last executing test programs: 40m50.742884104s ago: executing program 32 (id=156): r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000000400)=""/102400, 0x19000) openat$cgroup(0xffffffffffffffff, &(0x7f00000003c0)='syz0\x00', 0x200002, 0x0) 40m4.765006559s ago: executing program 33 (id=203): sendmsg$ETHTOOL_MSG_WOL_SET(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000059"], 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000400)='virtio_transport_alloc_pkt\x00', r0}, 0x18) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000680)=[{{&(0x7f0000000000)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0}}], 0x1, 0x4000000) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r2 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000540)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r4, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r5, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 39m53.44245929s ago: executing program 34 (id=214): r0 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1b) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=@base={0xa, 0xb, 0x42, 0x3e, 0x42}, 0x50) r2 = socket$inet6_udp(0xa, 0x2, 0x0) mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x300000a, 0x12, r2, 0x8522c000) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{r1, 0xffffffffffffffff}, &(0x7f0000000100), &(0x7f0000000180)}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r3, 0xffffffffffffffff}, &(0x7f0000000140), &(0x7f0000000280)}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x11, 0xc, &(0x7f00000001c0)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r4}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x8}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000240)='GPL\x00', 0x4, 0x1005, &(0x7f00000014c0)=""/4101, 0x0, 0xc}, 0x94) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000780)='devpts\x00', 0x0, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_PRIVFLAGS_GET(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000001c0)={0x2c, r6, 0x1, 0x70bd2b, 0x25dfdbfd, {}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_virt_wifi\x00'}]}]}, 0x2c}}, 0x40080) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x120) mount$binder(0x0, 0x0, 0x0, 0x28, &(0x7f0000000240)=ANY=[@ANYBLOB='max=']) getsockopt$llc_int(r0, 0x10c, 0x5, &(0x7f0000002940), &(0x7f0000000000)=0x4) 39m16.676535692s ago: executing program 35 (id=254): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000700)=@updpolicy={0xfc, 0x19, 0x1, 0x70bd25, 0x1, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, {0x0, 0x0, 0x8000000000000000}, 0x200, 0x0, 0x0, 0x0, 0x1}, [@tmpl={0x44, 0x5, [{{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x2000, 0x3c}, 0x2, @in6=@dev, 0x0, 0x0, 0x1, 0x0, 0x6}]}]}, 0xfc}, 0x1, 0x0, 0x0, 0x1}, 0x4000) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r2 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) write$tun(r1, &(0x7f0000001640)={@val={0x8, 0x800}, @val={0x7, 0x0, 0x0, 0x0, 0x14, 0x3}, @ipv4=@udp={{0x5, 0x4, 0x3, 0x1b, 0x20, 0x66, 0x0, 0x50, 0x11, 0x0, @private=0xa010102, @dev={0xac, 0x14, 0x14, 0x12}}, {0x4e20, 0x4e20, 0xc, 0x0, @gue={{0x1, 0x0, 0x0, 0xe4, 0x0, @void}}}}}, 0x2e) 34m46.149516758s ago: executing program 36 (id=404): r0 = fsopen(&(0x7f00000014c0)='proc\x00', 0x0) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7b, 0x4) prlimit64(0x0, 0xe, &(0x7f00000002c0)={0x9, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDMKTONE(r5, 0x4b30, 0x80000001) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x11, 0xb, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020700000000000002030207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000100850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='sched_switch\x00', r6}, 0x10) bind$inet6(0xffffffffffffffff, 0x0, 0x0) bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000000040)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r1, &(0x7f0000000700)="0c268a927f1f6588b967481241ba78600a34f65ac618ded8974895abeaf4b4834ff959bcecc7a95425a3a07e758044ab4ea6f7c555d88fecf90b037511bf746bec66ba", 0x994b6e03113064ae, 0x0, 0x0, 0x0) recvmsg(r1, &(0x7f0000000100)={0x0, 0xa, &(0x7f0000002200)=[{&(0x7f0000000780)=""/4108, 0x437aba2}], 0x1, 0x0, 0xfffffdee, 0x407006}, 0x104) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) 34m34.372070844s ago: executing program 37 (id=418): socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) eventfd(0x0) r0 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) connect$can_bcm(r0, &(0x7f0000000140), 0x10) r1 = syz_io_uring_setup(0x839, &(0x7f00000000c0)={0x0, 0x679d, 0x400, 0x2000046, 0x3ce}, &(0x7f0000000040)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r0, 0x0, &(0x7f0000000240)="144024aeae8b2b5d63f7449a372e1406d4defe495b5744eed6801d1d", 0x1c, 0x2400c0c7, 0x1}) r4 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) setsockopt$nfc_llcp_NFC_LLCP_MIUX(r4, 0x118, 0x1, &(0x7f0000000140)=0x4bc, 0x4) bind$nfc_llcp(r4, &(0x7f00000001c0)={0x27, 0x0, 0x0, 0x2, 0x0, 0x49, "c46e9fd1a84b7fa0bf2cca6beb9363a680b652a86bcf56a1b9ca5386103a5ccbe47b7b9aa6d8d701a3ba00000000b97800001022f987617c318500", 0x3a}, 0x60) getsockopt$inet_buf(r4, 0x118, 0x1, 0x0, &(0x7f00000003c0)) io_uring_enter(r1, 0x3516, 0x0, 0x0, 0x0, 0x0) socket$kcm(0x10, 0x2, 0x0) syz_usb_connect$cdc_ncm(0x6, 0xd1, &(0x7f0000000040)=ANY=[@ANYBLOB="12011003020000ff2405a1a44000010203010902bf80ba742c1f566aa09d6de69229b4000000020d00000524060001082400a9b30d240f010a0000000300ff000606241a05001407240a050905"], 0x0) syz_usb_connect(0x3, 0xf5, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000772aed408680070bb96c010203010902e30003dc2000000904003f000e01000505a40600010524007f000d240f0104000000080000000006241a03000a05240101070424020a1524120009a317a88b045e4f01a607c0ffcb7e392a09044c03003a92a2010a24010900010201020524040105"], 0x0) r5 = socket$pppl2tp(0x18, 0x1, 0x1) r6 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r5, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r6, {0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x31}}, 0x2, 0x0, 0x4}}, 0x2e) r7 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r7, &(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x4e21, @loopback}, 0x2, 0x4}}, 0x26) 33m45.050733436s ago: executing program 38 (id=464): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="600000000206010200000000000000000000000014000780050014000700000008001240000500000900020073797a3200000000050001000700000011000300686173683a6e65742c6e657400000000050005000a000000050004"], 0x60}, 0x1, 0x0, 0x0, 0x24004011}, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) execveat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0, 0x0, 0x1000) r4 = syz_usb_connect(0x5, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="120100000cb768405e0483020b990102030109021b000100000000090400000101292000090509"], 0x0) r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000200)='/sys/kernel/address_bits', 0x901000, 0x25) ioctl$FICLONERANGE(r5, 0x4020940d, &(0x7f00000004c0)={{r3}, 0x10000, 0xe2, 0x1}) syz_usb_control_io$hid(r4, 0x0, 0x0) shutdown(r0, 0x1) syz_open_dev$audion(&(0x7f00000011c0), 0x3, 0x8c4201) fsopen(&(0x7f0000000580)='overlay\x00', 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x81) socket$inet(0x10, 0x80000, 0x0) unshare(0x2a020400) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x0) 29m37.943697569s ago: executing program 39 (id=639): pipe(&(0x7f00000007c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$inet6(0xa, 0x2, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, 0x0, &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r2}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) setsockopt$inet6_group_source_req(r1, 0x29, 0x2e, &(0x7f0000000180)={0x8, {{0xa, 0x4e22, 0xfff, @mcast1, 0xbfd}}, {{0xa, 0x4e20, 0x5, @private0={0xfc, 0x0, '\x00', 0x1}, 0x9}}}, 0x108) setsockopt$inet6_group_source_req(r1, 0x29, 0x2e, &(0x7f00000002c0)={0x8, {{0xa, 0x4e20, 0x4, @mcast2, 0x6}}, {{0xa, 0x4e21, 0x4e11, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x5}}}, 0x108) getsockopt$inet6_buf(r1, 0x29, 0x30, &(0x7f0000000180)=""/214, &(0x7f0000000080)=0xd6) vmsplice(r0, &(0x7f00000000c0), 0x0, 0x1) close(r0) socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f00000003c0), r6) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r6, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20040005}, 0x0) sendmsg$ETHTOOL_MSG_DEBUG_SET(0xffffffffffffffff, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000180)=ANY=[], 0x50}}, 0x0) 29m20.535272646s ago: executing program 40 (id=656): socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) r3 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r4 = socket(0x28, 0x5, 0x1) connect$vsock_stream(r4, &(0x7f0000000180)={0x28, 0x0, 0x0, @local}, 0x10) connect$vsock_stream(r4, &(0x7f0000000400)={0x28, 0x0, 0x2710, @my=0x1}, 0x10) ioctl$UI_ABS_SETUP(r3, 0x401c5504, &(0x7f0000000340)={0x400000100002f}) write$uinput_user_dev(r3, 0x0, 0x0) ioctl$INCFS_IOC_CREATE_FILE(r1, 0xc058671e, &(0x7f0000000980)={{}, {0x7}, 0x8, 0x0, 0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x0, 0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0200000049000000000000000c3c0000ea9102d9a7b26f04e28590070986c27d5d0a0300a97687671e8f60c60172f2609e9a69dca2e79572bedecd32a06b20bd0c41401fe82c86db887f679f8c000000005500"], 0xaa}) socket(0x3, 0x4, 0x4) ioctl$UI_DEV_CREATE(r3, 0x5501) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) syz_emit_ethernet(0x41, &(0x7f0000000a80)=ANY=[@ANYBLOB="0700000004faaaaaaaaaaa1081003d0000f6840db67ccc87a5bf5a0b39ea57572923cff2449fd9381cb6908e00080000148a295d21b5cd82a938c2b67fb2a9ca5028723e4bcbea6cbe9b4f67299f0749143b483828d1a72f4ee8fabfed4d676c40fa47cd4f815e94d91d7920e1b50ea1bf03ea56a0866cd521e63f9d063c8537b9bd05c92480f23b182861b2f3a72ccf71edd21aae94cafcf1894ea6c2836197a035267bb06ebcf3eb9fcb325ec7b5fa465b8dbf37a3d6d5e3b1e64974b12386e9e0777a01989eedae5d74e37eb21cb56028f5b93b57157014c32e21c7ccade27c10e58e8e"], &(0x7f0000000800)={0x1, 0x3, [0xf1d, 0x40f, 0x8bb, 0x46b]}) read$FUSE(0xffffffffffffffff, 0x0, 0x0) sendto(r0, 0x0, 0x0, 0x80, &(0x7f0000000180)=@phonet={0x23, 0x0, 0x4, 0x18}, 0x80) mkdir(&(0x7f0000000840)='./file0\x00', 0x48) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)=ANY=[@ANYBLOB="48000000100001040000000000070000"], 0x48}, 0x1, 0x0, 0x0, 0x44000}, 0x40804) r5 = socket$inet6(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, &(0x7f00000003c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x308, 0x130, 0x12, 0x60a, 0x600, 0x202, 0x238, 0x2e8, 0x2e8, 0x238, 0x2c0, 0x4, 0x0, {[{{@ipv6={@ipv4={'\x00', '\xff\xff', @dev}, @mcast2, [0x4000000], [0x4000000], 'veth1_to_bond\x00', 'xfrm0\x00'}, 0x0, 0x108, 0x130, 0x0, {}, [@common=@unspec=@statistic={{0x38}}, @common=@inet=@socket2={{0x28}}]}, @common=@inet=@SET1={0x28, 'SET\x00', 0x1, {{0xffffffffffffffff}, {0xffffffffffffffff, 0xf9}}}}, {{@ipv6={@private2, @loopback, [], [], 'vxcan1\x00', 'geneve0\x00'}, 0x0, 0xa8, 0x108}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv4=@empty}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x368) 28m29.901353645s ago: executing program 41 (id=692): socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) syz_open_dev$loop(&(0x7f0000000100), 0xf01c, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) syz_open_dev$dri(&(0x7f0000000000), 0xabd7, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$packet(0x11, 0x3, 0x300) openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000440)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000040)='rtc_alarm_irq_enable\x00', r0}, 0x18) openat$rtc(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) syz_init_net_socket$llc(0x1a, 0x1, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_generic(0x10, 0x3, 0x10) socket$unix(0x1, 0x1, 0x0) r1 = socket(0x200000000000011, 0x4000000000080002, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(0xffffffffffffffff, 0x4010640d, &(0x7f0000000000)={0x14, 0x2}) sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYRES32, @ANYRES16=0x0, @ANYRES8=r1], 0x1c}, 0x1, 0x0, 0x0, 0x20000844}, 0x48885) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1400000007"], 0x50) pwrite64(0xffffffffffffffff, &(0x7f0000000000)='L', 0x1, 0x7ffffffe) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f0000000180)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r2, &(0x7f0000000000), 0xd) 26m4.975029148s ago: executing program 42 (id=768): syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) openat$nullb(0xffffffffffffff9c, 0x0, 0xa4242, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r2 = syz_open_dev$video(0x0, 0x1d24, 0x0) ioctl$VIDIOC_S_FMT(r2, 0xc0d05605, 0x0) mmap(&(0x7f0000ff4000/0xc000)=nil, 0xc000, 0x1000003, 0x20031, 0xffffffffffffffff, 0xffffe000) r3 = userfaultfd(0x80801) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000000180)={{&(0x7f0000ffc000/0x4000)=nil, 0x4000}, 0x1}) ioctl$UFFDIO_ZEROPAGE(r3, 0xc020aa04, &(0x7f00000001c0)={{&(0x7f0000ffc000/0x4000)=nil, 0x4000}, 0x1}) madvise(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x15) ioctl$UFFDIO_CONTINUE(r3, 0xc020aa07, &(0x7f00000002c0)={{&(0x7f0000ffd000/0x2000)=nil, 0x2000}}) r4 = syz_open_procfs$pagemap(0x0, &(0x7f0000000240)) ioctl$PAGEMAP_SCAN(r4, 0xc0606610, &(0x7f0000000140)={0x60, 0x0, &(0x7f00001cd000/0x1000)=nil, &(0x7f0000ffb000/0x4000)=nil, 0x4, 0x0, 0x0, 0x400000000000c2ff, 0x49, 0x0, 0x0, 0x76}) r5 = openat$vimc2(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r5, 0xc100565c, &(0x7f0000000040)={0x0, 0xfff, 0x4, {0xa, @pix_mp={0x12, 0x5be7, 0x30395056, 0x6, 0xb, [{0x80000004, 0xf}, {0x7ff, 0x5}, {0x7, 0x9}, {0x63d, 0x7fd}, {0x1, 0xb}, {0x7, 0x489aa92e}, {0x5}, {0xff, 0x7}], 0x1, 0xc, 0x2, 0x0, 0x3}}, 0xfffffffd}) quotactl$Q_GETNEXTQUOTA(0x1, &(0x7f0000000300)=@sg0, 0x0, &(0x7f0000000380)) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xb, 0x31, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) getgid() socket$nl_netfilter(0x10, 0x3, 0xc) openat$vicodec0(0xffffffffffffff9c, 0x0, 0x2, 0x0) 25m47.861880671s ago: executing program 43 (id=782): socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) openat$ttyS3(0xffffffffffffff9c, &(0x7f00000001c0), 0x2102, 0x0) r1 = bpf$MAP_CREATE(0x0, 0x0, 0x50) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mbind(&(0x7f0000051000/0x4000)=nil, 0x4000, 0x3, &(0x7f0000000080)=0x2, 0x95, 0x102) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) ioctl$VIDIOC_S_FMT(r1, 0xc0d05605, &(0x7f0000000300)={0xb, @sdr={0x34565559, 0x2}}) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) poll(&(0x7f0000000100), 0x0, 0x8) r4 = socket(0x40000000015, 0x5, 0x0) connect$inet(r4, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) sendto(0xffffffffffffffff, &(0x7f0000000100)="51bf7336f6cdf0ca6c13c866d6bc7b55f2d501845841bb2c078a988b7eb38f11a326083cf884920013fbae4a3a5d9c8ea7ea86669fb6212da0b5c82136d9519daeb17c9f96ad78cccef50ab4eabcafbc1a18735359cd7329816984d180735476f901401079349dfbe2e614f51a07c00544d90a594972ba60e1b497f88dcdc1e45dd28c0678d803638e7bd70a8638136e52c5e932c4111d3c917fb22583198b00707e3a2e001260cbc206759c245451686164eff751e4df", 0xb7, 0x20000000, &(0x7f0000000280)=@l2tp={0x2, 0x0, @broadcast, 0x2}, 0x80) bind$inet(r4, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x10) sendto$inet(r4, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$nl_xfrm(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=ANY=[], 0x1a000}}, 0x0) r5 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r5, 0x10e, 0xc, &(0x7f0000000180)={0x80000000, 0x0, 0x0, 0xb71}, 0x10) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={0x1c, 0x15, 0x1, 0x70bd26, 0x25dfdbff, {0xa}, [@typed={0x8, 0x1, 0x0, 0x0, @ipv4=@broadcast}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40001}, 0x40010) sendmsg$nl_route(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@mpls_getroute={0x1c, 0x1a, 0x1, 0x0, 0x0, {0x1c, 0x14, 0x0, 0x0, 0xfd, 0x2}}, 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0xc080) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x1, 0x2, &(0x7f0000000140)=@raw=[@ldst={0x1, 0x2, 0x3, 0x0, 0x1, 0xbf}, @exit], &(0x7f00000000c0)='GPL\x00', 0x9}, 0x94) 17m25.311700143s ago: executing program 44 (id=3319): r0 = memfd_create(&(0x7f0000000480)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xe7a\x9b\x11x\x0e\xa1\xcf\x1a\x98S7\xc9\x00\x00\x00\x00\x00\x00\a\x00\x00\x00\x00\x00\x00\x04\x879\xa24\xa9am\xde\xb2\xd3\xcbZJoa\xc4\x1acB\xaa\xc1\xfb Q\xd4\xf4\x01\xa52\xe2DG\x00\x00{\x9f\xa9\x97\x9b@\xdb\x00b\xe1br\xb6\x008\xe3\x10\xff\xc2\x9d\r2\x9e\x8e\x04sW\x1b\xb7\xb3\xa2\xc9&@\xca\xda\xdc\xe2/\x97X\xac\b\xb0\xc2<\x80E\x1a\xbc\xc7W\xda9VsA\xaf\xc6\xcf\xe1\xa1\xb5M\xa2\x85\xa6y\xc4J\xf1\xf7\xfcD\x95\xe3\xeb\xc7\xbc\x91\xb0\xa8\x9eo\xebF(\x9dL\x01vRk\xaacB\x04\xa7I\v\x86EZ\x96\xd5\x14OD\\\xe8R\xe4\xcd\xec\xcc\xd1\x0fre\xe86\xcd\xeb\xc4$\x98\x06J\xd6dD\x8d_U`ji{\xab\x97\xaf;l\x1f\xaf\xb38U\xcb\xfa\xb3j\x92\f\x81\xa0\xa2-g\b\x99\x0e\x8d\x8d\x16\xd9w\\\xf8\xce\xb0j\x9dp]\xc9H\x94\x0e\xf1v\xd9\xaf\x12$\x8d\x16%\x8b\x00', 0x3) ftruncate(r0, 0xffff) fcntl$addseals(r0, 0x409, 0x7) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd74) 13m51.609991165s ago: executing program 5 (id=4628): openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1b, &(0x7f00000000c0)={0x0, 0x15, "f9808039360bcc2b16d413871108db2bf1b8e11467"}, 0x0) r0 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000080), 0x2) r1 = syz_open_dev$radio(&(0x7f0000000000), 0xffffffffffffffff, 0x2) ioctl$VIDIOC_S_EXT_CTRLS(r1, 0xc0205649, 0x0) r2 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000040), 0x8002) write$binfmt_aout(r2, &(0x7f0000000380)=ANY=[@ANYBLOB="03070000b5"], 0xc8) write$binfmt_aout(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="03040000b500000001008aea0000feff"], 0xc8) dup3(r2, r0, 0x0) 13m51.217368996s ago: executing program 5 (id=4633): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='htcp', 0x4) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000000)=[@mss, @sack_perm, @window={0x3, 0x7}, @sack_perm, @window={0x3, 0x3, 0x401}, @window], 0x63) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0), 0x4) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0x12, 0x0, 0x12) recvfrom$inet(r0, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0xc9100120, 0x0, 0xfffffffffffffd25) 13m49.188434389s ago: executing program 5 (id=4635): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x3) 13m47.976999222s ago: executing program 5 (id=4637): mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x0) mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000300)='./file0/../file0\x00', 0x0, 0x2151090, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(0x0, &(0x7f00000003c0)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x262) umount2(&(0x7f00000001c0)='./file0/../file0\x00', 0x2) 13m47.672368346s ago: executing program 5 (id=4640): writev(0xffffffffffffffff, &(0x7f0000000180)=[{&(0x7f0000000000)="8724866f", 0x4}], 0x1) poll(&(0x7f0000000000), 0x20000000000000b5, 0x9) syz_emit_ethernet(0x2a, &(0x7f0000000000)={@random="8580f83288e1", @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1c}, @void, {@ipv4={0x800, @igmp={{0x5, 0x4, 0x1, 0x5, 0x1c, 0x67, 0x0, 0x0, 0x2, 0x0, @private=0xa010102, @multicast1}, {0x11, 0x81, 0x0, @multicast1}}}}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x8, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1a04"], 0x0, 0x2, 0x0, 0x0, 0x41100, 0x44, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r1, 0xc004743e, 0x110e22fff6) ioctl$TUNGETVNETLE(r0, 0x4010744d, &(0x7f0000000180)) 13m46.660231128s ago: executing program 5 (id=4648): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000540)=@gcm_128={{0x303}, "ff05000000ffffe2", "8e083700daf38a6d69e9b5e9c2f133d7", "6a3a05b9", "1277a5904e3402bb"}, 0x28) shutdown(r0, 0x1) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='freezer.state\x00', 0x275a, 0x0) write$cgroup_int(r1, &(0x7f0000000000), 0xffffff6a) sendfile(r0, r1, 0x0, 0xffffffff004) 13m46.093884707s ago: executing program 45 (id=4648): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000540)=@gcm_128={{0x303}, "ff05000000ffffe2", "8e083700daf38a6d69e9b5e9c2f133d7", "6a3a05b9", "1277a5904e3402bb"}, 0x28) shutdown(r0, 0x1) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='freezer.state\x00', 0x275a, 0x0) write$cgroup_int(r1, &(0x7f0000000000), 0xffffff6a) sendfile(r0, r1, 0x0, 0xffffffff004) 12m5.647921149s ago: executing program 3 (id=5029): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r3, &(0x7f0000000040)={0xa, 0xe22}, 0x1c) r4 = socket$netlink(0x10, 0x3, 0x4) writev(r4, &(0x7f0000000000)=[{&(0x7f00000001c0)="580000001500add427323b472545b45602117fffffff81000e224e217f000001925aa80020007b00090080007f000001e809000000ff0000f03ac71036000000ffffffffffffffffffe7ee00000000000000000200000000", 0x58}], 0x1) 12m4.509053399s ago: executing program 3 (id=5030): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = syz_io_uring_setup(0x126b, &(0x7f00000006c0)={0x0, 0x72de}, &(0x7f0000000140), &(0x7f0000000780)) io_uring_register$IORING_REGISTER_FILES_UPDATE2(r4, 0x2, &(0x7f0000002d40)={0x0, 0x0, 0x0, 0x0}, 0x20) io_uring_register$IORING_REGISTER_FILES_UPDATE(r4, 0x6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)=[0xffffffffffffffff]}, 0x20) 12m1.704295269s ago: executing program 3 (id=5033): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x40, 0x1ff) execveat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0, 0x0, 0x0) mount$nfs(&(0x7f0000000080)='@\a', &(0x7f00000000c0)='./file1\x00', &(0x7f0000000500), 0x20040c1, 0x0) 11m58.748007568s ago: executing program 3 (id=5036): socket$nl_generic(0x11, 0x3, 0x10) socket$inet6(0xa, 0x2, 0x0) socket$unix(0x1, 0x2, 0x0) socket$inet(0x2, 0xa, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) socket$nl_generic(0x10, 0x3, 0x10) socket$inet(0x2, 0x1, 0x0) socket$xdp(0x2c, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x6) syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x22402) bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x11, 0x8, &(0x7f0000000c00)=ANY=[@ANYBLOB="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"], 0x0}, 0x94) r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000013c0)=ANY=[@ANYBLOB="640000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="e5fda988000000002800128009000100766c616e00000000180002800c000200200000001f000000060001000000000008000500", @ANYRES32=r0, @ANYBLOB='\b\x00\n\x00', @ANYRES32, @ANYBLOB="0a00010000"], 0x64}}, 0x0) 11m55.94817987s ago: executing program 3 (id=5043): socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_route(0x10, 0x3, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) socket$inet6_sctp(0xa, 0x1, 0x84) socket$inet6_sctp(0xa, 0x5, 0x84) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="9000000010000305000000000000000000000700", @ANYRES32=0x0, @ANYBLOB="996e06004d4c0700540012800800010068737200480002800500030008000000050003000500000005000300fd00000008000200", @ANYRES32=r0, @ANYBLOB="08000100", @ANYRES32=r1], 0x90}}, 0x0) r2 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r2, &(0x7f00000000c0), 0x492492492492627, 0x0) 11m55.075577288s ago: executing program 4 (id=5045): r0 = socket(0x400000000010, 0x3, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) ioctl$sock_inet6_SIOCSIFDSTADDR(r0, 0x8918, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) getsockopt$IP_VS_SO_GET_SERVICES(r1, 0x0, 0x482, &(0x7f0000001640)=""/139, &(0x7f0000000100)=0x8) 11m53.857604336s ago: executing program 4 (id=5048): sendmsg$ETHTOOL_MSG_WOL_SET(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x42}, 0x90) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000400)='virtio_transport_alloc_pkt\x00', r0}, 0x18) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000680)=[{{&(0x7f0000000000)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0}}], 0x1, 0x4000000) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r2 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000540)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r4, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r5, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 11m51.603998071s ago: executing program 3 (id=5051): unshare(0x6a040000) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xe) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x94) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f00000004c0), 0x800, 0x0) ioctl$EVIOCGPROP(r1, 0x40047438, &(0x7f0000000180)=""/246) ioctl$PPPIOCSMRU1(r1, 0x40047452, &(0x7f0000000300)=0x5) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000140)=@IORING_OP_MSG_RING={0x28, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}) io_uring_enter(0xffffffffffffffff, 0x54, 0x0, 0x0, 0x0, 0x0) 11m49.464341973s ago: executing program 4 (id=5056): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r3, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="12000000040000000400000012"], 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000048c0)={r4, &(0x7f00000047c0), &(0x7f0000004880)=@udp=r3}, 0x20) recvmmsg(r3, &(0x7f0000000b80)=[{{0x0, 0xffffffffffffff6c, 0x0, 0x0, 0x0, 0x52}, 0xa}], 0x360, 0x120, 0x0) 11m46.646237076s ago: executing program 4 (id=5058): timer_create(0x0, 0x0, 0x0) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) socket$nl_netfilter(0x10, 0x3, 0xc) r4 = add_key$user(&(0x7f0000000100), &(0x7f00000001c0)={'syz', 0x3}, &(0x7f0000000200)="ed", 0x1, 0xffffffffffffffff) keyctl$set_timeout(0xf, r4, 0x1000) 11m45.091764638s ago: executing program 4 (id=5059): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000000)={'syzkaller0\x00', @broadcast}) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x4d, 0xfffffffb, 0x7fffffff}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) sendmsg$nl_route_sched(r3, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000001780)=@newqdisc={0x434, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r5, {0x10}, {}, {0xa, 0x1}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x408, 0x2, [@TCA_TBF_RTAB={0x404, 0x2, [0x1, 0x8, 0x8, 0x8, 0xcfe, 0x3, 0x80000000, 0x8a5, 0x6, 0x10, 0x8, 0xb, 0x2, 0xf6cb, 0x6ab, 0x5, 0x9, 0x8, 0x6, 0x0, 0x4, 0x7fffffff, 0x10000, 0x7, 0x0, 0x0, 0x7, 0x6, 0xfffffffe, 0x372b, 0x2, 0x1000, 0xfffffffa, 0x8, 0xae6, 0x6, 0xfffffffc, 0x1, 0x0, 0x7e, 0x8, 0x9d, 0x3, 0x240, 0x1, 0x7, 0x7, 0x6, 0x1000, 0x7, 0xb, 0x401, 0x789f, 0x7ff, 0x3, 0x8, 0x800, 0x9, 0x10000, 0x6, 0xff, 0x8, 0x2, 0x400, 0x401, 0xc709, 0x7, 0x5, 0x3, 0x7, 0x10000, 0x4, 0x40, 0x8, 0xc1, 0x7, 0x3ff, 0x200, 0x1, 0x6, 0x7fffffff, 0xfffffff9, 0x3, 0xa, 0xfffffffc, 0x1, 0x0, 0x9, 0x2, 0x4, 0x2, 0xc, 0x7b, 0xff, 0x800, 0x4, 0x80, 0x5, 0x4, 0x5, 0x0, 0x5, 0x7, 0x40, 0x8, 0x2, 0x6, 0x8226, 0xe, 0x81, 0x3, 0x5, 0x3800000, 0xf12, 0x0, 0x2, 0x8911, 0x9, 0x0, 0x9, 0x2, 0x0, 0x3, 0x8, 0x2, 0x2, 0x2, 0xd098, 0x9, 0x8, 0x3, 0xa, 0xf7, 0x4, 0x3, 0x3, 0x0, 0xfffffffc, 0x0, 0x1, 0x81, 0xffff6660, 0x1, 0x3, 0x4, 0x0, 0x9, 0x3, 0x6, 0x5, 0xd7a, 0xfffffff9, 0x3, 0x8, 0x2, 0xfffffffd, 0x3864, 0x4, 0x7, 0x1, 0x4, 0x4c, 0x82ca, 0x4eeb, 0x6, 0xbdd, 0x5fdf, 0xc, 0x3, 0x10000, 0x9, 0x54, 0x8, 0x8, 0x800, 0x1ff, 0x9, 0xccc, 0x1, 0x7, 0x7ff, 0x2, 0xe, 0xc, 0xb, 0x80000001, 0x8001, 0x4, 0x9, 0xfffffffe, 0xfffffffa, 0x6, 0xb, 0x7ff, 0x1, 0x10, 0x5, 0x1, 0x4a0, 0x3, 0x0, 0x3ff, 0x9, 0x7, 0x1, 0x5, 0x7, 0x1, 0xfffffe01, 0x8001, 0x6, 0x3, 0x3, 0x9, 0x2, 0x4, 0x0, 0x1, 0x100, 0x4, 0x3, 0xffffff00, 0x6, 0x4, 0x3, 0x6, 0x5, 0x5c49, 0x7f, 0x7, 0x8cc7, 0x7, 0x0, 0x1, 0xcc99, 0x3, 0xb, 0x0, 0xffff, 0x0, 0xb64, 0x4, 0xf, 0x9, 0x77dc, 0x8, 0x1, 0x4, 0x7ff, 0x676, 0x10, 0x8, 0xffff, 0xfff, 0x8, 0x7]}]}}]}, 0x434}, 0x1, 0x0, 0x0, 0x2004009c}, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r7 = socket$packet(0x11, 0x2, 0x300) sendto$packet(r7, 0x0, 0x0, 0x40000c0, &(0x7f00000001c0)={0x11, 0xf8, r6, 0x1, 0xd8, 0x6, @remote}, 0x14) 11m35.415282933s ago: executing program 46 (id=5051): unshare(0x6a040000) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xe) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x94) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f00000004c0), 0x800, 0x0) ioctl$EVIOCGPROP(r1, 0x40047438, &(0x7f0000000180)=""/246) ioctl$PPPIOCSMRU1(r1, 0x40047452, &(0x7f0000000300)=0x5) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000140)=@IORING_OP_MSG_RING={0x28, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}) io_uring_enter(0xffffffffffffffff, 0x54, 0x0, 0x0, 0x0, 0x0) 11m31.212347939s ago: executing program 4 (id=5077): socket$key(0xf, 0x3, 0x2) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x50, 0xffffffffffffffff, 0x0) socket(0x2b, 0x3, 0x1000) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) ioctl$sock_FIOGETOWN(r0, 0x8903, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x100000001, 0xfffffe0000000001, 0xfa11, 0x65aa}, 0x0) mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x81c0, 0x2) execveat(0xffffffffffffff9c, &(0x7f0000000280)='./file2\x00', 0x0, 0x0, 0x0) syz_io_uring_setup(0x4951, 0x0, 0x0, &(0x7f0000000380)) symlink(&(0x7f0000002040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', &(0x7f0000000000)='./file0\x00') 11m15.917000091s ago: executing program 47 (id=5077): socket$key(0xf, 0x3, 0x2) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x50, 0xffffffffffffffff, 0x0) socket(0x2b, 0x3, 0x1000) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) ioctl$sock_FIOGETOWN(r0, 0x8903, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x100000001, 0xfffffe0000000001, 0xfa11, 0x65aa}, 0x0) mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x81c0, 0x2) execveat(0xffffffffffffff9c, &(0x7f0000000280)='./file2\x00', 0x0, 0x0, 0x0) syz_io_uring_setup(0x4951, 0x0, 0x0, &(0x7f0000000380)) symlink(&(0x7f0000002040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', &(0x7f0000000000)='./file0\x00') 8m37.250227206s ago: executing program 9 (id=5396): socket$netlink(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) creat(0x0, 0x0) socket$igmp6(0xa, 0x3, 0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) write$binfmt_register(0xffffffffffffffff, 0x0, 0x0) open$dir(0x0, 0x1e9240, 0x180) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) request_key(0x0, 0x0, 0x0, 0x0) r3 = socket$inet6(0xa, 0x802, 0x0) setsockopt$inet6_buf(r3, 0x29, 0x39, &(0x7f0000000040)="ff02040000ffffffffffffffff1f2be82db1af0000000000", 0x18) 8m37.072148552s ago: executing program 9 (id=5398): r0 = socket$inet6(0xa, 0x2, 0x0) ioctl$int_in(r0, 0x5452, &(0x7f0000000000)=0x1) sendmmsg$inet6(r0, &(0x7f0000007240)=[{{&(0x7f0000000100)={0xa, 0x4e22, 0x6, @mcast2, 0x7}, 0x1c, 0x0}}], 0x1, 0x1c000) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x9, 0x8c4b815a5465c2b1, 0xffffffffffffffff, 0x0) sendmsg$inet6(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffd9}, 0x0) 8m36.958703613s ago: executing program 9 (id=5400): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000001c0), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000000340)={'wpan0\x00', 0x0}) sendmsg$IEEE802154_LLSEC_ADD_DEV(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)={0x30, r1, 0x852dd6c070cd7e4d, 0x0, 0x0, {}, [@IEEE802154_ATTR_LLSEC_FRAME_COUNTER={0x8, 0x2f, 0xffffffff}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0x2000000}}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r3}]}, 0x30}, 0x4, 0x700000000000000}, 0x0) 8m36.867335396s ago: executing program 9 (id=5402): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x101091, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) mount$bind(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000280)='./file0/file0\x00', 0x0, 0x1000, 0x0) move_mount(0xffffffffffffff9c, &(0x7f0000000380)='./file0\x00', r0, &(0x7f0000000240)='./file0/file0\x00', 0x72) 8m36.76873904s ago: executing program 9 (id=5404): r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f00000000c0), 0x8200, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, &(0x7f0000000100)={0x1b, "5660359c3245d1c42317afad7d48ed51000000000000000100", 0xffffffffffffffff}) r2 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000040), 0x141100, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r2, 0xc0285700, &(0x7f0000000140)={0x1000, "340b7832ceefd131b8e6498c25f58fad9987ffe93bbabd18cf501922de974a27", 0xffffffffffffffff}) ioctl$SYNC_IOC_MERGE(r3, 0xc0303e03, &(0x7f00000001c0)={"3c24139ed44aec57f2e2ad238e7b448ed886923c31d4b8affbf514fd00", r1, 0xffffffffffffffff}) close_range(r0, r4, 0x0) 8m33.508613864s ago: executing program 9 (id=5416): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r0, 0x84, 0x81, &(0x7f00000000c0)="1a00000082000000", 0x8) setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r0, 0x84, 0x15, &(0x7f0000000180)={0x3}, 0x1) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) sendto$inet6(r0, &(0x7f0000000040)='l', 0x1, 0x0, &(0x7f0000000100)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) 8m32.164357441s ago: executing program 48 (id=5416): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r0, 0x84, 0x81, &(0x7f00000000c0)="1a00000082000000", 0x8) setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r0, 0x84, 0x15, &(0x7f0000000180)={0x3}, 0x1) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) sendto$inet6(r0, &(0x7f0000000040)='l', 0x1, 0x0, &(0x7f0000000100)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) 5m26.77548845s ago: executing program 8 (id=5826): socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) write$char_usb(0xffffffffffffffff, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="12000000020000000400000002"], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000600)={{r4}, &(0x7f0000000580)=0x2, &(0x7f00000005c0)=r0}, 0x20) r5 = syz_io_uring_setup(0xd1, &(0x7f0000000280)={0x0, 0x8a73, 0x8, 0x22, 0x1b7}, &(0x7f0000000300)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000000)=0x8000103, 0x0, 0x4) syz_io_uring_submit(r6, r7, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)=""/15, 0xf}], 0x1}) io_uring_enter(r5, 0x47ba, 0x3000000, 0x0, 0x0, 0x0) 5m19.87202054s ago: executing program 8 (id=5831): fsopen(0x0, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) prlimit64(0x0, 0xe, &(0x7f00000002c0)={0x9, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x11, 0xb, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020700000000000002030207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000100850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000000040)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r0, &(0x7f0000000700)="0c268a927f1f6588b967481241ba78600a34f65ac618ded8974895abeaf4b4834ff959bcecc7a95425a3a07e758044ab4ea6f7c555d88fecf90b037511bf746bec66ba", 0x994b6e03113064ae, 0x0, 0x0, 0x0) 5m18.381342696s ago: executing program 8 (id=5832): socket$inet6_mptcp(0xa, 0x1, 0x106) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000e, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$kcm(0xa, 0x922000000003, 0x11) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="18050000000000fe000000004b64ffec850000007d000000040000000700000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2}, 0x94) prlimit64(r0, 0xd, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r3}, 0xc) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000b40)={{0x14}, [@NFT_MSG_NEWSET={0x14, 0x12, 0xa, 0x9, 0x0, 0x0, {0x2}}], {0x14}}, 0x3c}}, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_GET(r5, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x34, 0x1, 0x8, 0x301, 0x0, 0x0, {0x13, 0x0, 0xa}, [@CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x6004}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}]}, 0x34}}, 0x20004040) 5m16.815204073s ago: executing program 8 (id=5833): connect$netlink(0xffffffffffffffff, &(0x7f00000014c0)=@proc={0x10, 0x0, 0x1}, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) socket$unix(0x1, 0x1, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mkdir(&(0x7f00000000c0)='./bus\x00', 0x0) mount$bind(&(0x7f00000002c0)='.\x00', 0x0, 0x0, 0x101091, 0x0) mkdir(&(0x7f0000000440)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000a00)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@nfs_export_on}]}) chdir(0x0) 5m15.504411039s ago: executing program 8 (id=5834): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) creat(&(0x7f0000010280)='./file0\x00', 0x182) prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x8, 0x244}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000040)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x8, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000130000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r4}, 0x10) lsetxattr$security_capability(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), &(0x7f0000000040)=@v3, 0x18, 0x0) lgetxattr(&(0x7f0000000000)='./file0\x00', &(0x7f0000000280)=ANY=[], 0x0, 0x1) 5m14.298999614s ago: executing program 8 (id=5835): r0 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) socket(0x2c, 0x3, 0x0) bind$inet(r1, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r1, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) sendmmsg(r1, &(0x7f0000007fc0), 0x800001d, 0x0) socket$qrtr(0x2a, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$packet(0x11, 0x3, 0x300) ioctl$sock_netdev_private(r0, 0x89fc, &(0x7f0000000100)) socket$packet(0x11, 0x2, 0x300) r2 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0xc, 0x8, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000000000000000000000000000018020000", @ANYRES32=r2, @ANYBLOB="0000000000000000b703000000000000850000000d000000b70000000000000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r3, 0x3e8, 0xf, 0x0, &(0x7f0000000000)="c1df07000000d30a298ee68886dd87", 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000040)={0x0, @private, @multicast2}, 0x0) 4m58.841435411s ago: executing program 49 (id=5835): r0 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) socket(0x2c, 0x3, 0x0) bind$inet(r1, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r1, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) sendmmsg(r1, &(0x7f0000007fc0), 0x800001d, 0x0) socket$qrtr(0x2a, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$packet(0x11, 0x3, 0x300) ioctl$sock_netdev_private(r0, 0x89fc, &(0x7f0000000100)) socket$packet(0x11, 0x2, 0x300) r2 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0xc, 0x8, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000000000000000000000000000018020000", @ANYRES32=r2, @ANYBLOB="0000000000000000b703000000000000850000000d000000b70000000000000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r3, 0x3e8, 0xf, 0x0, &(0x7f0000000000)="c1df07000000d30a298ee68886dd87", 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000040)={0x0, @private, @multicast2}, 0x0) 56.664627093s ago: executing program 1 (id=6035): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e78, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{}, 0x80}}]}, {0x2}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x800}, 0x40000) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x1, &(0x7f0000000280)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f00000003c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mount$9p_virtio(&(0x7f0000000340), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, &(0x7f0000000c00)=ANY=[]) chdir(&(0x7f0000000300)='./file0\x00') r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.throttle.io_service_bytes_recursive\x00', 0x275a, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x20, 0x3, &(0x7f00000001c0)=ANY=[@ANYBLOB="950000000000000000000000000d770300e1ff"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = fsopen(&(0x7f0000000100)='squashfs\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r6, 0x6, 0x0, 0x0, 0x0) write$binfmt_script(r5, &(0x7f0000000640)={'#! ', './file0', [{}, {0x20, 'rp\xee\xff\xe4'}, {0x20, '\x12~\x85\xecZ@\xb5\x18\xec\x182\xc9L\xdc\xb2\x81\xdam\xa8\xc5{\x92\x14\xce\xf2\xb8\xf7\xa9\xa7\x00X \x93t\x91!%\xff\x13\xdc\aIY\x0e\xb4zh\\\x06\r\xe8^Z\x81\xb8$:P\x83\x98_\xa1\x98\xd6\xd2g-\xefr\x14<\xd1\xb84\x94\xa09\x9f\x12I\xed\xd5dT#f\xb4\xf3\x88\xcf\xde\x00\xd4\x81WN\xca\xb5c\xbf\r\xb0Q\xa9\xbaC\xd2\xa2\x1d~\xc5D(\x92A\x12f\x83fn\xd0\xb6\x02\x116t:|\x94\xc7\xac\xf6\xbc~m\xd6\xd1\xe5\xe0\xdd\xc2\x9cl#\x85\xab\xe7\xa9\xcb\"\xd2\x97\x10\xa5\xa8\xc1\x8d@U\a]Gi^\xd2\xdf\xb0\xa5!\x836\x92\xc9\x92\xe4'}], 0xa, "7bad65c4da5338577feb172ca63250224c76e2027f000000000000007e2ac7fe2e31a2e87e3ee43ed92dfbb6bc0700de24db4ec870b8000000000002002c65e7495fe9afeb28bb"}, 0x109) socket$nl_route(0x10, 0x3, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x1) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f0000000600)=ANY=[@ANYBLOB="fc000000190001002dbd70000000000000000000000000000000100000000001fe8000000000000000000000000000bb00000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000c00000000000000000000000000000000000000000000000000000000000000ffffffffffffffff000000000020000000000000000000000000000000000000000a000000000000feffffffff7f400002000000000000080000000000000000010000004400050000000000000000000000000000000000000000003c00000002000000ffffffff00000000000000000000000006000000040100"/176], 0xfc}}, 0x0) 55.045535283s ago: executing program 1 (id=6038): socket$inet_udp(0x2, 0x2, 0x0) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x4) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='cpuacct.usage_sys\x00', 0x26e1, 0x0) r3 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$inet(r3, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x34004000) 51.334160141s ago: executing program 7 (id=6042): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r1 = getpid() open(0x0, 0x147842, 0x6) sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mkdir(&(0x7f0000000440)='./file1\x00', 0x0) mount(0x0, &(0x7f0000000200)='./file1\x00', &(0x7f0000000000)='tmpfs\x00', 0x8, &(0x7f00000001c0)='usrquota') r4 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_MAP(r4, 0x3b85, &(0x7f0000000200)={0x28, 0x5, 0x0, 0x0, &(0x7f0000000a40)="7f", 0x1, 0x4}) r5 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r5, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_ALLOW_IOVAS(r5, 0x3b82, &(0x7f0000000000)={0x18, r6, 0x1, 0x0, &(0x7f00000004c0)=[{0x81, 0xfffffffffffff801}]}) r7 = syz_open_dev$tty1(0xc, 0x4, 0x1) syz_open_procfs(0x0, &(0x7f0000000040)='net/icmp6\x00') ioctl$TIOCGSID(r7, 0x5429, 0x0) 47.342325686s ago: executing program 7 (id=6046): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e78, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{}, 0x80}}]}, {0x2}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x800}, 0x40000) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x1, &(0x7f0000000280)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f00000003c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mount$9p_virtio(&(0x7f0000000340), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="56c78e3c733d76697274696f2c6e6f657874656e642c6163638173733d616e792c63616368653d667363616368652c76657273696f6e3d3970323030302e75"]) chdir(&(0x7f0000000300)='./file0\x00') r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.throttle.io_service_bytes_recursive\x00', 0x275a, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x20, 0x3, &(0x7f00000001c0)=ANY=[@ANYBLOB="950000000000000000000000000d770300e1"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = fsopen(&(0x7f0000000100)='squashfs\x00', 0x1) fsconfig$FSCONFIG_SET_STRING(r6, 0x1, &(0x7f0000000000)='source', &(0x7f0000000040), 0x0) fsconfig$FSCONFIG_CMD_CREATE(r6, 0x6, 0x0, 0x0, 0x0) write$binfmt_script(r5, &(0x7f0000000640)={'#! ', './file0', [{}, {0x20, 'rp\xee\xff\xe4'}, {0x20, '\x12~\x85\xecZ@\xb5\x18\xec\x182\xc9L\xdc\xb2\x81\xdam\xa8\xc5{\x92\x14\xce\xf2\xb8\xf7\xa9\xa7\x00X \x93t\x91!%\xff\x13\xdc\aIY\x0e\xb4zh\\\x06\r\xe8^Z\x81\xb8$:P\x83\x98_\xa1\x98\xd6\xd2g-\xefr\x14<\xd1\xb84\x94\xa09\x9f\x12I\xed\xd5dT#f\xb4\xf3\x88\xcf\xde\x00\xd4\x81WN\xca\xb5c\xbf\r\xb0Q\xa9\xbaC\xd2\xa2\x1d~\xc5D(\x92A\x12f\x83fn\xd0\xb6\x02\x116t:|\x94\xc7\xac\xf6\xbc~m\xd6\xd1\xe5\xe0\xdd\xc2\x9cl#\x85\xab\xe7\xa9\xcb\"\xd2\x97\x10\xa5\xa8\xc1\x8d@U\a]Gi^\xd2\xdf\xb0\xa5!\x836\x92\xc9\x92\xe4'}], 0xa, "7bad65c4da5338577feb172ca63250224c76e2027f000000000000007e2ac7fe2e31a2e87e3ee43ed92dfbb6bc0700de24db4ec870b8000000000002002c65e7495fe9afeb28bb"}, 0x109) socket$nl_route(0x10, 0x3, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x1) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f0000000600)=ANY=[@ANYBLOB="fc000000190001002dbd70000000000000000000000000000000100000000001fe8000000000000000000000000000bb00000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000c00000000000000000000000000000000000000000000000000000000000000ffffffffffffffff000000000020000000000000000000000000000000000000000a000000000000feffffffff7f400002000000000000080000000000000000010000004400050000000000000000000000000000000000000000003c00000002000000ffffffff00000000000000000000000006000000040100"/176], 0xfc}}, 0x0) 47.249518185s ago: executing program 1 (id=6047): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e78, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{}, 0x80}}]}, {0x2}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x800}, 0x40000) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x1, &(0x7f0000000280)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f00000003c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mount$9p_virtio(&(0x7f0000000340), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="56c78e3c733d76697274696f2c6e6f657874656e642c6163638173733d616e792c63616368653d667363616368652c76657273696f6e3d3970323030302e75"]) chdir(&(0x7f0000000300)='./file0\x00') r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.throttle.io_service_bytes_recursive\x00', 0x275a, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x20, 0x3, &(0x7f00000001c0)=ANY=[@ANYBLOB="950000000000000000000000000d770300e1ff"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = fsopen(&(0x7f0000000100)='squashfs\x00', 0x1) fsconfig$FSCONFIG_SET_STRING(r6, 0x1, &(0x7f0000000000)='source', &(0x7f0000000040), 0x0) fsconfig$FSCONFIG_CMD_CREATE(r6, 0x6, 0x0, 0x0, 0x0) write$binfmt_script(r5, &(0x7f0000000640)={'#! ', './file0', [{}, {0x20, 'rp\xee\xff\xe4'}], 0xa, "7bad65c4da5338577feb172ca63250224c76e2027f000000000000007e2ac7fe2e31a2e87e3ee43ed92dfbb6bc0700de24db4ec870b8000000000002002c65e7495fe9afeb28bb"}, 0x59) socket$nl_route(0x10, 0x3, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x1) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f0000000600)=ANY=[@ANYBLOB="fc000000190001002dbd70000000000000000000000000000000100000000001fe8000000000000000000000000000bb00000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000c00000000000000000000000000000000000000000000000000000000000000ffffffffffffffff000000000020000000000000000000000000000000000000000a000000000000feffffffff7f400002000000000000080000000000000000010000004400050000000000000000000000000000000000000000003c00000002000000ffffffff00000000000000000000000006000000040100"/176], 0xfc}}, 0x0) 44.056322274s ago: executing program 7 (id=6049): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r1 = getpid() open(0x0, 0x147842, 0x6) sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mkdir(&(0x7f0000000440)='./file1\x00', 0x0) mount(0x0, &(0x7f0000000200)='./file1\x00', &(0x7f0000000000)='tmpfs\x00', 0x8, &(0x7f00000001c0)='usrquota') r4 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_MAP(r4, 0x3b85, &(0x7f0000000200)={0x28, 0x5, 0x0, 0x0, &(0x7f0000000a40)="7f", 0x1, 0x4}) r5 = openat$iommufd(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r5, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_ALLOW_IOVAS(r5, 0x3b82, &(0x7f0000000000)={0x18, r6, 0x1, 0x0, &(0x7f00000004c0)=[{0x81, 0xfffffffffffff801}]}) r7 = syz_open_dev$tty1(0xc, 0x4, 0x1) syz_open_procfs(0x0, &(0x7f0000000040)='net/icmp6\x00') ioctl$TIOCGSID(r7, 0x5429, &(0x7f0000000180)) 42.541866613s ago: executing program 7 (id=6051): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x18) prlimit64(0x0, 0xe, 0x0, 0x0) r1 = getpid() open(0x0, 0x147842, 0x6) sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mkdir(&(0x7f0000000440)='./file1\x00', 0x0) mount(0x0, &(0x7f0000000200)='./file1\x00', &(0x7f0000000000)='tmpfs\x00', 0x8, &(0x7f00000001c0)='usrquota') r4 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_MAP(r4, 0x3b85, &(0x7f0000000200)={0x28, 0x5, 0x0, 0x0, &(0x7f0000000a40)="7f", 0x1, 0x4}) r5 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r5, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_ALLOW_IOVAS(r5, 0x3b82, &(0x7f0000000000)={0x18, r6, 0x1, 0x0, &(0x7f00000004c0)=[{0x81, 0xfffffffffffff801}]}) r7 = syz_open_dev$tty1(0xc, 0x4, 0x1) syz_open_procfs(0x0, &(0x7f0000000040)='net/icmp6\x00') ioctl$TIOCGSID(r7, 0x5429, &(0x7f0000000180)) 38.876320406s ago: executing program 1 (id=6052): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e78, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{}, 0x80}}]}, {0x2}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x800}, 0x40000) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x1, &(0x7f0000000280)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f00000003c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mount$9p_virtio(&(0x7f0000000340), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="56c78e3c733d76697274696f2c6e6f657874656e642c6163638173733d616e792c63616368653d667363616368652c76657273696f6e3d3970323030302e75"]) chdir(&(0x7f0000000300)='./file0\x00') r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.throttle.io_service_bytes_recursive\x00', 0x275a, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x20, 0x3, &(0x7f00000001c0)=ANY=[@ANYBLOB="950000000000000000000000000d770300e1ff"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = fsopen(&(0x7f0000000100)='squashfs\x00', 0x1) fsconfig$FSCONFIG_SET_STRING(r6, 0x1, &(0x7f0000000000)='source', &(0x7f0000000040), 0x0) fsconfig$FSCONFIG_CMD_CREATE(r6, 0x6, 0x0, 0x0, 0x0) write$binfmt_script(r5, &(0x7f0000000640)={'#! ', './file0', [{}, {0x20, 'rp\xee\xff\xe4'}, {0x20, '\x12~\x85\xecZ@\xb5\x18\xec\x182\xc9L\xdc\xb2\x81\xdam\xa8\xc5{\x92\x14\xce\xf2\xb8\xf7\xa9\xa7\x00X \x93t\x91!%\xff\x13\xdc\aIY\x0e\xb4zh\\\x06\r\xe8^Z\x81\xb8$:P\x83\x98_\xa1\x98\xd6\xd2g-\xefr\x14<\xd1\xb84\x94\xa09\x9f\x12I\xed\xd5dT#f\xb4\xf3\x88\xcf\xde\x00\xd4\x81WN\xca\xb5c\xbf\r\xb0Q\xa9\xbaC\xd2\xa2\x1d~\xc5D(\x92A\x12f\x83fn\xd0\xb6\x02\x116t:|\x94\xc7\xac\xf6\xbc~m\xd6\xd1\xe5\xe0\xdd\xc2\x9cl#\x85\xab\xe7\xa9\xcb\"\xd2\x97\x10\xa5\xa8\xc1\x8d@U\a]Gi^\xd2\xdf\xb0\xa5!\x836\x92\xc9\x92\xe4'}], 0xa, "7bad65c4da5338577feb172ca63250224c76e2027f000000000000007e2ac7fe2e31a2e87e3ee43ed92dfbb6bc0700de24db4ec870b8"}, 0xf8) socket$nl_route(0x10, 0x3, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x1) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f0000000600)=ANY=[@ANYBLOB="fc000000190001002dbd70000000000000000000000000000000100000000001fe8000000000000000000000000000bb00000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000c00000000000000000000000000000000000000000000000000000000000000ffffffffffffffff000000000020000000000000000000000000000000000000000a000000000000feffffffff7f400002000000000000080000000000000000010000004400050000000000000000000000000000000000000000003c00000002000000ffffffff00000000000000000000000006000000040100"/176], 0xfc}}, 0x0) 34.95671863s ago: executing program 7 (id=6057): socket$inet_udp(0x2, 0x2, 0x0) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='cpuacct.usage_sys\x00', 0x26e1, 0x0) r4 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$inet(r4, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x34004000) 34.814359506s ago: executing program 1 (id=6058): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e78, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{}, 0x80}}]}, {0x2}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x800}, 0x40000) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x1, &(0x7f0000000280)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f00000003c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mount$9p_virtio(&(0x7f0000000340), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="56c78e3c733d76697274696f2c6e6f657874656e642c6163638173733d616e792c63616368653d667363616368652c76657273696f6e3d3970323030302e75"]) chdir(&(0x7f0000000300)='./file0\x00') r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.throttle.io_service_bytes_recursive\x00', 0x275a, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x20, 0x3, &(0x7f00000001c0)=ANY=[@ANYBLOB="950000000000000000000000000d770300e1ff"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = fsopen(&(0x7f0000000100)='squashfs\x00', 0x1) fsconfig$FSCONFIG_SET_STRING(r6, 0x1, &(0x7f0000000000)='source', &(0x7f0000000040), 0x0) fsconfig$FSCONFIG_CMD_CREATE(r6, 0x6, 0x0, 0x0, 0x0) write$binfmt_script(r5, &(0x7f0000000640)={'#! ', './file0', [{}, {0x20, 'rp\xee\xff\xe4'}, {0x20, '\x12~\x85\xecZ@\xb5\x18\xec\x182\xc9L\xdc\xb2\x81\xdam\xa8\xc5{\x92\x14\xce\xf2\xb8\xf7\xa9\xa7\x00X \x93t\x91!%\xff\x13\xdc\aIY\x0e\xb4zh\\\x06\r\xe8^Z\x81\xb8$:P\x83\x98_\xa1\x98\xd6\xd2g-\xefr\x14<\xd1\xb84\x94\xa09\x9f\x12I\xed\xd5dT#f\xb4\xf3\x88\xcf\xde\x00\xd4\x81WN\xca\xb5c\xbf\r\xb0Q\xa9\xbaC\xd2\xa2\x1d~\xc5D(\x92A\x12f\x83fn\xd0\xb6\x02\x116t:|\x94\xc7\xac\xf6\xbc~m\xd6\xd1\xe5\xe0\xdd\xc2\x9cl#\x85\xab\xe7\xa9\xcb\"\xd2\x97\x10\xa5\xa8\xc1\x8d@U\a]Gi^\xd2\xdf\xb0\xa5!\x836\x92\xc9\x92\xe4'}], 0xa, "7bad65c4da5338577feb172ca63250224c76e2027f000000000000007e2ac7fe2e31a2e87e3ee43ed92dfbb6bc0700de24db4ec870b8000000000002002c65e7495fe9afeb28bb"}, 0x109) socket$nl_route(0x10, 0x3, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x1) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f0000000600)=ANY=[@ANYBLOB="fc000000190001002dbd70000000000000000000000000000000100000000001fe8000000000000000000000000000bb00000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000c00000000000000000000000000000000000000000000000000000000000000ffffffffffffffff000000000020000000000000000000000000000000000000000a000000000000feffffffff7f400002000000000000080000000000000000010000004400050000000000000000000000000000000000000000003c00000002000000ffffffff00000000000000000000000006000000040100"/176], 0xfc}}, 0x0) 32.598913305s ago: executing program 6 (id=6061): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r0 = getpid() open(0x0, 0x147842, 0x6) sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mount(0x0, &(0x7f0000000200)='./file1\x00', &(0x7f0000000000)='tmpfs\x00', 0x8, &(0x7f00000001c0)='usrquota') r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r3, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_ALLOW_IOVAS(r3, 0x3b82, &(0x7f0000000000)={0x18, r4, 0x1, 0x0, &(0x7f00000004c0)=[{0x81, 0xfffffffffffff801}]}) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) syz_open_procfs(0x0, &(0x7f0000000040)='net/icmp6\x00') ioctl$TIOCGSID(r5, 0x5429, &(0x7f0000000180)) 30.72417619s ago: executing program 7 (id=6062): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r1 = getpid() open(0x0, 0x147842, 0x6) sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, 0x0, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mkdir(&(0x7f0000000440)='./file1\x00', 0x0) mount(0x0, &(0x7f0000000200)='./file1\x00', &(0x7f0000000000)='tmpfs\x00', 0x8, &(0x7f00000001c0)='usrquota') r4 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_MAP(r4, 0x3b85, &(0x7f0000000200)={0x28, 0x5, 0x0, 0x0, &(0x7f0000000a40)="7f", 0x1, 0x4}) r5 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r5, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_ALLOW_IOVAS(r5, 0x3b82, &(0x7f0000000000)={0x18, r6, 0x1, 0x0, &(0x7f00000004c0)=[{0x81, 0xfffffffffffff801}]}) r7 = syz_open_dev$tty1(0xc, 0x4, 0x1) syz_open_procfs(0x0, &(0x7f0000000040)='net/icmp6\x00') ioctl$TIOCGSID(r7, 0x5429, &(0x7f0000000180)) 29.283902414s ago: executing program 6 (id=6063): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e78, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{}, 0x80}}]}, {0x2}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x800}, 0x40000) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x1, &(0x7f0000000280)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f00000003c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mount$9p_virtio(&(0x7f0000000340), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="56c78e3c733d76697274696f2c6e6f657874656e642c6163638173733d616e792c63616368653d667363616368652c76657273696f6e3d3970323030302e75"]) chdir(&(0x7f0000000300)='./file0\x00') r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.throttle.io_service_bytes_recursive\x00', 0x275a, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x20, 0x3, &(0x7f00000001c0)=ANY=[@ANYBLOB="950000000000000000000000000d770300e1ff"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = fsopen(&(0x7f0000000100)='squashfs\x00', 0x1) fsconfig$FSCONFIG_SET_STRING(r6, 0x1, &(0x7f0000000000)='source', &(0x7f0000000040), 0x0) fsconfig$FSCONFIG_CMD_CREATE(r6, 0x6, 0x0, 0x0, 0x0) write$binfmt_script(r5, &(0x7f0000000640)={'#! ', './file0', [{}, {0x20, 'rp\xee\xff\xe4'}, {0x20, '\x12~\x85\xecZ@\xb5\x18\xec\x182\xc9L\xdc\xb2\x81\xdam\xa8\xc5{\x92\x14\xce\xf2\xb8\xf7\xa9\xa7\x00X \x93t\x91!%\xff\x13\xdc\aIY\x0e\xb4zh\\\x06\r\xe8^Z\x81\xb8$:P\x83\x98_\xa1\x98\xd6\xd2g-\xefr\x14<\xd1\xb84\x94\xa09\x9f\x12I\xed\xd5dT#f\xb4\xf3\x88\xcf\xde\x00\xd4\x81WN\xca\xb5c\xbf\r\xb0Q\xa9\xbaC\xd2\xa2\x1d~\xc5D(\x92A\x12f\x83fn\xd0\xb6\x02\x116t:|\x94\xc7\xac\xf6\xbc~m\xd6\xd1\xe5\xe0\xdd\xc2\x9cl#\x85\xab\xe7\xa9\xcb\"\xd2\x97\x10\xa5\xa8\xc1\x8d@U\a]Gi^\xd2\xdf\xb0\xa5!\x836\x92\xc9\x92\xe4'}], 0xa, "7bad65c4da5338577feb172ca63250224c76e2027f000000000000007e2ac7fe2e31a2e87e3ee43ed92dfbb6bc0700de24db4ec870b8000000000002002c65e7495fe9afeb28bb"}, 0x109) socket$nl_route(0x10, 0x3, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x1) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f0000000600)=ANY=[@ANYBLOB="fc000000190001002dbd70000000000000000000000000000000100000000001fe8000000000000000000000000000bb00000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000c00000000000000000000000000000000000000000000000000000000000000ffffffffffffffff000000000020000000000000000000000000000000000000000a000000000000feffffffff7f400002000000000000080000000000000000010000004400050000000000000000000000000000000000000000003c00000002000000ffffffff00000000000000000000000006000000040100"/174], 0xfc}}, 0x0) 27.093197815s ago: executing program 2 (id=6064): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e78, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{}, 0x80}}]}, {0x2}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x800}, 0x40000) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x1, &(0x7f0000000280)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f00000003c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mount$9p_virtio(&(0x7f0000000340), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="56c78e3c733d76697274696f2c6e6f657874656e642c6163638173733d616e792c63616368653d667363616368652c76657273696f6e3d3970323030302e75"]) chdir(&(0x7f0000000300)='./file0\x00') r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.throttle.io_service_bytes_recursive\x00', 0x275a, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x20, 0x3, &(0x7f00000001c0)=ANY=[@ANYBLOB="950000000000000000000000000d770300e1ff"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = fsopen(&(0x7f0000000100)='squashfs\x00', 0x1) fsconfig$FSCONFIG_SET_STRING(r6, 0x1, &(0x7f0000000000)='source', &(0x7f0000000040), 0x0) fsconfig$FSCONFIG_CMD_CREATE(r6, 0x6, 0x0, 0x0, 0x0) write$binfmt_script(r5, &(0x7f0000000640)={'#! ', './file0', [{}, {0x20, 'rp\xee\xff\xe4'}, {0x20, '\x12~\x85\xecZ@\xb5\x18\xec\x182\xc9L\xdc\xb2\x81\xdam\xa8\xc5{\x92\x14\xce\xf2\xb8\xf7\xa9\xa7\x00X \x93t\x91!%\xff\x13\xdc\aIY\x0e\xb4zh\\\x06\r\xe8^Z\x81\xb8$:P\x83\x98_\xa1\x98\xd6\xd2g-\xefr\x14<\xd1\xb84\x94\xa09\x9f\x12I\xed\xd5dT#f\xb4\xf3\x88\xcf\xde\x00\xd4\x81WN\xca\xb5c\xbf\r\xb0Q\xa9\xbaC\xd2\xa2\x1d~\xc5D(\x92A\x12f\x83fn\xd0\xb6\x02\x116t:|\x94\xc7\xac\xf6\xbc~m\xd6\xd1\xe5\xe0\xdd\xc2\x9cl#\x85\xab\xe7\xa9\xcb\"\xd2\x97\x10\xa5\xa8\xc1\x8d@U\a]Gi^\xd2\xdf\xb0\xa5!\x836\x92\xc9\x92\xe4'}], 0xa, "7bad65c4da5338577feb172ca63250224c76e2027f000000000000007e2ac7fe2e31a2e87e3ee43ed92dfbb6bc0700de24db4ec870b8000000000002002c65e7495fe9afeb28bb"}, 0x109) socket$nl_route(0x10, 0x3, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x1) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f0000000600)=ANY=[@ANYBLOB="fc000000190001002dbd70000000000000000000000000000000100000000001fe8000000000000000000000000000bb00000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000c00000000000000000000000000000000000000000000000000000000000000ffffffffffffffff000000000020000000000000000000000000000000000000000a000000000000feffffffff7f400002000000000000080000000000000000010000004400050000000000000000000000000000000000000000003c00000002000000ffffffff00000000000000000000000006000000040100"/175], 0xfc}}, 0x0) 27.091581926s ago: executing program 1 (id=6065): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e78, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{}, 0x80}}]}, {0x2}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x800}, 0x40000) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x1, &(0x7f0000000280)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f00000003c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mount$9p_virtio(&(0x7f0000000340), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="56c78e3c733d76697274696f2c6e6f657874656e642c6163638173733d616e792c63616368653d667363616368652c76657273696f6e3d3970323030302e75"]) chdir(&(0x7f0000000300)='./file0\x00') r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.throttle.io_service_bytes_recursive\x00', 0x275a, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x20, 0x3, &(0x7f00000001c0)=ANY=[@ANYBLOB="950000000000000000000000000d770300e1ff"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = fsopen(&(0x7f0000000100)='squashfs\x00', 0x1) fsconfig$FSCONFIG_SET_STRING(r6, 0x1, &(0x7f0000000000)='source', &(0x7f0000000040), 0x0) fsconfig$FSCONFIG_CMD_CREATE(r6, 0x6, 0x0, 0x0, 0x0) write$binfmt_script(r5, &(0x7f0000000640)={'#! ', './file0', [{}, {0x20, 'rp\xee\xff\xe4'}, {0x20, '\x12~\x85\xecZ@\xb5\x18\xec\x182\xc9L\xdc\xb2\x81\xdam\xa8\xc5{\x92\x14\xce\xf2\xb8\xf7\xa9\xa7\x00X \x93t\x91!%\xff\x13\xdc\aIY\x0e\xb4zh\\\x06\r\xe8^Z\x81\xb8$:P\x83\x98_\xa1\x98\xd6\xd2g-\xefr\x14<\xd1\xb84\x94\xa09\x9f\x12I\xed\xd5dT#f\xb4\xf3\x88\xcf\xde\x00\xd4\x81WN\xca\xb5c\xbf\r\xb0Q\xa9\xbaC\xd2\xa2\x1d~\xc5D(\x92A\x12f\x83fn\xd0\xb6\x02\x116t:|\x94\xc7\xac\xf6\xbc~m\xd6\xd1\xe5\xe0\xdd\xc2\x9cl#\x85\xab\xe7\xa9\xcb\"\xd2\x97\x10\xa5\xa8\xc1\x8d@U\a]Gi^\xd2\xdf\xb0\xa5!\x836\x92\xc9\x92\xe4'}], 0xa, "7bad65c4da5338577feb172ca63250224c76e2027f000000000000007e2ac7fe2e31a2e87e3ee43ed92dfbb6bc0700de24db4ec870b8000000000002002c65e7495fe9afeb28bb"}, 0x109) socket$nl_route(0x10, 0x3, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x1) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f0000000600)=ANY=[@ANYBLOB="fc000000190001002dbd70000000000000000000000000000000100000000001fe8000000000000000000000000000bb00000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000c00000000000000000000000000000000000000000000000000000000000000ffffffffffffffff000000000020000000000000000000000000000000000000000a000000000000feffffffff7f4000020000000000000800000000000000000100000044000500"/132], 0xfc}}, 0x0) 25.813185807s ago: executing program 6 (id=6067): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e78, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{}, 0x80}}]}, {0x2}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x800}, 0x40000) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x1, &(0x7f0000000280)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f00000003c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mount$9p_virtio(&(0x7f0000000340), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="56c78e3c733d76697274696f2c6e6f657874656e642c6163638173733d616e792c63616368653d667363616368652c76657273696f6e3d3970323030302e75"]) chdir(&(0x7f0000000300)='./file0\x00') r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.throttle.io_service_bytes_recursive\x00', 0x275a, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x20, 0x3, &(0x7f00000001c0)=ANY=[@ANYBLOB="950000000000000000000000000d770300e1ff"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = fsopen(&(0x7f0000000100)='squashfs\x00', 0x1) fsconfig$FSCONFIG_SET_STRING(r6, 0x1, &(0x7f0000000000)='source', &(0x7f0000000040), 0x0) fsconfig$FSCONFIG_CMD_CREATE(r6, 0x6, 0x0, 0x0, 0x0) write$binfmt_script(r5, &(0x7f0000000640)={'#! ', './file0', [{}, {0x20, 'rp\xee\xff\xe4'}, {0x20, '\x12~\x85\xecZ@\xb5\x18\xec\x182\xc9L\xdc\xb2\x81\xdam\xa8\xc5{\x92\x14\xce\xf2\xb8\xf7\xa9\xa7\x00X \x93t\x91!%\xff\x13\xdc\aIY\x0e\xb4zh\\\x06\r\xe8^Z\x81\xb8$:P\x83\x98_\xa1\x98\xd6\xd2g-\xefr\x14<\xd1\xb84\x94\xa09\x9f\x12I\xed\xd5dT#f\xb4\xf3\x88\xcf\xde\x00\xd4\x81WN\xca\xb5c\xbf\r\xb0Q\xa9\xbaC\xd2\xa2\x1d~\xc5D(\x92A\x12f\x83fn\xd0\xb6\x02\x116t:|\x94\xc7\xac\xf6\xbc~m\xd6\xd1\xe5\xe0\xdd\xc2\x9cl#\x85\xab\xe7\xa9\xcb\"\xd2\x97\x10\xa5\xa8\xc1\x8d@U\a]Gi^\xd2\xdf\xb0\xa5!\x836\x92\xc9\x92\xe4'}], 0xa, "7bad65c4da5338577feb172ca63250224c76e2027f000000000000007e2ac7fe2e31a2e87e3ee43ed92dfbb6bc0700de24db4ec870b8000000000002002c65e7495fe9afeb28bb"}, 0x109) socket$nl_route(0x10, 0x3, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x1) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f0000000600)=ANY=[@ANYBLOB="fc000000190001002dbd70000000000000000000000000000000100000000001fe8000000000000000000000000000bb00000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000c00000000000000000000000000000000000000000000000000000000000000ffffffffffffffff000000000020000000000000000000000000000000000000000a000000000000feffffffff7f400002000000000000080000000000000000010000004400050000000000000000000000000000000000000000003c00000002000000ffffffff000000000000000000000000060000000401000000"], 0xfc}}, 0x0) 24.499093059s ago: executing program 2 (id=6068): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e78, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{}, 0x80}}]}, {0x2}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x800}, 0x40000) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x1, &(0x7f0000000280)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f00000003c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mount$9p_virtio(&(0x7f0000000340), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="56c78e3c733d76697274696f2c6e6f657874656e642c6163638173733d616e792c63616368653d667363616368652c76657273696f6e3d3970323030302e75"]) chdir(&(0x7f0000000300)='./file0\x00') r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.throttle.io_service_bytes_recursive\x00', 0x275a, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x20, 0x3, &(0x7f00000001c0)=ANY=[@ANYBLOB="950000000000000000000000000d770300e1ff"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = fsopen(&(0x7f0000000100)='squashfs\x00', 0x1) fsconfig$FSCONFIG_SET_STRING(r6, 0x1, &(0x7f0000000000)='source', &(0x7f0000000040), 0x0) fsconfig$FSCONFIG_CMD_CREATE(r6, 0x6, 0x0, 0x0, 0x0) write$binfmt_script(r5, &(0x7f0000000640)={'#! ', './file0', [{}, {0x20, 'rp\xee\xff\xe4'}, {0x20, '\x12~\x85\xecZ@\xb5\x18\xec\x182\xc9L\xdc\xb2\x81\xdam\xa8\xc5{\x92\x14\xce\xf2\xb8\xf7\xa9\xa7\x00X \x93t\x91!%\xff\x13\xdc\aIY\x0e\xb4zh\\\x06\r\xe8^Z\x81\xb8$:P\x83\x98_\xa1\x98\xd6\xd2g-\xefr\x14<\xd1\xb84\x94\xa09\x9f\x12I\xed\xd5dT#f\xb4\xf3\x88\xcf\xde\x00\xd4\x81WN\xca\xb5c\xbf\r\xb0Q\xa9\xbaC\xd2\xa2\x1d~\xc5D(\x92A\x12f\x83fn\xd0\xb6\x02\x116t:|\x94\xc7\xac\xf6\xbc~m\xd6\xd1\xe5\xe0\xdd\xc2\x9cl#\x85\xab\xe7\xa9\xcb\"\xd2\x97\x10\xa5\xa8\xc1\x8d@U\a]Gi^\xd2\xdf\xb0\xa5!\x836\x92\xc9\x92\xe4'}], 0xa, "7bad65c4da5338577feb172ca63250224c76e2027f000000000000007e2ac7fe2e31a2e87e3ee43ed92dfbb6bc0700de24db4ec870b8000000000002002c65e7495fe9afeb28bb"}, 0x109) socket$nl_route(0x10, 0x3, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x1) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f0000000600)=ANY=[@ANYBLOB="fc000000190001002dbd70000000000000000000000000000000100000000001fe8000000000000000000000000000bb", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000c00000000000000000000000000000000000000000000000000000000000000ffffffffffffffff000000000020000000000000000000000000000000000000000a000000000000feffffffff7f400002000000000000080000000000000000010000004400050000000000000000000000000000000000000000003c00000002000000ffffffff00000000000000000000000006000000040100"/176], 0xfc}}, 0x0) 23.239721676s ago: executing program 6 (id=6069): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e78, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{}, 0x80}}]}, {0x2}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x800}, 0x40000) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x1, &(0x7f0000000280)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f00000003c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mount$9p_virtio(&(0x7f0000000340), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="56c78e3c733d76697274696f2c6e6f657874656e642c6163638173733d616e792c63616368653d667363616368652c76657273696f6e3d3970323030302e75"]) chdir(&(0x7f0000000300)='./file0\x00') r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.throttle.io_service_bytes_recursive\x00', 0x275a, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x20, 0x3, &(0x7f00000001c0)=ANY=[@ANYBLOB="950000000000000000000000000d770300e1ff"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = fsopen(&(0x7f0000000100)='squashfs\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r6, 0x6, 0x0, 0x0, 0x0) write$binfmt_script(r5, &(0x7f0000000640)={'#! ', './file0', [{}, {0x20, 'rp\xee\xff\xe4'}, {0x20, '\x12~\x85\xecZ@\xb5\x18\xec\x182\xc9L\xdc\xb2\x81\xdam\xa8\xc5{\x92\x14\xce\xf2\xb8\xf7\xa9\xa7\x00X \x93t\x91!%\xff\x13\xdc\aIY\x0e\xb4zh\\\x06\r\xe8^Z\x81\xb8$:P\x83\x98_\xa1\x98\xd6\xd2g-\xefr\x14<\xd1\xb84\x94\xa09\x9f\x12I\xed\xd5dT#f\xb4\xf3\x88\xcf\xde\x00\xd4\x81WN\xca\xb5c\xbf\r\xb0Q\xa9\xbaC\xd2\xa2\x1d~\xc5D(\x92A\x12f\x83fn\xd0\xb6\x02\x116t:|\x94\xc7\xac\xf6\xbc~m\xd6\xd1\xe5\xe0\xdd\xc2\x9cl#\x85\xab\xe7\xa9\xcb\"\xd2\x97\x10\xa5\xa8\xc1\x8d@U\a]Gi^\xd2\xdf\xb0\xa5!\x836\x92\xc9\x92\xe4'}], 0xa, "7bad65c4da5338577feb172ca63250224c76e2027f000000000000007e2ac7fe2e31a2e87e3ee43ed92dfbb6bc0700de24db4ec870b8000000000002002c65e7495fe9afeb28bb"}, 0x109) socket$nl_route(0x10, 0x3, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x1) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f0000000600)=ANY=[@ANYBLOB="fc000000190001002dbd70000000000000000000000000000000100000000001fe8000000000000000000000000000bb0000000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000c00000000000000000000000000000000000000000000000000000000000000ffffffffffffffff000000000020000000000000000000000000000000000000000a000000000000feffffffff7f400002000000000000080000000000000000010000004400050000000000000000000000000000000000000000003c00000002000000ffffffff00000000000000000000000006000000040100"/176], 0xfc}}, 0x0) 21.50972879s ago: executing program 2 (id=6070): r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r4, 0x6, 0xd, 0x0, 0x0) bind$inet6(r4, 0x0, 0x0) setsockopt$inet6_tcp_int(r4, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) sendto$inet6(r4, &(0x7f00000002c0)="32a76f4972547ea2069d8dd41391797c89bc8fe1c5df", 0x16, 0x20000045, &(0x7f00000001c0)={0xa, 0x2, 0xb9, @loopback, 0x203}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r4, 0x6, 0xd, 0x0, 0x0) 18.196774498s ago: executing program 6 (id=6072): socket$inet_udp(0x2, 0x2, 0x0) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='cpuacct.usage_sys\x00', 0x26e1, 0x0) r4 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$inet(r4, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x34004000) 16.77166772s ago: executing program 2 (id=6073): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e78, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{}, 0x80}}]}, {0x2}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x800}, 0x40000) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x1, &(0x7f0000000280)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f00000003c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mount$9p_virtio(&(0x7f0000000340), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="56c78e3c733d76697274696f2c6e6f657874656e642c6163638173733d616e792c63616368653d667363616368652c76657273696f6e3d3970323030302e75"]) chdir(&(0x7f0000000300)='./file0\x00') r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.throttle.io_service_bytes_recursive\x00', 0x275a, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x20, 0x3, &(0x7f00000001c0)=ANY=[@ANYBLOB="950000000000000000000000000d770300e1ff"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = fsopen(&(0x7f0000000100)='squashfs\x00', 0x1) fsconfig$FSCONFIG_SET_STRING(r6, 0x1, &(0x7f0000000000)='source', &(0x7f0000000040), 0x0) fsconfig$FSCONFIG_CMD_CREATE(r6, 0x6, 0x0, 0x0, 0x0) write$binfmt_script(r5, &(0x7f0000000640)={'#! ', './file0', [{}, {0x20, 'rp\xee\xff\xe4'}, {0x20, '\x12~\x85\xecZ@\xb5\x18\xec\x182\xc9L\xdc\xb2\x81\xdam\xa8\xc5{\x92\x14\xce\xf2\xb8\xf7\xa9\xa7\x00X \x93t\x91!%\xff\x13\xdc\aIY\x0e\xb4zh\\\x06\r\xe8^Z\x81\xb8$:P\x83\x98_\xa1\x98\xd6\xd2g-\xefr\x14<\xd1\xb84\x94\xa09\x9f\x12I\xed\xd5dT#f\xb4\xf3\x88\xcf\xde\x00\xd4\x81WN\xca\xb5c\xbf\r\xb0Q\xa9\xbaC\xd2\xa2\x1d~\xc5D(\x92A\x12f\x83fn\xd0\xb6\x02\x116t:|\x94\xc7\xac\xf6\xbc~m\xd6\xd1\xe5\xe0\xdd\xc2\x9cl#\x85\xab\xe7\xa9\xcb\"\xd2\x97\x10\xa5\xa8\xc1\x8d@U\a]Gi^\xd2\xdf\xb0\xa5!\x836\x92\xc9\x92\xe4'}], 0xa, "7bad65c4da5338577feb172ca63250224c76e2027f000000000000007e2ac7fe2e31a2e87e3ee43ed92dfbb6bc0700de24db4ec870b8000000000002002c65e7495fe9afeb28bb"}, 0x109) socket$nl_route(0x10, 0x3, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x1) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f0000000600)=ANY=[@ANYBLOB="fc000000190001002dbd70000000000000000000000000000000100000000001fe8000000000000000000000000000bb0000000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000c00000000000000000000000000000000000000000000000000000000000000ffffffffffffffff000000000020000000000000000000000000000000000000000a000000000000feffffffff7f400002000000000000080000000000000000010000004400050000000000000000000000000000000000000000003c00000002000000ffffffff00000000000000000000000006000000040100"/176], 0xfc}}, 0x0) 16.769473237s ago: executing program 0 (id=6074): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e78, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{}, 0x80}}]}, {0x2}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x800}, 0x40000) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x1, &(0x7f0000000280)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f00000003c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mount$9p_virtio(&(0x7f0000000340), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="56c78e3c733d76697274696f2c6e6f657874656e642c6163638173733d616e792c63616368653d667363616368652c76657273696f6e3d3970323030302e"]) chdir(&(0x7f0000000300)='./file0\x00') r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.throttle.io_service_bytes_recursive\x00', 0x275a, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r6 = fsopen(0x0, 0x1) fsconfig$FSCONFIG_SET_STRING(r6, 0x1, 0x0, &(0x7f0000000040), 0x0) fsconfig$FSCONFIG_CMD_CREATE(r6, 0x6, 0x0, 0x0, 0x0) write$binfmt_script(r5, &(0x7f0000000640)={'#! ', './file0', [{}, {0x20, 'rp\xee\xff\xe4'}, {0x20, '\x12~\x85\xecZ@\xb5\x18\xec\x182\xc9L\xdc\xb2\x81\xdam\xa8\xc5{\x92\x14\xce\xf2\xb8\xf7\xa9\xa7\x00X \x93t\x91!%\xff\x13\xdc\aIY\x0e\xb4zh\\\x06\r\xe8^Z\x81\xb8$:P\x83\x98_\xa1\x98\xd6\xd2g-\xefr\x14<\xd1\xb84\x94\xa09\x9f\x12I\xed\xd5dT#f\xb4\xf3\x88\xcf\xde\x00\xd4\x81WN\xca\xb5c\xbf\r\xb0Q\xa9\xbaC\xd2\xa2\x1d~\xc5D(\x92A\x12f\x83fn\xd0\xb6\x02\x116t:|\x94\xc7\xac\xf6\xbc~m\xd6\xd1\xe5\xe0\xdd\xc2\x9cl#\x85\xab\xe7\xa9\xcb\"\xd2\x97\x10\xa5\xa8\xc1\x8d@U\a]Gi^\xd2\xdf\xb0\xa5!\x836\x92\xc9\x92\xe4'}], 0xa, "7bad65c4da5338577feb172ca63250224c76e2027f000000000000007e2ac7fe2e31a2e87e3ee43ed92dfbb6bc0700de24db4ec870b80000000000"}, 0xfd) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f0000000600)=ANY=[@ANYBLOB="fc000000190001002dbd70000000000000000000000000000000100000000001fe8000000000000000000000000000bb00000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000c00000000000000000000000000000000000000000000000000000000000000ffffffffffffffff000000000020000000000000000000000000000000000000000a000000000000feffffffff7f4000020000000000000800000000000000000100000044000500"/132], 0xfc}}, 0x0) 14.385583046s ago: executing program 50 (id=6062): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r1 = getpid() open(0x0, 0x147842, 0x6) sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, 0x0, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mkdir(&(0x7f0000000440)='./file1\x00', 0x0) mount(0x0, &(0x7f0000000200)='./file1\x00', &(0x7f0000000000)='tmpfs\x00', 0x8, &(0x7f00000001c0)='usrquota') r4 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_MAP(r4, 0x3b85, &(0x7f0000000200)={0x28, 0x5, 0x0, 0x0, &(0x7f0000000a40)="7f", 0x1, 0x4}) r5 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r5, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_ALLOW_IOVAS(r5, 0x3b82, &(0x7f0000000000)={0x18, r6, 0x1, 0x0, &(0x7f00000004c0)=[{0x81, 0xfffffffffffff801}]}) r7 = syz_open_dev$tty1(0xc, 0x4, 0x1) syz_open_procfs(0x0, &(0x7f0000000040)='net/icmp6\x00') ioctl$TIOCGSID(r7, 0x5429, &(0x7f0000000180)) 13.292463976s ago: executing program 6 (id=6076): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) munmap(&(0x7f0000470000/0x400000)=nil, 0xe06500) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x3) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) openat$dir(0xffffffffffffff9c, 0x0, 0x140, 0x82) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2c}, 0x44004) quotactl$Q_SYNC(0xffffffff80000102, 0x0, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) mremap(&(0x7f000033a000/0x3000)=nil, 0x3000, 0x400000, 0x3, &(0x7f000082a000/0x400000)=nil) madvise(&(0x7f000042f000/0x800000)=nil, 0x800000, 0x15) 13.237550765s ago: executing program 0 (id=6077): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) munmap(&(0x7f0000470000/0x400000)=nil, 0xe06500) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x3) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) openat$dir(0xffffffffffffff9c, 0x0, 0x140, 0x82) io_uring_setup(0x62d2, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) quotactl$Q_SYNC(0xffffffff80000102, 0x0, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) mremap(&(0x7f000033a000/0x3000)=nil, 0x3000, 0x400000, 0x3, &(0x7f000082a000/0x400000)=nil) madvise(&(0x7f000042f000/0x800000)=nil, 0x800000, 0x15) 11.575651993s ago: executing program 51 (id=6065): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e78, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{}, 0x80}}]}, {0x2}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x800}, 0x40000) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x1, &(0x7f0000000280)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f00000003c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mount$9p_virtio(&(0x7f0000000340), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="56c78e3c733d76697274696f2c6e6f657874656e642c6163638173733d616e792c63616368653d667363616368652c76657273696f6e3d3970323030302e75"]) chdir(&(0x7f0000000300)='./file0\x00') r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.throttle.io_service_bytes_recursive\x00', 0x275a, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x20, 0x3, &(0x7f00000001c0)=ANY=[@ANYBLOB="950000000000000000000000000d770300e1ff"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = fsopen(&(0x7f0000000100)='squashfs\x00', 0x1) fsconfig$FSCONFIG_SET_STRING(r6, 0x1, &(0x7f0000000000)='source', &(0x7f0000000040), 0x0) fsconfig$FSCONFIG_CMD_CREATE(r6, 0x6, 0x0, 0x0, 0x0) write$binfmt_script(r5, &(0x7f0000000640)={'#! ', './file0', [{}, {0x20, 'rp\xee\xff\xe4'}, {0x20, '\x12~\x85\xecZ@\xb5\x18\xec\x182\xc9L\xdc\xb2\x81\xdam\xa8\xc5{\x92\x14\xce\xf2\xb8\xf7\xa9\xa7\x00X \x93t\x91!%\xff\x13\xdc\aIY\x0e\xb4zh\\\x06\r\xe8^Z\x81\xb8$:P\x83\x98_\xa1\x98\xd6\xd2g-\xefr\x14<\xd1\xb84\x94\xa09\x9f\x12I\xed\xd5dT#f\xb4\xf3\x88\xcf\xde\x00\xd4\x81WN\xca\xb5c\xbf\r\xb0Q\xa9\xbaC\xd2\xa2\x1d~\xc5D(\x92A\x12f\x83fn\xd0\xb6\x02\x116t:|\x94\xc7\xac\xf6\xbc~m\xd6\xd1\xe5\xe0\xdd\xc2\x9cl#\x85\xab\xe7\xa9\xcb\"\xd2\x97\x10\xa5\xa8\xc1\x8d@U\a]Gi^\xd2\xdf\xb0\xa5!\x836\x92\xc9\x92\xe4'}], 0xa, "7bad65c4da5338577feb172ca63250224c76e2027f000000000000007e2ac7fe2e31a2e87e3ee43ed92dfbb6bc0700de24db4ec870b8000000000002002c65e7495fe9afeb28bb"}, 0x109) socket$nl_route(0x10, 0x3, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x1) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f0000000600)=ANY=[@ANYBLOB="fc000000190001002dbd70000000000000000000000000000000100000000001fe8000000000000000000000000000bb00000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000c00000000000000000000000000000000000000000000000000000000000000ffffffffffffffff000000000020000000000000000000000000000000000000000a000000000000feffffffff7f4000020000000000000800000000000000000100000044000500"/132], 0xfc}}, 0x0) 11.526324498s ago: executing program 0 (id=6079): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) munmap(&(0x7f0000470000/0x400000)=nil, 0xe06500) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x3) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) openat$dir(0xffffffffffffff9c, 0x0, 0x140, 0x82) io_uring_setup(0x62d2, 0x0) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2c}, 0x44004) quotactl$Q_SYNC(0xffffffff80000102, 0x0, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) mremap(&(0x7f000033a000/0x3000)=nil, 0x3000, 0x400000, 0x3, &(0x7f000082a000/0x400000)=nil) madvise(&(0x7f000042f000/0x800000)=nil, 0x800000, 0x15) 9.29604442s ago: executing program 0 (id=6080): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) munmap(&(0x7f0000470000/0x400000)=nil, 0xe06500) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x3) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) openat$dir(0xffffffffffffff9c, 0x0, 0x140, 0x82) io_uring_setup(0x62d2, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) quotactl$Q_SYNC(0xffffffff80000102, 0x0, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) mremap(&(0x7f000033a000/0x3000)=nil, 0x3000, 0x400000, 0x3, &(0x7f000082a000/0x400000)=nil) madvise(&(0x7f000042f000/0x800000)=nil, 0x800000, 0x15) 7.281684686s ago: executing program 0 (id=6081): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e78, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{}, 0x80}}]}, {0x2}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x800}, 0x40000) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x1, &(0x7f0000000280)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f00000003c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mount$9p_virtio(&(0x7f0000000340), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="56c78e3c733d76697274696f2c6e6f657874656e642c6163638173733d616e792c63616368653d667363616368652c76657273696f6e3d3970323030302e75"]) chdir(&(0x7f0000000300)='./file0\x00') r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.throttle.io_service_bytes_recursive\x00', 0x275a, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x20, 0x3, &(0x7f00000001c0)=ANY=[@ANYBLOB="950000000000000000000000000d770300e1ff"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = fsopen(&(0x7f0000000100)='squashfs\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r6, 0x6, 0x0, 0x0, 0x0) write$binfmt_script(r5, &(0x7f0000000640)={'#! ', './file0', [{}, {0x20, 'rp\xee\xff\xe4'}, {0x20, '\x12~\x85\xecZ@\xb5\x18\xec\x182\xc9L\xdc\xb2\x81\xdam\xa8\xc5{\x92\x14\xce\xf2\xb8\xf7\xa9\xa7\x00X \x93t\x91!%\xff\x13\xdc\aIY\x0e\xb4zh\\\x06\r\xe8^Z\x81\xb8$:P\x83\x98_\xa1\x98\xd6\xd2g-\xefr\x14<\xd1\xb84\x94\xa09\x9f\x12I\xed\xd5dT#f\xb4\xf3\x88\xcf\xde\x00\xd4\x81WN\xca\xb5c\xbf\r\xb0Q\xa9\xbaC\xd2\xa2\x1d~\xc5D(\x92A\x12f\x83fn\xd0\xb6\x02\x116t:|\x94\xc7\xac\xf6\xbc~m\xd6\xd1\xe5\xe0\xdd\xc2\x9cl#\x85\xab\xe7\xa9\xcb\"\xd2\x97\x10\xa5\xa8\xc1\x8d@U\a]Gi^\xd2\xdf\xb0\xa5!\x836\x92\xc9\x92\xe4'}], 0xa, "7bad65c4da5338577feb172ca63250224c76e2027f000000000000007e2ac7fe2e31a2e87e3ee43ed92dfbb6bc0700de24db4ec870b8000000000002002c65e7495fe9afeb28bb"}, 0x109) socket$nl_route(0x10, 0x3, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x1) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f0000000600)=ANY=[@ANYBLOB="fc000000190001002dbd70000000000000000000000000000000100000000001fe8000000000000000000000000000bb00000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000c00000000000000000000000000000000000000000000000000000000000000ffffffffffffffff000000000020000000000000000000000000000000000000000a000000000000feffffffff7f4000"], 0xfc}}, 0x0) 3.432835156s ago: executing program 2 (id=6082): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) munmap(&(0x7f0000470000/0x400000)=nil, 0xe06500) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x3) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) openat$dir(0xffffffffffffff9c, 0x0, 0x140, 0x82) io_uring_setup(0x62d2, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2c}, 0x44004) quotactl$Q_SYNC(0xffffffff80000102, 0x0, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) mremap(&(0x7f000033a000/0x3000)=nil, 0x3000, 0x400000, 0x3, &(0x7f000082a000/0x400000)=nil) madvise(&(0x7f000042f000/0x800000)=nil, 0x800000, 0x15) 3.112170089s ago: executing program 0 (id=6083): r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r4, 0x6, 0xd, 0x0, 0x0) bind$inet6(r4, 0x0, 0x0) setsockopt$inet6_tcp_int(r4, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) sendto$inet6(r4, &(0x7f00000002c0)="32a76f4972547ea2069d8dd41391797c89bc8fe1c5df", 0x16, 0x20000045, &(0x7f00000001c0)={0xa, 0x2, 0xb9, @loopback, 0x203}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r4, 0x6, 0xd, 0x0, 0x0) 0s ago: executing program 2 (id=6084): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) munmap(&(0x7f0000470000/0x400000)=nil, 0xe06500) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x3) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) openat$dir(0xffffffffffffff9c, 0x0, 0x140, 0x82) io_uring_setup(0x62d2, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2c}, 0x44004) quotactl$Q_SYNC(0xffffffff80000102, 0x0, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) mremap(&(0x7f000033a000/0x3000)=nil, 0x3000, 0x400000, 0x3, &(0x7f000082a000/0x400000)=nil) madvise(&(0x7f000042f000/0x800000)=nil, 0x800000, 0x15) kernel console output (not intermixed with test programs): : hci4: unexpected cc 0x0c23 length: 249 > 4 [ 2024.962776][T23051] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 2027.770629][T23051] Bluetooth: hci4: command tx timeout [ 2029.435524][ T3539] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2029.820169][T23051] Bluetooth: hci4: command tx timeout [ 2032.765330][T23051] Bluetooth: hci4: command tx timeout [ 2034.552495][T23187] team_slave_0: entered promiscuous mode [ 2034.552538][T23187] team_slave_1: entered promiscuous mode [ 2034.553823][T23187] vlan2: entered promiscuous mode [ 2034.553836][T23187] team0: entered promiscuous mode [ 2035.597792][T23051] Bluetooth: hci4: command tx timeout [ 2038.924019][ T38] audit: type=1326 audit(2000000434.884:321): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=23231 comm="syz.9.5182" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f310943f749 code=0x7ffc0000 [ 2038.924379][ T38] audit: type=1326 audit(2000000434.884:322): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=23231 comm="syz.9.5182" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f310943f749 code=0x7ffc0000 [ 2038.926370][ T38] audit: type=1326 audit(2000000434.884:323): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=23231 comm="syz.9.5182" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f310943f749 code=0x7ffc0000 [ 2038.995863][ T38] audit: type=1326 audit(2000000434.954:324): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=23231 comm="syz.9.5182" exe="/root/syz-executor" sig=0 arch=c000003e syscall=72 compat=0 ip=0x7f310943f749 code=0x7ffc0000 [ 2038.996007][ T38] audit: type=1326 audit(2000000434.954:325): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=23231 comm="syz.9.5182" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f310943f749 code=0x7ffc0000 [ 2038.996126][ T38] audit: type=1326 audit(2000000434.954:326): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=23231 comm="syz.9.5182" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f310943f749 code=0x7ffc0000 [ 2038.996249][ T38] audit: type=1326 audit(2000000434.954:327): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=23231 comm="syz.9.5182" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f310943f749 code=0x7ffc0000 [ 2039.008539][ T38] audit: type=1326 audit(2000000434.954:328): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=23231 comm="syz.9.5182" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f310943f749 code=0x7ffc0000 [ 2039.012863][ T38] audit: type=1326 audit(2000000434.974:330): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=23231 comm="syz.9.5182" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f310943f749 code=0x7ffc0000 [ 2039.013635][ T38] audit: type=1326 audit(2000000434.964:329): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=23231 comm="syz.9.5182" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f310943f749 code=0x7ffc0000 [ 2040.363108][ T3539] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2041.355472][T23236] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -4 [ 2041.355538][T23236] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -4 [ 2041.355563][T23236] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 2041.626569][T23161] vxcan1 speed is unknown, defaulting to 1000 [ 2047.622789][ T3539] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2048.693361][T23161] lo speed is unknown, defaulting to 1000 [ 2051.910994][ T3539] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2052.865545][T23050] chnl_net:caif_netlink_parms(): no params data found [ 2053.025994][ T1320] ieee802154 phy0 wpan0: encryption failed: -22 [ 2053.026088][ T1320] ieee802154 phy1 wpan1: encryption failed: -22 [ 2053.761799][T23302] block device autoloading is deprecated and will be removed. [ 2055.940144][T23050] bridge0: port 1(bridge_slave_0) entered blocking state [ 2055.958058][T23050] bridge0: port 1(bridge_slave_0) entered disabled state [ 2055.965677][T23050] bridge_slave_0: entered allmulticast mode [ 2055.978714][T23050] bridge_slave_0: entered promiscuous mode [ 2056.008943][T23050] bridge0: port 2(bridge_slave_1) entered blocking state [ 2056.009161][T23050] bridge0: port 2(bridge_slave_1) entered disabled state [ 2056.009429][T23050] bridge_slave_1: entered allmulticast mode [ 2056.014169][T23050] bridge_slave_1: entered promiscuous mode [ 2059.605056][T23050] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2059.622136][T23050] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2063.833879][ T3539] bond0 (unregistering): Released all slaves [ 2064.508959][T23360] netlink: 8 bytes leftover after parsing attributes in process `syz.8.5212'. [ 2065.386962][ T8178] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 2065.488110][ T8178] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 2065.492902][ T8178] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 2065.494304][ T8178] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 2065.502596][ T8178] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 2069.469725][T23051] Bluetooth: hci5: command tx timeout [ 2071.517970][ T8178] Bluetooth: hci5: command tx timeout [ 2072.164819][ T3539] bond0 (unregistering): (slave bridge_slave_1): Releasing backup interface [ 2072.180652][ T3539] bond0 (unregistering): Released all slaves [ 2072.475764][T23397] netlink: 20 bytes leftover after parsing attributes in process `syz.9.5227'. [ 2072.673759][T23365] vxcan1 speed is unknown, defaulting to 1000 [ 2072.674355][T23161] chnl_net:caif_netlink_parms(): no params data found [ 2075.199624][T23051] Bluetooth: hci5: command tx timeout [ 2075.211953][T10692] IPVS: starting estimator thread 0... [ 2075.423436][T23408] IPVS: using max 8 ests per chain, 19200 per kthread [ 2077.343680][ T8178] Bluetooth: hci5: command tx timeout [ 2077.767163][T23365] lo speed is unknown, defaulting to 1000 [ 2080.000459][T23161] bridge0: port 1(bridge_slave_0) entered blocking state [ 2080.000637][T23161] bridge0: port 1(bridge_slave_0) entered disabled state [ 2080.000820][T23161] bridge_slave_0: entered allmulticast mode [ 2080.002719][T23161] bridge_slave_0: entered promiscuous mode [ 2080.234557][T23161] bridge0: port 2(bridge_slave_1) entered blocking state [ 2080.234692][T23161] bridge0: port 2(bridge_slave_1) entered disabled state [ 2080.234913][T23161] bridge_slave_1: entered allmulticast mode [ 2080.258197][T23161] bridge_slave_1: entered promiscuous mode [ 2080.433636][ T38] kauditd_printk_skb: 171 callbacks suppressed [ 2080.433659][ T38] audit: type=1804 audit(2000000476.386:502): pid=23446 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz.8.5241" name="file0" dev="tmpfs" ino=6058 res=1 errno=0 [ 2081.014430][T23161] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2081.073147][T23161] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2084.343667][T23051] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 2084.368879][T23051] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 2084.394079][T23051] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 2084.395499][T23051] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 2084.396425][T23051] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 2084.867579][ T3539] hsr_slave_0: left promiscuous mode [ 2084.916771][T23473] smc: ib device syz2 ibport 2 erased user defined pnetid SYZ0 [ 2084.997197][ T3539] hsr_slave_1: left promiscuous mode [ 2085.219635][ T3539] veth1_macvtap: left promiscuous mode [ 2085.219757][ T3539] veth0_macvtap: left promiscuous mode [ 2085.220023][ T3539] veth1_vlan: left promiscuous mode [ 2085.220209][ T3539] veth0_vlan: left promiscuous mode [ 2087.043220][T23051] Bluetooth: hci0: command tx timeout [ 2089.177052][T23051] Bluetooth: hci0: command tx timeout [ 2090.900427][T23533] netlink: 8 bytes leftover after parsing attributes in process `syz.9.5273'. [ 2091.310268][T23051] Bluetooth: hci0: command tx timeout [ 2091.843971][T23543] netlink: 'syz.9.5278': attribute type 6 has an invalid length. [ 2091.843990][T23543] netlink: 104 bytes leftover after parsing attributes in process `syz.9.5278'. [ 2093.340939][T23051] Bluetooth: hci0: command tx timeout [ 2096.692575][T23512] team0: Device vlan2 is already an upper device of the team interface [ 2096.948502][T23513] netdevsim netdevsim1 netdevsim0: entered promiscuous mode [ 2096.953371][T23513] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 2097.284997][T23468] vxcan1 speed is unknown, defaulting to 1000 [ 2097.338075][T23365] chnl_net:caif_netlink_parms(): no params data found [ 2097.516050][ T38] audit: type=1326 audit(2000000493.477:503): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=23563 comm="syz.8.5287" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f023ca6f749 code=0x0 [ 2098.110878][T23468] lo speed is unknown, defaulting to 1000 [ 2098.233762][T23365] bridge0: port 1(bridge_slave_0) entered blocking state [ 2098.234187][T23365] bridge0: port 1(bridge_slave_0) entered disabled state [ 2098.234525][T23365] bridge_slave_0: entered allmulticast mode [ 2098.246762][T23365] bridge_slave_0: entered promiscuous mode [ 2098.314486][T23365] bridge0: port 2(bridge_slave_1) entered blocking state [ 2098.314576][T23365] bridge0: port 2(bridge_slave_1) entered disabled state [ 2098.314825][T23365] bridge_slave_1: entered allmulticast mode [ 2098.346873][T23365] bridge_slave_1: entered promiscuous mode [ 2098.814655][T23365] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2098.879088][T23365] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2099.308057][T23365] team0: Port device team_slave_0 added [ 2099.359592][T23365] team0: Port device team_slave_1 added [ 2099.607605][T23365] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2099.607625][T23365] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2099.607728][T23365] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2099.618085][T23365] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2099.618138][T23365] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2099.618221][T23365] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2100.433264][T23365] hsr_slave_0: entered promiscuous mode [ 2100.436424][T23365] hsr_slave_1: entered promiscuous mode [ 2100.441944][T23365] debugfs: 'hsr0' already exists in 'hsr' [ 2100.442032][T23365] Cannot create hsr debugfs directory [ 2100.883829][ T3539] netdevsim netdevsim3 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 2100.883870][ T3539] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2100.918482][ T10] usb 10-1: new high-speed USB device number 20 using dummy_hcd [ 2100.963483][T23468] chnl_net:caif_netlink_parms(): no params data found [ 2101.074444][ T10] usb 10-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice= 0.00 [ 2101.074485][ T10] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2101.074502][ T10] usb 10-1: Product: syz [ 2101.075623][ T10] usb 10-1: Manufacturer: syz [ 2101.075639][ T10] usb 10-1: SerialNumber: syz [ 2101.118900][ T10] usb 10-1: config 0 descriptor?? [ 2101.355307][T23051] Bluetooth: hci2: unknown advertising packet type: 0x17 [ 2101.370806][ T10] usb-storage 10-1:0.0: USB Mass Storage device detected [ 2101.371712][ T3539] netdevsim netdevsim3 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 2101.371750][ T3539] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2101.523535][ T10] usb 10-1: USB disconnect, device number 20 [ 2101.765311][T23658] overlayfs: failed to clone upperpath [ 2102.561754][ T3539] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 2102.561796][ T3539] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2102.758876][ T10] usb 10-1: new high-speed USB device number 21 using dummy_hcd [ 2102.905762][ T10] usb 10-1: Using ep0 maxpacket: 8 [ 2102.910184][ T10] usb 10-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 2102.910220][ T10] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2102.910241][ T10] usb 10-1: Product: syz [ 2102.910252][ T10] usb 10-1: Manufacturer: syz [ 2102.910263][ T10] usb 10-1: SerialNumber: syz [ 2102.914199][ T10] usb 10-1: config 0 descriptor?? [ 2102.924657][ T10] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state. [ 2102.924806][ T10] usb 10-1: setting power ON [ 2102.924869][ T10] dvb-usb: bulk message failed: -22 (2/0) [ 2102.943186][ T10] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 2102.945298][ T10] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID)) [ 2102.945460][ T10] usb 10-1: media controller created [ 2103.049511][ T10] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 2103.107521][ T10] usb 10-1: selecting invalid altsetting 6 [ 2103.107549][ T10] usb 10-1: digital interface selection failed (-22) [ 2103.107566][ T10] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)' [ 2103.115221][ T10] usb 10-1: setting power OFF [ 2103.115250][ T10] dvb-usb: bulk message failed: -22 (2/0) [ 2103.115279][ T10] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected. [ 2103.115294][ T10] (NULL device *): no alternate interface [ 2103.222471][T23667] dvb-usb: bulk message failed: -22 (3/0) [ 2103.222509][T23667] dvb-usb: bulk message failed: -22 (3/0) [ 2103.222887][T23667] dvb-usb: bulk message failed: -22 (3/0) [ 2103.269082][ T10] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected. [ 2103.273110][ T10] usb 10-1: USB disconnect, device number 21 [ 2103.352845][ T3539] netdevsim netdevsim3 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 2103.352887][ T3539] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2103.431234][T23468] bridge0: port 1(bridge_slave_0) entered blocking state [ 2103.431485][T23468] bridge0: port 1(bridge_slave_0) entered disabled state [ 2103.431716][T23468] bridge_slave_0: entered allmulticast mode [ 2103.434778][T23468] bridge_slave_0: entered promiscuous mode [ 2103.465447][T23677] netlink: 80 bytes leftover after parsing attributes in process `syz.8.5333'. [ 2103.465472][T23677] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 2103.507258][ T7186] bridge0: port 3(team0) entered disabled state [ 2103.540986][T23468] bridge0: port 2(bridge_slave_1) entered blocking state [ 2103.541151][T23468] bridge0: port 2(bridge_slave_1) entered disabled state [ 2103.541375][T23468] bridge_slave_1: entered allmulticast mode [ 2103.544266][T23468] bridge_slave_1: entered promiscuous mode [ 2103.621642][ T38] audit: type=1400 audit(2000000499.577:504): lsm=SMACK fn=smack_socket_sock_rcv_skb action=denied subject="*" object="_" requested=w pid=23683 comm="syz.8.5336" dest=20002 netif=wpan0 [ 2104.913645][T23468] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2104.951307][T23468] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2105.016029][ T6176] usb 10-1: new high-speed USB device number 22 using dummy_hcd [ 2105.175617][ T6176] usb 10-1: Using ep0 maxpacket: 16 [ 2105.177619][ T6176] usb 10-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 2105.177652][ T6176] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 2105.180983][ T6176] usb 10-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 2105.181014][ T6176] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2105.181036][ T6176] usb 10-1: Product: syz [ 2105.181052][ T6176] usb 10-1: Manufacturer: syz [ 2105.181077][ T6176] usb 10-1: SerialNumber: syz [ 2105.260434][ T6176] usb 10-1: config 0 descriptor?? [ 2105.283295][ T6176] em28xx 10-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 2105.283331][ T6176] em28xx 10-1:0.0: Audio interface 0 found (Vendor Class) [ 2105.778224][T23468] team0: Port device team_slave_0 added [ 2105.782023][T23468] team0: Port device team_slave_1 added [ 2107.117348][ T6176] em28xx 10-1:0.0: chip ID is em2874 [ 2107.305008][ T10] usb 10-1: USB disconnect, device number 22 [ 2107.311476][ T10] em28xx 10-1:0.0: Disconnecting em28xx [ 2107.362558][ T10] em28xx 10-1:0.0: Freeing device [ 2108.341672][T23468] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2108.341692][T23468] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2108.341724][T23468] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2108.381576][T23468] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2108.381652][T23468] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2108.381736][T23468] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2108.676192][ T3539] bridge_slave_1: left allmulticast mode [ 2108.683098][ T3539] bridge_slave_1: left promiscuous mode [ 2108.683420][ T3539] bridge0: port 2(bridge_slave_1) entered disabled state [ 2108.797520][ T3539] bridge_slave_0: left allmulticast mode [ 2108.797554][ T3539] bridge_slave_0: left promiscuous mode [ 2108.798050][ T3539] bridge0: port 1(bridge_slave_0) entered disabled state [ 2108.944646][ T3539] bridge_slave_1: left allmulticast mode [ 2108.944680][ T3539] bridge_slave_1: left promiscuous mode [ 2108.944945][ T3539] bridge0: port 2(bridge_slave_1) entered disabled state [ 2109.046969][ T3539] bridge_slave_0: left allmulticast mode [ 2109.047001][ T3539] bridge_slave_0: left promiscuous mode [ 2109.047264][ T3539] bridge0: port 1(bridge_slave_0) entered disabled state [ 2109.148698][ T3539] bridge_slave_1: left allmulticast mode [ 2109.148724][ T3539] bridge_slave_1: left promiscuous mode [ 2109.148900][ T3539] bridge0: port 2(bridge_slave_1) entered disabled state [ 2110.537474][ T3539] bridge_slave_0: left allmulticast mode [ 2110.537506][ T3539] bridge_slave_0: left promiscuous mode [ 2110.537838][ T3539] bridge0: port 1(bridge_slave_0) entered disabled state [ 2110.777054][T22444] IPVS: starting estimator thread 0... [ 2110.777132][T23746] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 2110.866162][T23748] IPVS: using max 7 ests per chain, 16800 per kthread [ 2111.146633][ T3539] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2111.246410][ T3539] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2111.314579][ T3539] bond0 (unregistering): Released all slaves [ 2111.469365][T23754] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 2111.469396][T23754] overlayfs: failed to set xattr on upper [ 2111.469407][T23754] overlayfs: ...falling back to redirect_dir=nofollow. [ 2111.469416][T23754] overlayfs: ...falling back to index=off. [ 2111.469424][T23754] overlayfs: ...falling back to uuid=null. [ 2111.588878][ T3539] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2111.686582][ T3539] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2111.751868][ T3539] bond0 (unregistering): Released all slaves [ 2112.825192][ T3539] erspan0 (unregistering): left promiscuous mode [ 2113.487659][ T3539] team0: Port device geneve0 removed [ 2113.675739][ T3539] bridge0 (unregistering): left promiscuous mode [ 2114.472887][ T1320] ieee802154 phy0 wpan0: encryption failed: -22 [ 2114.472982][ T1320] ieee802154 phy1 wpan1: encryption failed: -22 [ 2115.205878][ T3539] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2115.270601][ T3539] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2115.286638][ T3539] bond0 (unregistering): Released all slaves [ 2116.506071][ T3539] bond1 (unregistering): (slave veth0_to_bond): Releasing active interface [ 2116.567674][ T3539] bond1 (unregistering): Released all slaves [ 2116.702223][ T3539] bond0 (unregistering): Released all slaves [ 2117.654599][T23468] hsr_slave_0: entered promiscuous mode [ 2117.656573][T23468] hsr_slave_1: entered promiscuous mode [ 2117.657567][T23468] debugfs: 'hsr0' already exists in 'hsr' [ 2117.657593][T23468] Cannot create hsr debugfs directory [ 2118.420180][T23365] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 2118.492803][T23365] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 2118.510424][T23791] exFAT-fs (loop19): unable to read boot sector [ 2118.510438][T23791] exFAT-fs (loop19): failed to read boot sector [ 2118.510446][T23791] exFAT-fs (loop19): failed to recognize exfat type [ 2118.591668][T23365] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 2118.743064][T23365] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 2118.904804][ T10] IPVS: starting estimator thread 0... [ 2119.066045][T23807] IPVS: using max 7 ests per chain, 16800 per kthread [ 2120.398234][T23825] 9p: Bad value for 'rfdno' [ 2122.271310][T23365] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2122.348088][T23365] 8021q: adding VLAN 0 to HW filter on device team0 [ 2122.372155][ T5955] bridge0: port 1(bridge_slave_0) entered blocking state [ 2122.373320][ T5955] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2122.440094][ T2207] bridge0: port 2(bridge_slave_1) entered blocking state [ 2122.440319][ T2207] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2122.721697][T23868] netlink: 16 bytes leftover after parsing attributes in process `syz.8.5412'. [ 2125.169548][ T8178] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 2125.254894][ T8178] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 2125.261208][ T8178] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 2125.262381][ T8178] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 2125.263142][ T8178] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 2125.468035][T23468] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 2125.743391][T23468] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 2125.950584][T23468] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 2126.171614][T23884] vxcan1 speed is unknown, defaulting to 1000 [ 2126.362855][ T8178] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 2126.379267][ T8178] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 2126.399751][ T8178] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 2126.419594][ T8178] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 2126.420696][ T8178] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 2126.755740][T23468] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 2126.861967][ T38] audit: type=1326 audit(2000000522.829:505): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=23891 comm="syz.1.5420" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fb8f5e7f749 code=0x0 [ 2126.994444][ T3539] hsr_slave_0: left promiscuous mode [ 2127.015440][ T3539] hsr_slave_1: left promiscuous mode [ 2127.016638][ T3539] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2127.041086][ T3539] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2127.335018][ T8178] Bluetooth: hci2: command tx timeout [ 2128.534678][ T8178] Bluetooth: hci4: command tx timeout [ 2129.415076][ T8178] Bluetooth: hci2: command tx timeout [ 2130.624072][ T8178] Bluetooth: hci4: command tx timeout [ 2131.499563][ T8178] Bluetooth: hci2: command tx timeout [ 2132.724898][ T8178] Bluetooth: hci4: command tx timeout [ 2133.264757][ T3539] team0 (unregistering): Port device team_slave_1 removed [ 2133.574484][ T8178] Bluetooth: hci2: command tx timeout [ 2133.625022][ T3539] team0 (unregistering): Port device team_slave_0 removed [ 2134.792943][ T8178] Bluetooth: hci4: command tx timeout [ 2137.641893][T23884] lo speed is unknown, defaulting to 1000 [ 2137.732418][T23960] netlink: 'syz.8.5444': attribute type 83 has an invalid length. [ 2137.973506][T23887] vxcan1 speed is unknown, defaulting to 1000 [ 2138.701516][T23887] lo speed is unknown, defaulting to 1000 [ 2139.033335][T23884] chnl_net:caif_netlink_parms(): no params data found [ 2139.388929][T23468] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2139.810831][T23884] bridge0: port 1(bridge_slave_0) entered blocking state [ 2139.811046][T23884] bridge0: port 1(bridge_slave_0) entered disabled state [ 2139.811344][T23884] bridge_slave_0: entered allmulticast mode [ 2139.824372][T23884] bridge_slave_0: entered promiscuous mode [ 2139.880989][T23884] bridge0: port 2(bridge_slave_1) entered blocking state [ 2139.881079][T23884] bridge0: port 2(bridge_slave_1) entered disabled state [ 2139.881331][T23884] bridge_slave_1: entered allmulticast mode [ 2139.883350][T23884] bridge_slave_1: entered promiscuous mode [ 2139.981618][T23468] 8021q: adding VLAN 0 to HW filter on device team0 [ 2140.359973][T23884] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2140.405626][T23884] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2140.560166][ T2207] bridge0: port 1(bridge_slave_0) entered blocking state [ 2140.560331][ T2207] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2140.928309][T23884] team0: Port device team_slave_0 added [ 2140.930385][T23887] chnl_net:caif_netlink_parms(): no params data found [ 2140.989607][T23884] team0: Port device team_slave_1 added [ 2141.016857][ T5955] bridge0: port 2(bridge_slave_1) entered blocking state [ 2141.017087][ T5955] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2141.566786][T23884] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2141.566807][T23884] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2141.566837][T23884] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2141.642689][T23884] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2141.642704][T23884] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2141.642725][T23884] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2142.455341][T23887] bridge0: port 1(bridge_slave_0) entered blocking state [ 2142.455498][T23887] bridge0: port 1(bridge_slave_0) entered disabled state [ 2142.455711][T23887] bridge_slave_0: entered allmulticast mode [ 2142.457987][T23887] bridge_slave_0: entered promiscuous mode [ 2142.500919][T23884] hsr_slave_0: entered promiscuous mode [ 2142.502158][T23884] hsr_slave_1: entered promiscuous mode [ 2142.554838][T23887] bridge0: port 2(bridge_slave_1) entered blocking state [ 2142.554931][T23887] bridge0: port 2(bridge_slave_1) entered disabled state [ 2142.555150][T23887] bridge_slave_1: entered allmulticast mode [ 2142.557264][T23887] bridge_slave_1: entered promiscuous mode [ 2142.951133][T23887] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2143.039105][T23887] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2143.069067][ T3539] IPVS: stop unused estimator thread 0... [ 2143.530311][T23887] team0: Port device team_slave_0 added [ 2143.546956][T23887] team0: Port device team_slave_1 added [ 2143.935911][T23887] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2143.935932][T23887] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2143.935961][T23887] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2144.309194][T23887] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2144.309212][T23887] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2144.309241][T23887] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2144.321732][T23051] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 2144.342118][T23051] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 2144.386787][T23051] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 2144.417166][T23051] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 2144.422277][T23051] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 2146.159858][T23887] hsr_slave_0: entered promiscuous mode [ 2146.160131][T24058] vxcan1 speed is unknown, defaulting to 1000 [ 2146.186570][T23887] hsr_slave_1: entered promiscuous mode [ 2146.187659][T23887] debugfs: 'hsr0' already exists in 'hsr' [ 2146.187686][T23887] Cannot create hsr debugfs directory [ 2146.391571][T24096] netlink: 12 bytes leftover after parsing attributes in process `syz.8.5496'. [ 2146.535986][ T8178] Bluetooth: hci5: command tx timeout [ 2146.745795][T24096] 8021q: adding VLAN 0 to HW filter on device bond3 [ 2146.746523][T24098] bond3: option mode: unable to set because the bond device is up [ 2146.909767][T24058] lo speed is unknown, defaulting to 1000 [ 2148.182451][ T3539] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2148.615604][ T8178] Bluetooth: hci5: command tx timeout [ 2149.335590][ T3539] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2149.433849][T24058] chnl_net:caif_netlink_parms(): no params data found [ 2149.882766][ T3539] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2150.371544][ T3539] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2150.693007][ T8178] Bluetooth: hci5: command tx timeout [ 2150.791976][T24058] bridge0: port 1(bridge_slave_0) entered blocking state [ 2150.810938][T24058] bridge0: port 1(bridge_slave_0) entered disabled state [ 2150.811229][T24058] bridge_slave_0: entered allmulticast mode [ 2150.823818][T24058] bridge_slave_0: entered promiscuous mode [ 2151.137003][T24058] bridge0: port 2(bridge_slave_1) entered blocking state [ 2151.137108][T24058] bridge0: port 2(bridge_slave_1) entered disabled state [ 2151.137348][T24058] bridge_slave_1: entered allmulticast mode [ 2151.140622][T24058] bridge_slave_1: entered promiscuous mode [ 2151.671006][T24058] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2151.718252][ T38] audit: type=1326 audit(2000000547.690:506): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=24165 comm="syz.8.5522" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f023ca6f749 code=0x0 [ 2151.946608][T24058] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2152.541373][T24058] team0: Port device team_slave_0 added [ 2152.549556][T24058] team0: Port device team_slave_1 added [ 2152.780040][ T8178] Bluetooth: hci5: command tx timeout [ 2152.782475][ T3539] bridge_slave_1: left allmulticast mode [ 2152.782505][ T3539] bridge_slave_1: left promiscuous mode [ 2152.783045][ T3539] bridge0: port 2(bridge_slave_1) entered disabled state [ 2152.854731][ T3539] bridge_slave_0: left allmulticast mode [ 2152.854764][ T3539] bridge_slave_0: left promiscuous mode [ 2152.854961][ T3539] bridge0: port 1(bridge_slave_0) entered disabled state [ 2152.928168][ T3539] bridge_slave_1: left allmulticast mode [ 2152.928200][ T3539] bridge_slave_1: left promiscuous mode [ 2152.928469][ T3539] bridge0: port 2(bridge_slave_1) entered disabled state [ 2152.994605][ T3539] bridge_slave_0: left allmulticast mode [ 2152.994707][ T3539] bridge_slave_0: left promiscuous mode [ 2152.994924][ T3539] bridge0: port 1(bridge_slave_0) entered disabled state [ 2155.432269][T24195] overlayfs: failed to clone lowerpath [ 2155.484157][T24197] overlayfs: failed to clone lowerpath [ 2156.296878][ T3539] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2156.358236][ T3539] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2156.413879][ T3539] bond0 (unregistering): Released all slaves [ 2156.926787][T24208] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 2156.926820][T24208] overlayfs: failed to set xattr on upper [ 2156.926831][T24208] overlayfs: ...falling back to redirect_dir=nofollow. [ 2156.926840][T24208] overlayfs: ...falling back to uuid=null. [ 2157.226546][T24210] netlink: 8 bytes leftover after parsing attributes in process `syz.8.5539'. [ 2157.226583][T24210] netlink: 8 bytes leftover after parsing attributes in process `syz.8.5539'. [ 2157.590358][ T38] audit: type=1800 audit(2000000553.561:507): pid=24219 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz.8.5542" name="nullb0" dev="tmpfs" ino=6658 res=0 errno=0 [ 2160.263488][ T3539] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2160.354102][ T3539] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2160.397587][ T3539] bond0 (unregistering): Released all slaves [ 2160.476525][T24058] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2160.476546][T24058] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2160.476577][T24058] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2160.770509][T24058] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2160.770532][T24058] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2160.770564][T24058] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2161.713847][T24058] hsr_slave_0: entered promiscuous mode [ 2161.715125][T24058] hsr_slave_1: entered promiscuous mode [ 2161.715951][T24058] debugfs: 'hsr0' already exists in 'hsr' [ 2161.715979][T24058] Cannot create hsr debugfs directory [ 2162.839621][T23884] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 2162.999340][T23884] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 2163.172642][T23884] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 2163.276631][T23884] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 2163.742809][ T3539] hsr_slave_0: left promiscuous mode [ 2163.763623][ T3539] hsr_slave_1: left promiscuous mode [ 2163.764520][ T3539] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2163.803153][ T3539] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2163.942827][ T3539] hsr_slave_0: left promiscuous mode [ 2163.962772][ T3539] hsr_slave_1: left promiscuous mode [ 2163.963858][ T3539] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2163.963879][ T3539] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2164.211684][ T3539] veth1_macvtap: left promiscuous mode [ 2164.211794][ T3539] veth0_macvtap: left promiscuous mode [ 2164.212056][ T3539] veth1_vlan: left promiscuous mode [ 2164.234999][ T3539] veth0_vlan: left promiscuous mode [ 2164.958401][T24321] netlink: 212368 bytes leftover after parsing attributes in process `syz.8.5581'. [ 2166.646347][ T3539] team0 (unregistering): Port device team_slave_1 removed [ 2167.183296][ T3539] team0 (unregistering): Port device team_slave_0 removed [ 2173.852472][ T3539] team_slave_1 (unregistering): left promiscuous mode [ 2173.893015][ T3539] team0 (unregistering): Port device team_slave_1 removed [ 2174.203105][ T3539] team_slave_0 (unregistering): left promiscuous mode [ 2174.243411][ T3539] team0 (unregistering): Port device team_slave_0 removed [ 2175.901096][ T1320] ieee802154 phy0 wpan0: encryption failed: -22 [ 2175.901195][ T1320] ieee802154 phy1 wpan1: encryption failed: -22 [ 2178.340180][T23887] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 2178.634911][T24366] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 2178.634935][T24366] overlayfs: failed to set xattr on upper [ 2178.634941][T24366] overlayfs: ...falling back to redirect_dir=nofollow. [ 2178.634948][T24366] overlayfs: ...falling back to index=off. [ 2178.634954][T24366] overlayfs: ...falling back to uuid=null. [ 2178.873646][T23887] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 2178.916379][T23887] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 2179.454060][T23887] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 2179.921552][T24386] overlayfs: failed to clone upperpath [ 2180.925936][T23884] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2181.137383][T23884] 8021q: adding VLAN 0 to HW filter on device team0 [ 2181.189203][ T5955] bridge0: port 1(bridge_slave_0) entered blocking state [ 2181.189463][ T5955] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2181.432952][ T1338] bridge0: port 2(bridge_slave_1) entered blocking state [ 2181.433197][ T1338] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2181.682516][T23887] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2181.851049][T23887] 8021q: adding VLAN 0 to HW filter on device team0 [ 2182.198218][ T7186] bridge0: port 1(bridge_slave_0) entered blocking state [ 2182.198448][ T7186] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2182.249456][ T7186] bridge0: port 2(bridge_slave_1) entered blocking state [ 2182.249755][ T7186] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2182.274755][T24409] overlayfs: failed to clone upperpath [ 2182.296575][ T3539] IPVS: stop unused estimator thread 0... [ 2182.641520][T24058] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 2182.861688][T24058] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 2182.907626][ T3539] bridge_slave_1: left allmulticast mode [ 2182.907660][ T3539] bridge_slave_1: left promiscuous mode [ 2182.907930][ T3539] bridge0: port 2(bridge_slave_1) entered disabled state [ 2183.002345][ T3539] bridge_slave_0: left allmulticast mode [ 2183.002370][ T3539] bridge_slave_0: left promiscuous mode [ 2183.002571][ T3539] bridge0: port 1(bridge_slave_0) entered disabled state [ 2185.340665][T23051] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 2185.357079][T23051] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 2185.423552][T23051] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 2185.438781][T23051] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 2185.439895][T23051] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 2186.415280][T23051] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 2186.441622][T23051] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 2186.444747][T23051] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 2186.447907][T23051] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 2186.449745][T23051] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 2187.528170][T23051] Bluetooth: hci0: command tx timeout [ 2188.032069][ T3539] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2188.209516][ T3539] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2188.226934][ T3539] bond0 (unregistering): Released all slaves [ 2188.314104][T24058] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 2188.384398][T24058] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 2188.542425][T23051] Bluetooth: hci6: command tx timeout [ 2188.852997][T24438] vxcan1 speed is unknown, defaulting to 1000 [ 2189.571297][T23051] Bluetooth: hci0: command tx timeout [ 2189.870913][ T3539] hsr_slave_0: left promiscuous mode [ 2189.917375][ T3539] hsr_slave_1: left promiscuous mode [ 2189.918482][ T3539] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2189.945826][ T3539] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2190.610824][T23051] Bluetooth: hci6: command tx timeout [ 2191.663493][T23051] Bluetooth: hci0: command tx timeout [ 2192.166261][ T3539] team0 (unregistering): Port device team_slave_1 removed [ 2192.611795][ T3539] team0 (unregistering): Port device team_slave_0 removed [ 2192.691445][T23051] Bluetooth: hci6: command tx timeout [ 2193.781054][T23051] Bluetooth: hci0: command tx timeout [ 2194.822756][T23051] Bluetooth: hci6: command tx timeout [ 2196.736857][T24537] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 2196.736872][T24537] IPv6: NLM_F_CREATE should be set when creating new route [ 2196.759989][T24058] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2197.240585][T24452] vxcan1 speed is unknown, defaulting to 1000 [ 2197.240698][T24438] lo speed is unknown, defaulting to 1000 [ 2197.392341][T24540] overlayfs: failed to clone upperpath [ 2197.615947][T24058] 8021q: adding VLAN 0 to HW filter on device team0 [ 2197.788768][T11068] bridge0: port 1(bridge_slave_0) entered blocking state [ 2197.788884][T11068] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2197.789843][T24452] lo speed is unknown, defaulting to 1000 [ 2197.904276][ T2185] bridge0: port 2(bridge_slave_1) entered blocking state [ 2197.904569][ T2185] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2198.084720][T24552] overlayfs: failed to clone upperpath [ 2198.400996][T24559] netlink: 'syz.8.5671': attribute type 21 has an invalid length. [ 2198.952548][T24438] chnl_net:caif_netlink_parms(): no params data found [ 2199.519870][T24452] chnl_net:caif_netlink_parms(): no params data found [ 2200.462570][T24438] bridge0: port 1(bridge_slave_0) entered blocking state [ 2200.463729][T24438] bridge0: port 1(bridge_slave_0) entered disabled state [ 2200.464003][T24438] bridge_slave_0: entered allmulticast mode [ 2200.467119][T24438] bridge_slave_0: entered promiscuous mode [ 2200.723768][T24438] bridge0: port 2(bridge_slave_1) entered blocking state [ 2200.724691][T24438] bridge0: port 2(bridge_slave_1) entered disabled state [ 2200.724961][T24438] bridge_slave_1: entered allmulticast mode [ 2200.727729][T24438] bridge_slave_1: entered promiscuous mode [ 2201.808898][T24438] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2201.831395][T24452] bridge0: port 1(bridge_slave_0) entered blocking state [ 2201.831609][T24452] bridge0: port 1(bridge_slave_0) entered disabled state [ 2201.831864][T24452] bridge_slave_0: entered allmulticast mode [ 2201.834739][T24452] bridge_slave_0: entered promiscuous mode [ 2201.892128][T24438] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2201.898575][T24452] bridge0: port 2(bridge_slave_1) entered blocking state [ 2201.898688][T24452] bridge0: port 2(bridge_slave_1) entered disabled state [ 2201.898901][T24452] bridge_slave_1: entered allmulticast mode [ 2201.924298][T24452] bridge_slave_1: entered promiscuous mode [ 2203.290007][ T38] audit: type=1326 audit(2000000599.163:508): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=24616 comm="syz.1.5687" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fb8f5e7f749 code=0x0 [ 2204.742996][T24438] team0: Port device team_slave_0 added [ 2204.761906][T24452] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2204.804591][T24438] team0: Port device team_slave_1 added [ 2204.807333][T24452] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2205.278820][ T8178] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 2206.299152][ T8178] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 2206.309310][ T8178] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 2206.374789][ T8178] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 2206.388252][ T8178] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 2208.233041][T24626] bridge0: port 2(bridge_slave_1) entered disabled state [ 2208.240433][T24626] bridge0: port 1(bridge_slave_0) entered disabled state [ 2208.530308][ T8178] Bluetooth: hci2: command tx timeout [ 2208.740285][T24626] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2208.748852][T24626] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2209.910604][T24438] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2209.910625][T24438] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2209.910656][T24438] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2209.915694][T24452] team0: Port device team_slave_0 added [ 2211.215201][ T8178] Bluetooth: hci2: command tx timeout [ 2211.284120][ T7186] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 2211.286830][ T10] lo speed is unknown, defaulting to 1000 [ 2211.286864][ T10] syz0: Port: 1 Link DOWN [ 2211.290073][T24438] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2211.290117][T24438] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2211.290200][T24438] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2211.303109][T24452] team0: Port device team_slave_1 added [ 2211.320117][ T7186] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 2211.504832][ T7186] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 2211.514698][ T7186] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 2211.642907][T24452] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2211.642924][T24452] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2211.642949][T24452] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2211.818213][T24452] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2211.818233][T24452] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2211.818263][T24452] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2212.177449][T24438] hsr_slave_0: entered promiscuous mode [ 2212.179005][T24438] hsr_slave_1: entered promiscuous mode [ 2212.183487][T24438] debugfs: 'hsr0' already exists in 'hsr' [ 2212.183567][T24438] Cannot create hsr debugfs directory [ 2212.192834][T24631] vxcan1 speed is unknown, defaulting to 1000 [ 2213.448694][ T8178] Bluetooth: hci2: command tx timeout [ 2213.893845][T24685] 9pnet: p9_errstr2errno: server reported unknown error [ 2214.027622][T24631] lo speed is unknown, defaulting to 1000 [ 2214.067047][T24452] hsr_slave_0: entered promiscuous mode [ 2214.068170][T24452] hsr_slave_1: entered promiscuous mode [ 2214.068940][T24452] debugfs: 'hsr0' already exists in 'hsr' [ 2214.068960][T24452] Cannot create hsr debugfs directory [ 2215.489664][ T8178] Bluetooth: hci2: command tx timeout [ 2219.750830][T24715] overlayfs: failed to clone upperpath [ 2221.405333][T24631] chnl_net:caif_netlink_parms(): no params data found [ 2225.907850][T24631] bridge0: port 1(bridge_slave_0) entered blocking state [ 2225.908002][T24631] bridge0: port 1(bridge_slave_0) entered disabled state [ 2225.908274][T24631] bridge_slave_0: entered allmulticast mode [ 2225.931546][T24631] bridge_slave_0: entered promiscuous mode [ 2225.935140][T24631] bridge0: port 2(bridge_slave_1) entered blocking state [ 2225.935255][T24631] bridge0: port 2(bridge_slave_1) entered disabled state [ 2225.935466][T24631] bridge_slave_1: entered allmulticast mode [ 2225.937796][T24631] bridge_slave_1: entered promiscuous mode [ 2225.996895][ T3539] bridge_slave_1: left allmulticast mode [ 2225.996919][ T3539] bridge_slave_1: left promiscuous mode [ 2225.997116][ T3539] bridge0: port 2(bridge_slave_1) entered disabled state [ 2226.058195][T24750] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5726'. [ 2226.102213][ T3539] bridge_slave_0: left allmulticast mode [ 2226.102247][ T3539] bridge_slave_0: left promiscuous mode [ 2226.102523][ T3539] bridge0: port 1(bridge_slave_0) entered disabled state [ 2227.181040][ T3539] bridge_slave_1: left allmulticast mode [ 2227.181081][ T3539] bridge_slave_1: left promiscuous mode [ 2227.181346][ T3539] bridge0: port 2(bridge_slave_1) entered disabled state [ 2227.230627][ T3539] bridge_slave_0: left allmulticast mode [ 2227.230663][ T3539] bridge_slave_0: left promiscuous mode [ 2227.230930][ T3539] bridge0: port 1(bridge_slave_0) entered disabled state [ 2231.109198][ T3539] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2231.169494][ T3539] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2231.212022][ T3539] bond0 (unregistering): Released all slaves [ 2237.370326][ T1320] ieee802154 phy0 wpan0: encryption failed: -22 [ 2237.370389][ T1320] ieee802154 phy1 wpan1: encryption failed: -22 [ 2237.849191][ T3539] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2237.908975][ T3539] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2237.932385][ T3539] bond0 (unregistering): Released all slaves [ 2238.156570][T24750] bond0: option primary: mode dependency failed, not supported in mode balance-rr(0) [ 2239.785365][T24631] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2240.659697][T24631] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2241.532484][T24631] team0: Port device team_slave_0 added [ 2241.682073][T24631] team0: Port device team_slave_1 added [ 2242.018679][ T3539] hsr_slave_0: left promiscuous mode [ 2242.983298][ T3539] hsr_slave_1: left promiscuous mode [ 2242.984406][ T3539] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2244.369788][ T3539] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2246.607834][ T3539] hsr_slave_0: left promiscuous mode [ 2246.627868][ T3539] hsr_slave_1: left promiscuous mode [ 2246.629000][ T3539] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2246.678948][ T3539] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2249.486463][T23051] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 2249.542848][T24635] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 2249.549242][T24843] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 2249.593470][T24843] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 2249.601716][T24843] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 2249.712386][ T8178] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 2249.789589][ T8178] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 2249.795087][ T8178] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 2249.857716][T24843] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 2249.858843][T24843] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 2251.916879][T24843] Bluetooth: hci4: command tx timeout [ 2251.970990][T24843] Bluetooth: hci5: command tx timeout [ 2252.428392][ T3539] team0 (unregistering): Port device team_slave_1 removed [ 2252.997632][ T38] audit: type=1800 audit(2000000648.946:509): pid=24852 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.1.5754" name="bus" dev="ramfs" ino=95749 res=0 errno=0 [ 2253.078227][ T3539] team0 (unregistering): Port device team_slave_0 removed [ 2253.977293][T24843] Bluetooth: hci4: command tx timeout [ 2254.067294][T24843] Bluetooth: hci5: command tx timeout [ 2256.957895][ T8178] Bluetooth: hci5: command tx timeout [ 2256.958064][ T8491] Bluetooth: hci4: command tx timeout [ 2259.011588][T24843] Bluetooth: hci5: command tx timeout [ 2259.011645][ T8491] Bluetooth: hci4: command tx timeout [ 2259.753466][T24894] netlink: 'syz.8.5765': attribute type 2 has an invalid length. [ 2266.080623][ T3539] team0 (unregistering): Port device team_slave_1 removed [ 2266.371065][T24843] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 2266.384139][T24843] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 2266.396757][T24843] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 2266.399403][T24843] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 2266.400460][T24843] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 2266.547427][ T3539] team0 (unregistering): Port device team_slave_0 removed [ 2268.526502][T24843] Bluetooth: hci7: command tx timeout [ 2269.813274][T24894] : entered promiscuous mode [ 2270.187439][T24927] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5772'. [ 2270.621009][T24843] Bluetooth: hci7: command tx timeout [ 2271.287220][T24915] vxcan1 speed is unknown, defaulting to 1000 [ 2272.999550][T24843] Bluetooth: hci7: command tx timeout [ 2275.196111][T24843] Bluetooth: hci7: command tx timeout [ 2275.572925][T24915] lo speed is unknown, defaulting to 1000 [ 2275.574570][T24840] vxcan1 speed is unknown, defaulting to 1000 [ 2277.181888][T24841] vxcan1 speed is unknown, defaulting to 1000 [ 2277.193325][T24840] lo speed is unknown, defaulting to 1000 [ 2279.626309][T24841] lo speed is unknown, defaulting to 1000 [ 2285.458605][T24915] chnl_net:caif_netlink_parms(): no params data found [ 2287.153731][T24840] chnl_net:caif_netlink_parms(): no params data found [ 2288.126705][T24841] chnl_net:caif_netlink_parms(): no params data found [ 2288.510181][T24915] bridge0: port 1(bridge_slave_0) entered blocking state [ 2288.515863][T24915] bridge0: port 1(bridge_slave_0) entered disabled state [ 2288.516165][T24915] bridge_slave_0: entered allmulticast mode [ 2288.519953][T24915] bridge_slave_0: entered promiscuous mode [ 2288.695548][T24915] bridge0: port 2(bridge_slave_1) entered blocking state [ 2288.695680][T24915] bridge0: port 2(bridge_slave_1) entered disabled state [ 2288.695951][T24915] bridge_slave_1: entered allmulticast mode [ 2288.698868][T24915] bridge_slave_1: entered promiscuous mode [ 2289.885342][T25035] netlink: 36 bytes leftover after parsing attributes in process `syz.1.5800'. [ 2291.216198][T24840] bridge0: port 1(bridge_slave_0) entered blocking state [ 2291.216451][T24840] bridge0: port 1(bridge_slave_0) entered disabled state [ 2291.216717][T24840] bridge_slave_0: entered allmulticast mode [ 2291.219716][T24840] bridge_slave_0: entered promiscuous mode [ 2291.310067][T24915] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2291.415495][T24840] bridge0: port 2(bridge_slave_1) entered blocking state [ 2291.415634][T24840] bridge0: port 2(bridge_slave_1) entered disabled state [ 2291.415909][T24840] bridge_slave_1: entered allmulticast mode [ 2291.419171][T24840] bridge_slave_1: entered promiscuous mode [ 2291.582760][T24915] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2292.183785][T24841] bridge0: port 1(bridge_slave_0) entered blocking state [ 2292.184102][T24841] bridge0: port 1(bridge_slave_0) entered disabled state [ 2292.184377][T24841] bridge_slave_0: entered allmulticast mode [ 2292.209288][T24841] bridge_slave_0: entered promiscuous mode [ 2292.340618][T24840] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2292.739272][T24841] bridge0: port 2(bridge_slave_1) entered blocking state [ 2292.739428][T24841] bridge0: port 2(bridge_slave_1) entered disabled state [ 2292.739716][T24841] bridge_slave_1: entered allmulticast mode [ 2292.742623][T24841] bridge_slave_1: entered promiscuous mode [ 2292.762548][T24915] team0: Port device team_slave_0 added [ 2292.788834][T24840] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2292.918636][T24915] team0: Port device team_slave_1 added [ 2295.485431][T25061] overlayfs: failed to clone lowerpath [ 2295.633815][T25062] overlayfs: failed to clone lowerpath [ 2297.947614][T24841] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2297.950092][T24840] team0: Port device team_slave_0 added [ 2297.971521][T24915] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2297.971541][T24915] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2297.971571][T24915] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2298.009029][T24841] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2298.681062][T24840] team0: Port device team_slave_1 added [ 2298.697804][T24915] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2298.697823][T24915] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2298.697853][T24915] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2299.134263][ T1320] ieee802154 phy0 wpan0: encryption failed: -22 [ 2299.135067][ T1320] ieee802154 phy1 wpan1: encryption failed: -22 [ 2305.457961][T24841] team0: Port device team_slave_0 added [ 2305.460579][T24840] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2305.460598][T24840] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2305.460630][T24840] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2305.524469][T24840] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2305.524490][T24840] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2305.524521][T24840] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2305.528344][T24841] team0: Port device team_slave_1 added [ 2309.555079][T24915] hsr_slave_0: entered promiscuous mode [ 2309.574736][T24915] hsr_slave_1: entered promiscuous mode [ 2311.536173][ T8491] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 2311.562830][ T8491] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 2311.610226][T23051] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 2311.637469][ T8178] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 2311.711448][T23051] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 2311.801197][T23051] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 2312.415448][ T8178] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 2312.424493][ T8178] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 2312.451665][T23051] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 2312.452561][T23051] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 2312.693513][T25135] vxcan1 speed is unknown, defaulting to 1000 [ 2315.953804][T23051] Bluetooth: hci0: command tx timeout [ 2315.953843][ T8491] Bluetooth: hci2: command tx timeout [ 2316.856302][ T3539] bridge_slave_1: left allmulticast mode [ 2316.856335][ T3539] bridge_slave_1: left promiscuous mode [ 2316.856589][ T3539] bridge0: port 2(bridge_slave_1) entered disabled state [ 2317.964618][T23051] Bluetooth: hci0: command tx timeout [ 2318.084873][ T3539] bridge_slave_0: left allmulticast mode [ 2318.084907][ T3539] bridge_slave_0: left promiscuous mode [ 2318.085202][ T3539] bridge0: port 1(bridge_slave_0) entered disabled state [ 2318.181608][T23051] Bluetooth: hci2: command tx timeout [ 2318.438381][ T3539] bridge_slave_1: left allmulticast mode [ 2318.438418][ T3539] bridge_slave_1: left promiscuous mode [ 2318.438708][ T3539] bridge0: port 2(bridge_slave_1) entered disabled state [ 2319.589282][ T3539] bridge_slave_0: left allmulticast mode [ 2319.589315][ T3539] bridge_slave_0: left promiscuous mode [ 2319.589601][ T3539] bridge0: port 1(bridge_slave_0) entered disabled state [ 2319.880741][ T3539] bridge_slave_1: left allmulticast mode [ 2319.880772][ T3539] bridge_slave_1: left promiscuous mode [ 2319.880954][ T3539] bridge0: port 2(bridge_slave_1) entered disabled state [ 2320.953436][T23051] Bluetooth: hci0: command tx timeout [ 2320.953450][ T8491] Bluetooth: hci2: command tx timeout [ 2321.004699][ T3539] bridge_slave_0: left allmulticast mode [ 2321.004724][ T3539] bridge_slave_0: left promiscuous mode [ 2321.004918][ T3539] bridge0: port 1(bridge_slave_0) entered disabled state [ 2321.207133][ T3539] bridge_slave_1: left allmulticast mode [ 2321.207168][ T3539] bridge_slave_1: left promiscuous mode [ 2321.207567][ T3539] bridge0: port 2(bridge_slave_1) entered disabled state [ 2321.487580][ T3539] bridge_slave_0: left allmulticast mode [ 2321.487714][ T3539] bridge_slave_0: left promiscuous mode [ 2321.505114][ T3539] bridge0: port 1(bridge_slave_0) entered disabled state [ 2321.558286][T25170] overlayfs: failed to clone upperpath [ 2323.012690][ T8491] Bluetooth: hci0: command tx timeout [ 2323.649997][ T8491] Bluetooth: hci2: command tx timeout [ 2325.674516][ T3539] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2326.630374][ T3539] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2326.705988][ T3539] bond0 (unregistering): Released all slaves [ 2326.953878][ T3539] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2327.024162][ T3539] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2327.331121][T23051] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 2327.355518][T23051] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 2327.363724][T23051] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 2327.373279][ T3539] bond0 (unregistering): Released all slaves [ 2327.378820][T23051] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 2328.417604][T23051] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 2329.904446][ T3539] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2331.429304][T23051] Bluetooth: hci4: command tx timeout [ 2331.493790][ T3539] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2331.583006][ T3539] bond0 (unregistering): Released all slaves [ 2333.538009][T23051] Bluetooth: hci4: command tx timeout [ 2335.612932][T23051] Bluetooth: hci4: command tx timeout [ 2337.718476][T23051] Bluetooth: hci4: command tx timeout [ 2339.525080][ T8491] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 2339.535815][ T8491] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 2339.553564][ T8491] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 2339.555068][ T8491] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 2339.608230][ T8491] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 2341.802419][T23051] Bluetooth: hci5: command tx timeout [ 2342.164495][ T3539] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2343.193097][ T3539] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2343.236293][ T3539] bond0 (unregistering): Released all slaves [ 2343.887207][T23051] Bluetooth: hci5: command tx timeout [ 2344.217958][T25137] vxcan1 speed is unknown, defaulting to 1000 [ 2344.217998][T25135] lo speed is unknown, defaulting to 1000 [ 2345.425939][T25137] lo speed is unknown, defaulting to 1000 [ 2346.502747][T23051] Bluetooth: hci5: command tx timeout [ 2349.401864][T23051] Bluetooth: hci5: command tx timeout [ 2349.744127][T25197] vxcan1 speed is unknown, defaulting to 1000 [ 2350.272962][T25137] chnl_net:caif_netlink_parms(): no params data found [ 2351.894792][T25238] vxcan1 speed is unknown, defaulting to 1000 [ 2351.964825][T25135] chnl_net:caif_netlink_parms(): no params data found [ 2352.652831][T25197] lo speed is unknown, defaulting to 1000 [ 2352.653030][T25137] bridge0: port 1(bridge_slave_0) entered blocking state [ 2352.653500][T25137] bridge0: port 1(bridge_slave_0) entered disabled state [ 2352.653729][T25137] bridge_slave_0: entered allmulticast mode [ 2352.656666][T25137] bridge_slave_0: entered promiscuous mode [ 2352.749042][T25238] lo speed is unknown, defaulting to 1000 [ 2352.775931][T25137] bridge0: port 2(bridge_slave_1) entered blocking state [ 2352.776067][T25137] bridge0: port 2(bridge_slave_1) entered disabled state [ 2352.776299][T25137] bridge_slave_1: entered allmulticast mode [ 2352.793896][T25137] bridge_slave_1: entered promiscuous mode [ 2354.615151][T25137] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2354.710000][T25137] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2354.710514][T25135] bridge0: port 1(bridge_slave_0) entered blocking state [ 2354.710793][T25135] bridge0: port 1(bridge_slave_0) entered disabled state [ 2354.711013][T25135] bridge_slave_0: entered allmulticast mode [ 2354.743298][T25135] bridge_slave_0: entered promiscuous mode [ 2354.859231][T25135] bridge0: port 2(bridge_slave_1) entered blocking state [ 2354.859391][T25135] bridge0: port 2(bridge_slave_1) entered disabled state [ 2354.859577][T25135] bridge_slave_1: entered allmulticast mode [ 2354.872961][T25135] bridge_slave_1: entered promiscuous mode [ 2355.083886][ T3539] hsr_slave_0: left promiscuous mode [ 2355.122236][ T3539] hsr_slave_1: left promiscuous mode [ 2355.124073][ T3539] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2355.162957][ T3539] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2355.302046][ T3539] hsr_slave_0: left promiscuous mode [ 2355.321733][ T3539] hsr_slave_1: left promiscuous mode [ 2355.322874][ T3539] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2355.363536][ T3539] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2355.501921][ T3539] hsr_slave_0: left promiscuous mode [ 2355.521684][ T3539] hsr_slave_1: left promiscuous mode [ 2355.522543][ T3539] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2355.562386][ T3539] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2356.658639][ T3539] team0 (unregistering): Port device team_slave_1 removed [ 2356.889358][T25302] netlink: 'syz.1.5863': attribute type 4 has an invalid length. [ 2356.902249][ T3539] team0 (unregistering): Port device team_slave_0 removed [ 2356.967616][T25303] netlink: 'syz.1.5863': attribute type 4 has an invalid length. [ 2358.392044][ T3539] team0 (unregistering): Port device team_slave_1 removed [ 2358.602263][ T3539] team0 (unregistering): Port device team_slave_0 removed [ 2359.502044][ T3539] team0 (unregistering): Port device team_slave_1 removed [ 2359.712073][ T3539] team0 (unregistering): Port device team_slave_0 removed [ 2360.205819][ T1320] ieee802154 phy0 wpan0: encryption failed: -22 [ 2360.205914][ T1320] ieee802154 phy1 wpan1: encryption failed: -22 [ 2361.281940][ T3539] team0 (unregistering): Port device team_slave_1 removed [ 2361.652221][ T3539] team0 (unregistering): Port device team_slave_0 removed [ 2365.149457][T25137] team0: Port device team_slave_0 added [ 2365.414248][T25137] team0: Port device team_slave_1 added [ 2365.435621][ T10] lo speed is unknown, defaulting to 1000 [ 2365.435652][ T10] syz0: Port: 1 Link ACTIVE [ 2365.479178][T25135] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2365.675187][T25135] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2366.565773][T25137] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2366.565794][T25137] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2366.565824][T25137] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2367.002693][T25137] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2367.002716][T25137] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2367.002744][T25137] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2368.463862][T25135] team0: Port device team_slave_0 added [ 2368.499780][T25135] team0: Port device team_slave_1 added [ 2369.368830][T25137] hsr_slave_0: entered promiscuous mode [ 2369.370297][T25137] hsr_slave_1: entered promiscuous mode [ 2369.373010][T25137] debugfs: 'hsr0' already exists in 'hsr' [ 2369.373093][T25137] Cannot create hsr debugfs directory [ 2369.578510][ T8491] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 2369.778189][ T8491] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 2369.780048][ T8491] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 2369.796148][ T8491] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 2369.797133][ T8491] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 2370.162417][ T8491] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 2370.168620][ T8491] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 2370.170463][ T8491] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 2370.186566][ T8491] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 2370.187859][ T8491] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 2371.167761][T25238] chnl_net:caif_netlink_parms(): no params data found [ 2371.343356][T25319] vxcan1 speed is unknown, defaulting to 1000 [ 2371.887714][ T8491] Bluetooth: hci0: command tx timeout [ 2372.462190][T25319] lo speed is unknown, defaulting to 1000 [ 2372.462316][T25326] vxcan1 speed is unknown, defaulting to 1000 [ 2372.585186][T25197] chnl_net:caif_netlink_parms(): no params data found [ 2372.941134][ T8491] Bluetooth: hci1: command tx timeout [ 2374.015216][ T8491] Bluetooth: hci0: command tx timeout [ 2375.284295][ T8491] Bluetooth: hci1: command tx timeout [ 2375.481775][T25326] lo speed is unknown, defaulting to 1000 [ 2376.373879][ T8491] Bluetooth: hci0: command tx timeout [ 2376.572606][T25238] bridge0: port 1(bridge_slave_0) entered blocking state [ 2376.573011][T25238] bridge0: port 1(bridge_slave_0) entered disabled state [ 2376.573255][T25238] bridge_slave_0: entered allmulticast mode [ 2376.576378][T25238] bridge_slave_0: entered promiscuous mode [ 2376.662568][T25238] bridge0: port 2(bridge_slave_1) entered blocking state [ 2376.663129][T25238] bridge0: port 2(bridge_slave_1) entered disabled state [ 2376.663378][T25238] bridge_slave_1: entered allmulticast mode [ 2376.666480][T25238] bridge_slave_1: entered promiscuous mode [ 2377.990262][ T8491] Bluetooth: hci1: command tx timeout [ 2379.723826][ T8491] Bluetooth: hci0: command tx timeout [ 2379.890903][T25238] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2379.891156][T25197] bridge0: port 1(bridge_slave_0) entered blocking state [ 2379.891369][T25197] bridge0: port 1(bridge_slave_0) entered disabled state [ 2379.891585][T25197] bridge_slave_0: entered allmulticast mode [ 2379.898209][T25197] bridge_slave_0: entered promiscuous mode [ 2379.937643][T25238] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2379.938930][T25197] bridge0: port 2(bridge_slave_1) entered blocking state [ 2379.939762][T25197] bridge0: port 2(bridge_slave_1) entered disabled state [ 2379.942957][T25197] bridge_slave_1: entered allmulticast mode [ 2379.951457][T25197] bridge_slave_1: entered promiscuous mode [ 2380.060116][T23051] Bluetooth: hci1: command tx timeout [ 2380.667941][T25238] team0: Port device team_slave_0 added [ 2380.677790][T25197] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2381.794572][T25238] team0: Port device team_slave_1 added [ 2381.810541][T25197] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2386.202004][T25238] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2386.202025][T25238] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2386.202055][T25238] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2386.284167][T25197] team0: Port device team_slave_0 added [ 2386.321332][T25238] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2386.321347][T25238] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2386.321368][T25238] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2386.403742][T25197] team0: Port device team_slave_1 added [ 2386.662283][T25197] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2386.662304][T25197] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2386.662335][T25197] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2387.064761][T25197] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2387.064782][T25197] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2387.064811][T25197] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2387.065670][T25319] chnl_net:caif_netlink_parms(): no params data found [ 2388.248966][T25238] hsr_slave_0: entered promiscuous mode [ 2388.256601][T25238] hsr_slave_1: entered promiscuous mode [ 2388.257366][T25238] debugfs: 'hsr0' already exists in 'hsr' [ 2388.257395][T25238] Cannot create hsr debugfs directory [ 2390.538991][T25326] chnl_net:caif_netlink_parms(): no params data found [ 2390.612885][T23051] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 2390.618037][T23051] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 2390.644169][T23051] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 2390.647548][T23051] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 2390.650264][T23051] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 2391.950392][T25319] bridge0: port 1(bridge_slave_0) entered blocking state [ 2391.950587][T25319] bridge0: port 1(bridge_slave_0) entered disabled state [ 2391.950897][T25319] bridge_slave_0: entered allmulticast mode [ 2391.954516][T25319] bridge_slave_0: entered promiscuous mode [ 2392.015813][T25319] bridge0: port 2(bridge_slave_1) entered blocking state [ 2392.015940][T25319] bridge0: port 2(bridge_slave_1) entered disabled state [ 2392.016129][T25319] bridge_slave_1: entered allmulticast mode [ 2392.019080][T25319] bridge_slave_1: entered promiscuous mode [ 2393.379367][T23051] Bluetooth: hci2: command tx timeout [ 2394.598721][ T3539] netdevsim netdevsim8 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 2394.598763][ T3539] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2395.632601][T23051] Bluetooth: hci2: command tx timeout [ 2397.882873][T23051] Bluetooth: hci2: command tx timeout [ 2399.272885][ T3539] netdevsim netdevsim8 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 2399.272926][ T3539] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2399.959024][T23051] Bluetooth: hci2: command tx timeout [ 2400.023589][T25319] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2400.222188][ T8491] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 2400.238468][ T8491] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 2400.272932][ T8491] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 2400.287629][ T8491] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 2400.288607][ T8491] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 2400.387712][T25414] vxcan1 speed is unknown, defaulting to 1000 [ 2400.432480][T25319] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2400.436910][T25326] bridge0: port 1(bridge_slave_0) entered blocking state [ 2400.437128][T25326] bridge0: port 1(bridge_slave_0) entered disabled state [ 2400.437368][T25326] bridge_slave_0: entered allmulticast mode [ 2400.489095][T25326] bridge_slave_0: entered promiscuous mode [ 2401.608177][T25326] bridge0: port 2(bridge_slave_1) entered blocking state [ 2401.608306][T25326] bridge0: port 2(bridge_slave_1) entered disabled state [ 2401.608529][T25326] bridge_slave_1: entered allmulticast mode [ 2401.611544][T25326] bridge_slave_1: entered promiscuous mode [ 2402.410920][T23051] Bluetooth: hci4: command tx timeout [ 2403.065204][ T3539] netdevsim netdevsim8 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 2403.065234][ T3539] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2403.382204][T25414] lo speed is unknown, defaulting to 1000 [ 2403.621537][T25319] team0: Port device team_slave_0 added [ 2403.949581][ T3539] netdevsim netdevsim8 netdevsim0 (unregistering): left promiscuous mode [ 2403.951768][ T3539] netdevsim netdevsim8 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 2403.951796][ T3539] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2404.057785][T25319] team0: Port device team_slave_1 added [ 2404.095923][T25326] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2404.232060][T25326] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2404.516843][T25462] vxcan1 speed is unknown, defaulting to 1000 [ 2404.533300][T25319] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2404.533314][T25319] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2404.533335][T25319] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2404.745876][T25319] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2404.745900][T25319] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2404.745921][T25319] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2404.818920][T25326] team0: Port device team_slave_0 added [ 2404.838675][T23051] Bluetooth: hci4: command tx timeout [ 2405.134521][T25326] team0: Port device team_slave_1 added [ 2405.979824][T25462] lo speed is unknown, defaulting to 1000 [ 2407.426090][T23051] Bluetooth: hci4: command tx timeout [ 2407.752657][T25326] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2407.752677][T25326] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2407.752707][T25326] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2407.920711][T25326] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2407.920729][T25326] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2407.920757][T25326] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2407.989480][T25319] hsr_slave_0: entered promiscuous mode [ 2407.991020][T25319] hsr_slave_1: entered promiscuous mode [ 2407.992043][T25319] debugfs: 'hsr0' already exists in 'hsr' [ 2407.992070][T25319] Cannot create hsr debugfs directory [ 2409.478531][T23051] Bluetooth: hci4: command tx timeout [ 2410.771564][ T12] kworker/u8:0 (12) used greatest stack depth: 14272 bytes left [ 2410.905347][ T3539] bridge_slave_1: left allmulticast mode [ 2410.905381][ T3539] bridge_slave_1: left promiscuous mode [ 2410.905640][ T3539] bridge0: port 2(bridge_slave_1) entered disabled state [ 2411.159761][ T3539] bridge_slave_0: left allmulticast mode [ 2411.159786][ T3539] bridge_slave_0: left promiscuous mode [ 2411.160703][ T3539] bridge0: port 1(bridge_slave_0) entered disabled state [ 2412.032327][ T3539] bridge_slave_1: left allmulticast mode [ 2412.032351][ T3539] bridge_slave_1: left promiscuous mode [ 2412.032534][ T3539] bridge0: port 2(bridge_slave_1) entered disabled state [ 2412.303339][ T3539] bridge_slave_0: left allmulticast mode [ 2412.303365][ T3539] bridge_slave_0: left promiscuous mode [ 2412.303564][ T3539] bridge0: port 1(bridge_slave_0) entered disabled state [ 2413.204861][ T3539] team0: left allmulticast mode [ 2413.204888][ T3539] team_slave_0: left allmulticast mode [ 2413.204911][ T3539] team_slave_1: left allmulticast mode [ 2413.204930][ T3539] bridge3: left allmulticast mode [ 2413.205101][ T3539] team0: left promiscuous mode [ 2413.205115][ T3539] team_slave_0: left promiscuous mode [ 2413.205400][ T3539] team_slave_1: left promiscuous mode [ 2413.205616][ T3539] bridge3: left promiscuous mode [ 2413.206030][ T3539] bridge0: port 3(team0) entered disabled state [ 2413.499608][ T3539] bridge_slave_1: left allmulticast mode [ 2413.499633][ T3539] bridge_slave_1: left promiscuous mode [ 2413.499854][ T3539] bridge0: port 2(bridge_slave_1) entered disabled state [ 2414.369728][ T3539] bridge_slave_0: left allmulticast mode [ 2414.369762][ T3539] bridge_slave_0: left promiscuous mode [ 2414.370045][ T3539] bridge0: port 1(bridge_slave_0) entered disabled state [ 2414.629418][ T3539] bridge_slave_1: left allmulticast mode [ 2414.629443][ T3539] bridge_slave_1: left promiscuous mode [ 2414.629632][ T3539] bridge0: port 2(bridge_slave_1) entered disabled state [ 2415.541588][ T3539] bridge_slave_0: left allmulticast mode [ 2415.541623][ T3539] bridge_slave_0: left promiscuous mode [ 2415.541901][ T3539] bridge0: port 1(bridge_slave_0) entered disabled state [ 2415.761675][ T3539] bridge_slave_1: left allmulticast mode [ 2415.761699][ T3539] bridge_slave_1: left promiscuous mode [ 2415.761878][ T3539] bridge0: port 2(bridge_slave_1) entered disabled state [ 2416.849686][ T3539] bridge_slave_0: left allmulticast mode [ 2416.849712][ T3539] bridge_slave_0: left promiscuous mode [ 2416.849913][ T3539] bridge0: port 1(bridge_slave_0) entered disabled state [ 2417.741216][ T3539] bridge_slave_1: left allmulticast mode [ 2417.741249][ T3539] bridge_slave_1: left promiscuous mode [ 2417.741513][ T3539] bridge0: port 2(bridge_slave_1) entered disabled state [ 2417.989415][ T3539] bridge_slave_0: left allmulticast mode [ 2417.989439][ T3539] bridge_slave_0: left promiscuous mode [ 2417.989685][ T3539] bridge0: port 1(bridge_slave_0) entered disabled state [ 2418.670725][ T3539] tipc: Resetting bearer [ 2419.313538][T25538] 9pnet_virtio: no channels available for device syz [ 2419.376376][T25538] netlink: 68 bytes leftover after parsing attributes in process `syz.1.5909'. [ 2421.645309][ T1320] ieee802154 phy0 wpan0: encryption failed: -22 [ 2421.645368][ T1320] ieee802154 phy1 wpan1: encryption failed: -22 [ 2421.788878][ T3539] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2421.889067][ T3539] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2421.958305][ T3539] bond0 (unregistering): Released all slaves [ 2422.159941][ T3539] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2422.240141][ T3539] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2422.420372][ T3539] bond0 (unregistering): Released all slaves [ 2422.940450][ T3539] tipc: Disabling bearer [ 2424.368990][ T3539] team0: Port device bridge3 removed [ 2424.548815][ T3539] bond2 (unregistering): (slave bridge4): Releasing active interface [ 2425.958115][ T3539] bond0 (unregistering): left promiscuous mode [ 2425.958150][ T3539] bond_slave_0: left promiscuous mode [ 2425.958388][ T3539] bond_slave_1: left promiscuous mode [ 2425.988347][ T3539] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2426.048647][ T3539] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2426.091407][ T3539] bond0 (unregistering): Released all slaves [ 2427.351180][ T3539] bond1 (unregistering): Released all slaves [ 2427.369421][ T3539] bond2 (unregistering): Released all slaves [ 2428.531373][ T3539] bond3 (unregistering): Released all slaves [ 2428.758397][ T3539] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2428.848124][ T3539] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2428.910160][ T3539] bond0 (unregistering): Released all slaves [ 2429.068293][ T3539] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2429.148215][ T3539] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2429.210484][ T3539] bond0 (unregistering): Released all slaves [ 2429.441352][ T3539] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2429.518175][ T3539] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2429.580665][ T3539] bond0 (unregistering): Released all slaves [ 2429.636568][T25326] hsr_slave_0: entered promiscuous mode [ 2429.649392][T25326] hsr_slave_1: entered promiscuous mode [ 2429.650180][T25326] debugfs: 'hsr0' already exists in 'hsr' [ 2429.650209][T25326] Cannot create hsr debugfs directory [ 2429.765056][T25547] pim6reg: entered allmulticast mode [ 2429.955743][ T3539] : left promiscuous mode [ 2430.652606][T25414] chnl_net:caif_netlink_parms(): no params data found [ 2430.875147][ T3539] tipc: Left network mode [ 2431.190921][ T8491] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 2431.195916][ T8491] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 2431.214659][ T8491] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 2431.288754][ T8491] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 2431.307364][ T8491] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 2431.850559][ T8491] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 2431.943178][ T8491] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 2431.944983][ T8491] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 2431.946410][ T8491] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 2432.050636][ T8491] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 2434.193564][ T8491] Bluetooth: hci0: command tx timeout [ 2434.284670][ T8491] Bluetooth: hci5: command tx timeout [ 2434.733536][T25414] bridge0: port 1(bridge_slave_0) entered blocking state [ 2434.733826][T25414] bridge0: port 1(bridge_slave_0) entered disabled state [ 2434.734044][T25414] bridge_slave_0: entered allmulticast mode [ 2434.736265][T25414] bridge_slave_0: entered promiscuous mode [ 2434.765546][T25462] chnl_net:caif_netlink_parms(): no params data found [ 2434.897469][T25414] bridge0: port 2(bridge_slave_1) entered blocking state [ 2434.897647][T25414] bridge0: port 2(bridge_slave_1) entered disabled state [ 2434.897918][T25414] bridge_slave_1: entered allmulticast mode [ 2434.900236][T25414] bridge_slave_1: entered promiscuous mode [ 2435.104584][T25555] vxcan1 speed is unknown, defaulting to 1000 [ 2435.299111][T25414] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2435.344089][T25414] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2435.699028][T25560] vxcan1 speed is unknown, defaulting to 1000 [ 2435.706017][T25414] team0: Port device team_slave_0 added [ 2436.206161][ T8491] Bluetooth: hci0: command tx timeout [ 2436.370751][ T8491] Bluetooth: hci5: command tx timeout [ 2437.130526][T25414] team0: Port device team_slave_1 added [ 2437.130725][T25555] lo speed is unknown, defaulting to 1000 [ 2437.239870][T25583] 9pnet_virtio: no channels available for device syz [ 2437.301663][T25583] netlink: 68 bytes leftover after parsing attributes in process `syz.1.5915'. [ 2438.389172][ T8491] Bluetooth: hci0: command tx timeout [ 2438.426599][T25462] bridge0: port 1(bridge_slave_0) entered blocking state [ 2438.427166][T25462] bridge0: port 1(bridge_slave_0) entered disabled state [ 2438.427393][T25462] bridge_slave_0: entered allmulticast mode [ 2438.429642][T25462] bridge_slave_0: entered promiscuous mode [ 2438.439062][ T8491] Bluetooth: hci5: command tx timeout [ 2438.450206][T25560] lo speed is unknown, defaulting to 1000 [ 2438.547076][T25587] 9pnet_virtio: no channels available for device syz [ 2438.615473][T25587] netlink: 68 bytes leftover after parsing attributes in process `syz.1.5916'. [ 2439.656897][T25462] bridge0: port 2(bridge_slave_1) entered blocking state [ 2439.657072][T25462] bridge0: port 2(bridge_slave_1) entered disabled state [ 2439.657363][T25462] bridge_slave_1: entered allmulticast mode [ 2439.819773][T25462] bridge_slave_1: entered promiscuous mode [ 2439.869147][T25414] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2439.869168][T25414] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2439.869199][T25414] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2440.370203][T25414] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2440.370223][T25414] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2440.370253][T25414] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2440.447312][ T8491] Bluetooth: hci0: command tx timeout [ 2440.517411][ T8491] Bluetooth: hci5: command tx timeout [ 2440.913594][T25462] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2440.962435][T25462] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2441.430464][T25462] team0: Port device team_slave_0 added [ 2441.464345][T25414] hsr_slave_0: entered promiscuous mode [ 2442.413776][T25414] hsr_slave_1: entered promiscuous mode [ 2442.414870][T25414] debugfs: 'hsr0' already exists in 'hsr' [ 2442.414897][T25414] Cannot create hsr debugfs directory [ 2442.623449][T25462] team0: Port device team_slave_1 added [ 2443.067397][T25606] 9pnet_virtio: no channels available for device syz [ 2443.120977][T25606] netlink: 68 bytes leftover after parsing attributes in process `syz.1.5921'. [ 2444.126706][ T3539] hsr_slave_0: left promiscuous mode [ 2444.286677][ T3539] hsr_slave_1: left promiscuous mode [ 2444.287692][ T3539] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2444.310577][ T3539] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2444.373120][T25610] netlink: 16 bytes leftover after parsing attributes in process `syz.1.5922'. [ 2445.426928][ T3539] dummy0: left promiscuous mode [ 2445.446651][ T3539] batadv0: left promiscuous mode [ 2445.534467][T25614] 9pnet_virtio: no channels available for device syz [ 2445.600397][T25614] netlink: 68 bytes leftover after parsing attributes in process `syz.1.5923'. [ 2446.486796][ T3539] hsr_slave_0: left promiscuous mode [ 2446.526427][ T3539] hsr_slave_1: left promiscuous mode [ 2446.527523][ T3539] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2446.527552][ T3539] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2446.780744][ T3539] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2446.780775][ T3539] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2446.906250][T25618] 9pnet_virtio: no channels available for device syz [ 2446.953921][T25618] netlink: 68 bytes leftover after parsing attributes in process `syz.1.5924'. [ 2447.896466][ T3539] hsr_slave_0: left promiscuous mode [ 2448.086229][ T3539] hsr_slave_1: left promiscuous mode [ 2448.087306][ T3539] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2448.127437][ T3539] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2448.215871][T25622] netlink: 16 bytes leftover after parsing attributes in process `syz.1.5925'. [ 2448.551930][ T3539] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2448.997404][ T3539] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2449.091857][ T3539] veth1_macvtap: left promiscuous mode [ 2449.091993][ T3539] veth0_macvtap: left promiscuous mode [ 2449.092247][ T3539] veth1_vlan: left promiscuous mode [ 2449.092372][ T3539] veth0_vlan: left promiscuous mode [ 2449.727139][ T3539] team0 (unregistering): Port device team_slave_1 removed [ 2450.177506][T25627] 9pnet_virtio: no channels available for device syz [ 2450.243463][T25627] netlink: 68 bytes leftover after parsing attributes in process `syz.1.5926'. [ 2451.197710][ T3539] team0 (unregistering): Port device team_slave_0 removed [ 2451.395647][T23051] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 2451.496455][T23051] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 2451.533060][T23051] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 2451.534434][T23051] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 2451.550683][T23051] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 2451.813260][T25635] 9pnet_virtio: no channels available for device syz [ 2451.880661][T25635] netlink: 68 bytes leftover after parsing attributes in process `syz.1.5928'. [ 2453.189712][T25639] 9pnet_virtio: no channels available for device syz [ 2453.240659][T25639] netlink: 68 bytes leftover after parsing attributes in process `syz.1.5929'. [ 2454.020313][T23051] Bluetooth: hci1: command tx timeout [ 2455.791076][T25647] 9pnet_virtio: no channels available for device syz [ 2455.837546][T25647] netlink: 68 bytes leftover after parsing attributes in process `syz.1.5931'. [ 2456.635829][T23051] Bluetooth: hci1: command tx timeout [ 2456.736581][ T3539] team0 (unregistering): Port device team_slave_1 removed [ 2457.220141][T25651] 9pnet_virtio: no channels available for device syz [ 2457.289392][T25651] netlink: 68 bytes leftover after parsing attributes in process `syz.1.5932'. [ 2458.256918][ T3539] team0 (unregistering): Port device team_slave_0 removed [ 2458.842235][T23051] Bluetooth: hci1: command tx timeout [ 2460.818609][ T8491] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 2460.842254][ T8491] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 2460.844241][ T8491] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 2460.852445][ T8491] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 2460.853371][ T8491] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 2460.940848][ T8491] Bluetooth: hci1: command tx timeout [ 2461.098716][T25667] 9pnet_virtio: no channels available for device syz [ 2461.156172][T25667] netlink: 68 bytes leftover after parsing attributes in process `syz.1.5935'. [ 2462.503562][T25671] 9pnet_virtio: no channels available for device syz [ 2462.564881][T25671] netlink: 68 bytes leftover after parsing attributes in process `syz.1.5936'. [ 2463.329479][ T8491] Bluetooth: hci6: command tx timeout [ 2463.911498][T25675] 9pnet_virtio: no channels available for device syz [ 2463.961125][T25675] netlink: 68 bytes leftover after parsing attributes in process `syz.1.5937'. [ 2465.395518][ T8491] Bluetooth: hci6: command tx timeout [ 2465.607490][T25685] 9pnet_virtio: no channels available for device syz [ 2465.673753][T25685] netlink: 68 bytes leftover after parsing attributes in process `syz.1.5939'. [ 2467.483731][ T8491] Bluetooth: hci6: command tx timeout [ 2470.227651][ T8491] Bluetooth: hci6: command tx timeout [ 2471.652779][T25705] 9pnet_virtio: no channels available for device syz [ 2471.725436][T25705] netlink: 68 bytes leftover after parsing attributes in process `syz.1.5944'. [ 2475.045849][ T3539] team0 (unregistering): Port device team_slave_1 removed [ 2475.625489][ T3539] team0 (unregistering): Port device team_slave_0 removed [ 2476.906060][T25728] 9pnet_virtio: no channels available for device syz [ 2476.960613][T25728] netlink: 68 bytes leftover after parsing attributes in process `syz.1.5949'. [ 2480.911188][T25746] 9pnet_virtio: no channels available for device syz [ 2480.984748][T25746] netlink: 68 bytes leftover after parsing attributes in process `syz.1.5953'. [ 2483.081716][ T1320] ieee802154 phy0 wpan0: encryption failed: -22 [ 2483.081793][ T1320] ieee802154 phy1 wpan1: encryption failed: -22 [ 2483.140955][ T7186] smc: removing ib device syz2 [ 2491.679580][T25781] 9pnet_virtio: no channels available for device syz [ 2491.744800][T25781] netlink: 68 bytes leftover after parsing attributes in process `syz.1.5961'. [ 2491.813030][ T3539] team0 (unregistering): Port device team_slave_1 removed [ 2492.374784][ T3539] team0 (unregistering): Port device team_slave_0 removed [ 2492.392315][T23051] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 2492.475422][T23051] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 2492.506809][T23051] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 2492.508204][T23051] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 2492.509955][T23051] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 2493.095960][ T8491] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 2493.124388][ T8491] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 2493.191106][ T8491] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 2493.215558][ T8491] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 2493.216531][ T8491] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 2494.678599][ T8491] Bluetooth: hci7: command tx timeout [ 2495.324471][ T8491] Bluetooth: hci8: command tx timeout [ 2495.954396][ T3539] team0 (unregistering): Port device team_slave_1 removed [ 2496.031226][T25805] 9pnet_virtio: no channels available for device syz [ 2496.068220][T25805] netlink: 68 bytes leftover after parsing attributes in process `syz.1.5965'. [ 2496.892768][ T8491] Bluetooth: hci7: command tx timeout [ 2498.573827][ T8491] Bluetooth: hci8: command tx timeout [ 2498.591324][ T3539] team0 (unregistering): Port device team_slave_0 removed [ 2498.959581][ T8491] Bluetooth: hci7: command tx timeout [ 2500.652774][ T8491] Bluetooth: hci8: command tx timeout [ 2500.824143][ T3539] team0 (unregistering): Port device team_slave_1 removed [ 2500.993536][ T8491] Bluetooth: hci7: command tx timeout [ 2501.094586][ T3539] team0 (unregistering): Port device team_slave_0 removed [ 2502.685715][ T8491] Bluetooth: hci8: command tx timeout [ 2504.921775][T10692] vxcan1 speed is unknown, defaulting to 1000 [ 2504.921812][T10692] syz2: Port: 1 Link DOWN [ 2505.581853][T25664] lo speed is unknown, defaulting to 1000 [ 2505.584776][T25786] lo speed is unknown, defaulting to 1000 [ 2506.484064][T25783] lo speed is unknown, defaulting to 1000 [ 2506.522901][T25630] lo speed is unknown, defaulting to 1000 [ 2506.930562][T25836] 9pnet_virtio: no channels available for device syz [ 2507.000439][T25836] netlink: 68 bytes leftover after parsing attributes in process `syz.1.5972'. [ 2510.378268][T25848] 9pnet_virtio: no channels available for device syz [ 2510.446396][T25848] netlink: 68 bytes leftover after parsing attributes in process `syz.1.5974'. [ 2512.683908][T23051] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 2512.788360][T23051] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 2512.793294][T23051] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 2512.824876][T23051] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 2512.825908][T23051] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 2513.292655][T25860] 9pnet_virtio: no channels available for device syz [ 2513.367604][T25860] netlink: 68 bytes leftover after parsing attributes in process `syz.1.5976'. [ 2514.688183][T25864] 9pnet_virtio: no channels available for device syz [ 2514.760672][T25864] netlink: 68 bytes leftover after parsing attributes in process `syz.1.5977'. [ 2515.530329][T23051] Bluetooth: hci0: command tx timeout [ 2517.722306][T23051] Bluetooth: hci0: command tx timeout [ 2518.308884][T25880] 9pnet_virtio: no channels available for device syz [ 2518.377537][T25880] netlink: 68 bytes leftover after parsing attributes in process `syz.1.5980'. [ 2519.680605][T25783] chnl_net:caif_netlink_parms(): no params data found [ 2519.700292][T25664] chnl_net:caif_netlink_parms(): no params data found [ 2519.862190][T23051] Bluetooth: hci0: command tx timeout [ 2520.002197][T25852] lo speed is unknown, defaulting to 1000 [ 2520.238577][T25889] 9pnet_virtio: no channels available for device syz [ 2520.309927][T25889] netlink: 68 bytes leftover after parsing attributes in process `syz.1.5982'. [ 2521.372361][T25664] workqueue: Failed to create a rescuer kthread for wq "wg-crypt-wg0": -EINTR [ 2521.631655][ T8491] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 2521.880213][ T8491] Bluetooth: hci0: command tx timeout [ 2521.897306][ T8491] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 2521.923631][ T8491] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 2521.950535][ T8491] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 2521.970141][ T8491] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 2522.179284][T25892] 9pnet_virtio: no channels available for device syz [ 2522.183668][T25892] netlink: 68 bytes leftover after parsing attributes in process `syz.1.5983'. [ 2522.809866][T25783] bridge0: port 1(bridge_slave_0) entered blocking state [ 2522.810065][T25783] bridge0: port 1(bridge_slave_0) entered disabled state [ 2522.810298][T25783] bridge_slave_0: entered allmulticast mode [ 2522.812519][T25783] bridge_slave_0: entered promiscuous mode [ 2522.820619][T25786] chnl_net:caif_netlink_parms(): no params data found [ 2524.315109][ T8178] Bluetooth: hci1: command tx timeout [ 2524.353527][T25783] bridge0: port 2(bridge_slave_1) entered blocking state [ 2524.353685][T25783] bridge0: port 2(bridge_slave_1) entered disabled state [ 2524.353907][T25783] bridge_slave_1: entered allmulticast mode [ 2524.355842][T25783] bridge_slave_1: entered promiscuous mode [ 2525.658652][T25919] 9pnet_virtio: no channels available for device syz [ 2525.730414][T25919] netlink: 68 bytes leftover after parsing attributes in process `syz.1.5987'. [ 2526.486496][ T8491] Bluetooth: hci1: command tx timeout [ 2527.087643][T25923] 9pnet_virtio: no channels available for device syz [ 2527.167712][T25923] netlink: 68 bytes leftover after parsing attributes in process `syz.1.5988'. [ 2527.995878][T25898] lo speed is unknown, defaulting to 1000 [ 2528.003347][T25783] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2528.033148][T25783] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2528.521874][ T8178] Bluetooth: hci1: command tx timeout [ 2529.634097][T25783] team0: Port device team_slave_0 added [ 2530.612064][ T8178] Bluetooth: hci1: command tx timeout [ 2530.689306][T25783] team0: Port device team_slave_1 added [ 2530.761824][T25786] bridge0: port 1(bridge_slave_0) entered blocking state [ 2530.762067][T25786] bridge0: port 1(bridge_slave_0) entered disabled state [ 2530.762385][T25786] bridge_slave_0: entered allmulticast mode [ 2530.765347][T25786] bridge_slave_0: entered promiscuous mode [ 2531.013760][T25943] 9pnet_virtio: no channels available for device syz [ 2531.086280][T25943] netlink: 68 bytes leftover after parsing attributes in process `syz.1.5992'. [ 2531.981876][T25786] bridge0: port 2(bridge_slave_1) entered blocking state [ 2531.982018][T25786] bridge0: port 2(bridge_slave_1) entered disabled state [ 2531.982339][T25786] bridge_slave_1: entered allmulticast mode [ 2531.985154][T25786] bridge_slave_1: entered promiscuous mode [ 2534.286344][T25783] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2534.286364][T25783] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2534.286392][T25783] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2535.100090][T25783] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2535.100222][T25783] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2535.100315][T25783] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2535.272755][T25786] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2535.326519][T25786] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2536.742249][T25786] team0: Port device team_slave_0 added [ 2536.903735][T25852] chnl_net:caif_netlink_parms(): no params data found [ 2536.920748][T25786] team0: Port device team_slave_1 added [ 2536.934342][T25783] hsr_slave_0: entered promiscuous mode [ 2536.935738][T25783] hsr_slave_1: entered promiscuous mode [ 2537.434289][T25786] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2537.434305][T25786] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2537.434326][T25786] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2537.520073][T25786] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2537.520088][T25786] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2537.520110][T25786] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2538.229658][T25852] bridge0: port 1(bridge_slave_0) entered blocking state [ 2538.230212][T25852] bridge0: port 1(bridge_slave_0) entered disabled state [ 2538.230395][T25852] bridge_slave_0: entered allmulticast mode [ 2538.250541][T25852] bridge_slave_0: entered promiscuous mode [ 2538.390419][T25852] bridge0: port 2(bridge_slave_1) entered blocking state [ 2538.390570][T25852] bridge0: port 2(bridge_slave_1) entered disabled state [ 2538.390808][T25852] bridge_slave_1: entered allmulticast mode [ 2538.399445][T25852] bridge_slave_1: entered promiscuous mode [ 2538.423104][T25786] hsr_slave_0: entered promiscuous mode [ 2538.424227][T25786] hsr_slave_1: entered promiscuous mode [ 2538.425027][T25786] debugfs: 'hsr0' already exists in 'hsr' [ 2538.425046][T25786] Cannot create hsr debugfs directory [ 2538.425631][T25898] chnl_net:caif_netlink_parms(): no params data found [ 2538.946320][T25852] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2539.194705][T25852] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2539.468750][T25852] team0: Port device team_slave_0 added [ 2539.575122][T25852] team0: Port device team_slave_1 added [ 2540.953221][T25898] bridge0: port 1(bridge_slave_0) entered blocking state [ 2540.956512][T25898] bridge0: port 1(bridge_slave_0) entered disabled state [ 2540.956946][T25898] bridge_slave_0: entered allmulticast mode [ 2540.958888][T25898] bridge_slave_0: entered promiscuous mode [ 2541.219167][T25898] bridge0: port 2(bridge_slave_1) entered blocking state [ 2541.220099][T25898] bridge0: port 2(bridge_slave_1) entered disabled state [ 2541.220377][T25898] bridge_slave_1: entered allmulticast mode [ 2541.223759][T25898] bridge_slave_1: entered promiscuous mode [ 2541.342421][T25852] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2541.342450][T25852] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2541.342481][T25852] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2541.599497][T25989] 9pnet_virtio: no channels available for device syz [ 2541.674100][T25989] netlink: 68 bytes leftover after parsing attributes in process `syz.1.6000'. [ 2542.494146][T25852] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2542.494167][T25852] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2542.494198][T25852] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2543.935966][T25898] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2543.966048][T25898] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2544.308448][T25852] hsr_slave_0: entered promiscuous mode [ 2544.309588][T25852] hsr_slave_1: entered promiscuous mode [ 2544.310346][T25852] debugfs: 'hsr0' already exists in 'hsr' [ 2544.310365][T25852] Cannot create hsr debugfs directory [ 2544.337840][T25898] team0: Port device team_slave_0 added [ 2544.352111][T25898] team0: Port device team_slave_1 added [ 2544.352216][T25783] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 2544.477069][T25783] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 2544.518537][ T1320] ieee802154 phy0 wpan0: encryption failed: -22 [ 2544.518615][ T1320] ieee802154 phy1 wpan1: encryption failed: -22 [ 2544.673587][T25783] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 2544.723705][T25898] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2544.723719][T25898] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2544.723739][T25898] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2544.805825][T25783] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 2544.893274][T25898] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2544.893289][T25898] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2544.893309][T25898] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2545.327506][T25898] hsr_slave_0: entered promiscuous mode [ 2545.328644][T25898] hsr_slave_1: entered promiscuous mode [ 2545.329396][T25898] debugfs: 'hsr0' already exists in 'hsr' [ 2545.329415][T25898] Cannot create hsr debugfs directory [ 2545.414007][T25786] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 2545.470121][T25786] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 2545.581979][T25786] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 2545.645808][T25786] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 2548.608037][T25783] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2548.622792][T25786] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2548.657473][T25783] 8021q: adding VLAN 0 to HW filter on device team0 [ 2548.697401][T25786] 8021q: adding VLAN 0 to HW filter on device team0 [ 2548.699666][T25524] bridge0: port 1(bridge_slave_0) entered blocking state [ 2548.699819][T25524] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2548.893093][ T986] bridge0: port 2(bridge_slave_1) entered blocking state [ 2548.893250][ T986] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2548.898433][ T986] bridge0: port 1(bridge_slave_0) entered blocking state [ 2548.898580][ T986] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2548.962108][ T6451] bridge0: port 2(bridge_slave_1) entered blocking state [ 2548.962264][ T6451] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2549.816472][T25783] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2549.847233][T25786] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2549.999394][T25852] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 2550.053156][T25852] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 2550.078576][T25852] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 2550.154291][T25852] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 2550.337088][T25898] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 2550.376777][T25783] veth0_vlan: entered promiscuous mode [ 2550.377216][T25898] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 2550.426913][T25898] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 2550.463097][T25898] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 2550.499231][T25786] veth0_vlan: entered promiscuous mode [ 2550.526081][T25783] veth1_vlan: entered promiscuous mode [ 2550.567394][T25786] veth1_vlan: entered promiscuous mode [ 2550.669286][T25783] veth0_macvtap: entered promiscuous mode [ 2550.699313][T25783] veth1_macvtap: entered promiscuous mode [ 2550.708287][T25786] veth0_macvtap: entered promiscuous mode [ 2550.734015][T25786] veth1_macvtap: entered promiscuous mode [ 2550.746659][T25852] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2550.809506][T25783] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2550.854326][T25786] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2550.875568][T25783] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2550.901351][T25852] 8021q: adding VLAN 0 to HW filter on device team0 [ 2550.904469][T25786] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2550.928585][ T986] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2550.940972][ T986] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2550.949717][ T986] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2550.978719][ T9704] bridge0: port 1(bridge_slave_0) entered blocking state [ 2550.978960][ T9704] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2551.003899][ T986] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2551.014041][T25524] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2551.031488][T25524] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2551.036522][T25898] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2551.039606][T25524] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2551.109831][ T6451] bridge0: port 2(bridge_slave_1) entered blocking state [ 2551.109959][ T6451] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2551.129837][T25524] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2551.448614][T25898] 8021q: adding VLAN 0 to HW filter on device team0 [ 2551.637822][ T9704] bridge0: port 1(bridge_slave_0) entered blocking state [ 2551.638006][ T9704] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2551.639940][ T6451] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2551.639960][ T6451] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2551.746115][ T6451] bridge0: port 2(bridge_slave_1) entered blocking state [ 2551.746271][ T6451] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2551.748834][ T6451] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2551.748854][ T6451] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2551.836717][ T6451] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2551.836734][ T6451] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2551.936171][ T6451] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2551.936194][ T6451] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2555.169353][T25898] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2555.183000][T25852] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2555.781755][T26082] 9pnet_virtio: no channels available for device syz [ 2555.904869][T26083] netlink: 68 bytes leftover after parsing attributes in process `syz.2.6006'. [ 2558.278825][T25852] veth0_vlan: entered promiscuous mode [ 2558.306812][T25852] veth1_vlan: entered promiscuous mode [ 2558.733528][T25852] veth0_macvtap: entered promiscuous mode [ 2558.787422][T25852] veth1_macvtap: entered promiscuous mode [ 2558.891692][T25898] veth0_vlan: entered promiscuous mode [ 2558.973709][T25852] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2558.989003][T25898] veth1_vlan: entered promiscuous mode [ 2559.062452][T25852] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2559.136479][T25505] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2559.136533][T25505] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2559.136573][T25505] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2559.136611][T25505] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2559.465342][T25898] veth0_macvtap: entered promiscuous mode [ 2559.643632][T25898] veth1_macvtap: entered promiscuous mode [ 2559.844694][ T5955] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2559.844717][ T5955] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2559.921919][T25898] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2559.952211][T25898] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2560.889534][T26107] 9pnet_virtio: no channels available for device syz [ 2561.452115][T26110] netlink: 68 bytes leftover after parsing attributes in process `syz.0.6011'. [ 2562.386987][T25524] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2562.387448][T25524] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2562.387789][T25524] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2562.388196][T25524] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2562.439566][ T5955] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2562.439588][ T5955] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2564.579933][T26132] netlink: 68 bytes leftover after parsing attributes in process `syz.2.6016'. [ 2567.137071][T25777] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2567.137091][T25777] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2567.882322][T26152] netlink: 68 bytes leftover after parsing attributes in process `syz.1.6020'. [ 2568.753381][T26122] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2568.753404][T26122] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2570.940309][T26171] vcan0: tx drop: invalid sa for name 0xfffffffffffffffd [ 2571.957999][T26174] netlink: 68 bytes leftover after parsing attributes in process `syz.6.6022'. [ 2572.933348][T26176] 9pnet_virtio: no channels available for device syz [ 2573.001916][T26176] netlink: 68 bytes leftover after parsing attributes in process `syz.0.6024'. [ 2575.494726][T26189] 9p: Bad value for 'version' [ 2575.556952][T26189] netlink: 68 bytes leftover after parsing attributes in process `syz.6.6027'. [ 2577.666328][T26196] netlink: 68 bytes leftover after parsing attributes in process `syz.7.6026'. [ 2580.396703][T26211] 9pnet_virtio: no channels available for device syz [ 2580.488643][T26211] netlink: 68 bytes leftover after parsing attributes in process `syz.6.6031'. [ 2581.815859][T26221] 9pnet_virtio: no channels available for device syz [ 2581.889212][T26221] netlink: 68 bytes leftover after parsing attributes in process `syz.1.6035'. [ 2583.263222][T26228] 9pnet_virtio: no channels available for device syz [ 2583.402530][T26228] netlink: 68 bytes leftover after parsing attributes in process `syz.7.6034'. [ 2591.318195][T26256] 9pnet_virtio: no channels available for device syz [ 2591.399741][T26256] netlink: 68 bytes leftover after parsing attributes in process `syz.7.6046'. [ 2597.897061][T26275] 9pnet_virtio: no channels available for device syz [ 2597.905410][T26275] netlink: 68 bytes leftover after parsing attributes in process `syz.1.6047'. [ 2598.013091][T26279] 9p: Bad value for 'version' [ 2598.069201][T26279] netlink: 68 bytes leftover after parsing attributes in process `syz.2.6045'. [ 2599.845045][T26288] 9pnet_virtio: no channels available for device syz [ 2599.865342][T26288] netlink: 68 bytes leftover after parsing attributes in process `syz.2.6053'. [ 2599.950219][T26292] 9pnet_virtio: no channels available for device syz [ 2600.037655][T26292] netlink: 68 bytes leftover after parsing attributes in process `syz.0.6054'. [ 2604.288772][T26307] 9pnet_virtio: no channels available for device syz [ 2604.376581][T26307] netlink: 68 bytes leftover after parsing attributes in process `syz.0.6056'. [ 2607.168002][ T1320] ieee802154 phy0 wpan0: encryption failed: -22 [ 2607.168090][ T1320] ieee802154 phy1 wpan1: encryption failed: -22 [ 2608.067464][T26320] 9pnet_virtio: no channels available for device syz [ 2608.146183][T26320] netlink: 68 bytes leftover after parsing attributes in process `syz.1.6058'. [ 2608.756180][T26326] 9pnet_virtio: no channels available for device syz [ 2608.861654][T26327] 9pnet_virtio: no channels available for device syz [ 2609.119870][T26326] netlink: 68 bytes leftover after parsing attributes in process `syz.0.6060'. [ 2609.206506][T26327] netlink: 68 bytes leftover after parsing attributes in process `syz.2.6059'. [ 2610.893858][T26330] 9pnet_virtio: no channels available for device syz [ 2610.984813][T26330] netlink: 68 bytes leftover after parsing attributes in process `syz.6.6063'. [ 2612.227112][T26340] 9pnet_virtio: no channels available for device syz [ 2612.309918][T26340] netlink: 68 bytes leftover after parsing attributes in process `syz.2.6064'. [ 2613.526010][T26344] 9pnet_virtio: no channels available for device syz [ 2613.634122][T26344] netlink: 68 bytes leftover after parsing attributes in process `syz.6.6067'. [ 2615.045937][T26349] 9pnet_virtio: no channels available for device syz [ 2615.369798][T26350] netlink: 68 bytes leftover after parsing attributes in process `syz.1.6065'. [ 2615.380793][T26349] netlink: 68 bytes leftover after parsing attributes in process `syz.2.6068'. [ 2617.091132][T26362] 9pnet_virtio: no channels available for device syz [ 2617.274949][T26362] netlink: 68 bytes leftover after parsing attributes in process `syz.6.6069'. [ 2619.187959][T26364] netlink: 68 bytes leftover after parsing attributes in process `syz.0.6071'. [ 2621.159032][ T8178] Bluetooth: hci8: command 0x0406 tx timeout [ 2621.159080][ T8178] Bluetooth: hci7: command 0x0406 tx timeout [ 2623.653584][T26373] 9p: Bad value for 'version' [ 2623.696379][T26373] netlink: 68 bytes leftover after parsing attributes in process `syz.0.6074'. [ 2625.433693][T23051] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 2625.458847][T23051] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 2625.484945][T23051] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 2625.506749][T23051] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 2625.507697][T23051] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 2625.575175][T26378] lo speed is unknown, defaulting to 1000 [ 2628.807758][ T8491] Bluetooth: hci2: command tx timeout [ 2630.584139][T23051] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 2630.595576][T23051] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 2630.816415][T23051] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 2630.830105][T23051] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 2630.831033][T23051] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 2631.927270][T26402] 9pnet_virtio: no channels available for device syz [ 2632.108244][T26402] netlink: 68 bytes leftover after parsing attributes in process `syz.2.6073'. [ 2632.248847][T23051] Bluetooth: hci2: command tx timeout [ 2634.526837][T26403] netlink: 68 bytes leftover after parsing attributes in process `syz.0.6081'. [ 2634.531334][ T8491] Bluetooth: hci4: command tx timeout [ 2637.250806][T23051] Bluetooth: hci2: command tx timeout [ 2637.410540][T26337] syz_tun (unregistering): left allmulticast mode [ 2637.479936][T26337] bond0: (slave syz_tun): Releasing backup interface [ 2638.035826][ T39] INFO: task kworker/u8:20:7186 blocked for more than 145 seconds. [ 2638.035858][ T39] Tainted: G L syzkaller #0 [ 2638.035872][ T39] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 2638.035884][ T39] task:kworker/u8:20 state:D stack:21216 pid:7186 tgid:7186 ppid:2 task_flags:0x4208060 flags:0x00080000 [ 2638.035953][ T39] Workqueue: ib-unreg-wq ib_unregister_work [ 2638.036087][ T39] Call Trace: [ 2638.036096][ T39] [ 2638.036112][ T39] __schedule+0x145f/0x5070 [ 2638.036155][ T39] ? __lock_acquire+0x6b6/0x2cf0 [ 2638.036210][ T39] ? check_noncircular+0xda/0x150 [ 2638.036256][ T39] ? __pfx___schedule+0x10/0x10 [ 2638.036304][ T39] ? schedule+0x91/0x360 [ 2638.036344][ T39] schedule+0x165/0x360 [ 2638.036382][ T39] schedule_timeout+0x9a/0x270 [ 2638.036419][ T39] ? __pfx_schedule_timeout+0x10/0x10 [ 2638.036457][ T39] ? do_raw_spin_lock+0x121/0x290 [ 2638.036496][ T39] ? _raw_spin_unlock_irq+0x23/0x50 [ 2638.036518][ T39] ? wait_for_completion+0x267/0x5d0 [ 2638.036544][ T39] wait_for_completion+0x2bf/0x5d0 [ 2638.036582][ T39] ? __pfx_wait_for_completion+0x10/0x10 [ 2638.036610][ T39] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 2638.036634][ T39] ? lockdep_hardirqs_on+0x7b/0x110 [ 2638.036655][ T39] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 2638.036697][ T39] disable_device+0x1c6/0x320 [ 2638.036722][ T39] ? __pfx_disable_device+0x10/0x10 [ 2638.036744][ T39] ? lockdep_hardirqs_on+0x7b/0x110 [ 2638.036767][ T39] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 2638.036798][ T39] ? mutex_lock_nested+0x154/0x1d0 [ 2638.036828][ T39] ? __ib_unregister_device+0x284/0x3f0 [ 2638.036866][ T39] __ib_unregister_device+0x2cb/0x3f0 [ 2638.036912][ T39] ib_unregister_work+0x19/0x30 [ 2638.036942][ T39] ? process_scheduled_works+0x9ef/0x1770 [ 2638.036968][ T39] process_scheduled_works+0xad1/0x1770 [ 2638.037027][ T39] ? __pfx_process_scheduled_works+0x10/0x10 [ 2638.037052][ T39] ? do_raw_spin_lock+0x121/0x290 [ 2638.037098][ T39] worker_thread+0x8a0/0xda0 [ 2638.037142][ T39] ? __kthread_parkme+0x7b/0x200 [ 2638.037184][ T39] kthread+0x711/0x8a0 [ 2638.037220][ T39] ? __pfx_worker_thread+0x10/0x10 [ 2638.037248][ T39] ? __pfx_kthread+0x10/0x10 [ 2638.037279][ T39] ? rt_spin_unlock+0x150/0x200 [ 2638.037316][ T39] ? rt_spin_unlock+0x161/0x200 [ 2638.037343][ T39] ? __pfx_kthread+0x10/0x10 [ 2638.037377][ T39] ret_from_fork+0x510/0xa50 [ 2638.037409][ T39] ? __pfx_ret_from_fork+0x10/0x10 [ 2638.037433][ T39] ? __switch_to+0xc9e/0x1480 [ 2638.037474][ T39] ? __pfx_kthread+0x10/0x10 [ 2638.037509][ T39] ret_from_fork_asm+0x1a/0x30 [ 2638.037566][ T39] [ 2638.037662][ T39] [ 2638.037662][ T39] Showing all locks held in the system: [ 2638.037675][ T39] 1 lock held by khungtaskd/39: [ 2638.037689][ T39] #0: ffffffff8d5ae940 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 2638.037803][ T39] 4 locks held by kworker/u8:15/3539: [ 2638.037818][ T39] #0: ffff888019ad4938 ((wq_completion)netns){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x1770 [ 2638.037875][ T39] #1: ffffc9000de5fbc0 (net_cleanup_work){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x1770 [ 2638.037931][ T39] #2: ffffffff8e898720 (pernet_ops_rwsem){++++}-{4:4}, at: cleanup_net+0xf7/0x7b0 [ 2638.038118][ T39] #3: ffffffff8e8a5838 (rtnl_mutex){+.+.}-{4:4}, at: netdev_run_todo+0x71f/0xea0 [ 2638.038235][ T39] 2 locks held by getty/5558: [ 2638.038249][ T39] #0: ffff888034a550a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 2638.038345][ T39] #1: ffffc90003e8b2e0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x44f/0x1460 [ 2638.038401][ T39] 3 locks held by kworker/u8:18/6451: [ 2638.038414][ T39] #0: ffff88813ff69938 ((wq_completion)events_unbound#2){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x1770 [ 2638.038478][ T39] #1: ffffc90004a6fbc0 ((linkwatch_work).work){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x1770 [ 2638.038535][ T39] #2: ffffffff8e8a5838 (rtnl_mutex){+.+.}-{4:4}, at: linkwatch_event+0xe/0x60 [ 2638.038624][ T39] 3 locks held by kworker/u8:20/7186: [ 2638.038638][ T39] #0: ffff888142eda138 ((wq_completion)ib-unreg-wq){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x1770 [ 2638.038695][ T39] #1: ffffc90003bb7bc0 ((work_completion)(&device->unregistration_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x1770 [ 2638.038755][ T39] #2: ffff88805d3d0750 (&device->unregistration_lock){+.+.}-{4:4}, at: __ib_unregister_device+0x284/0x3f0 [ 2638.038836][ T39] 3 locks held by kworker/u8:2/25777: [ 2638.038850][ T39] 2 locks held by syz-executor/25783: [ 2638.038866][ T39] 1 lock held by syz-executor/25898: [ 2638.038880][ T39] #0: ffffffff8e8a5838 (rtnl_mutex){+.+.}-{4:4}, at: tun_chr_close+0x41/0x1c0 [ 2638.038994][ T39] 1 lock held by syz.1.6065/26337: [ 2638.039008][ T39] #0: ffffffff8e8a5838 (rtnl_mutex){+.+.}-{4:4}, at: tun_chr_close+0x41/0x1c0 [ 2638.039067][ T39] 1 lock held by syz-executor/26378: [ 2638.039081][ T39] #0: ffffffff8e8a5838 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_newlink+0x8ec/0x1c90 [ 2638.039138][ T39] 1 lock held by syz-executor/26395: [ 2638.039152][ T39] #0: ffffffff8e8a5838 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x3b0/0x18b0 [ 2638.039211][ T39] 1 lock held by syz.6.6076/26413: [ 2638.039225][ T39] 3 locks held by syz.2.6082/26419: [ 2638.039238][ T39] [ 2638.039244][ T39] ============================================= [ 2638.039244][ T39] [ 2638.039254][ T39] NMI backtrace for cpu 0 [ 2638.039275][ T39] CPU: 0 UID: 0 PID: 39 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 2638.039306][ T39] Tainted: [L]=SOFTLOCKUP [ 2638.039314][ T39] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 2638.039328][ T39] Call Trace: [ 2638.039337][ T39] [ 2638.039348][ T39] dump_stack_lvl+0xe8/0x150 [ 2638.039381][ T39] nmi_cpu_backtrace+0x274/0x2d0 [ 2638.039446][ T39] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 2638.039475][ T39] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 2638.039509][ T39] sys_info+0x135/0x170 [ 2638.039556][ T39] watchdog+0xf95/0xfe0 [ 2638.039589][ T39] ? watchdog+0x20a/0xfe0 [ 2638.039624][ T39] kthread+0x711/0x8a0 [ 2638.039660][ T39] ? __pfx_watchdog+0x10/0x10 [ 2638.039684][ T39] ? __pfx_kthread+0x10/0x10 [ 2638.039714][ T39] ? rt_spin_unlock+0x150/0x200 [ 2638.039749][ T39] ? rt_spin_unlock+0x161/0x200 [ 2638.039786][ T39] ? __pfx_kthread+0x10/0x10 [ 2638.039821][ T39] ret_from_fork+0x510/0xa50 [ 2638.039849][ T39] ? __pfx_ret_from_fork+0x10/0x10 [ 2638.039872][ T39] ? __switch_to+0xc9e/0x1480 [ 2638.039912][ T39] ? __pfx_kthread+0x10/0x10 [ 2638.039947][ T39] ret_from_fork_asm+0x1a/0x30 [ 2638.039999][ T39] [ 2638.040008][ T39] Sending NMI from CPU 0 to CPUs 1: [ 2638.040044][ C1] NMI backtrace for cpu 1 [ 2638.040063][ C1] CPU: 1 UID: 0 PID: 26419 Comm: syz.2.6082 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 2638.040091][ C1] Tainted: [L]=SOFTLOCKUP [ 2638.040098][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 2638.040110][ C1] RIP: 0010:__folio_batch_add_and_move+0x447/0xa90 [ 2638.040162][ C1] Code: 7d 01 8d 4c 89 e0 48 c1 e8 03 42 80 3c 38 00 74 08 4c 89 e7 e8 9a c8 25 00 48 8b 7c 24 10 49 03 3c 24 48 89 de e8 89 4f 00 00 94 90 d5 08 41 89 c6 bf 08 00 00 00 89 c6 e8 e5 95 c3 ff 80 7c [ 2638.040180][ C1] RSP: 0000:ffffc90006f2e790 EFLAGS: 00000293 [ 2638.040196][ C1] RAX: ffffffff81fc1dcb RBX: 0000000000000000 RCX: ffff888023f7bc80 [ 2638.040211][ C1] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 2638.040222][ C1] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2638.040233][ C1] R10: dffffc0000000000 R11: fffffbfff3187354 R12: ffffea0001fa6640 [ 2638.040249][ C1] R13: ffffea0001fa6648 R14: 000000000000001d R15: dffffc0000000000 [ 2638.040263][ C1] FS: 00007f6639c2e6c0(0000) GS:ffff888126def000(0000) knlGS:0000000000000000 [ 2638.040280][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 2638.040294][ C1] CR2: 0000555585fad5c8 CR3: 00000000acf80000 CR4: 00000000003526f0 [ 2638.040311][ C1] Call Trace: [ 2638.040319][ C1] [ 2638.040326][ C1] ? __pfx_lru_add+0x10/0x10 [ 2638.040358][ C1] shmem_get_folio_gfp+0xb56/0x1a70 [ 2638.040402][ C1] ? __pfx_shmem_get_folio_gfp+0x10/0x10 [ 2638.040435][ C1] shmem_write_begin+0x166/0x320 [ 2638.040467][ C1] generic_perform_write+0x29d/0x8c0 [ 2638.040507][ C1] ? __pfx_generic_perform_write+0x10/0x10 [ 2638.040549][ C1] ? file_update_time_flags+0x2d1/0x4f0 [ 2638.040579][ C1] shmem_file_write_iter+0xfb/0x120 [ 2638.040598][ C1] ? __pfx_shmem_file_write_iter+0x10/0x10 [ 2638.040619][ C1] __kernel_write_iter+0x431/0x920 [ 2638.040648][ C1] ? __pfx_shmem_file_write_iter+0x10/0x10 [ 2638.040669][ C1] ? __pfx___kernel_write_iter+0x10/0x10 [ 2638.040701][ C1] ? __asan_memset+0x22/0x50 [ 2638.040727][ C1] ? iov_iter_bvec+0xb8/0x180 [ 2638.040818][ C1] dump_user_range+0x8a0/0xc90 [ 2638.040854][ C1] ? __pfx_dump_user_range+0x10/0x10 [ 2638.040875][ C1] ? elf_coredump_extra_notes_write+0x42e/0x4b0 [ 2638.040902][ C1] ? __pfx_elf_coredump_extra_notes_write+0x10/0x10 [ 2638.040929][ C1] ? dump_emit+0xa6/0xe0 [ 2638.040948][ C1] ? elf_core_dump+0x2cd0/0x3960 [ 2638.040973][ C1] elf_core_dump+0x3369/0x3960 [ 2638.041008][ C1] ? __pfx_elf_core_dump+0x10/0x10 [ 2638.041031][ C1] ? __lock_acquire+0x6b6/0x2cf0 [ 2638.041060][ C1] ? __kvmalloc_node_noprof+0x408/0x940 [ 2638.041091][ C1] ? coredump_write+0x343/0x18c0 [ 2638.041112][ C1] ? vfs_coredump+0x3327/0x3e60 [ 2638.041132][ C1] ? get_signal+0x10d8/0x1310 [ 2638.041151][ C1] ? arch_do_signal_or_restart+0x9a/0x7a0 [ 2638.041184][ C1] ? irqentry_exit+0x5dd/0x660 [ 2638.041202][ C1] ? mas_ascend+0x2f4/0x830 [ 2638.041245][ C1] ? vfs_coredump+0x3327/0x3e60 [ 2638.041267][ C1] ? 0xffffffffff600000 [ 2638.041291][ C1] coredump_write+0x112c/0x18c0 [ 2638.041325][ C1] ? __pfx_coredump_write+0x10/0x10 [ 2638.041358][ C1] ? unshare_files+0xa9/0x140 [ 2638.041392][ C1] vfs_coredump+0x3327/0x3e60 [ 2638.041426][ C1] ? __pfx_vfs_coredump+0x10/0x10 [ 2638.041447][ C1] ? __lock_acquire+0x6b6/0x2cf0 [ 2638.041474][ C1] ? __lock_acquire+0x6b6/0x2cf0 [ 2638.041503][ C1] ? lockdep_hardirqs_on+0x7b/0x110 [ 2638.041528][ C1] ? __lock_acquire+0x6b6/0x2cf0 [ 2638.041558][ C1] ? __lock_acquire+0x6b6/0x2cf0 [ 2638.041585][ C1] ? __lock_acquire+0x6b6/0x2cf0 [ 2638.041616][ C1] ? unwind_next_frame+0xa5/0x23d0 [ 2638.041652][ C1] ? unwind_next_frame+0xa5/0x23d0 [ 2638.041679][ C1] ? is_bpf_text_address+0x26/0x2b0 [ 2638.041711][ C1] ? is_bpf_text_address+0x26/0x2b0 [ 2638.041739][ C1] ? is_bpf_text_address+0x292/0x2b0 [ 2638.041764][ C1] ? is_bpf_text_address+0x26/0x2b0 [ 2638.041790][ C1] ? get_signal+0xa2a/0x1310 [ 2638.041810][ C1] ? kernel_text_address+0xa5/0xe0 [ 2638.041842][ C1] ? __kernel_text_address+0xd/0x40 [ 2638.041873][ C1] ? unwind_get_return_address+0x4d/0x90 [ 2638.041899][ C1] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 2638.041926][ C1] ? arch_stack_walk+0xfc/0x150 [ 2638.041958][ C1] ? stack_trace_save+0x9c/0xe0 [ 2638.041982][ C1] ? __pfx_stack_trace_save+0x10/0x10 [ 2638.042009][ C1] ? __lock_acquire+0x6b6/0x2cf0 [ 2638.042038][ C1] ? kasan_save_track+0x4f/0x80 [ 2638.042065][ C1] ? kasan_save_track+0x3e/0x80 [ 2638.042091][ C1] ? kasan_save_free_info+0x46/0x50 [ 2638.042113][ C1] ? __kasan_slab_free+0x5c/0x80 [ 2638.042141][ C1] ? kmem_cache_free+0x18f/0x8d0 [ 2638.042171][ C1] ? get_signal+0xa2a/0x1310 [ 2638.042189][ C1] ? arch_do_signal_or_restart+0x9a/0x7a0 [ 2638.042220][ C1] ? irqentry_exit+0x177/0x660 [ 2638.042241][ C1] ? irqentry_exit+0x5dd/0x660 [ 2638.042258][ C1] ? lockdep_hardirqs_on+0x7b/0x110 [ 2638.042277][ C1] ? irqentry_exit+0x5dd/0x660 [ 2638.042318][ C1] ? rt_spin_unlock+0x150/0x200 [ 2638.042347][ C1] ? rt_spin_unlock+0x161/0x200 [ 2638.042374][ C1] get_signal+0x10d8/0x1310 [ 2638.042407][ C1] arch_do_signal_or_restart+0x9a/0x7a0 [ 2638.042441][ C1] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 2638.042482][ C1] ? local_irq_enable_exit_to_user+0x5/0x10 [ 2638.042512][ C1] irqentry_exit+0x177/0x660 [ 2638.042538][ C1] ? trace_irq_disable+0x37/0x100 [ 2638.042563][ C1] asm_exc_page_fault+0x26/0x30 [ 2638.042583][ C1] RIP: 0033:0x7f663b9cf751 [ 2638.042599][ C1] Code: 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 48 3d 01 f0 ff ff 73 01 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f [ 2638.042616][ C1] RSP: 002b:fffffffffffffe70 EFLAGS: 00010217 [ 2638.042633][ C1] RAX: 0000000000000000 RBX: 00007f663bc25fa0 RCX: 00007f663b9cf749 [ 2638.042646][ C1] RDX: 0000000000000000 RSI: fffffffffffffe70 RDI: 0000000000008000 [ 2638.042659][ C1] RBP: 00007f663ba53f91 R08: 0000000000000000 R09: 0000000000000000 [ 2638.042672][ C1] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 2638.042684][ C1] R13: 00007f663bc26038 R14: 00007f663bc25fa0 R15: 00007ffd100cfa48 [ 2638.042710][ C1] [ 2638.043050][ T39] Kernel panic - not syncing: hung_task: blocked tasks [ 2638.043076][ T39] CPU: 0 UID: 0 PID: 39 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 2638.043107][ T39] Tainted: [L]=SOFTLOCKUP [ 2638.043116][ T39] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 2638.043130][ T39] Call Trace: [ 2638.043139][ T39] [ 2638.043149][ T39] vpanic+0x1e0/0x670 [ 2638.043187][ T39] panic+0xb9/0xc0 [ 2638.043220][ T39] ? __pfx_panic+0x10/0x10 [ 2638.043264][ T39] ? nmi_trigger_cpumask_backtrace+0x234/0x300 [ 2638.043302][ T39] watchdog+0xfdf/0xfe0 [ 2638.043334][ T39] ? watchdog+0x20a/0xfe0 [ 2638.043368][ T39] kthread+0x711/0x8a0 [ 2638.043404][ T39] ? __pfx_watchdog+0x10/0x10 [ 2638.043430][ T39] ? __pfx_kthread+0x10/0x10 [ 2638.043461][ T39] ? rt_spin_unlock+0x150/0x200 [ 2638.043498][ T39] ? rt_spin_unlock+0x161/0x200 [ 2638.043527][ T39] ? __pfx_kthread+0x10/0x10 [ 2638.043562][ T39] ret_from_fork+0x510/0xa50 [ 2638.043591][ T39] ? __pfx_ret_from_fork+0x10/0x10 [ 2638.043614][ T39] ? __switch_to+0xc9e/0x1480 [ 2638.043655][ T39] ? __pfx_kthread+0x10/0x10 [ 2638.043690][ T39] ret_from_fork_asm+0x1a/0x30 [ 2638.043743][ T39] [ 2638.043903][ T39] Kernel Offset: disabled