last executing test programs: 35.232628974s ago: executing program 4 (id=70): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0xfffffffffffffffd}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000a, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = fsopen(&(0x7f0000000240)='tracefs\x00', 0x1) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1000, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x42, 0x0) umount2(&(0x7f00000002c0)='./file0\x00', 0xb) fsconfig$FSCONFIG_SET_STRING(r3, 0x1, &(0x7f0000000280)='gid', &(0x7f0000000040)='0\x00#\x00\xd0\x00 \x00\x00qS\x00\x00\x00\x00\x00\x00\x00\x00$\xf6_\xbdI\x1c\xf2\xa9]\xcc\xe0*\xef\x01\x8d\x15\xd2h\x93\xc9\xb57\xc3\xeaEb\xf8\xe6,\xdf\xd4\xfae\x84\xcc\xd5\"d\xf0D\xde\x1e-\x98\x9f\x81{\xfc$\xc4\xbcF\xf8\xc8\x8d\xcb\x98\xf2\x1e\xe4\'U\xb3\xf8\xd3\xe6\xd7\x80Y\xc2\xeb\n\xb8_\xe8\x96YY\xe3\xc7\xe6\xf28\x19\xa6\xa7\xfa\xdb\r\x00\x00\x00\x86N\xb2fh\x19\xee#\xcc\x0f\xed\xfea\xdc\x88\xcb%bW\xd35\xda=\xac\x1d\xae\x93\xfd\'T6\x94\n\xa4\x9cU\xc4\fA~[\xbf\x8b\x90\xfe\x04\xe7U\xff\x01\x00\x00\x00\x00\x00\x00\x96t\\\x0f\x12C\xf0\xe5C\xbc(Vc!a\xc1\xe39\xc6b\x905\xf8\xc9@h\x01\xf5\xcb\x88\xdf9\xaf5\xc8a:z\xe4\xcbag&67\x814\xf6}\xe10v6l\x8e\xa8\x10\x94JmDv\xcc^\xf1\xc4g\xd6,\x1e\xa0\xcc\xbf\xfd\x97\v\b?\x839\x85N\x1c\xc1\xcb\xfc\x85\xd2\n\x02\"\xf2\x81g\x90\x01n%\x7f_\xe1\tf>>\xb5\xfb\"\xab\xdb\x06\x12e\x14\x11~\x9a\bR-\x85\xc3\xa9\xe6\xf6R\x11\"\xc3\xc9\xfc\x14s X\xec\xdd\xc2qB\x85\xf0\xd7\x97\xc0\xf6\x0e\x00\x00\x00\x00\x00\x00\x00\xf9\xdcaA\x95\x9fUjHo\x93\xa0jh:\xe3\xa9\xd0:&\f\xb2VK=c&!92\xb8@A\x9eb\xab\xbd\xf8#,\x8e\x86T_\xc4\x88\x9b\x11vC\x14\x99j\x01R \xeb\xaaa\xaab\xe4B\x88jST\xfbt \x85\x13\xc73', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x100000000000000) 25.986552049s ago: executing program 4 (id=91): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(0x4) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='cgroup.controllers\x00', 0x275a, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f0000000000)=@sg0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)='nfs\x00', 0x0, &(0x7f0000000240)) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) move_mount(0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffff9c, 0x0, 0x64) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x1c3102) writev(r2, 0x0, 0x0) shmctl$SHM_LOCK(0x0, 0xb) shmat(0x0, &(0x7f0000ffd000/0x1000)=nil, 0x7000) shmctl$SHM_UNLOCK(0x0, 0xc) close(r1) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r3, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f000000040000000400000040"], 0x48) ioctl$SNDRV_PCM_IOCTL_HW_PARAMS(r1, 0xc2604111, &(0x7f0000000500)={0x8, [[0x8001, 0x8001, 0x0, 0x2, 0x3, 0x1, 0x6, 0x5], [0xfffffffa, 0x6, 0x6, 0x10001, 0x4, 0x4, 0xb1, 0x3], [0x1, 0xd, 0x2, 0x4dfb, 0x7106, 0x0, 0x7, 0x9]], '\x00', [{0xd4, 0x2, 0x1, 0x0, 0x0, 0x1}, {0x2, 0x2, 0x1, 0x1, 0x0, 0x1}, {0xdc, 0x3, 0x0, 0x1, 0x1}, {0x9, 0x80, 0x0, 0x1}, {0x0, 0x4, 0x1, 0x1, 0x0, 0x1}, {0x9, 0x4, 0x1, 0x0, 0x1}, {0x5, 0x4, 0x0, 0x0, 0x1, 0x1}, {0x1, 0xc, 0x1, 0x1}, {0x7, 0x8, 0x1, 0x1, 0x1, 0x1}, {0x3, 0x0, 0x1, 0x1, 0x1}, {0x0, 0x1a, 0x1, 0x1}, {0x1, 0x3, 0x0, 0x1}], '\x00', 0x81}) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000a80)={r4, &(0x7f0000000940), &(0x7f0000000a40)=@tcp6=r3}, 0x20) connect$unix(r1, &(0x7f0000000940)=@file={0x0, './file0\x00'}, 0x6e) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x4) rmdir(&(0x7f0000000080)='./file0\x00') syz_emit_ethernet(0x46, &(0x7f0000000480)={@local, @empty, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, "fca33f", 0x10, 0x3c, 0x0, @dev, @local, {[@fragment={0x0, 0x0, 0xfd, 0x0, 0x0, 0x0, 0x66}, @srh={0x3b, 0x0, 0x4, 0x0, 0x5, 0x0, 0x8001}]}}}}}, 0x0) recvfrom(r0, &(0x7f0000000480)=""/115, 0x73, 0x13, 0x0, 0x0) 24.152727198s ago: executing program 4 (id=93): syz_emit_ethernet(0x56, 0x0, 0x0) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) r0 = socket(0x10, 0x803, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100000008e}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) clock_adjtime(0x0, &(0x7f0000000280)={0x1000000000066fb, 0x800000000004, 0x2000000d, 0x0, 0x0, 0x51, 0x0, 0x4, 0x0, 0x0, 0x0, 0x240b, 0x3f, 0x9, 0x0, 0x0, 0xfffffffffffffffd, 0x1fff, 0xfffffffffffffffc, 0x4, 0x0, 0x0, 0x0, 0x100000000003f89, 0x0, 0x18ab}) r4 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) close(r4) r5 = socket$inet6(0xa, 0x80003, 0x6) setsockopt$inet6_IPV6_XFRM_POLICY(r5, 0x29, 0x23, &(0x7f0000000340)={{{@in=@broadcast, @in6=@dev={0xfe, 0x80, '\x00', 0xfd}, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0x4, 0x0, 0xa78a}, 0xfffffffe, 0x0, 0x1}, {{@in=@empty, 0x0, 0x33}, 0x0, @in=@rand_addr=0x64010101, 0x0, 0x3, 0x2, 0x7}}, 0xe4) sendmmsg(r5, &(0x7f0000000480), 0x2e9, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f00000002c0)={'veth0_to_team\x00', &(0x7f0000000000)=@ethtool_cmd={0x2c, 0x4, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x3]}}) bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="0500000005000000008000000a00000000000000", @ANYRES32=0x1, @ANYBLOB, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) 15.814190344s ago: executing program 4 (id=113): openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$nl_rdma(0x10, 0x3, 0x14) openat$audio(0xffffff9c, 0x0, 0x48100, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = openat$vnet(0xffffff9c, &(0x7f00000000c0), 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000021c0)='./file0\x00', 0x3a) mount$tmpfs(0x0, 0x0, &(0x7f0000000280), 0x800004, 0x0) mount$tmpfs(0x0, 0x0, 0x0, 0x2ac0b2, 0x0) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000680)={0x1, 0x1, &(0x7f0000000180)=""/102, 0x0, &(0x7f00000005c0)=""/182, 0x5000}) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x121a03, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000080)=0x3) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000180)=0x93) syz_open_dev$cec(0x0, 0x0, 0xe8c00) epoll_create1(0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) r3 = socket$kcm(0x29, 0x2, 0x0) write$cgroup_pressure(r3, &(0x7f0000000140)={'full'}, 0xfffffdef) 14.911638567s ago: executing program 2 (id=115): sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x90) syz_emit_ethernet(0x66, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000400)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) write$binfmt_register(0xffffffffffffffff, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) sendmsg$NFULNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4004042}, 0x0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="010000000200000002000000"], 0x50) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x5, 0x9, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x15, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000047b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000100850000000100000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 12.631235181s ago: executing program 2 (id=118): socket$netlink(0x10, 0x3, 0x0) shutdown(0xffffffffffffffff, 0x1) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r2) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x10) sendmsg$nl_route_sched(r1, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x24, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000740)=@newtfilter={0x60, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x5}, {}, {0xd}}, [@filter_kind_options=@f_basic={{0xa}, {0x30, 0x2, [@TCA_BASIC_EMATCHES={0x2c, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xffff}}, @TCA_EMATCH_TREE_LIST={0x20, 0x2, 0x0, 0x1, [@TCF_EM_NBYTE={0x10, 0x1}, @TCF_EM_META={0xc, 0x1}]}]}]}}]}, 0x60}}, 0x0) 11.502244887s ago: executing program 0 (id=120): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-serpent-avx2\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r1 = accept4(r0, 0x0, 0x0, 0x80800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed88", 0x3a}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11", 0xce}], 0x3, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) 11.377594569s ago: executing program 2 (id=121): setsockopt$MRT_FLUSH(0xffffffffffffffff, 0x0, 0xd1, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet6_mptcp_buf(r3, 0x11c, 0x1, &(0x7f0000000700)=""/147, &(0x7f00000007c0)=0x93) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) setresuid(0xee00, 0xffffffffffffffff, 0x0) sendmsg$NFT_MSG_GETFLOWTABLE(r4, 0x0, 0x12) 11.23971798s ago: executing program 4 (id=123): syz_emit_ethernet(0x56, 0x0, 0x0) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) r0 = socket(0x10, 0x803, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100000008e}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) clock_adjtime(0x0, &(0x7f0000000280)={0x1000000000066fb, 0x800000000004, 0x2000000d, 0x0, 0x0, 0x51, 0x0, 0x4, 0x0, 0x0, 0x0, 0x240b, 0x3f, 0x9, 0x0, 0x0, 0xfffffffffffffffd, 0x1fff, 0xfffffffffffffffc, 0x4, 0x0, 0x0, 0x0, 0x100000000003f89, 0x0, 0x18ab}) r4 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) close(r4) r5 = socket$inet6(0xa, 0x80003, 0x6) setsockopt$inet6_IPV6_XFRM_POLICY(r5, 0x29, 0x23, &(0x7f0000000340)={{{@in=@broadcast, @in6=@dev={0xfe, 0x80, '\x00', 0xfd}, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0x4, 0x0, 0xa78a}, 0xfffffffe, 0x0, 0x1}, {{@in=@empty, 0x0, 0x33}, 0x0, @in=@rand_addr=0x64010101, 0x0, 0x3, 0x2, 0x7}}, 0xe4) sendmmsg(r5, &(0x7f0000000480), 0x2e9, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f00000002c0)={'veth0_to_team\x00', &(0x7f0000000000)=@ethtool_cmd={0x2c, 0x4, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x3]}}) bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="0500000005000000008000000a00000000000000", @ANYRES32=0x1, @ANYBLOB, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) 11.051877445s ago: executing program 0 (id=124): socket$unix(0x1, 0x1, 0x0) r0 = socket$can_bcm(0x1d, 0x2, 0x2) syz_usb_connect$hid(0x5, 0x0, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000000c0)={'vxcan1\x00', 0x0}) r2 = socket(0x1d, 0x2, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000000)={'vxcan0\x00', 0x0}) bind$can_j1939(r2, &(0x7f0000000380)={0x1d, r3, 0x1, {0x0, 0x1, 0x3}, 0xfe}, 0x18) sendmsg$nl_route_sched_retired(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@deltclass={0x24, 0x29, 0x1, 0x70bd2d, 0x25dfdbfb, {0x0, 0x0, 0x0, r1, {0xfff3, 0xffff}, {0x7, 0xd}, {0xb, 0x7}}}, 0x24}}, 0x20040800) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r2) r4 = socket$netlink(0x10, 0x3, 0x0) syz_genetlink_get_family_id$wireguard(&(0x7f0000000280), r2) sendmsg$netlink(r4, 0x0, 0x0) 9.537591137s ago: executing program 2 (id=126): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$inet_sctp(0x2, 0x1, 0x84) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x6) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x2, 0x7fff7ffc}]}) close_range(r3, 0xffffffffffffffff, 0x200000000000000) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/net\x00') syz_open_procfs(0x0, &(0x7f0000005840)='net/snmp6\x00') r4 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800"/13], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={r4, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa) r5 = syz_open_procfs(0x0, &(0x7f0000000080)='fdinfo/3\x00') read$qrtrtun(r5, &(0x7f00000004c0)=""/57, 0x39) 8.088491395s ago: executing program 2 (id=127): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x6) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x2, 0x7fff7ffc}]}) close_range(r3, 0xffffffffffffffff, 0x200000000000000) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/net\x00') syz_open_procfs(0x0, &(0x7f0000005840)='net/snmp6\x00') r4 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={r4, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa) r5 = syz_open_procfs(0x0, &(0x7f0000000080)='fdinfo/3\x00') read$qrtrtun(r5, &(0x7f00000004c0)=""/57, 0x39) 6.653468976s ago: executing program 2 (id=129): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0xfffffffffffffffd}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000a, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = fsopen(&(0x7f0000000240)='tracefs\x00', 0x1) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1000, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x42, 0x0) umount2(&(0x7f00000002c0)='./file0\x00', 0xb) fsconfig$FSCONFIG_SET_STRING(r3, 0x1, &(0x7f0000000280)='gid', &(0x7f0000000040)='0\x00#\x00\xd0\x00 \x00\x00qS\x00\x00\x00\x00\x00\x00\x00\x00$\xf6_\xbdI\x1c\xf2\xa9]\xcc\xe0*\xef\x01\x8d\x15\xd2h\x93\xc9\xb57\xc3\xeaEb\xf8\xe6,\xdf\xd4\xfae\x84\xcc\xd5\"d\xf0D\xde\x1e-\x98\x9f\x81{\xfc$\xc4\xbcF\xf8\xc8\x8d\xcb\x98\xf2\x1e\xe4\'U\xb3\xf8\xd3\xe6\xd7\x80Y\xc2\xeb\n\xb8_\xe8\x96YY\xe3\xc7\xe6\xf28\x19\xa6\xa7\xfa\xdb\r\x00\x00\x00\x86N\xb2fh\x19\xee#\xcc\x0f\xed\xfea\xdc\x88\xcb%bW\xd35\xda=\xac\x1d\xae\x93\xfd\'T6\x94\n\xa4\x9cU\xc4\fA~[\xbf\x8b\x90\xfe\x04\xe7U\xff\x01\x00\x00\x00\x00\x00\x00\x96t\\\x0f\x12C\xf0\xe5C\xbc(Vc!a\xc1\xe39\xc6b\x905\xf8\xc9@h\x01\xf5\xcb\x88\xdf9\xaf5\xc8a:z\xe4\xcbag&67\x814\xf6}\xe10v6l\x8e\xa8\x10\x94JmDv\xcc^\xf1\xc4g\xd6,\x1e\xa0\xcc\xbf\xfd\x97\v\b?\x839\x85N\x1c\xc1\xcb\xfc\x85\xd2\n\x02\"\xf2\x81g\x90\x01n%\x7f_\xe1\tf>>\xb5\xfb\"\xab\xdb\x06\x12e\x14\x11~\x9a\bR-\x85\xc3\xa9\xe6\xf6R\x11\"\xc3\xc9\xfc\x14s X\xec\xdd\xc2qB\x85\xf0\xd7\x97\xc0\xf6\x0e\x00\x00\x00\x00\x00\x00\x00\xf9\xdcaA\x95\x9fUjHo\x93\xa0jh:\xe3\xa9\xd0:&\f\xb2VK=c&!92\xb8@A\x9eb\xab\xbd\xf8#,\x8e\x86T_\xc4\x88\x9b\x11vC\x14\x99j\x01R \xeb\xaaa\xaab\xe4B\x88jST\xfbt \x85\x13\xc73', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x100000000000000) 6.592379205s ago: executing program 3 (id=130): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(0x4) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='cgroup.controllers\x00', 0x275a, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f0000000000)=@sg0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)='nfs\x00', 0x0, &(0x7f0000000240)) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) move_mount(0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffff9c, 0x0, 0x64) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x1c3102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0x1}], 0x1) shmctl$SHM_LOCK(0x0, 0xb) shmat(0x0, &(0x7f0000ffd000/0x1000)=nil, 0x7000) shmctl$SHM_UNLOCK(0x0, 0xc) close(r1) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r3, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f000000040000000400000040"], 0x48) ioctl$SNDRV_PCM_IOCTL_HW_PARAMS(r1, 0xc2604111, &(0x7f0000000500)={0x8, [[0x8001, 0x8001, 0x0, 0x2, 0x3, 0x1, 0x6, 0x5], [0xfffffffa, 0x6, 0x6, 0x10001, 0x4, 0x4, 0xb1, 0x3], [0x1, 0xd, 0x2, 0x4dfb, 0x7106, 0x0, 0x7, 0x9]], '\x00', [{0xd4, 0x2, 0x1, 0x0, 0x0, 0x1}, {0x2, 0x2, 0x1, 0x1, 0x0, 0x1}, {0xdc, 0x3, 0x0, 0x1, 0x1}, {0x9, 0x80, 0x0, 0x1}, {0x0, 0x4, 0x1, 0x1, 0x0, 0x1}, {0x9, 0x4, 0x1, 0x0, 0x1}, {0x5, 0x4, 0x0, 0x0, 0x1, 0x1}, {0x1, 0xc, 0x1, 0x1}, {0x7, 0x8, 0x1, 0x1, 0x1, 0x1}, {0x3, 0x0, 0x1, 0x1, 0x1}, {0x0, 0x1a, 0x1, 0x1}, {0x1, 0x3, 0x0, 0x1}], '\x00', 0x81}) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000a80)={r4, &(0x7f0000000940), &(0x7f0000000a40)=@tcp6=r3}, 0x20) connect$unix(r1, &(0x7f0000000940)=@file={0x0, './file0\x00'}, 0x6e) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x4) rmdir(&(0x7f0000000080)='./file0\x00') syz_emit_ethernet(0x46, &(0x7f0000000480)={@local, @empty, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, "fca33f", 0x10, 0x3c, 0x0, @dev, @local, {[@fragment={0x0, 0x0, 0xfd, 0x0, 0x0, 0x0, 0x66}, @srh={0x3b, 0x0, 0x4, 0x0, 0x5, 0x0, 0x8001}]}}}}}, 0x0) recvfrom(r0, &(0x7f0000000480)=""/115, 0x73, 0x13, 0x0, 0x0) 6.424190321s ago: executing program 0 (id=131): socket$netlink(0x10, 0x3, 0x0) shutdown(0xffffffffffffffff, 0x1) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r2) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x10) sendmsg$nl_route_sched(r1, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r0, 0x0, 0x0) 6.355169185s ago: executing program 1 (id=132): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(0x4) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='cgroup.controllers\x00', 0x275a, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f0000000000)=@sg0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)='nfs\x00', 0x0, &(0x7f0000000240)) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) move_mount(0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffff9c, 0x0, 0x64) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x1c3102) writev(r2, &(0x7f0000000840)=[{0x0}, {0x0}], 0x2) shmctl$SHM_LOCK(0x0, 0xb) shmat(0x0, &(0x7f0000ffd000/0x1000)=nil, 0x7000) shmctl$SHM_UNLOCK(0x0, 0xc) close(r1) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f000000040000000400000040"], 0x48) ioctl$SNDRV_PCM_IOCTL_HW_PARAMS(r1, 0xc2604111, &(0x7f0000000500)={0x8, [[0x8001, 0x8001, 0x0, 0x2, 0x3, 0x1, 0x6, 0x5], [0xfffffffa, 0x6, 0x6, 0x10001, 0x4, 0x4, 0xb1, 0x3], [0x1, 0xd, 0x2, 0x4dfb, 0x7106, 0x0, 0x7, 0x9]], '\x00', [{0xd4, 0x2, 0x1, 0x0, 0x0, 0x1}, {0x2, 0x2, 0x1, 0x1, 0x0, 0x1}, {0xdc, 0x3, 0x0, 0x1, 0x1}, {0x9, 0x80, 0x0, 0x1}, {0x0, 0x4, 0x1, 0x1, 0x0, 0x1}, {0x9, 0x4, 0x1, 0x0, 0x1}, {0x5, 0x4, 0x0, 0x0, 0x1, 0x1}, {0x1, 0xc, 0x1, 0x1}, {0x7, 0x8, 0x1, 0x1, 0x1, 0x1}, {0x3, 0x0, 0x1, 0x1, 0x1}, {0x0, 0x1a, 0x1, 0x1}, {0x1, 0x3, 0x0, 0x1}], '\x00', 0x81}) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000a80)={r4, &(0x7f0000000940), &(0x7f0000000a40)=@tcp6=r3}, 0x20) connect$unix(r1, &(0x7f0000000940)=@file={0x0, './file0\x00'}, 0x6e) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x4) rmdir(&(0x7f0000000080)='./file0\x00') syz_emit_ethernet(0x46, &(0x7f0000000480)={@local, @empty, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, "fca33f", 0x10, 0x3c, 0x0, @dev, @local, {[@fragment={0x0, 0x0, 0xfd, 0x0, 0x0, 0x0, 0x66}, @srh={0x3b, 0x0, 0x4, 0x0, 0x5, 0x0, 0x8001}]}}}}}, 0x0) recvfrom(r0, &(0x7f0000000480)=""/115, 0x73, 0x13, 0x0, 0x0) 6.101402111s ago: executing program 0 (id=133): openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$nl_rdma(0x10, 0x3, 0x14) openat$audio(0xffffff9c, 0x0, 0x48100, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = openat$vnet(0xffffff9c, &(0x7f00000000c0), 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000021c0)='./file0\x00', 0x3a) mount$tmpfs(0x0, 0x0, &(0x7f0000000280), 0x800004, 0x0) mount$tmpfs(0x0, 0x0, 0x0, 0x2ac0b2, 0x0) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000680)={0x1, 0x1, &(0x7f0000000180)=""/102, 0x0, &(0x7f00000005c0)=""/182, 0x5000}) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x121a03, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000080)=0x3) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000180)=0x93) syz_open_dev$cec(0x0, 0x0, 0xe8c00) epoll_create1(0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) r3 = socket$kcm(0x29, 0x2, 0x0) write$cgroup_pressure(r3, &(0x7f0000000140)={'full'}, 0xfffffdef) 6.087581852s ago: executing program 3 (id=134): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-serpent-avx2\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r1 = accept4(r0, 0x0, 0x0, 0x80800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed88", 0x3a}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11", 0xce}], 0x3, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) 6.015742584s ago: executing program 1 (id=135): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)={{0x14}, [@NFT_MSG_NEWTABLE={0x14, 0x0, 0xa, 0x301, 0x0, 0x0, {0x7, 0x0, 0x80}}, @NFT_MSG_NEWSET={0x84, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2f}, @NFTA_SET_EXPRESSIONS={0x40, 0x12, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, @last={{0x9}, @val={0x4}}}, {0x14, 0x1, 0x0, 0x1, @counter={{0xc}, @val={0x4}}}, {0x14, 0x1, 0x0, 0x1, @tunnel={{0xb}, @val={0x4}}}]}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x106}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xc0}}, 0x20050800) 4.493364384s ago: executing program 3 (id=136): setsockopt$MRT_FLUSH(0xffffffffffffffff, 0x0, 0xd1, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet6_mptcp_buf(r3, 0x11c, 0x1, &(0x7f0000000700)=""/147, &(0x7f00000007c0)=0x93) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) setresuid(0xee00, 0xffffffffffffffff, 0x0) sendmsg$NFT_MSG_GETFLOWTABLE(r4, 0x0, 0x12) 4.429752415s ago: executing program 1 (id=137): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$inet_sctp(0x2, 0x1, 0x84) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x6) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x2, 0x7fff7ffc}]}) close_range(r3, 0xffffffffffffffff, 0x200000000000000) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/net\x00') syz_open_procfs(0x0, &(0x7f0000005840)='net/snmp6\x00') r4 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800"/13], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={r4, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa) r5 = syz_open_procfs(0x0, &(0x7f0000000080)='fdinfo/3\x00') read$qrtrtun(r5, &(0x7f00000004c0)=""/57, 0x39) 4.429083847s ago: executing program 0 (id=138): syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) timer_create(0x9, 0x0, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, &(0x7f0000000340)={0x24, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="00220508"], 0x0}, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xb, &(0x7f0000000080)={0x0, 0x200000000}, 0x0) rt_sigprocmask(0x0, &(0x7f0000000000)={[0xfffffffffffffffd]}, 0x0, 0x8) r0 = signalfd(0xffffffffffffffff, &(0x7f00000001c0), 0x8) mkdir(&(0x7f0000000140)='./control\x00', 0x111) close(r0) inotify_init1(0x800) fcntl$setstatus(r0, 0x4, 0x2c00) fcntl$setown(r0, 0x8, 0x0) fcntl$setsig(r0, 0xa, 0x22) openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$rdma_cm(0xffffff9c, &(0x7f0000000040), 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x4a102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = socket(0x2, 0x80805, 0x0) r3 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$IP_VS_SO_SET_ADDDEST(r2, 0x0, 0x487, &(0x7f0000000000)={{0x84, @private=0xa010102, 0x4e22, 0x3, 'lc\x00', 0x4, 0x8, 0x77}, {@remote, 0x4e20, 0x2, 0xcd}}, 0x44) setsockopt$IP_VS_SO_SET_FLUSH(r3, 0x0, 0x485, 0x0, 0x0) 2.985630122s ago: executing program 3 (id=139): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x6) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x2, 0x7fff7ffc}]}) close_range(r3, 0xffffffffffffffff, 0x200000000000000) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/net\x00') syz_open_procfs(0x0, &(0x7f0000005840)='net/snmp6\x00') bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x4a}, 0x80) bpf$BPF_PROG_TEST_RUN(0x1c, 0x0, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000080)='fdinfo/3\x00') read$qrtrtun(r4, &(0x7f00000004c0)=""/57, 0x39) 1.72309275s ago: executing program 1 (id=140): sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x90) syz_emit_ethernet(0x66, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000400)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) write$binfmt_register(0xffffffffffffffff, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) sendmsg$NFULNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4004042}, 0x0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="01000000020000000200000004"], 0x50) r4 = bpf$MAP_CREATE(0x0, 0x0, 0x48) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x5, 0x9, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x15, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000047b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000100850000000100000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 1.722537498s ago: executing program 0 (id=141): socket$unix(0x1, 0x1, 0x0) r0 = socket$can_bcm(0x1d, 0x2, 0x2) syz_usb_connect$hid(0x5, 0x0, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000000c0)={'vxcan1\x00', 0x0}) r2 = socket(0x1d, 0x2, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000000)={'vxcan0\x00', 0x0}) bind$can_j1939(r2, &(0x7f0000000380)={0x1d, r3, 0x1, {0x0, 0x1, 0x3}, 0xfe}, 0x18) sendmsg$nl_route_sched_retired(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@deltclass={0x24, 0x29, 0x1, 0x70bd2d, 0x25dfdbfb, {0x0, 0x0, 0x0, r1, {0xfff3, 0xffff}, {0x7, 0xd}, {0xb, 0x7}}}, 0x24}}, 0x20040800) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r2) r4 = socket$netlink(0x10, 0x3, 0x0) syz_genetlink_get_family_id$wireguard(&(0x7f0000000280), r2) sendmsg$netlink(r4, 0x0, 0x0) 1.638457312s ago: executing program 4 (id=142): prctl$PR_SET_NO_NEW_PRIVS(0x26, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x5, 0x0, 0x0) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1b, 0x0, 0x0) socket$packet(0x11, 0x3, 0x300) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=ANY=[@ANYBLOB="600000000206010800000000000000000000000005000400000000000900020073797a31000000001400078008001240000000000500140008000000050005000a000000050001000600000011000300686173683a69702c706f7274"], 0x60}}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000c80)=ANY=[@ANYBLOB="5c000000090601080000000000000000070000000900020073797a31000000000500010007000000340007801800018014000240fe8000000000000000000000000000bb060004400e1f00cd050007008800000006000540"], 0x5c}, 0x1, 0x0, 0x0, 0x10000042}, 0x90) fcntl$getflags(0xffffffffffffffff, 0x40a) 413.873454ms ago: executing program 1 (id=143): socket$netlink(0x10, 0x3, 0x0) shutdown(0xffffffffffffffff, 0x1) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r2) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x10) sendmsg$nl_route_sched(r1, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r0, 0x0, 0x0) 413.528288ms ago: executing program 3 (id=144): r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_int(r0, 0x0, 0x34, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000008, 0x50, 0xffffffffffffffff, 0x4000) prlimit64(0x0, 0xe, 0x0, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r1, 0x89f8, &(0x7f0000000000)={'sit0\x00', 0x0}) sendmsg$SMC_PNETID_ADD(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff) sendmsg$SMC_PNETID_ADD(0xffffffffffffffff, 0x0, 0x0) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000040), 0xe09) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000500)='.\x00', 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) syz_open_dev$evdev(0x0, 0x10, 0x14b140) writev(0xffffffffffffffff, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x15) mbind(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x2, 0x0, 0x7, 0x4) syz_open_dev$radio(&(0x7f0000019140), 0x1, 0x2) r2 = syz_open_dev$sndctrl(&(0x7f0000000200), 0x1, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_INFO(r2, 0xc1205531, &(0x7f0000000540)={0x1, 0x6, 0x0, 0x1000000, '\x00', '\x00', '\x00', 0x0, 0x0, 0x0, 0x0, "b6855a32474ffa64f778ddcf29c94337"}) 89.067147ms ago: executing program 1 (id=145): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(0x4) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='cgroup.controllers\x00', 0x275a, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f0000000000)=@sg0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)='nfs\x00', 0x0, &(0x7f0000000240)) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) move_mount(0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffff9c, 0x0, 0x64) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x1c3102) writev(r2, &(0x7f0000000840)=[{0x0}], 0x1) shmctl$SHM_LOCK(0x0, 0xb) shmat(0x0, &(0x7f0000ffd000/0x1000)=nil, 0x7000) shmctl$SHM_UNLOCK(0x0, 0xc) close(r1) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r3, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f000000040000000400000040"], 0x48) ioctl$SNDRV_PCM_IOCTL_HW_PARAMS(r1, 0xc2604111, &(0x7f0000000500)={0x8, [[0x8001, 0x8001, 0x0, 0x2, 0x3, 0x1, 0x6, 0x5], [0xfffffffa, 0x6, 0x6, 0x10001, 0x4, 0x4, 0xb1, 0x3], [0x1, 0xd, 0x2, 0x4dfb, 0x7106, 0x0, 0x7, 0x9]], '\x00', [{0xd4, 0x2, 0x1, 0x0, 0x0, 0x1}, {0x2, 0x2, 0x1, 0x1, 0x0, 0x1}, {0xdc, 0x3, 0x0, 0x1, 0x1}, {0x9, 0x80, 0x0, 0x1}, {0x0, 0x4, 0x1, 0x1, 0x0, 0x1}, {0x9, 0x4, 0x1, 0x0, 0x1}, {0x5, 0x4, 0x0, 0x0, 0x1, 0x1}, {0x1, 0xc, 0x1, 0x1}, {0x7, 0x8, 0x1, 0x1, 0x1, 0x1}, {0x3, 0x0, 0x1, 0x1, 0x1}, {0x0, 0x1a, 0x1, 0x1}, {0x1, 0x3, 0x0, 0x1}], '\x00', 0x81}) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000a80)={r4, &(0x7f0000000940), &(0x7f0000000a40)=@tcp6=r3}, 0x20) connect$unix(r1, &(0x7f0000000940)=@file={0x0, './file0\x00'}, 0x6e) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x4) rmdir(&(0x7f0000000080)='./file0\x00') syz_emit_ethernet(0x46, &(0x7f0000000480)={@local, @empty, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, "fca33f", 0x10, 0x3c, 0x0, @dev, @local, {[@fragment={0x0, 0x0, 0xfd, 0x0, 0x0, 0x0, 0x66}, @srh={0x3b, 0x0, 0x4, 0x0, 0x5, 0x0, 0x8001}]}}}}}, 0x0) recvfrom(r0, &(0x7f0000000480)=""/115, 0x73, 0x13, 0x0, 0x0) 0s ago: executing program 3 (id=146): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-serpent-avx2\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r1 = accept4(r0, 0x0, 0x0, 0x80800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed88", 0x3a}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11", 0xce}], 0x3, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.97' (ED25519) to the list of known hosts. [ 84.736566][ T5595] cgroup: Unknown subsys name 'net' [ 84.977554][ T5595] cgroup: Unknown subsys name 'cpuset' [ 85.032710][ T5595] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 87.103077][ T5595] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 89.617798][ T5609] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 89.626686][ T5609] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 89.639557][ T5609] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 89.650827][ T5609] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 89.666915][ T5609] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 89.798225][ T4925] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 89.831053][ T5621] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 89.836703][ T5621] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 89.840771][ T5621] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 89.880738][ T5621] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 89.890809][ T5621] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 89.906866][ T5621] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 89.910286][ T5621] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 89.911629][ T5621] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 89.916258][ T5621] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 89.925181][ T5621] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 89.931159][ T5622] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 89.931161][ T5621] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 89.947040][ T5621] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 89.958396][ T5621] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 89.966864][ T4925] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 89.976193][ T5621] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 89.982064][ T5609] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 90.015730][ T5621] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 90.018993][ T4925] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 91.778330][ T1246] cfg80211: failed to load regulatory.db [ 91.834559][ T5618] Bluetooth: hci0: command tx timeout [ 92.073025][ T5618] Bluetooth: hci2: command tx timeout [ 92.083274][ T5618] Bluetooth: hci1: command tx timeout [ 92.152369][ T5618] Bluetooth: hci4: command tx timeout [ 92.152490][ T60] Bluetooth: hci3: command tx timeout [ 92.687894][ T5615] bridge0: port 1(bridge_slave_0) entered blocking state [ 92.689292][ T5615] bridge0: port 1(bridge_slave_0) entered disabled state [ 92.690365][ T5615] bridge_slave_0: entered allmulticast mode [ 92.702082][ T5615] bridge_slave_0: entered promiscuous mode [ 92.789769][ T5615] bridge0: port 2(bridge_slave_1) entered blocking state [ 92.789991][ T5615] bridge0: port 2(bridge_slave_1) entered disabled state [ 92.790168][ T5615] bridge_slave_1: entered allmulticast mode [ 92.801540][ T5615] bridge_slave_1: entered promiscuous mode [ 92.829406][ T5613] bridge0: port 1(bridge_slave_0) entered blocking state [ 92.829668][ T5613] bridge0: port 1(bridge_slave_0) entered disabled state [ 92.829868][ T5613] bridge_slave_0: entered allmulticast mode [ 92.834122][ T5613] bridge_slave_0: entered promiscuous mode [ 92.929603][ T5613] bridge0: port 2(bridge_slave_1) entered blocking state [ 92.929861][ T5613] bridge0: port 2(bridge_slave_1) entered disabled state [ 92.930054][ T5613] bridge_slave_1: entered allmulticast mode [ 92.934260][ T5613] bridge_slave_1: entered promiscuous mode [ 92.960502][ T5608] bridge0: port 1(bridge_slave_0) entered blocking state [ 92.960853][ T5608] bridge0: port 1(bridge_slave_0) entered disabled state [ 92.961147][ T5608] bridge_slave_0: entered allmulticast mode [ 92.970484][ T5608] bridge_slave_0: entered promiscuous mode [ 92.993456][ T5612] bridge0: port 1(bridge_slave_0) entered blocking state [ 92.993697][ T5612] bridge0: port 1(bridge_slave_0) entered disabled state [ 92.993883][ T5612] bridge_slave_0: entered allmulticast mode [ 92.996269][ T5612] bridge_slave_0: entered promiscuous mode [ 93.073900][ T5608] bridge0: port 2(bridge_slave_1) entered blocking state [ 93.074121][ T5608] bridge0: port 2(bridge_slave_1) entered disabled state [ 93.074498][ T5608] bridge_slave_1: entered allmulticast mode [ 93.076716][ T5608] bridge_slave_1: entered promiscuous mode [ 93.078765][ T5612] bridge0: port 2(bridge_slave_1) entered blocking state [ 93.079008][ T5612] bridge0: port 2(bridge_slave_1) entered disabled state [ 93.079180][ T5612] bridge_slave_1: entered allmulticast mode [ 93.081538][ T5612] bridge_slave_1: entered promiscuous mode [ 93.120665][ T5615] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 93.121777][ T5616] bridge0: port 1(bridge_slave_0) entered blocking state [ 93.126377][ T5616] bridge0: port 1(bridge_slave_0) entered disabled state [ 93.127062][ T5616] bridge_slave_0: entered allmulticast mode [ 93.140569][ T5616] bridge_slave_0: entered promiscuous mode [ 93.221635][ T5615] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 93.222099][ T5616] bridge0: port 2(bridge_slave_1) entered blocking state [ 93.225266][ T5616] bridge0: port 2(bridge_slave_1) entered disabled state [ 93.227007][ T5616] bridge_slave_1: entered allmulticast mode [ 93.237560][ T5616] bridge_slave_1: entered promiscuous mode [ 93.261411][ T5613] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 93.340371][ T5613] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 93.352864][ T5608] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 93.360529][ T5612] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 93.428625][ T5608] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 93.443489][ T5612] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 93.450226][ T5615] team0: Port device team_slave_0 added [ 93.479624][ T5616] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 93.544192][ T5615] team0: Port device team_slave_1 added [ 93.548195][ T5616] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 93.551537][ T5613] team0: Port device team_slave_0 added [ 93.638875][ T5613] team0: Port device team_slave_1 added [ 93.642842][ T5608] team0: Port device team_slave_0 added [ 93.656957][ T5612] team0: Port device team_slave_0 added [ 93.717328][ T5608] team0: Port device team_slave_1 added [ 93.721588][ T5612] team0: Port device team_slave_1 added [ 93.733749][ T5615] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 93.733764][ T5615] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 93.733791][ T5615] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 93.738471][ T5616] team0: Port device team_slave_0 added [ 93.836422][ T5615] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 93.836435][ T5615] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 93.836455][ T5615] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 93.840041][ T5616] team0: Port device team_slave_1 added [ 93.841672][ T5613] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 93.841682][ T5613] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 93.841702][ T5613] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 93.913673][ T60] Bluetooth: hci0: command tx timeout [ 93.991532][ T5613] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 93.991548][ T5613] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 93.991569][ T5613] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 94.007247][ T5608] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 94.007279][ T5608] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 94.007346][ T5608] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 94.030031][ T5612] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 94.030074][ T5612] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 94.030148][ T5612] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 94.152453][ T60] Bluetooth: hci1: command tx timeout [ 94.152492][ T60] Bluetooth: hci2: command tx timeout [ 94.232331][ T60] Bluetooth: hci3: command tx timeout [ 94.232367][ T60] Bluetooth: hci4: command tx timeout [ 94.574210][ T5608] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 94.574229][ T5608] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 94.574258][ T5608] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 94.576405][ T5612] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 94.576416][ T5612] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 94.576435][ T5612] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 94.580123][ T5616] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 94.580133][ T5616] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 94.580153][ T5616] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 94.736556][ T5616] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 94.736570][ T5616] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 94.736590][ T5616] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 94.834697][ T5615] hsr_slave_0: entered promiscuous mode [ 94.836323][ T5615] hsr_slave_1: entered promiscuous mode [ 94.910543][ T5613] hsr_slave_0: entered promiscuous mode [ 94.919030][ T5613] hsr_slave_1: entered promiscuous mode [ 94.927600][ T5613] debugfs: 'hsr0' already exists in 'hsr' [ 94.927713][ T5613] Cannot create hsr debugfs directory [ 95.038952][ T5608] hsr_slave_0: entered promiscuous mode [ 95.040465][ T5608] hsr_slave_1: entered promiscuous mode [ 95.041774][ T5608] debugfs: 'hsr0' already exists in 'hsr' [ 95.041804][ T5608] Cannot create hsr debugfs directory [ 95.072560][ T5612] hsr_slave_0: entered promiscuous mode [ 95.074198][ T5612] hsr_slave_1: entered promiscuous mode [ 95.075452][ T5612] debugfs: 'hsr0' already exists in 'hsr' [ 95.075481][ T5612] Cannot create hsr debugfs directory [ 95.155705][ T5616] hsr_slave_0: entered promiscuous mode [ 95.157250][ T5616] hsr_slave_1: entered promiscuous mode [ 95.159220][ T5616] debugfs: 'hsr0' already exists in 'hsr' [ 95.159248][ T5616] Cannot create hsr debugfs directory [ 95.993513][ T60] Bluetooth: hci0: command tx timeout [ 96.243183][ T60] Bluetooth: hci2: command tx timeout [ 96.243196][ T5618] Bluetooth: hci1: command tx timeout [ 96.258764][ T5615] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 96.296488][ T5615] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 96.310619][ T5615] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 96.322774][ T5618] Bluetooth: hci4: command tx timeout [ 96.322806][ T5618] Bluetooth: hci3: command tx timeout [ 96.356492][ T5615] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 96.365360][ T5615] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 96.400923][ T5615] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 96.436239][ T5615] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 96.459615][ T5615] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 96.607622][ T5613] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 96.659468][ T5613] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 96.675129][ T5613] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 96.721405][ T5613] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 96.732866][ T5613] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 96.763696][ T5613] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 96.789792][ T5613] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 96.828409][ T5613] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 96.951984][ T5608] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 96.987324][ T5608] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 97.003749][ T5608] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 97.046737][ T5608] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 97.051458][ T5608] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 97.077218][ T5608] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 97.109692][ T5608] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 97.136730][ T5608] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 97.285222][ T5612] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 97.323164][ T5612] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 97.346838][ T5612] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 97.377743][ T5612] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 97.406717][ T5612] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 97.442905][ T5612] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 97.474677][ T5612] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 97.521676][ T5612] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 97.634103][ T5615] 8021q: adding VLAN 0 to HW filter on device bond0 [ 97.719351][ T5616] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 97.748941][ T5616] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 97.774592][ T5616] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 97.808534][ T5616] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 97.826373][ T5616] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 97.866829][ T5616] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 97.882052][ T5616] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 97.917307][ T5616] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 97.969597][ T5615] 8021q: adding VLAN 0 to HW filter on device team0 [ 98.026146][ T41] bridge0: port 1(bridge_slave_0) entered blocking state [ 98.027119][ T41] bridge0: port 1(bridge_slave_0) entered forwarding state [ 98.084212][ T60] Bluetooth: hci0: command tx timeout [ 98.104982][ T41] bridge0: port 2(bridge_slave_1) entered blocking state [ 98.105110][ T41] bridge0: port 2(bridge_slave_1) entered forwarding state [ 98.144445][ T5613] 8021q: adding VLAN 0 to HW filter on device bond0 [ 98.270049][ T5613] 8021q: adding VLAN 0 to HW filter on device team0 [ 98.314033][ T60] Bluetooth: hci2: command tx timeout [ 98.314066][ T60] Bluetooth: hci1: command tx timeout [ 98.326397][ T5608] 8021q: adding VLAN 0 to HW filter on device bond0 [ 98.350380][ T1507] bridge0: port 1(bridge_slave_0) entered blocking state [ 98.350548][ T1507] bridge0: port 1(bridge_slave_0) entered forwarding state [ 98.394187][ T5618] Bluetooth: hci3: command tx timeout [ 98.394202][ T60] Bluetooth: hci4: command tx timeout [ 98.427697][ T1507] bridge0: port 2(bridge_slave_1) entered blocking state [ 98.427861][ T1507] bridge0: port 2(bridge_slave_1) entered forwarding state [ 98.519257][ T5608] 8021q: adding VLAN 0 to HW filter on device team0 [ 98.549621][ T5612] 8021q: adding VLAN 0 to HW filter on device bond0 [ 98.631030][ T41] bridge0: port 1(bridge_slave_0) entered blocking state [ 98.636955][ T41] bridge0: port 1(bridge_slave_0) entered forwarding state [ 98.720246][ T41] bridge0: port 2(bridge_slave_1) entered blocking state [ 98.720414][ T41] bridge0: port 2(bridge_slave_1) entered forwarding state [ 98.847391][ T5612] 8021q: adding VLAN 0 to HW filter on device team0 [ 98.888685][ T5616] 8021q: adding VLAN 0 to HW filter on device bond0 [ 98.914213][ T92] bridge0: port 1(bridge_slave_0) entered blocking state [ 98.914356][ T92] bridge0: port 1(bridge_slave_0) entered forwarding state [ 98.976353][ T92] bridge0: port 2(bridge_slave_1) entered blocking state [ 98.976494][ T92] bridge0: port 2(bridge_slave_1) entered forwarding state [ 99.139047][ T5616] 8021q: adding VLAN 0 to HW filter on device team0 [ 99.199470][ T67] bridge0: port 1(bridge_slave_0) entered blocking state [ 99.199633][ T67] bridge0: port 1(bridge_slave_0) entered forwarding state [ 99.304460][ T67] bridge0: port 2(bridge_slave_1) entered blocking state [ 99.304579][ T67] bridge0: port 2(bridge_slave_1) entered forwarding state [ 99.745558][ T5615] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 100.530391][ T5613] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 100.624614][ T5608] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 101.086933][ T5612] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 101.105803][ T5613] veth0_vlan: entered promiscuous mode [ 101.141211][ T5615] veth0_vlan: entered promiscuous mode [ 101.164483][ T5616] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 101.181357][ T5608] veth0_vlan: entered promiscuous mode [ 101.203276][ T5613] veth1_vlan: entered promiscuous mode [ 101.236215][ T5615] veth1_vlan: entered promiscuous mode [ 101.279737][ T5608] veth1_vlan: entered promiscuous mode [ 101.447595][ T5612] veth0_vlan: entered promiscuous mode [ 101.486899][ T5613] veth0_macvtap: entered promiscuous mode [ 101.516889][ T5615] veth0_macvtap: entered promiscuous mode [ 101.539403][ T5616] veth0_vlan: entered promiscuous mode [ 101.546457][ T5613] veth1_macvtap: entered promiscuous mode [ 101.567155][ T5615] veth1_macvtap: entered promiscuous mode [ 101.579198][ T5608] veth0_macvtap: entered promiscuous mode [ 101.590561][ T5612] veth1_vlan: entered promiscuous mode [ 101.628724][ T5608] veth1_macvtap: entered promiscuous mode [ 101.670284][ T5616] veth1_vlan: entered promiscuous mode [ 101.720997][ T5613] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 101.747173][ T5615] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 101.777097][ T5613] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 101.791024][ T5615] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 101.811268][ T5608] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 101.854755][ T1003] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.867607][ T5608] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 101.890471][ T1003] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.926974][ T1003] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.946526][ T1003] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.961942][ T5612] veth0_macvtap: entered promiscuous mode [ 101.974540][ T1003] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.982083][ T1003] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.093887][ T1003] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.141311][ T5612] veth1_macvtap: entered promiscuous mode [ 102.153403][ T1003] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.156982][ T5616] veth0_macvtap: entered promiscuous mode [ 102.181088][ T1003] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.278049][ T1003] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.350315][ T1003] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.351205][ T5616] veth1_macvtap: entered promiscuous mode [ 102.377488][ T1003] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.783689][ T5612] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 102.949725][ T5612] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 102.991179][ T5616] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 103.025131][ T1507] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 103.025151][ T1507] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 103.065256][ T5616] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 103.087528][ T1003] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.113180][ T1003] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.138551][ T1003] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.153244][ T1003] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.179684][ T1507] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 103.179703][ T1507] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 103.218621][ T1003] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.250655][ T1003] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.282980][ T1003] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.318938][ T92] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.345442][ T92] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 103.345462][ T92] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 103.540146][ T3755] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 103.540167][ T3755] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 103.930910][ T41] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 103.930929][ T41] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 104.305012][ T3755] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 104.305030][ T3755] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 104.711649][ T1507] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 104.711671][ T1507] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 104.961371][ T1003] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 104.961393][ T1003] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 106.112164][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 106.362174][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 106.432172][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 106.502167][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 107.171436][ T1179] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 107.171459][ T1179] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 107.330757][ T68] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 107.330778][ T68] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 107.478021][ T5822] netlink: 72 bytes leftover after parsing attributes in process `syz.4.9'. [ 107.850087][ T5826] netlink: 4 bytes leftover after parsing attributes in process `syz.3.11'. [ 107.889268][ T5826] Zero length message leads to an empty skb [ 108.107360][ T37] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 109.837386][ T37] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 109.837496][ T37] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 109.837587][ T37] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 109.837694][ T37] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 109.837743][ T37] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 111.700297][ T37] usb 1-1: config 0 descriptor?? [ 111.749814][ T37] usb 1-1: can't set config #0, error -71 [ 111.778128][ T37] usb 1-1: USB disconnect, device number 2 [ 111.973515][ T5617] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 112.306469][ T5617] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 112.306504][ T5617] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 112.306525][ T5617] usb 2-1: Product: syz [ 112.306540][ T5617] usb 2-1: Manufacturer: syz [ 112.306555][ T5617] usb 2-1: SerialNumber: syz [ 114.237772][ T5867] netlink: 12 bytes leftover after parsing attributes in process `syz.0.19'. [ 114.237931][ T5867] netlink: 12 bytes leftover after parsing attributes in process `syz.0.19'. [ 115.163222][ T5617] cdc_ncm 2-1:1.0: bind() failure [ 115.222609][ T5866] comedi comedi0: Minor 65536 is invalid! [ 115.487779][ T5617] cdc_ncm 2-1:1.1: CDC Union missing and no IAD found [ 115.487831][ T5617] cdc_ncm 2-1:1.1: bind() failure [ 116.541079][ T5617] usb 2-1: USB disconnect, device number 2 [ 117.480095][ T5899] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 119.349156][ T5917] netlink: 4 bytes leftover after parsing attributes in process `syz.3.34'. [ 121.372143][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 121.402142][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 121.522144][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 121.592143][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 121.612159][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 124.343810][ T5957] Bluetooth: MGMT ver 1.23 [ 132.718483][ T1338] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.723730][ T1338] ieee802154 phy1 wpan1: encryption failed: -22 [ 135.378597][ T6027] netlink: 4 bytes leftover after parsing attributes in process `syz.2.65'. [ 137.197206][ T6038] netlink: 4 bytes leftover after parsing attributes in process `syz.2.68'. [ 140.688088][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 140.936349][ T6069] netlink: 4 bytes leftover after parsing attributes in process `syz.0.78'. [ 144.140089][ T6092] netlink: 4 bytes leftover after parsing attributes in process `syz.1.87'. [ 146.854963][ T6106] netlink: 12 bytes leftover after parsing attributes in process `syz.0.90'. [ 146.855780][ T6106] netlink: 12 bytes leftover after parsing attributes in process `syz.0.90'. [ 147.739302][ T6120] netlink: 4 bytes leftover after parsing attributes in process `syz.1.94'. [ 152.747426][ T6162] netlink: 4 bytes leftover after parsing attributes in process `syz.2.104'. [ 153.099322][ T6170] netlink: 4 bytes leftover after parsing attributes in process `syz.0.107'. [ 159.867433][ T6208] netlink: 4 bytes leftover after parsing attributes in process `syz.2.118'. [ 165.116340][ T6247] netlink: 4 bytes leftover after parsing attributes in process `syz.0.131'. [ 171.212204][ T6290] netlink: 4 bytes leftover after parsing attributes in process `syz.1.143'. [ 171.415374][ T0] ------------[ cut here ]------------ [ 171.415387][ T0] rq->clock_update_flags < RQCF_ACT_SKIP [ 171.415398][ T0] WARNING: kernel/sched/sched.h:1792 at update_curr_idle+0x1cf/0x260, CPU#1: swapper/1/0 [ 171.415434][ T0] Modules linked in: [ 171.415470][ T0] CPU: 1 UID: 0 PID: 0 Comm: swapper/1 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 171.415491][ T0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 171.415504][ T0] RIP: 0010:update_curr_idle+0x1cf/0x260 [ 171.415524][ T0] Code: e8 03 42 80 3c 20 00 74 08 48 89 df e8 3a 98 97 00 48 8b 3b 4c 89 f6 4c 89 fa 5b 41 5c 41 5d 41 5e 41 5f 5d e9 52 38 01 00 90 <0f> 0b 90 e9 01 ff ff ff 90 0f 0b 90 e9 d3 fe ff ff 48 c7 c1 40 84 [ 171.415539][ T0] RSP: 0018:ffffc900001e7bf8 EFLAGS: 00010097 [ 171.415554][ T0] RAX: 0000000000000000 RBX: ffff8880b873ba40 RCX: 0000000000000002 [ 171.415567][ T0] RDX: ffff888031f9dd00 RSI: ffffffff8d8bd52f RDI: ffffffff8baa5680 [ 171.415580][ T0] RBP: ffffc900001e7e30 R08: ffff8880b873c91f R09: 0000000000000000 [ 171.415593][ T0] R10: ffff8880b873c910 R11: ffffffff8199c020 R12: dffffc0000000000 [ 171.415607][ T0] R13: ffffffff8d8f3158 R14: ffff88801da9dd00 R15: ffff8880b873c620 [ 171.415630][ T0] FS: 0000000000000000(0000) GS:ffff888125fb8000(0000) knlGS:0000000000000000 [ 171.415645][ T0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 171.415658][ T0] CR2: 00005555846eca48 CR3: 0000000036036000 CR4: 00000000003526f0 [ 171.415674][ T0] Call Trace: [ 171.415686][ T0] [ 171.415697][ T0] put_prev_task_idle+0xd/0x20 [ 171.415715][ T0] __schedule+0x3da0/0x5550 [ 171.415756][ T0] ? trace_irq_disable+0x3b/0x140 [ 171.415784][ T0] ? __pfx___schedule+0x10/0x10 [ 171.415804][ T0] ? lockdep_hardirqs_on+0x7a/0x110 [ 171.415836][ T0] ? tick_nohz_idle_exit+0x2a6/0x370 [ 171.415866][ T0] schedule_idle+0x51/0x90 [ 171.415888][ T0] do_idle+0x4a6/0x540 [ 171.415918][ T0] ? __pfx_do_idle+0x10/0x10 [ 171.415953][ T0] cpu_startup_entry+0x43/0x60 [ 171.415982][ T0] start_secondary+0x101/0x110 [ 171.416005][ T0] common_startup_64+0x13e/0x157 [ 171.416037][ T0] [ 171.416046][ T0] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 171.416059][ T0] CPU: 1 UID: 0 PID: 0 Comm: swapper/1 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 171.416079][ T0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 171.416089][ T0] Call Trace: [ 171.416096][ T0] [ 171.416102][ T0] vpanic+0x56c/0xa60 [ 171.416131][ T0] ? __pfx__printk+0x10/0x10 [ 171.416149][ T0] ? __pfx_vpanic+0x10/0x10 [ 171.416173][ T0] ? is_bpf_text_address+0x292/0x2b0 [ 171.416202][ T0] ? is_bpf_text_address+0x26/0x2b0 [ 171.416237][ T0] panic+0xc5/0xd0 [ 171.416265][ T0] ? __pfx_panic+0x10/0x10 [ 171.416297][ T0] ? common_startup_64+0x13e/0x157 [ 171.416320][ T0] __warn+0x315/0x4c0 [ 171.416345][ T0] ? update_curr_idle+0x1cf/0x260 [ 171.416364][ T0] ? update_curr_idle+0x1cf/0x260 [ 171.416382][ T0] __report_bug+0x339/0x540 [ 171.416412][ T0] ? update_curr_idle+0x1cf/0x260 [ 171.416430][ T0] ? __pfx___report_bug+0x10/0x10 [ 171.416463][ T0] ? pick_task_fair+0x21a/0x1410 [ 171.416484][ T0] ? update_curr_idle+0x1cf/0x260 [ 171.416502][ T0] report_bug+0x16a/0x220 [ 171.416527][ T0] ? update_curr_idle+0x1cf/0x260 [ 171.416543][ T0] ? update_curr_idle+0x1d1/0x260 [ 171.416560][ T0] handle_bug+0x9c/0x200 [ 171.416589][ T0] exc_invalid_op+0x1a/0x50 [ 171.416738][ T0] asm_exc_invalid_op+0x1a/0x20 [ 171.416767][ T0] RIP: 0010:update_curr_idle+0x1cf/0x260 [ 171.416788][ T0] Code: e8 03 42 80 3c 20 00 74 08 48 89 df e8 3a 98 97 00 48 8b 3b 4c 89 f6 4c 89 fa 5b 41 5c 41 5d 41 5e 41 5f 5d e9 52 38 01 00 90 <0f> 0b 90 e9 01 ff ff ff 90 0f 0b 90 e9 d3 fe ff ff 48 c7 c1 40 84 [ 171.416803][ T0] RSP: 0018:ffffc900001e7bf8 EFLAGS: 00010097 [ 171.416821][ T0] RAX: 0000000000000000 RBX: ffff8880b873ba40 RCX: 0000000000000002 [ 171.416834][ T0] RDX: ffff888031f9dd00 RSI: ffffffff8d8bd52f RDI: ffffffff8baa5680 [ 171.416848][ T0] RBP: ffffc900001e7e30 R08: ffff8880b873c91f R09: 0000000000000000 [ 171.416861][ T0] R10: ffff8880b873c910 R11: ffffffff8199c020 R12: dffffc0000000000 [ 171.416887][ T0] R13: ffffffff8d8f3158 R14: ffff88801da9dd00 R15: ffff8880b873c620 [ 171.416904][ T0] ? __pfx_put_prev_task_idle+0x10/0x10 [ 171.416941][ T0] ? update_curr_idle+0xab/0x260 [ 171.416960][ T0] put_prev_task_idle+0xd/0x20 [ 171.416976][ T0] __schedule+0x3da0/0x5550 [ 171.417015][ T0] ? trace_irq_disable+0x3b/0x140 [ 171.417042][ T0] ? __pfx___schedule+0x10/0x10 [ 171.417061][ T0] ? lockdep_hardirqs_on+0x7a/0x110 [ 171.417092][ T0] ? tick_nohz_idle_exit+0x2a6/0x370 [ 171.417123][ T0] schedule_idle+0x51/0x90 [ 171.417145][ T0] do_idle+0x4a6/0x540 [ 171.417173][ T0] ? __pfx_do_idle+0x10/0x10 [ 171.417208][ T0] cpu_startup_entry+0x43/0x60 [ 171.417235][ T0] start_secondary+0x101/0x110 [ 171.417257][ T0] common_startup_64+0x13e/0x157 [ 171.417288][ T0] [ 172.569661][ T0] Shutting down cpus with NMI [ 172.570307][ T0] Kernel Offset: disabled