last executing test programs: 23m19.241687949s ago: executing program 1 (id=2): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bf"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r3}, 0x10) socket$inet6_mptcp(0xa, 0x1, 0x106) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000080)=ANY=[@ANYBLOB="1c0000001500010000000000000000000500000008000100", @ANYRES16=r4], 0x1c}, 0x1, 0x0, 0x0, 0x48001}, 0x0) sendmsg$nl_generic(r4, 0x0, 0x0) r5 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$int_in(r5, 0x40000000af01, 0x0) r6 = socket(0x10, 0x3, 0x0) write(r6, &(0x7f0000000140), 0x0) ioctl$VHOST_SET_MEM_TABLE(r5, 0x4008af03, &(0x7f0000000280)) r7 = socket$packet(0x11, 0x3, 0x300) r8 = dup(r7) r9 = fcntl$dupfd(r5, 0x0, r7) ioctl$VHOST_SET_VRING_ADDR(r9, 0x4028af11, &(0x7f0000000340)={0x0, 0x0, 0x0, &(0x7f0000000180)=""/251, 0x0}) ioctl$VHOST_NET_SET_BACKEND(r9, 0x4008af30, &(0x7f0000000080)={0x0, r8}) r10 = eventfd2(0x8001, 0x0) ioctl$VHOST_SET_VRING_KICK(r9, 0x4008af20, &(0x7f00000000c0)={0x0, r10}) getpid() 23m17.875071346s ago: executing program 1 (id=6): r0 = bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000100)={{r0, 0xffffffffffffffff}, &(0x7f0000000240), 0x0}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000000)={r1}, 0x4) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r2, 0x84, 0x76, &(0x7f0000000100)={0x0, 0x7}, 0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r2, 0x84, 0x75, &(0x7f0000000040)={0x0, 0x8}, 0x8) bind$inet6(r2, &(0x7f00000002c0)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r3, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket(0x22, 0x3, 0xb) sendmmsg$inet6(r2, &(0x7f0000000200)=[{{&(0x7f00000008c0)={0xa, 0x4e23, 0x1, @loopback, 0x1}, 0x1c, &(0x7f0000000580)=[{&(0x7f0000001680)='\t', 0x1}], 0x1}}], 0x1, 0x0) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r2, 0x84, 0x79, &(0x7f0000000b40)=ANY=[@ANYRESDEC=r3, @ANYRESHEX=r4, @ANYRESDEC=r3, @ANYBLOB="217891fd50f884d4d91b9e7a2ef745ebcc0d2575ab", @ANYRES32=r2, @ANYRES16=r5, @ANYBLOB="e6b4cc6b6a9db5bf14d9581ad8c7827ee39d831213bdd0752a7f95640aad82b469bbe19b7956f1588a3667772c7709f4a46a04f6461bc9a5292025f98fefcc014500ad5b947df340a668d8f59e4d2edfd9091b0acae83881856a83ca525b0163d293e3bdad5e18ca9ec4def0269d49e73daa8930da1951b820a4fb28900757051c7d3566ceb79bfd7d43936d1d3302b0f55c7876a1ae0e8d92ee34a64383c57b89b93d3be29c4e81842df71a487dd388894d83f196a4f78d55e956d0772323ee37b415c86ea0089d8b3d297ef84acfe612a8b0a12a7c3ea3bae8316508f0edafe3ffdccfc2bb09dc23b42234d7c8384b82061af484", @ANYBLOB="c529e99f73bdf9746ab525d0d3d45b6d084d0555df67a9fc92f172cf122ab138cf685f40d595a4284aaf7d0d0b432ab0566f02f0ec1cff45dc182067ddf24aed2e7b978316ab043660191b93bac2976405e3c14adb9a54c49c587e80c1ba1d388e49113825b5ad2ddf80223fda7e468f61f070d8d76abcb308b3c46e8878995c349ca2bb4661733005921540464ed98aadb91fe3409164920ac1100fa2d44de7d1269361dbac526182e1b406dbfd"], 0x8) r6 = socket$inet6(0xa, 0x3, 0x1) setsockopt$IP6T_SO_SET_REPLACE(r6, 0x29, 0x40, &(0x7f0000000580)=@raw={'raw\x00', 0x8, 0x3, 0x560, 0x0, 0xffffffff, 0xffffffff, 0xf0, 0xffffffff, 0x490, 0xffffffff, 0xffffffff, 0x490, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xf0}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@mcast2, 'vxcan1\x00', {0x8}}}}, {{@ipv6={@empty, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0xfd}}, [], [0x0, 0xffffffff], 'pim6reg\x00', 'gre0\x00', {}, {}, 0x62}, 0x0, 0x358, 0x3a0, 0x0, {}, [@common=@inet=@hashlimit3={{0x158}, {'veth0_virt_wifi\x00', {0x4, 0x8, 0x20, 0x5e1b2d47, 0xf91, 0x5, 0x4, 0x9f7, 0x18}, {0x8}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x5}}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@mcast2, 'bridge_slave_0\x00', {0x53}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x5c0) exit(0x7) r7 = socket(0x15, 0x5, 0x0) getsockopt(r7, 0x200000000114, 0x2720, 0x0, &(0x7f0000000000)) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) syz_emit_ethernet(0x3e1, &(0x7f0000000d80)=ANY=[@ANYBLOB="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"], 0x0) 23m15.037463698s ago: executing program 1 (id=8): syz_emit_ethernet(0x23, &(0x7f0000000040)={@local, @local, @void, {@ipv4={0x800, @generic={{0x5, 0x4, 0x0, 0x0, 0x15, 0x0, 0x0, 0x0, 0x1, 0x0, @remote, @local}, "e9"}}}}, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$TIPC_DEST_DROPPABLE(r0, 0x10f, 0x81, &(0x7f0000000080), 0x4a) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f00000000c0)=0x9, 0x4) sendmmsg$inet(r0, &(0x7f0000001540)=[{{0x0, 0xfffffffffffffda1, 0x0}}], 0x40001b6, 0x0) close(r1) mkdir(0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) open(&(0x7f0000000080)='./bus\x00', 0x800, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) epoll_create1(0x0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) r3 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x48) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=@updpolicy={0x1fc, 0x19, 0x1, 0x0, 0x1, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, {0x0, 0x0, 0x800}, 0x200, 0x0, 0x0, 0x0, 0x1}, [@tmpl={0x144, 0x5, [{{@in=@local, 0x0, 0x33}, 0x0, @in=@private=0xa010100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, {{@in6=@remote, 0x0, 0x3c}, 0x0, @in6=@dev}, {{@in=@loopback, 0x0, 0x6c}, 0x0, @in=@broadcast}, {{@in=@dev={0xac, 0x14, 0x14, 0x43}, 0x0, 0x33}, 0x0, @in=@empty}, {{@in=@remote, 0x0, 0x3c}, 0xa, @in6=@private0, 0x0, 0x5}]}]}, 0x1fc}, 0x1, 0x0, 0x0, 0x1}, 0x4000) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x6, 0x10, &(0x7f0000000280)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r2, 0x0, 0x0, 0x0, 0x0}, 0x94) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) r8 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x100002, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{r5}, &(0x7f0000000240), &(0x7f00000003c0)=r8}, 0x20) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r7, r4, 0x25, 0x2, @val=@tcx}, 0x1c) syz_emit_ethernet(0x56, &(0x7f0000000300)={@broadcast, @remote, @void, {@canfd={0xd, {{0x3}, 0x1a, 0x1, 0x0, 0x0, "a9d42be8a1d323f3736f0940283545370b12dac31e1cd94a75028bf2bb6582669ffdfddfcb0caa87e4e654c9489a1e138eb3bb143fd1ebb11c9340032821b6e7"}}}}, 0x0) r9 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000040)={'sit0\x00', 0x0}) sendmsg$nl_route(r9, &(0x7f0000000100)={0xffffffffffffffff, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=@ipv6_newnexthop={0x38, 0x68, 0x1, 0x0, 0x0, {}, [@NHA_ENCAP_TYPE={0x6, 0x7, 0x8}, @NHA_ENCAP={0x10, 0x8, 0x0, 0x1, @ILA_ATTR_LOCATOR={0xc, 0x1, 0x9}}, @NHA_OIF={0x8, 0x5, r10}]}, 0x38}}, 0x0) sendmsg$IPVS_CMD_GET_DAEMON(r9, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000180)={&(0x7f0000000080)={0xc8, 0x0, 0x100, 0x70bd28, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_DAEMON={0x38, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @private2}, @IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e21}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e24}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @rand_addr=0x64010101}]}, @IPVS_CMD_ATTR_DEST={0xc, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0xfffffffb}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x5}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x2}, @IPVS_CMD_ATTR_DAEMON={0x30, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'pimreg1\x00'}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @loopback}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @dev={0xac, 0x14, 0x14, 0x38}}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e20}]}, @IPVS_CMD_ATTR_DEST={0x4}, @IPVS_CMD_ATTR_DEST={0x2c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x9}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x1}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e23}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x9}]}]}, 0xc8}}, 0x4000010) 23m13.841612159s ago: executing program 1 (id=9): setsockopt$inet_buf(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000000), 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0xffffffffffffff2b, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) syz_open_dev$sg(0x0, 0x0, 0x40042) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18010000010000000000000000030000850000007b00000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f00000000c0)='sched_switch\x00', r3}, 0x10) r4 = socket(0x10, 0x2, 0x0) mount$bind(&(0x7f00000001c0)='./file1\x00', 0x0, &(0x7f00000003c0), 0x400000, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r4, 0x89f1, &(0x7f0000000000)={'ip6gre0\x00', &(0x7f00000009c0)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x1, 0x2, 0x0, @loopback, @loopback}}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r4, 0x89f3, &(0x7f0000000440)={'syztnl1\x00', &(0x7f0000000640)={'ip6_vti0\x00', 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, @loopback, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x0, 0x0, 0x0, 0x6}}) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000580)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './cgroup'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@nfs_export_on}]}) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000a40)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a70000000060a0b0400000000000000000200000344000480240001800b000100736f636b6574000014000280080002400000000308000140000000011c0001800a00010071756575650000000c00028008000440000000100900010073797a30000000000900020073797a3200010000000000000000000000000adba5b76e9fcd57187a507a4ad9530f6dcdfd73928e05c84bcd87d563357f2a24eedddb5df4d988c2ba4eaeb64f2a9b95463e7fb0c39df1911342c700376307f41db6dd"], 0x98}}, 0x0) syz_emit_ethernet(0x32, &(0x7f0000000000)={@local, @random="97c4864ef7a3", @void, {@ipv4={0x800, @generic={{0x9, 0x4, 0x0, 0x0, 0x24, 0x64, 0x0, 0x0, 0xc84cf8fe4733a687, 0x0, @remote, @dev={0xac, 0x14, 0x14, 0x23}, {[@ssrr={0x89, 0x7, 0xef, [@multicast1=0xe000000d]}, @cipso={0x86, 0x6}]}}}}}}, 0x0) socket$kcm(0x21, 0x2, 0xa) r6 = socket$inet(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r6, 0x4000000000000, 0x40, &(0x7f0000000740)=@raw={'raw\x00', 0x8, 0x3, 0x1f8, 0x0, 0x8, 0xfa04, 0xd0, 0x6c02, 0x160, 0x194, 0x194, 0x160, 0x194, 0x3, 0x0, {[{{@uncond, 0x0, 0x98, 0xd0, 0x0, {0x0, 0x74020000}, [@common=@inet=@ecn={{0x28}, {0x0, 0x22}}]}, @common=@inet=@SET3={0x38}}, {{@uncond, 0x0, 0x70, 0x90}, @unspec=@TRACE={0x20}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x258) r7 = socket$kcm(0x21, 0x2, 0xa) sendmsg$kcm(r7, 0x0, 0xfc00) 23m12.328433517s ago: executing program 1 (id=10): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b7000000", @ANYRESDEC=r0], &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x2d) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000040)='c:::\x00\xfdM\xab\x89\xff\xda\xc7dw2\xa1\xb2\xabuQQ\x14\x97\xc9\xfae\xc7\xa1U\xe2\xbe\"\xb9t\xa0\x0e\xfa\xdb\xf1\xa5.\xd87\xc3p\xa5l\xf8vC\xe2\xe8 \xd5-<#\x186\xe1\xbd\xc0\xc3\xb5N(vj\xa7+<:\xc4\xe00\x01\xdd \x82\x83\xed\x0e\xc4\x1d\xac\xef7\b\xd3Z5\\A\'\x18\xa2\xc3\xab\xc7`\xc3\v\xf3L\x9d[Q\x9e\x11@=\xa1\x9b\xdc\xb1\xef\xc3k<\x97L\xa0\xab\xa6\x1ce\xcd\x99\xb3m\xef\x87\xc5i^N\xbd@\x01\xc0\xb2\x88\xc3\xe2\x96T\xa3\xa5\xeb\x0f\xf2f\xb9$\xd2\x140xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r11, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff097b000008003950323030302e4c"], 0x15) dup(r11) write$FUSE_DIRENTPLUS(r10, &(0x7f00000001c0)=ANY=[@ANYBLOB="b0000000000000008d15c937040795e9ec68ba339b8fd15e58983b3da542", @ANYRESDEC=r4], 0xb0) 23m12.165884815s ago: executing program 0 (id=1): r0 = add_key$fscrypt_provisioning(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, &(0x7f0000000080)=ANY=[@ANYBLOB="0100000000000000616161616161616161616161616100000080000000006161616161616161616131313131313131313131313131313131313131313131313131313131"], 0x48, 0xfffffffffffffffd) keyctl$revoke(0x3, r0) keyctl$chown(0x4, r0, 0x0, 0xffffffffffffffff) r1 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, 0x0, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000240)={0x0, 0xffffffffffffff4a, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="18010a000000004000000000000000d3cf000000dc2366eb9002258ade0d84c16168472a8174bfd81d34f8b96f8487fc0b207c2dff2505b2170f55c33bee42"], 0x78}}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8008b}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x20, 0x4, &(0x7f0000000500)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x4, 0x2}, 0x8, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = accept$unix(0xffffffffffffffff, &(0x7f00000002c0)=@abs, &(0x7f0000000080)=0x6e) connect$unix(r2, 0x0, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000002000)=""/102400, 0x19000) write$binfmt_aout(0xffffffffffffffff, 0x0, 0xff2e) timerfd_create(0x8, 0x0) r4 = socket$phonet(0x23, 0x2, 0x1) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, 0x0) socket$netlink(0x10, 0x3, 0x0) clock_adjtime(0x0, &(0x7f0000000000)={0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3b9ac9ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x10000000000100, 0x5}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) r5 = gettid() r6 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x88000) read(r6, &(0x7f0000000200)=""/209, 0xd1) socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r6, 0xc0505350, &(0x7f0000000940)) tkill(r5, 0x7) syz_io_uring_submit(0x0, 0x0, 0x0) 23m9.960713129s ago: executing program 1 (id=12): prctl$PR_SCHED_CORE(0x3e, 0x10000000001, 0x0, 0x2, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0x3) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000280)={{}, 0x0, 0x0}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f00, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x94) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x1a01, 0x0) ioctl$EVIOCGPROP(r1, 0x40047438, &(0x7f0000000180)=""/246) ioctl$PPPIOCSFLAGS1(r1, 0x40047459, &(0x7f00000003c0)=0xc26080b) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) r2 = socket$inet_sctp(0x2, 0x1, 0x84) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r3) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r3, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x200}, 0x1c) listen(r4, 0x0) syz_emit_ethernet(0x52, &(0x7f00000002c0)={@local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @val={@val={0x88a8, 0x5, 0x0, 0x2}, {0x8100, 0x2, 0x0, 0x3}}, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a8435", 0x14, 0x6, 0x1, @loopback={0x300}, @local, {[], {{0xfffe, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}}, 0x0) bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e22, @empty}, 0x10) listen(r2, 0x1ff) accept4$inet(r2, 0x0, 0x0, 0x80000) r5 = socket$inet_sctp(0x2, 0x5, 0x84) sendto$inet(r5, &(0x7f00000000c0)="ab", 0x1, 0xc1, &(0x7f0000000280)={0x2, 0x4e22, @loopback}, 0x10) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x2000006) r6 = syz_open_dev$MSR(&(0x7f0000000200), 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x1, 0x4, &(0x7f0000000900)=ANY=[@ANYBLOB="b4000000000000006910810000000000040000000000000095000000000000007220abb1b364768c328613d20a4d2451a69f9642"], &(0x7f0000000080)='GPL\x00', 0x2, 0x3f7, &(0x7f000000cf3d)=""/195}, 0x48) read$msr(r6, &(0x7f0000002700)=""/102392, 0x18ff8) bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=ANY=[@ANYBLOB="090000000600000004000000fc"], 0x48) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) write$cgroup_devices(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB='b 75:*\trmr'], 0xa) 23m7.552352621s ago: executing program 0 (id=14): quotactl_fd$Q_GETQUOTA(0xffffffffffffffff, 0xffffffff80000702, 0x0, &(0x7f00000003c0)) r0 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000280), 0x22802, 0x0) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(0xffffffffffffffff, 0x10e, 0xb, &(0x7f0000000000)=0x2, 0x4) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) fallocate(0xffffffffffffffff, 0x700100, 0x0, 0x1000f4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r4, 0x0, 0x40, &(0x7f0000001640)=@mangle={'mangle\x00', 0x44, 0x6, 0x510, 0x3a8, 0x210, 0x210, 0x0, 0x138, 0x478, 0x478, 0x478, 0x478, 0x478, 0x6, 0x0, {[{{@ip={@broadcast, @multicast1=0xe0007600, 0x0, 0x0, 'geneve1\x00', 'ip6gre0\x00'}, 0x0, 0x70, 0x98}, @inet=@DSCP={0x28}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @local, 0x0, 0x0, 'batadv_slave_1\x00', 'veth1_virt_wifi\x00', {}, {}, 0x11}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x0, @local}}}, {{@ip={@broadcast, @multicast2, 0x0, 0x0, 'vlan1\x00', 'nr0\x00'}, 0x0, 0xb0, 0xd8, 0x0, {}, [@common=@unspec=@connlimit={{0x40}}]}, @unspec=@CHECKSUM={0x28}}, {{@ip={@loopback, @empty, 0x0, 0x0, 'syzkaller0\x00', 'veth1_to_team\x00'}, 0x0, 0x70, 0x198}, @common=@unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0x1, 0x0, 'system_u:object_r:dbusd_etc_t:s0\x00'}}}, {{@ip={@broadcast, @multicast2, 0x0, 0x0, 'lo\x00', 'batadv_slave_1\x00'}, 0x0, 0xa0, 0xd0, 0x0, {}, [@common=@unspec=@mac={{0x30}, {@multicast}}]}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x0, @loopback}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x570) r5 = syz_io_uring_setup(0x239, &(0x7f0000000300)={0x0, 0x175d, 0x10100, 0x5, 0x262}, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) r8 = syz_open_dev$tty1(0xc, 0x4, 0x1) r9 = dup(r8) ioctl$TCSETSF(r9, 0x5404, &(0x7f0000000040)={0x1856, 0x0, 0x0, 0xfffffff9, 0x8, "0e80706e6c06a79874342a0e0d13343972d01f"}) write$UHID_INPUT(r9, &(0x7f0000001040)={0xd, {"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", 0x1010}}, 0x1b7) read$FUSE(r9, &(0x7f00000040c0)={0x2020}, 0x2020) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$nl80211(0x0, r10) sendmsg$NL80211_CMD_REQ_SET_REG(r10, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000540)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=r11, @ANYBLOB="01002cbd7000fbdbdf251b00000008009a00020000000400cc00"], 0x20}, 0x1, 0x0, 0x0, 0x4040080}, 0x20000090) syz_io_uring_submit(r6, r7, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r5, 0x2def, 0x0, 0x0, 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x7) 23m1.503196238s ago: executing program 0 (id=20): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = add_key$user(&(0x7f0000000200), &(0x7f0000000300)={'syz', 0x2}, &(0x7f00000002c0)="f5", 0x30, 0xfffffffffffffffe) r3 = add_key$user(&(0x7f0000000280), &(0x7f0000000440), &(0x7f0000000340)="94c14146f79c29fb4016c9d17e8040b8940ebf9c2db88dbad8af3b5516979a57e80b5f5e73001f8713f6b1c051cb6d08d2d082ac6c01b7e858f2b274a79a870bfa354e6b301c26b9d484ee1c9e28c336d013be7aa5d3edc593293845a375dff3401004440c50360a68b8a16c1f3cfacd9c9b0ee79d30cde69f397089ca03919d41aa483f8891b1c5c038c530f6caf30b1f3c15d4f7c0f7964230aa7199d63b0237f18e5ca8d130516c031f4afacc6576ddacc3ec81898561154adce958145d74", 0xc0, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000140)={r2, r3, r2}, &(0x7f00000000c0)=""/83, 0xfffffffffffffe4f, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000140), r4) sendmsg$NLBL_CIPSOV4_C_ADD(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000000000000000100000008000100030000002c0004800500030080ff00000500"], 0x50}, 0x1, 0x0, 0x0, 0x40}, 0x0) r6 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r6, &(0x7f0000001300)=""/102381, 0x18fed) syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TCGETA(0xffffffffffffffff, 0x5405, &(0x7f0000000080)) r7 = landlock_create_ruleset(&(0x7f00000001c0)={0xa019, 0x1, 0x3}, 0x18, 0x0) landlock_restrict_self(r7, 0x0) r8 = fsopen(&(0x7f0000000180)='proc\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r8, 0x6, 0x0, 0x0, 0x0) r9 = fsmount(r8, 0x0, 0x1) fsconfig$FSCONFIG_CMD_RECONFIGURE(r8, 0x7, 0x0, 0x0, 0x0) r10 = socket$packet(0x11, 0x3, 0x300) r11 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$sock_ifreq(r11, 0x8910, &(0x7f0000000000)={'rose0\x00', @ifru_mtu=0xd}) ioctl$sock_netdev_private(r11, 0x8914, &(0x7f0000000000)) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r10, 0x8933, &(0x7f0000000240)={'batadv_slave_1\x00'}) ioctl$SNDRV_PCM_IOCTL_SW_PARAMS(r9, 0xc0884113, &(0x7f0000000500)={0x1, 0x8, 0xf3, 0x5, 0x2, 0x6, 0x9, 0x3, 0x2, 0x100000000, 0x8}) 22m50.250584984s ago: executing program 32 (id=12): prctl$PR_SCHED_CORE(0x3e, 0x10000000001, 0x0, 0x2, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0x3) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000280)={{}, 0x0, 0x0}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f00, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x94) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x1a01, 0x0) ioctl$EVIOCGPROP(r1, 0x40047438, &(0x7f0000000180)=""/246) ioctl$PPPIOCSFLAGS1(r1, 0x40047459, &(0x7f00000003c0)=0xc26080b) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) r2 = socket$inet_sctp(0x2, 0x1, 0x84) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r3) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r3, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x200}, 0x1c) listen(r4, 0x0) syz_emit_ethernet(0x52, &(0x7f00000002c0)={@local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @val={@val={0x88a8, 0x5, 0x0, 0x2}, {0x8100, 0x2, 0x0, 0x3}}, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a8435", 0x14, 0x6, 0x1, @loopback={0x300}, @local, {[], {{0xfffe, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}}, 0x0) bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e22, @empty}, 0x10) listen(r2, 0x1ff) accept4$inet(r2, 0x0, 0x0, 0x80000) r5 = socket$inet_sctp(0x2, 0x5, 0x84) sendto$inet(r5, &(0x7f00000000c0)="ab", 0x1, 0xc1, &(0x7f0000000280)={0x2, 0x4e22, @loopback}, 0x10) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x2000006) r6 = syz_open_dev$MSR(&(0x7f0000000200), 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x1, 0x4, &(0x7f0000000900)=ANY=[@ANYBLOB="b4000000000000006910810000000000040000000000000095000000000000007220abb1b364768c328613d20a4d2451a69f9642"], &(0x7f0000000080)='GPL\x00', 0x2, 0x3f7, &(0x7f000000cf3d)=""/195}, 0x48) read$msr(r6, &(0x7f0000002700)=""/102392, 0x18ff8) bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=ANY=[@ANYBLOB="090000000600000004000000fc"], 0x48) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) write$cgroup_devices(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB='b 75:*\trmr'], 0xa) 22m42.995147804s ago: executing program 33 (id=20): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = add_key$user(&(0x7f0000000200), &(0x7f0000000300)={'syz', 0x2}, &(0x7f00000002c0)="f5", 0x30, 0xfffffffffffffffe) r3 = add_key$user(&(0x7f0000000280), &(0x7f0000000440), &(0x7f0000000340)="94c14146f79c29fb4016c9d17e8040b8940ebf9c2db88dbad8af3b5516979a57e80b5f5e73001f8713f6b1c051cb6d08d2d082ac6c01b7e858f2b274a79a870bfa354e6b301c26b9d484ee1c9e28c336d013be7aa5d3edc593293845a375dff3401004440c50360a68b8a16c1f3cfacd9c9b0ee79d30cde69f397089ca03919d41aa483f8891b1c5c038c530f6caf30b1f3c15d4f7c0f7964230aa7199d63b0237f18e5ca8d130516c031f4afacc6576ddacc3ec81898561154adce958145d74", 0xc0, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000140)={r2, r3, r2}, &(0x7f00000000c0)=""/83, 0xfffffffffffffe4f, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000140), r4) sendmsg$NLBL_CIPSOV4_C_ADD(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000000000000000100000008000100030000002c0004800500030080ff00000500"], 0x50}, 0x1, 0x0, 0x0, 0x40}, 0x0) r6 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r6, &(0x7f0000001300)=""/102381, 0x18fed) syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TCGETA(0xffffffffffffffff, 0x5405, &(0x7f0000000080)) r7 = landlock_create_ruleset(&(0x7f00000001c0)={0xa019, 0x1, 0x3}, 0x18, 0x0) landlock_restrict_self(r7, 0x0) r8 = fsopen(&(0x7f0000000180)='proc\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r8, 0x6, 0x0, 0x0, 0x0) r9 = fsmount(r8, 0x0, 0x1) fsconfig$FSCONFIG_CMD_RECONFIGURE(r8, 0x7, 0x0, 0x0, 0x0) r10 = socket$packet(0x11, 0x3, 0x300) r11 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$sock_ifreq(r11, 0x8910, &(0x7f0000000000)={'rose0\x00', @ifru_mtu=0xd}) ioctl$sock_netdev_private(r11, 0x8914, &(0x7f0000000000)) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r10, 0x8933, &(0x7f0000000240)={'batadv_slave_1\x00'}) ioctl$SNDRV_PCM_IOCTL_SW_PARAMS(r9, 0xc0884113, &(0x7f0000000500)={0x1, 0x8, 0xf3, 0x5, 0x2, 0x6, 0x9, 0x3, 0x2, 0x100000000, 0x8}) 22m0.529250961s ago: executing program 2 (id=58): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) r1 = syz_open_dev$sndctrl(&(0x7f0000000e00), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r1, 0xc1105511, &(0x7f00000000c0)={{0xc, 0x0, 0x0, 0x0, 'syz1\x00'}, 0x0, [0x0, 0x0, 0x7ffc, 0x0, 0x9, 0x100000000, 0x0, 0x4, 0x8, 0x0, 0x0, 0x7f, 0x3cb7, 0x0, 0x8000000, 0x0, 0x8, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x10000000, 0x100000000, 0xffffffffffffffff, 0x0, 0x100000000, 0x4, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0xfffffffe, 0x0, 0x6, 0xfffffdfffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401, 0x9, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xd89, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0xdf9cd8e, 0x8000000, 0x6, 0x2, 0x0, 0x0, 0x0, 0xbb, 0x0, 0x0, 0x0, 0x0, 0x7, 0x7ffffffd, 0x0, 0x0, 0xffffffffffff2328, 0xffffffffffffffff, 0x3, 0x0, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x4, 0x0, 0x0, 0xb, 0x1, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800]}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r4, 0x1, &(0x7f0000000000)='source', &(0x7f0000000100)='::,:/', 0x0) r5 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCETHTOOL(r5, 0x8946, &(0x7f00000002c0)={'veth0_to_team\x00', &(0x7f0000000280)=@ethtool_channels={0x3d, 0x0, 0x0, 0x40000, 0x0, 0x2, 0x1}}) ioctl$sock_SIOCETHTOOL(r5, 0x8946, &(0x7f00000002c0)={'veth0_to_team\x00', &(0x7f0000000000)=@ethtool_cmd={0x2c, 0x6, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}}) ioctl$sock_inet_SIOCSIFFLAGS(r5, 0x8914, &(0x7f0000000040)={'veth0_to_team\x00', 0x3fa1dc947ffe4b82}) r6 = socket(0x1, 0x2, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={0xffffffffffffffff, &(0x7f0000000600), 0x0}, 0x20) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r6, 0x5452, &(0x7f0000000380)={'gre0\x00', 0x0}) recvmsg(r6, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000001240)=""/113, 0x71}], 0x1}, 0x0) sendmmsg$unix(r6, &(0x7f0000001080)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f00000013c0)="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", 0xe00}, {0x0}], 0x2, &(0x7f0000000800), 0x0, 0x20040041}}, {{0x0, 0x0, &(0x7f0000001000)=[{&(0x7f0000000b40)="be27c7dec8a84a498860a1d0df0a74f1b43a42edf560eee6210c43966f73302c3485ec8c67c43ab5f89d640ce75410ad88176cf092e4823db6de693cfb432da9013c86bd9afc5548f7331878145f5791051a3882249faf9a", 0x58}, {&(0x7f0000000bc0)="a109c7ac1d03d932339160f772a783520daa28a913d5b3fe9674df", 0x1b}, {&(0x7f0000000d40)="6ba6bb2a9516ee80191a61d429a47f8376d3b9c3894a083b24c91a9dcaac408ff2b441dbb647568633bf9d4cdc5ebff7c493ad552c96811f1c225f3b8d4a3e", 0x3f}, {&(0x7f0000000c00)}, {&(0x7f0000000e40)="fe4e83950f41a712539dfca486d81e5c9e4174c4aa132a513521b3f5c2e40bdcce6972fbaa34b339f0f0c31b2a3e506cdf0b69f39195bd34ac2a85716d3beb9e6db9a0a7c094c46e8f2310b1c7f4a54118c90dc8e6981c0a461b9f49ddfeeaf604367a0d65ffe5608ec40bf0962dbf6a76e916ccc90c415d83aee7783dfbaf05dc27c525aabc", 0x86}, {0x0}], 0x6, 0x0, 0x0, 0x8000000}}], 0x3, 0x48090) socket(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r7 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f00000005c0), 0x400000, 0x0) ioctl$AUTOFS_IOC_READY(r7, 0x9360, 0xfffffffffffffff4) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) sendmsg$IPSET_CMD_CREATE(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000700)={0x54, 0x2, 0x6, 0x3, 0x0, 0x0, {0x3, 0x0, 0x8}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x2}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_TYPENAME={0xd, 0x3, 'list:set\x00'}]}, 0x54}}, 0x0) 21m54.49438604s ago: executing program 2 (id=64): setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000280)={@mcast2, 0x800, 0x0, 0x103, 0x1}, 0x20) socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_xfrm(0x10, 0x3, 0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f00000003c0)=ANY=[@ANYRES64=0x0], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000002c0)='contention_begin\x00', r0, 0x0, 0xd}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000540)=0x4) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = socket(0x40000000015, 0x5, 0x0) setsockopt$SO_RDS_TRANSPORT(r2, 0x114, 0x8, &(0x7f00000008c0)=0x2, 0x4) syz_open_dev$sndpcmc(&(0x7f0000000000), 0x6e0447cf, 0x940) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) r4 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r4, 0x3b81, &(0x7f0000000380)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(r4, 0x3ba0, &(0x7f0000000200)={0x48, 0x2, r5, 0x0, 0x0, 0x0, 0x0}) ioctl$IOMMU_IOAS_ALLOC(r4, 0x3b81, &(0x7f0000000140)={0xc, 0x0, 0x0}) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000002500), r8) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r8, &(0x7f0000002640)={0x0, 0x0, &(0x7f0000002600)={&(0x7f0000000180)={0x3c, r9, 0x1, 0x70bd2d, 0x25dfdbfc, {}, [@NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @loopback}, @NLBL_UNLABEL_A_SECCTX={0x1f, 0x7, 'system_u:object_r:man_t:s0\x00'}]}, 0x3c}, 0x1, 0x0, 0x0, 0x8010}, 0x4040) ioctl$IOMMU_HWPT_ALLOC$TEST(r4, 0x3b89, &(0x7f00000002c0)={0x18, 0x3, r6, r7, 0x0, 0x0, 0xdead, 0x4, &(0x7f0000000280)}) ioctl$IOMMU_IOAS_MAP$PAGES(r4, 0x3b85, &(0x7f0000000480)={0x28, 0x4, r7, 0x0, &(0x7f0000fff000/0x1000)=nil, 0x1000, 0x4}) ioctl$IOMMU_HWPT_SET_DIRTY_TRACKING(r4, 0x3b8b, &(0x7f0000000080)={0x10, 0x1, r10}) ioctl$IOMMU_HWPT_SET_DIRTY_TRACKING(r4, 0x3b8b, &(0x7f0000000040)={0x10, 0x1, r10}) inotify_add_watch(0xffffffffffffffff, &(0x7f0000000000)='.\x00', 0x100007c8) write$binfmt_elf64(r3, &(0x7f0000000340)=ANY=[@ANYBLOB="7f454c460d04000c028000000000000003003e00ecffffff940200000000000040000000000000004d020000000000000000000000003800010001017f000800030000006400"], 0x78) 21m52.236391036s ago: executing program 2 (id=65): r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) write$UHID_DESTROY(r0, &(0x7f0000000180), 0x4) openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) r1 = syz_open_procfs(0x0, 0x0) r2 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) connect$rxrpc(0xffffffffffffffff, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r3}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) symlink(&(0x7f0000000040)='.\x00', &(0x7f0000000100)='./file0\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f00000004c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000500)={[{@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) chdir(0x0) mount$bpf(0x0, &(0x7f00000023c0)='./file0\x00', 0x0, 0x958028, &(0x7f0000000200)=ANY=[@ANYBLOB='=', @ANYBLOB=',']) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) mount(&(0x7f0000000140)=@nullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000000)='ntfs3\x00', 0x2208004, 0x0) sendmmsg$sock(r2, 0x0, 0x0, 0x20048857) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f0000000080)) 21m45.91310794s ago: executing program 2 (id=68): r0 = socket$can_j1939(0x1d, 0x2, 0x7) statx(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x0, 0x40, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0}) ioprio_set$uid(0x3, r1, 0x6000) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, 0x0) bind$can_j1939(r0, &(0x7f0000000340)={0x1d, 0x0, 0x0, {0x2, 0x0, 0x6}, 0xfe}, 0x18) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x400080, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, 0x0, 0x0) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) syz_open_dev$sndctrl(&(0x7f0000001e00), 0x2, 0x40000) openat$dlm_plock(0xffffffffffffff9c, 0x0, 0x200a83, 0x0) socket$nl_route(0x10, 0x3, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_dev$sndmidi(&(0x7f0000000180), 0x2, 0x141101) r5 = dup(r4) write$6lowpan_enable(r5, &(0x7f0000000000)='0', 0xfffffd2c) r6 = syz_io_uring_setup(0x239, &(0x7f00000002c0)={0x0, 0xf2cf, 0x10100, 0x0, 0x0, 0x0, r5}, &(0x7f00000000c0)=0x0, &(0x7f0000000080)=0x0) syz_io_uring_submit(r7, r8, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd=r5, 0x0, 0x0, 0x0, {0x90c0}, 0x1}) io_uring_enter(r6, 0x2ded, 0x4000, 0x0, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r9 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup/syz1\x00', 0x200002, 0x0) r10 = openat$cgroup_type(r9, &(0x7f0000000300), 0x2, 0x0) write$cgroup_type(r10, &(0x7f0000000280), 0x9) r11 = openat$cgroup_procs(r9, &(0x7f00000002c0)='cgroup.threads\x00', 0x2, 0x0) write$cgroup_pid(r11, &(0x7f0000000c40), 0x12) r12 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r13 = openat$cgroup_ro(r12, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) write$cgroup_int(r13, &(0x7f0000000200)=0x1, 0x12) 21m44.041706474s ago: executing program 2 (id=71): r0 = accept(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000001a40)=""/102392, 0x18ff8) r2 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_VFIO_IOAS$SET(r2, 0x3b88, &(0x7f00000002c0)={0xc}) 21m41.674628246s ago: executing program 2 (id=74): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x8, 0xc, 0x3, 0x1}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0), 0x0, 0x5, r0}, 0x38) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4}, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x1f, 0x13, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000000000000000000000fdffffff18010000786c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000018010000756d6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000004000000850000000400000095"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000180), r2) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r4 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r4, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) fcntl$setpipe(r5, 0x407, 0x0) write$FUSE_INIT(r5, &(0x7f0000000340)={0x50, 0xfffffffffffffff5, 0x0, {0x7, 0x28, 0xd19e, 0x0, 0x0, 0x4, 0x8d, 0x40000000, 0x0, 0x0, 0x10, 0x2}}, 0x50) vmsplice(r5, &(0x7f0000000140)=[{&(0x7f0000000100)="eb", 0x20000101}], 0x1, 0x0) fcntl$setpipe(r5, 0x407, 0x2000000) sendmsg$IEEE802154_ADD_IFACE(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)={0x2c, r3, 0x201, 0x70bd2c, 0x25dfdbff, {}, [@IEEE802154_ATTR_PHY_NAME={0x9, 0x1f, 'phy1\x00'}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0302}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000000}, 0x40800) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r6 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@newtaction={0x70, 0x30, 0x53b, 0x0, 0x0, {0x9}, [{0x5c, 0x1, [@m_sample={0x58, 0x1, 0x0, 0x0, {{0xb}, {0x2c, 0x2, 0x0, 0x1, [@TCA_SAMPLE_PSAMPLE_GROUP={0x8}, @TCA_SAMPLE_RATE={0x8, 0x3, 0x526}, @TCA_SAMPLE_PARMS={0x18}]}, {0x4}, {0xc}, {0xc, 0x4}}}]}]}, 0x70}}, 0x0) r7 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000900)=@newtaction={0x48, 0x32, 0x53b, 0x0, 0x0, {0x9}, [{0x34, 0x1, [@m_sample={0x30, 0x1, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc}, {0xc, 0x4}}}]}]}, 0x48}}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) openat$binfmt_register(0xffffff9c, &(0x7f0000000040), 0x1, 0x0) 21m26.260324663s ago: executing program 34 (id=74): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x8, 0xc, 0x3, 0x1}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0), 0x0, 0x5, r0}, 0x38) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4}, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x1f, 0x13, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000000000000000000000fdffffff18010000786c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000018010000756d6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000004000000850000000400000095"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000180), r2) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r4 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r4, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) fcntl$setpipe(r5, 0x407, 0x0) write$FUSE_INIT(r5, &(0x7f0000000340)={0x50, 0xfffffffffffffff5, 0x0, {0x7, 0x28, 0xd19e, 0x0, 0x0, 0x4, 0x8d, 0x40000000, 0x0, 0x0, 0x10, 0x2}}, 0x50) vmsplice(r5, &(0x7f0000000140)=[{&(0x7f0000000100)="eb", 0x20000101}], 0x1, 0x0) fcntl$setpipe(r5, 0x407, 0x2000000) sendmsg$IEEE802154_ADD_IFACE(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)={0x2c, r3, 0x201, 0x70bd2c, 0x25dfdbff, {}, [@IEEE802154_ATTR_PHY_NAME={0x9, 0x1f, 'phy1\x00'}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0302}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000000}, 0x40800) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r6 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@newtaction={0x70, 0x30, 0x53b, 0x0, 0x0, {0x9}, [{0x5c, 0x1, [@m_sample={0x58, 0x1, 0x0, 0x0, {{0xb}, {0x2c, 0x2, 0x0, 0x1, [@TCA_SAMPLE_PSAMPLE_GROUP={0x8}, @TCA_SAMPLE_RATE={0x8, 0x3, 0x526}, @TCA_SAMPLE_PARMS={0x18}]}, {0x4}, {0xc}, {0xc, 0x4}}}]}]}, 0x70}}, 0x0) r7 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000900)=@newtaction={0x48, 0x32, 0x53b, 0x0, 0x0, {0x9}, [{0x34, 0x1, [@m_sample={0x30, 0x1, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc}, {0xc, 0x4}}}]}]}, 0x48}}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) openat$binfmt_register(0xffffff9c, &(0x7f0000000040), 0x1, 0x0) 19m27.682130897s ago: executing program 4 (id=165): r0 = socket(0x10, 0x3, 0x0) setsockopt$inet6_IPV6_RTHDRDSTOPTS(0xffffffffffffffff, 0x29, 0x37, &(0x7f0000000200)={0x29}, 0x8) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f00000000c0), 0x8882, 0x0) r2 = socket$kcm(0x29, 0x5, 0x0) sendmmsg$inet(r2, 0x0, 0x0, 0x40) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) ioctl$AUTOFS_DEV_IOCTL_FAIL(r1, 0xc0189377, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VIDIOC_G_CROP(r5, 0xc014563b, 0x0) sendmsg$ETHTOOL_MSG_STRSET_GET(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x28}}, 0x0) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r7, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r9, 0x8933, &(0x7f0000000240)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_MESH(r10, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)={0x2c, r11, 0x1, 0x40000000, 0x0, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r12}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4004801}, 0x0) ioctl$KVM_RUN(r8, 0xae80, 0x0) ioctl$KVM_RUN(r8, 0xae80, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x802}, 0x10) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=@ipmr_getroute={0x1c, 0x1a, 0x1, 0x0, 0x0, {0x80, 0x0, 0x0, 0x2, 0x0, 0x3, 0xff, 0x8}}, 0x1c}}, 0x0) 19m24.267801901s ago: executing program 4 (id=167): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x8, 0xc, 0x3, 0x1}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0), 0x0, 0x5, r0}, 0x38) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4}, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x1f, 0x13, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000000000000000000000fdffffff18010000786c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000018010000756d6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000004000000850000000400000095"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000180), r2) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r4 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r4, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) fcntl$setpipe(r5, 0x407, 0x0) write$FUSE_INIT(r5, &(0x7f0000000340)={0x50, 0xfffffffffffffff5, 0x0, {0x7, 0x28, 0xd19e, 0x0, 0x0, 0x4, 0x8d, 0x40000000, 0x0, 0x0, 0x10, 0x2}}, 0x50) vmsplice(r5, &(0x7f0000000140)=[{&(0x7f0000000100)="eb", 0x20000101}], 0x1, 0x0) fcntl$setpipe(r5, 0x407, 0x2000000) sendmsg$IEEE802154_ADD_IFACE(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)={0x2c, r3, 0x201, 0x70bd2c, 0x25dfdbff, {}, [@IEEE802154_ATTR_PHY_NAME={0x9, 0x1f, 'phy1\x00'}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0302}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000000}, 0x40800) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r6 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@newtaction={0x70, 0x30, 0x53b, 0x0, 0x0, {0x9}, [{0x5c, 0x1, [@m_sample={0x58, 0x1, 0x0, 0x0, {{0xb}, {0x2c, 0x2, 0x0, 0x1, [@TCA_SAMPLE_PSAMPLE_GROUP={0x8}, @TCA_SAMPLE_RATE={0x8, 0x3, 0x526}, @TCA_SAMPLE_PARMS={0x18}]}, {0x4}, {0xc}, {0xc, 0x4}}}]}]}, 0x70}}, 0x0) socket(0x10, 0x80002, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r7 = openat$binfmt_register(0xffffff9c, &(0x7f0000000040), 0x1, 0x0) write$binfmt_register(r7, &(0x7f0000002840)={0x3a, 'syz3', 0x3a, 'M', 0x3a, 0x1000, 0x3a, 'o,\xae\x01>_\xcbn(}\x06J\xda4\\x0\x00\x00\x00', 0x3a, ':dev/bus/usbF30#/00#\x00', 0x3a, './file0'}, 0x50) 19m17.763896328s ago: executing program 4 (id=170): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={0x0}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = syz_open_dev$evdev(0x0, 0x0, 0x0) ioctl$EVIOCGREP(r2, 0x80084522, 0x0) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) r5 = socket$kcm(0x23, 0x2, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cgroup.stat\x00', 0x26e1, 0x0) setsockopt$sock_attach_bpf(r5, 0x1, 0x3e, &(0x7f00000000c0)=r6, 0x4) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r7 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/wakeup_count', 0x101a02, 0x0) sendfile(r7, r7, 0x0, 0x101) mmap$binder(&(0x7f00008d6000/0x2000)=nil, 0x2000, 0x1, 0x11, r7, 0x5) getsockopt$inet_mreqsrc(0xffffffffffffffff, 0x0, 0x28, 0x0, &(0x7f00000002c0)) r8 = memfd_create(&(0x7f0000000300)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xae\xd1md\xc8\x85\x00\x00\xfb\xff\x00\x18\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;2\xb5\xe1jS\xeb\xbf%||\xa0\x8e\x01\xadT\xc8\f\xe5\x89\xbf3:\x99\x1e\xac`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\xd2q#\xc6\xca\x97\x9d\xcb\x1e\x80\xd6\xd5%N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec', 0x4) execveat(r8, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) symlink(&(0x7f00000049c0)='.\x00', &(0x7f00000059c0)='./file0\x00') socket$inet6(0xa, 0x1, 0x8010800000000084) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000280)={0xffffffffffffffff, 0x1, 0x4}, 0xc) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="0300000004000000040000000a00000000000000", @ANYRES32, @ANYBLOB="0100"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000009ca100000000faffffffffffffff7c00000000000000000000f0843ca14d1ee1f8fbe2cb5378be"], 0x50) 19m15.919429889s ago: executing program 4 (id=172): r0 = socket$can_j1939(0x1d, 0x2, 0x7) statx(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x0, 0x40, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0}) ioprio_set$uid(0x3, r1, 0x6000) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000340)={0x1d, r2, 0x0, {0x2, 0x0, 0x6}, 0xfe}, 0x18) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x400080, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, 0x0, 0x0) ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) syz_open_dev$sndctrl(0x0, 0x2, 0x40000) openat$dlm_plock(0xffffffffffffff9c, 0x0, 0x200a83, 0x0) socket$nl_route(0x10, 0x3, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r5 = syz_open_dev$sndmidi(&(0x7f0000000180), 0x2, 0x141101) r6 = dup(r5) write$6lowpan_enable(r6, &(0x7f0000000000)='0', 0xfffffd2c) r7 = syz_io_uring_setup(0x239, &(0x7f00000002c0)={0x0, 0xf2cf, 0x10100, 0x0, 0x0, 0x0, r6}, &(0x7f00000000c0)=0x0, &(0x7f0000000080)=0x0) syz_io_uring_submit(r8, r9, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd=r6, 0x0, 0x0, 0x0, {0x90c0}, 0x1}) io_uring_enter(r7, 0x2ded, 0x4000, 0x0, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r10 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup/syz1\x00', 0x200002, 0x0) r11 = openat$cgroup_type(r10, &(0x7f0000000300), 0x2, 0x0) write$cgroup_type(r11, &(0x7f0000000280), 0x9) r12 = openat$cgroup_procs(r10, &(0x7f00000002c0)='cgroup.threads\x00', 0x2, 0x0) write$cgroup_pid(r12, &(0x7f0000000c40), 0x12) r13 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r14 = openat$cgroup_ro(r13, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) write$cgroup_int(r14, &(0x7f0000000200)=0x1, 0x12) 19m11.255675867s ago: executing program 4 (id=173): r0 = socket(0x2a, 0x2, 0x0) ioctl$SIOCSIFMTU(r0, 0x541b, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x50, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mremap(&(0x7f000054e000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f000022c000/0x3000)=nil) r3 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x0) ioctl$SG_IO(r3, 0x2285, &(0x7f00000033c0)={0x53, 0x0, 0x8a, 0xfa, @scatter={0x0, 0x0, 0x0}, &(0x7f0000001200)="000000000000f00cce65ecf1d5f5b6ba14c3fd07970f1df0fe9b07b4732b28468712d34340ac59660fe1af6196d88720970262b765f618142cb7c67d9f0ffb60d22ef237cf28f20eca87c8a69e4ecbd142b9a9e1a6c3bec1587ff1bc19fc59c0f7e98277e52791c8e86d284442b64c5ce9a73fc85f92e4c8a3970584bae3f37bb2fde86d122e6e762fe3", &(0x7f00000001c0)=""/4095, 0x0, 0x0, 0x800000, 0x0}) r4 = bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x3, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x15, r4, 0x8, 0x0, 0xff9e, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xfffffffffffffedb, 0x0, 0x0, 0x10, 0x4}, 0x94) io_uring_enter(0xffffffffffffffff, 0xeb6, 0x26f7, 0x1c, &(0x7f0000000100)={[0x1]}, 0x8) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x4, 0x16, &(0x7f0000000180)=ANY=[@ANYBLOB="611230000000000061134c0000000000bf2000000000000015000200071b1750bd030100000000009500000000000000bc26080000000000bf67000000000000070300000fff0700670200000300000016060a000ee600f0bf050000000000000f650000000000006507f4ff02000000070700004c0040001f75000000000000bf54000000000000070500000300f9ffad430100000000009500000000000000050000000000000095000000000000004d9bd591d568253e9988431ec068e3a82983d58719d72183f2cb7f43dd55788be820b236dcb695dbfd737cbf719506d2d6b05fe7030586"], &(0x7f0000000100)='GPL\x00'}, 0x48) socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$MRT6_INIT(0xffffffffffffffff, 0x29, 0xc8, &(0x7f0000000340), 0x4) r5 = syz_open_procfs(0x0, &(0x7f0000000000)='net/fib_trie\x00') mmap$xdp(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x0, 0x11, r5, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup\x00', 0x0, 0x0) getdents64(r6, &(0x7f0000001f00)=""/4093, 0xffd) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="4800000000370400000000fdffffff00000000", @ANYRES32, @ANYBLOB="0b32050000000000280012800e0001006970366772657461700000001400028008000400eb720000060010004e230000"], 0x48}, 0x1, 0x0, 0x0, 0x48800}, 0x4000010) io_uring_setup(0x37ae, &(0x7f00000003c0)={0x0, 0x800000, 0x0, 0x2, 0x22a}) 19m6.648454859s ago: executing program 4 (id=176): r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_STRSET_GET(r1, 0x0, 0x4008800) syz_open_dev$sg(&(0x7f00000000c0), 0xffff, 0x200) io_setup(0x3, &(0x7f0000000180)) socket$kcm(0xa, 0x3, 0x87) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r2, 0x40505331, &(0x7f0000000300)={0x2000000}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f0000000040), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000380)={r0}, 0xecca26be8301cc4e) syz_open_dev$video4linux(&(0x7f00000001c0), 0x6d7ea7d4, 0x80) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x50) r4 = creat(&(0x7f00000001c0)='./file0\x00', 0x8) close(r4) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r5, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) write$FUSE_NOTIFY_INVAL_INODE(r4, &(0x7f00000000c0)={0x28, 0x2, 0x0, {0x1, 0x4, 0x9}}, 0x28) execve(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000740)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="0100000000000000000003000000400001802c0004001400010002000000ac14140f00000000000000001400020002000000ffffffff00000000000000000d0001007564703a73797a"], 0x54}}, 0x0) r8 = syz_io_uring_setup(0x3b6, &(0x7f0000000300)={0x0, 0x0, 0x800, 0xfffffffc, 0x30a}, &(0x7f0000000400), 0x0) io_uring_enter(r8, 0x47f9, 0x0, 0x0, 0x0, 0x0) 18m51.159054101s ago: executing program 35 (id=176): r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_STRSET_GET(r1, 0x0, 0x4008800) syz_open_dev$sg(&(0x7f00000000c0), 0xffff, 0x200) io_setup(0x3, &(0x7f0000000180)) socket$kcm(0xa, 0x3, 0x87) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r2, 0x40505331, &(0x7f0000000300)={0x2000000}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f0000000040), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000380)={r0}, 0xecca26be8301cc4e) syz_open_dev$video4linux(&(0x7f00000001c0), 0x6d7ea7d4, 0x80) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x50) r4 = creat(&(0x7f00000001c0)='./file0\x00', 0x8) close(r4) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r5, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) write$FUSE_NOTIFY_INVAL_INODE(r4, &(0x7f00000000c0)={0x28, 0x2, 0x0, {0x1, 0x4, 0x9}}, 0x28) execve(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000740)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="0100000000000000000003000000400001802c0004001400010002000000ac14140f00000000000000001400020002000000ffffffff00000000000000000d0001007564703a73797a"], 0x54}}, 0x0) r8 = syz_io_uring_setup(0x3b6, &(0x7f0000000300)={0x0, 0x0, 0x800, 0xfffffffc, 0x30a}, &(0x7f0000000400), 0x0) io_uring_enter(r8, 0x47f9, 0x0, 0x0, 0x0, 0x0) 9m50.971744533s ago: executing program 3 (id=387): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r0, 0x0, 0x0) ioctl$AUTOFS_IOC_READY(r0, 0x9360, 0x6) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r1, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f0000000300)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x5, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f00000001c0)='sched_switch\x00', r2}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbeef, 0x8031, 0xffffffffffffffff, 0x55779000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r6) r7 = socket$inet6_mptcp(0xa, 0x1, 0x106) madvise(&(0x7f0000304000/0x3000)=nil, 0x3000, 0x9) bind$inet6(r6, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x1}, 0x1c) listen(r7, 0x0) r8 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r8, &(0x7f0000000800)=[{{&(0x7f0000000140)={0xa, 0x4e20, 0x9, @remote, 0x5}, 0x1c, &(0x7f0000000480)=[{&(0x7f0000000300)="e2", 0x1}], 0x1}}, {{&(0x7f0000000580)={0xa, 0x4e24, 0x81, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0xb}, 0x1c, &(0x7f0000000600)=[{&(0x7f00000005c0)="6ab4", 0x2}], 0x1}}], 0x2, 0x14) shutdown(r8, 0x1) getsockopt$bt_hci(r8, 0x84, 0x85, &(0x7f0000002380)=""/4107, &(0x7f00000000c0)=0x1012) r9 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r9, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) r10 = accept(r6, 0x0, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(r10, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[], 0xfffffdef}, 0x1, 0x0, 0x0, 0xc000}, 0x10) 9m48.675814477s ago: executing program 3 (id=388): r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000040)=[@in={0x2, 0x4e21, @empty}], 0x10) sendmsg$inet_sctp(r0, &(0x7f0000000700)={&(0x7f0000000340)=@in={0x2, 0x4e21, @loopback}, 0x10, &(0x7f0000000080)=[{&(0x7f0000000000)='u', 0x1}], 0x1, 0x0, 0x0, 0x804c040}, 0x881) dup(r0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={0x0, r1, 0x0, 0xd}, 0x18) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @thr={&(0x7f00000005c0)="6144de9d1e3bde2f6310d84e651b89acecac569503d977ee47eebe32b8a8c5e93677e58d04908ab9fa25c2d0f9d79a7dea24a3b34a97226698c9bcfe857455baa449b6613a63579951142e3985f4ab36f9b3a16d50fd6a089121c7597d784e6446b86ab7141afc4ee1535c35d868d2f499b95de3b7863fa763f05132a4b648c4bc761e340a32c1761d66d7f988f1d3bd19a6540b23", &(0x7f0000000940)="665dad733597bd0055eb9165029b1652d08a61ef9b73a5f1af1168f924ec4353b8452a47b78d033e1cfe134d0cffcf1e8c57563ac61e6dff1e8c246d3102aa05e2c0741ec8ac109817c121f02067dc1e8389c8a740b59758b43f1061a096458b1287b921fc81aba387fc7f93beae73841c0af9e44dc2e32a75d7438b10264632241f458fe742cf4aaec2a7e7032bf54b433d3b96c67f4e25b1c4bb019df4bf862d13"}}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{}, {0x0, 0x989680}}, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, 0x0, 0x0) r4 = accept4(r3, 0x0, 0x0, 0x80800) sendmsg$TIPC_CMD_GET_BEARER_NAMES(r4, 0x0, 0x20040880) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, 0x0}, 0x10002) socket$kcm(0xa, 0x2, 0x73) r5 = socket(0x2b, 0x80801, 0x1) connect$inet6(r5, 0x0, 0x0) setsockopt$inet6_MCAST_MSFILTER(r5, 0x29, 0x30, &(0x7f0000000080)=ANY=[@ANYBLOB="09000000000000000a004e220000000400000000000000000000000000000001040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000a004e210000000300000000000000000000ffff7f000001090000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e3ffffff000000000000000000000000000000000000000000000000000000000a004e240000026c00000000000000000000ffff000000000100"/388], 0x310) pipe2(0x0, 0x0) r6 = socket$alg(0x26, 0x5, 0x0) bind$alg(r6, &(0x7f00000000c0)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) r7 = accept4(r6, 0x0, 0x0, 0x80000) setsockopt$ALG_SET_KEY(r6, 0x117, 0x1, &(0x7f0000000200)="ad00"/16, 0x10) sendmmsg$unix(r7, &(0x7f0000003dc0)=[{{&(0x7f0000000000)=@file={0x0, './file0\x00'}, 0x6e, 0x0, 0x0, 0x0, 0x0, 0x9802}}, {{&(0x7f0000000280)=@file={0x0, './file0\x00'}, 0x6e, 0x0}}], 0x299, 0x0) 9m46.739709452s ago: executing program 3 (id=390): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000200)={0x0, &(0x7f0000000180)}) fstatfs(0xffffffffffffffff, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r1, &(0x7f0000847fff)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0xa6) r2 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) write$UHID_CREATE2(r2, &(0x7f0000002700)=ANY=[@ANYRES64=r2], 0x1118) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000640)=ANY=[@ANYBLOB="140000001000010000000000000000000a00000a28000000000a030000000000000000000100000908000240000000060900010073797a300000000028000000000a030000000000000000000100000a0900010073797a3000000000080002"], 0x78}, 0x1, 0x0, 0x0, 0x890}, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000000)='net/snmp6\x00') openat$autofs(0xffffffffffffff9c, 0x0, 0x10000, 0x0) syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x4, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) ioctl$vim2m_VIDIOC_S_FMT(r3, 0xc0d05605, &(0x7f0000000340)={0x2, @sliced={0xa, [0x9, 0x8001, 0x400, 0x6, 0xa63, 0x1, 0x1, 0x8, 0xf42, 0x886d, 0x1ff, 0x7, 0x5, 0x6, 0x7, 0x3a, 0xcc, 0xffff, 0x4, 0xff, 0x0, 0x7, 0x0, 0x6, 0x3, 0x8000, 0x7, 0xe, 0x5, 0x8, 0xa6, 0xe0c, 0x8, 0x9, 0x310, 0x0, 0x1, 0x401, 0x7, 0x6, 0x6, 0x7fff, 0x3, 0xfffa, 0x7, 0x1660, 0x0, 0x2], 0x8}}) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000004340)=""/102376, 0x18fe8) r5 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000001c0)="89000000120081ae08060cdc030000017f03e3f70000000067e2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec00120c0001000b080c00bdad01409bbc7a46e39a8285dcdf12176679df069163ce955fed0009d78f0a947ee2b49e33538afaeb2713f450ebd010a20ff27fff", 0x89}], 0x1}, 0xff0f000000008080) getpid() sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000440)=@newtaction={0x18, 0x30, 0x53b, 0x0, 0x25dfdbfe, {0x9}, [{0x4}]}, 0x18}}, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000080)=ANY=[@ANYBLOB], 0x0) r6 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r6, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03003f000b05d25a806c8c6394f90324fc60100002000a000300053582c137153e3704020180fc0b09000c00", 0x33fe0}], 0x1}, 0x0) preadv(r3, &(0x7f00000000c0)=[{&(0x7f0000000600)=""/128, 0x80}], 0x1, 0x111, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r7, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002740)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000060a010400000000000000000a0000030900010035f03af23ccfff2a18000480140001800a0001006c696d6974000000040002800900020073797a3200000000050007402e0000001400000011a1010000000000000000000100000ada1dc83debf2672b96859901da2d149b62282935822f54802d7893c72182efbcda9d33209255ff33b0866ac7344bdecf69b5a3"], 0x74}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000000) read$FUSE(r3, &(0x7f00000006c0)={0x2020}, 0x2020) 9m44.402824268s ago: executing program 3 (id=392): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) r2 = epoll_create1(0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0xfffffdca, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000000d00)=@mangle={'mangle\x00', 0x64, 0x6, 0x600, 0x310, 0x1d0, 0x440, 0x310, 0x0, 0x530, 0x530, 0x530, 0x530, 0x530, 0x6, 0x0, {[{{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @ipv4={'\x00', '\xff\xff', @multicast2}, [], [], 'vcan0\x00', 'veth1_virt_wifi\x00'}, 0x0, 0xa8, 0xe8, 0x0, {0x7a00000000000000}}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00', 0x0, 0x9}}}, {{@ipv6={@mcast1, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'syzkaller1\x00', 'ip6tnl0\x00'}, 0x0, 0xa8, 0xe8}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv6=@private0}}}, {{@ipv6={@rand_addr=' \x01\x00', @mcast2, [], [0xffffff00], 'veth1_to_batadv\x00', 'vlan1\x00'}, 0x0, 0xf8, 0x140, 0x0, {}, [@common=@inet=@ecn={{0x28}}, @common=@ipv6header={{0x28}}]}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv6=@empty}}}, {{@ipv6={@private0, @mcast2, [], [], 'veth1_to_team\x00', 'veth0_macvtap\x00'}, 0x0, 0xf0, 0x130, 0x0, {}, [@common=@hbh={{0x48}, {0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe760]}}]}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv6=@remote}}}, {{@ipv6={@dev={0xfe, 0x80, '\x00', 0x2f}, @mcast2, [0xff, 0x0, 0x7f, 0xff], [0xffffffff, 0xff, 0xffffffff, 0xff], 'veth1_to_batadv\x00', 'rose0\x00', {}, {0xff}, 0x29, 0x4c, 0x2, 0x65}, 0x0, 0xa8, 0xf0}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @ipv4=@local}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x660) ioctl$TCSETSF(0xffffffffffffffff, 0x5404, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) timer_create(0x0, 0x0, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x9, &(0x7f0000000100)=0x40000002, 0xd) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) r5 = io_uring_setup(0x4bea, 0x0) io_uring_register$IORING_REGISTER_BUFFERS(r5, 0x0, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000040)={0x80000002}) ioctl$BINDER_THREAD_EXIT(r1, 0x40046208, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00'}) socket$netlink(0x10, 0x3, 0x9) socket$nl_netfilter(0x10, 0x3, 0xc) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[@ANYBLOB="4c00000002060108000034e40000000000000000050001000600000005000400000000000900020073797a3100000080050005000200000011000300686173683a69702c706f7274"], 0x4c}}, 0x2) 9m43.473960528s ago: executing program 3 (id=394): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x2, 0x0, @loopback, 0x7}, 0x1c) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) sendto$inet6(r0, &(0x7f0000000340)='G', 0x1, 0x20000045, &(0x7f00000001c0)={0xa, 0x2, 0x398, @empty}, 0x1c) openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0xfffffdca, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x9, 0x0, 0x0) r2 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0) ioctl$COMEDI_DEVCONFIG(r2, 0x40946400, 0x0) ioctl$COMEDI_DEVCONFIG(r2, 0x40946400, &(0x7f00000000c0)={'8255\x00', [0x4f27, 0x5, 0x2, 0x401, 0x1, 0xcc7, 0xfff, 0x5c952399, 0x5, 0x3ff, 0x802, 0x1600, 0x1, 0x1, 0x9, 0xe1cb, 0x6, 0x4, 0x3, 0x395, 0x80000089, 0xfffffffd, 0x0, 0xfffffff5, 0xffffeadb, 0x3, 0x3c, 0x8, 0x4, 0x8000000, 0xdffffffa]}) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000080)='westwood\x00', 0x9) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000000000000000ae04a875566896def68281f00000"], &(0x7f00000001c0)='GPL\x00'}, 0x80) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={r3, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r5, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r4, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r7, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r6, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r9, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r8, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000900), 0x100}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) 9m41.970080012s ago: executing program 3 (id=396): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) r1 = socket$inet_smc(0x2b, 0x1, 0x0) openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) syz_emit_ethernet(0x82, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x8) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r3 = syz_io_uring_setup(0x10d, &(0x7f0000000180)={0x0, 0x45888, 0x800, 0x0, 0x36c}, &(0x7f0000000040)=0x0, &(0x7f00000007c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x4004, @fd_index=0x3, 0x0, 0x0}) io_uring_enter(r3, 0x3516, 0x0, 0x0, 0x0, 0x0) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f00000000c0)='vlan0\x00', 0x10) setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000040)=0x1, 0x4) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000180)=0x1, 0x4) connect$inet(r1, &(0x7f0000000000)={0x2, 0x2, @remote}, 0x10) socket$inet_tcp(0x2, 0x1, 0x0) write$uinput_user_dev(r0, &(0x7f0000000100)={'syz0\x00', {}, 0x7, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x768], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101, 0x0, 0xfffffffd], [0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x10000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb]}, 0x45c) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0xe) openat(0xffffffffffffff9c, 0x0, 0x40, 0x1ff) execveat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0, 0x0, 0x0) mount$nfs(&(0x7f00000000c0)='@\x00', &(0x7f0000000040)='./file1\x00', 0x0, 0x28, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000001000)={&(0x7f0000000880)=@newtaction={0x1b4, 0x30, 0x216822a75a8bdd29, 0xffe4, 0x0, {}, [{0x1a0, 0x1, [@m_connmark={0x50, 0x2, 0x0, 0x0, {{0xd}, {0x20, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x3, 0xd, 0x5, 0x0, 0x3}, 0x8}}]}, {0x4}, {0xc}, {0xc}}}, @m_ct={0x44, 0x1, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18}]}, {0x4}, {0xc}, {0xc}}}, @m_sample={0x108, 0x15, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_SAMPLE_PSAMPLE_GROUP={0x8, 0x5, 0x5f32}, @TCA_SAMPLE_RATE={0x8, 0x3, 0xffffffff}, @TCA_SAMPLE_PSAMPLE_GROUP={0x8}, @TCA_SAMPLE_RATE={0x8, 0x3, 0x5}]}, {0xba, 0x6, "e5ba574f078fd6ef89ee60933e1212b5e25797e31510251b92124b8cf115c07807a230dcc9d9bfd1332da9478b29c1cf90af325513201d17cd113f2c963f5c28ead95d6906f54b185567f7f730c0dabcdd11d9cb591974e9d6906091ce30d6f4e8fdf773e84cf4daf928eac5a36fcd9823730b0e6192ce147836f75fa70e5e4d451e3205bf399d68cd3fb507f84e7ad5320d732dc5a7a629de94124e3e4db558f6d01136648d7d0c34ae345e8c6e8b4179cf97275770"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x2}}}}]}]}, 0x1b4}}, 0x0) r7 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000000000)="1700000014006b05c84e21000ab16d6e230675f8020000", 0x17}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) 9m25.275180995s ago: executing program 36 (id=396): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) r1 = socket$inet_smc(0x2b, 0x1, 0x0) openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) syz_emit_ethernet(0x82, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x8) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r3 = syz_io_uring_setup(0x10d, &(0x7f0000000180)={0x0, 0x45888, 0x800, 0x0, 0x36c}, &(0x7f0000000040)=0x0, &(0x7f00000007c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x4004, @fd_index=0x3, 0x0, 0x0}) io_uring_enter(r3, 0x3516, 0x0, 0x0, 0x0, 0x0) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f00000000c0)='vlan0\x00', 0x10) setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000040)=0x1, 0x4) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000180)=0x1, 0x4) connect$inet(r1, &(0x7f0000000000)={0x2, 0x2, @remote}, 0x10) socket$inet_tcp(0x2, 0x1, 0x0) write$uinput_user_dev(r0, &(0x7f0000000100)={'syz0\x00', {}, 0x7, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x768], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101, 0x0, 0xfffffffd], [0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x10000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb]}, 0x45c) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0xe) openat(0xffffffffffffff9c, 0x0, 0x40, 0x1ff) execveat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0, 0x0, 0x0) mount$nfs(&(0x7f00000000c0)='@\x00', &(0x7f0000000040)='./file1\x00', 0x0, 0x28, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000001000)={&(0x7f0000000880)=@newtaction={0x1b4, 0x30, 0x216822a75a8bdd29, 0xffe4, 0x0, {}, [{0x1a0, 0x1, [@m_connmark={0x50, 0x2, 0x0, 0x0, {{0xd}, {0x20, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x3, 0xd, 0x5, 0x0, 0x3}, 0x8}}]}, {0x4}, {0xc}, {0xc}}}, @m_ct={0x44, 0x1, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18}]}, {0x4}, {0xc}, {0xc}}}, @m_sample={0x108, 0x15, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_SAMPLE_PSAMPLE_GROUP={0x8, 0x5, 0x5f32}, @TCA_SAMPLE_RATE={0x8, 0x3, 0xffffffff}, @TCA_SAMPLE_PSAMPLE_GROUP={0x8}, @TCA_SAMPLE_RATE={0x8, 0x3, 0x5}]}, {0xba, 0x6, "e5ba574f078fd6ef89ee60933e1212b5e25797e31510251b92124b8cf115c07807a230dcc9d9bfd1332da9478b29c1cf90af325513201d17cd113f2c963f5c28ead95d6906f54b185567f7f730c0dabcdd11d9cb591974e9d6906091ce30d6f4e8fdf773e84cf4daf928eac5a36fcd9823730b0e6192ce147836f75fa70e5e4d451e3205bf399d68cd3fb507f84e7ad5320d732dc5a7a629de94124e3e4db558f6d01136648d7d0c34ae345e8c6e8b4179cf97275770"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x2}}}}]}]}, 0x1b4}}, 0x0) r7 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000000000)="1700000014006b05c84e21000ab16d6e230675f8020000", 0x17}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) 5m28.510426134s ago: executing program 5 (id=411): r0 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x80044940, &(0x7f0000001fc0)) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$IMADDTIMER(r0, 0x80044940, &(0x7f00000000c0)=0x14) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000002c0)='contention_begin\x00', r2, 0x0, 0xd}, 0x18) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r4 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r4) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, 0x0, 0x0) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5910fae9d6dcd3292ea54c7b6ef915d564c90c2", 0x17) r6 = accept4(r5, 0x0, 0x0, 0x0) sendmsg$nl_route_sched_retired(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000003100)=@newtaction={0xac0, 0x30, 0x800, 0x70bd2a, 0x25dfdbfc, {}, [{0x908, 0x1, [@m_ipt={0x274, 0x17, 0x0, 0x0, {{0x8}, {0x1bc, 0x2, 0x0, 0x1, [@TCA_IPT_TARG={0xf1, 0x6, {0x0, 'raw\x00', 0xe, 0xb3, "01df771ed4aa468d466490bb6d3a762752b0276450737133d354ea68c13a92efe99064741e04d8a20e194e30a60295d386bccda0f3007979597e6d03b954a8f914ba7b899f16c20d6d72edd9b6f52db88f3ba2e308499f6252662a51fa4b12868b58f75e27ec9103b8068b9b811e21bd2aa37e31ee1bb8e60ecb8155c8e19ea1c7fdbb9aa819059c61aa86c434a7c8da18ab573d7585bec9c1d4494956d182e7b35a526fd48659ab60beb8f339651c715661a36a876cce3dd7a98863f318caef99752c65346980"}}, @TCA_IPT_TABLE={0x24, 0x1, 'filter\x00'}, @TCA_IPT_HOOK={0x8, 0x2, 0x2}, @TCA_IPT_TABLE={0x24, 0x1, 'nat\x00'}, @TCA_IPT_TABLE={0x24, 0x1, 'mangle\x00'}, @TCA_IPT_TARG={0x3d, 0x6, {0xff3b, 'nat\x00', 0x6a, 0xfff, "ec6c358b1b02688c45d6891b8d39befc710e9c"}}, @TCA_IPT_INDEX={0x8, 0x3, 0x3ff}, @TCA_IPT_HOOK={0x8}]}, {0x91, 0x6, "33c428b1016ea0e62b6c917780554ec63a01a7382016d430730d1158d5469fa35f73d351ec348637d292a8c8699738644c304a14a0ca2e2c1422d9493ae361a88a61e76022334cc9eff1d9b15acf815ab9bf490688724773d3775e92953306fa3923bf0b3eb78ed4c4e43760fb360a12727f0000004fe4c5639595b4ce1706ccb85c9b5872240c31834297cfb0"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x1}}}}, @m_ipt={0x17c, 0x11, 0x0, 0x0, {{0x8}, {0xf0, 0x2, 0x0, 0x1, [@TCA_IPT_TARG={0xb5, 0x6, {0x7, 'mangle\x00', 0x4, 0x7, "852c07967e4bde8acbdebf709c7f67b435415e9fad5eed399218069c30b3db399d5bdbdffc09aa13d6aef79a3360cf4b7d5e8a92b817394560aba652eb4e4ec31470dd9b8becbf6cad6f3328aec2ac14541a30a5f89f2a6e60534a70c1deccc519f73984d6d2ae8b9fe17278f03e9f60e876c3b1fc1ef49873f24bd44137256bfd0a27e100d2162e3f7b17"}}, @TCA_IPT_HOOK={0x8, 0x2, 0x5}, @TCA_IPT_HOOK={0x8, 0x2, 0x2}, @TCA_IPT_TABLE={0x24, 0x1, 'nat\x00'}]}, {0x65, 0x6, "195244b493b69a109e343c48236a318aa067ccccb2000506f4e63246fce6276de9355aae82ccf014b3a51009a53cc597e7eec180e252560262d28e1340152b8389fc3dcbd1c60cbef5aa738a80d9582b7bf553a33208654c9b7b642eb56b8a9716"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2, 0x3}}}}, @m_ipt={0x154, 0x17, 0x0, 0x0, {{0x8}, {0xa4, 0x2, 0x0, 0x1, [@TCA_IPT_INDEX={0x8, 0x3, 0x7}, @TCA_IPT_TABLE={0x24, 0x1, 'security\x00'}, @TCA_IPT_TABLE={0x24, 0x1, 'raw\x00'}, @TCA_IPT_TABLE={0x24, 0x1, 'mangle\x00'}, @TCA_IPT_TABLE={0x24, 0x1, 'raw\x00'}, @TCA_IPT_INDEX={0x8, 0x3, 0x4}]}, {0x89, 0x6, "828d51b8c024f3ba75276291fd744bf1d83ac94c40f59c2d7aabe5cffe85cb1235f3e723c7a0ca6f1a15a0e38afac0bc7115796816162cbc6d09aea501ff36a46772ec7a3aa4d7c60363ff8f0eeda2f3eb8c435fb1d254244779da6c44c5dc30ed21a60df465ec395bc4d898dc7104dc47d809383d1d5431371c66f76842e2571bf73ce597"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2, 0x1}}}}, @m_ipt={0x10c, 0x12, 0x0, 0x0, {{0x8}, {0x70, 0x2, 0x0, 0x1, [@TCA_IPT_HOOK={0x8, 0x2, 0x1}, @TCA_IPT_TARG={0x62, 0x6, {0x3, 'security\x00', 0x84, 0x8, "cf8102ab12c6b2198a413eaa65607ab7ca51ab206bef3fe70b20aa2e7aacfa341b2d9158773430366e3a48eb70679ab8b9759ebcd3b26367"}}]}, {0x75, 0x6, "1d4af027bf39e92f2bc3b16061477612108c4de6dbb9dbc37f978e20a11849888f1cfa0d69961cc5b133c25b0a606d867918fd28cefd9936cea3c502ba83dbc878d09708660761105b2cb89c15f4eb2ff9ca07aba60aef01aab6097fa30bc52f5c31cbba441df32848abb9344a809a2a4c"}, {0xc}, {0xc, 0x8, {0x2, 0x1}}}}, @m_ipt={0x134, 0x11, 0x0, 0x0, {{0x8}, {0xd8, 0x2, 0x0, 0x1, [@TCA_IPT_TARG={0xd4, 0x6, {0x2, 'mangle\x00', 0x1, 0x1, "26b28bee405c084d7d3004660f6902208128531e54ab5a1819783607be3e2e463fc401b2d641a72c11f6aea69efbc1dac1e8f34f762cbc8ee0231ffeebcb773de1e20df7f65c7029200a9570577fe540733523b10491dc5fda6c0091603360fb1b6019648c7b5ef50f8741b6670963cc5d8533f50c4a2cfbeda3e0ed5070ab41e44997bdda4c34c11413cb846041ef4060b9cb71e527a7dd8e4efb7877f6f37b7cd8648d2d22911f9fbf"}}]}, {0x35, 0x6, "e7ba22f1ebc93a7960461c2acdaf1da6af842571f14f3b0700806b225899f9ba581b6cc401693affa591693a24cad555ae"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x2}}}}, @m_ipt={0x64, 0x20, 0x0, 0x0, {{0x8}, {0x28, 0x2, 0x0, 0x1, [@TCA_IPT_TABLE={0x24, 0x1, 'raw\x00'}]}, {0x15, 0x6, "a0f801aae36e077609a01908bc70dd5a7c"}, {0xc}, {0xc, 0x8, {0x2, 0x2}}}}, @m_ipt={0x11c, 0x20, 0x0, 0x0, {{0x8}, {0x6c, 0x2, 0x0, 0x1, [@TCA_IPT_TARG={0x55, 0x6, {0xfffa, 'nat\x00', 0x4, 0x8, "b112d50939750fa56623826275793a59f694cdc8bda79320bfe1d4c8997abe43daace6790afb2937cfb2e0"}}, @TCA_IPT_INDEX={0x8, 0x3, 0x6}, @TCA_IPT_INDEX={0x8, 0x3, 0x6062ae06}]}, {0x89, 0x6, "080f497fef56763eb14339e04d8880b35d4fcb1f3ccd5757021fa31ef38a7d4c8fca4f32d5757fdee1a2aceaaeb6abdad810154a059435c356867b27c8df5015f90bffb81405bdefffef46fede1a8038897bb9fd967f32f04f15a8596894786759dc20093ddbffb2158f5c0591205638b11d518d459f3137f1349ab013b3b5732e45d6b45f"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1, 0x97dd299ab8dc81d}}}}]}, {0x44, 0x1, [@m_ipt={0x40, 0x3, 0x0, 0x0, {{0x8}, {0x4}, {0x15, 0x6, "e2ebd2e0185a4d308803e9306ec5d2b0e6"}, {0xc}, {0xc, 0x8, {0x1, 0x3}}}}]}, {0x160, 0x1, [@m_ipt={0xf8, 0x6, 0x0, 0x0, {{0x8}, {0x28, 0x2, 0x0, 0x1, [@TCA_IPT_TABLE={0x24, 0x1, 'raw\x00'}]}, {0xa9, 0x6, "f5fcf6c5d281ac07391f35700b5786a70ee288211391aef6ec3378d7dd4a7c7445b8d3046ec059dd382a214deedda165d8663d562a47b1afb15557c5ceab4960c0442cc36ea1e65aa9650e7ac2c900fbb08da34b73b6b699463a47761daa69afd529deea7f5c97d3f950af23793139f4c0c3cea503bb9a23d2f7677c9bf150e350defce66ec3eccbaabb1e8f7fe7c49b9e91ecca113edb7f81da88a113c1065219a1d6062e"}, {0xc}, {0xc, 0x8, {0x3, 0x1}}}}, @m_ipt={0x64, 0x1a, 0x0, 0x0, {{0x8}, {0x4}, {0x3b, 0x6, "4b6275823d714c9413915317da89818cb9f96e8938cf5d91ef0ce403d55fc9bdc74a0a5b88653980ed0af5c857ee3a0361bfe072c3d9c7"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x0, 0x3}}}}]}]}, 0xac0}}, 0x4008800) recvmmsg$unix(r6, &(0x7f0000000e00), 0x0, 0x0, 0x0) sendmmsg$inet6(r6, &(0x7f0000004d00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x10) r7 = socket(0x40000000015, 0x5, 0x0) socket$rxrpc(0x21, 0x2, 0x2) r8 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25SDTEFACILITIES(r8, 0x8918, 0x0) r9 = socket$rxrpc(0x21, 0x2, 0x2) bind$rxrpc(r9, &(0x7f0000000080)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x4e20, 0x0, @dev={0xfe, 0x80, '\x00', 0x17}}}, 0x24) bind$inet6(r7, &(0x7f00000003c0)={0xa, 0x0, 0x0, @mcast1, 0xfffffffd}, 0x1c) sendto$inet(r1, 0x0, 0x0, 0x20000800, &(0x7f0000000080)={0x2, 0x0, @remote}, 0x10) readv(r0, &(0x7f0000000380)=[{&(0x7f0000000440)=""/162, 0xa2}], 0x1) 5m27.362978288s ago: executing program 5 (id=413): r0 = socket$nl_route(0x10, 0x3, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x3, 0x0, 0x0, &(0x7f0000000080)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x6}, 0x94) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'macvtap0\x00'}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x10) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000840)=@security={'security\x00', 0x4, 0x4, 0x448, 0xffffffff, 0x2a8, 0x1d0, 0x1d0, 0xffffffff, 0xffffffff, 0x378, 0x378, 0x378, 0xffffffff, 0x7fffffe, 0x0, {[{{@ipv6={@ipv4={'\x00', '\xff\xff', @remote}, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}, [0x0, 0xff000000, 0xffffffff, 0xffffffff], [0xff000000, 0xff000000, 0xffffff00, 0xff], 'dvmrp0\x00', 'vlan0\x00', {0xff}, {}, 0x2f, 0xb, 0x3, 0x18}, 0x0, 0xa8, 0x1d0}, @common=@unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0x2, 0x2, 'system_u:object_r:lib_t:s0\x00'}}}, {{@uncond, 0x0, 0xa8, 0xd8}, @common=@unspec=@CONNMARK={0x30}}, {{@ipv6={@private1, @local, [], [0x0, 0xffffff00], 'geneve1\x00', 'macvlan0\x00', {0xff}, {}, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xa8, 0xd0}, @common=@unspec=@CONNSECMARK={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4a8) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x4, &(0x7f00000006c0)=ANY=[@ANYBLOB="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"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x100a, &(0x7f0000001400)=""/4106, 0x0, 0x0, '\x00', 0x0, @xdp}, 0x94) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x50) munlockall() sendmsg$nl_route(r0, 0x0, 0x0) syz_io_uring_setup(0x239, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f0000000000), 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000009c0)={0x11, 0x3, &(0x7f0000000000)=@framed={{0xc3, 0xa, 0xa, 0xfe00, 0x40, 0x71, 0x10, 0x1a}}, &(0x7f0000000480)='syzkaller\x00', 0x6, 0x0, 0x0, 0x0, 0x48}, 0x94) 5m26.01170028s ago: executing program 5 (id=414): r0 = socket$can_j1939(0x1d, 0x2, 0x7) statx(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x0, 0x40, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0}) ioprio_set$uid(0x3, r1, 0x6000) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000340)={0x1d, r2, 0x0, {0x2, 0x0, 0x6}, 0xfe}, 0x18) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x400080, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, 0x0, 0x0) ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) syz_open_dev$sndctrl(&(0x7f0000001e00), 0x2, 0x40000) openat$dlm_plock(0xffffffffffffff9c, 0x0, 0x200a83, 0x0) socket$nl_route(0x10, 0x3, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r5 = syz_open_dev$sndmidi(&(0x7f0000000180), 0x2, 0x141101) r6 = dup(r5) write$6lowpan_enable(r6, &(0x7f0000000000)='0', 0xfffffd2c) r7 = syz_io_uring_setup(0x239, &(0x7f00000002c0)={0x0, 0xf2cf, 0x10100, 0x0, 0x0, 0x0, r6}, &(0x7f00000000c0)=0x0, &(0x7f0000000080)=0x0) syz_io_uring_submit(r8, r9, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd=r6, 0x0, 0x0, 0x0, {0x90c0}, 0x1}) io_uring_enter(r7, 0x2ded, 0x4000, 0x0, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r10 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup/syz1\x00', 0x200002, 0x0) r11 = openat$cgroup_type(r10, &(0x7f0000000300), 0x2, 0x0) write$cgroup_type(r11, &(0x7f0000000280), 0x9) r12 = openat$cgroup_procs(r10, &(0x7f00000002c0)='cgroup.threads\x00', 0x2, 0x0) write$cgroup_pid(r12, &(0x7f0000000c40), 0x12) r13 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r14 = openat$cgroup_ro(r13, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) write$cgroup_int(r14, &(0x7f0000000200)=0x1, 0x12) 5m23.544995568s ago: executing program 6 (id=26): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) mkdir(&(0x7f0000000040)='./file1\x00', 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x20c}}, 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000002700)=""/102392, 0x18ff8) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) r2 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x1, 0x4, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a000000095"], &(0x7f0000000100)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000000400)={0x50, 0x0, 0x0, {0x7, 0x2b, 0x2, 0x4840400, 0x40, 0x62, 0x2, 0x2, 0x0, 0x0, 0x10, 0x1}}, 0x50) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r2, 0x84, 0x22, &(0x7f0000000140)={0xf801, 0x2, 0x4, 0x2, 0x0}, &(0x7f0000000200)=0x10) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(r2, 0x84, 0xf, &(0x7f0000000240)={r4, @in6={{0xa, 0x4e24, 0x0, @dev={0xfe, 0x80, '\x00', 0x3a}, 0x6}}, 0x401, 0xd21, 0x5, 0x2, 0xd}, &(0x7f0000000380)=0x98) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000006c0)=ANY=[@ANYBLOB="88000000000101040000000000000000020000002c00018014000180080001007f00000108000200e00000020c000280050001000000000006000340000300002400028014000180080001000000000008000200ac14"], 0x88}}, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0xf, 0x0, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x34, &(0x7f00000000c0)=r3, 0x4) ioctl$DRM_IOCTL_MODE_GET_LEASE(0xffffffffffffffff, 0xc01064c8, 0x0) ioctl$DRM_IOCTL_MODE_GETFB(0xffffffffffffffff, 0xc01c64ad, &(0x7f0000000780)) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000340)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@xino_on}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f00000003c0)='./bus\x00') r6 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) openat$cgroup_ro(r6, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) getdents(r6, &(0x7f0000001fc0)=""/184, 0x20002078) 5m21.657499929s ago: executing program 5 (id=418): r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$sock_linger(r0, 0x1, 0x3c, &(0x7f0000000180)={0x200000000000001}, 0x8) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x80042, 0xff) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4008000) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) socket$inet6_mptcp(0xa, 0x1, 0x106) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4000080) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1b, 0x0, 0x0) syz_emit_ethernet(0x3e, &(0x7f0000000140)={@local, @multicast, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "2abe00", 0x8, 0x11, 0x0, @empty, @empty, {[], {0x0, 0x4e24, 0x8}}}}}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wlan1\x00'}) r3 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) ioctl$SG_NEXT_CMD_LEN(r3, 0x2283, &(0x7f0000000380)=0x3) r4 = fcntl$dupfd(r3, 0x0, r3) write$sndseq(r4, &(0x7f0000000140)=[{0x3, 0xd, 0x6, 0xf2, @time={0x23, 0x7}, {0x0, 0x1}, {}, @connect={{0xa, 0xff}, {0xdf, 0x4}}}, {0x6, 0x0, 0x1, 0x81, @tick=0x2, {0x8, 0x30}, {0x2}, @result={0x84, 0x800}}], 0x38) r5 = syz_open_dev$dri(0x0, 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GET_LEASE(r5, 0xc01064c8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)}) ioctl$DRM_IOCTL_MODE_GETPLANE(0xffffffffffffffff, 0xc02064b6, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000000)=[0x0]}) close(r1) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x8080, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000340)={'pimreg1\x00', 0x1}) r7 = socket$inet_sctp(0x2, 0x1, 0x84) mount$9p_fd(0x0, &(0x7f0000000000)='./file1\x00', &(0x7f0000000080), 0x8, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r7}}) openat$comedi(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/comedi4\x00', 0x42002, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000700)={0x14, 0x1, 0x1, 0x101, 0x0, 0x0, {0x2, 0x0, 0xa}}, 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x50) 5m17.157318277s ago: executing program 6 (id=420): syz_open_dev$vbi(&(0x7f0000000300), 0x3, 0x2) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040201, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) write$UHID_CREATE2(0xffffffffffffffff, &(0x7f0000000500)=ANY=[@ANYBLOB="0b00000073797a300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000073797a3000"/196], 0x119) writev(0xffffffffffffffff, &(0x7f00000002c0)=[{&(0x7f0000000040)='\b\x00\x00\x00', 0x4}], 0x1) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0xb, 0x59032, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x801) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_COPY(r2, 0xc028aa03, &(0x7f0000000100)={&(0x7f0000800000/0x800000)=nil, &(0x7f0000339000/0x1000)=nil, 0x800000}) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = openat$cgroup_ro(r3, &(0x7f0000000200)='blkio.bfq.avg_queue_size\x00', 0x275a, 0x0) write$cgroup_int(r4, 0x0, 0x0) r5 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000003c0)='freezer.state\x00', 0x0, 0x0) r6 = socket$netlink(0x10, 0x3, 0x14) sendfile(r6, r5, 0x0, 0x17) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) lremovexattr(&(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)=@known='system.posix_acl_default\x00') write$FUSE_STATX(r5, &(0x7f0000000540)={0x130, 0x0, 0x0, {0x2, 0x6, 0x0, '\x00', {0x2000, 0x5, 0x7, 0xc07, 0x0, 0x0, 0xc000, '\x00', 0x1, 0x3ff, 0x0, 0x6, {0x0, 0x1}, {0x4, 0x800}, {0x961, 0x6a5ad1ff}, {0xfffffffffffffffe}, 0x80000000, 0xdc, 0xe0, 0xa}}}, 0x130) sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000680)=ANY=[@ANYBLOB='\x00\x00\b\x00', @ANYRES16=r7, @ANYBLOB="050000000000000000002e00000008000300", @ANYRES32=0x0, @ANYBLOB="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"], 0x28}}, 0x0) 5m17.104893793s ago: executing program 5 (id=421): r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000880), 0x88000, 0x0) preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYRESOCT=r0, @ANYRESDEC=r0, @ANYRESDEC=r0, @ANYRES8=r0, @ANYRES32=r0, @ANYRES32, @ANYRESOCT=r0, @ANYRESDEC=r0, @ANYRES16=r0], 0x50) bpf$MAP_CREATE(0x0, 0x0, 0x0) pipe(&(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r3, &(0x7f0000000100)={0xa, 0x0, 0x0, @empty}, 0x1c) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x46, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) r5 = socket$kcm(0x1e, 0x2, 0x0) setsockopt$sock_attach_bpf(r5, 0x10f, 0x87, &(0x7f00000008c0), 0x43) socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000002c0)='contention_begin\x00', r4, 0x0, 0xd}, 0x18) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r6 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r6, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x8}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff, 0x2}, 0x0, 0x0) setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r3, 0x11a, 0x2, &(0x7f0000000000)=@gcm_128={{0x303}, "bd88818314ff7d84", "0b3ea924c47b25d7624cd362581725c7", "000400", "d5a1d50399459b68"}, 0x28) shutdown(r3, 0x0) sendfile(r2, r3, 0x0, 0x3) ioctl$TIOCL_GETKMSGREDIRECT(r0, 0x541c, &(0x7f0000000000)) bpf$TOKEN_CREATE(0x24, &(0x7f00000000c0)={0x0, r1}, 0x8) pipe2$watch_queue(&(0x7f0000000280), 0x80) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x11, 0x14, &(0x7f00000002c0)=ANY=[@ANYBLOB="1802000000000000000000000000000018010000786c6c2500000000070000007b1af8ff00000000bfa100000000000007010000f8ffffffb700000000000000b7030000000000fd850000000400000018110000", @ANYRES32=r1, @ANYBLOB="b4a957f49b156fa5934a50d3487d963919b17bb204c02cca299343b406a7498b839b4af34c5bf4f5b4c9978a16d88a47dcf66693aa35d6508e2aa5873d15212536c43090a8efeaa32ead87f52f827cc7dc1e7b7a2bae926c7429a7289464a794040dbb6f1e714bdb90"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000140)='vnet_skip_tx_trigger\x00', r7, 0x0, 0x203}, 0x18) 5m13.167223613s ago: executing program 5 (id=425): sched_setscheduler(0x0, 0x1, 0x0) sendmsg$NL80211_CMD_DEL_PMKSA(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000380)={&(0x7f0000000240)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="00c7b39cf30322b7d9", @ANYRES32=0x0, @ANYBLOB], 0x5c}}, 0x44004) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, &(0x7f0000000100)={0x0, 0x7}, 0x4) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x16, &(0x7f0000000000)=0x4, 0x4) r0 = syz_open_dev$vcsn(&(0x7f0000000b40), 0x1ff, 0x400) read$FUSE(r0, &(0x7f0000001c80)={0x2020}, 0x2020) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x0, 0x0) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_ACCT_NEW(r4, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000180)={0x38, 0x0, 0x7, 0x201, 0x0, 0x0, {0x1, 0x0, 0x8}, [@NFACCT_BYTES={0xc, 0x3, 0x1, 0x0, 0x8a}, @NFACCT_QUOTA={0xc, 0x6, 0x1, 0x0, 0x4}, @NFACCT_NAME={0x9, 0x1, 'syz0\x00'}]}, 0x38}, 0x1, 0x0, 0x0, 0x810}, 0x4004090) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r5, 0x8946, &(0x7f0000000340)={'netdevsim0\x00', &(0x7f0000000400)=@ethtool_flash={0x33, 0xea5, './file0\x00'}}) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0xa031, 0xffffffffffffffff, 0x0) r6 = syz_open_dev$dri(0x0, 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r6, 0xc04064a0, &(0x7f0000000200)={0x0, &(0x7f0000000140)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_SETCRTC(r6, 0xc06864a2, &(0x7f00000002c0)={0x0, 0x0, r7, 0x0, 0x80, 0x5, 0x9, 0x1, {0x9, 0xd6, 0x1c, 0xd, 0x5, 0x401, 0xfff5, 0xe, 0x0, 0x52, 0x8000, 0x7e9, 0x401, 0x9aa1, "cb630dab3a0338057401a192419598961f50dc45c87d55a52a28b8f01c0e0e7a"}}) remap_file_pages(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x15, 0xe, 0x0, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_reuseport, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="0600000004000000080000000800000000000000", @ANYRES32, @ANYBLOB="00000000000000000000000000000000000000006148e0021215b887739fe4369964e11f8ae25f214689e5a198100c3d24b0c3a7c20c9555baaad7ba0599c95b20296234be9a06e40636efdf14e3a82ccc14a53af9d5c615733dbd4f7ffa76e94778294ddd9972de0cdecca598d40d146809c7913d29d2da8da3107039593a1dc63de0c512ad64d097105900412d18d03a2cb4e3f0100f4ef063c6e761352d07a71f99cb7c9b45327ebe948d5859d260fa32e2", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0xe, 0xc, &(0x7f0000000000)=@framed={{}, [@ringbuf_output={{0x18, 0x5, 0x1, 0x0, r8}, {}, {0x3, 0x3, 0x3, 0xa, 0x5}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x32}}]}, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$UFFDIO_POISON(r0, 0xc020aa08, &(0x7f00000000c0)={{&(0x7f000099c000/0x14000)=nil, 0x14000}}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000200)={r9, 0xe0, &(0x7f0000001c80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff5f, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x22, 0x0, 0x8, 0x0, 0x0}}, 0x10) 5m12.151512421s ago: executing program 7 (id=79): socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0), 0x240, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0xf) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r5 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) r6 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/stat\x00', 0x0, 0x0) sendfile(r5, r6, 0x0, 0x4) ioctl$SNDCTL_DSP_POST(r6, 0x5008, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000540)='net/xfrm_stat\x00') ioctl$TCFLSH(r0, 0x400455c8, 0x4) r7 = openat$nullb(0xffffffffffffff9c, &(0x7f0000001000), 0x169802, 0x0) r8 = dup(r7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000006, 0x13, r8, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) 5m8.276132602s ago: executing program 7 (id=428): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0x14, 0x30, 0x1}, 0x14}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000002000)=ANY=[@ANYBLOB="4001000010003306000000000400000000000000000000000000000000000001fe8000"/53, @ANYRES32=0x0, @ANYRES32=0x0], 0x140}}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) openat$cuse(0xffffff9c, 0x0, 0x2, 0x0) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10138, 0x2, 0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) r3 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r5 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r5, 0x8914, 0x0) r6 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$inet(r6, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x4001, @local}, 0x10, 0x0}, 0x34004811) setsockopt$sock_attach_bpf(r6, 0x6, 0x25, &(0x7f0000000040), 0x4) sendmmsg(r6, &(0x7f0000002980), 0x0, 0x4000855) write$tun(r4, &(0x7f0000000080)=ANY=[@ANYBLOB="0800080002010900680000800900456f009100660000401190780a010102ac1414aa4f204e22007d9078c10200169c79cb22459ff50866ff829694a603d3c443eead4100af7b350c12fa15932138ee8f6a6d2afdde33d5a4298b32860f7d3d68030697e95d9cff97f976b3ac6d8c10e10601a959b4bf18b7d52cd3b5a4c19759c5e155c033fbf5a6b311de39eb228702b8bf55388a273db8f23105e37c"], 0x9f) ioctl$SCSI_IOCTL_SEND_COMMAND(r3, 0x1, &(0x7f0000000080)={0x0, 0x0, 0xa294}) symlink(&(0x7f0000000880)='.\x00', &(0x7f00000008c0)='./file0\x00') mount$nfs(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000080), 0x0, 0x0) ioctl$SG_SET_TIMEOUT(r3, 0x2201, 0x0) syz_clone(0x20304000, 0x0, 0x0, 0x0, 0x0, 0x0) 5m1.977787725s ago: executing program 7 (id=431): futex(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000000), 0x200141, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000009c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d000000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000000)='sched_switch\x00', r1, 0x0, 0xfff7fffffffffff5}, 0x18) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) r3 = syz_usb_connect$hid(0x2, 0x0, 0x0, 0x0) syz_usb_control_io(r3, 0x0, 0x0) syz_usb_control_io(r3, &(0x7f00000003c0)={0x18, &(0x7f00000000c0)=ANY=[@ANYBLOB='\x00\x00\b'], 0x0, 0x0, 0x0, 0x0}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000300)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r6 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r6, 0x6, 0x0, 0x0, 0x0) r7 = landlock_create_ruleset(&(0x7f0000000080)={0x9008, 0x0, 0x2}, 0x18, 0x0) landlock_restrict_self(r7, 0x0) r8 = fsmount(r6, 0x0, 0x0) r9 = openat$cgroup_procs(r8, &(0x7f0000000040)='cgroup.threads\x00', 0x2, 0x0) open_by_handle_at(r9, &(0x7f0000000100)=ANY=[@ANYBLOB="0c000000fe00010004"], 0x408100) r10 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r11 = syz_io_uring_setup(0xa0, &(0x7f00000002c0)={0x0, 0x105cc6, 0x1, 0x0, 0x207}, &(0x7f0000000040)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r12, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r12, r13, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r10, 0xc000000, &(0x7f0000000000)=[{&(0x7f0000001600)=""/4096, 0x1000}], 0x1, 0x12, 0x1}) io_uring_enter(r11, 0x847ba, 0x0, 0xe, 0x0, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000040)=0x2) 5m1.661608156s ago: executing program 37 (id=420): syz_open_dev$vbi(&(0x7f0000000300), 0x3, 0x2) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040201, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) write$UHID_CREATE2(0xffffffffffffffff, &(0x7f0000000500)=ANY=[@ANYBLOB="0b00000073797a300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000073797a3000"/196], 0x119) writev(0xffffffffffffffff, &(0x7f00000002c0)=[{&(0x7f0000000040)='\b\x00\x00\x00', 0x4}], 0x1) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0xb, 0x59032, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x801) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_COPY(r2, 0xc028aa03, &(0x7f0000000100)={&(0x7f0000800000/0x800000)=nil, &(0x7f0000339000/0x1000)=nil, 0x800000}) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = openat$cgroup_ro(r3, &(0x7f0000000200)='blkio.bfq.avg_queue_size\x00', 0x275a, 0x0) write$cgroup_int(r4, 0x0, 0x0) r5 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000003c0)='freezer.state\x00', 0x0, 0x0) r6 = socket$netlink(0x10, 0x3, 0x14) sendfile(r6, r5, 0x0, 0x17) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) lremovexattr(&(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)=@known='system.posix_acl_default\x00') write$FUSE_STATX(r5, &(0x7f0000000540)={0x130, 0x0, 0x0, {0x2, 0x6, 0x0, '\x00', {0x2000, 0x5, 0x7, 0xc07, 0x0, 0x0, 0xc000, '\x00', 0x1, 0x3ff, 0x0, 0x6, {0x0, 0x1}, {0x4, 0x800}, {0x961, 0x6a5ad1ff}, {0xfffffffffffffffe}, 0x80000000, 0xdc, 0xe0, 0xa}}}, 0x130) sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000680)=ANY=[@ANYBLOB='\x00\x00\b\x00', @ANYRES16=r7, @ANYBLOB="050000000000000000002e00000008000300", @ANYRES32=0x0, @ANYBLOB="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"], 0x28}}, 0x0) 4m58.345082539s ago: executing program 7 (id=435): r0 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$IMADDTIMER(r0, 0x80044940, &(0x7f00000000c0)=0x14) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000002c0)='contention_begin\x00', r1, 0x0, 0xd}, 0x18) move_pages(0x0, 0x1efe, &(0x7f0000000080), 0x0, &(0x7f0000000040), 0x0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x2041, 0x0) ioctl$TCSETAF(r2, 0x5408, &(0x7f0000000080)={0x49de, 0x0, 0x0, 0xbfff, 0x0, "ec28a144f13d7607"}) write$binfmt_aout(r2, &(0x7f00000000c0)=ANY=[], 0xff2e) ioctl$TCSETS(r2, 0x40045431, &(0x7f0000000dc0)={0x0, 0x0, 0x0, 0x0, 0x10, "0062ba5d8200"}) r3 = syz_open_pts(r2, 0x20800) dup3(r3, r2, 0x0) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000100)=0x44) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r4 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r4, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r5 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r5) r6 = socket$alg(0x26, 0x5, 0x0) bind$alg(r6, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(camellia)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r6, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5910fae9d6dcd3292ea54c7b6ef915d564c90c200", 0x18) r7 = accept4(r6, 0x0, 0x0, 0x0) sendmsg$nl_route_sched_retired(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000002640)=@newtaction={0x728, 0x30, 0x800, 0x70bd2a, 0x25dfdbfc, {}, [{0x520, 0x1, [@m_ipt={0x230, 0x17, 0x0, 0x0, {{0x8}, {0x174, 0x2, 0x0, 0x1, [@TCA_IPT_TARG={0xf1, 0x6, {0x0, 'raw\x00', 0xe, 0xb3, "01df771ed4aa468d466490bb6d3a762752b0276450737133d354ea68c13a92efe99064741e04d8a20e194e30a60295d386bccda0f3007979597e6d03b954a8f914ba7b899f16c20d6d72edd9b6f52db88f3ba2e308499f6252662a51fa4b12868b58f75e27ec9103b8068b9b811e21bd2aa37e31ee1bb8e60ecb8155c8e19ea1c7fdbb9aa819059c61aa86c434a7c8da18ab573d7585bec9c1d4494956d182e7b35a526fd48659ab60beb8f339651c715661a36a876cce3dd7a98863f318caef99752c65346980"}}, @TCA_IPT_TABLE={0x24, 0x1, 'filter\x00'}, @TCA_IPT_HOOK={0x8, 0x2, 0x2}, @TCA_IPT_TARG={0x3d, 0x6, {0xff3b, 'nat\x00', 0x6a, 0xfff, "ec6c358b1b02688c45d6891b8d39befc710e9c"}}, @TCA_IPT_INDEX={0x8, 0x3, 0x3ff}, @TCA_IPT_HOOK={0x8}]}, {0x95, 0x6, "33c428b1016ea0e62b6c917780554ec63a01a7382016d430730d1158d5469fa35f73d351ec348637d292a8c8699738644c304a14a0ca2e2c1422d9493ae361a88a61e76022334cc9eff1d9b15acf815ab9bf490688724773d3775e92953306fa3923bf0b3eb78ed4c4e43760fb360a12727f0000004fe4c5639595b4ce1706ccb85c9b5872240c31834297cfb06b7eaaa1"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x1}}}}, @m_ipt={0x90, 0x11, 0x0, 0x0, {{0x8}, {0x4}, {0x65, 0x6, "195244b493b69a109e343c48236a318aa067ccccb2000506f4e63246fce6276de9355aae82ccf014b3a51009a53cc597e7eec180e252560262d28e1340152b8389fc3dcbd1c60cbef5aa738a80d9582b7bf553a33208654c9b7b642eb56b8a9716"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2, 0x3}}}}, @m_ipt={0x110, 0x18, 0x0, 0x0, {{0x8}, {0x74, 0x2, 0x0, 0x1, [@TCA_IPT_HOOK={0x8, 0x2, 0x1}, @TCA_IPT_TARG={0x66, 0x6, {0x3, 'security\x00', 0x84, 0x8, "cf8102ab12c6b2198a413eaa65607ab7ca51ab206bef3fe70b20aa2e7aacfa341b2d9158773430366e3a48eb70679ab8b9759ebcd3b2636776df09c3"}}]}, {0x75, 0x6, "1d4af027bf39e92f2bc3b16061477612108c4de6dbb9dbc37f978e20a11849888f1cfa0d69961cc5b133c25b0a606d867918fd28cefd9936cea3c502ba83dbc878d09708660761105b2cb89c15f4eb2ff9ca07aba60aef01aab6097fa30bc52f5c31cbba441df32848abb9344a809a2a4c"}, {0xc}, {0xc, 0x8, {0x2, 0x1}}}}, @m_ipt={0x64, 0x20, 0x0, 0x0, {{0x8}, {0x28, 0x2, 0x0, 0x1, [@TCA_IPT_TABLE={0x24, 0x1, 'raw\x00'}]}, {0x15, 0x6, "a0f801aae36e077609a01908bc70dd5a7c"}, {0xc}, {0xc, 0x8, {0x2, 0x2}}}}, @m_ipt={0xe8, 0x20, 0x0, 0x0, {{0x8}, {0x6c, 0x2, 0x0, 0x1, [@TCA_IPT_TARG={0x55, 0x6, {0xfffa, 'nat\x00', 0x4, 0x8, "b112d50939750fa56623826275793a59f694cdc8bda79320bfe1d4c8997abe43daace6790afb2937cfb2e0"}}, @TCA_IPT_INDEX={0x8, 0x3, 0x6}, @TCA_IPT_INDEX={0x8, 0x3, 0x6062ae06}]}, {0x55, 0x6, "080f497fef56763eb14339e04d8880b35d4fcb1f3ccd5757021fa31ef38a7d4c8fca4f32d5757fdee1a2aceaaeb6abdad810154a059435c356867b27c8df5015f90bffb81405bdefffef46fede1a803889"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1, 0x97dd299ab8dc81d}}}}]}, {0xa4, 0x1, [@m_ipt={0xa0, 0x3, 0x0, 0x0, {{0x8}, {0x64, 0x2, 0x0, 0x1, [@TCA_IPT_TARG={0x5d, 0x6, {0x8, 'mangle\x00', 0x80, 0xa62, "07625db7849301f3c760230789043c3c5de12e22cc8e1f5f20c97ba14d907f5a3eae7673340356d1e624a3f315c4d0b1439a38"}}]}, {0x15, 0x6, "e2ebd2e0185a4d308803e9306ec5d2b0e6"}, {0xc}, {0xc, 0x8, {0x1, 0x3}}}}]}, {0x150, 0x1, [@m_ipt={0xd8, 0x6, 0x0, 0x0, {{0x8}, {0xc, 0x2, 0x0, 0x1, [@TCA_IPT_HOOK={0x8, 0x2, 0x4}]}, {0xa8, 0x6, "f5fcf6c5d281ac07391f35700b5786a70ee288211391aef6ec3378d7dd4a7c7445b8d3046ec059dd382a214deedda165d8663d562a47b1afb15557c5ceab4960c0442cc36ea1e65aa9650e7ac2c900fbb08da34b73b6b699463a47761daa69afd529deea7f5c97d3f950af23793139f4c0c3cea503bb9a23d2f7677c9bf150e350defce66ec3eccbaabb1e8f7fe7c49b9e91ecca113edb7f81da88a113c1065219a1d606"}, {0xc}, {0xc, 0x8, {0x3, 0x1}}}}, @m_ipt={0x74, 0x1a, 0x0, 0x0, {{0x8}, {0x4}, {0x4b, 0x6, "4b6275823d714c9413915317da89818ccff96e8938cf0100000000000000c9bdc74a0a5b7f653980ed0af5c857ee3a0361bfe072c3d9c7043b1d027446cc8454c51cbd25fb61c2"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x0, 0x3}}}}]}]}, 0x728}}, 0x4008800) recvmmsg$unix(r7, &(0x7f0000000e00)=[{{0x0, 0x0, &(0x7f0000000700)=[{&(0x7f00000015c0)=""/4096, 0x1000}], 0x1}}], 0x1, 0x0, 0x0) sendmmsg$inet6(r7, &(0x7f0000004d00)=[{{0x0, 0x0, &(0x7f0000002600)=[{&(0x7f0000000380)="34f21e", 0x3}], 0x1}}], 0x1, 0x10) socket(0x40000000015, 0x5, 0x0) socket$rxrpc(0x21, 0x2, 0x2) syz_init_net_socket$x25(0x9, 0x5, 0x0) 4m57.494027272s ago: executing program 38 (id=425): sched_setscheduler(0x0, 0x1, 0x0) sendmsg$NL80211_CMD_DEL_PMKSA(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000380)={&(0x7f0000000240)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="00c7b39cf30322b7d9", @ANYRES32=0x0, @ANYBLOB], 0x5c}}, 0x44004) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, &(0x7f0000000100)={0x0, 0x7}, 0x4) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x16, &(0x7f0000000000)=0x4, 0x4) r0 = syz_open_dev$vcsn(&(0x7f0000000b40), 0x1ff, 0x400) read$FUSE(r0, &(0x7f0000001c80)={0x2020}, 0x2020) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x0, 0x0) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_ACCT_NEW(r4, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000180)={0x38, 0x0, 0x7, 0x201, 0x0, 0x0, {0x1, 0x0, 0x8}, [@NFACCT_BYTES={0xc, 0x3, 0x1, 0x0, 0x8a}, @NFACCT_QUOTA={0xc, 0x6, 0x1, 0x0, 0x4}, @NFACCT_NAME={0x9, 0x1, 'syz0\x00'}]}, 0x38}, 0x1, 0x0, 0x0, 0x810}, 0x4004090) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r5, 0x8946, &(0x7f0000000340)={'netdevsim0\x00', &(0x7f0000000400)=@ethtool_flash={0x33, 0xea5, './file0\x00'}}) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0xa031, 0xffffffffffffffff, 0x0) r6 = syz_open_dev$dri(0x0, 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r6, 0xc04064a0, &(0x7f0000000200)={0x0, &(0x7f0000000140)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_SETCRTC(r6, 0xc06864a2, &(0x7f00000002c0)={0x0, 0x0, r7, 0x0, 0x80, 0x5, 0x9, 0x1, {0x9, 0xd6, 0x1c, 0xd, 0x5, 0x401, 0xfff5, 0xe, 0x0, 0x52, 0x8000, 0x7e9, 0x401, 0x9aa1, "cb630dab3a0338057401a192419598961f50dc45c87d55a52a28b8f01c0e0e7a"}}) remap_file_pages(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x15, 0xe, 0x0, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_reuseport, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="0600000004000000080000000800000000000000", @ANYRES32, @ANYBLOB="00000000000000000000000000000000000000006148e0021215b887739fe4369964e11f8ae25f214689e5a198100c3d24b0c3a7c20c9555baaad7ba0599c95b20296234be9a06e40636efdf14e3a82ccc14a53af9d5c615733dbd4f7ffa76e94778294ddd9972de0cdecca598d40d146809c7913d29d2da8da3107039593a1dc63de0c512ad64d097105900412d18d03a2cb4e3f0100f4ef063c6e761352d07a71f99cb7c9b45327ebe948d5859d260fa32e2", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0xe, 0xc, &(0x7f0000000000)=@framed={{}, [@ringbuf_output={{0x18, 0x5, 0x1, 0x0, r8}, {}, {0x3, 0x3, 0x3, 0xa, 0x5}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x32}}]}, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$UFFDIO_POISON(r0, 0xc020aa08, &(0x7f00000000c0)={{&(0x7f000099c000/0x14000)=nil, 0x14000}}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000200)={r9, 0xe0, &(0x7f0000001c80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff5f, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x22, 0x0, 0x8, 0x0, 0x0}}, 0x10) 4m54.186823847s ago: executing program 7 (id=438): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x804}, 0x0) recvmmsg(r0, 0x0, 0x0, 0x40000103, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10138, 0x2, 0x0) r4 = syz_open_dev$video4linux(&(0x7f0000000080), 0x0, 0x0) ioctl$VIDIOC_QUERYMENU(r4, 0xc008561c, &(0x7f00000000c0)={0xf0f002, 0x2, @name="2a0bfa91762a67fc38beda01496988cd2bae0aa03dc5d7b06bef2d1e67d01e0c"}) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_clone3(&(0x7f00000002c0)={0x8040000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000000940)=ANY=[@ANYBLOB], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1a00000007"], 0x50) r5 = socket$inet6(0xa, 0x1, 0x0) r6 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r6, &(0x7f0000000000)={0x500, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="020300090a0000000000000004000000030006000000000002000000ac1414000000000000000000020001000000000000000002fffffffb030005000000000002"], 0x50}}, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r5, 0x29, 0x23, &(0x7f0000000180)={{{@in=@private, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@local, 0x0, 0x6c}, 0x0, @in6=@loopback, 0x0, 0x0, 0x0, 0x4}}, 0xe8) connect$inet6(r5, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@bridge_delvlan={0x24, 0x70, 0x1, 0x0, 0x0, {0x7, 0x0, 0x0, r9}, [@BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_INFO={0x8, 0x1, {0x4, 0x3}}}]}, 0x24}, 0x1, 0x0, 0x0, 0x40000050}, 0x0) 4m52.115425556s ago: executing program 7 (id=441): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r0, 0xc004743e, 0x110e22fff6) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) ioctl$TUNSETOFFLOAD(r1, 0x4004743d, 0x110e22fff6) syz_open_dev$evdev(&(0x7f0000000080), 0x6, 0x0) madvise(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x0) socket$xdp(0x2c, 0x3, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/seq/timer\x00', 0x0, 0x0) openat$comedi(0xffffffffffffff9c, &(0x7f0000000140)='/dev/comedi0\x00', 0x8080, 0x0) syz_emit_ethernet(0x0, 0x0, &(0x7f0000000080)={0x0, 0x1, [0x2e9, 0x567, 0x865, 0x254]}) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x6, 0x100000b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80202, 0x0) r4 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r4, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r5 = openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$6lowpan_control(r5, &(0x7f0000000040)='connect aa:aa:aa:aa:aa:10 1', 0x1b) syz_open_dev$sndpcmc(&(0x7f0000000000), 0x0, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x20000000000, 0xfffffffffffffffd, 0x0, 0x0, 0x1000001000, 0x49}, 0x0, &(0x7f00000002c0)={0x3ff, 0x7, 0xffffffffffffffff, 0x9, 0x0, 0xf, 0x80000006}, 0x0, 0x0) r6 = socket$rds(0x15, 0x5, 0x0) r7 = add_key$keyring(&(0x7f0000000340), 0x0, 0x0, 0x0, 0xffffffffffffffff) add_key(&(0x7f0000000240)='dns_resolver\x00', &(0x7f0000000080)={'syz', 0x1}, 0x0, 0x0, r7) keyctl$search(0xa, r7, &(0x7f00000000c0)='dns_resolver\x00', &(0x7f0000000140)={'syz', 0x1, 0x2e}, 0xffffffffffffffff) bind$rds(r6, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r6, &(0x7f0000000300)={&(0x7f0000000040)={0x2, 0x4e24, @local}, 0x10, 0x0, 0x0, &(0x7f00000006c0)=[@rdma_args={0x48, 0x114, 0x1, {{0x3, 0x2}, {0x0}, &(0x7f0000000340), 0x0, 0x60, 0xfffffffefefffffe}}], 0x48, 0x8004}, 0x0) close_range(r3, 0xffffffffffffffff, 0x0) read$FUSE(r2, &(0x7f0000002280)={0x2020}, 0x2020) 4m36.814808356s ago: executing program 39 (id=441): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r0, 0xc004743e, 0x110e22fff6) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) ioctl$TUNSETOFFLOAD(r1, 0x4004743d, 0x110e22fff6) syz_open_dev$evdev(&(0x7f0000000080), 0x6, 0x0) madvise(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x0) socket$xdp(0x2c, 0x3, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/seq/timer\x00', 0x0, 0x0) openat$comedi(0xffffffffffffff9c, &(0x7f0000000140)='/dev/comedi0\x00', 0x8080, 0x0) syz_emit_ethernet(0x0, 0x0, &(0x7f0000000080)={0x0, 0x1, [0x2e9, 0x567, 0x865, 0x254]}) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x6, 0x100000b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80202, 0x0) r4 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r4, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r5 = openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$6lowpan_control(r5, &(0x7f0000000040)='connect aa:aa:aa:aa:aa:10 1', 0x1b) syz_open_dev$sndpcmc(&(0x7f0000000000), 0x0, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x20000000000, 0xfffffffffffffffd, 0x0, 0x0, 0x1000001000, 0x49}, 0x0, &(0x7f00000002c0)={0x3ff, 0x7, 0xffffffffffffffff, 0x9, 0x0, 0xf, 0x80000006}, 0x0, 0x0) r6 = socket$rds(0x15, 0x5, 0x0) r7 = add_key$keyring(&(0x7f0000000340), 0x0, 0x0, 0x0, 0xffffffffffffffff) add_key(&(0x7f0000000240)='dns_resolver\x00', &(0x7f0000000080)={'syz', 0x1}, 0x0, 0x0, r7) keyctl$search(0xa, r7, &(0x7f00000000c0)='dns_resolver\x00', &(0x7f0000000140)={'syz', 0x1, 0x2e}, 0xffffffffffffffff) bind$rds(r6, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r6, &(0x7f0000000300)={&(0x7f0000000040)={0x2, 0x4e24, @local}, 0x10, 0x0, 0x0, &(0x7f00000006c0)=[@rdma_args={0x48, 0x114, 0x1, {{0x3, 0x2}, {0x0}, &(0x7f0000000340), 0x0, 0x60, 0xfffffffefefffffe}}], 0x48, 0x8004}, 0x0) close_range(r3, 0xffffffffffffffff, 0x0) read$FUSE(r2, &(0x7f0000002280)={0x2020}, 0x2020) 1m32.654073308s ago: executing program 8 (id=561): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000280)={0x2, 0x0, @local}, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x100, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r4 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$PTP_EXTTS_REQUEST2(r4, 0xc0403d11, 0x0) r5 = socket$inet(0xa, 0x801, 0x84) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_INITMSG(r6, 0x84, 0x2, &(0x7f0000000080), 0x8) r7 = accept4(r5, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r7, 0x84, 0x22, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r7, 0x84, 0x7b, 0x0, 0x0) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='hugetlb.1GB.usage_in_bytes\x00', 0x275a, 0x0) fsopen(&(0x7f00000000c0)='bdev\x00', 0x1) write$binfmt_script(r8, &(0x7f00000004c0), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000a, 0x28011, r8, 0x0) r9 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x121003, 0x0) ioctl$FS_IOC_SETFLAGS(r9, 0x40081271, &(0x7f0000000980)=0x4000) mount(&(0x7f0000000140)=@nullb, &(0x7f0000000000)='./cgroup\x00', &(0x7f0000000040)='minix\x00', 0x208000, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) cachestat(r8, &(0x7f0000000040), 0x0, 0x0) sendmsg$TIPC_NL_NAME_TABLE_GET(r1, 0x0, 0x800) ioctl$KVM_PRE_FAULT_MEMORY(r8, 0xc040aed5, &(0x7f00000001c0)={0x1dfba408e49bac04, 0x4000}) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) 1m29.90927502s ago: executing program 8 (id=564): r0 = socket$inet6_icmp(0xa, 0x2, 0x3a) setsockopt$inet6_buf(r0, 0x29, 0x4, &(0x7f00000004c0)="9bb9bb65cedfbf4f1b49a037e8ca58a2a3932e4d8662c8d00fd82bac59985169f6e1472aee233478d2449763ccbb92a1ca69afe835a4faf947a62cf61afec25e4d29afbcaadd61deb97fcc2e978f2e3538ace7a2d13cebda74d7e89bbea78eddfde3f93869dab2ef89468e925441ad466992ef4de40a6447ada9db7bf0286dbea29f", 0x4d) ioctl$VIDIOC_S_AUDIO(0xffffffffffffffff, 0x40345622, &(0x7f00000001c0)={0x0, "9800003de8f644ad6c8a55930700", 0x3}) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x3, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0, r2}, 0x18) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) openat$iommufd(0xffffffffffffff9c, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=@updpolicy={0xfc, 0x19, 0x1, 0x0, 0x0, {{@in6=@rand_addr=' \x01\x00', @in=@local, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa9, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa00, 0x40800000000000, 0x800000000000000}}, [@tmpl={0x44, 0x5, [{{@in6=@private0={0xfc, 0x0, '\x00', 0x1}, 0x0, 0x3c}, 0x0, @in=@broadcast, 0x0, 0x0, 0x3}]}]}, 0xfc}}, 0x0) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000640)=@migrate={0xec, 0x21, 0x1, 0xfffffffc, 0x0, {{@in=@private=0xa010101, @in6=@private2, 0x0, 0x0, 0x0, 0x0, 0xa}, 0x100000}, [@migrate={0x9c, 0x11, [{@in6=@ipv4={'\x00', '\xff\xff', @local}, @in6=@mcast1, @in=@private=0xa010102, @in6=@private2, 0x3c, 0x0, 0x0, 0x0, 0x2, 0x2}, {@in6=@ipv4={'\x00', '\xff\xff', @multicast1}, @in6=@mcast1, @in=@private=0xa010102, @in=@loopback, 0x33, 0x1, 0x0, 0x3506, 0xa, 0x8}]}]}, 0xec}}, 0x0) r6 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_int(r6, 0x6, 0x19, &(0x7f00000001c0)=0x1, 0x4) mknod$loop(&(0x7f0000000140)='./file0\x00', 0x40, 0x0) execve(0x0, 0x0, 0x0) r7 = syz_open_dev$sndctrl(&(0x7f0000001ac0), 0x0, 0x0) r8 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_LOCK(r7, 0x40405514, &(0x7f0000000200)={0x9, 0x2, 0x80000000, 0x5, '\x00', 0x13}) ioctl$SNDRV_CTL_IOCTL_ELEM_UNLOCK(r8, 0xc1105511, &(0x7f0000000040)={0x9, 0x0, 0x40, 0x10000, 'syz1\x00', 0x4000000}) execve(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) execve(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000280)={[0x0]}, 0x0) 1m22.510177129s ago: executing program 8 (id=567): bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x50) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x6, 0x6, 0x0, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000b80)={r0, 0x2000012, 0x0, 0x0, &(0x7f0000000c40), 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xb}, 0x50) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0xfffffffffffffffe) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETOBJ(r2, 0x0, 0x24040808) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) openat$binder_debug(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) r4 = syz_open_dev$swradio(&(0x7f0000000a80), 0x0, 0x2) ioctl$VIDIOC_G_TUNER(r4, 0xc054561d, &(0x7f0000000ac0)={0x0, "12f7f538cc9ad9f769d66b3d1dd9cd911e9a080bd3ae2ae3ea00"}) getsockopt$bt_hci(r3, 0x84, 0x7f, 0x0, 0x0) clock_gettime(0x4, 0x0) clock_settime(0x0, &(0x7f0000000240)) syz_emit_vhci(0x0, 0x0) syz_open_procfs(0x0, 0x0) socket$unix(0x1, 0x5, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, 0x0) socket$packet(0x11, 0x2, 0x300) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r5, 0x84, 0x64, &(0x7f0000000140)=[@in6={0xa, 0x4e20, 0x0, @loopback}, @in={0x2, 0x4e20, @local}], 0x2c) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r5, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x10, &(0x7f0000000900)=[@in={0x2, 0x4e20, @loopback}]}, &(0x7f00000002c0)=0x10) 1m21.104460534s ago: executing program 8 (id=569): ioctl$KVM_CHECK_EXTENSION(0xffffffffffffffff, 0xae03, 0x26) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x4e20, @empty}], 0x10) r1 = syz_open_dev$vcsu(&(0x7f0000000140), 0x1, 0x10000) prlimit64(0x0, 0xe, &(0x7f0000000000)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000200)='/proc/sys/net/ipv4/tcp_syncookies\x00', 0x1, 0x0) io_uring_setup(0xf08, &(0x7f0000000780)={0x0, 0xfb6e, 0x38c1, 0x4, 0xf0}) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000000)={&(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f000000c000/0x1000)=nil, &(0x7f000001f000/0x1000)=nil, &(0x7f0000015000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f000000c000/0x4000)=nil, &(0x7f000001d000/0x3000)=nil, &(0x7f0000012000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0}, 0x68) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, 0x0) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@newqdisc={0x24, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, 0x0, {0xfff1}, {0xffff}, {0x0, 0x1}}}, 0x24}, 0x1, 0x0, 0x0, 0x80}, 0x4000080) sendfile(r3, 0xffffffffffffffff, &(0x7f0000002080)=0x64, 0x23b) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r4) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_DEL_KEY(r4, &(0x7f0000004340)={0x0, 0x0, &(0x7f0000004300)={&(0x7f00000011c0)={0x24, r5, 0x1, 0x70bd29, 0x25dfdbff, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_KEY_DEFAULT_TYPES={0x4}, @NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}]}, 0x24}, 0x1, 0x0, 0x0, 0x4c804}, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_REM(r1, 0x84, 0x65, 0x0, 0x0) r7 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r7, 0x8933, &(0x7f0000000200)={'vxcan1\x00', 0x0}) bind$can_j1939(r7, &(0x7f0000000000)={0x1d, r8}, 0x18) sendmsg$can_j1939(r7, &(0x7f00000002c0)={&(0x7f00000000c0)={0x1d, 0x0, 0x2, {0x0, 0x409ee07df186b7eb}}, 0x18, &(0x7f00000004c0)={0x0}, 0x1, 0x0, 0x0, 0x4004044}, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000040)=[@in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}]}, &(0x7f0000000100)=0x10) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x85, &(0x7f0000000240)={0x0, @in={{0x2, 0x0, @empty}}, 0xff, 0x3}, 0x90) r9 = userfaultfd(0x80801) ioctl$UFFDIO_API(r9, 0xc018aa3f, &(0x7f00000000c0)) 1m17.324425457s ago: executing program 8 (id=571): pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x4, 0x0, &(0x7f0000000040)) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x11, 0x8, &(0x7f0000005c00)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) close(r0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) pipe(&(0x7f0000000000)) r2 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) read$FUSE(r2, &(0x7f0000002400)={0x2020}, 0x2020) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) socket$inet6_mptcp(0xa, 0x1, 0x106) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r3}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x102}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r7 = syz_open_dev$radio(&(0x7f00000000c0), 0x0, 0x2) preadv2(r7, &(0x7f0000000440)=[{&(0x7f0000000700)=""/4096, 0x1000}], 0x1, 0x0, 0x0, 0x0) r8 = signalfd(0xffffffffffffffff, &(0x7f00000001c0), 0x8) mkdir(&(0x7f0000000140)='./control\x00', 0x5) close(r8) r9 = inotify_init1(0x800) fcntl$setown(r8, 0x8, 0x0) inotify_add_watch(r9, &(0x7f0000000180)='./control\x00', 0xa4000960) rmdir(&(0x7f0000000100)='./control\x00') 1m15.45635973s ago: executing program 8 (id=573): syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0) ioctl$TCFLSH(0xffffffffffffffff, 0x540b, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'vcan0\x00'}) r2 = socket(0x1, 0x803, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[@ANYBLOB="500000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="7fff0000000000002800128009000100766c616e000000001800028006000100340200000c0002001f0000001e00000008000500", @ANYRES32=r3], 0x50}}, 0x0) socket$phonet_pipe(0x23, 0x5, 0x2) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x1, 0x803, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001880)=ANY=[@ANYBLOB="500000001000210400000000fedbdf2500000000", @ANYRES32=0x0, @ANYBLOB="adffa888e16000002800128009000100766c616e00000000180002800c0002000e0000000a000000060001000004000008000500", @ANYRES32=r7], 0x50}}, 0x2) bind$l2tp(0xffffffffffffffff, 0x0, 0x0) syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'veth1_to_hsr\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000004c00)=@newtfilter={0x24, 0x11, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x74, r8}}, 0x24}, 0x1, 0xf0ffffffffffff}, 0x0) r9 = socket$vsock_stream(0x28, 0x1, 0x0) ioctl$F2FS_IOC_GARBAGE_COLLECT(r9, 0x4004f506, &(0x7f0000000080)=0x1) socket(0x10, 0x3, 0x0) r10 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000000)={'macvlan0\x00'}) r11 = syz_open_dev$tty1(0xc, 0x4, 0x1) r12 = signalfd4(0xffffffffffffffff, &(0x7f0000000140), 0x8, 0x0) ppoll(&(0x7f00000000c0)=[{r12, 0x747}, {r12, 0x6160}], 0x2, 0x0, 0x0, 0x0) signalfd4(r12, &(0x7f0000000340)={[0x1]}, 0x8, 0x80800) fsopen(&(0x7f00000001c0)='reiserfs\x00', 0x0) dup(r11) 59.908407526s ago: executing program 40 (id=573): syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0) ioctl$TCFLSH(0xffffffffffffffff, 0x540b, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'vcan0\x00'}) r2 = socket(0x1, 0x803, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[@ANYBLOB="500000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="7fff0000000000002800128009000100766c616e000000001800028006000100340200000c0002001f0000001e00000008000500", @ANYRES32=r3], 0x50}}, 0x0) socket$phonet_pipe(0x23, 0x5, 0x2) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x1, 0x803, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001880)=ANY=[@ANYBLOB="500000001000210400000000fedbdf2500000000", @ANYRES32=0x0, @ANYBLOB="adffa888e16000002800128009000100766c616e00000000180002800c0002000e0000000a000000060001000004000008000500", @ANYRES32=r7], 0x50}}, 0x2) bind$l2tp(0xffffffffffffffff, 0x0, 0x0) syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'veth1_to_hsr\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000004c00)=@newtfilter={0x24, 0x11, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x74, r8}}, 0x24}, 0x1, 0xf0ffffffffffff}, 0x0) r9 = socket$vsock_stream(0x28, 0x1, 0x0) ioctl$F2FS_IOC_GARBAGE_COLLECT(r9, 0x4004f506, &(0x7f0000000080)=0x1) socket(0x10, 0x3, 0x0) r10 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000000)={'macvlan0\x00'}) r11 = syz_open_dev$tty1(0xc, 0x4, 0x1) r12 = signalfd4(0xffffffffffffffff, &(0x7f0000000140), 0x8, 0x0) ppoll(&(0x7f00000000c0)=[{r12, 0x747}, {r12, 0x6160}], 0x2, 0x0, 0x0, 0x0) signalfd4(r12, &(0x7f0000000340)={[0x1]}, 0x8, 0x80800) fsopen(&(0x7f00000001c0)='reiserfs\x00', 0x0) dup(r11) 18.173542076s ago: executing program 9 (id=603): socket$kcm(0x10, 0x2, 0x0) creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) socket$nl_xfrm(0x10, 0x3, 0x6) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000002000)=""/102400, 0x19000) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$TCFLSH(0xffffffffffffffff, 0x400455c8, 0x1) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000400), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000440)={'batadv0\x00', 0x0}) r4 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_ERR_FILTER(r4, 0x65, 0x2, &(0x7f0000000400)=0x2, 0x4) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, 0x0) bind$can_raw(r4, &(0x7f0000000480), 0x10) setsockopt$CAN_RAW_FILTER(r4, 0x65, 0x1, &(0x7f0000000000)=[{{0x4, 0x0, 0x1, 0x1}, {0x2, 0x0, 0x1, 0x1}}, {{0x4, 0x1, 0x1}, {0x1, 0x1}}], 0x10) close(r4) sendmsg$BATADV_CMD_SET_MESH(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)={0x24, r2, 0x1, 0x70bd28, 0x1, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}]}, 0x24}}, 0x80) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r5, 0x8933, &(0x7f0000000140)={'batadv0\x00', 0x0}) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=@newtfilter={0x24, 0x11, 0x1, 0x691522eb, 0x0, {0x0, 0x0, 0x74, r6, {0x10, 0x4}, {}, {0x5}}}, 0x24}, 0x1, 0xf0ffffffffffff}, 0x0) r8 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) bind$bt_l2cap(r8, &(0x7f0000000000)={0x1f, 0x0, @any, 0x4, 0x1}, 0xe) r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="d9620bb35df5a66a86e792bb95c26b1d77ca91a98aee8188776186a5e1b4ea4c95bfa044c6d0a0b0825516bbb9d3927a42b09c8a27765673f4f074"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x78, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f00000000c0)='spmi_cmd\x00', r9, 0x0, 0xfffffffffffffffe}, 0x18) syslog(0x9, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) 13.505259708s ago: executing program 9 (id=604): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb4c, 0x9, 0x6, 0x0, 0x3}, 0x0) r2 = openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) r3 = syz_open_dev$tty1(0xc, 0x4, 0x4) ioctl$GIO_SCRNMAP(r3, 0x4b40, &(0x7f00000001c0)=""/40) r4 = socket$kcm(0x10, 0x2, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@newtaction={0x48, 0x30, 0x53b, 0x0, 0x0, {0x9}, [{0x34, 0x1, [@m_sample={0x30, 0x1, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc}, {0xc, 0x4, {0x3}}}}]}]}, 0x48}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000140)=ANY=[@ANYRESOCT=r3, @ANYRES32=0x0, @ANYBLOB="20000100", @ANYRES32=0x0, @ANYBLOB="01000300ac1e000100000000000086dd0000"], 0x38}, 0x1, 0x0, 0x0, 0x44}, 0x0) sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03003f000b05d25a806c8c6394f90324fc60100002000a000300053582c137153e3704020180fc0b09000c00", 0x33fe0}], 0x1}, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, 0x0, 0x0) r5 = syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001100000000904000003fe03010009cd8d1f000200000009050502000000001009058b1e20"], 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x0) r7 = openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) mkdir(&(0x7f00000020c0)='./file0\x00', 0x0) ioctl$VHOST_SET_VRING_BASE(r7, 0xaf01, 0x0) eventfd(0x0) syz_usb_control_io(r5, 0x0, &(0x7f0000000300)={0x84, &(0x7f0000000100)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r8 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$FS_IOC_GETVERSION(r8, 0xc0145b0e, &(0x7f0000000040)) syz_usb_disconnect(r5) write$RDMA_USER_CM_CMD_BIND_IP(r2, &(0x7f0000000040)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e24, 0x0, @remote, 0xf}}}, 0x30) write$RDMA_USER_CM_CMD_RESOLVE_IP(r2, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(0xffffffffffffffff, 0xc0a85320, &(0x7f00000003c0)={{0x80}, 'port0\x00', 0x7e, 0xe1c07, 0x6, 0x0, 0x100000, 0x0, 0x0, 0x0, 0x0, 0x1}) syz_open_procfs$pagemap(0x0, &(0x7f00000002c0)) 9.791679517s ago: executing program 9 (id=605): r0 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'syzkaller0\x00', 0x0}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000800000001", @ANYBLOB], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r5, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0xa458, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r6}, 0x18) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x129, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {0xe, 0x3}, {}, {0x5, 0xd}}}, 0x24}}, 0x40004) r7 = memfd_create(&(0x7f00000009c0)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf#2\x99\x1e\xa1`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\f<\x8f\xc1\x99\x89r\xe1?\xbdu\x98\xc3\xf8\xd2Q#\xc6g\xa0\x85\xd6G\x85\x11X\x8d,\x02\xd45\xb8\xca\x97\x9d\xcb\x1e\x80\xd6\xd5>N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9b5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec\x8aog\x87BR\x9d\xad\xd4FcB\xda\x95\xc3\xdd\x9d\x8f\x1a\xce\x18\x80\"j\xe1\xba\x1e\x97uX\xccv\xd6\vcz\x92A^\xbc\xceF\\\xb0:\xaf\xc5~\xbcJ e\r\x88c\x9d\xb92\xb6i4zq\xb3c\x0f\xb2t\x93\xf2E6b\xfa\xcdJ5\xe3W]`4\xd8D\x05\v\xfc)\xca\xedQ\xd0]Ot\'\xc2tDF\xf9\xa7\xb5(\x83\xa5\x0f\x1d\x1d\x06Dg\x13>\x19\xe85#\aaT\x89=\x104\xd5\x85l\x96\x91\xea\x172P\xb3:\xadZ\xbc\xbe\x00\xf0\x14\x96\xd9M\xd7\x88QZs\xb2\xe1+$jfQodH\x05/y`~7\x16\x02\x00(v\xe6`\"6\xfcgC\xb5\xf0\x13.zj\xc5bj+@\x00\x00\x00\x00\x00\x00\x00.\xd4`=z\xd1n\x8d\x8f\xa5hS\x8e[\xb3\xa3\x87\xb9\xe2_Z\x11\xef\xc2]V\xf3\x03\x94\xb9\xe1\xa68\x8d\\\xe5\xef\xacpM\xf0\xa6\x04\x10\xb7\xc0t\x83\\\xf7\x12k\x9f\x10\xd5Z\x19\xc1\xc1\x80\\o\x97\xce=U\xdd\xaa\x1b\x05\x14\x13\xa6\xbd#\xde\x04\xe6$\xec$3\xf6\x97\xc6\xeaSL\xb7A72M\x88k@\xe5\xa3\n&\x1exQ-2p\xd62\'\xec\x0f\x13;I\x95fE_\r\xe7\t!A\x05\xe4\x8f\x9e0\xf8/T\x18\xf7\xa1\x9f\xde1\xd5\x80<\xf5\b\xa9\xec\x85\xaeW\xb3\xd8#)bn \xfb\xf2\x88\xfaR\xff\xdd\x80\x96_\xec5\xf0\x1c\a\x8a\x80\x00@=\r8u+%f:\x1e\x82\xfap\xf6\x89\xea\xba\xe3\xbbM%F\xdb\\\xd1eJJ*\xc67\xca\x03\xa3\xf7(\xbb\xecN\xd4\xe7\xf2:u\x8a\b\xd5\v\xca\xfd\\\xd6\xe3\x05\xb3\x03\xd5\xe0\xd2\xf2{\'\x8b\xdf\xa1.E\b1\xcb\xa2\xbe}\xb2\xe4y\xbb\xe6\x1f\x10c\xf5WQ\x82\x04\x01C\x83,\x90\x1a\xfa\x8e\x17\x89\xe2\xedX\x8d\rmq\t\xb5$\xb4\x9b\x92z\xd6/-\x13,\xb5%\x8eM/\x04\xa7\x7f\x1b\x85\xf1\xa4X\x17\xbb\x1cR14\xfb!\b\x10\xe8\xb2\xd41gK\xe4\xea\xe39d\bL\xe5\x1b\xbd[\x9bWD:\r&\xe9\vn^\xcc\x86\xe3\xce1>3{\xaa{\xbd0P\x9f\xa68\xf5\x82\xb8\x9aD\x9c{\xe6\xf8\xcbD\xb5aJ\xb0\x92\x89\xbc\x82\x1ch\x89\xe7\xdd]q,\xec\xc4\xa5\x93\xe5,\x0e,>/\xaf|\xf0\x01V\x7f\xc9?\xba\x16\xe4$+}5dy\xb1\xef\xf1m\xa5\x94d9\xaf\xcfq\x8b=\x026\xef\r\x91\x18\xc5\xb6\xb9fM\x8ayZ\xbcd\xa5\x8a\x88\x98\xc3\xfc`\xa6\xba\x1f\x17\v$\x88g\xb4\xad\b\xc1\xddW\xa6\xc1\xb7\xb0\xa3\x84Q\x13GoU\xe2\xb7\x03\x9c\xd5\x0f\xa8\x0ef\"\x15\x82\xe7\xbd\xf8\xca\x10f\xfe6h\xe9\xc3\xc2\xa0O:\xac~\x1a\xf7\xbeF\xbe\xe5\xf0\x81\xd6&\xc0K\f\xcd+\xb0\x99Q\xba/\xa8\xb9`k\b\xd1\xcc\xfc\xeaA\"\v=\x83fC\x90%\xa1d\x91\xf8:\x16<\xad\xc2\x18\xdf\x01\xe2\x96\xfcj\xe9\xa4\x065m\x03', 0x3) ftruncate(r11, 0xffff) fcntl$addseals(r11, 0x409, 0x7) r12 = ioctl$UDMABUF_CREATE(r9, 0x40187542, &(0x7f0000000100)={r11, 0x0, 0x0, 0x1000}) epoll_ctl$EPOLL_CTL_ADD(r8, 0x1, r12, &(0x7f0000000140)={0x80000001}) r13 = fcntl$dupfd(r12, 0x406, r11) epoll_ctl$EPOLL_CTL_ADD(r8, 0x1, r13, &(0x7f0000000200)) epoll_ctl$EPOLL_CTL_MOD(r8, 0x3, r13, &(0x7f00000000c0)={0xa0002015}) ppoll(&(0x7f0000000080)=[{r8, 0x4413}], 0x1, 0x0, 0x0, 0x0) write$binfmt_misc(r7, &(0x7f0000000180)="e502", 0x2) 7.783594654s ago: executing program 9 (id=606): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xf1c25000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r3 = syz_open_dev$media(&(0x7f00000001c0), 0x10, 0x0) ioctl$MEDIA_IOC_G_TOPOLOGY(r3, 0xc0487c04, &(0x7f0000000040)={0x0, 0x6, 0x0, &(0x7f0000000300)=[{}, {}, {}, {}, {}, {}], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b003a484fa500"/19, @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000fdffffff00"/28], 0x50) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket(0x2, 0x2, 0x1) bind$unix(r7, 0x0, 0x0) r8 = socket(0x2, 0x2, 0x1) bind$unix(r8, &(0x7f0000000000)=@abs, 0x6e) r9 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='net/icmp\x00') preadv(r9, &(0x7f00000007c0)=[{&(0x7f0000001ac0)=""/175, 0xaf}], 0x1, 0x8001, 0x2081) r10 = socket(0x11, 0x800000003, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r10, 0x8933, &(0x7f0000000600)) sendmsg$nl_route_sched(r6, &(0x7f00000007c0)={0x0, 0x0, 0x0}, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r4, 0x29, 0x20, &(0x7f00000005c0)={@private1={0xfc, 0x1, '\x00', 0x1}, 0x9, 0x1, 0x2, 0x2, 0xd, 0x6e}, 0x20) sendmsg$MPTCP_PM_CMD_SUBFLOW_CREATE(r5, &(0x7f0000000580)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000380)={&(0x7f0000000680)=ANY=[@ANYBLOB="60000000d2b0b7b86bae0b3a7c21798784fcba64d7144f2ee32e3109c9a295bd02f119d1865c86924515825801ee4709cf28b765014b739c3e15d18bd1c7fa23643500dbee8ccca17fd695cf7875cfa3c6a88ea7fb7abbd98ddcfd01d1d617a948b5b2c25c9f16fcfbe213a3ae1bd0df023634d4946b9d37cdffe8e022b63f5a37dbcc9f951e036d7fed48fc2d18809a665ed150f01bd33846a3b6e970fd78498ad02ae45702bd657e567ab26b1e4e0f82", @ANYRES16=0x0, @ANYBLOB="00012bbd7000ffdbdf250a0000004400018014000400fe88000000000000000000000000000105000200080000000800060000000000060005004e21000014000400fc0100"/79], 0x60}}, 0x80) bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0x7, 0x17, &(0x7f0000000a40)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="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"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) ioctl$SNDRV_TIMER_IOCTL_CREATE(0xffffffffffffffff, 0xc02054a5, &(0x7f0000000240)={0x6, r1, 'id1\x00'}) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, 0x0, 0x0, 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x94) 6.109398337s ago: executing program 9 (id=607): mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x50, 0xffffffffffffffff, 0x0) r0 = socket(0xa, 0x3, 0x3a) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r3, 0x0, 0x0) write$RDMA_USER_CM_CMD_SET_OPTION(r3, &(0x7f0000000240)={0xe, 0x18, 0xfa00, @id_resuseaddr={0x0}}, 0x20) fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1) write$USERIO_CMD_SEND_INTERRUPT(0xffffffffffffffff, &(0x7f0000000140)={0x2, 0x1}, 0x2) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) r4 = bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x8, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x15, r4}, 0x94) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) socket$nl_xfrm(0x10, 0x3, 0x6) r5 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bind$bt_sco(r5, &(0x7f0000000040), 0x8) listen(r5, 0x9) setsockopt$bt_BT_VOICE(r5, 0x112, 0xb, 0x0, 0x0) write$RDMA_USER_CM_CMD_NOTIFY(r3, &(0x7f00000002c0)={0xf, 0x8, 0xfa00, {0xffffffffffffffff, 0x8}}, 0x10) setsockopt$MRT6_INIT(r0, 0x29, 0xc8, &(0x7f0000000340), 0x4) setsockopt$MRT6_ADD_MIF(r0, 0x29, 0xca, &(0x7f0000000040)={0x0, 0x1}, 0xc) 0s ago: executing program 9 (id=608): bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x2, 0x16, &(0x7f0000000180)=ANY=[@ANYBLOB="611230000000000061134c0000000000bf2000000000000016001000071b48013d030100000000000f02000000000000bc26100000000000bf67200000000000160200000fff07006702000007000000360600000ee600f0bf050000000000000f650000000000006507f4ff02000000070700004c0040001f75000000000000bf54000000000000070500000300f9ffad430100000000009500000000000000050000000000000095000000000000004d9bd591d568253e9988431ec068e3a83683d58719d72183f2cb7f43dd55788be820b236dcb695dbfd737cbf5fe7030586"], &(0x7f0000000100)='GPL\x00'}, 0x48) kernel console output (not intermixed with test programs): 984][ T5859] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1010.980687][ T5859] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1010.981789][ T5859] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1011.111977][ T9525] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1011.111998][ T9525] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1011.112023][ T9525] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1011.515228][ T9525] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1011.515250][ T9525] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1011.515292][ T9525] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1011.626843][ T5859] Bluetooth: hci1: command tx timeout [ 1011.888153][ T9525] hsr_slave_0: entered promiscuous mode [ 1011.890021][ T9525] hsr_slave_1: entered promiscuous mode [ 1011.891175][ T9525] debugfs: 'hsr0' already exists in 'hsr' [ 1011.891205][ T9525] Cannot create hsr debugfs directory [ 1012.901681][ T5859] Bluetooth: hci2: command tx timeout [ 1012.935036][ T1125] IPVS: stop unused estimator thread 0... [ 1013.146026][ T5859] Bluetooth: hci3: command tx timeout [ 1013.701904][ T5859] Bluetooth: hci1: command tx timeout [ 1013.969935][ T9366] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1014.070781][ T9543] chnl_net:caif_netlink_parms(): no params data found [ 1014.081880][ T9541] chnl_net:caif_netlink_parms(): no params data found [ 1014.983639][ T5859] Bluetooth: hci2: command tx timeout [ 1015.221488][ T5859] Bluetooth: hci3: command tx timeout [ 1015.609359][ T9543] bridge0: port 1(bridge_slave_0) entered blocking state [ 1015.609538][ T9543] bridge0: port 1(bridge_slave_0) entered disabled state [ 1015.609923][ T9543] bridge_slave_0: entered allmulticast mode [ 1015.615380][ T9543] bridge_slave_0: entered promiscuous mode [ 1015.922102][ T9541] bridge0: port 1(bridge_slave_0) entered blocking state [ 1015.922374][ T9541] bridge0: port 1(bridge_slave_0) entered disabled state [ 1015.922680][ T9541] bridge_slave_0: entered allmulticast mode [ 1015.925952][ T9541] bridge_slave_0: entered promiscuous mode [ 1015.930767][ T9543] bridge0: port 2(bridge_slave_1) entered blocking state [ 1015.930930][ T9543] bridge0: port 2(bridge_slave_1) entered disabled state [ 1015.972054][ T9543] bridge_slave_1: entered allmulticast mode [ 1015.975616][ T9543] bridge_slave_1: entered promiscuous mode [ 1015.995290][ T9541] bridge0: port 2(bridge_slave_1) entered blocking state [ 1015.995487][ T9541] bridge0: port 2(bridge_slave_1) entered disabled state [ 1015.996246][ T9541] bridge_slave_1: entered allmulticast mode [ 1015.999189][ T9541] bridge_slave_1: entered promiscuous mode [ 1016.473912][ T9543] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1016.526443][ T9541] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1016.600426][ T9543] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1016.613989][ T9541] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1017.061816][ T5859] Bluetooth: hci2: command tx timeout [ 1017.106256][ T9543] team0: Port device team_slave_0 added [ 1017.106803][ T9525] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 1017.147036][ T9541] team0: Port device team_slave_0 added [ 1017.160455][ T9543] team0: Port device team_slave_1 added [ 1017.166204][ T9525] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 1017.200634][ T9541] team0: Port device team_slave_1 added [ 1017.311638][ T5859] Bluetooth: hci3: command tx timeout [ 1017.344098][ T9525] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 1017.582730][ T9525] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 1017.753054][ T9543] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1017.753075][ T9543] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1017.753106][ T9543] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1017.763929][ T9541] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1017.763946][ T9541] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1017.763971][ T9541] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1017.793148][ T9543] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1017.793168][ T9543] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1017.793194][ T9543] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1018.002069][ T9541] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1018.002085][ T9541] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1018.002104][ T9541] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1018.080463][ T9366] veth0_vlan: entered promiscuous mode [ 1018.330458][ T1125] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1018.951217][ T1125] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1019.029820][ T9543] hsr_slave_0: entered promiscuous mode [ 1019.037504][ T9543] hsr_slave_1: entered promiscuous mode [ 1019.038652][ T9543] debugfs: 'hsr0' already exists in 'hsr' [ 1019.038681][ T9543] Cannot create hsr debugfs directory [ 1019.051145][ T9541] hsr_slave_0: entered promiscuous mode [ 1019.053633][ T9541] hsr_slave_1: entered promiscuous mode [ 1019.054691][ T9541] debugfs: 'hsr0' already exists in 'hsr' [ 1019.054717][ T9541] Cannot create hsr debugfs directory [ 1019.082171][ T9366] veth1_vlan: entered promiscuous mode [ 1019.146675][ T5859] Bluetooth: hci2: command tx timeout [ 1019.381610][ T5859] Bluetooth: hci3: command tx timeout [ 1019.537378][ T1125] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1020.044673][ T1125] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1021.033303][ T9366] veth0_macvtap: entered promiscuous mode [ 1021.230638][ T9366] veth1_macvtap: entered promiscuous mode [ 1021.253380][ T1125] bridge_slave_1: left allmulticast mode [ 1021.253423][ T1125] bridge_slave_1: left promiscuous mode [ 1021.253751][ T1125] bridge0: port 2(bridge_slave_1) entered disabled state [ 1021.328229][ T1125] bridge_slave_0: left allmulticast mode [ 1021.328272][ T1125] bridge_slave_0: left promiscuous mode [ 1021.328584][ T1125] bridge0: port 1(bridge_slave_0) entered disabled state [ 1021.387586][ T1125] bridge_slave_1: left allmulticast mode [ 1021.387629][ T1125] bridge_slave_1: left promiscuous mode [ 1021.387996][ T1125] bridge0: port 2(bridge_slave_1) entered disabled state [ 1021.468943][ T1125] bridge_slave_0: left allmulticast mode [ 1021.468988][ T1125] bridge_slave_0: left promiscuous mode [ 1021.469325][ T1125] bridge0: port 1(bridge_slave_0) entered disabled state [ 1021.549491][ T1125] bridge_slave_1: left allmulticast mode [ 1021.549535][ T1125] bridge_slave_1: left promiscuous mode [ 1021.549840][ T1125] bridge0: port 2(bridge_slave_1) entered disabled state [ 1021.613718][ T1125] bridge_slave_0: left allmulticast mode [ 1021.613765][ T1125] bridge_slave_0: left promiscuous mode [ 1021.614103][ T1125] bridge0: port 1(bridge_slave_0) entered disabled state [ 1023.592076][ T7478] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1023.598369][ T7478] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1023.599778][ T7478] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1023.640865][ T7478] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1023.672901][ T7478] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1024.293094][ T1125] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1024.372991][ T1125] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1024.407940][ T1125] bond0 (unregistering): Released all slaves [ 1025.809371][ T5859] Bluetooth: hci4: command tx timeout [ 1026.679728][ T1125] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1026.744097][ T1125] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1026.786935][ T1125] bond0 (unregistering): Released all slaves [ 1027.082321][ T1125] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1027.163368][ T1125] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1027.236113][ T1125] bond0 (unregistering): Released all slaves [ 1027.835766][ T9525] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1027.861644][ T5859] Bluetooth: hci4: command tx timeout [ 1028.165697][ T9525] 8021q: adding VLAN 0 to HW filter on device team0 [ 1028.461551][ T1125] hsr_slave_0: left promiscuous mode [ 1028.511791][ T1125] hsr_slave_1: left promiscuous mode [ 1028.512978][ T1125] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1028.513013][ T1125] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1028.599988][ T1125] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1028.600030][ T1125] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1028.797357][ T1125] hsr_slave_0: left promiscuous mode [ 1028.831903][ T1125] hsr_slave_1: left promiscuous mode [ 1028.833164][ T1125] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1028.833223][ T1125] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1028.863186][ T1125] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1028.863221][ T1125] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1029.031985][ T1125] hsr_slave_0: left promiscuous mode [ 1029.051654][ T1125] hsr_slave_1: left promiscuous mode [ 1029.052937][ T1125] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1029.112465][ T1125] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1029.260229][ T1125] veth1_macvtap: left promiscuous mode [ 1029.260380][ T1125] veth0_macvtap: left promiscuous mode [ 1029.260743][ T1125] veth1_vlan: left promiscuous mode [ 1029.260996][ T1125] veth0_vlan: left promiscuous mode [ 1029.292187][ T1125] veth1_macvtap: left promiscuous mode [ 1029.292331][ T1125] veth0_macvtap: left promiscuous mode [ 1029.292676][ T1125] veth1_vlan: left promiscuous mode [ 1029.292910][ T1125] veth0_vlan: left promiscuous mode [ 1029.941604][ T5859] Bluetooth: hci4: command tx timeout [ 1032.034199][ T5859] Bluetooth: hci4: command tx timeout [ 1032.638188][ T1125] team0 (unregistering): Port device team_slave_1 removed [ 1032.912418][ T1125] team0 (unregistering): Port device team_slave_0 removed [ 1038.974297][ T1125] team0 (unregistering): Port device team_slave_1 removed [ 1039.312486][ T1125] team0 (unregistering): Port device team_slave_0 removed [ 1043.474250][ T1125] team0 (unregistering): Port device team_slave_1 removed [ 1043.675844][ T1125] team0 (unregistering): Port device team_slave_0 removed [ 1045.010392][ T8521] bridge0: port 1(bridge_slave_0) entered blocking state [ 1045.010685][ T8521] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1045.038950][ T8521] bridge0: port 2(bridge_slave_1) entered blocking state [ 1045.039209][ T8521] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1046.190119][ T9574] chnl_net:caif_netlink_parms(): no params data found [ 1047.159044][ T9574] bridge0: port 1(bridge_slave_0) entered blocking state [ 1047.160149][ T9574] bridge0: port 1(bridge_slave_0) entered disabled state [ 1047.160420][ T9574] bridge_slave_0: entered allmulticast mode [ 1047.184973][ T9574] bridge_slave_0: entered promiscuous mode [ 1047.292508][ T9574] bridge0: port 2(bridge_slave_1) entered blocking state [ 1047.292697][ T9574] bridge0: port 2(bridge_slave_1) entered disabled state [ 1047.292965][ T9574] bridge_slave_1: entered allmulticast mode [ 1047.299002][ T9574] bridge_slave_1: entered promiscuous mode [ 1047.336232][ T9543] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 1047.504212][ T9543] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 1047.763049][ T9543] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 1047.793164][ T9574] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1047.808285][ T9543] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 1047.839866][ T9574] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1048.349823][ T9574] team0: Port device team_slave_0 added [ 1048.395861][ T9574] team0: Port device team_slave_1 added [ 1048.592645][ T9525] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1048.621042][ T9541] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 1048.807884][ T9541] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 1048.863986][ T9574] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1048.864009][ T9574] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1048.864037][ T9574] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1048.870057][ T9541] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 1048.952915][ T9574] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1048.952936][ T9574] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1048.952966][ T9574] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1049.040751][ T9541] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 1049.444342][ T9574] hsr_slave_0: entered promiscuous mode [ 1049.446392][ T9574] hsr_slave_1: entered promiscuous mode [ 1049.447581][ T9574] debugfs: 'hsr0' already exists in 'hsr' [ 1049.447608][ T9574] Cannot create hsr debugfs directory [ 1051.532269][ T9525] veth0_vlan: entered promiscuous mode [ 1051.906925][ T9525] veth1_vlan: entered promiscuous mode [ 1051.979260][ T9543] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1052.268017][ T9543] 8021q: adding VLAN 0 to HW filter on device team0 [ 1052.362269][ T9541] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1052.364144][ T9525] veth0_macvtap: entered promiscuous mode [ 1052.408442][ T1278] bridge0: port 1(bridge_slave_0) entered blocking state [ 1052.408958][ T1278] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1052.515854][ T9525] veth1_macvtap: entered promiscuous mode [ 1052.529350][ T1278] bridge0: port 2(bridge_slave_1) entered blocking state [ 1052.529537][ T1278] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1052.629284][ T9541] 8021q: adding VLAN 0 to HW filter on device team0 [ 1052.638442][ T1125] bridge_slave_1: left allmulticast mode [ 1052.638478][ T1125] bridge_slave_1: left promiscuous mode [ 1052.638766][ T1125] bridge0: port 2(bridge_slave_1) entered disabled state [ 1052.733357][ T1125] bridge_slave_0: left allmulticast mode [ 1052.733399][ T1125] bridge_slave_0: left promiscuous mode [ 1052.733739][ T1125] bridge0: port 1(bridge_slave_0) entered disabled state [ 1054.987620][ T1325] ieee802154 phy0 wpan0: encryption failed: -22 [ 1054.987748][ T1325] ieee802154 phy1 wpan1: encryption failed: -22 [ 1055.114343][ T1125] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1055.193761][ T1125] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1055.217231][ T1125] bond0 (unregistering): Released all slaves [ 1055.604172][ T2155] bridge0: port 1(bridge_slave_0) entered blocking state [ 1055.606479][ T2155] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1055.642552][ T9525] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1055.781682][ T1125] hsr_slave_0: left promiscuous mode [ 1055.825302][ T1125] hsr_slave_1: left promiscuous mode [ 1055.826435][ T1125] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1055.855396][ T1125] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1055.966434][ T1125] veth1_macvtap: left promiscuous mode [ 1055.966601][ T1125] veth0_macvtap: left promiscuous mode [ 1055.966975][ T1125] veth1_vlan: left promiscuous mode [ 1055.967211][ T1125] veth0_vlan: left promiscuous mode [ 1058.642233][ T1125] team0 (unregistering): Port device team_slave_1 removed [ 1058.898797][ T1125] team0 (unregistering): Port device team_slave_0 removed [ 1061.943374][ T2155] bridge0: port 2(bridge_slave_1) entered blocking state [ 1061.943649][ T2155] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1061.958276][ T9525] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1062.104491][ T2155] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1062.128680][ T2155] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1062.146115][ T2155] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1062.165262][ T2155] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1063.262780][ T6206] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1063.262809][ T6206] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1063.689267][ T9543] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1063.733459][ T1278] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1063.733485][ T1278] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1063.779096][ T9574] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 1063.935742][ T9574] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 1064.031675][ T9574] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 1064.092064][ T9574] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 1064.363863][ T9541] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1064.891705][ T9574] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1065.043486][ T9574] 8021q: adding VLAN 0 to HW filter on device team0 [ 1065.083266][ T2155] bridge0: port 1(bridge_slave_0) entered blocking state [ 1065.083806][ T2155] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1065.602440][ T3620] bridge0: port 2(bridge_slave_1) entered blocking state [ 1065.602639][ T3620] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1065.671690][ T9543] veth0_vlan: entered promiscuous mode [ 1066.068129][ T7478] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1066.081132][ T7478] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1066.092067][ T7478] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1066.115441][ T7478] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1066.116290][ T7478] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1066.257954][ T9543] veth1_vlan: entered promiscuous mode [ 1066.496918][ T3620] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1067.020358][ T3620] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1067.456332][ T3620] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1067.603548][ T9543] veth0_macvtap: entered promiscuous mode [ 1067.971189][ T3620] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1068.065033][ T9541] veth0_vlan: entered promiscuous mode [ 1068.067539][ T9543] veth1_macvtap: entered promiscuous mode [ 1068.181635][ T5859] Bluetooth: hci0: command tx timeout [ 1068.200017][ T9541] veth1_vlan: entered promiscuous mode [ 1068.367246][ T9543] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1068.625449][ T9543] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1068.917487][ T9712] chnl_net:caif_netlink_parms(): no params data found [ 1068.967241][ T1278] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1069.049526][ T1278] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1069.116071][ T1278] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1069.139934][ T1278] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1069.380340][ T3620] bridge_slave_1: left allmulticast mode [ 1069.380384][ T3620] bridge_slave_1: left promiscuous mode [ 1069.380684][ T3620] bridge0: port 2(bridge_slave_1) entered disabled state [ 1069.437024][ T3620] bridge_slave_0: left allmulticast mode [ 1069.437091][ T3620] bridge_slave_0: left promiscuous mode [ 1069.438302][ T3620] bridge0: port 1(bridge_slave_0) entered disabled state [ 1070.270049][ T5859] Bluetooth: hci0: command tx timeout [ 1072.213941][ T7478] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1072.218000][ T7478] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1072.219673][ T7478] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1072.269974][ T9768] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1072.291771][ T9768] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1072.333068][ T5856] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 1072.351739][ T5856] Bluetooth: hci0: command tx timeout [ 1072.366286][ T5859] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 1072.388144][ T5859] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 1072.410733][ T5856] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 1072.413256][ T5856] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 1072.699891][ T3620] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1072.802543][ T3620] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1072.827239][ T3620] bond0 (unregistering): Released all slaves [ 1073.035103][ T9574] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1073.993561][ T9712] bridge0: port 1(bridge_slave_0) entered blocking state [ 1073.993748][ T9712] bridge0: port 1(bridge_slave_0) entered disabled state [ 1073.994026][ T9712] bridge_slave_0: entered allmulticast mode [ 1073.997285][ T9712] bridge_slave_0: entered promiscuous mode [ 1074.421609][ T5856] Bluetooth: hci0: command tx timeout [ 1074.421674][ T5856] Bluetooth: hci1: command tx timeout [ 1074.581589][ T7478] Bluetooth: hci6: command tx timeout [ 1074.624908][ T9712] bridge0: port 2(bridge_slave_1) entered blocking state [ 1074.625076][ T9712] bridge0: port 2(bridge_slave_1) entered disabled state [ 1074.625339][ T9712] bridge_slave_1: entered allmulticast mode [ 1074.628634][ T9712] bridge_slave_1: entered promiscuous mode [ 1075.235909][ T9712] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1075.275554][ T9712] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1075.521470][ T3620] hsr_slave_0: left promiscuous mode [ 1075.541432][ T3620] hsr_slave_1: left promiscuous mode [ 1075.542474][ T3620] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1075.542505][ T3620] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1075.606509][ T3620] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1075.606545][ T3620] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1075.697609][ T3620] veth1_macvtap: left promiscuous mode [ 1075.697761][ T3620] veth0_macvtap: left promiscuous mode [ 1075.698111][ T3620] veth1_vlan: left promiscuous mode [ 1075.698355][ T3620] veth0_vlan: left promiscuous mode [ 1076.511761][ T7478] Bluetooth: hci1: command tx timeout [ 1076.685533][ T7478] Bluetooth: hci6: command tx timeout [ 1078.581519][ T7478] Bluetooth: hci1: command tx timeout [ 1078.741676][ T7478] Bluetooth: hci6: command tx timeout [ 1078.929253][ T3620] team0 (unregistering): Port device team_slave_1 removed [ 1079.252771][ T3620] team0 (unregistering): Port device team_slave_0 removed [ 1080.661499][ T7478] Bluetooth: hci1: command tx timeout [ 1080.831632][ T7478] Bluetooth: hci6: command tx timeout [ 1082.617501][ T9712] team0: Port device team_slave_0 added [ 1082.649311][ T9712] team0: Port device team_slave_1 added [ 1082.991835][ T9712] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1082.991856][ T9712] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1082.991883][ T9712] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1082.998412][ T9712] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1082.998432][ T9712] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1082.998461][ T9712] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1083.663295][ T9712] hsr_slave_0: entered promiscuous mode [ 1083.665079][ T9712] hsr_slave_1: entered promiscuous mode [ 1083.666152][ T9712] debugfs: 'hsr0' already exists in 'hsr' [ 1083.666181][ T9712] Cannot create hsr debugfs directory [ 1085.249735][ T9763] chnl_net:caif_netlink_parms(): no params data found [ 1085.261824][ T9764] chnl_net:caif_netlink_parms(): no params data found [ 1085.666253][ T5856] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1085.679893][ T5856] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1085.703906][ T5856] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1085.705161][ T5856] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1085.705998][ T5856] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1087.205196][ T9763] bridge0: port 1(bridge_slave_0) entered blocking state [ 1087.205349][ T9763] bridge0: port 1(bridge_slave_0) entered disabled state [ 1087.205541][ T9763] bridge_slave_0: entered allmulticast mode [ 1087.207271][ T9763] bridge_slave_0: entered promiscuous mode [ 1087.416513][ T9764] bridge0: port 1(bridge_slave_0) entered blocking state [ 1087.416610][ T9764] bridge0: port 1(bridge_slave_0) entered disabled state [ 1087.416785][ T9764] bridge_slave_0: entered allmulticast mode [ 1087.418546][ T9764] bridge_slave_0: entered promiscuous mode [ 1087.421103][ T9763] bridge0: port 2(bridge_slave_1) entered blocking state [ 1087.422157][ T9763] bridge0: port 2(bridge_slave_1) entered disabled state [ 1087.422355][ T9763] bridge_slave_1: entered allmulticast mode [ 1087.425111][ T9763] bridge_slave_1: entered promiscuous mode [ 1087.669406][ T9764] bridge0: port 2(bridge_slave_1) entered blocking state [ 1087.669532][ T9764] bridge0: port 2(bridge_slave_1) entered disabled state [ 1087.669663][ T9764] bridge_slave_1: entered allmulticast mode [ 1087.672629][ T9764] bridge_slave_1: entered promiscuous mode [ 1087.781398][ T5856] Bluetooth: hci2: command tx timeout [ 1088.180340][ T9763] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1088.288233][ T9763] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1088.523675][ T9764] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1088.816524][ T9764] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1088.994787][ T9763] team0: Port device team_slave_0 added [ 1089.093513][ T9763] team0: Port device team_slave_1 added [ 1089.135742][ T9764] team0: Port device team_slave_0 added [ 1089.306512][ T9764] team0: Port device team_slave_1 added [ 1089.607987][ T9763] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1089.608011][ T9763] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1089.608040][ T9763] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1089.763152][ T9763] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1089.763174][ T9763] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1089.763206][ T9763] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1089.848810][ T9764] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1089.848833][ T9764] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1089.848866][ T9764] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1089.871857][ T5856] Bluetooth: hci2: command tx timeout [ 1089.914394][ T9764] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1089.914414][ T9764] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1089.914444][ T9764] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1090.418705][ T9763] hsr_slave_0: entered promiscuous mode [ 1090.420454][ T9763] hsr_slave_1: entered promiscuous mode [ 1090.434177][ T9763] debugfs: 'hsr0' already exists in 'hsr' [ 1090.434209][ T9763] Cannot create hsr debugfs directory [ 1090.596352][ T9764] hsr_slave_0: entered promiscuous mode [ 1090.597950][ T9764] hsr_slave_1: entered promiscuous mode [ 1090.598988][ T9764] debugfs: 'hsr0' already exists in 'hsr' [ 1090.599016][ T9764] Cannot create hsr debugfs directory [ 1090.780768][ T3620] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1090.996553][ T9712] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 1091.127998][ T9712] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 1091.349494][ T3620] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1091.494207][ T9712] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 1091.626404][ T9712] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 1091.667884][ T9813] chnl_net:caif_netlink_parms(): no params data found [ 1091.839226][ T3620] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1091.941573][ T5856] Bluetooth: hci2: command tx timeout [ 1092.230527][ T3620] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1093.065301][ T9813] bridge0: port 1(bridge_slave_0) entered blocking state [ 1093.065548][ T9813] bridge0: port 1(bridge_slave_0) entered disabled state [ 1093.065774][ T9813] bridge_slave_0: entered allmulticast mode [ 1093.075326][ T9813] bridge_slave_0: entered promiscuous mode [ 1093.129155][ T9813] bridge0: port 2(bridge_slave_1) entered blocking state [ 1093.129339][ T9813] bridge0: port 2(bridge_slave_1) entered disabled state [ 1093.129989][ T9813] bridge_slave_1: entered allmulticast mode [ 1093.139769][ T9813] bridge_slave_1: entered promiscuous mode [ 1093.466319][ T9813] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1093.490280][ T9813] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1093.718989][ T9813] team0: Port device team_slave_0 added [ 1094.021603][ T5856] Bluetooth: hci2: command tx timeout [ 1094.064076][ T9813] team0: Port device team_slave_1 added [ 1094.717202][ T9813] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1094.717221][ T9813] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1094.717251][ T9813] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1094.745926][ T9813] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1094.745944][ T9813] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1094.745969][ T9813] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1095.327966][ T9813] hsr_slave_0: entered promiscuous mode [ 1095.329684][ T9813] hsr_slave_1: entered promiscuous mode [ 1095.346124][ T9813] debugfs: 'hsr0' already exists in 'hsr' [ 1095.346162][ T9813] Cannot create hsr debugfs directory [ 1096.023911][ T9712] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1096.413775][ T9712] 8021q: adding VLAN 0 to HW filter on device team0 [ 1096.414395][ T3620] bridge_slave_1: left allmulticast mode [ 1096.414429][ T3620] bridge_slave_1: left promiscuous mode [ 1096.414729][ T3620] bridge0: port 2(bridge_slave_1) entered disabled state [ 1096.496223][ T3620] bridge_slave_0: left allmulticast mode [ 1096.496266][ T3620] bridge_slave_0: left promiscuous mode [ 1096.496579][ T3620] bridge0: port 1(bridge_slave_0) entered disabled state [ 1096.568497][ T3620] bridge_slave_1: left allmulticast mode [ 1096.568544][ T3620] bridge_slave_1: left promiscuous mode [ 1096.568883][ T3620] bridge0: port 2(bridge_slave_1) entered disabled state [ 1096.663572][ T3620] bridge_slave_0: left allmulticast mode [ 1096.663615][ T3620] bridge_slave_0: left promiscuous mode [ 1096.663955][ T3620] bridge0: port 1(bridge_slave_0) entered disabled state [ 1096.737484][ T3620] bridge_slave_1: left allmulticast mode [ 1096.737531][ T3620] bridge_slave_1: left promiscuous mode [ 1096.737860][ T3620] bridge0: port 2(bridge_slave_1) entered disabled state [ 1096.794060][ T3620] bridge_slave_0: left allmulticast mode [ 1096.794106][ T3620] bridge_slave_0: left promiscuous mode [ 1096.794497][ T3620] bridge0: port 1(bridge_slave_0) entered disabled state [ 1099.742435][ T3620] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1099.803987][ T3620] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1099.827395][ T3620] bond0 (unregistering): Released all slaves [ 1102.232711][ T3620] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1102.293560][ T3620] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1102.317608][ T3620] bond0 (unregistering): Released all slaves [ 1104.692915][ T3620] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1104.764816][ T3620] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1104.810818][ T3620] bond0 (unregistering): Released all slaves [ 1105.168508][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 1105.168781][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1105.429160][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 1105.429351][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1105.962092][ T3620] hsr_slave_0: left promiscuous mode [ 1105.982294][ T3620] hsr_slave_1: left promiscuous mode [ 1105.983522][ T3620] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1106.024185][ T3620] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1106.181527][ T3620] hsr_slave_0: left promiscuous mode [ 1106.226402][ T3620] hsr_slave_1: left promiscuous mode [ 1106.227530][ T3620] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1106.227562][ T3620] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1106.252670][ T3620] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1106.252705][ T3620] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1106.443530][ T3620] hsr_slave_0: left promiscuous mode [ 1106.489186][ T3620] hsr_slave_1: left promiscuous mode [ 1106.489876][ T3620] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1106.512910][ T3620] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1106.685562][ T3620] veth1_macvtap: left promiscuous mode [ 1106.685742][ T3620] veth0_macvtap: left promiscuous mode [ 1106.686131][ T3620] veth1_vlan: left promiscuous mode [ 1106.686390][ T3620] veth0_vlan: left promiscuous mode [ 1106.752212][ T3620] veth1_vlan: left promiscuous mode [ 1106.752480][ T3620] veth0_vlan: left promiscuous mode [ 1109.387161][ T3620] team0 (unregistering): Port device team_slave_1 removed [ 1109.702479][ T3620] team0 (unregistering): Port device team_slave_0 removed [ 1115.322715][ T3620] team0 (unregistering): Port device team_slave_1 removed [ 1115.682871][ T3620] team0 (unregistering): Port device team_slave_0 removed [ 1116.437126][ T1325] ieee802154 phy0 wpan0: encryption failed: -22 [ 1116.437230][ T1325] ieee802154 phy1 wpan1: encryption failed: -22 [ 1120.946097][ T3620] team0 (unregistering): Port device team_slave_1 removed [ 1121.295980][ T3620] team0 (unregistering): Port device team_slave_0 removed [ 1125.758365][ T9712] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1125.831320][ T9763] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 1125.957341][ T9763] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 1126.376700][ T9763] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 1126.470605][ T9763] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 1128.790800][ T9763] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1128.899722][ T9763] 8021q: adding VLAN 0 to HW filter on device team0 [ 1128.949260][ T7478] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1128.956467][ T3584] bridge0: port 1(bridge_slave_0) entered blocking state [ 1128.959279][ T3584] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1128.978395][ T7478] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1128.981067][ T7478] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1128.994682][ T7478] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1129.015810][ T7478] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1129.029050][ T3584] bridge0: port 2(bridge_slave_1) entered blocking state [ 1129.029224][ T3584] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1129.535417][ T9764] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 1129.689230][ T9764] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 1130.010498][ T9764] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 1130.149663][ T9764] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 1130.675844][ T9813] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 1130.738628][ T9813] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 1130.842169][ T9813] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 1130.943189][ T9813] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 1131.143197][ T7478] Bluetooth: hci0: command tx timeout [ 1132.039486][ T9884] chnl_net:caif_netlink_parms(): no params data found [ 1133.174254][ T9763] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1133.221447][ T7478] Bluetooth: hci0: command tx timeout [ 1133.617736][ T9884] bridge0: port 1(bridge_slave_0) entered blocking state [ 1133.617906][ T9884] bridge0: port 1(bridge_slave_0) entered disabled state [ 1133.618188][ T9884] bridge_slave_0: entered allmulticast mode [ 1133.661598][ T9884] bridge_slave_0: entered promiscuous mode [ 1133.685790][ T9884] bridge0: port 2(bridge_slave_1) entered blocking state [ 1133.686050][ T9884] bridge0: port 2(bridge_slave_1) entered disabled state [ 1133.686319][ T9884] bridge_slave_1: entered allmulticast mode [ 1133.718434][ T9884] bridge_slave_1: entered promiscuous mode [ 1134.157898][ T9884] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1134.321510][ T9884] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1134.453383][ T5856] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1134.470798][ T5856] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1134.491681][ T5856] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1134.493021][ T5856] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1134.495059][ T5856] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1134.697397][ T5856] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1134.729614][ T5856] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1134.740535][ T5856] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1134.755362][ T5856] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1134.756171][ T5856] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1135.174677][ T9884] team0: Port device team_slave_0 added [ 1135.246940][ T9884] team0: Port device team_slave_1 added [ 1135.301634][ T5856] Bluetooth: hci0: command tx timeout [ 1135.506013][ T9884] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1135.506032][ T9884] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1135.506060][ T9884] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1135.587099][ T9884] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1135.587118][ T9884] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1135.587147][ T9884] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1135.623071][ T2155] bridge_slave_1: left allmulticast mode [ 1135.623104][ T2155] bridge_slave_1: left promiscuous mode [ 1135.623367][ T2155] bridge0: port 2(bridge_slave_1) entered disabled state [ 1135.693434][ T2155] bridge_slave_0: left allmulticast mode [ 1135.693474][ T2155] bridge_slave_0: left promiscuous mode [ 1135.693877][ T2155] bridge0: port 1(bridge_slave_0) entered disabled state [ 1136.607630][ T5856] Bluetooth: hci3: command tx timeout [ 1136.822530][ T5856] Bluetooth: hci4: command tx timeout [ 1137.382190][ T5856] Bluetooth: hci0: command tx timeout [ 1138.112665][ T2155] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1138.204210][ T2155] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1138.247558][ T2155] bond0 (unregistering): Released all slaves [ 1138.671421][ T5856] Bluetooth: hci3: command tx timeout [ 1138.773831][ T9884] hsr_slave_0: entered promiscuous mode [ 1138.775447][ T9884] hsr_slave_1: entered promiscuous mode [ 1138.776498][ T9884] debugfs: 'hsr0' already exists in 'hsr' [ 1138.776524][ T9884] Cannot create hsr debugfs directory [ 1138.817867][ T9813] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1138.901546][ T5856] Bluetooth: hci4: command tx timeout [ 1138.931741][ T2155] hsr_slave_0: left promiscuous mode [ 1138.951764][ T2155] hsr_slave_1: left promiscuous mode [ 1138.952880][ T2155] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1138.999033][ T2155] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1140.416100][ T2155] team0 (unregistering): Port device team_slave_1 removed [ 1140.725297][ T2155] team0 (unregistering): Port device team_slave_0 removed [ 1140.768134][ T5856] Bluetooth: hci3: command tx timeout [ 1140.981745][ T5856] Bluetooth: hci4: command tx timeout [ 1142.821449][ T5856] Bluetooth: hci3: command tx timeout [ 1143.061656][ T5856] Bluetooth: hci4: command tx timeout [ 1144.415507][ T9813] 8021q: adding VLAN 0 to HW filter on device team0 [ 1144.734519][ T57] bridge0: port 1(bridge_slave_0) entered blocking state [ 1144.734784][ T57] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1145.098060][ T1278] bridge0: port 2(bridge_slave_1) entered blocking state [ 1145.098645][ T1278] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1145.279521][ T9940] chnl_net:caif_netlink_parms(): no params data found [ 1145.644236][ T9942] chnl_net:caif_netlink_parms(): no params data found [ 1147.096892][ T7478] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1147.100755][ T7478] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1147.127447][ T7478] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1147.139607][ T7478] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1147.142273][ T7478] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1147.317090][ T9940] bridge0: port 1(bridge_slave_0) entered blocking state [ 1147.317367][ T9940] bridge0: port 1(bridge_slave_0) entered disabled state [ 1147.317649][ T9940] bridge_slave_0: entered allmulticast mode [ 1147.320956][ T9940] bridge_slave_0: entered promiscuous mode [ 1147.512245][ T9940] bridge0: port 2(bridge_slave_1) entered blocking state [ 1147.512435][ T9940] bridge0: port 2(bridge_slave_1) entered disabled state [ 1147.512712][ T9940] bridge_slave_1: entered allmulticast mode [ 1147.515689][ T9940] bridge_slave_1: entered promiscuous mode [ 1147.800134][ T9942] bridge0: port 1(bridge_slave_0) entered blocking state [ 1147.800332][ T9942] bridge0: port 1(bridge_slave_0) entered disabled state [ 1147.800681][ T9942] bridge_slave_0: entered allmulticast mode [ 1147.838413][ T9942] bridge_slave_0: entered promiscuous mode [ 1148.098646][ T9942] bridge0: port 2(bridge_slave_1) entered blocking state [ 1148.098834][ T9942] bridge0: port 2(bridge_slave_1) entered disabled state [ 1148.099054][ T9942] bridge_slave_1: entered allmulticast mode [ 1148.124100][ T9942] bridge_slave_1: entered promiscuous mode [ 1148.152431][ T9940] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1148.572735][ T9940] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1148.859946][ T9942] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1149.170221][ T9942] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1149.210339][ T9940] team0: Port device team_slave_0 added [ 1149.222720][ T7478] Bluetooth: hci1: command tx timeout [ 1149.334490][ T9940] team0: Port device team_slave_1 added [ 1149.744009][ T9942] team0: Port device team_slave_0 added [ 1149.856875][ T9942] team0: Port device team_slave_1 added [ 1149.881081][ T9940] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1149.881100][ T9940] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1149.881128][ T9940] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1150.269990][ T9940] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1150.270010][ T9940] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1150.270040][ T9940] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1150.444900][ T9884] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 1150.488149][ T9942] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1150.488169][ T9942] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1150.488199][ T9942] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1150.526741][ T9884] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 1150.579793][ T9942] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1150.579809][ T9942] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1150.579825][ T9942] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1150.589993][ T9884] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 1150.771399][ T9884] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 1150.944062][ T9940] hsr_slave_0: entered promiscuous mode [ 1150.946393][ T9940] hsr_slave_1: entered promiscuous mode [ 1150.947552][ T9940] debugfs: 'hsr0' already exists in 'hsr' [ 1150.947581][ T9940] Cannot create hsr debugfs directory [ 1151.294115][ T9942] hsr_slave_0: entered promiscuous mode [ 1151.304703][ T9942] hsr_slave_1: entered promiscuous mode [ 1151.306334][ T9942] debugfs: 'hsr0' already exists in 'hsr' [ 1151.306362][ T9942] Cannot create hsr debugfs directory [ 1151.311411][ T7478] Bluetooth: hci1: command tx timeout [ 1152.438710][ T9972] chnl_net:caif_netlink_parms(): no params data found [ 1153.381812][ T7478] Bluetooth: hci1: command tx timeout [ 1154.332624][ T9972] bridge0: port 1(bridge_slave_0) entered blocking state [ 1154.332916][ T9972] bridge0: port 1(bridge_slave_0) entered disabled state [ 1154.333245][ T9972] bridge_slave_0: entered allmulticast mode [ 1154.336640][ T9972] bridge_slave_0: entered promiscuous mode [ 1154.370453][ T9972] bridge0: port 2(bridge_slave_1) entered blocking state [ 1154.370630][ T9972] bridge0: port 2(bridge_slave_1) entered disabled state [ 1154.370952][ T9972] bridge_slave_1: entered allmulticast mode [ 1154.381579][ T9972] bridge_slave_1: entered promiscuous mode [ 1154.817151][ T9972] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1155.072231][ T9972] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1155.390344][ T9972] team0: Port device team_slave_0 added [ 1155.459897][ T9972] team0: Port device team_slave_1 added [ 1155.461728][ T7478] Bluetooth: hci1: command tx timeout [ 1155.730734][ T3584] bridge_slave_1: left allmulticast mode [ 1155.730774][ T3584] bridge_slave_1: left promiscuous mode [ 1155.731138][ T3584] bridge0: port 2(bridge_slave_1) entered disabled state [ 1155.805186][ T3584] bridge_slave_0: left allmulticast mode [ 1155.805227][ T3584] bridge_slave_0: left promiscuous mode [ 1155.805559][ T3584] bridge0: port 1(bridge_slave_0) entered disabled state [ 1155.889389][ T3584] bridge_slave_1: left allmulticast mode [ 1155.889427][ T3584] bridge_slave_1: left promiscuous mode [ 1155.889732][ T3584] bridge0: port 2(bridge_slave_1) entered disabled state [ 1155.966354][ T3584] bridge_slave_0: left allmulticast mode [ 1155.966391][ T3584] bridge_slave_0: left promiscuous mode [ 1155.966642][ T3584] bridge0: port 1(bridge_slave_0) entered disabled state [ 1156.039385][ T3584] bridge_slave_1: left allmulticast mode [ 1156.039422][ T3584] bridge_slave_1: left promiscuous mode [ 1156.039749][ T3584] bridge0: port 2(bridge_slave_1) entered disabled state [ 1156.107309][ T3584] bridge_slave_0: left allmulticast mode [ 1156.107348][ T3584] bridge_slave_0: left promiscuous mode [ 1156.107652][ T3584] bridge0: port 1(bridge_slave_0) entered disabled state [ 1158.462570][ T3584] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1158.542366][ T3584] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1158.648308][ T3584] bond0 (unregistering): Released all slaves [ 1160.738480][ T3584] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1160.796862][ T3584] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1160.848456][ T3584] bond0 (unregistering): Released all slaves [ 1161.443552][ T3584] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1161.535474][ T3584] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1161.604506][ T3584] bond0 (unregistering): Released all slaves [ 1161.644031][ T9972] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1161.644050][ T9972] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1161.644079][ T9972] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1161.976183][ T9972] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1161.976202][ T9972] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1161.976233][ T9972] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1162.229195][ T9884] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1162.684755][ T9972] hsr_slave_0: entered promiscuous mode [ 1162.686413][ T9972] hsr_slave_1: entered promiscuous mode [ 1162.687492][ T9972] debugfs: 'hsr0' already exists in 'hsr' [ 1162.687520][ T9972] Cannot create hsr debugfs directory [ 1162.949191][ T3584] hsr_slave_0: left promiscuous mode [ 1162.969900][ T3584] hsr_slave_1: left promiscuous mode [ 1162.971907][ T3584] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1163.012583][ T3584] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1163.181901][ T3584] hsr_slave_0: left promiscuous mode [ 1163.202073][ T3584] hsr_slave_1: left promiscuous mode [ 1163.203263][ T3584] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1163.234016][ T3584] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1163.411747][ T3584] hsr_slave_0: left promiscuous mode [ 1163.433556][ T3584] hsr_slave_1: left promiscuous mode [ 1163.441689][ T3584] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1163.472906][ T3584] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1164.715001][ T3584] team0 (unregistering): Port device team_slave_1 removed [ 1164.905740][ T3584] team0 (unregistering): Port device team_slave_0 removed [ 1168.782585][ T3584] team0 (unregistering): Port device team_slave_1 removed [ 1169.082598][ T3584] team0 (unregistering): Port device team_slave_0 removed [ 1173.195782][ T3584] team0 (unregistering): Port device team_slave_1 removed [ 1173.383804][ T3584] team0 (unregistering): Port device team_slave_0 removed [ 1174.420808][ T9884] 8021q: adding VLAN 0 to HW filter on device team0 [ 1174.712796][ T1118] bridge0: port 1(bridge_slave_0) entered blocking state [ 1174.713049][ T1118] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1174.790304][ T1125] bridge0: port 2(bridge_slave_1) entered blocking state [ 1174.790636][ T1125] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1175.524785][ T9940] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 1175.626313][ T9940] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 1175.782484][ T9940] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 1175.883910][ T9940] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 1176.579753][ T9942] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 1176.642766][ T9942] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 1176.690151][ T9942] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 1176.854297][ T9942] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 1177.221143][ T9884] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1177.710167][ T9940] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1177.943488][ T9940] 8021q: adding VLAN 0 to HW filter on device team0 [ 1177.946996][ T1325] ieee802154 phy0 wpan0: encryption failed: -22 [ 1177.947086][ T1325] ieee802154 phy1 wpan1: encryption failed: -22 [ 1178.125360][ T1118] bridge0: port 1(bridge_slave_0) entered blocking state [ 1178.125618][ T1118] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1178.134034][ T9942] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1178.290729][ T1125] bridge0: port 2(bridge_slave_1) entered blocking state [ 1178.291037][ T1125] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1178.457528][ T9972] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 1178.504626][ T9972] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 1178.550210][ T9942] 8021q: adding VLAN 0 to HW filter on device team0 [ 1178.579953][ T9972] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 1178.657716][ T9972] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 1178.810416][ T57] bridge0: port 1(bridge_slave_0) entered blocking state [ 1178.810655][ T57] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1178.887678][ T6206] bridge0: port 2(bridge_slave_1) entered blocking state [ 1178.887947][ T6206] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1179.024319][ T9884] veth0_vlan: entered promiscuous mode [ 1179.108932][ T9884] veth1_vlan: entered promiscuous mode [ 1179.539402][ T9884] veth0_macvtap: entered promiscuous mode [ 1179.572280][ T9884] veth1_macvtap: entered promiscuous mode [ 1179.727174][ T9972] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1179.767519][ T9884] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1179.785166][ T9940] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1179.827415][ T9884] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1179.897569][ T9972] 8021q: adding VLAN 0 to HW filter on device team0 [ 1179.897955][ T2155] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1179.906720][ T1125] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1179.907062][ T1125] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1179.908652][ T1125] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1179.946234][ T6206] bridge0: port 1(bridge_slave_0) entered blocking state [ 1179.951469][ T6206] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1180.087792][ T6206] bridge0: port 2(bridge_slave_1) entered blocking state [ 1180.088607][ T6206] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1180.185358][ T9942] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1180.681952][ T6206] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1180.681977][ T6206] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1180.978364][ T43] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1180.978395][ T43] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1181.216488][ T9940] veth0_vlan: entered promiscuous mode [ 1181.363805][ T9940] veth1_vlan: entered promiscuous mode [ 1181.835221][ T9942] veth0_vlan: entered promiscuous mode [ 1181.910499][ T9972] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1183.000302][ T9942] veth1_vlan: entered promiscuous mode [ 1183.135073][ T9940] veth0_macvtap: entered promiscuous mode [ 1183.153865][ T9940] veth1_macvtap: entered promiscuous mode [ 1183.359227][ T9940] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1183.489217][ T9940] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1183.521967][ T9942] veth0_macvtap: entered promiscuous mode [ 1183.612003][ T9942] veth1_macvtap: entered promiscuous mode [ 1183.616106][ T8521] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1183.620503][ T8521] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1183.621112][ T8521] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1183.643949][ T8521] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1184.294398][ T9942] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1184.486297][ T9942] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1184.615131][ T6206] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1184.618475][ T6206] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1184.618602][ T9972] veth0_vlan: entered promiscuous mode [ 1184.619232][ T6206] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1184.619614][ T6206] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1184.657653][ T43] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1184.657675][ T43] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1185.945258][ T9972] veth1_vlan: entered promiscuous mode [ 1187.014847][ T3657] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1187.014875][ T3657] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1187.798947][ T1118] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1187.798978][ T1118] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1189.078619][ T9972] veth0_macvtap: entered promiscuous mode [ 1189.151379][T10081] Invalid logical block size (8192) [ 1189.496487][ T9972] veth1_macvtap: entered promiscuous mode [ 1189.501017][ T57] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1189.501041][ T57] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1190.889932][T10090] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1190.898264][T10090] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1191.018162][ T9972] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1191.286177][T10093] netlink: 36 bytes leftover after parsing attributes in process `syz.6.26'. [ 1191.286716][T10093] netlink: 12 bytes leftover after parsing attributes in process `syz.6.26'. [ 1191.681145][ T9972] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1191.747687][ T3657] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1191.748335][ T3657] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1191.750753][ T3657] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1191.779249][ T3657] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1191.796732][T10093] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 1199.159123][ T3584] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1199.159147][ T3584] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1199.966060][T10095] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1199.966080][T10095] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1200.111098][ T31] IPVS: starting estimator thread 0... [ 1200.144104][T10133] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1200.411472][T10136] IPVS: using max 6 ests per chain, 14400 per kthread [ 1200.586792][T10139] netlink: 8 bytes leftover after parsing attributes in process `syz.9.423'. [ 1200.586819][T10139] netlink: 8 bytes leftover after parsing attributes in process `syz.9.423'. [ 1201.107885][T10144] netdevsim netdevsim5: Direct firmware load for ./file0 failed with error -2 [ 1201.107917][T10144] netdevsim netdevsim5: Falling back to sysfs fallback for: ./file0 [ 1204.334327][T10152] lo speed is unknown, defaulting to 1000 [ 1204.334443][T10152] lo speed is unknown, defaulting to 1000 [ 1204.336015][T10152] lo speed is unknown, defaulting to 1000 [ 1204.368385][T10152] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 1204.462285][T10152] lo speed is unknown, defaulting to 1000 [ 1204.464287][T10152] lo speed is unknown, defaulting to 1000 [ 1204.466151][T10152] lo speed is unknown, defaulting to 1000 [ 1204.468065][T10152] lo speed is unknown, defaulting to 1000 [ 1204.469918][T10152] lo speed is unknown, defaulting to 1000 [ 1204.751686][ T7478] Bluetooth: hci2: Opcode 0x1003 failed: -110 [ 1207.252935][T10172] TCP: TCP_TX_DELAY enabled [ 1207.267474][T10172] program syz.7.428 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1214.522104][T10201] bridge0: port 2(bridge_slave_1) entered disabled state [ 1214.522538][T10201] bridge0: port 1(bridge_slave_0) entered disabled state [ 1214.535316][T10201] bridge0: entered allmulticast mode [ 1214.875538][T10202] bridge_slave_1: left allmulticast mode [ 1214.876301][T10202] bridge_slave_1: left promiscuous mode [ 1214.885156][T10202] bridge0: port 2(bridge_slave_1) entered disabled state [ 1216.019255][T10202] bridge_slave_0: left allmulticast mode [ 1216.019284][T10202] bridge_slave_0: left promiscuous mode [ 1216.019535][T10202] bridge0: port 1(bridge_slave_0) entered disabled state [ 1216.098773][ T5856] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1216.107466][ T5856] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1216.117208][ T5856] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1216.144582][ T5856] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1216.172228][ T5856] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1218.341735][ T7478] Bluetooth: hci2: command tx timeout [ 1219.322968][ T5856] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1219.343159][ T5856] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1219.361651][ T5856] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1219.411565][ T5856] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1219.429191][ T5856] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1220.848708][ T7478] Bluetooth: hci2: command tx timeout [ 1226.803097][ T5856] Bluetooth: hci2: command tx timeout [ 1226.803175][ T7478] Bluetooth: hci3: command tx timeout [ 1233.725443][ T7478] Bluetooth: hci2: command tx timeout [ 1233.725494][ T7478] Bluetooth: hci3: command tx timeout [ 1235.788875][ T7478] Bluetooth: hci3: command tx timeout [ 1236.374251][T10256] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1238.118769][ C0] vkms_vblank_simulate: vblank timer overrun [ 1238.121396][ T7478] Bluetooth: hci3: command tx timeout [ 1238.355212][ C0] vkms_vblank_simulate: vblank timer overrun [ 1238.672187][ C0] vkms_vblank_simulate: vblank timer overrun [ 1238.830336][T10276] netlink: 'syz.8.448': attribute type 39 has an invalid length. [ 1238.832074][ C0] vkms_vblank_simulate: vblank timer overrun [ 1238.995041][ C0] vkms_vblank_simulate: vblank timer overrun [ 1239.142070][ T43] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1239.544133][ C0] vkms_vblank_simulate: vblank timer overrun [ 1239.563405][ T1325] ieee802154 phy0 wpan0: encryption failed: -22 [ 1239.563501][ T1325] ieee802154 phy1 wpan1: encryption failed: -22 [ 1239.671427][ T6024] usb 9-1: new high-speed USB device number 3 using dummy_hcd [ 1239.854199][ C0] vkms_vblank_simulate: vblank timer overrun [ 1239.856015][ T8128] usb 10-1: new high-speed USB device number 2 using dummy_hcd [ 1239.889729][ T6024] usb 9-1: config 1 has an invalid descriptor of length 246, skipping remainder of the config [ 1239.889777][ T6024] usb 9-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 1239.892811][ T6024] usb 9-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1239.892840][ T6024] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1239.892852][ T6024] usb 9-1: Product: syz [ 1239.892860][ T6024] usb 9-1: Manufacturer: syz [ 1239.892867][ T6024] usb 9-1: SerialNumber: syz [ 1239.961654][ T6024] cdc_ether 9-1:1.0: skipping garbage [ 1239.961672][ T6024] usb 9-1: bad CDC descriptors [ 1240.003969][ T8128] usb 10-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 1240.004004][ T8128] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1240.265088][ T8128] usb 10-1: config 0 descriptor?? [ 1240.318129][ C0] vkms_vblank_simulate: vblank timer overrun [ 1240.373962][ T8128] cp210x 10-1:0.0: cp210x converter detected [ 1240.468509][ T5856] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1240.506187][ T5856] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1240.535309][ T5856] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1240.554527][ T5856] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1240.558790][ T5856] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1240.694778][ C0] vkms_vblank_simulate: vblank timer overrun [ 1240.918355][ C0] vkms_vblank_simulate: vblank timer overrun [ 1241.005070][ C0] vkms_vblank_simulate: vblank timer overrun [ 1241.243749][ C0] vkms_vblank_simulate: vblank timer overrun [ 1241.305768][ T43] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1241.655800][ T6024] usb 9-1: USB disconnect, device number 3 [ 1241.656678][ C0] vkms_vblank_simulate: vblank timer overrun [ 1241.992693][ C0] vkms_vblank_simulate: vblank timer overrun [ 1242.015803][T10211] lo speed is unknown, defaulting to 1000 [ 1242.089261][T10225] lo speed is unknown, defaulting to 1000 [ 1242.385303][ C0] vkms_vblank_simulate: vblank timer overrun [ 1242.689160][ C0] vkms_vblank_simulate: vblank timer overrun [ 1242.742788][ T5856] Bluetooth: hci0: command tx timeout [ 1243.005367][ C0] vkms_vblank_simulate: vblank timer overrun [ 1243.037874][ C0] vkms_vblank_simulate: vblank timer overrun [ 1244.563876][ T8128] cp210x 10-1:0.0: failed to get vendor val 0x000e size 3: -71 [ 1244.600855][ T8128] cp210x 10-1:0.0: failed to get vendor val 0x370c size 73: -71 [ 1244.600891][ T8128] cp210x 10-1:0.0: GPIO initialisation failed: -71 [ 1244.832313][ T5856] Bluetooth: hci0: command tx timeout [ 1244.895579][ T8128] usb 10-1: cp210x converter now attached to ttyUSB0 [ 1244.922132][ T8128] usb 10-1: USB disconnect, device number 2 [ 1245.005343][ T8128] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 1245.020324][ T8128] cp210x 10-1:0.0: device disconnected [ 1245.100349][ T43] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1245.517968][T10299] I/O error, dev loop19, sector 0 op 0x0:(READ) flags 0x800 phys_seg 1 prio class 1 [ 1245.518117][T10299] SQUASHFS error: Failed to read block 0x0: -5 [ 1245.748181][T10303] tipc: Started in network mode [ 1245.748206][T10303] tipc: Node identity 4, cluster identity 4711 [ 1245.748219][T10303] tipc: Node number set to 4 [ 1247.160963][ T5856] Bluetooth: hci0: command tx timeout [ 1247.733067][T10299] binder: 10298:10299 ioctl 4018620d 0 returned -22 [ 1248.546723][ T43] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1248.609124][T10281] lo speed is unknown, defaulting to 1000 [ 1249.231587][ T5856] Bluetooth: hci0: command tx timeout [ 1249.304199][ T6024] usb 9-1: new full-speed USB device number 4 using dummy_hcd [ 1249.695085][T10313] netlink: 4 bytes leftover after parsing attributes in process `syz.9.455'. [ 1249.698476][T10313] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1249.812469][ T6024] usb 9-1: config 1 interface 0 has no altsetting 0 [ 1249.815022][ T6024] usb 9-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 1249.815048][ T6024] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1249.815060][ T6024] usb 9-1: Product: syz [ 1249.815068][ T6024] usb 9-1: Manufacturer: syz [ 1249.815077][ T6024] usb 9-1: SerialNumber: syz [ 1249.956537][T10315] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 1249.956675][T10315] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 1249.959576][T10313] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1250.137838][T10315] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 1250.356411][T10315] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1250.356537][T10315] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 1250.578246][T10315] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 1250.632593][ T6024] usblp 9-1:1.0: usblp0: USB Unidirectional printer dev 4 if 0 alt 253 proto 1 vid 0x0525 pid 0xA4A8 [ 1250.754779][T10315] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1250.754888][T10315] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 1250.859516][T10315] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 1250.978525][T10315] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1251.008952][T10315] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 1251.064047][ T43] bridge_slave_1: left allmulticast mode [ 1251.064092][ T43] bridge_slave_1: left promiscuous mode [ 1251.064443][ T43] bridge0: port 2(bridge_slave_1) entered disabled state [ 1251.092536][T10315] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 1251.167171][ T43] bridge_slave_0: left allmulticast mode [ 1251.167214][ T43] bridge_slave_0: left promiscuous mode [ 1251.167560][ T43] bridge0: port 1(bridge_slave_0) entered disabled state [ 1252.109486][ T5856] Bluetooth: hci4: command 0x0c1a tx timeout [ 1252.293088][T10328] /dev/nullb0: Can't open blockdev [ 1252.662587][ T5856] Bluetooth: hci2: command 0x0c1a tx timeout [ 1252.823318][ T7478] Bluetooth: hci3: command 0x0c1a tx timeout [ 1252.824699][ T5984] usb 9-1: USB disconnect, device number 4 [ 1253.108255][ T5856] Bluetooth: hci0: command 0x0c1a tx timeout [ 1254.423185][ T5856] Bluetooth: hci4: command 0x0c1a tx timeout [ 1254.484621][T10306] usblp0: removed [ 1254.948681][ T5856] Bluetooth: hci3: command 0x0c1a tx timeout [ 1254.999314][ T5856] Bluetooth: hci2: command 0x0c1a tx timeout [ 1255.141654][ T7478] Bluetooth: hci0: command 0x0c1a tx timeout [ 1255.591335][ T5984] IPVS: starting estimator thread 0... [ 1255.731418][T10338] IPVS: using max 6 ests per chain, 14400 per kthread [ 1258.007640][ T5856] Bluetooth: hci4: command 0x0c1a tx timeout [ 1258.007716][ T5856] Bluetooth: hci0: command 0x0c1a tx timeout [ 1258.007732][ T5859] Bluetooth: hci2: command 0x0c1a tx timeout [ 1258.007788][ T7478] Bluetooth: hci3: command 0x0c1a tx timeout [ 1258.926964][T10351] Driver unsupported XDP return value 0 on prog (id 159) dev N/A, expect packet loss! [ 1261.322295][ T43] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1261.407263][ T43] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1261.427284][ T43] bond0 (unregistering): Released all slaves [ 1261.539312][T10336] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 1261.540538][T10336] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1261.540666][T10336] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1261.540785][T10336] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1263.033431][T10368] tmpfs: Cannot enable swap on remount if it was disabled on first mount [ 1263.786350][ T7478] Bluetooth: hci4: command 0x0c1a tx timeout [ 1263.786391][ T7478] Bluetooth: hci0: command 0x0c1a tx timeout [ 1263.786412][ T7478] Bluetooth: hci3: command 0x0c1a tx timeout [ 1263.786433][ T7478] Bluetooth: hci2: command 0x0c1a tx timeout [ 1263.870755][T10357] tipc: Started in network mode [ 1263.870786][T10357] tipc: Node identity 4aab3d68f1ed, cluster identity 4711 [ 1263.875481][T10357] tipc: Enabled bearer , priority 0 [ 1264.602539][T10382] fuse: Bad value for 'user_id' [ 1264.602564][T10382] fuse: Bad value for 'user_id' [ 1265.245960][ T31] tipc: Node number set to 3141942632 [ 1266.893466][T10358] tipc: Resetting bearer [ 1267.359326][T10400] netlink: 8 bytes leftover after parsing attributes in process `syz.8.464'. [ 1267.873228][T10400] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_cmd_wq": -EINTR [ 1268.952583][T10354] tipc: Disabling bearer [ 1271.769659][ T37] audit: type=1326 audit(1755984282.974:25): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10426 comm="syz.8.467" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f347e96ebe9 code=0x7ffc0000 [ 1271.769734][ T37] audit: type=1326 audit(1755984282.974:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10426 comm="syz.8.467" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f347e96ebe9 code=0x7ffc0000 [ 1271.769783][ T37] audit: type=1326 audit(1755984282.994:27): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10426 comm="syz.8.467" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f347e96ebe9 code=0x7ffc0000 [ 1271.769830][ T37] audit: type=1326 audit(1755984283.014:28): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10426 comm="syz.8.467" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f347e96ebe9 code=0x7ffc0000 [ 1271.769875][ T37] audit: type=1326 audit(1755984283.014:29): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10426 comm="syz.8.467" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f347e96ebe9 code=0x7ffc0000 [ 1271.769923][ T37] audit: type=1326 audit(1755984283.024:30): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10426 comm="syz.8.467" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f347e96ebe9 code=0x7ffc0000 [ 1271.769980][ T37] audit: type=1326 audit(1755984283.024:31): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10426 comm="syz.8.467" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f347e96ebe9 code=0x7ffc0000 [ 1271.770024][ T37] audit: type=1326 audit(1755984283.024:32): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10426 comm="syz.8.467" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f347e96ebe9 code=0x7ffc0000 [ 1271.770071][ T37] audit: type=1326 audit(1755984283.044:33): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10426 comm="syz.8.467" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f347e96ebe9 code=0x7ffc0000 [ 1272.072917][T10431] unsupported nlmsg_type 40 [ 1274.621673][ T43] hsr_slave_0: left promiscuous mode [ 1274.805859][ T43] hsr_slave_1: left promiscuous mode [ 1274.807278][ T43] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1274.807302][ T43] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1275.419981][ T43] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1275.420008][ T43] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1275.573392][T10450] fanotify: failed to encode fid (type=0, len=0, err=-2) [ 1275.693507][ T7478] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1275.714096][ T7478] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1275.720294][ T7478] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1275.730991][ T43] veth1_macvtap: left promiscuous mode [ 1275.739326][ T7478] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1275.811561][ T7478] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1275.987940][ T43] veth0_macvtap: left promiscuous mode [ 1275.988178][ T43] veth1_vlan: left promiscuous mode [ 1275.988314][ T43] veth0_vlan: left promiscuous mode [ 1278.021375][ T7478] Bluetooth: hci1: command tx timeout [ 1278.329375][T10463] netlink: 116 bytes leftover after parsing attributes in process `syz.8.473'. [ 1278.564320][ T5859] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1278.581829][ T5859] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1278.593659][ T5859] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1278.597465][ T5859] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1278.598415][ T5859] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1280.243452][ T7478] Bluetooth: hci1: command tx timeout [ 1281.307146][ T7478] Bluetooth: hci2: command tx timeout [ 1282.059230][T10479] netlink: 4 bytes leftover after parsing attributes in process `syz.8.475'. [ 1282.255750][T10480] netlink: 'syz.8.475': attribute type 2 has an invalid length. [ 1282.255795][T10480] netlink: 'syz.8.475': attribute type 2 has an invalid length. [ 1282.255866][T10480] netlink: 'syz.8.475': attribute type 2 has an invalid length. [ 1282.255881][T10480] netlink: 8 bytes leftover after parsing attributes in process `syz.8.475'. [ 1282.269464][ T7478] Bluetooth: hci1: command tx timeout [ 1283.382626][ T7478] Bluetooth: hci2: command tx timeout [ 1284.341507][ T7478] Bluetooth: hci1: command tx timeout [ 1284.812853][T10484] block nbd9: Attempted send on invalid socket [ 1284.812902][T10484] I/O error, dev nbd9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 1284.813143][T10484] (syz.9.477,10484,1):ocfs2_get_sector:1714 ERROR: status = -5 [ 1284.813169][T10484] (syz.9.477,10484,1):ocfs2_sb_probe:753 ERROR: status = -5 [ 1284.813190][T10484] (syz.9.477,10484,1):ocfs2_fill_super:989 ERROR: superblock probe failed! [ 1284.813211][T10484] (syz.9.477,10484,1):ocfs2_fill_super:1177 ERROR: status = -5 [ 1286.071293][ T7478] Bluetooth: hci2: command tx timeout [ 1288.101638][ T7478] Bluetooth: hci2: command tx timeout [ 1288.714311][T10498] Bluetooth: MGMT ver 1.23 [ 1290.332238][ T43] team0 (unregistering): Port device team_slave_1 removed [ 1291.202137][ T43] team0 (unregistering): Port device team_slave_0 removed [ 1297.137611][ T37] audit: type=1107 audit(1755984308.674:34): pid=10510 uid=0 auid=4294967295 ses=4294967295 subj=_ msg='' [ 1297.809927][T10281] chnl_net:caif_netlink_parms(): no params data found [ 1297.900607][T10225] chnl_net:caif_netlink_parms(): no params data found [ 1300.009480][T10532] syz.8.486 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 1300.938672][ T1325] ieee802154 phy0 wpan0: encryption failed: -22 [ 1300.938731][ T1325] ieee802154 phy1 wpan1: encryption failed: -22 [ 1301.101651][T10453] lo speed is unknown, defaulting to 1000 [ 1301.983295][ T5859] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1302.041574][ T5859] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1302.058848][ T5859] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1302.149461][ T5859] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1302.162726][ T5859] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1302.957547][T10535] netlink: 28 bytes leftover after parsing attributes in process `syz.8.487'. [ 1304.055034][T10466] lo speed is unknown, defaulting to 1000 [ 1304.271032][ T5859] Bluetooth: hci0: command tx timeout [ 1304.636418][T10536] lo speed is unknown, defaulting to 1000 [ 1306.214912][T10453] chnl_net:caif_netlink_parms(): no params data found [ 1306.343860][ T5859] Bluetooth: hci0: command tx timeout [ 1306.461280][T10565] hugetlbfs: syz.9.489 (10565): Using mlock ulimits for SHM_HUGETLB is obsolete [ 1308.651238][ T5859] Bluetooth: hci0: command tx timeout [ 1309.089697][T10580] netlink: 'syz.9.492': attribute type 10 has an invalid length. [ 1309.150713][T10573] overlay: Unknown parameter '/' [ 1309.546368][T10579] loop7: detected capacity change from 0 to 16384 [ 1309.776897][T10580] 8021q: adding VLAN 0 to HW filter on device team0 [ 1309.817598][T10580] bond0: (slave team0): Enslaving as an active interface with an up link [ 1310.671842][ T7478] Bluetooth: hci0: command tx timeout [ 1313.847879][T10466] chnl_net:caif_netlink_parms(): no params data found [ 1314.046396][T10453] bridge0: port 1(bridge_slave_0) entered blocking state [ 1314.046963][T10453] bridge0: port 1(bridge_slave_0) entered disabled state [ 1314.047264][T10453] bridge_slave_0: entered allmulticast mode [ 1314.050558][T10453] bridge_slave_0: entered promiscuous mode [ 1314.125242][T10536] chnl_net:caif_netlink_parms(): no params data found [ 1314.143634][T10453] bridge0: port 2(bridge_slave_1) entered blocking state [ 1314.144126][T10453] bridge0: port 2(bridge_slave_1) entered disabled state [ 1314.144410][T10453] bridge_slave_1: entered allmulticast mode [ 1314.147812][T10453] bridge_slave_1: entered promiscuous mode [ 1323.215094][T10633] netlink: 40 bytes leftover after parsing attributes in process `syz.8.499'. [ 1326.408483][T10639] ./file0: Can't lookup blockdev [ 1326.440789][T10453] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1327.112520][T10652] block nbd8: Attempted send on invalid socket [ 1327.112562][T10652] I/O error, dev nbd8, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 3 [ 1327.119341][T10652] ADFS-fs (nbd8): error: unable to read block 3, try 0 [ 1329.323212][T10663] dlm: no local IP address has been set [ 1329.323230][T10663] dlm: cannot start dlm midcomms -107 [ 1333.906425][T10453] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1336.044276][ T5859] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1336.048652][ T5859] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1336.101819][ T5859] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1336.105168][ T5859] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1336.106994][ T5859] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1336.556500][T10719] trusted_key: encrypted_key: keyword 'new' not allowed when called from .update method [ 1338.981413][ T7478] Bluetooth: hci3: command tx timeout [ 1341.061336][ T7478] Bluetooth: hci3: command tx timeout [ 1342.506826][ T43] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1342.555587][ T5859] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1342.566787][ T5859] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1342.580310][ T5859] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1342.599585][ T5859] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1342.600517][ T5859] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1343.152188][ T7478] Bluetooth: hci3: command tx timeout [ 1344.661384][ T7478] Bluetooth: hci1: command tx timeout [ 1344.967989][T10749] CUSE: unknown device info "KJ H+ۤ2LhnL1`Ccn80(3նi>f_ٮ,<_eF" [ 1344.968015][T10749] CUSE: unknown device info "3ܟ,̘" [ 1344.968027][T10749] CUSE: unknown device info "J2S Z !e/J+-na4D|G$5O~q [ 1344.968027][T10749] fzXSAxjTǔw xRɐQ(hҏj pVdY0|M?2JIv^R@" [ 1344.968045][T10749] CUSE: unknown device info "!To}ݝ&|L+Uoϲ"FstV:׌E gJ<@c4TMM|" [ 1344.968057][T10749] CUSE: DEVNAME unspecified [ 1344.991542][ T37] audit: type=1326 audit(1755984356.514:35): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10746 comm="syz.8.513" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f347e96ebe9 code=0x0 [ 1346.691210][ T7478] Bluetooth: hci3: command tx timeout [ 1346.874811][ T5859] Bluetooth: hci1: command tx timeout [ 1347.691643][T10761] tmpfs: Unknown parameter 'usrquotaization' [ 1349.268292][ T5859] Bluetooth: hci1: command tx timeout [ 1349.916978][ T43] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1350.033132][T10772] netlink: 28 bytes leftover after parsing attributes in process `syz.8.518'. [ 1350.033192][T10772] netlink: 28 bytes leftover after parsing attributes in process `syz.8.518'. [ 1351.140855][T10536] bridge0: port 1(bridge_slave_0) entered blocking state [ 1351.141025][T10536] bridge0: port 1(bridge_slave_0) entered disabled state [ 1351.141518][T10536] bridge_slave_0: entered allmulticast mode [ 1351.144820][T10536] bridge_slave_0: entered promiscuous mode [ 1351.216511][T10536] bridge0: port 2(bridge_slave_1) entered blocking state [ 1351.216698][T10536] bridge0: port 2(bridge_slave_1) entered disabled state [ 1351.216962][T10536] bridge_slave_1: entered allmulticast mode [ 1351.231047][T10536] bridge_slave_1: entered promiscuous mode [ 1351.256387][T10774] F2FS-fs (nullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 1351.256420][T10774] F2FS-fs (nullb0): Can't find valid F2FS filesystem in 1th superblock [ 1351.256740][T10774] F2FS-fs (nullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 1351.256761][T10774] F2FS-fs (nullb0): Can't find valid F2FS filesystem in 2th superblock [ 1351.311425][ T5859] Bluetooth: hci1: command tx timeout [ 1351.467626][ T43] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1352.661834][T10782] 9pnet_virtio: no channels available for device 127.0.0.1 [ 1353.858418][T10787] IPVS: fo: SCTP 172.20.20.187:0 - no destination available [ 1354.703436][T10712] lo speed is unknown, defaulting to 1000 [ 1354.761383][ T5851] usb 10-1: new low-speed USB device number 3 using dummy_hcd [ 1354.964264][ T43] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1354.985569][ T5851] usb 10-1: unable to get BOS descriptor or descriptor too short [ 1354.987006][ T5851] usb 10-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1354.987033][ T5851] usb 10-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1355.021436][ T5851] usb 10-1: string descriptor 0 read error: -22 [ 1355.022772][ T5851] usb 10-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1355.022792][ T5851] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1355.070143][T10536] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1355.230506][T10536] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1355.246759][ T5851] usb 10-1: invalid UAC_HEADER (v1) [ 1355.270123][T10737] lo speed is unknown, defaulting to 1000 [ 1355.824087][ T5851] snd-usb-audio 10-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 1356.014639][T10536] team0: Port device team_slave_0 added [ 1356.096938][T10536] team0: Port device team_slave_1 added [ 1356.542382][ T5851] usb 10-1: USB disconnect, device number 3 [ 1356.643984][ T37] audit: type=1326 audit(1755984368.194:36): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10792 comm="syz.8.523" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f347e96ebe9 code=0x7ffc0000 [ 1356.644050][ T37] audit: type=1326 audit(1755984368.194:37): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10792 comm="syz.8.523" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f347e96ebe9 code=0x7ffc0000 [ 1356.644099][ T37] audit: type=1326 audit(1755984368.194:38): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10792 comm="syz.8.523" exe="/root/syz-executor" sig=0 arch=c000003e syscall=271 compat=0 ip=0x7f347e96ebe9 code=0x7ffc0000 [ 1356.655044][ T37] audit: type=1326 audit(1755984368.204:39): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10792 comm="syz.8.523" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f347e96ebe9 code=0x7ffc0000 [ 1356.655110][ T37] audit: type=1326 audit(1755984368.204:40): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10792 comm="syz.8.523" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f347e96ebe9 code=0x7ffc0000 [ 1356.655159][ T37] audit: type=1326 audit(1755984368.204:41): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10792 comm="syz.8.523" exe="/root/syz-executor" sig=0 arch=c000003e syscall=283 compat=0 ip=0x7f347e96ebe9 code=0x7ffc0000 [ 1356.800079][ T37] audit: type=1326 audit(1755984368.344:42): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10792 comm="syz.8.523" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f347e96ebe9 code=0x7ffc0000 [ 1356.800146][ T37] audit: type=1326 audit(1755984368.344:43): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10792 comm="syz.8.523" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f347e96ebe9 code=0x7ffc0000 [ 1360.433314][T10796] workqueue: Failed to create a rescuer kthread for wq "wg-crypt-wireguard%d": -EINTR [ 1360.628135][T10820] netlink: 8 bytes leftover after parsing attributes in process `syz.9.525'. [ 1360.628156][T10820] netlink: 8 bytes leftover after parsing attributes in process `syz.9.525'. [ 1361.915079][ T7478] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1361.919279][ T7478] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1361.926061][ T7478] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1361.935557][ T7478] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1361.936451][ T7478] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1362.074277][T10834] netlink: 'syz.9.527': attribute type 1 has an invalid length. [ 1362.074293][T10834] netlink: 224 bytes leftover after parsing attributes in process `syz.9.527'. [ 1362.190948][ T1325] ieee802154 phy0 wpan0: encryption failed: -22 [ 1362.191035][ T1325] ieee802154 phy1 wpan1: encryption failed: -22 [ 1363.448733][T10847] (syz.9.528,10847,1):ocfs2_fill_super:989 ERROR: superblock probe failed! [ 1363.448801][T10847] (syz.9.528,10847,1):ocfs2_fill_super:1177 ERROR: status = -22 [ 1364.183808][ T5859] Bluetooth: hci2: command tx timeout [ 1364.589568][T10831] syz.8.526 (10831): drop_caches: 2 [ 1364.698044][ T43] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1366.331640][ T5859] Bluetooth: hci2: command tx timeout [ 1366.376752][T10864] netlink: 132 bytes leftover after parsing attributes in process `syz.9.530'. [ 1367.076011][T10835] lo speed is unknown, defaulting to 1000 [ 1367.559304][ T43] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1368.342423][ T5859] Bluetooth: hci2: command tx timeout [ 1369.620786][ T43] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1370.421536][ T5859] Bluetooth: hci2: command tx timeout [ 1370.665725][T10897] random: crng reseeded on system resumption [ 1370.787228][T10901] netlink: 8 bytes leftover after parsing attributes in process `syz.8.535'. [ 1370.787302][T10901] netlink: 4 bytes leftover after parsing attributes in process `syz.8.535'. [ 1371.245067][ T43] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1373.306186][T10712] chnl_net:caif_netlink_parms(): no params data found [ 1374.118388][T10923] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1374.131922][T10923] netlink: 8 bytes leftover after parsing attributes in process `syz.8.537'. [ 1374.131940][T10923] netlink: 8 bytes leftover after parsing attributes in process `syz.8.537'. [ 1374.540163][T10737] chnl_net:caif_netlink_parms(): no params data found [ 1377.942657][ T7478] Bluetooth: hci2: command 0x0405 tx timeout [ 1378.691598][T10712] bridge0: port 1(bridge_slave_0) entered blocking state [ 1378.691786][T10712] bridge0: port 1(bridge_slave_0) entered disabled state [ 1378.692075][T10712] bridge_slave_0: entered allmulticast mode [ 1378.726589][T10712] bridge_slave_0: entered promiscuous mode [ 1378.991891][T10712] bridge0: port 2(bridge_slave_1) entered blocking state [ 1378.992060][T10712] bridge0: port 2(bridge_slave_1) entered disabled state [ 1378.994718][T10712] bridge_slave_1: entered allmulticast mode [ 1378.998140][T10712] bridge_slave_1: entered promiscuous mode [ 1380.691062][ T43] bridge_slave_1: left allmulticast mode [ 1380.782338][ T43] bridge_slave_1: left promiscuous mode [ 1380.782671][ T43] bridge0: port 2(bridge_slave_1) entered disabled state [ 1380.904340][ T43] bridge_slave_0: left allmulticast mode [ 1380.904384][ T43] bridge_slave_0: left promiscuous mode [ 1380.904687][ T43] bridge0: port 1(bridge_slave_0) entered disabled state [ 1381.296544][ T43] bridge_slave_1: left allmulticast mode [ 1381.296586][ T43] bridge_slave_1: left promiscuous mode [ 1381.296925][ T43] bridge0: port 2(bridge_slave_1) entered disabled state [ 1381.713044][ T43] bridge_slave_0: left allmulticast mode [ 1381.713087][ T43] bridge_slave_0: left promiscuous mode [ 1381.713428][ T43] bridge0: port 1(bridge_slave_0) entered disabled state [ 1382.448002][ T43] bond0 (unregistering): Released all slaves [ 1383.031489][ T43] bond0 (unregistering): Released all slaves [ 1383.461049][ C1] vkms_vblank_simulate: vblank timer overrun [ 1383.674364][ C1] vkms_vblank_simulate: vblank timer overrun [ 1384.108623][ C1] vkms_vblank_simulate: vblank timer overrun [ 1384.285213][ C1] vkms_vblank_simulate: vblank timer overrun [ 1384.411339][ T43] bond0 (unregistering): Released all slaves [ 1384.461809][ C1] vkms_vblank_simulate: vblank timer overrun [ 1384.546030][ C1] vkms_vblank_simulate: vblank timer overrun [ 1384.633219][ C1] vkms_vblank_simulate: vblank timer overrun [ 1384.690938][ C1] vkms_vblank_simulate: vblank timer overrun [ 1384.753038][ C1] vkms_vblank_simulate: vblank timer overrun [ 1385.732543][ C1] vkms_vblank_simulate: vblank timer overrun [ 1385.989866][ C1] vkms_vblank_simulate: vblank timer overrun [ 1386.249373][ C1] vkms_vblank_simulate: vblank timer overrun [ 1386.794447][ C1] vkms_vblank_simulate: vblank timer overrun [ 1386.950150][ C1] vkms_vblank_simulate: vblank timer overrun [ 1387.173229][ C1] vkms_vblank_simulate: vblank timer overrun [ 1387.484124][ C1] vkms_vblank_simulate: vblank timer overrun [ 1387.568236][ C1] vkms_vblank_simulate: vblank timer overrun [ 1387.651677][ C1] vkms_vblank_simulate: vblank timer overrun [ 1387.902851][ C1] vkms_vblank_simulate: vblank timer overrun [ 1388.854503][ T43] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1388.913567][ T43] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1388.937557][ T43] bond0 (unregistering): Released all slaves [ 1391.312193][ T43] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1391.383365][ T43] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1391.406994][ T43] bond0 (unregistering): Released all slaves [ 1391.985288][T10992] netlink: 4 bytes leftover after parsing attributes in process `syz.8.545'. [ 1393.537971][T10712] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1395.071036][T10712] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1395.071384][T10737] bridge0: port 1(bridge_slave_0) entered blocking state [ 1395.071555][T10737] bridge0: port 1(bridge_slave_0) entered disabled state [ 1395.071925][T10737] bridge_slave_0: entered allmulticast mode [ 1395.151979][T10737] bridge_slave_0: entered promiscuous mode [ 1395.253921][T10737] bridge0: port 2(bridge_slave_1) entered blocking state [ 1395.254105][T10737] bridge0: port 2(bridge_slave_1) entered disabled state [ 1395.254381][T10737] bridge_slave_1: entered allmulticast mode [ 1395.331442][T10737] bridge_slave_1: entered promiscuous mode [ 1398.276413][ T7478] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1398.317296][ T7478] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1398.326214][ T7478] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1398.347924][ T7478] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1398.360721][ T7478] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1398.426712][T10835] chnl_net:caif_netlink_parms(): no params data found [ 1400.511480][ T5859] Bluetooth: hci0: command tx timeout [ 1401.121556][T11048] netlink: 12 bytes leftover after parsing attributes in process `syz.9.552'. [ 1401.121674][T11048] netlink: 12 bytes leftover after parsing attributes in process `syz.9.552'. [ 1402.584508][ T7478] Bluetooth: hci0: command tx timeout [ 1402.663810][ T9768] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 1402.682966][ T9768] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 1402.711032][ T9768] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 1402.713298][ T9768] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 1402.714292][ T9768] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 1403.475365][T11053] netlink: 14 bytes leftover after parsing attributes in process `syz.9.553'. [ 1404.661316][ T9768] Bluetooth: hci0: command tx timeout [ 1404.851836][T11052] ALSA: mixer_oss: invalid OSS volume '' [ 1405.293754][ T9768] Bluetooth: hci6: command tx timeout [ 1405.704574][T11063] siw: device registration error -23 [ 1406.475620][T11062] tipc: Enabled bearer , priority 10 [ 1406.741378][ T9768] Bluetooth: hci0: command tx timeout [ 1407.473756][ T9768] Bluetooth: hci6: command tx timeout [ 1409.072589][T11053] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1409.152789][T11053] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1409.222632][T11053] bond0 (unregistering): (slave team0): Releasing backup interface [ 1409.334753][T11053] bond0 (unregistering): Released all slaves [ 1409.401746][T11054] ipvlan0: entered allmulticast mode [ 1409.401778][T11054] veth0_vlan: entered allmulticast mode [ 1409.542505][ T9768] Bluetooth: hci6: command tx timeout [ 1411.564807][T11023] lo speed is unknown, defaulting to 1000 [ 1411.621291][ T5859] Bluetooth: hci6: command tx timeout [ 1412.894989][T11084] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1412.905360][T11084] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1418.696675][T11091] syz.9.559 (11091): drop_caches: 2 [ 1418.726201][T11049] lo speed is unknown, defaulting to 1000 [ 1419.273049][ T9] libceph: connect (1)[c::]:6789 error -101 [ 1419.273341][ T9] libceph: mon0 (1)[c::]:6789 connect error [ 1419.585530][ T9] libceph: connect (1)[c::]:6789 error -101 [ 1419.585777][ T9] libceph: mon0 (1)[c::]:6789 connect error [ 1419.601601][T11096] ceph: No mds server is up or the cluster is laggy [ 1420.138499][ T9] libceph: connect (1)[c::]:6789 error -101 [ 1420.138744][ T9] libceph: mon0 (1)[c::]:6789 connect error [ 1421.224628][ T9768] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1421.232056][ T9768] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1421.241662][ T9768] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1421.267166][ T9768] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1421.268109][ T9768] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1423.309225][ T9768] Bluetooth: hci1: command tx timeout [ 1423.641135][ T1325] ieee802154 phy1 wpan1: encryption failed: -22 [ 1425.353429][T11139] netlink: 'syz.9.565': attribute type 1 has an invalid length. [ 1425.353447][T11139] netlink: 224 bytes leftover after parsing attributes in process `syz.9.565'. [ 1425.381501][ T9768] Bluetooth: hci1: command tx timeout [ 1427.461603][ T9768] Bluetooth: hci1: command tx timeout [ 1429.541223][ T9768] Bluetooth: hci1: command tx timeout [ 1430.132182][ T0] sched: DL replenish lagged too much [ 1431.654627][T11142] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 1431.930309][T11111] lo speed is unknown, defaulting to 1000 [ 1434.845067][T11162] netlink: 44 bytes leftover after parsing attributes in process `syz.9.570'. [ 1435.882544][T10353] usb 10-1: new high-speed USB device number 4 using dummy_hcd [ 1436.035055][T10353] usb 10-1: Using ep0 maxpacket: 32 [ 1436.039030][T10353] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 1436.041873][T10353] usb 10-1: New USB device found, idVendor=04da, idProduct=390d, bcdDevice=93.a8 [ 1436.041901][T10353] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1436.041920][T10353] usb 10-1: Product: syz [ 1436.041935][T10353] usb 10-1: Manufacturer: syz [ 1436.041949][T10353] usb 10-1: SerialNumber: syz [ 1436.049864][T10353] usb 10-1: config 0 descriptor?? [ 1437.516974][T11023] chnl_net:caif_netlink_parms(): no params data found [ 1437.539946][T10353] ath6kl: Failed to submit usb control message: -110 [ 1437.540011][T10353] ath6kl: unable to send the bmi data to the device: -110 [ 1437.540027][T10353] ath6kl: Unable to send get target info: -110 [ 1437.841252][T10353] ath6kl: Failed to init ath6kl core: -110 [ 1437.844530][T10353] ath6kl_usb 10-1:0.0: probe with driver ath6kl_usb failed with error -110 [ 1437.949439][T10353] usb 10-1: USB disconnect, device number 4 [ 1438.506387][ T43] hsr_slave_0: left promiscuous mode [ 1438.542166][ T43] hsr_slave_1: left promiscuous mode [ 1438.542957][ T43] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1438.542979][ T43] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1438.611646][ T43] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1438.611687][ T43] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1438.613152][T11178] netlink: 4 bytes leftover after parsing attributes in process `syz.8.573'. [ 1439.442787][ T43] hsr_slave_0: left promiscuous mode [ 1439.491323][ T43] hsr_slave_1: left promiscuous mode [ 1439.494552][ T43] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1439.494593][ T43] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1439.587103][ T43] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1439.587148][ T43] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1440.094142][ T43] veth1_macvtap: left promiscuous mode [ 1440.099596][ T43] veth0_macvtap: left promiscuous mode [ 1440.100384][ T43] veth1_vlan: left promiscuous mode [ 1440.100650][ T43] veth0_vlan: left promiscuous mode [ 1440.452970][ T43] veth1_macvtap: left promiscuous mode [ 1440.453131][ T43] veth0_macvtap: left promiscuous mode [ 1440.453470][ T43] veth1_vlan: left promiscuous mode [ 1440.453772][ T43] veth0_vlan: left promiscuous mode [ 1447.182444][ C1] vkms_vblank_simulate: vblank timer overrun [ 1447.316434][ C1] vkms_vblank_simulate: vblank timer overrun [ 1447.675074][ C1] vkms_vblank_simulate: vblank timer overrun [ 1447.734924][ C1] vkms_vblank_simulate: vblank timer overrun [ 1447.835493][ C1] vkms_vblank_simulate: vblank timer overrun [ 1447.892852][ C1] vkms_vblank_simulate: vblank timer overrun [ 1447.958664][ C1] vkms_vblank_simulate: vblank timer overrun [ 1448.073390][ C1] vkms_vblank_simulate: vblank timer overrun [ 1448.139855][ C1] vkms_vblank_simulate: vblank timer overrun [ 1448.201868][ C1] vkms_vblank_simulate: vblank timer overrun [ 1448.284596][ C1] vkms_vblank_simulate: vblank timer overrun [ 1448.344245][ C1] vkms_vblank_simulate: vblank timer overrun [ 1448.407020][ C1] vkms_vblank_simulate: vblank timer overrun [ 1448.462590][ C1] vkms_vblank_simulate: vblank timer overrun [ 1448.535363][ C1] vkms_vblank_simulate: vblank timer overrun [ 1448.578140][ C1] vkms_vblank_simulate: vblank timer overrun [ 1448.647970][ C1] vkms_vblank_simulate: vblank timer overrun [ 1448.693840][ C1] vkms_vblank_simulate: vblank timer overrun [ 1448.768018][ C1] vkms_vblank_simulate: vblank timer overrun [ 1448.879380][ C1] vkms_vblank_simulate: vblank timer overrun [ 1448.936406][ C1] vkms_vblank_simulate: vblank timer overrun [ 1448.992950][ C1] vkms_vblank_simulate: vblank timer overrun [ 1449.106054][ C1] vkms_vblank_simulate: vblank timer overrun [ 1449.165321][ C1] vkms_vblank_simulate: vblank timer overrun [ 1449.223522][ T43] team0 (unregistering): Port device team_slave_1 removed [ 1449.267108][ C1] vkms_vblank_simulate: vblank timer overrun [ 1449.431340][ C1] vkms_vblank_simulate: vblank timer overrun [ 1449.494181][ C1] vkms_vblank_simulate: vblank timer overrun [ 1449.563531][ T43] team0 (unregistering): Port device team_slave_0 removed [ 1449.604383][ C1] vkms_vblank_simulate: vblank timer overrun [ 1449.663233][ C1] vkms_vblank_simulate: vblank timer overrun [ 1449.730435][ C1] vkms_vblank_simulate: vblank timer overrun [ 1449.782597][ C1] vkms_vblank_simulate: vblank timer overrun [ 1449.856421][ C1] vkms_vblank_simulate: vblank timer overrun [ 1449.916561][ C1] vkms_vblank_simulate: vblank timer overrun [ 1449.975743][ C1] vkms_vblank_simulate: vblank timer overrun [ 1450.032507][ C1] vkms_vblank_simulate: vblank timer overrun [ 1450.086484][ C1] vkms_vblank_simulate: vblank timer overrun [ 1450.143717][ C1] vkms_vblank_simulate: vblank timer overrun [ 1450.221250][ C1] vkms_vblank_simulate: vblank timer overrun [ 1450.303439][ C1] vkms_vblank_simulate: vblank timer overrun [ 1450.375498][ C1] vkms_vblank_simulate: vblank timer overrun [ 1450.421887][ C1] vkms_vblank_simulate: vblank timer overrun [ 1450.508507][ C1] vkms_vblank_simulate: vblank timer overrun [ 1450.565818][ C1] vkms_vblank_simulate: vblank timer overrun [ 1450.635138][ C1] vkms_vblank_simulate: vblank timer overrun [ 1450.693081][ C1] vkms_vblank_simulate: vblank timer overrun [ 1450.771961][ C1] vkms_vblank_simulate: vblank timer overrun [ 1450.858993][ C1] vkms_vblank_simulate: vblank timer overrun [ 1450.940210][ C1] vkms_vblank_simulate: vblank timer overrun [ 1451.012027][ C1] vkms_vblank_simulate: vblank timer overrun [ 1451.087400][ C1] vkms_vblank_simulate: vblank timer overrun [ 1451.155625][ C1] vkms_vblank_simulate: vblank timer overrun [ 1451.224013][ C1] vkms_vblank_simulate: vblank timer overrun [ 1451.317137][ C1] vkms_vblank_simulate: vblank timer overrun [ 1451.390011][ C1] vkms_vblank_simulate: vblank timer overrun [ 1451.469124][ C1] vkms_vblank_simulate: vblank timer overrun [ 1451.568001][ C1] vkms_vblank_simulate: vblank timer overrun [ 1451.647676][ C1] vkms_vblank_simulate: vblank timer overrun [ 1451.727230][ C1] vkms_vblank_simulate: vblank timer overrun [ 1451.793164][ C1] vkms_vblank_simulate: vblank timer overrun [ 1451.857974][ C1] vkms_vblank_simulate: vblank timer overrun [ 1451.999719][ C1] vkms_vblank_simulate: vblank timer overrun [ 1452.054531][ C1] vkms_vblank_simulate: vblank timer overrun [ 1453.966252][ T5859] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1453.996598][ T5859] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1454.009519][ T5859] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1454.014717][ T5859] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1454.016257][ T5859] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1456.139655][ T43] team0 (unregistering): Port device team_slave_1 removed [ 1456.221451][ T9768] Bluetooth: hci2: command tx timeout [ 1456.400876][ T5859] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1456.415681][ T5859] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1456.489800][ T5859] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1456.516397][ T5859] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1456.517413][ T5859] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1456.536467][ T43] team0 (unregistering): Port device team_slave_0 removed [ 1458.261270][ T9768] Bluetooth: hci2: command tx timeout [ 1458.836419][ T9768] Bluetooth: hci3: command tx timeout [ 1460.315274][T11173] vlan2: entered promiscuous mode [ 1460.315553][T11173] vlan2: entered allmulticast mode [ 1460.315569][T11173] hsr_slave_1: entered allmulticast mode [ 1460.341481][ T9768] Bluetooth: hci2: command tx timeout [ 1461.345184][ T9768] Bluetooth: hci3: command tx timeout [ 1461.425923][ T5859] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 1461.455547][ T5859] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 1461.551691][ T5859] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 1461.622676][ T5859] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 1461.661581][ T5859] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 1463.124514][ T5859] Bluetooth: hci2: command tx timeout [ 1463.285317][ C0] vkms_vblank_simulate: vblank timer overrun [ 1463.384233][ T9768] Bluetooth: hci3: command tx timeout [ 1463.589880][ C0] vkms_vblank_simulate: vblank timer overrun [ 1464.013595][ C0] vkms_vblank_simulate: vblank timer overrun [ 1464.441558][ C0] vkms_vblank_simulate: vblank timer overrun [ 1464.514661][ C0] vkms_vblank_simulate: vblank timer overrun [ 1464.786333][ C0] vkms_vblank_simulate: vblank timer overrun [ 1465.141386][ T9768] Bluetooth: hci7: command tx timeout [ 1465.276343][ C0] vkms_vblank_simulate: vblank timer overrun [ 1465.363580][ C0] vkms_vblank_simulate: vblank timer overrun [ 1465.470723][ C0] vkms_vblank_simulate: vblank timer overrun [ 1465.476582][ T9768] Bluetooth: hci3: command tx timeout [ 1465.614363][T11242] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 1465.677670][ C0] vkms_vblank_simulate: vblank timer overrun [ 1465.915229][ C0] vkms_vblank_simulate: vblank timer overrun [ 1465.986234][ C0] vkms_vblank_simulate: vblank timer overrun [ 1466.043441][ C0] vkms_vblank_simulate: vblank timer overrun [ 1466.269465][ C0] vkms_vblank_simulate: vblank timer overrun [ 1466.345794][ C0] vkms_vblank_simulate: vblank timer overrun [ 1466.439470][ C0] vkms_vblank_simulate: vblank timer overrun [ 1467.226524][ T9768] Bluetooth: hci7: command tx timeout [ 1467.279608][ C0] vkms_vblank_simulate: vblank timer overrun [ 1469.320627][ T9768] Bluetooth: hci7: command tx timeout [ 1469.634925][T11213] lo speed is unknown, defaulting to 1000 [ 1469.842910][T11217] lo speed is unknown, defaulting to 1000 [ 1470.092682][T11227] lo speed is unknown, defaulting to 1000 [ 1471.433772][ T9768] Bluetooth: hci7: command tx timeout [ 1471.790193][T11111] chnl_net:caif_netlink_parms(): no params data found [ 1474.119451][ C1] vkms_vblank_simulate: vblank timer overrun [ 1474.431914][ C1] vkms_vblank_simulate: vblank timer overrun [ 1474.913290][ C1] vkms_vblank_simulate: vblank timer overrun [ 1475.562761][ C1] vkms_vblank_simulate: vblank timer overrun [ 1476.045684][ C1] vkms_vblank_simulate: vblank timer overrun [ 1476.535339][ C1] vkms_vblank_simulate: vblank timer overrun [ 1476.657072][ C1] vkms_vblank_simulate: vblank timer overrun [ 1477.103787][T11111] bridge0: port 1(bridge_slave_0) entered blocking state [ 1477.103945][T11111] bridge0: port 1(bridge_slave_0) entered disabled state [ 1477.104233][T11111] bridge_slave_0: entered allmulticast mode [ 1477.107489][T11111] bridge_slave_0: entered promiscuous mode [ 1477.123869][ C1] vkms_vblank_simulate: vblank timer overrun [ 1477.137910][T11111] bridge0: port 2(bridge_slave_1) entered blocking state [ 1477.138133][T11111] bridge0: port 2(bridge_slave_1) entered disabled state [ 1477.138372][T11111] bridge_slave_1: entered allmulticast mode [ 1477.142289][T11111] bridge_slave_1: entered promiscuous mode [ 1477.458909][ C1] vkms_vblank_simulate: vblank timer overrun [ 1477.846732][ C1] vkms_vblank_simulate: vblank timer overrun [ 1478.171558][ C1] vkms_vblank_simulate: vblank timer overrun [ 1478.611910][ C1] vkms_vblank_simulate: vblank timer overrun [ 1478.796569][ C1] vkms_vblank_simulate: vblank timer overrun [ 1479.884196][T11217] chnl_net:caif_netlink_parms(): no params data found [ 1480.251939][T11213] chnl_net:caif_netlink_parms(): no params data found [ 1481.510182][T11227] chnl_net:caif_netlink_parms(): no params data found [ 1481.815400][ T5859] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1481.826203][ T5859] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1481.832783][ T5859] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1481.857975][ T5859] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1481.869212][ T5859] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1484.151250][ T9768] Bluetooth: hci0: command tx timeout [ 1485.027254][T11321] block device autoloading is deprecated and will be removed. [ 1485.069893][ T1325] ieee802154 phy1 wpan1: encryption failed: -22 [ 1486.455950][ T9768] Bluetooth: hci0: command tx timeout [ 1488.501627][ T9768] Bluetooth: hci0: command tx timeout [ 1489.291913][T11217] bridge0: port 1(bridge_slave_0) entered blocking state [ 1489.292094][T11217] bridge0: port 1(bridge_slave_0) entered disabled state [ 1489.292366][T11217] bridge_slave_0: entered allmulticast mode [ 1489.295634][T11217] bridge_slave_0: entered promiscuous mode [ 1489.327248][T11345] netlink: 200 bytes leftover after parsing attributes in process `syz.9.597'. [ 1489.332588][T11345] netlink: 44 bytes leftover after parsing attributes in process `syz.9.597'. [ 1489.437879][T11346] netlink: 'syz.9.597': attribute type 1 has an invalid length. [ 1489.437902][T11346] netlink: 224 bytes leftover after parsing attributes in process `syz.9.597'. [ 1489.523397][T11217] bridge0: port 2(bridge_slave_1) entered blocking state [ 1489.523572][T11217] bridge0: port 2(bridge_slave_1) entered disabled state [ 1489.523792][T11217] bridge_slave_1: entered allmulticast mode [ 1489.528740][T11217] bridge_slave_1: entered promiscuous mode [ 1489.530785][T11306] lo speed is unknown, defaulting to 1000 [ 1490.308102][T11213] bridge0: port 1(bridge_slave_0) entered blocking state [ 1490.308319][T11213] bridge0: port 1(bridge_slave_0) entered disabled state [ 1490.308603][T11213] bridge_slave_0: entered allmulticast mode [ 1490.312189][T11213] bridge_slave_0: entered promiscuous mode [ 1490.440312][T11227] bridge0: port 1(bridge_slave_0) entered blocking state [ 1490.440479][T11227] bridge0: port 1(bridge_slave_0) entered disabled state [ 1490.440701][T11227] bridge_slave_0: entered allmulticast mode [ 1490.466570][T11227] bridge_slave_0: entered promiscuous mode [ 1490.592015][ T9768] Bluetooth: hci0: command tx timeout [ 1491.096313][T11213] bridge0: port 2(bridge_slave_1) entered blocking state [ 1491.096509][T11213] bridge0: port 2(bridge_slave_1) entered disabled state [ 1491.096790][T11213] bridge_slave_1: entered allmulticast mode [ 1491.100035][T11213] bridge_slave_1: entered promiscuous mode [ 1491.217176][T11227] bridge0: port 2(bridge_slave_1) entered blocking state [ 1491.217346][T11227] bridge0: port 2(bridge_slave_1) entered disabled state [ 1491.217565][T11227] bridge_slave_1: entered allmulticast mode [ 1491.220764][T11227] bridge_slave_1: entered promiscuous mode [ 1491.865818][T11352] netlink: 4 bytes leftover after parsing attributes in process `syz.9.599'. [ 1491.892501][T11352] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1491.892542][T11352] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1492.043043][T11217] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1492.415519][T11217] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1492.628696][T11213] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1492.778171][T11227] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1494.127400][T11213] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1494.287172][T11227] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1495.005953][T11217] team0: Port device team_slave_0 added [ 1495.286206][ T43] bridge_slave_1: left allmulticast mode [ 1495.286441][ T43] bridge_slave_1: left promiscuous mode [ 1495.335417][ T43] bridge0: port 2(bridge_slave_1) entered disabled state [ 1495.716560][ T43] bridge_slave_0: left allmulticast mode [ 1495.717006][ T43] bridge_slave_0: left promiscuous mode [ 1495.744732][ T43] bridge0: port 1(bridge_slave_0) entered disabled state [ 1495.863809][ T43] bridge_slave_1: left allmulticast mode [ 1495.863836][ T43] bridge_slave_1: left promiscuous mode [ 1495.864045][ T43] bridge0: port 2(bridge_slave_1) entered disabled state [ 1495.953160][ T43] bridge_slave_0: left allmulticast mode [ 1495.953207][ T43] bridge_slave_0: left promiscuous mode [ 1495.953518][ T43] bridge0: port 1(bridge_slave_0) entered disabled state [ 1496.026910][ T43] bridge_slave_1: left allmulticast mode [ 1496.026948][ T43] bridge_slave_1: left promiscuous mode [ 1496.027245][ T43] bridge0: port 2(bridge_slave_1) entered disabled state [ 1496.089880][T11380] netlink: 4 bytes leftover after parsing attributes in process `syz.9.603'. [ 1496.113512][ T43] bridge_slave_0: left allmulticast mode [ 1496.113550][ T43] bridge_slave_0: left promiscuous mode [ 1496.113849][ T43] bridge0: port 1(bridge_slave_0) entered disabled state [ 1496.204288][ T43] bridge_slave_1: left allmulticast mode [ 1496.204315][ T43] bridge_slave_1: left promiscuous mode [ 1496.204502][ T43] bridge0: port 2(bridge_slave_1) entered disabled state [ 1496.283289][ T43] bridge_slave_0: left allmulticast mode [ 1496.283329][ T43] bridge_slave_0: left promiscuous mode [ 1496.283664][ T43] bridge0: port 1(bridge_slave_0) entered disabled state [ 1496.380088][ T43] bridge_slave_1: left allmulticast mode [ 1496.380126][ T43] bridge_slave_1: left promiscuous mode [ 1496.380456][ T43] bridge0: port 2(bridge_slave_1) entered disabled state [ 1496.443609][ T43] bridge_slave_0: left allmulticast mode [ 1496.443645][ T43] bridge_slave_0: left promiscuous mode [ 1496.443969][ T43] bridge0: port 1(bridge_slave_0) entered disabled state [ 1496.720558][ T43] bond0 (unregistering): Released all slaves [ 1496.930585][ T43] bond0 (unregistering): Released all slaves [ 1497.132668][ T43] bond0 (unregistering): Released all slaves [ 1497.323884][ T43] bond0 (unregistering): Released all slaves [ 1497.500328][ T43] bond0 (unregistering): Released all slaves [ 1497.722216][ T43] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1497.802265][ T43] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1497.886513][ T43] bond0 (unregistering): Released all slaves [ 1498.122102][ T43] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1498.242946][ T43] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1498.316677][ T43] bond0 (unregistering): Released all slaves [ 1498.481759][ T43] bond0 (unregistering): Released all slaves [ 1498.694672][ T43] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1498.791918][ T43] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1498.866667][ T43] bond0 (unregistering): Released all slaves [ 1499.100589][T11217] team0: Port device team_slave_1 added [ 1499.382389][T11213] team0: Port device team_slave_0 added [ 1499.572869][T11227] team0: Port device team_slave_0 added [ 1499.584047][T11213] team0: Port device team_slave_1 added [ 1500.122606][T11227] team0: Port device team_slave_1 added [ 1500.126358][T11217] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1500.126379][T11217] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1500.126410][T11217] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1500.178018][T11389] netlink: 212376 bytes leftover after parsing attributes in process `syz.9.604'. [ 1500.661857][T11217] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1500.661878][T11217] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1500.661904][T11217] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1500.710875][ T8128] usb 10-1: new high-speed USB device number 5 using dummy_hcd [ 1500.783672][T11213] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1500.783694][T11213] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1500.783725][T11213] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1500.881531][ T8128] usb 10-1: Using ep0 maxpacket: 8 [ 1500.907702][ T8128] usb 10-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1500.907743][ T8128] usb 10-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1500.907769][ T8128] usb 10-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1500.907795][ T8128] usb 10-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1500.907845][ T8128] usb 10-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1500.907870][ T8128] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1501.162690][ T8128] usb 10-1: GET_CAPABILITIES returned 0 [ 1501.162753][ T8128] usbtmc 10-1:16.0: can't read capabilities [ 1501.293123][T11213] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1501.293141][T11213] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1501.293159][T11213] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1501.384439][T11227] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1501.384458][T11227] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1501.384484][T11227] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1501.712864][T11227] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1501.712888][T11227] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1501.712916][T11227] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1501.751516][ T8128] usb 10-1: USB disconnect, device number 5 [ 1502.234354][T11217] hsr_slave_0: entered promiscuous mode [ 1502.235227][T11217] hsr_slave_1: entered promiscuous mode [ 1502.235785][T11217] debugfs: 'hsr0' already exists in 'hsr' [ 1502.235804][T11217] Cannot create hsr debugfs directory [ 1503.088333][T11213] hsr_slave_0: entered promiscuous mode [ 1503.090101][T11213] hsr_slave_1: entered promiscuous mode [ 1503.102092][T11213] debugfs: 'hsr0' already exists in 'hsr' [ 1503.102128][T11213] Cannot create hsr debugfs directory [ 1505.217033][T11227] hsr_slave_0: entered promiscuous mode [ 1505.218906][T11227] hsr_slave_1: entered promiscuous mode [ 1505.220185][T11227] debugfs: 'hsr0' already exists in 'hsr' [ 1505.220215][T11227] Cannot create hsr debugfs directory [ 1507.144285][T11306] chnl_net:caif_netlink_parms(): no params data found [ 1510.902708][ T43] team0 (unregistering): Port device team_slave_1 removed [ 1511.112607][ T43] team0 (unregistering): Port device team_slave_0 removed [ 1512.820858][T11408] pim6reg: entered allmulticast mode [ 1512.870502][T11408] pim6reg: left allmulticast mode [ 1513.406563][T11414] ------------[ cut here ]------------ [ 1513.406583][T11414] verifier bug: REG INVARIANTS VIOLATION (true_reg2): range bounds violation u64=[0x0, 0x7800000000] s64=[0x0, 0xffffffffffffffff] u32=[0x80000000, 0x0] s32=[0x0, 0xffffffff] var_off=(0x0, 0x7800000000)(1) [ 1513.406772][T11414] WARNING: CPU: 0 PID: 11414 at kernel/bpf/verifier.c:2728 reg_bounds_sanity_check+0x6e6/0xc20 [ 1513.406823][T11414] Modules linked in: [ 1513.406846][T11414] CPU: 0 UID: 0 PID: 11414 Comm: syz.9.608 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 1513.406871][T11414] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1513.406885][T11414] RIP: 0010:reg_bounds_sanity_check+0x6e6/0xc20 [ 1513.406918][T11414] Code: 24 20 4c 8b 44 24 60 4c 8b 4c 24 58 41 ff 75 00 53 41 57 55 ff 74 24 38 ff 74 24 70 ff 74 24 40 e8 3f 5d ab ff 48 83 c4 38 90 <0f> 0b 90 90 48 bb 00 00 00 00 00 fc ff df 4d 89 f7 4c 8b 74 24 08 [ 1513.406937][T11414] RSP: 0018:ffffc9000511ef08 EFLAGS: 00010282 [ 1513.406955][T11414] RAX: c0fd55e0d3d69c00 RBX: 0000000000000000 RCX: 0000000000080000 [ 1513.406971][T11414] RDX: ffffc9000d369000 RSI: 000000000002090d RDI: 000000000002090e [ 1513.406987][T11414] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1513.407012][T11414] R10: dffffc0000000000 R11: ffffed1017104863 R12: ffff888039d8f000 [ 1513.407029][T11414] R13: ffff888039d8f020 R14: ffff888039d8f038 R15: 00000000ffffffff [ 1513.407045][T11414] FS: 00007f342bc2e6c0(0000) GS:ffff8881268c2000(0000) knlGS:0000000000000000 [ 1513.407064][T11414] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1513.407079][T11414] CR2: 00007f342bc2df98 CR3: 000000003de46000 CR4: 00000000003526f0 [ 1513.407100][T11414] Call Trace: [ 1513.407109][T11414] [ 1513.407145][T11414] reg_set_min_max+0x23c/0x300 [ 1513.407187][T11414] check_cond_jmp_op+0x1625/0x2910 [ 1513.407238][T11414] ? __pfx_check_cond_jmp_op+0x10/0x10 [ 1513.407270][T11414] ? incomplete_read_marks+0xc4/0x1f0 [ 1513.407309][T11414] do_check+0x6751/0xe520 [ 1513.407411][T11414] ? __pfx_do_check+0x10/0x10 [ 1513.407436][T11414] ? init_func_state+0x1ddf/0x2d20 [ 1513.407474][T11414] do_check_common+0x1949/0x24f0 [ 1513.407519][T11414] bpf_check+0x17473/0x1d2e0 [ 1513.407539][T11414] ? is_bpf_text_address+0x26/0x2b0 [ 1513.407605][T11414] ? rtlock_slowlock_locked+0xd8/0x4010 [ 1513.407629][T11414] ? __lock_acquire+0xab9/0xd20 [ 1513.407662][T11414] ? __lock_acquire+0xab9/0xd20 [ 1513.407694][T11414] ? __lock_acquire+0xab9/0xd20 [ 1513.407731][T11414] ? do_raw_spin_lock+0x121/0x290 [ 1513.407775][T11414] ? __lock_acquire+0xab9/0xd20 [ 1513.407812][T11414] ? __pfx_bpf_check+0x10/0x10 [ 1513.407833][T11414] ? ktime_get_with_offset+0x8c/0x2a0 [ 1513.407866][T11414] ? seqcount_lockdep_reader_access+0x123/0x1c0 [ 1513.407889][T11414] ? lockdep_hardirqs_on+0x9c/0x150 [ 1513.407917][T11414] ? ktime_get_with_offset+0x8c/0x2a0 [ 1513.407938][T11414] ? seqcount_lockdep_reader_access+0x175/0x1c0 [ 1513.407962][T11414] ? __pfx_seqcount_lockdep_reader_access+0x10/0x10 [ 1513.408005][T11414] ? __asan_memset+0x22/0x50 [ 1513.408030][T11414] ? bpf_obj_name_cpy+0x194/0x1e0 [ 1513.408059][T11414] ? bpf_lsm_bpf_prog_load+0x9/0x20 [ 1513.408085][T11414] ? security_bpf_prog_load+0x7f/0x310 [ 1513.408119][T11414] bpf_prog_load+0x1318/0x1930 [ 1513.408161][T11414] ? __pfx_bpf_prog_load+0x10/0x10 [ 1513.408212][T11414] ? bpf_lsm_bpf+0x9/0x20 [ 1513.408234][T11414] ? security_bpf+0x7e/0x300 [ 1513.408261][T11414] __sys_bpf+0x528/0x870 [ 1513.408289][T11414] ? __pfx___sys_bpf+0x10/0x10 [ 1513.408328][T11414] ? exc_page_fault+0x76/0xf0 [ 1513.408369][T11414] __x64_sys_bpf+0x7c/0x90 [ 1513.408393][T11414] do_syscall_64+0xfa/0x3b0 [ 1513.408419][T11414] ? lockdep_hardirqs_on+0x9c/0x150 [ 1513.408444][T11414] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1513.408466][T11414] ? clear_bhb_loop+0x60/0xb0 [ 1513.408491][T11414] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1513.408511][T11414] RIP: 0033:0x7f342d9cebe9 [ 1513.408531][T11414] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1513.408549][T11414] RSP: 002b:00007f342bc2e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1513.408570][T11414] RAX: ffffffffffffffda RBX: 00007f342dbf5fa0 RCX: 00007f342d9cebe9 [ 1513.408585][T11414] RDX: 0000000000000048 RSI: 00002000000054c0 RDI: 0000000000000005 [ 1513.408599][T11414] RBP: 00007f342da51e19 R08: 0000000000000000 R09: 0000000000000000 [ 1513.408612][T11414] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1513.408625][T11414] R13: 00007f342dbf6038 R14: 00007f342dbf5fa0 R15: 00007ffdca0a9478 [ 1513.408658][T11414] [ 1513.408670][T11414] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 1513.408685][T11414] CPU: 0 UID: 0 PID: 11414 Comm: syz.9.608 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 1513.408709][T11414] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1513.408722][T11414] Call Trace: [ 1513.408730][T11414] [ 1513.408738][T11414] dump_stack_lvl+0x99/0x250 [ 1513.408772][T11414] ? __asan_memcpy+0x40/0x70 [ 1513.408794][T11414] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1513.408826][T11414] ? __pfx__printk+0x10/0x10 [ 1513.408866][T11414] vpanic+0x281/0x750 [ 1513.408898][T11414] ? __pfx__printk+0x10/0x10 [ 1513.408922][T11414] ? __pfx_vpanic+0x10/0x10 [ 1513.408955][T11414] ? is_bpf_text_address+0x26/0x2b0 [ 1513.409006][T11414] panic+0xb9/0xc0 [ 1513.409036][T11414] ? __pfx_panic+0x10/0x10 [ 1513.409084][T11414] __warn+0x31b/0x4b0 [ 1513.409113][T11414] ? reg_bounds_sanity_check+0x6e6/0xc20 [ 1513.409147][T11414] ? reg_bounds_sanity_check+0x6e6/0xc20 [ 1513.409178][T11414] report_bug+0x2be/0x4f0 [ 1513.409204][T11414] ? reg_bounds_sanity_check+0x6e6/0xc20 [ 1513.409235][T11414] ? reg_bounds_sanity_check+0x6e6/0xc20 [ 1513.409264][T11414] ? reg_bounds_sanity_check+0x6e8/0xc20 [ 1513.409295][T11414] handle_bug+0x84/0x160 [ 1513.409327][T11414] exc_invalid_op+0x1a/0x50 [ 1513.409358][T11414] asm_exc_invalid_op+0x1a/0x20 [ 1513.409377][T11414] RIP: 0010:reg_bounds_sanity_check+0x6e6/0xc20 [ 1513.409409][T11414] Code: 24 20 4c 8b 44 24 60 4c 8b 4c 24 58 41 ff 75 00 53 41 57 55 ff 74 24 38 ff 74 24 70 ff 74 24 40 e8 3f 5d ab ff 48 83 c4 38 90 <0f> 0b 90 90 48 bb 00 00 00 00 00 fc ff df 4d 89 f7 4c 8b 74 24 08 [ 1513.409427][T11414] RSP: 0018:ffffc9000511ef08 EFLAGS: 00010282 [ 1513.409444][T11414] RAX: c0fd55e0d3d69c00 RBX: 0000000000000000 RCX: 0000000000080000 [ 1513.409459][T11414] RDX: ffffc9000d369000 RSI: 000000000002090d RDI: 000000000002090e [ 1513.409473][T11414] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1513.409486][T11414] R10: dffffc0000000000 R11: ffffed1017104863 R12: ffff888039d8f000 [ 1513.409503][T11414] R13: ffff888039d8f020 R14: ffff888039d8f038 R15: 00000000ffffffff [ 1513.409564][T11414] reg_set_min_max+0x23c/0x300 [ 1513.409602][T11414] check_cond_jmp_op+0x1625/0x2910 [ 1513.409649][T11414] ? __pfx_check_cond_jmp_op+0x10/0x10 [ 1513.409681][T11414] ? incomplete_read_marks+0xc4/0x1f0 [ 1513.409719][T11414] do_check+0x6751/0xe520 [ 1513.409822][T11414] ? __pfx_do_check+0x10/0x10 [ 1513.409846][T11414] ? init_func_state+0x1ddf/0x2d20 [ 1513.409883][T11414] do_check_common+0x1949/0x24f0 [ 1513.409928][T11414] bpf_check+0x17473/0x1d2e0 [ 1513.409947][T11414] ? is_bpf_text_address+0x26/0x2b0 [ 1513.410019][T11414] ? rtlock_slowlock_locked+0xd8/0x4010 [ 1513.410041][T11414] ? __lock_acquire+0xab9/0xd20 [ 1513.410074][T11414] ? __lock_acquire+0xab9/0xd20 [ 1513.410106][T11414] ? __lock_acquire+0xab9/0xd20 [ 1513.410141][T11414] ? do_raw_spin_lock+0x121/0x290 [ 1513.410185][T11414] ? __lock_acquire+0xab9/0xd20 [ 1513.410221][T11414] ? __pfx_bpf_check+0x10/0x10 [ 1513.410241][T11414] ? ktime_get_with_offset+0x8c/0x2a0 [ 1513.410271][T11414] ? seqcount_lockdep_reader_access+0x123/0x1c0 [ 1513.410295][T11414] ? lockdep_hardirqs_on+0x9c/0x150 [ 1513.410321][T11414] ? ktime_get_with_offset+0x8c/0x2a0 [ 1513.410343][T11414] ? seqcount_lockdep_reader_access+0x175/0x1c0 [ 1513.410366][T11414] ? __pfx_seqcount_lockdep_reader_access+0x10/0x10 [ 1513.410401][T11414] ? __asan_memset+0x22/0x50 [ 1513.410424][T11414] ? bpf_obj_name_cpy+0x194/0x1e0 [ 1513.410453][T11414] ? bpf_lsm_bpf_prog_load+0x9/0x20 [ 1513.410478][T11414] ? security_bpf_prog_load+0x7f/0x310 [ 1513.410509][T11414] bpf_prog_load+0x1318/0x1930 [ 1513.410550][T11414] ? __pfx_bpf_prog_load+0x10/0x10 [ 1513.410602][T11414] ? bpf_lsm_bpf+0x9/0x20 [ 1513.410625][T11414] ? security_bpf+0x7e/0x300 [ 1513.410655][T11414] __sys_bpf+0x528/0x870 [ 1513.410684][T11414] ? __pfx___sys_bpf+0x10/0x10 [ 1513.410723][T11414] ? exc_page_fault+0x76/0xf0 [ 1513.410771][T11414] __x64_sys_bpf+0x7c/0x90 [ 1513.410795][T11414] do_syscall_64+0xfa/0x3b0 [ 1513.410822][T11414] ? lockdep_hardirqs_on+0x9c/0x150 [ 1513.410848][T11414] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1513.410870][T11414] ? clear_bhb_loop+0x60/0xb0 [ 1513.410896][T11414] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1513.410917][T11414] RIP: 0033:0x7f342d9cebe9 [ 1513.410935][T11414] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1513.410953][T11414] RSP: 002b:00007f342bc2e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1513.410974][T11414] RAX: ffffffffffffffda RBX: 00007f342dbf5fa0 RCX: 00007f342d9cebe9 [ 1513.410989][T11414] RDX: 0000000000000048 RSI: 00002000000054c0 RDI: 0000000000000005 [ 1513.411015][T11414] RBP: 00007f342da51e19 R08: 0000000000000000 R09: 0000000000000000 [ 1513.411025][T11414] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1513.411037][T11414] R13: 00007f342dbf6038 R14: 00007f342dbf5fa0 R15: 00007ffdca0a9478 [ 1513.411067][T11414] [ 1513.411403][T11414] Kernel Offset: disabled