000500), &(0x7f0000000540)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x3, 0x0, 0x0, 0x9}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r7, 0xc05064a7, &(0x7f0000000600)={&(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000240)=[{}], &(0x7f0000000340)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000440)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x1, 0x5, 0x7}) ioctl$UI_END_FF_ERASE(r8, 0x400c55cb, &(0x7f0000000040)={0x4, 0x4, 0x1ff}) ioctl$DRM_IOCTL_SET_MASTER(r7, 0x641e) 41.679923444s ago: executing program 64 (id=2851): r0 = syz_io_uring_setup(0x2d64, &(0x7f0000000100)={0x0, 0x100577, 0x2, 0x0, 0x42}, &(0x7f0000000400), 0x0) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r0, 0x2, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0}, 0x20) connect$can_bcm(0xffffffffffffffff, 0x0, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000180)=@gettclass={0x24, 0x2a, 0x20, 0x70bd27, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0x7ff8, 0xe}, {0xd, 0xb}, {0xb, 0x10}}}, 0x24}, 0x1, 0x0, 0x0, 0x810}, 0x0) r2 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000180), 0xc00, 0x0) read$rfkill(r2, 0x0, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) io_uring_register$IORING_REGISTER_SYNC_CANCEL(r0, 0x18, &(0x7f00000000c0)={0x4, r0, 0xf, {0x100, 0x1}, 0x8}, 0x1) r4 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) r5 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$PPPIOCSMRU(r5, 0x40047452, &(0x7f0000000680)=0x9) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r4, 0xc01864c6, &(0x7f00000003c0)={0x0, 0x0, 0x80800, 0x0, 0xffffffffffffffff}) r7 = dup3(r6, r4, 0x80000) r8 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r7, 0xc04064a0, &(0x7f00000005c0)={&(0x7f0000000480)=[0x0, 0x0, 0x0], &(0x7f0000000500), &(0x7f0000000500), &(0x7f0000000540)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x3, 0x0, 0x0, 0x9}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r7, 0xc05064a7, &(0x7f0000000600)={&(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000240)=[{}], &(0x7f0000000340)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000440)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x1, 0x5, 0x7}) ioctl$UI_END_FF_ERASE(r8, 0x400c55cb, &(0x7f0000000040)={0x4, 0x4, 0x1ff}) ioctl$DRM_IOCTL_SET_MASTER(r7, 0x641e) 21.705388436s ago: executing program 4 (id=2916): openat$dir(0xffffffffffffff9c, 0x0, 0x400000, 0x120) r0 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_PORT_GET(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)={0x14, r0, 0x1, 0x70bd26, 0x4000, {0x49}}, 0x14}, 0x1, 0x0, 0x0, 0x25}, 0x24004000) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) openat(0xffffffffffffff9c, 0x0, 0x141242, 0x1) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='cgroup.controllers\x00', 0x275a, 0x0) close(r3) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r4, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000a80)={r5, &(0x7f0000000940), &(0x7f0000000a40)=@tcp6=r4}, 0x20) connect$unix(r3, &(0x7f0000000940)=@file={0x0, './file0\x00'}, 0x6e) ioctl$sock_SIOCINQ(r3, 0x541b, &(0x7f0000000040)) openat$binfmt(0xffffffffffffff9c, 0x0, 0x42, 0x1ff) 20.272745926s ago: executing program 3 (id=2918): r0 = socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$netlink(r0, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f00000008c0)={0xd8, 0x13, 0x1, 0x0, 0x0, "", [@nested={0xc8, 0x54, 0x0, 0x1, [@nested={0xc2, 0xa0, 0x0, 0x1, [@generic="7a0ac24fa46f8d1d9fbc6b766f1d4d09ee0cf6900151e5aec0ccff5ffd5f5d8c1da322c3cf4b61ecf00e3d5508a49a89a32afc542ac0700646237012fa45c94d2b5e8e74c55438bcf1d66ae91d94afaa1ce0ee34df842917e9b3ea7910b44b30f823c3e08903adbcaf85dbbb681543661f6e19309ab79a285bf04e8572fc2c3303fa5f5954c0973d2808191b28f1177271457a02637d2015d3ef8737e071313ecfbf116a7fa741409bf438429736061b99cc10d25109d78eeca493707c52"]}]}]}, 0xd8}], 0x1}, 0x0) 19.569334918s ago: executing program 3 (id=2920): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000340)={0x20, 0xff, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x2, 0x0, 0x93}, 0xe) r1 = syz_io_uring_setup(0x890, &(0x7f0000000140)={0x0, 0x3cfa, 0x0, 0x3, 0x8069}, &(0x7f0000000200)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, 0x0, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r0, 0x0, 0x0, 0x0, {0x3}}) io_uring_enter(r1, 0x47f6, 0x0, 0x2, 0x0, 0x0) sendto$inet6(r0, &(0x7f0000000540)="90b8", 0x2, 0x0, &(0x7f0000000240)={0xa, 0x0, 0x0, @private1, 0x81}, 0x1c) shutdown(r0, 0x1) 18.588507585s ago: executing program 3 (id=2922): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000200)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) syz_usb_control_io(0xffffffffffffffff, &(0x7f00000001c0)={0x2c, &(0x7f0000000100)={0x0, 0x7, 0x2, {0x2, 0xd}}, 0x0, 0x0, 0x0, 0x0}, 0x0) r2 = syz_io_uring_setup(0x497, &(0x7f0000002180)={0x0, 0x787f, 0x100, 0x4, 0x1b0}, &(0x7f00000000c0), &(0x7f0000000280)) r3 = socket(0x2, 0x80805, 0x0) sendmmsg$inet(r3, &(0x7f0000006d40)=[{{&(0x7f0000000100)={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x20040040) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0xc, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r3, 0x84, 0x7b, &(0x7f0000000080)={0x0, 0x3}, 0x8) socket$nl_netfilter(0x10, 0x3, 0xc) io_uring_register$IORING_REGISTER_RESIZE_RINGS(r2, 0x21, &(0x7f0000000140)={0x0, 0xd86e, 0x8000, 0x3, 0x6b, 0x0, r2}, 0x1) 16.308362329s ago: executing program 4 (id=2925): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="64f3a49a2aa20eeb7d00b8000000000f23d80f21f835400000400f23f8f466baf80cb876d28082ef66bafc0cb0b2c4c1f9fa933f490000c4e2b928bc765862e16af20fe6d4f3d973fc0f07670f35", 0x4e}], 0x1, 0x11, 0x0, 0x0) socket$inet6_sctp(0xa, 0x801, 0x84) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r3, 0x400448cb, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="043e1f1b"], 0x22) 15.053202933s ago: executing program 4 (id=2927): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$pppoe(0x18, 0x1, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0xe, 0x2010, r2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0xa, 0x8000, 0x0, 0x9, 0x1, 0xfffffdffffffffff, 0xfa0f, 0xffffffff}, 0x0) mremap(&(0x7f00007f1000/0x4000)=nil, 0x4000, 0x800000, 0x0, &(0x7f0000130000/0x800000)=nil) syz_open_dev$dri(&(0x7f0000000040), 0x1, 0x0) r5 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) r6 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000480)='/proc/timer_list\x00', 0x0, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000850}, 0x24044010) sendmsg$NFT_BATCH(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a3200000000140000001100"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="14000000100001000000000000b890c1a000000a80000000160a01030000000000000000020000000900020073797a30000000000900010073797a30000000005400038008000240000000000800014000000000400003801400010076657468315f746f5f6272696467650014000100776732000000000000000000000000000b00010076657468305f746f5f7465616d00000014000000110001"], 0xa8}}, 0x0) sendmsg$NFT_BATCH(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYBLOB="370000001000010000000000000000000000000a78000000060a0b04000000000000000002000000500004804c00018011000100666c6f775f6f66666c6f616400000000340002800900010073797a30000000000900010073797a30000000000900010073797a30000000000900010073797a32000000000900010073797a300000000008000a7f61d68f0acb6d69001100010000000000000000000300000a"], 0xa0}, 0x1, 0x0, 0x0, 0x2000094}, 0x4000800) openat$sysfs(0xffffffffffffff9c, 0x0, 0xa0502, 0x49) io_setup(0x1, &(0x7f00000016c0)) sendfile(r5, r6, 0x0, 0x20000023896) sendmsg$nl_xfrm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)=@newsa={0x13c, 0x1a, 0x713, 0x0, 0x25dfdbfc, {{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x0, 0xfffc, 0x4e21, 0x18, 0x2, 0x0, 0x20, 0x3b, 0x0, 0xee00}, {@in6=@private1, 0xfe, 0x32}, @in6=@dev={0xfe, 0x80, '\x00', 0x1b}, {0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x543}, {0x4, 0x7fffffffffffffff}, {0xfffffffc}, 0x70bd28, 0x3500, 0xa, 0x4}, [@algo_aead={0x4c, 0x12, {{'rfc4106(gcm(aes))\x00'}, 0x0, 0x60}}]}, 0x13c}, 0x1, 0x0, 0x0, 0x880}, 0x0) connect$pppoe(r1, &(0x7f0000000400)={0x18, 0x0, {0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xa}, 'lo\x00'}}, 0x1e) sendmmsg(r1, &(0x7f00000008c0)=[{{0x0, 0x0, 0x0}}], 0x34000, 0x0) writev(0xffffffffffffffff, &(0x7f00000003c0)=[{0x0}], 0x1) ioctl$XFS_IOC_ATTRLIST_BY_HANDLE(r0, 0x4058587a, &(0x7f0000000240)={{r0, &(0x7f0000000040)='@\x00', 0x40, &(0x7f0000000080)={@_ha_fsid={[0x9]}, {0x3ff, 0xc7, 0x3, 0x3}}, 0x7, &(0x7f00000000c0), 0x0}, {[0x133, 0x2, 0x80, 0x1]}, 0x8, 0xf4, &(0x7f0000000140)=""/244}) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r9, 0x6, 0x14, &(0x7f0000000000)=0x1, 0x4) 9.743563197s ago: executing program 9 (id=2932): syz_open_dev$ptys(0xc, 0x3, 0x0) fcntl$setsig(0xffffffffffffffff, 0xa, 0x21) fcntl$setlease(0xffffffffffffffff, 0x400, 0x1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) recvmmsg(r0, &(0x7f0000000400)=[{{0x0, 0xf5ffffff, 0x0, 0x0, 0x0, 0x4000000}, 0xf5ff}], 0xf00, 0x0, 0x0) setsockopt$sock_int(r0, 0x1, 0x7, &(0x7f00000002c0)=0x400000d7, 0x4) open$dir(0x0, 0x2001, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x183081, 0x0) move_mount(0xffffffffffffffff, &(0x7f0000000100)='./file0\x00', 0xffffffffffffffff, &(0x7f0000000200)='./file0\x00', 0x261) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000000300)={0x52, 0x0, 0x8, {0x0, 0x1}, {0x74, 0x5}, @const={0x0, {0x0, 0x3400, 0x0, 0x5715}}}) r1 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r1, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r1, &(0x7f0000001a40)=[{{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f00000004c0)="ce4d93003d9145488152efd2630fc0ee4de0e44036828055a99cd3464ed2a3a93392ff8cfeb8d060b2b9611a596956fa7f4021b557b8089158bc4c7540dbd9b32cd7dc875b48144c0fd3e1ed9c2bba98d62c9045e5786cb0cfdc587504150af5ab35cb460625698f15e169fc9297d819239617fb99db113ffd6c74c02ad19f40ffc95f4aa53813193f0fe6884a05423819", 0x91}], 0x1, &(0x7f0000000580)}}, {{&(0x7f0000000600)=@ll={0x11, 0x4, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x80, &(0x7f0000000880)=[{0x0}, {&(0x7f0000000800)}], 0x2, &(0x7f0000001c00)}}], 0x2, 0x0) setsockopt$inet_int(r1, 0x0, 0x17, 0x0, 0x0) recvmmsg(r1, &(0x7f00000008c0)=[{{0x0, 0x0, 0x0}, 0x400}], 0x1, 0x45833af92e4b39ff, 0x0) r2 = syz_open_dev$evdev(&(0x7f00000000c0), 0x0, 0x822b01) ioctl$EVIOCSMASK(r2, 0x40104593, &(0x7f0000000080)={0x1, 0xe8, &(0x7f0000000380)="e2868f4aefac7a67561422c516dc175845e997f8169837a09b4366393e640b0e755f45f91f4b30c8c49475cfb6045b3a4886bddc89b17f03b46ca395d2fab9052906ea669df28484652822fb0bb0b395d161aec424718d1e1dcc5adc4cef9363a93024159b6d7e4e0e2d5cc8ab637193f3efe80d0a2fdcd22b8e4e96dffb6bb350d25a82f272ad0ee1237a9a7b0b3f7dc9ca26d2d54cbf2181d2194cc62965a20bba7b1729b8eccd05d4fe3221476a3f84e565bc054a47fb49d34831e0d9515dce4c3b24b6c432e9916d1cdb9cad4672ab05adc0a8b773cba8d6a26d8bbe8f0edf5b43aa258c76fd"}) write$char_usb(r2, &(0x7f0000000040)="e2", 0xff0f) 8.164306354s ago: executing program 9 (id=2934): socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) sched_setattr(0x0, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc1002}]}) pipe2$watch_queue(&(0x7f0000000300), 0x80) openat$sysctl(0xffffffffffffff9c, 0x0, 0x1, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = shmget$private(0x0, 0x800000, 0x880, &(0x7f0000173000/0x800000)=nil) shmctl$IPC_RMID(r0, 0x0) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x20, &(0x7f0000000000)=[0xffffffffffffffff], 0x1) syz_open_procfs(0x0, 0x0) syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000005d0d3087d07aa04d85b0102030109021b000f000000000904000001dbcc7a0009057697"], 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000140)='net/arp\x00') lseek(r1, 0xa3d2, 0x0) 7.836031849s ago: executing program 3 (id=2936): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="64f3a49a2aa20eeb7d00b8000000000f23d80f21f835400000400f23f8f466baf80cb876d28082ef66bafc0cb0b2c4c1f9fa933f490000c4e2b928bc765862e16af20fe6d4f3d973fc0f07670f35", 0x4e}], 0x1, 0x11, 0x0, 0x0) socket$inet6_sctp(0xa, 0x801, 0x84) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r3, 0x400448cb, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="043e1f1b"], 0x22) 6.821674753s ago: executing program 9 (id=2937): r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000400)='memory.current\x00', 0x275a, 0x0) syz_open_dev$MSR(0x0, 0xfffffffffffffffa, 0x0) setsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r0, 0x84, 0x6, 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x222a00, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x18, 0x0, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x2}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r5 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r5}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r6 = open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0x1d2) r7 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000000)='ns/time_for_children\x00') setns(r7, 0x80) fcntl$setlease(r6, 0x400, 0x0) acct(&(0x7f0000000040)='./file0\x00') close_range(r4, 0xffffffffffffffff, 0x0) 6.638887535s ago: executing program 3 (id=2938): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="01000000030000000400000008000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYBLOB], 0x50) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000002c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x34, 0x34, 0x9, [@int={0x0, 0x0, 0x0, 0x1, 0x0, 0x65, 0x0, 0xe, 0x1}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x2, 0x5, 0x9}}, @fwd={0x7}]}, {0x0, [0x61, 0x71, 0x61, 0x0, 0x5f, 0x5f, 0x2e]}}, &(0x7f00000003c0)=""/174, 0x55, 0xae, 0x1, 0x88a}, 0x28) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000480)={0x2, 0x4, 0x8, 0x1, 0x80, r0, 0x0, '\x00', 0x0, r1, 0x0, 0x4, 0x3}, 0x50) 6.473037227s ago: executing program 6 (id=2939): io_uring_register$IORING_REGISTER_RING_FDS(0xffffffffffffffff, 0x13, &(0x7f0000002540), 0x0) 5.973754282s ago: executing program 3 (id=2940): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) bind$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, @any, 0x4, 0x1}, 0xe) getsockopt$bt_BT_RCVMTU(r0, 0x112, 0xd, 0x0, &(0x7f0000000180)) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) clock_adjtime(0x0, &(0x7f0000000100)={0x2, 0x6a, 0x5, 0x8000000000000001, 0x48c, 0x5, 0xd, 0x424, 0x2, 0xffffffffffffffff, 0xf423f, 0xfffffffffffffff9, 0x7, 0x2, 0x1000000081, 0x5, 0x0, 0x5, 0x0, 0x9220000000000000, 0x3, 0x0, 0x80000001, 0x0, 0x5, 0x7}) write$USERIO_CMD_SEND_INTERRUPT(0xffffffffffffffff, 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000037c0)={0x0, 0x0, 0x0}, 0x0) sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) 5.794557592s ago: executing program 6 (id=2941): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="05000000040000009c0000000b"], 0x50) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e0000000400000008"], 0x48) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) r1 = landlock_create_ruleset(&(0x7f00000002c0)={0x7f6e}, 0x18, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r1, 0x1, &(0x7f0000000000)={0x2108, r0}, 0x0) openat$binderfs(0xffffffffffffff9c, 0x0, 0x802, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r3 = syz_io_uring_setup(0x49a, &(0x7f0000000400)={0x0, 0x79af, 0x80, 0x3, 0x400246}, &(0x7f0000000340)=0x0, &(0x7f0000000140)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f00000002c0)=@IORING_OP_MSG_RING={0x28, 0x40, 0x0, r3, 0x0, 0x0, 0x0, 0x2}) unshare(0x20400) r6 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000180)='attr/prev\x00') ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r6, 0x8983, &(0x7f0000000080)={0x0, 'geneve0\x00', {0x20000001}, 0x4}) syz_open_procfs$userns(0xffffffffffffffff, 0x0) renameat2(r6, &(0x7f0000000000)='./file0\x00', r6, &(0x7f0000000040)='./file0\x00', 0x3) sendmsg$NFNL_MSG_CTHELPER_DEL(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)={0x2c, 0x2, 0x9, 0x401, 0x0, 0x0, {0x5, 0x0, 0x3}, [@NFCTH_TUPLE={0x18, 0x2, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @dev={0xac, 0x14, 0x14, 0xc}}, {0x8, 0x2, @loopback}}}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4008091}, 0x20048800) io_uring_enter(r3, 0x4c6e, 0xc67a, 0x8, 0x0, 0x0) landlock_restrict_self(r1, 0x0) landlock_restrict_self(r1, 0x0) mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1/file2\x00', 0x81c0, 0x0) 4.32485694s ago: executing program 6 (id=2942): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="1201000000000040ac054382408b0b00000109022400010000002009040000fd0301000009210000000122010009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000003c0)={0x24, 0x0, 0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="002281"], 0x0}, 0x0) r1 = syz_open_dev$hiddev(&(0x7f00000000c0), 0x0, 0x0) ioctl$HIDIOCGUCODE(r1, 0xc018480d, &(0x7f0000000480)={0x2, 0x200, 0x80000001, 0x4ffe, 0x9, 0x6}) 3.904206516s ago: executing program 4 (id=2943): syz_usb_connect(0x2, 0x36, &(0x7f0000001580)={{0x12, 0x1, 0x0, 0x2, 0x2f, 0xb0, 0x40, 0x4d8, 0xfd08, 0x59b1, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x8, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0xb1, 0x9, 0x2, 0xa, 0x5f, 0x92, 0x40, [], [{{0x9, 0x5, 0x8, 0xa, 0x3ff, 0xf7, 0x7, 0x9}}, {{0x9, 0x5, 0x30932787f67e0187, 0x2, 0x40, 0x2, 0x5}}]}}]}}]}}, 0x0) r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000440), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$F2FS_IOC_GET_FEATURES(r0, 0x4008af14, &(0x7f0000002000)) syz_emit_ethernet(0x46, &(0x7f00000000c0)=ANY=[@ANYBLOB="ffffffff0f3a1ef9aa7ec8705834af967f818c22ffffa76effffffff0800000000380064000000019078ac1e0001ac14142c0534900000000000000000002000fffd0d010001ac14149affffffff003863714ab9904336bc83d0d11c4e99842e2363d1dd7ef5b4fb6d268a017eda0aed13bbc9536906d5a50d96ce11f48d48335b30ec16bb64c987014b330a4a7fd474268daaf1331d8dfaf83ca3e5c8eeba3ddf7a7434aac02c1baf80326cf97f85dc883b4a29b516a615a833a455a4d1ff61241475e8a064c2bcd7488d45edc87be5b2a9fccdcc0ea0dadeb5af50ddd1c1d5384de2d900"/247], 0x0) ioctl$VT_SETMODE(0xffffffffffffffff, 0x5602, &(0x7f0000000080)={0x8e, 0x4, 0xfeff, 0x81, 0x1}) 2.907405584s ago: executing program 6 (id=2944): r0 = openat$ttyprintk(0xffffffffffffff9c, 0x0, 0x1, 0x0) writev(r0, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, 0x0, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000240)={0x6, 0x4, &(0x7f0000010580)=ANY=[@ANYBLOB="18000000080000000000000082acb9506f0000000000000095"], &(0x7f0000000040)='GPL\x00', 0x5, 0x0, 0x0, 0x40f00, 0x6c, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94) r4 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000000c0)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000140)={r3, r5, 0x25, 0x2, @val=@netfilter={0x7}}, 0x20) setsockopt$SO_TIMESTAMP(r2, 0x1, 0x52, 0x0, 0x0) sendto$inet6(r2, 0x0, 0x0, 0x44000, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x15, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x5}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x80004}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @sk_reuseport=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000180)={'syz_tun\x00'}) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x6, 0xc, 0x0, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) connect$inet(0xffffffffffffffff, 0x0, 0x0) syz_emit_ethernet(0x2e4, &(0x7f00000004c0)={@local, @local, @void, {@ipv6={0x86dd, @icmpv6={0x4, 0x6, "26f169", 0x2ae, 0x3a, 0x0, @mcast2, @dev={0xfe, 0x80, '\x00', 0x33}, {[@routing={0x3c, 0xe, 0x0, 0x6, 0x0, [@remote, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @empty, @ipv4={'\x00', '\xff\xff', @loopback}, @dev={0xfe, 0x80, '\x00', 0x24}, @loopback, @local]}, @srh={0x32, 0x6, 0x4, 0x3, 0x0, 0x8, 0x70, [@remote, @loopback, @local]}, @routing={0x2c, 0xc, 0x2, 0x1, 0x0, [@ipv4={'\x00', '\xff\xff', @private=0xa010101}, @empty, @mcast2, @private0, @loopback, @dev={0xfe, 0x80, '\x00', 0x17}]}, @srh={0x32, 0x8, 0x4, 0x4, 0x80, 0x60, 0x1, [@local, @remote, @mcast1, @empty]}, @srh={0x5c, 0x8, 0x4, 0x4, 0x8d, 0x10, 0x6dc8, [@private2={0xfc, 0x2, '\x00', 0x1}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @mcast1, @mcast2]}, @hopopts={0x67, 0x3, '\x00', [@hao={0xc9, 0x10, @remote}, @pad1, @jumbo={0xc2, 0x4, 0x80}, @enc_lim={0x4, 0x1, 0x7f}]}], @echo_reply={0x81, 0x0, 0x0, 0x49, 0x4, "60ef5c4c15be7e5a49bf5871fb7ec982b97b712b9dad8cf4ccb3a3b643a2a87fa20414b2ad5dde4c5a2c365e20f23cc6653fce0aa7fd84db1727cde1f3d05ff5d8b367b5d38216028b8100958e6e3f4edbbb76dc1235d0a301ebd35dd0ee86a562d7e1f8c845688ce82fb1d8a78fb8fb9a52ec985c452212eb8878a766612e4d6e4605cdb025dadeb4b4bc9eea01b1cbbd3264264348535ae98e96db31248b1118829c604da6e43f04b541e47379440baba2d4801dfd22583c829dd46d45330b3309e0706f48b4160490db2ee34480d14a7c871b98b1"}}}}}}, 0x0) 2.009577456s ago: executing program 9 (id=2945): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = syz_io_uring_setup(0x497, &(0x7f0000002180)={0x0, 0x787f, 0x100, 0x4, 0x1b0}, &(0x7f00000000c0)=0x0, &(0x7f0000000280)=0x0) io_uring_register$IORING_REGISTER_RESIZE_RINGS(r1, 0x21, &(0x7f0000000140)={0x0, 0xd86e, 0x8000, 0x3, 0x6b, 0x0, r1}, 0x1) io_uring_register$IORING_REGISTER_PBUF_RING(r1, 0x16, &(0x7f0000000040)={&(0x7f0000003000)={[{0x0, 0x0, 0x3}]}, 0x1, 0x1}, 0x1) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x20, 0x2, r0, 0x0, 0x0, 0x0, 0x200, 0x1, {0x1}}) io_uring_enter(r1, 0x3516, 0x0, 0x0, 0x0, 0x0) 1.953890101s ago: executing program 6 (id=2946): socket$kcm(0x10, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x3) sched_setaffinity(0x0, 0xfffffffffffffdb1, &(0x7f0000000280)=0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000001a40)=""/102392, 0x18ff8) bpf$OBJ_GET_PROG(0x7, 0x0, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000080)={0x1f, 0xffff, 0x2}, 0x6) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01040000000000000000010000000900010073797a310000000054000000030a01020000000000000000010000000900030073797a320000040028000480080002400000000008000140000000051400030076"], 0xe8}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a58000000160a0302000200000000000002000000090002"], 0x80}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a30000000006c000000160a01000000000000000100010000000900010073797a30000000000900020073797a3000000000400003800800014000000000080002400000fbff2b0003801400010067656e6576653000000000000000000014000100776732000000000000000000c6e49c0f5c000000180a0101000b000000000000010000000900020073797a30000000000900010073797a3000000000300003802c000380140001"], 0x110}}, 0x0) 1.467738643s ago: executing program 4 (id=2947): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="64f3a49a2aa20eeb7d00b8000000000f23d80f21f835400000400f23f8f466baf80cb876d28082ef66bafc0cb0b2c4c1f9fa933f490000c4e2b928bc765862e16af20fe6d4f3d973fc0f07670f35", 0x4e}], 0x1, 0x11, 0x0, 0x0) socket$inet6_sctp(0xa, 0x801, 0x84) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r3, 0x400448cb, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="043e1f1b"], 0x22) 803.296905ms ago: executing program 6 (id=2948): mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0xb, 0x59032, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x801) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x200}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x4}) ioctl$UFFDIO_COPY(r0, 0xc028aa03, &(0x7f0000000100)={&(0x7f0000800000/0x800000)=nil, &(0x7f0000339000/0x1000)=nil, 0x800000}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) 803.020064ms ago: executing program 9 (id=2949): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="01000000030000000400000008000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYBLOB], 0x50) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000002c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x34, 0x34, 0x9, [@int={0x0, 0x0, 0x0, 0x1, 0x0, 0x65, 0x0, 0xe, 0x1}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x2, 0x5, 0x9}}, @fwd={0x7}]}, {0x0, [0x61, 0x71, 0x61, 0x0, 0x5f, 0x5f, 0x2e]}}, &(0x7f00000003c0)=""/174, 0x55, 0xae, 0x1, 0x88a}, 0x28) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000480)={0x2, 0x4, 0x8, 0x1, 0x80, r0, 0x0, '\x00', 0x0, r1, 0x0, 0x4, 0x3}, 0x50) 102.726122ms ago: executing program 4 (id=2950): syz_open_dev$usbfs(0x0, 0x76, 0x101341) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, 0x0, &(0x7f0000000340)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r0, 0xfeffff, 0x0, 0x0, 0x0, 0x0, 0xf0}, 0x50) openat$kvm(0x0, 0x0, 0x0, 0x0) r1 = io_uring_setup(0x2e15, &(0x7f00000002c0)={0x0, 0x1, 0x1, 0x1, 0x1be}) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x2, 0x0, &(0x7f0000000140)={0x0, 0x0}) write(r2, &(0x7f0000000000), 0x0) r3 = socket(0x848000000015, 0x805, 0x0) bind$inet6(r3, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x1a}, 0x10}, 0x1c) sendto$inet6(r3, 0x0, 0x0, 0x0, &(0x7f00000003c0)={0xa, 0x0, 0x0, @private2, 0x3ff}, 0x1c) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000000000ea048500"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r4 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r4, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r5 = socket$inet6(0xa, 0x1, 0x8010000000000084) syz_open_dev$usbfs(&(0x7f0000000100), 0x77, 0x101301) bind$inet6(r5, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @empty}, 0x1c) r6 = socket(0x200000000000011, 0x2, 0xd) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f00000000c0)={'syz_tun\x00', 0x0}) bind$packet(r6, &(0x7f0000000080)={0x11, 0x800, r7, 0x1, 0x0, 0x6, @multicast}, 0x14) setsockopt$packet_fanout(r6, 0x107, 0x12, &(0x7f0000000140)={0x0, 0x8000}, 0x4) syz_genetlink_get_family_id$devlink(&(0x7f0000000180), r3) sendmsg$DEVLINK_CMD_RATE_DEL(r6, &(0x7f0000000500)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x34f4abb0713c3e09}, 0xc, &(0x7f00000001c0)={0x0}, 0x1, 0x0, 0x0, 0x4004800}, 0x40001) connect$inet6(r5, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x14}}}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r5, 0x84, 0x9, &(0x7f0000000300)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x0, 0x317, 0x1, 0x34, 0x9}, 0x9c) close_range(r1, 0xffffffffffffffff, 0x0) 0s ago: executing program 9 (id=2951): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="05000000040000009c0000000b"], 0x50) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e0000000400000008"], 0x48) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) r1 = landlock_create_ruleset(&(0x7f00000002c0)={0x7f6e}, 0x18, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r1, 0x1, &(0x7f0000000000)={0x2108, r0}, 0x0) openat$binderfs(0xffffffffffffff9c, 0x0, 0x802, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r3 = syz_io_uring_setup(0x49a, &(0x7f0000000400)={0x0, 0x79af, 0x80, 0x3, 0x400246}, &(0x7f0000000340)=0x0, &(0x7f0000000140)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f00000002c0)=@IORING_OP_MSG_RING={0x28, 0x40, 0x0, r3, 0x0, 0x0, 0x0, 0x2}) unshare(0x20400) r6 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000180)='attr/prev\x00') ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r6, 0x8983, &(0x7f0000000080)={0x0, 'geneve0\x00', {0x20000001}, 0x4}) syz_open_procfs$userns(0xffffffffffffffff, 0x0) renameat2(r6, &(0x7f0000000000)='./file0\x00', r6, &(0x7f0000000040)='./file0\x00', 0x3) sendmsg$NFNL_MSG_CTHELPER_DEL(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)={0x2c, 0x2, 0x9, 0x401, 0x0, 0x0, {0x5, 0x0, 0x3}, [@NFCTH_TUPLE={0x18, 0x2, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @dev={0xac, 0x14, 0x14, 0xc}}, {0x8, 0x2, @loopback}}}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4008091}, 0x20048800) io_uring_enter(r3, 0x4c6e, 0xc67a, 0x8, 0x0, 0x0) landlock_restrict_self(r1, 0x0) landlock_restrict_self(r1, 0x0) mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1/file2\x00', 0x81c0, 0x0) kernel console output (not intermixed with test programs): 1162.810116][T12025] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1163.051166][T12025] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1163.853566][T12025] team0: Port device team_slave_0 added [ 1164.227621][T12025] team0: Port device team_slave_1 added [ 1164.503284][T11955] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1164.795713][ T12] bridge_slave_1: left allmulticast mode [ 1164.802793][ T12] bridge_slave_1: left promiscuous mode [ 1164.820798][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 1164.910252][ T12] bridge_slave_0: left allmulticast mode [ 1164.916039][ T12] bridge_slave_0: left promiscuous mode [ 1164.989268][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 1166.248241][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1166.314889][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1166.364893][ T12] bond0 (unregistering): Released all slaves [ 1166.506401][T11955] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1166.596940][T12025] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1166.604091][T12025] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1166.749998][T12025] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1166.817262][T12025] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1166.824363][T12025] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1166.868842][T12133] fuse: Unknown parameter '0x0000000000000003' [ 1166.949551][T12025] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1167.080777][T11955] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1167.424088][T11955] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1168.265665][T12025] hsr_slave_0: entered promiscuous mode [ 1168.310268][T12025] hsr_slave_1: entered promiscuous mode [ 1168.356921][T12025] debugfs: 'hsr0' already exists in 'hsr' [ 1168.362914][T12025] Cannot create hsr debugfs directory [ 1170.430280][T12146] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1296'. [ 1170.507994][ T12] hsr_slave_0: left promiscuous mode [ 1170.547296][ T12] hsr_slave_1: left promiscuous mode [ 1170.559647][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1170.595842][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1170.619234][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1170.640221][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1170.712041][ T12] veth1_macvtap: left promiscuous mode [ 1170.734923][ T12] veth0_macvtap: left promiscuous mode [ 1170.745184][ T12] veth1_vlan: left promiscuous mode [ 1170.770754][ T12] veth0_vlan: left promiscuous mode [ 1172.101026][ T12] team0 (unregistering): Port device team_slave_1 removed [ 1172.153380][ T12] team0 (unregistering): Port device team_slave_0 removed [ 1172.978274][T12155] bond1: option lacp_rate: mode dependency failed, not supported in mode active-backup(1) [ 1173.016438][T12155] bond1 (unregistering): Released all slaves [ 1173.308773][T12160] fuse: Unknown parameter '0x0000000000000003' [ 1175.801541][T11955] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1177.069914][T12025] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 1177.864176][T12189] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1309'. [ 1177.990820][T12025] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 1178.089597][T11955] 8021q: adding VLAN 0 to HW filter on device team0 [ 1178.468222][T12025] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 1178.530783][T12025] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 1178.610802][ T8614] bridge0: port 1(bridge_slave_0) entered blocking state [ 1178.618436][ T8614] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1178.674346][ T8614] bridge0: port 2(bridge_slave_1) entered blocking state [ 1178.682079][ T8614] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1179.742473][T12201] fuse: Unknown parameter '0x0000000000000003' [ 1181.153745][T12025] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1181.416402][T12025] 8021q: adding VLAN 0 to HW filter on device team0 [ 1181.691239][ T5975] bridge0: port 1(bridge_slave_0) entered blocking state [ 1181.698878][ T5975] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1181.870001][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 1181.877540][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1183.049184][T11955] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1184.043479][T11955] veth0_vlan: entered promiscuous mode [ 1184.212597][T11955] veth1_vlan: entered promiscuous mode [ 1185.172865][T11955] veth0_macvtap: entered promiscuous mode [ 1185.287215][T12025] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1185.376431][T11955] veth1_macvtap: entered promiscuous mode [ 1185.718941][T11955] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1186.002900][T11955] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1186.317168][ T12] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1186.346400][ T12] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1186.355832][ T12] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1186.503117][ T12] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1187.172625][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 1187.179505][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 1188.403122][T12232] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1320'. [ 1188.431758][T12025] veth0_vlan: entered promiscuous mode [ 1189.087393][T12025] veth1_vlan: entered promiscuous mode [ 1189.367720][T12238] fuse: Unknown parameter '0x0000000000000003' [ 1189.674195][T12025] veth0_macvtap: entered promiscuous mode [ 1189.827456][T12025] veth1_macvtap: entered promiscuous mode [ 1190.090351][T12025] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1190.523918][T12025] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1190.658466][ T8613] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1190.676404][ T8613] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1190.763436][ T8613] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1190.797208][ T8613] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1193.079809][T12271] process 'syz.6.1326' launched '/dev/fd/8' with NULL argv: empty string added [ 1195.107426][ T5783] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1195.132934][ T5783] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1195.142404][ T5783] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1195.171016][ T5783] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1195.181595][ T5783] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1197.720164][ T5783] Bluetooth: hci5: command tx timeout [ 1197.730797][T12299] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1329'. [ 1198.901396][T12310] fuse: Unknown parameter '0x0000000000000003' [ 1199.208484][T12281] chnl_net:caif_netlink_parms(): no params data found [ 1199.787015][ T5783] Bluetooth: hci5: command tx timeout [ 1200.206400][ T6391] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1200.510356][ T6391] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1200.935441][ T6391] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1201.162080][ T6391] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1201.400360][ T6394] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1201.462124][ T6394] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1201.797106][ T1138] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1201.858213][ T1138] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1201.885561][ T5783] Bluetooth: hci5: command tx timeout [ 1202.410912][ T6391] bridge_slave_1: left allmulticast mode [ 1202.435521][ T6391] bridge_slave_1: left promiscuous mode [ 1202.465157][ T6391] bridge0: port 2(bridge_slave_1) entered disabled state [ 1202.531997][ T6391] bridge_slave_0: left allmulticast mode [ 1202.591434][ T6391] bridge_slave_0: left promiscuous mode [ 1202.599819][ T6391] bridge0: port 1(bridge_slave_0) entered disabled state [ 1203.863300][ T6391] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1203.882743][T12352] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1338'. [ 1203.954670][ T5783] Bluetooth: hci5: command tx timeout [ 1204.021172][ T6391] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1204.100927][ T6391] bond0 (unregistering): Released all slaves [ 1204.754608][T12367] fuse: Unknown parameter 'fd0x0000000000000003' [ 1204.796538][T12356] bridge0: port 2(bridge_slave_1) entered disabled state [ 1204.806608][T12356] bridge0: port 1(bridge_slave_0) entered disabled state [ 1205.721471][T12356] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1205.843247][T12356] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1207.076428][T12281] bridge0: port 1(bridge_slave_0) entered blocking state [ 1207.084926][T12281] bridge0: port 1(bridge_slave_0) entered disabled state [ 1207.107794][T12281] bridge_slave_0: entered allmulticast mode [ 1207.118152][T12281] bridge_slave_0: entered promiscuous mode [ 1207.294091][ T6391] hsr_slave_0: left promiscuous mode [ 1207.323403][ T6391] hsr_slave_1: left promiscuous mode [ 1207.357548][ T6391] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1207.365498][ T6391] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1207.419247][ T6391] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1207.456940][ T6391] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1207.567295][ T6391] veth1_macvtap: left promiscuous mode [ 1207.573038][ T6391] veth0_macvtap: left promiscuous mode [ 1207.591163][ T6391] veth1_vlan: left promiscuous mode [ 1207.630332][ T6391] veth0_vlan: left promiscuous mode [ 1208.961245][T12406] netlink: 588 bytes leftover after parsing attributes in process `syz.6.1346'. [ 1210.097880][T12415] fuse: Unknown parameter 'fd0x0000000000000003' [ 1210.263523][ T6391] team0 (unregistering): Port device team_slave_1 removed [ 1210.323455][ T6391] team0 (unregistering): Port device team_slave_0 removed [ 1211.404655][T12422] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1352'. [ 1212.201697][T12438] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1354'. [ 1212.270533][T12438] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1354'. [ 1212.294039][T12426] bridge0: port 2(bridge_slave_1) entered disabled state [ 1212.302873][T12426] bridge0: port 1(bridge_slave_0) entered disabled state [ 1212.330040][T12442] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1354'. [ 1212.812208][T12426] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1212.852400][T12426] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1213.574117][ T8613] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1213.637018][ T8613] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1213.694566][T12281] bridge0: port 2(bridge_slave_1) entered blocking state [ 1213.718416][T12281] bridge0: port 2(bridge_slave_1) entered disabled state [ 1213.754620][T12281] bridge_slave_1: entered allmulticast mode [ 1213.813254][T12281] bridge_slave_1: entered promiscuous mode [ 1214.147520][ T8613] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1214.192621][ T8613] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1214.311262][T12281] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1214.427820][T12281] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1214.482632][ T8613] netdevsim netdevsim6 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1214.516440][ T8613] netdevsim netdevsim6 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1214.537422][ T5783] Bluetooth: hci1: unexpected event 0x04 length: 245 > 10 [ 1214.537561][ T5783] Bluetooth: unknown link type 55 [ 1214.550252][ T5783] Bluetooth: hci1: connection err: -111 [ 1214.757258][ T6393] netdevsim netdevsim6 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1214.818330][ T6393] netdevsim netdevsim6 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1215.121080][T12281] team0: Port device team_slave_0 added [ 1215.178459][T12473] fuse: Unknown parameter 'fd0x0000000000000003' [ 1215.324500][T12281] team0: Port device team_slave_1 added [ 1215.721805][T12281] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1215.776759][T12281] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1215.905544][T12281] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1215.944591][T12281] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1215.993830][T12281] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1216.074275][T12281] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1216.175460][T12482] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1364'. [ 1216.637227][T12281] hsr_slave_0: entered promiscuous mode [ 1216.691560][T12281] hsr_slave_1: entered promiscuous mode [ 1216.728168][T12281] debugfs: 'hsr0' already exists in 'hsr' [ 1216.770356][T12281] Cannot create hsr debugfs directory [ 1217.355899][T12503] can-isotp: isotp_sendmsg: can_send_ret -ENETDOWN [ 1217.783939][ T5783] Bluetooth: hci1: unexpected event 0x04 length: 245 > 10 [ 1217.784083][ T5783] Bluetooth: unknown link type 55 [ 1217.798563][ T5783] Bluetooth: hci1: connection err: -111 [ 1218.376001][T12516] netlink: 240 bytes leftover after parsing attributes in process `syz.9.1374'. [ 1219.200580][T12525] netlink: 12 bytes leftover after parsing attributes in process `syz.9.1377'. [ 1219.511750][T12281] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1219.628846][T12281] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1219.740250][T12281] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1219.830518][T12281] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1220.678317][ T5783] Bluetooth: hci1: unexpected event 0x04 length: 245 > 10 [ 1220.678451][ T5783] Bluetooth: unknown link type 55 [ 1220.692474][ T5783] Bluetooth: hci1: connection err: -111 [ 1221.169124][T12281] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1221.334952][T12281] 8021q: adding VLAN 0 to HW filter on device team0 [ 1221.472878][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 1221.480479][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1221.589667][T12560] fuse: Unknown parameter 'group_i00000000000000000000' [ 1222.252338][T12559] bridge0: port 2(bridge_slave_1) entered disabled state [ 1222.261053][T12559] bridge0: port 1(bridge_slave_0) entered disabled state [ 1222.598972][T12578] netlink: 'syz.6.1390': attribute type 10 has an invalid length. [ 1223.025127][T12559] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1223.076746][T10778] usb 1-1: new full-speed USB device number 4 using dummy_hcd [ 1223.152154][T12559] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1223.317339][T10778] usb 1-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 1223.449995][T10778] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1223.527515][T10778] usb 1-1: Product: syz [ 1223.531937][T10778] usb 1-1: Manufacturer: syz [ 1223.548465][T10778] usb 1-1: SerialNumber: syz [ 1223.560423][T10778] usb 1-1: config 0 descriptor?? [ 1223.821101][T10778] usb 1-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 1223.932608][T12574] warning: `syz.6.1390' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 1223.962615][ T8613] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1224.023435][ T8613] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1224.056030][ T8613] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1224.080351][ T8614] bridge0: port 2(bridge_slave_1) entered blocking state [ 1224.088041][ T8614] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1224.155101][ T8613] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1225.418270][T10778] usb 1-1: dvb_usb_v2: will use the device's hardware PID filter (table count: 32) [ 1225.458558][T10778] dvbdev: DVB: registering new adapter (TerraTec NOXON DAB Stick) [ 1225.494921][T10778] usb 1-1: media controller created [ 1225.530641][T10778] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1225.550376][T12604] fuse: Bad value for 'fd' [ 1225.781058][T12611] fuse: Unknown parameter 'group_i00000000000000000000' [ 1226.040215][T10778] i2c i2c-1: Added multiplexed i2c bus 2 [ 1226.046097][T10778] rtl2832 1-0010: Realtek RTL2832 successfully attached [ 1226.117113][T10778] usb 1-1: DVB: registering adapter 1 frontend 0 (Realtek RTL2832 (DVB-T))... [ 1226.126385][T10778] dvbdev: dvb_create_media_entity: media entity 'Realtek RTL2832 (DVB-T)' registered. [ 1226.503553][T12281] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1226.603195][T10778] DVB: Unable to find symbol r820t_attach() [ 1226.774651][T12625] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(6) [ 1226.781479][T12625] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 1226.837918][T12625] vhci_hcd vhci_hcd.0: Device attached [ 1226.930380][T10778] usb 1-1: USB disconnect, device number 4 [ 1227.107791][T12441] usb 33-1: new high-speed USB device number 2 using vhci_hcd [ 1227.185683][T12281] veth0_vlan: entered promiscuous mode [ 1227.279918][T12626] vhci_hcd: connection reset by peer [ 1227.379022][ T6391] vhci_hcd vhci_hcd.0: stop threads [ 1227.386775][ T6391] vhci_hcd vhci_hcd.0: release socket [ 1227.423992][ T6391] vhci_hcd vhci_hcd.0: disconnect device [ 1227.459407][T12281] veth1_vlan: entered promiscuous mode [ 1227.801724][T12281] veth0_macvtap: entered promiscuous mode [ 1227.869205][T12281] veth1_macvtap: entered promiscuous mode [ 1228.816722][T12645] bridge0: port 2(bridge_slave_1) entered disabled state [ 1228.825200][T12645] bridge0: port 1(bridge_slave_0) entered disabled state [ 1228.839710][T12658] fuse: Bad value for 'fd' [ 1229.012581][T12661] fuse: Unknown parameter 'group_i00000000000000000000' [ 1229.416742][T10778] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 1229.602564][T12645] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1229.607368][T10778] usb 1-1: Using ep0 maxpacket: 8 [ 1229.631489][T10778] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 15 [ 1229.663706][T10778] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x76, changing to 0x6 [ 1229.702869][T12645] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1229.716720][T10778] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x6 has invalid wMaxPacketSize 0 [ 1229.785937][T10778] usb 1-1: New USB device found, idVendor=077d, idProduct=04aa, bcdDevice=5b.d8 [ 1229.818313][T10778] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1229.846703][T10778] usb 1-1: Product: syz [ 1229.851102][T10778] usb 1-1: Manufacturer: syz [ 1229.855900][T10778] usb 1-1: SerialNumber: syz [ 1229.909457][T10778] usb 1-1: config 0 descriptor?? [ 1229.986798][T10778] powermate 1-1:0.0: probe with driver powermate failed with error -5 [ 1230.181527][T10778] usb 1-1: USB disconnect, device number 5 [ 1230.546015][ T8614] netdevsim netdevsim9 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1230.585975][ T8614] netdevsim netdevsim9 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1230.648212][ T8614] netdevsim netdevsim9 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1230.677317][ T8614] netdevsim netdevsim9 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1230.721016][T12281] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1230.833774][T12281] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1231.018143][ T6393] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1231.044361][ T6393] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1231.176832][ T6393] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1231.186062][ T6393] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1231.471758][T12682] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(6) [ 1231.478548][T12682] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 1231.557050][T12682] vhci_hcd vhci_hcd.0: Device attached [ 1231.794179][T12683] vhci_hcd: connection closed [ 1231.795404][ T12] vhci_hcd vhci_hcd.0: stop threads [ 1231.821260][ T12] vhci_hcd vhci_hcd.0: release socket [ 1231.858076][ T12] vhci_hcd vhci_hcd.0: disconnect device [ 1232.260198][T12441] vhci_hcd vhci_hcd.0: vhci_device speed not set [ 1232.471508][T12701] fuse: Bad value for 'fd' [ 1232.566410][T12704] fuse: Unknown parameter 'group_id00000000000000000000' [ 1234.107580][T12723] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1428'. [ 1234.182961][T12723] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1235.364387][T12750] fuse: Unknown parameter '0x0000000000000004' [ 1235.412759][T12745] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1435'. [ 1235.424346][T12745] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1435'. [ 1235.434358][T12745] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1435'. [ 1235.444279][T12745] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1435'. [ 1235.453746][T12745] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1435'. [ 1238.330672][ T8613] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1238.376800][ T8613] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1238.433815][T12802] fuse: Unknown parameter '0x0000000000000004' [ 1238.592968][ T6393] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1238.626730][ T6393] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1241.293365][T12838] fuse: Unknown parameter '0x0000000000000004' [ 1242.266852][T12441] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 1242.446814][T12441] usb 3-1: Using ep0 maxpacket: 16 [ 1242.484135][T12441] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1242.505024][T12441] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1242.533048][T12441] usb 3-1: New USB device found, idVendor=05ac, idProduct=029c, bcdDevice= 0.00 [ 1242.575557][T12441] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1242.651440][T12441] usb 3-1: config 0 descriptor?? [ 1243.371703][T12862] netlink: 'syz.2.1463': attribute type 4 has an invalid length. [ 1243.746389][T12861] block device autoloading is deprecated and will be removed. [ 1244.367793][T10778] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 1244.578757][T10778] usb 1-1: config 1 has an invalid interface number: 7 but max is 0 [ 1244.592299][T10778] usb 1-1: config 1 has no interface number 0 [ 1244.606138][T10778] usb 1-1: config 1 interface 7 altsetting 0 has an endpoint descriptor with address 0xDB, changing to 0x8B [ 1244.683494][T10778] usb 1-1: config 1 interface 7 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 64 [ 1244.731175][T10778] usb 1-1: config 1 interface 7 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1244.951002][T10778] usb 1-1: New USB device found, idVendor=1199, idProduct=68a3, bcdDevice= 0.00 [ 1244.977243][T10778] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1245.016108][T10778] usb 1-1: Product: syz [ 1245.085630][T10778] usb 1-1: Manufacturer: syz [ 1245.116291][T10778] usb 1-1: SerialNumber: syz [ 1245.178055][T12871] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 1245.595122][T12871] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 1245.933214][T10778] sierra_net 1-1:1.7 wwan0: register 'sierra_net' at usb-dummy_hcd.0-1, Sierra Wireless USB-to-WWAN Modem, 00:00:00:00:01:07 [ 1246.241290][T12883] fuse: Unknown parameter '0x0000000000000004' [ 1246.526296][T12434] usb 1-1: USB disconnect, device number 6 [ 1246.718328][T12434] sierra_net 1-1:1.7 wwan0: unregister 'sierra_net' usb-dummy_hcd.0-1, Sierra Wireless USB-to-WWAN Modem [ 1247.008067][T12434] sierra_net 1-1:1.7 wwan0 (unregistered): usb_control_msg failed, status -19 [ 1247.897162][T12441] usbhid 3-1:0.0: can't add hid device: -32 [ 1247.925456][T12441] usbhid 3-1:0.0: probe with driver usbhid failed with error -32 [ 1248.610616][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 1248.621399][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 1250.978402][T12919] fuse: Unknown parameter '0x0000000000000004' [ 1252.501451][T12455] usb 3-1: USB disconnect, device number 5 [ 1254.652960][T12962] fuse: Unknown parameter '0x0000000000000004' [ 1254.683251][T12963] capability: warning: `syz.9.1499' uses deprecated v2 capabilities in a way that may be insecure [ 1256.284876][T12975] input: syz0 as /devices/virtual/input/input8 [ 1257.271104][T12975] netlink: 7 bytes leftover after parsing attributes in process `syz.2.1503'. [ 1257.438513][T12975] netlink: 7 bytes leftover after parsing attributes in process `syz.2.1503'. [ 1259.456534][ T5783] Bluetooth: hci2: SCO packet for unknown connection handle 3 [ 1260.510503][T13009] fuse: Bad value for 'fd' [ 1262.912982][ T5783] Bluetooth: hci0: SCO packet for unknown connection handle 3 [ 1262.915878][T13036] bridge0: port 2(bridge_slave_1) entered disabled state [ 1262.922263][ C0] hrtimer: interrupt took 827144 ns [ 1262.930155][T13036] bridge0: port 1(bridge_slave_0) entered disabled state [ 1263.775705][T13036] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1263.908290][T13054] fuse: Bad value for 'fd' [ 1264.027297][T13036] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1266.226906][ T5975] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1266.311126][ T6391] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1266.367689][ T6391] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1266.410663][ T6391] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1269.259401][T13112] fuse: Bad value for 'fd' [ 1271.217006][T13111] Bluetooth: hci0: command 0x0406 tx timeout [ 1272.085460][T13142] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1542'. [ 1275.433876][T13169] fuse: Bad value for 'fd' [ 1277.508629][T13199] fuse: Bad value for 'fd' [ 1277.698411][T13191] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1558'. [ 1279.397733][ T5783] Bluetooth: hci0: SCO packet for unknown connection handle 3 [ 1280.198292][T13221] fuse: Bad value for 'fd' [ 1283.405660][T13240] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1572'. [ 1285.111599][ T5783] Bluetooth: hci1: SCO packet for unknown connection handle 3 [ 1291.201071][ T5783] Bluetooth: hci1: SCO packet for unknown connection handle 3 [ 1297.476885][T12434] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 1297.732851][T12434] usb 3-1: Using ep0 maxpacket: 8 [ 1297.803682][T12434] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 1297.866954][T12434] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 1297.916761][T12434] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1297.976679][T12434] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1298.034587][T12434] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1298.116843][T12434] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1298.418933][T12434] usb 3-1: GET_CAPABILITIES returned 2f [ 1298.437242][T12434] usbtmc 3-1:16.0: can't read capabilities [ 1298.695603][T12434] usb 3-1: USB disconnect, device number 6 [ 1300.831656][T13370] Process accounting resumed [ 1304.452151][T13437] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1627'. [ 1304.497928][T13437] hsr_slave_0: left promiscuous mode [ 1304.542688][T13437] hsr_slave_1: left promiscuous mode [ 1305.721980][T10778] libceph: connect (1)[c::]:6789 error -101 [ 1305.757196][T10778] libceph: mon0 (1)[c::]:6789 connect error [ 1305.853605][T13450] ceph: No mds server is up or the cluster is laggy [ 1306.099204][T10778] libceph: connect (1)[c::]:6789 error -101 [ 1306.105540][T10778] libceph: mon0 (1)[c::]:6789 connect error [ 1307.606373][T13474] macsec1: entered allmulticast mode [ 1307.670628][T13474] macsec0: entered allmulticast mode [ 1310.106571][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 1310.117214][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 1312.932456][T13522] syz.9.1647 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 1319.108302][T13575] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1660'. [ 1319.239888][T13572] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1319.406896][T13580] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1660'. [ 1319.795429][T13574] bond1: (slave veth3): Enslaving as an active interface with an up link [ 1320.112680][T13572] bond1: (slave dummy0): Enslaving as an active interface with an up link [ 1320.380494][T13584] bond1 (unregistering): (slave veth3): Releasing backup interface [ 1320.525629][T13584] bond1 (unregistering): (slave dummy0): Releasing backup interface [ 1320.661340][T13584] bond1 (unregistering): Released all slaves [ 1321.525967][T13593] netlink: 72 bytes leftover after parsing attributes in process `syz.4.1664'. [ 1322.365034][T13600] Bluetooth: hci5: command 0x0406 tx timeout [ 1322.414032][T13600] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1322.430024][T13600] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1322.439274][T13600] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1322.475432][T13600] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1322.497111][ T5783] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1325.187080][T13111] Bluetooth: hci3: command tx timeout [ 1327.246986][ T5783] Bluetooth: hci3: command tx timeout [ 1327.485985][T13599] chnl_net:caif_netlink_parms(): no params data found [ 1329.336948][ T5783] Bluetooth: hci3: command tx timeout [ 1331.386741][ T5783] Bluetooth: hci3: command tx timeout [ 1332.300104][T13599] bridge0: port 1(bridge_slave_0) entered blocking state [ 1332.339970][T13599] bridge0: port 1(bridge_slave_0) entered disabled state [ 1332.375245][T13599] bridge_slave_0: entered allmulticast mode [ 1332.413527][T13599] bridge_slave_0: entered promiscuous mode [ 1332.480009][ T6391] bridge_slave_1: left allmulticast mode [ 1332.485806][ T6391] bridge_slave_1: left promiscuous mode [ 1332.511120][ T6391] bridge0: port 2(bridge_slave_1) entered disabled state [ 1332.559851][ T6391] bridge_slave_0: left allmulticast mode [ 1332.598487][ T6391] bridge_slave_0: left promiscuous mode [ 1332.630810][ T6391] bridge0: port 1(bridge_slave_0) entered disabled state [ 1333.375375][ T6391] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1333.468293][ T6391] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1333.560864][ T6391] bond0 (unregistering): Released all slaves [ 1333.678995][T13599] bridge0: port 2(bridge_slave_1) entered blocking state [ 1333.708568][T13599] bridge0: port 2(bridge_slave_1) entered disabled state [ 1333.742942][T13599] bridge_slave_1: entered allmulticast mode [ 1333.813408][T13599] bridge_slave_1: entered promiscuous mode [ 1334.523738][T13599] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1337.199332][T13599] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1337.729223][T13599] team0: Port device team_slave_0 added [ 1337.848795][ T6391] hsr_slave_0: left promiscuous mode [ 1337.960615][ T6391] hsr_slave_1: left promiscuous mode [ 1338.012618][ T6391] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1338.050843][ T6391] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1339.559344][ T6391] team0 (unregistering): Port device team_slave_1 removed [ 1339.633160][ T6391] team0 (unregistering): Port device team_slave_0 removed [ 1340.254693][T13599] team0: Port device team_slave_1 added [ 1340.624747][T13599] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1340.706700][T13599] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1340.857344][T13599] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1340.967250][T13599] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1340.974413][T13599] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1341.151364][T13599] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1341.701460][T13599] hsr_slave_0: entered promiscuous mode [ 1341.769161][T13599] hsr_slave_1: entered promiscuous mode [ 1341.787210][T13599] debugfs: 'hsr0' already exists in 'hsr' [ 1341.814246][T13599] Cannot create hsr debugfs directory [ 1342.653265][T13723] overlayfs: missing 'workdir' [ 1344.729353][T13738] gtp0: entered promiscuous mode [ 1345.495586][T13599] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 1345.580998][T13599] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 1345.644594][T13599] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 1345.721930][T13599] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 1347.418907][T13599] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1347.610196][T13599] 8021q: adding VLAN 0 to HW filter on device team0 [ 1347.708947][ T6393] bridge0: port 1(bridge_slave_0) entered blocking state [ 1347.716900][ T6393] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1347.834247][ T5975] bridge0: port 2(bridge_slave_1) entered blocking state [ 1347.841860][ T5975] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1349.963750][T13599] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1350.647243][T13599] veth0_vlan: entered promiscuous mode [ 1350.770284][T13599] veth1_vlan: entered promiscuous mode [ 1351.345373][T13599] veth0_macvtap: entered promiscuous mode [ 1351.510941][T13599] veth1_macvtap: entered promiscuous mode [ 1351.845858][T13599] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1351.993005][T13599] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1352.262283][ T6393] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1352.292745][ T6393] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1352.494004][ T6393] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1352.528968][ T6393] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1354.998143][ T5783] Bluetooth: hci1: unexpected event for opcode 0x202f [ 1360.787449][T13887] macsec0: left allmulticast mode [ 1360.985428][ T6391] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1361.036848][ T6391] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1361.213046][ T8614] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1361.260815][ T8614] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1362.955035][T12441] libceph: connect (1)[c::]:6789 error -101 [ 1362.974163][T12441] libceph: mon0 (1)[c::]:6789 connect error [ 1363.007410][T13907] netlink: 'syz.9.1735': attribute type 4 has an invalid length. [ 1363.098854][T13909] ceph: No mds server is up or the cluster is laggy [ 1363.133956][T12441] libceph: connect (1)[c::]:6789 error -101 [ 1363.163149][T12441] libceph: mon0 (1)[c::]:6789 connect error [ 1363.489169][T12441] libceph: connect (1)[c::]:6789 error -101 [ 1363.580194][T12441] libceph: mon0 (1)[c::]:6789 connect error [ 1371.495403][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 1371.516741][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 1378.820198][T13111] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1378.897255][T13111] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1378.908421][T13111] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1379.007806][T13111] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1379.038982][T13111] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1381.174838][T13111] Bluetooth: hci5: command tx timeout [ 1381.254027][T14036] chnl_net:caif_netlink_parms(): no params data found [ 1383.228631][T13111] Bluetooth: hci5: command tx timeout [ 1383.469744][T14036] bridge0: port 1(bridge_slave_0) entered blocking state [ 1383.518425][T14036] bridge0: port 1(bridge_slave_0) entered disabled state [ 1383.671390][T14036] bridge_slave_0: entered allmulticast mode [ 1383.710097][T14036] bridge_slave_0: entered promiscuous mode [ 1383.839127][T14036] bridge0: port 2(bridge_slave_1) entered blocking state [ 1383.910058][T14036] bridge0: port 2(bridge_slave_1) entered disabled state [ 1383.936136][T14036] bridge_slave_1: entered allmulticast mode [ 1383.985065][T14036] bridge_slave_1: entered promiscuous mode [ 1384.499568][T14036] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1384.753866][T14036] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1385.158032][ T8613] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1385.306922][T13111] Bluetooth: hci5: command tx timeout [ 1385.476763][T14036] team0: Port device team_slave_0 added [ 1385.556099][ T8613] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1385.699336][T14036] team0: Port device team_slave_1 added [ 1386.074452][ T8613] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1386.170313][T14036] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1386.207349][T14036] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1386.352170][T14036] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1386.444134][ T8613] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1386.510928][T14036] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1386.526784][T14036] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1386.563524][T14036] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1387.386839][T13111] Bluetooth: hci5: command tx timeout [ 1387.502191][T14036] hsr_slave_0: entered promiscuous mode [ 1387.593999][T14036] hsr_slave_1: entered promiscuous mode [ 1387.636997][T14036] debugfs: 'hsr0' already exists in 'hsr' [ 1387.642955][T14036] Cannot create hsr debugfs directory [ 1387.965384][ T8613] bridge_slave_1: left allmulticast mode [ 1388.000038][ T8613] bridge_slave_1: left promiscuous mode [ 1388.028964][ T8613] bridge0: port 2(bridge_slave_1) entered disabled state [ 1388.082717][ T8613] bridge_slave_0: left allmulticast mode [ 1388.112390][ T8613] bridge_slave_0: left promiscuous mode [ 1388.153780][ T8613] bridge0: port 1(bridge_slave_0) entered disabled state [ 1389.386677][T13111] Bluetooth: hci1: command 0x0406 tx timeout [ 1389.460932][ T8613] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1389.549772][ T8613] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1389.606168][ T8613] bond0 (unregistering): Released all slaves [ 1390.881198][ T8613] hsr_slave_0: left promiscuous mode [ 1390.908195][ T8613] hsr_slave_1: left promiscuous mode [ 1390.941759][ T8613] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1390.973369][ T8613] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1391.067110][ T8613] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1391.126855][ T8613] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1391.295920][ T8613] veth1_macvtap: left promiscuous mode [ 1391.314433][ T8613] veth0_macvtap: left promiscuous mode [ 1391.337973][ T8613] veth1_vlan: left promiscuous mode [ 1391.343533][ T8613] veth0_vlan: left promiscuous mode [ 1393.636764][T13111] Bluetooth: hci2: command 0x0406 tx timeout [ 1395.276882][T14179] netlink: 588 bytes leftover after parsing attributes in process `syz.4.1795'. [ 1395.655579][ T8613] team0 (unregistering): Port device team_slave_1 removed [ 1395.748351][ T8613] team0 (unregistering): Port device team_slave_0 removed [ 1397.699977][T14210] fuse: Unknown parameter '0xffffffffffffffff' [ 1398.167994][T14215] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1805'. [ 1398.412358][T14218] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1805'. [ 1398.476213][T14209] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1399.057400][T13111] Bluetooth: hci2: command 0x0406 tx timeout [ 1399.738391][T14214] bond1: (slave veth5): Enslaving as an active interface with an up link [ 1399.865320][T14209] bond1 (unregistering): (slave veth5): Releasing backup interface [ 1399.956328][T14209] bond1 (unregistering): Released all slaves [ 1400.900738][T14036] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 1401.093161][T14036] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 1401.199039][T14036] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 1401.354848][T14036] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 1402.862153][T14036] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1403.173864][T14036] 8021q: adding VLAN 0 to HW filter on device team0 [ 1403.369185][ T8613] bridge0: port 1(bridge_slave_0) entered blocking state [ 1403.376877][ T8613] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1403.525362][ T8614] bridge0: port 2(bridge_slave_1) entered blocking state [ 1403.533013][ T8614] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1406.562818][T14036] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1406.797111][T14279] fuse: Unknown parameter '0x0000000000000004' [ 1410.628918][T14314] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1820'. [ 1410.827429][T14317] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1820'. [ 1410.956128][T14305] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1410.970117][T14313] netlink: 7 bytes leftover after parsing attributes in process `syz.6.1823'. [ 1411.079420][T14036] veth0_vlan: entered promiscuous mode [ 1411.099821][T14313] netlink: 7 bytes leftover after parsing attributes in process `syz.6.1823'. [ 1411.390279][T14310] bond1: (slave veth3): Enslaving as an active interface with an up link [ 1411.575071][T14320] bond1 (unregistering): (slave veth3): Releasing backup interface [ 1411.668224][T14320] bond1 (unregistering): Released all slaves [ 1412.076130][T14036] veth1_vlan: entered promiscuous mode [ 1412.629754][T14036] veth0_macvtap: entered promiscuous mode [ 1412.761013][T14036] veth1_macvtap: entered promiscuous mode [ 1413.180473][T14036] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1413.426856][T14036] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1413.530438][T14344] fuse: Unknown parameter '0x0000000000000004' [ 1414.377989][T13111] Bluetooth: hci1: command 0x0406 tx timeout [ 1415.232236][ T12] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1415.286776][ T12] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1415.295945][ T12] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1415.975981][ T12] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1419.314743][ T5783] Bluetooth: hci4: command 0x0406 tx timeout [ 1421.881693][T14386] fuse: Unknown parameter '0x0000000000000004' [ 1422.417973][T14391] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1841'. [ 1424.245248][T14420] fuse: Unknown parameter '0x0000000000000004' [ 1424.371078][ T6394] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1424.375725][ T6391] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1424.466044][ T6394] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1424.647700][ T6391] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1425.277476][ T5783] Bluetooth: hci1: command 0x0406 tx timeout [ 1425.414135][T14427] netlink: 12 bytes leftover after parsing attributes in process `syz.9.1853'. [ 1427.655672][T14454] fuse: Unknown parameter 'fd0x0000000000000004' [ 1428.497410][T14464] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1864'. [ 1428.986934][ T5783] Bluetooth: hci1: command 0x0406 tx timeout [ 1429.031243][T12448] IPVS: starting estimator thread 0... [ 1429.146958][T14471] IPVS: using max 336 ests per chain, 16800 per kthread [ 1429.233787][T14474] netlink: 'syz.6.1866': attribute type 12 has an invalid length. [ 1429.233850][T14474] netlink: 'syz.6.1866': attribute type 29 has an invalid length. [ 1429.233899][T14474] netlink: 148 bytes leftover after parsing attributes in process `syz.6.1866'. [ 1432.940115][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 1432.947057][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 1433.798521][T14503] fuse: Unknown parameter 'fd0x0000000000000004' [ 1434.861158][ T5783] Bluetooth: hci0: command 0x0406 tx timeout [ 1436.752054][T14523] netlink: 588 bytes leftover after parsing attributes in process `syz.0.1879'. [ 1442.760199][ T5783] Bluetooth: hci2: command 0x0406 tx timeout [ 1445.710418][T13111] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1445.738969][T13111] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1445.758239][T13111] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1445.791984][T13111] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1445.808008][T13111] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1448.297212][T13111] Bluetooth: hci3: command tx timeout [ 1449.274747][T14584] netlink: 588 bytes leftover after parsing attributes in process `syz.6.1891'. [ 1450.012605][T14574] chnl_net:caif_netlink_parms(): no params data found [ 1450.346654][T13111] Bluetooth: hci3: command tx timeout [ 1451.583163][T14615] raw_sendmsg: syz.6.1898 forgot to set AF_INET. Fix it! [ 1452.426906][T13111] Bluetooth: hci3: command tx timeout [ 1452.598349][T14574] bridge0: port 1(bridge_slave_0) entered blocking state [ 1452.637022][T14574] bridge0: port 1(bridge_slave_0) entered disabled state [ 1452.681688][T14574] bridge_slave_0: entered allmulticast mode [ 1452.757927][T13111] Bluetooth: hci2: command 0x0406 tx timeout [ 1452.881340][T14574] bridge_slave_0: entered promiscuous mode [ 1452.938727][T14574] bridge0: port 2(bridge_slave_1) entered blocking state [ 1452.977525][T14574] bridge0: port 2(bridge_slave_1) entered disabled state [ 1452.985369][T14574] bridge_slave_1: entered allmulticast mode [ 1453.496246][T14574] bridge_slave_1: entered promiscuous mode [ 1455.069895][T13111] Bluetooth: hci3: command tx timeout [ 1456.786336][T14574] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1457.023411][T14574] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1457.645503][T14574] team0: Port device team_slave_0 added [ 1457.656106][T14641] netlink: 588 bytes leftover after parsing attributes in process `syz.9.1904'. [ 1457.719699][T14574] team0: Port device team_slave_1 added [ 1458.237305][T14574] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1458.256973][T14574] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1458.696801][T14574] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1459.088403][T14574] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1459.120919][T14574] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1459.693770][T14574] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1460.412647][T14653] batman_adv: batadv0: Adding interface: geneve2 [ 1460.447184][T14653] batman_adv: batadv0: Interface activated: geneve2 [ 1460.882721][ T12] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1461.237066][ T6391] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1461.246216][ T6391] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1461.645727][ T6391] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1461.818059][T14574] hsr_slave_0: entered promiscuous mode [ 1461.989195][T14574] hsr_slave_1: entered promiscuous mode [ 1462.033634][T14574] debugfs: 'hsr0' already exists in 'hsr' [ 1462.056761][T14574] Cannot create hsr debugfs directory [ 1462.177704][ T6391] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1462.833803][T13111] Bluetooth: hci4: command 0x0406 tx timeout [ 1463.022113][ T6391] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1463.398137][ T6391] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1463.695560][ T6391] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1465.704151][ T6391] bridge_slave_1: left allmulticast mode [ 1465.749978][ T6391] bridge_slave_1: left promiscuous mode [ 1465.757576][ T6391] bridge0: port 2(bridge_slave_1) entered disabled state [ 1465.810499][ T6391] bridge_slave_0: left allmulticast mode [ 1465.827068][ T6391] bridge_slave_0: left promiscuous mode [ 1465.847422][ T6391] bridge0: port 1(bridge_slave_0) entered disabled state [ 1470.638950][ T6391] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1470.787003][ T6391] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1470.846892][ T6391] bond0 (unregistering): Released all slaves [ 1471.979325][T14713] netlink: 588 bytes leftover after parsing attributes in process `syz.0.1916'. [ 1472.890261][ T6391] hsr_slave_0: left promiscuous mode [ 1472.943254][ T6391] hsr_slave_1: left promiscuous mode [ 1472.969718][ T6391] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1472.993289][ T6391] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1473.058332][ T6391] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1473.086660][ T6391] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1473.217353][ T6391] veth1_macvtap: left promiscuous mode [ 1473.244966][ T6391] veth0_macvtap: left promiscuous mode [ 1473.307420][ T6391] veth1_vlan: left promiscuous mode [ 1473.332879][ T6391] veth0_vlan: left promiscuous mode [ 1477.382439][ T6391] team0 (unregistering): Port device team_slave_1 removed [ 1477.518614][ T6391] team0 (unregistering): Port device team_slave_0 removed [ 1478.851529][T14574] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 1478.996198][T14574] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 1479.234699][T14574] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 1479.404693][ T6391] IPVS: stop unused estimator thread 0... [ 1479.448134][T14574] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 1481.882850][T14574] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1482.230014][T14574] 8021q: adding VLAN 0 to HW filter on device team0 [ 1482.358467][ T6391] bridge0: port 1(bridge_slave_0) entered blocking state [ 1482.365852][ T6391] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1482.580078][ T5975] bridge0: port 2(bridge_slave_1) entered blocking state [ 1482.587834][ T5975] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1485.021804][T14791] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1928'. [ 1485.307722][T14782] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1485.834625][T14789] bond1: (slave veth7): Enslaving as an active interface with an up link [ 1486.111341][T14795] bond1: (slave dummy0): Enslaving as an active interface with an up link [ 1486.515495][T14798] bond1 (unregistering): (slave veth7): Releasing backup interface [ 1486.604675][T14798] bond1 (unregistering): (slave dummy0): Releasing backup interface [ 1486.642009][T14806] No control pipe specified [ 1486.654170][T14806] netlink: 4 bytes leftover after parsing attributes in process `syz.9.1930'. [ 1486.840284][T14798] bond1 (unregistering): Released all slaves [ 1487.109030][T14806] hsr_slave_0: left promiscuous mode [ 1487.129997][T14806] hsr_slave_1: left promiscuous mode [ 1487.542477][T14574] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1489.258333][T14828] netlink: 588 bytes leftover after parsing attributes in process `syz.9.1933'. [ 1491.075723][T14574] veth0_vlan: entered promiscuous mode [ 1491.228040][T14574] veth1_vlan: entered promiscuous mode [ 1492.095921][T14574] veth0_macvtap: entered promiscuous mode [ 1492.162761][T14574] veth1_macvtap: entered promiscuous mode [ 1492.736841][T14574] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1492.850592][T14574] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1493.339216][ T6391] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1493.357914][ T6391] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1493.563666][ T6391] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1493.795150][ T6391] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1494.378562][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 1494.393258][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 1496.185816][T14878] fuse: Bad value for 'fd' [ 1501.150152][T14910] netlink: 588 bytes leftover after parsing attributes in process `syz.6.1947'. [ 1501.950309][ T6391] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1501.976908][ T6391] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1502.281058][ T1088] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1502.331764][ T1088] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1503.162523][T14939] fuse: Bad value for 'fd' [ 1503.182368][T14940] fuse: Unknown parameter 'fd0x0000000000000004' [ 1505.235752][T13111] Bluetooth: hci2: command 0x0406 tx timeout [ 1507.569702][T14985] fuse: Bad value for 'fd' [ 1510.146682][T13111] Bluetooth: hci0: command 0x0406 tx timeout [ 1514.234456][T15030] fuse: Unknown parameter '0x0000000000000003' [ 1516.587647][T13111] Bluetooth: hci1: command 0x0406 tx timeout [ 1517.462683][T15071] fuse: Unknown parameter '0x0000000000000003' [ 1520.106727][T13111] Bluetooth: hci4: command 0x0406 tx timeout [ 1522.366721][T15116] fuse: Unknown parameter '0x0000000000000003' [ 1522.884307][T15123] netlink: 244 bytes leftover after parsing attributes in process `syz.0.2004'. [ 1522.941049][T15123] netlink: 244 bytes leftover after parsing attributes in process `syz.0.2004'. [ 1523.167313][T15123] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2004'. [ 1524.906547][T13111] Bluetooth: hci4: command 0x0406 tx timeout [ 1524.927284][T15150] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2010'. [ 1524.988252][T15141] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1525.125483][T15141] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2010'. [ 1525.212099][T15149] bond1: (slave veth5): Enslaving as an active interface with an up link [ 1525.379792][T15152] bond1: (slave dummy0): Enslaving as an active interface with an up link [ 1525.516441][T15141] bond1 (unregistering): (slave veth5): Releasing backup interface [ 1525.561835][T15141] bond1 (unregistering): (slave dummy0): Releasing backup interface [ 1525.591628][T15141] bond1 (unregistering): Released all slaves [ 1525.795428][T15157] netlink: 56 bytes leftover after parsing attributes in process `syz.9.2014'. [ 1526.584231][T15166] netlink: 588 bytes leftover after parsing attributes in process `syz.9.2015'. [ 1527.048868][T15172] fuse: Unknown parameter '0x0000000000000003' [ 1530.026910][T13111] Bluetooth: hci0: command 0x0406 tx timeout [ 1532.237814][ T5783] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1532.254851][ T5783] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1532.265607][ T5783] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1532.290194][ T5783] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1532.302488][ T5783] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1534.332027][T15229] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1534.426986][T13111] Bluetooth: hci5: command tx timeout [ 1535.353989][T15232] bond1: (slave veth7): Enslaving as an active interface with an up link [ 1535.472979][T15236] bond1: (slave dummy0): Enslaving as an active interface with an up link [ 1535.749178][T15240] bond1 (unregistering): (slave veth7): Releasing backup interface [ 1535.790955][T15240] bond1 (unregistering): (slave dummy0): Releasing backup interface [ 1535.872094][T15240] bond1 (unregistering): Released all slaves [ 1536.518243][T13111] Bluetooth: hci5: command tx timeout [ 1536.573933][ T8613] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1536.761125][ T8613] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1537.371423][T15214] chnl_net:caif_netlink_parms(): no params data found [ 1537.479984][T15257] netlink: 588 bytes leftover after parsing attributes in process `syz.4.2029'. [ 1537.954654][ T8613] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1538.542126][ T8613] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1538.586544][T13111] Bluetooth: hci5: command tx timeout [ 1539.482382][ T8613] bridge_slave_1: left allmulticast mode [ 1539.506937][ T8613] bridge_slave_1: left promiscuous mode [ 1539.541889][ T8613] bridge0: port 2(bridge_slave_1) entered disabled state [ 1539.591882][ T8613] bridge_slave_0: left allmulticast mode [ 1539.610239][ T8613] bridge_slave_0: left promiscuous mode [ 1539.667264][ T8613] bridge0: port 1(bridge_slave_0) entered disabled state [ 1540.267241][T13111] Bluetooth: hci2: command 0x0406 tx timeout [ 1540.668107][T13111] Bluetooth: hci5: command tx timeout [ 1541.070506][ T8613] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1541.142151][ T8613] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1541.201542][ T8613] bond0 (unregistering): Released all slaves [ 1542.277361][T15214] bridge0: port 1(bridge_slave_0) entered blocking state [ 1542.284811][T15214] bridge0: port 1(bridge_slave_0) entered disabled state [ 1542.310491][T15214] bridge_slave_0: entered allmulticast mode [ 1542.345449][T15214] bridge_slave_0: entered promiscuous mode [ 1542.484976][T15214] bridge0: port 2(bridge_slave_1) entered blocking state [ 1542.511597][T15214] bridge0: port 2(bridge_slave_1) entered disabled state [ 1542.531059][T15214] bridge_slave_1: entered allmulticast mode [ 1542.578650][T15214] bridge_slave_1: entered promiscuous mode [ 1543.079461][ T8613] hsr_slave_0: left promiscuous mode [ 1543.114459][ T8613] hsr_slave_1: left promiscuous mode [ 1543.145012][ T8613] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1543.183926][ T8613] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1543.242648][ T8613] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1543.251530][ T8613] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1543.419068][ T8613] veth1_macvtap: left promiscuous mode [ 1543.447349][ T8613] veth0_macvtap: left promiscuous mode [ 1543.453107][ T8613] veth1_vlan: left promiscuous mode [ 1543.516849][ T8613] veth0_vlan: left promiscuous mode [ 1547.407953][T13111] Bluetooth: hci0: SCO packet for unknown connection handle 3 [ 1548.286209][ T8613] team0 (unregistering): Port device team_slave_1 removed [ 1548.371098][ T8613] team0 (unregistering): Port device team_slave_0 removed [ 1549.517232][T15214] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1549.610891][T15214] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1550.042828][T15214] team0: Port device team_slave_0 added [ 1550.182121][T15214] team0: Port device team_slave_1 added [ 1550.764711][T15214] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1550.811880][T15214] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1550.944036][T15214] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1551.022467][T15214] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1551.066632][T15214] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1551.137402][T15214] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1551.615011][T15214] hsr_slave_0: entered promiscuous mode [ 1551.665512][T15214] hsr_slave_1: entered promiscuous mode [ 1551.737345][T15214] debugfs: 'hsr0' already exists in 'hsr' [ 1551.743401][T15214] Cannot create hsr debugfs directory [ 1554.543495][T13111] Bluetooth: hci1: SCO packet for unknown connection handle 3 [ 1554.968483][T15366] netlink: 588 bytes leftover after parsing attributes in process `syz.0.2056'. [ 1555.427466][T15379] netlink: 4 bytes leftover after parsing attributes in process `syz.9.2062'. [ 1555.841470][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 1555.856656][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 1558.005477][T15214] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 1558.680861][T13111] Bluetooth: hci4: SCO packet for unknown connection handle 3 [ 1560.647888][T15214] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 1560.854896][T15214] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 1560.999875][T15214] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 1563.128207][T15214] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1563.206917][T15457] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2077'. [ 1563.409691][T15214] 8021q: adding VLAN 0 to HW filter on device team0 [ 1563.673700][ T6391] bridge0: port 1(bridge_slave_0) entered blocking state [ 1563.681424][ T6391] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1565.329398][ T6391] bridge0: port 2(bridge_slave_1) entered blocking state [ 1565.336980][ T6391] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1568.279234][ T5783] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1568.307664][ T5783] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1568.318680][ T5783] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1568.378017][ T5783] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1568.401997][ T5783] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1569.938930][T15214] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1570.402389][T15527] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2092'. [ 1570.511140][ T5783] Bluetooth: hci3: command tx timeout [ 1570.971845][T15526] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1571.218616][T15532] bond1: (slave veth9): Enslaving as an active interface with an up link [ 1571.282292][T15535] bond1 (unregistering): (slave veth9): Releasing backup interface [ 1571.328375][T15535] bond1 (unregistering): Released all slaves [ 1571.385321][T15495] chnl_net:caif_netlink_parms(): no params data found [ 1572.406153][T15214] veth0_vlan: entered promiscuous mode [ 1572.550985][T15214] veth1_vlan: entered promiscuous mode [ 1572.599433][ T5783] Bluetooth: hci3: command tx timeout [ 1573.163414][T15556] overlayfs: failed to clone upperpath [ 1573.414530][ T8613] bridge_slave_1: left allmulticast mode [ 1573.434220][ T8613] bridge_slave_1: left promiscuous mode [ 1573.470687][ T8613] bridge0: port 2(bridge_slave_1) entered disabled state [ 1573.570152][ T8613] bridge_slave_0: left allmulticast mode [ 1573.576001][ T8613] bridge_slave_0: left promiscuous mode [ 1573.630513][ T8613] bridge0: port 1(bridge_slave_0) entered disabled state [ 1574.388165][ T8613] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1574.430322][ T8613] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1574.479398][ T8613] bond0 (unregistering): Released all slaves [ 1574.667290][ T5783] Bluetooth: hci3: command tx timeout [ 1574.762341][T15495] bridge0: port 1(bridge_slave_0) entered blocking state [ 1574.809156][T15495] bridge0: port 1(bridge_slave_0) entered disabled state [ 1574.843814][T15495] bridge_slave_0: entered allmulticast mode [ 1574.907868][T15495] bridge_slave_0: entered promiscuous mode [ 1574.977737][T15495] bridge0: port 2(bridge_slave_1) entered blocking state [ 1574.985264][T15495] bridge0: port 2(bridge_slave_1) entered disabled state [ 1575.032679][T15495] bridge_slave_1: entered allmulticast mode [ 1575.079640][T15495] bridge_slave_1: entered promiscuous mode [ 1575.277320][T15574] netlink: 40 bytes leftover after parsing attributes in process `syz.6.2105'. [ 1575.645204][T15495] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1575.766107][T15214] veth0_macvtap: entered promiscuous mode [ 1575.887177][T15495] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1576.337033][T15495] team0: Port device team_slave_0 added [ 1576.420273][T15214] veth1_macvtap: entered promiscuous mode [ 1576.643979][ T8613] hsr_slave_0: left promiscuous mode [ 1576.705621][ T8613] hsr_slave_1: left promiscuous mode [ 1576.746833][ T5783] Bluetooth: hci3: command tx timeout [ 1576.768641][ T8613] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1578.311152][ T8613] team0 (unregistering): Port device team_slave_1 removed [ 1578.431309][ T8613] team0 (unregistering): Port device team_slave_0 removed [ 1579.437795][T15495] team0: Port device team_slave_1 added [ 1580.241344][T15591] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1580.335116][T15594] bond1: (slave dummy0): Enslaving as an active interface with an up link [ 1580.451525][T15595] bond1 (unregistering): (slave dummy0): Releasing backup interface [ 1580.506939][T15595] bond1 (unregistering): Released all slaves [ 1580.812712][T15495] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1580.844502][T15495] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1580.913962][T15495] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1580.952849][T15495] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1580.976635][T15495] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1581.043796][T15495] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1581.492882][T15214] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1581.772959][T15214] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1581.889051][T15495] hsr_slave_0: entered promiscuous mode [ 1581.920617][T15495] hsr_slave_1: entered promiscuous mode [ 1581.958577][T15495] debugfs: 'hsr0' already exists in 'hsr' [ 1581.964506][T15495] Cannot create hsr debugfs directory [ 1582.162657][ T5975] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1582.207622][ T5975] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1582.515254][ T5975] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1582.623618][ T5975] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1583.714049][T15635] netlink: 16 bytes leftover after parsing attributes in process `syz.9.2114'. [ 1583.926723][T15640] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2116'. [ 1584.631014][T15495] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 1584.711180][T15495] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 1584.808278][T15495] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 1584.902053][T15495] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 1586.637290][T15664] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1586.705591][T15668] bond1: (slave dummy0): Enslaving as an active interface with an up link [ 1586.785444][T15670] bond1 (unregistering): (slave dummy0): Releasing backup interface [ 1586.854120][T15670] bond1 (unregistering): Released all slaves [ 1587.165937][T15495] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1587.257167][T15495] 8021q: adding VLAN 0 to HW filter on device team0 [ 1587.364869][ T1088] bridge0: port 1(bridge_slave_0) entered blocking state [ 1587.372567][ T1088] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1587.426422][ T1088] bridge0: port 2(bridge_slave_1) entered blocking state [ 1587.433934][ T1088] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1590.154054][ T8614] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1590.222850][ T8614] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1590.499246][ T1088] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1590.538611][ T1088] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1590.795236][T15495] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1592.480232][T13111] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1592.490006][T13111] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1592.521620][T13111] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1592.552101][T13111] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1592.575808][T13111] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1593.327215][T15730] netlink: 16 bytes leftover after parsing attributes in process `syz.9.2125'. [ 1594.195046][T15495] veth0_vlan: entered promiscuous mode [ 1594.485172][T15495] veth1_vlan: entered promiscuous mode [ 1594.677996][ T5783] Bluetooth: hci0: command tx timeout [ 1595.218356][T15495] veth0_macvtap: entered promiscuous mode [ 1595.412471][T15719] chnl_net:caif_netlink_parms(): no params data found [ 1595.555993][T15495] veth1_macvtap: entered promiscuous mode [ 1596.206954][ T6394] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1596.464960][ T6394] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1596.702962][ T6394] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1596.754046][ T5783] Bluetooth: hci0: command tx timeout [ 1596.881909][T15495] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1596.965831][ T6394] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1597.205674][T15495] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1597.664860][ T5975] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1597.721931][ T5975] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1597.770830][ T5975] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1597.829632][ T5975] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1598.696260][ T6394] bridge_slave_1: left allmulticast mode [ 1598.829349][ T5783] Bluetooth: hci0: command tx timeout [ 1598.841658][ T6394] bridge_slave_1: left promiscuous mode [ 1598.870143][ T6394] bridge0: port 2(bridge_slave_1) entered disabled state [ 1598.910212][ T6394] bridge_slave_0: left allmulticast mode [ 1598.921512][ T6394] bridge_slave_0: left promiscuous mode [ 1598.928761][ T6394] bridge0: port 1(bridge_slave_0) entered disabled state [ 1600.292462][ T6394] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1600.365301][ T6394] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1600.474479][ T6394] bond0 (unregistering): Released all slaves [ 1600.630413][T15719] bridge0: port 1(bridge_slave_0) entered blocking state [ 1600.672502][T15719] bridge0: port 1(bridge_slave_0) entered disabled state [ 1600.708463][T15719] bridge_slave_0: entered allmulticast mode [ 1600.729264][T15719] bridge_slave_0: entered promiscuous mode [ 1600.823194][T15719] bridge0: port 2(bridge_slave_1) entered blocking state [ 1600.872380][T15719] bridge0: port 2(bridge_slave_1) entered disabled state [ 1600.909475][ T5783] Bluetooth: hci0: command tx timeout [ 1600.930661][T15719] bridge_slave_1: entered allmulticast mode [ 1601.000864][T15719] bridge_slave_1: entered promiscuous mode [ 1602.006513][T15804] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2136'. [ 1602.015695][T15719] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1602.210341][ T6394] hsr_slave_0: left promiscuous mode [ 1602.242370][ T6394] hsr_slave_1: left promiscuous mode [ 1602.272371][ T6394] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1602.304626][ T6394] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1602.342742][ T6394] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1602.377373][ T6394] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1602.477553][ T6394] veth1_macvtap: left promiscuous mode [ 1602.499589][ T6394] veth0_macvtap: left promiscuous mode [ 1602.521870][ T6394] veth1_vlan: left promiscuous mode [ 1602.560474][ T6394] veth0_vlan: left promiscuous mode [ 1604.727987][ T6394] team0 (unregistering): Port device team_slave_1 removed [ 1604.794187][ T6394] team0 (unregistering): Port device team_slave_0 removed [ 1605.745490][T15719] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1606.203178][T15719] team0: Port device team_slave_0 added [ 1606.293099][T15719] team0: Port device team_slave_1 added [ 1606.642556][T15719] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1606.681120][T15719] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1606.774870][T15719] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1606.845448][T15719] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1606.883763][T15719] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1606.948390][T15719] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1607.462282][T15719] hsr_slave_0: entered promiscuous mode [ 1607.535986][T15719] hsr_slave_1: entered promiscuous mode [ 1607.546030][T15719] debugfs: 'hsr0' already exists in 'hsr' [ 1607.553555][T15719] Cannot create hsr debugfs directory [ 1610.192414][T15719] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 1610.290744][T15719] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 1610.356153][T15719] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 1610.455509][T15719] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 1611.161090][ T6394] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1611.216724][ T6394] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1611.521329][ T6394] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1611.560276][ T6394] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1612.175209][T15876] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1612.226874][T15719] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1612.406746][T15719] 8021q: adding VLAN 0 to HW filter on device team0 [ 1612.480929][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 1612.488593][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1612.612623][ T5975] bridge0: port 2(bridge_slave_1) entered blocking state [ 1612.620163][ T5975] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1615.787202][ T5783] Bluetooth: hci2: command 0x0406 tx timeout [ 1616.046191][T15719] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1616.949810][T15719] veth0_vlan: entered promiscuous mode [ 1617.103689][T15719] veth1_vlan: entered promiscuous mode [ 1617.250629][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 1617.257452][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 1617.812746][T15719] veth0_macvtap: entered promiscuous mode [ 1617.973914][T15719] veth1_macvtap: entered promiscuous mode [ 1618.273332][T15719] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1618.520523][T15719] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1618.743146][ T6394] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1618.790748][ T6394] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1618.829590][ T6394] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1619.003989][ T6394] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1620.384974][T15956] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2167'. [ 1620.590998][ T5783] Bluetooth: hci1: command 0x0406 tx timeout [ 1626.398961][ T6393] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1626.445264][ T6393] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1626.507315][ T5783] Bluetooth: hci2: command 0x0406 tx timeout [ 1626.747686][ T6393] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1626.789048][ T6393] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1629.146069][T16026] bridge0: port 2(bridge_slave_1) entered disabled state [ 1629.155186][T16026] bridge0: port 1(bridge_slave_0) entered disabled state [ 1629.761974][T16026] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1629.788715][T16026] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1631.699485][ T12] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1631.761771][ T12] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1631.802183][T16045] netlink: 52 bytes leftover after parsing attributes in process `syz.6.2185'. [ 1632.126883][ T12] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1632.216180][ T12] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1633.187260][T16061] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1633.560305][T16067] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1633.950210][T16067] bond0: entered promiscuous mode [ 1633.950321][T16067] bond_slave_0: entered promiscuous mode [ 1633.951448][T16067] bond_slave_1: entered promiscuous mode [ 1634.322223][T16067] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1634.906986][ T5783] Bluetooth: hci4: command 0x0406 tx timeout [ 1639.818792][T16106] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1639.829406][T16106] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1639.842598][T16106] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1639.855588][T16106] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1639.869698][T16106] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1641.804319][T16105] chnl_net:caif_netlink_parms(): no params data found [ 1641.947357][ T5783] Bluetooth: hci5: command tx timeout [ 1644.036896][ T5783] Bluetooth: hci5: command tx timeout [ 1644.380202][T16105] bridge0: port 1(bridge_slave_0) entered blocking state [ 1644.430744][T16105] bridge0: port 1(bridge_slave_0) entered disabled state [ 1644.467160][T16105] bridge_slave_0: entered allmulticast mode [ 1644.513554][T16105] bridge_slave_0: entered promiscuous mode [ 1644.750765][T16105] bridge0: port 2(bridge_slave_1) entered blocking state [ 1644.802581][T16105] bridge0: port 2(bridge_slave_1) entered disabled state [ 1644.877628][T16105] bridge_slave_1: entered allmulticast mode [ 1644.910584][T16105] bridge_slave_1: entered promiscuous mode [ 1645.182678][ T8613] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1645.432536][ T8613] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1645.545157][T16105] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1645.642925][ T8613] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1645.726037][T16105] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1645.955423][ T8613] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1646.106733][ T5783] Bluetooth: hci5: command tx timeout [ 1646.199047][T16105] team0: Port device team_slave_0 added [ 1646.274922][T16105] team0: Port device team_slave_1 added [ 1646.727493][T16105] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1646.766121][T16105] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1646.826977][T16105] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1646.981319][T16105] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1647.013438][T16105] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1647.103273][T16105] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1647.961603][T10778] kworker/1:4 (10778) used greatest stack depth: 2528 bytes left [ 1648.061806][ T8613] bridge_slave_1: left allmulticast mode [ 1648.082588][ T8613] bridge_slave_1: left promiscuous mode [ 1648.140134][T16173] netlink: 16 bytes leftover after parsing attributes in process `syz.6.2212'. [ 1648.142807][ T8613] bridge0: port 2(bridge_slave_1) entered disabled state [ 1648.208486][ T5783] Bluetooth: hci5: command tx timeout [ 1648.507786][ T8613] bridge_slave_0: left allmulticast mode [ 1648.513874][ T8613] bridge_slave_0: left promiscuous mode [ 1648.521148][ T8613] bridge0: port 1(bridge_slave_0) entered disabled state [ 1649.736196][ T8613] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1649.834254][ T8613] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1649.906269][ T8613] bond0 (unregistering): Released all slaves [ 1649.998530][T16105] hsr_slave_0: entered promiscuous mode [ 1650.048561][T16105] hsr_slave_1: entered promiscuous mode [ 1650.094331][T16105] debugfs: 'hsr0' already exists in 'hsr' [ 1650.121911][T16105] Cannot create hsr debugfs directory [ 1651.414937][ T8613] hsr_slave_0: left promiscuous mode [ 1651.449758][ T8613] hsr_slave_1: left promiscuous mode [ 1651.487659][ T8613] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1651.495280][ T8613] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1651.589233][ T8613] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1651.609719][ T8613] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1651.701495][ T8613] veth1_macvtap: left promiscuous mode [ 1651.726969][ T8613] veth0_macvtap: left promiscuous mode [ 1651.744197][ T8613] veth1_vlan: left promiscuous mode [ 1651.832606][ T8613] veth0_vlan: left promiscuous mode [ 1653.287056][T12450] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 1653.576560][T12450] usb 4-1: Using ep0 maxpacket: 32 [ 1653.600913][T12450] usb 4-1: config index 0 descriptor too short (expected 29220, got 36) [ 1653.646710][T12450] usb 4-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 1653.655565][T12450] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 1653.706700][T12450] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1653.749179][T12450] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 1653.786997][T12450] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 1653.827194][T12450] usb 4-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 1653.853936][T12450] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1653.915544][T12450] usb 4-1: config 0 descriptor?? [ 1654.243462][T12450] usblp 4-1:0.0: usblp0: USB Bidirectional printer dev 4 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 1654.346537][T12450] usb 4-1: USB disconnect, device number 4 [ 1654.410898][T12450] usblp0: removed [ 1654.846792][T12450] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 1655.029748][T12450] usb 4-1: Using ep0 maxpacket: 32 [ 1655.049238][ T8613] team0 (unregistering): Port device team_slave_1 removed [ 1655.072573][T12450] usb 4-1: config index 0 descriptor too short (expected 29220, got 36) [ 1655.106552][T12450] usb 4-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 1655.131378][T12450] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 1655.170469][T12450] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1655.191171][ T8613] team0 (unregistering): Port device team_slave_0 removed [ 1655.201106][T12450] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 1655.231330][T12450] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 1655.276580][T12450] usb 4-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 1655.285891][T12450] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1655.356973][T12450] usb 4-1: config 0 descriptor?? [ 1655.601498][T12450] usblp 4-1:0.0: usblp0: USB Bidirectional printer dev 5 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 1656.142825][T12433] usb 4-1: USB disconnect, device number 5 [ 1656.160888][T16203] batman_adv: batadv0: Interface deactivated: geneve2 [ 1656.251246][T12433] usblp0: removed [ 1656.508705][ T12] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1657.515372][ T12] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1657.527518][ T12] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1658.500177][ T12] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1661.876752][T16105] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1661.980753][T16105] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1662.097063][T16105] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1662.172771][T16105] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1663.774180][T16105] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1664.072038][T16105] 8021q: adding VLAN 0 to HW filter on device team0 [ 1664.292550][ T6394] bridge0: port 1(bridge_slave_0) entered blocking state [ 1664.300072][ T6394] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1664.468571][ T6394] bridge0: port 2(bridge_slave_1) entered blocking state [ 1664.475941][ T6394] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1665.224542][T16105] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1667.528250][T16105] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1668.111896][T16105] veth0_vlan: entered promiscuous mode [ 1668.270733][T16105] veth1_vlan: entered promiscuous mode [ 1668.827924][T16105] veth0_macvtap: entered promiscuous mode [ 1668.938321][T16105] veth1_macvtap: entered promiscuous mode [ 1669.178505][T16105] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1669.370805][T16105] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1669.507604][ T12] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1669.528754][ T5975] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1669.576608][ T6394] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1669.628807][ T12] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1678.697378][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 1678.704152][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 1679.051458][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1679.099476][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1679.457163][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1679.516708][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1701.162943][T16543] [U] [ 1701.166029][T16543] [U] [ 1701.169106][T16543] [U] [ 1701.172066][T16543] [U] [ 1701.242899][T16543] [U] [ 1701.245942][T16543] [U] [ 1701.248921][T16543] [U] [ 1701.251915][T16543] [U] [ 1701.343988][T16543] [U] [ 1701.347030][T16543] [U] [ 1701.350003][T16543] [U] [ 1701.352978][T16543] [U] [ 1701.432568][T16543] [U] [ 1701.435632][T16543] [U] [ 1701.438644][T16543] [U] [ 1701.441641][T16543] [U] [ 1701.624184][T16543] [U] [ 1701.627280][T16543] [U] [ 1701.630280][T16543] [U] [ 1701.633323][T16543] [U] [ 1701.713311][T16543] [U] [ 1701.716363][T16543] [U] [ 1701.719353][T16543] [U] [ 1701.722339][T16543] [U] [ 1701.793135][T16543] [U] [ 1701.796214][T16543] [U] [ 1701.799219][T16543] [U] [ 1701.802217][T16543] [U] [ 1701.872344][T16543] [U] [ 1708.246910][T16601] [U] [ 1708.249894][T16601] [U] [ 1708.252776][T16601] [U] [ 1708.255659][T16601] [U] [ 1708.340427][T16601] [U] [ 1708.343490][T16601] [U] [ 1708.346491][T16601] [U] [ 1708.349466][T16601] [U] [ 1708.445437][T16601] [U] [ 1708.448527][T16601] [U] [ 1708.451545][T16601] [U] [ 1708.454558][T16601] [U] [ 1708.543561][T16601] [U] [ 1708.546639][T16601] [U] [ 1708.549634][T16601] [U] [ 1708.552590][T16601] [U] [ 1708.625502][T16601] [U] [ 1708.628483][T16601] [U] [ 1708.631468][T16601] [U] [ 1708.634330][T16601] [U] [ 1708.762015][T16601] [U] [ 1708.764936][T16601] [U] [ 1708.767816][T16601] [U] [ 1708.770689][T16601] [U] [ 1708.805485][T16601] [U] [ 1708.808556][T16601] [U] [ 1708.811568][T16601] [U] [ 1708.814598][T16601] [U] [ 1708.882708][T16601] [U] [ 1708.885746][T16601] [U] [ 1708.888760][T16601] [U] [ 1708.891779][T16601] [U] [ 1708.964625][T16601] [U] [ 1708.967674][T16601] [U] [ 1708.970682][T16601] [U] [ 1708.973772][T16601] [U] [ 1709.047447][T16601] [U] [ 1709.050494][T16601] [U] [ 1709.053487][T16601] [U] [ 1709.056497][T16601] [U] [ 1709.126670][T16601] [U] [ 1716.587802][T16106] Bluetooth: hci0: command 0x0406 tx timeout [ 1720.698699][T16696] netlink: 12 bytes leftover after parsing attributes in process `syz.9.2344'. [ 1723.702976][T16722] [U] [ 1723.706027][T16722] [U] [ 1723.708989][T16722] [U] [ 1723.712002][T16722] [U] [ 1723.751767][T16722] [U] [ 1723.754812][T16722] [U] [ 1723.757840][T16722] [U] [ 1723.760855][T16722] [U] [ 1723.792577][T16722] [U] [ 1723.795610][T16722] [U] [ 1723.798604][T16722] [U] [ 1723.801583][T16722] [U] [ 1723.898330][T16722] [U] [ 1723.901372][T16722] [U] [ 1723.904378][T16722] [U] [ 1723.907384][T16722] [U] [ 1723.978320][T16722] [U] [ 1723.981382][T16722] [U] [ 1723.984394][T16722] [U] [ 1723.987402][T16722] [U] [ 1724.055039][T16722] [U] [ 1724.058126][T16722] [U] [ 1724.061098][T16722] [U] [ 1724.064031][T16722] [U] [ 1724.160915][T16722] [U] [ 1724.164020][T16722] [U] [ 1724.167003][T16722] [U] [ 1724.170007][T16722] [U] [ 1724.218430][T16722] [U] [ 1724.221561][T16722] [U] [ 1724.224563][T16722] [U] [ 1724.227673][T16722] [U] [ 1724.287614][T16722] [U] [ 1724.290675][T16722] [U] [ 1724.293709][T16722] [U] [ 1724.296736][T16722] [U] [ 1724.327561][T16722] [U] [ 1724.330615][T16722] [U] [ 1724.333589][T16722] [U] [ 1724.336617][T16722] [U] [ 1724.389496][T16722] [U] [ 1724.392587][T16722] [U] [ 1724.395593][T16722] [U] [ 1724.398617][T16722] [U] [ 1724.487294][T16722] [U] [ 1724.490407][T16722] [U] [ 1724.493381][T16722] [U] [ 1724.496372][T16722] [U] [ 1724.544587][T16722] [U] [ 1724.547618][T16722] [U] [ 1724.550595][T16722] [U] [ 1724.553584][T16722] [U] [ 1724.627220][T16722] [U] [ 1728.749503][T16757] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2358'. [ 1740.126503][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 1740.133086][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 1741.496426][T16872] netlink: 12 bytes leftover after parsing attributes in process `syz.9.2392'. [ 1747.472541][T16907] bridge0: port 2(bridge_slave_1) entered disabled state [ 1747.482035][T16907] bridge0: port 1(bridge_slave_0) entered disabled state [ 1749.033753][T16922] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2407'. [ 1750.589011][T16907] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1750.670710][T16907] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1751.917157][ T5975] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1751.982681][ T5975] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1752.047540][ T5975] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1752.122184][ T5975] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1760.504059][T16998] [U] [ 1760.507104][T16998] [U] [ 1760.510107][T16998] [U] [ 1760.513121][T16998] [U] [ 1760.547439][T16998] [U] [ 1760.550464][T16998] [U] [ 1760.553443][T16998] [U] [ 1760.556435][T16998] [U] [ 1760.647817][T16998] [U] [ 1760.650741][T16998] [U] [ 1760.653679][T16998] [U] [ 1760.656690][T16998] [U] [ 1760.727360][T16998] [U] [ 1760.730385][T16998] [U] [ 1760.733354][T16998] [U] [ 1760.736332][T16998] [U] [ 1760.879250][T16998] [U] [ 1760.882569][T16998] [U] [ 1760.885562][T16998] [U] [ 1760.888577][T16998] [U] [ 1760.946328][T16998] [U] [ 1760.949299][T16998] [U] [ 1760.952224][T16998] [U] [ 1760.955099][T16998] [U] [ 1760.989837][T16998] [U] [ 1760.992903][T16998] [U] [ 1760.995887][T16998] [U] [ 1760.998894][T16998] [U] [ 1761.038594][T16998] [U] [ 1761.041641][T16998] [U] [ 1761.044619][T16998] [U] [ 1761.047579][T16998] [U] [ 1761.084170][T16998] [U] [ 1761.087186][T16998] [U] [ 1761.090162][T16998] [U] [ 1761.093133][T16998] [U] [ 1761.137354][T16998] [U] [ 1761.140383][T16998] [U] [ 1761.143359][T16998] [U] [ 1761.146309][T16998] [U] [ 1761.169886][T16998] [U] [ 1761.172935][T16998] [U] [ 1761.175931][T16998] [U] [ 1761.178915][T16998] [U] [ 1761.196149][T16998] [U] [ 1761.199172][T16998] [U] [ 1761.202175][T16998] [U] [ 1761.205150][T16998] [U] [ 1761.278768][T16998] [U] [ 1762.676474][T16106] Bluetooth: hci5: command 0x0406 tx timeout [ 1762.867131][T12441] usb 4-1: new full-speed USB device number 6 using dummy_hcd [ 1763.124656][T12441] usb 4-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 1763.149958][T12441] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1763.189610][T12441] usb 4-1: Product: syz [ 1763.204781][T12441] usb 4-1: Manufacturer: syz [ 1763.220091][T12441] usb 4-1: SerialNumber: syz [ 1763.274216][T12441] usb 4-1: config 0 descriptor?? [ 1763.532054][T12441] usb 4-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 1765.276474][T12441] dvb_usb_rtl28xxu 4-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 1765.323500][T12441] usb 4-1: USB disconnect, device number 6 [ 1765.627382][T12433] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 1765.816754][T12433] usb 3-1: Using ep0 maxpacket: 8 [ 1765.866834][T12433] usb 3-1: unable to get BOS descriptor or descriptor too short [ 1765.899563][T12433] usb 3-1: config 0 has an invalid descriptor of length 1, skipping remainder of the config [ 1765.942792][T12433] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x88 has an invalid bInterval 0, changing to 7 [ 1765.995200][T12433] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 1766.046459][T12433] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0xC has invalid maxpacket 65535, setting to 1024 [ 1766.104196][T12433] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0xC has invalid maxpacket 1024 [ 1766.186730][T12433] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0 [ 1766.226570][T12433] usb 3-1: config 0 interface 0 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 5 [ 1766.355724][T12433] usb 3-1: New USB device found, idVendor=0763, idProduct=1002, bcdDevice=5f.84 [ 1766.396454][T12433] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1766.404699][T12433] usb 3-1: Product: syz [ 1766.451917][T12433] usb 3-1: Manufacturer: syz [ 1766.476568][T12433] usb 3-1: SerialNumber: syz [ 1766.504359][T12433] usb 3-1: config 0 descriptor?? [ 1766.542502][T17044] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 1766.596195][T12433] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 1767.644301][T12433] snd-usb-audio 3-1:0.0: probe with driver snd-usb-audio failed with error -2 [ 1768.294695][T17072] udevd[17072]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1768.699708][T12433] usb 3-1: USB disconnect, device number 7 [ 1774.448986][T17141] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2463'. [ 1780.255236][T17203] syz_tun: entered allmulticast mode [ 1780.294676][T17203] syz_tun: left allmulticast mode [ 1781.432579][T17217] [U] [ 1781.435713][T17217] [U] [ 1781.438721][T17217] [U] [ 1781.441722][T17217] [U] [ 1781.481915][T17217] [U] [ 1781.485100][T17217] [U] [ 1781.488077][T17217] [U] [ 1781.491045][T17217] [U] [ 1781.573564][T17217] [U] [ 1781.576626][T17217] [U] [ 1781.579626][T17217] [U] [ 1781.582623][T17217] [U] [ 1781.700907][T17217] [U] [ 1781.703828][T17217] [U] [ 1781.706796][T17217] [U] [ 1781.709813][T17217] [U] [ 1781.770304][T17217] [U] [ 1781.773227][T17217] [U] [ 1781.776071][T17217] [U] [ 1781.778986][T17217] [U] [ 1781.784639][T17217] [U] [ 1781.787613][T17217] [U] [ 1781.790840][T17217] [U] [ 1781.793759][T17217] [U] [ 1781.865550][T17217] [U] [ 1781.868542][T17217] [U] [ 1781.871416][T17217] [U] [ 1781.874292][T17217] [U] [ 1781.941446][T17217] [U] [ 1781.944516][T17217] [U] [ 1781.947437][T17217] [U] [ 1781.950304][T17217] [U] [ 1781.999132][T17217] [U] [ 1782.002298][T17217] [U] [ 1782.005270][T17217] [U] [ 1782.008222][T17217] [U] [ 1782.045663][T17217] [U] [ 1782.048795][T17217] [U] [ 1782.051804][T17217] [U] [ 1782.054810][T17217] [U] [ 1782.108732][T17217] [U] [ 1782.111863][T17217] [U] [ 1782.114797][T17217] [U] [ 1782.117659][T17217] [U] [ 1782.193840][T17217] [U] [ 1790.417834][T17301] A link change request failed with some changes committed already. Interface ip_vti0 may have been left with an inconsistent configuration, please check. [ 1801.572331][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 1801.579154][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 1807.216697][T17057] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 1807.398292][T17057] usb 4-1: Using ep0 maxpacket: 8 [ 1807.427741][T17057] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1807.480577][T17057] usb 4-1: New USB device found, idVendor=20d6, idProduct=cb17, bcdDevice= 0.00 [ 1807.521383][T17057] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1807.560360][T17057] usb 4-1: config 0 descriptor?? [ 1808.064958][T17057] hid-udraw 0003:20D6:CB17.0001: unknown main item tag 0x0 [ 1808.119356][T17057] hid-udraw 0003:20D6:CB17.0001: item fetching failed at offset 3/5 [ 1808.143628][T17057] hid-udraw 0003:20D6:CB17.0001: parse failed [ 1808.170080][T17057] hid-udraw 0003:20D6:CB17.0001: probe with driver hid-udraw failed with error -22 [ 1808.283214][T17057] usb 4-1: USB disconnect, device number 7 [ 1824.953220][T17646] netlink: 40 bytes leftover after parsing attributes in process `syz.9.2598'. [ 1830.700476][T17697] netlink: 40 bytes leftover after parsing attributes in process `syz.6.2610'. [ 1831.348887][T17706] [U] [ 1831.351816][T17706] [U] [ 1831.354708][T17706] [U] [ 1831.357584][T17706] [U] [ 1831.607142][T17706] [U] [ 1831.610070][T17706] [U] [ 1831.612966][T17706] [U] [ 1831.615818][T17706] [U] [ 1831.700139][T17706] [U] [ 1831.703209][T17706] [U] [ 1831.706300][T17706] [U] [ 1831.709359][T17706] [U] [ 1831.777771][T17706] [U] [ 1831.780725][T17706] [U] [ 1831.783659][T17706] [U] [ 1831.786632][T17706] [U] [ 1831.792516][T17706] [U] [ 1831.795545][T17706] [U] [ 1831.798556][T17706] [U] [ 1831.801428][T17706] [U] [ 1831.897852][T17706] [U] [ 1831.900930][T17706] [U] [ 1831.904016][T17706] [U] [ 1831.907005][T17706] [U] [ 1831.959411][T17706] [U] [ 1831.962427][T17706] [U] [ 1831.965451][T17706] [U] [ 1831.968476][T17706] [U] [ 1832.010777][T17706] [U] [ 1832.013747][T17706] [U] [ 1832.016630][T17706] [U] [ 1832.019519][T17706] [U] [ 1832.047864][T17706] [U] [ 1832.050922][T17706] [U] [ 1832.053954][T17706] [U] [ 1832.057013][T17706] [U] [ 1832.186038][T17706] [U] [ 1836.717207][T17751] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2622'. [ 1847.898049][T17869] [U] [ 1847.901147][T17869] [U] [ 1847.904158][T17869] [U] [ 1847.907161][T17869] [U] [ 1847.964737][T17869] [U] [ 1847.967826][T17869] [U] [ 1847.970862][T17869] [U] [ 1847.973894][T17869] [U] [ 1848.046157][T17869] [U] [ 1848.049240][T17869] [U] [ 1848.052263][T17869] [U] [ 1848.055286][T17869] [U] [ 1848.225942][T17869] [U] [ 1848.229023][T17869] [U] [ 1848.232041][T17869] [U] [ 1848.235068][T17869] [U] [ 1848.318789][T17869] [U] [ 1848.321872][T17869] [U] [ 1848.324885][T17869] [U] [ 1848.327923][T17869] [U] [ 1848.415596][T17869] [U] [ 1848.418655][T17869] [U] [ 1848.421587][T17869] [U] [ 1848.424461][T17869] [U] [ 1848.453663][T17869] [U] [ 1848.456717][T17869] [U] [ 1848.459730][T17869] [U] [ 1848.462678][T17869] [U] [ 1848.528319][T17869] [U] [ 1848.531398][T17869] [U] [ 1848.534433][T17869] [U] [ 1848.537439][T17869] [U] [ 1848.708839][T17869] [U] [ 1848.711913][T17869] [U] [ 1848.714931][T17869] [U] [ 1848.717943][T17869] [U] [ 1848.737926][T17869] [U] [ 1848.740996][T17869] [U] [ 1848.743963][T17869] [U] [ 1848.746965][T17869] [U] [ 1848.866131][T17869] [U] [ 1848.869215][T17869] [U] [ 1848.872234][T17869] [U] [ 1848.875253][T17869] [U] [ 1848.955010][T17869] [U] [ 1848.958089][T17869] [U] [ 1848.961103][T17869] [U] [ 1848.964085][T17869] [U] [ 1849.088511][T17869] [U] [ 1857.527073][T12433] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 1857.699282][T12433] usb 4-1: Using ep0 maxpacket: 8 [ 1857.743139][T12433] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1857.787220][T12433] usb 4-1: New USB device found, idVendor=20d6, idProduct=cb17, bcdDevice= 0.00 [ 1857.820958][T12433] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1857.883181][T12433] usb 4-1: config 0 descriptor?? [ 1858.451143][T12433] usbhid 4-1:0.0: can't add hid device: -71 [ 1858.481674][T12433] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 1858.563231][T12433] usb 4-1: USB disconnect, device number 8 [ 1863.029295][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 1863.036350][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 1863.761964][T17057] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 1864.326590][T17057] usb 3-1: Using ep0 maxpacket: 8 [ 1864.339497][T17057] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1864.361201][T17057] usb 3-1: New USB device found, idVendor=20d6, idProduct=cb17, bcdDevice= 0.00 [ 1864.459259][T17057] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1864.539591][T17057] usb 3-1: config 0 descriptor?? [ 1865.125763][T17057] usbhid 3-1:0.0: can't add hid device: -71 [ 1865.145861][T17057] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 1865.238986][T17057] usb 3-1: USB disconnect, device number 8 [ 1879.260712][T18187] 9p: Bad value for 'rfdno' [ 1879.570124][T16106] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1879.609861][T16106] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1879.622293][T16106] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1879.644456][T16106] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1879.659821][T16106] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1881.706804][ T5783] Bluetooth: hci3: command tx timeout [ 1882.440055][T18188] chnl_net:caif_netlink_parms(): no params data found [ 1883.828958][ T5783] Bluetooth: hci3: command tx timeout [ 1885.881843][ T5783] Bluetooth: hci3: command tx timeout [ 1887.357151][ T1138] bridge_slave_1: left allmulticast mode [ 1887.363022][ T1138] bridge_slave_1: left promiscuous mode [ 1887.447449][ T1138] bridge0: port 2(bridge_slave_1) entered disabled state [ 1887.601757][ T1138] bridge_slave_0: left allmulticast mode [ 1887.639230][ T1138] bridge_slave_0: left promiscuous mode [ 1887.710828][ T1138] bridge0: port 1(bridge_slave_0) entered disabled state [ 1887.946592][ T5783] Bluetooth: hci3: command tx timeout [ 1888.232102][ T1138] batman_adv: batadv0: Removing interface: geneve2 [ 1888.927901][ T1138] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1888.988627][ T1138] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1889.013870][ T1138] bond0 (unregistering): Released all slaves [ 1889.421042][T18188] bridge0: port 1(bridge_slave_0) entered blocking state [ 1889.488400][T18188] bridge0: port 1(bridge_slave_0) entered disabled state [ 1889.535426][T18188] bridge_slave_0: entered allmulticast mode [ 1889.673446][T18188] bridge_slave_0: entered promiscuous mode [ 1890.007797][T18188] bridge0: port 2(bridge_slave_1) entered blocking state [ 1890.069065][T18188] bridge0: port 2(bridge_slave_1) entered disabled state [ 1890.207231][T18188] bridge_slave_1: entered allmulticast mode [ 1890.734090][T18188] bridge_slave_1: entered promiscuous mode [ 1892.838832][T18188] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1892.940280][T18188] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1893.268675][ T1138] hsr_slave_0: left promiscuous mode [ 1893.295229][ T1138] hsr_slave_1: left promiscuous mode [ 1893.341584][ T1138] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1893.447031][ T1138] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1895.672411][ T1138] team0 (unregistering): Port device team_slave_1 removed [ 1895.946838][ T1138] team0 (unregistering): Port device team_slave_0 removed [ 1897.710992][T18188] team0: Port device team_slave_0 added [ 1897.841146][T18188] team0: Port device team_slave_1 added [ 1898.316858][T18188] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1898.324024][T18188] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1898.456622][T18188] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1898.516053][T18188] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1898.556508][T18188] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1898.656538][T18188] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1899.231929][T18188] hsr_slave_0: entered promiscuous mode [ 1899.290087][T18188] hsr_slave_1: entered promiscuous mode [ 1902.353234][T18188] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 1902.509639][T18188] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 1902.681952][T18188] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 1902.810069][T18188] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 1904.488844][T18188] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1904.771211][T18188] 8021q: adding VLAN 0 to HW filter on device team0 [ 1904.939619][ T6394] bridge0: port 1(bridge_slave_0) entered blocking state [ 1904.947316][ T6394] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1905.074388][ T6394] bridge0: port 2(bridge_slave_1) entered blocking state [ 1905.082036][ T6394] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1906.818164][T18392] fuse: Invalid rootmode [ 1907.489096][T18188] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1913.847424][T18188] veth0_vlan: entered promiscuous mode [ 1913.889171][T18451] fuse: Invalid rootmode [ 1914.045945][T18188] veth1_vlan: entered promiscuous mode [ 1914.533332][T18450] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 1914.639777][T18188] veth0_macvtap: entered promiscuous mode [ 1914.794613][T18188] veth1_macvtap: entered promiscuous mode [ 1914.827315][T18458] [U] [ 1914.830392][T18458] [U] [ 1914.833429][T18458] [U] [ 1914.836438][T18458] [U] [ 1914.917938][T18458] [U] [ 1914.921029][T18458] [U] [ 1914.924047][T18458] [U] [ 1914.927079][T18458] [U] [ 1915.030924][T18458] [U] [ 1915.033988][T18458] [U] [ 1915.037007][T18458] [U] [ 1915.040027][T18458] [U] [ 1915.065678][T18188] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1915.120964][T18458] [U] [ 1915.124008][T18458] [U] [ 1915.127011][T18458] [U] [ 1915.129994][T18458] [U] [ 1915.217482][T18458] [U] [ 1915.220566][T18458] [U] [ 1915.223588][T18458] [U] [ 1915.226601][T18458] [U] [ 1915.258479][T18188] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1915.324410][T18458] [U] [ 1915.327572][T18458] [U] [ 1915.330677][T18458] [U] [ 1915.333694][T18458] [U] [ 1915.353270][ T5975] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1915.364737][ T5975] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1915.439261][ T5975] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1915.456186][T18458] [U] [ 1915.459277][T18458] [U] [ 1915.462305][T18458] [U] [ 1915.465321][T18458] [U] [ 1915.471044][ T5975] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1915.494389][T18458] [U] [ 1915.497463][T18458] [U] [ 1915.500478][T18458] [U] [ 1915.503482][T18458] [U] [ 1915.525740][T18458] [U] [ 1915.528820][T18458] [U] [ 1915.531898][T18458] [U] [ 1915.534954][T18458] [U] [ 1915.907462][T18458] [U] [ 1915.910532][T18458] [U] [ 1915.913551][T18458] [U] [ 1915.916552][T18458] [U] [ 1916.297932][T18458] [U] [ 1922.473803][T18505] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2801'. [ 1924.472880][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 1924.496383][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 1925.279538][T17059] usb 4-1: new full-speed USB device number 9 using dummy_hcd [ 1925.325039][T18517] fuse: Invalid rootmode [ 1925.533989][T17059] usb 4-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 1925.575843][T17059] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1925.603102][T17059] usb 4-1: Product: syz [ 1925.615969][T17059] usb 4-1: Manufacturer: syz [ 1925.622930][T17059] usb 4-1: SerialNumber: syz [ 1925.689959][T17059] usb 4-1: config 0 descriptor?? [ 1925.989629][T17059] usb 4-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 1927.557612][T17059] dvb_usb_rtl28xxu 4-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 1927.628284][T17059] usb 4-1: USB disconnect, device number 9 [ 1929.838758][T18568] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2814'. [ 1930.498131][T18570] fuse: Invalid rootmode [ 1930.891115][ T1138] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1930.959430][ T1138] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1931.271864][T18567] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 1931.610148][ T1138] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1931.679802][ T1138] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1937.894315][T18626] fuse: Invalid rootmode [ 1938.498829][T18633] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 1938.571296][T18633] block device autoloading is deprecated and will be removed. [ 1944.442449][T16201] usb 4-1: new full-speed USB device number 10 using dummy_hcd [ 1944.677828][T16201] usb 4-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 1944.718702][T18687] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2846'. [ 1944.739060][T16201] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1944.765205][T16201] usb 4-1: Product: syz [ 1944.776549][T16201] usb 4-1: Manufacturer: syz [ 1944.786851][T16201] usb 4-1: SerialNumber: syz [ 1944.827204][T16201] usb 4-1: config 0 descriptor?? [ 1944.966387][T18685] fuse: Invalid rootmode [ 1945.095031][T16201] usb 4-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 1945.599053][T18688] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 1946.665046][T16201] dvb_usb_rtl28xxu 4-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 1946.725214][T16201] usb 4-1: USB disconnect, device number 10 [ 1952.825880][T18740] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 1953.686714][T16201] usb 4-1: new full-speed USB device number 11 using dummy_hcd [ 1953.964044][T16201] usb 4-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 1954.036829][T16201] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1954.045815][T16201] usb 4-1: Product: syz [ 1954.066562][T16201] usb 4-1: Manufacturer: syz [ 1954.071427][T16201] usb 4-1: SerialNumber: syz [ 1954.140128][T16201] usb 4-1: config 0 descriptor?? [ 1954.387652][T16201] usb 4-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 1955.705612][T18767] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 1955.717328][T18767] Bluetooth: hci4: Error when powering off device on rfkill (-4) [ 1956.006047][T18767] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1956.047248][T16201] dvb_usb_rtl28xxu 4-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 1956.065380][T18767] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 1956.145889][T16201] usb 4-1: USB disconnect, device number 11 [ 1956.303155][T18767] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1956.320924][T18767] Bluetooth: hci0: Error when powering off device on rfkill (-4) [ 1956.392671][T18767] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 1956.401236][T18767] Bluetooth: hci5: Error when powering off device on rfkill (-4) [ 1956.533026][T18767] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1956.541410][T18767] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 1961.867212][T18801] pimreg: entered allmulticast mode [ 1963.667322][T16201] usb 4-1: new full-speed USB device number 12 using dummy_hcd [ 1963.945039][T16201] usb 4-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 1963.992710][T16201] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1964.036976][T16201] usb 4-1: Product: syz [ 1964.041402][T16201] usb 4-1: Manufacturer: syz [ 1964.128858][T18830] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1964.158705][T16201] usb 4-1: SerialNumber: syz [ 1964.172816][T18830] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1964.174017][T18827] netlink: 4 bytes leftover after parsing attributes in process `syz.9.2881'. [ 1964.226010][T16201] usb 4-1: config 0 descriptor?? [ 1964.233178][T18830] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1964.273482][T18830] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1964.290072][T18830] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1964.347683][ T5783] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1964.412305][ T5783] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1964.434121][ T5783] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1964.464651][ T5783] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1964.496671][ T5783] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1964.569897][T16201] usb 4-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 1966.212171][T16201] dvb_usb_rtl28xxu 4-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 1966.396962][T16201] usb 4-1: USB disconnect, device number 12 [ 1966.587065][T18830] Bluetooth: hci1: command tx timeout [ 1967.503862][T18828] chnl_net:caif_netlink_parms(): no params data found [ 1968.713381][T18830] Bluetooth: hci1: command tx timeout [ 1970.778524][T18830] Bluetooth: hci1: command tx timeout [ 1972.827233][T18830] Bluetooth: hci1: command tx timeout [ 1973.127000][T18828] bridge0: port 1(bridge_slave_0) entered blocking state [ 1973.195859][T18828] bridge0: port 1(bridge_slave_0) entered disabled state [ 1973.248446][T18828] bridge_slave_0: entered allmulticast mode [ 1973.290113][T18828] bridge_slave_0: entered promiscuous mode [ 1973.368893][T18828] bridge0: port 2(bridge_slave_1) entered blocking state [ 1973.406961][T18828] bridge0: port 2(bridge_slave_1) entered disabled state [ 1973.439110][T18828] bridge_slave_1: entered allmulticast mode [ 1973.464402][T18828] bridge_slave_1: entered promiscuous mode [ 1973.911412][T18828] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1973.984062][T18828] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1974.682378][T18828] team0: Port device team_slave_0 added [ 1974.796529][T18828] team0: Port device team_slave_1 added [ 1975.344331][T18828] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1975.415860][T18828] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1975.536475][T18828] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1975.741257][T18828] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1975.766500][T18828] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1975.958057][T18828] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1976.928821][T18828] hsr_slave_0: entered promiscuous mode [ 1976.961165][T18828] hsr_slave_1: entered promiscuous mode [ 1976.989587][T18828] debugfs: 'hsr0' already exists in 'hsr' [ 1977.009754][T18828] Cannot create hsr debugfs directory [ 1977.100746][T18912] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2900'. [ 1979.898786][ T12] bridge_slave_1: left allmulticast mode [ 1979.914767][ T12] bridge_slave_1: left promiscuous mode [ 1979.942326][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 1980.071767][ T12] bridge_slave_0: left allmulticast mode [ 1980.101633][ T12] bridge_slave_0: left promiscuous mode [ 1980.142989][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 1980.895229][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1980.978025][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1981.033488][ T12] bond0 (unregistering): Released all slaves [ 1982.345276][ T12] hsr_slave_0: left promiscuous mode [ 1982.378888][ T12] hsr_slave_1: left promiscuous mode [ 1982.402469][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1982.456812][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1983.665469][ T12] team0 (unregistering): Port device team_slave_1 removed [ 1983.748450][ T12] team0 (unregistering): Port device team_slave_0 removed [ 1985.561075][T18828] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 1985.647765][T18828] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 1985.885099][T18828] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 1985.969453][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 1985.976304][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 1986.134109][T18828] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 1988.170293][T18828] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1988.400290][T18828] 8021q: adding VLAN 0 to HW filter on device team0 [ 1988.515155][T18586] bridge0: port 1(bridge_slave_0) entered blocking state [ 1988.522625][T18586] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1988.702666][ T5975] bridge0: port 2(bridge_slave_1) entered blocking state [ 1988.710427][ T5975] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1990.308836][T19025] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2927'. [ 1991.954498][T18828] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1992.859303][T18828] veth0_vlan: entered promiscuous mode [ 1993.167595][T18828] veth1_vlan: entered promiscuous mode [ 1993.716103][T18828] veth0_macvtap: entered promiscuous mode [ 1993.855839][T18828] veth1_macvtap: entered promiscuous mode [ 1994.250336][T18828] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1994.383499][T18828] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1994.641876][ T1088] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1994.673018][ T1088] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1994.748845][ T1088] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1994.791575][ T1088] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1995.883253][ T29] audit: type=1326 audit(1771189918.470:98): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19056 comm="syz.9.2934" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f34f6c code=0x7ffc0000 [ 1996.011353][ T29] audit: type=1326 audit(1771189918.500:99): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19056 comm="syz.9.2934" exe="/root/syz-executor" sig=0 arch=40000003 syscall=331 compat=1 ip=0xf7f34f6c code=0x7ffc0000 [ 1996.127006][ T29] audit: type=1326 audit(1771189918.550:100): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19056 comm="syz.9.2934" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f34f6c code=0x7ffc0000 [ 1996.258194][ T29] audit: type=1326 audit(1771189918.550:101): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19056 comm="syz.9.2934" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f34f6c code=0x7ffc0000 [ 2000.227019][T17057] usb 5-1: new full-speed USB device number 2 using dummy_hcd [ 2000.456023][T17057] usb 5-1: config 8 has an invalid interface number: 177 but max is 0 [ 2000.522163][T17057] usb 5-1: config 8 has no interface number 0 [ 2000.539546][T17057] usb 5-1: config 8 interface 177 altsetting 9 endpoint 0x8 has invalid maxpacket 1023, setting to 64 [ 2000.596516][T17057] usb 5-1: config 8 interface 177 has no altsetting 0 [ 2000.649668][T17057] usb 5-1: New USB device found, idVendor=04d8, idProduct=fd08, bcdDevice=59.b1 [ 2000.700633][T17057] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2000.761149][T19102] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 2001.209888][T17057] usb 5-1: string descriptor 0 read error: -71 [ 2001.275679][ C1] ir_toy 5-1:8.177: out urb status: -71 [ 2001.806349][T17057] ir_toy 5-1:8.177: could not write reset command: -110 [ 2001.814680][T17057] ir_toy 5-1:8.177: probe with driver ir_toy failed with error -110 [ 2001.907496][T17057] usb 5-1: USB disconnect, device number 2 [ 2003.096843][ T5975] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2003.136621][ T5975] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2003.516338][ T8613] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2003.524484][ T8613] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2003.962055][ T12] ===================================================== [ 2003.973623][ T12] BUG: KMSAN: uninit-value in __inet6_bind+0x4ac/0x1830 [ 2003.981018][ T12] __inet6_bind+0x4ac/0x1830 [ 2003.985812][ T12] inet6_bind+0x11e/0x1a0 [ 2003.990586][ T12] kernel_bind+0xd6/0x130 [ 2003.995399][ T12] rds_tcp_conn_path_connect+0x952/0xff0 [ 2004.001739][ T12] rds_connect_worker+0x353/0x4d0 [ 2004.007238][ T12] process_scheduled_works+0xb21/0x1e30 [ 2004.013130][ T12] worker_thread+0xede/0x1580 [ 2004.021861][ T12] kthread+0x53f/0x600 [ 2004.026460][ T12] ret_from_fork+0x20f/0x910 [ 2004.031301][ T12] ret_from_fork_asm+0x1a/0x30 [ 2004.036663][ T12] [ 2004.039103][ T12] Uninit was stored to memory at: [ 2004.044421][ T12] kernel_bind+0x92/0x130 [ 2004.049120][ T12] rds_tcp_conn_path_connect+0x952/0xff0 [ 2004.054891][ T12] rds_connect_worker+0x353/0x4d0 [ 2004.060321][ T12] process_scheduled_works+0xb21/0x1e30 [ 2004.065995][ T12] worker_thread+0xede/0x1580 [ 2004.070957][ T12] kthread+0x53f/0x600 [ 2004.075244][ T12] ret_from_fork+0x20f/0x910 [ 2004.081220][ T12] ret_from_fork_asm+0x1a/0x30 [ 2004.086246][ T12] [ 2004.088658][ T12] Uninit was stored to memory at: [ 2004.093838][ T12] rds_tcp_conn_path_connect+0xae5/0xff0 [ 2004.099666][ T12] rds_connect_worker+0x353/0x4d0 [ 2004.104859][ T12] process_scheduled_works+0xb21/0x1e30 [ 2004.110719][ T12] worker_thread+0xede/0x1580 [ 2004.115578][ T12] kthread+0x53f/0x600 [ 2004.119941][ T12] ret_from_fork+0x20f/0x910 [ 2004.124648][ T12] ret_from_fork_asm+0x1a/0x30 [ 2004.129620][ T12] [ 2004.131993][ T12] Uninit was created at: [ 2004.136751][ T12] kmem_cache_alloc_noprof+0x37b/0x1270 [ 2004.142440][ T12] rds_tcp_conn_alloc+0x7b/0xbb0 [ 2004.147533][ T12] __rds_conn_create+0x267f/0x34e0 [ 2004.152754][ T12] rds_conn_create_outgoing+0x5d/0x80 [ 2004.158324][ T12] rds_sendmsg+0x2684/0x4d70 [ 2004.163300][ T12] __sys_sendto+0xa77/0xb90 [ 2004.168175][ T12] __ia32_sys_sendto+0x12f/0x200 [ 2004.173217][ T12] ia32_sys_call+0x372f/0x4360 [ 2004.178248][ T12] __do_fast_syscall_32+0x17f/0x3f0 [ 2004.183848][ T12] do_fast_syscall_32+0x37/0x80 [ 2004.188935][ T12] do_SYSENTER_32+0x1f/0x30 [ 2004.193557][ T12] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 2004.200193][ T12] [ 2004.202610][ T12] CPU: 0 UID: 0 PID: 12 Comm: kworker/u8:0 Tainted: G L syzkaller #0 PREEMPT(full) [ 2004.213686][ T12] Tainted: [L]=SOFTLOCKUP [ 2004.218187][ T12] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 2004.228425][ T12] Workqueue: krds_cp_wq#2/0 rds_connect_worker [ 2004.234776][ T12] ===================================================== [ 2004.241922][ T12] Disabling lock debugging due to kernel taint SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 2004.976561][ T12] Kernel panic - not syncing: kmsan.panic set ... [ 2004.983285][ T12] CPU: 0 UID: 0 PID: 12 Comm: kworker/u8:0 Tainted: G B L syzkaller #0 PREEMPT(full) [ 2004.994358][ T12] Tainted: [B]=BAD_PAGE, [L]=SOFTLOCKUP [ 2005.000018][ T12] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 2005.010272][ T12] Workqueue: krds_cp_wq#2/0 rds_connect_worker [ 2005.016717][ T12] Call Trace: [ 2005.020115][ T12] [ 2005.023160][ T12] __dump_stack+0x26/0x30 [ 2005.027700][ T12] dump_stack_lvl+0x50/0x1c0 [ 2005.032531][ T12] ? dump_stack+0x12/0x25 [ 2005.037072][ T12] dump_stack+0x1e/0x25 [ 2005.041454][ T12] vpanic+0x7b4/0x1430 [ 2005.045774][ T12] panic+0x15d/0x160 [ 2005.049949][ T12] kmsan_report+0x31a/0x320 [ 2005.054679][ T12] ? __msan_warning+0x1b/0x30 [ 2005.059589][ T12] ? __inet6_bind+0x4ac/0x1830 [ 2005.064574][ T12] ? inet6_bind+0x11e/0x1a0 [ 2005.069276][ T12] ? kernel_bind+0xd6/0x130 [ 2005.073986][ T12] ? rds_tcp_conn_path_connect+0x952/0xff0 [ 2005.079999][ T12] ? rds_connect_worker+0x353/0x4d0 [ 2005.085436][ T12] ? process_scheduled_works+0xb21/0x1e30 [ 2005.091369][ T12] ? worker_thread+0xede/0x1580 [ 2005.096422][ T12] ? kthread+0x53f/0x600 [ 2005.100900][ T12] ? ret_from_fork+0x20f/0x910 [ 2005.105865][ T12] ? ret_from_fork_asm+0x1a/0x30 [ 2005.111049][ T12] ? stack_depot_save+0x12/0x20 [ 2005.116414][ T12] ? kmsan_internal_chain_origin+0xb6/0xd0 [ 2005.122480][ T12] ? kmsan_internal_chain_origin+0x5d/0xd0 [ 2005.128521][ T12] ? kmsan_internal_memmove_metadata+0x181/0x230 [ 2005.135080][ T12] ? __msan_memcpy+0x105/0x1c0 [ 2005.140074][ T12] ? kernel_bind+0x92/0x130 [ 2005.144812][ T12] ? rds_tcp_conn_path_connect+0x952/0xff0 [ 2005.150925][ T12] ? rds_connect_worker+0x353/0x4d0 [ 2005.156456][ T12] ? process_scheduled_works+0xb21/0x1e30 [ 2005.162356][ T12] ? worker_thread+0xede/0x1580 [ 2005.167327][ T12] ? kthread+0x53f/0x600 [ 2005.171734][ T12] ? ret_from_fork+0x20f/0x910 [ 2005.176628][ T12] ? ret_from_fork_asm+0x1a/0x30 [ 2005.181720][ T12] ? _raw_spin_unlock_irqrestore+0x3f/0x60 [ 2005.187835][ T12] ? stack_depot_save_flags+0x610/0x790 [ 2005.193516][ T12] ? kmsan_get_metadata+0xf1/0x160 [ 2005.198796][ T12] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 2005.204766][ T12] ? kmsan_get_metadata+0xf1/0x160 [ 2005.210053][ T12] __msan_warning+0x1b/0x30 [ 2005.214686][ T12] __inet6_bind+0x4ac/0x1830 [ 2005.219409][ T12] ? _raw_spin_unlock_irqrestore+0x3f/0x60 [ 2005.225477][ T12] inet6_bind+0x11e/0x1a0 [ 2005.229953][ T12] ? __pfx_inet6_bind+0x10/0x10 [ 2005.235011][ T12] kernel_bind+0xd6/0x130 [ 2005.239582][ T12] ? kmsan_get_metadata+0xf1/0x160 [ 2005.244934][ T12] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 2005.250903][ T12] rds_tcp_conn_path_connect+0x952/0xff0 [ 2005.256680][ T12] ? kmsan_internal_set_shadow_origin+0x7a/0x110 [ 2005.263157][ T12] ? __pfx_rds_tcp_conn_path_connect+0x10/0x10 [ 2005.269448][ T12] rds_connect_worker+0x353/0x4d0 [ 2005.274646][ T12] ? __pfx_rds_connect_worker+0x10/0x10 [ 2005.280335][ T12] process_scheduled_works+0xb21/0x1e30 [ 2005.286052][ T12] worker_thread+0xede/0x1580 [ 2005.290940][ T12] kthread+0x53f/0x600 [ 2005.295167][ T12] ? __pfx_worker_thread+0x10/0x10 [ 2005.300398][ T12] ? __pfx_kthread+0x10/0x10 [ 2005.305121][ T12] ret_from_fork+0x20f/0x910 [ 2005.309825][ T12] ? __switch_to+0x51c/0x750 [ 2005.314656][ T12] ? __pfx_kthread+0x10/0x10 [ 2005.319377][ T12] ret_from_fork_asm+0x1a/0x30 [ 2005.324334][ T12] [ 2005.327610][ T12] Kernel Offset: disabled [ 2005.332003][ T12] Rebooting in 86400 seconds..