last executing test programs: 2m49.92627253s ago: executing program 4 (id=125): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = syz_open_dev$sndctrl(&(0x7f0000000100), 0x0, 0x0) r2 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x80042, 0x0) ioctl$PTP_PEROUT_REQUEST2(r2, 0x40383d0c, &(0x7f0000000040)={{0x200000000000004, 0xfffffffb}, {0xff039010, 0xdf5}, 0xc, 0x20000006}) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r1, 0xc1105517, &(0x7f0000000340)={{0x0, 0x0, 0x0, 0x0, 'syz0\x00', 0x4000}, 0x6, 0x0, 0x4, 0x0, 0x0, 0x2, 'syz1\x00', 0x0}) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r1, 0x40405515, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$inet(0x2, 0x3, 0x2) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000140)='batadv0\x00', 0x10) connect$can_bcm(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x8, 0x8000}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x4000000000001, 0x0, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) read(0xffffffffffffffff, 0x0, 0x0) r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0xa4242, 0x0) sendfile(r5, r5, 0x0, 0x40008) write$tun(0xffffffffffffffff, &(0x7f0000000040)=ANY=[], 0xfdef) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20004080}, 0x48810) syz_open_dev$usbfs(&(0x7f0000000540), 0x8, 0xa08003) 2m46.338067433s ago: executing program 1 (id=128): r0 = syz_genetlink_get_family_id$wireguard(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000001d80)=ANY=[@ANYBLOB="4c060000", @ANYRES16=r0, @ANYBLOB="01002dbd7000fedbdf250100000014000200776732000000000000000000000000002400030000000000000000000000000000000000000000000000000000000000000000000006088030000080080003000700000024000100dbffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff48000080200004000a004e220000000120010000000000000000000000000001fa14000024000100f44da367a88ee6564f020211456727082f5cebee8b1bf5eb7337341b459b39222c01008024000100975c9d81c983c8209ee781254b899f8ed925ae9f0923c23c62f53c57cdbf691c1400040002004e22ac1414aa00000000000000000800030004000000200004000a004e2300000005fe88000000000000000000000000010100100000060005000121000098000980940000800600010002000000080002007f0000010500030000000000060001000a00000014000200200100000000000000000000000000000500030002000000060001000a00000014000200ff0100000000000000000000000000010500030000000000060001000200000008000200e000000205000300030000000600010002000000080002007f0000010500030003000000200004000a004e220000000dff020000000000000000000000000001020000000800030002000000c4000080240002007dc2e1ed365e02e2513ddefadb5de99be4d95fbf6f0b98b29ab06005070592c8200004000a004e2300010001ff0200000000000000000000000000010000000024000200a38ae58757ed082bbaf191266cd5eb3c1344d5c85f7027ed57243ad50f65917924000100000000000000000000000000000000000000000000000000000000000000000024000200d480776c593a9340566d58a953561005070bd09967d97ee699d5643ffb8edcd2080009800400008008000a"], 0x64c}, 0x1, 0x0, 0x0, 0xc004}, 0x40001) r1 = socket$nl_generic(0x10, 0x3, 0x10) writev(r1, &(0x7f0000000200), 0x20) r2 = socket$inet(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x290, 0x0, 0xb, 0xd0e0011, 0x120, 0xc6, 0x1f8, 0x1d8, 0x190, 0x1f8, 0x1d8, 0x3, 0x0, {[{{@ip={@rand_addr, @broadcast, 0x0, 0x0, 'nr0\x00', '\x00', {}, {}, 0x1}, 0x0, 0xd8, 0x120, 0x7000000, {}, [@common=@icmp={{0x28}, {0xd, "0010"}}, @common=@unspec=@connlimit={{0x40}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x33f}}}, {{@ip={@remote, @multicast1, 0x0, 0x0, 'bridge_slave_1\x00', 'virt_wifi0\x00'}, 0x0, 0x70, 0xd8}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x9, 0x0, 0x0, 0x20000, 'syz1\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2f0) openat$nci(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x4000000000000, 0x40, &(0x7f0000000440)=@raw={'raw\x00', 0x4001, 0x3, 0x228, 0x0, 0xb, 0x148, 0x0, 0x148, 0x208, 0x240, 0x240, 0x208, 0x215, 0x3, 0x0, {[{{@ip={@local, @multicast1, 0x0, 0xffffff00, 'ip6erspan0\x00', 'nr0\x00', {}, {0xff}, 0x21, 0x0, 0x10}, 0x2e8, 0x70, 0xb8, 0x0, {0xff0f000000000000}}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x7, 0xab, 0x6, 'syz1\x00', {0x4}}}}, {{@ip={@broadcast, @remote, 0x0, 0x0, 'team0\x00', 'netpci0\x00', {}, {}, 0x0, 0x1}, 0xec010000, 0x70, 0xd8}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x4, 0x5, 0x22000000, 0xfffffffa, '\x00', 'syz1\x00', {0x3}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x288) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_GET(0xffffffffffffffff, 0x0, 0x48050) socket$inet6_mptcp(0xa, 0x1, 0x106) sendmsg$inet(0xffffffffffffffff, 0x0, 0x24004004) recvmsg$unix(0xffffffffffffffff, 0x0, 0x40004240) socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r5, 0x400448ca, 0x0) bind$bt_hci(r5, &(0x7f0000000040)={0x1f, 0x0, 0x1}, 0x6) write$bt_hci(r5, &(0x7f0000000440)=ANY=[], 0xa) syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r4) 2m44.747845941s ago: executing program 1 (id=130): sigaltstack(&(0x7f0000000000)={&(0x7f0000001c00)=""/4095, 0x80000000, 0xfff}, 0x0) write$uinput_user_dev(0xffffffffffffffff, 0x0, 0x0) r0 = openat$incfs(0xffffffffffffff9c, 0x0, 0x10040, 0x3) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000100)={@remote, 0x1, 0x2, 0x0, 0xd, 0x4101}, 0x0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) r2 = socket$can_bcm(0x1d, 0x2, 0x2) sendmsg$can_bcm(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)=ANY=[], 0x80}, 0x1, 0x0, 0x0, 0x24006041}, 0x0) sendmsg$can_bcm(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000380)=ANY=[], 0x80}, 0x1, 0x0, 0x0, 0x4000010}, 0x20000000) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x7fffffdf, 0x400000001000088}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$XDP_UMEM_REG(0xffffffffffffffff, 0x11b, 0x4, &(0x7f00000000c0)={0x0, 0x200000, 0x1000}, 0x1c) setsockopt$XDP_TX_RING(0xffffffffffffffff, 0x11b, 0x3, 0x0, 0x0) ioctl$FS_IOC_GETFSLABEL(r1, 0x400452c8, &(0x7f0000000100)) mmap(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2000009, 0x200000006c832, 0xffffffffffffffff, 0x4000) r4 = socket$kcm(0x29, 0x5, 0x0) mmap(&(0x7f000036d000/0x3000)=nil, 0x3000, 0x2000000, 0x200000006c832, 0xffffffffffffffff, 0x0) write$cgroup_pressure(r4, &(0x7f0000000140)={'full'}, 0xfffffdef) 2m44.686587387s ago: executing program 4 (id=131): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, 0x0) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x76421000) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) shmget$private(0x0, 0x4000, 0x1000, &(0x7f0000ffc000/0x4000)=nil) r5 = fsopen(&(0x7f0000000040)='configfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0) r6 = fsmount(r5, 0x1, 0x8c) fchdir(r6) openat$dir(0xffffffffffffff9c, &(0x7f0000000500)='.\x00', 0x2100, 0x102) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000700)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000340), 0x0, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000042c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [@NFT_MSG_NEWRULE={0x90, 0x6, 0xa, 0x403, 0x0, 0x0, {0xa, 0x0, 0x5}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x50, 0x4, 0x0, 0x1, [{0x4c, 0x1, 0x0, 0x1, @target={{0xb}, @val={0x3c, 0x2, 0x0, 0x1, [@NFTA_TARGET_INFO={0x24, 0x3, "7339f2f304fdd672bad09dfb040000000001000001f9580dabf95ddc91967c20"}, @NFTA_TARGET_REV={0x8}, @NFTA_TARGET_NAME={0xc, 0x1, 'RATEEST\x00'}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xa4}, 0x1, 0x0, 0x0, 0x4000850}, 0x20008040) 2m43.156540587s ago: executing program 0 (id=134): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000000400)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) r2 = getpid() prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) getrlimit(0xd, &(0x7f00000001c0)) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) shmget(0x0, 0x1000, 0x2, &(0x7f0000871000/0x1000)=nil) r6 = syz_open_procfs(0x0, &(0x7f0000000040)='net/ip_mr_vif\x00') r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@ipv4_newroute={0x2c, 0x1a, 0x1, 0x0, 0x0, {0xa}, [@RTA_DPORT={0x6}, @RTA_SPORT={0x6}]}, 0x2c}}, 0x0) preadv(r6, &(0x7f0000002b40)=[{&(0x7f0000000080)=""/121, 0x79}, {&(0x7f0000001b40)=""/4096, 0x1000}], 0x2, 0x5, 0xfffff073) r8 = syz_pidfd_open(r2, 0x0) ioctl$FS_IOC_GETVERSION(r8, 0x80087601, 0x0) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000040)=r1, 0x4) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000001b00)=@newtaction={0x18, 0x30, 0xffff, 0x0, 0x0, {}, [{0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x4004008}, 0x0) 2m39.730799214s ago: executing program 4 (id=137): getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f00000002c0)={0x0, @remote, @broadcast}, &(0x7f0000000300)=0xc) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'bridge0\x00'}) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r1 = socket$kcm(0x2d, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x89e2, &(0x7f0000000340)={r1}) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x10, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18080000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0) getsockname$packet(r5, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route_sched(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000980)=@delchain={0x34, 0x64, 0xf31, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {0xd}, {0x10, 0xffff}}, [@filter_kind_options=@f_flower={{0xb}, {0x4}}]}, 0x34}}, 0x4040004) r7 = socket(0x10, 0x803, 0x4) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x3, 0xc, &(0x7f0000000400)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x42, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80}, 0x94) syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r7) getsockname$packet(r7, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route_sched(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=@delchain={0x34, 0x2c, 0xf31, 0x70bd27, 0x2000, {0x0, 0x0, 0x0, r8, {0x8}, {0xfff2, 0xffff}, {0xffff, 0xffe0}}, [@filter_kind_options=@f_flower={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x4008854}, 0x4010) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000480)="d8001c00180081064e81f7050044fd56170d12a0b9b54570", 0x18}], 0x1}, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r1, 0x89e3, &(0x7f0000000180)={r1, r2}) 2m37.647609301s ago: executing program 0 (id=138): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) r0 = socket$inet_udp(0x2, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x800000}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) ioctl$NILFS_IOCTL_GET_VINFO(r0, 0xc0186e86, 0x0) bind$inet(r0, &(0x7f0000000100)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x42}}, 0x10) connect$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @multicast1}, 0x10) bind$inet6(0xffffffffffffffff, 0x0, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) sendmmsg$inet(r0, &(0x7f0000004d00)=[{{0x0, 0x6000, 0x0, 0x0, 0x0, 0x0, 0x30000}}], 0x400000000000284, 0xf00) r4 = io_uring_setup(0x1fba, &(0x7f0000000540)={0x0, 0x1ae0, 0x4, 0x0, 0x7}) io_uring_register$IORING_REGISTER_FILES(r4, 0x23, &(0x7f0000000000), 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r6, 0xc00caee0, &(0x7f0000000040)={0x4}) r7 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) listen(r7, 0xd) 2m37.248697884s ago: executing program 1 (id=139): r0 = syz_open_procfs(0x0, &(0x7f00000002c0)='maps\x00') openat$drirender128(0xffffff9c, 0x0, 0x410000, 0x0) open$dir(0x0, 0x2, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x0) sendmsg$IPSET_CMD_DESTROY(0xffffffffffffffff, &(0x7f00000008c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40}, 0x10) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) shutdown(0xffffffffffffffff, 0x1) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, &(0x7f0000000b40)='source', &(0x7f0000000040)='c:::\x00', 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x18, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910000000000000cb041818000100009500740000000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0xe4}, 0x48) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000080)={{0x14}, [], {0x14}}, 0x28}}, 0x0) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000000000/0x1000)=nil, 0x1000, &(0x7f0000000100)='maps\x00') ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0xc0686611, &(0x7f0000000040)={0x68, 0x0, 0x17, 0x2000, &(0x7f0000ffd000/0x2000)=nil}) 2m36.052818838s ago: executing program 4 (id=140): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) semget(0x2, 0x3, 0x330) semget(0x2, 0x4, 0x151) prctl$PR_SET_SECUREBITS(0x1c, 0x15) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r1, &(0x7f00000023c0)={0x0, 0x0, &(0x7f0000002380)={&(0x7f0000002300)={0x34, 0x2, 0x3, 0x5, 0x0, 0x0, {0x0, 0x0, 0x1}, [@NFQA_CFG_MASK={0x8, 0x4, 0x1, 0x0, 0x4}, @NFQA_CFG_QUEUE_MAXLEN={0x8, 0x3, 0x1, 0x0, 0x8}, @NFQA_CFG_CMD={0x8, 0x1, {0x1, 0x0, 0x28}}, @NFQA_CFG_FLAGS={0x8, 0x5, 0x1, 0x0, 0x2}]}, 0x34}, 0x1, 0x0, 0x0, 0x40088d5}, 0x0) setuid(0xee00) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000540)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000000000c02000000000000000000000d0000000000005f"], 0x0, 0x34}, 0x28) cachestat(r2, &(0x7f00000001c0)={0x800, 0x100}, &(0x7f0000000240), 0x0) r3 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000080), r0) readahead(r1, 0x10001, 0x6c6) pipe(&(0x7f0000000140)) epoll_create(0x7) pipe(&(0x7f0000000500)) socket$inet6(0xa, 0x80803, 0x87) syz_emit_ethernet(0x5e, &(0x7f00000004c0)=ANY=[@ANYBLOB="aaaaaaaaaaaabbbbbbbbbbbb86dd603000bb00282b00fe800000000000000000030000000000fe8000000000000000000000000000aa87"], 0x0) r4 = add_key$fscrypt_v1(&(0x7f0000000700), &(0x7f0000000740)={'fscrypt:', @desc3}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$chown(0x4, r4, 0xee01, 0xffffffffffffffff) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DESTROY(r5, &(0x7f0000003600)={0x0, 0x0, &(0x7f00000035c0)={&(0x7f0000003540)={0x24, 0x3, 0x6, 0x101, 0x0, 0x0, {0x7, 0x0, 0x9}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x800}, 0x800) r6 = syz_usb_connect(0x2, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000751c0110e60f00989ad10102030109022400010000"], 0x0) syz_usb_control_io$printer(r6, 0x0, 0x0) syz_usb_control_io$lan78xx(r6, 0x0, 0x0) sendmsg$NLBL_CALIPSO_C_LIST(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000000c0)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="100028bd7000fbdbdf2503000000080001000029ccb4fb00020002000000fbff000002000000080002000200000008000200020000000800020002000000"], 0x4c}, 0x1, 0x0, 0x0, 0xc000}, 0x10105) 2m32.869423762s ago: executing program 0 (id=142): r0 = openat$vicodec1(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$VIDIOC_S_INPUT(r0, 0xc0045627, &(0x7f0000000300)=0x5) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xf0667000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$VHOST_SET_MEM_TABLE(0xffffffffffffffff, 0x4008af03, &(0x7f0000000380)) inotify_init1(0x80000) r5 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r5, &(0x7f0000000180)={0xa, 0x4001, 0x9, @dev={0xfe, 0x80, '\x00', 0x39}, 0x3e}, 0x1c) sendmmsg$inet6(r5, &(0x7f0000003180)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000040)="8c7f93a965", 0xfffffe47}], 0x1}}], 0x1, 0x0) setsockopt$inet6_tcp_int(r5, 0x6, 0x19, &(0x7f0000000740)=0x103, 0x4) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000850}, 0x40) bind$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x4e20, @broadcast}, 0x10) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f00000003c0)=[@in6={0xa, 0x4e20, 0x0, @remote, 0x2}, @in6={0xa, 0x4e20, 0xcf, @private0={0xfc, 0x0, '\x00', 0x1}, 0x22bd}, @in={0x2, 0x4e23, @empty}], 0x48) 2m31.682670322s ago: executing program 1 (id=143): r0 = fsopen(&(0x7f00000003c0)='jfs\x00', 0x1) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x8183, 0x0) ioctl$VHOST_SET_OWNER(r1, 0xaf01, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r4 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$sndseq(0xffffffffffffff9c, &(0x7f00000000c0), 0xe2981) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB], 0x7c}}, 0x0) r7 = io_uring_setup(0x21e9, &(0x7f00000001c0)={0x0, 0x1fffff, 0x0, 0x2, 0x383}) io_uring_register$IORING_REGISTER_FILES_UPDATE2(r7, 0xd, &(0x7f0000000140)={0x7, 0x0, 0x0, 0x0}, 0x20) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000e00), 0xffffffffffffffff) sendmsg$NL802154_CMD_NEW_SEC_KEY(r8, &(0x7f00000010c0)={0x0, 0x0, &(0x7f0000001080)={&(0x7f0000000000)=ANY=[@ANYBLOB="2c010000", @ANYRES16=r9, @ANYBLOB="01000000000000000000170000000c00060001000000010000000c0130801400040097"], 0x12c}, 0x1, 0x1000000, 0x0, 0x24004821}, 0x0) sendmsg$NL802154_CMD_SET_CHANNEL(r3, &(0x7f0000000340)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000300)={&(0x7f0000000240)={0x1c, r9, 0x1, 0x70bd28, 0x25dfdbfe, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20040800}, 0x840) io_uring_register$IORING_REGISTER_FILES_UPDATE2(r7, 0xe, &(0x7f0000001180)={0xfd, 0x0, &(0x7f0000000040)=[{0x0}], 0x0, 0x1}, 0x20) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000280)='uid', &(0x7f00000008c0)='0\x00#\x00\xd0\x00 \x00\x00qS\x00\x00\x00\x00\x00\x00\x00\x00$\xf6_\xbdI\x1c\xf2\xa9]\xcc\xe0*\xef\x01\x8d\x15\xd2h\x93\xc9\xb57\xc3\xea\\bb\xf8\xe6,\xdf\xd4\xfae\x84\xcc\xd5\"d\xf0D-\x98\x9f\x81{\xfc$\xc4\xbcF\xf8\xc8\x8d\xcb\xd7\xf2\x1e\xe4\'U\xb3\xb8\xd3\xe6\xd7\x80=\x8a\xeb\n\xb8_\xe8\x96YY\xe3\xc7\xe6\xf28\x19\xa6\xa7\xfa\xdb\x1ce\xc1\x03\x86J\xb2fh\x19\xee#\xcc\x0f\xed\xfea\xdc\x88\xcb%bW\xd35\xda=\xac\x1d\xae\x93\xfd\'T6\x94\n\xa4\x9cU\xc4\fA~[\xbf\x8b\x90\xfe\x04\xe7U\xf3h\x81\x14l7u\x95\x96t\\\x0f\xef;\x03\xa4C\xbc(Vc!a\xc1\xe39\xc6b\x905\x1f\x03\x00\x00\x00\x00\x00\x00\xdf9\xaf5\xc8a:z\xe4\xcbag&67\x814\xf6}\xe10v6l\xd6,\x1e\xa0\xcc\xbf\xfdkm\b?\x839\x85N\x1c\xc1\xcb\xfc\x85\xd2\n\x02\"\xf2\x81g\x90\x01n%\x7f_\xe1.f>>\xa5\xfb\"\xab\xdb\x06\x12e\x14\x11~\x9a\bR-\x85\xc3\xa9\xe6\xf6R\x11\"\xc3\xc9\xfc\x14s X\xec\xdd\xc2qB\x85\xf0\xd7\x04\xdd<\x9ak\x00\x00\x00\x00\x00\x00\x00\n\xa72\xa3\xef^\xe7\x8f', 0x0) 2m29.478516724s ago: executing program 0 (id=146): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(0xffffffffffffffff, 0xc1105517, &(0x7f0000000140)={{0xbffffffd, 0x1, 0xffffffff, 0xfffffff8, 'syz1\x00', 0x20}, 0x2, 0x2, 0x5, 0x0, 0x0, 0x4ff, 'syz0\x00', 0x0}) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x4050) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1b, 0x0, 0x0) lsm_get_self_attr(0x64, 0xffffffffffffffff, &(0x7f0000000040)=0xfffffffffffffdb1, 0x0) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1c, 0x0, 0x1) preadv(0xffffffffffffffff, 0x0, 0x0, 0x10100, 0x79) syz_open_dev$sndctrl(0x0, 0xfc6e, 0x442860) socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, 0x0, 0x0) syz_open_dev$sndpcmp(0x0, 0x0, 0xa2c65) syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x3, 0x0, 0x39, 0x9}}, 0x20) 2m28.43883233s ago: executing program 1 (id=147): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(0x0, r0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$netlink(r1, &(0x7f00000016c0)={0x10, 0x0, 0x25dfdbfb, 0x40000044}, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r5 = socket$inet6(0xa, 0x802, 0x0) connect$inet6(r5, &(0x7f0000000240)={0xa, 0x6e23, 0x2, @mcast1, 0x9}, 0x1c) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r6, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmmsg$inet6(r5, &(0x7f0000001840), 0x3b, 0x0) ioctl$BLKPG(0xffffffffffffffff, 0x1269, &(0x7f0000000200)={0x3, 0x0, 0x98, &(0x7f0000000140)={0x8000000000000001, 0x4, 0x14}}) madvise(&(0x7f0000329000/0x2000)=nil, 0x2000, 0x11) 2m24.771442484s ago: executing program 0 (id=149): bpf$MAP_CREATE(0x0, 0x0, 0x50) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000008c0)=@allocspi={0xf8, 0x16, 0x1, 0x0, 0x100, {{{@in=@dev={0xac, 0x14, 0x14, 0xd}, @in6=@private0={0xfc, 0x0, '\x00', 0x1}, 0xfffe}, {@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0x32}, @in=@broadcast, {0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x8, 0x1002}, {}, {0x8}, 0x0, 0x0, 0xa}}}, 0xf8}}, 0x0) sendmsg$nl_xfrm(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000340)={0x0}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x20004450) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000000c0)=ANY=[@ANYBLOB], 0x3c}, 0x1, 0x0, 0x0, 0x40}, 0x24000840) syz_emit_ethernet(0x7e, &(0x7f0000000300)={@local, @local, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "010100", 0x48, 0x11, 0x0, @remote, @local, {[], {0x4e20, 0xe22, 0x48, 0x0, @wg=@cookie={0x3, 0x2, "88c73b21f267636d01dbe5712c1c941e1cdafbbb43f09c28", "e13808ca72381f41e5fff9620915b6f78670dfaf9a2038083179cf6b7931c9b4"}}}}}}}, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x47) connect$inet(0xffffffffffffffff, 0x0, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x805, 0x0, 0x0) r2 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) preadv(r2, &(0x7f0000000300), 0x0, 0xe, 0x6) ioctl$SIOCSIFHWADDR(r2, 0x8914, 0x0) ioctl$sock_TIOCINQ(0xffffffffffffffff, 0x541b, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r3, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) 2m24.770376648s ago: executing program 4 (id=150): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xf0667000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$VHOST_SET_MEM_TABLE(0xffffffffffffffff, 0x4008af03, &(0x7f0000000380)) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r3, &(0x7f0000000180)={0xa, 0x4001, 0x9, @dev={0xfe, 0x80, '\x00', 0x39}, 0x3e}, 0x1c) sendmmsg$inet6(r3, &(0x7f0000003180)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000040)="8c7f93a965", 0xfffffe47}], 0x1}}], 0x1, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x19, &(0x7f0000000740)=0x103, 0x4) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d1"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000002c0), 0x1) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r4, 0xc08c5332, 0x0) write$sndseq(r4, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick, {}, {}, @raw32}], 0xffc8) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r4, 0x4040534e, &(0x7f0000000040)={0x32b, @tick=0x440, 0xff, {}, 0x0, 0x0, 0x4b}) 2m20.624851787s ago: executing program 4 (id=153): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r0 = getpid() ioctl$NS_GET_PARENT(0xffffffffffffffff, 0xb702, 0x0) r1 = syz_open_dev$usbfs(0x0, 0x101, 0x2801) ioctl$USBDEVFS_CLEAR_HALT(r1, 0x80045515, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x1a, &(0x7f0000000300)=ANY=[@ANYRES32=0x1], &(0x7f0000000400)='syzkaller\x00', 0xff, 0x0, 0x0, 0x41000, 0x35, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000440)={0x1, 0x2}, 0x8, 0x10, &(0x7f0000000480)={0x3, 0x10, 0x96e8, 0x5}, 0x10, 0x0, 0x0, 0x2, 0x0, &(0x7f0000000500)=[{0x2, 0x3, 0xd, 0x6}, {0x2, 0x5, 0x1, 0xb}], 0x10, 0x3}, 0x94) bpf$OBJ_PIN_PROG(0x6, &(0x7f0000000600)=@generic={0x0, r4}, 0x18) syz_open_dev$usbfs(0x0, 0x77, 0x101301) quotactl_fd$Q_SYNC(r1, 0xffffffff80000102, 0x0, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="220000000400000010000000"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000000c0)={r5}, 0x4) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) ioctl$int_out(0xffffffffffffffff, 0x2, &(0x7f0000000640)) r6 = syz_open_dev$usbfs(&(0x7f0000000180), 0x205, 0x2581) r7 = fcntl$dupfd(r6, 0x0, r6) mmap$xdp(&(0x7f0000096000/0x2000)=nil, 0x2000, 0x0, 0x4000010, r7, 0x100000000) ioctl$USBDEVFS_SUBMITURB(r7, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000080)={0x80, 0xa, 0x0, 0x0, 0x7995}, 0x8416, 0x0, 0x0, 0x48000000, 0x0, 0x0, 0x0}) lsetxattr$system_posix_acl(&(0x7f0000000400)='.\x00', &(0x7f0000000440)='system.posix_acl_default\x00', &(0x7f00000000c0)=ANY=[@ANYBLOB="02000000010000000000000002000000", @ANYRES32=0xee01, @ANYBLOB="02000000", @ANYRES32=0xee00, @ANYBLOB="02000000", @ANYRES32=0xee00, @ANYBLOB="02000000", @ANYRES32=0x0, @ANYBLOB="040000000000800008000000", @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB="100000000000000020"], 0x5c, 0x0) 2m20.593008172s ago: executing program 1 (id=154): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) prlimit64(r0, 0xf, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x12, 0x4, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000000000000000000000000000711820000000000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @cgroup_sock_addr=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = openat$rtc(0xffffff9c, &(0x7f0000000040), 0xc2440, 0x0) r4 = socket$pptp(0x18, 0x1, 0x2) socket$tipc(0x1e, 0x2, 0x0) connect$pptp(r4, &(0x7f00000001c0)={0x18, 0x2, {0x0, @empty}}, 0x1e) pipe2(&(0x7f0000000200), 0x800) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'lo\x00'}) ioctl$RTC_IRQP_SET(r3, 0x4008700c, 0x5) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2182, 0x0) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)) close_range(r6, 0xffffffffffffffff, 0x200000000000000) syz_open_procfs(0x0, &(0x7f00000193c0)='net/igmp6\x00') 2m20.233604005s ago: executing program 0 (id=155): r0 = openat(0xffffffffffffff9c, 0x0, 0x18000, 0x120) clock_gettime(0x0, &(0x7f0000000180)) utimensat(r0, 0x0, &(0x7f0000000580)={{0x0, 0x3ffffffe}, {0x0, 0xea60}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000c80)={&(0x7f0000000080)={0x38, 0x1, 0x4, 0x401, 0x0, 0x0, {0x7, 0x0, 0x7}, [@NFULA_CFG_QTHRESH={0x8, 0x5, 0x1, 0x0, 0x5}, @NFULA_CFG_MODE={0xa, 0x2, {0x10000, 0x1}}, @NFULA_CFG_FLAGS={0x6, 0x6, 0x1, 0x0, 0x2}, @NFULA_CFG_CMD={0x5, 0x1, 0x1}]}, 0x38}, 0x1, 0x0, 0x0, 0x9d4}, 0x4000054) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r2, 0x0, 0x0) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)}, &(0x7f0000000080)=0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) recvmmsg$unix(r5, &(0x7f0000001f00), 0x0, 0x0, &(0x7f0000001f40)) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c0000001800dd8d000000000000000002000004fe00000600000000436d0f11344d83cfd4dbcc93661f83e73d1fdcc2784d06c1e32c41e8791be7325306930c478c211bcc3b38323a69693a538a5447412bab603d3393c3db3b063f787dd7f6649ba4d240c76599953a849c7e51250be5b50092ce168c96d6fab142859e3ecdef9ca941188dab9f4f5011945a65557320f69481f310f353ffc533908262b803d53fddf27eec8876ed76635083d94ab101a2c440a273ba760b31c1464903b712bcff1deb17c2d36c7943e9b70675de125c58a2d1cf6b3fa4326e1fd5ea258e5e3f2f94b827b6f59f501d8e156663b4c189c918d9e6715dc2eee5ec26311f95200646d5e772292051cde73cc9aea6490a0c9e337ef5865ea4ca2b580c4ce3"], 0x1c}}, 0x0) r7 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r9 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r9, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000000c0)=@newqdisc={0x3c, 0x24, 0xf0b, 0x70bd2b, 0x0, {0x0, 0x0, 0x12, r8, {0x0, 0xfff3}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0xc, 0x2, [@TCA_TAPRIO_ATTR_FLAGS={0x8, 0xa, 0x3}]}}]}, 0x3c}}, 0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) r11 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCADDRT(r11, 0x890b, &(0x7f0000000080)={0x0, {0x2, 0x0, @empty}, {0x2, 0x0, @remote}, {0x2, 0x0, @private}}) sendmsg$nl_route(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000004c0)=@ipv4_newroute={0x1c, 0x18, 0x35f32a6dfa748ddd, 0x70bd26, 0x0, {0x2, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2900}}, 0x1c}}, 0x8c0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000580)={0x0, @in6={{0xa, 0x4e20, 0x1, @empty, 0xffff}}, 0x30000000, 0x8, 0x3fc, 0x0, 0x40, 0x3, 0x32}, 0x9c) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) syz_emit_ethernet(0x40, &(0x7f00000003c0)=ANY=[@ANYBLOB="0180c2000003000000000000810041008847000000000000000000000000000000000000000006aa19960b5ade862b226482d7872c516c6d81bce7c1221efb52b3d099d2b3f2e21d93"], 0x0) 2m3.883814143s ago: executing program 32 (id=154): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) prlimit64(r0, 0xf, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x12, 0x4, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000000000000000000000000000711820000000000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @cgroup_sock_addr=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = openat$rtc(0xffffff9c, &(0x7f0000000040), 0xc2440, 0x0) r4 = socket$pptp(0x18, 0x1, 0x2) socket$tipc(0x1e, 0x2, 0x0) connect$pptp(r4, &(0x7f00000001c0)={0x18, 0x2, {0x0, @empty}}, 0x1e) pipe2(&(0x7f0000000200), 0x800) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'lo\x00'}) ioctl$RTC_IRQP_SET(r3, 0x4008700c, 0x5) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2182, 0x0) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)) close_range(r6, 0xffffffffffffffff, 0x200000000000000) syz_open_procfs(0x0, &(0x7f00000193c0)='net/igmp6\x00') 2m3.648102312s ago: executing program 33 (id=153): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r0 = getpid() ioctl$NS_GET_PARENT(0xffffffffffffffff, 0xb702, 0x0) r1 = syz_open_dev$usbfs(0x0, 0x101, 0x2801) ioctl$USBDEVFS_CLEAR_HALT(r1, 0x80045515, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x1a, &(0x7f0000000300)=ANY=[@ANYRES32=0x1], &(0x7f0000000400)='syzkaller\x00', 0xff, 0x0, 0x0, 0x41000, 0x35, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000440)={0x1, 0x2}, 0x8, 0x10, &(0x7f0000000480)={0x3, 0x10, 0x96e8, 0x5}, 0x10, 0x0, 0x0, 0x2, 0x0, &(0x7f0000000500)=[{0x2, 0x3, 0xd, 0x6}, {0x2, 0x5, 0x1, 0xb}], 0x10, 0x3}, 0x94) bpf$OBJ_PIN_PROG(0x6, &(0x7f0000000600)=@generic={0x0, r4}, 0x18) syz_open_dev$usbfs(0x0, 0x77, 0x101301) quotactl_fd$Q_SYNC(r1, 0xffffffff80000102, 0x0, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="220000000400000010000000"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000000c0)={r5}, 0x4) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) ioctl$int_out(0xffffffffffffffff, 0x2, &(0x7f0000000640)) r6 = syz_open_dev$usbfs(&(0x7f0000000180), 0x205, 0x2581) r7 = fcntl$dupfd(r6, 0x0, r6) mmap$xdp(&(0x7f0000096000/0x2000)=nil, 0x2000, 0x0, 0x4000010, r7, 0x100000000) ioctl$USBDEVFS_SUBMITURB(r7, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000080)={0x80, 0xa, 0x0, 0x0, 0x7995}, 0x8416, 0x0, 0x0, 0x48000000, 0x0, 0x0, 0x0}) lsetxattr$system_posix_acl(&(0x7f0000000400)='.\x00', &(0x7f0000000440)='system.posix_acl_default\x00', &(0x7f00000000c0)=ANY=[@ANYBLOB="02000000010000000000000002000000", @ANYRES32=0xee01, @ANYBLOB="02000000", @ANYRES32=0xee00, @ANYBLOB="02000000", @ANYRES32=0xee00, @ANYBLOB="02000000", @ANYRES32=0x0, @ANYBLOB="040000000000800008000000", @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB="100000000000000020"], 0x5c, 0x0) 2m3.450229934s ago: executing program 34 (id=155): r0 = openat(0xffffffffffffff9c, 0x0, 0x18000, 0x120) clock_gettime(0x0, &(0x7f0000000180)) utimensat(r0, 0x0, &(0x7f0000000580)={{0x0, 0x3ffffffe}, {0x0, 0xea60}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000c80)={&(0x7f0000000080)={0x38, 0x1, 0x4, 0x401, 0x0, 0x0, {0x7, 0x0, 0x7}, [@NFULA_CFG_QTHRESH={0x8, 0x5, 0x1, 0x0, 0x5}, @NFULA_CFG_MODE={0xa, 0x2, {0x10000, 0x1}}, @NFULA_CFG_FLAGS={0x6, 0x6, 0x1, 0x0, 0x2}, @NFULA_CFG_CMD={0x5, 0x1, 0x1}]}, 0x38}, 0x1, 0x0, 0x0, 0x9d4}, 0x4000054) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r2, 0x0, 0x0) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)}, &(0x7f0000000080)=0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) recvmmsg$unix(r5, &(0x7f0000001f00), 0x0, 0x0, &(0x7f0000001f40)) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000180)=ANY=[@ANYBLOB="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"], 0x1c}}, 0x0) r7 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r9 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r9, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000000c0)=@newqdisc={0x3c, 0x24, 0xf0b, 0x70bd2b, 0x0, {0x0, 0x0, 0x12, r8, {0x0, 0xfff3}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0xc, 0x2, [@TCA_TAPRIO_ATTR_FLAGS={0x8, 0xa, 0x3}]}}]}, 0x3c}}, 0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) r11 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCADDRT(r11, 0x890b, &(0x7f0000000080)={0x0, {0x2, 0x0, @empty}, {0x2, 0x0, @remote}, {0x2, 0x0, @private}}) sendmsg$nl_route(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000004c0)=@ipv4_newroute={0x1c, 0x18, 0x35f32a6dfa748ddd, 0x70bd26, 0x0, {0x2, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2900}}, 0x1c}}, 0x8c0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000580)={0x0, @in6={{0xa, 0x4e20, 0x1, @empty, 0xffff}}, 0x30000000, 0x8, 0x3fc, 0x0, 0x40, 0x3, 0x32}, 0x9c) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) syz_emit_ethernet(0x40, &(0x7f00000003c0)=ANY=[@ANYBLOB="0180c2000003000000000000810041008847000000000000000000000000000000000000000006aa19960b5ade862b226482d7872c516c6d81bce7c1221efb52b3d099d2b3f2e21d93"], 0x0) 35.933977922s ago: executing program 3 (id=241): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) process_vm_readv(0x0, &(0x7f0000000240)=[{0x0}, {0x0}], 0x2, &(0x7f0000000040)=[{0xffffffffffffffff}, {&(0x7f0000000140)=""/88, 0x58}], 0x2, 0x0) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) socket$nl_sock_diag(0x10, 0x3, 0x4) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0}, 0x48) add_key$fscrypt_v1(&(0x7f0000000180), &(0x7f00000001c0)={'fscrypt:', @desc1}, &(0x7f0000000300)={0x0, "c71858483faeb31832392e3ae432d3e126d25e0ab533af7304992c5ef3b1ce4893fb839daec74114da7f092a616be0a7a27b3f3d90b1f3706d3f8d1eb8b3978e", 0x2c}, 0x48, 0xfffffffffffffffb) r4 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x40, 0x0) mmap$binder(&(0x7f00006ff000/0x4000)=nil, 0x4000, 0x1, 0x11, r4, 0x6000) r5 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r5, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x2, &(0x7f00000001c0)={0xffffffffffffffff}, 0x111, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r5, &(0x7f0000000100)={0x3, 0x40, 0xfa00, {{0xa, 0x4e24, 0x1, @loopback, 0x8}, {0xa, 0x4e1e, 0x800000d, @private1={0xfc, 0x1, '\x00', 0x1}, 0x2}, r6, 0xe}}, 0x48) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x9, &(0x7f0000000100)=0x1, 0x4) writev(r5, &(0x7f0000000040)=[{&(0x7f0000000100), 0x86}], 0x2) r7 = userfaultfd(0x80001) ioctl$UFFDIO_API(r7, 0xc018aa3f, &(0x7f0000000080)={0xaa, 0x79}) r8 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TCSETA(r8, 0x5406, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x15, 0x1c, &(0x7f0000000380)=ANY=[@ANYBLOB="000000000020a273a174a714ff200815031322d30995afa5fb24dd55136099312abf886510e75338", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bf0900000000000035090100004000009500000000000000b7020000000080007b9af8ff00000000d60900001fffffff7baaf0ff00000000bf2700000000000007080000fffdffffbf9400000000000007040000f0ffffff640200000800000018220000", @ANYRES32=r3], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_reuseport=0x28, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 33.731852353s ago: executing program 7 (id=243): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) openat$dsp(0xffffffffffffff9c, 0x0, 0x8041, 0x0) syz_open_dev$sndctrl(&(0x7f0000001440), 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, 0x0, 0x20004450) ioctl$COMEDI_DEVCONFIG(0xffffffffffffffff, 0x40946400, &(0x7f00000000c0)={'pcmmio\x00', [0xf27, 0xd7b, 0x1, 0x4, 0x5, 0x5, 0x4, 0x7, 0x54c6cff3, 0xfd, 0x2, 0x1, 0x1, 0x1, 0x6, 0x6a, 0x0, 0xc7c, 0x3, 0x40000003, 0x89, 0xcaa3, 0x0, 0x20001e57, 0x3, 0x2000e66, 0x3, 0x1, 0x10004086, 0x0, 0xfffffff8]}) write(0xffffffffffffffff, 0x0, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r2, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x47) connect$inet(r2, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) sendto$inet(r2, &(0x7f00000004c0)='<', 0x381, 0x805, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) ioctl$sock_SIOCINQ(r3, 0x541b, &(0x7f0000000400)) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r4, &(0x7f0000000040), 0x6) ioctl$sock_bt_hci(r4, 0x400448e6, &(0x7f00000000c0)="d3") ioctl$sock_bt_hci(r4, 0x400448e6, &(0x7f0000000500)="d7") ioctl$sock_bt_hci(r4, 0x400448e7, 0x0) ioctl$sock_TIOCINQ(r2, 0x541b, &(0x7f0000000040)) mount(&(0x7f0000000140)=@nullb, &(0x7f0000000080)='./cgroup\x00', &(0x7f0000000000)='squashfs\x00', 0x200013, 0x0) syz_emit_ethernet(0x4b, &(0x7f0000000500)={@random="37d4e38896a8", @broadcast, @val={@val, {0x8100, 0x5, 0x1}}, {@mpls_uc={0x8847, {[], @ipv6=@generic={0x9, 0x6, "dfe9b0", 0xd, 0x3a, 0xff, @private0, @private0={0xfc, 0x0, '\x00', 0x1}, {[], "74e873cb971ee531818f0498eb"}}}}}}, 0x0) 31.263582052s ago: executing program 3 (id=244): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$netlink(0x10, 0x3, 0x14) r3 = userfaultfd(0x80001) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f0000000540)={0xaa, 0x310}) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_CQ_GET(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="200000002314030129bd70000000000008000300000000000800010000000000"], 0x20}}, 0x4000) syz_emit_ethernet(0xeb, &(0x7f0000001000)=ANY=[], 0x0) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000003c0)=@newlink={0x48, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x10, 0x1000}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LOCAL={0x14, 0x2, @private2={0xfc, 0x2, '\x00', 0xff}}]}}}]}, 0x48}}, 0x0) ioctl$TCFLSH(0xffffffffffffffff, 0x540b, 0x1) r6 = syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r6, 0xc04064a0, &(0x7f0000000400)={0x0, &(0x7f0000000140)=[0x0], 0x0, 0x0, 0x0, 0x1}) close(0xffffffffffffffff) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, 0x0) ioctl$sock_inet6_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000200)={@dev={0xfe, 0x80, '\x00', 0x33}, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @private1, 0x0, 0xa, 0xfff7, 0x100, 0x4, 0x40201}) ioctl$DRM_IOCTL_MODE_SETCRTC(r6, 0xc06864a2, &(0x7f00000002c0)={0x0, 0x0, r7, 0x0, 0x80, 0x5, 0x9, 0x0, {0x9, 0x1000, 0x101c, 0x10, 0x4, 0x401, 0x100, 0xa, 0x0, 0x52, 0x43, 0x7e9, 0x401, 0x9aa5, "cb630dab3a0338057401a192419598961f50dc45c87d55a52a28b8f01c0e0e7a"}}) 28.481195642s ago: executing program 3 (id=248): socket(0x15, 0x5, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0xa0) mkdir(&(0x7f00000000c0)='./bus\x00', 0x0) epoll_create1(0x80000) memfd_create(&(0x7f00000007c0)='-B\xd5NI\xc5j\x9appp\xf0\b\x84\xa2m\x00\v\x18\x004\xa6Ey\xdb\xd1\xa7\xb1S\xf1:)\x00\xca\xd7Uw\x00\xbc\xfa2\xb3\xbb\x8d\xac\xac\xbe\xe1}knh#\xcf)\x0f\xc8\xc0\"\x9cc\x10d\xee\xa9\x8b\x06\x96k\xde\xc5\xe96\xddU)\xc98M\xcd\xfb\xcc\x82n=\x7f=\xcdJx\xaa\xcf~\xb90a\xa9\xb2\x04\x1d\xa1\xce\x8b\x19\xea\xef\xe3\x00\x00\x00\x00\x00\x00\x00\x00\x00\x16\xeb\xaf\xaa\xee\'t\xbe\x9b\rln\x7f\xab\x8d\xac\x06\x00\x00\x00\x00\x00\x00\x00\x9bY\xd9\xd4\xc6A\x84\x9d\\\xc4\x0e\xf4\bO\x80\xaa\r\b\xc0\xb9\x84\xd0,\'\xc5p\xb6 \x03\x12\xca\xef\x02f\xa2\x9d\x96\xa7{\x9d\xf0\xe2,T\x13\xc4W*\xd5\xeaX\x8c\xb3\x81\r=\"\xe1\xf2\xc9^\x90\xc1\xaa\xb6\xb8\xad\x04\x13\xe7\x04\x1b5qMnI-\xeaA\x1a\xd9-%!\x0f\ab\x1e\xab\a\xe4\xd4E\xf9\x8f\xd2\x05\xfd\xa7I\xf9#8\xf6bc\x1bl\xb2\xcb\xf9rc)&\x1d\xce\x970\x01\xbb\xcb@\xd8Y\xb9\x93=7\f9\xe5`\xb3\xf3=;\xe3E[\x12?\xe2n\xd0\x05\x98\x1c6F;fp\xce\xcfH\xaf\x93\x1e\x8e\x88\xfdx\xd9\x03,B\xd1L:\xaf!\x81\x03\x18\xa1\xf3\x87\x18\x83\xc0\x7fJ+\xe0N\xa8>7}a\x91y\x19\x13\xf6\xee.j\xdbh\x00&$\xf8e\x01\xa6\x0e\a\xcf\xaeq\xae\xbc\x94\x88eidE\xf9\xb9\xaa\x14U\t\xf4\xe27\xf9\xf5\xb2/\xa3\xafX\xd1\xf3v\x85z\x1b?)\f\xf8>\xa7C\xdfW\x80\xc5\xed\xbbPM\x9b\x1b*\'O\x7f@%Q\x8c\x98\x7f\xffd\xc2VY\xf4\x9b\xf3\x80\xed\x13m\x15\x86\x9d\xa1\xa8\xae\xa9fsLp\x1f.\x11\x83K\x18k\xf4\x8e\xc6>B!\xca\xe4\xd4\x1f\xe0F\x01\b\xb2\x0fK\x8e\xfbv\x00Yh<\xd0\x85\xcbn\x17\x9a\x8b\xa4\x04p\xe1\xfd\xf1\xb9\xf2\x94\x81\xe5v\xf6\x8dY\xd9\r_\xe4\x00\xfcb\xff=\x9fQC\xcf\x8c\x97\xd1@\xeem\x992U\x01\xb5\x15\x00\xfa\x11\xa1\xfc\xe4\xc8\v\x90\xbf\x1f\x11\xc4t\x91Z\xbb[\xe0?\xa6pV\xa3\xba\xbe\xde\xda\xb3~&~]', 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5ca000) r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000002840)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='GPL\x00'}, 0x48) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0xc2, 0x0) mount$overlay(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000000)) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r3, 0x8933, &(0x7f00000001c0)={'wpan1\x00'}) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(0x0, r3) sendmsg$NL802154_CMD_DEL_SEC_KEY(r4, 0x0, 0x90) 28.462891827s ago: executing program 7 (id=249): fchown(0xffffffffffffffff, 0x0, 0x0) syz_usb_connect(0x4, 0x46, &(0x7f00000005c0)=ANY=[], 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x103a42, 0x32) sched_setscheduler(0x0, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() io_uring_enter(r0, 0x5721, 0x68f, 0x40, &(0x7f0000000280)={[0x4000000004]}, 0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) getpid() ftruncate(r0, 0x6000000) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000140)={@cgroup=r0, 0x32, 0x1, 0x1, 0x0, 0x0, 0x0, &(0x7f0000000040), &(0x7f0000000080)=[0x0, 0x0], 0x0}, 0x40) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r4, 0x29, 0x1b, 0x0, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r4, 0x29, 0x1b, &(0x7f00000000c0)={@remote={0xfe, 0x80, '\x00', 0xffffffffffffffff}}, 0x20) r5 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$SIOCSIFMTU(r5, 0x8922, &(0x7f0000000440)={'syz_tun\x00', 0x101}) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x4, 0x8, 0x0, &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x33, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r6, 0x0, 0x34, 0x0, &(0x7f0000000180)="c1dfb080cd21d308098ee68886dd", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000}, 0x50) 21.700944401s ago: executing program 6 (id=251): ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r0 = syz_open_dev$amidi(&(0x7f0000000000), 0x2, 0xc02) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB], 0x48) socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) r1 = syz_init_net_socket$x25(0x9, 0x5, 0x0) recvfrom$x25(r1, &(0x7f00000001c0)=""/35, 0x23, 0x140, 0x0, 0x0) syz_open_dev$sndctrl(0x0, 0x104a, 0x28900) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x102}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) syz_open_dev$vim2m(&(0x7f0000000040), 0xda69, 0x2) ioctl$SNDRV_RAWMIDI_IOCTL_PARAMS(r0, 0xc0305710, &(0x7f0000000080)={0x0, 0xfff, 0x9}) close(r0) write$tun(0xffffffffffffffff, 0x0, 0xfdef) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={0x0, 0xb4}}, 0x440488c4) 17.655154943s ago: executing program 3 (id=253): ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x4, 0x0, @loopback, 0x4}, 0x1c) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$PPPIOCNEWUNIT(0xffffffffffffffff, 0xc004743e, 0x0) setsockopt$inet_sctp6_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) syz_open_procfs(0xffffffffffffffff, &(0x7f00000004c0)='setgroups\x00') sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000100)={0x40, 0x2, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x16, 0x3, 'hash:net,port,net\x00'}]}, 0x40}}, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_TEST(r5, 0x0, 0x4800) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000080)=0x2, 0x4) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000040), 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f00000000c0)=@gcm_128={{0x304}, "0000000400", "6abc00000000000000000000001000", "f0630400"}, 0x28) sendto$inet6(r0, &(0x7f0000000240)="c62ee5d6a89f2387cb4093532f7c0a22ce", 0xffffffffffffff69, 0x8040, 0x0, 0x0) shutdown(r0, 0x1) 15.704536551s ago: executing program 7 (id=254): openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x2840, 0x0) r0 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) socket(0x40000000015, 0x5, 0x0) symlinkat(&(0x7f0000000080)='.\x00', 0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000380)='./file0/file0/..\x00', 0x22a040, 0x121) socket$inet6_sctp(0xa, 0x801, 0x84) socket$pppl2tp(0x18, 0x1, 0x1) socket$inet6_udp(0xa, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$adsp1(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_route(0x10, 0x3, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_open_dev$I2C(&(0x7f0000000000), 0x0, 0x402) socket$inet6_sctp(0xa, 0x5, 0x84) socket$rds(0x15, 0x5, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f00004d4000/0x2000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000890000/0x3000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0, 0x0, r1}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r3 = io_uring_setup(0x4aa, &(0x7f0000000040)={0x0, 0x2150, 0xc000, 0x3, 0xc0}) writev(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000001480)}], 0x1) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYRES8=r2], 0x50) io_uring_enter(r3, 0x2219, 0xcf74, 0x51, 0x0, 0x0) 13.373326652s ago: executing program 5 (id=255): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) setsockopt$MRT6_ADD_MFC(0xffffffffffffffff, 0x29, 0xcc, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000380)=0x7) r4 = getpid() sched_setscheduler(r4, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) shmctl$IPC_RMID(0x0, 0x0) r7 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r7, &(0x7f0000000040), 0x6) ioctl$sock_bt_hci(r7, 0x800448d7, &(0x7f0000000080)) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000240)={0x73622a85, 0x1}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000fc0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x0, &(0x7f0000000300)={@flat=@weak_binder={0x77622a85, 0x100a, 0x8000000000}, @flat=@weak_binder={0x77622a85, 0x1100, 0x3}}, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000800)={0x44, 0x0, &(0x7f0000000680)=[@reply={0x40406301, {0x1, 0x0, 0x0, 0x0, 0x31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x52, 0x0, &(0x7f0000000780)="a51dd9e70ac4caade579a2903d36962e0a449c9c56509aabd277ac2389ad08fd2d81b1e8e4c55d212487f324b5bf7a0157aa39b27dfee778e1810adf2aa8611fea9d713a87026dc57b42952bb80d45b0f8f9"}) 13.371788961s ago: executing program 2 (id=256): openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xacd6a4e1331a88dc, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff1b000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$xdp(0xffffffffffffffff, 0x0, 0x0) mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) r1 = socket$inet_sctp(0x2, 0x5, 0x84) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) getsockopt$inet_sctp_SCTP_ASSOCINFO(r1, 0x84, 0x1, 0x0, &(0x7f0000000280)) writev(r2, &(0x7f0000000480)=[{&(0x7f00000002c0)="94", 0x9a44}, {0x0}], 0x2) shutdown(0xffffffffffffffff, 0x0) syz_open_dev$video(&(0x7f0000000140), 0x1, 0x800) socket$nl_netfilter(0x10, 0x3, 0xc) bind$xdp(0xffffffffffffffff, &(0x7f0000000100)={0x2c, 0x2}, 0x10) mount$tmpfs(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='quota,grpquota_block_hardlimit=3']) chdir(0x0) creat(&(0x7f0000000100)='./file0\x00', 0x59) r3 = openat(0xffffffffffffff9c, 0x0, 0x1, 0x82) quotactl_fd$Q_GETNEXTQUOTA(r3, 0xffffffff80000900, 0x0, &(0x7f0000000400)) sendmsg$NFT_BATCH(r0, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x0) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x10f, 0x87, 0x0, 0x0) socket(0x1e, 0x4, 0x0) 13.281608763s ago: executing program 6 (id=257): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) r0 = socket$inet_udp(0x2, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x800000}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) ioctl$NILFS_IOCTL_GET_VINFO(r0, 0xc0186e86, 0x0) bind$inet(r0, &(0x7f0000000100)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x42}}, 0x10) connect$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @multicast1}, 0x10) bind$inet6(0xffffffffffffffff, 0x0, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) sendmmsg$inet(r0, &(0x7f0000004d00)=[{{0x0, 0x6000, 0x0, 0x0, 0x0, 0x0, 0x30000}}], 0x400000000000284, 0xf00) r4 = io_uring_setup(0x1fba, &(0x7f0000000540)={0x0, 0x1ae0, 0x4, 0x0, 0x7}) io_uring_register$IORING_REGISTER_FILES(r4, 0x23, &(0x7f0000000000), 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r6, 0xc00caee0, &(0x7f0000000040)={0x4}) r7 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) listen(r7, 0xd) 10.595901922s ago: executing program 2 (id=258): socket$nl_route(0x10, 0x3, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='blkio.bfq.io_wait_time\x00', 0x26e1, 0x0) close(r0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000040)) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = fanotify_init(0x0, 0x101000) fanotify_mark(r4, 0x455, 0x0, 0xffffffffffffffff, 0x0) fanotify_mark(r4, 0x7e, 0x800003a, 0xffffffffffffffff, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r5, 0x0, 0x0, 0x20008840, &(0x7f0000000040)={0xa, 0x2, 0x80398, @loopback, 0xfffffffe}, 0x1c) unshare(0x400) pselect6(0x40, &(0x7f0000000300)={0x0, 0x4000000000000000, 0x0, 0x1, 0x0, 0xfffffffffffffffd}, &(0x7f0000000240)={0x18, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x800000000, 0x8000000000000}, 0x0, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_serviced\x00', 0x26e1, 0x0) r6 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETAW(r6, 0x5407, &(0x7f0000001500)={0x5, 0xff, 0x0, 0x7f, 0x11, "60da9be1777e1af0"}) write(r6, &(0x7f0000001000)="1546b2000000000000008043f3526b13f78ada17aefbbfc13bc888a3a46e8f0e809292ee0739b4f208", 0x29) ioctl$SIOCSIFHWADDR(r0, 0x8b06, &(0x7f0000000000)={'wlan1\x00', @random="02000000000a"}) 10.297385858s ago: executing program 7 (id=259): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$BTRFS_IOC_LOGICAL_INO(r0, 0xc0389424, &(0x7f0000000280)={0x7, 0x0, '\x00', 0x1, &(0x7f0000000240)}) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'bridge0\x00', 0x0}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x38}}, 0x0) r4 = socket$kcm(0x29, 0x5, 0x0) write$cgroup_pressure(r4, &(0x7f0000000140)={'full'}, 0xfffffdef) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000}, 0x0) socket$nl_route(0x10, 0x3, 0x0) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x2000002, 0x42073, 0xffffffffffffffff, 0xaba00000) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0xba0c29e690d41d4b, 0x20000000ec071, 0xffffffffffffffff, 0x0) getsockopt$bt_hci(r3, 0x84, 0x15, 0x0, &(0x7f0000000000)) bind$unix(0xffffffffffffffff, &(0x7f0000000100)=@abs={0x1, 0x0, 0x4e20}, 0x6e) r5 = socket$unix(0x1, 0x2, 0x0) sendto$unix(r5, 0x0, 0x0, 0x40000, &(0x7f0000000040)=@abs={0x1, 0x0, 0x4e20}, 0x6e) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r7 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r7, 0x10e, 0xc, 0x0, 0x0) write(r7, &(0x7f0000000000)="240000001a005f0400f9f407000904018000200000000000000000000800010000000000", 0x24) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$batadv(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r6, 0x8933, &(0x7f0000003040)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_TP_METER(r8, &(0x7f0000003140)={0x0, 0x0, &(0x7f0000003100)={&(0x7f00000002c0)={0x30, r9, 0x1, 0x70bd2b, 0x25dfdbfb, {0x2, 0x0, 0x500}, [@BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @broadcast}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r10}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x1}]}, 0x30}, 0x1, 0x0, 0x0, 0x20000050}, 0x20000884) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newlink={0x118, 0x10, 0x1, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, 0x52a10}, [@IFLA_VF_PORTS={0xf8, 0x18, 0x0, 0x1, [{0x58, 0x1, 0x0, 0x1, [@IFLA_PORT_PROFILE={0x5, 0x2, '\x00'}, @IFLA_PORT_HOST_UUID={0x14, 0x5, "9ea9cd5c13295f5bb79ad637fc438e3e"}, @IFLA_PORT_VF={0x8, 0x1, 0x6}, @IFLA_PORT_INSTANCE_UUID={0x14, 0x4, "ae116e24cbd2736624ab965f04f3554c"}, @IFLA_PORT_REQUEST={0x5, 0x6, 0x46}, @IFLA_PORT_INSTANCE_UUID={0x14, 0x4, "ac50fea76d3a927c845ff5da68a2ba72"}]}, {0x48, 0x1, 0x0, 0x1, [@IFLA_PORT_PROFILE={0xa, 0x2, '%@*[%\x00'}, @IFLA_PORT_PROFILE={0x5, 0x2, '\x00'}, @IFLA_PORT_PROFILE={0xc, 0x2, 'bridge0\x00'}, @IFLA_PORT_HOST_UUID={0x14, 0x5, "41b919b3ab39a072f38228596da2f4e8"}, @IFLA_PORT_PROFILE={0x7, 0x2, '{/\x00'}, @IFLA_PORT_VF={0x8, 0x1, 0x7}]}, {0x48, 0x1, 0x0, 0x1, [@IFLA_PORT_HOST_UUID={0x14, 0x5, "9619c83efe882575a630295ac1a7014a"}, @IFLA_PORT_PROFILE={0xc, 0x2, 'bridge0\x00'}, @IFLA_PORT_VF={0x8, 0x1, 0x2}, @IFLA_PORT_REQUEST={0x5, 0x6, 0x6}, @IFLA_PORT_VF={0x8}, @IFLA_PORT_PROFILE={0xc, 0x2, 'bridge0\x00'}]}, {0xc, 0x1, 0x0, 0x1, [@IFLA_PORT_VF={0x8, 0x1, 0x85}]}]}]}, 0x118}, 0x1, 0x0, 0x0, 0x20004001}, 0x4000000) 10.153082211s ago: executing program 6 (id=260): r0 = socket$igmp(0x2, 0x3, 0x2) r1 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000100)={'vcan0\x00'}) setsockopt$CAN_RAW_ERR_FILTER(r1, 0x65, 0x2, &(0x7f0000000040)=0x7f, 0x4) r2 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) setsockopt$llc_int(r2, 0x10c, 0x6, 0x0, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) r3 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x1, 0x0) ioctl$COMEDI_CMD(r3, 0x80506409, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(r4, 0x401c5820, &(0x7f00000008c0)={0xc0}) bind$can_raw(r1, 0x0, 0x0) r5 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x2, 0xbc03) ioctl$USBDEVFS_SUBMITURB(r5, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x0, 0x61, &(0x7f00000004c0)={0x0, 0x3, 0x14, 0x8003, 0xffff}, 0x8, 0x0, 0x65, 0x0, 0x10001, 0x0, 0x0}) ioctl$USBDEVFS_REAPURB(r5, 0x4004550c, 0x0) syz_usb_connect$uac2(0x0, 0x7b, &(0x7f0000000500)=ANY=[@ANYBLOB="1201100100000040732b13004000010203010902690003010b2040080b0001010481208109040000000101200009240105000b09000c0904010000010220000904010101010220000905010900020505090825"], 0x0) r6 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$EXT4_IOC_SETFSUUID(r6, 0x4008662c, 0x0) listen(r6, 0x3) shutdown(r6, 0x1) r7 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r7, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000080)={0xffffffffffffffff}, 0x106, 0x6}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r7, &(0x7f00000001c0)={0xe, 0x18, 0xfa00, @ib_path={&(0x7f0000000780), r8}}, 0x20) socket(0x10, 0x3, 0x0) setsockopt$bt_hci_HCI_FILTER(r0, 0x0, 0x2, 0x0, 0x0) syz_usb_connect(0x5, 0x24, &(0x7f0000000080)=ANY=[@ANYBLOB="12010102df6195101ee60400418b0102030109e944"], &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0}) 10.074728347s ago: executing program 5 (id=261): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) setsockopt$MRT6_ADD_MFC(0xffffffffffffffff, 0x29, 0xcc, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000380)=0x7) r4 = getpid() sched_setscheduler(r4, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) shmctl$IPC_RMID(0x0, 0x0) r7 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r7, &(0x7f0000000040), 0x6) ioctl$sock_bt_hci(r7, 0x800448d7, &(0x7f0000000080)) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000240)={0x73622a85, 0x1}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000fc0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000300)={@flat=@weak_binder={0x77622a85, 0x100a, 0x8000000000}, @flat=@weak_binder={0x77622a85, 0x1100, 0x3}}, &(0x7f0000000200)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000800)={0x44, 0x0, &(0x7f0000000680)=[@reply={0x40406301, {0x1, 0x0, 0x0, 0x0, 0x31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x52, 0x0, &(0x7f0000000780)="a51dd9e70ac4caade579a2903d36962e0a449c9c56509aabd277ac2389ad08fd2d81b1e8e4c55d212487f324b5bf7a0157aa39b27dfee778e1810adf2aa8611fea9d713a87026dc57b42952bb80d45b0f8f9"}) 8.688965133s ago: executing program 5 (id=262): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x8, &(0x7f0000000080)=0x8, 0x1) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x4, 0x0, @loopback, 0x4}, 0x1c) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x48) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x6) r4 = socket$inet(0x2, 0x80001, 0x84) bind$inet(r4, &(0x7f0000000180)={0x2, 0xce20, @empty}, 0x10) listen(r4, 0x3) r5 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x40241, 0x0) write$tun(r5, &(0x7f0000000280)={@val={0x6f01, 0x800}, @val={0x1, 0x0, 0x0, 0x0, 0x20}, @ipv4=@dccp={{0xe, 0x4, 0x2, 0x0, 0xc3, 0x64, 0x0, 0x3, 0x21, 0x0, @remote, @remote, {[@generic={0x82, 0xc, "b3dafc374f6c741c7d0f"}, @ssrr={0x89, 0x17, 0xf6, [@multicast1, @broadcast, @rand_addr=0x64010100, @multicast2, @initdev={0xac, 0x1e, 0x1, 0x0}]}]}}, {{0x4e21, 0x4e22, 0x4, 0x1, 0x8, 0x0, 0x0, 0xa, 0x0, "c669e4", 0xe, "07054c"}, "26c47a10a15438edeb06b7570f1bdb08616368d5b96937581fe0f9a255dd846bd998ccbad3b27f7f6f86f31a041ee65f8091a19ecd68a433edaf852958068fce70a82303f51e642ba60c34065d238a7e5a3d2090783fa557c8fdf7e97d7095b87f1455a7da99e5bc653d5f629ae046f04027aacd3993ae32bca65b"}}}, 0xd1) r6 = getpid() r7 = syz_pidfd_open(r6, 0x0) setns(r7, 0x24020000) r8 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) r9 = open_tree(r8, &(0x7f0000000640)='\x00', 0x89901) move_mount(r9, 0x0, r8, 0x0, 0x46) 7.829299034s ago: executing program 2 (id=263): r0 = openat(0xffffffffffffff9c, 0x0, 0x2, 0x0) r1 = open(&(0x7f00000000c0)='./cgroup\x00', 0x200000, 0x157) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x1000001, 0x4c032, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) syz_clone3(&(0x7f0000000340)={0x3a0000080, 0x0, 0x0, 0x0, {0xb}, 0x0, 0x0, 0x0, 0x0, 0x0, {r1}}, 0x58) r2 = openat$adsp1(0xffffffffffffff9c, &(0x7f00000004c0), 0xa8201, 0x0) ioctl$SNDCTL_DSP_SETFMT(r2, 0xc0045005, &(0x7f0000000080)=0x8000) r3 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0x3751, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000300)={r3, r3, r3}, 0x0, 0x0, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_RENAME(r4, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x6da3d7be441ce799}, 0xc, &(0x7f0000000280)={&(0x7f0000000500)=ANY=[@ANYBLOB], 0x2c}}, 0x20000054) r5 = dup(r2) write$UHID_INPUT(r5, &(0x7f0000002080)={0x2, {"a2e3ad214fc752f91b450a0787f70e06d038e7ff7fc6e5539b326d078b089b2008385d090890e0878f0e1ac6e70a9b334a959b689a240d5b67f3988f7ef319520100ffe8d178708c523c921b1b5b31320d095d0936cd3b78130daa61d8e809ea882f5802b77f07227227b734c10ce96e50f310c2a874e62a9ccdc0d31a0c9f318c0da1993bd160e233df4a62179c6f30e065cd5b91cd0ae193973735b36d5bb6f5dd1c00305d3f46635eb016d5b1dda98e2d749be7bd1df1fb3b231fdcdb5075a9aaa1b469c3090000000002335875271b286329d169934288fd789aa37d6e98b224fd44b65b31334ffc55cc82cd3ac32ecdb08ced6f0841bdb114f6b76383709d8f5c55432a909fda039aec54a1236e80f6a8abadea7662496bddbb42be6bfb2f17959d1fe90a56c71b1931870262f5e801119242ca026bfc821e7e7daf2451138e645bb80c617601000000be70de98ec76a9e40dad47f36fd9f7d0d42a4b5f1185ccdcf16ff46295d8a0fa17713c5802630933a9a34af674f3f39fe23491237c08822dec110911e893d0a8c4f677747abc360934b82910ff85bfd995083bba2987a67399eac427d145d595a40b9f6ff14ac488ec130fb3850a27af9544ae15a7e454dea05918b41243513f000000000000000a3621c56cea8d20fa911a0c41db6ebe8cac647eb7e25bf558eeefbc9980000000b3309603f1d4ab966203861b5b158b41f2b575a8bd0d78248ebe4d9a80002695104f674c2431dca141fae269cab70e9a66f3c3a9a63e9639e1f59c0ede26c6b5d74b00005e15c31634e5ae0905e9ee70771aaa18119a867e1088334975e9f73483b6c82fa678ca14ffd9f9db2a7869d85824056526f889af43a605608057228652010400006c632b3570243f989cce3803f465e41e610c2021d653a5520000008213b704a5000000000000008ef9f190bae97909507041d82d6734b849304c27b14dc1db8892fd32d0ad7bc946813591ad8deff4b05f60cea0da7710a80000000000008000bea37ce0d0d4aa202f928f28381aab144a4d429a04a6a2b83c7068ae949ed06e288e810bac9c76600025e19c907f8ea2e2010000008271a1f5f8528f227e79c1389dbdfffe492f21579d2c15b8c70cdb1c332d86d87341432750861ec2053451edca194b221cfec4603d276bbaa1dfa6d4e38a48a76eafc9a9a0270e4c10d64cd5a62427264f2377fe763c43470833c596c45f357cbbaba8f1b1fdcc7cbb61a7cdb9744ed7f9120500000000000000e9134f8684b3a4f354da9a795e96334e207dff70f1988037b2ed3aaf575c0b88d8f146684078416d59fdee5325928974d12dad99dac44c3f0008047096a44002bebc2420aed92fa9b6578b4779415d97b9a6d6d5495c118045651cf41c2fc48b778efa5ea5677747430af4162b987b80c3e001cd34e5c92f76cc4c24eeb8bc4e9ac2bed9e53803edf1a4ae3a9737d214060005ea6f1783e287b3bee96e3a726eafe2fdfaa78d1f48c13b64df07847754b8400daaa69bf5c8f4ceb360c7e658828163e2d25c4aa348561f927e88f63aa70e73a5e69b3df3495903f06572e1e007fa55a2999f5d6d067312f5779e8dbfdcf3427138f3d444d2639a10477f9bec4b0bbb6e3c04be68981f392203dd0ee3ef478e16dacfc5e3e03cf7ab8e3902f1b0ff034e00000000ca509383815b1b6fc6522d4e4fdc11a48cf42d48604675fde2b94cf00500a269089132060000015073014d9ef6d4338b8780bdecd436cf0541359bafffa45237f104b96210403b2de9efed496f42355bc7872c827467cfa5c478b095b68441a34cb51682a8ca4d24ad92f243941ed274f12a29ff962fb385a882e8020f06c4c2ba1dd5cac7c18876da865d258734dd73583df292892448039ef799cf0630becdbe6c4579b5561dc825ab829827945e029efe0703615feb6243378e0610060f02cca4e91b2f001edb3d78fb4b55668dda93ae62fccfcbb2b75a2183c46eb65ca8124e1b4da7fbb77ab2fc043aead87c32ab875ee7c2e7b7019c982cd3b43e4fb1a5fb135c0c7dcee8fe6516a328032f88c042891824659e9e01feffffffffffff83a2b210520106b8a358b50ab7a1fa89af9c251fe5294b3d1802d5676d95f160ec97b1ad94872cb2044642c37b4a6cc6c04effc1672db7e4b68d787d9a7a508ae54b3cd7369d75f2e8c77d95a3d361c040babb171607caac2a3559ad4f75465f49c0d0ae3716db6e00cb11db4a5fade2a57c10238e204a67737c3b42aa01b20f7694a00f16e2d0174035a2c22656dc00880acebdbe8ddbd75c2f998d8ac2dfad2ba3a50200000045a45957f24d758ed024b3849c11d412a2a03b4047497022d9c30e23ef4df5c89644f48bb536f7945b59d7bcddff754413d135273ea8e75f22f216c6b9990ae71806f2c00b4025c48b75c0f73cdb9a7b8fa367b50028067e7f16f4dd569d462f4f19eacdb3ed70eeebb4483f8fd777d443e8b40426db6fe2907ac0ca3d2414442e8f3a154704b0e51bc664a137b26be719f4f7c9a5678a674dfc95df80b9ce375dd649c8c704e509bd88c8e63d8c7dd67071115c8982ba46af4d6adcc9f68a75b9397b030200000063661c953fcad6f37525c1a0e94610dd94323f6c15d085197149bfd6655548cfd9c52c9711937f79abb1a124f1210465483cd3b2d78378cfb85ed82e7da0f6eb6d279f2ae455925d0f6f1ba571eba281f2a654fb39ddff3b484439ff158e7cd419e037f3e3ad038f2211f1033195563c7f93cd54b9094f226e783271e1e5a2a2c10712ea5ef828ee9fb059fc01af0e79c1e14b1d25988c69a399567c1d93768f7971d31488b8658a20878b7c1dd7ba02fc42939dde3d4a3339a65d507dc59c51097b40517705da56e9ebf0afa53282bf86dbb58c548069ff6eb95aade7cc66d7bbef724779ca1f731b3346ff177050373d79ff7b3e7f9b97474a5966a8878b90baaa039d3e3b63979ac3df6e6f4859afd50238c7547a39b60810938044ae185daba3e00a4e73676864ae090d81eaeecf1d0ab378dd4dd891e937c2ea5410e0513005000000000000003911fab964c271550027697b52160687fd1602f88df165d884b36ec2b6c25a2f33c715687e9d4afb96d6861aca47da73d6f3dd014e5c5ad8fe995754bd9cf32fce1e31919c4b2082fb0a30b9deae84bed4b28045634073c9c58c89d9e99c81769177c6d594f88a4facfd4c735a20307c737afae513663eb1b9bd522d60399473296b831dbd933d93994ba3064279b10ea0c5833f41f157ea2302993dde433b1aa3a37684f4113c48859465c3b415c3432f81da8719539d5bf372aaaea1cc43a6c5cbe59758bfee2916580dac4b008e595f437491d87abed02cefcd9db53d94d02dae17b118e5d6787463183b4b87c105000000302a808d7f5251440693d17ca51055f2f416a44fe180d2d50c312cca7cb14a20dc331f57a9817139a206fc76957227ffff2de20a4b8e3737fbb40100000006376f799eba367e21f94ca598705f5dcb767d6f0900d6b0f6095e53c4c4234d0c1fbe434f6ab8f43c0013ee93b83946ee7759e89d7bdd1a32d7b311711b757fe43c06d21a35810d8fe98b27faea8aa12bc8716eefc5c90145ac33eeec964c5214bc3a9359bdea1ccdab94f15e36319cb34ebcacedb82c2ed3de5a8a8f0011e8f74e82d7ceec7dc808bf653639d79619393afdeeeaff19d11efcafb6d546fef271e89d6cc2389e81ff58cefcce3fbf4625a7e7de40e42e07b34449e15e065cc7348663a52190202c7af288a4510de03dab19d26285000000000000007007ad1519ad5470de3dd6d6080cafccf8a97406bb6b68a1f0c4549820a73c880f475f732ae00398e8bd1f4908b7807fb33b72685ec37a2d3f766413a60459516246e5a1d998a2017aef0948a68cf255315ab80dd349e891aef595dc4d470e8ac32a308e15fc37d06aeac289c0523f483e1ff7408c6687f1ab652f2ef91d4f2b01987b0f46da034e5c3f745a7ee8101a3934c54e24b48ec0275e2d0687dc746b0827cbf6529006c6b95f2722e58c05f752ce2126596e1cd7655b904801784c416b22f73d324678e2724f43f1fe687c7e8a60c28b82b6522fb5f6ffcdd56fed88935fcb75912d5ecd36dea3bca0b7427d8392c6289455e8f8d2ab2242729251ae233a9e02210e62df0546a74b333a1c48f95fd54acb5741258c5488efeee327415cc19451432c6f14c27693102a5bd848d7cd6586fc5ca9a93eb0145fac0662ff86107f998a8ef7df8aa14046c55b03d3d47f88a8d60f7774a2ee08008897fb411a941f0000005f0db42c0456ec015f08e5247d33ae2d35603ff8454c16f8342856935125102bb6ce431b63ee356b0c785f2f47b90e29389f22fc5b59a70efaea2bd40195af4486220d702e30bfc43c10ec23ea6283994a7dde4dcb61fea6b651fb1d62458d0741a12830052fcc460db043afe525629b40d7cee458e4cb5e930ed624806c43a006e39336d07c2b80c1c128ad2706f48261f7897484c297a1a6613bc18f5a38d442768af38041efe03d152ef95ff569e76db2391f4509d7f339d92fdb4a89364949da398000000000000000d80a4fe654578376e599aff3565b1d531f30912b9945030b81ea9935fd46edb44a78f615255490a4b621501f2a9e4d24624c4dac9274118c67584f5d374755534d7f68f679c4ff516a9c86310e7e65868fcb2bf1cb9aea4e05df72279fdb0d2b9e935c5af3cf474bed79dfc248c1f5aea4b8b32c5d295e57079d0fe662a46b7f71cd47744db86c50b704c98ad90295c7b2c7439a2d78ccfa79b5fc2bff6bbf840262bf89394b3e0691953264d2700c838fa2c7b3425260f59554e502dcea39e3313b0000000000004ca7c12f45858d6284ca6270d6b2f0e58fded8a7b4a302a97bc641df0772f5af000000000000a0abb1b44322269c21c5ec68cb068ea88067d905ea917bb03eefdaebdeabf2d0dce80997c915c8949de992587c2cb5fe360500000000000000b77940b5f07722e47a08d367e5f84c96ec664b72934b99b3109af65d77e86abd6859cddf4bbae1f0930462ff15fddbc48562ea3511a8065ef028cf12f14dcf6ebecd8d884836174faf1aa609e5f1ee1062dfa13b5c1fa7cfaadba85c7248758f03a755d0be53f8d2a1df0d07b3d5bd3b01faffd0addbed2881a9700af561ac8c7e36bb2fc4c40e9c766c06817bb9957697c9ede7885d94ffb0759be0daf60a842b09eb1dee72e4363f51af62af6fb2a6df3bec89822a7a0b678058fa3fef86faec216eb6992162f8dcbf719c1484d2f9c55f49013a3a9a8a2c3e90f39c3dbc10360a1a49700d1dfbf66d69f6fbaf506c8bcce8bb0d872a02238926407a4eddd5d000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000210000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000600000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000b1271e0400", 0x1000}}, 0x1006) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, 0x0) r6 = socket$inet6(0xa, 0x5, 0x0) setsockopt$sock_int(r6, 0x1, 0xf, &(0x7f0000fee000)=0x5, 0x4) bind$inet6(r6, &(0x7f0000000100)={0xa, 0x4e22, 0x28003, @mcast1, 0x7}, 0x1c) listen(r0, 0x6) r7 = socket$inet6(0xa, 0x5, 0x0) setsockopt$sock_int(r7, 0x1, 0xf, &(0x7f0000fee000)=0x3fa, 0x4) openat$vimc2(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) bind$inet6(r7, &(0x7f0000000140)={0xa, 0x4e23, 0x8d, @empty, 0x4}, 0x1c) listen(r7, 0x50) ppoll(&(0x7f00000003c0)=[{0xffffffffffffffff, 0x20}], 0x1, 0x0, 0x0, 0x0) ioctl$SNDCTL_DSP_SETFMT(0xffffffffffffffff, 0xc0045005, 0x0) 6.112496851s ago: executing program 5 (id=264): syz_open_dev$vim2m(0x0, 0x7, 0x2) socket$inet6_tcp(0xa, 0x1, 0x0) r0 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r0, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x41}}, 0x10) listen(r0, 0x0) r1 = socket$tipc(0x1e, 0x5, 0x0) sendmsg$tipc(r1, &(0x7f0000000240)={&(0x7f0000000080)=@name={0x1e, 0x2, 0x0, {{0x41}}}, 0x10, &(0x7f0000000340), 0x0, 0x0, 0x0, 0x40}, 0x40) r2 = fsopen(&(0x7f0000000080)='cgroup2\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r4 = landlock_create_ruleset(&(0x7f0000000180)={0x100}, 0x10, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r4, 0xf4240, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) r7 = fsmount(r2, 0x0, 0x8) r8 = openat$cgroup(r7, &(0x7f00000000c0)='syz0\x00', 0x200002, 0x0) r9 = openat$cgroup_ro(r8, &(0x7f0000000240)='cpu.stat\x00', 0x0, 0x0) read$FUSE(r9, &(0x7f0000004000)={0x2020}, 0x2020) accept4(r0, 0x0, 0x0, 0x0) 6.053124151s ago: executing program 7 (id=265): socketpair$unix(0x1, 0x1, 0x0, 0x0) socket$inet6(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x40001e0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b40000000000000079104800000000006104000000000000"], 0x0, 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x94) close(r3) socketpair$unix(0x1, 0x1, 0x0, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="0f000000"], 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000100)=ANY=[@ANYRES32=r5, @ANYRES32=r4, @ANYBLOB='&'], 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r5}, &(0x7f0000000000), &(0x7f0000000080)=r3}, 0x20) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) recvfrom(0xffffffffffffffff, 0x0, 0x0, 0x2080, 0x0, 0x0) ioctl$TCSETS(0xffffffffffffffff, 0x40045431, 0x0) sendmsg$IPCTNL_MSG_CT_GET(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[@ANYBLOB="2c000000010101020000000000000000020037f873207f07bfcd018008000100fffffffd08000200acf04faa"], 0x2c}}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000180)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[@ANYBLOB="340000001300050000000000feffffff07000000", @ANYRES32=r7, @ANYBLOB="003000000000000014001a8010"], 0x34}, 0x1, 0x0, 0x0, 0x800c010}, 0x0) 5.262836061s ago: executing program 6 (id=266): socket$nl_route(0x10, 0x3, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f00000002c0)={0x0, 0x0}) prlimit64(r0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$inet6_mptcp(0xa, 0x1, 0x106) sync_file_range(r2, 0xffffffffffffffff, 0x2, 0x4) r4 = socket$inet_sctp(0x2, 0x1, 0x84) r5 = syz_open_dev$evdev(0x0, 0x1, 0x80) fcntl$setstatus(r5, 0x4, 0x2c00) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f0000000580)=[@in={0x2, 0x4e21, @local}], 0x10) setsockopt(r4, 0x84, 0x81, &(0x7f0000000280)="5a00000002000000", 0x8) setsockopt$inet_sctp_SCTP_AUTH_CHUNK(r4, 0x84, 0x15, &(0x7f0000000080), 0x1) sendmsg$inet_sctp(r4, &(0x7f0000000700)={&(0x7f0000000340)=@in={0x2, 0x4e21, @local}, 0x10, &(0x7f00000001c0)=[{&(0x7f0000000000)='M', 0x1}], 0x1}, 0x1) getsockopt$sock_int(0xffffffffffffffff, 0x1, 0x2a, 0x0, &(0x7f0000000100)) r6 = openat$adsp1(0xffffffffffffff9c, 0x0, 0x2, 0x0) r7 = socket$kcm(0x29, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r7, 0x89e2, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r6, 0xc004500a, 0x0) 5.21839637s ago: executing program 3 (id=267): r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000400)='/proc/sys/net/ipv4/vs/sync_ports\x00', 0x2, 0x0) write$char_usb(r0, &(0x7f0000000000), 0x0) r1 = msgget$private(0x0, 0x480) msgrcv(r1, 0x0, 0x0, 0xfffffffffffffff9, 0x1000) r2 = syz_open_dev$cec(&(0x7f0000000200), 0xffffffffffffffff, 0x4ae60) ioctl$CEC_ADAP_S_LOG_ADDRS(r2, 0xc05c6104, &(0x7f0000000340)={'\x00\f\x00', 0x0, 0x5, 0x1, 0x200000, 0x9, "00000000020000f50800", '\x00', '\x00', '\x00', ["fdffffff84a438dfc4d5c010", "d78cb8b0211a83be12ff0bff"]}) ioctl$CEC_TRANSMIT(r2, 0xc0386105, 0x0) ioctl$CEC_ADAP_S_LOG_ADDRS(r2, 0xc05c6104, &(0x7f0000000140)={"cc22cf93", 0xd2, 0xf7, 0x4, 0x2, 0x9, "6dfc24f9545c95885fb7b16c3b03e5", "8ec47751", "a3936be9", "3913d0d6", ["23e6c032ad6d290a1944a37a", "25d498636bbf481a70ee1b67", "f88eef954322a921ee8f2011", "194b6ad0f4288bc9e8d6d91b"]}) msgsnd(r1, &(0x7f0000000440)=ANY=[@ANYBLOB="03"], 0xbb, 0x0) gettid() timer_create(0x2, 0x0, &(0x7f0000bbdffc)=0x0) timer_settime(r3, 0x0, &(0x7f00000002c0)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) clock_nanosleep(0x2, 0x0, &(0x7f0000000040)={0x0, 0x989680}, 0x0) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, 0x0, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$packet(0x11, 0x2, 0x300) r6 = syz_open_dev$evdev(&(0x7f00000001c0), 0x1bbc, 0x801) ioctl$EVIOCGSND(r6, 0x8040451a, &(0x7f0000000080)=""/120) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r5, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00', 0x0}) r8 = socket(0x2, 0x3, 0x100000001) setsockopt(r8, 0xff, 0x1, &(0x7f0000000100)='O', 0x1) syz_emit_ethernet(0x3e, &(0x7f0000000700)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaaaa0108004500003000650000000190780a0100ffaca714aa030090780300183f45000000fffd0000006c0000ac1414aa0a010100"], 0x0) r9 = syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) bind$nfc_llcp(r9, &(0x7f0000000100)={0x27, 0x0, 0xffffffff, 0x3, 0x0, 0x6, "750538d1ee602ec4802a04ea7cdcd151bb2cd9893bc31f80718336d9bd3517076db9ad1f6a120d8be6d7f81cd81ec275000386e7d95f0669b740a5418d69d0", 0x10000000000001}, 0x58) getsockname(r9, 0x0, &(0x7f0000000080)) sendmsg$nl_route_sched(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=@getchain={0x24, 0x11, 0x43d, 0x0, 0x100, {0x0, 0x0, 0x0, r7, {0xe, 0x1}}}, 0x24}}, 0x4) 4.923396286s ago: executing program 2 (id=268): r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r0, 0xf, 0x25, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x44}, 0x0) r1 = socket$inet(0x2, 0x1, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, 0x0, 0x0) sendmsg$TIPC_NL_BEARER_SET(r2, &(0x7f0000000500)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000004c0)={&(0x7f0000000400)={0x48, r3, 0x8, 0x70bd2b, 0x25dfdbfb, {}, [@TIPC_NLA_MON={0xc, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x8}]}, @TIPC_NLA_NET={0x10, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0xee74}]}, @TIPC_NLA_MEDIA={0x18, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x8000801}, 0x40) r4 = socket(0x10, 0x3, 0x4) sendmsg$nl_route_sched(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000180)=@newqdisc={0x24, 0x14, 0xf0b, 0xfffffffe, 0x0, {0x2, 0x0, 0x0, 0x0, {0x0, 0xb}, {0xfff1, 0x5}, {0x6, 0xffff}}}, 0x24}}, 0x8000) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r5 = getpid() sched_setscheduler(r5, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, 0x0, 0x0) r8 = syz_open_dev$dri(&(0x7f0000000080), 0x1ff, 0x0) r9 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) ioctl$sock_bt_hidp_HIDPCONNADD(r9, 0x400448c8, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r8, 0xc04064a0, &(0x7f0000000700)={0x0, &(0x7f0000000000)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_CURSOR(r8, 0xc01c64a3, &(0x7f0000001880)={0x2, r10, 0xfff, 0x3ff, 0x80000001, 0x944, 0x80000}) 3.50659943s ago: executing program 6 (id=269): r0 = socket$kcm(0x10, 0x2, 0x0) syz_emit_ethernet(0x66, &(0x7f0000000000)={@broadcast, @link_local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "120008", 0x30, 0x3a, 0x0, @remote, @local, {[], @pkt_toobig={0x8, 0x2, 0x0, 0x0, {0x0, 0x6, "000810", 0x0, 0x11, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}, @private2}}}}}}}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x2042, 0x19d) r4 = openat$dir(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0, 0x0) r5 = syz_create_resource$binfmt(&(0x7f00000003c0)='./file0\x00') openat$binfmt(0xffffffffffffff9c, r5, 0x42, 0x1ff) r6 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002040), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000002080)='./file0\x00', &(0x7f00000020c0), 0x413, &(0x7f0000000340)={{'fd', 0x3d, r6}, 0x2c, {'rootmode', 0x3d, 0x8000}}) syz_fuse_handle_req(r6, &(0x7f0000009b40)="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", 0x2000, &(0x7f00000004c0)={&(0x7f0000000000)={0x50, 0x0, 0x203, {0x7, 0x29, 0xfffffffb, 0x48000010, 0x1, 0x3, 0xb, 0x2, 0x0, 0x0, 0x80, 0x97}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_NOTIFY_STORE(r6, &(0x7f00000000c0)=ANY=[@ANYBLOB="2800000009000000000000000000000001"], 0x28) r7 = fanotify_init(0xf00, 0x1000) fanotify_mark(r7, 0x105, 0x10000839, r4, 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000480)='./bus\x00', 0xffffffffffffff9c, &(0x7f00000004c0)='./file0\x00', 0x2) socket$inet6(0xa, 0x80003, 0x6) socket$l2tp(0x2, 0x2, 0x73) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000140)="d800000018007b29e00212ba0d8105040a601800fe0f040b067c55a1bc000900b80006990600000015000500fe800000000000000300014002000c0901ac04000bd67f6f94007100a007a290457f0189b316277ce06bbace8017cbec4c2ee5", 0x5f}, {&(0x7f0000000780)="6144c338abfb60e94f608498bd0e32960c945aed3bc143d3f34fdbc3a3105cce44aa66696ef36edf4b8c25d7b3c8c3043d7f8028d026744b475b8bdd6abc194e74e30f789f6aa9fb3f91c2834187309b03813bd071b84dc58d6fb09360a845326960d8415c09d1d96109006569d7f5a557e906c41bb3910b63", 0x79}], 0x2, 0x0, 0x0, 0x2663}, 0x20000000) 3.498436096s ago: executing program 5 (id=270): r0 = memfd_secret(0x80000) write$binfmt_register(r0, &(0x7f0000000080)={0x3a, 'syz3', 0x3a, 'E', 0x3a, 0x4, 0x3a, '\x00', 0x3a, '\'(#6', 0x3a, './file0'}, 0x2c) capset(&(0x7f0000000000)={0x19980330}, &(0x7f0000000280)={0x20000000, 0x4, 0x815, 0x81, 0xffffffff}) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x40800) setsockopt$inet_mtu(0xffffffffffffffff, 0x0, 0xa, 0x0, 0x0) connect$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xf, 0x102}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) keyctl$search(0xa, 0x0, 0x0, 0x0, 0x0) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x4000000) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000000}, 0x4044800) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000001a40)={0x0, 0x0}) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f00000003c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010008020000001800006600000008000300", @ANYRES32=r7, @ANYBLOB="08002600940900000800b7"], 0x2c}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) sendmsg$nl_xfrm(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000740)=@newsa={0xf0, 0x1a, 0x1, 0xfffffffe, 0x100, {{@in=@multicast2, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x1, 0x71c, 0x4e23, 0x5, 0xa, 0x0, 0x20, 0x3a}, {@in6=@mcast2, 0x4d4, 0x6c}, @in6=@private2={0xfc, 0x2, '\x00', 0x1}, {0xfe, 0x1000000000000192, 0x9ba3, 0xffff, 0x8251c, 0x5, 0xfffffffffffffffc}, {0xffffffffffffffff, 0x0, 0x1f, 0xfffffffffffffffe}, {0xfffffffe, 0x3fc}, 0x80, 0x3505, 0x2, 0x1, 0x0, 0x20}}, 0xf0}}, 0x844) 2.605544266s ago: executing program 7 (id=271): syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x400) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x149002, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, 0x0, 0x0) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) setsockopt$IP_VS_SO_SET_ADDDEST(0xffffffffffffffff, 0x0, 0x487, &(0x7f0000000000)={{0x84, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x4e21, 0x3, 'wrr\x00', 0x17, 0x81, 0x5}, {@multicast1, 0x4e22, 0x3, 0x1cb, 0x12d5c, 0x12d5c}}, 0x44) eventfd2(0x10001, 0x80000) r3 = socket(0x40000000015, 0x5, 0x0) connect$inet(r3, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) bind$inet(r3, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) sendmsg$xdp(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000480)}, 0x0) 1.61261831s ago: executing program 2 (id=272): mount(0x0, &(0x7f0000000140)='.\x00', &(0x7f0000000080)='proc\x00', 0x189, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000280)='cgroup\x00') socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0x8, &(0x7f0000000140)={0x7, 0x86}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = getpid() socket$packet(0x11, 0x3, 0x300) sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x5, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e22}, 0x6e) getpeername$inet6(r0, &(0x7f0000000440)={0xa, 0x0, 0x0, @private2}, &(0x7f0000000480)=0x1c) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) openat$sysfs(0xffffffffffffff9c, 0x0, 0x301880, 0x20d) socket$nl_generic(0x10, 0x3, 0x10) socket$netlink(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000006c0)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) fcntl$lock(r2, 0x5, &(0x7f0000000340)={0x2, 0x3, 0x3, 0x4001, 0xffffffffffffffff}) r3 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="480000001000010400400000000000000000", @ANYRES32=0x0, @ANYRESOCT=r1], 0x48}, 0x1, 0x0, 0x0, 0x40000}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r3) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000580)={0x0, 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000054) sendto$inet6(r2, &(0x7f00000005c0)="ca10cf7f0ab25a9965721ccfaf026646a600cf3edaa7aab87be995b7af8d01ff005c37277b5660ab41a7c22c0c5ebe262c48b42b75d776a0ca6ecf2f5296a785ff698d4a62697eb113a9d2b776fece30abde4ecfa85dc4571be0b3535771514334331899ed700e69478cd6531e80e96088ba756aa8383d0f22a21fc8171e1c67a7ceac677ec6f5", 0x87, 0x4004, &(0x7f0000000680)={0xa, 0x4e24, 0x0, @private0, 0x1}, 0x1c) 297.216654ms ago: executing program 5 (id=273): socket(0x1, 0x2, 0x3) r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x94) close(r0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}, 0xfffffffe}, 0x1c) bpf$MAP_CREATE(0x0, 0x0, 0x50) socket$inet6_udp(0xa, 0x2, 0x0) getdents64(0xffffffffffffffff, 0x0, 0x0) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0x32600) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r5 = shmget(0x1, 0x4000, 0xa20, &(0x7f0000ffb000/0x4000)=nil) shmat(r5, &(0x7f0000ffd000/0x2000)=nil, 0x4000) r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r6, &(0x7f0000000000)={0x1f, 0x0, @any, 0x4, 0x1}, 0xe) listen(r6, 0x3) accept4$bt_l2cap(r6, &(0x7f0000000200), 0x0, 0x800) syz_emit_vhci(&(0x7f0000000540)=ANY=[@ANYBLOB="043e130100c900", @ANYBLOB=' '], 0x16) 187.931949ms ago: executing program 3 (id=274): socket(0xa, 0x3, 0x3a) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffc000/0x4000)=nil, 0x5bbf91a1e7f99074, &(0x7f0000000000)) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='smaps\x00') read$FUSE(r0, &(0x7f0000002640)={0x2020}, 0x2020) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000080)={0x2, &(0x7f0000000000)=[{0x20, 0x2, 0x6, 0xa}, {0x6, 0xfd, 0xfb, 0x7ffffcbb}]}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='uid_map\x00') fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, &(0x7f00000005c0)='..&-^\x00', &(0x7f0000000640)='/selinux/status\x00', 0x0) r4 = socket(0x1e, 0x805, 0x0) mknod$loop(&(0x7f0000000180)='./file0\x00', 0x6000, 0x0) r5 = creat(&(0x7f00000000c0)='./file0\x00', 0x2) r6 = dup2(r5, r5) ioctl$BLKTRACESETUP(r6, 0xc0481273, &(0x7f0000000000)={'\x00', 0x40, 0xe, 0x1, 0x5, 0x10}) r7 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000047c0)=ANY=[@ANYBLOB="140000003a00010100000000000204000a"], 0x14}}, 0x0) recvmmsg(r7, &(0x7f0000003700)=[{}], 0x1, 0x140, 0x0) getsockopt$inet_IP_XFRM_POLICY(r4, 0x0, 0x11, &(0x7f0000000300)={{{@in=@loopback, @in=@dev}}, {{@in6=@dev}, 0x0, @in=@local}}, &(0x7f0000000400)=0xe8) ioctl$BLKTRACESTOP(r6, 0x1275, 0x0) 48.88068ms ago: executing program 6 (id=275): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xf0667000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$VHOST_SET_MEM_TABLE(0xffffffffffffffff, 0x4008af03, &(0x7f0000000380)) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r3, &(0x7f0000000180)={0xa, 0x4001, 0x9, @dev={0xfe, 0x80, '\x00', 0x39}, 0x3e}, 0x1c) sendmmsg$inet6(r3, &(0x7f0000003180)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000040)="8c7f93a965", 0xfffffe47}], 0x1}}], 0x1, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x19, &(0x7f0000000740)=0x103, 0x4) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d1"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000002c0), 0x1) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r4, 0xc08c5332, 0x0) write$sndseq(r4, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick, {}, {}, @raw32}], 0xffc8) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r4, 0x4040534e, &(0x7f0000000040)={0x32b, @tick=0x440, 0xff, {}, 0x0, 0x0, 0x4b}) 0s ago: executing program 2 (id=276): socket$inet_mptcp(0x2, 0x1, 0x106) r0 = socket(0xa, 0x3, 0x87) recvfrom$inet_nvme(r0, 0x0, 0x0, 0x1, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) sched_setaffinity(r1, 0x8, &(0x7f00000001c0)=0xfffffffffffffffb) mount$bind(&(0x7f0000000180)='./file0/../file0\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x18d883, 0x0) umount2(&(0x7f0000000280)='./file0\x00', 0xb71101c11ecc2552) r4 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000380), 0x88800, 0x0) readv(r4, &(0x7f0000000240)=[{&(0x7f00000014c0)=""/160, 0xa0}], 0x1) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000003c0)={0x9, 0x4, 0x4, 0x2, 0x80, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x1}, 0x48) r6 = syz_open_dev$vbi(0x0, 0x0, 0x2) ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(r6, 0xc0845657, 0x0) openat$vicodec0(0xffffffffffffff9c, 0x0, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000580)=@base={0xd, 0x4, 0x4, 0xa8, 0x0, r5, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x5}, 0x50) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)={0x2c, r8, 0x1, 0x0, 0x0, {}, [@WGDEVICE_A_IFNAME={0x14, 0x2, 'wg1\x00'}, @WGDEVICE_A_PEERS={0x4}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4004840}, 0x44000) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.27' (ED25519) to the list of known hosts. [ 74.968110][ T5597] cgroup: Unknown subsys name 'net' [ 75.190637][ T5597] cgroup: Unknown subsys name 'cpuset' [ 75.245089][ T5597] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 76.871705][ T5597] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 80.595295][ T59] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 80.627540][ T5621] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 80.660865][ T5627] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 80.677362][ T5616] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 80.677361][ T5631] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 80.679246][ T5631] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 80.680373][ T5616] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 80.687518][ T5631] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 80.699185][ T5616] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 80.704538][ T5631] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 80.707396][ T5631] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 80.710605][ T5631] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 80.712816][ T5631] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 80.713084][ T5631] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 80.725675][ T5626] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 80.727419][ T5626] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 80.729794][ T5628] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 80.734522][ T5628] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 80.739390][ T5628] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 80.747595][ T5616] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 80.747763][ T5616] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 80.752219][ T4925] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 80.758122][ T5616] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 80.760335][ T4925] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 80.763470][ T4925] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 81.560568][ T31] cfg80211: failed to load regulatory.db [ 82.806724][ T4925] Bluetooth: hci3: command tx timeout [ 82.806732][ T5621] Bluetooth: hci4: command tx timeout [ 82.884776][ T4925] Bluetooth: hci1: command tx timeout [ 82.884920][ T4925] Bluetooth: hci0: command tx timeout [ 82.885115][ T5621] Bluetooth: hci2: command tx timeout [ 83.165444][ T5611] bridge0: port 1(bridge_slave_0) entered blocking state [ 83.165528][ T5611] bridge0: port 1(bridge_slave_0) entered disabled state [ 83.165789][ T5611] bridge_slave_0: entered allmulticast mode [ 83.168110][ T5611] bridge_slave_0: entered promiscuous mode [ 83.173515][ T5612] bridge0: port 1(bridge_slave_0) entered blocking state [ 83.173625][ T5612] bridge0: port 1(bridge_slave_0) entered disabled state [ 83.173762][ T5612] bridge_slave_0: entered allmulticast mode [ 83.181609][ T5612] bridge_slave_0: entered promiscuous mode [ 83.227971][ T5613] bridge0: port 1(bridge_slave_0) entered blocking state [ 83.228096][ T5613] bridge0: port 1(bridge_slave_0) entered disabled state [ 83.228535][ T5613] bridge_slave_0: entered allmulticast mode [ 83.231066][ T5613] bridge_slave_0: entered promiscuous mode [ 83.271107][ T5611] bridge0: port 2(bridge_slave_1) entered blocking state [ 83.271221][ T5611] bridge0: port 2(bridge_slave_1) entered disabled state [ 83.271402][ T5611] bridge_slave_1: entered allmulticast mode [ 83.273186][ T5611] bridge_slave_1: entered promiscuous mode [ 83.274240][ T5612] bridge0: port 2(bridge_slave_1) entered blocking state [ 83.274335][ T5612] bridge0: port 2(bridge_slave_1) entered disabled state [ 83.274468][ T5612] bridge_slave_1: entered allmulticast mode [ 83.280360][ T5612] bridge_slave_1: entered promiscuous mode [ 83.281637][ T5609] bridge0: port 1(bridge_slave_0) entered blocking state [ 83.281758][ T5609] bridge0: port 1(bridge_slave_0) entered disabled state [ 83.281891][ T5609] bridge_slave_0: entered allmulticast mode [ 83.284446][ T5609] bridge_slave_0: entered promiscuous mode [ 83.288513][ T5613] bridge0: port 2(bridge_slave_1) entered blocking state [ 83.288681][ T5613] bridge0: port 2(bridge_slave_1) entered disabled state [ 83.289139][ T5613] bridge_slave_1: entered allmulticast mode [ 83.291454][ T5613] bridge_slave_1: entered promiscuous mode [ 83.372658][ T5609] bridge0: port 2(bridge_slave_1) entered blocking state [ 83.372768][ T5609] bridge0: port 2(bridge_slave_1) entered disabled state [ 83.372916][ T5609] bridge_slave_1: entered allmulticast mode [ 83.388339][ T5609] bridge_slave_1: entered promiscuous mode [ 83.411273][ T5610] bridge0: port 1(bridge_slave_0) entered blocking state [ 83.411365][ T5610] bridge0: port 1(bridge_slave_0) entered disabled state [ 83.411454][ T5610] bridge_slave_0: entered allmulticast mode [ 83.412770][ T5610] bridge_slave_0: entered promiscuous mode [ 83.476348][ T5610] bridge0: port 2(bridge_slave_1) entered blocking state [ 83.476478][ T5610] bridge0: port 2(bridge_slave_1) entered disabled state [ 83.476621][ T5610] bridge_slave_1: entered allmulticast mode [ 83.478154][ T5610] bridge_slave_1: entered promiscuous mode [ 83.482374][ T5611] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 83.495884][ T5612] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 83.532821][ T5613] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 83.549284][ T5611] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 83.551160][ T5612] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 83.554131][ T5609] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 83.707315][ T5613] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 83.743433][ T5609] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 83.762697][ T5610] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 83.812967][ T5610] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 83.823864][ T5611] team0: Port device team_slave_0 added [ 83.826567][ T5612] team0: Port device team_slave_0 added [ 83.844062][ T5613] team0: Port device team_slave_0 added [ 83.861020][ T5612] team0: Port device team_slave_1 added [ 83.862580][ T5611] team0: Port device team_slave_1 added [ 83.864135][ T5609] team0: Port device team_slave_0 added [ 83.870972][ T5613] team0: Port device team_slave_1 added [ 83.920699][ T5609] team0: Port device team_slave_1 added [ 83.922176][ T5610] team0: Port device team_slave_0 added [ 83.969881][ T5610] team0: Port device team_slave_1 added [ 83.970662][ T5612] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 83.970671][ T5612] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 83.970685][ T5612] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 83.973153][ T5611] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 83.973169][ T5611] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 83.973183][ T5611] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 83.974185][ T5613] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 83.974197][ T5613] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 83.974219][ T5613] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 84.031405][ T5612] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 84.031421][ T5612] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 84.031445][ T5612] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 84.035751][ T5611] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 84.035763][ T5611] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 84.035786][ T5611] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 84.037316][ T5613] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 84.037327][ T5613] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 84.037351][ T5613] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 84.038735][ T5609] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 84.038747][ T5609] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 84.038769][ T5609] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 84.097786][ T5609] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 84.097802][ T5609] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 84.097825][ T5609] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 84.099484][ T5610] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 84.099496][ T5610] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 84.099519][ T5610] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 84.123835][ T5610] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 84.123850][ T5610] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 84.123874][ T5610] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 84.295767][ T5612] hsr_slave_0: entered promiscuous mode [ 84.297177][ T5612] hsr_slave_1: entered promiscuous mode [ 84.310824][ T5613] hsr_slave_0: entered promiscuous mode [ 84.312054][ T5613] hsr_slave_1: entered promiscuous mode [ 84.313042][ T5613] debugfs: 'hsr0' already exists in 'hsr' [ 84.313154][ T5613] Cannot create hsr debugfs directory [ 84.323424][ T5611] hsr_slave_0: entered promiscuous mode [ 84.324907][ T5611] hsr_slave_1: entered promiscuous mode [ 84.325779][ T5611] debugfs: 'hsr0' already exists in 'hsr' [ 84.325800][ T5611] Cannot create hsr debugfs directory [ 84.403555][ T5609] hsr_slave_0: entered promiscuous mode [ 84.405443][ T5609] hsr_slave_1: entered promiscuous mode [ 84.406259][ T5609] debugfs: 'hsr0' already exists in 'hsr' [ 84.406279][ T5609] Cannot create hsr debugfs directory [ 84.458479][ T5610] hsr_slave_0: entered promiscuous mode [ 84.459643][ T5610] hsr_slave_1: entered promiscuous mode [ 84.460659][ T5610] debugfs: 'hsr0' already exists in 'hsr' [ 84.460680][ T5610] Cannot create hsr debugfs directory [ 84.884789][ T5619] Bluetooth: hci3: command tx timeout [ 84.884900][ T5621] Bluetooth: hci4: command tx timeout [ 84.964778][ T5621] Bluetooth: hci2: command tx timeout [ 84.964806][ T5619] Bluetooth: hci0: command tx timeout [ 84.964828][ T5619] Bluetooth: hci1: command tx timeout [ 85.633757][ T5612] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 85.677714][ T5612] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 85.685858][ T5612] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 85.708662][ T5612] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 85.711636][ T5612] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 85.758710][ T5612] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 85.780945][ T5612] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 85.798726][ T5612] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 85.887250][ T5613] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 85.928602][ T5613] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 85.933344][ T5613] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 85.969069][ T5613] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 85.971587][ T5613] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 86.008297][ T5613] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 86.029801][ T5613] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 86.047829][ T5613] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 86.168559][ T5611] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 86.202293][ T5611] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 86.212834][ T5611] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 86.240351][ T5611] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 86.245061][ T5611] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 86.278881][ T5611] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 86.305674][ T5611] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 86.339395][ T5611] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 86.525242][ T5609] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 86.567615][ T5609] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 86.573362][ T5609] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 86.596988][ T5609] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 86.617790][ T5609] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 86.658756][ T5609] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 86.669396][ T5609] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 86.707322][ T5609] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 86.800556][ T5612] 8021q: adding VLAN 0 to HW filter on device bond0 [ 86.827540][ T5610] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 86.867232][ T5610] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 86.874330][ T5610] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 86.907321][ T5610] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 86.911015][ T5610] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 86.951434][ T5610] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 86.960621][ T5610] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 86.974917][ T5621] Bluetooth: hci4: command tx timeout [ 86.974945][ T5621] Bluetooth: hci3: command tx timeout [ 86.999683][ T5610] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 87.043226][ T5612] 8021q: adding VLAN 0 to HW filter on device team0 [ 87.044803][ T5621] Bluetooth: hci2: command tx timeout [ 87.044829][ T5621] Bluetooth: hci1: command tx timeout [ 87.044904][ T4925] Bluetooth: hci0: command tx timeout [ 87.080994][ T5613] 8021q: adding VLAN 0 to HW filter on device bond0 [ 87.109269][ T57] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.109400][ T57] bridge0: port 1(bridge_slave_0) entered forwarding state [ 87.161213][ T57] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.161298][ T57] bridge0: port 2(bridge_slave_1) entered forwarding state [ 87.217329][ T5613] 8021q: adding VLAN 0 to HW filter on device team0 [ 87.247429][ T57] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.247545][ T57] bridge0: port 1(bridge_slave_0) entered forwarding state [ 87.253935][ T5611] 8021q: adding VLAN 0 to HW filter on device bond0 [ 87.291870][ T103] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.292013][ T103] bridge0: port 2(bridge_slave_1) entered forwarding state [ 87.369853][ T5611] 8021q: adding VLAN 0 to HW filter on device team0 [ 87.404527][ T103] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.411858][ T103] bridge0: port 1(bridge_slave_0) entered forwarding state [ 87.430735][ T5609] 8021q: adding VLAN 0 to HW filter on device bond0 [ 87.470274][ T43] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.470401][ T43] bridge0: port 2(bridge_slave_1) entered forwarding state [ 87.572036][ T5609] 8021q: adding VLAN 0 to HW filter on device team0 [ 87.636323][ T43] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.636475][ T43] bridge0: port 1(bridge_slave_0) entered forwarding state [ 87.657469][ T5610] 8021q: adding VLAN 0 to HW filter on device bond0 [ 87.710156][ T43] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.710277][ T43] bridge0: port 2(bridge_slave_1) entered forwarding state [ 87.801095][ T5610] 8021q: adding VLAN 0 to HW filter on device team0 [ 87.901516][ T1193] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.906886][ T1193] bridge0: port 1(bridge_slave_0) entered forwarding state [ 87.997945][ T3812] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.998068][ T3812] bridge0: port 2(bridge_slave_1) entered forwarding state [ 88.529021][ T5612] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 88.800866][ T5613] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 88.957312][ T5612] veth0_vlan: entered promiscuous mode [ 89.046078][ T4925] Bluetooth: hci4: command tx timeout [ 89.054737][ T4925] Bluetooth: hci3: command tx timeout [ 89.056014][ T5612] veth1_vlan: entered promiscuous mode [ 89.125537][ T4925] Bluetooth: hci2: command tx timeout [ 89.135972][ T5621] Bluetooth: hci1: command tx timeout [ 89.135966][ T4925] Bluetooth: hci0: command tx timeout [ 89.163556][ T5611] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 89.223292][ T5613] veth0_vlan: entered promiscuous mode [ 89.273132][ T5613] veth1_vlan: entered promiscuous mode [ 89.329875][ T5612] veth0_macvtap: entered promiscuous mode [ 89.364204][ T5612] veth1_macvtap: entered promiscuous mode [ 89.393542][ T5609] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 89.477294][ T5612] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 89.496389][ T5611] veth0_vlan: entered promiscuous mode [ 89.498761][ T5613] veth0_macvtap: entered promiscuous mode [ 89.503286][ T5610] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 89.526677][ T5612] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 89.550031][ T5613] veth1_macvtap: entered promiscuous mode [ 89.590356][ T57] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.606209][ T57] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.609927][ T5611] veth1_vlan: entered promiscuous mode [ 89.630387][ T57] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.652050][ T57] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.751645][ T5613] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 89.852876][ T5609] veth0_vlan: entered promiscuous mode [ 89.858380][ T5613] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 90.017192][ T164] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.028422][ T164] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.034187][ T164] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.035671][ T5609] veth1_vlan: entered promiscuous mode [ 90.044249][ T164] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.072114][ T5611] veth0_macvtap: entered promiscuous mode [ 90.137130][ T5611] veth1_macvtap: entered promiscuous mode [ 90.432253][ T103] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.432275][ T103] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.537898][ T5611] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 90.564084][ T5610] veth0_vlan: entered promiscuous mode [ 90.588769][ T5611] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 90.593012][ T5609] veth0_macvtap: entered promiscuous mode [ 90.606561][ T103] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.609246][ T103] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.655284][ T5609] veth1_macvtap: entered promiscuous mode [ 90.659370][ T3812] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.682375][ T5610] veth1_vlan: entered promiscuous mode [ 90.686208][ T3812] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.692459][ T1436] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.692475][ T1436] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.706967][ T3812] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.747842][ T3812] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.798855][ T1436] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.798875][ T1436] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.887595][ T5609] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 90.971861][ T5609] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 91.243020][ T57] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.263297][ T57] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.274247][ T57] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.274940][ T5610] veth0_macvtap: entered promiscuous mode [ 91.310166][ T57] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.359671][ T43] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.359688][ T43] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.362772][ T5610] veth1_macvtap: entered promiscuous mode [ 92.884506][ T5816] Zero length message leads to an empty skb [ 93.159010][ T1193] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.159023][ T1193] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.231896][ T5610] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 93.371702][ T5610] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 93.490613][ T12] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.539168][ T12] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.556339][ T12] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.575306][ T1510] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.575322][ T1510] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.579643][ T12] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.035726][ T5830] netlink: 'syz.2.6': attribute type 21 has an invalid length. [ 97.035867][ T5830] IPv6: NLM_F_CREATE should be specified when creating new route [ 97.044534][ T5830] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 97.046239][ T5830] IPv6: NLM_F_CREATE should be set when creating new route [ 97.050509][ T5830] IPv6: NLM_F_CREATE should be set when creating new route [ 97.050687][ T5830] IPv6: NLM_F_CREATE should be set when creating new route [ 97.266550][ T5821] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6'. [ 98.422437][ T5830] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 98.559829][ T57] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 98.559848][ T57] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 98.932503][ T5839] cgroup: Name too long [ 99.414740][ T66] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 99.414754][ T66] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 100.167065][ T57] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 100.167083][ T57] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 100.640138][ T5851] netlink: 'syz.2.10': attribute type 8 has an invalid length. [ 101.643791][ T37] audit: type=1326 audit(1779896079.106:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5849 comm="syz.1.2" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f643a09ce59 code=0x0 [ 116.239014][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 116.260571][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 116.271361][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 116.282163][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 116.292968][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 116.303754][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 116.314552][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 116.325349][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 116.336146][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 116.357749][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 118.104892][ T5930] netlink: 8 bytes leftover after parsing attributes in process `syz.2.24'. [ 118.851175][ T5918] ip6gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 118.870480][ T5930] erspan1: entered promiscuous mode [ 118.870505][ T5930] erspan1: entered allmulticast mode [ 119.032505][ T5928] bridge1: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 120.320965][ T1510] Bluetooth: hci5: Frame reassembly failed (-84) [ 120.340695][ T43] Bluetooth: hci5: Frame reassembly failed (-84) [ 120.350961][ T5940] warning: `syz.3.26' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 121.675512][ T5945] workqueue: Failed to create a rescuer kthread for wq "ceph-watch-notify": -EINTR [ 122.007121][ T5953] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 123.120103][ T4925] Bluetooth: hci5: Entering manufacturer mode failed (-110) [ 126.008482][ T5969] netlink: 8 bytes leftover after parsing attributes in process `syz.4.32'. [ 131.800572][ T5998] openvswitch: netlink: Actions may not be safe on all matching packets [ 134.378804][ T6007] input: syz0 as /devices/virtual/input/input5 [ 135.086006][ T1336] ieee802154 phy0 wpan0: encryption failed: -22 [ 135.086100][ T1336] ieee802154 phy1 wpan1: encryption failed: -22 [ 139.241051][ T6037] netlink: 36 bytes leftover after parsing attributes in process `syz.2.44'. [ 142.959040][ T6046] netlink: 8 bytes leftover after parsing attributes in process `syz.4.48'. [ 143.702630][ T6050] ALSA: mixer_oss: invalid OSS volume '01777777777777777777777' [ 145.389998][ T923] IPVS: starting estimator thread 0... [ 146.425857][ T6060] IPVS: using max 9 ests per chain, 21600 per kthread [ 152.121304][ T6083] netlink: 8 bytes leftover after parsing attributes in process `syz.3.56'. [ 156.661783][ T6104] netlink: 24 bytes leftover after parsing attributes in process `syz.0.61'. [ 157.505974][ T6104] syz.0.61 (6104) used greatest stack depth: 16416 bytes left [ 161.021520][ T6121] openvswitch: netlink: Geneve option length err (len 256, max 255). [ 161.448738][ T9] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 162.293654][ T9] usb 3-1: Using ep0 maxpacket: 8 [ 163.252367][ T9] usb 3-1: New USB device found, idVendor=047d, idProduct=5003, bcdDevice=2f.8c [ 163.252399][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 163.252419][ T9] usb 3-1: Product: syz [ 163.252433][ T9] usb 3-1: Manufacturer: syz [ 163.252447][ T9] usb 3-1: SerialNumber: syz [ 163.469610][ T9] usb 3-1: config 0 descriptor?? [ 163.598721][ T9] gspca_main: se401-2.14.0 probing 047d:5003 [ 164.221274][ T9] gspca_se401: Bayer format not supported! [ 166.031450][ T6154] 9p: Bad value for 'rfdno' [ 167.297302][ T5622] usb 3-1: USB disconnect, device number 2 [ 169.568041][ T5621] Bluetooth: hci0: Controller not accepting commands anymore: ncmd = 0 [ 169.568216][ T5621] Bluetooth: hci0: Injecting HCI hardware error event [ 169.570162][ T5621] Bluetooth: hci0: hardware error 0x00 [ 172.211086][ T5622] usb 1-1: new full-speed USB device number 2 using dummy_hcd [ 173.487984][ T5621] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 173.730447][ T5622] usb 1-1: unable to get BOS descriptor or descriptor too short [ 173.733356][ T5622] usb 1-1: not running at top speed; connect to a high speed hub [ 173.735052][ T5622] usb 1-1: config 10 has an invalid interface number: 3 but max is 0 [ 173.735074][ T5622] usb 1-1: config 10 has no interface number 0 [ 173.735209][ T5622] usb 1-1: config 10 interface 3 has no altsetting 0 [ 173.738158][ T5622] usb 1-1: New USB device found, idVendor=11ba, idProduct=1003, bcdDevice=14.c2 [ 173.738183][ T5622] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 173.738201][ T5622] usb 1-1: Product: syz [ 173.738214][ T5622] usb 1-1: Manufacturer: syz [ 173.738233][ T5622] usb 1-1: SerialNumber: syz [ 173.872868][ T9] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 174.015525][ T9] usb 3-1: device descriptor read/64, error -71 [ 174.084296][ T5622] usb 1-1: can't set config #10, error -71 [ 174.113021][ T5622] usb 1-1: USB disconnect, device number 2 [ 176.572596][ T6210] kernel profiling enabled (shift: 9) [ 178.404498][ T6217] capability: warning: `syz.2.87' uses 32-bit capabilities (legacy support in use) [ 179.369527][ T6213] tipc: Failed to remove unknown binding: 66,0,0/0:3806945866/3806945867 [ 179.370616][ T6213] tipc: Failed to remove unknown binding: 66,0,0/0:3806945866/3806945867 [ 181.236912][ T6231] comedi comedi2: c6xdigio: I/O base address not correctly aligned [ 184.756048][ T4925] Bluetooth: hci4: command 0x0405 tx timeout [ 191.503146][ T6281] netlink: 16 bytes leftover after parsing attributes in process `syz.2.101'. [ 194.762525][ T4925] Bluetooth: hci4: unexpected event for opcode 0x200c [ 197.156820][ T820] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 203.382567][ T1336] ieee802154 phy0 wpan0: encryption failed: -22 [ 203.382634][ T1336] ieee802154 phy1 wpan1: encryption failed: -22 [ 206.576409][ T6361] netlink: 64 bytes leftover after parsing attributes in process `syz.2.116'. [ 214.868457][ T5621] Bluetooth: hci1: command 0x0406 tx timeout [ 214.868613][ T5621] Bluetooth: hci3: command 0x0406 tx timeout [ 215.681354][ T5619] Bluetooth: hci2: command 0x0406 tx timeout [ 222.666372][ T6458] ======================================================= [ 222.666372][ T6458] WARNING: The mand mount option has been deprecated and [ 222.666372][ T6458] and is ignored by this kernel. Remove the mand [ 222.666372][ T6458] option from the mount to silence this warning. [ 222.666372][ T6458] ======================================================= [ 222.861940][ T6458] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 230.674737][ T6484] netlink: 244 bytes leftover after parsing attributes in process `syz.1.143'. [ 231.452289][ T36] usb 5-1: new full-speed USB device number 2 using dummy_hcd [ 232.111062][ T6493] vlan1: entered promiscuous mode [ 232.115081][ T6493] vlan1: entered allmulticast mode [ 232.115105][ T6493] veth0_vlan: entered allmulticast mode [ 233.384414][ T6495] nfs: Bad value for 'source' [ 235.033696][ T6486] workqueue: Failed to create a rescuer kthread for wq "xfs-blockgc/nbd2": -EINTR [ 256.647064][ T6560] netlink: 24 bytes leftover after parsing attributes in process `syz.3.157'. [ 256.806119][ T4925] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 256.849334][ T4925] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 256.893929][ T4925] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 256.931919][ T4925] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 256.940331][ T4925] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 257.632372][ T31] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 257.734692][ T4925] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 257.778564][ T4925] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 257.824852][ T4925] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 257.854731][ T4925] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 257.867507][ T4925] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 257.884363][ T31] usb 3-1: Using ep0 maxpacket: 16 [ 257.886393][ T31] usb 3-1: config 222 has an invalid interface number: 31 but max is 0 [ 257.886414][ T31] usb 3-1: config 222 has no interface number 0 [ 257.886524][ T31] usb 3-1: config 222 interface 31 altsetting 11 endpoint 0xE has an invalid bInterval 255, changing to 11 [ 257.886550][ T31] usb 3-1: config 222 interface 31 altsetting 11 endpoint 0xE has invalid maxpacket 59391, setting to 1024 [ 257.886574][ T31] usb 3-1: config 222 interface 31 has no altsetting 0 [ 257.903969][ T31] usb 3-1: New USB device found, idVendor=0f11, idProduct=2030, bcdDevice=a9.fd [ 257.903995][ T31] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 257.904014][ T31] usb 3-1: Product: syz [ 257.904028][ T31] usb 3-1: Manufacturer: syz [ 257.904042][ T31] usb 3-1: SerialNumber: syz [ 257.978044][ T6559] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 258.643883][ T4925] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 258.690401][ T4925] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 258.706217][ T4925] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 258.728521][ T4925] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 258.746028][ T4925] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 259.566095][ T4925] Bluetooth: hci5: command tx timeout [ 260.295219][ T5619] Bluetooth: hci6: command tx timeout [ 260.746890][ T31] ldusb 3-1:222.31: LD USB Device #0 now attached to major 180 minor 0 [ 260.775051][ T31] usb 3-1: USB disconnect, device number 5 [ 260.866124][ T31] ldusb 3-1:222.31: LD USB Device #0 now disconnected [ 261.834095][ T5619] Bluetooth: hci5: command tx timeout [ 262.258482][ T6590] kthread_run failed with err -4 [ 262.528096][ T5619] Bluetooth: hci6: command tx timeout [ 263.910335][ T1415] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 264.286955][ T5619] Bluetooth: hci5: command tx timeout [ 264.776007][ T1415] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 264.790765][ T5619] Bluetooth: hci6: command tx timeout [ 265.090814][ T6633] ucma_write: process 166 (syz.2.167) changed security contexts after opening file descriptor, this is not allowed. [ 266.603208][ T5619] Bluetooth: hci5: command tx timeout [ 267.033021][ T5619] Bluetooth: hci6: command tx timeout [ 267.062188][ T1415] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 270.273014][ T1415] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 270.386987][ T6648] x_tables: ip_tables: recent.0 match: invalid size 216 (kernel) != (user) 4096 [ 271.438153][ T37] audit: type=1326 audit(1779896236.892:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6662 comm="syz.3.172" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7c8370ce59 code=0x7ffc0000 [ 271.438204][ T37] audit: type=1326 audit(1779896236.901:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6662 comm="syz.3.172" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7c8370ce59 code=0x7ffc0000 [ 271.438242][ T37] audit: type=1326 audit(1779896236.901:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6662 comm="syz.3.172" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7c8370ce59 code=0x7ffc0000 [ 271.438280][ T37] audit: type=1326 audit(1779896236.901:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6662 comm="syz.3.172" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7c8370ce59 code=0x7ffc0000 [ 271.438315][ T37] audit: type=1326 audit(1779896236.901:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6662 comm="syz.3.172" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f7c8370ce59 code=0x7ffc0000 [ 271.438350][ T37] audit: type=1326 audit(1779896236.901:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6662 comm="syz.3.172" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7c8370ce59 code=0x7ffc0000 [ 271.438385][ T37] audit: type=1326 audit(1779896236.901:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6662 comm="syz.3.172" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7c8370ce59 code=0x7ffc0000 [ 271.438419][ T37] audit: type=1326 audit(1779896236.901:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6662 comm="syz.3.172" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7c8370ce59 code=0x7ffc0000 [ 271.438498][ T37] audit: type=1326 audit(1779896236.901:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6662 comm="syz.3.172" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=0 compat=0 ip=0x7f7c8370ce59 code=0x7ffc0000 [ 271.438535][ T37] audit: type=1326 audit(1779896236.901:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6662 comm="syz.3.172" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7c8370ce59 code=0x7ffc0000 [ 271.601944][ T6664] netlink: 44 bytes leftover after parsing attributes in process `syz.3.172'. [ 271.601964][ T6664] netlink: 24 bytes leftover after parsing attributes in process `syz.3.172'. [ 271.756352][ T1415] bridge_slave_1: left allmulticast mode [ 271.756585][ T1415] bridge_slave_1: left promiscuous mode [ 271.763649][ T1415] bridge0: port 2(bridge_slave_1) entered disabled state [ 271.984169][ T1415] bridge_slave_0: left allmulticast mode [ 271.984190][ T1415] bridge_slave_0: left promiscuous mode [ 271.984329][ T1415] bridge0: port 1(bridge_slave_0) entered disabled state [ 272.855690][ T1336] ieee802154 phy0 wpan0: encryption failed: -22 [ 272.855746][ T1336] ieee802154 phy1 wpan1: encryption failed: -22 [ 273.056711][ T1415] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 273.121176][ T1415] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 273.166019][ T1415] bond0 (unregistering): Released all slaves [ 273.509900][ T6570] bridge0: port 1(bridge_slave_0) entered blocking state [ 273.509976][ T6570] bridge0: port 1(bridge_slave_0) entered disabled state [ 273.510081][ T6570] bridge_slave_0: entered allmulticast mode [ 273.533712][ T6570] bridge_slave_0: entered promiscuous mode [ 273.537977][ T6574] bridge0: port 1(bridge_slave_0) entered blocking state [ 273.538113][ T6574] bridge0: port 1(bridge_slave_0) entered disabled state [ 273.538276][ T6574] bridge_slave_0: entered allmulticast mode [ 273.540794][ T6574] bridge_slave_0: entered promiscuous mode [ 273.818729][ T6570] bridge0: port 2(bridge_slave_1) entered blocking state [ 273.818848][ T6570] bridge0: port 2(bridge_slave_1) entered disabled state [ 273.819041][ T6570] bridge_slave_1: entered allmulticast mode [ 273.836279][ T6570] bridge_slave_1: entered promiscuous mode [ 273.838722][ T6574] bridge0: port 2(bridge_slave_1) entered blocking state [ 273.838829][ T6574] bridge0: port 2(bridge_slave_1) entered disabled state [ 273.838996][ T6574] bridge_slave_1: entered allmulticast mode [ 273.849693][ T6574] bridge_slave_1: entered promiscuous mode [ 273.947085][ T6563] bridge0: port 1(bridge_slave_0) entered blocking state [ 273.947234][ T6563] bridge0: port 1(bridge_slave_0) entered disabled state [ 273.947419][ T6563] bridge_slave_0: entered allmulticast mode [ 273.950011][ T6563] bridge_slave_0: entered promiscuous mode [ 274.118817][ T6563] bridge0: port 2(bridge_slave_1) entered blocking state [ 274.118942][ T6563] bridge0: port 2(bridge_slave_1) entered disabled state [ 274.119112][ T6563] bridge_slave_1: entered allmulticast mode [ 274.123298][ T6563] bridge_slave_1: entered promiscuous mode [ 274.162717][ T6570] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 274.169242][ T6574] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 274.191235][ T6570] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 274.206580][ T6574] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 274.288622][ T6563] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 274.649833][ T6563] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 274.651435][ T6570] team0: Port device team_slave_0 added [ 274.856940][ T5272] 8021q: adding VLAN 0 to HW filter on device eth1 [ 274.859130][ T6574] team0: Port device team_slave_0 added [ 274.878038][ T6570] team0: Port device team_slave_1 added [ 274.924023][ T6574] team0: Port device team_slave_1 added [ 274.975920][ T6563] team0: Port device team_slave_0 added [ 275.004108][ T6563] team0: Port device team_slave_1 added [ 275.004701][ T6570] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 275.004709][ T6570] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 275.004722][ T6570] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 275.007976][ T6574] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 275.007989][ T6574] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 275.008013][ T6574] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 275.028552][ T6570] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 275.028565][ T6570] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 275.028589][ T6570] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 275.030523][ T6574] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 275.030535][ T6574] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 275.030558][ T6574] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 275.222074][ T1415] hsr_slave_0: left promiscuous mode [ 275.265374][ T1415] hsr_slave_1: left promiscuous mode [ 275.266256][ T1415] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 275.266337][ T1415] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 275.289058][ T1415] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 275.289082][ T1415] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 275.398264][ T1415] veth1_macvtap: left promiscuous mode [ 275.398480][ T1415] veth0_macvtap: left promiscuous mode [ 275.399435][ T1415] veth1_vlan: left promiscuous mode [ 275.399674][ T1415] veth0_vlan: left promiscuous mode [ 276.143259][ T1415] team0 (unregistering): Port device team_slave_1 removed [ 276.186461][ T1415] team0 (unregistering): Port device team_slave_0 removed [ 276.383662][ T6563] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 276.383672][ T6563] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 276.383686][ T6563] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 276.494004][ T6563] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 276.494016][ T6563] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 276.494030][ T6563] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 276.607865][ T6570] hsr_slave_0: entered promiscuous mode [ 276.614553][ T6570] hsr_slave_1: entered promiscuous mode [ 276.615221][ T6570] debugfs: 'hsr0' already exists in 'hsr' [ 276.615240][ T6570] Cannot create hsr debugfs directory [ 276.637045][ T6574] hsr_slave_0: entered promiscuous mode [ 276.637825][ T6574] hsr_slave_1: entered promiscuous mode [ 276.638822][ T6574] debugfs: 'hsr0' already exists in 'hsr' [ 276.638837][ T6574] Cannot create hsr debugfs directory [ 276.758861][ T6563] hsr_slave_0: entered promiscuous mode [ 276.760706][ T6563] hsr_slave_1: entered promiscuous mode [ 276.761591][ T6563] debugfs: 'hsr0' already exists in 'hsr' [ 276.761613][ T6563] Cannot create hsr debugfs directory [ 277.395712][ T5272] 8021q: adding VLAN 0 to HW filter on device eth2 [ 277.877023][ T1415] IPVS: stop unused estimator thread 0... [ 278.010065][ T6574] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 278.063099][ T6574] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 278.069807][ T6574] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 278.134461][ T6574] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 278.148823][ T6574] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 278.209135][ T6574] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 278.265528][ T6574] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 278.296347][ T6574] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 278.706700][ T6570] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 278.752556][ T6570] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 278.785177][ T6570] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 278.859505][ T6570] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 278.884131][ T6570] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 278.913067][ T6570] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 278.915244][ T5272] 8021q: adding VLAN 0 to HW filter on device eth3 [ 278.977014][ T6570] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 279.019236][ T6570] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 279.115448][ T6574] 8021q: adding VLAN 0 to HW filter on device bond0 [ 279.220972][ T6563] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 279.264896][ T6563] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 279.267230][ T6574] 8021q: adding VLAN 0 to HW filter on device team0 [ 279.267988][ T6563] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 279.379493][ T6563] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 279.398542][ T6563] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 279.419704][ T6563] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 279.464857][ T6563] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 279.495157][ T6563] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 279.536769][ T1510] bridge0: port 1(bridge_slave_0) entered blocking state [ 279.536973][ T1510] bridge0: port 1(bridge_slave_0) entered forwarding state [ 279.586619][ T1510] bridge0: port 2(bridge_slave_1) entered blocking state [ 279.588821][ T1510] bridge0: port 2(bridge_slave_1) entered forwarding state [ 279.907447][ T6570] 8021q: adding VLAN 0 to HW filter on device bond0 [ 279.997483][ T6563] 8021q: adding VLAN 0 to HW filter on device bond0 [ 280.008612][ T6570] 8021q: adding VLAN 0 to HW filter on device team0 [ 280.067196][ T1436] bridge0: port 1(bridge_slave_0) entered blocking state [ 280.067398][ T1436] bridge0: port 1(bridge_slave_0) entered forwarding state [ 280.071153][ T5272] 8021q: adding VLAN 0 to HW filter on device eth4 [ 280.115625][ T1436] bridge0: port 2(bridge_slave_1) entered blocking state [ 280.115825][ T1436] bridge0: port 2(bridge_slave_1) entered forwarding state [ 280.123764][ T6563] 8021q: adding VLAN 0 to HW filter on device team0 [ 280.218102][ T1510] bridge0: port 1(bridge_slave_0) entered blocking state [ 280.218297][ T1510] bridge0: port 1(bridge_slave_0) entered forwarding state [ 280.260732][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 280.260836][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 280.822437][ T6574] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 281.540126][ T6574] veth0_vlan: entered promiscuous mode [ 281.564744][ T6574] veth1_vlan: entered promiscuous mode [ 281.581403][ T6563] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 281.586089][ T6570] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 281.658881][ T6574] veth0_macvtap: entered promiscuous mode [ 281.664426][ T6574] veth1_macvtap: entered promiscuous mode [ 281.706368][ T6574] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 281.718018][ T6574] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 281.749074][ T1510] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 281.749339][ T1510] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 281.749376][ T1510] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 281.749408][ T1510] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 282.532557][ T1510] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 282.532576][ T1510] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 282.642918][ T3699] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 282.642937][ T3699] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 282.701612][ T6570] veth0_vlan: entered promiscuous mode [ 282.705884][ T6563] veth0_vlan: entered promiscuous mode [ 282.765796][ T6570] veth1_vlan: entered promiscuous mode [ 282.771440][ T6563] veth1_vlan: entered promiscuous mode [ 282.861258][ T6563] veth0_macvtap: entered promiscuous mode [ 282.864275][ T6570] veth0_macvtap: entered promiscuous mode [ 282.893795][ T6563] veth1_macvtap: entered promiscuous mode [ 282.902809][ T6570] veth1_macvtap: entered promiscuous mode [ 283.148049][ T6563] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 283.160555][ T6570] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 284.868511][ T6816] workqueue: Failed to create a rescuer kthread for wq "ceph-completion": -EINTR [ 285.141769][ T6563] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 285.149039][ T6570] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 285.193228][ T57] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 285.194817][ T57] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 285.199328][ T57] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 285.204058][ T57] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 285.208188][ T57] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 285.211176][ T57] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 285.251450][ T57] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 285.254034][ T57] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 288.967233][ T43] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 288.967254][ T43] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 290.291139][ T66] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 290.291174][ T66] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 290.612666][ T1415] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 290.612685][ T1415] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 290.810114][ T1415] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 290.810134][ T1415] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 291.265386][ T6846] netlink: 8 bytes leftover after parsing attributes in process `syz.2.175'. [ 291.265428][ T6846] netlink: 8 bytes leftover after parsing attributes in process `syz.2.175'. [ 291.630832][ T31] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 291.657840][ T6848] netlink: 20 bytes leftover after parsing attributes in process `syz.2.175'. [ 292.738916][ T31] usb 7-1: Using ep0 maxpacket: 16 [ 292.751067][ T31] usb 7-1: New USB device found, idVendor=064b, idProduct=7825, bcdDevice=62.b8 [ 292.751095][ T31] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 292.751113][ T31] usb 7-1: Product: syz [ 292.751127][ T31] usb 7-1: Manufacturer: syz [ 292.751140][ T31] usb 7-1: SerialNumber: syz [ 292.866424][ T103] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 292.870462][ T103] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 292.872985][ T103] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 292.877521][ T103] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 293.185529][ T6849] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 293.188826][ T6849] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 293.523418][ T6869] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 294.470785][ T6869] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 294.511825][ T6869] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 294.548558][ T6869] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 294.628540][ T6869] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 294.629030][ T6869] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 294.653154][ T6869] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 294.653752][ T6869] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 295.096270][ T6881] input: syz0 as /devices/virtual/input/input7 [ 295.938280][ T6885] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 296.015915][ T6886] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 299.401749][ T31] upd78f0730 7-1:8.0: upd78f0730 converter detected [ 299.555419][ T6914] Bluetooth: MGMT ver 1.23 [ 303.232105][ T6918] netlink: 4 bytes leftover after parsing attributes in process `syz.3.189'. [ 304.533032][ T31] usb 7-1: upd78f0730 converter now attached to ttyUSB0 [ 304.596647][ T31] usb 7-1: USB disconnect, device number 2 [ 304.822213][ T31] upd78f0730 ttyUSB0: upd78f0730 converter now disconnected from ttyUSB0 [ 304.823156][ T31] upd78f0730 7-1:8.0: device disconnected [ 305.181789][ T6935] CUSE: info not properly terminated [ 310.035961][ T6963] faux_driver vgem: [drm] Unknown color mode 135165; guessing buffer size. [ 310.832422][ T6974] netlink: 4 bytes leftover after parsing attributes in process `syz.2.200'. [ 310.859747][ T6974] netlink: 16 bytes leftover after parsing attributes in process `syz.2.200'. [ 315.544157][ T7017] lo speed is unknown, defaulting to 1000 [ 315.544251][ T7017] lo speed is unknown, defaulting to 1000 [ 316.720765][ T7017] lo speed is unknown, defaulting to 1000 [ 316.760450][ T7017] smbdirect: ib_dev[syz0]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 316.760473][ T7017] smbdirect: ib_dev[syz0]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 316.760494][ T7017] smbdirect: ib_dev[syz0]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 316.763598][ T7017] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 316.769837][ T7017] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 316.855777][ T7017] lo speed is unknown, defaulting to 1000 [ 316.858248][ T7017] lo speed is unknown, defaulting to 1000 [ 316.861567][ T7017] lo speed is unknown, defaulting to 1000 [ 316.863450][ T7017] lo speed is unknown, defaulting to 1000 [ 316.864854][ T7017] lo speed is unknown, defaulting to 1000 [ 316.866266][ T7017] lo speed is unknown, defaulting to 1000 [ 316.867678][ T7017] lo speed is unknown, defaulting to 1000 [ 317.833291][ T7023] mac80211_hwsim hwsim5 wlan1: entered promiscuous mode [ 318.110100][ T7027] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 322.269616][ T7051] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 324.444544][ T37] kauditd_printk_skb: 112 callbacks suppressed [ 324.444560][ T37] audit: type=1326 audit(1779896285.551:125): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7042 comm="syz.2.213" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faeb0fece59 code=0x7ffc0000 [ 324.444597][ T37] audit: type=1326 audit(1779896285.551:126): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7042 comm="syz.2.213" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faeb0fece59 code=0x7ffc0000 [ 324.444630][ T37] audit: type=1326 audit(1779896285.569:127): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7042 comm="syz.2.213" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faeb0fece59 code=0x7ffc0000 [ 324.444659][ T37] audit: type=1326 audit(1779896285.569:128): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7042 comm="syz.2.213" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faeb0fece59 code=0x7ffc0000 [ 324.444689][ T37] audit: type=1326 audit(1779896285.578:129): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7042 comm="syz.2.213" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7faeb0fece59 code=0x7ffc0000 [ 324.444735][ T37] audit: type=1326 audit(1779896285.578:130): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7042 comm="syz.2.213" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faeb0fece59 code=0x7ffc0000 [ 324.444764][ T37] audit: type=1326 audit(1779896285.578:131): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7042 comm="syz.2.213" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faeb0fece59 code=0x7ffc0000 [ 324.444792][ T37] audit: type=1326 audit(1779896285.588:132): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7042 comm="syz.2.213" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7faeb0fece59 code=0x7ffc0000 [ 324.444821][ T37] audit: type=1326 audit(1779896285.588:133): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7042 comm="syz.2.213" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faeb0fece59 code=0x7ffc0000 [ 324.444849][ T37] audit: type=1326 audit(1779896285.588:134): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7042 comm="syz.2.213" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faeb0fece59 code=0x7ffc0000 [ 325.173866][ T5619] Bluetooth: hci4: command 0x0405 tx timeout [ 326.353259][ T5619] Bluetooth: hci2: unexpected cc 0x0c2d length: 65 > 4 [ 326.353307][ T5619] Bluetooth: hci2: unexpected event for opcode 0x0c2d [ 329.037534][ T7071] mmap: syz.2.217 (7071) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 331.400574][ T7093] netlink: 'syz.5.221': attribute type 2 has an invalid length. [ 331.400596][ T7093] netlink: 'syz.5.221': attribute type 1 has an invalid length. [ 335.778911][ T7121] workqueue: Failed to create a rescuer kthread for wq "ceph-completion": -EINTR [ 339.286734][ T1336] ieee802154 phy0 wpan0: encryption failed: -22 [ 339.286800][ T1336] ieee802154 phy1 wpan1: encryption failed: -22 [ 339.728167][ T7152] netlink: 8 bytes leftover after parsing attributes in process `syz.3.233'. [ 340.540965][ T7151] Process accounting resumed [ 347.186059][ T7206] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 349.398410][ T7218] Can't find a SQUASHFS superblock on nullb0 [ 358.241239][ T7240] vlan0: entered promiscuous mode [ 362.005426][ T7245] overlayfs: missing 'lowerdir' [ 371.329442][ T5002] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 372.003599][ T5002] usb 7-1: config 1 has an invalid descriptor of length 129, skipping remainder of the config [ 372.003625][ T5002] usb 7-1: config 1 has 0 interfaces, different from the descriptor's value: 3 [ 372.005822][ T5002] usb 7-1: New USB device found, idVendor=2b73, idProduct=0013, bcdDevice= 0.40 [ 372.005846][ T5002] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 372.005856][ T5002] usb 7-1: Product: syz [ 372.005863][ T5002] usb 7-1: Manufacturer: syz [ 372.005870][ T5002] usb 7-1: SerialNumber: syz [ 372.153298][ T7285] bridge0: port 2(bridge_slave_1) entered disabled state [ 372.187656][ T7285] bridge0: port 1(bridge_slave_0) entered disabled state [ 372.239780][ T7285] bridge0: entered allmulticast mode [ 372.429012][ T7283] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 372.429664][ T7283] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 373.623732][ T5002] usb 7-1: USB disconnect, device number 3 [ 377.335040][ T7322] netlink: 4 bytes leftover after parsing attributes in process `syz.3.267'. [ 377.335190][ T7322] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 378.102644][ T7322] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 379.188920][ T7345] IPv6: Can't replace route, no match found [ 380.434580][ T4925] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci5/hci5:201' [ 380.434712][ T4925] CPU: 0 UID: 0 PID: 4925 Comm: kworker/u9:1 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 380.434747][ T4925] Tainted: [L]=SOFTLOCKUP [ 380.434755][ T4925] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 380.434769][ T4925] Workqueue: hci5 hci_rx_work [ 380.434987][ T4925] Call Trace: [ 380.435053][ [ 380.435053][ T4925] [ 380.435094][ T4925] dump_stack_lvl+0xe8/0x150 [ 380.435251][ T4925] sysfs_create_dir_ns+0x271/0x2a0 [ 380.435372][ T4925] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 380.435522][ T4925] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 380.435557][ T4925] ? rt_spin_unlock+0x160/0x200 [ 380.435585][ T4925] kobject_add_internal+0x631/0xd10 [ 380.435645][ T4925] kobject_add+0x163/0x240 [ 380.435672][ T4925] ? __pfx_kobject_add+0x10/0x10 [ 380.435700][ T4925] ? get_device_parent+0x370/0x3a0 [ 380.435784][ T4925] device_add+0x408/0xbb0 [ 380.435857][ T4925] hci_conn_add_sysfs+0xd5/0x210 [ 380.435914][ T4925] le_conn_complete_evt+0x10e6/0x16b0 [ 380.435960][ T4925] ? lockdep_hardirqs_on+0x7a/0x110 [ 380.436026][ T4925] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 380.436064][ T4925] hci_le_conn_complete_evt+0x187/0x470 [ 380.436093][ T4925] hci_event_packet+0x659/0xef0 [ 380.436146][ T4925] ? irqentry_exit+0x218/0x8b0 [ 380.436180][ T4925] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 380.436211][ T4925] ? __pfx_hci_event_packet+0x10/0x10 [ 380.436248][ T4925] ? hci_rx_work+0x3e1/0x1040 [ 380.436282][ T4925] hci_rx_work+0x3ee/0x1040 [ 380.436317][ T4925] ? process_scheduled_works+0xa70/0x1860 [ 380.436361][ T4925] process_scheduled_works+0xb5d/0x1860 [ 380.436415][ T4925] ? __pfx_process_scheduled_works+0x10/0x10 [ 380.436444][ T4925] ? assign_work+0x3d5/0x5e0 [ 380.436471][ T4925] worker_thread+0xa53/0xfc0 [ 380.436522][ T4925] kthread+0x388/0x470 [ 380.436550][ T4925] ? __pfx_worker_thread+0x10/0x10 [ 380.436571][ T4925] ? __pfx_kthread+0x10/0x10 [ 380.436599][ T4925] ret_from_fork+0x514/0xb70 [ 380.436634][ T4925] ? __pfx_ret_from_fork+0x10/0x10 [ 380.436656][ T4925] ? __switch_to+0xc79/0x1410 [ 380.436690][ T4925] ? __pfx_kthread+0x10/0x10 [ 380.436718][ T4925] ret_from_fork_asm+0x1a/0x30 [ 380.436760][ T4925] [ 380.437233][ T4925] kobject: kobject_add_internal failed for hci5:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 380.437544][ T4925] Bluetooth: hci5: failed to register connection device [ 380.925585][ T4925] ================================================================== [ 380.925680][ T4925] BUG: KASAN: slab-use-after-free in l2cap_connect_cfm+0x902/0x1560 [ 380.925834][ T4925] Read of size 8 at addr ffff88803c1b9500 by task kworker/u9:1/4925 [ 380.925882][ T4925] [ 380.925929][ T4925] CPU: 0 UID: 0 PID: 4925 Comm: kworker/u9:1 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 380.925984][ T4925] Tainted: [L]=SOFTLOCKUP [ 380.925991][ T4925] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 380.926006][ T4925] Workqueue: hci5 hci_rx_work [ 380.926035][ T4925] Call Trace: [ 380.926043][ T4925] [ 380.926051][ T4925] dump_stack_lvl+0xe8/0x150 [ 380.926076][ T4925] print_address_description+0x55/0x1e0 [ 380.926106][ T4925] ? l2cap_connect_cfm+0x902/0x1560 [ 380.926127][ T4925] print_report+0x58/0x70 [ 380.926147][ T4925] kasan_report+0x117/0x150 [ 380.926220][ T4925] ? l2cap_connect_cfm+0x902/0x1560 [ 380.926247][ T4925] l2cap_connect_cfm+0x902/0x1560 [ 380.926273][ T4925] ? __pfx_l2cap_connect_cfm+0x10/0x10 [ 380.926296][ T4925] ? __pfx_l2cap_connect_cfm+0x10/0x10 [ 380.926316][ T4925] ? __pfx_l2cap_connect_cfm+0x10/0x10 [ 380.926337][ T4925] ? hci_connect_cfm+0x86/0x140 [ 380.926356][ T4925] ? __pfx_l2cap_connect_cfm+0x10/0x10 [ 380.926379][ T4925] hci_connect_cfm+0x95/0x140 [ 380.926398][ T4925] le_conn_complete_evt+0x1134/0x16b0 [ 380.926418][ T4925] ? lockdep_hardirqs_on+0x7a/0x110 [ 380.926449][ T4925] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 380.926476][ T4925] hci_le_conn_complete_evt+0x187/0x470 [ 380.926499][ T4925] hci_event_packet+0x659/0xef0 [ 380.926525][ T4925] ? irqentry_exit+0x218/0x8b0 [ 380.926555][ T4925] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 380.926583][ T4925] ? __pfx_hci_event_packet+0x10/0x10 [ 380.926613][ T4925] ? hci_rx_work+0x3e1/0x1040 [ 380.926638][ T4925] hci_rx_work+0x3ee/0x1040 [ 380.926667][ T4925] ? process_scheduled_works+0xa70/0x1860 [ 380.926689][ T4925] process_scheduled_works+0xb5d/0x1860 [ 380.926723][ T4925] ? __pfx_process_scheduled_works+0x10/0x10 [ 380.926746][ T4925] ? assign_work+0x3d5/0x5e0 [ 380.926767][ T4925] worker_thread+0xa53/0xfc0 [ 380.926809][ T4925] kthread+0x388/0x470 [ 380.926835][ T4925] ? __pfx_worker_thread+0x10/0x10 [ 380.926854][ T4925] ? __pfx_kthread+0x10/0x10 [ 380.926880][ T4925] ret_from_fork+0x514/0xb70 [ 380.926903][ T4925] ? __pfx_ret_from_fork+0x10/0x10 [ 380.926924][ T4925] ? __switch_to+0xc79/0x1410 [ 380.926953][ T4925] ? __pfx_kthread+0x10/0x10 [ 380.926979][ T4925] ret_from_fork_asm+0x1a/0x30 [ 380.927011][ T4925] [ 380.927018][ T4925] [ 380.927023][ T4925] Allocated by task 4925: [ 380.927071][ T4925] kasan_save_track+0x3e/0x80 [ 380.927094][ T4925] __kasan_kmalloc+0x93/0xb0 [ 380.927113][ T4925] __kmalloc_cache_noprof+0x3a6/0x690 [ 380.927184][ T4925] l2cap_chan_create+0x51/0x7a0 [ 380.927207][ T4925] l2cap_sock_new_connection_cb+0x191/0x2f0 [ 380.927249][ T4925] l2cap_connect_cfm+0x368/0x1560 [ 380.927269][ T4925] hci_connect_cfm+0x95/0x140 [ 380.927284][ T4925] le_conn_complete_evt+0x1134/0x16b0 [ 380.927302][ T4925] hci_le_conn_complete_evt+0x187/0x470 [ 380.927317][ T4925] hci_event_packet+0x659/0xef0 [ 380.927341][ T4925] hci_rx_work+0x3ee/0x1040 [ 380.927363][ T4925] process_scheduled_works+0xb5d/0x1860 [ 380.927381][ T4925] worker_thread+0xa53/0xfc0 [ 380.927397][ T4925] kthread+0x388/0x470 [ 380.927419][ T4925] ret_from_fork+0x514/0xb70 [ 380.927437][ T4925] ret_from_fork_asm+0x1a/0x30 [ 380.927456][ T4925] [ 380.927460][ T4925] Freed by task 7355: [ 380.927468][ T4925] kasan_save_track+0x3e/0x80 [ 380.927483][ T4925] kasan_save_free_info+0x46/0x50 [ 380.927508][ T4925] __kasan_slab_free+0x5c/0x80 [ 380.927527][ T4925] kfree+0x1c5/0x6c0 [ 380.927544][ T4925] l2cap_sock_destruct+0x97/0x2c0 [ 380.927565][ T4925] __sk_destruct+0x8d/0x9d0 [ 380.927645][ T4925] l2cap_sock_cleanup_listen+0x1d9/0x580 [ 380.927667][ T4925] l2cap_sock_release+0x6e/0x270 [ 380.927688][ T4925] sock_close+0xc3/0x240 [ 380.927704][ T4925] __fput+0x461/0xa70 [ 380.927757][ T4925] task_work_run+0x1d9/0x270 [ 380.927781][ T4925] get_signal+0x11eb/0x1330 [ 380.927806][ T4925] arch_do_signal_or_restart+0xbc/0x840 [ 380.927834][ T4925] exit_to_user_mode_loop+0xa9/0x680 [ 380.927923][ T4925] do_syscall_64+0x353/0x580 [ 380.927978][ T4925] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 380.928011][ T4925] [ 380.928017][ T4925] The buggy address belongs to the object at ffff88803c1b9000 [ 380.928017][ T4925] which belongs to the cache kmalloc-2k of size 2048 [ 380.928040][ T4925] The buggy address is located 1280 bytes inside of [ 380.928040][ T4925] freed 2048-byte region [ffff88803c1b9000, ffff88803c1b9800) [ 380.928061][ T4925] [ 380.928067][ T4925] The buggy address belongs to the physical page: [ 380.928087][ T4925] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff88803c1bf000 pfn:0x3c1b8 [ 380.928107][ T4925] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 380.928124][ T4925] flags: 0x80000000000240(workingset|head|node=0|zone=1) [ 380.928146][ T4925] page_type: f5(slab) [ 380.928164][ T4925] raw: 0080000000000240 ffff88813fe0a000 ffffea000177ac10 ffffea000075c210 [ 380.928182][ T4925] raw: ffff88803c1bf000 0000000800080007 00000000f5000000 0000000000000000 [ 380.928200][ T4925] head: 0080000000000240 ffff88813fe0a000 ffffea000177ac10 ffffea000075c210 [ 380.928217][ T4925] head: ffff88803c1bf000 0000000800080007 00000000f5000000 0000000000000000 [ 380.928235][ T4925] head: 0080000000000003 fffffffffffffe01 00000000ffffffff 00000000ffffffff [ 380.928251][ T4925] head: 0000000000000000 0000000000000000 00000000ffffffff 0000000000000008 [ 380.928261][ T4925] page dumped because: kasan: bad access detected [ 380.928275][ T4925] page_owner tracks the page as allocated [ 380.928282][ T4925] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd2820(GFP_ATOMIC|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 5002, tgid 5002 (kworker/1:3), ts 86785985542, free_ts 86775389602 [ 380.928315][ T4925] post_alloc_hook+0x22d/0x280 [ 380.928398][ T4925] get_page_from_freelist+0x28b2/0x2930 [ 380.928422][ T4925] __alloc_frozen_pages_noprof+0x18d/0x380 [ 380.928445][ T4925] allocate_slab+0x77/0x660 [ 380.928471][ T4925] refill_objects+0x33c/0x3d0 [ 380.928495][ T4925] __pcs_replace_empty_main+0x373/0x720 [ 380.928523][ T4925] __kmalloc_noprof+0x530/0x7b0 [ 380.928542][ T4925] ___neigh_create+0x722/0x2350 [ 380.928614][ T4925] ip6_finish_output2+0x729/0x1430 [ 380.928678][ T4925] ip6_output+0x340/0x550 [ 380.928727][ T4925] NF_HOOK+0x177/0x4f0 [ 380.928804][ T4925] mld_sendpack+0x8b4/0xe40 [ 380.928830][ T4925] mld_ifc_work+0x835/0xe70 [ 380.928855][ T4925] process_scheduled_works+0xb5d/0x1860 [ 380.928874][ T4925] worker_thread+0xa53/0xfc0 [ 380.928892][ T4925] kthread+0x388/0x470 [ 380.928914][ T4925] page last free pid 5611 tgid 5611 stack trace: [ 380.928926][ T4925] __free_frozen_pages+0xfe5/0x10d0 [ 380.928947][ T4925] __slab_free+0x252/0x2a0 [ 380.928966][ T4925] qlist_free_all+0x99/0x100 [ 380.929060][ T4925] kasan_quarantine_reduce+0x148/0x160 [ 380.929078][ T4925] __kasan_slab_alloc+0x22/0x80 [ 380.929097][ T4925] kmem_cache_alloc_noprof+0x33b/0x680 [ 380.929117][ T4925] fib_table_insert+0x4bb/0x1b50 [ 380.929176][ T4925] fib_magic+0x434/0x510 [ 380.929228][ T4925] fib_add_ifaddr+0x38d/0x5f0 [ 380.929251][ T4925] fib_netdev_event+0x382/0x490 [ 380.929276][ T4925] notifier_call_chain+0x1ad/0x3d0 [ 380.929297][ T4925] __dev_notify_flags+0x1a9/0x310 [ 380.929346][ T4925] netif_change_flags+0xe8/0x1a0 [ 380.929369][ T4925] do_setlink+0xfa5/0x45a0 [ 380.929419][ T4925] rtnl_newlink+0x15ad/0x1bb0 [ 380.929440][ T4925] rtnetlink_rcv_msg+0x7d5/0xbe0 [ 380.929463][ T4925] [ 380.929468][ T4925] Memory state around the buggy address: [ 380.929478][ T4925] ffff88803c1b9400: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 380.929492][ T4925] ffff88803c1b9480: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 380.929505][ T4925] >ffff88803c1b9500: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 380.929515][ T4925] ^ [ 380.929525][ T4925] ffff88803c1b9580: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 380.929538][ T4925] ffff88803c1b9600: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 380.929548][ T4925] ================================================================== [ 380.935509][ T4925] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 380.935531][ T4925] CPU: 0 UID: 0 PID: 4925 Comm: kworker/u9:1 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 380.935561][ T4925] Tainted: [L]=SOFTLOCKUP [ 380.935568][ T4925] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 380.935583][ T4925] Workqueue: hci5 hci_rx_work [ 380.935615][ T4925] Call Trace: [ 380.935623][ T4925] [ 380.935631][ T4925] vpanic+0x56c/0xa60 [ 380.935657][ T4925] ? rcu_is_watching+0x15/0xb0 [ 380.935773][ T4925] ? __pfx_vpanic+0x10/0x10 [ 380.935808][ T4925] panic+0xc5/0xd0 [ 380.935831][ T4925] ? __pfx_panic+0x10/0x10 [ 380.935855][ T4925] ? preempt_schedule_thunk+0x16/0x30 [ 380.935886][ T4925] ? l2cap_connect_cfm+0x902/0x1560 [ 380.935908][ T4925] ? preempt_schedule_thunk+0x16/0x30 [ 380.935937][ T4925] ? l2cap_connect_cfm+0x902/0x1560 [ 380.935958][ T4925] check_panic_on_warn+0x89/0xb0 [ 380.935991][ T4925] ? l2cap_connect_cfm+0x902/0x1560 [ 380.936013][ T4925] end_report+0x73/0x170 [ 380.936036][ T4925] ? l2cap_connect_cfm+0x902/0x1560 [ 380.936058][ T4925] kasan_report+0x128/0x150 [ 380.936082][ T4925] ? l2cap_connect_cfm+0x902/0x1560 [ 380.936107][ T4925] l2cap_connect_cfm+0x902/0x1560 [ 380.936134][ T4925] ? __pfx_l2cap_connect_cfm+0x10/0x10 [ 380.936155][ T4925] ? __pfx_l2cap_connect_cfm+0x10/0x10 [ 380.936177][ T4925] ? __pfx_l2cap_connect_cfm+0x10/0x10 [ 380.936199][ T4925] ? hci_connect_cfm+0x86/0x140 [ 380.936218][ T4925] ? __pfx_l2cap_connect_cfm+0x10/0x10 [ 380.936240][ T4925] hci_connect_cfm+0x95/0x140 [ 380.936259][ T4925] le_conn_complete_evt+0x1134/0x16b0 [ 380.936280][ T4925] ? lockdep_hardirqs_on+0x7a/0x110 [ 380.936311][ T4925] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 380.936338][ T4925] hci_le_conn_complete_evt+0x187/0x470 [ 380.936361][ T4925] hci_event_packet+0x659/0xef0 [ 380.936388][ T4925] ? irqentry_exit+0x218/0x8b0 [ 380.936417][ T4925] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 380.936446][ T4925] ? __pfx_hci_event_packet+0x10/0x10 [ 380.936476][ T4925] ? hci_rx_work+0x3e1/0x1040 [ 380.936504][ T4925] hci_rx_work+0x3ee/0x1040 [ 380.936532][ T4925] ? process_scheduled_works+0xa70/0x1860 [ 380.936553][ T4925] process_scheduled_works+0xb5d/0x1860 [ 380.936587][ T4925] ? __pfx_process_scheduled_works+0x10/0x10 [ 380.936610][ T4925] ? assign_work+0x3d5/0x5e0 [ 380.936631][ T4925] worker_thread+0xa53/0xfc0 [ 380.936664][ T4925] kthread+0x388/0x470 [ 380.936689][ T4925] ? __pfx_worker_thread+0x10/0x10 [ 380.936709][ T4925] ? __pfx_kthread+0x10/0x10 [ 380.936734][ T4925] ret_from_fork+0x514/0xb70 [ 380.936757][ T4925] ? __pfx_ret_from_fork+0x10/0x10 [ 380.936778][ T4925] ? __switch_to+0xc79/0x1410 [ 380.936814][ T4925] ? __pfx_kthread+0x10/0x10 [ 380.936840][ T4925] ret_from_fork_asm+0x1a/0x30 [ 380.936871][ T4925] [ 380.937139][ T4925] Kernel Offset: disabled