last executing test programs: 12.831193149s ago: executing program 3 (id=7): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e24, @multicast2}, 0x10) sendmmsg$inet(r0, &(0x7f0000000380)=[{{&(0x7f0000000000)={0x2, 0x4e24, @loopback}, 0x10, 0x0}}], 0x1, 0x2000c000) setsockopt$inet_tcp_TLS_TX(r0, 0x6, 0xc, &(0x7f0000000040)=@gcm_256={{0x303}, "33c2d1c2b09b1f34", "0ed4f3913379fc2be6a0d671d6f850217e5332bc215e9b2f80fdbb707c1540c2", "a2f48017", "68f7f99e0ddc86e0"}, 0x38) 12.460468626s ago: executing program 2 (id=8): sched_setscheduler(0x0, 0x2, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r0 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x158}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r0, r1, r2, r3, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = dup(r6) syz_usb_control_io$lan78xx(0xffffffffffffffff, 0x0, &(0x7f0000000540)={0x34, 0x0, 0x0, &(0x7f0000000440)={0x0, 0x8, 0x1, 0x6}, 0x0, 0x0, 0x0}) syz_ublk_setup_queues(r7, r5, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x1, 0x257}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x880000, 0x20, 0x1000000, 0x4, 0x0, r7}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x0, 0x800, 0x0, 0x146, 0x0, r7}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1f70, 0x8c, 0x1}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x0, 0x2, 0x1, 0x9d7c}}], 0x1, &(0x7f0000001000)={0x2e, 0x4c, 0x0, r7, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x0, r4, '\x00', {0xfffd, 0x5, 0x0, 0x0}}, 0x0) 12.100891784s ago: executing program 3 (id=9): socket$inet6_sctp(0xa, 0x1, 0x84) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0x103a42, 0x0) r1 = fanotify_init(0x200, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.throttle.io_serviced\x00', 0x275a, 0x0) fanotify_mark(r1, 0x101, 0x8000011, r2, 0x0) ftruncate(r0, 0x6000004) mmap(&(0x7f0000000000/0x3000)=nil, 0x3020, 0x5, 0x12, r0, 0x4000) 11.059719921s ago: executing program 4 (id=12): socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_route(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$unix(0x1, 0x5, 0x0) socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="06000000040000009c0000000b"], 0x50) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="040000000400000004"], 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000010000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000ac03000000000000850000003300000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{r0}, &(0x7f0000000080), &(0x7f0000000280)=r1}, 0x20) r2 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000002c0)={r1, r3, 0x25, 0x2}, 0x14) syz_emit_ethernet(0x12, &(0x7f0000000240)=ANY=[], 0x0) 10.41759342s ago: executing program 4 (id=14): r0 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_STRSET_GET(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="18000000", @ANYRES16=r0, @ANYBLOB="09030000000000fdff072000adce04000280"], 0x18}, 0x1, 0xf000000}, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000400)='cgroup.controllers\x00', 0x275a, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='memory.swap.current\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffffff000}], 0x5, 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000240), 0x3af4701e) sendfile(r3, r1, 0x0, 0x10000a006) 8.899426088s ago: executing program 4 (id=19): syz_usb_connect$uac2(0x3, 0x8f, 0x0, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000100)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x23}}, 0x10) connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) sendmmsg$inet(r0, &(0x7f0000004d00)=[{{0x0, 0x6000, 0x0, 0x0, 0x0, 0x0, 0x30000}}], 0x400000000000284, 0xf00) 8.214559415s ago: executing program 0 (id=22): r0 = socket$inet6(0xa, 0x80002, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/fscaps', 0x0, 0x28) fcntl$dupfd(r0, 0x0, r0) socket$inet6_udp(0xa, 0x2, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x121a03, 0x0) fsopen(&(0x7f00000003c0)='sysfs\x00', 0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)) syz_open_procfs(0x0, &(0x7f0000000040)='timerslack_ns\x00') openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000940)='hugetlb.2MB.usage_in_bytes\x00', 0x26e1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cgroup.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r2, &(0x7f0000000140)=ANY=[@ANYRES64=r1], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1000001, 0x12, r2, 0x0) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_GETKMSGREDIRECT(r3, 0x541c, &(0x7f0000000000)) 7.608646516s ago: executing program 3 (id=23): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000080)={0x1, 0x0, [{0x40000003, 0x0, 0xeb}]}) r3 = syz_usb_connect(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="120100000b529708410e42416ed401020301090224000100000000090400020221f76800090501"], 0x0) syz_usb_control_io(r3, 0x0, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r4, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4) 7.524059113s ago: executing program 0 (id=24): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000180)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(aes)\x00'}, 0x58) r1 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_FILTER(r1, 0x65, 0xbfffffff, 0x0, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000340)="71e67a15cdf0311cfcf33a52a7d86bd1", 0x20) r2 = accept4$alg(r0, 0x0, 0x0, 0x0) sendmmsg$alg(r2, &(0x7f0000004580)=[{0x0, 0x0, &(0x7f0000002740)=[{&(0x7f0000000240)="126f364d3558f1096de63bb3d7e13e50f0", 0x11}], 0x1, 0x0, 0x0, 0x8000}], 0x1, 0x40) io_setup(0xff, &(0x7f0000000380)=0x0) io_submit(r3, 0x0, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) prctl$PR_SET_VMA(0x4f, 0x15, &(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000180)={'veth0_to_bridge\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=@newqdisc={0x84, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0x0, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xd}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x54, 0x2, [@TCA_CAKE_FLOW_MODE={0x8, 0x5, 0x1}, @TCA_CAKE_RAW={0x8}, @TCA_CAKE_AUTORATE={0x8, 0x9, 0x7}, @TCA_CAKE_MEMORY={0x8, 0xa, 0x3}, @TCA_CAKE_NAT={0x8, 0xb, 0x1}, @TCA_CAKE_WASH={0x8, 0xd, 0x1}, @TCA_CAKE_TARGET={0x8, 0x8, 0x1}, @TCA_CAKE_INGRESS={0x8, 0xf, 0x1}, @TCA_CAKE_RTT={0x8, 0x7, 0x2}, @TCA_CAKE_MEMORY={0x8, 0xa, 0x9}]}}]}, 0x84}, 0x1, 0x0, 0x0, 0x51}, 0x800) timerfd_create(0x9, 0xc0000) rseq(&(0x7f0000000140), 0x20, 0x0, 0x0) quotactl$Q_SYNC(0xffffffff80000101, 0x0, 0x0, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f00000015c0)=ANY=[@ANYBLOB="b702000007000000bfa30000000000000703000000feffff7a0af0ff2300000079a4f0ff00000000b7060000ffffffff2d6405000000000065040400010001011404000011000000b7030000000000006a0a00fe000000008500000032000000b700000001000000950000000000000075cdc4b57b0c65752a3ad50000007ddd0000cb450063dedba767ade51f7f1f66acd19100002000000000000000ff7f0000b52f17cee19d0001000000000000000000cb04fcbb4e4d0b9bafe3ba431351a58a885ba9918d37b056b9bbd11b6b9f6cf7db6d574620260000000000008062d77e85cef4a2ab938f65aac33c4d620de2c9b7dc10d7d313f9f57606b83b994fc4051ade12f41deff6df6a936b4ec3827c739bb39aad16cc75fe369258673b5df11cc2afb53611cc32a790bc0b80e80eae8f5e64be2c9d2d29db3d36dd0cf8f79a015c7bd3f15aa6aadbeab2a01685108e61aa00000000000000000000000000c67c6c6a06e828e5216f601b19db1af1b5d356d0f062137d866d11be4ba3f0151fdbbd4e97d62ecc645e143a60f10800000000000000826151e3b42bcae95239ef5ca2a730a00c87c493db0300e63fda97a296820000000001000000eecc952a3fd2c46f3c1cde71a19d1a2982492a210e00d2bfea3b8d188df2eff8d56aaae7d32a2e180022537395019f02ec4b85f6aad7faca088de9b26797a8446b16c28d85f225992dbdd5bb01ba51508951c7a7d6ca0916c3a12912715649c2b1c7192a4251b59d378d3f00000000000000665c8b7e89eddfc3783f6c9129a7c5f8ee5f50579e2f638f7eb12f63be72a3d81ab324d6e417b1c2cbfdcada0a16e31790e26cf19588a7e0496ee2782224cf30f810da86cf1a3204f4c9404f5d7321a4fefc4d1c9139ca4b65b99909950000006b42077ca60fdecb2717e21f8f187b1866108b6e8c71e2603217606637ece1fa89917e131f4034a8383e99c3568fd04201b37cd92ca6ebf94a2d8310f7032775cfd75652f87b039d5430b3c6643e9146d2478ce31344b554aca7670000000000000010c65608fda6ed5d08e7a796042aa127d874105787d0347aa37801faff5b9050803a19ff6205aa5c263e407a2f7de56f7a0000e094fa4e3f05528caab5a430c08dd810bc97204b767dd969721a26aa740000000000bc433fe2d0a6ef2a8a91cd3cb305aa80dadef8b0caca780000000000000000863e21db415a222bb1a7ab94bfe4a74157d794f9d0430c2c0eb563350559829865a3dd08fb31bd0801e09aa3ee45e61a56fc83076451cff7632e49a41eadb5044a0d5f73d6932161ae5e9ce218a35cd8e7b747887b1a74798982d0b492c3f0ff53189d80733eb04f8124877b648ff438f7d66c7efcc09a8f3330b6c22d14e80db8e5608bdeab9388b758a15f4ce70390c214bc6838798f5b9b0b500d4e8b5174f329b8501c6feb7a6982bcea74a0f2ced7fa2059234a8d10b7f0597151d5c9067d57d85f4ae933eaf5174ba122f3f702ef8695578d3c08562c9fc185f0f65d11b4c58ae52500cbe99cde3758a5cbe6093dd328ac820e2de309d25a324647aadffcecf0f3bbaeda7af4436d9ffbce1b240a2f5e346eba8812e6329e01b087bde7da4a6448f478102e90c8134f531de08d4cf4f6f35b15a202544c0ced0c1715fd3a90099f785a13a2412bedba2981dd22bd9d736c00000000000000000000000000000000eb6fec8d7d2f77f4d470a9caa5b1bfc00cd1d40830ac35f229f8ffe1c02a63d3c2d9"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x2}, 0x8, 0x10, &(0x7f0000000100), 0x10}, 0x57) socket$inet6_mptcp(0xa, 0x1, 0x106) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r6, 0x702, 0x36, 0x0, &(0x7f0000000380)="e460334470b8d480eb20c15286dda4fba8285e2e31ca72823a29dad4781041a996430bbe5ecac76a351df831cdb98842af6450b2abf5", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 7.449243136s ago: executing program 2 (id=25): openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) recvmsg(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0) ioctl$VHOST_SET_LOG_FD(r1, 0x4004af07, &(0x7f0000000240)) r2 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f0000000140)={0x6}, 0x10) write(r2, &(0x7f0000000000)="1c0000001a005f0214f9f407000904001f000000ff02000200000000", 0x1c) socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000600)=ANY=[@ANYBLOB="28010000100007000000000000000000ff02000000000000ee000000000000010a0101010000000000000000000000004e200000000000000000200002000000", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="ff010000000000000000000000000001000000002b000000fc00000000000000000000000000000003000000000000000100000000000000020000000000000000000000000000000000001000000000010000000000000000000000000000000000000000000000000000000000000000002000000000000700000000000000000000000000000000000400fdffffffe80a000000000000000000000a0002fe340000000000000014000e"], 0x128}, 0x1, 0x0, 0x0, 0x1}, 0x0) r4 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_DISABLE_FRAGMENTS(r4, 0x84, 0x8, &(0x7f00000001c0)=0x4, 0x4) 6.14953442s ago: executing program 2 (id=27): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xb, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_UNISCRNMAP(r1, 0x4b6a, 0x0) sched_setscheduler(r0, 0x1, &(0x7f0000000300)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) r4 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r4, 0x10e, 0xc, &(0x7f0000000180)={0x1, 0x2, 0x5, 0x8000}, 0x10) write(r4, &(0x7f0000000000)="240000001a005f0214f9f407000901000000000000000005000000000800040001000000", 0x24) sendmmsg$unix(r3, &(0x7f0000000080), 0x3ffff35, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r5 = socket$inet6(0xa, 0x1, 0x0) r6 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r6, &(0x7f0000000000)={0x500, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="020300090a0000000000000004000000030006000000000002000000ac1414000000000000000000020001000000000000000002fffffffb030005000000000002"], 0x50}}, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r5, 0x29, 0x23, &(0x7f0000000180)={{{@in=@private, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@local, 0x0, 0x6c}, 0x0, @in6=@loopback, 0x0, 0x0, 0x0, 0x4}}, 0xe8) connect$inet6(r5, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c) 4.995625427s ago: executing program 2 (id=29): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=@newlink={0x54, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r2, 0x31, 0x455965fb809f3fbf}, [@IFLA_LINKINFO={0x34, 0x12, 0x0, 0x1, @bridge_slave={{0x11}, {0x1c, 0x5, 0x0, 0x1, [@IFLA_BRPORT_STATE={0x5, 0x1, 0x3}, @IFLA_BRPORT_MCAST_EHT_HOSTS_LIMIT={0x8, 0x25, 0x7}, @IFLA_BRPORT_PROXYARP_WIFI={0x5, 0xc, 0x1}]}}}]}, 0x54}, 0x1, 0x0, 0x0, 0x20040800}, 0x0) 4.861178842s ago: executing program 0 (id=30): r0 = syz_open_dev$sndctrl(&(0x7f0000000580), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r0, 0xc0045516, &(0x7f0000000000)=0xffb) r1 = syz_clone(0x1000, 0x0, 0x0, &(0x7f00000002c0), 0x0, 0x0) syz_open_dev$video(&(0x7f0000000000), 0x485, 0x40000) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r0, 0xc1105517, &(0x7f0000000080)={{0x1088, 0x4, 0x5, 0x80, 'syz1\x00', 0x200000}, 0x5, 0x0, 0x1, r1, 0x0, 0x8, 'syz1\x00', 0x0}) ioctl$KVM_GET_STATS_FD_cpu(0xffffffffffffffff, 0xaece) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x3000001, 0x32, 0xffffffffffffffff, 0x0) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r0, 0xc0045516, &(0x7f0000000540)=0x7b1) 4.860933187s ago: executing program 1 (id=31): setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, 0x0, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="12000000050000000400000002"], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r1, 0xffffffffffffffff}, &(0x7f0000000040), &(0x7f0000000140)=r0}, 0x20) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000280)={r2, &(0x7f0000000080), 0x0}, 0x20) 4.551528157s ago: executing program 1 (id=32): socket$kcm(0xa, 0x5, 0x0) socket(0x2a, 0x2, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ffa000/0x2000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ff3000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ff1000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ff4000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0, 0xfee9}, 0x68) r0 = io_uring_setup(0x1bc2, &(0x7f0000000040)={0x0, 0xc89f, 0xc000, 0x7, 0x20002f9}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, &(0x7f0000000240), 0x0, 0x501, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x4}, 0x50) r1 = socket$inet(0x2, 0x80001, 0x84) sendmsg$netlink(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{0x0, 0x10}], 0x1}, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000300)=0x8) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000000)="10", 0x1}], 0x51, 0x0, 0x0, 0x2c}, 0x4028805) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) 4.36104384s ago: executing program 2 (id=33): mbind(&(0x7f0000bdc000/0x3000)=nil, 0x3000, 0x1, &(0x7f0000000140)=0x3ff, 0x3, 0x0) openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) r0 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) mkdir(&(0x7f00000003c0)='./file0\x00', 0x21) syz_open_procfs(0x0, 0x0) syz_usb_control_io$lan78xx(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f0000000580)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) munmap(&(0x7f0000ffd000/0x1000)=nil, 0x1000) read$msr(r1, &(0x7f0000001a40)=""/102392, 0x18ff8) keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=@encrypted_new={'new ', 'default', 0x20, 'trusted:', 'syz', 0x20, 0xffc}, 0x2d, 0xfffffffffffffffa) r2 = add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe) keyctl$read(0xb, r2, &(0x7f0000000240)=""/112, 0x349b7f55) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x8041) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct]}}, 0x0, 0x26}, 0x20) writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000140)='2', 0x1}], 0x1) r3 = syz_open_procfs(0x0, &(0x7f0000000140)='schedstat\x00') r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') mount$9p_fd(0x0, 0x0, &(0x7f0000000080), 0x0, &(0x7f0000000100)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {'wfdno', 0x3d, r3}}) mbind(&(0x7f0000bdb000/0x3000)=nil, 0x3000, 0x1, &(0x7f0000000080)=0x103e, 0x5, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000000000), 0x4000000000001f2, 0x0) mlock(&(0x7f0000400000/0xc00000)=nil, 0xc00000) r5 = gettid() r6 = signalfd4(0xffffffffffffffff, &(0x7f0000000140)={[0xfffffffffbfffff5]}, 0x8, 0x0) readv(r6, &(0x7f0000000000)=[{&(0x7f0000000040)=""/61, 0x3d}, {&(0x7f0000000300)=""/69, 0x45}], 0x2) tkill(r5, 0x8) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) 4.283838999s ago: executing program 1 (id=34): syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) r0 = add_key$fscrypt_v1(&(0x7f0000000000), &(0x7f0000000040)={'fscrypt:', @desc3}, &(0x7f0000000080)={0x0, "8820219396bf4f2f6bea5a962c2268a66beefb49786fc4fb02c8a0b33891abd61d9df3b7509dd1d4c32840f2056f35200dcb5ebe03a72b7e39d59a310321b3ad", 0x36}, 0x48, 0xffffffffffffffff) keyctl$revoke(0x3, r0) add_key$fscrypt_v1(&(0x7f0000000000), &(0x7f0000000040)={'fscrypt:', @desc3}, &(0x7f0000000080)={0x0, "8820219396bf4f2f6bea5a962c2268a66beefb49786fc4fb02c8a0b33891abd61d9df3b7509dd1d4c32840f2056f35200dcb5ebe03a72b7e39d59a310321b3ad", 0x36}, 0x48, 0xffffffffffffffff) 3.781021205s ago: executing program 0 (id=35): syz_open_procfs(0xffffffffffffffff, &(0x7f0000000c40)='comm\x00') exit(0x4) open$dir(0x0, 0x1, 0x19d) r0 = syz_open_dev$video4linux(&(0x7f0000000080), 0x0, 0x0) ioctl$VIDIOC_SUBSCRIBE_EVENT(r0, 0x4020565a, &(0x7f0000000100)={0x3, 0x980900}) r1 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$EVIOCGRAB(0xffffffffffffffff, 0x40044590, 0x0) wait4(r1, 0x0, 0x8, 0x0) syz_pidfd_open(r1, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, 0x0) r2 = syz_open_dev$video4linux(&(0x7f0000000080), 0x0, 0x0) ioctl$VIDIOC_SUBSCRIBE_EVENT(r2, 0x4020565a, &(0x7f0000000280)={0x3, 0x980900, 0x2eae0342ca72d7e8}) ioctl$VIDIOC_QUERYMENU(r2, 0xc008561c, &(0x7f0000000000)={0x980900, 0xfffffff2, @name="82bf06255c32514ef266824307509e39f5e892343710c37e48a72f12e53542fb"}) 2.26210033s ago: executing program 3 (id=36): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)='batadv_slave_1\x00', 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007bd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) 2.161232678s ago: executing program 1 (id=37): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x7) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000003200)=ANY=[@ANYBLOB="5c01000010000100feffffff00010000fe880000000000000000000000000001fc010000000000000000000000000001000107144e230005000000003a000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0x15c}, 0x1, 0x0, 0x0, 0x8801}, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000001380)={&(0x7f0000001200)=@newsa={0x138, 0x1a, 0x1, 0xfffffffe, 0x100, {{@in=@multicast2, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x1, 0x71c, 0x4e23, 0x7, 0xa, 0x0, 0x20, 0x3a}, {@in6=@mcast2, 0x4d4, 0x6c}, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, {0x0, 0x8, 0x9ba3, 0xffff, 0x8251c, 0x5, 0xfffffffffffffffc}, {0xffffffffffffffff, 0x0, 0x10001, 0xfffffffffffffffe}, {0xfffffffe, 0x3fc}, 0x80, 0x3505, 0x2, 0x1, 0x0, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}}, 0x844) 1.830544194s ago: executing program 4 (id=38): r0 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) r1 = fcntl$dupfd(r0, 0x0, r0) write$tun(r1, &(0x7f0000001b40)={@void, @void, @mpls={[], @ipv6=@tipc_packet={0x3, 0x6, 'Z\vB', 0x304, 0x6, 0x0, @empty, @mcast1, {[@srh={0x33, 0x6, 0x4, 0x3, 0x2, 0x50, 0x2, [@mcast2, @empty, @ipv4={'\x00', '\xff\xff', @multicast1}]}, @hopopts={0x16, 0x4d, '\x00', [@ra={0x5, 0x2, 0x200}, @padn={0x1, 0x1, [0x0]}, @generic={0x6, 0x66, "c8712236b394c01259655949ee7348802783b94946a87e80a5d91aa40be2449482c7ea4d87c0c62a68afbec0811fddda1d4bbebf005ea7de547e8fd5e1f827c8d38d530b6ed9124e23ba20eb432333ece7cbdb8a587931c8c924aeea3c4e8b96d09ff71b15bb"}, @generic={0x9, 0x1c4, "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"}, @calipso={0x7, 0x20, {0x3, 0x6, 0x10, 0x84, [0x7, 0xa5fc, 0x0]}}, @calipso={0x7, 0x10, {0x3, 0x2, 0x6, 0x7463, [0x100000000]}}]}, @srh={0x0, 0x2, 0x4, 0x1, 0x0, 0x50, 0x273, [@mcast1]}, @hopopts={0x3b, 0x0, '\x00', [@padn]}], @payload_mcast={{{{{{0x2c, 0x0, 0x1, 0x0, 0x0, 0xb, 0x0, 0x2, 0x5, 0x0, 0x57082eceb02ffff2, 0x4, 0x1, 0x1, 0x8, 0x4, 0xa, 0x4e22, 0x4e24}, 0x0, 0x2}, 0x1, 0x4}, 0x1}}}}}}}, 0x32c) 1.75131899s ago: executing program 1 (id=39): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xb, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_UNISCRNMAP(r1, 0x4b6a, 0x0) sched_setscheduler(r0, 0x1, &(0x7f0000000300)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) r4 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r4, 0x10e, 0xc, &(0x7f0000000180)={0x1, 0x2, 0x5, 0x8000}, 0x10) write(r4, &(0x7f0000000000)="240000001a005f0214f9f407000901000000000000000005000000000800040001000000", 0x24) sendmmsg$unix(r3, &(0x7f0000000080), 0x3ffff35, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = socket$inet6(0xa, 0x1, 0x0) r6 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r6, &(0x7f0000000000)={0x500, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="020300090a0000000000000004000000030006000000000002000000ac1414000000000000000000020001000000000000000002fffffffb030005000000000002"], 0x50}}, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r5, 0x29, 0x23, &(0x7f0000000180)={{{@in=@private, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@local, 0x0, 0x6c}, 0x0, @in6=@loopback, 0x0, 0x0, 0x0, 0x4}}, 0xe8) connect$inet6(r5, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c) 1.559711009s ago: executing program 0 (id=40): ioctl$VIDIOC_S_EXT_CTRLS(0xffffffffffffffff, 0xc0205647, &(0x7f0000000100)={0xf000000, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000040)={0x98f910, 0x8000, '\x00', @ptr=0x4000000020001100}}) 1.4783411s ago: executing program 4 (id=41): r0 = socket$inet(0x2, 0x80001, 0x84) bind$inet(r0, &(0x7f0000000180)={0x2, 0xce20, @empty}, 0x10) listen(r0, 0x3) r1 = socket$inet6(0xa, 0x5, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000fee000)=0x1, 0x4) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bind$inet6(r1, &(0x7f0000000140)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) 788.101766ms ago: executing program 1 (id=42): setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000080)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x800, 0x0, 0x2, 0x1, 0x0, 0x8001}, 0x20) socketpair(0x1, 0x1, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="12000000050000000400000002"], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r0, 0xffffffffffffffff}, &(0x7f0000000040), &(0x7f0000000140)}, 0x20) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000280)={r1, &(0x7f0000000080), 0x0}, 0x20) 756.756348ms ago: executing program 2 (id=43): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xe}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x5, 0x7, 0xb3}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=@newqdisc={0x58, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xffffbddc, {0x0, 0x0, 0x0, r3, {0x10}, {}, {0xe, 0x1}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x200000, 0xe, 0x7, 0x7, 0x9, 0x40, 0xffffffff, 0x2}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x4040098}, 0x4000) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) epoll_create1(0x80000) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000002940)=@newqdisc={0x48, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r6, {0x10}, {}, {0x2, 0x3}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x8, 0x3}}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0xb3538085985bb3d6}, 0x0) 753.547621ms ago: executing program 3 (id=44): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, 0x0, 0x0) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000080), 0x10b841, 0x0) pwritev2(r1, &(0x7f0000000600)=[{0x0}], 0x1, 0x1, 0x81, 0x1a) syz_genetlink_get_family_id$gtp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$GTP_CMD_GETPDP(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}, 0x1, 0x0, 0x0, 0x20000010}, 0x40) socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) openat$mice(0xffffffffffffff9c, 0x0, 0x41) socket$pppl2tp(0x18, 0x1, 0x1) syz_80211_inject_frame(0x0, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) 351.622109ms ago: executing program 4 (id=45): openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x25104000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) r3 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) setsockopt$nfc_llcp_NFC_LLCP_MIUX(r3, 0x118, 0x1, 0xffffffffffffffff, 0xfe93) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x81c0, 0x0) execveat(0xffffffffffffff9c, &(0x7f0000000280)='./file2\x00', 0x0, 0x0, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000080)=ANY=[@ANYBLOB="540000001400b59500000000000000000a00", @ANYBLOB], 0x54}, 0x1, 0x0, 0x0, 0x800}, 0x80) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x2000, 0x103) connect$unix(r2, &(0x7f0000000180)=@file={0x1, './file2\x00'}, 0x6e) 301.341192ms ago: executing program 0 (id=46): setresgid(0xffffffffffffffff, 0xee00, 0xffffffffffffffff) mknodat$loop(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x1004, 0x1) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000001180), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x24c01, 0x0) 0s ago: executing program 3 (id=47): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000180)={0x28, 0x19, 0x7, 0xd1, 0x30, 0x10, 0xaa, 0x6, 0xfd, 0x8, 0x6, 0x40, 0x0, 0x79}, 0xe) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x10, &(0x7f0000000440)=[@in={0x2, 0x4e23, @loopback}]}, &(0x7f0000000040)=0x10) getsockopt$inet_sctp6_SCTP_ASSOCINFO(r0, 0x84, 0x1, &(0x7f0000001140)={r1, 0x9, 0x7, 0xfffffffe, 0x109, 0x6}, &(0x7f00000011c0)=0x14) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.83' (ED25519) to the list of known hosts. [ 76.610044][ T5596] cgroup: Unknown subsys name 'net' [ 76.849091][ T5596] cgroup: Unknown subsys name 'cpuset' [ 76.904814][ T5596] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 78.537333][ T5596] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 81.013019][ T5615] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 81.037134][ T5623] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 81.041551][ T5623] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 81.059637][ T5624] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 81.061458][ T5623] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 81.076392][ T5624] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 81.077816][ T5624] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 81.115155][ T60] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 81.142104][ T60] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 81.157722][ T5626] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 81.164218][ T5626] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 81.180871][ T60] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 81.181157][ T5626] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 81.193137][ T5626] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 81.193857][ T5626] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 81.196342][ T5626] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 81.200186][ T5615] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 81.201619][ T5615] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 81.211766][ T5619] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 81.213177][ T5619] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 81.258013][ T5615] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 81.277957][ T5615] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 81.280742][ T5615] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 81.312171][ T5615] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 81.330664][ T5615] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 83.176827][ T4925] Bluetooth: hci0: command tx timeout [ 83.256009][ T4925] Bluetooth: hci3: command tx timeout [ 83.256036][ T5615] Bluetooth: hci2: command tx timeout [ 83.335629][ T5615] Bluetooth: hci1: command tx timeout [ 83.414296][ T5615] Bluetooth: hci4: command tx timeout [ 83.947112][ T5609] bridge0: port 1(bridge_slave_0) entered blocking state [ 83.947349][ T5609] bridge0: port 1(bridge_slave_0) entered disabled state [ 83.948280][ T5609] bridge_slave_0: entered allmulticast mode [ 83.950185][ T5609] bridge_slave_0: entered promiscuous mode [ 84.011621][ T5609] bridge0: port 2(bridge_slave_1) entered blocking state [ 84.011783][ T5609] bridge0: port 2(bridge_slave_1) entered disabled state [ 84.011986][ T5609] bridge_slave_1: entered allmulticast mode [ 84.013874][ T5609] bridge_slave_1: entered promiscuous mode [ 84.131398][ T5611] bridge0: port 1(bridge_slave_0) entered blocking state [ 84.131757][ T5611] bridge0: port 1(bridge_slave_0) entered disabled state [ 84.132003][ T5611] bridge_slave_0: entered allmulticast mode [ 84.133801][ T5611] bridge_slave_0: entered promiscuous mode [ 84.196821][ T5612] bridge0: port 1(bridge_slave_0) entered blocking state [ 84.197128][ T5612] bridge0: port 1(bridge_slave_0) entered disabled state [ 84.197398][ T5612] bridge_slave_0: entered allmulticast mode [ 84.199366][ T5612] bridge_slave_0: entered promiscuous mode [ 84.203976][ T5611] bridge0: port 2(bridge_slave_1) entered blocking state [ 84.204460][ T5611] bridge0: port 2(bridge_slave_1) entered disabled state [ 84.204779][ T5611] bridge_slave_1: entered allmulticast mode [ 84.209486][ T5611] bridge_slave_1: entered promiscuous mode [ 84.225069][ T5609] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 84.225440][ T5613] bridge0: port 1(bridge_slave_0) entered blocking state [ 84.225724][ T5613] bridge0: port 1(bridge_slave_0) entered disabled state [ 84.225960][ T5613] bridge_slave_0: entered allmulticast mode [ 84.230224][ T5613] bridge_slave_0: entered promiscuous mode [ 84.248329][ T5610] bridge0: port 1(bridge_slave_0) entered blocking state [ 84.248563][ T5610] bridge0: port 1(bridge_slave_0) entered disabled state [ 84.248831][ T5610] bridge_slave_0: entered allmulticast mode [ 84.267420][ T5610] bridge_slave_0: entered promiscuous mode [ 84.281222][ T5612] bridge0: port 2(bridge_slave_1) entered blocking state [ 84.281506][ T5612] bridge0: port 2(bridge_slave_1) entered disabled state [ 84.281750][ T5612] bridge_slave_1: entered allmulticast mode [ 84.286298][ T5612] bridge_slave_1: entered promiscuous mode [ 84.324634][ T5609] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 84.325015][ T5613] bridge0: port 2(bridge_slave_1) entered blocking state [ 84.325287][ T5613] bridge0: port 2(bridge_slave_1) entered disabled state [ 84.325533][ T5613] bridge_slave_1: entered allmulticast mode [ 84.329128][ T5613] bridge_slave_1: entered promiscuous mode [ 84.332405][ T5610] bridge0: port 2(bridge_slave_1) entered blocking state [ 84.332695][ T5610] bridge0: port 2(bridge_slave_1) entered disabled state [ 84.332939][ T5610] bridge_slave_1: entered allmulticast mode [ 84.339509][ T5610] bridge_slave_1: entered promiscuous mode [ 84.511163][ T5611] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 84.567762][ T5612] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 84.571214][ T5611] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 84.573899][ T5609] team0: Port device team_slave_0 added [ 84.586085][ T5613] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 84.598482][ T5610] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 84.606103][ T5612] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 84.635380][ T5613] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 84.639487][ T5610] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 84.671170][ T5609] team0: Port device team_slave_1 added [ 84.741403][ T5611] team0: Port device team_slave_0 added [ 84.776847][ T5612] team0: Port device team_slave_0 added [ 84.811155][ T5611] team0: Port device team_slave_1 added [ 84.813983][ T5613] team0: Port device team_slave_0 added [ 84.820221][ T5610] team0: Port device team_slave_0 added [ 84.828249][ T5612] team0: Port device team_slave_1 added [ 84.830735][ T5609] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 84.830749][ T5609] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 84.830772][ T5609] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 84.865870][ T5613] team0: Port device team_slave_1 added [ 84.870215][ T5610] team0: Port device team_slave_1 added [ 84.897237][ T5609] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 84.897248][ T5609] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 84.897262][ T5609] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 84.980411][ T5611] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 84.980422][ T5611] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 84.980436][ T5611] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 85.031444][ T5612] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 85.031454][ T5612] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 85.031468][ T5612] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 85.040905][ T5611] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 85.040922][ T5611] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 85.040946][ T5611] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 85.046670][ T5613] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 85.046685][ T5613] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 85.046708][ T5613] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 85.050212][ T5610] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 85.050225][ T5610] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 85.050248][ T5610] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 85.057707][ T5612] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 85.057721][ T5612] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 85.057744][ T5612] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 85.080997][ T5613] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 85.081014][ T5613] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 85.081037][ T5613] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 85.098253][ T5610] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 85.098269][ T5610] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 85.098293][ T5610] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 85.254193][ T5615] Bluetooth: hci0: command tx timeout [ 85.258594][ T5609] hsr_slave_0: entered promiscuous mode [ 85.261074][ T5609] hsr_slave_1: entered promiscuous mode [ 85.335612][ T5615] Bluetooth: hci2: command tx timeout [ 85.344731][ T5615] Bluetooth: hci3: command tx timeout [ 85.391975][ T5611] hsr_slave_0: entered promiscuous mode [ 85.393184][ T5611] hsr_slave_1: entered promiscuous mode [ 85.394478][ T5611] debugfs: 'hsr0' already exists in 'hsr' [ 85.394601][ T5611] Cannot create hsr debugfs directory [ 85.409814][ T5612] hsr_slave_0: entered promiscuous mode [ 85.411777][ T5612] hsr_slave_1: entered promiscuous mode [ 85.413356][ T5612] debugfs: 'hsr0' already exists in 'hsr' [ 85.413377][ T5612] Cannot create hsr debugfs directory [ 85.415785][ T5615] Bluetooth: hci1: command tx timeout [ 85.494316][ T5615] Bluetooth: hci4: command tx timeout [ 86.040924][ T5610] hsr_slave_0: entered promiscuous mode [ 86.042763][ T5610] hsr_slave_1: entered promiscuous mode [ 86.043763][ T5610] debugfs: 'hsr0' already exists in 'hsr' [ 86.043787][ T5610] Cannot create hsr debugfs directory [ 86.068560][ T5613] hsr_slave_0: entered promiscuous mode [ 86.069975][ T5613] hsr_slave_1: entered promiscuous mode [ 86.070990][ T5613] debugfs: 'hsr0' already exists in 'hsr' [ 86.071013][ T5613] Cannot create hsr debugfs directory [ 86.789716][ T1246] cfg80211: failed to load regulatory.db [ 86.908199][ T5609] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 86.952896][ T5609] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 86.969762][ T5609] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 87.013050][ T5609] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 87.035238][ T5609] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 87.069666][ T5609] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 87.073167][ T5609] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 87.100979][ T5609] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 87.201900][ T5611] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 87.248570][ T5611] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 87.253120][ T5611] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 87.277292][ T5611] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 87.292786][ T5611] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 87.319582][ T5611] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 87.335251][ T5615] Bluetooth: hci0: command tx timeout [ 87.345369][ T5611] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 87.393083][ T5611] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 87.414183][ T5615] Bluetooth: hci2: command tx timeout [ 87.420627][ T5615] Bluetooth: hci3: command tx timeout [ 87.494182][ T5615] Bluetooth: hci1: command tx timeout [ 87.574705][ T5615] Bluetooth: hci4: command tx timeout [ 87.603700][ T5610] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 87.647580][ T5610] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 87.663019][ T5610] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 87.718688][ T5610] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 87.733165][ T5610] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 87.759775][ T5610] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 87.800582][ T5610] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 87.839925][ T5610] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 88.003532][ T5612] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 88.049457][ T5612] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 88.058153][ T5612] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 88.100513][ T5612] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 88.118881][ T5612] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 88.158864][ T5612] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 88.187545][ T5612] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 88.232792][ T5612] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 88.366153][ T5609] 8021q: adding VLAN 0 to HW filter on device bond0 [ 88.430455][ T5613] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 88.460483][ T5613] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 88.466150][ T5613] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 88.497546][ T5613] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 88.515731][ T5613] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 88.559974][ T5613] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 88.576407][ T5613] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 88.628390][ T5613] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 88.717459][ T5609] 8021q: adding VLAN 0 to HW filter on device team0 [ 88.747327][ T5611] 8021q: adding VLAN 0 to HW filter on device bond0 [ 88.780013][ T1534] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.780451][ T1534] bridge0: port 1(bridge_slave_0) entered forwarding state [ 88.902081][ T3405] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.902587][ T3405] bridge0: port 2(bridge_slave_1) entered forwarding state [ 89.007586][ T5611] 8021q: adding VLAN 0 to HW filter on device team0 [ 89.043273][ T5610] 8021q: adding VLAN 0 to HW filter on device bond0 [ 89.067047][ T3375] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.067346][ T3375] bridge0: port 1(bridge_slave_0) entered forwarding state [ 89.123936][ T3375] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.131098][ T3375] bridge0: port 2(bridge_slave_1) entered forwarding state [ 89.218277][ T5610] 8021q: adding VLAN 0 to HW filter on device team0 [ 89.287630][ T1534] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.287768][ T1534] bridge0: port 1(bridge_slave_0) entered forwarding state [ 89.312304][ T5612] 8021q: adding VLAN 0 to HW filter on device bond0 [ 89.351935][ T1534] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.352087][ T1534] bridge0: port 2(bridge_slave_1) entered forwarding state [ 89.415004][ T5615] Bluetooth: hci0: command tx timeout [ 89.494176][ T5615] Bluetooth: hci3: command tx timeout [ 89.494207][ T5615] Bluetooth: hci2: command tx timeout [ 89.527501][ T5612] 8021q: adding VLAN 0 to HW filter on device team0 [ 89.575530][ T4925] Bluetooth: hci1: command tx timeout [ 89.630418][ T5613] 8021q: adding VLAN 0 to HW filter on device bond0 [ 89.632181][ T3405] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.632311][ T3405] bridge0: port 1(bridge_slave_0) entered forwarding state [ 89.656301][ T4925] Bluetooth: hci4: command tx timeout [ 89.747475][ T1128] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.747566][ T1128] bridge0: port 2(bridge_slave_1) entered forwarding state [ 89.950713][ T5613] 8021q: adding VLAN 0 to HW filter on device team0 [ 90.071718][ T3405] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.072743][ T3405] bridge0: port 1(bridge_slave_0) entered forwarding state [ 90.158727][ T44] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.162551][ T44] bridge0: port 2(bridge_slave_1) entered forwarding state [ 90.535725][ T5609] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 90.875959][ T5611] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 91.187572][ T5609] veth0_vlan: entered promiscuous mode [ 91.276797][ T5610] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 91.332968][ T5609] veth1_vlan: entered promiscuous mode [ 91.562617][ T5611] veth0_vlan: entered promiscuous mode [ 91.699809][ T5611] veth1_vlan: entered promiscuous mode [ 91.727248][ T5609] veth0_macvtap: entered promiscuous mode [ 91.741577][ T5612] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 91.802720][ T5609] veth1_macvtap: entered promiscuous mode [ 91.907274][ T5613] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 91.966671][ T5609] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 92.008003][ T5609] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 92.012903][ T5611] veth0_macvtap: entered promiscuous mode [ 92.083030][ T196] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.086705][ T5611] veth1_macvtap: entered promiscuous mode [ 92.106616][ T196] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.113410][ T196] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.154620][ T196] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.199781][ T5612] veth0_vlan: entered promiscuous mode [ 92.273331][ T5610] veth0_vlan: entered promiscuous mode [ 92.350755][ T5611] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 92.443153][ T5612] veth1_vlan: entered promiscuous mode [ 92.470312][ T5611] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 92.582574][ T5610] veth1_vlan: entered promiscuous mode [ 92.610501][ T5613] veth0_vlan: entered promiscuous mode [ 92.629325][ T44] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.655894][ T44] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.660418][ T44] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.663060][ T44] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.761208][ T5613] veth1_vlan: entered promiscuous mode [ 92.848138][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.848163][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.191496][ T5612] veth0_macvtap: entered promiscuous mode [ 93.199123][ T1534] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.199144][ T1534] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.233629][ T5610] veth0_macvtap: entered promiscuous mode [ 93.310765][ T5612] veth1_macvtap: entered promiscuous mode [ 93.376415][ T5610] veth1_macvtap: entered promiscuous mode [ 93.395827][ T1534] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.395856][ T1534] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.491546][ T5613] veth0_macvtap: entered promiscuous mode [ 93.540778][ T5612] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 93.541654][ T5613] veth1_macvtap: entered promiscuous mode [ 93.549573][ T196] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.549590][ T196] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.611015][ T5610] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 93.646723][ T5612] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 93.697911][ T5610] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 93.746796][ T1534] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.750844][ T1534] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.777409][ T5613] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 93.777499][ T1534] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.837933][ T1534] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.860585][ T44] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.899952][ T44] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.908653][ T44] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.931058][ T5613] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 93.945599][ T44] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.107718][ T44] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.197095][ T44] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.218110][ T44] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.222296][ T44] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.365407][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.365428][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.700084][ T3375] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.700103][ T3375] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 96.014092][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 96.034088][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 96.044099][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 96.054077][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 96.064097][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 96.074101][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 96.084086][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 96.094099][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 96.104088][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 96.114116][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 97.243788][ T3405] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 97.243802][ T3405] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 98.489580][ T5817] syz.3.6 (5817): drop_caches: 2 [ 99.235672][ T1534] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 99.235688][ T1534] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 99.441134][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 99.441154][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 100.101985][ T1534] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 100.102004][ T1534] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 100.872338][ T5838] Zero length message leads to an empty skb [ 101.438542][ T5842] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 104.473713][ T5885] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 104.790801][ T5891] netlink: 'syz.1.26': attribute type 3 has an invalid length. [ 104.798776][ T5884] netlink: 36 bytes leftover after parsing attributes in process `syz.2.25'. [ 104.802820][ T5891] netlink: 8 bytes leftover after parsing attributes in process `syz.1.26'. [ 104.911512][ T5891] mmap: syz.1.26 (5891) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 105.196308][ T1246] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 105.576834][ T1246] usb 4-1: Using ep0 maxpacket: 8 [ 105.661630][ T1246] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 105.661696][ T1246] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x1 has invalid wMaxPacketSize 0 [ 105.661717][ T1246] usb 4-1: config 0 interface 0 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 105.661742][ T1246] usb 4-1: config 0 interface 0 has no altsetting 0 [ 105.709174][ T1246] usb 4-1: New USB device found, idVendor=0e41, idProduct=4142, bcdDevice=d4.6e [ 105.709204][ T1246] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 105.709223][ T1246] usb 4-1: Product: syz [ 105.709237][ T1246] usb 4-1: Manufacturer: syz [ 105.709251][ T1246] usb 4-1: SerialNumber: syz [ 106.418560][ T1246] usb 4-1: config 0 descriptor?? [ 107.005188][ T5902] bridge0: port 1(bridge_slave_0) entered forwarding state [ 107.033157][ T1246] snd_usb_toneport 4-1:0.0: Line 6 TonePort UX2 found [ 107.106999][ T1246] snd_usb_toneport 4-1:0.0: cannot get proper max packet size [ 107.123016][ T1246] snd_usb_toneport 4-1:0.0: Line 6 TonePort UX2 now disconnected [ 107.133887][ T1246] snd_usb_toneport 4-1:0.0: probe with driver snd_usb_toneport failed with error -22 [ 107.411479][ T5752] usb 4-1: USB disconnect, device number 2 [ 107.980954][ T5919] trusted_key: encrypted_key: key trusted:syz not found [ 108.782848][ T5919] syz.2.33 (5919): drop_caches: 2 [ 110.901143][ T5940] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 111.652159][ T5954] process 'syz.4.45' launched './file2' with NULL argv: empty string added [ 111.720072][ T5954] netlink: 60 bytes leftover after parsing attributes in process `syz.4.45'. [ 112.220066][ T5948] Oops: general protection fault, probably for non-canonical address 0xdffffc0000000000: 0000 [#1] SMP KASAN PTI [ 112.220090][ T5948] KASAN: null-ptr-deref in range [0x0000000000000000-0x0000000000000007] [ 112.220118][ T5948] CPU: 0 UID: 0 PID: 5948 Comm: syz.0.46 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 112.220140][ T5948] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 112.220150][ T5948] RIP: 0010:fuse_dev_release+0x19c/0x670 [ 112.220181][ T5948] Code: 5c 24 28 48 8b 44 24 30 42 80 3c 38 00 74 08 48 89 df e8 17 22 eb fe 48 8b 0b 48 89 4c 24 18 4e 8d 24 31 4d 89 e5 49 c1 ed 03 <43> 80 7c 3d 00 00 74 08 4c 89 e7 e8 f4 21 eb fe 4d 8b 3c 24 4d 39 [ 112.220196][ T5948] RSP: 0018:ffffc90006397c60 EFLAGS: 00010246 [ 112.220213][ T5948] RAX: 1ffff1100555bbd3 RBX: ffff88802aadde98 RCX: 0000000000000000 [ 112.220226][ T5948] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 112.220237][ T5948] RBP: ffffc90006397d40 R08: ffffffff8b325a20 R09: ffffffff8dfcac60 [ 112.220251][ T5948] R10: dffffc0000000000 R11: fffffbfff1f1a07f R12: 0000000000000000 [ 112.220272][ T5948] R13: 0000000000000000 R14: 0000000000000000 R15: dffffc0000000000 [ 112.220284][ T5948] FS: 00005555787d7500(0000) GS:ffff888125ecd000(0000) knlGS:0000000000000000 [ 112.220300][ T5948] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 112.220312][ T5948] CR2: 000000110c257d66 CR3: 0000000039242000 CR4: 00000000003526f0 [ 112.220328][ T5948] Call Trace: [ 112.220339][ T5948] [ 112.220349][ T5948] ? __pfx_fuse_dev_release+0x10/0x10 [ 112.220377][ T5948] ? evm_file_release+0x10a/0x1e0 [ 112.220396][ T5948] ? __pfx_fuse_dev_release+0x10/0x10 [ 112.220419][ T5948] __fput+0x461/0xa70 [ 112.220446][ T5948] task_work_run+0x1d9/0x270 [ 112.220471][ T5948] ? __pfx_task_work_run+0x10/0x10 [ 112.220499][ T5948] exit_to_user_mode_loop+0x193/0x680 [ 112.220522][ T5948] ? rcu_is_watching+0x15/0xb0 [ 112.220549][ T5948] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 112.220569][ T5948] do_syscall_64+0x353/0x580 [ 112.220586][ T5948] ? trace_irq_disable+0x3b/0x140 [ 112.220609][ T5948] ? clear_bhb_loop+0x40/0x90 [ 112.220630][ T5948] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 112.220647][ T5948] RIP: 0033:0x7fd8031cce59 [ 112.220668][ T5948] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 112.220682][ T5948] RSP: 002b:00007fff40a3ad08 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 112.220702][ T5948] RAX: 0000000000000000 RBX: 00007fd803447da0 RCX: 00007fd8031cce59 [ 112.220715][ T5948] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 [ 112.220726][ T5948] RBP: 00007fd803447da0 R08: 0000000000000006 R09: 0000000000000000 [ 112.220737][ T5948] R10: 00007fd803447cb0 R11: 0000000000000246 R12: 000000000001b5ac [ 112.220749][ T5948] R13: 00007fd80344609c R14: 000000000001b316 R15: 00007fd803446090 [ 112.220767][ T5948] [ 112.220773][ T5948] Modules linked in: [ 112.220810][ T5948] ---[ end trace 0000000000000000 ]--- [ 112.221218][ T5948] RIP: 0010:fuse_dev_release+0x19c/0x670 [ 112.221249][ T5948] Code: 5c 24 28 48 8b 44 24 30 42 80 3c 38 00 74 08 48 89 df e8 17 22 eb fe 48 8b 0b 48 89 4c 24 18 4e 8d 24 31 4d 89 e5 49 c1 ed 03 <43> 80 7c 3d 00 00 74 08 4c 89 e7 e8 f4 21 eb fe 4d 8b 3c 24 4d 39 [ 112.221271][ T5948] RSP: 0018:ffffc90006397c60 EFLAGS: 00010246 [ 112.221287][ T5948] RAX: 1ffff1100555bbd3 RBX: ffff88802aadde98 RCX: 0000000000000000 [ 112.221300][ T5948] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 112.221311][ T5948] RBP: ffffc90006397d40 R08: ffffffff8b325a20 R09: ffffffff8dfcac60 [ 112.221324][ T5948] R10: dffffc0000000000 R11: fffffbfff1f1a07f R12: 0000000000000000 [ 112.221337][ T5948] R13: 0000000000000000 R14: 0000000000000000 R15: dffffc0000000000 [ 112.221349][ T5948] FS: 00005555787d7500(0000) GS:ffff888125ecd000(0000) knlGS:0000000000000000 [ 112.221364][ T5948] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 112.221377][ T5948] CR2: 000000110c257d66 CR3: 0000000039242000 CR4: 00000000003526f0 [ 112.221395][ T5948] Kernel panic - not syncing: Fatal exception [ 112.221734][ T5948] Kernel Offset: disabled